msmtp: update to version 1.8.26

Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-26/

Signed-off-by: Josef Schlehofer <[email protected]>

openldap: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

cyrus-sasl: fix compilation with GCC14

Missing time.h header.

Signed-off-by: Rosen Penev <[email protected]>

tailscale: Update to 1.66.4

https://github.com/tailscale/tailscale/releases/v1.66.4
Signed-off-by: Zephyr Lykos <[email protected]>

sslh: update to v1.23.1

The sslh Makefile's default target "all" now also tries to compile a new version sslh-ev.
To disable its compilation the Build/Compile is overridden and to call directly "make sslh-select" or "make sslh-fork" depending on CONFIG_SSLH_SELECT.

Some changes from 001-configfile-fix.patch were applied to the upstream and we can remove them.
The only left is a notice "sslh command line arguments override the config".

Signed-off-by: Sergey Ponomarev <[email protected]>

dnsdist: update to 1.9.4

fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <[email protected]>

libedit: update to version 20240517-3.1

Signed-off-by: Jan Hák <[email protected]>

pdns-recursor: update to 5.0.5

Signed-off-by: Peter van Dijk <[email protected]>

sing-box: update to 1.8.14

Signed-off-by: brvphoenix <[email protected]>

speedtest-go: update to 1.7.7

Update speedtest-go version to 1.7.7

Signed-off-by: TeleostNaCl Dai <[email protected]>

liburing: Update to v2.6

- Updated download URL and hash

Signed-off-by: Christian Lachner <[email protected]>

Merge pull request #24188 from gladiac/haproxy-2.8.9

haproxy: update to v2.8.9

haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <[email protected]>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <[email protected]>

unixodbc: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

quota: fix compilation with GCC14

Header is needed.

Signed-off-by: Rosen Penev <[email protected]>

tac_plus: fix compilation with GCC14

Missing declaration and wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

nsutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

nvme-cli: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

Revert "net-snmp: fix compilation with GCC 14"

This reverts commit 7d398682941d79be1e3c2f83f6a57f163ef43a50.

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <[email protected]>

setserial: fix compilation with GCC14

Need to add explicit int.

Signed-off-by: Rosen Penev <[email protected]>

snort3: build against gperftools for more than x86

Other targets should be able to build against gperftools and
realize speed and efficiency gains.

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <[email protected]>

Merge pull request #24146 from TDT-AG/pr/20240513-rust

rust: fix remote filesystem issue

remserial: fix compilation with GCC14

Missing function declaration.

Signed-off-by: Rosen Penev <[email protected]>

rust: add patch to fix remote filesystem issue

If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <[email protected]>

udptunnel: fix compilation with GCC14

Missing int in main.

Signed-off-by: Rosen Penev <[email protected]>

libpfring: update to 8.6.1

Remove upstreamed patch, backport one, and switch one from downstream to
upstream patch.

Signed-off-by: Rosen Penev <[email protected]>

nfdump: update to 1.7.4

Add patch fixing compilation with GCC14.

Signed-off-by: Rosen Penev <[email protected]>

shareport-sync: add support to mbedtls3

updated various function calling as new version needed

Signed-off-by: Seo Suchan <[email protected]>

libcli: fix compilation with GCC14

GCC 14 does not like 1 as the second parameter to calloc.

Clean up definition to avoid using PKG_SOURCE_DATE and to just use
PKG_VERSION.

Signed-off-by: Rosen Penev <[email protected]>

libroxml: fix compilation with GCC14

Need casts for integer conversion

Signed-off-by: Rosen Penev <[email protected]>

libcgroup: update to 2.0.3

Upstream moved to GitHub.

Backport non GNU strerror_r patch.

Signed-off-by: Rosen Penev <[email protected]>

libndp: update to 1.8

Added GCC 14 patch as well.

Signed-off-by: Rosen Penev <[email protected]>

Libwebsockets: temp fix for mbedtls 3.6+
3.6 removed mbedtls_x509_get_cert into private header, redefined it in resonable place to temperatly fix it, and make it not depend on mbedtls_version_C. everything is upstreamed so won't need when upstrea release 4.3.4

Signed-off-by: Seo Suchan <[email protected]>

Libwebsockets: update version to 4.3.3

Signed-off-by: Seo Suchan <[email protected]>

uwsgi: fix compilation with GCC14

Wrong pointer type is used.

Signed-off-by: Rosen Penev <[email protected]>

netbird: update to 0.27.7

Signed-off-by: jiangslee <[email protected]>

lpac: add package

lpac is a eUICC eSIM LPA manager written in C. It allows to
manage eSIM profiles on eUICC SIM cards or modules using multiple
backends.

Signed-off-by: David Bauer <[email protected]>

Merge pull request #23946 from McGiverGim/fix_ddns_reload

ddns-scripts: fix duplication of processes when reloading

Merge pull request #24113 from TDT-AG/pr/20240510-fix-mirror-hash

treewide: fix mirror hash for faad2, libmbim, libqmi, zlog, atlas-probe and  modemmanager

attr: fix compilation with GCC 14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

xinetd: fix compilation with gcc 14

Missing headers. Fix some warnings related to time_t while at it.

Signed-off-by: Rosen Penev <[email protected]>

dcwapd: fix compilation with GCC 14

Old bug in rapidjson.

Signed-off-by: Rosen Penev <[email protected]>

bluez: fix compilation with GCC14

Remove _GNU_SOURCE to avoid redefinition warning.

Signed-off-by: Rosen Penev <[email protected]>

eoip: fix compilation with gcc14

Wrong pointer and missing header.

Signed-off-by: Rosen Penev <[email protected]>

screen: fix compilation with GCC 14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

schroot: fix compilation with GCC14

GCC now does not allow assigning an std::locale to an std::string. No
idea why it worked originally.

Also fixed compilation with full NLS.

Signed-off-by: Rosen Penev <[email protected]>

stlink: fix compilation with GCC 14

Switch to local git tarballs. Smaller.

Upstream backport and a local patch.

Signed-off-by: Rosen Penev <[email protected]>

kmod: update to 32

Add patch to fix compilation with GCC 14.

Signed-off-by: Rosen Penev <[email protected]>

apinger: fix compilation with GCC 14

Header is missing.

Signed-off-by: Rosen Penev <[email protected]>

bwm-ng: fix compilation with GCC 14

Header is missing.

Signed-off-by: Rosen Penev <[email protected]>

canutils: update to 2023.03

Fixes compilation with GCC 14.

Removed can-calc-bit-timing. No longer present.

Backport time_t patch to prevent crashing under 32-bit systems.

Switched to local git tarballs. Smaller.

Signed-off-by: Rosen Penev <[email protected]>

rrdtool1: fix compilation with GCC14

gnu standard is needed. Easier to remove the CFLAG.

Signed-off-by: Rosen Penev <[email protected]>

ddns-scripts: fix duplication of processes when reloading

When a "service ddns reload" is issued, the ddns processes are being
duplicated.
It seems the culprit is the -1 in the 'killall' command, and removing it
fixes the issue.
The -1 means to use SIGHUP, instead of the default SIGTERM.
In this case, the idea is to kill all other processes, so SIGTERM is
appropriate. In case the processes hang, SIGKILL may be another option.

Signed-off-by: Miguel Angel Mulero Martinez <[email protected]>

vala: fix compilation with GCC14

Needs a cast now.

Signed-off-by: Rosen Penev <[email protected]>

pianod: Update to latest upstream version (174.11)

Signed-off-by: Ted Hess <[email protected]>

node: bump to v20.13.1

Update to v20.13.1

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

dump1090: fix compilation with GCC14

Upstream backport.

Switch to local tarballs. Smaller.

Signed-off-by: Rosen Penev <[email protected]>

dnslookup: Update to 1.10.1

Signed-off-by: Tianling Shen <[email protected]>

Merge pull request #24138 from stangri/master-adblock-fast

adblock-fast: update to 1.1.2-1

Merge pull request #24109 from nmav/tmp-openconnect-cam-fix

openconnect: introduced URI parameter

Merge pull request #24126 from neheb/o

pianod: fix mbedtls 3.6 compilation

Merge pull request #23982 from stangri/master-unbound

unbound: pull in adblock-fast generated adb_list

lua-eco: update to 3.5.1

Signed-off-by: Jianhui Zhao <[email protected]>

aggregate: fix compilation with GCC 14

Implicit int is now an error.

Signed-off-by: Rosen Penev <[email protected]>

bottlerocket: fix compilation with GCC 14

implicit int errors now.

Signed-off-by: Rosen Penev <[email protected]>

adblock-fast: update to 1.1.2-1

* move extra_command and EXTRA_HELP to the top of the init file
* add packageCompat variable for compatibility check with WebUI
* add OutputFilter variables for supported resolvers
* simplify adb_check with the use of OutputFilter variables
* add show_blocklist command to display currently blocked domains

Signed-off-by: Stan Grishin <[email protected]>

pianod: fix mbedtls 3.6 compilation

Just a header is needed.

Signed-off-by: Rosen Penev <[email protected]>

mstflint: add InstallDev target

This commit adds a missing InstallDev target, which
includes header and library files to use the mtcr library.

Signed-off-by: Til Kaiser <[email protected]>

mstflint: make Python dependency optional

This commit adds a configuration symbol for the package
to make Python an optional dependency. If unselected,
Python packages won't be selected, and the Python-dependent
tools msftwreset, mstfwtrace, mstprivhost, mstresourcedump,
and mstresourceparse won't be included in the mstflint package.

Signed-off-by: Til Kaiser <[email protected]>

mstflint: update to 4.28.0

Update mstflint to version 4.28.0.
Additionally, switch to the tagged release of the GitHub page.

Signed-off-by: Til Kaiser <[email protected]>

lighttpd: fix missing dependency for OpenSSL crypto library

This change will provide the necessary dependency resolution, fixing:

  Package lighttpd is missing dependencies for the following libraries:
  libcrypto.so.3

Fixes: #23794
Signed-off-by: Glenn Strauss <[email protected]>

lighttpd: add option to use OpenSSL crypto library

Currently, it is not feasible to configure lighttpd to use OpenSSL as
its internal crypto library. Instead, one must rely on alternative
crypto libraries such as Nettle or mbedTLS. This setup is not ideal in
scenarios where a single crypto library is preferred. To address this
issue, lets propose introducing OpenSSL as an additional configuration
option.  Similarly, propose GnuTLS as additional configuration option.

Closes: #24004
Co-developed-by: Glenn Strauss <[email protected]>
Signed-off-by: Glenn Strauss <[email protected]>
Signed-off-by: Petr Štetiar <[email protected]>

tailscale: Update to 1.66.1

https://github.com/tailscale/tailscale/releases/v1.66.1

Signed-off-by: Zephyr Lykos <[email protected]>

znc: update to 1.9.0

Update ZNC to 1.9.0 with the following changes:

* drop all patches:
  * 101-Reduce_rebuild_time.patch was only applicable for the old
    autoconf build, which was dropped in 1.9 and we didn't use anymore
    anyway
  * 104-disable-empty-modules-check.patch not needed anymore since ZNC
    now requires the new corecaps module on startup
  * 120-openssl-deprecated.patch was applied upstream
* disable libargon2 support explicitly to avoid non-deterministic builds
  if it gets added
* package new module corecaps with znc base, as this is a required
  module
* reorder CMAKE_OPTIONS alphabetically

No new modules were introduced or removed besides the new corecaps
module.

Signed-off-by: Jonas Gorski <[email protected]>

transmission: fix compile with MbedTLS 3.X

Backport pending patch, which was submitted to upstream via GitHub
to use renamed function to compile it against MbedTLS 3.x.

Signed-off-by: Seo Suchan <[email protected]>

pcre: drop package

This package is no longer actively maintained as it reached
End-of-Life. [1] All new projects should use PCRE2.

OpenWrt wants to be minimalistic and we migrated many packages
from PCRE to PCRE2 huge thanks belong to @Ansuel (Christian Marangi),
who worked with several open-source projects to migrate it to PCRE2 [2].
This means that on routers, we don't need to have installed two libraries
(pcre and pcre2) side by side.

[1] https://www.pcre.org/
[2] https://github.com/openwrt/packages/issues/22006

Fixes: https://github.com/openwrt/packages/issues/22006
Signed-off-by: Josef Schlehofer <[email protected]>

python-jsonschema: Update to 4.22.0

Release notes:
https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst#v4220

Signed-off-by: Javier Marcet <[email protected]>

speedtest-go: update to 1.7.5

Update speedtest-go version to 1.7.5

Signed-off-by: TeleostNaCl Dai <[email protected]>

eza: update to 0.18.15

Release notes:
0.18.13: https://github.com/eza-community/eza/releases/tag/v0.18.13
0.18.14: https://github.com/eza-community/eza/releases/tag/v0.18.14
0.18.15: https://github.com/eza-community/eza/releases/tag/v0.18.15

Signed-off-by: Jonas Jelonek <[email protected]>

modemmanager: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 22f8fd5c5b2e ("modemmanager: add missing PKG_VERSION for APK")
Signed-off-by: Florian Eckert <[email protected]>

atlas-probe: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 072140981093 ("atlas-probe: fix version for APK")
Signed-off-by: Florian Eckert <[email protected]>

zlog: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 5d273f0f5f01 ("zlog: fix version for APK")
Signed-off-by: Florian Eckert <[email protected]>

libqmi: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: cb9fcdab8a30 ("libqmi: add missing PKG_VERSION for APK ")
Signed-off-by: Florian Eckert <[email protected]>

libmbim: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 6efdaecf5b0b ("libmbim: add missing PKG_VERSION for APK")
Signed-off-by: Florian Eckert <[email protected]>

faad2: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 0c13c5e3c8de ("faad2: fix version for APK")
Signed-off-by: Florian Eckert <[email protected]>

bcm27xx-eeprom: update to v2024.04.20-2712

This update contains multiple BCM2712 improvements and also some minor
improvements for BCM2711.
From now on, only the latest version from default will be copied. There are too
many versions right now and the package can't be installed without expanding
the rootfs if all versions are copied.

Full changelog:
https://github.com/raspberrypi/rpi-eeprom/compare/v.2024.01.05-2712...v2024.04.20-2712

Signed-off-by: Álvaro Fernández Rojas <[email protected]>

Merge pull request #24104 from nxhack/icu_75_1

icu: bump to 75.1

openconnect: introduced URI parameter

This allows specifying a camouflage string in ocserv.

Fixes: #23364
Signed-off-by: Nikos Mavrogiannopoulos <[email protected]>

Merge pull request #24108 from nmav/tmp-openconnect-fixes

openconnect: backport fix for anyconnect compatibility

Merge pull request #24103 from nxhack/php8-intl-icu75

php8: Support for icu 75

openconnect: backport fix for anyconnect compatibility

Fixes: #21135
Signed-off-by: Nikos Mavrogiannopoulos <[email protected]>

nginx: drop deprecated luci.module in module.d

Since we moved to automatic loading of dynamic modules, we need to drop
the previous include luci.module or we end up with nginx failing to
start for old configurations.

Fixes: caffa410ed70 ("nginx: autoload dynamic modules")
Signed-off-by: Christian Marangi <[email protected]>

nginx-util: fix SEGFAULT from regex_search

In converting nginx-util to PCRE2, it was wrongly dropped saving the
results of the regex match causing segmentation fault when used.

Add the missing code to correctly store the vector of the results from
the regex.

Fixes: b738e42c4de8 ("nginx-util: move to pcre2")
Signed-off-by: Christian Marangi <[email protected]>

golang: Enable loongarch64 for Go compiler and packages

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: update to 5.16.1

Signed-off-by: Tianling Shen <[email protected]>

icu: bump to 75.1

Unicode® ICU 75 updates to CLDR 45 (beta blog) locale data with new locales and various additions and corrections. C++ code now requires C++17 and is being made more robust.
The CLDR MessageFormat 2.0 specification is now in technology preview, together with a corresponding update of the ICU4J (Java) tech preview and a new ICU4C (C++) tech preview.

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

php8: Support for icu 75

Preparing to update icu4c to 75.
Created a patch for build errors in php-intl.
```
In file included from /mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/unistr.h:39,
                 from ext/intl/intl_convertcpp.h:22,
                 from ext/intl/intl_convertcpp.cpp:17:
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:29: error: 'enable_if_t' in namespace 'std' does not name a template type
  133 |             typename = std::enable_if_t<
      |                             ^~~~~~~~~~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:24: note: 'std::enable_if_t' is only available from C++14 onwards
  133 |             typename = std::enable_if_t<
      |                        ^~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:40: error: expected '>' before '<' token
  133 |             typename = std::enable_if_t<
      |                                        ^
```
The FreeBSD ports patch was used as a reference.
https://github.com/freebsd/freebsd-ports/commit/e680bd98d34a86302db434c5be23d0cf9d23df23

Signed-off-by: Hirokazu MORIKAWA <[email protected]>