pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <[email protected]>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <[email protected]>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <[email protected]>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <[email protected]>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <[email protected]>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <[email protected]>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <[email protected]>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <[email protected]>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <[email protected]>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <[email protected]>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <[email protected]>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <[email protected]>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <[email protected]>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <[email protected]>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <[email protected]>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <[email protected]>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <[email protected]>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <[email protected]>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <[email protected]>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <[email protected]>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <[email protected]>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <[email protected]>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <[email protected]>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <[email protected]>

xfrpc: Revised the config file and adjusted the corresponding init file

Signed-off-by: Dengfeng Liu <[email protected]>

augeas: update to 1.14.1

Seems upstream now releases on GitHub.

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <[email protected]>

docker-compose: Update to version 2.27.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.27.1

Signed-off-by: Javier Marcet <[email protected]>

taglib: update to 2.0.1

Signed-off-by: Rosen Penev <[email protected]>

opus: update to 1.5.2

Signed-off-by: Rosen Penev <[email protected]>

upmpdcli: update to 1.8.11

Autotools is gone. meson is used now.

Signed-off-by: Rosen Penev <[email protected]>

libupnpp: update to 0.26.5

Autotools build is gone. meson is used now.

Signed-off-by: Rosen Penev <[email protected]>

libnpupnp: update to 6.1.3

Install static libraries too to InstallDev.

Signed-off-by: Rosen Penev <[email protected]>

libimobiledevice: update to 2024-05-20

Add patch to fix compilation with GCC14.

Signed-off-by: Rosen Penev <[email protected]>

Merge pull request #24231 from nmav/ocserv-fix-startup

ocserv: use a more neutral character for sed

acme-common: v1.2.0

Signed-off-by: Sergey Ponomarev <[email protected]>

Merge pull request #24123 from mhei/update-libgpiod-to-2.1.1-with-deps

Update libgpiod to 2.1.1 and update dependent packages

ocserv: use a more neutral character for sed

This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <[email protected]>

libshout: fix compilation with GCC14

Missing headers.

Signed-off-by: Rosen Penev <[email protected]>

ffmpeg: update to 5.1.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <[email protected]>

Merge pull request #24208 from BKPepe/msmtp

msmtp: update to version 1.8.26

klish: fix compilation with GCC14

Proper types are now needed.

Signed-off-by: Rosen Penev <[email protected]>

acme-common: fallback to deprecated use_staging if the staging option is not set

The use_staging option was deprecated in 9d2d8787cafdfb49339766a00ced422fa75cb883.
But it still has a bigger priority than the staging option.
This happens because config_get_bool returns 0 when the use_staging option wasn't set.
So the next check for the staging var emptiness is always false.

As the simplest fix, use the config_get staging that returns a plain string when the option is not set and if it's empty then fallback to the use_staging.

Once the use_staging option is removed we should get back to the config_get_bool staging.

Also use config_get_bool debug.

Signed-off-by: Sergey Ponomarev <[email protected]>

treewide: use config_get_bool instead of config_get enabled

The config_get_bool function parses not just the 1 but on/yes, true/false or enabled/disabled.

Signed-off-by: Sergey Ponomarev <[email protected]>

iperf3: update to 3.17.1

Changelogs since last release:
https://github.com/esnet/iperf/releases/tag/3.17
https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <[email protected]>

nextdns: Update to version 1.43.5

Signed-off-by: Olivier Poitrey <[email protected]>

cloudflared: Update to 2024.5.0

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

xray-core: update to 1.8.13

Signed-off-by: Tianling Shen <[email protected]>

yq: Update to 4.44.1

Signed-off-by: Tianling Shen <[email protected]>

treewide: fix incorrect hashes

It seems that PR #24113 introduced incorrect hashes for multiple packages.

So, lets fix all of them at once.

Signed-off-by: Robert Marko <[email protected]>

Revert "github: Improve Pull Request template"

This commit was accidently pushed to wrong remote and
it should be properly reviewed.

This reverts commit 6859b0a6f29bc06dd5726658efa91e866b7de1a9.

github: Improve Pull Request template

Signed-off-by: Josef Schlehofer <[email protected]>

Merge pull request #24057 from BKPepe/gitignore

Introduce .gitignore

nghttp3: drop maintainership

* switch back to using tar.gz archives, switch to xz was
  probably unnecessary and the previous problem building
  from the tagged release gz was probably cache-related
* drop maintainership

Signed-off-by: Stan Grishin <[email protected]>

nebula: drop maintainership

Signed-off-by: Stan Grishin <[email protected]>

msmtp: add test.sh

This file ensures that msmtp is run tested inside GitHub Actions
to help to ensure that this application is compiled and run
tested for OpenWrt master.

Signed-off-by: Josef Schlehofer <[email protected]>

msmtp: update to version 1.8.26

Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-26/

Signed-off-by: Josef Schlehofer <[email protected]>

openldap: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

cyrus-sasl: fix compilation with GCC14

Missing time.h header.

Signed-off-by: Rosen Penev <[email protected]>

tailscale: Update to 1.66.4

https://github.com/tailscale/tailscale/releases/v1.66.4
Signed-off-by: Zephyr Lykos <[email protected]>

sslh: update to v1.23.1

The sslh Makefile's default target "all" now also tries to compile a new version sslh-ev.
To disable its compilation the Build/Compile is overridden and to call directly "make sslh-select" or "make sslh-fork" depending on CONFIG_SSLH_SELECT.

Some changes from 001-configfile-fix.patch were applied to the upstream and we can remove them.
The only left is a notice "sslh command line arguments override the config".

Signed-off-by: Sergey Ponomarev <[email protected]>

dnsdist: update to 1.9.4

fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <[email protected]>

libedit: update to version 20240517-3.1

Signed-off-by: Jan Hák <[email protected]>

pdns-recursor: update to 5.0.5

Signed-off-by: Peter van Dijk <[email protected]>

sing-box: update to 1.8.14

Signed-off-by: brvphoenix <[email protected]>

speedtest-go: update to 1.7.7

Update speedtest-go version to 1.7.7

Signed-off-by: TeleostNaCl Dai <[email protected]>

liburing: Update to v2.6

- Updated download URL and hash

Signed-off-by: Christian Lachner <[email protected]>

Merge pull request #24188 from gladiac/haproxy-2.8.9

haproxy: update to v2.8.9

haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <[email protected]>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <[email protected]>

unixodbc: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

quota: fix compilation with GCC14

Header is needed.

Signed-off-by: Rosen Penev <[email protected]>

tac_plus: fix compilation with GCC14

Missing declaration and wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

nsutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

nvme-cli: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

Revert "net-snmp: fix compilation with GCC 14"

This reverts commit 7d398682941d79be1e3c2f83f6a57f163ef43a50.

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <[email protected]>

setserial: fix compilation with GCC14

Need to add explicit int.

Signed-off-by: Rosen Penev <[email protected]>

snort3: build against gperftools for more than x86

Other targets should be able to build against gperftools and
realize speed and efficiency gains.

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <[email protected]>

Merge pull request #24146 from TDT-AG/pr/20240513-rust

rust: fix remote filesystem issue

remserial: fix compilation with GCC14

Missing function declaration.

Signed-off-by: Rosen Penev <[email protected]>

rust: add patch to fix remote filesystem issue

If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <[email protected]>

udptunnel: fix compilation with GCC14

Missing int in main.

Signed-off-by: Rosen Penev <[email protected]>

libpfring: update to 8.6.1

Remove upstreamed patch, backport one, and switch one from downstream to
upstream patch.

Signed-off-by: Rosen Penev <[email protected]>

nfdump: update to 1.7.4

Add patch fixing compilation with GCC14.

Signed-off-by: Rosen Penev <[email protected]>

shareport-sync: add support to mbedtls3

updated various function calling as new version needed

Signed-off-by: Seo Suchan <[email protected]>

libcli: fix compilation with GCC14

GCC 14 does not like 1 as the second parameter to calloc.

Clean up definition to avoid using PKG_SOURCE_DATE and to just use
PKG_VERSION.

Signed-off-by: Rosen Penev <[email protected]>