pbr: update to 1.1.7-7

Makefile:
* remove pbr-iptables flavour

Init-script:
* improve detection of wireguard server and client instances
* integrate wg_server_and_client into init script
* remove traffic_killswitch() and trap() and related options/code
* remove internal nft_file_support variable as fw4 nft file is the only running mode
* improve debug() and is_supported_interface() functions
* improve detection of incompatible user script files
* double-quote some strings due to shellcheck errors
* flush ip rules from pbr tables instead of deleting last one

Other files:
* remove /usr/share/pbr/pbr.user.wg_server_and_client as obsolete
* remove references to the file above in config on update thru uci-defaults
* minor updates to netifd uci-defaults script

Signed-off-by: Stan Grishin <[email protected]>

openssh: Use apk-compatible versioning

Adjust openssh's versioning to be compatible with apk:
8.9p1-r2 --> 8.9_p1-r2

"_p" is an allowed semantic suffix, so use that.
(Alternative might have been 8.9.1-r2)

Signed-off-by: Hannu Nyman <[email protected]>

nano: update to 8.2

Update nano editor to version 8.2

Signed-off-by: Hannu Nyman <[email protected]>

mwan3: fix grep order for nping track method

Signed-off-by: Eduardo Aldaz-Carroll <[email protected]>

php8: update to 8.3.11

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.11

A minor adaption to a single patch is required.

Signed-off-by: Michael Heimpold <[email protected]>

tayga: add options for static mapping

The commit adds options for static mapping, which is essential for
464xlat(clat) usage. But be noted that routes and firewall rules have
to be configured manually, for now.

To use tayga as clat/nat46:
0. specify $ipv4_addr, $prefix, $map_{ipv4,ipv6} properly, and
   set $noroutes to 1 to prevent creating routes for nat64
1. add custom IPv4 routes to tayga, possibly with a reasonable metric
   for default route
2. add a SNAT firewall rule for processing IPv4 traffic destined for
   tayga
3. add firewall rules to allow FORWARD traffic between tayga and WAN6
4. add a $map_ipv6 route to tayga for guiding return traffic

Signed-off-by: Hung-I Wang <[email protected]>

gg: Update to 0.2.19

Signed-off-by: Tianling Shen <[email protected]>

graphicsmagick: update to 1.3.45

Signed-off-by: Aleksey Vasilenko <[email protected]>

hev-socks5-tunnel: add new package

HevSocks5Tunnel is a high-performance tun2socks for Unix.

More details: https://github.com/heiher/hev-socks5-tunnel

Signed-off-by: Ray Wang <[email protected]>

hev-socks5-tproxy: add new package

HevSocks5TProxy is a simple, lightweight transparent proxy for Linux.

More details: https://github.com/heiher/hev-socks5-tproxy

Signed-off-by: Ray Wang <[email protected]>

dhcpcd: bump to 10.0.10

Fixes: https://github.com/openwrt/openwrt/issues/16254
Signed-off-by: Rany Hany <[email protected]>

ci: avoid subshell invocation on APK version check

Use return code instead of scraping the stdio of `apk version --check`.

Signed-off-by: Daniel Golle <[email protected]>

knot: update to version 3.4.0

Signed-off-by: Jan Hák <[email protected]>

liburcu: update to version 0.14.1

Signed-off-by: Jan Hák <[email protected]>

imagemagick: update to 7.1.1.38

Signed-off-by: Aleksey Vasilenko <[email protected]>

freetype: update to 2.13.3

Signed-off-by: Aleksey Vasilenko <[email protected]>

rsyslog: update to 8.2408.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

libmaxminddb: update to 1.11.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

apr: update to 1.7.5

Signed-off-by: Aleksey Vasilenko <[email protected]>

mwan3: fix sed regex for tracking output ping check_quality

Signed-off-by: William Solichin <[email protected]>

cloudflared: reload service if wan inferface has (re)connected

Sometimes the wan connection needs time to be established (e.g. cold
boot after power loss) and the service may crash as the internet is
yet available. Add a trigger to reload the service once the wan
interface is up.

Signed-off-by: Tianling Shen <[email protected]>

tvheadend: update to latest master

Removed PKG_VERSION for compatibility with apk.

Signed-off-by: Rosen Penev <[email protected]>

uhubctl: update to 2.6.0

Signed-off-by: Christian Svensson <[email protected]>

atop: update to 2.11.0

- Remove obsolete patch
- Add newly acquired glib2 dependency

Signed-off-by: Aleksey Vasilenko <[email protected]>

bash: update to 5.2.32

Signed-off-by: Aleksey Vasilenko <[email protected]>

i2pd: Update to 2.53.1

Signed-off-by: David Yang <[email protected]>

v2ray-core: Update to 5.17.1

Signed-off-by: Tianling Shen <[email protected]>

yq: Update to 4.44.3

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.28.9

Signed-off-by: Wesley Gimenes <[email protected]>

netbird: add test

Signed-off-by: Wesley Gimenes <[email protected]>

c-ares: update to 1.33.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

liburing: update to 2.7

Signed-off-by: Aleksey Vasilenko <[email protected]>

clamav: update to 1.4.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

xray-core: update to 1.8.24

Signed-off-by: Milinda Brantini <[email protected]>

apfree-wifidog: update to 7.08.2035

https://github.com/liudf0716/apfree-wifidog/releases/tag/7.08.2035

Signed-off-by: Dengfeng Liu <[email protected]>

apfree-wifidog: modify wifidogx.init
1. to address the isssue of incomplement firwall rules
2. added support for gateway settings

Signed-off-by: Dengfeng Liu <[email protected]>

lpac: update maintainer E-Mail address

Signed-off-by: David Bauer <[email protected]>

lpac: add uqmi backend

This adds an additional OpenWrt specific backend to use lpac with the
uqmi tooling used by OpenWrt to manage QMI based modems.

This allows lpac to manage eUICC chips without the need for other,
potentially bigger, software using the installed modem.

Also set this backend as the new default, as users probably expect being
able to download profiles using their cellular modem.

Profile-Switching
-----------------
With some eUICC modem combinations you might require to powercycle the
UIM slot using uqmi after changing the active profile. To do this,
simply execute

$ uqmi -d /dev/cdc-wdm0 --uim-power-off --uim-slot=1
$ uqmi -d /dev/cdc-wdm0 --uim-power-on --uim-slot=1

Note
----
SM-DP+ might use encryption parameters which are incompatible with
mbedtls which cURL is by default compiled for.

This was observed when attempting to download a profile from
Vodafone DE.

If you encounter issues in that regard, try to install a version of
libcurl which is compiled with OpenSSL support.

Signed-off-by: David Bauer <[email protected]>

lpac: update to v2.1.0

fd58ad7 Bump 2.1.0
319f55f chore(docs): add interactive preview mode option
da1cf1a update download cancel process
cee7190 workaround for es9p cancel session override error_detail
b11878f typo
e6b32e1 Merge branch 'main' of github.com:estkme/lpac
302984f preview && cancel session
56352c5 docs: Add parameters for 'notification process' (#144)
19df553 chore(driver): improve memory management in at driver (#140)
c86edd5 chore(driver): set pcsc and curl as default drivers. (#137)
3bde4a1  driver(APDU): add QMI backend (#131)
0011ea6 docs: add link to lpa-gtk ui for lpac (#125)
d508b28 refactor: bash scripts (#123)
f5956dd chore: move rlpa-server to independent repo (#122)

Signed-off-by: David Bauer <[email protected]>

unbound: update to 1.21.0

Signed-off-by: Jan Klos <[email protected]>

afalg_engine: bump to 1.2.1

This adapts the package to semantic versioning.
Added a simple Ci test script.

Signed-off-by: Eneas U de Queiroz <[email protected]>

graphicsmagick: update to 1.3.44

Explicitly disable gs and libzip in configure
to prevent host dependencies leakage.

Signed-off-by: Aleksey Vasilenko <[email protected]>

imagemagick: update to 7.1.1.37

Signed-off-by: Aleksey Vasilenko <[email protected]>

mc: update to 4.8.32

Signed-off-by: Aleksey Vasilenko <[email protected]>

netbird: add kmod-wireguard dependency

netbird supports the wireguard kernel module, but it can work without it in userspace,
losing some performance, but we know in advance that netbird will run as root,
therefore supporting the wireguard kernelspace with better performance.

Signed-off-by: Wesley Gimenes <[email protected]>

mstflint: update to 4.29.0

This commit updates the mstflint package to the latest 4.29.0
release, including the new binaries mstfwctrl, mstlink, mstreg,
and libexpat as a new dependency.

Signed-off-by: Til Kaiser <[email protected]>

tailscale: Update to 1.72.1

Signed-off-by: Milinda Brantini <[email protected]>

node: bump to v20.17.0

Notable Changes
module: support require()ing synchronous ESM graphs
path: add matchesGlob method
stream: expose DuplexPair API

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

Revert "qfirehose: new package"

This reverts commit df1cd5792a9b2e8514d7a34857a0369ee78b0ceb as the
current licensing terms prevents use in FOSS projects:

  Under no circumstances may customers modify, demonstrate, use, deliver
  or disclose any portion of the Software in source code form.

Signed-off-by: Petr Štetiar <[email protected]>

numpy: bump to version 2.1.0

Re-applied:
   003-without-vendored-meson.patch

Added:
   004-workaround-for-multiple-top-level-packages-discovered.patch

Suggestion found here:
   https://stackoverflow.com/questions/72294299/multiple-top-level-packages-discovered-in-a-flat-layout

Signed-off-by: Alexandru Ardelean <[email protected]>

django: bump to 5.1

Signed-off-by: Alexandru Ardelean <[email protected]>

dnsproxy: add hosts configurations

trim whitespaces while at it.

Signed-off-by: Tianling Shen <[email protected]>

libuwsc: bump PKG_RELEASE for APK

PKG_RELEASE must be an integer.

Signed-off-by: Rosen Penev <[email protected]>

perl-try-tiny: update to 0.32

This doesn't include functional changes, but fixes tests with Perl >=
5.41.3.

Signed-off-by: Matt Merhar <[email protected]>

dockerd: Update to 27.1.2

Signed-off-by: Milinda Brantini <[email protected]>

docker: Update to 27.1.2

Signed-off-by: Milinda Brantini <[email protected]>

cloudflared: Update to 2024.8.3

Signed-off-by: Milinda Brantini <[email protected]>

libgpiod: update to 2.1.3

Upstream bug fixes:
- fix C++ tests with recent kernels which introduced stricter reconfigure
  behavior
- fix a use-after-free bug in python bindings
- fix passing the event clock property to line requests in python bindings
- fix a memory leak in tools
- make sure the string buffers in line-info and chip-info are big enough to not
  truncate the strings they hold below the size accepted by the kernel

Signed-off-by: Michael Heimpold <[email protected]>

libpqxx: update to 7.9.2

Signed-off-by: Rosen Penev <[email protected]>

openblas: bump to version 0.3.28

Also change URL to new page.

Signed-off-by: Alexandru Ardelean <[email protected]>

tcpreplay: add simple test.sh for all executables

Signed-off-by: Alexandru Ardelean <[email protected]>

tcpreplay: bump to version 4.5.1

Dropped CVE patch.
It's included.

Signed-off-by: Alexandru Ardelean <[email protected]>

db47: replace with db

There's no need to maintain an old version.

Removed all patches as they are all upstream.

Import new ones from Arch, Debian, and OpenEmbedded.

Signed-off-by: Rosen Penev <[email protected]>

freeradius3: fix when host readline is present

autoreconf messes things up.

Fixed a typo regarding unixodbc.

Signed-off-by: Rosen Penev <[email protected]>

knxd: bump to version 0.14.63

Signed-off-by: Othmar Truniger <[email protected]>

dnsproxy: Update to 0.73.1

Signed-off-by: Milinda Brantini <[email protected]>

ddns-scripts: add support for Porkbun

Extends DDNS support for the Porkbun v3 JSON API with a custom update
script and service configuration.

See: https://porkbun.com/api/json/v3/documentation

Depends on cURL (with SSL) for transport. Porkbun authentication API keys
and secret keys are passed through the ddns-scripts "username" and
"password" variables, respectively. As Porkbun DNS is currently backed by
Cloudflare, also support ddns-scripts "rec_id" variable for specific
record targeting.

Signed-off-by: Ansel Horn <[email protected]>

ddns-scripts: Add IPv6 and https for OVH

ovh.com supports https and IPv6 since March 2024.
New API operates under domain dns.eu.ovhapis.com
Add IPv6 support, use https and updated domain for ovh.com.

Signed-off-by: Karol Kolacinski <[email protected]>

znc: update to 1.9.1

Update ZNC to latest release 1.9.1.

Changelog:

* https://wiki.znc.in/ChangeLog/1.9.1

Since we never provided modtcl, OpenWrt was never affected by
CVE-2024-39844.

Signed-off-by: Jonas Gorski <[email protected]>

openwisp-monitoring: add missing PKG_VERSION for APK

The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.

Signed-off-by: Oliver Kraitschy <[email protected]>

openwisp-config: add missing PKG_VERSION for APK

The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.

Signed-off-by: Oliver Kraitschy <[email protected]>

adblock: update to 4.2.2-3

* bugfix: users reported unexpected side effects with  the newly introduced rpc-sys ubus service, reverted that part
*bugfix: made "tcpdump" optional

Signed-off-by: Dirk Brenken <[email protected]>

adblock: update to 4.2.2-2

* removal of a superfluous opkg code block (missed in the last commit)
* cosmetics

Signed-off-by: Dirk Brenken <[email protected]>

dnsproxy: Update to 0.73.0

Signed-off-by: Milinda Brantini <[email protected]>

sing-box: update to 1.9.4

Signed-off-by: Milinda Brantini <[email protected]>

basicstation: fix compilation for new mbedtls version 3.x

The basicstation build fails since the change to the new major version
3.x of mbedtls, because of API changes in the new mbedtls version.

To fix the compilation for new mbedtls version, the waiting pullrequest
is backported as a patch.

Thanks to 'Glenn Strauss' to create this PR:
https://github.com/lorabasics/basicstation/pull/198

Signed-off-by: Florian Eckert <[email protected]>

libmspack: update to 0.11alpha

Reworked PKG_VERSION for apk compatibility.

Signed-off-by: Rosen Penev <[email protected]>

bonding: fix apk version

Fix apk version schema by changing the 'PKG_VERSION'.

Signed-off-by: Florian Eckert <[email protected]>

bluez-tools: fix apk version

Fix apk version schema by removing 'PKG_VERSION'.

Signed-off-by: Florian Eckert <[email protected]>

ntfs-3g: Bump to 2022.10.3

This fixes CVE-2022-40284.

Security release 2022.10.3 (Oct 31, 2022)

 * Rejected zero-sized runs
 * Avoided merging runlists with no runs

Signed-off-by: Andreas Gnau <[email protected]>

pingcheck: update to latest master

Removed PKG_VERSION for apk compatibility.

Signed-off-by: Rosen Penev <[email protected]>

liboping: add pkgconfig to dev install target

The packages 'liboping' does also provide da 'pkgconfig' file. So that other
programs that link against this library and use pkgconfig can find it more
easily, the provided pkconfig file must also be copied into the staging dir.

Signed-off-by: Florian Eckert <[email protected]>

libradiotap: update to latest master

Use PKG_SOURCE_DATE for compatibility with apk.

Signed-off-by: Rosen Penev <[email protected]>

v4l2loopback: update to 0.13.2

Use PKG_VERSION for apk compat Need to remove the v.

Signed-off-by: Rosen Penev <[email protected]>

libnet: move to new upstream

SourceForge is 10 years old.

Allows removal of various old hacks.

Updated InstallDev with new stuff.

Signed-off-by: Rosen Penev <[email protected]>

libre2: use local tarballs

Helps to add compatibility with apk.

Signed-off-by: Rosen Penev <[email protected]>

sslh: update to 2.1.2

Fix apk compatibility.

Signed-off-by: Rosen Penev <[email protected]>

adblock: update to 4.2.2

* get rid of the opkg dependency
* fixed remaining hagezi category issues
* adblock still depends on 'gawk', but also accepts busybox awk. The readme describes two officially unsupported installation variants.

Signed-off-by: Dirk Brenken <[email protected]>

squeezelite: handle option to unmute ALSA control

Add logic in squeezelite.init to handle -U <control> cmdline option and
squeezelite.options.unmute=<control> uci option.

Signed-off-by: Kel Modderman <[email protected]>

ci: final round of APK CI fixes

Using -ne wasn't such a good idea since it would do a numeric compare.
Now use -n which checks if the length is non-zero. APK prints the
problematic version if - problematic - so this should now do the trick.

Signed-off-by: Paul Spooren <[email protected]>

tmate-ssh-server: take over the maintainership

Signed-off-by: Tianling Shen <[email protected]>

tmate-ssh-server: bump to latest git HEAD

Switch to standard git versioning.

Signed-off-by: Tianling Shen <[email protected]>

xupnpd: update to latest version

Switch to local tarballs for APK compatibility.

Full changelog: https://github.com/clark15b/xupnpd/compare/e4e542d9b6d0043d470fda283e2cd325bbb91950...2bc1e741e0efe04cb3150430ff25410093618b4f

Signed-off-by: Álvaro Fernández Rojas <[email protected]>

udpxy: update to latest version

Fixes uninitialized address.
Switch to local tarballs for APK compatibility.

Signed-off-by: Álvaro Fernández Rojas <[email protected]>

bcm27xx-eeprom: update to latest version

This update contains multiple improvements for BCM2711 and BCM2712.
Switch to local tarballs for APK compatibility.

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.04.20-2712...v2024.06.05-2712

Signed-off-by: Álvaro Fernández Rojas <[email protected]>

sudo: modify version to Alpine Linux one

The goal here is compatibility with APK.

Signed-off-by: Rosen Penev <[email protected]>

elektra: update to 0.9.14

Adjusted lua dependency.

Signed-off-by: Rosen Penev <[email protected]>

bc: takeover the maintainership

Signed-off-by: Aleksey Vasilenko <[email protected]>

bc: update to 1.07.1

- Switch to GNU package URLs
- Switch license to GNU-3.0
- Manually rebase one patch
- Add 3 more patches from Buildroot project

Signed-off-by: Aleksey Vasilenko <[email protected]>