adblock: update 4.4.2-4

* fixed f_uci function
* fixed f_switch function, reported in the turris forum

Signed-off-by: Dirk Brenken <[email protected]>

c-ares: bump to 1.34.6

This is a security release.

Security:
* CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5

Signed-off-by: Hirokazu MORIKAWA <[email protected]>
(cherry picked from commit ebdb9536a9a0063f92efd63b529d7c9bd0d838c4)

irqbalance: update to 1.9.5

Update irqbalance to version 1.9.5

* drop the original local meson patch, as meson is now properly adopted
  by upstream. But patch meson.build to keep glib2 library statically
  linked in order to avoid a dependency and indirect size increase.

* disable unnecessary functions via meson features settings
  (capng, numa, systemd, thermal, ui)

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit 65d83de7f8b6969f1aa04895ddf20cc7ba690248)

sqlite3: bump to 3.51.1

Changelog: https://sqlite.org/releaselog/3_51_1.html
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 944166fa47cf7b2d7f177ebeaa22c30134831fe2)

sqlite3: set correct SPDX license identifiers

Replace boilerplate license header with a SPDX license identifier.

Set correct package license to blessing.

Fixes: 9236e4f ("sqlite3: import 3.7.12.1 (2012-05-22) from packages")
Link: https://spdx.org/licenses/blessing.html
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 7ff8ef148f51e52296131eb394383f2740f304b1)

zoneinfo: updated to 2025c release

Updated package version and file hashes.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 19c662ac71aefdd0df2a0fec10bf151e74135594)
[solved the https change conflict]

owut: update to 2025.12.01

Bug fixes:
    efahl/owut@4482dd097f48 owut: handle changes in a package's version number format

Signed-off-by: Eric Fahlgren <[email protected]>
(cherry picked from commit 76953dba6b1de3abad0eab6debb9129b044abcec)

unbound: update to 1.24.2

Fixes: Possible Domain Hijacking via promiscuous NS Records (CVE-2025-11411)
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2
Upstream commit f6269baa605d31859f28770e01a24e3677e5f82c
https://github.com/NLnetLabs/unbound/commit/f6269baa605d31859f28770e01a24e3677e5f82c

Signed-off-by: Goetz Goerisch <[email protected]>
(cherry picked from commit 0ca33e71e99275e77884590006bcfc704cbcfec7)
Signed-off-by: Goetz Goerisch <[email protected]>

update to 1.2.0-r6

Signed-off-by: Stan Grishin <[email protected]>

python-ruamel-yaml: update to version 0.18.16

Release notes can be found here:
https://yaml.dev/doc/ruamel-yaml/

Wheel is compiled as ruamel_yaml (underscore), but on pypi it is ruamel.yaml (dot),
it failed on buildbot, so add slight tweak.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 974e8404c64689f222d505ec8a7b3f519d4adfba)

python-automat: bump to version 25.4.16

Patches can be dropped.
They don't seem to be needed anymore.
The 'visualize' parts seem to be optional.

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 974dc9753c852a1c37b2ce1276e55235b5a3b31f)

python-unidecode: drop unmaintained package

It looks like based on opened PRs [1],
there is no official support for Python 3.12+.

Unfortunately, this project is still using setup.py,
which is deprecated and no longer supported.
These days project metadata are stored in pyproject.toml
according to PEP 621.

Also, this project does not follow PEP625 as their
wheel name is in uppercase and it should be in lowercase.

[1] https://github.com/avian2/unidecode/pulls
[2] https://peps.python.org/pep-0621/

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 09951a9cfdf47b560b5bd00db1dd92ceffd5724b)

python-yaml: update to version 6.0.3

Release notes:
https://github.com/yaml/pyyaml/releases/tag/6.0.3

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 63aa7856bf33894a15c76b060dd2280e16ae2674)

python-flask-login: update to version 0.6.3

Release notes:
https://github.com/maxcountryman/flask-login/releases/tag/0.6.3

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 0655f4ed3b9d349d05d85e28bb5f2659ab90f041)

python-flask-seasurf: update to 2.0.0

Changes can be found here:
https://github.com/maxcountryman/flask-seasurf/tree/2.0.0

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit f02c368344e331b972113c7505b06baf3fefd980)

python-flask-socketio: update to version 5.5.1

Release notes:
https://github.com/miguelgrinberg/Flask-SocketIO/releases/tag/v5.5.1

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit ff9c11a9d7cd0f562dc0e8143e39bba1086cb00c)

python-flask-session: update to version 0.8.0

Release notes:
https://flask-session.readthedocs.io/en/latest/changes.html

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 03303c362d79bc16ee1918d871427737898b982f)

python-pysocks: remove outdated and not maintained package

The latest commit in https://github.com/Anorov/PySocks
is from 2019, it looks outdated and not maintained.

It does not follow PEP 625.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 95fe4bf3327b316c9184f4f17e09266e979ecf17)

python-parsley: drop package

This looks like it is not maintained anymore.
The last commit in the repository [1] is from 2017,
and the last tarball uploaded on PyPI is from 2015.

That tarball does not follow PEP625, because the
wheel and tarball begins with uppercase, it should be
in lowercase and as well it is still using setup.py.

Python these days is using pyproject.toml.

[1] https://github.com/washort/parsley

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 598dc276f755bd468c574b8203b3410cfbfc8ab8)

python-zope-interface: update to 8.0.1

Release notes:
https://github.com/zopefoundation/zope.interface/blob/8.0.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit c4bcff285b4f828443cd525b3bf78ff207649790)

python-zope-event: update to version 6.1

Release notes:
https://github.com/zopefoundation/zope.event/blob/6.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <[email protected]>
Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 9218d6ee4f62d4804639108657ce0b26e1cdb3bd)

tor: update to 0.4.8.21 stable

Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.21/ChangeLog

Signed-off-by: Rui Salvaterra <[email protected]>
(cherry picked from commit ac4f614dfedf2b5e33fefea2fa15f3c9bd8aabb8)

tor: add myself as package maintainer

Also remove Peter Wagner (inactive) and Hauke Mehrtens (asked to be removed, in
private conversation).

Signed-off-by: Rui Salvaterra <[email protected]>
(cherry picked from commit a863fe3d7adf0256daa8180ad3840ea6f8ffa817)

tor: update to 0.4.8.20 stable

Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.20/ChangeLog

Signed-off-by: Rui Salvaterra <[email protected]>
(cherry picked from commit 87ed4d7d195af0b25af9a6eb308a7e1cf769f224)

webui-aria2: remove package

It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <[email protected]>
(cherry picked from commit 9d6d44487f7b3645d9d93dfacc03eecd7a7dcb7c)

haproxy: update to v3.0.12

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

django: update to version 5.1.14

Includes many CVEs fixes e.g.
- CVE-2025-64458
- CVE-2025-64459
- CVE-2025-59681
- CVE-2025-59682
and others while bumping this from version 5.1.7

Release notes:
https://docs.djangoproject.com/en/5.2/releases/5.1.14/

Signed-off-by: Josef Schlehofer <[email protected]>

exim: update to version 4.99

See https://code.exim.org/exim/exim/releases/tag/exim-4.99

Signed-off-by: Daniel Golle <[email protected]>
(cherry picked from commit aed8ca7bd92e7cc5dc81ed718591789131c6f32b)

exim: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>
(cherry picked from commit 14aed6a41b84ea1adafac885fce2131e40dc18d9)

kea: bump to 2.6.4

Create kea state directories with mode 0750 per restrictions added in 2.6.3

Refresh patches

Fixes the following CVEs:

* CVE-2025-32803: Change the umask to no group write and no other access
  at the entry of Kea server/agent binaries
* CVE-2025-32801: kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and kea-ctrl-agent will
  now only load hook libraries from the default installation directory

Full upstream changelogs are available at:

https://downloads.isc.org/isc/kea/2.6.1/Kea-2.6.1-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.2/Kea-2.6.2-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.4/Kea-2.6.4-ReleaseNotes.txt

Signed-off-by: Noah Meyerhans <[email protected]>

httping: fix compilation with full NLS

-lintl is needed.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 824b2c09a0e8cebab7a604046376979cfcac7a5a)

owut: update to 2025.11.16

Enhancements:
    efahl/owut@af42b8afe35c owut: minor improvement on logging API
    efahl/owut@223d6e64b719 owut: add 'clean slate' option to reset to default packages
    efahl/owut@3a35acb7a09a owut: typos and wording fixes
    efahl/owut@eba5101ba780 owut: report counts of failed package builds
    efahl/owut@365eed1f26c2 owut: use library glob

Signed-off-by: Eric Fahlgren <[email protected]>
(cherry picked from commit 1545e6510f2e43a58a8e347e34ea6862466efa0b)

travelmate: update 2.2.1-6

- rework the iw device detection in the scan function
- remove any limits from the radio selection
- control the reverse radio processing order with a separate option 'trm_revradio'
- tweak a few (debug) log statements
- LuCI updates (separate commit)
- readme update

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 1a1c0d07a9e70d781eb75ca7f99f4f64430ad26c)

nano: update to version 8.7

Update to version 8.7

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit d543522dbe7a470c80e431395011605d68f05ac0)

netbird: update to 0.59.12

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.12

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 5dccbddf10a3cbf51318f82d2fded5d48db88050)

netbird: update to 0.58.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.58.2

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 48b26e44634d821efd63aee1b46f422dbf6d1463)

netbird: update to 0.57.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.57.1

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 60ee4858160e945a5505de511c34144b4f3a8b87)

netbird: update to 0.55.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.55.1

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 0bb7df85b855e35c8388122afc962054117d1c70)

netbird: update to 0.53.0 with config fix

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.53.0

Update init file to include `NB_CONFIG="/etc/netbird/config.json"`
variable, ensuring configuration compatibility as before (fixes issue
introduced by profiles feature in 0.52.2). Existing configurations remain
compatible.

Note: license for some components (`management`, `relay`, `signal`) changed
to **AGPLv3**. These components aren't packaged for OpenWrt, so there's no
immediate effect, but record the change for future reference.

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit 7c3e0c1e5b804989b8e4d4310fec240cd43c9776)

netbird: update to 0.52.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.52.2

`netbird` now supports profiles [1]. The configuration file has been
moved from `/etc/netbird/config.json` to `/var/lib/netbird/`. The
migration is handled by `netbird` itself.

However, in OpenWrt, the `/var` directory is a symbolic link to
`/tmp`, which is a temporary directory. This can result in
configuration loss after rebooting or flashing a new image. This
issue will be fixed in the next release, 0.53.0.
**I reported this behavior upstream [2].**

[1]: https://docs.netbird.io/how-to/profiles
[2]: https://github.com/netbirdio/netbird/issues/4322

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit f06a83c461810296615433a4ad31743d68c162a1)

netbird: update to 0.51.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.51.2

Signed-off-by: Wesley Gimenes <[email protected]>
(cherry picked from commit eb3165b80c70176b078a4b9f1c396851f25e54fe)

tree: bump to 2.2.1

Changelog: https://github.com/Old-Man-Programmer/tree/blob/master/CHANGES

Signed-off-by: John Audia <[email protected]>
(cherry picked from commit b939b3e79392835b1c20865e61add02e8d9f2054)

nano: set nano as default EDITOR for nano-plus/full

Set nano as the default EDITOR via /etc/profile.d for those apps
that respect the variable. Only for nano-plus and nano-full variants.

Suggested-by: Anthony Sepa <[email protected]>
Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit d4f6c9c322e491dbf881774ac8e33487872dd00c)

patch: update to v2.8

Delete patches already upstream.

Signed-off-by: Russell Senior <[email protected]>
(cherry picked from commit f17c283cdad0a9d33dfc8caa8994fb36e66fbf52)

check-autorelease-deprecation: drop workflow

Drop the workflow since the setting has been deprecated over three years
ago.

Link: https://github.com/openwrt/packages/pull/27799#issuecomment-3506689211
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit f08c7993bd08965f17eded2da8581191cb144bad)

hev-socks5-server: update to 2.11.0

Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.11.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit ea11a81f6b6e0a755398fe6c68a377a4def838af)

hev-socks5-tproxy: update to 2.10.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.10.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit a3acb2f4c3e8b41dd878b90f112c167d89386893)

hev-socks5-tunnel: update to 2.14.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.14.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 4f84f78b4dd05f5163ba89fc12a671c08cbb20a3)

sqlite3: bump to 3.51.0

Changelog: https://sqlite.org/releaselog/3_51_0.html
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 9a62f4f67b611e375e6ef34e37826af9a3a35ff3)

travelmate: update 2.2.1-5

- fix a cornercase issue in the scanning function with hidden uplinks

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit f9c132b3c53f81cbfecae8a245fca5d415495e5a)

btop: Update to 1.4.5

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.5

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 728dc6dd3a5e5a0efab96a2faf4daa2361a5d791)

travelmate: update 2.2.1-4

- fix a possible race condition in the scan function
- limit the max. signal strength to 100
- cosmetics

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit b8486bd711b930f5ff38751eef165030be5d19c7)

pdns-recursor: security update to 5.1.8

includes fix for CVE-2025-30192 (from 5.1.6)
includes fixes for CVE-2025-59023 and CVE-2025-59024 (from 5.1.8)

Signed-off-by: Peter van Dijk <[email protected]>

sing-box: update to 1.12.12

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.12

Signed-off-by: Anton P. <[email protected]>
(cherry picked from commit 3b802d28fefe197cfa6569d7d28acc11e05822e9)

openwisp-config: upgrade to 1.2.0

Upgrades openwisp-config package to 1.2.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 61a81ccc7eeb17f9caff619e6e3e884705dcd9ea)

openwisp-monitoring: upgrade to 0.3.0

Upgraded openwisp-monitoring package to 0.3.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 74e6bcc011199e9c7f26ca0e28a29db9ed13bac5)

php8: update to 8.3.27

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.27

Signed-off-by: Michael Heimpold <[email protected]>

python-setuptools: update to version 80.9.0

Release notes:
https://setuptools.pypa.io/en/stable/history.html#v80-9-0

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 9bf59d5f67f50fa1e823cf1e9d3b34b9deefb618)

python-wheel: update to 0.45.1

Release notes:
https://github.com/pypa/wheel/releases/tag/0.45.1

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 182156cfadfcc422511e210b66bab99bc1545dea)

strongswan: add build dependency for python and explicitly use python3

Before:
checking for python... /myworkingdir/build/staging_dir/host/bin/python
checking for python version... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python platform... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python extension module directory (pyexecdir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.

After:
checking for python version... 3.11
checking for python platform... darwin
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... ${PYTHON_PREFIX}/lib/python3.11/site-packages
checking for python extension module directory (pyexecdir)... ${PYTHON_EXEC_PREFIX}/lib/python3.11/site-packages

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit dcb010bb430567590406ae41d04914b7f3707fb1)

python-calver: update to version 2025.10.20

Fixes:
 SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!

        ********************************************************************************
        Please consider removing the following classifiers in favor of a SPDX license expression:

        License :: OSI Approved :: Apache Software License

        See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
        ********************************************************************************

!!
  self._finalize_license_expression()

Release notes:
https://github.com/di/calver/releases/tag/2025.10.20

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 7f64f6c0cf8f341ceff3f761905183185a36bd5f)

python-cython: update to version 3.1.5

Fixes:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
   ^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
 ^^^^^^^^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
  ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 7f233be4ce527b3f7436a51c14b164e2f64e72f5)

bigclown-gateway: backport pending patch to fix JSON dumps

Pull request:
https://redirect.github.com/hardwario/bch-gateway/pull/20

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 5a9763deab78ced957fd8db9ec45d0ddcf217890)

bigclown-gateway: update to version 1.17.0

Release notes:
https://github.com/hardwario/bch-gateway/releases/tag/v1.17.0

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 15121d222b4c059cf9deb827b31916b431fc1b2a)

python-markupsafe: update to version 3.0.3

Release notes:
https://github.com/pallets/markupsafe/releases/tag/3.0.3

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 69539619b62333760c6bcc52d5fb7a3d30e8286b)

python-uci: drop patches due to newer setuptools

These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit f4395c5d3128e5982b5cf192c0e841a3cda28221)

python3: update to version 3.11.4

In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] https://redirect.github.com/buildroot/buildroot/commit/b37e4a5f56182c5b8e4ffce433eb652174a19da6
[2] https://peps.python.org/pep-0632/
[3] https://redirect.github.com/pypa/setuptools/commit/88eb8cc66f8762e37ec78913c07ccf3e3dba05e1

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit ef509da52bd470a12e259b735fa5b1c052f49bc9)

umurmur: Use example config and add own init script

Files such as config file and init script related to OpenWrt
were removed in upstream [1]. Config file was same as umurmur.conf.example,
thus use it and init script, we need to ship our own. Add a simple one.

[1] https://github.com/umurmur/umurmur/commit/209edb5c887e5a5d3ab2c95ab4a8aeb8c1e6e8f3

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit b03e655bf02ec0eaf6a2bdbe5b1829d5e0b3710b)

umurmur: move config file to its default location

This was changed in version 0.3.1 [1]

Fixes initial start of umurmur:
```
root@turris:~# umurmurd
Error in config file /etc/umurmur/umurmur.conf line 0: file I/O error
```

And also while running help of umurmurd, the defailt location is /etc/umurmur/umurmur.conf
```
Usage: umurmurd [-d] [-r] [-h] [-p <pidfile>] [-t] [-c <conf file>] [-a <addr>] [-b <port>]
       -c <conf file> - Specify configuration file (default /etc/umurmur/umurmur.conf)
```
[1] https://github.com/umurmur/umurmur/commit/4f3ed41357bb6fcb7afddd5343b59cfef54d65a4

Fixes: c4a23ca99662e67c8b6f5b8bad76d93fc2381ea0 ("umurmur: update to version 0.3.1")
Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 3d6be64ea309bd2a6f961f11ae5e36aa4343db10)

syslog-ng: add dependency for ivykis

Replace embedded ivykis with a separate package to improve
dependency management and enable library reuse.

The ivykis library now properly supports io_uring when
CONFIG_KERNEL_IO_URING is enabled.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 8fcf45d05aea3de53163bd25099a4ea08f060c5f)

ivykis: add new package

Libivykis, an asynchronous I/O readiness notification library.
This library is required by syslog-ng and potentially other packages
that need event-driven I/O handling.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit c92d1206905f0b781fed78f94673c52822cf1fce)

python-build: update to version 1.3.0

Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 4ba2c1487c49f8315806f69e0a53d894880f1bbb)

python-flit-core: update to version 3.12.0

Release notes:
https://github.com/pypa/flit/blob/5714d1f78fb9b344c997cb866c44bb9506b8ca41/doc/history.rst#version-312

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit caed169831609ec97d405ce74e1e567f43fe2177)

owut: update to 2025.10.24

Bug fixes:
    efahl/owut@07453922aa2f owut: create uclient singleton to minimize memory usage
    efahl/owut@f0735878918c owut: fix bug in version number parsing

Signed-off-by: Eric Fahlgren <[email protected]>
(cherry picked from commit 904ad4a24c2b02b9496a6ec737a5ffb1a5eee798)

fx: update to 39.0.1

update fx from version 36.0.3 to 39.0.1

Signed-off-by: Fabian Lipken <[email protected]>
(cherry picked from commit 08a431f446dc34a9b83bfbec1149742587651f48)
Signed-off-by: Gregory Gullin <[email protected]>

fx: update to 36.0.3

This commit updates fx to version 36.0.3

For more details, please refer to release details:
https://github.com/antonmedv/fx/releases/tag/36.0.3

Signed-off-by: Fabian Lipken <[email protected]>
(cherry picked from commit 8fff19135e8800852e6d5b78be1bfff350f1cb61)
Signed-off-by: Gregory Gullin <[email protected]>

fx: update to 36.0.2

Signed-off-by: Fabian Lipken <[email protected]>
(cherry picked from commit 4632f4553fde07c84e62808fecb474c6aae23e65)
Signed-off-by: Gregory Gullin <[email protected]>

fx: update to 36.0.1

Signed-off-by: Fabian Lipken <[email protected]>
(cherry picked from commit d8a233f90a4006e4cc130a8e70b715e7781ac54a)
Signed-off-by: Gregory Gullin <[email protected]>

cloudreve: Update to 4.9.2

> Breaking change:
> If you are using AlibabaCloud OSS storage policy, please go to the
> admin dashboard after upgrading, edit each OSS storage policy,
> fill in the correct Region in Basic info and save it, otherwise
> the storage policy will not continue to work.

Changelog:
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.0
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.1
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 480d1493232229219c08d7598c4f54f72ff916f4)

cloudreve: Update to 4.8.0

Release note:
- https://github.com/cloudreve/cloudreve/releases/tag/4.7.0
- https://github.com/cloudreve/cloudreve/releases/tag/4.8.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5bd131c39d1903db27f3c0eaf5ac45c36aa53cd1)

cloudreve: Update to 4.6.0

Changelogs:
  - https://github.com/cloudreve/cloudreve/releases/tag/4.5.0
  - https://github.com/cloudreve/cloudreve/releases/tag/4.6.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 11b0340c5cd5b2af75ad09fb8d031ca07c5be795)

cloudreve: Update to 4.4.1

Release note: https://github.com/cloudreve/cloudreve/releases/tag/4.4.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1dc51297e5cdccfddab24cbfa6239cb16fb03515)

cloudreve: Update to 4.4.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 77783f9706241f8c85b5e956183e8b155c45b419)

dos2unix: Update to 7.5.3

2025-10-14: Version 7.5.3

  * Fix: Exit with non-zero code if the conversion is aborted
    due to a binary file.
  * Fix: Exit with zero code when an unicode conversion error
    occurs in quiet mode.
  * Updated Brazilian Portuguese, Catalan, Chinese (traditional), Dutch,
    Friulian, Georgian, and Serbian translations.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 49dbbf0dc98fbb7f5c35bd4110ac6cd1aea600fe)

openlist: Update to 4.1.5

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.5

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d93d55d28abefc3edf05f83c6a21b4fd51c722a4)

bind: bump to 9.20.15

Fixes the following security issues:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778 Address various spoofing attacks.
- CVE-2025-40780 Cache-poisoning due to weak pseudo-random number
  generator.

The complete list of changes from version 9.20.11 is available in the
upstream changelog at
https://ftp.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <[email protected]>
(cherry picked from commit 59465b95b847c2925993b2472d08af6f7571d770)

travelmate: update 2.2.1-3

- fix minor log issues
- restore old, efficient log viewer (in LuCI)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit cf40213423d3fe043bf873f745fd3e99c6ed5ee0)

lf: update to r38

https://github.com/gokcehan/lf/releases/tag/r38

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 1fd9f95a37c19c44e98e98bda17b0e31b3076d91)
Signed-off-by: Gregory Gullin <[email protected]>

python-hatch-requirements-txt: bump to 0.4.1

Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit f182a567aa8eccda99d2309e4cb302bb898d4ecd)

syslog-ng: update to version 4.10.2

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.2

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit b5d9b7cf9d33ce3284c4d618e365ae8c34d82c68)

strongswan: preserve changed configuration files

After reinstalling the packages with the preserved configuration files
after a sysupgrade, the reinstalled package config files overwrite what
is on disk rather than being placed as conf-opkg. Defining these config
files will preserve them appropriately.

Signed-off-by: Joel Low <[email protected]>
(cherry picked from commit 03088536db1a494d285fc092a52511e9ae217e90)

strongswan: mark UCI plugin as broken

UCI plugin in strongswan has been broken for years, and now its causing
strongswan to fail compilation.

So, instead of the whole strongswan package to be failing and missing from
feeds simply make UCI plug depend on @BROKEN.

Signed-off-by: Robert Marko <[email protected]>
(cherry picked from commit a8c89a0c77b71c1699c57b7c6d70b034a271d678)

multi-arch-test-build: run it only after the Formality check succeeds

Most of the time, when people contribute to the repository for the first time
 (or after a longer break), the multi-arch-test-build passes, but the
formality check fails and requires the contributor to make some changes.

This creates unnecessary load on the CI/CD, since the multi-arch-test-build
runs again even though it already passed, while other PRs are waiting for a runner.
Hopefully, this change will help decrease the waiting time.

Proposed changes:

- Run the formality check first, and only trigger the package tests afterwards.
This can be done using needs: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idneeds

- Merge formal.yml into multi-arch-test-build.yml so that needs can be used.

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 4474f539bb737d5c333ea58c4b9176857fd77e14)

python3-host.mk: disable pip --no-binary on macOS

For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <[email protected]>
(cherry picked from commit d798ccce9afb38b12443b6e7a4b7373fc4ef5f17)

python-networkx: update to 3.5

Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <[email protected]>
(cherry picked from commit ac839af473ad5030b8cbb5ac624b97a93105dd00)

yt-dlp: update to version 2025.9.26

Release notes:
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.23
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.26

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit c7253f97a3ff8fdc5a0877fd790dd4314e83f659)

gzip: update to version 1.14

Add TARGET_CFLAGS += -std=gnu17
to fix following error discovered by CI/CD:
2025-09-30T23:53:47.3168066Z In file included from gzip.c:66:
2025-09-30T23:53:47.3189341Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3190258Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3190760Z       |                                  ^~~~
2025-09-30T23:53:47.3191259Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3191864Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3192411Z       |                                       ^~~~
2025-09-30T23:53:47.3192942Z gzip.c:135:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3193587Z   135 | DECLARE(uch BUFFER_ALIGNED, inbuf,  INBUFSIZ +INBUF_EXTRA);
2025-09-30T23:53:47.3194137Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3194752Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3195442Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3195880Z       |                                  ^~~~
2025-09-30T23:53:47.3196330Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3197297Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3197829Z       |                                       ^~~~
2025-09-30T23:53:47.3198342Z gzip.c:136:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3199113Z   136 | DECLARE(uch BUFFER_ALIGNED, outbuf, OUTBUFSIZ+OUTBUF_EXTRA);
2025-09-30T23:53:47.3199957Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3200589Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3201250Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3201688Z       |                                  ^~~~
2025-09-30T23:53:47.3202128Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3202665Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3203150Z       |                                       ^~~~
2025-09-30T23:53:47.3203642Z gzip.c:138:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3204203Z   138 | DECLARE(uch BUFFER_ALIGNED, window, 2L*WSIZE);
2025-09-30T23:53:47.3204684Z       |             ^~~~~~~~~~~~~~

- Release announcement:
https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00007.html

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 3bf64e39b281b9736fbbd6acf52c18e6d595f50c)

tor: update to version 0.4.8.18

Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.18/ChangeLog

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit 9bfc5a2a74d08cab7b9f3e3cf12783939bfa1291)

python-trove-classifiers: bump to 2025.9.11.17

Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit d856cb45e35377c5de9ca0f30283528a6565fef1)

mhz: update to latest version

Update mhz to latest version to include new calibration features.

Signed-off-by: Robert Marko <[email protected]>
(cherry picked from commit 7ef10e0364e41a94599c0423f3c3062e067082c5)