cloudflared: improve init script for tunnel management

Resolved conflict between remotely-managed tunnel and locally-managed
tunnel configurations.

- Bumped PKG_RELEASE to 2
- Commented out 'config' and 'origincert' options in default
  configuration file
- Preserved options as comments for user reference

Signed-off-by: Akihiro Nagai <[email protected]>

openwisp-monitoring: upgrade to 0.3.0

Upgraded openwisp-monitoring package to 0.3.0

Signed-off-by: Gagan Deep <[email protected]>

afalg_engine: bump to v1.2.2

This allows building with CMake 4.0.

Silence the warning about deprecated declarations, as it is inevitable,
since the whole engine system is deprecated.

Signed-off-by: Eneas U de Queiroz <[email protected]>

openwisp-config: upgrade to 1.2.0

Upgrades openwisp-config package to 1.2.0

Signed-off-by: Gagan Deep <[email protected]>

syncthing: bump to 2.0.11

Changelog: https://github.com/syncthing/syncthing/releases/tag/v2.0.11
Signed-off-by: George Sapkin <[email protected]>

cloudflared: Update to 2025.10.1

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.10.1

Signed-off-by: Tianling Shen <[email protected]>

php8-pecl-http: update to 4.3.1

- support for newer curl versions
- GCC 15 compatibility
- PHP 8.5 compatibility

Signed-off-by: Michael Heimpold <[email protected]>

php8-pecl-xdebug: update to 3.4.7

This fixes varios bugs, e.g. memory leaks, segfaults and
other issues since 3.4.1.
For full changelog see:
https://pecl.php.net/package-changelog.php?package=xdebug&release=3.4.7

Signed-off-by: Michael Heimpold <[email protected]>

earlyoom: add new package

earlyoom checks the amount of available memory and swap at an adaptive
rate for up to 10 times per second. When both available memory and swap
are below threshold, it'll send SIGTERM or SIGKILL to the process with
the highest oom_score. Details about oom_score can be obtained at
https://man7.org/linux/man-pages/man5/proc_pid_oom_score.5.html

Signed-off-by: Alice H. <[email protected]>

sing-box: update to 1.12.12

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.12

Signed-off-by: Anton P. <[email protected]>

fish: fix compilation with mips64

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

strongswan: add build dependency for python and explicitly use python3

Before:
checking for python... /myworkingdir/build/staging_dir/host/bin/python
checking for python version... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python platform... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python extension module directory (pyexecdir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.

After:
checking for python version... 3.11
checking for python platform... darwin
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... ${PYTHON_PREFIX}/lib/python3.11/site-packages
checking for python extension module directory (pyexecdir)... ${PYTHON_EXEC_PREFIX}/lib/python3.11/site-packages

Signed-off-by: Josef Schlehofer <[email protected]>

adguardhome: refactor config loading and migration

Rename config options and remove unused ones.

Signed-off-by: George Sapkin <[email protected]>

syncthing: fix maxprocs config option name

Map old config option "macprocs" to new one.

Signed-off-by: George Sapkin <[email protected]>

syncthing: improve argument handling readability

Remove reduntant checks when making directories.

Signed-off-by: George Sapkin <[email protected]>

telegraf: use uci-defaults for config generation

use uci-defaults to generate default config to improve maintanability

Signed-off-by: Niklas Thorild <[email protected]>

telegraf: don't call Build/Prepare/Default

don't call Build/Prepare/Default since it serves no purpose

Signed-off-by: Niklas Thorild <[email protected]>

telegraf: update to 1.36.3

- Update Telegraf to v1.36.3

Signed-off-by: Niklas Thorild <[email protected]>

bigclown-gateway: backport pending patch to fix JSON dumps

Pull request:
https://redirect.github.com/hardwario/bch-gateway/pull/20

Signed-off-by: Josef Schlehofer <[email protected]>

bigclown-gateway: update to version 1.17.0

Release notes:
https://github.com/hardwario/bch-gateway/releases/tag/v1.17.0

Signed-off-by: Josef Schlehofer <[email protected]>

python-calver: update to version 2025.10.20

Fixes:
 SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!

        ********************************************************************************
        Please consider removing the following classifiers in favor of a SPDX license expression:

        License :: OSI Approved :: Apache Software License

        See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
        ********************************************************************************

!!
  self._finalize_license_expression()

Release notes:
https://github.com/di/calver/releases/tag/2025.10.20

Signed-off-by: Josef Schlehofer <[email protected]>

python-markupsafe: update to version 3.0.3

Release notes:
https://github.com/pallets/markupsafe/releases/tag/3.0.3

Signed-off-by: Josef Schlehofer <[email protected]>

python-wheel: update to 0.45.1

Release notes:
https://github.com/pypa/wheel/releases/tag/0.45.1

Signed-off-by: Josef Schlehofer <[email protected]>

python-cython: update to version 3.1.5

Fixes:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
   ^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
 ^^^^^^^^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
  ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'

Signed-off-by: Josef Schlehofer <[email protected]>

python-setuptools: update to version 80.9.0

Release notes:
https://setuptools.pypa.io/en/stable/history.html#v80-9-0

Signed-off-by: Josef Schlehofer <[email protected]>

python-uci: drop patches due to newer setuptools

These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <[email protected]>

python3: update to version 3.11.4

In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] https://redirect.github.com/buildroot/buildroot/commit/b37e4a5f56182c5b8e4ffce433eb652174a19da6
[2] https://peps.python.org/pep-0632/
[3] https://redirect.github.com/pypa/setuptools/commit/88eb8cc66f8762e37ec78913c07ccf3e3dba05e1

Signed-off-by: Josef Schlehofer <[email protected]>

umurmur: Use example config and add own init script

Files such as config file and init script related to OpenWrt
were removed in upstream [1]. Config file was same as umurmur.conf.example,
thus use it and init script, we need to ship our own. Add a simple one.

[1] https://github.com/umurmur/umurmur/commit/209edb5c887e5a5d3ab2c95ab4a8aeb8c1e6e8f3

Signed-off-by: Josef Schlehofer <[email protected]>

umurmur: move config file to its default location

This was changed in version 0.3.1 [1]

Fixes initial start of umurmur:
```
root@turris:~# umurmurd
Error in config file /etc/umurmur/umurmur.conf line 0: file I/O error
```

And also while running help of umurmurd, the defailt location is /etc/umurmur/umurmur.conf
```
Usage: umurmurd [-d] [-r] [-h] [-p <pidfile>] [-t] [-c <conf file>] [-a <addr>] [-b <port>]
       -c <conf file> - Specify configuration file (default /etc/umurmur/umurmur.conf)
```
[1] https://github.com/umurmur/umurmur/commit/4f3ed41357bb6fcb7afddd5343b59cfef54d65a4

Fixes: c4a23ca99662e67c8b6f5b8bad76d93fc2381ea0 ("umurmur: update to version 0.3.1")
Signed-off-by: Josef Schlehofer <[email protected]>

docker-compose: Update to version 2.40.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.40.3

Signed-off-by: Javier Marcet <[email protected]>

adguardhome: bump to 0.107.69

Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.68
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.69
Signed-off-by: George Sapkin <[email protected]>

snapcast: remove leftover "libavahi-client" dependency

With "-DBUILD_WITH_AVAHI=OFF" the "libavahi-client" dependency is not
needed anymore. Instead, the "libexpat" dependency needs to be specified
explicitly.

Fixes: a9ac8666da5f ("snapcast: fix PulseAudio")
Fixes: eeb8d131fc93 ("snapcast: add package snapserver and snapclient")
Signed-off-by: Szabolcs Hubai <[email protected]>

snapcast: show snapweb placeholder

snapserver has a built-in webserver which is able to host a web player:
snapweb. [1]
It is accessible at http://snapserver:1780/ but with enabled "doc_root"
setting and with missing directory the browser shows an empty page
with a message: "The resource '/' was not found."

Fix this with disabling the "doc_root" setting in "/etc/snapserver.conf"
This "doc_root" was enabled and set to "/usr/share/snapserver/snapweb"
in upstream commit fcbe40585875 ("Install snapweb") [2], back in 2020
and released in v0.21.0 of Snapcast.

This was reported in an upstream discussion by Robert Muth. [3]

[1]: https://github.com/badaix/snapweb
[2]: https://github.com/badaix/snapcast/commit/fcbe405858752457a67006eeff4f0da60e8fbc89
[3]: https://github.com/badaix/snapcast/discussions/1417#discussioncomment-14480178

Fixes: eeb8d131fc9 ("snapcast: add package snapserver and snapclient")
Signed-off-by: Szabolcs Hubai <[email protected]>

rclone: Update to 1.71.2

Release note: https://github.com/rclone/rclone/releases/tag/v1.71.2

Signed-off-by: Tianling Shen <[email protected]>

syslog-ng: add dependency for ivykis

Replace embedded ivykis with a separate package to improve
dependency management and enable library reuse.

The ivykis library now properly supports io_uring when
CONFIG_KERNEL_IO_URING is enabled.

Signed-off-by: Josef Schlehofer <[email protected]>

ivykis: add new package

Libivykis, an asynchronous I/O readiness notification library.
This library is required by syslog-ng and potentially other packages
that need event-driven I/O handling.

Signed-off-by: Josef Schlehofer <[email protected]>

tailscale: update to 1.90.2

Changelog: https://tailscale.com/changelog#2025-10-23
Changelog: https://tailscale.com/changelog#2025-10-24

Signed-off-by: Sandro Jäckel <[email protected]>

docker-compose: Update to version 2.40.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.40.2

Signed-off-by: Javier Marcet <[email protected]>

python-build: update to version 1.3.0

Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <[email protected]>

python-flit-core: update to version 3.12.0

Release notes:
https://github.com/pypa/flit/blob/5714d1f78fb9b344c997cb866c44bb9506b8ca41/doc/history.rst#version-312

Signed-off-by: Josef Schlehofer <[email protected]>

avahi: fix implementation of avahi user

All avahi subpackages should run the daemon as a dedicated user insteead
of as the nobody user. This is helpful in troubleshooting and better for
security and to help avoid resource conflicts.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (avahi-dbus-daemon)

Signed-off-by: John Audia <[email protected]>

xl2tpd: add UCI support

This adds UCI support for xl2tpd. To maintain backward compatibility, I
have introduced the config option “use_legacy_config,” which is enabled
by default.

If you want to use the UCI config, you must disable or delete this
option.

Signed-off-by: Martin Schiller <[email protected]>

xl2tpd: add support to set own hostname in proto handler

This is needed if the peer only allows certain hostnames to connect.

Signed-off-by: Martin Schiller <[email protected]>

kea: update to 3.0.1

Requires conversion to meson.

Unfortunately, upstream needlessly relies on cc.run() to figure out
various things instead of cc.compile(). Requires massive patch.

Signed-off-by: Rosen Penev <[email protected]>

php8: update to 8.4.14

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.14

Signed-off-by: Michael Heimpold <[email protected]>

nfs-kernel-server: disable kerberos and ldap

Some targets are failing due likely to build order issues suggested by
Daniel[1] so disable these two options for the v4 package.

Example:
make[4]: Leaving directory '/builder/shared-workdir/build/sdk/build_dir/target-aarch64_cortex-a53_musl/nfs-utils-2.8.4'
Package nfs-kernel-server-v4 is missing dependencies for the following libraries:
libgssapi_krb5.so.2
libldap.so.2

1. https://github.com/openwrt/packages/pull/27150#issuecomment-3446589119

Signed-off-by: John Audia <[email protected]>

flent: update to 2.2.0

Release Notes:
https://github.com/tohojo/flent/releases/tag/v2.2.0

Signed-off-by: Nick Hainke <[email protected]>

open-vm-tools: update to 13.0.0

for detailed change log, please refer to:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog

Signed-off-by: Tan Zien <[email protected]>

cqueues: lua-5.3, 5.4 variants

Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <[email protected]>

luaossl: lua-5.3, 5.4 variants

Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <[email protected]>

qemu: update to 10.1.0

- Update to 10.1.0
- Refresh patches
- Disable DBUS Display #27036

Signed-off-by: Vladimir Ermakov <[email protected]>

postgresql: fix fails to start on mounted data directories

This commit resolves a bug where the PostgreSQL service failed to start
during the boot process when its data directory ($pgdata) was on a
partition mounted via `/etc/fstab`.
Because the filesystem is already mounted, no hotplug event is ever
triggered, and the PostgreSQL service mistakenly waits for an event
that will never happen.
This fix adds a check to ensure the script does not skip starting the
service if the data directory is on a mount point.

Signed-off-by: Peiying Huang <[email protected]>

domoticz: update to 2025.2 and add jwt-cpp dependency

Version 2025.2 (October 13th 2025)
- Implemented: EnergyDashboard, add option for (Outside) Temperature Sensor
- Implemented: Enever, Added Pure Energy, removed obsolete providers
- Implemented: Enphase, display a error is a IQ inverter has not been received for more then a day
- Implemented: Kodi, support for 'tvshow' type
- Implemented: MQTT-AD, added support for Climate action_template/state
- Implemented: MQTT-AD, added support for IR Blaster (Tuya iH-F8260)
- Implemented: MQTT-AD, handling battery low boolean sensors
- Implemented: MQTT-AD, allow publishing messages
- Implemented: P1 Chart, Report: Added Total Column (Usage-Return)
- Implemented: Rain Rate notification
- Implemented: Support for Humidity only graph
- Fixed: MQTT-AD, fix issue where brightness and RGB command topic are different
- Fixed: MQTT-AD, preserve select options when updating a device
- Fixed: Replace device now also copies 'Options' field
- Changed: Enphase query Token method
- Changed: mDNS, hostname now lowercase
- Changed: MQTT-AD, added support for color_temp_command_template
- Changed: TADO, Added fixed API endpoint
- Changed: TADO, Add poll interval option
- Changed: MQTT, not publishing devices that are not used
- Changed: Philips Hue now uses HTTPS to be compliant with new Hue Bridge
- Fixed: mDNS, possible crash when web server (non) SSL was disabled, or a invalid port was specified
- Fixed: Charts, after deleting a datapoint, the browser was not correctly refreshed
- Updated: Windows libraries

Version 2025.1 (May 5th 2025)
- Implemented: Battery level for Setpoint sensors
- Implemented: Charts, zoom option for 'Day' view
- Implemented: Data Pushers, added P1 actual value
- Implemented: EnOcean, now able to choose an optional base_id as sender_id instead of the chip_id (#6213)
- Implemented: Floorplan, Add support for stop button (Ventation blinds)
- Implemented: RFXCom, Updated SDK
- Implemented: Support for Honeywell Series 5/PIR
- Implemented: Text sensor, now posible to edit direct from the GUI
- Implemented: YouLess, added Water meter
- Implemented: More default icons
- Implemented: MQTT-AD, added support for Gas device class
- Implemented: MQTT-AD, added support for Text device class
- Implemented: MQTT-AD, better precision for kWh sensors
- Implemented: MQTT-AD, enabled 'device_automation' component to be compatible with upcoming (2025) Zigbee2MQTT version
- Implemented: MQTT-AD, handling single onoff color mode as a normal light/switch
- Implemented: MQTT-AD, power sensors for the Tuya SPM02
- Implemented: MQTT-AD, support sensors that report humidity but sends 'null' values
- Implemented: MQTT-AD, support for string field state objects
- Implemented: MQTT Push 'Retained' mode option
- Implemented: Rain devices can now be replacement with different types of rain devices
- Implemented: RFXCom, Falmec Support
- Implemented: RTL433, Support Generic Switch (Door) sensor
- Implemented: Tado, oauth2 support
- Changed: dzVents, possible to pass a Domoticz device ID in notify() through the extra parameter
- Changed: Energy Dashboard now also available for non-admin users
- Changed: Energy Dashboard, Text object clipping rectangle
- Changed: Google Firebase Cloud Messaging (FCM) alternative way to pass a Domoticz device ID through the extra field ('|Device=<devidx>')
- Changed: Internal webserver refactoring
- Changed: Netatmo Improved and automated login process for devices (to obtain client ID and Password with user selectable scopes)
- Changed: Removed Highcharts 'Download PNG/JPG/SVG' buttons until export server is fixed
- Changed: Using OpenStreetMap for Latitude/Longitude query in settings
- Changed: Hardware/User/Application/Variables setup page (update/delete/add buttons)
- Changed: Smoke Detectors are now able (internally) to use keep-alive timestamps
- Fixed: Application shutdown, solved possible crash (#6310)
- Fixed: AtagOne, fixed getting device_id and better debuginfo
- Fixed: Charts, dynamic title based on selected range
- Fixed: Computed Meter summation
- Fixed: Custom Icons, making sure they are valid and loaded OK
- Fixed: Floorplan, corrected open/close icon behaviour
- Fixed: Floorplan, now handles protected selectors
- Fixed: MQTT Push, making sure direct push is working
- Fixed: Possible mutex lock issue when logging
- Fixed: Pushers, corrected Gas value rounding
- Fixed: Python framework, invalid sValue when creating a General/kWh sensor
- Fixed: RFXCom 868 MHz Weather device
- Fixed: RFXCom, WS90 Weather device
- Removed: Thermosmart thermostat (Product no longer supported/available by the manufacturer)
- Removed: API: Old RType calls have been replaced
- Updated: HighCharts
- Updated: Self Signed Certificate (Valid till 2035)
- Updated: Translations

Version 2024.7 (July 13th 2024)
- Implemented: P1 Meter, Report, Header now also supports simple mode (No T1/T2/R1/R2 but just total)
- Fixed: Google Cloud Messaging (GCM/FCM) possible crash when notification needed to be send

Version 2024.6 (July 8th 2024)
- Fixed: EventSystem, LOG_FORCE now always logged
- Changed: Google Cloud Messaging (GCM) now uses the new v1 API of Google's Firebase Cloud Messaging (FCM)

Version 2024.5 (July 7th 2024)
- Implemented: Currency Symbol in Location Settings
- Implemented: dzVents, Added historical data helper 'med' to calculate the median value
- Implemented: dzVents, Improved logging
- Implemented: Energy Dashboard
- Implemented: Enever, Added Budget Energy and Eneco
- Implemented: Enphase, Live storage data
- Implemented: Enphase, Option for more Inverter details (ac/dc voltage, temperature, lastupdate)
- Implemented: Event Editor, Close/Close All menu dropdown
- Implemented: Event Editor, Storing/Loading opened events
- Implemented: Hour chart for P1 log
- Implemented: MQTT-AD Climate Fan Mode
- Implemented: MQTT-AD Climate Swing Mode
- Implemented: OpenWeatherMap, API 3.0 support
- Implemented: P1 Meter, option to specify view (low/high tariff or simple (dynamic contract))
- Implemented: Possible to query a range of device states via JSON
- Implemented: SolarEdge, polling Storage devices
- Fixed: Data Pushers, Forecast for Weather Station subtypes
- Fixed: Floorplan, better detection of switches
- Fixed: Hardware Setup, hiding extra parameters when selecting a python plugin
- Fixed: PythonEx framework, two notifications where send for switch type devices
- Fixed: Python framework, custom image loading
- Removed: Cereal Proxy (not used anymore)
- Changed: EvoHome, now making use of general logging system
- Changed: MQTT-AD, now also handles brightness scale number values as string
- Changed: SBFSpot, disabled error 28 error
- Changed: Selector switch now displays correct state in Data field (and devices overview)

Version 2024.4 (January 30th 2024)
- Fixed: cWebm, fixing high CPU load caused by time jumps
- Fixed: Memory leak in master/client setup
- Fixed: Python, device creation with options was not working correctly
- Fixed: Room Selection, switching to default room did not always work
- Fixed: Temperature compare chart for Fahrenheit

Version 2024.3 (January 24th 2024)
- Implemented: Domoticz Remote Server, added better error message if remote Domoticz device could not be created because accepting new devices is disabled under settings
- Implemented: InfluxDB Data push, add error message when return status code is forbidden
- Fixed: Alert sensor notification
- Fixed: Scripts/Lua/Blockly, setting a setPoint

Version 2024.2 (January 15th 2024)
- Implemented: Compare chart for most sensor types
- Implemented: Email, Splitting mime attachments over multiple lines
- Implemented: Notifications, Option to enable/disable
- Implemented: OpenZwave is back.... (No Support)
- Updated: Translations
- Changed: Comparing charts now uses correct Y-Axis label
- Changed: Internal, Last received is now handled differently, should solve possible hardware timeout issues
- Changed: MQTT, QoS is now set to 1 for all messages
- Fixed: MQTT-AD: Fan creation
- Fixed: Timer Plans, now also duplicates scenes

Version 2024.1 (January 1th 2024)
- Implemented: AlfenEve, added charging indication switch
- Implemented: AlfenEve, added option to specify charge current (or disable this)
- Implemented: AlfenEve, added Solar charging mode and settings
- Implemented: Counter report, now possible to remove data point (via shift click) from month chart
- Implemented: Devices overview, Setpoint log button
- Implemented: Enever, added support for providers Atoom Alliantie, Energie van Ons, Vandebron, Wout Energie
- Implemented: Enever, option to specify different providers for Gas/Electricity
- Implemented: Enever: added two user variables for average gas/electricity price
- Implemented: Enphase, counter helper to prevent turnover caused by powerloss, reboot or other envoy issues
- Implemented: Enphase, Initial support for Encharge battery status (needs more work)
- Implemented: Livesearch, included hardware name and optimized search algorithm to search all entered strings
- Implemented: Managed Counters, now possible to use negative values
- Implemented: Mitsubishi WF RAC Airconditioning
- Implemented: MQTT-AD, added support for climate min_temp/max_temp and temp_step
- Implemented: MQTT-AD, added support for number voc type
- Implemented: MQTT-AD, added support for Wh and Wm sensors
- Implemented: MQTT-AD, don't add new devices when this is disabled in the system
- Implemented: MQTT-AD: Fan percentage_command_template merged with preset_modes
- Implemented: MQTT, added option to specify devices to be published to MQTT
- Implemented: P1 Meter report, now possible to remove data point (via shift click) from month chart
- Implemented: Persistent Timers (will work in all timer plans)
- Implemented: SetPoint devices can now be configured with a custom unit, min/max and step size and have a custom icon
- Implemented: Support for Python 3.12
- Implemented: TeleInfo, added Tempo field
- Implemented: Temp/Hum/Baro or combination can be replaced by any other Temp/Hum/Baro or combination
- Implemented: Temperature report, now possible to remove data point (via shift click) from variation chart
- Changed: Floorplan, better display of current state for counter devices
- Changed: Floorplan, Sound Icon state (0 dB = Off else On)
- Changed: MQTT-AD: better device name generation
- Changed: Netatmo login, now using the API Token
- Fixed: EventSystem, corrected event of RGB/W/WW devices
- Fixed: Export to csv from Charts
- Fixed: MQTT-AD, RGB dimmers did not work correctly in scenes/timers
- Fixed: MQTT-AD: better handling of Push-On/Push-Off devices
- Fixed: MQTT-AD: better handling of Switch commands that needs a 'state' object
- Fixed: MQTT-AD: fixed brightness for HS lights
- Fixed: MQTT-AD: prevent blind from updating on non-numeric state changes
- Fixed: P1 Meter, buffer size increased because of large datagrams on some meters
- Fixed: Python memory leak
- Fixed: Sunset/rise timers now correctly set the time for next day
- Fixed: Switches defined with "Off Delay" are not set to "Off" at startup
- Removed: OpenZWave (Move to ZWaveJS-UI in combination with MQTT Auto Discovery)
- Removed: RFXCom, firmware update via web interface (use RFXFlash instead)

Signed-off-by: David Woodhouse <[email protected]>

uradvd: implement test.sh

to verify the version emitted by uradvd is not empty.

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: update to r26-1e64364d

The OpenWrt package will not provide the correct version information
but the date of the last git commit
in order to ease packaging following the discussions in #27482 and #27614.

Co-authored-by: Nora Matthias Schiffer <[email protected]>
Co-authored-by: Moritz Warning <[email protected]>
Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: use INSTALL_CONF for confguration

instead of INSTALL_DATA.

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: Jan-Niklas Burfeind <[email protected]>

digitemp: fix compilation with gcc15

Upstream backports.

Move away from codeload. Local tar archives are smaller.

Add missing PKG_LICENSE_FILES.

Signed-off-by: Rosen Penev <[email protected]>

libmpeg2: fix compilation with gcc15

Need a GNU_LIBRARY define for getopt.

Updated URL from a dead one.

Minor fixes.

Signed-off-by: Rosen Penev <[email protected]>

csshnpd: bump to c1.0.17 release

Upstream release aligned to Mbed-TLS 3.6.5

Signed-off-by: Chris Swan <[email protected]>

yt-dlp: bump to 2025.10.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.10.14
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.10.22
Signed-off-by: George Sapkin <[email protected]>

ripgrep: bump to 15.0.0

release notes:
https://github.com/BurntSushi/ripgrep/releases/tag/15.0.0

patch dropped - integrated upstream.

Signed-off-by: Paul Donald <[email protected]>

sing-box: update to 1.12.11

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.11

Signed-off-by: Gregory Gullin <[email protected]>

owut: update to 2025.10.24

Bug fixes:
    efahl/owut@07453922aa2f owut: create uclient singleton to minimize memory usage
    efahl/owut@f0735878918c owut: fix bug in version number parsing

Signed-off-by: Eric Fahlgren <[email protected]>

ddns-script: removes linefeed which causes 401 err

The linefeed at the end causes ovh-api to return 401 even if the
password is correct.

Fixes #27693

Signed-off-by: Fabian Zimmermann <[email protected]>

bind: bump to 9.20.15

Fixes the following security issues:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778 Address various spoofing attacks.
- CVE-2025-40780 Cache-poisoning due to weak pseudo-random number
  generator.

The complete list of changes from version 9.20.11 is available in the
upstream changelog at
https://ftp.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <[email protected]>

travelmate: update 2.2.1-3

- fix minor log issues
- restore old, efficient log viewer (in LuCI)

Signed-off-by: Dirk Brenken <[email protected]>

cloudreve: Update to 4.9.2

> Breaking change:
> If you are using AlibabaCloud OSS storage policy, please go to the
> admin dashboard after upgrading, edit each OSS storage policy,
> fill in the correct Region in Basic info and save it, otherwise
> the storage policy will not continue to work.

Changelog:
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.0
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.1
- https://github.com/cloudreve/cloudreve/releases/tag/4.9.2

Signed-off-by: Tianling Shen <[email protected]>

dnsproxy: Update to 0.77.0

Release note: https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.77.0

Signed-off-by: Tianling Shen <[email protected]>

syslog-ng: update to version 4.10.2

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.2

Signed-off-by: Josef Schlehofer <[email protected]>

python-hatch-requirements-txt: bump to 0.4.1

Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <[email protected]>

mhz: update to latest version

Update mhz to latest version to include new calibration features.

Signed-off-by: Robert Marko <[email protected]>

dos2unix: Update to 7.5.3

2025-10-14: Version 7.5.3

  * Fix: Exit with non-zero code if the conversion is aborted
    due to a binary file.
  * Fix: Exit with zero code when an unicode conversion error
    occurs in quiet mode.
  * Updated Brazilian Portuguese, Catalan, Chinese (traditional), Dutch,
    Friulian, Georgian, and Serbian translations.

Signed-off-by: Tianling Shen <[email protected]>

openlist: Update to 4.1.5

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.5

Signed-off-by: Tianling Shen <[email protected]>

lvm2: install: fix "Argument list too long" error when copying symlinks

It was reported that in some build environments the install step fails
with following:

 find /home/.../buildsystem/build_dir/target-aarch64-unknown-linux-gnu_musl/lvm2-normal/LVM2.2.03.22/ipkg-install/usr/sbin/ -type l -exec cp -fpR -a {} /home/.../buildsystem/build_dir/target-aarch64-unknown-linux-gnu_musl/lvm2-normal/LVM2.2.03.22/.pkgdir/lvm2/sbin/ \;
 make[6]: /bin/sh: Argument list too long

This is likely happening once the number of symlinks exceeds the shell's
maximum argument limit.

So lets fix it by switching to more reliable xargs based solution:

 print0/xargs -0 to handle filenames with special characters
 xargs -r to skip execution if no files are found
 cp -t to specify the target directory once instead of for each file

Fixes: #26552
Signed-off-by: Petr Štetiar <[email protected]>

nebula: bump version to 1.9.7

changelog: https://github.com/slackhq/nebula/releases/tag/v1.9.7

Signed-off-by: Yuxi Yang <[email protected]>

docker-compose: Update to version 2.40.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.40.1

Signed-off-by: Javier Marcet <[email protected]>

golang: Update to 1.25.3

go1.25.2 (released 2025-10-07) includes security fixes to the
archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem,
net/http, net/mail, net/textproto, and net/url packages, as well as
bug fixes to the compiler, the runtime, and the context, debug/pe,
net/http, os, and sync/atomic packages.

go1.25.3 (released 2025-10-13) includes fixes to the crypto/x509
package.

Changelog: https://go.dev/doc/devel/release#go1.25.minor

Fixes:
- CVE-2025-47912
- CVE-2025-58183
- CVE-2025-58185
- CVE-2025-58186
- CVE-2025-58187
- CVE-2025-58188
- CVE-2025-58189
- CVE-2025-61723
- CVE-2025-61724
- CVE-2025-61725

Signed-off-by: Tianling Shen <[email protected]>

travelmate: update 2.2.1-2

- fix a logical glitch in opensta-handling
- add a list option  'trm_ssidfilter' to maintain a list of SSID patterns
   for filtering/skipping specific open uplinks, e.g. 'Chromecast*' (fix #26406)

Signed-off-by: Dirk Brenken <[email protected]>

znc: do not watch znc.conf for changes

ZNC can modify its own config file (znc.conf) during runtime, for
example using controlpanel or webadmin modules. Manually editing the
znc.conf file while znc is running is strongly discouraged.

Thus prodc should not watch this file, it would just lead to znc being
restarted unnecessarily.

As it happens, no restarts were done, because the watched path was
specified incorrectly. It used ZNC_CONFIG instead of ZNC_CONFIG_DIR,
and so it watched /tmp/etc/znc/configs/znc.conf/configs/znc.conf which
does not exist.

Remove the watch of znc.conf as it is not needed.

Signed-off-by: Ralph Siemsen <[email protected]>

travelmate: release 2.2.1

- add a new lan/wan subnet check, to to show conflicts with router LAN network
- clean up bogus debug log outputs
- minor code clean ups
- readme update

Signed-off-by: Dirk Brenken <[email protected]>

sms-tool: update to 2025-08-23

Fixes compilation with GCC15
Compile tested: tplink_tl-wr842n-v3, bananapi_bpi-r3

Signed-off-by: Anari Jalakas <[email protected]>

snort3: run as regular user rather than as root

Running as a dedicated user is better from both a security and an
isolation perspective than running as root.

Signed-off-by: John Audia <[email protected]>

knot: update to version 3.5.1

Release notes: https://www.knot-dns.cz/2025-10-16-version-351.html

Delete patches already merged into master branch

Signed-off-by: Jan Hák <[email protected]>

ksmbd-tools: update to 3.5.5

Major change is:
 - set server signing to auto by default.

In recent versions of Windows 11, server signing is required.
However, server signing is disabled by default in ksmbd server.
So It is recommended to set server signing = auto as default,
so that it is used whenever it is required.

Signed-off-by: Andrea Pesaresi <[email protected]>

openssh: update to 10.2p1

Changelog: https://www.openssh.com/txt/release-10.2

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

snort3: inform user of optional dependencies

Add a comment to the package description to inform users that the build
system will not automatically pick gperftools-runtime and vectorscan-
runtime when building from source.

References to performance benefits of using them:
c1b4e80825d6855d66899dc32490b0ce9537aff5
b6b2d1e3059c049bf0af4330dfde944c1689be9f

Signed-off-by: John Audia <[email protected]>

snort3: update to 3.9.6.0

Release notes: https://github.com/snort3/snort3/releases/tag/3.9.6.0

% snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.6.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.21
           Using Vectorscan version 5.4.12 2025-10-06
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.8.1
           Using OpenSSL 3.6.0 1 Oct 2025
           Using PCRE2 version 10.46 2025-08-27
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

snort3: fix typo preventing vectorscan detection

Since vectorscan-runtime was dropped in the following commit, need to
replace references to it with just vectorscan in order to compile
snort3 against it: https://github.com/openwrt/packages/commit/8a3c7a69e649a9a5cbb0a642a661dd480b8583ff

Without this change, even having CONFIG_PACKAGE_vectorscan=y in the
.config will result in a failure to compile against it, e.g:

...
Feature options:
    DAQ Modules:    Dynamic
    libatomic:      User-specified
    Hyperscan:      OFF
...

Signed-off-by: John Audia <[email protected]>

php8: update to 8.4.13

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.13

Signed-off-by: Michael Heimpold <[email protected]>

kea: fix compilation with boost 1.89

system goes header only.

Added small patch to get rid of deadline_timer. It's gone.

Signed-off-by: Rosen Penev <[email protected]>

schroot: fix compilation with boost 1.89

Patch taken from reschroot.

Signed-off-by: Rosen Penev <[email protected]>

acsccid: fix compilation with GCC15

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

hamlib: update to 4.6.5

Simplify Makefile somewhat.

Signed-off-by: Rosen Penev <[email protected]>

hplip: update to 3.25.6

Add patch to fix compilation with GCC15.

Signed-off-by: Rosen Penev <[email protected]>

v2ray-core: Update to 5.41.0

Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.41.0

Signed-off-by: Tianling Shen <[email protected]>

xray-core: Update to 25.10.15

Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.10.15

Signed-off-by: Tianling Shen <[email protected]>

kea: update boost dependencies

Remove 'boost-system' from the dependencies. The 'boost-system' is a
header-only library since version update of boost to '1.89.0'.

Signed-off-by: Florian Eckert <[email protected]>

i2pd: update boost dependencies

Remove 'boost-system' from the dependencies. The 'boost-system' is a
header-only library since version update of boost to '1.89.0'.

Signed-off-by: Florian Eckert <[email protected]>

domoticz: update boost dependencies

domoticz only links to boost headers since boost version update to '1.89.0'.
Remove 'boost-system' from the dependencies and add boost as build
dependency.

Signed-off-by: Florian Eckert <[email protected]>

cloudflared: Update to 2025.10.0

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.10.0

Signed-off-by: Tianling Shen <[email protected]>