gst1-plugins-good: bump to 1.24.8

Compile-tested
Runtime-tested

Signed-off-by: Koen Vandeputte <[email protected]>

gst1-plugins-base: bump to 1.24.8

Compile-tested
Runtime-tested

Signed-off-by: Koen Vandeputte <[email protected]>

gst1-plugins-bad: bump to 1.24.8

Compile-tested
Runtime-tested

Signed-off-by: Koen Vandeputte <[email protected]>

gst1-libav: bump to 1.24.8

Compile-tested
Runtime-tested

Signed-off-by: Koen Vandeputte <[email protected]>

gst1-plugins-bad: switch to https source

The current http simply points to the new https.

Switch to it directly like it's already done for
the other gstreamer libs.

Signed-off-by: Koen Vandeputte <[email protected]>

openwisp-config: update to 1.1.0

Signed-off-by: Gagan Deep <[email protected]>

openwisp-monitoring: update to 0.2.0

Signed-off-by: Gagan Deep <[email protected]>

tailscale: build with less features

Omit usually unused features:

- ipn.StateStore implementation using AWS SSM
- BIRD Internet Routing Daemon client
- tstun TAP device for bridging
- Kubernetes kubectl configuration utility
- Command line completion script generation

This shaves off about 500kb from the final executable.

Signed-off-by: Zephyr Lykos <[email protected]>

ctop: Drop unused variable

Co-authored-by: Tianling Shen <[email protected]>
Signed-off-by: Milinda Brantini <[email protected]>

golang: Optimized values to suit golang 1.23

Added GOARM64 and GORISCV64 in golang-build.sh.
Drop deprecated GOROOT_FINAL in GoCompiler/Default/Make.
Updated environment vars in golang-values.mk for GOARM64 and GORISCV64.
Refined host build in golang/Makefile for openbsd_riscv64.

Co-authored-by: Tianling Shen <[email protected]>
Signed-off-by: Milinda Brantini <[email protected]>

golang: Update to 1.23.1

Go 1.23.1 (released 2024-09-05) includes security fixes to
the encoding/gob, go/build/constraint, and go/parser
packages. It also addresses bug fixes in the compiler,
go command, runtime, and the database/sql, go/types,
os, runtime/trace, and unique packages.

Signed-off-by: Milinda Brantini <[email protected]>

owut: update to 2024.09.28

Bug fixes:
    efahl/owut@20d5afb owut: translate mapped names from platform 'supported_devices'

Signed-off-by: Eric Fahlgren <[email protected]>

rust: use `TARGET_LINKER` as linker

Signed-off-by: hingbong lo <[email protected]>

eza: update to 0.20.0

eza has been relicensed to European Union Public License 1.2 (EUPL-1.2)
with v0.20.0.

Release notes:
0.19.3: https://github.com/eza-community/eza/releases/tag/v0.19.3
0.19.4: https://github.com/eza-community/eza/releases/tag/v0.19.4
0.20.0: https://github.com/eza-community/eza/releases/tag/v0.20.0

Signed-off-by: Jonas Jelonek <[email protected]>

btop: Update to 1.4.0

Signed-off-by: Tianling Shen <[email protected]>

git: update to 2.46.2

- Refresh patches

Signed-off-by: Aleksey Vasilenko <[email protected]>

crowdsec-firewall-bouncer: updated to new upstream release version 0.0.31

Signed-off-by: S. Brusch <[email protected]>
Maintainer: Kerma Gérald <[email protected]>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.5

Description:

    updated to new upstream release version 0.0.31

pbr: update to 1.1.7-15

* implement system health check on start for required fw4 table/chains
* add error messages for failed health checks
* move resolver check & config from load_package_config to load_environment
* no longer filter only static rules for pbr_* tables

Signed-off-by: Stan Grishin <[email protected]>

Revert "mwan3: use network_get_preferred_ipaddr6"

This reverts commit fc3cc2fe5c33b36014178d3652785d00cae1c9eb.

As long as the related pullrequest [1] is not merged, this change must be
revert.

[1] https://github.com/openwrt/openwrt/pull/14333

Signed-off-by: Florian Eckert <[email protected]>

squid: update to 6.11

Signed-off-by: Aleksey Vasilenko <[email protected]>

libpng: update to 1.6.44

- Refresh patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

sing-box: Update to 1.9.6

Signed-off-by: Milinda Brantini <[email protected]>

sing-box: Update to 1.9.5

Signed-off-by: Milinda Brantini <[email protected]>

openssh: bump to 9.9p1

Release notes: https://www.openssh.com/txt/release-9.9

Added upstream patch to fix build[1]

1. https://github.com/openssh/openssh-portable/commit/76a618d2842c34c16cd21a4efc7230e2f459008d.patch

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

iputils: bump to 20240905

Refresh patches

Signed-off-by: Noah Meyerhans <[email protected]>

ddns-scripts: fix update_porkbun_v3 shell syntax

The closing bracket was forgotten in a function.

Signed-off-by: Florian Eckert <[email protected]>

pbr: bugfix: filter only static routes for new tables

* fixes https://github.com/openwrt/packages/issues/24999

Signed-off-by: Stan Grishin <[email protected]>

fwupd: add package

Signed-off-by: Lukas Voegl <[email protected]>

libgudev: add package

Signed-off-by: Lukas Voegl <[email protected]>

libxmlb: add package

Signed-off-by: Lukas Voegl <[email protected]>

libjcat: add package

Signed-off-by: Lukas Voegl <[email protected]>

iperf3: explicitly disable SCTP

Since https://github.com/openwrt/openwrt/commit/3fa5ee0b28b736c5d06af34ed5c3e80f78235fe8
OpenWrt no longer disables SCTP support by default.
It caused the leak of libsctp dependency to iperf3.
Here we disable it explicitly to fix the build.

Signed-off-by: Aleksey Vasilenko <[email protected]>

knot-resolver: update to version 5.7.4

Knot Resolver 5.7.4 (2024-07-23)
================================

Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
  Also expose some of the new tweaks in lua:
   (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
   (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}

Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696

Incompatible changes
--------------------
- libknot 3.0.x support is dropped
  Upstream last maintained 3.0.x in spring 2022.

Knot Resolver 5.7.3 (2024-05-30)
================================

Improvements
------------
- stats: add separate metrics for IPv6 and IPv4

Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
  with the NSEC3 having over-limit iteration count

Knot Resolver 5.7.2 (2024-03-27)
================================

Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t

Signed-off-by: Jan Hák <[email protected]>

libmariadb: update to 3.4.1

- Remove a mirror with invalid certificate
- Manually rebase 010-link-to-libucontext.patch
- Add new 020-fix-ucontext-maybe-uninitialized.patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

mariadb: update to 11.4.3

- Remove 2 upstreamed libfmt patches
- Manually refresh 180-relax-mysql_install-db-wrt-pam-tool.patch
- Automatically refresh remaining patches

Signed-off-by: Aleksey Vasilenko <[email protected]>

clamav: update to 1.4.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp2: update to 1.63.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

owut: update to 2024.09.21

Bug fixes:
    efahl/owut@e791bd2 owut: more robust handling of build errors
Enhancements:
    efahl/owut@853f5ab owut: don't use "extra" versions
    efahl/owut@4629b0f owut: minor cleanups

Signed-off-by: Eric Fahlgren <[email protected]>

dnsproxy: fix set hosts options

1. Mount hosts files since the daemon is in ujail
2. Set hosts options at last as all other options set after it will
   be ignored

Drop redundant reload_service func while at it.

Fixes: ecdf98767e03 ("dnsproxy: add hosts configurations")
Signed-off-by: Tianling Shen <[email protected]>

stress-ng: bump to version 0.18.04

Patch needed a refresh

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>
Co-authored-by: Tianling Shen <[email protected]>

exfatprogs: update to 1.2.5

Signed-off-by: Aleksey Vasilenko <[email protected]>

btrfs-progs: update to 6.11

- Update package URL

Signed-off-by: Aleksey Vasilenko <[email protected]>

tgt: update to 1.0.93

Signed-off-by: Maxim Storchak <[email protected]>

docker-compose: Update to version 2.29.7

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.7

Signed-off-by: Javier Marcet <[email protected]>

docker-compose: Update to version 2.29.6

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.6

Signed-off-by: Javier Marcet <[email protected]>

docker-compose: Update to version 2.29.5

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.5

Signed-off-by: Javier Marcet <[email protected]>

tailscale: Fix README.md

There is only one package since commit 7bef195bbabcec88a2b9055846880fd93c2a8a7a. Not two like the readme says.

Signed-off-by: John Schmidt <[email protected]>

dnsproxy: migrate old options

Migrate "all_servers" and "fastest_addr" to new option "upstream_mode".

Fixes: d0823a8244a0 ("dnsproxy: Update to 0.73.2")
Signed-off-by: Tianling Shen <[email protected]>

haproxy: update to v3.0.5

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

crowdsec-firewall-bouncer: updated to new upstream release version 0.0.30

Signed-off-by: S. Brusch <[email protected]>
Maintainer: Kerma Gérald <[email protected]>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.4

Description:

    updated to new upstream release version 0.0.30

pbr: update to 1.1.7-10

* allow using WG servers as gateways if explicitly set in supported_interface
* automatically execute user scripts in /etc/pbr.d/
* change the dnsmasq restart logic on start/reload/restart
* further nft file atomic mode-related code cleanup
* fix spelling in error message

Signed-off-by: Stan Grishin <[email protected]>

adblock-fast: bugfixes and shellcheck update

* BUGFIX: correctly identify available RAM
* BUGFIX: properly store remote list filesize in config
* shellcheck updates

Signed-off-by: Stan Grishin <[email protected]>

zerotier: test network is called earth

The official name of this public network
for testing is Earth.

Signed-off-by: Moritz Warning <[email protected]>

zerotier: fix option disabled

Signed-off-by: Moritz Warning <[email protected]>

zerotier: update to 1.14.1

Signed-off-by: Moritz Warning <[email protected]>

banIP: update to 1.0.0-7

* fixed auto allow-/blocklist-issue with IPv6 addresses in CIDR notation
* removed edrop feed from readme (had been removed from feeds for a while)

Signed-off-by: Dirk Brenken <[email protected]>

linuxptp: update to v4.4

- Replaced SF project and download URLs with nwtime ones.
  The project is now hosted at https://linuxptp.nwtime.org/.

- Removed 020-gcc14.patch. Missing include was fixed upstream
  in v4.2.

- Added patch to disable MAC library autodetection. That
  can silently pick up unwanted dependencies, depending on
  package build order. We can add linuxptp-<mac lib> variants
  of this package later if there are users of authenticated
  PTP.

Signed-off-by: Shenghao Yang <[email protected]>

podman: Update to 5.2.2

- Cleanup Makefile
- Refresh patches
- Simplify go tags
- Separate go tags with space due to upstream change
- Remove vars which are indentical to upstream or empty
- Invoke built-in go vars instead of duplicating one by one

Signed-off-by: Tianling Shen <[email protected]>
Tested-by: Dirk Buchwalder <[email protected]>

aardvark-dns: Update to 1.12.2

Signed-off-by: Tianling Shen <[email protected]>
Tested-by: Dirk Buchwalder <[email protected]>

netavark: Update to 1.12.2

Signed-off-by: Tianling Shen <[email protected]>
Tested-by: Dirk Buchwalder <[email protected]>

slirp4netns: Update to 1.3.1

Signed-off-by: Tianling Shen <[email protected]>

crun: Update to 1.17

Signed-off-by: Tianling Shen <[email protected]>

conmon: Update to 2.1.12

Refreshed patches.

Signed-off-by: Tianling Shen <[email protected]>

adblock: update to 4.2.2-5

* filter out unrelated multicast traffic from reporting

Signed-off-by: Dirk Brenken <[email protected]>

tiff: update to 4.7.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

alist: Update to 3.37.4

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.18.0

Signed-off-by: Tianling Shen <[email protected]>

curl: update to 8.10.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

sexpect: update to 2.3.14

Signed-off-by: Aleksey Vasilenko <[email protected]>

adblock: update to 4.2.2-4

* fixed wrongly detected NX domains in adblock reporting
* remove existing pcap files when restarting/stopping adblock
   to prevent problems when changing tcpdump parameters

Signed-off-by: Dirk Brenken <[email protected]>

libs/glib2: update to 2.82.0

Remove the obsolete patch as the required functionality was already
available upstream.

Refresh 006-c99.patch.

Remove -Ddefault_library option from MESON_HOST_ARGS and MESON_ARGS as
this is now the default behavior.

Signed-off-by: Yegor Yefremov <[email protected]>

libarchive: disable linking with pcre2

Looks like libarchive v3.7.3 adds support for pcre2 (https://github.com/libarchive/libarchive/commit/d1231a7ea7df4db6ddba73f06df67dbab0174a5c).

Because of this, the following build error is observed (in the case pcre2 is compiled before libarchive):
Package libarchive is missing dependencies for the following libraries:
libpcre2-8.so.0
libpcre2-posix.so.3

So let's disable linking with pcre2, just like linking with pcre was disabled before.

Signed-off-by: Matthias FRANCK <[email protected]>

lxc: update to 6.0.2

No patches needed to be rebased, simple version bump.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

memcached: update to 1.6.31

Signed-off-by: Aleksey Vasilenko <[email protected]>

zerotier: split configuration

Split configuration in global and per-network sections.
This change breaks existing configurations.

The following per-network settings are available:

* allow_managed
* allow_global
* allow_default
* allow_dns

See  https://docs.zerotier.com/config/#network-specific-configuration

Signed-off-by: Óscar García Amor <[email protected]>
Reviewed-by: Moritz Warning <[email protected]>

netbird: update to 0.29.1

Signed-off-by: Wesley Gimenes <[email protected]>

dnsproxy: Update to 0.73.2

Signed-off-by: Milinda Brantini <[email protected]>

docker-compose: Update to version 2.29.4

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.4

Signed-off-by: Javier Marcet <[email protected]>

boost: Updates package to version 1.86.0

This commit updates boost to version 1.86.0

This update does not bring new libraries.

More info about Boost 1.86.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_86_0.html

Signed-off-by: Carlos Miguel Ferreira <[email protected]>

jool: update to 4.1.13

* update jool to 4.1.13
* refresh patch

Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.13

Signed-off-by: Goetz Goerisch <[email protected]>

mdns-repeater: add respawn to init

Sometimes mdns-repeater quits or crashes, leaving service stopped. This commit should fix that by enabling respawn in procd.

Signed-off-by: Tina DiPierro <[email protected]>

vncrepeater: remove package

Upstream seems dead. NXDOMAIN.

Signed-off-by: Yanase Yuki <[email protected]>

ripgrep: update to 4.1.1

- Add patch to fix build on riscv64

Signed-off-by: Aleksey Vasilenko <[email protected]>

travelmate: update to 2.1.3-1

* fixed STA connection issues / restart the travelmate interface on new connections via ubus
* fixed NTP hotplug issues / trigger the NTP hotplug event via ubus
* fixed minor log issues (mail/hotplug)
* readme update

Signed-off-by: Dirk Brenken <[email protected]>

travelmate: update online readme

- added a major readme update based on the work of @richb-hanover

Signed-off-by: Dirk Brenken <[email protected]>

dockerd: fix typo in config for no_proxy

the "http_proxy" here should be "no_proxy"

Signed-off-by: Joe Zheng <[email protected]>

miredo: remove package

According to official website [1], Miredo is no longer maintained
and default Teredo server has been terminated.

From upstream website:
> The source code and documentation will be
> kept here for historical reasons.

[1]: https://www.remlab.net/miredo/

Signed-off-by: Yanase Yuki <[email protected]>

expat: update to 2.6.3

- This release contains fixes for CVE-2024-45490,
CVE-2024-45491, CVE-2024-45492.
- Since official place for expat development moved from SourceForge
to GitHub, SourceForge was removed from PKG_SOURCE_URL.
- Use gzip archive to avoid xz usage.
- Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because
we already have EXPAT_BUILD_DOCS=OFF, which has same effect.

Signed-off-by: Yanase Yuki <[email protected]>

dockerd: increase PKG_RELEASE for http proxy update

Fixes: e795bab25325 ("dockerd: add config options for http proxy")
Signed-off-by: Tianling Shen <[email protected]>

docker-compose: Update to version 2.29.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.3

Signed-off-by: Javier Marcet <[email protected]>

nerdctl: update to 1.7.7

Signed-off-by: Fabian Lipken <[email protected]>

dockerd: add config options for http proxy

add config options to set http porxy for dockerd, refer to
https://docs.docker.com/engine/daemon/proxy/ for details

use the *_proxy environment variable as the default value, so in most
cases, dockerd can use the system proxy settings just like opkg.

Signed-off-by: Joe Zheng <[email protected]>

curl: update to 8.10.0

- Refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp3: update to 1.5.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

ngtcp2: update to 1.7.0

Signed-off-by: Aleksey Vasilenko <[email protected]>

xfsprogs: update to 6.10.1

- libblkid is now a hard dependency
- Don't set configure options matching the default
- Enable LTO
- Disable debug asserts at configure stage, drop the patch
- Compile with target optimizations instead of -O2
- Update package URL

Signed-off-by: Aleksey Vasilenko <[email protected]>

haproxy: update to v3.0.4

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog
- Fixes CVE-2024-45506

Signed-off-by: Christian Lachner <[email protected]>

daemonlogger: remove package

Upstream repository[1] is now read-only.
It seems daemonlogger is no longer maintained.

[1] https://github.com/Cisco-Talos/Daemonlogger

Signed-off-by: Yanase Yuki <[email protected]>

ntpd: disable autoreconf fixup

Fixes #24918 which got introduced with openwrt c364cb8.

Credit for the fix goes to Hirokazu MORIKAWA.

Signed-off-by: Christian Svensson <[email protected]>