modemmanager: add missing ppp ifname option value

The pppd supports the option to configure the name of the network interface
at startup using the ifname option.

The pppd can overwrite the name of the network interface at startup using
the 'ifname' configuration option. If this option is not specified, the new
network interface is created according to the following scheme:
ppp<number>, e.g. ppp0, ppp1 and so on. This can therefore change with
every start if the number has been already assigned to another ppp connection.

In order to always get the same interface name with the modemmanger proto via
ppp, it is created according to the new scheme by setting the 'ifname':
ppp-<uci network interface name>, e.g. ppp-wwan.

Signed-off-by: Florian Eckert <[email protected]>

keepalived: add enabled option

To prevent the keepalived service from starting if there is no valid
configuration yet, the new option enabled is added. This must be set to
true for keepalived to start.

Signed-off-by: Florian Eckert <[email protected]>

keepalived: only add content to config file if needed

Only add the first two pieces of information to the configuration file if
there is a valid '/etc/config/keepalived'.

Signed-off-by: Florian Eckert <[email protected]>

keepalived: enable reproducible-build

Before keepalived version '2.3.0' the compilation was not reproducable
because the compile date and other information has been added to the binary.

Starting with version '2.3.0', there is a new compilation option
'--enable-reproducible-build' that makes the binary reproducible.

The data that prevented this has been moved to a separate file,
'/etc/keepalived/keepalived.config-opts'.

This commit enables the reproducable build.

[1] https://github.com/acassen/keepalived/commit/30d2f759783e769c27974d22bab88f7e82dfcdf9

Signed-off-by: Florian Eckert <[email protected]>

stunnel: update version to 5.75

Bugfixes:
* Fixed infinite loop triggered by OCSP URL parsing errors (thx to Richard Könning for reporting).
* Fixed OPENSSL_NO_OCSP build issues (thx to Dmitry Mostovoy for reporting).
* Fixed default curve selection in FIPS mode with OpenSSL 3.4+.
* Fixed tests with modern Python versions.
* Fixed tests with multiple OpenSSL versions installed.

Features:
* Added provider URI support for "cert" and "key" options.
* Added new "CAstore" service-level option (OpenSSL 3.0+).
* Added "provider" (OpenSSL 3.0+), "providerParameter" (OpenSSL 3.5+), and "setEnv" global options.
* Key file/URI path added to passphrase prompt on Unix.
* PKCS#11 provider installed on Windows.

Signed-off-by: Florian Eckert <[email protected]>

stunnel: update version to 5.74

Bugfixes:
* Fixed a stapling cache deallocation crash.
* Fixed "redirect" with protocol negotiation.

Features:
* "protocolHost" support for "socks" protocol clients.
* More detailed logs in OpenSSL 3.0 or later.

Signed-off-by: Florian Eckert <[email protected]>

stunnel: update version to 5.73

Bugfixes
* Fixed a memory leak while reloading stunnel.conf sections with
  "client=yes" and "delay=no".
* Fixed TIMEOUTocsp with values greater than 4.
* Fix the IPv6 test on a non-IPv6 machine.

Features
* HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation
* OCSP stapling fetches moved away from server threads.
* improved client-side session resumption.
* Added support for the mimalloc allocator.
* Check for protocolHost moved to configuration file processing for the
  client-side CONNECT protocol.
* Clarified some confusing OpenSSL's certificate verification error messages.

Signed-off-by: Florian Eckert <[email protected]>

acme-common: cleanup acme start crontab migration

The '/etc/init.d/acme start' crontab migration
should also delete the existing
'/etc/init.d/acme start' line.

Otherwise, on every sysupgrade that carries
forward existing configurations, a new
'0 0 * * * /etc/init.d/acme renew' line is
added to the crontab.

Furthermore, do not add an 'acme renew' crontab
line if it already exists.

Signed-off-by: Satadru Pramanik, DO, MPH, MEng <[email protected]>

owut: update to 2025.09.03

Bug fixes:
    efahl/owut@5743eea3bcda owut: suppress all but json output when using dump
    efahl/owut@efe39e2e3897 owut: handle sigint (ctrl-c) properly
Enhancements:
    efahl/owut@49e9bce7b8c3 owut: provide download progress for slow connections

Signed-off-by: Eric Fahlgren <[email protected]>

lksctp-tools: update to 1.0.21

update to 1.0.21

Signed-off-by: Aleksey Vasilenko <[email protected]>

gperftools: update to 2.17.2

Bump to latest release and removed upstreamed patch.

Resulting libs give a fully functional snort3 which was built against
this new version.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

chrony: update to 4.8

Update chrony to 4.8 and configure chronyc to drop root privileges by
default.

Release notes: https://chrony-project.org/news.html#_27_aug_2025_chrony_4_8_released

Signed-off-by: Miroslav Lichvar <[email protected]>

mwan3: bump PKG_RELEASE

- fix some problems with GNU sed/grep
- add IPv6-PD src_ip logic

Signed-off-by: Fabian Groffen <[email protected]>

mwan3: init.d/mwan3: fix GNU grep warning about stray \

GNU grep complains:
  grep: warning: stray \ before :

Drop the \, confirmed with busybox grep backslash is non-significant
(the output is the same).

Closes: https://github.com/openwrt/packages/issues/25198
Signed-off-by: Fabian Groffen <[email protected]>

mwan3: common.sh: fix src_ip detection for ipv6-PD

IPv6 via PPPoE often receives a prefix, not an address. In that case
mwan3_get_src_ip would not find an address and fall back to ::.  However
in case of multiple IPv6 upstreams, this no longer means a ping (such as
done by uptime check) succeeds, for there are multiple addresses.

With this, mwan3 can effectively load-balance/fail-over on a PPPoE IPv6
prefix and a secondary (LTE) acquired /64 without immediately disabling
the IPv6 prefix interface as soon as the secondary IPv6 interface comes
up.

I think this change is also a fix to #26690
but I'm not 100% sure of that.

Signed-off-by: Fabian Groffen <[email protected]>

mwan3: common.sh: fix sed syntax for GNU sed

`pq' yields with GNU sed:
  sed: -e expression #1, char 15: extra characters after command
so, make q a separate command instead.

busybox accepts this too, and still returns only the first match (q
quits processing)

Signed-off-by: Fabian Groffen <[email protected]>

sing-box: add variant tiny

The tiny version disables tailscale by default for small package size.
OpenWrt also has the tailscale package as an alternative. We prefer
to keep the base version has the same build tags with the upstream
releases for compatibility.

Signed-off-by: Van Waholtz <[email protected]>

sing-box: Update to 1.12.4

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.4

Signed-off-by: Anton P. <[email protected]>

ruby: update to 3.3.9

3.3.9 release includes the following security fix of default gems:

- CVE-2025-24294: Possible Denial of Service in resolv gem

And the following fixes for build issues:

- GCC 15.1
- Visual Studio 2022 Version 17.14

3.3.7 and 3.3.8 are routine update that includes minor bug fixes.

Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>

libtorrent-rasterbar: update boost dependencies

libtorrent only links to boost headers since boost 1.69.
Remove boost-system from the dependencies and add boost as build
dependency.

Signed-off-by: Tianling Shen <[email protected]>

micro: add new package

Modern and intuitive terminal-based text editor

https://micro-editor.github.io

Co-authored-by: Wesley Gimenes <[email protected]>
Signed-off-by: Gregory Gullin <[email protected]>

squid: update to 7.1

- Use GitHub for sources URL
- Remove autoreconf fixup (it works out-of-the-box)
- Remove squid-mod-cachemgr package since cachemgr.cgi was removed upstream
- Rename ac_cv_epoll_works to squid_cv_epoll_works to follow upstream
- Don't customize target CFLAGS and LDFLAGS (they work as is)
- Remove nettle configure patch - upstream handles it correctly now
- Remove dummy comment in config menu

Signed-off-by: Aleksey Vasilenko <[email protected]>

bc: update to 1.08.2

- Remove autoreconf and GCC 15 workaround
- Remove 3 obsolete/upstreamed patches
- Manually rebase no-doc patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

nginx: update CPE ID

Looking at the official CPE dictionary [1], `cpe:/a:nginx:nginx` was
only used until 1.21.4 inclusively. Later it was renamed to
`cpe:/a:f5:nginx`, and it showed up in a few more non-contiguous
versions numbers after 1.21.4.

In all nginx security advisories [2] starting from year 2024, the CPE
ID used is `cpe:/a:f5:nginx_open_source`. This includes versions 1.25.0
and newer.

Update the CPE ID to the newest known value of `cpe:/a:f5:nginx_open_source`
used in nginx's own security advirosies/CVEs.

[1]: https://nvd.nist.gov/products/cpe
[2]: https://nginx.org/en/security_advisories.html

Signed-off-by: Roman Azarenko <[email protected]>

ampr-ripd: Initial package release

This project can be used with the OpenWrt SDK to generate a package
for ampr-ripd.  It is intended for use only by licensed amateur radio
operators.  ampr-ripd is a modified RIPv2 listener that provides
route information for ARDC IPIP Mesh tunnels.

Signed-off-by: Dan Srebnick <[email protected]>

libtirpc: fix build for client packages

Version 1.3.7 introduced a feature which moved symbols into an optional
database section[1]. Add corresponding configure args to fix the build
with our packages. This commit adds the new option to ensure client
packages (snort, rpcbind, lsof, etc.) build without error.

Build system: x86/64 (using external toolchain from snapshot)
Build-tested: x86/64

Co-authored-by: Hannu Nyman <[email protected]>
Signed-off-by: John Audia <[email protected]>

rsync: update dependencies for rrsync

- update dependencies from perl to python
- support dropbear

Signed-off-by: Maxim Storchak <[email protected]>

lsof: fix compilation issue with "libtirpc"

adding --without-libtirpc to CONFIGURE_ARGS + version bump. Ref.: https://github.com/openwrt/packages/issues/27357

Signed-off-by: Ulrich Stark <[email protected]>

lf: update to r37

https://github.com/gokcehan/lf/releases/tag/r37

Signed-off-by: Nate Robinson <[email protected]>

django-restframework: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:django-rest-framework:django_rest_framework

Signed-off-by: Wei-Ting Yang <[email protected]>

yt-dlp: bump to 2025.08.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.08.22
Signed-off-by: George Sapkin <[email protected]>

telegraf: update to 1.35.4

- Update Telegraf to v1.35.4
- Adjust GO_PKG_LDFLAGS_X to reflect upstream changes in version metadata
- Add default configuration file (Telegraf no longer includes one)
- Drop deprecated tcp_listener and udp_listener plugins from telegraf-small
- Rework how plugins for small variant are specified to reflect upstream changes
- Add -static TARGET_LDFLAGS for MIPS target to avoid R_MIPS_26 relocation errors during build

Signed-off-by: Niklas Thorild <[email protected]>

adblock-fast: update to 1.1.4-r12

README:
* update header

Init-script:
* set an earlier start to get triggers to work
* better str_contains
* improve readability of json() by getting rid of cascading case statements
* add new errors/status messages to get_text()
* prepare get_text() for localization by switching to inline printf
* adjust shellcheck disable comments where needed
* parse unbound config for DNS hijack ports
* test if the archived cache exists on boot and proceed to use it if it does
* add trigger waiting status so that luci app can display correct status
* do not run adb_config_update on boot, speeding up trigger setup

Signed-off-by: Stan Grishin <[email protected]>

sing-box: Revert "sing-box: update to 1.12.3"

This reverts commit 002e0559a5f3339fd5232a6e63cc00ce6886b3ab.

sing-box 1.12.3 is apparently buggy and crashes.
Reference to #27346 and #27339
Let's revert the upgrade.

Signed-off-by: Hannu Nyman <[email protected]>

vips: update to 8.17.1

Upstream list of changes is available at
https://github.com/libvips/libvips/releases/tag/v8.17.1.

Signed-off-by: W. Michael Petullo <[email protected]>

krb5: update to 1.22.1

Upstream list of changes is available at
https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.1.html.

Of note is that this release fixes CVE-2025-57736.

Also removes "-std=gnu11" from build.

Signed-off-by: W. Michael Petullo <[email protected]>

adguardhome: bump to 0.107.65

Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.65
Signed-off-by: George Sapkin <[email protected]>

transmission-web-control: fix mirror hash

Fix hash.

Signed-off-by: Hannu Nyman <[email protected]>

libtirpc: update to 1.3.7

Release notes: https://sourceforge.net/projects/libtirpc/files/libtirpc/1.3.7/Release-1-3-7.txt

Removed upstreamed patches.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

lm-sensors: fix build with glibc

The lm-sensors build was failing on glibc-based targets with:
  ld: cannot find -liconv: No such file or directory

which occurred because the upstream Makefile unconditionally links
against -liconv, but glibc has iconv functionality built-in and does not
provide a separate libiconv library.

I submitted the new patch upstream to fix this:
https://github.com/hramrach/lm-sensors/pull/14

This change is backward compatible based on my testing building
lm-sensors for x86/64 with glibc and again with musl after having
applied the patch.

Build system: x86/64
Build-tested: x86/64-glibc and x86/64
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <[email protected]>

poemgr: update to latest HEAD

f1f093852aba poemgr: drop prefix from json-c include
adfb382a996a poemgr: Fix missing/unused includes
27d53374601b Makefile: compile object files before linking
e07fdec5e1cf Makefile: use LDLIBS to link libraries
1e6659b786e8 Makefile: mark targets without any output
f7f147977891 Makefile: reference output file using variable
aa3ae603099a Makefile: Add missing license header

Signed-off-by: Sven Eckelmann <[email protected]>

v2ray-geodata: Update to latest version

Update all geodata.

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.71.0

Removed upstreamed patch.

Release note: https://github.com/rclone/rclone/releases/tag/v1.71.0

Signed-off-by: Tianling Shen <[email protected]>

openlist: Update to 4.1.1

Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.1

Signed-off-by: Tianling Shen <[email protected]>

v2raya: Update to 2.2.7

Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7

Signed-off-by: Tianling Shen <[email protected]>

ngtcp2: update to 1.15.0

this time is for real

Signed-off-by: Aleksey Vasilenko <[email protected]>

linknx: prevent jsoncpp dependency

Signed-off-by: Othmar Truniger <[email protected]>

transmission-web-control: Update to 20240408

Update to commit f02a47aff2680de10c2269e22a3d0b37a318dbcd
Change TITLE variable to make it easier to understand.

Signed-off-by: Ryan Keane <[email protected]>

nut: update to 2.8.4

See upstream changelog at
https://networkupstools.org/docs/release-notes.chunked/NUT_Release_Notes.html

New drivers:
* failover
* liebert-gxe
* microsol-apc
* nutdrv_hashx
* powervar_cx_ser
* nutdrv_siemens-sitop
* sms_ser
* bicker_ser
* ve-direct
* nhs_ser
* powervar_cx_usb

Signed-off-by: Sebastian Hamann <[email protected]>

nut: switch to https:// download URL

Signed-off-by: Sebastian Hamann <[email protected]>

nut: fix typo in nut_serial.hotplug (fix #21504)

Signed-off-by: Sebastian Hamann <[email protected]>

ffmpeg: update to 6.1.3

- Remove 2 upstreamed patches

Signed-off-by: Aleksey Vasilenko <[email protected]>

dufs: backport upstream fixes

Including one security fix.

Signed-off-by: Tianling Shen <[email protected]>

python3: fix host uuid and ncurses

pkgconfig doesn't work correct for these two packages. Just readd the
proper paths.

Signed-off-by: Rosen Penev <[email protected]>

nnn: update to version 5.1

Release notes: https://github.com/jarun/nnn/compare/v4.9...v5.1

Signed-off-by: Gregory Gullin <[email protected]>

gateway-go: update to 2.0.10

- support ipv6 transport for remote access

Signed-off-by: Yu Fang <[email protected]>

i2csfp: update to latest Git HEAD

This fixes build with GCC15.

Signed-off-by: Jonas Jelonek <[email protected]>

iodine: use procd, add extra options

Iodine now uses a procd init.d service and output is sent to the system
log.

Two new options have been added:

- debuglevel — increases the verbosity of debug output.

- check_client_ip — controls whether to accept or reject queries from
  different IP addresses for the same login. This should be disabled if
  the recursive DNS server might send queries from varying IPs. However,
  disabling this option also makes replay attacks significantly easier.

Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>

syncthing: improve relay argument parsing

Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <[email protected]>

syncthing: improve discovery argument parsing

Fixes: 47644ba46 ("syncthing: fix discovery and relay extra args")
Signed-off-by: George Sapkin <[email protected]>

ariang: bump to 1.3.11

ariang: bump to 1.3.11

Change log is available at https://github.com/mayswind/AriaNg/releases/tag/1.3.11

Signed-off-by: Roc Lai <[email protected]>

libjpeg-turbo: update to 3.1.1

update to 3.1.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

clamav: update to 1.4.3

update to 1.4.3

Signed-off-by: Aleksey Vasilenko <[email protected]>

https-dns-proxy: match updated curl config options

- match updated curl config options

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp2: update to 1.66.0

- Update package description

Signed-off-by: Aleksey Vasilenko <[email protected]>

nghttp3: update to 1.11.0

- Update package description
- Use CP instead of INSTALL_DATA to copy symlinks properly

Signed-off-by: Aleksey Vasilenko <[email protected]>

ngtcp2: update to 1.15.0

- Remove superficial libnghttp3 dependency
- Add libopenssl dependency
- Update package description
- Fix leaking lib and includes in libngtcp2_crypto_ossl.pc
- Use CP instead of INSTALL_DATA to copy symlinks properly

Signed-off-by: Aleksey Vasilenko <[email protected]>

curl: update to 8.15.0

- Merge LIBCURL_NGTCP2 and LIBCURL_NGHTTP3 into single LIBCURL_HTTP3 config option
- Rename LIBCURL_NGHTTP2 to LIBCURL_HTTP2 config option
- Disable IPFS support which is enabled by default
- Refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

golang: bump to 1.25.0

Fixes: CVE-2025-47907
Link: https://go.dev/doc/go1.25
Signed-off-by: George Sapkin <[email protected]>

libzip: update to 1.11.4

update to 1.11.4

Signed-off-by: Aleksey Vasilenko <[email protected]>

coova-chilli: update to 1.7

Swith to local tarballs for smaller size.

Some patches were merged upstream.

Switch to static instead of attribute constructor. Simpler.

Signed-off-by: Rosen Penev <[email protected]>

uradvd: provide warning upon disabled configuration

which grants clarity and better traceability.

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: Update to 2025-08-16

Provide four new options:
--valid-lifetime
--preferred-lifetime
--max-router-adv-interval
--min-router-adv-interval

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

apr: update to 1.7.6

update to 1.7.6

Signed-off-by: Aleksey Vasilenko <[email protected]>

boost: Updates package to version 1.89.0
This commit updates boost to version 1.89.0

New libraries in this release:
* Bloom [2]: filters, from Joaquín M López Muñoz.

Other Notes:
* Boost.System is now a header-only library [3]

More info about Boost 1.89.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_89_0.html
[2]: https://www.boost.org/libs/bloom/
[3]; https://github.com/boostorg/system/commit/7a495bb46d7ccd808e4be2a6589260839b0fd3a3

Signed-off-by: Carlos Miguel Ferreira <[email protected]>

libcbor: adjust for cmake 4.x

Cmake 4.x requires 'cmake_minimum_required' to be at least 3.5.
Use 3.30 as the value (current cmake in OpenWrt 24.10).

Signed-off-by: Hannu Nyman <[email protected]>

treewide: adjust local CMakeLists.txt min version to cmake 4.x

cmake 4.x will require 'cmake_minimum_required' defined in cmake
projects to be at least 3.5. Adjust those local sources where that
variable is currently defined with value below 3.5.

Use 3.30 as the value, as 3.30 is currently used in 24.10, the oldest
still supported OpenWrt release branch.

Signed-off-by: Hannu Nyman <[email protected]>

libulfius: Update to v2.7.15

This library is tightly coupled with liborcania and libyder, they must be updated together.

* Update libulfius to v2.7.15

* Patch libulfius to fix FTBFS on 32-bit architectures with 64-bit time_t
  - Backported from upstream commit: 9457809a5321ca4a87f19fdc3f7f4af68e72afa8

* Remove obsolete CMAKE options for libulfius

Signed-off-by: Austin Lane <[email protected]>

libyder: Update to v1.4.20
This library is tightly coupled with liborcania and libulfius, they must be updated together.

* Update libyder to v1.4.20

Signed-off-by: Austin Lane <[email protected]>

liborcania: Update to v2.3.3

This library is tightly coupled with libulfius and libyder, they must be updated together.

* Update liborcania to v2.3.3

Signed-off-by: Austin Lane <[email protected]>

haproxy: update to v3.2.4

- Major version bump to the latest HAProxy v3.2 LTS release.
- Updated haproxy PKG_VERSION and PKG_HASH
- Updated build-parameters:
  - Removed USE_QUIC_OPENSSL_COMPAT as OpenSSL v3.5.1+ ships with
    good enough Quic support. HAProxy does not need the compat code
    with these newer versions of OpenSSL anymore.
  - Removed obsolete build parameters.
- Updated example configuration so it works with the new version.
- See changes: http://git.haproxy.org/?p=haproxy-3.2.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

nano: set nano as default EDITOR for nano-plus/full

Set nano as the default EDITOR via /etc/profile.d for those apps
that respect the variable. Only for nano-plus and nano-full variants.

Suggested-by: Anthony Sepa <[email protected]>
Signed-off-by: Hannu Nyman <[email protected]>

frp: Remove myself as maintainer

Signed-off-by: Richard Yu <[email protected]>

fish: update to 4.0.2

Update fish to 4.0.2

Signed-off-by: Shin Rag <[email protected]>

libpng: update to 1.6.50

- refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

imagemagick: update to 7.1.2.1

- Update project URL
- Add newly added type-urw-base35-type1.xml to conffiles
- Sort configure args

Signed-off-by: Aleksey Vasilenko <[email protected]>

subversion: update to 1.14.5

update to 1.14.5

Signed-off-by: Aleksey Vasilenko <[email protected]>

bottom: update to 0.11.1

update to 0.11.1

Signed-off-by: Aleksey Vasilenko <[email protected]>

rust: update to 1.89.0

- switch source archive to tar.xz to save space and bandwidth
- refresh a patch

Signed-off-by: Aleksey Vasilenko <[email protected]>

nano: Update to 8.6

Update nano editor to version 8.6

Signed-off-by: Hannu Nyman <[email protected]>

protobuf-c: fix host usage

Dependant packages mostly depend on a proto-c binary instead of
proto-gen-c. Add a symlink for it.

Remove no longer needed HOST options.

Signed-off-by: Rosen Penev <[email protected]>

whois: update to 5.6.4

- takeover maintainership

Signed-off-by: Aleksey Vasilenko <[email protected]>

php8: update to 8.4.11

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.11

Signed-off-by: Michael Heimpold <[email protected]>

libpfring: backport patches fixing compilation warning on 6.12+

Backport patches fixing compilation warning on 6.12+ kernel version.

  CC [M]  /home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.o
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:284:1: error: 'static' is not at beginning of declaration [-Werror=old-style-declaration]
  284 | const static ip_addr ip_zero = { IN6ADDR_ANY_INIT };
      | ^~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:467:7: error: no previous prototype for 'get_num_rx_queues' [-Werror=missing-prototypes]
  467 | u_int get_num_rx_queues(struct net_device *dev)
      |       ^~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:485:7: error: no previous prototype for 'lock_rss_queues' [-Werror=missing-prototypes]
  485 | u_int lock_rss_queues(struct net_device *dev)
      |       ^~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:744:14: error: no previous prototype for 'netns_lookup' [-Werror=missing-prototypes]
  744 | pf_ring_net *netns_lookup(struct net *net) {
      |              ^~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:762:14: error: no previous prototype for 'netns_add' [-Werror=missing-prototypes]
  762 | pf_ring_net *netns_add(struct net *net) {
      |              ^~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:1017:17: error: no previous prototype for 'pf_ring_device_ifindex_lookup' [-Werror=missing-prototypes]
 1017 | pf_ring_device *pf_ring_device_ifindex_lookup(struct net *net, int ifindex) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:1031:17: error: no previous prototype for 'pf_ring_device_name_lookup' [-Werror=missing-prototypes]
 1031 | pf_ring_device *pf_ring_device_name_lookup(struct net *net /* namespace */, char *name) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3467:5: error: no previous prototype for 'check_perfect_rules' [-Werror=missing-prototypes]
 3467 | int check_perfect_rules(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3541:5: error: no previous prototype for 'check_wildcard_rules' [-Werror=missing-prototypes]
 3541 | int check_wildcard_rules(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3657:5: error: no previous prototype for 'bpf_filter_skb' [-Werror=missing-prototypes]
 3657 | int bpf_filter_skb(struct sk_buff *skb,
      |     ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3711:5: error: no previous prototype for 'sample_packet' [-Werror=missing-prototypes]
 3711 | int sample_packet(struct pf_ring_socket *pfr) {
      |     ^~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:3731:11: error: no previous prototype for 'default_rehash_rss_func' [-Werror=missing-prototypes]
 3731 | u_int32_t default_rehash_rss_func(struct sk_buff *skb, struct pfring_pkthdr *hdr)
      |           ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4477:6: error: no previous prototype for 'register_device_handler' [-Werror=missing-prototypes]
 4477 | void register_device_handler(void)
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4486:6: error: no previous prototype for 'unregister_device_handler' [-Werror=missing-prototypes]
 4486 | void unregister_device_handler(void)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4724:6: error: no previous prototype for 'reserve_memory' [-Werror=missing-prototypes]
 4724 | void reserve_memory(unsigned long base, unsigned long mem_len)
      |      ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:4733:6: error: no previous prototype for 'unreserve_memory' [-Werror=missing-prototypes]
 4733 | void unreserve_memory(unsigned long base, unsigned long mem_len)
      |      ^~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6038:14: error: no previous prototype for 'ring_poll' [-Werror=missing-prototypes]
 6038 | unsigned int ring_poll(struct file *file,
      |              ^~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6130:23: error: no previous prototype for 'cluster_lookup' [-Werror=missing-prototypes]
 6130 | ring_cluster_element *cluster_lookup(u_int32_t cluster_id) {
      |                       ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6149:5: error: no previous prototype for 'get_first_available_cluster_queue' [-Werror=missing-prototypes]
 6149 | int get_first_available_cluster_queue(ring_cluster_element *el)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6162:24: error: no previous prototype for 'get_first_cluster_consumer' [-Werror=missing-prototypes]
 6162 | struct pf_ring_socket *get_first_cluster_consumer(ring_cluster_element *el)
      |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6179:5: error: no previous prototype for 'add_sock_to_cluster_list' [-Werror=missing-prototypes]
 6179 | int add_sock_to_cluster_list(ring_cluster_element *el, struct sock *sk, u_int16_t consumer_id)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6231:5: error: no previous prototype for 'remove_from_cluster_list' [-Werror=missing-prototypes]
 6231 | int remove_from_cluster_list(struct ring_cluster *cluster_ptr, struct sock *sock)
      |     ^~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:6840:5: error: no previous prototype for 'setSocketStats' [-Werror=missing-prototypes]
 6840 | int setSocketStats(struct pf_ring_socket *pfr)
      |     ^~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8266:6: error: no previous prototype for 'pf_ring_zc_dev_register' [-Werror=missing-prototypes]
 8266 | void pf_ring_zc_dev_register(zc_dev_callbacks *callbacks,
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8351:6: error: no previous prototype for 'pf_ring_zc_dev_unregister' [-Werror=missing-prototypes]
 8351 | void pf_ring_zc_dev_unregister(struct net_device *dev, u_int channel_id)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8505:6: error: no previous prototype for 'remove_device_from_proc' [-Werror=missing-prototypes]
 8505 | void remove_device_from_proc(pf_ring_net *netns, pf_ring_device *dev_ptr) {
      |      ^~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8540:6: error: no previous prototype for 'remove_device_from_ring_list' [-Werror=missing-prototypes]
 8540 | void remove_device_from_ring_list(struct net_device *dev)
      |      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8607:6: error: no previous prototype for 'add_device_to_proc' [-Werror=missing-prototypes]
 8607 | void add_device_to_proc(pf_ring_net *netns, pf_ring_device *dev_ptr) {
      |      ^~~~~~~~~~~~~~~~~~
/home/runner/work/openwrt-rebuilder/openwrt-rebuilder/original/build/SNAPSHOT/build_dir/target-mipsel_24kc_musl/linux-ramips_mt7621/libpfring-8.6.1/kernel/pf_ring.c:8637:5: error: no previous prototype for 'add_device_to_ring_list' [-Werror=missing-prototypes]
 8637 | int add_device_to_ring_list(struct net_device *dev, int32_t dev_index)
      |     ^~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors

While at it also refresh all the previous patch.

Signed-off-by: Christian Marangi <[email protected]>

rtty: update to 9.0.2

changelog: https://github.com/zhaojh329/rtty/releases/tag/v9.0.2

Signed-off-by: Jianhui Zhao <[email protected]>

parted: fix compilation with GCC15

Backport upstream patch.

Signed-off-by: Rosen Penev <[email protected]>

iperf: update to 2.2.1

Changelog: https://sourceforge.net/projects/iperf2/files/

Note: 001-checksums.c-needs-to-define-_GNU_SOURCE.patch is added to
fix a build error with musl libc, where struct udphdr members are not
available unless _GNU_SOURCE is defined.

Signed-off-by: Wei-Ting Yang <[email protected]>

cloudreve: Update to 4.6.0

Changelogs:
  - https://github.com/cloudreve/cloudreve/releases/tag/4.5.0
  - https://github.com/cloudreve/cloudreve/releases/tag/4.6.0

Signed-off-by: Tianling Shen <[email protected]>

dufs: Update to 0.44.0

Release note: https://github.com/sigoden/dufs/releases/tag/v0.44.0

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2025.8.1

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.8.1

Signed-off-by: Tianling Shen <[email protected]>