xray-core: Update to 25.12.2

Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.12.2

Signed-off-by: Tianling Shen <[email protected]>

dnsproxy: Update to 0.78.1

Release note:
- https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.0
- https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.1

Signed-off-by: Tianling Shen <[email protected]>

yq: Update to 4.49.2

Release note:
- https://github.com/mikefarah/yq/releases/tag/v4.49.1
- https://github.com/mikefarah/yq/releases/tag/v4.49.2

Signed-off-by: Tianling Shen <[email protected]>

multi-arch-test-build: post formal summaries to PR

Post formality check summaries to a PR.

Signed-off-by: George Sapkin <[email protected]>

python-parsley: drop package

This looks like it is not maintained anymore.
The last commit in the repository [1] is from 2017,
and the last tarball uploaded on PyPI is from 2015.

That tarball does not follow PEP625, because the
wheel and tarball begins with uppercase, it should be
in lowercase and as well it is still using setup.py.

Python these days is using pyproject.toml.

[1] https://github.com/washort/parsley

Signed-off-by: Josef Schlehofer <[email protected]>

python-pysocks: remove outdated and not maintained package

The latest commit in https://github.com/Anorov/PySocks
is from 2019, it looks outdated and not maintained.

It does not follow PEP 625.

Signed-off-by: Josef Schlehofer <[email protected]>

trafficshaper: remove test codes

Remove requirement test code as it is already supplied by package
dependencies
Depend on ip6tables to satisfy description claim

Signed-off-by: Andris PE <[email protected]>

ykclient: remove package

Upstream stopped ykclient developments.
https://github.com/Yubico/yubico-c-client

Signed-off-by: Yanase Yuki <[email protected]>

triggerhappy: remove package

The latest upstream commit is 9 years ago.
It seems this package is no longer maintained.
No packages depends on this.

Signed-off-by: Yanase Yuki <[email protected]>

ci: label formality failures

Add or remove 'not following guidelines' label based on formality check
status.

Signed-off-by: George Sapkin <[email protected]>

ci: add PR labeler workflow

Label based on target release branch. Labels must be manually defined to
avoid giving the action unnecessary permissions. Release labels must be
defined in the config after each release is forked.

Signed-off-by: George Sapkin <[email protected]>

netstinky: remove package

It seems this package is no longer maintained.
- The latest upstream commit is 4 years ago.
- Official website and IoC update servers
  are unreachable.
  https://crt.sh/?q=netstinky-api.wand.net.nz

No packages depend on this.

Signed-off-by: Yanase Yuki <[email protected]>

webui-aria2: remove package

It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <[email protected]>

syncthing: bump to 2.0.12

Changelog: https://github.com/syncthing/syncthing/releases/tag/v2.0.12
Signed-off-by: George Sapkin <[email protected]>

knot: update to version 3.5.2

Release notes: https://www.knot-dns.cz/2025-11-28-version-352.html

Signed-off-by: Jan Hák <[email protected]>

isc-dhcp: use modzone not addzone so in-addr.arpa works

Updates to in-addr.arpa are being rejected with:

update failed: REFUSED

because we create an empty zone, and then try to add it again
when it already exists.  So use modzone instead to update it.

Signed-off-by: Philip Prindeville <[email protected]>

cyrus-sasl: fix build with glibc

Add missing dependency +USE_GLIBC:libcrypt-compat to express dependency
on libcrypto.so.1 when building with GNU glibc.

Signed-off-by: Daniel Golle <[email protected]>

clixon: backport upstream patch fixing support for 32 bit

Backport upstream patch for clixon fixing support for 32 bit.

Signed-off-by: Christian Marangi <[email protected]>

exim: update to version 4.99

See https://code.exim.org/exim/exim/releases/tag/exim-4.99

Signed-off-by: Daniel Golle <[email protected]>

pv: explicitly enable ncursesw, add dependency

Explicitly enable ncurses usage and add dependency for it.

(Feature was added 1.9.24, and buildbot has occasionally failed due
to the missing dependency if ncurses has been already built.)

Signed-off-by: Hannu Nyman <[email protected]>

pv: remove inactive maintainer

Remove the maintainer info, as jow has not committed to the package
since 2016.

Signed-off-by: Hannu Nyman <[email protected]>

freeradius3: drop yubikey support

FreeRADIUS yubikey plugin depends on obsolete libyubikey.
libyubikey has been removed from repo
due to upstream EoL. (9ea17111f05e1bc3)
This commit will fix libyubikey dependency problem.

Signed-off-by: Yanase Yuki <[email protected]>

tdb: update for compatibility, remove absent maintainer

Update to 1.4.14 for compatibility with the current packages infra
(python etc.)

* Refresh patches. Remove old upstream patch
* Remove absent maintainer

Signed-off-by: Hannu Nyman <[email protected]>

lm-sensors: pass TARGET_LDFLAGS to fix linking

Explicitly pass $(TARGET_LDFLAGS) to the build system
to resolve MIPS linker errors related to missing -fPIC.

Signed-off-by: Anari Jalakas <[email protected]>

leptonica: adjust for tesseract expectations

Adjust include path and cmake file path so that tesseract, the only user
of the library, finds the items in place. Should unbreak the tesseract
build.

Signed-off-by: Hannu Nyman <[email protected]>

python-setuptools: fix PKG_CPE_ID

Should be PKG_CPE_ID, not CPE_ID.

Signed-off-by: Wei-Ting Yang <[email protected]>

shine: fix compile bug in l3mdct

- Project has different function declaration in header and source.
- Reformat patches for `git am`

Fixes: https://github.com/openwrt/packages/issues/27957
Signed-off-by: Vladimir Ermakov <[email protected]>

tailscale: update to 1.90.9

Changelog: https://tailscale.com/changelog#2025-11-19
Changelog: https://tailscale.com/changelog#2025-11-25

Signed-off-by: Sandro Jäckel <[email protected]>

snort3: update to 3.10.0.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.10.0.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150)

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.23

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.23

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150)

Signed-off-by: John Audia <[email protected]>

tor: update to 0.4.8.21 stable

Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.21/ChangeLog

Signed-off-by: Rui Salvaterra <[email protected]>

esniper: remove package

esniper's development has been stopped in 2020.
https://esniper.sourceforge.net/
No packages depend on this.

Signed-off-by: Yanase Yuki <[email protected]>

python-pypubsub: switch to PyPi sdist

- PyPi sdist was recently added for this package. Switch to using it.

Signed-off-by: Austin Lane <[email protected]>

python-chardet: fix build (depend on setuptools)

- Properly depend on python-setuptools to fix build failures.

Signed-off-by: Austin Lane <[email protected]>

python-certifi: fix build (depend on setuptools)

- Setuptools has been required since certifi 2025.06.15
  https://github.com/certifi/python-certifi/pull/350

Signed-off-by: Austin Lane <[email protected]>

python-curl: bump to version 7.45.7

Change bumps version to 7.45.7
Adding python-setuptools/host as PKG_BUILD_DEPENDS.

Package is no longer needed.

Fixes:
 https://github.com/openwrt/packages/issues/27915

Signed-off-by: Alexandru Ardelean <[email protected]>

python-idna: bump to version 3.11

bump to version 3.11

Signed-off-by: Ioan Bobar <[email protected]>

Revert "tar: fix EXTRA_DEPENDS"

This reverts commit 593267af241de9cc1e425036305988ccbc396862.

Signed-off-by: George Sapkin <[email protected]>

ola: fix compilation with newer liblo

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

liblo: fix pkgconf file

OS paths are wrongly being passed.

Signed-off-by: Rosen Penev <[email protected]>

python-urllib3: fix builds with setuptools-scm 9.x

- Fix builds for python-urllib3 with setuptools-scm
- Patch sourced from upstream (un-released/main branch)

Signed-off-by: Austin Lane <[email protected]>

perl-www-curl: fix compilation error with new cURL version

Add patch removing internal macro CURL_HAS_DECLSPEC_ATTRIBUTE.

This fix a compilation error for the package.

Also improve the old 7.88 patch with wrong whitespace.

Signed-off-by: Christian Marangi <[email protected]>

netopeer2: fix install path for netopeer2-server

New version of netopeer2 moved the install location of netopeer2-server
from /usr/bin to /usr/sbin.

Update the install location to reflect this change.

Signed-off-by: Christian Marangi <[email protected]>

sysrepo: correctly install .yang file with revision

With new sysrepo version, the .yang file are shipped with revision.
Update the package install to align to the new names.

The change of name doesn't cause regression as the revision is optional
on loading .yang files.

Signed-off-by: Christian Marangi <[email protected]>

libnetconf2: add pending patch to disable PAM support

Add pending patch to disable PAM support to limit need to add extra
dependency.

This is needed if libpam is selected as the package will detect the
library and enable support for it by default.

Signed-off-by: Christian Marangi <[email protected]>

libradiotap: backport upstream patch for CMake >= 4.0 support

Backport upstream patch for libradiotap for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

openthread-br: bump to 2025-06-12 and add patch for CMake >= 4.0 support

Bump to version 2025-06-12 and add pending patch for openthread-br for
CMake >= 4.0 support.

The package use an old cJSON version that cause compilation problem with
CMake >= 4.0 support. To handle this, add a pending patch to use an
external version of cJSON.

We already ship this package so it's trivial to use that instead of the
one in the openthread-br repository.

Signed-off-by: Christian Marangi <[email protected]>

taskwarrior: bump to 2.6.2 and backport patch for CMake >= 4.0 support

Bump taskwarrior to 2.6.2 release and backport upstream patch for
CMake >= 4.0 support.

Minor modification were done to the backport patch to adapt to release
2.6.2.

Signed-off-by: Christian Marangi <[email protected]>

rtty: backport upstream patch for CMake >= 4.0 support

Backport upstream patch for rtty for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

tar: fix EXTRA_DEPENDS

EXTRA_DEPENDS should be used for version constraints. Change to DEPENDS.

Fixes: 488be84 ("utils/tar: Make compression, acl, and xattr support configuration options")
Signed-off-by: George Sapkin <[email protected]>

ubnt-manager: fix EXTRA_DEPENDS

EXTRA_DEPENDS should be used for version constraints. Change to DEPENDS.

Fixes: e4a8d3f ("ubnt-manager: add ubnt-manager")
Signed-off-by: George Sapkin <[email protected]>

airos-dfs-reset: fix EXTRA_DEPENDS

EXTRA_DEPENDS should be used for version constraints. Change to DEPENDS.

Fixes: e36e8a6 ("airos-dfs-reset: add airos-dfs-reset")
Signed-off-by: George Sapkin <[email protected]>

rtpmidid: bump to version 24.12

Bump rtpmidid to version 24.12. The new release fix support for CMake >=
4.0 version and permit to drop all patch (everything is upstream)

Signed-off-by: Christian Marangi <[email protected]>

python-pycparser: update to version 2.23

Refresh patch

Release notes:
https://github.com/eliben/pycparser/releases/tag/release_v2.22
https://github.com/eliben/pycparser/releases/tag/release_v2.23

Signed-off-by: Josef Schlehofer <[email protected]>

python-setuptools-rust: update to version 1.12.0

Release notes:
https://github.com/PyO3/setuptools-rust/blob/main/CHANGELOG.md

Signed-off-by: Josef Schlehofer <[email protected]>

python-maturin: update to version 1.9.6

Release notes:
https://github.com/PyO3/maturin/releases/tag/v1.9.6

Signed-off-by: Josef Schlehofer <[email protected]>

python-zope-interface: update to 8.0.1

Release notes:
https://github.com/zopefoundation/zope.interface/blob/8.0.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <[email protected]>

python-msgpack: update to version 1.1.2

Release notes:
https://github.com/msgpack/msgpack-python/releases/tag/v1.1.2

Signed-off-by: Josef Schlehofer <[email protected]>

lua-ev: add pending patch for CMake >= 4.0 support

Add pending patch for CMake >= 4.0 support. This seems to come from an
OpenSUSE PR and generally modernize the CMake file also increasing the
minimum version for CMake.

Signed-off-by: Christian Marangi <[email protected]>

ddns-scripts: Use parameter-based authentication for he.net

According to [1] Basic Auth seems to be broken since a while for he.net.
The documentation [2] is outdated, and still mentions Basic Auth, but
switching to parameter-based authentication seems to fix the issue.

It also bumps PKG_RELEASE in order to ensure a new version is packaged.

[1]: https://github.com/openwrt/packages/issues/27593
[2]: https://dns.he.net/docs.html

Signed-off-by: Karol Babioch <[email protected]>

netopeer2: bump to 2.4.5

Bump netopeer2 to 2.4.5 to fix support for CMake >= 4.0 version.

Drop any upstream patch.

Signed-off-by: Christian Marangi <[email protected]>

sysrepo: bump to 3.7.11

Bump sysrepo to 3.7.11 to to fix support for CMake >= 4.0 version.

Drop any upstream patch.

Update the CMake options to the new unified SYSREPO_SETUP that replace
the old GENERATE_HOSTKEY, INSTALL_MODULES and MERGE_LISTEN_CONFIG.

Signed-off-by: Christian Marangi <[email protected]>

libnetconf2: bump to 3.7.10

Bump libnetconf2 to 3.7.10 to fix support for CMake >= 4.0 version.

Drop any upstream patch.

Signed-off-by: Christian Marangi <[email protected]>

v4l2tools: add pending patch for CMake >= 4.0 support

Add pending patch for v4l2tools for CMake >= 4.0 support.

Also backport a patch for the v4l2wrapper library.

Signed-off-by: Christian Marangi <[email protected]>

v4l2rtspserver: bump to 0.3.12

Bump v4l2rtspserver to 0.3.12 to fix support for CMake >= 4.0 version.

Signed-off-by: Christian Marangi <[email protected]>

v4l2camera: backport upstream patch for CMake >= 4.0 support

Backport upstream patch for v4l2camera for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

kea: update to 3.0.2

The boost system dependency got sorted out upstream and we can drop
the patch.

Signed-off-by: Philip Prindeville <[email protected]>

nanomq: update to 0.24.6

Release notes:
http://github.com/nanomq/nanomq/releases/tag/0.24.6

Signed-off-by: Andrew Yong <[email protected]>

uspot: update to Git HEAD (2025-11-20)

fb54bba317d8 uspot: fix accounting enabling for radsec setups
46e66c1eb01e uspotbpf: add error reporting to load() and client_add()
113eb8830ca9 uspot: allow overriding NAS-IP-Address
012d48ba556c uspot: fix RADIUS Class attribute propagation
389e48df4fa3 CMakeLists.txt set minimum required version to 3.5

Fixes: https://github.com/f00b4r0/uspot/issues/43
Fixes: https://github.com/f00b4r0/uspot/issues/48
Signed-off-by: Christian Marangi <[email protected]>

uledd: add patch for CMake >= 4.0 support

Add patch for uledd for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

sscep: add patch for CMake >= 4.0 support

Add patch for sscep for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

srt: backport upstream patch for CMake >= 4.0 support

Backport upstream patch for srt for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

adblock: update 4.4.4-2

* fix domain regex
* fix typo in f_query function
* remove backups during stop action or in disabled state

Signed-off-by: Dirk Brenken <[email protected]>

schroot: add patch for CMake >= 4.0 support

Add patch for schroot for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

rtl_433: backport upstream patch for CMake >= 4.0 support

Backport upstream patch for rtl_433 for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

respondd: add pending patch for CMake >= 4.0 support

Add pending patch for respondd for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

ratechecker: add patch for CMake >= 4.0 support

Add patch for ratechecker for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

ovsd: add patch for CMake >= 4.0 support

Add patch for ovsd for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

openobex: add patch for CMake >= 4.0 support

Add patch for openobex for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

python3: add pending patch fixing support for new LibreSSL version

Add pending patch fixing support for new LibreSSL version.

New LibreSSL version adds support for SHA3 algo but doesn't add support
for SHAKE ones. There is currently a logic error in the Python
test_hashlib that always expect both SHA3 and SHAKE algo to be present.

This logic error cause the Host Python3 to fail testing.

This patch fix the logic error and restore correct compilation of the
host package.

Signed-off-by: Christian Marangi <[email protected]>

mbusd: add pending patch for CMake >= 4.0 support

Add pending patch for mbusd for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

clixon: Update to 7.6.0

No significant changes.

Signed-off-by: Philip Prindeville <[email protected]>

cligen: Update to 7.6.0

The "const" patches are now upstream.

Signed-off-by: Philip Prindeville <[email protected]>

lzmq: add patch for CMake >= 4.0 support

Add patch for lzmq for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

python-sqlalchemy: fix typo

fix typo

Signed-off-by: Andy Chiang <[email protected]>

lualanes: bump to version 3.17.2 and backport CMake >= 4.0 support

Bump lualanes to version 3.17.2 and backport upstream patch for CMake >=
4.0 support.

Apply minor modification to the backport patch as the project moved to
C++ but the 3.17.2 version is still C based.

Signed-off-by: Christian Marangi <[email protected]>

libuwsc: add patch for CMake >= 4.0 support

Add patch for libuwsc for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

libupm: add pending patch for CMake >= 4.0 support

Add pending patch for libupm for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

libroxml: add pending patch for CMake >= 4.0 support

Add pending patch for libroxml for CMake >= 4.0 support.

Signed-off-by: Christian Marangi <[email protected]>

libndpi: fix wrong hash and drop PCRE2 patch

It seems commit libndpi: update to version 5.0 wasn't really tested.
The hash from github codeload 5.0 version was wrong and also the PCRE2
patch didn't apply (as the changes are already present in 5.0)

Fix the hash and drop the upstream patch to restore correct compilation.

Fixes: 3a204f51581b ("libndpi: update to version 5.0")
Signed-off-by: Christian Marangi <[email protected]>

gammu: add patch fixing CMake >= 4.0 support

Add patch fixing support for CMake >= 4.0 version.

Signed-off-by: Christian Marangi <[email protected]>

btrfs-progs: Add no-mold to build flags

Fixes openwrt#26541
Signed-off-by: Carsten Schuette <[email protected]>

mc: update to 4.8.33

Drop unnecessary patches. Changes in upstream repository already include them.
Changelog: https://raw.githubusercontent.com/MidnightCommander/mc/refs/tags/4.8.33/doc/NEWS

Signed-off-by: Marcin Maj <[email protected]>

fluent-bit: update to 4.2.0

Build system: aarch64
Build-tested: mediatek/filogic
Run-tested: mediatek/filogic

Signed-off-by: Biao Zhu <[email protected]>

libyubikey: remove package

Upstream stopped libyubikey developments.
https://github.com/Yubico/yubico-c
ykpers and yubico-pam depends on this,
but both packages has been removed from repo.

Signed-off-by: Yanase Yuki <[email protected]>

ykpers: remove packages

Upstream stopped ykpers developments.
https://github.com/Yubico/yubikey-personalization
yubico-pam is the only dependents of this,
but yubico-pam has been removed from repo.

Signed-off-by: Yanase Yuki <[email protected]>

yubico-pam: remove package

Upstream stopped yubico-pam developments.
https://github.com/Yubico/yubico-pam
No packages depends on this.

Signed-off-by: Yanase Yuki <[email protected]>

apfree-wifidog: backport patch fixing CMake >= 4.0 support

Backport upstream patch fixing support for CMake >= 4.0 version.

Signed-off-by: Christian Marangi <[email protected]>

augeas: add pending patch fixing compilation error

Add pending patch fixing compilation error:

transform.c: In function 'transform_save':
transform.c:1192:21: error: implicit declaration of function 'canonicalize_file_name' [-Wimplicit-function-declaration]
 1192 |     augorig_canon = canonicalize_file_name(augorig);
      |                     ^~~~~~~~~~~~~~~~~~~~~~
transform.c:1192:21: warning: nested extern declaration of 'canonicalize_file_name' [-Wnested-externs]
transform.c:1192:19: error: assignment to 'char *' from 'int' makes pointer from integer without a cast [-Wint-conversion]
 1192 |     augorig_canon = canonicalize_file_name(augorig);
      |                   ^
transform.c: In function 'remove_file':
transform.c:1476:19: error: assignment to 'char *' from 'int' makes pointer from integer without a cast [-Wint-conversion]
 1476 |     augorig_canon = canonicalize_file_name(augorig);
      |                   ^

Signed-off-by: Christian Marangi <[email protected]>

bluld: add patch fixing CMake >= 4.0 support

Add patch fixing CMake >= 4.0 support. The package is simple enough that
the version can be bumped with no problem.

Signed-off-by: Christian Marangi <[email protected]>