django-restframework: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:django-rest-framework:django_rest_framework

Signed-off-by: Wei-Ting Yang <[email protected]>

yt-dlp: bump to 2025.08.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.22
Signed-off-by: George Sapkin <[email protected]>

telegraf: update to 1.35.4

- Update Telegraf to v1.35.4
- Adjust GO_PKG_LDFLAGS_X to reflect upstream changes in version metadata
- Add default configuration file (Telegraf no longer includes one)
- Drop deprecated tcp_listener and udp_listener plugins from telegraf-small
- Rework how plugins for small variant are specified to reflect upstream changes
- Add -static TARGET_LDFLAGS for MIPS target to avoid R_MIPS_26 relocation errors during build

Signed-off-by: Niklas Thorild <[email protected]>

adblock-fast: update to 1.1.4-r12

README:
* update header

Init-script:
* set an earlier start to get triggers to work
* better str_contains
* improve readability of json() by getting rid of cascading case statements
* add new errors/status messages to get_text()
* prepare get_text() for localization by switching to inline printf
* adjust shellcheck disable comments where needed
* parse unbound config for DNS hijack ports
* test if the archived cache exists on boot and proceed to use it if it does
* add trigger waiting status so that luci app can display correct status
* do not run adb_config_update on boot, speeding up trigger setup

Signed-off-by: Stan Grishin <[email protected]>

sing-box: Revert "sing-box: update to 1.12.3"

This reverts commit 002e0559a5f3339fd5232a6e63cc00ce6886b3ab.

sing-box 1.12.3 is apparently buggy and crashes.
Reference to #27346 and #27339
Let's revert the upgrade.

Signed-off-by: Hannu Nyman <[email protected]>

vips: update to 8.17.1

Upstream list of changes is available at
https://github.com/libvips/libvips/releases/tag/v8.17.1.

Signed-off-by: W. Michael Petullo <[email protected]>

krb5: update to 1.22.1

Upstream list of changes is available at
https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.1.html.

Of note is that this release fixes CVE-2025-57736.

Also removes "-std=gnu11" from build.

Signed-off-by: W. Michael Petullo <[email protected]>

adguardhome: bump to 0.107.65

Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.65
Signed-off-by: George Sapkin <[email protected]>

transmission-web-control: fix mirror hash

Fix hash.

Signed-off-by: Hannu Nyman <[email protected]>

libtirpc: update to 1.3.7

Release notes: https://sourceforge.net/projects/libtirpc/files/libtirpc/1.3.7/Release-1-3-7.txt

Removed upstreamed patches.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

lm-sensors: fix build with glibc

The lm-sensors build was failing on glibc-based targets with:
  ld: cannot find -liconv: No such file or directory

which occurred because the upstream Makefile unconditionally links
against -liconv, but glibc has iconv functionality built-in and does not
provide a separate libiconv library.

I submitted the new patch upstream to fix this:
https://github.com/hramrach/lm-sensors/pull/14

This change is backward compatible based on my testing building
lm-sensors for x86/64 with glibc and again with musl after having
applied the patch.

Build system: x86/64
Build-tested: x86/64-glibc and x86/64
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

poemgr: update to latest HEAD

f1f093852aba poemgr: drop prefix from json-c include
adfb382a996a poemgr: Fix missing/unused includes
27d53374601b Makefile: compile object files before linking
e07fdec5e1cf Makefile: use LDLIBS to link libraries
1e6659b786e8 Makefile: mark targets without any output
f7f147977891 Makefile: reference output file using variable
aa3ae603099a Makefile: Add missing license header

Signed-off-by: Sven Eckelmann <[email protected]>

v2ray-geodata: Update to latest version

Update all geodata.

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.71.0

Removed upstreamed patch.

Release note: https://github.com/rclone/rclone/releases/tag/v1.71.0

Signed-off-by: Tianling Shen <[email protected]>

openlist: Update to 4.1.1

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.1

Signed-off-by: Tianling Shen <[email protected]>

v2raya: Update to 2.2.7

Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7

Signed-off-by: Tianling Shen <[email protected]>

ngtcp2: update to 1.15.0

this time is for real

Signed-off-by: Aleksey Vasilenko <[email protected]>

linknx: prevent jsoncpp dependency

Signed-off-by: Othmar Truniger <[email protected]>

transmission-web-control: Update to 20240408

Update to commit f02a47aff2680de10c2269e22a3d0b37a318dbcd
Change TITLE variable to make it easier to understand.

Signed-off-by: Ryan Keane <[email protected]>

nut: update to 2.8.4

See upstream changelog at
https://networkupstools.org/docs/release-notes.chunked/NUT_Release_Notes.html

New drivers:
* failover
* liebert-gxe
* microsol-apc
* nutdrv_hashx
* powervar_cx_ser
* nutdrv_siemens-sitop
* sms_ser
* bicker_ser
* ve-direct
* nhs_ser
* powervar_cx_usb

Signed-off-by: Sebastian Hamann <[email protected]>

nut: switch to https:// download URL

Signed-off-by: Sebastian Hamann <[email protected]>

nut: fix typo in nut_serial.hotplug (fix #21504)

Signed-off-by: Sebastian Hamann <[email protected]>

ffmpeg: update to 6.1.3

- Remove 2 upstreamed patches

Signed-off-by: Aleksey Vasilenko <[email protected]>

dufs: backport upstream fixes

Including one security fix.

Signed-off-by: Tianling Shen <[email protected]>

python3: fix host uuid and ncurses

pkgconfig doesn't work correct for these two packages. Just readd the
proper paths.

Signed-off-by: Rosen Penev <[email protected]>

nnn: update to version 5.1

Release notes: https://github.com/jarun/nnn/compare/v4.9...v5.1

Signed-off-by: Gregory Gullin <[email protected]>

gateway-go: update to 2.0.10

- support ipv6 transport for remote access

Signed-off-by: Yu Fang <[email protected]>

i2csfp: update to latest Git HEAD

This fixes build with GCC15.

Signed-off-by: Jonas Jelonek <[email protected]>

iodine: use procd, add extra options

Iodine now uses a procd init.d service and output is sent to the system
log.

Two new options have been added:

- debuglevel — increases the verbosity of debug output.

- check_client_ip — controls whether to accept or reject queries from
  different IP addresses for the same login. This should be disabled if
  the recursive DNS server might send queries from varying IPs. However,
  disabling this option also makes replay attacks significantly easier.

Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>

syncthing: improve relay argument parsing

Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <[email protected]>

syncthing: improve discovery argument parsing

Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <[email protected]>

ariang: bump to 1.3.11

ariang: bump to 1.3.11

Change log is available at https://github.com/mayswind/AriaNg/releases/tag/1.3.11

Signed-off-by: Roc Lai <[email protected]>

libjpeg-turbo: update to 3.1.1

update to 3.1.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

clamav: update to 1.4.3

update to 1.4.3

Signed-off-by: Aleksey Vasilenko <[email protected]>

https-dns-proxy: match updated curl config options

- match updated curl config options

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp2: update to 1.66.0

- Update package description

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp3: update to 1.11.0

- Update package description
- Use CP instead of INSTALL_DATA to copy symlinks properly

Signed-off-by: Aleksey Vasilenko <[email protected]>

ngtcp2: update to 1.15.0

- Remove superficial libnghttp3 dependency
- Add libopenssl dependency
- Update package description
- Fix leaking lib and includes in libngtcp2_crypto_ossl.pc
- Use CP instead of INSTALL_DATA to copy symlinks properly

Signed-off-by: Aleksey Vasilenko <[email protected]>

curl: update to 8.15.0

- Merge LIBCURL_NGTCP2 and LIBCURL_NGHTTP3 into single LIBCURL_HTTP3 config option
- Rename LIBCURL_NGHTTP2 to LIBCURL_HTTP2 config option
- Disable IPFS support which is enabled by default
- Refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

golang: bump to 1.25.0

Fixes: CVE-2025-47907
Link: https://go.dev/doc/go1.25
Signed-off-by: George Sapkin <[email protected]>

libzip: update to 1.11.4

update to 1.11.4

Signed-off-by: Aleksey Vasilenko <[email protected]>

coova-chilli: update to 1.7

Swith to local tarballs for smaller size.

Some patches were merged upstream.

Switch to static instead of attribute constructor. Simpler.

Signed-off-by: Rosen Penev <[email protected]>

uradvd: provide warning upon disabled configuration

which grants clarity and better traceability.

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: Update to 2025-08-16

Provide four new options:
--valid-lifetime
--preferred-lifetime
--max-router-adv-interval
--min-router-adv-interval

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

apr: update to 1.7.6

update to 1.7.6

Signed-off-by: Aleksey Vasilenko <[email protected]>

boost: Updates package to version 1.89.0
This commit updates boost to version 1.89.0

New libraries in this release:
* Bloom [2]: filters, from Joaquín M López Muñoz.

Other Notes:
* Boost.System is now a header-only library [3]

More info about Boost 1.89.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_89_0.html
[2]: https://www.boost.org/libs/bloom/
[3]; https://github.com/boostorg/system/commit/7a495bb46d7ccd808e4be2a6589260839b0fd3a3

Signed-off-by: Carlos Miguel Ferreira <[email protected]>

libcbor: adjust for cmake 4.x

Cmake 4.x requires 'cmake_minimum_required' to be at least 3.5.
Use 3.30 as the value (current cmake in OpenWrt 24.10).

Signed-off-by: Hannu Nyman <[email protected]>

treewide: adjust local CMakeLists.txt min version to cmake 4.x

cmake 4.x will require 'cmake_minimum_required' defined in cmake
projects to be at least 3.5. Adjust those local sources where that
variable is currently defined with value below 3.5.

Use 3.30 as the value, as 3.30 is currently used in 24.10, the oldest
still supported OpenWrt release branch.

Signed-off-by: Hannu Nyman <[email protected]>

libulfius: Update to v2.7.15

This library is tightly coupled with liborcania and libyder, they must be updated together.

* Update libulfius to v2.7.15

* Patch libulfius to fix FTBFS on 32-bit architectures with 64-bit time_t
  - Backported from upstream commit: 9457809a5321ca4a87f19fdc3f7f4af68e72afa8

* Remove obsolete CMAKE options for libulfius

Signed-off-by: Austin Lane <[email protected]>

libyder: Update to v1.4.20
This library is tightly coupled with liborcania and libulfius, they must be updated together.

* Update libyder to v1.4.20

Signed-off-by: Austin Lane <[email protected]>

liborcania: Update to v2.3.3

This library is tightly coupled with libulfius and libyder, they must be updated together.

* Update liborcania to v2.3.3

Signed-off-by: Austin Lane <[email protected]>

haproxy: update to v3.2.4

- Major version bump to the latest HAProxy v3.2 LTS release.
- Updated haproxy PKG_VERSION and PKG_HASH
- Updated build-parameters:
  - Removed USE_QUIC_OPENSSL_COMPAT as OpenSSL v3.5.1+ ships with
    good enough Quic support. HAProxy does not need the compat code
    with these newer versions of OpenSSL anymore.
  - Removed obsolete build parameters.
- Updated example configuration so it works with the new version.
- See changes: http://git.haproxy.org/?p=haproxy-3.2.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

nano: set nano as default EDITOR for nano-plus/full

Set nano as the default EDITOR via /etc/profile.d for those apps
that respect the variable. Only for nano-plus and nano-full variants.

Suggested-by: Anthony Sepa <[email protected]>
Signed-off-by: Hannu Nyman <[email protected]>

frp: Remove myself as maintainer

Signed-off-by: Richard Yu <[email protected]>

fish: update to 4.0.2

Update fish to 4.0.2

Signed-off-by: Shin Rag <[email protected]>

libpng: update to 1.6.50

- refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

imagemagick: update to 7.1.2.1

- Update project URL
- Add newly added type-urw-base35-type1.xml to conffiles
- Sort configure args

Signed-off-by: Aleksey Vasilenko <[email protected]>

subversion: update to 1.14.5

update to 1.14.5

Signed-off-by: Aleksey Vasilenko <[email protected]>

bottom: update to 0.11.1

update to 0.11.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

rust: update to 1.89.0

- switch source archive to tar.xz to save space and bandwidth
- refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

nano: Update to 8.6

Update nano editor to version 8.6

Signed-off-by: Hannu Nyman <[email protected]>

protobuf-c: fix host usage

Dependant packages mostly depend on a proto-c binary instead of
proto-gen-c. Add a symlink for it.

Remove no longer needed HOST options.

Signed-off-by: Rosen Penev <[email protected]>

whois: update to 5.6.4

- takeover maintainership

Signed-off-by: Aleksey Vasilenko <[email protected]>

php8: update to 8.4.11

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.11

Signed-off-by: Michael Heimpold <[email protected]>

libpfring: backport patches fixing compilation warning on 6.12+

Backport patches fixing compilation warning on 6.12+ kernel version.

  CC [M]  /home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.o
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:284:1: error: 'static' is not at beginning of declaration [-Werror=old-style-declaration]
  284 | const static ip_addr ip_zero = { IN6ADDR_ANY_INIT };
      | ^~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:467:7: error: no previous prototype for 'get_num_rx_queues' [-Werror=missing-prototypes]
  467 | u_int get_num_rx_queues(struct net_device *dev)
      |       ^~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:485:7: error: no previous prototype for 'lock_rss_queues' [-Werror=missing-prototypes]
  485 | u_int lock_rss_queues(struct net_device *dev)
      |       ^~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:744:14: error: no previous prototype for 'netns_lookup' [-Werror=missing-prototypes]
  744 | pf_ring_net *netns_lookup(struct net *net) {
      |              ^~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:762:14: error: no previous prototype for 'netns_add' [-Werror=missing-prototypes]
  762 | pf_ring_net *netns_add(struct net *net) {
      |              ^~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:1017:17: error: no previous prototype for 'pf_ring_device_ifindex_lookup' [-Werror=missing-prototypes]
 1017 | pf_ring_device *pf_ring_device_ifindex_lookup(struct net *net, int ifindex) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:1031:17: error: no previous prototype for 'pf_ring_device_name_lookup' [-Werror=missing-prototypes]
 1031 | pf_ring_device *pf_ring_device_name_lookup(struct net *net /* namespace */, char *name) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3467:5: error: no previous prototype for 'check_perfect_rules' [-Werror=missing-prototypes]
 3467 | int check_perfect_rules(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3541:5: error: no previous prototype for 'check_wildcard_rules' [-Werror=missing-prototypes]
 3541 | int check_wildcard_rules(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3657:5: error: no previous prototype for 'bpf_filter_skb' [-Werror=missing-prototypes]
 3657 | int bpf_filter_skb(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3711:5: error: no previous prototype for 'sample_packet' [-Werror=missing-prototypes]
 3711 | int sample_packet(struct pf_ring_socket *pfr) {
      |     ^~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3731:11: error: no previous prototype for 'default_rehash_rss_func' [-Werror=missing-prototypes]
 3731 | u_int32_t default_rehash_rss_func(struct sk_buff *skb, struct pfring_pkthdr *hdr)
      |           ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4477:6: error: no previous prototype for 'register_device_handler' [-Werror=missing-prototypes]
 4477 | void register_device_handler(void)
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4486:6: error: no previous prototype for 'unregister_device_handler' [-Werror=missing-prototypes]
 4486 | void unregister_device_handler(void)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4724:6: error: no previous prototype for 'reserve_memory' [-Werror=missing-prototypes]
 4724 | void reserve_memory(unsigned long base, unsigned long mem_len)
      |      ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4733:6: error: no previous prototype for 'unreserve_memory' [-Werror=missing-prototypes]
 4733 | void unreserve_memory(unsigned long base, unsigned long mem_len)
      |      ^~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6038:14: error: no previous prototype for 'ring_poll' [-Werror=missing-prototypes]
 6038 | unsigned int ring_poll(struct file *file,
      |              ^~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6130:23: error: no previous prototype for 'cluster_lookup' [-Werror=missing-prototypes]
 6130 | ring_cluster_element *cluster_lookup(u_int32_t cluster_id) {
      |                       ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6149:5: error: no previous prototype for 'get_first_available_cluster_queue' [-Werror=missing-prototypes]
 6149 | int get_first_available_cluster_queue(ring_cluster_element *el)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6162:24: error: no previous prototype for 'get_first_cluster_consumer' [-Werror=missing-prototypes]
 6162 | struct pf_ring_socket *get_first_cluster_consumer(ring_cluster_element *el)
      |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6179:5: error: no previous prototype for 'add_sock_to_cluster_list' [-Werror=missing-prototypes]
 6179 | int add_sock_to_cluster_list(ring_cluster_element *el, struct sock *sk, u_int16_t consumer_id)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6231:5: error: no previous prototype for 'remove_from_cluster_list' [-Werror=missing-prototypes]
 6231 | int remove_from_cluster_list(struct ring_cluster *cluster_ptr, struct sock *sock)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6840:5: error: no previous prototype for 'setSocketStats' [-Werror=missing-prototypes]
 6840 | int setSocketStats(struct pf_ring_socket *pfr)
      |     ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8266:6: error: no previous prototype for 'pf_ring_zc_dev_register' [-Werror=missing-prototypes]
 8266 | void pf_ring_zc_dev_register(zc_dev_callbacks *callbacks,
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8351:6: error: no previous prototype for 'pf_ring_zc_dev_unregister' [-Werror=missing-prototypes]
 8351 | void pf_ring_zc_dev_unregister(struct net_device *dev, u_int channel_id)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8505:6: error: no previous prototype for 'remove_device_from_proc' [-Werror=missing-prototypes]
 8505 | void remove_device_from_proc(pf_ring_net *netns, pf_ring_device *dev_ptr) {
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8540:6: error: no previous prototype for 'remove_device_from_ring_list' [-Werror=missing-prototypes]
 8540 | void remove_device_from_ring_list(struct net_device *dev)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8607:6: error: no previous prototype for 'add_device_to_proc' [-Werror=missing-prototypes]
 8607 | void add_device_to_proc(pf_ring_net *netns, pf_ring_device *dev_ptr) {
      |      ^~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8637:5: error: no previous prototype for 'add_device_to_ring_list' [-Werror=missing-prototypes]
 8637 | int add_device_to_ring_list(struct net_device *dev, int32_t dev_index)
      |     ^~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors

While at it also refresh all the previous patch.

Signed-off-by: Christian Marangi <[email protected]>

rtty: update to 9.0.2

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.2

Signed-off-by: Jianhui Zhao <[email protected]>

parted: fix compilation with GCC15

Backport upstream patch.

Signed-off-by: Rosen Penev <[email protected]>

iperf: update to 2.2.1

Changelog: https://sourceforge.net/projects/iperf2/files/

Note: 001-checksums.c-needs-to-define-_GNU_SOURCE.patch is added to
fix a build error with musl libc, where struct udphdr members are not
available unless _GNU_SOURCE is defined.

Signed-off-by: Wei-Ting Yang <[email protected]>

cloudreve: Update to 4.6.0

Changelogs:
  - https://github.com/cloudreve/cloudreve/releases/tag/4.5.0
  - https://github.com/cloudreve/cloudreve/releases/tag/4.6.0

Signed-off-by: Tianling Shen <[email protected]>

dufs: Update to 0.44.0

Release note: https://github.com/sigoden/dufs/releases/tag/v0.44.0

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2025.8.1

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.8.1

Signed-off-by: Tianling Shen <[email protected]>

snort3: update to 3.9.3.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.9.3.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.21

Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.21

Signed-off-by: John Audia <[email protected]>

sing-box: update to 1.12.3

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.3

Signed-off-by: Gregory Gullin <[email protected]>

dufs: remove `--locked` flag

It's enabled by default now.

Signed-off-by: Tianling Shen <[email protected]>

rust: read build path from `{HOST_}MAKE_PATH`

Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <[email protected]>

rust: introduce `RUST_{HOST,PKG}_LOCKED` flag

Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <[email protected]>

pbr: 1.1.8-36 bugfixes

- drop load_environment_flag and always load environment on start, making
  restart command great again
- store/restore existing jshn namespace when using json()
- remove unneeded sleepCount in is_wan_up()
- move updated README inside files/

Signed-off-by: Stan Grishin <[email protected]>

aliyun-cli: update to 3.0.296

Changelog:
https://github.com/aliyun/aliyun-cli/releases/tag/v3.0.296

Signed-off-by: Bruce Chen <[email protected]>

qbee-agent: bump version to 2025.34

Signed-off-by: Jon Henrik Bjørnstad <[email protected]>
qbee-agent: bump version to 2025.34

lxc: update to 6.0.5

6.0.5 is a bug fix release, see:
https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438

Full changelog: https://github.com/lxc/lxc/compare/v6.0.4...v6.0.5

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

abseil-cpp: Update to 20240722.1 LTS

- Update abseil-cpp minor rev. Fixes CVE-2025-0838

Signed-off-by: Austin Lane <[email protected]>

python-pyelftools: Update to v0.32

- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <[email protected]>

pdns-recursor: update to 5.2.5

includes fix for CVE-2025-30192 (which was in 5.2.4)

Signed-off-by: Peter van Dijk <[email protected]>

libpam: add upstream patch/fix build mold linker

Add backport fixing the build with mold linker and remove the no-mold flag.

See: https://github.com/linux-pam/linux-pam/issues/922 and
https://github.com/linux-pam/linux-pam/pull/928

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

yt-dlp: bump to 2025.08.11

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.11
Signed-off-by: George Sapkin <[email protected]>

frp: bump to 0.64.0

Change log is available at https://github.com/fatedier/frp/compare/v0.51.3...v0.64.0

Signed-off-by: Roc Lai <[email protected]>

libprotobuf-c: Update to v1.5.2

Update libprotobuf-c to version 1.5.2.
Notably, adds support for protobuf >=26

Signed-off-by: Austin Lane <[email protected]>

lua-argparse: bump to luarocks' 0.7.1

Bump lua-argparse to the luarocks argparse 0.7.1 release.

Signed-off-by: Nathaniel Wesley Filardo <[email protected]>

lighttpd: update to lighttpd 1.4.81 release hash

https://www.lighttpd.net/2025/8/17/1.4.81/

Signed-off-by: Glenn Strauss <[email protected]>

sing-box: update to 1.12.1

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.1

Signed-off-by: Gregory Gullin <[email protected]>

sendmail: fix building as non-root user

Buildbot builds started failing with this:

[...]
install -c -o buildbot -g buildbot -m 644 ../../include/libmilter/mfapi.h /builder/shared-workdir/build/sdk/build_dir/target-x86_64_musl/sendmail-8.16.1/ipkg-install/usr/include/libmilter/mfapi.h
install: invalid user 'buildbot'

Extend 010-enable-nonroot-install.patch to remove "-o U -g G" from more
install targets.

Signed-off-by: W. Michael Petullo <[email protected]>

coova-chilli: fix compilation with GCC15

No idea how this even worked. cmdsock never got closed.

Signed-off-by: Rosen Penev <[email protected]>

krb5: update to 1.22

Upstream list of changes is available at
https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html.

Of note is that this release fixes the build with GCC 15.1.  As with
other recent versions, GCC 15.1 transforms some warnings into errors,
and this release remediates those warnings, now errors.

Signed-off-by: W. Michael Petullo <[email protected]>

owut: update to 2025.08.15

Bug fixes:
    efahl/owut@c6e75716d1a3 init: fix typo in file name
    efahl/owut@7f97ab67c2f5 examples: improve docs for writing pre-install scripts
Enhancements:
    efahl/owut@93f2b06b8882 owut: utilize upstream limits instead of hardcoded values
    efahl/owut@7a45c412fc96 owut: improve usability of 'dump' option
    efahl/owut@35720e369ac0 owut: improve age reporting

Signed-off-by: Eric Fahlgren <[email protected]>

python-certifi: update to 2025.8.3

Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <[email protected]>

python-certifi: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <[email protected]>

isc-dhcpd: quote filenames for safety

Per best practices, we should protect against wildcards in
variable expansions.

Signed-off-by: Philip Prindeville <[email protected]>

isc-dhcp: fix spacing on forced parameters

If there's a "forced_send" option, then put spaces between multiple
parameter codes.

Signed-off-by: Philip Prindeville <[email protected]>

isc-dhcp: distinguish between hexstrings and strings

It's a minor difference and they're handled the same, but that
might change as we move to Kea.

Signed-off-by: Philip Prindeville <[email protected]>