feed/packages.git
4 months agoopenlist: Update to 4.1.0
Tianling Shen [Tue, 5 Aug 2025 06:50:04 +0000 (14:50 +0800)]
openlist: Update to 4.1.0

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.0

Signed-off-by: Tianling Shen <[email protected]>
4 months agoxray-core: Update to 25.8.3
Tianling Shen [Tue, 5 Aug 2025 06:49:41 +0000 (14:49 +0800)]
xray-core: Update to 25.8.3

Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.8.3

Signed-off-by: Tianling Shen <[email protected]>
4 months agoddns-scripts: fix getting IP address via web in get_current_ip()
Qian Suyao [Thu, 10 Jul 2025 15:05:58 +0000 (23:05 +0800)]
ddns-scripts: fix getting IP address via web in get_current_ip()

Add back the regex searching for valid IP address when getting IP
address via web.

Fixes: 9cdd1a1660b6 ("ddns-scripts: refactor get_current_ip()")
Signed-off-by: Qian Suyao <[email protected]>
4 months agobanIP: update 1.5.6-7
Dirk Brenken [Mon, 4 Aug 2025 18:53:01 +0000 (20:53 +0200)]
banIP: update 1.5.6-7

* skip rdap requests/replies with placeholders for all IPv4/IPv6 addresses
* sanitize possible bogus config values, e.g. '/dev/null' as a directory
* change URL for beycyber feed

Signed-off-by: Dirk Brenken <[email protected]>
4 months agoknot: update to version 3.4.8
Jan Hák [Mon, 4 Aug 2025 13:28:11 +0000 (15:28 +0200)]
knot: update to version 3.4.8

Release notes: https://www.knot-dns.cz/2025-07-29-version-348.html

Signed-off-by: Jan Hák <[email protected]>
4 months agomwan3: remove Aaron Goodman as PKG_MAINTAINER
Florian Eckert [Mon, 4 Aug 2025 06:54:49 +0000 (08:54 +0200)]
mwan3: remove Aaron Goodman as PKG_MAINTAINER

I received an email from Aaron Goodman saying that he is no longer working
with mwan3 and asking me to remove him from the PKG_MAINTAINER list.

Signed-off-by: Florian Eckert <[email protected]>
4 months agoknot-resolver: update DNSSEC root trust anchors
Vladimír Čunát [Thu, 31 Jul 2025 06:55:46 +0000 (08:55 +0200)]
knot-resolver: update DNSSEC root trust anchors

This is long overdue.  Honestly I dislike that packaging
is hardcoding it this way.  It's error-prone, as we can see.
Knot Resolver source does contain the up to date anchors,
and it also (optionally) installs them.  Still, I'm not up to
larger changes in OpenWrt packaging right now.

Signed-off-by: Vladimír Čunát <[email protected]>
4 months agoknot-resolver: update to version 5.7.6
Vladimír Čunát [Thu, 31 Jul 2025 06:53:26 +0000 (08:53 +0200)]
knot-resolver: update to version 5.7.6

Knot Resolver 5.7.6 (2025-07-17)
================================

Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
  Someone controlling the DNS traffic might be able
  to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
  Someone controlling the DNS traffic will most likely be able
  to trigger this crash intentionally and too often.

Knot Resolver 5.7.5 (2025-04-24)
================================

Security
--------
- DoS: fix unconfirmed crashes with the line below (!1683)
  [system] requirement "h && h->end > h->begin" failed in queue_pop_impl

Improvements
------------
- tests: disable problematic config.http test (#925, !1678)
- validator: accept a confusing NODATA proof with insecure delegation (!1678)

Bugfixes
--------
- daemon/http: DoH stream got stuck after returning an error code (!1652)
- stats: request latency was very incorrect in some cases (!1678)

Signed-off-by: Vladimír Čunát <[email protected]>
4 months agogolang: disable build for powerpc64
Tianling Shen [Fri, 18 Jul 2025 14:06:41 +0000 (22:06 +0800)]
golang: disable build for powerpc64

e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <[email protected]>
4 months agoclixon: Update to 7.5.0
Philip Prindeville [Sun, 3 Aug 2025 18:45:58 +0000 (12:45 -0600)]
clixon: Update to 7.5.0

Several new features including NACM support for mountpoints.  See
CHANGELOG.md

Signed-off-by: Philip Prindeville <[email protected]>
4 months agocligen: Update to 7.5.0
Philip Prindeville [Sun, 3 Aug 2025 18:44:23 +0000 (12:44 -0600)]
cligen: Update to 7.5.0

"const" patches still haven't been upstreamed.

Signed-off-by: Philip Prindeville <[email protected]>
4 months agomwan3: handle missing interface gracefully
Etienne Champetier [Sun, 3 Aug 2025 01:50:07 +0000 (21:50 -0400)]
mwan3: handle missing interface gracefully

`ubus.call(sprintf('network.interface.%s', ifname), 'status', {})`
returns null if the interface `ifname` doesn't exists (yet).

For pppoe interfaces using `option ipv6 auto`, a virtual interface suffixed `_6`
is automatically created once the connection is established,
but until then it doesn't exists.

Fixes: 6423781254b9f3e52c6102fb2cbcd9f99f2445a3 ("mwan3: reimplement rpcd plugin using ucode")
Signed-off-by: Etienne Champetier <[email protected]>
4 months agomariadb: update to 11.4.7
Rosen Penev [Sun, 4 May 2025 01:19:50 +0000 (18:19 -0700)]
mariadb: update to 11.4.7

Use upstream solutions to local patches.

Remove test.sh as it's broken.

Signed-off-by: Rosen Penev <[email protected]>
4 months agohev-socks5-tunnel: update to 2.13.0
Ray Wang [Sun, 3 Aug 2025 03:00:31 +0000 (11:00 +0800)]
hev-socks5-tunnel: update to 2.13.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.13.0

Signed-off-by: Ray Wang <[email protected]>
4 months agorpcsvc-proto: Update to 1.4.4
Tianling Shen [Sat, 2 Aug 2025 09:28:27 +0000 (17:28 +0800)]
rpcsvc-proto: Update to 1.4.4

Remove unneeded autoreconf.

Signed-off-by: Tianling Shen <[email protected]>
4 months agomodemmanager: change permissions on dbus file
John Audia [Fri, 1 Aug 2025 20:05:50 +0000 (16:05 -0400)]
modemmanager: change permissions on dbus file

/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf needs to be 644
so that it can be read to prevent the following since dbus runs as an
unprivileged user:

dbus-daemon[12465]: Encountered error 'Failed to open "/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf": Permission denied' while parsing '/etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agoscreen: update to 5.0.1
Rosen Penev [Sun, 27 Jul 2025 18:09:18 +0000 (11:09 -0700)]
screen: update to 5.0.1

Fixes compilation with GCC15.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <[email protected]>
4 months agodbus: use pid file owned by dbus
John Audia [Fri, 1 Aug 2025 14:12:05 +0000 (10:12 -0400)]
dbus: use pid file owned by dbus

Switching to the dbus user in edc5a534 also needed to redefine the
location of dbus.pid into the directory under its ownership. This
commit fixes that omission.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agoadblock-fast: update to 1.1.4-4
Stan Grishin [Fri, 1 Aug 2025 01:20:52 +0000 (01:20 +0000)]
adblock-fast: update to 1.1.4-4

Makefile:
  - bugfix: change references to melmac.net to melmac.ca

README:
  - add basic README with the link to full documentation

Config:
  - add heartbeat_domain
  - add heartbeat_sleep_timeout
  - add sanity_check
  - add update_config_sizes

Init Script:
  - a lot of visual output improvements, especially with verbosity=2
  - better output separation for different verbosity levels
  - removed unneeded runningErrorFile
  - bugfix: updated runningConfigFile
  - updated runningStatusFile and added runningStatusFileLock
  - moved append_url() higher up for better visibility
  - refactor force-redownload/restart on some config changes functionality
  - improve count_blocked_domains
  - add internal debug_log() for debugging functions where output is captured
  - unified all json add/get calls in the same formatting
  - major rework on json() to allow storing of error/warning messages as json objects
  - added some error/warning messages
  - renamed `cache()` function to `adb_file()` to better reflect functionality
  - added functionality to test the dnsmasq config before restarting dnsmasq with ad-blocking
  - added functionality to throw warnings if TLDs or leading-dot domains are discovered
    in the final block-list file (can be disabled by `sanity_check` option)
  - added functionality to test DNS resolution after resolver restart with `heartbeat_domain`
    for `heartbeat_sleep_timeout` seconds
  - added functionality to revert the resolver's config/ad-blocking if heartbeat domain cannot
    be resolved after resolver restart
  - added `ALLOWED_TMP` variable/file for better processing of external allow-lists
  - added debug output to log with the elapsed time for each step of processing
  - drastically improved final block-list optimization with the new awk script
  - minor other performance improvements
  - added check_tld/check_leading_dot CLI commands to show domains breaking sanity checks
  - added validate functions to triggers

Signed-off-by: Stan Grishin <[email protected]>
4 months agopbr: update to 1.1.8-32
Stan Grishin [Fri, 1 Aug 2025 01:04:35 +0000 (01:04 +0000)]
pbr: update to 1.1.8-32

Makefile:
  - add SPDX-Identifier-License
  - update Copyright

README:
  - add basic README with the link to full documentation

Config:
  - add debug_dnsmasq
  - add procd_boot_trigger_delay

Init Script:
  - move extra_command calls high up for visibility
  - bump packageCompat to sync with luci app
  - implement support for debug_dnsmasq to dump dnsmasq debug into $packageDebugFile
  - create $runningStatusFile json-file allowing more verbose errors/warnings messages
  - replaced `state add` calls with json add calls to store errors/warnings messages
  - remove no longer needed errorSummary, warningSummary
  - ensure environment is only loaded once per run via $load_environment_flag
  - bugfix: update is_{host,hostname,domain,ipv4,mac_address} functions to properly sort policy entries
  - bugfix: change references to melmac.net to melmac.ca
  - add some new error/warning messages
  - add delay before service is started on boot via procd_boot_trigger_delay
  - bugfix: add logic to identify unknown policy entries instead of silently failing on them
  - store error/warning messages as json objects in ubus data for luci app
  - update load_validate_config with debug_dnsmasq and procd_boot_trigger_delay entries

Signed-off-by: Stan Grishin <[email protected]>
4 months agomwan3: reimplement rpcd plugin using ucode
Etienne Champetier [Fri, 27 Jun 2025 23:18:55 +0000 (19:18 -0400)]
mwan3: reimplement rpcd plugin using ucode

On my "test" router (5 wans, 2 tracking ips per wan), before any rework,
prometheus-node-exporter-lua mwan3 average scraping time was 1230ms
(scraping only the interfaces), after optimizing the shell version,
average time was down to 485ms, with ucode we are now at 41ms.

Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: remove call to network_is_up
Etienne Champetier [Fri, 27 Jun 2025 23:18:54 +0000 (19:18 -0400)]
mwan3: remove call to network_is_up

It calls jsonfilter but can be avoided as we know
network is up if uptime is present.

Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: return via variable
Etienne Champetier [Fri, 27 Jun 2025 23:18:52 +0000 (19:18 -0400)]
mwan3: return via variable

Using $(...) to call an internal function causes a fork().
Pass the name of the return variable as first parameter,
and write to it using 'export -n'.

Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: replace $(cat ..) with readfile
Etienne Champetier [Fri, 27 Jun 2025 23:18:51 +0000 (19:18 -0400)]
mwan3: replace $(cat ..) with readfile

Remove a fork+exec

Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: remove pgrep usage
Etienne Champetier [Fri, 27 Jun 2025 23:18:49 +0000 (19:18 -0400)]
mwan3: remove pgrep usage

pgrep is pretty slow as it needs to read all /proc/*/cmdline
or /proc/*/status, and it's called twice per wan.
Add STARTED and PID files to speedup mwan3_get_mwan3track_status().

Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: add new readfile function to speedup variable read from file
Etienne Champetier [Fri, 11 Jul 2025 21:23:28 +0000 (17:23 -0400)]
mwan3: add new readfile function to speedup variable read from file

This is a preparation for adding an utility function readfile() to read
directly to a variable. Using '$(cat ...)' causes a fork/execve which is
extremely slow just to read '~2' chars.

(commit message from Florian Eckert)
Signed-off-by: Etienne Champetier <[email protected]>
4 months agomwan3: simplify how we kill subprocs
Etienne Champetier [Fri, 27 Jun 2025 23:18:47 +0000 (19:18 -0400)]
mwan3: simplify how we kill subprocs

Just use 'job -p' to list the subprocesses currently running,
so we do not needed the global variables TRACK_PID and SLEEP_PID anymore

Signed-off-by: Etienne Champetier <[email protected]>
4 months agoopenlist: Remove dependency on fuse
Liangbin Lian [Fri, 1 Aug 2025 03:40:20 +0000 (11:40 +0800)]
openlist: Remove dependency on fuse

Fixes https://github.com/openwrt/packages/issues/27011

Signed-off-by: Liangbin Lian <[email protected]>
4 months agonfs-kernel-server: fix build
John Audia [Tue, 15 Jul 2025 14:05:43 +0000 (10:05 -0400)]
nfs-kernel-server: fix build

Add nls.mk and patch to avoid the build ending in an error:
In function 'write_table',
    inlined from 'write_tables' at rpc_tblout.c:73:4,
    inlined from 't_output.constprop' at rpc_main.c:841:3:
rpc_tblout.c:91:26: error: '%s' directive writing likely 1 or more bytes into a region of size between 0 and 99 [-Werror=format-overflow=]
   91 |       s_print (progvers, "%s_%s",
      |                          ^
rpc_tblout.c:91:26: note: assuming directive output of 1 byte
In function 'sprintf',
    inlined from 'write_table' at rpc_tblout.c:91:7,
    inlined from 'write_tables' at rpc_tblout.c:73:4,
    inlined from 't_output.constprop' at rpc_main.c:841:3:
/scratch/union/staging_dir/toolchain-x86_64_gcc-15.1.0_glibc/include/bits/stdio2.h:30:10: note: '__builtin___sprintf_chk' output 2 or more bytes (assuming 102) into a destination of size 100
   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
      |          ^
lto1: some warnings being treated as errors
make[6]: *** [/scratch/union/tmp/ccHfYNRX.mk:2: /scratch/union/tmp/ccudJcWZ.ltrans0.ltrans.o] Error 1
lto-wrapper: fatal error: make returned 2 exit status
compilation terminated.
mold: fatal: lto-wrapper failed

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Co-developed-by: Rosen Penev <[email protected]>
Signed-off-by: John Audia <[email protected]>
4 months agoidevicerestore: update to the latest git version
Georgi Valkov [Tue, 29 Jul 2025 16:53:32 +0000 (19:53 +0300)]
idevicerestore: update to the latest git version

change log
https://github.com/libimobiledevice/idevicerestore/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agoideviceinstaller: update to the latest git version
Georgi Valkov [Tue, 29 Jul 2025 16:40:23 +0000 (19:40 +0300)]
ideviceinstaller: update to the latest git version

change log
https://github.com/libimobiledevice/ideviceinstaller/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agoifuse: update to the latest git version
Georgi Valkov [Wed, 11 Jun 2025 12:11:17 +0000 (15:11 +0300)]
ifuse: update to the latest git version

dependency changed from fuse-utils to fuse3-utils

change log
https://github.com/libimobiledevice/ifuse/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibideviceactivation: update to the latest git version
Georgi Valkov [Tue, 29 Jul 2025 15:39:59 +0000 (18:39 +0300)]
libideviceactivation: update to the latest git version

change log
https://github.com/libimobiledevice/libideviceactivation/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agousbmuxd: update to the latest git version
Georgi Valkov [Tue, 29 Jul 2025 15:32:21 +0000 (18:32 +0300)]
usbmuxd: update to the latest git version

change log
https://github.com/libimobiledevice/usbmuxd/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibimobiledevice: update to the latest git version
Georgi Valkov [Tue, 29 Jul 2025 15:22:36 +0000 (18:22 +0300)]
libimobiledevice: update to the latest git version

Fix initial device enumeration

change log
https://github.com/libimobiledevice/libimobiledevice/commits/master/

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibusbmuxd: update to 2.1.1
Georgi Valkov [Wed, 11 Jun 2025 10:05:09 +0000 (13:05 +0300)]
libusbmuxd: update to 2.1.1

change log
https://github.com/libimobiledevice/libusbmuxd/releases/tag/2.1.1

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibimobiledevice-glue: update to 1.3.2
Georgi Valkov [Wed, 11 Jun 2025 09:59:34 +0000 (12:59 +0300)]
libimobiledevice-glue: update to 1.3.2

change log
https://github.com/libimobiledevice/libimobiledevice-glue/releases/tag/1.3.2

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibtatsu: update to 1.0.5
Georgi Valkov [Wed, 11 Jun 2025 10:54:51 +0000 (13:54 +0300)]
libtatsu: update to 1.0.5

change log
https://github.com/libimobiledevice/libtatsu/releases/tag/1.0.5

Signed-off-by: Georgi Valkov <[email protected]>
4 months agolibplist: update to 2.7.0
Georgi Valkov [Wed, 11 Jun 2025 09:49:52 +0000 (12:49 +0300)]
libplist: update to 2.7.0

Fix segmentation fault when calling plist_sort() on an empty dictionary

change log
https://github.com/libimobiledevice/libplist/releases/tag/2.7.0

Signed-off-by: Georgi Valkov <[email protected]>
4 months agodbus: run as regular user rather than as root
John Audia [Wed, 23 Jul 2025 00:05:48 +0000 (20:05 -0400)]
dbus: run as regular user rather than as root

Running as a dedicated dbus users is better from both a security and an
isolation perspective than running as root.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agotailscale: update to 1.86.2
Sandro Jäckel [Wed, 30 Jul 2025 16:39:46 +0000 (18:39 +0200)]
tailscale: update to 1.86.2

Changelog: https://tailscale.com/changelog#2025-07-24
Changelog: https://tailscale.com/changelog#2025-07-29

Signed-off-by: Sandro Jäckel <[email protected]>
4 months agoyq: Update to 4.47.1
Tianling Shen [Thu, 31 Jul 2025 05:59:39 +0000 (13:59 +0800)]
yq: Update to 4.47.1

Release note: https://github.com/mikefarah/yq/releases/tag/v4.47.1

Signed-off-by: Tianling Shen <[email protected]>
4 months agoopenlist: Update to 4.0.9
Tianling Shen [Thu, 31 Jul 2025 05:59:21 +0000 (13:59 +0800)]
openlist: Update to 4.0.9

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.9

Signed-off-by: Tianling Shen <[email protected]>
4 months agofuse3: update to version 3.17.3
Georgi Valkov [Tue, 29 Jul 2025 14:30:09 +0000 (17:30 +0300)]
fuse3: update to version 3.17.3

replace old patch with the one accepted upstream

change log
- more conn->want / conn->want_ext conversion fixes
- Fix feature detection for close_range
- Avoid possible double unmount on FUSE_DESTROY

Signed-off-by: Georgi Valkov <[email protected]>
4 months agodbus: update to 1.16.2
John Audia [Wed, 23 Jul 2025 11:47:00 +0000 (07:47 -0400)]
dbus: update to 1.16.2

Update the 1.16.2 and adapt Makefile to meson build system.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agolibsodium: update to 1.0.20
Georgi Valkov [Wed, 30 Jul 2025 07:12:42 +0000 (10:12 +0300)]
libsodium: update to 1.0.20

Change log
[1] https://github.com/jedisct1/libsodium/blob/master/ChangeLog

Signed-off-by: Georgi Valkov <[email protected]>
4 months agopython: adjust with glibc and libcrypt-compat
Vladimir Ermakov [Sun, 20 Jul 2025 09:21:25 +0000 (11:21 +0200)]
python: adjust with glibc and libcrypt-compat

Fix #27012

Signed-off-by: Vladimir Ermakov <[email protected]>
4 months agolibsodium: fix building with GCC 15.1
Lovin Yarn [Wed, 30 Jul 2025 11:56:13 +0000 (19:56 +0800)]
libsodium: fix building with GCC 15.1

Force the default C version to -std=gnu17,

to fix the following build error:

<command-line>: error: unknown type name 'thread_local'; did you mean 'pthread_rwlock_t'?
randombytes/internal/randombytes_internal_random.c:132:8: note: in expansion of macro 'TLS'
  132 | static TLS InternalRandom stream = {
      |        ^~~
randombytes/internal/randombytes_internal_random.c:132:27: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'stream'
  132 | static TLS InternalRandom stream = {
      |                           ^~~~~~

[1] https://github.com/openwrt/openwrt/pull/16522#issuecomment-3134756935
[2] https://github.com/openwrt/packages/issues/27122

Tested-by: Georgi Valkov <[email protected]>
Signed-off-by: Lovin Yarn <[email protected]>
4 months agomqttled: remove package
Josef Schlehofer [Wed, 30 Jul 2025 09:52:03 +0000 (11:52 +0200)]
mqttled: remove package

Development of this package is stalled [1],
it uses python3-netifaces [2], but that repository
was archived in 20211 [3], because there does not
seems to be replacement according to this issue:
https://github.com/trevortrevor/mqttled/issues/3

Let's remove it.

[1] https://github.com/trevortrevor/mqttled/
[2] https://github.com/trevortrevor/mqttled/issues/3
[3] https://github.com/al45tair/netifaces

Signed-off-by: Josef Schlehofer <[email protected]>
4 months agopython-incremental: Update to 24.7.2
Richard Muzik [Mon, 21 Jul 2025 13:57:32 +0000 (15:57 +0200)]
python-incremental: Update to 24.7.2

To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <[email protected]>
4 months agoufp: remove not needed bpf-headers in PKG_BUILD_DEPENDS
Florian Eckert [Tue, 22 Jul 2025 12:59:55 +0000 (14:59 +0200)]
ufp: remove not needed bpf-headers in PKG_BUILD_DEPENDS

The package 'ufp' does not need bpf-headers.

Signed-off-by: Florian Eckert <[email protected]>
4 months agoopenappid: update to 20230609
John Audia [Sun, 20 Jul 2025 08:02:32 +0000 (04:02 -0400)]
openappid: update to 20230609

Version bump to latest.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agoiperf3: update to 3.19.1
John Audia [Tue, 29 Jul 2025 18:55:25 +0000 (14:55 -0400)]
iperf3: update to 3.19.1

Update to latest upstream release.

Changelog: https://github.com/esnet/iperf/releases/tag/3.19.1

Relevant security fixes: E-2025-54349, ESNET-SECADV-2025-0003, CVE-2025-54350,
ESNET-SECADV-2025-0002, VE-2025-54351, ESNET-SECADV-2025-0001

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agorclone: backport ftp insecure TLS ciphers fix
Tianling Shen [Tue, 29 Jul 2025 09:19:49 +0000 (17:19 +0800)]
rclone: backport ftp insecure TLS ciphers fix

Added config field to allow insecure TLS ciphers that were disabled
in Go 1.22.

Fixes: #27039
Signed-off-by: Tianling Shen <[email protected]>
4 months agocrun: fix compilation with GCC 15
Rosen Penev [Sat, 12 Jul 2025 03:19:09 +0000 (20:19 -0700)]
crun: fix compilation with GCC 15

Need to fix function prototype

Signed-off-by: Rosen Penev <[email protected]>
4 months agoaliyun-cli: add new package
Bruce Chen [Mon, 21 Jul 2025 12:51:27 +0000 (20:51 +0800)]
aliyun-cli: add new package

The Alibaba Cloud CLI is a tool to manage and
use Alibaba Cloud resources through a command line interface

Signed-off-by: Bruce Chen <[email protected]>
4 months agoyt-dlp: bump to 2025.07.21
George Sapkin [Tue, 29 Jul 2025 12:03:43 +0000 (15:03 +0300)]
yt-dlp: bump to 2025.07.21

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.07.21
Signed-off-by: George Sapkin <[email protected]>
4 months agonvme-cli: update to 2.15
John Audia [Sat, 26 Jul 2025 12:58:30 +0000 (08:58 -0400)]
nvme-cli: update to 2.15

Bump to latest upstream release.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agolibmvme: bump to 1.15
John Audia [Sat, 26 Jul 2025 12:59:06 +0000 (08:59 -0400)]
libmvme: bump to 1.15

Update to latest upstream release.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agoinih: Update to r61
Tianling Shen [Tue, 29 Jul 2025 09:45:25 +0000 (17:45 +0800)]
inih: Update to r61

Release note: https://github.com/benhoyt/inih/releases/tag/r61

Signed-off-by: Tianling Shen <[email protected]>
4 months agoadguardhome: bump to 0.107.64
George Sapkin [Tue, 29 Jul 2025 11:50:15 +0000 (14:50 +0300)]
adguardhome: bump to 0.107.64

Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.64
Signed-off-by: George Sapkin <[email protected]>
4 months agosumo: update to 1.23.1
Rosen Penev [Wed, 9 Jul 2025 00:45:58 +0000 (17:45 -0700)]
sumo: update to 1.23.1

Remove no longer needed GCC14 patch.

Make python optional. It's not used anyway.

Signed-off-by: Rosen Penev <[email protected]>
4 months agosoftethervpn5: fix compilation without OS ncurses
Rosen Penev [Mon, 28 Jul 2025 04:32:02 +0000 (21:32 -0700)]
softethervpn5: fix compilation without OS ncurses

For some reason, the ncurses.pc file for the host build gets installed
in host instead of hostpkg. Just override the whole thing. The tool
built doesn't even use ncurses.

Signed-off-by: Rosen Penev <[email protected]>
4 months agocyrus-sasl: fix build with GCC 15.1
W. Michael Petullo [Mon, 28 Jul 2025 01:01:04 +0000 (20:01 -0500)]
cyrus-sasl: fix build with GCC 15.1

Apply the patch Fedora uses, named cyrus-sasl-2.1.28-gcc15.patch there,
to fix building with GCC 15.1. As with other recent versions, GCC 15.1
transforms some warnings into errors, and this patch removes those
warnings, now errors. Upstream accepted a similar patch by the same
author at:

https://github.com/cyrusimap/cyrus-sasl/pull/869

The commit described here does not use the upstream patch because it
assumes the removal of CRAM-MD5 (lib/md5.c), but this has not happened
as of the packaged version, namely 2.1.28. A future release will clean
all of this up and remove the need for the patch this commit adds.

Signed-off-by: W. Michael Petullo <[email protected]>
4 months agomstflint: fix SECTION variable typo
Wesley Gimenes [Sat, 26 Jul 2025 20:07:33 +0000 (17:07 -0300)]
mstflint: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
4 months agobluez-tools: fix SECTION variable typo
Wesley Gimenes [Sat, 26 Jul 2025 20:05:33 +0000 (17:05 -0300)]
bluez-tools: fix SECTION variable typo

Change SECTION variable value from `Utilities` to `utils`,
probably a confusion with the variable CATEGORY.

Signed-off-by: Wesley Gimenes <[email protected]>
4 months agoxz: update to 5.8.1
Fengyu Wu [Sun, 27 Jul 2025 07:47:03 +0000 (15:47 +0800)]
xz: update to 5.8.1

Update xz to match the version in tools/

Also add a new GitHub package URL.

Signed-off-by: Fengyu Wu <[email protected]>
4 months agoatop: update to 2.12.0
Robert Marko [Sun, 27 Jul 2025 17:56:29 +0000 (19:56 +0200)]
atop: update to 2.12.0

2.11.0 will not compile with GCC15, so update to 2.12.0.
It also fixes CVE-2025-31160.

Fixes: #27085
Signed-off-by: Robert Marko <[email protected]>
4 months agodocker-compose: Update to version 2.39.1
Javier Marcet [Fri, 25 Jul 2025 13:37:09 +0000 (15:37 +0200)]
docker-compose: Update to version 2.39.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.39.1

Signed-off-by: Javier Marcet <[email protected]>
4 months agohev-socks5-tunnel: update to 2.12.0
Ray Wang [Fri, 25 Jul 2025 15:17:33 +0000 (23:17 +0800)]
hev-socks5-tunnel: update to 2.12.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.12.0

Signed-off-by: Ray Wang <[email protected]>
4 months agohev-socks5-tproxy: update to 2.9.0
Ray Wang [Fri, 25 Jul 2025 15:15:49 +0000 (23:15 +0800)]
hev-socks5-tproxy: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
4 months agohev-socks5-server: update to 2.9.0
Ray Wang [Fri, 25 Jul 2025 15:13:26 +0000 (23:13 +0800)]
hev-socks5-server: update to 2.9.0

Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.9.0

Signed-off-by: Ray Wang <[email protected]>
4 months agoxray-core: Update to 25.7.26
Tianling Shen [Sun, 27 Jul 2025 07:22:37 +0000 (15:22 +0800)]
xray-core: Update to 25.7.26

Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.7.26

Signed-off-by: Tianling Shen <[email protected]>
4 months agoCONTRIBUTING.md: fix commit subject example format
Wesley Gimenes [Sat, 12 Jul 2025 01:45:38 +0000 (22:45 -0300)]
CONTRIBUTING.md: fix commit subject example format

Update the commit subject example in CONTRIBUTING.md
to match the documented guidelines, ensuring it uses lowercase
after the package prefix.

Signed-off-by: Wesley Gimenes <[email protected]>
4 months agomicrosocks: Update to 1.0.5
Tianling Shen [Tue, 22 Jul 2025 13:25:51 +0000 (21:25 +0800)]
microsocks: Update to 1.0.5

Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <[email protected]>
4 months agorngd-tools: run as unprivileged user
John Audia [Tue, 15 Jul 2025 19:39:57 +0000 (15:39 -0400)]
rngd-tools: run as unprivileged user

For better security and isolation, used the -D option to run as newly
created unprivileged user.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agolua-eco: update to 3.11.0
Jianhui Zhao [Fri, 25 Jul 2025 06:07:22 +0000 (14:07 +0800)]
lua-eco: update to 3.11.0

changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.11.0

Signed-off-by: Jianhui Zhao <[email protected]>
4 months agoddns-scripts: add dondominio.com
Alejandro Ojeda Gutiérrez [Thu, 24 Jul 2025 18:54:53 +0000 (20:54 +0200)]
ddns-scripts: add dondominio.com

Adds support for dondominio.com to the ddns-scripts package.
https://dondominio.dev/en/dondns/docs/api/#usage

Signed-off-by: Alejandro Ojeda Gutiérrez <[email protected]>
4 months agonetbird: update to 0.51.2
Wesley Gimenes [Tue, 22 Jul 2025 12:17:43 +0000 (09:17 -0300)]
netbird: update to 0.51.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.51.2

Signed-off-by: Wesley Gimenes <[email protected]>
4 months agokea: update to 2.6.3
Liu Yu [Tue, 15 Jul 2025 02:47:50 +0000 (11:47 +0900)]
kea: update to 2.6.3

Update Kea to the stable release 2.6.3.
This version brings various build and security improvements.
In particular, support for Boost 1.87 has been officially merged
upstream, so the previously required patch 020-boost-187.patch
has been removed.

Signed-off-by: Liu Yu <[email protected]>
4 months agorsync: run as regular user rather than as root
John Audia [Sun, 20 Jul 2025 15:54:49 +0000 (11:54 -0400)]
rsync: run as regular user rather than as root

Rsyncd only needs a subset of all capabilities so create
a dedicated user with these capabilities. This is better from both a
security and an isolation perspective than running as root.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>
4 months agolinknx: bump to new upstream 0.0.1.39
Othmar Truniger [Wed, 23 Jul 2025 08:46:17 +0000 (10:46 +0200)]
linknx: bump to new upstream 0.0.1.39

Signed-off-by: Othmar Truniger <[email protected]>
4 months agonatmap: update to 20250721
Ray Wang [Thu, 24 Jul 2025 13:27:17 +0000 (21:27 +0800)]
natmap: update to 20250721

Upstream changelog:
https://github.com/heiher/natmap/releases/tag/20250721

Signed-off-by: Ray Wang <[email protected]>
4 months agofsh: update to 4.10.0
Ray Wang [Thu, 24 Jul 2025 13:54:01 +0000 (21:54 +0800)]
fsh: update to 4.10.0

Upstream changelog:
https://github.com/heiher/hev-fsh/releases/tag/4.10.0

Signed-off-by: Ray Wang <[email protected]>
4 months agogst1-plugins-bad: fix duplicate codecparsers library package
Daniel Golle [Wed, 23 Jul 2025 12:57:05 +0000 (13:57 +0100)]
gst1-plugins-bad: fix duplicate codecparsers library package

The codecparsers package was accidentally added another time.
Sort libraries alphabetically to avoid this kind of mistake in the
future.

Fixes: a014537e0 ("gstreamer: update to 1.26.4")
Signed-off-by: Daniel Golle <[email protected]>
4 months agotayga: move to net
Goetz Goerisch [Wed, 23 Jul 2025 15:46:38 +0000 (17:46 +0200)]
tayga: move to net

* moving to net to align with similar package jool

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agotayga: refresh patch
Goetz Goerisch [Tue, 22 Jul 2025 18:01:44 +0000 (20:01 +0200)]
tayga: refresh patch

Refreshed patch
 - 002-bigendian_wrong_checksum.patch

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agotayga: drop 010-gcc14.patch
Goetz Goerisch [Tue, 22 Jul 2025 16:52:31 +0000 (18:52 +0200)]
tayga: drop 010-gcc14.patch

* fixed upstream by https://github.com/apalrd/tayga/commit/d1ca8391c788d7a0b8d9772d32ff99e17b2a43fe

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agotayga: drop patch 003-RFC8215.patch
Goetz Goerisch [Tue, 22 Jul 2025 16:49:41 +0000 (18:49 +0200)]
tayga: drop patch 003-RFC8215.patch

* fixed upstream by https://github.com/apalrd/tayga/commit/3dde6b75b67e47f7ad929ec0a3463ce5aa35054b

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agotayga: drop patch 001-configure_unset_CFLAGS.patch
Goetz Goerisch [Tue, 22 Jul 2025 16:48:32 +0000 (18:48 +0200)]
tayga: drop patch 001-configure_unset_CFLAGS.patch

* fixed upstream by https://github.com/apalrd/tayga/commit/e504c35b7ede16642902da12062407e3a12e4d32

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agotayga: update to 0.9.5
Goetz Goerisch [Tue, 22 Jul 2025 17:53:32 +0000 (19:53 +0200)]
tayga: update to 0.9.5

* switch upstream source to https://github.com/apalrd/tayga
* update to 0.9.5
* update license identifier
* shorthen title

Signed-off-by: Goetz Goerisch <[email protected]>
4 months agolibmicrohttpd: update to 1.0.2
Alexander Couzens [Sat, 19 Jul 2025 11:29:19 +0000 (13:29 +0200)]
libmicrohttpd: update to 1.0.2

Changelog:
* Fix double-close bugs on bind() errors reported by MC on the list.
* Removed MHD2 draft code, now in libmicrohttpd2.git.

Signed-off-by: Alexander Couzens <[email protected]>
4 months agoeza: update to 0.23.0
Jonas Jelonek [Wed, 23 Jul 2025 08:32:55 +0000 (08:32 +0000)]
eza: update to 0.23.0

release notes:
0.22.0: https://github.com/eza-community/eza/releases/tag/v0.22.0
0.22.1: https://github.com/eza-community/eza/releases/tag/v0.22.1
0.23.0: https://github.com/eza-community/eza/releases/tag/v0.23.0

Signed-off-by: Jonas Jelonek <[email protected]>
4 months agortty: update to 9.0.1
Jianhui Zhao [Tue, 22 Jul 2025 13:41:20 +0000 (21:41 +0800)]
rtty: update to 9.0.1

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.1

Signed-off-by: Jianhui Zhao <[email protected]>
4 months agodufs: lock cargo dependencies
Tianling Shen [Wed, 23 Jul 2025 06:45:56 +0000 (14:45 +0800)]
dufs: lock cargo dependencies

The new version of tokio is not compatible with musl:

error[E0432]: unresolved import `tokio::net::TcpListener`
  --> src/main.rs:34:13
   |
34 | use tokio::{net::TcpListener, task::JoinHandle};
   |             ^^^^^^^^^^^^^^^^ no `TcpListener` in `net`

error[E0433]: failed to resolve: could not find `UnixListener` in `net`
   --> src/main.rs:156:44
    |
156 |                 let listener = tokio::net::UnixListener::bind(socket_path)
    |                                            ^^^^^^^^^^^^ could not find `UnixListener` in `net`

Signed-off-by: Tianling Shen <[email protected]>
4 months agocloudreve: Update to 4.3.0
Tianling Shen [Tue, 22 Jul 2025 13:22:55 +0000 (21:22 +0800)]
cloudreve: Update to 4.3.0

Major update log: https://github.com/cloudreve/cloudreve/releases/tag/4.0.0

Updated assets build commands.

Signed-off-by: Tianling Shen <[email protected]>
4 months agogstreamer: update to 1.26.4
Daniel Golle [Mon, 21 Jul 2025 01:47:14 +0000 (02:47 +0100)]
gstreamer: update to 1.26.4

Update GStreamer packages release 1.26.4.
While at it, package v4l2codecs to make use of stateless video
encoding and decoding features typical for embedded devices.

Signed-off-by: Daniel Golle <[email protected]>
4 months agophp8: update to 8.4.10
Michael Heimpold [Thu, 10 Jul 2025 21:53:19 +0000 (23:53 +0200)]
php8: update to 8.4.10

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.10

Signed-off-by: Michael Heimpold <[email protected]>
4 months agonebula: bump version to 1.9.6
Yuxi Yang [Mon, 21 Jul 2025 04:10:38 +0000 (12:10 +0800)]
nebula: bump version to 1.9.6

changelog: https://github.com/slackhq/nebula/releases/tag/v1.9.6

Signed-off-by: Yuxi Yang <[email protected]>
4 months agofluidsynth: update to 2.4.7
Daniel Golle [Mon, 21 Jul 2025 00:09:32 +0000 (01:09 +0100)]
fluidsynth: update to 2.4.7

See https://github.com/FluidSynth/fluidsynth/wiki/ChangeLog#fluidsynth-247
for details on changes since 2.4.5.

Signed-off-by: Daniel Golle <[email protected]>