v2raya: Update to 2.2.6.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a08614a0475f964b674f136e642fa800dd00488e)

v2raya: Update to 2.2.6

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit fd5546fc1f4686bb2b595b14b4c3c91a939b2dc3)

rclone: Update to 1.69.1

Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 944d48241c1408a5b75efa2d6d5e77f0ee500d80)

nextdns: Update to version 1.45.0

Signed-off-by: Olivier Poitrey <[email protected]>

nextdns: Update to version 1.44.6

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.11.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 8eecd2e5a08e40fcc28486c2d6125ddec99226c4)

sing-box: Update to 1.11.0

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 2c7b8ef5a2deb42089674dba2177e4bc8ccb88d6)

Revert "xray-core: Update to 25.1.30"

xray-core v24.12.31 is the last version that supports Go 1.21.

This reverts commit 0eb71539900d1e9fe0ff9e3ae6b258e4ba1099e0.

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.69.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 35b614c43758cfcac53f54a392e841aff30c4f1b)

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <[email protected]>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bcd87dd8b607a1888fe5ceb521a619d068a28bbe)

rclone: Bump to 1.68.2

Release notes in links below.

Link: https://rclone.org/changelog/#v1-68-2-2024-11-15
Signed-off-by: Ryan Keane <[email protected]>
(cherry picked from commit c342279eb6386f707e6982fec95a31c51e74cb98)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit cec4103bbcdddd63930613b4d8c81973caa712fe)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d750bb3182729619144735d0aacab258769377d6)

xray-core: Update to 25.1.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit e9a86e1809dc4b76ab2eb3980fc179567cfc2ccf)

xray-core: Update to 24.12.31

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1166a2531161851d3f3d9ec6f990dab255025364)

frr: 10.2.1 fixes

add mgmtd and pim6d

Signed-off-by: Lucian CRISTIAN <[email protected]>

bind: bump to 9.18.33

Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <[email protected]>

fastd: update to v23

Signed-off-by: Matthias Schiffer <[email protected]>
(cherry picked from commit 24348066216aa27e49e18e6f78c719509fc8f450)

coova-chilli: Fix WolfSSL support

Signed-off-by: Federico Capoano <[email protected]>
(cherry picked from commit bf3333594a8add333e3d7192107aa7be8bc39a33)

# Conflicts:
# net/coova-chilli/Makefile

frr: update to 10.2.1

Signed-off-by: Lucian CRISTIAN <[email protected]>

libyang: update to 2.1.128

needed for frr update to 10+

Signed-off-by: Lucian CRISTIAN <[email protected]>

hev-socks5-server: update to 2.7.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit d0d67ded93936657b232dae93eaf25924a7431fd)

hev-socks5-server: update to 2.6.9

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30db86cc9c0e5e0a9ec7b651f22515bf2c5e765d)

uspot: update to Git HEAD (2025-01-20)

57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

(cherry picked from commit 2466aaccc1b358c6fbcc17aeb6628d974870911b)
Signed-off-by: Thibaut VARÈNE <[email protected]>

node: January 21, 2025 Security Releases

Notable Changes

    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

net/acme-common: Bump package release

Commit 66894032d482 ("acme: standardize key_type") failed to bump the
package release, so the update won't be automatically installed. Bump
PKG_RELEASE to make sure users get the updated version.

Opt for adding a PKG_RELEASE instead of bumping the version to avoid
having different packages (from different branches) with the same
PKG_VERSION.

Signed-off-by: Toke Høiland-Jørgensen <[email protected]>

nextdns: Update to version 1.44.4

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.10.7

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 996c1819e3c68e27783bc7ac081cfcd3dc75ea3b)

adblock: update 4.2.3-3

Summary of three PRs regarding new adblock sources with minor changes/additions:

- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit cd89956c13bf7def493effaf8de1b568a379ebf9)

bind: bump to 9.18.32

Signed-off-by: Noah Meyerhans <[email protected]>

natmap: update to 20250101

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 806b524a287a03391a79a08d62a5e07c4d12350b)

adblock-fast: Makefile bugfixes and hijack rework

* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <[email protected]>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <[email protected]>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <[email protected]>
(cherry picked from commit db853b5d58765d2bfa26439340b1d4a4e1fa5698)

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bd0fb6d3edbe183132efa9349f9ec5b5ad78b16b)

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9e7026dedb8905cd37f89f293b594d62094e43ac)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0c97b1a427a98a21fa7d2305c9341f0f2af19239)

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit b6176b6687cbddc380b8b3e6ccf2d50112a6d2db)

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <[email protected]>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <[email protected]>
(cherry picked from commit 3e612586041d40ebfafadb65eaa6fc34b2061ee8)

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 128875aa67c378dd065582220980df9cfd4576a7)

netatalk: Update to 4.0.7

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Remove apfstats feature to solve dependency issues

afpstats requires several libraries that would increase significantly final install size.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Enable AppleTalk feature

Starting v4.0.0, netatalk brings back AppleTalk features lost in v3.
Updated description.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Clean up Makefile

Updated title.
Updated description.
Reordered to match most common layout

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Update to 4.0.4

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (23.05.3, snapshot)
Run tested: ipq806x - C2600: start server, connect from MacOS, read/write files to home share, create/update TimeMachine backups

Description:
No changes to package other than using latest available upstream code base. Starting Netatalk 4.x build uses meson instead of autotools.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Update to 3.2.5
Compile tested/run: ipq806x

No changes to package other than using latest available codebase.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: update to 3.2.0.

Commit restores package after it was removed from OpenWrt 21.02.
Signed-off-by: Antonio Pastor <[email protected]>

yajl: backport CVE-2023-33460 fix

Removed old uclibc patches. Not relevant with modern musl or glibc.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit c9ff829fdb046a774c25cf3ce3382979b795edfd)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d76d51a4b826588e09404515fbaf19f3f4442a62)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5fb541f00f0ef9dd10793c40d0418809647105ba)

xray-core: Update to 24.11.21

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 3d05b2c1a9f3f631670e292f494c3525eba0c61a)

xray-core: Update to 24.11.11

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 41457908b83d32c4b1037ab99a82f59456fc0e22)

microsocks: backport upstream fixes

Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 77a7324de54e175029fa7ad051a3a17d1806e03e)

microsocks: update to 1.0.4

Signed-off-by: Ozan Göktan <[email protected]>
(cherry picked from commit 544e4a90619bc6bf39a6845d8e5b7b3c0b2e160a)

ksmbd-tools: update to version 3.5.3

- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <[email protected]>
(cherry picked from commit 5b058c9949b3e3adcbc35347aa1acc40c3442e2c)

ksmbd-tools: update to version 3.5.2

Major changes are:
 - Add durable handles parameter to ksmbd.conf.
 - Add payload_sz in ksmbd_share_config_response to validate ipc
   response.
 - Fix UAF and cleanups.

Signed-off-by: Andrea Pesaresi <[email protected]>
(cherry picked from commit 9cf0eae9bca7447354bcb96759f213ae407c9532)

libdeflate: update to 1.22

Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-122

Signed-off-by: Gábor Deé <[email protected]>

zerotier: update to 1.14.1

Signed-off-by: Moritz Warning <[email protected]>
(cherry picked from commit 660b10f0dc9ca81ec2f7b9f7d30ba1a745925d77)

zerotier: split configuration

Split configuration in global and per-network sections.
This change breaks existing configurations.

The following per-network settings are available:

* allow_managed
* allow_global
* allow_default
* allow_dns

See  https://docs.zerotier.com/config/#network-specific-configuration

Signed-off-by: Óscar García Amor <[email protected]>
Reviewed-by: Moritz Warning <[email protected]>
(cherry picked from commit 5af81638787a1dd1f057bc238bc243225110607f)

zerotier: update to 1.14.0

Includes refreshed patches.

Signed-off-by: Moritz Warning <[email protected]>
(cherry picked from commit cf6fef36b44de2c9d1b7910f6afd43e0c6ee946c)

adblock-fast: bugfix: dnsmasq instances confdir hack

* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <[email protected]>

iperf3: fix crashing with musl

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 9c9f4dd08875c77e145e834b939d0c40c043db60)

iperf3: explicitly disable SCTP

Since https://github.com/openwrt/openwrt/commit/3fa5ee0b28b736c5d06af34ed5c3e80f78235fe8
OpenWrt no longer disables SCTP support by default.
It caused the leak of libsctp dependency to iperf3.
Here we disable it explicitly to fix the build.

Signed-off-by: Aleksey Vasilenko <[email protected]>
(cherry picked from commit 6c1ce8ccc78f1b34ade513aa134962eb143826f9)

ruby: update to 3.2.6

Ruby 3.2.6 is a minor bug fix release.

Link: https://github.com/ruby/ruby/releases/tag/v3_2_6
Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>

php8: update to 8.2.26

This fixes:
    - CVE-2024-8929
    - CVE-2024-8932
    - CVE-2024-11233
    - CVE-2024-11234
    - CVE-2024-11236

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.26

Signed-off-by: Michael Heimpold <[email protected]>

yggdrasil: bump to 0.5.10

Signed-off-by: George Iv <[email protected]>
(cherry picked from commit 4ee4b22e431ca3c27c1ab26dc0daba5ca6198443)

adblock: update 4.2.3-2

* correctly parse json objects with hyphens in the autodetection functions

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 823633c0e60ad9efb3afe9c4e63b34c93fa55f7c)

adblock: release 4.2.3-1

* optimized procd settings for better performance
* reworked autodetection functions (still broken in master due to apk migration)
* made the tld function optional, set 'adb_tld' accordingly (enabled by default)
* reworked count function
* various code improvements

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 8afc26fafbd913d829734ab22fc09abaf8874ae8)

banIP: update 1.0.1-2

* correctly parse json objects with hyphens in the autodetection function

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 3140259fc68952355b62a364a97527003adaf1fe)

banIP: release 1.0.1-1

* optimized procd settings for better performance
* made the log monitor working again (even on master with apk migration issues)
* reworked the fetch autodetection function (still broken in master due to apk migration)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 8609a5bbe5b999045dcd9a10714d9e47e4359599)

banIP: update to 1.0.0-10

* minimal fix to support all download utilities in currently broken apk snapshots
  (see https://github.com/openwrt/openwrt/issues/16907 for details)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 4f00d8f0ee66effd40ec7c56a5a9a7395a7a8d54)

django: bump to 4.2.16

Fixes a bunch of CVEs.
CVE-2024-45230
  https://nvd.nist.gov/vuln/detail/CVE-2024-45230

CVE-2024-45231
  https://nvd.nist.gov/vuln/detail/CVE-2024-45231

(And maybe a few more).

Signed-off-by: Alexandru Ardelean <[email protected]>

node: bump to v18.20.5

Notable Changes
  esm: mark import attributes and JSON module as stable (Nicolò Ribaudo)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

openwisp-monitoring: align PKG_SOURCE_VERSION with PKG_VERSION

Previously, `PKG_SOURCE_VERSION` in the Makefile was incorrectly
set to `0.1.1` instead of tracking `PKG_VERSION`. This mismatch
caused compilation issues for the package.

This fix ensures `PKG_SOURCE_VERSION` dynamically aligns with
`PKG_VERSION` to prevent future discrepancies.

Signed-off-by: Gagan Deep <[email protected]>

CI: multi-arch-test-build: move to shared workflow

Move multi-arch-test-build to shared workflow.

Signed-off-by: Christian Marangi <[email protected]>
(cherry picked from commit 2a35a9cab226a43d5521b6356cb5e64a5b174df2)

openwisp-monitoring: allow not depending on rpcd-mod-iwinfo

Add option to exclude rpcd-mod-iwinfo from dependency.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit ca503cc4054d9a13558c7b552886a6dba359a0eb)

openwisp-monitoring: fix Makefile for 0.2.0 update

Commit 5e69da4ccb760da66f00f91e6cb2248ddcdabe5d upgraded openwisp-monitoring
to version 0.2.0 but missed necessary Makefile adjustments, causing the
package to break in OpenWrt feeds.

This patch updates the Makefile to ensure proper functionality of
openwisp-monitoring with the 0.2.0 release.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 886b3fa36d0b82071b10d0169d6950b0aaa6f16c)

openwisp-config: fix Makefile for 1.1.0

Update configuration in Makefile to fix #25168.
Add "/etc/openwisp/" to conf files.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 67d4fa3b05e0a8ee0724bc245d6eec318351876a)

rust: update to 1.81.0

- Automatically refresh one patch
- Other patch is unchanged

Signed-off-by: Aleksey Vasilenko <[email protected]>
(cherry picked from commit 541060ee563a57ff5acbad4e55285ef86c5a9172)

zabbix: zabbix-agentd: depend on libevent2-pthreads

zabbix-agentd requires libevent2-pthreads to build
correctly, so add it to DEPENDS.

Signed-off-by: Yanase Yuki <[email protected]>
(cherry picked from commit e61c3ea01cba8e29f6fef232b049c224255501ad)

mwan3: close flock fd when starting mwan3.user scripts

Fixes deadlock with multiple init script calls

Signed-off-by: Florian Eckert <[email protected]>
(cherry picked from commit 619629ce85991fbb5aa8677ea076ab2de1043ba4)

adblock: update to 4.2.2-8

* get rid of remaining opkg calls and static adblock versioning
* fixed bind autodetection

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit e3217b54edd17a71edc3f8992ccb87b13222c84c)

travelmate: update to 2.1.3-2

* fixed gathering/printing of system information in travelmate status
* make use of a central command selector function

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 5af7612c515460ed5fa4903a580ccc8427e3163e)

adblock: update to 4.2.2-7

* fixed gathering/printing of system information in adblock status
* added missing hagezi category (samsung tracker)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit bbaa72d739368ef2131d4d7aca8ab626be6658b3)

banIP: update to 1.0.0-9

* fixed gathering/printing of system information in banIP status
* removed broken iblocklist.com feeds
* updated readme

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit fb19c1469654f39b3904accfb398bb88b884562b)

i2pd: Update to 2.54.0

* Updating package to 2.54.0
* Changed Makefile to install binary to /usr/bin (as in upstream)
* Updated init.rc script with new path

Signed-off-by: R4SAS I2P <[email protected]>
(cherry picked from commit f28940ddedc6f9cd39b0825e56422c13b93e4c39)

pdns-recursor: update to 4.9.9

fixes CVE-2024-25590

Signed-off-by: Peter van Dijk <[email protected]>

openwisp-monitoring: update to 0.2.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 4540a0abf8debf995bac9b76502909dc5f06647b)

openwisp-config: update to 1.1.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit af4a89482cff4fbdcb1281b6677c7a74e51c95ec)

sing-box: Update to 1.9.7

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 91639e2e5dd129e4805f1ff801c4a7eb411a6ee0)

xray-core: update to 24.9.30

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit caa09e5377050794be23af8e4bd079bbad137150)

banIP: update to 1.0.0-8

* supports comments (introduced with a #), for MAC addresses
  in the allow and block list, e.g. 26:5e:a0:6a:9c:da # Test
* added hagezi threat ip feed
* added an adguard logterm to the readme
* removed the broken talos feed

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 270e6f12644eb0ba3b1596cb73e267edf3980570)

adblock: update to 4.2.2-6

* fixed adblock status reporting
* optimized the mail template
* removed unanswered DNS requests from reporting
* various small fixes

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 1294b54471e4bd17d1b3de9fc777ffa0ae9e429d)

dockerd: Update to 27.3.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit ade186898684bfe40beb3e7f3fab59ae5fe7938a)

dockerd: fix typo in config for no_proxy

the "http_proxy" here should be "no_proxy"

Signed-off-by: Joe Zheng <[email protected]>
(cherry picked from commit dcea616c6134c0d1630174d2fff6a95ffcf60fe6)

dockerd: increase PKG_RELEASE for http proxy update

Fixes: e795bab25325 ("dockerd: add config options for http proxy")
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9ec663013beba8fe6800d8bfbd5b75c33e8f804a)

dockerd: add config options for http proxy

add config options to set http porxy for dockerd, refer to
https://docs.docker.com/engine/daemon/proxy/ for details

use the *_proxy environment variable as the default value, so in most
cases, dockerd can use the system proxy settings just like opkg.

Signed-off-by: Joe Zheng <[email protected]>
(cherry picked from commit e795bab253253e260b61e156d5e5c00e8189cb98)

runc: Update to 1.1.14

This is the fourteenth patch release in the 1.1.z release branch of
runc. It includes a fix for a low severity security issue
(CVE-2024-45310) as well as some minor build-related fixes (including Go
1.23 support).
Fix CVE-2024-45310, a low-severity attack that allowed
maliciously configured containers to create empty files and directories on
the host.
Add support for Go 1.23.
Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
rootfs: consolidate mountpoint creation logic.

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit c1e6edfa862e065caa6f8b3e9fd50d38d7ed57f5)

containerd: Update to 1.7.22

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit f49b8252e62885960261ffa07a1e8058bb1eb6a4)