netbird: update to version 0.24.2

Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.24.2

Also fixes issue of not being able to build with musl (>1.2.4)

Signed-off-by: Oskari Rauta <[email protected]>

libzip: update to 1.10.1

Signed-off-by: Michael Heimpold <[email protected]>

hcxtools: update to 6.3.2

Signed-off-by: Rosen Penev <[email protected]>

hcxdmptool: update to 6.3.2

Signed-off-by: Rosen Penev <[email protected]>

elektra: fix compilation with GCC13

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

snort3: fix compilation with gcc13

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

liburing: Update to v2.5

- Updated download URL and hash

Signed-off-by: Christian Lachner <[email protected]>

Merge pull request #22688 from mcha-forks/master

tailscale: Update to 1.54.0

Merge pull request #22244 from tiagogaspar8/strongswan_replay

strongswan: swanctl: add support for replay window

strongswan: swanctl: add support for replay window

Add support for replay window configuration in UCI.

Signed-off-by: Tiago Gaspar <[email protected]>

tailscale: Update to 1.54.0

Signed-off-by: Zephyr Lykos <[email protected]>

avahi: remove compat library

It seems this is meant for distributions that lack mdnsresponder. It's
heavier than it as dbus is required.

Since this happens to conflict with mdnsresponder, just remove it.

Signed-off-by: Rosen Penev <[email protected]>

shairplay: remove

This package is not only abandoned upstream, it has not worked with iOS
versions since at least 2019:

https://github.com/juhovh/shairplay/pull/80

Signed-off-by: Rosen Penev <[email protected]>

upmpdcli: update to 1.8.4

Signed-off-by: Rosen Penev <[email protected]>

libupnpp: update to 0.24.0

Signed-off-by: Rosen Penev <[email protected]>

libnpupnp: update to 5.1.1

Build with meson. Faster.

Signed-off-by: Rosen Penev <[email protected]>

fuse3: update to 3.16.2

Add PKG_BUILD_DEPENDS to fix potential problems.

Signed-off-by: Rosen Penev <[email protected]>

docker-compose: Update to version 2.23.1

Signed-off-by: Javier Marcet <[email protected]>

dhtd: update to 0.2.1

Signed-off-by: Moritz Warning <[email protected]>

pulseaudio: disable compiling against libwrap and (bluez5-)gstreamer

problem: libwrap.so.0, libgstapp-1.0.so.0 and libgstreamer-1.0.so.0 not found during compilation of pulseaudio when e.g. libwrap was built before pulseaudio
Due to
https://github.com/pulseaudio/pulseaudio/commit/156e16f941789c5d53cdb0c46be480c64e3149f1
for libwrap.

Fixes: https://github.com/openwrt/packages/commit/aafc57c1ded5450419b9690056163acf3d19d51f (no sepearate issue generated)
Signed-off-by: Johnny Vogels <[email protected]>

pps-tools: use %lld in printf for 64-bit time_t

musl 1.2.0 switched to use 64-bit time_t everywhere, including 32-bit
architectures, causing garbage values to be printed from ppswatch and
ppstest.

Use the correct format string for the affected printf statements and
explicitly cast to long long to avoid potential compatibility issues
with 32-bit glibc.

Signed-off-by: Matt Merhar <[email protected]>

pdns-recursor: update to 4.9.2 and fix conffile path

Signed-off-by: Peter van Dijk <[email protected]>

Merge pull request #22649 from mwarning/dhtd

dhtd: new package

Merge pull request #22646 from dynasticorpheus/fx

fx: add new package

fx: add new package

Signed-off-by: Fabian Lipken <[email protected]>

dhtd: new package

Co-authored-by: Tianling Shen <[email protected]>
Signed-off-by: Moritz Warning <[email protected]>

Merge pull request #22663 from mhei/gensio-fix-build-disable-udev

gensio: disable cm108gpio gensio and prevent using libudev

freeradius3: Fix build when pcre is present

If pcre is built before freeradius, then freeradius' configure will
detect pcre and freeradius will be built with pcre functionality
enabled. This causes a "missing dependencies" error at the end of
package build.

This passes --without-pcre to configure to disable this autodetection.

This also removes the dependency on libpcre2 as freeradius v3 does not
have support for pcre2.

Fixes: 19ec30255f13 ("freeradius3: switch to pcre2")
Fixes: https://github.com/openwrt/packages/issues/22574
Signed-off-by: Jeffery To <[email protected]>

pipx: Add new package

From the README:

pipx is a tool to help you install and run end-user applications written
in Python. It's roughly similar to macOS's brew, JavaScript's npx, and
Linux's apt.

It's closely related to pip. In fact, it uses pip, but is focused on
installing and managing Python packages that can be run from the command
line directly as applications.

Signed-off-by: Jeffery To <[email protected]>

python-userpath: Add new package

The patches have been submitted upstream in
https://github.com/ofek/userpath/pull/52 and
https://github.com/ofek/userpath/pull/53.

From the README:

This is a tool for modifying a user's PATH.

Signed-off-by: Jeffery To <[email protected]>

python-argcomplete: Add new package

From the README:

Argcomplete provides easy, extensible command line tab completion of
arguments for your Python application.

Signed-off-by: Jeffery To <[email protected]>

crowdsec: new upstream release version 1.5.5

Update crowdsec to latest upstream release version 1.5.5

Signed-off-by: S. Brusch <[email protected]>
Maintainer: Kerma Gérald <[email protected]>
Package tested. not able to test run due to limited space (package is big)

Description: update to latest version of upstream

python-twisted: Update to 23.10.0, refresh patches

Signed-off-by: Jeffery To <[email protected]>

python-wheel: Update to 0.41.3

Signed-off-by: Jeffery To <[email protected]>

python-poetry-core: Update to 1.8.1

Signed-off-by: Jeffery To <[email protected]>

Dysk: Add new package

Dysk is a command-line tool designed for efficient file and directory management in Unix-like environments

Signed-off-by: Facundo Acevedo <[email protected]>

python-trove-classifiers: Update to 2023.11.9

Signed-off-by: Jeffery To <[email protected]>

python-mako: Update to 1.3.0

Signed-off-by: Jeffery To <[email protected]>

python-hatch-vcs: Update to 0.4.0

Signed-off-by: Jeffery To <[email protected]>

Merge pull request #22659 from douglarek/sb

sing-box: update to v1.6.4

gensio: disable cm108gpio gensio and prevent using libudev

libudev seems to be required only for cm108gpio gensio
which is a relatively special one. Let's disable it
and also the libudev lookup, so that there is no need
to link/use libudev.

Signed-off-by: Michael Heimpold <[email protected]>

Merge pull request #22650 from jefferyto/golang-1.21.4

golang: Update to 1.21.4

sing-box: update to v1.6.4

see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.6.4

Signed-off-by: Leo Douglas <[email protected]>

Merge pull request #22655 from stangri/master-adblock-fast

adblock-fast: bugfix: ensure downloaded block-lists end with newline

adblock-fast: bugfix: ensure downloaded block-lists end with newline

* ensure downloaded block-lists end with newline
* turn free/total RAM checks into functions calls

Signed-off-by: Stan Grishin <[email protected]>

golang: Update to 1.21.4

Includes fixes for CVE-2023-45283 and CVE-2023-45284 (path/filepath:
insecure parsing of Windows paths).

Signed-off-by: Jeffery To <[email protected]>

Merge pull request #22644 from mhei/gensio-fix-build-disable-dnssd

gensio: prevent accidental use of dns_sd

unbound: update to 1.19.0

Signed-off-by: Eric Luehrsen <[email protected]>

unbound: create extra host records from DHCP static leases

The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593
Signed-off-by: Julien Cassette <[email protected]>

irqbalance: update to 1.9.3

Update irqbalance to version 1.9.3.
* remove upstreamed patch.

Signed-off-by: Hannu Nyman <[email protected]>

Merge pull request #22640 from mcha-forks/master

tailscale: Update to 1.52.1

Merge pull request #22643 from douglarek/sb

sing-box: update to v1.6.3

gensio: prevent accidental use of dns_sd

Buildbots spottet this error that when dns_sd library is
available, then gensio's configure will pick it up.
This is not desired since we already link to libavahi
for the mdns stuff, so let's disable dnssd lookup explicitly.

Signed-off-by: Michael Heimpold <[email protected]>

sing-box: update to v1.6.3

see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.6.3

Signed-off-by: Leo Douglas <[email protected]>

Merge pull request #22619 from stangri/master-adblock-fast

adblock-fast: update to 1.0.1-1

sstp-client: bump to 1.0.19

After 1.0.18, this project moved from SourceForge to gitlab

Also, since 1.0.19, the configure script is not present
by default anymore, so we need to add autoreconf to generate it

Release notes:
https://gitlab.com/sstp-project/sstp-client/-/releases

Signed-off-by: Koen Vandeputte <[email protected]>

tailscale: Update to 1.52.1

Signed-off-by: Zephyr Lykos <[email protected]>

icu: bump to 74.1

ICU 74 updates to Unicode 15.1, including new characters, emoji, security mechanisms, and corresponding APIs and implementations. It also updates to CLDR 44 (blog) locale data with new locales and various additions and corrections.

ICU 74 and CLDR 44 are major releases, including a new version of Unicode and major locale data improvements. They subsume the changes for the ICU 73.2 and CLDR 43.1 maintenance releases.

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

Merge pull request #22634 from nmav/fix-22632

tang: set the right permissions to keys

tang: set the right permissions to keys

Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <[email protected]>

tang: set the right maintainer

Signed-off-by: Nikos Mavrogiannopoulos <[email protected]>

croc: update to 9.6.6

see changelog: https://github.com/schollz/croc/releases/tag/v9.6.6

Signed-off-by: Jonas Jelonek <[email protected]>

lua-eco: update to 3.0.2

Signed-off-by: Jianhui Zhao <[email protected]>

libdaq3: update to 3.0.13

Upstream bump

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

snort3: update to 3.1.74.0

Upstream bump

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.74.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.13
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.12 24 Oct 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3
           Using Hyperscan version 5.4.2 2023-11-08

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

iperf3: Fix dependecy conflict with iperf3-ssl

When selecting both iperf3 and iperf3 ssl, there is a problem that
both packages install same binary file.
This patch fixes this issue by adding conflict between those packages.

Signed-off-by: Jakub Raczynski <[email protected]>

banip: update 0.9.2-2

* support backup/restore for remote allowlists
* report the used log variant in status message

Signed-off-by: Dirk Brenken <[email protected]>

Merge pull request #22623 from jow-/nano-ucode-syntax-highlighting

nano: add syntax highlighting for ucode scripts

nano: add syntax highlighting for ucode scripts

Introduce local syntax highlighting support for ucode scripts, like
it is done already for uci configuration files.

Ref: https://github.com/jow-/ucode/issues/178
Signed-off-by: Jo-Philipp Wich <[email protected]>

adblock-fast: update to 1.0.1-1

* update Makefile copyright info
* organize functions shared between the init script, uci-defaults and
  luci app in alphabetical order
* update error, warning and status messaging
* use single quotes instead double quotes for static text labels
* better warning for missing recommended packages
* rename dns function to resolver to better reflect its purpose
* improve resolver cleanup code
* move _resolver_config function inside resolver function to improve code readlibity
* rename _process_file_url to process_file_url_wrapper to better reflect its purpose
* add preflight check for available RAM vs total size of block lists
* move _config_add_url_size function inside adb_sizes function to improve code readlibity
* remove uci validation from status_service function to improve performance
* source init script from uci-defaults to include shared functions

Signed-off-by: Stan Grishin <[email protected]>

CI: Update sdk action, always upload artifacts

The updated version of gh-action-sdk will return compiled packages and
build logs for both build success and build errors.

This ensures these artifacts are always uploaded. This also sets the V
environment variable to enable verbose build output.

Signed-off-by: Jeffery To <[email protected]>

quassel-irssi: fix compilation error with new version of irssi

Add patch fixing compilation error with new version of irssi where the
renamed some functions.

Fixes: #22384
Signed-off-by: Christian Marangi <[email protected]>

v2raya: Update to 2.2.4.1

Signed-off-by: Tianling Shen <[email protected]>

Merge pull request #22577 from SuperSandro2000/udp-broadcast-relay-redux-multicast

udp-broadcast-relay-redux-openwrt: add multicast config option

pptpd: use boolean options

Use boolean options and fix the relevant init error.

Signed-off-by: Vladislav Grigoryev <[email protected]>

micropython-lib: Update to latest version, remove patch

Remove 004-unix-ffi-re-convert-to-PCRE2.patch as it has been merged in
this version.

Signed-off-by: Jeffery To <[email protected]>

tinc: fetch ed25519 public keys from uci

Fetch Ed25519 public keys from UCI host sections.
Update options and syntax to current version.

Signed-off-by: Vladislav Grigoryev <[email protected]>

v2ray-core: Update to 5.11.0

Signed-off-by: Tianling Shen <[email protected]>

Merge pull request #21409 from morganchristiansson/ser2net

This major update not only updates the ser2net daemon version,
but also migrates the UCI configuration handling to the newer
YAML configuration file format.

If you only configured ser2net using UCI, then there should
be no noticable difference and your configuration should
still work as before.

If you modified /etc/ser2net.conf before, or used custom adaptions
etc., then you must migrate to newer /etc/ser2net.yaml on your
own and/or double-check your installation - there is no automatic
migration logic during package upgrade path.

nmap: backport fix to be able to compile it with OpenSSL 1.1

The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] https://github.com/nmap/nmap/commit/d6bea8dcdee36a3902cece14097993350306f1b6

Signed-off-by: Josef Schlehofer <[email protected]>

ser2net: update to 4.5.0 (closes #21409)

This major update not only updates the ser2net daemon version,
but also migrates the UCI configuration handling to the newer
YAML configuration file format.

If you only configured ser2net using UCI, then there should
be no noticable difference and your configuration should
still work as before.

If you modified /etc/ser2net.conf before, or used custom adaptions
etc., then you must migrate to newer /etc/ser2net.yaml on your
own and/or double-check your installation - there is no automatic
migration logic during package upgrade path.

Signed-off-by: Morgan Christiansson <[email protected]>
Signed-off-by: Michael Heimpold <[email protected]>

Merge pull request #22545 from mhei/gensio-update-to-2.7.6

gensio: update to 2.7.6

Merge pull request #22596 from muink/dnsproxy-main

dnsproxy: add more options

banip: release 0.9.2-1

* the log file monitor now supports standard log files used by other log daemons like syslog-ng
  Set 'ban_logreadfile' accordingly, by default it points to /var/log/messages
* removed logd dependency, closes #21932

Signed-off-by: Dirk Brenken <[email protected]>

dnsproxy: new features

1. Add new options:
  --http3    Enable HTTP/3 support (H3 first)
  --timeout  Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)

2. Allows listen on multiple interfaces and ports

Signed-off-by: Anya Lin <[email protected]>

Merge pull request #22475 from tarvip/eap-dynamic

strongswan: add eap-dynamic plugin

iperf3-mt: new package

This adds a multithreaded variant of iperf3 as a package. This variant
is still experimental, developed in the mt branch of the iperf
repository and expected to be merged when it is considered stable.

Signed-off-by: Jonas Jelonek <[email protected]>

Merge pull request #22539 from Ansuel/update-privoxy

privoxy: update to release 3.0.34 + PCRE2

Merge pull request #22587 from jefferyto/psqlodbc-fix-build

psqlodbc: Fix build

psqlodbc: Fix build

This updates the path for odbc_config as it was moved from
$(STAGING_DIR_HOST)/bin to $(STAGING_DIR)/host/bin (in commit
61de50de5f787b08e06de9425ec409c8fd1ffcbf).

Signed-off-by: Jeffery To <[email protected]>

python-pyopenssl: Update to 23.3.0

Signed-off-by: Jeffery To <[email protected]>

python-charset-normalizer: Update to 3.3.2

This also updates the test.sh script to use an assert.

Signed-off-by: Jeffery To <[email protected]>

privoxy: use PKG_NAME variable instead of hardcoding privoxy

Use PKG_NAME in PKG_SOURCE AND PKG_BUILD_DIR instead of hardcoding to
privoxy to make the Makefile cleaner.

Signed-off-by: Christian Marangi <[email protected]>

micropython: Update to 1.21.0, refresh/redo patches

Removed 050-py-stackctrl-fix-gcc-13.patch as it has been merged in the
new version.

This also:

* Add STRIP= (empty value) to skip micropython's stripping step, letting
  the OpenWrt build system control stripping.

* Add a workaround for "variable might be clobbered" warning leading to
  build error on riscv64
  (https://github.com/micropython/micropython/issues/12838).

* Change Build/InstallDev to install host tools into an unversioned
  directory, and update micropython-lib to use the unversioned path.
  There is no need to keep available multiple versions of the host
  tools.

* Add a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <[email protected]>

owntone: update to 28.8

The dependency to libevent-pthread came in version 28.7. The changelog doesn't
directly say it, but it is part of the "drop support for libevent < 2.1.4",
ref. OwnTone PR #1574: "Support for libevent < 2.1.4 has been removed, and
libevent pthreads is now a hard requirement." The configure option
--without-libevent_pthreads also no longer exists.

Signed-off-by: Espen Jürgensen <[email protected]>

libndpi: backport patch for PCRE2 support

Backport patch for PCRE2 support as PCRE is EOL and won't receive any
support updates anymore.

Signed-off-by: Christian Marangi <[email protected]>

libndpi: bump to release 4.8

Bump to release 4.8 to make it easier to backport PCRE2 support patch.

Signed-off-by: Christian Marangi <[email protected]>

haproxy: move to PCRE2

Move to PCRE2 as PCRE is EOL and won't receive any more security update
anymore.

Signed-off-by: Christian Marangi <[email protected]>

crowdsec-firewall-bouncer: add ujail

* added ujail for crowdsec-firewall-bouncer
* set nice to reduce priority for process

Signed-off-by: S. Brusch <[email protected]>
Maintainer: Kerma Gérald <[email protected]>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0

newt: Update to 0.52.24, add test.sh script for packages feed CI

Signed-off-by: Jeffery To <[email protected]>