eza: add new package

eza is a substitute for ls command with icons and colors and more.
Common for those who use ohmyzsh or similar shell stylers.

Co-authored-by: Jonas Jelonek <[email protected]>
Signed-off-by: Oskari Rauta <[email protected]>

Merge pull request #23571 from stangri/master-https-dns-proxy

https-dns-proxy: update to upstream 2023-11-19

banip: update 0.9.4-3

* fix another logical glitch in the logfile monitor

Signed-off-by: Dirk Brenken <[email protected]>

natmap: update to 20240303

Signed-off-by: Ray Wang <[email protected]>

mt5311: make package importable as lua module

Added init.lua to make the program importable by other lua programs.

Signed-off-by: jasle <[email protected]>

mt5311: add package

mt5311 are utilities for working with Metanoia/Proscend VDSL2 SFP Modems.

Resulting package:
 * mt5311

Signed-off-by: jasle <[email protected]>

lua-struct: add package

lua-struct is a implementation of binary packing/unpacking in pure lua.

Resulting-package:
 * lua-struct

Signed-off-by: jasle <[email protected]>

banip: update 0.9.4-2

* fix a long standing problem in the logfile-parser with dropbear and compressed IPv6 addresses

Signed-off-by: Dirk Brenken <[email protected]>

python-bcrypt: Update to 4.1.2

Signed-off-by: Fabian Lipken <[email protected]>

v2raya: Update to 2.2.5.1

Hot fix for a frontend failure bug.

Signed-off-by: Tianling Shen <[email protected]>

dnsproxy: Update to 0.65.2

Signed-off-by: Tianling Shen <[email protected]>

golang: Update to 1.21.7

go1.21.6 (released 2024-01-09) includes fixes to the compiler,
the runtime, and the crypto/tls, maps, and runtime/pprof packages.

go1.21.7 (released 2024-02-06) includes fixes to the compiler,
the go command, the runtime, and the crypto/x509 package.

Signed-off-by: Tianling Shen <[email protected]>

apfree-wifidog: update to 7.02.1977

Signed-off-by: Dengfeng Liu <[email protected]>

apfree-wifidog: fix some bugs in the wifidogx.init file

Signed-off-by: Dengfeng Liu <[email protected]>

v2raya: Update to 2.2.5

Signed-off-by: Tianling Shen <[email protected]>

banip: release 0.9.4-1

* add support for destination port & protocol limitations for external feeds (see readme for details),
  useful for lan-forward ad- or DoH-blocking, e.g. only tcp ports 80 and 443
* add turris sentinel blocklist feed
* update readme

Signed-off-by: Dirk Brenken <[email protected]>

https-dns-proxy: update to upstream 2023-11-19

* update to upstream 2023-11-19
  (changes: https://github.com/aarond10/https_dns_proxy/commit/489c57efd46983e688579974a2ab7aeaa7df8d83)
* bugfix: include resolveip dependency in Makefile
  (fixes https://github.com/openwrt/packages/issues/23567)
* minor update for failed healthcheck logging

Signed-off-by: Stan Grishin <[email protected]>

acme-common: simplify config example

Make it more practical to easier get an idea

Signed-off-by: Sergey Ponomarev <[email protected]>

acme-acmesh: use validation_method option instead of guessing

The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <[email protected]>

acme-common: use validation_method option instead of guessing

The new validation_method option can be: dns, webroot or standalone.
Previously we guessed the challenge type:
1. if the DNS provider is specified then it's dns
2. if standalone=1
3. fallback to webroot

The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner.

Signed-off-by: Sergey Ponomarev <[email protected]>

libpqxx: update to version 7.9.0

Signed-off-by: Igor Bezzubchenko <[email protected]>

travelmate: update 2.1.2-5

* final vpn tweaks

Signed-off-by: Dirk Brenken <[email protected]>

sing-box: update to 1.8.7

Signed-off-by: brvphoenix <[email protected]>

adblock: update 4.1.5-9

* minimal fix with reporting interface 'any'

Signed-off-by: Dirk Brenken <[email protected]>

Merge pull request #23549 from krant/inotify

inotify-tools: fix link error on x86

inotify-tools: fix link error on x86

Previous commit removed unnecessary linking with libstdc++
but introduced another error on x86 platforms:

  undefined reference to `__stack_chk_fail_local'

Fix it by explicitly linking libssp_nonshared.a

Signed-off-by: krant <[email protected]>

Merge pull request #23543 from krant/openthread-br

openthread-br: fix build and modernize

openthread-br: modernize CMake options

- ':BOOL' suffix is not needed
- Don't set options which are matching the defaults
- Rename non-existing OT_BORDER_ROUTING_NAT64 to OTBR_NAT64

Signed-off-by: krant <[email protected]>

openthread-br: remove superseded patch

The patch is not needed since it is implemented in
https://github.com/openthread/ot-br-posix/pull/1908
and included into the current version.

Signed-off-by: krant <[email protected]>

openthread-br: fix build error on some platforms

On some builders the package was failing to build:
```
cp: cannot overwrite non-directory '[..]/var' with directory '[..]/var
```

Here we're moving the creation of /var/lib/thread into runtime script,
which eliminates the error.

Signed-off-by: krant <[email protected]>

rclone: add fuse3-utils as dependency

rclone has switched to use fuse3 since v1.62.0.

Reported-by: qiuzi <[email protected]>
Signed-off-by: Tianling Shen <[email protected]>

logrotate: update to 3.21.0

Signed-off-by: krant <[email protected]>

dnsdist: disable XSK to fix the build

XSK support is set to auto by default and on some hosts it is detected as
on and leads to:

```
In file included from dnsdist-backend.cc:32:
xsk.hh:28:10: fatal error: bits/types/struct_timespec.h: No such file or
directory
   28 | #include <bits/types/struct_timespec.h>
```

Here we disable XSK so configure will behave more deterministically and
hopefully fix the builders.

Signed-off-by: krant <[email protected]>

mc: depend on libe2p

Now that libe2p is separated from e2fsprogs;
midnight commander needs it added to depends.

Signed-off-by: Oskari Rauta <[email protected]>

Merge pull request #23542 from mhei/use-https-for-php-and-pecl

php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLs

httping: update to 3.5

- Update package URLs
- Use local tarball for sources
- Switch to CMake
- Drop obsolete patches including 'minimize' (ipk size +3KB only)
- Add 3 new patches to fix musl, openssl and cmake issues

Signed-off-by: krant <[email protected]>

dump1090: fix soft float ARM build

Package CPU features detection is not supporting soft float ARM.
So we disable it altogether.

Signed-off-by: krant <[email protected]>

php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLs

Most packages already use https URLs and for PHP and PECL
package downloads https is working properly.

Signed-off-by: Michael Heimpold <[email protected]>

yq: Update to 4.42.1

Signed-off-by: Tianling Shen <[email protected]>

v2fly-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

alist: Update to 3.31.0

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2024.2.1

Signed-off-by: Tianling Shen <[email protected]>

uvol: add support for detecting fitblk boot device

Auto-detect LVM2 volume on boot device used with fitblk uImage.FIT
sub-image driver.

Signed-off-by: Daniel Golle <[email protected]>

inotify-tools: update to 4.23.9.0

- Workaround superfluous linking with libstdccp

Signed-off-by: krant <[email protected]>

rust: update to 1.76.0

- Use .xz for source archive
- Refresh patches

Signed-off-by: krant <[email protected]>

snort3: build against gperftools-runtime

Should provide increases in snort3 performance thanks to thread-
caching malloc provided by gperftools.  Avg CPU usage is down.
Another user reported higher throughput achieved with snort3
compiled with this on samba transfers on system with CPU-limited
snort3 performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

rtpmidi: update to 23.12

Get rid of codeload and use local tarballs.

Fixes compilation with newer fmt.

Minor cleanups.

Signed-off-by: Rosen Penev <[email protected]>

tmux: update to 3.4

Signed-off-by: Maxim Storchak <[email protected]>

travelmate: update 2.1.2-4

* more re-connections tweaks
* made travelmate generated emails responsive

Signed-off-by: Dirk Brenken <[email protected]>

python-yaml: fix build with Cython 3

Signed-off-by: krant <[email protected]>

snort3: update to 3.1.81.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.1.81.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.81.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.13 30 Jan 2024
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3.1
           Using Hyperscan version 5.4.2 2024-02-16
           Using LZMA version 5.4.6

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

conserver: free correct addrinfo to prevent crash.

When looping through addrinfo lists in AddrsMatch, keep a copy of the
original addrinfo pointers to free instead of ending up at the terminating
NULLs and trying to free those.

OpenWRT uses musl in which freeaddrinfo(NULL) is not safe (which is
fine, it's not required by the spec) so this fixes a segfault.

Signed-off-by: Darren Tucker <[email protected]>

htpdate: update to 1.3.7

- Switch package URLs to HTTPS
- Use .gz for source archive since .xz is no longer available
- Remove upstreamed patches

Signed-off-by: krant <[email protected]>

fwknop: update to 2.6.11

Signed-off-by: Oldřich Jedlička <[email protected]>

dump1090: update to 9.0

- Fix version to be properly configured

Signed-off-by: krant <[email protected]>

c-ares: update to 1.27.0

- Update package URL
- Don't set default CMake options

Signed-off-by: krant <[email protected]>

avrdude: fix dependencies

- libftdi, libhidapi, libusb-0.1 was incorrectly leaking into the build.
- libgpiod was incorrectly missing out despite LINUXGPIO feature
  was explicitly requested.

Signed-off-by: krant <[email protected]>

gperftools: add new package

Thread-caching malloc provided by this package improves snort3
performance.  I have been running with this for over seven months
without issues.  Avg CPU usage is down.  Another user reported
higher throughput achieved with snort3 compiled with this on
samba transfers on system with CPU-limited snort performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

travelmate: update 2.1.2-3

* various vpn optimizations
* remove obsololete trm_maxscan option
* small fixes for net status and captive portal handling
* add an additional login variant to the h-hotels login script
* fix the wifibahn login script work again with wifionice hotspots again
* update readme

Signed-off-by: Dirk Brenken <[email protected]>

lighttpd: update to lighttpd 1.4.74 release hash

Signed-off-by: Glenn Strauss <[email protected]>

sysstat: add missing xz-utils dependency

Depending only on 'xz' hides the package when 'xz-utils' is not selected

Signed-off-by: krant <[email protected]>

imagemagick: add missing libzip dependency

Package imagemagick is missing dependencies for the following libraries:
libzip.so.5.

Fixes: 7b697342e9fc ("imagemagick: update to 7.1.1-28")
Signed-off-by: Alexander Egorenkov <[email protected]>

tesseract: update to 5.3.4

- Fix NEON mis-detection which was breaking builds on some platforms

Signed-off-by: krant <[email protected]>

micropython: disable mold

package fails to build with mold linker due to unregocnized flag.

Signed-off-by: Oskari Rauta <[email protected]>

openvpn: update to 2.6.9

- license change is now complete, and all code has been re-licensed
  under the new license (still GPLv2, but with new linking exception
  for Apache2 licensed code).
  Code that could not be re-licensed has been removed or rewritten.

- add support for building with mbedTLS 3.x.x

- new option "--force-tls-key-material-export" to only accept clients
  that can do TLS keying material export to generate session keys
  (mostly an internal option to better deal with TLS 1.0 PRF failures).

- Windows: bump vcpkg-ports/pkcs11-helper to 1.30

- Log incoming SSL alerts in easier to understand form and move logging
  from "--verb 8" to "--verb 3".

- protocol_dump(): add support for printing "--tls-crypt" packets

and other fixes

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst

Signed-off-by: Ivan Pavlov <[email protected]>

hyperscan: symlinks redundant ABI shared objects

Use $(CP) macro rather than $(INSTALL_DATA) to preserve symlinks
on shared objects which saves approx 11.8 M of space.

From hyperscan-runtime_5.4.2-1:

% ls -lh /usr/lib/libhs*
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5.4.2
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5.4.2

% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 18370560

From hyperscan-runetime_5.4.2-2 (created by this PR):

% ls -lh /usr/lib/libhs*
lrwxr-xr-x 1 root root   10 Feb 22 15:56 /usr/lib/libhs.so -> libhs.so.5
lrwxr-xr-x 1 root root   14 Feb 22 15:56 /usr/lib/libhs.so.5 -> libhs.so.5.4.2
-rwxr-xr-x 1 root root 4.6M Feb 22 15:27 /usr/lib/libhs.so.5.4.2
lrwxr-xr-x 1 root root   18 Feb 22 15:56 /usr/lib/libhs_runtime.so -> libhs_runtime.so.5
lrwxr-xr-x 1 root root   22 Feb 22 15:56 /usr/lib/libhs_runtime.so.5 -> libhs_runtime.so.5.4.2
-rwxr-xr-x 1 root root 1.2M Feb 22 15:27 /usr/lib/libhs_runtime.so.5.4.2

% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 5918720

Credit to @efahl for pointing this out.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <[email protected]>

screen: update to 4.9.1

- Remove upstreamed patch

Signed-off-by: krant <[email protected]>

coova-chilli: fix libxt-coova not loading properly from iptables ( openwrt/packages#23092 )

Signed-off-by: Pierre Parent <[email protected]>

rtl_433: update to 23.11

Signed-off-by: Edmunt Pienkowsky <[email protected]>

rtl-sdr: update to v2.0.1

Signed-off-by: Edmunt Pienkowsky <[email protected]>

clamav: update to 1.3.0

- Add build-time Rust dependency
- Don't set default and rename changed CMake options

Signed-off-by: krant <[email protected]>

croc: update to 9.6.12

changelogs:
9.6.10: https://github.com/schollz/croc/releases/tag/v9.6.10
9.6.11: https://github.com/schollz/croc/releases/tag/v9.6.10
9.6.12: https://github.com/schollz/croc/releases/tag/v9.6.10

Signed-off-by: Jonas Jelonek <[email protected]>

fswebcam: update to 20200725

- Remove dead mirror

Signed-off-by: krant <[email protected]>

git: update to 2.43.2

- Refresh a patch

Signed-off-by: krant <[email protected]>

boinc: update to 7.24.3

- Use local tarball
- Remove upstreamed and refresh remaining patches

Signed-off-by: krant <[email protected]>

avrdude: update to 7.3

- Use local tarball
- Use CMake
- Depend from libusb-1.0 instead of libusb-compat
- Remove obsolete patches

Signed-off-by: krant <[email protected]>

ripgrep: update to 14.1.0

- Link pcre2 dynamically
  - it was linked statically and libpcre2 dependency was useless
  - it magically fixes build error when global LTO is enabled
  - it reduces resulting binary size
- Use 'release-lto' cargo profile to further reduce binary size

'rg' binary sizes comparision (arm_cortex-a9+neon):
- 4293KB: unmodified
- 4018KB: dynamic libpcre2
- 3521KB: dynamic libpcre2 + release-lto

Signed-off-by: krant <[email protected]>

bluez: update to 5.72

- Use HTTPS for URL
- Don't set default configure option
- Refresh the patches

Signed-off-by: krant <[email protected]>

glib2: use internal pcre2 for host

There's some weird issue where -lpcre2 is not being passed. Fixes
vala/host which links to static libraries.

Signed-off-by: Rosen Penev <[email protected]>

libiio: fix pkgconfig paths

CMake build is passing host paths in pkgconfig file.

Signed-off-by: Rosen Penev <[email protected]>

nghttp3: fix pkgconfig file

CMake build is passing host paths in pkgconfig.

Signed-off-by: Rosen Penev <[email protected]>

sysstat: update to 12.7.5

- Update package URLs
- Add missing xz dependency
- Fix incorrectly set sa_dir
- Refresh the patch

Signed-off-by: krant <[email protected]>

nlbwmon: update to Git HEAD (2024-02-21)

8dab2ae24c54 neigh: fix potential integer underflow in avl_cmp_neigh()
992f9078b1d5 nfnetlink: fix netlink dump receive logic
ec1a39e53d3f nfnetlink: improve message reception in event callback
0ef61c3bebcb build: convert CMakeList.txt to lowercase
c7616bcfaaef nlbwmon: utilize uloop interval timer if available

Fixes: https://github.com/jow-/nlbwmon/issues/57
Signed-off-by: Jo-Philipp Wich <[email protected]>

libffi: update to 3.4.6

Signed-off-by: krant <[email protected]>

libpng: update to 1.6.42

- Don't set default and rename renamed CMake options
- Enable NEON optimizations
- Rebase the patch

Signed-off-by: krant <[email protected]>

ovn: bump to 22.03.5

Signed-off-by: Yousong Zhou <[email protected]>

openvswitch: bump to 2.17.9

Refresh and backport patches so that

 - ./python path in the source code takes precedence over the same dir in hostpkg
 - OVN LTS version 22.03.5 which depends on Open vSwitch 3.0 can compile
   with Open vSwitch 2.17

Fixes: https://github.com/openwrt/packages/issues/22744
Signed-off-by: Yousong Zhou <[email protected]>

libcurl-gnutls: fix build

- Missing --without-nghttp3 was leaking host includes and breaking the build
- Remove or rename deprecated configure options
- Add --disable-libcurl-option to reduce package size
- Use .xz instead of .bz2 for PKG_SOURCE

Signed-off-by: krant <[email protected]>

rtty: update to 8.1.1

Signed-off-by: Jianhui Zhao <[email protected]>

dockerd: Update to 25.0.3

Signed-off-by: Gerard Ryan <[email protected]>

docker: Update to 25.0.3

Signed-off-by: Gerard Ryan <[email protected]>

containerd: Update to 1.7.13

Signed-off-by: Gerard Ryan <[email protected]>

runc: Update to 1.1.12

Signed-off-by: Gerard Ryan <[email protected]>

mwan3: check removed route before removal

This makes mwan3rtmon check if mwan3_get_routes returns a route
before removing it. This helps with IPv6 routes with source address
selector removal where multiple original routes are transformed to
the same mwan3 route if one of the source routes is removed while
the others are kept.

Signed-off-by: Jonas Lochmann <[email protected]>

openvpn: fix start_path_instance function

Check the conffile existance (with .conf extension), before calling the
function 'start_path_instance'. This fixes errors with non-existing and
wrong spelling instances.

Signed-off-by: Dirk Brenken <[email protected]>
- Update commit description
Signed-off-by: Florian Eckert <[email protected]>

Merge pull request #23472 from mhei/php8-update-to-8.3.3

php8: update to 8.3.3

btop: Update to 1.3.2

Synced LDFLAGS from upstream Makefile.

Signed-off-by: Tianling Shen <[email protected]>

v2raya: Update to 2.2.4.7

Signed-off-by: Tianling Shen <[email protected]>

yq: Update to 4.41.1

Signed-off-by: Tianling Shen <[email protected]>

strongswan: add empty config

Without it, using uci to manipulate ipsec config can result in errors,
making it much difficult to use in uci-defaults for example.

Signed-off-by: Glen Huang <[email protected]>