erlang: fix mis-detection of transparent hugepages

Latest Erlang update incorrectly detects THP as always enabled,
which leads to segmentation fault on systems without transparent hugepages.
Here we manually override configure flag by checking actual option of target kernel.

Signed-off-by: Aleksey Vasilenko <[email protected]>

perl: fix compilation with GCC14

Need the header for fegetround.

Signed-off-by: Rosen Penev <[email protected]>

sing-box: update to 1.9.2

Signed-off-by: Milinda Brantini <[email protected]>

git: update to 2.45.2

- Replace one patch with configure vars override
- Refresh other patches

Signed-off-by: Aleksey Vasilenko <[email protected]>

libtirpc: update to 1.3.4

Signed-off-by: Rosen Penev <[email protected]>

zsh: fix compilation with GCC14

Upstream backport and local patch.

Signed-off-by: Rosen Penev <[email protected]>

stress-ng: bump to version 0.17.08

Signed-off-by: Alexandru Ardelean <[email protected]>

utils/findutils: update to 4.10.0

* utils/findutils/Makefile (PKG_VERSION): Update to latest.
(PKG_HASH): Update.

Signed-off-by: Bernhard Voelker <[email protected]>

iperf3: fix usage with big endian

Upstream submissions.

Signed-off-by: Rosen Penev <[email protected]>

sing-box: update to 1.9.1

Signed-off-by: Milinda Brantini <[email protected]>

banip: release 1.0

* made sure, that the domain lookup always add the found IPs to the underlying allow-/blocklist-Set
* major readme update

Signed-off-by: Dirk Brenken <[email protected]>

nghttp2: update 1.62.1

- Switch source back to .xz according to CONTRIBUTING.md

Signed-off-by: Aleksey Vasilenko <[email protected]>

devel: gcc: update to 13.3

Update GCC13 to 13.3, like in the root repo.

It fixes buildbot error:
make[3]: *** [Makefile:257: /builder/shared-workdir/build/sdk/dl/gcc-13.3.0.tar.xz] Error 255

Signed-off-by: Robert Marko <[email protected]>

python-networkx: update to 3.3

Signed-off-by: W. Michael Petullo <[email protected]>

pdns-recursor: update to 5.0.6

Signed-off-by: Peter van Dijk <[email protected]>

curl: update to 8.8.0

- Switch source to .xz according to CONTRIBUTING.md
- Switch project URL to  HTTPS
- Drop upstreamed patch
- Refresh remaining patch
- Adopt the package

Signed-off-by: krant <[email protected]>

ngtcp2: update to 1.5.0

- Switch source to .xz according to CONTRIBUTING.md
- Adopt the package

Signed-off-by: krant <[email protected]>

nghttp3: update to 1.3.0

- Switch source to .xz according to CONTRIBUTING.md
- Adopt the package

Signed-off-by: krant <[email protected]>

frr: fix compilation with GCC14

Fixes:
zebra/zebra_netns_notify.c: In function 'zebra_ns_ready_read':
zebra/zebra_netns_notify.c:265:40: error: implicit declaration of function 'basename' [-Wimplicit-function-declaration]
  265 |         if (strmatch(VRF_DEFAULT_NAME, basename(netnspath))) {
      |                                        ^~~~~~~~

Fixed by including libgen.h, then since basename may modify its
parameter, allocate a copy on the stack, using strdupa, and pass the
temporary string to basename.

According to the man page for basename:
With glibc, one gets the POSIX version of basename() when
<libgen.h> is included, and the GNU version otherwise.

The POSIX version of basename may modify the contents of path,
so we should to pass a copy when calling this function.

[1] https://man7.org/linux/man-pages/man3/basename.3.html

Signed-off-by: Georgi Valkov <[email protected]>

Revert "ci: no longer require real name"

It was decided that we should require to use real name once again.
There was discussion about it on the mailing list [1], which
was based on the commit in different OpenWrt repo [2]

This reverts commit 7e6cd98ad481184b1a620a9862aa3713d1ab85cc.

[1] https://lists.openwrt.org/pipermail/openwrt-devel/2024-April/042711.html
[2] https://github.com/openwrt/actions-shared-workflows/commit/12d9551f2d07ec34ac813da8612c8014fb393af6

Signed-off-by: Josef Schlehofer <[email protected]>

natmap: update to 20240603

Signed-off-by: Milinda Brantini <[email protected]>

prometheus-node-exporter-lua: fix netclass duplicate TYPE lines

Fixes a315c40b7232bbc83582685c98e41466d84d7a35

[initial fix]
Signed-off-by: René Treffer <[email protected]>
[fixup René version]
Signed-off-by: PichetGoulu <[email protected]>
[actual commit]
Signed-off-by: Etienne Champetier <[email protected]>

Merge pull request #24037 from TDT-AG/pr/20240429-keepalived

keepalived: remove not supported notify script handling

mdnsreponder: update to 2200.100.94.0.2

The IETF fork is unmaintained. In addition, the versioning is incompatible with apk.

010-uclibc.patch is pointless as uclibc is no longer used by OpenWrt.

020-fix-core-dump-while-parsing-interface-list.patch was an upstream
backport. No longer needed.

Added tls=no to avoid mbedtls dependency.

mDNSIdentify is gone.

Added back patches from version 878.200.35. They required manual
refreshing. 120-reproducible-builds.patch is probably needed. Not sure
about 100-linux_fixes.patch.

Add OpenEmbedded patches. Some crash fixes. mdnsd is less noisy with
them.

Log stderr to the log. Otherwise there's no output.

Signed-off-by: Rosen Penev <[email protected]>

sane-backends: fix compilation with GCC14

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

gdbm: update to 1.23

Just make the library instead of everthing.

Signed-off-by: Rosen Penev <[email protected]>

ostiary: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <[email protected]>

libv4l: fix compilation without utils

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

v4l2camera: update to 0.2.0

fix compilation when ALSA is found

Need to link against libasound.

Signed-off-by: Rosen Penev <[email protected]>

libgpiod: update to 2.1.2

Signed-off-by: Russell Senior <[email protected]>

Merge pull request #24183 from TDT-AG/pr/20240517-ddns

ddns-scripts: do not verify DNS server on start

frr: add support for BGP MD5 authentication

You have to enable the CONFIG_TCP_MD5SIG kernel config option to be able
to use the BGP MD5 authentication.

Signed-off-by: Martin Schiller <[email protected]>

node: bump to v20.14.0

Notable Changes
* src,permission: throw async errors on async APIs (Rafael Gonzaga)
* (SEMVER-MINOR) test_runner: support forced exit (Colin Ihrig)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

hev-socks5-server: update to 2.6.6

Signed-off-by: Ray Wang <[email protected]>

acme-common: export main_domain

To avoid confusion, first create the main_domain var and only then export it.

Signed-off-by: Sergey Ponomarev <[email protected]>

acme-common: migrate deprecated options

Add to uci-defaults script a migration from old deprecated options to new:
  use_staging to staging
  keylength to key_type
  remove standalone
  add missing validation_method

We still support the old options in the acme.init if old config was copied after installing of the newer version of the acme-common.

Signed-off-by: Sergey Ponomarev <[email protected]>

at: update to 3.2.5

- Use upstream tarball
- Update project URL
- Drop obsolete patches

Signed-off-by: krant <[email protected]>

ffmpeg: fix compilation with gcc14

Requires disabling a warning as there's an incompatibility between musl
ioctl and v4l2_ioctl.

Signed-off-by: Rosen Penev <[email protected]>

apache: update to 2.4.59

- Remove obsolete OpenSSL patch - upstream handles it by itself now
- Refresh another patch
- Remaining patches are unaffected

Signed-off-by: krant <[email protected]>

c-ares: update to 1.29.0

Signed-off-by: krant <[email protected]>

zstd: update to 1.5.6

- Adopt the package

Signed-off-by: krant <[email protected]>

fping: update to 5.2

Signed-off-by: krant <[email protected]>

gst1-libav: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-ugly: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-bad: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-good: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-base: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

gstreamer1: update to 1.24.4

Signed-off-by: W. Michael Petullo <[email protected]>

prometheus-node-exporter-lua-hostapd_stations: fix not reporting metrics

- fix incorrect interface name mapping in hostapd_stations exporter

Signed-off-by: Balázs Urbán <[email protected]>
Signed-off-by: Etienne Champetier <[email protected]>

prometheus-node-exporter-lua: add missing libubus-lua dependency

Fixes a315c40b7232bbc83582685c98e41466d84d7a35

Signed-off-by: Etienne Champetier <[email protected]>

whois: update to 5.5.23

- Switch to local tarball

Signed-off-by: krant <[email protected]>

wsdd2: fix compilation with GCC14 and 64-bit

struct msghdr under musl uses padding ints for 64-bit, which means we
can't direct initialize like this. Switch to initializing each member
explicitly.

Signed-off-by: Rosen Penev <[email protected]>

libarchive: update to 3.7.4

Signed-off-by: krant <[email protected]>

unrar: update to 7.0.9

Signed-off-by: krant <[email protected]>

lynx: update to 2.9.2

Signed-off-by: krant <[email protected]>

erlang: update to 27.0

Signed-off-by: krant <[email protected]>

imagemagick: update to 7.1.1.33

Signed-off-by: krant <[email protected]>

hwdata: update to 0.383

Signed-off-by: krant <[email protected]>

libssh: fix bad pkgconfig paths

Avoid leaking host paths.

Signed-off-by: Rosen Penev <[email protected]>

libjpeg-turbo: update to 3.0.3

Signed-off-by: krant <[email protected]>

banip: update 0.9.6-3

* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <[email protected]>

collectd: enable write_prometheus plugin

Signed-off-by: Louis Dupré Bertoni <[email protected]>
[PKG_RELEASE bump added]
Signed-off-by: Hannu Nyman <[email protected]>

cargo-c: New host package

It is useful to build crates as C libraries.

Signed-off-by: Luca Barbato <[email protected]>

Merge pull request #24068 from stangri/master-ngtcp2

ngtcp2: drop maintainership

Merge pull request #24271 from neheb/m

ngtcp2: fix bad pkgconfig paths

gst1-libav: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-ugly: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-bad: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-good: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

gst1-plugins-base: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

gstreamer1: update to 1.24.3

Signed-off-by: W. Michael Petullo <[email protected]>

pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <[email protected]>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <[email protected]>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

ngtcp2: fix bad pkgconfig paths

Avoids leaking host paths.

Signed-off-by: Rosen Penev <[email protected]>

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <[email protected]>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <[email protected]>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <[email protected]>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <[email protected]>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <[email protected]>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <[email protected]>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <[email protected]>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <[email protected]>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <[email protected]>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <[email protected]>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <[email protected]>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <[email protected]>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <[email protected]>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <[email protected]>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <[email protected]>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <[email protected]>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <[email protected]>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <[email protected]>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <[email protected]>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <[email protected]>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <[email protected]>