libs/libuv: fix PKG_CPE_ID

libuv:libuv is a better CPE ID than libuv_project:libuv as this CPE ID
has the latest CVEs (whereas libuv_project:libuv only has a CVE from
2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libuv:libuv

Fixes: f8ecbf529bad57970e4ff8f90484ba58d06b4a39 (libuv: update to 1.32.0)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit 17748714765694e2c898f16a51e8a424901517ee)

lang/tcl: fix PKG_CPE_ID

tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tcl:tcl

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit 6de9eebf5101d8e0391e27f476db68aae0e20a33)

utils/logrotate: fix PKG_CPE_ID

logrotate_project:logrotate is a better CPE ID than gentoo:logrotate as
this CPE ID has the latest CVE (whereas gentoo:logrotate only has CVEs
up to 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:logrotate_project:logrotate

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit 996f0b81c62eb526b0754c15b3a8662cba92c795)

libs/libupnp: fix PKG_CPE_ID

pupnp_project:pupnp is a better CPE ID than libupnp_project:libupnp as
this CPE ID has the latest CVEs from 2021 (whereas
libupnp_project:libupnp only has CVEs up to 2020):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pupnp_project:pupnp

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit 911d890b119e95ceb39fa28b5edb26e42cfbc0ed)

net/aria2: fix PKG_CPE_ID

aria2_project:aria2 is a better CPE ID than tatsuhiro_tsujikawa:aria2 as
this CPE ID has the latest CVE (whereas tatsuhiro_tsujikawa:aria2 only
has CVEs up to 2010):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aria2_project:aria2

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit c1c47695a80c49ffb5b96436cf3197935fdb6281)

net/openssh: fix PKG_CPE_ID

openbsd:openssh is a better CPE ID than openssh:openssh as this CPE ID
has the latest CVEs (whereas openssh:openssh has no CVEs):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openbsd:openssh

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>
(cherry picked from commit 4faf09cfb594b7564e87e15e2e294949f2f177f7)

yt-dlp: assign PKG_CPE_ID

Link: https://nvd.nist.gov/products/cpe/detail/2739DE26-F16B-478E-A270-32C659C7F2C6?namingFormat=2.2&orderBy=CPEURI&keyword=yt-dlp&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit 303f7973f7e8733d7398c2fce4a9fff7bc65f9b2)

tailscale: assign PKG_CPE_ID

Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.2&orderBy=2.2&keyword=cpe%3A2.3%3Aa%3Atailscale%3Atailscale&status=FINAL
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit f6c787146405620ca86ef125b3884f579cf0c2cd)

adguardhome: assign PKG_CPE_ID

Link: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Aadguard%3Aadguardhome
Link: https://github.com/openwrt/packages/issues/8534
Signed-off-by: George Sapkin <[email protected]>
(cherry picked from commit fd52fb6e3cebd50ce9ffb78e67350832a307e5f4)

microsocks: Update to 1.0.5

Release note: https://github.com/rofl0r/microsocks/releases/tag/v1.0.5

Removed upstreamed patches.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ab4b2995915d6f9f9f3d222f114652a17c585c94)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 083f4ce617e76f0727bb57e454ba9e17bb4a03af)

sing-box: Update to 1.11.15

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <[email protected]>
(cherry picked from commit b9ac3c5e7d6ffc0f1ee4fc84e166d7f27d807d30)

sing-box: Update to 1.11.13

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.13

Signed-off-by: Anton P. <[email protected]>
(cherry picked from commit 24e3f2a4c89eb5762422c7f5e781d72fcfb2c2e7)

sing-box: Update to 1.11.9

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9

Signed-off-by: Anton P. <[email protected]>
[line break added after commit title, accidental line removal fixed]
(cherry picked from commit c0a996ddd9ee8a16fb79f5495e6fc0196eebf493)

sing-box: Update to 1.11.3

Signed-off-by: Mosney Strange <[email protected]>
(cherry picked from commit 2d51880e48f2c9e3bb392c31e06ba6b5a43ae013)

btop: Update to 1.4.4

Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 062287375c17f29b59b0d6ac0fdccd0c397584ff)

btop: add patch to fix download/upload display

Uses https://github.com/aristocratos/btop/pull/1156

Signed-off-by: Nate Robinson <[email protected]>
(cherry picked from commit 99bc4798ed302620b07ef3a88820079ae5d095f1)

python-click: add hostbuild

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit 117a3a2b1b58917acfedde7df0f7abd3b0b3b17d)

sudo: Fix license file

Signed-off-by: Jan Kardell <[email protected]>
(cherry picked from commit 7841c67092b0cb7cda8decf369daf96a8c5de9f4)

sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>
(cherry picked from commit b153b6a034414532535c9dc0e4f4ede27861dc89)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <[email protected]>

sudo: bump to version 1.9.16p2

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 190b99b1bcfe8578a1c1fdde491bf6ab54b1f76b)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <[email protected]>

sudo: bump to verison 1.9.15p5

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit f2a6449b6f4be22e7ba0fe1dcae7a76fc969d31d)

sudo: bump to verison 1.9.15p4

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 62f4f97bdbe2ba660d3a31ad8f24cbc374910f9c)

python-uci: update to version 0.10.3 + two patches

Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] https://gitlab.nic.cz/turris/pyuci/-/blob/240180b2946fdd1fd46c7f023f224acce5a55511/pyproject.toml#L29
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] https://github.com/openwrt/packages/blob/c94ab433caf345ebc6bef9a7174d1f65f676fc87/lang/python/python3-version.mk#L18
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] https://github.com/python/cpython/commit/c96ab19ae460911e40ffa502f1bf945ab6c53a2e

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit d457c26c0dbea4c7c9e5795f898fbcd98c257ff1)

python-urllib3: add hostbuild

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit d6c644c5f534e677444846ad291f828c69a33223)

protobuf: don't use shared libraries for host

Avoids needing to handle rpath.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit d24229e4415b4a5c4fb7784d20c8748c9a9ebf4b)

knot-resolver: update to version 5.7.4

Knot Resolver 5.7.4 (2024-07-23)
================================

Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
  Also expose some of the new tweaks in lua:
   (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
   (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}

Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696

Incompatible changes
--------------------
- libknot 3.0.x support is dropped
  Upstream last maintained 3.0.x in spring 2022.

Knot Resolver 5.7.3 (2024-05-30)
================================

Improvements
------------
- stats: add separate metrics for IPv6 and IPv4

Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
  with the NSEC3 having over-limit iteration count

Knot Resolver 5.7.2 (2024-03-27)
================================

Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t

Signed-off-by: Jan Hák <[email protected]>
(cherry picked from commit 6e208887e3977367d0adc3ff28eb2df62063f274)

named: /var/run/named isn't being created with correct permissions

It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <[email protected]>
(cherry picked from commit b82574b31c240efedcb3f96274982a2703abf440)

tang: Refresh patches

Signed-off-by: Andreas Gnau <[email protected]>

libulfius: Install library on target

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit 6c62e0fcfecf5a322cba368e5410f5e2f693b411)

liborcania: Install library on target

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit 768b995f980f2875f588ab8f90e5b597cfa4f5d8)

nano: update to 8.5

Update nano editor to version 8.5.

Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit cfdf5fffec99c025c5ae93ad450566a28c915837)

btop: add migration for alias command

Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.

Fixes: #26709
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ae33358c4f2633d49414870e43e5b7796259eced)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 7d6535737ccf6577789fdbd65b582d43b6a399e9)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ed12bfe13cacc0f641dc9543a3b2a623ae095d9b)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a91d2788044d0bf569015f0a4a4193ae32b49730)

transmission: add syscalls to seccomp filter

Add missing syscalls found with `/etc/init.d/transmission trace`.

fix crash on boot on x86_64 platform

Signed-off-by: Liangbin Lian <[email protected]>
(cherry picked from commit d8272975468374232b72e85c70cf79c3699aca8b)

transmissision: remove build dependency on nodejs

Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build

Signed-off-by: Serhii Ivanov <[email protected]>
(cherry picked from commit a06829b0a23255636d3662d24a6e7a085efd955b)

dnsdist: update to 1.9.10

fixes CVE-2025-30193

Signed-off-by: Peter van Dijk <[email protected]>
(cherry picked from commit ec30d1e4f6c33d200c11b35a218a6ae68364b391)

netavark: revert lock cargo dependencies

Now we have rust 1.85.0.

This reverts commit aba78031f58ef5e9fd5543c051cd6e0293fee553.

Signed-off-by: Tianling Shen <[email protected]>

rust: update to 1.85.0

Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.

rust-iptables requires rust 1.85.0 since commit 75825cd
https://github.com/yaa110/rust-iptables/commit/75825cd9c13db91f697461e6fa91f78c5e927008

Signed-off-by: Jonathan McCrohan <[email protected]>
(cherry picked from commit c67502852851366baff7868ea53b9e8c70bc1fe0)
[refresh patches]
Signed-off-by: Tianling Shen <[email protected]>

rust: update to 1.84.0

Signed-off-by: hingbong lo <[email protected]>
(cherry picked from commit aff8367c7afb8decef9e52a0ebf4dea72a16b39b)

bind: bump to 9.18.37

Signed-off-by: Noah Meyerhans <[email protected]>

bind: bump to 9.18.36

Signed-off-by: Noah Meyerhans <[email protected]>

php8: update to 8.2.28

This fixes:
    - CVE-2025-1217
    - CVE-2025-1219
    - CVE-2025-1734
    - CVE-2025-1736
    - CVE-2025-1861

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.28

Signed-off-by: Michael Heimpold <[email protected]>

btop: Update to 1.4.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5082f947910d28c2e306b5330a7d4c4fc86a391d)

yq: Update to 4.45.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 35eb372aa5fa1968c4458e727ebbf5d7795e455e)

yq: Update to 4.44.6

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 649ff95b1ede862be4ce19d34916ce2b66a162e4)

yq: Update to 4.44.5

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 6945c7bb65d8f9e9eb42f53c3cd390c6cffc0aa5)

dnsdist: update to 1.9.9

fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <[email protected]>

perl-ack: Update to 3.8.2

ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit b6b9cd38fa4b28a3d0ddf5f2ca72c77deb712c98)

ack: Update to 3.8.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0c0d897b47ef98781277305d09eadf79b6bb6fe0)

btop: Update to 1.4.2

Update alias command.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 8df8700a135751d4b9365cd70e645b18b47b45a7)

btop: Update to 1.4.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0e5cc7de578e72d45bd62237519b334cec26ba03)

v2raya: Update to 2.2.6.7

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit aad793b6f46e5d4d6ec2177fec7f38b1e575fe99)

librespeed-go: add missing conffiles

Add missing uci configuration to conffiles.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit df9ba185789ada48f536c3c62a816fd0bbb58505)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1d73b25ed8b14ebf63a44542bb562449922a0dcb)

expat: update to 2.6.3

- This release contains fixes for CVE-2024-45490,
CVE-2024-45491, CVE-2024-45492.
- Since official place for expat development moved from SourceForge
to GitHub, SourceForge was removed from PKG_SOURCE_URL.
- Use gzip archive to avoid xz usage.
- Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because
we already have EXPAT_BUILD_DOCS=OFF, which has same effect.

Signed-off-by: Yanase Yuki <[email protected]>
(cherry picked from commit b0b5b8bf67c577d13b365d61825b856885f8185c)

expat: update to 2.6.2

Signed-off-by: krant <[email protected]>
(cherry picked from commit 8db49729c373fde0298ffa5708c8bbcebacf4513)

expat: update to 2.6.0

- Don't set default CMake options

Signed-off-by: krant <[email protected]>
(cherry picked from commit c40da57d7b99b9e7daf89db63e996e3fdd8ad25b)

lighttpd: backport revert changed TLS defaults

Signed-off-by: Glenn Strauss <[email protected]>

lighttpd: update to lighttpd 1.4.79 release hash

Signed-off-by: Glenn Strauss <[email protected]>
(cherry picked from commit e800fc7e8cadcd28b92429eb6ff9e677f4c50d46)

nano: Update to 8.4

Update nano edit to version 8.4.

Add configure flags to overcome upstream bug 66978, where the newly added
gnulib module for strcasecmp always fails in the configure step when
cross-compiling.
https://savannah.gnu.org/bugs/?66978
https://github.com/coreutils/gnulib/commit/b2927d1b1fa3fb09a2210a3df5691f7d48d6151b

The added flags disable the strcasecmp function from gnulib.
If upstream (gnulib?) fixes things later, the flags should be removed.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit 3d055f8dfb13ded552fa62e1aa2b008512d70a32)

libxslt: fix build breakage after libxml2 CVE fix updates

libxml2 was updated in OpenWrt Git tree with commit dec59db8fb1f
("libxml2: update to 2.13.6"), which fixed several CVEs.

Unfortunately this version bump included removal of some features, which
leads to build issues of libxslt:

  libxslt-1.1.37/xsltproc/xsltproc.c:733:39: error: assignment of read-only variable 'xmlParserMaxDepth'
   733 |                     xmlParserMaxDepth = value;

So lets fix it by backporting an upstream "fix", which removes that
deprecated functionality.

Fixes: dec59db8fb1f ("libxml2: update to 2.13.6")
References: https://github.com/openwrt/openwrt/pull/18280
Signed-off-by: Petr Štetiar <[email protected]>

zoneinfo: Updated to 2025b release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit df9015f9daa8adc34be9a1866f15e9d417524cf5)

zoneinfo: Updated to 2025a release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 59db1470314a4a3f5c78ad805fa8381de0231936)

zoneinfo: Updated to 2024b release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 54162a8254bd4828ddf134abc11be724102b1e40)

zoneinfo: Updated to 2024a release

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 5a06f6339076aecb9a9cdce6867e4b7307f929c5)

zoneinfo: Updated to the latest (2023d) release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 69953f9fd39bdeef779ad5a5f9f8d982d4f47e64)

netavark: lock cargo dependencies

rust-iptables 0.5.3+ requires rust 1.85.0 to build, use the version
defined in Cargo.toml instead.

Signed-off-by: Tianling Shen <[email protected]>

pptpd: Fix secrets update

Clear pptp-server existing logins from CHAP_SECRETS file before adding new login data.

Signed-off-by: Thiago Pereira Ricciardi <[email protected]>

rust: disable download ci llvm

Upstream removed CI builds for this (outdated) version.

Signed-off-by: Tianling Shen <[email protected]>

rsync: backport bug fixes

Including CVE fixes for:
CVE-2024-12084
CVE-2024-12085
CVE-2024-12086
CVE-2024-12087
CVE-2024-12088
CVE-2024-12747

The patch list is based on rsync_3.2.7-1+deb12u2 from Debian.

Signed-off-by: Tianling Shen <[email protected]>

natmap: update to 20250221

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 2db5fca2d8b3310de2812972af13f91e55a52217)

v2raya: Update to 2.2.6.6

Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 39c5d7f8514cfcf8694f6ef22523454403d8a425)

v2raya: Update to 2.2.6.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a5a9140870331503f51acebc7f5deb9417fef05c)

v2raya: Update to 2.2.6.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a08614a0475f964b674f136e642fa800dd00488e)

v2raya: Update to 2.2.6

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit fd5546fc1f4686bb2b595b14b4c3c91a939b2dc3)

rclone: Update to 1.69.1

Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 944d48241c1408a5b75efa2d6d5e77f0ee500d80)

nextdns: Update to version 1.45.0

Signed-off-by: Olivier Poitrey <[email protected]>

nextdns: Update to version 1.44.6

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.11.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 8eecd2e5a08e40fcc28486c2d6125ddec99226c4)

sing-box: Update to 1.11.0

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 2c7b8ef5a2deb42089674dba2177e4bc8ccb88d6)

Revert "xray-core: Update to 25.1.30"

xray-core v24.12.31 is the last version that supports Go 1.21.

This reverts commit 0eb71539900d1e9fe0ff9e3ae6b258e4ba1099e0.

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.69.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 35b614c43758cfcac53f54a392e841aff30c4f1b)

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <[email protected]>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bcd87dd8b607a1888fe5ceb521a619d068a28bbe)

rclone: Bump to 1.68.2

Release notes in links below.

Link: https://rclone.org/changelog/#v1-68-2-2024-11-15
Signed-off-by: Ryan Keane <[email protected]>
(cherry picked from commit c342279eb6386f707e6982fec95a31c51e74cb98)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit cec4103bbcdddd63930613b4d8c81973caa712fe)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d750bb3182729619144735d0aacab258769377d6)

xray-core: Update to 25.1.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit e9a86e1809dc4b76ab2eb3980fc179567cfc2ccf)

xray-core: Update to 24.12.31

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1166a2531161851d3f3d9ec6f990dab255025364)

frr: 10.2.1 fixes

add mgmtd and pim6d

Signed-off-by: Lucian CRISTIAN <[email protected]>

bind: bump to 9.18.33

Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <[email protected]>

fastd: update to v23

Signed-off-by: Matthias Schiffer <[email protected]>
(cherry picked from commit 24348066216aa27e49e18e6f78c719509fc8f450)

coova-chilli: Fix WolfSSL support

Signed-off-by: Federico Capoano <[email protected]>
(cherry picked from commit bf3333594a8add333e3d7192107aa7be8bc39a33)

# Conflicts:
# net/coova-chilli/Makefile

frr: update to 10.2.1

Signed-off-by: Lucian CRISTIAN <[email protected]>

libyang: update to 2.1.128

needed for frr update to 10+

Signed-off-by: Lucian CRISTIAN <[email protected]>

hev-socks5-server: update to 2.7.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit d0d67ded93936657b232dae93eaf25924a7431fd)

hev-socks5-server: update to 2.6.9

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30db86cc9c0e5e0a9ec7b651f22515bf2c5e765d)

uspot: update to Git HEAD (2025-01-20)

57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

(cherry picked from commit 2466aaccc1b358c6fbcc17aeb6628d974870911b)
Signed-off-by: Thibaut VARÈNE <[email protected]>