sing-box: Update to 1.11.15

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.15

Signed-off-by: Gregory Gullin <[email protected]>

libpam: update to 1.7.1

Release notes:
 https://github.com/linux-pam/linux-pam/releases/tag/v1.5.3
 https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0
 https://github.com/linux-pam/linux-pam/releases/tag/v1.6.1
 https://github.com/linux-pam/linux-pam/releases/tag/v1.7.0
 https://github.com/linux-pam/linux-pam/releases/tag/v1.7.1

Adapt Makefile to use meson and removed patch relating to configure.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

cligen: fix compilation with GCC 15

Upstream has this fixed in a massive patch.

Signed-off-by: Rosen Penev <[email protected]>

lsof: update to 4.99.5

- [linux] fix legacy linux kernel compatibility due to missing /proc/self/ns (https://github.com/lsof-org/lsof/pull/329)
- [linux] fix potential null pointer deference, reported by @mono-trip (https://github.com/lsof-org/lsof/pull/332)

Signed-off-by: Maxim Storchak <[email protected]>

gnutls: Update to version 3.8.10

Single patches automatically refreshed.

Changelog: https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

mjpg-streamer: adapt dependency to changed package name

The libv4l package has been renamed to v4l-utils to match the name now
used upstream, and also to make the folder name consistent with the
PKG_NAME.

Signed-off-by: Daniel Golle <[email protected]>

v4l-utils: merge with edid-decode

Make PKG_NAME and folder name consistent (v4l-utils) and build
edid-decode as subpackage. Unfortunately LTO breaks build of some
of the utils, so disable it.

Signed-off-by: Daniel Golle <[email protected]>

openal-soft: add package

Add open source OpenAL implementation for optional audio support in gzdoom.

Signed-off-by: Daniel Golle <[email protected]>

perl-lwp-protocol-https: new module LWP::Protocol::https, version 6.14

This module is a plug-in for LWP (perl-www),
provides https support for  LWP::UserAgent

Signed-off-by: Jens Wagner <[email protected]>

bluez: update to 5.83

Fixes compilation with GCC 15.

Remove upstreamed patches.

Signed-off-by: Rosen Penev <[email protected]>

vim: update to 9.1

Fixes compilation with GCC15.

Signed-off-by: Rosen Penev <[email protected]>

libudev-zero: import upstream patches

udev_device.c: fix TOCTOU race condition (illiliti/libudev-zero#57)

illiliti/libudev-zero@a2cc51bb142c16eac5598237d2edb46f095607be

Avoidable OOM on small systems (illiliti/libudev-zero#62)

illiliti/libudev-zero@5eca08d71d51074bfe7b14fcf7d89318f4f6ff47

Fixes incorrect detection of touchpads (illiliti/libudev-zero#66)

illiliti/libudev-zero@bbeb7ad51c1edb7ab3cf63f30a21e9bb383b7994

Signed-off-by: Daniel Golle <[email protected]>

samba4: update to 4.22.3

https://www.samba.org/samba/history/samba-4.22.3.html

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

owut: update to 2025.07.11

Bug fixes:
    efahl/owut@0d00192dbe0d package checks: change error to warning for missing dependencies
Enhancements:
    efahl/owut@2ba6d113ba49 status: show link to commit at which build performed

Signed-off-by: Eric Fahlgren <[email protected]>

sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>

yq: Update to 4.46.1

Release note: https://github.com/mikefarah/yq/releases/tag/v4.46.1

Signed-off-by: Tianling Shen <[email protected]>

geoipupdate: Update to 7.1.1

Release note: https://github.com/maxmind/geoipupdate/releases/tag/v7.1.1

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.70.3

Release note: https://github.com/rclone/rclone/releases/tag/v1.70.3

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.37.0

Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.37.0

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.50.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.2

Signed-off-by: Wesley Gimenes <[email protected]>

csshnpd: Bump to c1.0.14 release

Upstream release aligned to MbedTLS 3.6.4

Signed-off-by: Chris Swan <[email protected]>

afraid.org-v2-token.json: Fix 404 on update

The URL for update changed and updates were silently failing
with HTTP 404. Fixed the URL

Signed-off-by: Paulo Neves <[email protected]>

git: update to 2.46.4

Fixes:
  - CVE-2025-27613
  - CVE-2025-27614
  - CVE-2025-46334
  - CVE-2025-46835
  - CVE-2025-48384
  - CVE-2025-48385
  - CVE-2025-48386

Signed-off-by: Richard Muzik <[email protected]>

golang: bump to 1.24.5

go1.24.5 (released 2025-07-08) includes security fixes to the go
command, as well as bug fixes to the compiler, the linker, the runtime,
and the go command.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.24.5+label%3ACherryPickApproved
Signed-off-by: George Sapkin <[email protected]>

netbird: update to 0.50.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.50.1

Signed-off-by: Wesley Gimenes <[email protected]>

cloudflared: change default protocol back to 'auto'

Most of the PQ and FIPS compliant curves are already available
in go 1.24.

Signed-off-by: Tianling Shen <[email protected]>

pdns: update to 4.9.7

Signed-off-by: Peter van Dijk <[email protected]>

rtty: update to 9.0.0

Two new command-line parameters have been added since this version:

* -g, --group=string       Set a group for the device
* -i number                Set heartbeat interval in seconds

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.0

Signed-off-by: Jianhui Zhao <[email protected]>

unzip: fix build GCC 15.1

refer to:

https://gitlab.alpinelinux.org/alpine/aports/-/blob/b7410ac718d5eeae21001de5cae9159f597bb517/main/unzip/gcc15.patch

fix this:

unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |               ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   59 | struct tm *gmtime (const time_t *);
      |            ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |                          ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   60 | struct tm *localtime (const time_t *);
      |            ^~~~~~~~~

Signed-off-by: Tan Zien <[email protected]>

unifdef: fix build with GCC 15

Using GCC compiler on the host breaks the build due to 'constexpr' being
a reserved keyword in C22.
Build expecting the sources to be in GNU17 standard fixes that.

Signed-off-by: Daniel Golle <[email protected]>

docker-compose: Update to version 2.38.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.2

Signed-off-by: Javier Marcet <[email protected]>

cryptsetup: update to 2.8.0

See https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes

Signed-off-by: Daniel Golle <[email protected]>

shadow: restore PKG_BUILD_DEPENDS to libxcrypt

This reverts commit f18594a00f6324045a7019863a5278a3f6f52e64.

The whole libxcrypt package was reworked in the base repo to fix
libcrypto-compat and the name was restored to libxcrypt.

Signed-off-by: Robert Marko <[email protected]>

ddns-scripts: (cloudflare) add support for custom zone ID and DNS record ID

User can (optionally) set zone_id and dns_record_id in param_opt.
This allows round robin DNS setup in Cloudflare.

Signed-off-by: Eric Leung <[email protected]>

gnunet: update to 0.24.3

See upstream NEWS file for more information

https://git.gnunet.org/gnunet.git/tree/NEWS?h=v0.24.3

Signed-off-by: Daniel Golle <[email protected]>

gnupg2: update to 2.4.8

Noteworthy changes in version 2.4.8 (2025-05-14)
------------------------------------------------

  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]

  * gpg: Fix a regression in 2.4.7 for generating a key from card.
    [T7457]

  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.
    [T7506]

  * gpg: Fully implement the group key flag.  [rGedd01d8fc4]

  * gpg: Make combination of show-only-fpr-mbox and show-unusable-uid
    work.  [rGeb2a90d343]

  * gpgsm: Do not return an error code when importing a certificate
    with an empty subject.  [T7171]

  * scd: Accept P15 cards with a zero-length label.  [rG18b4ebb28a]

  * keyboxd: Use case-insensitive search for mail addresses.  [T7576]

  * gpgconf: Fix reload and kill of keyboxd.  [T7569]

  * w32: Fix posssible lockup due to lost select results.
    [rG9448d01d61]

  Release-info: https://dev.gnupg.org/T7428

Signed-off-by: Daniel Golle <[email protected]>

libcurl-gnutls: update to cURL release 8.14.1

Quite a few versions of cURL have been released since last updating
libcurl-gnutls. See release notes since 8.9.1

https://curl.se/ch/8.10.0.html

https://curl.se/ch/8.10.1.html

https://curl.se/ch/8.11.0.html

https://curl.se/ch/8.11.1.html

https://curl.se/ch/8.12.0.html

https://curl.se/ch/8.12.1.html

https://curl.se/ch/8.13.0.html

https://curl.se/ch/8.14.0.html

https://curl.se/ch/8.14.1.html

Signed-off-by: Daniel Golle <[email protected]>

libpbc: update to 1.0.0

The author writes on https://crypto.stanford.edu/pbc/news.html

---
pbc-1.0.0 released

Thanks to many contributors for fixes, wrappers, and tests.

It’s been over a decade since the last release, and over two since
pbc-0.0.0. I had thought this project would have faded into obscurity by
now, but I still receive patches occasionally. I challenged myself to
build a new release. Miraculously, the old scripts still seem to work,
and the only non-trivial edit was renaming a few MinGW invocations in a
Makefile.

I bumped up the major version number. At the rate I’m going, this could
be the last release, and it’d be a shame if the project never reached
v1.0!

Tue Jun 10 09:15:34 PM PDT 2025
---

Signed-off-by: Daniel Golle <[email protected]>

libp11: update to 0.4.16

See release notes since 0.4.13:

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.14

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.15

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.16

Signed-off-by: Daniel Golle <[email protected]>

opentracker: update to git HEAD of 2025-04-25

 b20b0b8 Do not ignore return value of iob_init_autofree
 123e8aa Silence warning about using a pointer after realloc, take offset of match before

Signed-off-by: Daniel Golle <[email protected]>

libxmp: update to 4.6.3

See https://github.com/libxmp/libxmp/releases/tag/libxmp-4.6.3

Signed-off-by: Daniel Golle <[email protected]>

lvm2: update to 2.03.33 and libdm to 1.02.207

LVM changes:

Version 2.03.33 - 27th June 2025
================================
  Various spelling, grammar, formatting, test, and build script improvements.
  Override LC_NUMERIC locale if unsuitable for json_std report format.
  Repair raid arrays with transiently lost devices.

Version 2.03.32 - 05th May 2025
===============================
  Lvconvert vdopool conversion properly validates acceptable LVs.
  Accept thin pool data LV as cacheable LV.
  Allow using zram block devices (likely for testing).
  Fix lvresize when resizing COW snapshots already covering origin.
  Fix lvmdbusd read of executed lvm commands output.
  Fix construction of DM UUID for cachevol _cdata and _cmeta devices.
  Ignore PV claims from old metadata when then PV belongs to a new VG.
  Fix integrity metadata rounding.
  Accept --autobackup option in pvresize.

libdm changes:

Version 1.02.207 - 27th June 2025
=================================
  Escape the escape character itself on JSON report format output.
  Fail dm_report_group_create if radix char from locale unsuitable for JSON_STD.

Version 1.02.206 - 05th May 2025
================================
  Add support for using regex in selection criteria for string lists.
  Fix string list selection when using [<item> || <item> ...].

Signed-off-by: Daniel Golle <[email protected]>

exfatprogs: update to 1.2.9

See https://github.com/exfatprogs/exfatprogs/releases/tag/1.2.9

Signed-off-by: Daniel Golle <[email protected]>

postgresql: update to 17.5

See https://www.postgresql.org/docs/17/release-17-5.html

Signed-off-by: Daniel Golle <[email protected]>

libwacom: update to 2.16.1

See release notes for changes
https://github.com/linuxwacom/libwacom/releases/tag/libwacom-2.16.0
https://github.com/linuxwacom/libwacom/releases/tag/libwacom-2.16.1

Signed-off-by: Daniel Golle <[email protected]>

libevdev: update to 1.13.4

Apart from documentation and improvements for the meson-based build there
are two functional changes since 1.13.1:

 080d1d0 include: sync event codes with kernel 6.9
 d06abb8 Always push changed mt events when syncing

Signed-off-by: Daniel Golle <[email protected]>

libdeflate: update to 1.24

Version 1.24
------------

* The CMake-based build system now supports Apple Framework builds.

* libdeflate now builds for Windows ARM64EC.

* Made another small optimization to the x86 and ARM CRC32 code.

* Fixed a compiler warning on certain platforms (issue #416).

Version 1.23
------------

* Fixed bug introduced in 1.20 where incorrect checksums could be calculated if
  libdeflate was compiled with clang at -O0 and run on a CPU supporting AVX512.

* Fixed bug introduced in 1.20 where incorrect checksums could be calculated in
  rare cases on macOS computers that support AVX512 and are running an older
  version of macOS that contains a bug that corrupts AVX512 registers.  This
  could occur only if code outside libdeflate enabled AVX512 in the thread.

* Fixed build error when using -mno-evex512 with clang 18+ or gcc 14+.

* Increased the minimum CMake version to 3.10.

* Further optimized the x86 CRC code.

Signed-off-by: Daniel Golle <[email protected]>

hiredis: update to 1.3.0

See https://github.com/redis/hiredis/releases/tag/v1.3.0

Signed-off-by: Daniel Golle <[email protected]>

ell: update to 0.78

Apart from documentation and improvement to unit tests, the new version
also comes with a small fix:
 4f77dca ecc: Check return value of l_getrandom()

Signed-off-by: Daniel Golle <[email protected]>

jq: bump to v1.8.1

Simple bump to new release

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

quota: fix setproject binary

This patch fixes both a wrong openat() call and a build failure when using glibc 2.41 in OpenWrt.

Backported upstream commit d9852bd5b76ca65f283929e803b87343942ecb1f

Signed-off-by: Konstantin Demin <[email protected]>

knot-resolver: disable jemalloc support

knot-resolver will attempt to use jemalloc if it's available.
Jemalloc was added to openwrt packages in PR: Add jemalloc and integrate into bind #26721 [1].
At this time, we would rather continue linking with the libc malloc,
so this PR disables jemalloc support explicitly in the knot-resolver build configuration.

[1] https://github.com/openwrt/packages/pull/26721#issuecomment-2973865778

Signed-off-by: Noah Meyerhans <[email protected]>

modemmanager: change to configuration option disable_modem

This commit sets default of `disable_modem` to 1 and disconnects modem.
If set otherwise it keeps the modem connected.

Signed-off-by: Christian Korber <[email protected]>

nebula: bump to 1.9.5

- adopt nebula package
- bump version to 1.9.5
  changelog: https://github.com/slackhq/nebula/releases/tag/v1.9.5
- fix the wrong license
  nebula project license url: https://github.com/slackhq/nebula/blob/master/LICENSE

Signed-off-by: Yuxi Yang <[email protected]>

btop: Update to 1.4.4

Removed upstreamed patch.

Release note: https://github.com/aristocratos/btop/releases/tag/v1.4.4

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2025.7.0

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.7.0

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.35.0

Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.35.0

Signed-off-by: Tianling Shen <[email protected]>

openlist: Update to 4.0.8

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.0.8

Signed-off-by: Tianling Shen <[email protected]>

snort3: update to 3.9.1.0

hangelog: https://github.com/snort3/snort3/releases/tag/3.9.1.0

% # snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.1.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.20
           Using Hyperscan version 5.4.2 2025-06-30
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.6.2
           Using OpenSSL 3.5.0 8 Apr 2025
           Using PCRE2 version 10.42 2022-12-11
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.20

Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.20

Signed-off-by: John Audia <[email protected]>

libssh2: update to 1.11.1

Fixes #26901

Signed-off-by: Oldřich Jedlička <[email protected]>

perl-io-socket-ssl: bump to 2.094

2.091 to 2.094 provide fixes related to one-sided SSL shutdowns

Changelog: https://metacpan.org/dist/IO-Socket-SSL/changes

Signed-off-by: Jens Wagner <[email protected]>

csshnpd: Preserve .atsign directory

Ensure that the default location for atKeys is preserved on upgrade

Signed-off-by: Chris Swan <[email protected]>

tor: update to 0.4.8.17 stable

Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.17/ChangeLog

Signed-off-by: Rui Salvaterra <[email protected]>

perl-clone: new module Clone, version 0.47

This module provides a clone() method to make recursive copies of various nested data types.

It is e.g. required by recent versions of HTTP::Message

Signed-off-by: Jens Wagner <[email protected]>

perl-www: restructure and update to 6.78

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/libwww-perl/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-uri: restructure and update to 5.32

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/URI/changes

Version 1.76 was followed by 5.05 to remove various version mismatches

Signed-off-by: Jens Wagner <[email protected]>

perl-www-robotrules: restructure 6.02

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Signed-off-by: Jens Wagner <[email protected]>

perl-www-mechanize: restructure and update to 2.19

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/WWW-Mechanize/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-net-http: restructure and update to 6.23

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/Net-HTTP/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-http-message: restructure and update to 7.00

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTTP-Message/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-lwp-mediatypes: restructure 6.04

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Signed-off-by: Jens Wagner <[email protected]>

perl-http-date: restructure and update to 6.06

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTTP-Date/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-http-daemon: restructure and update to 6.16

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTTP-Daemon/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-html-tree: restructure and update to 5.07

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTML-Tree/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-http-cookies: restructure and update to 6.11

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTTP-Cookies/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-html-tagset: restructure and update to 3.24

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTML-Tagset/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-html-parser: restructure and update to 3.83

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTML-Parser/changes

Signed-off-by: Jens Wagner <[email protected]>

perl-html-form: restructure and update to 6.12

Changed maintainer to @jw2013
Updated Makefile to use metacpan.mk download helper

Changelog: https://metacpan.org/dist/HTML-Form/changes

Signed-off-by: Jens Wagner <[email protected]>

treewide: move all perl packages into its own folder

This makes it in sync with Python packages.
Python packages has its own place in /lang/python
Perl does not, so this fixes it.

Signed-off-by: Josef Schlehofer <[email protected]>

perl: add metacpan.mk download helper

Resemble the package handling of python modules
MetaCPAN is to Perl, what PyPI is to Pyhton

Signed-off-by: Jens Wagner <[email protected]>

znc: update to 1.10.1

Update ZNC to latest release 1.10.1.

Changelogs:

* https://wiki.znc.in/ChangeLog/1.10.0
* https://wiki.znc.in/ChangeLog/1.10.1

Signed-off-by: Jonas Gorski <[email protected]>

syncthing: bump to 1.30.0

Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.30.0
Signed-off-by: George Sapkin <[email protected]>

syncthing: add George Sapkin as a maintainer

Remove Paul Spooren and add myself according to the discussion in the
PR.

Link: https://github.com/openwrt/packages/pull/26856
Signed-off-by: George Sapkin <[email protected]>

lf: add new package

https://github.com/gokcehan/lf

Signed-off-by: Nate Robinson <[email protected]>

ratelimit: add package

ratelimit is a stateful ubus interface to the HTB traffic shaper,
enabling per-client bandwidth limits assignment.

Signed-off-by: Thibaut VARÈNE <[email protected]>

zsh: fix shell not sourcing /etc/profile

Currently our zsh package does not source /etc/profile which is the
expected behavior to setup environment configs.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

chrony: update to 4.7

Release notes: https://chrony-project.org/news.html#_jun_11_2025_chrony_4_7_released

Signed-off-by: Miroslav Lichvar <[email protected]>

csshnpd: bump to 1.0.13

Fixes --root-domain flag

Signed-off-by: Chris Swan <[email protected]>

yt-dlp: bump to 2025.06.30

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.06.30
Signed-off-by: George Sapkin <[email protected]>

dnsproxy: Update to 0.76.1

Release note: https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.76.1

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.70.2

Release note: https://github.com/rclone/rclone/releases/tag/v1.70.2

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.34.0

Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.34.0

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

rtorrent: update to 0.15.5

Various bugfixes.

Signed-off-by: Rosen Penev <[email protected]>

libtorrent: update to 0.15.5

Update patches.

Signed-off-by: Rosen Penev <[email protected]>

eza: update to 0.21.6

release notes:
0.21.5: https://github.com/eza-community/eza/releases/tag/v0.21.5
0.21.6: https://github.com/eza-community/eza/releases/tag/v0.21.6

Signed-off-by: Jonas Jelonek <[email protected]>

syncthing: fix relay and discovery args and permissions

Fixes: #26829
Signed-off-by: George Sapkin <[email protected]>

docker-compose: Update to version 2.38.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.1

Signed-off-by: Javier Marcet <[email protected]>

docker-compose: Update to version 2.38.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.38.0

Signed-off-by: Javier Marcet <[email protected]>