sudo: Fix license file

Signed-off-by: Jan Kardell <[email protected]>

white: update to 2.23

Add Alpine Linux patch to fix compilation with GCC15.

Signed-off-by: Rosen Penev <[email protected]>

dump1090: update to 10.2

Remove upstreamed GCC14 patch.

Backport GCC15 patch.

Signed-off-by: Rosen Penev <[email protected]>

libwebsockets: fix compilation with GCC 15

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

libnpupnp: update to 6.2.1

Fixes compilation with GCC 15

Signed-off-by: Rosen Penev <[email protected]>

xmlrpc-c: update to 1.60.5

Use OpenEmbedded patch to fix compilation with GCC 15.

Signed-off-by: Rosen Penev <[email protected]>

libmariadb: update to 3.4.5

Backport upstream patch fixing compilation with GCC 15.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <[email protected]>

libyaml-cpp: update to 0.8.0

Backport patch fixing compilation with GCC 15 and remove upstreamed one.

Signed-off-by: Rosen Penev <[email protected]>

bind: bump to 9.20.10

New notify-defer configuration option
Removed dependency on libsystemd
Fixed zone deletion issue (GL #5291)
Fixed zone refresh bug (GL #5307)

reset PKG_RELEASE to 1

Signed-off-by: Liu Yu <[email protected]>
Co-authored-by: Josef Schlehofer <[email protected]>

ufp: add a device fingerprinting daemon

Add a daemon that can fingerprint devices based on DHCP, MDNS and WiFi
signatures.

Sample output looks like the following.
{
"04:99:b9:XX:YY:ZZ": {
"device": "HomePod mini",
"vendor": "Apple",
"class": "speaker",
"device_name": "Kitchen"
},
"c4:65:16:XX:YY:ZZ": {
"vendor": "HP",
"device": "OfficeJet Pro 9010 series",
"class": "Printer"
}
}

Signed-off-by: John Crispin <[email protected]>

udhcpsnoop: add new version of the dhcp snooping daemon

The daemon sniffs DHCP packets even on bridged interfaces and provides
fingerprints of requests via ubus.

Signed-off-by: John Crispin <[email protected]>

udhcpsnoop: remove outdated version of the package

Remove outdated version of udhcpsnoop

Signed-off-by: John Crispin <[email protected]>

scapy: fix build by including pip requirements

Add missing packages needed for the build

Signed-off-by: Felix Fietkau <[email protected]>

snort3: remove gperftools dep for mips* and powerpc

Add conditional to disable gperftools-runtime depends for powerpc and mips due to inability
to compile introduced with 7345b73c3094e2aa2e085954a584ab15a9e3b939

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: John Audia <[email protected]>

mdns-repeater: Update to latest upstream version

Resolves openwrt/packages#26835

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: Alexander Koenig <[email protected]>

python-uci: update to version 0.10.3 + two patches

Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] https://gitlab.nic.cz/turris/pyuci/-/blob/240180b2946fdd1fd46c7f023f224acce5a55511/pyproject.toml#L29
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] https://github.com/openwrt/packages/blob/c94ab433caf345ebc6bef9a7174d1f65f676fc87/lang/python/python3-version.mk#L18
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] https://github.com/python/cpython/commit/c96ab19ae460911e40ffa502f1bf945ab6c53a2e

Signed-off-by: Josef Schlehofer <[email protected]>

libpam: fix build with mold linker

Apparently, building with mold linking is not supported.

Closes #26996

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

luajit2: update to v2.1-20250529

For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250529

Signed-off-by: Javier Marcet <[email protected]>

luajit2: update to v2.1-20250117

See: https://github.com/openresty/luajit2/releases/tag/v2.1-20250117

Signed-off-by: Javier Marcet <[email protected]>

strongswan: fix build issues around PARSE_ERROR

This symbol is an enum defined both in wolfssl and strongswan.  This
creates a clash in C's flat namespace.  A workaround is to redefine it
when we include wolfssl headers, but really one of the other should
pick a better name.

Signed-off-by: Philip Prindeville <[email protected]>

strongswan: Update to 6.0.2

No significant functional changes.

Signed-off-by: Philip Prindeville <[email protected]>

prometheus-node-exporter-lua: Fix broken textfile collector

A recent change (00d420e80) removed the `output` function, which textfile.lua was
using to output metrics.  So use the underlying output handle instead

Signed-off-by: Rob Hoelz <[email protected]>

grilo-plugins: update to 0.3.17

Changes since the last packaged version, 0.3.16, include:

  * Translation updates.
  * Updates to CI definitions.
  * Test fixes.
  * Revisions to iptv plugin.
  * Lua-related changes.
  * Drop Rai.tv plugin.
  * Drop the Apple trailers plugin.
  * Update euronews plugin.
  * Update filesystem plugin.
  * Update dleyna plugin.
  * Documentation updates, including reference to Discourse.

Signed-off-by: W. Michael Petullo <[email protected]>

grilo: update to 0.3.19

Changes since the last packaged version, 0.3.16, include:

  * Updates to the playlist handling functions.
  * Translation updates.
  * Documentation updates, including reference to Discourse.
  * Fixes related to the use of GTask.
  * Updates to CI definitions.

Signed-off-by: W. Michael Petullo <[email protected]>

abseil-cpp: fix build and add package install

- propagate CXX flag to compile correctly with protobuf
- add missing install section

Signed-off-by: Tiago Gaspar <[email protected]>

setools: update to 4.5.1

Upstream list of changes is available at
https://github.com/SELinuxProject/setools/releases/tag/4.5.1.

Signed-off-by: W. Michael Petullo <[email protected]>

atheepmgr: update to 2.2.1

Fixes compilation with GCC 15.

Signed-off-by: Rosen Penev <[email protected]>

stress-ng: update to 0.19.02

Changelog: https://github.com/ColinIanKing/stress-ng/releases/tag/V0.19.02

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

stress-ng: adjust against glibc 2.41

Add optional depends for users of glibc.
Related: https://github.com/openwrt/packages/pull/26889

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

tcsh: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

screen: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

rtty: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

opendoas: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

ccrypt: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

xinetd: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

tac_plus: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

squid: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

samba4: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

openssh: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

ocserv: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

nginx: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

libreswan: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

haproxy: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

freeradius3: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

dante: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

xupnpd: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

exim: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

alpine: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

uw-imap: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

libpam: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

libdht: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

libcli: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

libapr: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

perl: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

luaposix: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

sudo: adjust with glibc and libcrypt-compat

glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>

sing-box: Update to 1.11.15

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <[email protected]>

libpam: update to 1.7.1

Release notes:
 https://github.com/linux-pam/linux-pam/releases/tag/v1.5.3
 https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0
 https://github.com/linux-pam/linux-pam/releases/tag/v1.6.1
 https://github.com/linux-pam/linux-pam/releases/tag/v1.7.0
 https://github.com/linux-pam/linux-pam/releases/tag/v1.7.1

Adapt Makefile to use meson and removed patch relating to configure.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

cligen: fix compilation with GCC 15

Upstream has this fixed in a massive patch.

Signed-off-by: Rosen Penev <[email protected]>

lsof: update to 4.99.5

- [linux] fix legacy linux kernel compatibility due to missing /proc/self/ns (https://github.com/lsof-org/lsof/pull/329)
- [linux] fix potential null pointer deference, reported by @mono-trip (https://github.com/lsof-org/lsof/pull/332)

Signed-off-by: Maxim Storchak <[email protected]>

gnutls: Update to version 3.8.10

Single patches automatically refreshed.

Changelog: https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

mjpg-streamer: adapt dependency to changed package name

The libv4l package has been renamed to v4l-utils to match the name now
used upstream, and also to make the folder name consistent with the
PKG_NAME.

Signed-off-by: Daniel Golle <[email protected]>

v4l-utils: merge with edid-decode

Make PKG_NAME and folder name consistent (v4l-utils) and build
edid-decode as subpackage. Unfortunately LTO breaks build of some
of the utils, so disable it.

Signed-off-by: Daniel Golle <[email protected]>

openal-soft: add package

Add open source OpenAL implementation for optional audio support in gzdoom.

Signed-off-by: Daniel Golle <[email protected]>

perl-lwp-protocol-https: new module LWP::Protocol::https, version 6.14

This module is a plug-in for LWP (perl-www),
provides https support for  LWP::UserAgent

Signed-off-by: Jens Wagner <[email protected]>

bluez: update to 5.83

Fixes compilation with GCC 15.

Remove upstreamed patches.

Signed-off-by: Rosen Penev <[email protected]>

vim: update to 9.1

Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <[email protected]>

libudev-zero: import upstream patches

udev_device.c: fix TOCTOU race condition (illiliti/libudev-zero#57)

illiliti/libudev-zero@a2cc51bb142c16eac5598237d2edb46f095607be

Avoidable OOM on small systems (illiliti/libudev-zero#62)

illiliti/libudev-zero@5eca08d71d51074bfe7b14fcf7d89318f4f6ff47

Fixes incorrect detection of touchpads (illiliti/libudev-zero#66)

illiliti/libudev-zero@bbeb7ad51c1edb7ab3cf63f30a21e9bb383b7994

Signed-off-by: Daniel Golle <[email protected]>

samba4: update to 4.22.3

https://www.samba.org/samba/history/samba-4.22.3.html

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

owut: update to 2025.07.11

Bug fixes:
    efahl/owut@0d00192dbe0d package checks: change error to warning for missing dependencies
Enhancements:
    efahl/owut@2ba6d113ba49 status: show link to commit at which build performed

Signed-off-by: Eric Fahlgren <[email protected]>

sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>

yq: Update to 4.46.1

Release note: https://github.com/mikefarah/yq/releases/tag/v4.46.1

Signed-off-by: Tianling Shen <[email protected]>

geoipupdate: Update to 7.1.1

Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.70.3

Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.37.0

Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.37.0

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.50.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.2

Signed-off-by: Wesley Gimenes <[email protected]>

csshnpd: Bump to c1.0.14 release

Upstream release aligned to MbedTLS 3.6.4

Signed-off-by: Chris Swan <[email protected]>

afraid.org-v2-token.json: Fix 404 on update

The URL for update changed and updates were silently failing
with HTTP 404. Fixed the URL

Signed-off-by: Paulo Neves <[email protected]>

git: update to 2.46.4

Fixes:
  - CVE-2025-27613
  - CVE-2025-27614
  - CVE-2025-46334
  - CVE-2025-46835
  - CVE-2025-48384
  - CVE-2025-48385
  - CVE-2025-48386

Signed-off-by: Richard Muzik <[email protected]>

golang: bump to 1.24.5

go1.24.5 (released 2025-07-08) includes security fixes to the go
command, as well as bug fixes to the compiler, the linker, the runtime,
and the go command.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.24.5+label%3ACherryPickApproved
Signed-off-by: George Sapkin <[email protected]>

netbird: update to 0.50.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.1

Signed-off-by: Wesley Gimenes <[email protected]>

cloudflared: change default protocol back to 'auto'

Most of the PQ and FIPS compliant curves are already available
in go 1.24.

Signed-off-by: Tianling Shen <[email protected]>

pdns: update to 4.9.7

Signed-off-by: Peter van Dijk <[email protected]>

rtty: update to 9.0.0

Two new command-line parameters have been added since this version:

* -g, --group=string       Set a group for the device
* -i number                Set heartbeat interval in seconds

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.0

Signed-off-by: Jianhui Zhao <[email protected]>

unzip: fix build GCC 15.1

refer to:

https://gitlab.alpinelinux.org/alpine/aports/-/blob/b7410ac718d5eeae21001de5cae9159f597bb517/main/unzip/gcc15.patch

fix this:

unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |               ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   59 | struct tm *gmtime (const time_t *);
      |            ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |                          ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   60 | struct tm *localtime (const time_t *);
      |            ^~~~~~~~~

Signed-off-by: Tan Zien <[email protected]>

unifdef: fix build with GCC 15

Using GCC compiler on the host breaks the build due to 'constexpr' being
a reserved keyword in C22.
Build expecting the sources to be in GNU17 standard fixes that.

Signed-off-by: Daniel Golle <[email protected]>

docker-compose: Update to version 2.38.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <[email protected]>

cryptsetup: update to 2.8.0

See https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes

Signed-off-by: Daniel Golle <[email protected]>

shadow: restore PKG_BUILD_DEPENDS to libxcrypt

This reverts commit f18594a00f6324045a7019863a5278a3f6f52e64.

The whole libxcrypt package was reworked in the base repo to fix
libcrypto-compat and the name was restored to libxcrypt.

Signed-off-by: Robert Marko <[email protected]>

ddns-scripts: (cloudflare) add support for custom zone ID and DNS record ID

User can (optionally) set zone_id and dns_record_id in param_opt.
This allows round robin DNS setup in Cloudflare.

Signed-off-by: Eric Leung <[email protected]>

gnunet: update to 0.24.3

See upstream NEWS file for more information

https://git.gnunet.org/gnunet.git/tree/NEWS?h=v0.24.3

Signed-off-by: Daniel Golle <[email protected]>

gnupg2: update to 2.4.8

Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------

  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]

  * gpg: Fix a regression in 2.4.7 for generating a key from card.
    [T7457]

  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
    [T7506]

  * gpg: Fully implement the group key flag.  [rGedd01d8fc4]

  * gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
    work.  [rGeb2a90d343]

  * gpgsm: Do not return an error code when importing a certificate
    with an empty subject.  [T7171]

  * scd: Accept P15 cards with a zero-length label.  [rG18b4ebb28a]

  * keyboxd: Use case-insensitive search for mail addresses.  [T7576]

  * gpgconf: Fix reload and kill of keyboxd.  [T7569]

  * w32: Fix posssible lockup due to lost select results.
    [rG9448d01d61]

  Release-info: https://dev.gnupg.org/T7428

Signed-off-by: Daniel Golle <[email protected]>

libcurl-gnutls: update to cURL release 8.14.1

Quite a few versions of cURL have been released since last updating
libcurl-gnutls. See release notes since 8.9.1

https://curl.se/ch/8.10.0.html

https://curl.se/ch/8.10.1.html

https://curl.se/ch/8.11.0.html

https://curl.se/ch/8.11.1.html

https://curl.se/ch/8.12.0.html

https://curl.se/ch/8.12.1.html

https://curl.se/ch/8.13.0.html

https://curl.se/ch/8.14.0.html

https://curl.se/ch/8.14.1.html

Signed-off-by: Daniel Golle <[email protected]>

libpbc: update to 1.0.0

The author writes on https://crypto.stanford.edu/pbc/news.html

---
pbc-1.0.0 released

Thanks to many contributors for fixes, wrappers, and tests.

It’s been over a decade since the last release, and over two since
pbc-0.0.0. I had thought this project would have faded into obscurity by
now, but I still receive patches occasionally. I challenged myself to
build a new release. Miraculously, the old scripts still seem to work,
and the only non-trivial edit was renaming a few MinGW invocations in a
Makefile.

I bumped up the major version number. At the rate I’m going, this could
be the last release, and it’d be a shame if the project never reached
v1.0!

Tue Jun 10 09:15:34 PM PDT 2025
---

Signed-off-by: Daniel Golle <[email protected]>

libp11: update to 0.4.16

See release notes since 0.4.13:

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.14

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.15

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.16

Signed-off-by: Daniel Golle <[email protected]>

opentracker: update to git HEAD of 2025-04-25

 b20b0b8 Do not ignore return value of iob_init_autofree
 123e8aa Silence warning about using a pointer after realloc, take offset of match before

Signed-off-by: Daniel Golle <[email protected]>

libxmp: update to 4.6.3

See https://github.com/libxmp/libxmp/releases/tag/libxmp-4.6.3

Signed-off-by: Daniel Golle <[email protected]>

lvm2: update to 2.03.33 and libdm to 1.02.207

LVM changes:

Version 2.03.33 - 27th June 2025
================================
  Various spelling, grammar, formatting, test, and build script improvements.
  Override LC_NUMERIC locale if unsuitable for json_std report format.
  Repair raid arrays with transiently lost devices.

Version 2.03.32 - 05th May 2025
===============================
  Lvconvert vdopool conversion properly validates acceptable LVs.
  Accept thin pool data LV as cacheable LV.
  Allow using zram block devices (likely for testing).
  Fix lvresize when resizing COW snapshots already covering origin.
  Fix lvmdbusd read of executed lvm commands output.
  Fix construction of DM UUID for cachevol _cdata and _cmeta devices.
  Ignore PV claims from old metadata when then PV belongs to a new VG.
  Fix integrity metadata rounding.
  Accept --autobackup option in pvresize.

libdm changes:

Version 1.02.207 - 27th June 2025
=================================
  Escape the escape character itself on JSON report format output.
  Fail dm_report_group_create if radix char from locale unsuitable for JSON_STD.

Version 1.02.206 - 05th May 2025
================================
  Add support for using regex in selection criteria for string lists.
  Fix string list selection when using [<item> || <item> ...].

Signed-off-by: Daniel Golle <[email protected]>

exfatprogs: update to 1.2.9

See https://github.com/exfatprogs/exfatprogs/releases/tag/1.2.9

Signed-off-by: Daniel Golle <[email protected]>

postgresql: update to 17.5

See https://www.postgresql.org/docs/17/release-17-5.html

Signed-off-by: Daniel Golle <[email protected]>