hwdata: update to 0.383

Signed-off-by: krant <redacted>

libssh: fix bad pkgconfig paths

Avoid leaking host paths.

Signed-off-by: Rosen Penev <redacted>

libjpeg-turbo: update to 3.0.3

Signed-off-by: krant <redacted>

banip: update 0.9.6-3

* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <redacted>

collectd: enable write_prometheus plugin

Signed-off-by: Louis Dupré Bertoni <redacted>
[PKG_RELEASE bump added]
Signed-off-by: Hannu Nyman <redacted>

cargo-c: New host package

It is useful to build crates as C libraries.

Signed-off-by: Luca Barbato <redacted>

Merge pull request #24068 from stangri/master-ngtcp2

ngtcp2: drop maintainership

Merge pull request #24271 from neheb/m

ngtcp2: fix bad pkgconfig paths

gst1-libav: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-ugly: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-bad: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-good: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-base: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

gstreamer1: update to 1.24.3

Signed-off-by: W. Michael Petullo <redacted>

pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <redacted>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <redacted>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

ngtcp2: fix bad pkgconfig paths

Avoids leaking host paths.

Signed-off-by: Rosen Penev <redacted>

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <redacted>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <redacted>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <redacted>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <redacted>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <redacted>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <redacted>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <redacted>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <redacted>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <redacted>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <redacted>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <redacted>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <redacted>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <redacted>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <redacted>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <redacted>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <redacted>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <redacted>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <redacted>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <redacted>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <redacted>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <redacted>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <redacted>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <redacted>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <redacted>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <redacted>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <redacted>

xfrpc: Revised the config file and adjusted the corresponding init file

Signed-off-by: Dengfeng Liu <redacted>

augeas: update to 1.14.1

Seems upstream now releases on GitHub.

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <redacted>

docker-compose: Update to version 2.27.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.27.1

Signed-off-by: Javier Marcet <redacted>

taglib: update to 2.0.1

Signed-off-by: Rosen Penev <redacted>

opus: update to 1.5.2

Signed-off-by: Rosen Penev <redacted>

upmpdcli: update to 1.8.11

Autotools is gone. meson is used now.

Signed-off-by: Rosen Penev <redacted>

libupnpp: update to 0.26.5

Autotools build is gone. meson is used now.

Signed-off-by: Rosen Penev <redacted>

libnpupnp: update to 6.1.3

Install static libraries too to InstallDev.

Signed-off-by: Rosen Penev <redacted>

libimobiledevice: update to 2024-05-20

Add patch to fix compilation with GCC14.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #24231 from nmav/ocserv-fix-startup

ocserv: use a more neutral character for sed

acme-common: v1.2.0

Signed-off-by: Sergey Ponomarev <redacted>

Merge pull request #24123 from mhei/update-libgpiod-to-2.1.1-with-deps

Update libgpiod to 2.1.1 and update dependent packages

ocserv: use a more neutral character for sed

This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <redacted>

libshout: fix compilation with GCC14

Missing headers.

Signed-off-by: Rosen Penev <redacted>

ffmpeg: update to 5.1.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #24208 from BKPepe/msmtp

msmtp: update to version 1.8.26

klish: fix compilation with GCC14

Proper types are now needed.

Signed-off-by: Rosen Penev <redacted>

acme-common: fallback to deprecated use_staging if the staging option is not set

The use_staging option was deprecated in 9d2d8787cafdfb49339766a00ced422fa75cb883.
But it still has a bigger priority than the staging option.
This happens because config_get_bool returns 0 when the use_staging option wasn't set.
So the next check for the staging var emptiness is always false.

As the simplest fix, use the config_get staging that returns a plain string when the option is not set and if it's empty then fallback to the use_staging.

Once the use_staging option is removed we should get back to the config_get_bool staging.

Also use config_get_bool debug.

Signed-off-by: Sergey Ponomarev <redacted>

treewide: use config_get_bool instead of config_get enabled

The config_get_bool function parses not just the 1 but on/yes, true/false or enabled/disabled.

Signed-off-by: Sergey Ponomarev <redacted>

iperf3: update to 3.17.1

Changelogs since last release:
https://github.com/esnet/iperf/releases/tag/3.17
https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <redacted>

nextdns: Update to version 1.43.5

Signed-off-by: Olivier Poitrey <redacted>

cloudflared: Update to 2024.5.0

Signed-off-by: Tianling Shen <redacted>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <redacted>

xray-core: update to 1.8.13

Signed-off-by: Tianling Shen <redacted>

yq: Update to 4.44.1

Signed-off-by: Tianling Shen <redacted>

treewide: fix incorrect hashes

It seems that PR #24113 introduced incorrect hashes for multiple packages.

So, lets fix all of them at once.

Signed-off-by: Robert Marko <redacted>

Revert "github: Improve Pull Request template"

This commit was accidently pushed to wrong remote and
it should be properly reviewed.

This reverts commit 6859b0a6f29bc06dd5726658efa91e866b7de1a9.

github: Improve Pull Request template

Signed-off-by: Josef Schlehofer <redacted>

Merge pull request #24057 from BKPepe/gitignore

Introduce .gitignore

nghttp3: drop maintainership

* switch back to using tar.gz archives, switch to xz was
  probably unnecessary and the previous problem building
  from the tagged release gz was probably cache-related
* drop maintainership

Signed-off-by: Stan Grishin <redacted>

nebula: drop maintainership

Signed-off-by: Stan Grishin <redacted>

msmtp: add test.sh

This file ensures that msmtp is run tested inside GitHub Actions
to help to ensure that this application is compiled and run
tested for OpenWrt master.

Signed-off-by: Josef Schlehofer <redacted>

msmtp: update to version 1.8.26

Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-26/

Signed-off-by: Josef Schlehofer <redacted>

openldap: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <redacted>

cyrus-sasl: fix compilation with GCC14

Missing time.h header.

Signed-off-by: Rosen Penev <redacted>

tailscale: Update to 1.66.4

https://github.com/tailscale/tailscale/releases/v1.66.4
Signed-off-by: Zephyr Lykos <redacted>

sslh: update to v1.23.1

The sslh Makefile's default target "all" now also tries to compile a new version sslh-ev.
To disable its compilation the Build/Compile is overridden and to call directly "make sslh-select" or "make sslh-fork" depending on CONFIG_SSLH_SELECT.

Some changes from 001-configfile-fix.patch were applied to the upstream and we can remove them.
The only left is a notice "sslh command line arguments override the config".

Signed-off-by: Sergey Ponomarev <redacted>

dnsdist: update to 1.9.4

fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <redacted>

libedit: update to version 20240517-3.1

Signed-off-by: Jan Hák <redacted>

pdns-recursor: update to 5.0.5

Signed-off-by: Peter van Dijk <redacted>

sing-box: update to 1.8.14

Signed-off-by: brvphoenix <redacted>

speedtest-go: update to 1.7.7

Update speedtest-go version to 1.7.7

Signed-off-by: TeleostNaCl Dai <redacted>

liburing: Update to v2.6

- Updated download URL and hash

Signed-off-by: Christian Lachner <redacted>

Merge pull request #24188 from gladiac/haproxy-2.8.9

haproxy: update to v2.8.9

haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <redacted>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <redacted>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <redacted>

ddns-scripts: do not verify DNS server on start

When the ddns update script is started, the system checks whether the
configured DNS server can be reached. This is checked with the 'netcat' tool.
The tool tries to establish a TCP connection on port 53 of the configured
DNS server.

The problem with this implementation is, that this call blocks the ddns
update script until 'netcat' returns from the call.

Verfification failed:
If the IP and the port cannot be reached, the netcat call returns
immediately.

Verfification successfull:
If the IP and the port of the DNS server can be reached, the connection
remains established and so the ddns update scripts blocks until the
configured TCP session timeout of the DNS server resets the connection.

The behavior in the event of an successfull verificataion is a problem
for the ddns update script if it is called via the hotplug. Since the ddns
update script runs too long! This blocking behavior also depends on
the TCP session timeout setting of the DNS server.

> time netcat 1.1.1.1 53
netcat 1.1.1.1 53  0.00s user 0.00s system 0% cpu 10.016 total

> time netcat 8.8.8.8 53
netcat 8.8.8.8 53  0.00s user 0.00s system 0% cpu 2.012 total

The TCP session timeout is for 1.1.1.1 10 seconds and for 8.8.8.8 2 seconds.

The '--wait' option of necat or the additional integration of the 'timeout'
function of busybox was implemented for this behavior. But the used '--wait'
function of netcat of the busybox shows no effect here.

Since the used implementation is not clean, the question arise why this
is necessary for the ddns update script at all? As the nslookup throws an
error anyway if it cannot resolve the IP. This check is only informative.
The check does not affect the script behavior.

The check is therefore removed on ddns update.

Signed-off-by: Florian Eckert <redacted>

unixodbc: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <redacted>