python-frozenlist: bump to version 1.8

And disable custom build-backend in order to use setuptools.

Signed-off-by: Jean Thomas <redacted>

python-expandvars: add new package

Necessary to build python-frozenlist

Signed-off-by: Jean Thomas <redacted>

coredns: update to 1.14.2

Security fixes for CVE-2026-26017, CVE-2026-26018.

Release notes: https://github.com/coredns/coredns/releases/tag/v1.14.2

Package changes:
- Add optional proxyproto plugin config
- Fix configure-plugin macro to preserve upstream plugin ordering
- Reorganize Config.in with section headers and help texts

Signed-off-by: Vladimir Ermakov <redacted>

python/openpyxl: assign PKG_CPE_ID

cpe:/a:python:openpyxl is the correct CPE ID for openpyxl:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:openpyxl

Signed-off-by: Fabrice Fontaine <redacted>

python/python-eventlet: assign PKG_CPE_ID

cpe:/a:eventlet:eventlet is the correct CPE ID for python-eventlet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:eventlet:eventlet

Signed-off-by: Fabrice Fontaine <redacted>

telegraf: add disk plugin to small variant

Added inputs.disk to TELEGRAF_SMALL_PLUGINS

Signed-off-by: Niklas Thorild <redacted>

icu: bump to 78.3

Unicode® ICU 78.3 is a maintenance update on top of ICU 78 and 78.2, mostly for the CLDR 48.2 bug fixes. In addition, it fixes a C++ code point iterator bug, and updates to timezone data 2026a.

Signed-off-by: Hirokazu MORIKAWA <redacted>

multimedia/icecast: fix PKG_CPE_ID

cpe:/a:xiph:icecast is the correct CPE ID for icecast:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:icecast

Fixes: a36f265f767da363b60ef09a3b72bb84d9d3cf33 (icecast: Update to 2.4.4)
Signed-off-by: Fabrice Fontaine <redacted>

mail/bogofilter: fix PKG_CPE_ID

cpe:/a:bogofilter_project:bogofilter is the correct CPE ID for bogofilter:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bogofilter_project:bogofilter

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

sound/owntone: fix typo in PKG_CPE_ID

cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server

Fixes: e8360bc4e1205e9b931623f9a9a1044056af85cd (sound/owntone: assign PKG_CPE_ID)
Signed-off-by: Fabrice Fontaine <redacted>

python-build: bump to 1.4.0

Changelog since 1.3.0:
- v1.3.0: Add --config-json for JSON-based configuration; drop Python 3.8
  support; fix ModuleNotFoundError when pip isn't installed
- v1.4.0: Add --quiet flag for silent operation; add --metadata option to
  dump PEP 517 metadata; add support for UV environment variable;
  improve Python 3.14 compatibility

Full changelog:
https://github.com/pypa/build/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-setuptools: bump to 82.0.1

Changelog since 80.9.0:
- v81.0.0: Remove --dry-run parameter from setup.py
- v82.0.0: Remove pkg_resources module (deprecated since 67.5.0);
  users should migrate to importlib.resources / importlib.metadata
- v82.0.1: Fix loading of launcher manifest.xml file; documentation
  improvements for installing source distributions

Since pkg_resources has been removed in v82.0.0, drop the
python3-pkg-resources sub-package and remove it as a dependency
from python3-setuptools.

Full changelog:
https://github.com/pypa/setuptools/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-hatchling: bump to 1.29.0

Changelog since 1.27.0:
- v1.27.0: Update default version of core metadata to 2.4
- v1.28.0: Drop Python 3.9 support; add sbom-files option and
  sbom_files build data to wheel build target for SBOM file inclusion
- v1.29.0: Fix Source Date Epoch handling for dates before 1980

Full changelog:
https://github.com/pypa/hatch/releases

Signed-off-by: Alexandru Ardelean <redacted>

python-click: bump to 8.3.1

Changelog since 8.1.7:
- v8.1.8: Fix type hints for open_file(); fix multiline error messages
  for invalid Path; restore empty string defaults in help text
- v8.2.0: Drop Python 3.7-3.9 support; switch to pyproject.toml/flit_core;
  redesign shell completion system (Bash 4.4+, Zsh, Fish);
  add ProgressBar(hidden) parameter
- v8.2.1: Fix flag value handling for flag options with explicit types;
  fix shell completion for nested groups
- v8.2.2: Fix default/flag_value/type parameter reconciliation; fix Zsh
  completion for items containing colons
- v8.3.0: Rework flag_value and default parameters; enable default on
  Argument with nargs=-1; enhance Fish shell autocompletion
- v8.3.1: Fix pager argument handling; fix prompt rendering with empty
  prompt_suffix; fix parameter conversion timing issues

Add test.sh.

Full changelog:
https://github.com/pallets/click/releases

Signed-off-by: Alexandru Ardelean <redacted>

python3: bump to 3.14.3

Major version bump from 3.13.9 to 3.14.3.

Highlights of Python 3.14:
- PEP 649: Deferred evaluation of annotations
- PEP 750: Template string literals (t-strings)
- PEP 758: Exception syntax simplification (no brackets needed)
- PEP 765: Restrict control flow in finally blocks
- PEP 779: Official free-threaded mode support
- PEP 784: Zstandard compression module
- UUID versions 6-8 support with faster generation
- Formally verified HMAC implementation
- Experimental JIT compiler support
- Tail-call interpreter option for performance

Full release notes:
https://www.python.org/downloads/release/python-3143/

Dropped 100-test_hashlib-better-handle-support-for-SHA3.patch (upstreamed)
Adapted 027-fix-host-build-libressl.patch (for
X509_VERIFY_PARAM_get_hostflags() )

Refreshed other patches.

Signed-off-by: Alexandru Ardelean <redacted>

ddns-scripts: switch to procd handling

The 'ddns-scripts' packages still uses not the procd service handling.
This commit changes this.

This change also resolves the issue where, if a UCI configuration is
already present, the process is blocked during installation via APK and
does not complete.

Signed-off-by: Florian Eckert <redacted>
Tested-by: Luiz Angelo Daros de Luca <redacted>

adblock-fast: update to 1.2.2-r12

Config:
* update pause_timeout default value to 60
* add config option rpcd_token

Init script:
* add validation for rpcd_token

Ucode script:
* fix: always reload config options on RPCD calls to prevent stale values
* fix: shell_quote curl params
* fix: do not reload is_tty on each call

Signed-off-by: Stan Grishin <redacted>

telegraf: update to 1.38.1
- Update Telegraf to v1.38.1

Signed-off-by: Niklas Thorild <redacted>

python/python-wheel: assign PKG_CPE_ID

cpe:/a:wheel_project:wheel is the correct CPE ID for python-wheel:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wheel_project:wheel

Signed-off-by: Fabrice Fontaine <redacted>

multimedia/go2rtc: assign PKG_CPE_ID

cpe:/a:alexxit:go2rtc is the correct CPE ID for go2rtc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:alexxit:go2rtc

Signed-off-by: Fabrice Fontaine <redacted>

lang/chicken-scheme: assign PKG_CPE_ID

cpe:/a:call-cc:chicken is the correct CPE ID for chicken-scheme:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:call-cc:chicken

Signed-off-by: Fabrice Fontaine <redacted>

net/zerotier: assign PKG_CPE_ID

cpe:/a:zerotier:zerotierone is the correct CPE ID for zerotier:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:zerotier:zerotierone

Signed-off-by: Fabrice Fontaine <redacted>

libs/jose: assign PKG_CPE_ID

cpe:/a:latchset:jose is the correct CPE ID for jose:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:latchset:jose

Signed-off-by: Fabrice Fontaine <redacted>

net/jool: assign PKG_CPE_ID

cpe:/a:jool:jool is the correct CPE ID for jool:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:jool:jool

Signed-off-by: Fabrice Fontaine <redacted>

sound/fluidsynth: assign PKG_CPE_ID

cpe:/a:fluidsynth:fluidsynth is the correct CPE ID for fluidsynth:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fluidsynth:fluidsynth

Signed-off-by: Fabrice Fontaine <redacted>

admin/fluent-bit: assign PKG_CPE_ID

cpe:/a:treasuredata:fluent_bit is the correct CPE ID for fluent_bit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:treasuredata:fluent_bit

Signed-off-by: Fabrice Fontaine <redacted>

net/coredns: assign PKG_CPE_ID

cpe:/a:coredns.io:coredns is the correct CPE ID for coredns:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:coredns.io:coredns

Signed-off-by: Fabrice Fontaine <redacted>

net/croc: assign PKG_CPE_ID

cpe:/a:schollz:croc is the correct CPE ID for croc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:schollz:croc

Signed-off-by: Fabrice Fontaine <redacted>

libs/libesmtp: assign PKG_CPE_ID

cpe:/a:libesmtp_project:libesmtp is the correct CPE ID for libesmtp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libesmtp_project:libesmtp

Signed-off-by: Fabrice Fontaine <redacted>

libs/libndpi: assign PKG_CPE_ID

cpe:/a:ntop:ndpi is the correct CPE ID for libndpi:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ntop:ndpi

Signed-off-by: Fabrice Fontaine <redacted>

net/openlist: assign PKG_CPE_ID

cpe:/a:oplist:openlist is the correct CPE ID for openlist:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oplist:openlist

Signed-off-by: Fabrice Fontaine <redacted>

hwdata: bump to 0.405

Update PCI and USB vendor/device IDs database.

Full release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.405

Add quick test.sh to CI

Signed-off-by: Alexandru Ardelean <redacted>

python-eventlet: bump to 0.40.4

Full release notes:
https://github.com/eventlet/eventlet/blob/master/NEWS

Signed-off-by: Alexandru Ardelean <redacted>

openvpn: update to 2.6.19

Update the openvpn package to the latest version in
the 2.6.x branch while development of the 2.7.x branch
become stable enough to merge.

Signed-off-by: Sander van Deijck <redacted>

ovpn-dco: update to version 0.2.20251017

Update the ovpn-dco package to the latest version

Signed-off-by: Sander van Deijck <redacted>

i2pd: bump to 2.59.0

Updating package to 2.59.0

Signed-off-by: Andrey Zotikov <redacted>

python-userpath: bump to 1.9.2

Full release notes:
https://github.com/ofek/userpath/releases/tag/v1.9.2

Add a bit more testing.

Signed-off-by: Alexandru Ardelean <redacted>

libs/libirecovery: assign PKG_CPE_ID

cpe:/a:libimobiledevice:libirecovery is the correct CPE ID for libirecovery:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libirecovery

Signed-off-by: Fabrice Fontaine <redacted>

libs/libimobiledevice: assign PKG_CPE_ID

cpe:/a:libimobiledevice:libimobiledevice is the correct CPE ID for libimobiledevice:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libimobiledevice

Signed-off-by: Fabrice Fontaine <redacted>

admin/backuppc: assign PKG_CPE_ID

cpe:/a:backuppc:backuppc is the correct CPE ID for backuppc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:backuppc:backuppc

Signed-off-by: Fabrice Fontaine <redacted>

utils/borgbackup: assign PKG_CPE_ID

cpe:/a:borgbackup:borg is the correct CPE ID for borgbackup:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:borgbackup:borg

Signed-off-by: Fabrice Fontaine <redacted>

net/kadnode: assign PKG_CPE_ID

cpe:/a:kadnode_project:kadnode is the correct CPE ID for kadnode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:kadnode_project:kadnode

Signed-off-by: Fabrice Fontaine <redacted>

libs/libedit: assign PKG_CPE_ID

cpe:/a:libedit_project:libedit is the correct CPE ID for libedit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libedit_project:libedit

Signed-off-by: Fabrice Fontaine <redacted>

utils/apparmor: assign PKG_CPE_ID

cpe:/a:apparmor:apparmor is the correct CPE ID for apparmor:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:apparmor:apparmor

Signed-off-by: Fabrice Fontaine <redacted>

net/sing-box: assign PKG_CPE_ID

cpe:/a:sagernet:sing-box is the correct CPE ID for sing-box:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sagernet:sing-box

Signed-off-by: Fabrice Fontaine <redacted>

libs/gperftools: assign PKG_CPE_ID

cpe:/a:gperftools_project:gperftools is the correct CPE ID for gperftools:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gperftools_project:gperftools

Signed-off-by: Fabrice Fontaine <redacted>

admin/netdata: fix PKG_CPE_ID

cpe:/a:netdata:netdata is the correct CPE ID for netdata:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:netdata:netdata

Fixes: cbfc396ca6ab24d7607741fd63e27bd705ca1ede (netdata: update to version 1.14.0)
Signed-off-by: Fabrice Fontaine <redacted>

lang/erlang: fix PKG_CPE_ID

cpe:/a:erlang:erlang\/otp is the correct CPE ID for erlang:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:erlang:erlang%5C/otp

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/libsoxr: drop PKG_CPE_ID

cpe:/a:sox:sox is not a correct CPE ID for libsoxr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sox:sox

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/openpgm: drop PKG_CPE_ID

cpe:/a:openpgm:openpgm is not a correct CPE ID for openpgm:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openpgm:openpgm

Fixes: 20f05f8e585e01729defe53fdbc49738c260fc5a (openpgm: Add Pragmatic General Multicast library)
Signed-off-by: Fabrice Fontaine <redacted>

net/boinc-wrapper: drop PKG_CPE_ID

cpe:/a:boinc-wrapper:boinc-wrapper is not a correct CPE ID for boinc-wrapper:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:boinc-wrapper:boinc-wrapper

Fixes: 40e144be7d4b4a7a9d3d3fd45b39878c73dee406 (boinc-wrapper: add new package)
Signed-off-by: Fabrice Fontaine <redacted>

utils/ifuse: drop PKG_CPE_ID

cpe:/a:libimobiledevice:ifuse is not a correct CPE ID for ifuse:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:ifuse

Fixes: 512afeb406126bfda22d1c4d1f5fe274fe02f357 (ifuse: add package from git)
Signed-off-by: Fabrice Fontaine <redacted>

utils/ideviceinstaller: drop PKG_CPE_ID

cpe:/a:libimobiledevice:ideviceinstaller is not a correct CPE ID for
ideviceinstaller:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:ideviceinstaller

Fixes: 84c69fed29259ba058bd6a78e4d112a17dcc91db (ideviceinstaller: add package from git)
Signed-off-by: Fabrice Fontaine <redacted>

utils/usbmuxd: drop PKG_CPE_ID

cpe:/a:libimobiledevice:usbmuxd is not a correct CPE ID for usbmuxd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:usbmuxd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

pbr: update to 1.2.2-r12

* fix: detect/support point-to-point interfaces in dynamic routing mode
* fix: avoid IPv4/IPv6 address collisions on Tor policies
* fix: do not set triggers on boot when service is disabled in config
* fix: more robust forward stop/enable

Signed-off-by: Stan Grishin <redacted>

dante: fix usaage with musl

Need to disable this function as it's unusable on musl.

Signed-off-by: Rosen Penev <redacted>

chrony: make chrony-hotplug more reliable

At startup there's a race situation where "chronyc waitsync" (and thus
chrony-hotplug) will exit right away because it can't bind to loopback.

This change tries quite hard to make chrony-hotplug wait for loopback to
come up before running chronyc.

Fixes #28434.

Signed-off-by: Florian Wagner <redacted>

adblock: release 4.5.3-1

* refine the domain validator regarding prefix handling, esp.
  relevant for ABP-syntax
* adapted the adguard feed to make use of the new prefix handling
* LuCI: various fixes & optimizations

Signed-off-by: Dirk Brenken <redacted>

net/davfs2: fix PKG_CPE_ID

cpe:/a:werner_baumann:davfs2 is the correct CPE ID for davfs2:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:werner_baumann:davfs2

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

banip: release 1.8.1-1

* the debug mode now captures internal error output in a dedicated log file,
  located by default in the banIP base directory as /tmp/ban_error.log
* replaced the non-functional recursive PID tree walk in f_rmpid with
  a correct iterative implementation
* added several IP validator improvements
* fixed a copy-paste error in f_report
* fixed a uninitialized variable in f_actual
* fixed missing token validation in banip.cgi
* various other minor improvement & fixes
* removed abandoned nixspam feed
* LuCI: various fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <redacted>

python-pyopenssl: fix PKG_CPE_ID

cpe:/a:pyopenssl:pyopenssl is the correct CPE ID for python-pyopenssl:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyopenssl:pyopenssl

Fixes: ceadbcbb64de727c3a974e552d9a723d532e4e40 (treewide: add PKG_CPE_ID for cvescanner)
Signed-off-by: Fabrice Fontaine <redacted>

utils/opendoas: assign PKG_CPE_ID

cpe:/a:opendoas_project:opendoas is the correct CPE ID for opendoas:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendoas_project:opendoas

Signed-off-by: Fabrice Fontaine <redacted>

net/openfortivpn: assign PKG_CPE_ID

cpe:/a:openfortivpn_project:openfortivpn is the correct CPE ID for openfortivpn:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openfortivpn_project:openfortivpn

Signed-off-by: Fabrice Fontaine <redacted>

fail2ban: add host build deps to fix #28520

Adds the misssing build dependencies to remove the
"Cannot import 'setuptools.build_meta'" build error with 25.12.0-rc1 to 25.12.0-rc5

Signed-off-by: dwardor <redacted>

i2csfp: update to the latest git HEAD

Enables eepromfix on modules that don't need password

Signed-off-by: Henri Osmankäämi <redacted>

nfs-kernel-server: update to 2.8.7

Changelog: https://www.kernel.org/pub/linux/utils/nfs-utils/2.8.7/2.8.7-Changelog

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <redacted>

openvpn: increment PKG_RELEASE by one

Increment PKG_RELEASE by one.

Signed-off-by: Hannu Nyman <redacted>

net/smartdns: assign PKG_CPE_ID

cpe:/a:pymumu:smartdns is the correct CPE ID for smartdns:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pymumu:smartdns

Signed-off-by: Fabrice Fontaine <redacted>

libs/libxerces-c: assign PKG_CPE_ID

cpe:/a:apache:xerces-c\+\+ is the correct CPE ID for libxerces-c:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe%3A2.3%3Aa%3Aapache%3Axerces-c%5C%2B%5C%2B

Signed-off-by: Fabrice Fontaine <redacted>

utils/miniflux: assign PKG_CPE_ID

cpe:/a:miniflux_project:miniflux is the correct CPE ID for miniflux:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniflux_project:miniflux

Signed-off-by: Fabrice Fontaine <redacted>

libs/linenoise: assign PKG_CPE_ID

cpe:/a:antirez:linenoise is the correct CPE ID for linenoise:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:antirez:linenoise

Signed-off-by: Fabrice Fontaine <redacted>

libs/libulfius: assign PKG_CPE_ID

cpe:/a:ulfius_project:ulfius is the correct CPE ID for libulfius:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ulfius_project:ulfius

Signed-off-by: Fabrice Fontaine <redacted>

libs/libtheora: assign PKG_CPE_ID

cpe:/a:xiph:theora is the correct CPE ID for libtheora:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:theora

Signed-off-by: Fabrice Fontaine <redacted>

mail/opendkim: assign PKG_CPE_ID

cpe:/a:opendkim:opendkim is the correct CPE ID for opendkim:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendkim:opendkim

Signed-off-by: Fabrice Fontaine <redacted>

utils/podman: assign PKG_CPE_ID

cpe:/a:podman_project:podman is the correct CPE ID for podman:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:podman_project:podman

Signed-off-by: Fabrice Fontaine <redacted>

libs/qrencode: assign PKG_CPE_ID

cpe:/a:qrencode_project:qrencode is the correct CPE ID for qrencode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:qrencode_project:qrencode

Signed-off-by: Fabrice Fontaine <redacted>

multimedia/grilo: assign PKG_CPE_ID

cpe:/a:gnome:grilo is the correct CPE ID for grilo:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:grilo

Signed-off-by: Fabrice Fontaine <redacted>

utils/dockerd: assign PKG_CPE_ID

cpe:/a:mobyproject:moby is the correct CPE ID for docker:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mobyproject:moby

Signed-off-by: Fabrice Fontaine <redacted>

sound/owntone: assign PKG_CPE_ID

cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server

Signed-off-by: Fabrice Fontaine <redacted>

net/nanomq: assign PKG_CPE_ID

cpe:/a:emqx:nanomq is the correct CPE ID for nanomq:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:emqx:nanomq

Signed-off-by: Fabrice Fontaine <redacted>

net/mac-telnet: assign PKG_CPE_ID

cpe:/a:mac-telnet_project:mac-telnet is the correct CPE ID for mac-telnet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mac-telnet_project:mac-telnet

Signed-off-by: Fabrice Fontaine <redacted>

libs/libwebp: assign PKG_CPE_ID

cpe:/a:webmproject:libwebp is the correct CPE ID for libwebp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:webmproject:libwebp

Signed-off-by: Fabrice Fontaine <redacted>

utils/acpid: fix PKG_CPE_ID

cpe:/a:tedfelix:acpid2 is the correct CPE ID for acpid:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tedfelix:acpid2

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/ngircd: fix PKG_CPE_ID

cpe:/a:barton:ngircd is the correct CPE ID for ngircd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:barton:ngircd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/frr: fix PKG_CPE_ID

cpe:/a:frrouting:frrouting is the correct CPE ID for frr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:frrouting:frrouting

Fixes: 5afe5c9031190844f267357c68efe3c9c3cbe51d (treewide: assign PKG_CPE_ID)
Signed-off-by: Fabrice Fontaine <redacted>

net/dhcpcd: fix PKG_CPE_ID

cpe:/a:dhcpcd_project:dhcpcd is the correct CPE ID for dhcpcd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dhcpcd_project:dhcpcd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/libexif: fix PKG_CPE_ID

cpe:/a:libexif_project:libexif is the correct CPE ID for libexif:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexif_project:libexif

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

utils/minicom: fix PKG_CPE_ID

cpe:/a:minicom_project:minicom is the correct CPE ID for minicom:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:minicom_project:minicom

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

libs/iniparser: fix PKG_CPE_ID

cpe:/a:ndevilla:iniparser is not a correct CPE ID for iniparser:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ndevilla:iniparser

Fixes: 456d8ff5d58edd84ab361cc8c289d1d6c7507acc (iniparser: library for parsing of ini files in C)
Signed-off-by: Fabrice Fontaine <redacted>

net/rsync: fix PKG_CPE_ID

cpe:/a:samba:rsync is the correct CPE ID for rsync:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:samba:rsync

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

net/memcached: fix PKG_CPE_ID

cpe:/a:memcached:memcached is the correct CPE ID for memcached:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:memcached:memcached

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <redacted>

lang/rust: assign PKG_CPE_ID

cpe:/a:rust-lang:rust is the correct CPE ID for rust:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust

Signed-off-by: Fabrice Fontaine <redacted>

python-mako: bump to 1.3.5

Changelog since 1.3.0:
- Fix escaped percent signs (%%) not rendering correctly when not at
  line beginnings (1.3.1/1.3.2)
- Add 'pass' statements to empty control blocks to prevent errors (1.3.3)
- Fix strict_undefined mode conflicts with comprehensions inside
  function definitions (1.3.3)
- Revert dictionary literal parsing changes that caused bracketed
  expression regressions (1.3.5)

Full changelog:
https://docs.makotemplates.org/en/latest/changelog.html

Signed-off-by: Alexandru Ardelean <redacted>

openvpn: change tmp-dir to /tmp

This allows openvpn to create any temp files after
user or group change at exec time.

Signed-off-by: Paul Donald <redacted>

openvpn: change file/path types

move file and path type values to FILE type params
so they are better handled with quoting, in case
paths contain spaces.

Remove duplicate 'extra_certs'.

Signed-off-by: Paul Donald <redacted>

openvpn: proto handler; write params to config file

writing the command line to a config file avoids
formatting pitfalls for the command line.

Signed-off-by: Paul Donald <redacted>

openvpn: proto handler; trim white-space from append

'append' inserts white-space by default (3rd parameter)

Signed-off-by: Paul Donald <redacted>

openvpn: shell proto script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>

openvpn: ucode hotplug script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>

openvpn: hotplug script improvements

add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <redacted>