uradvd: Update to 2025-08-16

Provide four new options:
--valid-lifetime
--preferred-lifetime
--max-router-adv-interval
--min-router-adv-interval

Signed-off-by: Jan-Niklas Burfeind <[email protected]>
(cherry picked from commit b2f14a5e8dc963a77d9292af7332af08973a9ba8)

lf: update to r36

https://github.com/gokcehan/lf/releases/tag/r36

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 0715dff919ffba355d35c9f911c9c31111ae9c70)

lf: add new package

https://github.com/gokcehan/lf

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 7e362a6e3581a0f0c6b12bc8f1f9e26d2ff7f78e)

sing-box: update to 1.12.3

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.3

Signed-off-by: Gregory Gullin <[email protected]>
(cherry picked from commit 002e0559a5f3339fd5232a6e63cc00ce6886b3ab)

nano: Update to 8.6

Update nano editor to version 8.6

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit 61f29f743529bfca26fbc81eb7f927bf7f3b6712)

owut: update to 2025.08.15

Bug fixes:
    efahl/owut@c6e75716d1a3 init: fix typo in file name
    efahl/owut@7f97ab67c2f5 examples: improve docs for writing pre-install scripts
Enhancements:
    efahl/owut@93f2b06b8882 owut: utilize upstream limits instead of hardcoded values
    efahl/owut@7a45c412fc96 owut: improve usability of 'dump' option
    efahl/owut@35720e369ac0 owut: improve age reporting

Signed-off-by: Eric Fahlgren <[email protected]>
(cherry picked from commit c79bed5fd542550024931fb809c2699937eca19f)

python-urllib3: update to 2.0.7

Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <[email protected]>
(cherry picked from commit 23646be59e7a3c15e60b1d210d975b647cd46dd9)

Revert "gping: lock cargo dependencies"

It's enabled by default now.
Make use of MAKE_PATH while at it.

This reverts commit 0118fb489659088565f948994d7c81d9f41a20a1.

Signed-off-by: Tianling Shen <[email protected]>

dufs: remove `--locked` flag

It's enabled by default now.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ee49f00287655b3512785c0b286cfaa185452dee)

rust: read build path from `{HOST_}MAKE_PATH`

Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 84cb850b7f967c2ed7ec4fdb55e8655a245f16dd)

rust: introduce `RUST_{HOST,PKG}_LOCKED` flag

Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1000e99185ec9faaa846aeef43ca3cf72f199d5d)

pbr: 1.1.8-36 bugfixes

- drop load_environment_flag and always load environment on start, making
  restart command great again
- store/restore existing jshn namespace when using json()
- remove unneeded sleepCount in is_wan_up()
- move updated README inside files/

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit 51686912e0f3552bacd8ef7cf980f270c2fa3ec4)

yt-dlp: bump to 2025.08.11

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.11
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 9318a5fefbec3cae39d328b02dc6a5ca1e1d3b7b)

golang: bump to 1.23.12

go1.23.12 (released 2025-08-06) includes security fixes to the
database/sql and os/exec packages, as well as bug fixes to the runtime.

Fixes: CVE-2025-47907
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.23.12+label%3ACherryPickApproved
Signed-off-by: George Sapkin <[email protected]>

lttng-tools: fix build with libxml 2.14

Backport a pending patch to fix build with libxml 2.14.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0ec95bd1f4dc9b829081bfd7910220d530517591)

pbr: update to 1.1.8-34

* bugfix: json init was destroying procd_triggers and screwing boot up
  fixes https://github.com/openwrt/packages/issues/27194
* improvement: explicit printf calls in get_text

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit a49f1e26101805537aabed56cdafbe0331aadbc5)

gping: lock cargo dependencies

The new version of dns-lookup failed to build with musl:

error[E0308]: mismatched types
   --> gping/src/main.rs:331:19
    |
331 |         Ok(ip) => ip,
    |                   ^^ expected `Vec<IpAddr>`, found opaque type
    |
   ::: /builder/shared-workdir/build/sdk/dl/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/dns-lookup-2.1.0/src/lookup.rs:17:46
    |
17  | pub fn lookup_host(host: &str) -> io::Result<impl Iterator<Item = IpAddr> + use<>> {
    |                                              ------------------------------------ the found opaque type
    |
    = note:   expected struct `Vec<IpAddr>`

Signed-off-by: Tianling Shen <[email protected]>

gping: update to 1.18.0

Signed-off-by: Jonas Jelonek <[email protected]>
(cherry picked from commit c3dcb6c152ae60523d18e405a802a99d000b1344)

sing-box: update to 1.12.0

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.0

Signed-off-by: Gregory Gullin <[email protected]>
(cherry picked from commit 654fa2f5f3842b85672bb1d9a277a438672bb347)

mariadb: update to 11.4.7

Use upstream solutions to local patches.

Remove test.sh as it's broken.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit cf6ef1ac5a706101739577a63fea07f9cea33072)

mariadb: fix liburing dependency

CMake is way too opertunistic. Avoid the dependency by manually handling
it.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 9d12a9618a09c2e614ec5b2220ad3c6127e643ef)

mariadb: update to 11.4.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit f640d92aa4327b6432ca4a67040c7f9fe3b468b4)

sqlite3: bump to 3.50.4

Changelog: https://sqlite.org/releaselog/3_49_2.html
Changelog: https://sqlite.org/releaselog/3_50_0.html
Changelog: https://sqlite.org/releaselog/3_50_1.html
Changelog: https://sqlite.org/releaselog/3_50_2.html
Changelog: https://sqlite.org/releaselog/3_50_3.html
Changelog: https://sqlite.org/releaselog/3_50_4.html
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 810341cf3303e2fdb3241e1aa20e4b213ff0f7d3)

sqlite3: require matching lib version in shell

Shell expects a matching library version to be installed. Specify a
matching version using EXTRA_DEPENDS.

Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 5b8e0fd4646ff3d7964d5ddbc9cabe98d3d3e6ce)

uspot: update to Git HEAD (2025-08-07)

e2e3c649ab80 README update
18e6bcc14cc2 uspot/portal: urldecode FORM POST data
bf6051dba822 uspot/handler-uam: accept /login endpoint
32273591d8d5 uspotfilter: provide peer_lookup answers only for known clients
b0aeef9973a9 README: clarify uam vs radius mode features
b7b0d0efb0e2 uspot: improve config documentation
bce68a97fad8 captive: rename to 'uspot'
da6ca713e15d uspot: client_remove(): pass device to ratelimit client_delete()
3ebfe262bfb1 uspot: remove unused radius_call() args
691d73aa00dc uspot: let radius_init() set all required payload members
be50a66b777f uspot: allow setting global bandwidth limits
4851ada4b0c0 uspot: send Called-Station-Id in Acct-On/Off requests
0974fc8d47ac Implement uspot-bpf, an eBPF traffic counter
e99809f97e34 introduce uspotbpf.uc
7f6f43883568 uspotbpf: work around ucode-mod-bpf bug
319e0c285afb uspot: hook traffic accounting
ccf3fa9b8e83 uspot: client_interim(): remove dead code
0e92cc9f6e75 uspotbpf: fix priority conflict with ratelimit
55d40a8794b6 uspot: implement traffic limiting
b05257e862cb uspot: implement swapio
e83f95081c21 uspot: radius_acct(): don't needlessly call uspotfilter
442cff773220 uspotfilter: cleanup unused API
7878d512cd21 handler-api: include 'seconds-remaining' only if not captive
cca6d218a6a7 handler-api: implement 'bytes-remaining'
e8cf3d08ac64 uspot: start(): ratelimit clearing is independent from RADIUS accounting
6d12a2da5b20 README update
bf6364cb61ea config: clarify units for acct_interval
8133b8cd215e uspot: implement state_get()/state_set()
094825fdfe68 radius-client: lowercase non-attribute JSON members
de70c588c2e3 radius-client: add error reporting
ebe9eac34f5b radius: add option for udp or tcp connection
d6b338d5d194 uspot: support RadSec with PSK authentication
53de77512159 uspot: validate config
d0578f740111 uspot: don't store debug data through uspotfilter
fe4fa5e8a25f uspot.init: rename DAS instance
bd1fbe481da3 README update
76a03155db44 uspot: add support for secondary RADIUS servers
694ff75f4fcc uspot: remove 'final_redirect_url' config option
a347454db08c handler: redirect UAM connected clients to the 'res=already' UAM url
0ea8f9bec545 handlers: simplify auth check
f69e1df8db0f Improve RADIUS error handling and reporting
34216b56b9ed src/CMakeLists: disable -Werror
8599a968877b Makefile: sync with OpenWrt repo

Update Makefile to reflect addition of the eBPF module and other changes
in the package

Signed-off-by: Thibaut VARÈNE <[email protected]>
(cherry picked from commit 3d76208b4dc65c9fd45d51c58e09300c77c33906)

aliyun-cli: add new package

The Alibaba Cloud CLI is a tool to manage and
use Alibaba Cloud resources through a command line interface

Signed-off-by: Bruce Chen <[email protected]>
(cherry picked from commit f6e404e96d0a263e94f3183de0bb5139a3dc1099)

kmod: fix build failure in install step over dirty build dir

When building kmod-32 package for the first time (clean build_dir), it
builds and installs fine. When building for 2nd time, sometimes
(probably some race condition?) it fails to build in install step with
following error:

  for tool in insmod lsmod rmmod depmod modprobe modinfo; do \
   ln -s kmod /tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/$tool; \
  done
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/insmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/lsmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/rmmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/depmod': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modprobe': File exists
  ln: failed to create symbolic link '/tmp/build_dir/target-aarch64_cortex-a73+neon-vfpv4_musl/kmod-32/ipkg-install/usr/bin/modinfo': File exists

Lets fix it by backporting upstream fix.

Fixes: #27171
Link: https://lore.kernel.org/r/[email protected]
Upstream-Status: Backport [https://github.com/kmod-project/kmod/commit/c5054b215089f9e3cdc9602232649c2b5b1de743]
Signed-off-by: Petr Štetiar <[email protected]>
(cherry picked from commit 79f78c0e77e61a20063db53f6cf8a12768036cdf)

inih: Update to r61

Release note: https://github.com/benhoyt/inih/releases/tag/r61

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit f6f3f4c5fdfb6fccd1520f63f9d281b971cb78ad)

openlist: Update to 4.1.0

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1f4064269fbf673952a23eb97843f49ee6ee8263)

openlist: Update to 4.0.9

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.9

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit dd6e44068f872a636f9cca296d97c498681e5de4)

rclone: backport ftp insecure TLS ciphers fix

Added config field to allow insecure TLS ciphers that were disabled
in Go 1.22.

Fixes: #27039
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 80e343dd434f53a4019f56920ac4a748e046fb9c)

golang: disable build for powerpc64

e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit c8ad05854dd46baf19bdf2b8de86a31da5b9e046)

adblock-fast: update to 1.1.4-4

Makefile:
  - bugfix: change references to melmac.net to melmac.ca

README:
  - add basic README with the link to full documentation

Config:
  - add heartbeat_domain
  - add heartbeat_sleep_timeout
  - add sanity_check
  - add update_config_sizes

Init Script:
  - a lot of visual output improvements, especially with verbosity=2
  - better output separation for different verbosity levels
  - removed unneeded runningErrorFile
  - bugfix: updated runningConfigFile
  - updated runningStatusFile and added runningStatusFileLock
  - moved append_url() higher up for better visibility
  - refactor force-redownload/restart on some config changes functionality
  - improve count_blocked_domains
  - add internal debug_log() for debugging functions where output is captured
  - unified all json add/get calls in the same formatting
  - major rework on json() to allow storing of error/warning messages as json objects
  - added some error/warning messages
  - renamed `cache()` function to `adb_file()` to better reflect functionality
  - added functionality to test the dnsmasq config before restarting dnsmasq with ad-blocking
  - added functionality to throw warnings if TLDs or leading-dot domains are discovered
    in the final block-list file (can be disabled by `sanity_check` option)
  - added functionality to test DNS resolution after resolver restart with `heartbeat_domain`
    for `heartbeat_sleep_timeout` seconds
  - added functionality to revert the resolver's config/ad-blocking if heartbeat domain cannot
    be resolved after resolver restart
  - added `ALLOWED_TMP` variable/file for better processing of external allow-lists
  - added debug output to log with the elapsed time for each step of processing
  - drastically improved final block-list optimization with the new awk script
  - minor other performance improvements
  - added check_tld/check_leading_dot CLI commands to show domains breaking sanity checks
  - added validate functions to triggers

Bugfixes:
  - fixes: https://github.com/openwrt/packages/issues/27146
  - supercedes: https://github.com/openwrt/packages/pull/27159

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit af75ccbb4f2704a020bfc21ecf8e69172fb1e90c)

hev-socks5-tunnel: update to 2.13.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.13.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 4c73e7f8bf9e80d556d456c0b95d29e61b766d4f)

pbr: update to 1.1.8-32

Makefile:
  - add SPDX-Identifier-License
  - update Copyright

README:
  - add basic README with the link to full documentation

Config:
  - add debug_dnsmasq
  - add procd_boot_trigger_delay

Init Script:
  - move extra_command calls high up for visibility
  - bump packageCompat to sync with luci app
  - implement support for debug_dnsmasq to dump dnsmasq debug into $packageDebugFile
  - create $runningStatusFile json-file allowing more verbose errors/warnings messages
  - replaced `state add` calls with json add calls to store errors/warnings messages
  - remove no longer needed errorSummary, warningSummary
  - ensure environment is only loaded once per run via $load_environment_flag
  - bugfix: update is_{host,hostname,domain,ipv4,mac_address} functions to properly sort policy entries
  - bugfix: change references to melmac.net to melmac.ca
  - add some new error/warning messages
  - add delay before service is started on boot via procd_boot_trigger_delay
  - bugfix: add logic to identify unknown policy entries instead of silently failing on them
  - store error/warning messages as json objects in ubus data for luci app
  - update load_validate_config with debug_dnsmasq and procd_boot_trigger_delay entries

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit 4b831c6dbf3b432dd44b4f07e06a379c679b6132)

banIP: update 1.5.6-7

* skip rdap requests/replies with placeholders for all IPv4/IPv6 addresses
* sanitize possible bogus config values, e.g. '/dev/null' as a directory
* change URL for beycyber feed

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit ac1076ef9530138e7c84d2858d5cf2b5d8c74e02)

php8: update to 8.3.24

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.24

Signed-off-by: Michael Heimpold <[email protected]>

openlist: Remove dependency on fuse

Fixes https://github.com/openwrt/packages/issues/27011

Signed-off-by: Liangbin Lian <[email protected]>
(cherry picked from commit 68c60fdc5d8b42b3179fc341e6033288f1aaad06)

docker-compose: Update to version 2.39.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.39.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit e3395ec43c4a51256a8e4c355e631b140ab86977)

docker-compose: Update to version 2.38.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 362b8cda741bf27008b67466c986c8f362ddd297)

docker-compose: Update to version 2.38.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0ea85424be8c9f6f1a04a6e7e5ee388fb2a9e5bd)

docker-compose: Update to version 2.38.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit ce5dfd527babf2ce0145e7fa754004bc6fb39fc5)

docker-compose: Update to version 2.37.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.3

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 04493a8a8f49a2e1f9a922fd70bec77eeffb896e)

docker-compose: Update to version 2.37.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 3b2a63dae229f40c4f15a28ab06da36a9c420cfe)

docker-compose: Update to version 2.37.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 18557c85477678a504564b56ce4d4759e5ba600f)

docker-compose: Update to version 2.37.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.37.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit d1422dda41cee99f6ab9c0f302edbbdc95c247bc)

docker-compose: Update to version 2.36.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit e344fcc369f131eeb36afff0e5373b25be05fb84)

docker-compose: Update to version 2.36.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 4ac47971db43117517bf86cbdcb8440a73e1f2dd)

docker-compose: Update to version 2.36.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.36.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 7f0b4e4bf5ca9d460eeba415945a5205c1afd8e4)

docker-compose: Update to version 2.35.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.35.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 5af23930d36d75f2caad295983eef8be27ab1274)

docker-compose: Update to version 2.35.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.35.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit daa3161704782712a20dae2e3630fe6564cb06e7)

docker-compose: Update to version 2.34.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.34.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0129618ea65f012c9a30e0ee19b990dcbb2aba7e)

docker-compose: Update to version 2.33.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.33.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 034505d9698f14eb98e9b7d09f1fdc64e8032aaa)

docker-compose: Update to version 2.33.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.33.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 0f9bcfa8d8f3117a2a4932e384791c0df343d790)

docker-compose: Update to version 2.32.4

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.3
https://github.com/docker/compose/releases/tag/v2.32.4

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 4055a2b0a5ac35c73f67b4e773b9d6748df5854d)

docker-compose: Update to version 2.32.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit b7974fb6d2500075c84f51bebf01a79646990ae4)

docker-compose: Update to version 2.32.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit de758f96decedca29cc3b8a0edf8e6aa287b81c8)

docker-compose: Update to version 2.32.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 95d201c2602fc94252794207bc6835d83006a871)

docker-compose: Update to version 2.31.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 278b9d1f63248b2673516b3e29442460ac8e2b4f)

docker-compose: Update to version 2.30.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 5220a425c6e3e58e915b10384eb9d9f8bc9a7fd5)

docker-compose: Update to version 2.30.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.2

Signed-off-by: Javier Marcet <[email protected]>
(cherry picked from commit 6a1b0e8c9eed79de1cdd43998dd31b1c9886bc08)

atop: update to 2.12.0

2.11.0 will not compile with GCC15, so update to 2.12.0.
It also fixes CVE-2025-31160.

Fixes: #27085
Signed-off-by: Robert Marko <[email protected]>
(cherry picked from commit 90dfd41b51332e531c7e5bd2f473457d43724d40)

atop: fix compilation with full NLS

nls.mk is missing.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 8a0f28c78c698d1db2c9eb001821c8d89fd58bef)

mstflint: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 93d3840f1a9f34f3c215453f0808a2775bc354f7)

bluez-tools: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 59628aaceb589f4da2c7d3d846bca95f18d5c8dd)

python-incremental: Update to 24.7.2

To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <[email protected]>
(cherry picked from commit 63b3e10116e0b871f737e0b82c25e433ea4e0631)

rust: update to 1.87.0

Simplify the build invocation and reorder the target list to avoid
failures due the build process changes.

Signed-off-by: Luca Barbato <[email protected]>
(cherry picked from commit 95eef0fd580a411bd487ccf61a8d4bd25beab5c2)

yt-dlp: bump to 2025.07.21

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.07.21
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 17c6423e8fba2d16d3218450a4f3c4e8b1d5c85c)

microsocks: Update to 1.0.5

Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ab4b2995915d6f9f9f3d222f114652a17c585c94)

hev-socks5-tproxy: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit dba6e9b94c9ab06bc037656eebac8b8987d2b642)

hev-socks5-tunnel: update to 2.12.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.12.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 17998bb7b8efc7f6f00706db1496a251ef68ddee)

hev-socks5-server: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit a835b3afc10a07b7a63d81480bcf47babd0328ad)

dufs: lock cargo dependencies

The new version of tokio is not compatible with musl:

error[E0432]: unresolved import `tokio::net::TcpListener`
  --> src/main.rs:34:13
   |
34 | use tokio::{net::TcpListener, task::JoinHandle};
   |             ^^^^^^^^^^^^^^^^ no `TcpListener` in `net`

error[E0433]: failed to resolve: could not find `UnixListener` in `net`
   --> src/main.rs:156:44
    |
156 |                 let listener = tokio::net::UnixListener::bind(socket_path)
    |                                            ^^^^^^^^^^^^ could not find `UnixListener` in `net`

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1716415018d67a4e0038639a87d7f484d73f89b1)

dufs: do not reload firewall manually

This is no longer required after commit openwrt/procd@2e206dbe77ec
("service: add support for triggers on service/instance data changes").

Also remove unused 'name' field.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 12b50193b1572cd751f56ea1c79251b3d0fed011)

dufs: add new package

Dufs is a distinctive utility file server that supports static serving,
uploading, searching, accessing control, webdav...

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 2c8a641e0a396dd992bfda6f02234a2bdb5a6e5e)

cloudreve: Update to 4.3.0

Major update log: https://github.com/cloudreve/cloudreve/releases/tag/4.0.0

Updated assets build commands.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5bfd9558f47eda1d85e557a3b193e674124c8dff)

geoipupdate: Update to 7.1.1

Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9b158a7efdf14f139a0ac1fd61781a6d6f36e3a3)

cloudflared: Update to 2025.5.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit c26204d36a72eeb2276d6127b6361abf51a3637e)

cloudflared: Update to 2025.4.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 12b3f629109e3a5df898a48814dd12cb137ffcd7)

rclone: Update to 1.70.3

Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit e565e93ed8713ffb5768fd38b371eff1a04fb82b)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 083f4ce617e76f0727bb57e454ba9e17bb4a03af)

openlist: Update to 4.0.8

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.8

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 27d1a4bf3729a5036d59498e02366a5322eeb720)

btop: Update to 1.4.4

Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 062287375c17f29b59b0d6ac0fdccd0c397584ff)

btop: add patch to fix download/upload display

Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 99bc4798ed302620b07ef3a88820079ae5d095f1)

fsh: update to 4.10.0

Upstream changelog:
https://github.com/heiher/hev-fsh/releases/tag/4.10.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit c7fb6e96f8d819038681ee788f79639506aa6b2b)

natmap: update to 20250721

Upstream changelog:
https://github.com/heiher/natmap/releases/tag/20250721

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30e1d245ac37c387892a482fa6f68b460a33c785)

sing-box: Update to 1.11.15

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <[email protected]>
(cherry picked from commit b9ac3c5e7d6ffc0f1ee4fc84e166d7f27d807d30)

snort3: drop patches which were upstreamed

While backporting the latest version of snort3 into the OpenWrt 24.10,
it looks like that the patches folder was not pushed. Lets fix that.

Fixes: 46d6c499fed8bedba0ba0b4c3d5bb95a2d6d0bf5 ("snort3: update to 3.9.1.0")
Signed-off-by: Josef Schlehofer <[email protected]>

bind: bump to 9.20.11

Fix a possible assertion failure when stale-answer-client-timeout
is set to 0. (CVE-2025-40777)

Signed-off-by: Liu Yu <[email protected]>
(cherry picked from commit 283702c29f2980d9b5d9072a4a05333640c85a70)

sound/wavpack: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wavpack:wavpack

Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit ffd21c87622dd0c726e7436960d6a80083f88ded)

wavpack: update to version 5.8.1

"This dot release replaces 5.8.0 that was missing a couple CMake files
 in the tarball and the multicore detection did not compile on MacOS
 and other BSDs. Because the Windows executables were not affected I
 will not be updating them."

 --------------------------------
 Release 5.8.0 - January 27, 2025
 --------------------------------

  added: if present, use multiple cores by default (cli programs only)
  added: option --no-threads to force single-threading (cli programs)
  fixed: noise issue in hybrid mode (low bitrate / high sample rate)
  improved: all new DNS algorithm for better hybrid mode quality
  improved: "extra" option with multithreading and hybrid modes
  added: TSOC (Composer Sort) added to handled ID3v2 tags
  added: --no-overwrite command-line option to wvunpack
  fixed: handling of 24+ channels (CoolEdit / Audition)
  fixed: encoding raw audio from pipes (Windows only)
  fixed: handling of unpacked samples in WAV files
  fixed: rare command-line option parsing issue

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit ab6dcf82d691e572af0c1671e84e2467f9910104)

wavpack: add wavpack library for audio compression

Add WavPack audio compression/decompression library.

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit f9b8abf844956e45d4d51efb67e2379c378b954a)

ratelimit: update to Git HEAD (2025-06-15)

60405a069668 update Makefile
6713c02a68de define filter priority constant
125fff7fab6b disable verbose debug logging

Fixes: 3211b6295b8a9fc436f8b9ad381bb01f2ab7f8b8
Signed-off-by: Thibaut VARÈNE <[email protected]>
(cherry picked from commit 96ff9f43493015850a3a217760f22e6c4bf8e9b4)

ratelimit: add package

ratelimit is a stateful ubus interface to the HTB traffic shaper,
enabling per-client bandwidth limits assignment.

Signed-off-by: Thibaut VARÈNE <[email protected]>
(cherry picked from commit 3211b6295b8a9fc436f8b9ad381bb01f2ab7f8b8)

sudo: Fix license file

Signed-off-by: Jan Kardell <[email protected]>

sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>
(cherry picked from commit b153b6a034414532535c9dc0e4f4ede27861dc89)

bind: bump to 9.20.10

New notify-defer configuration option
Removed dependency on libsystemd
Fixed zone deletion issue (GL #5291)
Fixed zone refresh bug (GL #5307)

reset PKG_RELEASE to 1

Signed-off-by: Liu Yu <[email protected]>
Co-authored-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 43681b542062fa8cae309fbea2ec4a627f62d107)

snort3: remove gperftools dep for mips* and powerpc

Add conditional to disable gperftools-runtime depends for powerpc and mips due to inability
to compile introduced with 7345b73c3094e2aa2e085954a584ab15a9e3b939

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: John Audia <[email protected]>

snort3: update to 3.9.1.0

hangelog: https://github.com/snort3/snort3/releases/tag/3.9.1.0

% # snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.20
           Using Hyperscan version 5.4.2 2025-06-30
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.20

Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.20

Signed-off-by: John Audia <[email protected]>