kmod: fix build failure in install step over dirty build dir

When building kmod-32 package for the first time (clean build_dir), it
builds and installs fine. When building for 2nd time, sometimes
(probably some race condition?) it fails to build in install step with
following error:

  for tool in insmod lsmod rmmod depmod modprobe modinfo; do \
   ln -s kmod /tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/$tool; \
  done
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/insmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/lsmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/rmmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/depmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modprobe': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modinfo': File exists

Lets fix it by backporting upstream fix.

Fixes: #27171
Link: https://lore.kernel.org/r/[email protected]
Upstream-Status: Backport [https://github.com/kmod-project/kmod/commit/c5054b215089f9e3cdc9602232649c2b5b1de743]
Signed-off-by: Petr Štetiar <[email protected]>
(cherry picked from commit 79f78c0e77e61a20063db53f6cf8a12768036cdf)

inih: Update to r61

Release note: https://github.com/benhoyt/inih/releases/tag/r61

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit f6f3f4c5fdfb6fccd1520f63f9d281b971cb78ad)

openlist: Update to 4.1.0

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1f4064269fbf673952a23eb97843f49ee6ee8263)

openlist: Update to 4.0.9

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.9

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit dd6e44068f872a636f9cca296d97c498681e5de4)

rclone: backport ftp insecure TLS ciphers fix

Added config field to allow insecure TLS ciphers that were disabled
in Go 1.22.

Fixes: #27039
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 80e343dd434f53a4019f56920ac4a748e046fb9c)

golang: disable build for powerpc64

e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit c8ad05854dd46baf19bdf2b8de86a31da5b9e046)

adblock-fast: update to 1.1.4-4

Makefile:
  - bugfix: change references to melmac.net to melmac.ca

README:
  - add basic README with the link to full documentation

Config:
  - add heartbeat_domain
  - add heartbeat_sleep_timeout
  - add sanity_check
  - add update_config_sizes

Init Script:
  - a lot of visual output improvements, especially with verbosity=2
  - better output separation for different verbosity levels
  - removed unneeded runningErrorFile
  - bugfix: updated runningConfigFile
  - updated runningStatusFile and added runningStatusFileLock
  - moved append_url() higher up for better visibility
  - refactor force-redownload/restart on some config changes functionality
  - improve count_blocked_domains
  - add internal debug_log() for debugging functions where output is captured
  - unified all json add/get calls in the same formatting
  - major rework on json() to allow storing of error/warning messages as json objects
  - added some error/warning messages
  - renamed `cache()` function to `adb_file()` to better reflect functionality
  - added functionality to test the dnsmasq config before restarting dnsmasq with ad-blocking
  - added functionality to throw warnings if TLDs or leading-dot domains are discovered
    in the final block-list file (can be disabled by `sanity_check` option)
  - added functionality to test DNS resolution after resolver restart with `heartbeat_domain`
    for `heartbeat_sleep_timeout` seconds
  - added functionality to revert the resolver's config/ad-blocking if heartbeat domain cannot
    be resolved after resolver restart
  - added `ALLOWED_TMP` variable/file for better processing of external allow-lists
  - added debug output to log with the elapsed time for each step of processing
  - drastically improved final block-list optimization with the new awk script
  - minor other performance improvements
  - added check_tld/check_leading_dot CLI commands to show domains breaking sanity checks
  - added validate functions to triggers

Bugfixes:
  - fixes: https://github.com/openwrt/packages/issues/27146
  - supercedes: https://github.com/openwrt/packages/pull/27159

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit af75ccbb4f2704a020bfc21ecf8e69172fb1e90c)

hev-socks5-tunnel: update to 2.13.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.13.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 4c73e7f8bf9e80d556d456c0b95d29e61b766d4f)

pbr: update to 1.1.8-32

Makefile:
  - add SPDX-Identifier-License
  - update Copyright

README:
  - add basic README with the link to full documentation

Config:
  - add debug_dnsmasq
  - add procd_boot_trigger_delay

Init Script:
  - move extra_command calls high up for visibility
  - bump packageCompat to sync with luci app
  - implement support for debug_dnsmasq to dump dnsmasq debug into $packageDebugFile
  - create $runningStatusFile json-file allowing more verbose errors/warnings messages
  - replaced `state add` calls with json add calls to store errors/warnings messages
  - remove no longer needed errorSummary, warningSummary
  - ensure environment is only loaded once per run via $load_environment_flag
  - bugfix: update is_{host,hostname,domain,ipv4,mac_address} functions to properly sort policy entries
  - bugfix: change references to melmac.net to melmac.ca
  - add some new error/warning messages
  - add delay before service is started on boot via procd_boot_trigger_delay
  - bugfix: add logic to identify unknown policy entries instead of silently failing on them
  - store error/warning messages as json objects in ubus data for luci app
  - update load_validate_config with debug_dnsmasq and procd_boot_trigger_delay entries

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit 4b831c6dbf3b432dd44b4f07e06a379c679b6132)

banIP: update 1.5.6-7

* skip rdap requests/replies with placeholders for all IPv4/IPv6 addresses
* sanitize possible bogus config values, e.g. '/dev/null' as a directory
* change URL for beycyber feed

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit ac1076ef9530138e7c84d2858d5cf2b5d8c74e02)

php8: update to 8.3.24

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.24

Signed-off-by: Michael Heimpold <[email protected]>

openlist: Remove dependency on fuse

Fixes https://github.com/openwrt/packages/issues/27011

Signed-off-by: Liangbin Lian <[email protected]>
(cherry picked from commit 68c60fdc5d8b42b3179fc341e6033288f1aaad06)

docker-compose: Update to version 2.39.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.39.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit e3395ec43c4a51256a8e4c355e631b140ab86977)

docker-compose: Update to version 2.38.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 362b8cda741bf27008b67466c986c8f362ddd297)

docker-compose: Update to version 2.38.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0ea85424be8c9f6f1a04a6e7e5ee388fb2a9e5bd)

docker-compose: Update to version 2.38.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit ce5dfd527babf2ce0145e7fa754004bc6fb39fc5)

docker-compose: Update to version 2.37.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.3

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 04493a8a8f49a2e1f9a922fd70bec77eeffb896e)

docker-compose: Update to version 2.37.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 3b2a63dae229f40c4f15a28ab06da36a9c420cfe)

docker-compose: Update to version 2.37.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 18557c85477678a504564b56ce4d4759e5ba600f)

docker-compose: Update to version 2.37.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit d1422dda41cee99f6ab9c0f302edbbdc95c247bc)

docker-compose: Update to version 2.36.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit e344fcc369f131eeb36afff0e5373b25be05fb84)

docker-compose: Update to version 2.36.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 4ac47971db43117517bf86cbdcb8440a73e1f2dd)

docker-compose: Update to version 2.36.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 7f0b4e4bf5ca9d460eeba415945a5205c1afd8e4)

docker-compose: Update to version 2.35.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.35.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 5af23930d36d75f2caad295983eef8be27ab1274)

docker-compose: Update to version 2.35.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.35.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit daa3161704782712a20dae2e3630fe6564cb06e7)

docker-compose: Update to version 2.34.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.34.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0129618ea65f012c9a30e0ee19b990dcbb2aba7e)

docker-compose: Update to version 2.33.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.33.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 034505d9698f14eb98e9b7d09f1fdc64e8032aaa)

docker-compose: Update to version 2.33.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.33.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0f9bcfa8d8f3117a2a4932e384791c0df343d790)

docker-compose: Update to version 2.32.4

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.3
https://github.com/docker/compose/releases/tag/v2.32.4

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 4055a2b0a5ac35c73f67b4e773b9d6748df5854d)

docker-compose: Update to version 2.32.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit b7974fb6d2500075c84f51bebf01a79646990ae4)

docker-compose: Update to version 2.32.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit de758f96decedca29cc3b8a0edf8e6aa287b81c8)

docker-compose: Update to version 2.32.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 95d201c2602fc94252794207bc6835d83006a871)

docker-compose: Update to version 2.31.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 278b9d1f63248b2673516b3e29442460ac8e2b4f)

docker-compose: Update to version 2.30.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 5220a425c6e3e58e915b10384eb9d9f8bc9a7fd5)

docker-compose: Update to version 2.30.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 6a1b0e8c9eed79de1cdd43998dd31b1c9886bc08)

atop: update to 2.12.0

2.11.0 will not compile with GCC15, so update to 2.12.0.
It also fixes CVE-2025-31160.

Fixes: #27085
Signed-off-by: Robert Marko <[email protected]>
(cherry picked from commit 90dfd41b51332e531c7e5bd2f473457d43724d40)

atop: fix compilation with full NLS

nls.mk is missing.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 8a0f28c78c698d1db2c9eb001821c8d89fd58bef)

mstflint: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 93d3840f1a9f34f3c215453f0808a2775bc354f7)

bluez-tools: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 59628aaceb589f4da2c7d3d846bca95f18d5c8dd)

python-incremental: Update to 24.7.2

To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <[email protected]>
(cherry picked from commit 63b3e10116e0b871f737e0b82c25e433ea4e0631)

rust: update to 1.87.0

Simplify the build invocation and reorder the target list to avoid
failures due the build process changes.

Signed-off-by: Luca Barbato <[email protected]>
(cherry picked from commit 95eef0fd580a411bd487ccf61a8d4bd25beab5c2)

yt-dlp: bump to 2025.07.21

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.07.21
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 17c6423e8fba2d16d3218450a4f3c4e8b1d5c85c)

microsocks: Update to 1.0.5

Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ab4b2995915d6f9f9f3d222f114652a17c585c94)

hev-socks5-tproxy: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit dba6e9b94c9ab06bc037656eebac8b8987d2b642)

hev-socks5-tunnel: update to 2.12.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.12.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 17998bb7b8efc7f6f00706db1496a251ef68ddee)

hev-socks5-server: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit a835b3afc10a07b7a63d81480bcf47babd0328ad)

dufs: lock cargo dependencies

The new version of tokio is not compatible with musl:

error[E0432]: unresolved import `tokio::net::TcpListener`
  --> src/main.rs:34:13
   |
34 | use tokio::{net::TcpListener, task::JoinHandle};
   |             ^^^^^^^^^^^^^^^^ no `TcpListener` in `net`

error[E0433]: failed to resolve: could not find `UnixListener` in `net`
   --> src/main.rs:156:44
    |
156 |                 let listener = tokio::net::UnixListener::bind(socket_path)
    |                                            ^^^^^^^^^^^^ could not find `UnixListener` in `net`

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1716415018d67a4e0038639a87d7f484d73f89b1)

dufs: do not reload firewall manually

This is no longer required after commit openwrt/procd@2e206dbe77ec
("service: add support for triggers on service/instance data changes").

Also remove unused 'name' field.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 12b50193b1572cd751f56ea1c79251b3d0fed011)

dufs: add new package

Dufs is a distinctive utility file server that supports static serving,
uploading, searching, accessing control, webdav...

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 2c8a641e0a396dd992bfda6f02234a2bdb5a6e5e)

cloudreve: Update to 4.3.0

Major update log: https://github.com/cloudreve/cloudreve/releases/tag/4.0.0

Updated assets build commands.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5bfd9558f47eda1d85e557a3b193e674124c8dff)

geoipupdate: Update to 7.1.1

Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9b158a7efdf14f139a0ac1fd61781a6d6f36e3a3)

cloudflared: Update to 2025.5.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit c26204d36a72eeb2276d6127b6361abf51a3637e)

cloudflared: Update to 2025.4.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 12b3f629109e3a5df898a48814dd12cb137ffcd7)

rclone: Update to 1.70.3

Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit e565e93ed8713ffb5768fd38b371eff1a04fb82b)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 083f4ce617e76f0727bb57e454ba9e17bb4a03af)

openlist: Update to 4.0.8

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.8

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 27d1a4bf3729a5036d59498e02366a5322eeb720)

btop: Update to 1.4.4

Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 062287375c17f29b59b0d6ac0fdccd0c397584ff)

btop: add patch to fix download/upload display

Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 99bc4798ed302620b07ef3a88820079ae5d095f1)

fsh: update to 4.10.0

Upstream changelog:
https://github.com/heiher/hev-fsh/releases/tag/4.10.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit c7fb6e96f8d819038681ee788f79639506aa6b2b)

natmap: update to 20250721

Upstream changelog:
https://github.com/heiher/natmap/releases/tag/20250721

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30e1d245ac37c387892a482fa6f68b460a33c785)

sing-box: Update to 1.11.15

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <[email protected]>
(cherry picked from commit b9ac3c5e7d6ffc0f1ee4fc84e166d7f27d807d30)

snort3: drop patches which were upstreamed

While backporting the latest version of snort3 into the OpenWrt 24.10,
it looks like that the patches folder was not pushed. Lets fix that.

Fixes: 46d6c499fed8bedba0ba0b4c3d5bb95a2d6d0bf5 ("snort3: update to 3.9.1.0")
Signed-off-by: Josef Schlehofer <[email protected]>

bind: bump to 9.20.11

Fix a possible assertion failure when stale-answer-client-timeout
is set to 0. (CVE-2025-40777)

Signed-off-by: Liu Yu <[email protected]>
(cherry picked from commit 283702c29f2980d9b5d9072a4a05333640c85a70)

sound/wavpack: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wavpack:wavpack

Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit ffd21c87622dd0c726e7436960d6a80083f88ded)

wavpack: update to version 5.8.1

"This dot release replaces 5.8.0 that was missing a couple CMake files
 in the tarball and the multicore detection did not compile on MacOS
 and other BSDs. Because the Windows executables were not affected I
 will not be updating them."

 --------------------------------
 Release 5.8.0 - January 27, 2025
 --------------------------------

  added: if present, use multiple cores by default (cli programs only)
  added: option --no-threads to force single-threading (cli programs)
  fixed: noise issue in hybrid mode (low bitrate / high sample rate)
  improved: all new DNS algorithm for better hybrid mode quality
  improved: "extra" option with multithreading and hybrid modes
  added: TSOC (Composer Sort) added to handled ID3v2 tags
  added: --no-overwrite command-line option to wvunpack
  fixed: handling of 24+ channels (CoolEdit / Audition)
  fixed: encoding raw audio from pipes (Windows only)
  fixed: handling of unpacked samples in WAV files
  fixed: rare command-line option parsing issue

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit ab6dcf82d691e572af0c1671e84e2467f9910104)

wavpack: add wavpack library for audio compression

Add WavPack audio compression/decompression library.

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit f9b8abf844956e45d4d51efb67e2379c378b954a)

ratelimit: update to Git HEAD (2025-06-15)

60405a069668 update Makefile
6713c02a68de define filter priority constant
125fff7fab6b disable verbose debug logging

Fixes: 3211b6295b8a9fc436f8b9ad381bb01f2ab7f8b8
Signed-off-by: Thibaut VARÈNE <[email protected]>
(cherry picked from commit 96ff9f43493015850a3a217760f22e6c4bf8e9b4)

ratelimit: add package

ratelimit is a stateful ubus interface to the HTB traffic shaper,
enabling per-client bandwidth limits assignment.

Signed-off-by: Thibaut VARÈNE <[email protected]>
(cherry picked from commit 3211b6295b8a9fc436f8b9ad381bb01f2ab7f8b8)

sudo: Fix license file

Signed-off-by: Jan Kardell <[email protected]>

sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>
(cherry picked from commit b153b6a034414532535c9dc0e4f4ede27861dc89)

bind: bump to 9.20.10

New notify-defer configuration option
Removed dependency on libsystemd
Fixed zone deletion issue (GL #5291)
Fixed zone refresh bug (GL #5307)

reset PKG_RELEASE to 1

Signed-off-by: Liu Yu <[email protected]>
Co-authored-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 43681b542062fa8cae309fbea2ec4a627f62d107)

snort3: remove gperftools dep for mips* and powerpc

Add conditional to disable gperftools-runtime depends for powerpc and mips due to inability
to compile introduced with 7345b73c3094e2aa2e085954a584ab15a9e3b939

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: John Audia <[email protected]>

snort3: update to 3.9.1.0

hangelog: https://github.com/snort3/snort3/releases/tag/3.9.1.0

% # snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.20
           Using Hyperscan version 5.4.2 2025-06-30
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.20

Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.20

Signed-off-by: John Audia <[email protected]>

python3: update to 3.11.10

Just a security bugfix.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit f2d5c861bd8ecc3fbfd7ae613de8e03f6b4166f3)

python3: Bump version 3.11 to 3.11.9

Also bumps setuptools to version 24.0

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Maintainer: Jeffery To <[email protected]>

Signed-off-by: Sean Khan <[email protected]>
(cherry picked from commit 49e3c330d4b5e17a740bc51b7ebbb9a42c67e505)

sox: Remove unmaintained package. See sox_ng replacement

Sourceforge project abandoned - last version was 14.4.2 2015-02-22
New source: https://codeberg.org/sox_ng

Signed-off-by: Ted Hess <[email protected]>
(cherry picked from commit bae138d392947395a540696d087e47935fc48644)

sox: Remove wavpack (explicitly) from build
     Remove myself as maintainer

Signed-off-by: Ted Hess <[email protected]>
(cherry picked from commit 76d5db585658614699aa8d613ee9e965a794638f)

gnupg2: update to 2.4.8

Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------

  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]

  * gpg: Fix a regression in 2.4.7 for generating a key from card.
    [T7457]

  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
    [T7506]

  * gpg: Fully implement the group key flag.  [rGedd01d8fc4]

  * gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
    work.  [rGeb2a90d343]

  * gpgsm: Do not return an error code when importing a certificate
    with an empty subject.  [T7171]

  * scd: Accept P15 cards with a zero-length label.  [rG18b4ebb28a]

  * keyboxd: Use case-insensitive search for mail addresses.  [T7576]

  * gpgconf: Fix reload and kill of keyboxd.  [T7569]

  * w32: Fix posssible lockup due to lost select results.
    [rG9448d01d61]

  Release-info: https://dev.gnupg.org/T7428

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit 3017332949f36be199b94255234e68af760b6e66)

gnupg2: update to version 2.4.7

A very long list of changes, see
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;f=NEWS;hb=7bdaf56479918806ea4013df0ba2dd24bbbb35d6

dirmngr now requires either GnuTLS or NTBTLS. Build against GnuTLS.
Add missing PACKAGE_MAINTAINER while at it.

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit a52e843d83d86c078cb130f907d6c75caef7f507)

zabbix: update to 7.0.12
also fix build error

Signed-off-by: Thlv Alivs <[email protected]>
(cherry picked from commit 7c268c3ac2cc3e3fb259c057036ec7032cc16395)

htop: update to 3.4.1

Changelog: https://github.com/htop-dev/htop/blob/main/ChangeLog#L1-L10

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>
(cherry picked from commit 151156c9cce4a28779f210136e07614e5a4c1bd1)

htop: tell which variant of ncurses to look for

Signed-off-by: Maxim Storchak <[email protected]>
(cherry picked from commit dc0b480a73b7f2386f3336f57af219359a84fcea)

htop: update to 3.4.0

Changelog: https://github.com/htop-dev/htop/compare/3.3.0...3.4.0

Build system: x86/64
Build-tested: bcm27xx/bcm2712, x86/64
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <[email protected]>
(cherry picked from commit 23aeff234131f9c53e74cf6d7fd4058023f312da)

socat: drop old patch

reverts
17cfc75b9874 ("socat: Fix compile with deprecated APIs disabled")

The package no longer relies on deprecated openssl functions.

Signed-off-by: Henning Schild <[email protected]>
(cherry picked from commit adeaf14c2d2ada01141bcc24af08f2b1576605cf)

socat: update to 1.8.0.3

reverting because upstream fixed it:
2650de468665 ("socat: fix compile error when ccache is enabled")

Closes: https://github.com/openwrt/packages/issues/26585
Signed-off-by: Henning Schild <[email protected]>
(cherry picked from commit 535ce8ea3fce2e637eda131916177fc4615b9247)

knot: update to version 3.4.7

Release notes: https://www.knot-dns.cz/2025-06-04-version-347.html

Signed-off-by: Jan Hák <[email protected]>
(cherry picked from commit a1d04258edb6f7da00987e6bb14501cd21c686ca)

stress: drop old unmaintained project

As a replacement for this project despite it was resurrected,
it is not maintained.

We added stress-ng [1], which is regularly updated and
gets new features and there is no reason to have two packages
in this repository.

[1] fba6bb94895e443830cfa28a1937cb7caf8dab8d ("stress-ng: add")

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 74aaf9c1317addec09c586e710c94caafed40b23)

sox_ng: Remove (lib)speex un-expected inclusion by discovery

Building sox_ng under certain environments inadvertantly tries to include Speex code.
This patch forces sox_ng to build without Speex codec references.

Signed-off-by: Ted Hess <[email protected]>
(cherry picked from commit 2521e8cf86fa7ec0102eaab3b713ec05f9b3174d)

sox_ng: Adding new package sox_ng v14.5.1.1

Upstream continued developement for SoX (abandoned project v14.4.x)
Added support for opus audio format and wavpack in new builds

Signed-off-by: Ted Hess <[email protected]>
(cherry picked from commit 88b086fe45c553967e6b594e19443ecacd8cbbef)

znc: update to 1.10.1

Update ZNC to latest release 1.10.1.

Changelogs:

* https://wiki.znc.in/ChangeLog/1.10.0
* https://wiki.znc.in/ChangeLog/1.10.1

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit 2f38de7fface18b4b417938a79108e6834027df6)

knot-resolver: disable jemalloc support

knot-resolver will attempt to use jemalloc if it's available.
Jemalloc was added to openwrt packages in PR: Add jemalloc and integrate into bind #26721 [1].
At this time, we would rather continue linking with the libc malloc,
so this PR disables jemalloc support explicitly in the knot-resolver build configuration.

[1] https://github.com/openwrt/packages/pull/26721#issuecomment-2973865778

Signed-off-by: Noah Meyerhans <[email protected]>
(cherry picked from commit 3413d5bd9c45e1f0cb53bf233bdb318434df62e0)

cryptsetup: update to 2.8.0

See https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit b965e893b76e68866e9b2c6b78b13bb14a3d1c84)

cryptsetup: update to version 2.7.5

Enable building cryptsetup-reencrypt, integritysetup and veritysetup,
add new binary packages for integritysetup and veritysetup.

Changes since version 2.7.4
~~~~~~~~~~~~~~~~~~~~~~~~~~~
* Fix possible online reencryption data corruption (only in 2.7.x).

  In some situations (initializing a suspended device-mapper device),
  cryptsetup disabled direct-io device access. This caused unsafe
  online reencryption operations that could lead to data corruption.
  The code now adds strict checks (and aborts the operation) and
  changes direct-io detection code to prevent data corruption.

* Fix a clang compilation error in SSH token plugin.

  As clang linker treats missing symbols as errors, the linker phase
  for the SSH token failed as the optional cryptsetup_token_buffer_free
  was not defined.

* Fix crypto backend initialization in crypt_format_luks2_opal API call.

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit befdf8a5b203386ab01e061b5e943406b9032d4c)

vim: update to 9.1

Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 48f3c800a749effb43d47deaa7df6d1b19709f86)

python-uci: update to version 0.10.3 + two patches

Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] https://gitlab.nic.cz/turris/pyuci/-/blob/240180b2946fdd1fd46c7f023f224acce5a55511/pyproject.toml#L29
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] https://github.com/openwrt/packages/blob/c94ab433caf345ebc6bef9a7174d1f65f676fc87/lang/python/python3-version.mk#L18
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] https://github.com/python/cpython/commit/c96ab19ae460911e40ffa502f1bf945ab6c53a2e

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit d457c26c0dbea4c7c9e5795f898fbcd98c257ff1)

pciutils: update to 3.14.0

Removed upstreamed: 110-gcc14.patch

Changelog: https://github.com/pciutils/pciutils/commit/6f6d842ea8e134ffdace3fcddaf49635b2e6048b

% lspci  --version
lspci version 3.14.0

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>
(cherry picked from commit 011acd9ec0fe4ebb9ece5cb359c6688fe0defd83)

luajit2: update to v2.1-20250529

For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250529

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 157d881e650488230a2f631e6aca37a964717c71)

luajit2: update to v2.1-20250117

See: https://github.com/openresty/luajit2/releases/tag/v2.1-20250117

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 1a05910478ceeaab10ca45cfdff887d902f14b42)

luajit2: update to v2.1-20241113

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 6df4c936d6f8968f4d864ec4da37cbea2bb72eed)