knxd: add dependency for inih

Signed-off-by: Othmar Truniger <[email protected]>

libfmt: bump to version 11.1.1

Signed-off-by: Othmar Truniger <[email protected]>

imx-uuc: add package 'sdimage' and 'ufb'

This adds two small tools useful only on the Freescale/NXP i.MX23/28
devices, so it is bound to the mxs target:
- sdimage: helper to write the required header for the bootstream,
  e.g. during bootloader update
- ufb: can be used in conjunction with NXP's host side mfgtool

Signed-off-by: Michael Heimpold <[email protected]>

dnsproxy: Update to 0.74.1

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.35.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.1

Signed-off-by: Wesley Gimenes <[email protected]>

netbird: update to 0.35.0

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.0

Signed-off-by: Wesley Gimenes <[email protected]>

netbird: revert fix to build with musl >1.2.4

Partially revert: 7b3d033ab651dd11e0db5fb099d106c9e09a2dc6
 - Revert: Also fixes issue of not being able to build with musl >1.2.4,
   The issue has been resolved as of March 2024. For more details, see:
   https://github.com/mattn/go-sqlite3/issues/1164#issuecomment-1975022901

Signed-off-by: Wesley Gimenes <[email protected]>

node: remake - do not use shared abseil-cpp

remake this commit https://github.com/openwrt/packages/pull/25582

Fix nodejs compile errors after the introduction of abseil-cpp in #25565

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

golang: Update to 1.23.4

go1.23.4 (released 2024-12-03) includes fixes to the compiler, the
runtime, the trace command, and the syscall package.

Signed-off-by: Tianling Shen <[email protected]>

libwebp: bump to version 1.5.0

Signed-off-by: Alexandru Ardelean <[email protected]>

numpy: bump to version 2.2.1

Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <[email protected]>

bcm27xx-eeprom: update to v2024.11.12-2712

bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-10-use-soft-reset-to-preseve-sdram-contents-after-ramoops-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-10-add-support-to-override-the-boot-mode-at-power-on-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-05-numa---add-system_heapmax_order0-when-needed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-12-enable-initial_turbo60-by-default-latest

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.09.23-2712...v2024.11.12-2712

Signed-off-by: Álvaro Fernández Rojas <[email protected]>

php8: add patch for loongarch64 support

This backported patch is required to fix the build for loongarch64:
...
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `zend_fiber_init_context':
zend_fibers.c:(.text+0xb34): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb38): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb74): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb78): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `.L170':
zend_fibers.c:(.text+0xe34): undefined reference to `swapcontext'
...

Signed-off-by: Michael Heimpold <[email protected]>

Revert "node: Do not use shared `abseil-cpp`"

This reverts commit 9e70d3c5b07ac87d0f6d2ad85f60ca8bd0e74105.

As mentioned here:
   https://github.com/openwrt/packages/pull/25582#issuecomment-2561673222

Signed-off-by: Alexandru Ardelean <[email protected]>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <[email protected]>

lua-eco: update to 3.7.0

Signed-off-by: Jianhui Zhao <[email protected]>

stress-ng: bump to version 0.18.07

Signed-off-by: Alexandru Ardelean <[email protected]>

python-lxml: bump to version 5.3.0

Signed-off-by: Alexandru Ardelean <[email protected]>

python-et_xmlfile: bump to 2.0.0

Signed-off-by: Alexandru Ardelean <[email protected]>

django: bump to 5.1.4

Signed-off-by: Alexandru Ardelean <[email protected]>

sudo: bump to version 1.9.16p2

Signed-off-by: Alexandru Ardelean <[email protected]>

knxd: bump to new version 0.14.71

Signed-off-by: Othmar Truniger <[email protected]>

libyder: add package

Signed-off-by: Austin Lane <[email protected]>

python-platformio: Add package (build system)

Signed-off-by: Austin Lane <[email protected]>

node: Do not use shared `abseil-cpp`

Signed-off-by: Austin Lane <[email protected]>

cloudflared: Update to 2024.12.2

Signed-off-by: Tianling Shen <[email protected]>

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <[email protected]>

net-snmp: support compilation with GCC 11 permissively

Use #elif defined instead of #elifdef as seen elsewhere throughout the patch
file. This avoids the following errors when compiling with GCC 11:

```
mibgroup/ucd-snmp/proc.c:45:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
   45 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef

mibgroup/ucd-snmp/proc.c:243:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
  243 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef
```

Signed-off-by: Wei-Ting Yang <[email protected]>

ack: Update to 3.8.0

Signed-off-by: Tianling Shen <[email protected]>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <[email protected]>

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <[email protected]>

lxc: update to 6.0.3

No patches needed to be rebased/simple version bump.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

dnsdist: update to 1.9.8

Signed-off-by: Peter van Dijk <[email protected]>

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <[email protected]>

pdns: update to 4.9.3

Signed-off-by: Peter van Dijk <[email protected]>

pbr: update to 1.1.8

* update to 1.1.8 release version
* APK-style version stamping for init script

Signed-off-by: Stan Grishin <[email protected]>

python-pypubsub: Add package

Signed-off-by: Austin Lane <[email protected]>

abseil-cpp: Add Package

Signed-off-by: Austin Lane <[email protected]>

python-tabulate: add package / hostbuild

Signed-off-by: Austin Lane <[email protected]>

python-click: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

libulfius: Install library on target

Signed-off-by: Austin Lane <[email protected]>

alist: Update to 3.41.0

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

python-pyelftools: add package / hostbuild

Signed-off-by: Austin Lane <[email protected]>

python-pyserial: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

qbee-agent: bump version to 2024.50

Signed-off-by: Jon Henrik Bjørnstad <[email protected]>

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <[email protected]>

dnsproxy: Update to 0.73.4

Signed-off-by: Tianling Shen <[email protected]>

docker-compose: Update to version 2.32.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <[email protected]>

liborcania: Install library on target

Signed-off-by: Austin Lane <[email protected]>

knxd: bump to version 0.14.68

Signed-off-by: Othmar Truniger <[email protected]>

qemu: add build for qemu-ga & virtio-console-helper on x86 target

Signed-off-by: Erwan MAS <[email protected]>

pbr: improve status_service output

Signed-off-by: Stan Grishin <[email protected]>

docker-compose: Update to version 2.32.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <[email protected]>

docker-compose: Update to version 2.31.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <[email protected]>

docker-compose: Update to version 2.30.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <[email protected]>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <[email protected]>

qemu: fix error on python dependency at build

qemu need a recent version of python build , this is visible when you build with the docker image of the sdk see https://github.com/openwrt/docker/
error generated during the build : found no usable tomli, please install it

Signed-off-by: Erwan MAS <[email protected]>

haproxy: update to v3.0.7

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

wfb-ng: Add wfb-ng package

WFB-ng is long-range packet radio link based on raw WiFi radio.
Adding it to openwrt base packages will help a lot of it users
to use cheap wifi routers (supporting minitoring mode) instead
of build custom hardware yourself.

Signed-off-by: Vasily Evseenko <[email protected]>

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <[email protected]>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <[email protected]>

owut: update to 2024.12.10

Bug fixes:
    efahl/owut@887ef92 owut: remove non-upgradable packages from update checks
Enhancements:
    efahl/owut@e38844a owut: cosmetic: add OpenWrt version to request output

Signed-off-by: Eric Fahlgren <[email protected]>

yq: Update to 4.44.6

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2024.12.1

Signed-off-by: Tianling Shen <[email protected]>

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <[email protected]>

gst1-plugins-bad: build Intel QuickSync plugin only on x86

Intel Media SDK lacks support for many architectures and leads to build
failing. As the QuickSync hardware feature is anyway only supported on
x86 CPUs simply don't build the plugin on other platforms.

Signed-off-by: Daniel Golle <[email protected]>

acme-common: Create challenge directory on boot

The challenge directory (for webroot challenges) is on a tmpfs, which
means it doesn't exist on boot. Some web servers (uhttpd in particular)
don't like being configured to serve files from a non-existent
directory. So add a boot() section to the ACME init script that just
creates the challenge directory, and make sure it runs relatively early.
That should take care of the non-existent directory issue, while still
keeping the actual certificate renewal controlled by cron.

Signed-off-by: Toke Høiland-Jørgensen <[email protected]>

python-requests: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

netbird: change maintainer

- Add myself as maintainer
- Remove `Oskari Rauta <[email protected]>`

Signed-off-by: Wesley Gimenes <[email protected]>

libideviceactivation: update to the latest git version

Signed-off-by: Georgi Valkov <[email protected]>

libideviceactivation: fix compilation with full NLS

nls.mk is needed.

Reported-by: Rosen Penev <[email protected]>
Signed-off-by: Georgi Valkov <[email protected]>

idevicerestore: update to the latest git version

Notable changes
- initial support for iPhone 16 restore
- depends on libtatsu

Signed-off-by: Georgi Valkov <[email protected]>

libirecovery: update to 1.2.1

Signed-off-by: Georgi Valkov <[email protected]>

libimobiledevice: update to the latest git version

Notable changes
- add detection and note about passcode requirement for iOS 16.1
- add support for iOS 17+ Personalized Developer Disk image mounting
- fix heap buffer overflow in ideviceimagemounter
- tools/afcclient: add missing time.h header
- depends on libtatsu, which depends on libcurl

Signed-off-by: Georgi Valkov <[email protected]>

libtatsu: add package 1.0.4

required by new versions of libimobiledevice and idevicerestore
depends on libcurl

Signed-off-by: Georgi Valkov <[email protected]>

libimobiledevice-glue: update to 1.3.1

Signed-off-by: Georgi Valkov <[email protected]>

usbmuxd: update to the latest git version

Notable changes
- revert default mode back to 1
- add support for modes 4 and 5
- correctly display 10 Gbps USB 3.x
- use more reliable macros to print --version output
- requires libplist 2.6.0

Signed-off-by: Georgi Valkov <[email protected]>

libplist: update to 2.6.0

required to update usbmuxd

Signed-off-by: Georgi Valkov <[email protected]>

python-orjson: update to version 3.10.12
Relevant changes since previous 3.10.0:
- FIXED: Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.
- FIXED: Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.
- Improve performance of serializing.
- Drop support for arm7.
- int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.

Signed-off-by: Timothy M. Ace <[email protected]>

ksmbd-tools: adjust smb2 max read/write/trans and cache

Now for all devices with every size of RAM it is set to:
`smb2 max read = 64K`
`smb2 max write = 64K`
`smb2 max trans = 64K`

Instead of fixed value to 64K is better to check RAM size and adjust to:

32 ~ 64MB RAM, set the value to 64K
64 ~ 128MB, set it to 128KB
128 ~ 256MB, set it to 1MB
More than 256MB leave default size to 4MB

With 64MB and 128MB is better also to disable the read/write cache
`cache read buffers = no`
`cache write buffers = no`

Signed-off-by: Andrea Pesaresi <[email protected]>

netbird: update to 0.34.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.34.1

Signed-off-by: Wesley Gimenes <[email protected]>

tailscale: update to 1.78.1

Signed-off-by: Sandro Jäckel <[email protected]>

knot: update to version 3.4.3

Signed-off-by: Jan Hák <[email protected]>

python-urllib3: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

luajit2: update to v2.1-20241113

Signed-off-by: Javier Marcet <[email protected]>

haproxy: Require lua 5.4

Upstream installation guide use lua 5.4, let's follow it.

Link: https://github.com/haproxy/haproxy/blob/master/INSTALL
Signed-off-by: Ryan Keane <[email protected]>

microsocks: backport upstream fixes

Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <[email protected]>

python-certifi: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

python-idna: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

python-chardet: add hostbuild

Signed-off-by: Austin Lane <[email protected]>

ksmbd-tools: update to version 3.5.3

- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <[email protected]>

dhtd: update to 1.0.5

Signed-off-by: Moritz Warning <[email protected]>

pbr: 1.1.7-65 bugfixes and improvements

Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2
Run tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2

Description:
* stop building netifd flavour until netifd isuees are resolved
* improve output()
* improve inline_set()
* improve is_config_enabled()
* bugfix is_domain()
* improve is_supported_protocol()
* improve is_supported_interface()
* bugfix is_tor_running()
* improve ipv4_leases_to_nftset()
* improve ipv6_leases_to_nftset()
* add check for ip-full binary on start
* bugfix: load environment on boot
* bugfix: hack around dnsmasq confdir instances
* bugfix: IPv6-related fixes for internet_routing() and status_service()
* improve netifd setup by bringing code into the init script from uci-defaults
* bugfix: do not attempt to use IPv6 prefixes in pbr.user.aws if IPv6 support is disabled in pbr config

Signed-off-by: Stan Grishin <[email protected]>

adblock-fast: bugfix: dnsmasq instances confdir hack

* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <[email protected]>

netatalk: Update to 4.0.7

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <[email protected]>

libdrm: fix architecture dependencies of sub-packages

drm_intel should depend on i386||i686 (x86 doesn't exist).
drm_etnaviv is available on RISC-V as well.

Fixes: e092819cd ("libdrm: split into sub-packages")
Signed-off-by: Daniel Golle <[email protected]>

python-pycares: bump to 4.5.0

Signed-off-by: Fabian Lipken <[email protected]>

owut: update to 2024.11.29

Bug fixes:
    efahl/owut@334534b owut: use robust method for setting new kernel version

Enhancements:
    efahl/owut@286d101 examples: update the pre-install.sh with firmware backup

Signed-off-by: Eric Fahlgren <[email protected]>

ci: drop APK version checking

APK is now the default, the SDK action will try to compile things and
fails if the version doesn't fit.

Signed-off-by: Paul Spooren <[email protected]>

ruby: update to 3.3.6

Ruby 3.3.6 is a routine update that includes minor bug fixes. It also
stops warning missing default gem dependencies that will be bundled gems
in Ruby 3.5.

Link: https://github.com/ruby/ruby/releases/tag/v3_3_6
Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>