gkrellmd: use finer-grained dependencies on glib2

Following the split of glib2, depend on the more fine-grained packages
to reduce the installed size. Gkrellmd only needs to depend on the core glib2
library, gmodule and gthread, and not on gobject or gio.

Signed-off-by: Peter Denison <redacted>

glib2: split package into separate libraries

Existing package contains five libraries, some of which are > 1MB. Allow
packages which depend on only some of them to only pull in the ones they
need by splitting this package into finer-grained packages. Transition
can be done piecemeal as depending on glib2 will still pull in all the
libraries.

Signed-off-by: Peter Denison <redacted>

lua-openssl: update to 0.11.1

Update Makefile with the version
Remove LuaJIT fix patch - No longer needed
Add "ts-time-cb-signature" patch - Fixes build on various platforms

Signed-off-by: Amnon Paz <redacted>

xtables-addons: bump 3.30 and fix LUA build on 6.18

This upstream release allows clean builds against linux 6.18. Fix LUA
PacketScript build on 6.18 by switching to ccflags-y and restoring the
required -isystem include path. Remove compat_xtables since the module
no longer exists in 3.30 and drop all dependent kmod references.

Fix CI build failure with backport:
600-xt_pknock-fox-do_div-signness-mismatch.patch

Note that upstream tarball changed from xz to zst.

Signed-off-by: John Audia <redacted>

docker: bump to 29.4.1

Fix build issues and disable building for all MIPS variants.

Changes: https://docs.docker.com/engine/release-notes/27/
Changes: https://docs.docker.com/engine/release-notes/28/
Changes: https://docs.docker.com/engine/release-notes/29/#2941
Signed-off-by: George Sapkin <redacted>

dockerd: bump to 29.4.1

Disable building for all MIPS variants.

Changes: https://docs.docker.com/engine/release-notes/27/
Changes: https://docs.docker.com/engine/release-notes/28/
Changes: https://docs.docker.com/engine/release-notes/29/#2941
Co-authored-by: Gerard Ryan <redacted>
Signed-off-by: George Sapkin <redacted>

containerd: bump to to 2.2.3

Disable building for all MIPS variants.

Changes: https://github.com/containerd/containerd/releases/tag/v1.7.23
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.0
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.1
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.2
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.3
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.4
Changes: https://github.com/containerd/containerd/releases/tag/v2.0.5
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.0
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.1
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.2
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.3
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.4
Changes: https://github.com/containerd/containerd/releases/tag/v2.1.5
Changes: https://github.com/containerd/containerd/releases/tag/v2.2.0
Changes: https://github.com/containerd/containerd/releases/tag/v2.2.1
Changes: https://github.com/containerd/containerd/releases/tag/v2.2.2
Changes: https://github.com/containerd/containerd/releases/tag/v2.2.3
Co-authored-by: Gerard Ryan <redacted>
Signed-off-by: George Sapkin <redacted>

runc: bump to 1.3.5

Disable building for all MIPS variants.

Changes: https://github.com/opencontainers/runc/releases/tag/v1.1.15
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.0
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.1
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.2
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.3
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.4
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.5
Changes: https://github.com/opencontainers/runc/releases/tag/v1.2.6
Changes: https://github.com/opencontainers/runc/releases/tag/v1.3.1
Changes: https://github.com/opencontainers/runc/releases/tag/v1.3.2
Changes: https://github.com/opencontainers/runc/releases/tag/v1.3.3
Changes: https://github.com/opencontainers/runc/releases/tag/v1.3.4
Changes: https://github.com/opencontainers/runc/releases/tag/v1.3.5
Signed-off-by: George Sapkin <redacted>

ovpn-dco: work around EIP-197 incompatibility

ovpn-dco is currently incompatible with the SafeXcel EIP-197
cryptographic engine. Disable async until this is fixed.

Signed-off-by: Qingfang Deng <redacted>

boinc: version 8.2.11

Bump boinc version to 8.2.11

Signed-off-by: Hector Espert <redacted>

https-dns-proxy: update to 2025.12.29-5

Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.1
Run tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.1

Description:Add nftables notrack for localhost traffic

  - Removed. License is now included in the main project.

net/https-dns-proxy/Makefile:
  - Bumped PKG_RELEASE to 5.

net/https-dns-proxy/files/etc/config/https-dns-proxy:
  - Added 'option notrack_dns '1'' to the default configuration.

net/https-dns-proxy/files/etc/init.d/https-dns-proxy:
  - Defined NOTRACK_NFT_FILE constant.
  - Added 'notrack_dns' and 'notrack_ports' variables.
  - Implemented 'notrack_nft' function to manage nftables rules for notracking local DNS traffic.
  - Enabled loading of 'notrack_dns' boolean from configuration.
  - Modified start_instance to collect listen_port into notrack_ports if notrack_dns is enabled.
  - Modified start_service to call notrack_nft update/remove based on notrack_dns and collected ports.
  - Modified stop_service to call notrack_nft remove.
  - Updated service_started and service_stopped to trigger firewall config changes when notrack_dns is enabled.

Signed-off-by: Stan Grishin <redacted>

semodule-utils: add test.sh

Add a bit of smoke testing for the CI.

Signed-off-by: Alexandru Ardelean <redacted>

selinux-python: fix cross-compilation, add test.sh

Add --no-build-isolation to PYTHON_SETUP_ARGS. Without it, pip creates
an isolated build environment which fails during cross-compilation
because _sysconfigdata is missing for the target arch.

Add test.sh verifying python3-sepolgen module loads correctly and
selinux-audit2allow binary is functional.

Signed-off-by: Alexandru Ardelean <redacted>

python-semanage: fix cross-compilation, add test.sh

Add HOST_PYTHON3_PIP_VARS and --no-build-isolation to MAKE_VARS.
Without --no-build-isolation, pip creates an isolated build environment
which fails during cross-compilation because _sysconfigdata is missing.
Aligns with python-selinux which already has this fix.

The libsemanage pywrap uses the host Python's EXT_SUFFIX to name the
C extension, so we will use the PYCEXT env-var to correct that.

Add basic test.sh to verify the semanage Python bindings load correctly
in environments without SELinux kernel support.

Signed-off-by: Alexandru Ardelean <redacted>

python-selinux: fix cross-compilation, add test.sh

Add --no-build-isolation to PYTHON_SETUP_ARGS. Without it, pip creates
an isolated build environment which fails during cross-compilation
because _sysconfigdata is missing for the target arch.

Add test.sh with basic import and API sanity checks.

Signed-off-by: Alexandru Ardelean <redacted>

adblock-fast: update to 1.2.2-18

* Switch Hagezi URL to a more compact higher-level only domains list as we
  prefer it anyways and there's less processing (thanks @dave14305)
* When update_config_sizes is unset, save collected sizes to RAM to improve
  luci app performance (thanks @sshaikh)

Signed-off-by: Stan Grishin <redacted>

telegraf: enable static linking for arm targets

- Fixes "2.44 assertion fail elf32-arm.c:9910" build error

Signed-off-by: Niklas Thorild <redacted>

telegraf: update to 1.38.3
- Update Telegraf to v1.38.3

Signed-off-by: Niklas Thorild <redacted>

coredns: update to 1.14.3

Changelog: https://github.com/coredns/coredns/releases/tag/v1.14.3

CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144,
CVE-2026-27143, CVE-2026-32288, CVE-2026-32283, CVE-2026-27140.

Signed-off-by: Vladimir Ermakov <redacted>

valkey: add new package

Valkey is a community fork of the  key-value database Redis.
It is a drop in replacement to Redis so most of the files are
derived from their Redis equivalent.

Co-authored-by: George Sapkin <redacted>
Signed-off-by: Matthew Cather <redacted>

frp: bump to 0.68.1

Changes: https://github.com/fatedier/frp/releases/tag/v0.67.0
Changes: https://github.com/fatedier/frp/releases/tag/v0.68.0
Changes: https://github.com/fatedier/frp/releases/tag/v0.68.1
Co-Authored-by: Peiyuan Song <redacted>
Signed-off-by: Roc Lai <redacted>

pbr: update to 1.2.2-r14

fix: avoid unnecessary dnsmasq restarts (thanks @egc112)
fix: insert, not add dns policies to ensure higher priority than the DNS
     hijack rules (thanks @egc112)

Signed-off-by: Stan Grishin <redacted>

banip: update 1.8.6-4

* fixed report generation and housekeeping
* added missing code/function comments

Signed-off-by: Dirk Brenken <redacted>

python3-django-cors-headers: update to 4.9.0; add test.sh

Major changes since 3.10.0:

4.0:
- add CORS_ALLOW_PRIVATE_NETWORK setting for Local Network Access spec support
- add async middleware support, reducing overhead on async views
- remove deprecated CORS_REPLACE_HTTPS_REFERER and CorsPostCsrfMiddleware
- remove three header names from default allowed list (accept-encoding, dnt, origin)

4.3:
- fix access-control-allow-credentials header not being omitted on
  non-allowed responses

4.6:
- drop support for Django 3.2 through 4.1

4.9:
- add Django 6.0 support
- tighten validation of sequence-type settings (e.g. CORS_ALLOW_METHODS)

Add PYPI_SOURCE_NAME:=django_cors_headers as the 4.x sdist uses
underscores in the filename.

Signed-off-by: Alexandru Ardelean <redacted>

vobject: update to 0.9.9; add test.sh

Changelog since 0.9.6.1:
- add product version number to the PRODID tag in iCalendar output
- add support for GEO tags in vCards
- various bugfixes and compatibility improvements

Also need to update setup.cfg at build time to insert the version
to allow the package to build.
Otherwise we get
```
2026-04-21T08:17:17.9341927Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 296, in __setitem__
2026-04-21T08:17:17.9342520Z     parsed = self.parsers.get(option_name, lambda x: x)(value)
2026-04-21T08:17:17.9343117Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 602, in _parse_version
2026-04-21T08:17:17.9343777Z     return expand.version(self._parse_attr(value, self.package_dir, self.root_dir))
2026-04-21T08:17:17.9344201Z                           ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2026-04-21T08:17:17.9344938Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/setupcfg.py", line 421, in _parse_attr
2026-04-21T08:17:17.9345544Z     return expand.read_attr(attr_desc, package_dir, root_dir)
2026-04-21T08:17:17.9345876Z            ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2026-04-21T08:17:17.9346409Z   File "/builder/staging_dir/hostpkg/lib/python3.14/site-packages/setuptools/config/expand.py", line 191, in read_attr
2026-04-21T08:17:17.9346947Z     return getattr(module, attr_name)
2026-04-21T08:17:17.9347261Z AttributeError: module 'vobject' has no attribute 'VERSION'
2026-04-21T08:17:17.9598878Z
```

Signed-off-by: Alexandru Ardelean <redacted>

numpy: update to 2.4.4

Patch release with stability and correctness fixes over 2.4.3:
- fix memory leak in certain array creation paths
- fix thread-safety issues in ufunc dispatch
- fix hash collisions in np.isin() on certain inputs
- fix OpenBLAS threading hang on ARM targets
- miscellaneous annotation and documentation improvements

Signed-off-by: Alexandru Ardelean <redacted>

scapy: update to 2.7.0; add test.sh

Update scapy to version 2.7.0.

Add python-setuptools/host to PKG_BUILD_DEPENDS as the package
uses setuptools as its build backend.

Changelog: https://github.com/secdev/scapy/blob/master/doc/scapy/installation.rst
Signed-off-by: Alexandru Ardelean <redacted>

python-flask-babel: update to 4.0.0; add test.sh

Changes since 3.1.0:
- drop Python 3.7 support; add PyPy 3.9 compatibility
- replace deprecated locked_cached_property with cached_property

Signed-off-by: Alexandru Ardelean <redacted>

python-chardet: update license to 0BSD

Upstream changed the project license to 0BSD.

Signed-off-by: Wei-Ting Yang <redacted>

snowflake: update to 2.13.1

Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.13.1/ChangeLog?ref_type=tags

Signed-off-by: Nick Hainke <redacted>

cloudflared: support multiple upstream interfaces.
support multiple upstream interfaces in config.

Signed-off-by: kouhei-ioroi <redacted>

libjemalloc: update to 5.3.1

Routine version bump.  Lots of bugfixes and optimizations.

Signed-off-by: Philip Prindeville <redacted>

banip: update 1.8.6-3

* removed unnecessary forks in f_nftinit
* removed  unnecessary forks in f_genstatus
* removed  unnecessary forks in f_lookup
* removed the needless f_char function
* cosmetics

Signed-off-by: Dirk Brenken <redacted>

snowflake: mount default geoip paths

-metrics option requires access to these files to geolocate clients

Signed-off-by: matzfan <redacted>

iptraf-ng: bump version from 1.2.1 to 1.2.2

Bump iptraf-ng version from 1.2.1 to 1.2.2.

Signed-off-by: Marcos Alano <redacted>

miniupnpd: add ext_allow_private_ipv4

miniupnpd 2.3.9 allows enable forwarding for private IPs by use 'ext_allow_private_ipv4=yes'.

Link: https://github.com/miniupnp/miniupnp/blob/f83b5e2e21aa8dfa393ff80ea287ac4fca1a4df1/miniupnpd/Changelog.txt#L51
Link: https://github.com/miniupnp/miniupnp/blob/f83b5e2e21aa8dfa393ff80ea287ac4fca1a4df1/miniupnpd/miniupnpd.conf#L24
Signed-off-by: Andy Chiang <redacted>

banip: update 1.8.6-2

* flock/serialize the etag writing in the f_etag function
* added various variables to local scope
* LuCI: removed needless ACL

Signed-off-by: Dirk Brenken <redacted>

python3-drf-nested-routers: update to 0.95.0; add test.sh

Add PYPI_SOURCE_NAME:=drf_nested_routers as the 0.95.0 sdist
uses underscores in the filename.

Signed-off-by: Alexandru Ardelean <redacted>

python-pyroute2: update to 0.9.6

- bump 0.9.5 -> 0.9.6

Signed-off-by: Alexandru Ardelean <redacted>

python-awscli: update to 1.44.79

- bump 1.44.78 -> 1.44.79

Signed-off-by: Alexandru Ardelean <redacted>

itsdangerous: update to 2.2.0; add test.sh

- bump 2.1.2 -> 2.2.0
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-installer: use --prefix for install-path

Fixes https://github.com/openwrt/packages/issues/29177
Tested locally.

Fix provided by @xuanranran

Signed-off-by: Lovin Yarn <redacted>
Signed-off-by: Alexandru Ardelean <redacted>

python-pypubsub: update to 4.0.7

- bump 4.0.3 -> 4.0.7
- add python-setuptools-scm/host to PKG_BUILD_DEPENDS
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-dbus-fast: update to 4.0.4

- bump 2.21.1 -> 4.0.4
- remove over-specified runtime dependencies; 4.0.x has no runtime
  Python dependencies beyond python3-light
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-lru-dict: update to 1.4.1; add test.sh

Add PYPI_SOURCE_NAME:=lru_dict as the sdist tarball filename
uses underscores while PYPI_NAME uses hyphens.

Signed-off-by: Alexandru Ardelean <redacted>

python-editables: update to 0.6

- bump 0.5 -> 0.6

Signed-off-by: Alexandru Ardelean <redacted>

python-chardet: update to 7.4.3

- bump 7.4.1 -> 7.4.3

Signed-off-by: Alexandru Ardelean <redacted>

python-botocore: update to 1.42.89

- bump 1.42.88 -> 1.42.89

Signed-off-by: Alexandru Ardelean <redacted>

python-boto3: update to 1.42.89

- bump 1.42.88 -> 1.42.89

Signed-off-by: Alexandru Ardelean <redacted>

uacme: add support for dalias/calias

handle dalias/calias config currectly by dns challenge hook so it won't
break uacme when given

Signed-off-by: Seo Suchan <redacted>

adblock: release 4.5.5-1

* added an separate adblock rundir (/var/run/adblock)
* refine the cpu/core detection
* behaviour change: allowlist domains now also removes subdomains from the blocklist
* flock/serialize the etag writing in the f_etag function
* code clean-up/linting

Signed-off-by: Dirk Brenken <redacted>

adguardhome: bump to 0.107.74

Changes: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.74
Signed-off-by: George Sapkin <redacted>

openvpn: handler: refine netifd routing and config

Introduce a new `ipv6` proto option for OpenVPN netifd integration and
export it to the hotplug environment. IPv6 remains enabled by default,
but can now be explicitly disabled per instance.

Update the hotplug helper to apply IPv6 addresses and routes only when
IPv6 is enabled, allowing cleaner IPv4-only tunnel deployments.

Also improve route handling by:
- ignoring invalid default gateway values (0.0.0.0 / ::)
- replacing fixed `seq` loops with shell-safe while loops
- keeping trusted peer host routes conditional on valid gateways

Signed-off-by: Chen Minqiang <redacted>

banip: release 1.8.6-1

* fixed the initialization of the banIP rundir (reported in the forum)
* sanitize possible windows line endings in local block- and allowlist
* refine the cpu/core detection
* code clean-up/linting

Signed-off-by: Dirk Brenken <redacted>

python-constantly: drop versioneer build dependency

The release tarball already contains a pre-generated _version.py with
the version hardcoded, so versioneer is not needed at build time.
Patch pyproject.toml to only require setuptools and remove
PKG_BUILD_DEPENDS:=python-versioneer/host.

Remove python-versioneer package as it is no longer needed.

Signed-off-by: Alexandru Ardelean <redacted>

mdio-tools: update to 1.3.2

Update the mdio-netlink kmod and userspace mdio-tools to version 1.3.2.

[v1.3.2] - 2026-04-14
---------------------

Build fixes and support for Microchip's paged PHYs.

Added:
- mdio: A new addressing mode "mscc": Used to access PHYs from
  Microchip that uses C22 register 31 as a page register

Fixed:
- mdio: Fix VPATH builds and various other build related warnings

Signed-off-by: Pawel Dembicki <redacted>

mdnsresponder: update to 2881.0.25

Remove upstreamed patches and rework based on current openembedded
patches.

mdnsd now supports a -foreground parameter, which enables proper procd
handling. It also supports SIGHUP reloading.

Signed-off-by: Rosen Penev <redacted>

python3: bump to version 3.14.4

Also add no-mips16 to PKG_BUILD_FLAGS.
Should fix mipsel_24kc_24kf builds.

Signed-off-by: Alexandru Ardelean <redacted>

treewide: set me where PKG_MAINTAINER empty

Seems a lot of packages are just getting abandoned by people.
Will pick these up and see them through.

Signed-off-by: Alexandru Ardelean <redacted>

treewide: change maintainer from Daniel Danzberger to me

Change PKG_MAINTAINER from Daniel Danzberger <redacted>
to Alexandru Ardelean <redacted> for:
- python-boto3
- python-botocore
- python-awscli
- python-colorama
- python-docutils
- python-jmespath
- python-psycopg2
- python-rsa
- python-s3transfer

These packages seem pretty neglected and the community has been
updating them periodically. Will pick these up to keep them
maintained.

Signed-off-by: Alexandru Ardelean <redacted>

python-ruamel-yaml: update to 0.19.1

- Bump version 0.18.16 -> 0.19.1
- Add PYPI_SOURCE_NAME:=ruamel_yaml
- Add PKG_BUILD_BUILDIR, because folder is ruamel.yaml
- Add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

kea: fix kea-libs dependencies

Include libstdc++ and log4cplus libraries.

Signed-off-by: Philip A. Prindeville <redacted>

python-fnv-hash-fast: update to 2.0.2

- bump 0.5.0 -> 2.0.2
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-pycares: update to 5.0.1

- bump 4.10.0 -> 5.0.1
- update cffi build dependency comment (cffi>=2.0.0b1 required for Python 3.14)
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-bleak: update to 3.0.1

- bump 0.21.1 -> 3.0.1
- add +python3-uuid to DEPENDS (new dependency in 3.x)
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-cached-property: update to 2.0.1

- bump 1.5.2 -> 2.0.1
- add PYPI_SOURCE_NAME:=cached_property (PyPI renamed tarball from
  cached-property to cached_property)
- add PKG_BUILD_DEPENDS:=python-setuptools/host
- add +python3-asyncio +python3-logging to DEPENDS (new in 2.x)
- add test.sh

Signed-off-by: Alexandru Ardelean <redacted>

python-pyusb: add version 1.3.1

PyUSB provides easy USB access in Python via libusb backend:
- Pure Python implementation working with libusb-1.0/0.1.x
- Requires Python >= 3.9
- High-level Pythonic interface to USB devices
- Supports bulk/interrupt/control/isochronous transfers
- Homepage: https://pyusb.github.io/pyusb

Signed-off-by: Alexandru Ardelean <redacted>

glib2: fix builds by explicitly disabling libelf

The libelf Meson option defaults to auto. Since commit 71b7b4478906 ("glib2: do not set default meson options"),
glib2 can enable libelf support nondeterministically depending on whether libelf.pc is visible during configure.

On failing builders Meson reports:

    Run-time dependency libelf found: YES 0.192

 and gresource later fails with:

    ../gio/gresource-tool.c:34:10: fatal error: libelf.h: No such file or directory

On passing builders we see:

    Run-time dependency libelf found: NO (tried pkgconfig and cmake)

So explicitly disable libelf again to restore deterministic builds.

Fixes: #23459
Fixes: 71b7b4478906 ("glib2: do not set default meson options")
Signed-off-by: Lu Dai <redacted>
Signed-off-by: Christian Marangi <redacted>

python-pyproject-metadata: update to 0.11.0

Update package to 0.11.0.

Changes since 0.9.1:

0.10.0:
- Added support for PEP 794 (METADATA 2.5) import-names and
  import-namespaces fields
- Dropped Python 3.7 support
- Fixed minimum required version of packaging dependency

0.11.0:
- Refactored internals to separate conversion and validation, yielding
  better error messages
- Added downstream project testing in CI
- Removed lingering PEP 621 terminology in favor of pyproject.toml
  terminology

Apply dos2unix

Signed-off-by: Alexandru Ardelean <redacted>

python-pyfuse3: update to 3.4.2; add test.sh

Bump version 3.4.1 -> 3.4.2.

Changes since 3.4.1:
- Remove the deprecated pyfuse3_asyncio module (long-renamed to
  pyfuse3.asyncio)
- Fix a test failure in test_examples.py
- Modernize the build process and add more type annotations

Signed-off-by: Alexandru Ardelean <redacted>

python-installer: update to 1.0.0

Update package to 1.0.0. This is the first stable release.

Changes since 0.7.0:
- Dropped support for Python 3.7, 3.8, 3.9; added Python 3.13/3.14
- Added --overwrite-existing and --validate-record CLI options
- Support installing multiple wheels in a single invocation
- Security: fixed a path traversal bug
- Do not install __pycache__ directories from wheels
- Switch to stream-based validation instead of in-memory (lower memory)
- Sort entries before writing RECORD; fixed Windows relative path bug
- Complete type annotations with strict mypy enforcement
- API change: SchemeDictionaryDestination.overwrite_existing now defaults
  to True (was False); update patch 001 accordingly

Remove patch 001-don-t-raise-error-if-file-exists.patch and
set '--overwrite-existing' in build scripts.

Signed-off-by: Alexandru Ardelean <redacted>

python-outcome: update to 1.3.0

Update package to 1.3.0.

Changes since 1.2.0:

1.3.0:
- Added full type hints; Value and Outcome are now generic classes
- Added Maybe type alias as a union of Value[T] and Error
- Added typed __all__ exports and marked __version__ as a public constant
- Functions that do not return are now captured as Error
- Added pyright --verifytypes to CI; strict mypy mode enabled

Signed-off-by: Alexandru Ardelean <redacted>

python-trio: update to 0.33.0; add test.sh

Bump version 0.22.2 -> 0.33.0.
Add python3-ctypes, python3-logging, python3-openssl to DEPENDS
(required by the new version).
Add test.sh to verify nursery-based concurrent task execution.

Signed-off-by: Alexandru Ardelean <redacted>

openvpn: make the packages dependency clearer

No functional changes, so the PKG_RELEASE version number has not been
incremented.

Signed-off-by: Florian Eckert <redacted>

xz: update to 5.8.3

Update includes fix for CVE-2026-34743.

Release Notes:
https://github.com/tukaani-project/xz/releases/tag/v5.8.3

Signed-off-by: Hannu Nyman <redacted>

nextdns: update to version 1.47.2

Update nextdns package to upstream version 1.47.2

Signed-off-by: Olivier Poitrey <redacted>

zabbix: update to 7.0.25 (LTS)

Bump version to latest LTS.

Signed-off-by: Daniel F. Dickinson <redacted>

radicale3: update to 3.7.1

Bump version for quickly discovered issues with 3.7.0

Signed-off-by: Daniel F. Dickinson <redacted>

uacme: update to 1.8.1

update uacme version to 1.8.1 , release upstream 2026/4/5

Signed-off-by: Seo Suchan <redacted>

acme-common: migrate uacme config paramaters

migrate old uacme specific config parameters into acme-common format.

Signed-off-by: Seo Suchan <redacted>

uacme: use acme-common

remake uacme hook scripts to base on acme-common,
and implements helper to able to use acme.sh DNS APIs

Signed-off-by: Seo Suchan <redacted>

acme: make virtual package satisfiable by uacme

currently acme metapackage only able to satisfied with acme-acmesh,
but make is satisfieable by uacme if it's already installed.
still defaults to acme.sh

Signed-off-by: Seo Suchan <redacted>

python-pyroute2: update to 0.9.5; add test.sh

Bump version 0.7.9 -> 0.9.5.
Add test.sh to verify IPRoute, NDB, and nlmsg imports.

Signed-off-by: Alexandru Ardelean <redacted>

python-maxminddb: update to 3.1.1; add test.sh

Bump version 2.4.0 -> 3.1.1.
Add python3-urllib to DEPENDS (required by new version).
Add test.sh to verify open_database and InvalidDatabaseError imports.

Signed-off-by: Alexandru Ardelean <redacted>

python-ble2mqtt: update to 0.2.5; add test.sh

Bump version 0.2.2 -> 0.2.5.
Add test.sh to verify Device base class import.

Signed-off-by: Alexandru Ardelean <redacted>

python-awscli: update to 1.44.78

Bump version 1.44.76 -> 1.44.78.

Signed-off-by: Alexandru Ardelean <redacted>

python-service-identity: update to 24.2.0; add test.sh

Bump version 23.1.0 -> 24.2.0.
Add test.sh to verify module imports and key symbols.

Signed-off-by: Alexandru Ardelean <redacted>

python-awesomeversion: update to 25.8.0; add test.sh

Bump version 23.5.0 -> 25.8.0.
Switch build dependency from python-poetry-core to python-hatchling.
Add test.sh to verify version parsing, comparison, and strategy detection.

Signed-off-by: Alexandru Ardelean <redacted>

python-zope-interface: update to 8.3

Bump version 8.2 -> 8.3.

Signed-off-by: Alexandru Ardelean <redacted>

python-vcs-versioning: update to 1.1.1

Bump version 1.0.1 -> 1.1.1.

Signed-off-by: Alexandru Ardelean <redacted>

python-lxml: update to 6.0.4

Bump version 6.0.2 -> 6.0.4 (bugfix release).

Signed-off-by: Alexandru Ardelean <redacted>

python-platformio: update to 6.1.19

Bump version 6.1.18 -> 6.1.19.

Signed-off-by: Alexandru Ardelean <redacted>

python-maturin: update to 1.13.1

Bump version 1.12.6 -> 1.13.1.

Signed-off-by: Alexandru Ardelean <redacted>

python-build: update to 1.4.3

Bump version 1.4.2 -> 1.4.3.

Signed-off-by: Alexandru Ardelean <redacted>

python-zeroconf: update to 0.148.0; add test.sh

Bump version 0.131.0 -> 0.148.0.
Add test.sh to verify ServiceInfo construction and attribute access.

Signed-off-by: Alexandru Ardelean <redacted>

python-pycrate: update to 0.7.11; add test.sh

Bump version 0.6.0 -> 0.7.11.
Add test.sh to verify Envelope/Sequence element construction and value access.

Signed-off-by: Alexandru Ardelean <redacted>

python-gevent: update to 26.4.0; add test.sh

Bump version 25.9.1 -> 26.4.0.
Add test.sh to verify greenlet spawning and joining.

Signed-off-by: Alexandru Ardelean <redacted>

python-botocore: update to 1.42.88

Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <redacted>

python-boto3: update to 1.42.88

Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <redacted>

xray-core: Update to 26.3.27

Release note: https://github.com/XTLS/Xray-core/releases/tag/v26.3.27

Signed-off-by: Tianling Shen <redacted>