lm-sensors: update to v3.6.2

Change source URL to reflect active mirror as old one has not been
updated in ~4 years and bump to latest upstream release.

% sensors --version
sensors version 3.6.2 with libsensors version 3.6.2

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

iperf3: update to 3.19

Updates iperf3 to the latest upstream release, 3.19

Changelog: https://github.com/esnet/iperf/releases/tag/3.19

Signed-off-by: Dane Murphy <[email protected]>

fx: update to 36.0.2

Signed-off-by: Fabian Lipken <[email protected]>

alpine: fix compilation with GCC14

Wrong function prototypes.

Signed-off-by: Rosen Penev <[email protected]>

rtorrent: update to 0.15.3

Rebase patch.

Signed-off-by: Rosen Penev <[email protected]>

libtorrent: update to 0.15.3

Add patch to allow rtorrent to link statically.

Aligned is no longer needed with C++17.

Signed-off-by: Rosen Penev <[email protected]>

bind: bump to 9.20.8

Signed-off-by: Philip Prindeville <[email protected]>

lua-openssl: bump to 0.10.0-0

Update lua-openssl to 0.10.0-0 fix compilation.

Signed-off-by: Robert Marko <[email protected]>

strongswan: swanctl: Add support for send_certreq

Support the [send_certreq] connection configuration option to disable
offering trusted root CA certificates and reduce the size of the initial
IKE packets.

This work is based on a patch by @aleks-mariusz in
https://forum.openwrt.org/t/confusion-regarding-setting-up-ikev2-vpn-service-with-strongswan-using-ipsec-and-swanctl/169587/9

[send_certreq]: https://docs.strongswan.org/docs/latest/swanctl/swanctlConf.html#_connections

Signed-off-by: Kevin Locke <[email protected]>

zabbix: update to 7.0.12
also fix build error

Signed-off-by: Thlv Alivs <[email protected]>

strongswan: mark UCI plugin as broken

UCI plugin in strongswan has been broken for years, and now its causing
strongswan to fail compilation.

So, instead of the whole strongswan package to be failing and missing from
feeds simply make UCI plug depend on @BROKEN.

Signed-off-by: Robert Marko <[email protected]>

tcp_wrappers: update patches for gcc14

The portable way is to use `socklen_t`. This fixes both glibc and
musl based builds.

Signed-off-by: Matthew Cather <[email protected]>

owut: update to 2025.05.12

Bug fixes:
    efahl/owut@8353c4e9e255 argparse: add a file path parser type
    efahl/owut@724c990d6cc0 owut: avoid redirects on upstream queries

Signed-off-by: Eric Fahlgren <[email protected]>

php8: adapt test.sh for upcoming opkg -> apk transition

We used to rely on opkg to install the CLI tool for testing
PHP modules, but when opkg is not available anymore, we have to
use apk. The (simple) switch logic assumes, that only one
of both package manager tools is installed.

Signed-off-by: Michael Heimpold <[email protected]>

php8: update to 8.4.7

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.7

Signed-off-by: Michael Heimpold <[email protected]>

cloudflared: Update to 2025.5.0

Signed-off-by: Tianling Shen <[email protected]>

dnsproxy: Update to 0.75.5

Add sysctl conf to increase UDP send/receive buffers for QUIC-GO.
Same as a920f9ec9caf ("adguardhome: increase UDP send/receive buffers").

Signed-off-by: Tianling Shen <[email protected]>

wifi-presence: fix reading mqttID from config

Typo error in mqttID config value

Signed-off-by: Clair-Loup Sergent <[email protected]>

perl: do not set LD_LIBRARY_PATH for cross compile

We don't want to set LD_LIBRARY_PATH to a directory filled with target
libraries when running a host perl. When the host and target
architecture are the same, some libraries will be loaded from this
path, resulting in the build to break because of glibc/musl mismatch.

Reported-by: John Audia <[email protected]>
Fixes: e7b5a35e5caa ("perl: drop 110-always_use_miniperl.patch")
Signed-off-by: Matthias Schiffer <[email protected]>

fx: update to 36.0.1

Signed-off-by: Fabian Lipken <[email protected]>

xtables-addons: remove not needed iptables install dependency for RTSP helpers

The RTSP conntrack and nat does not dependent on iptables, but only on
nf_conntrack and nf_nat. The RTSP conntrack module is used as a helper in
firewall4 [1]. Previously, it was not possible to install RTSP kernel module
without also installing the not needed iptables modules. However, as firewall4
is based on nftables and not on iptables, this dependency is not necessary.

[1] https://github.com/openwrt/firewall4/blob/master/root/usr/share/firewall4/helpers#L89

Signed-off-by: Florian Eckert <[email protected]>

modemmanager: backport fixes for version 1.24.0

The following commits were added shortly after the release of Modemmanager
version '1.24.0'.

Patch: 0002-modem-helpers-cinterion-allow-spaces-in-SXRAT-test-r.patch
Backport: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/commit/6b6997362b5530708725c16c80ef36cd21609f20
Issue: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/974

Patch: 0003-modem-helpers-fix-checking-of-CDMA-EVDO-access-techn.patch
Backport: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/commit/9e205f47847ab9ef5887b79c077ef8468d769af0
Issue: no

Patch: 0004-iface-modem-voice-recheck-call-state-polling-when-ca.patch
Backport: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/commit/92e666e1c92c205e896552604e717d5b39528ae3
Issue: no

Signed-off-by: Florian Eckert <[email protected]>

netbird: update to 0.43.3

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.3

Signed-off-by: Wesley Gimenes <[email protected]>

net/bcp38: Add cgnat shared space to bcp38 list

Add CG-NAT address space to non-routable list
Mmake dhcp filter stricter

Signed-off-by: Andris PE <[email protected]>

mstflint: update to 4.32.0

This commit updates the mstflint package to
the latest 4.32.0 release.

It also includes a patch to fix a musl build error that
has been merged into the upstream development branch [1],
but is not yet part of any official release.

Obsolete patches have been removed,
as they are now included in this version.

Additionally, three new binaries introduced
in 4.32.0 have been added to the package.

[1] https://github.com/Mellanox/mstflint/pull/1239

Signed-off-by: Til Kaiser <[email protected]>

numpy: bump to version 2.2.5

Also needing to treat 'incompatible-pointer-types' as warnings.

Signed-off-by: Alexandru Ardelean <[email protected]>

django-restframework: bump to version 3.16.0

Signed-off-by: Alexandru Ardelean <[email protected]>

python-evdev: bump to version 1.9.2

Signed-off-by: Alexandru Ardelean <[email protected]>

python-lxml: bump to version 5.4.0

Signed-off-by: Alexandru Ardelean <[email protected]>

pytz: bump to version 2025.2

Signed-off-by: Alexandru Ardelean <[email protected]>

adblock-fast: improve the processing of combined list

Signed-off-by: Nikolay Manev <[email protected]>
adblock-fast: modify gawk statement

Signed-off-by: Nikolay Manev <[email protected]>

https-dns-proxy: update to 2025.05.11

* update to 2025.05.11 from upstream: https://github.com/aarond10/https_dns_proxy/commit/a34e20d6e24df603427d91bac8f58c2d3a8aa0a6
* update default config with default value for procd_fw_src_interfaces

Signed-off-by: Stan Grishin <[email protected]>

ffmpeg: add libatomic dependency

Some platforms lack builtin atomics and use libatomic. Add it.

Backport various patches to fix some warnings.

Signed-off-by: Rosen Penev <[email protected]>

acme-acmesh: Bump to v3.1.1

Signed-off-by: Toke Høiland-Jørgensen <[email protected]>

stress-ng: bump to version 0.19.00

For MIPS and PowerPC, we need to disable atomics.
Otherwise we get linker errors with them.

Signed-off-by: Alexandru Ardelean <[email protected]>

yq: Update to 4.45.4

Signed-off-by: Tianling Shen <[email protected]>

dnsproxy: Update to 0.75.4

Signed-off-by: Tianling Shen <[email protected]>

btop: Update to 1.4.3

Signed-off-by: Tianling Shen <[email protected]>

libs/libuv: fix PKG_CPE_ID

libuv:libuv is a better CPE ID than libuv_project:libuv as this CPE ID
has the latest CVEs (whereas libuv_project:libuv only has a CVE from
2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libuv:libuv

Fixes: f8ecbf529bad57970e4ff8f90484ba58d06b4a39 (libuv: update to 1.32.0)
Signed-off-by: Fabrice Fontaine <[email protected]>

lang/tcl: fix PKG_CPE_ID

tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tcl:tcl

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>

utils/logrotate: fix PKG_CPE_ID

logrotate_project:logrotate is a better CPE ID than gentoo:logrotate as
this CPE ID has the latest CVE (whereas gentoo:logrotate only has CVEs
up to 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:logrotate_project:logrotate

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <[email protected]>

wiki: openwrt naming fixes and contribution improvement

Signed-off-by: Sander Schutten <[email protected]>

strongswan: preserve changed configuration files

After reinstalling the packages with the preserved configuration files
after a sysupgrade, the reinstalled package config files overwrite what
is on disk rather than being placed as conf-opkg. Defining these config
files will preserve them appropriately.

Signed-off-by: Joel Low <[email protected]>

smartmontools: update to 7.5

Signed-off-by: Maxim Storchak <[email protected]>

pdns: update to 4.9.5

Signed-off-by: Peter van Dijk <[email protected]>

open-vm-tools: update to 12.5.0

for detailed change log, please refer to:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog

Signed-off-by: Tan Zien <[email protected]>

tvheadend: update to 2024-11-12, new options, patch for bug #26422

Changes:
- update to git master 2024-11-12 (dev stalled since then)
- patch for OpenWrt bug #26422 / tvheadend bug #1786
- Options removed:
  - imagecache = tvheadend doesn't support disabling it anymore
- Options added:
  - detailed (but slow) memory utilization reporting
  - Timeshift (default on)
  - tsfile (currently bugged in tvheadend, commented out / always on)
  - HDHomeRun server emulation (default on)
  - Digital Devices DVB CI descrambling cards (default off)
- RegEx options cleaned up, PCRE2 is the new default.
- Some help text improved

Signed-off-by: Marius Dinu <[email protected]>

adblock-fast: Fixed non-printable characters and bump PKG_VERSION

Signed-off-by: Nikolay Manev <[email protected]>

libpng: Update to 1.6.48

Update libpng to version 1.6.48.

Signed-off-by: Hannu Nyman <[email protected]>

libpng: Revert "libpng: add symlink to debug library" as unnecessary

This reverts commit 5313dd9be from PR #25324 , related to #25323 and
https://github.com/openwrt/openwrt/pull/16899

The additional symlink libpng16.so -> libpng16d.so is now unnecessary as
OpenWrt main repo PR https://github.com/openwrt/openwrt/pull/18709
commit https://github.com/openwrt/openwrt/commit/703e7d2d5b58e68528cb5fadfc1185bd3904b3d9
changed the cmake build type from 'Debug' to 'RelWithDebInfo', which
causes libpng .so to be compiled with the normal name libpng16.so
(instead of the debug-styled libpng16d.so).

Signed-off-by: Hannu Nyman <[email protected]>

nfs-kernel-server: update to v2.8.3

Update to v2.8.3
Removed upstreamed: 210-patch-for-broken-libnfsimapd-static-and-regex-plugins.patch
Added: 210-nfsdctl.c-add-missing-basename.patch

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <[email protected]>

nfs-kernel-server: update to v2.8.2

Update to latest release and change URL to official upstream mirror.

Removed upstreamed patch: 130-musl-svcgssd-sysconf.patch

Added new patch to correct host build error as we do not build with
gss enabled anyway: 100-fix-host-build.patch

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <[email protected]>

unbound: update to 1.23.0

Signed-off-by: Eric Luehrsen <[email protected]>

syncthing: add discovery and relay descriptions

Signed-off-by: George Sapkin <[email protected]>

syncthing: bump to 1.29.6

- chore(lib): expose model methods to obtain progress
- feat(gui): explanation to options enabled or disabled per folder type
- fix(gui): validate device ID in canonical form
- fix(config): remove discontinued primary STUN server
- fix(stun): better error handling
- chore(config): remove discontinued secondary STUN servers
- chore(fs): speed up case normalization
- build(deps): update dependencies
- feat(fs, config): add support for custom filesystem type construction
- build: replace underscore in Debian version
- chore(model): add metric for total number of conflicts
- fix(config): properly apply defaults when reading folder configuration
- fix(config): zero filesystemtype is "basic"
- build: push artifacts to Azure
- chore(config): resolve primary STUN servers via SRV record
- chore(fs): changes to allow Filesystem to be implemented externally
- fix(strings): differentiate setup(n) and set(v) up
- fix(gui): mark unseen disconnected devices as inactive
- fix(syncthing): use separate lock file instead of locking the
  certificate
- feat(api, gui): allow authentication bypass for metrics
- chore: add missing copyright in new files from infra branch
- fix(osutil): give threads same I/O priority on Linux
- chore(syncthing): remove support for TLS 1.2 sync connections
- chore(gui): update dependency copyrights, add script for periodic
  maintenance
- chore(api): log X-Forwarded-For
- feat(config): add option for audit file
- chore(gui): use go list --deps for dependency list
- fix(strelaysrv): make the session limiter session-dependent

Changelog: https://github.com/syncthing/syncthing/compare/v1.29.5...v1.29.6
Signed-off-by: George Sapkin <[email protected]>

yq: Update to 4.45.3

Signed-off-by: Tianling Shen <[email protected]>

cloudflared: Update to 2025.4.2

Signed-off-by: Tianling Shen <[email protected]>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>

v2ray-core: Update to 5.31.0

Signed-off-by: Tianling Shen <[email protected]>

xray-core: Update to 25.4.30

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.69.2

Signed-off-by: Tianling Shen <[email protected]>

netbird: update to 0.43.2

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.2

Signed-off-by: Wesley Gimenes <[email protected]>

pbr: bugfix: no errors on negated values

* do not display errors on negated values
* improved output in verbose mode

Signed-off-by: Stan Grishin <[email protected]>

golang: bump to 1.24.3

go1.24.3 (released 2025-05-06) includes security fixes to the os
package, as well as bug fixes to the runtime, the compiler, the linker,
the go command, and the crypto/tls and os packages.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.24.2+label%3ACherryPickApproved
Signed-off-by: George Sapkin <[email protected]>

libfmt: bump to version 11.2.0

Signed-off-by: Othmar Truniger <[email protected]>

perl: fix parallel build race condition in target build

We have received reports of builds of perl occasionally failing when
building with many parallel jobs, with a log like the following:

    LD_LIBRARY_PATH=[...]/perl/perl-5.40.0 ./miniperl -Ilib make_ext.pl \
        dist/constant/pm_to_blib  MAKE="make" LIBPERL_A=libperl.so
    File/Path.pm did not return a true value at [...]/hostpkg/usr/lib/perl5/5.40.0/ExtUtils/MakeMaker.pm line 13.
    BEGIN failed--compilation aborted at [...]/hostpkg/usr/lib/perl5/5.40.0/ExtUtils/MakeMaker.pm line 13.
    Compilation failed in require at Makefile.PL line 3.
    BEGIN failed--compilation aborted at Makefile.PL line 3.
    Unsuccessful Makefile.PL(dist/constant): code=65280 at make_ext.pl line 532.

The failing extension (dist/constant in the above log) would differ
between runs.

The cause of the issue is the `-Ilib` in the command line of miniperl.
In the host build, `./miniperl -I lib` will use the following include
path:

    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/AutoLoader/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Carp/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/PathTools
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/PathTools/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-Install/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-MakeMaker/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-Manifest/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/File-Path/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/ext/re
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Term-ReadLine/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Exporter/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/ext/File-Find/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Text-Tabs/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/constant/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/version/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Getopt-Long/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Text-ParseWords/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-PL2Bat/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/lib
    .

Various dependencies of the extension build scripts (Makefile.PL) -
including File-Path, which failed to be loaded in the error log - are
included in the path by buildcustomize.pl, as these extensions are only
installed to `lib` as the build proceeds.

However, in a target build, miniperl is just a symlink to the previously
built host perl. As the host perl does not implicitly load
`buildcustomize.pl`, we get the following include path for
`./miniperl -Ilib`:

    lib
    [..]/staging_dir/hostpkg/usr/lib/perl5/site_perl/5.40.0/x86_64-linux
    [..]/staging_dir/hostpkg/usr/lib/perl5/site_perl/5.40.0
    [..]/staging_dir/hostpkg/usr/lib/perl5/5.40.0/x86_64-linux
    [..]/staging_dir/hostpkg/usr/lib/perl5/5.40.0

The host perl's install location is used as the default include path
which provides File-Path etc. for the target build; however, as more
and more libraries get installed into `lib` during the extension build,
they may get loaded from there instead, as `lib` is at the beginning of
the include path. When multiple extensions are built in parallel, a
Makefile.PL may attempt to load File/Path from `lib` after the file has
been created, but before its contents have been written fully, resulting
in the build to fail.

In fact, we should not load anything from `lib` during the target build,
as it is the staging directory for the target, including native
extensions built for the target architecture - with one exception: The
build scripts expect to find target information in the `Config` module,
so simply removing `lib` from the include path completely would break
the build.

Solve the issue by creating an alternative lib directory `lib_build`,
symlinking `Config.pm` and its dependencies in it, and replacing the
`-Ilib` argument with `-Ilib_build` using a wrapper script around the
host perl executable. This is similar to the approach seen in perl's own
obsolete/broken cross compile scripts (`Cross/Makefile`).

Signed-off-by: Matthias Schiffer <[email protected]>

perl: drop 110-always_use_miniperl.patch

The patch was introduced in commit 4c57844f0f04 ("lang/perl: Add hack to
make perl always use miniperl during build"), but it is not actually
necessary. By setting $perl to a non-empty value (using 'perl' as is
common on desktop distros), the logic works as intended and selects the
correct perl binary for host and target builds.

As miniperl just symlinks to host perl for target builds, the main
effect of this change is not unconditionally passing `-Ilib -I.`
anymore. This seems like a good thing; host libraries should be used
with host perl by default.

Signed-off-by: Matthias Schiffer <[email protected]>

perl: replace 910-miniperl-needs-inc-dot.patch with smaller scope fix

The patch was first introduced in commit 4a94479f9652 ("perl: update to
5.26.1") to fix the target build when the host perl has
default_inc_excludes_dot enabled. It just added back the `-I`. to every
call of miniperl; this solution is questionable however, as it adds `.` to
the beginning of the search path, not as a final fallback like perl did
before default_inc_excludes_dot (and like miniperl does).

It is also not necessary - only two scripts, write_buildcustomize.pl and
configpm, expect to be able to include a file from `.` (in both cases a
file the script just generated). Just fix the two scripts instead.

Signed-off-by: Matthias Schiffer <[email protected]>

zstd: update to v1.5.7

Signed-off-by: Nikolay Manev <[email protected]>

libtirpc: fix host build via std=c99

Fix compilation with gcc 14 by applying the -std=c99 flag

Closes #26445

Signed-off-by: John Audia <[email protected]>

sqlite3: add legacy SONAME

With no SONAME set, when linking against the full library path, that
path will be used. But if SONAME is set, it will be used instead.

Set --soname=legacy to add a SONAME to the library to allow projects
that use full path to link correctly.

Link: https://sqlite.org/src/forumpost/5a3b44f510df8ded
Fixes: https://github.com/openwrt/packages/issues/26449
Signed-off-by: George Sapkin <[email protected]>

aria2: fix aira2-openssl install failed

Description: fix in full compile a firmware

    pkg_hash_check_unresolved: cannot find dependency aria2-openssl for aria2
    pkg_hash_fetch_best_installation_candidate: Packages for aria2 found, but incompatible with the architectures configured
    satisfy_dependencies_for: Cannot satisfy the following dependencies for luci-app-aria2:
    aria2-openssl
    opkg_install_cmd: Cannot install package luci-app-aria2.

Signed-off-by: Lunatic Kochiya <[email protected]>

adblock: update 4.4.1-2

* init improvements
* jail mode fixes and improvements
* small code cleanups
* update the readme

Signed-off-by: Dirk Brenken <[email protected]>

btop: Update to 1.4.2

Update alias command.

Signed-off-by: Tianling Shen <[email protected]>

clixon: Update to 7.4.0

Signed-off-by: Philip Prindeville <[email protected]>

cligen: Update to 7.4.0

Signed-off-by: Philip Prindeville <[email protected]>

lvm2: build without libnvme

Instead of depending on libnvme always build without support for
libnvme.

Signed-off-by: Daniel Golle <[email protected]>

libgee: update to 0.20.8

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <[email protected]>

icecast: fix compilation with GCC14

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

freeipmi: update to 1.6.15

Update freeipmi to 1.6.15 in order to fix compilation with GCC14.

Signed-off-by: Robert Marko <[email protected]>

freeradius3: bump to 3.2.7

Changed source URL to github (faster/geo-redundancy).

build: x86_64
run tested: x86_64

```
 # radiusd -v
radiusd: FreeRADIUS Version 3.2.7, for host x86_64-openwrt-linux-gnu, built on Apr 18 2025 at 00:10:48
FreeRADIUS Version 3.2.7
```

Signed-off-by: Paul Donald <[email protected]>

yt-dlp: bump to 2025.04.30

Important changes

- New option --preset-alias/-t has been added
- This provides convenient predefined aliases for common use cases.
  Available presets include mp4, mp3, mkv, aac, and sleep. See the
  README for more details.

Core changes

- Add --preset-alias option
- utils
  - _yield_json_ld: Make function less fatal
  - url_or_none: Support WebSocket URLs

Extractor changes

- abematv: Fix thumbnail extraction
- atresplayer: Rework extractor
- bpb: Fix formats extraction
- cda: Fix formats extraction
- cdafolder: Extend _VALID_URL
- crowdbunker: Make format extraction non-fatal
- dacast: Support tokenized URLs
- dzen.ru: Rework extractors
- generic: Fix MPD extraction for file:// URLs
- getcourseru: Fix extractors
- ivoox: Add extractor
- kika: Add playlist extractor
- linkedin
  - Support feed URLs
  - events: Add extractor
- loco: Fix extractor
- lrtradio: Add extractor
- manyvids: Fix extractor
- mixcloud: Refactor extractor
- mlbtv: Fix device ID caching
- niconico
  - Fix login support
  - Remove DMC formats support
  - live: Fix extractor
- panopto: Fix formats extraction
- parti: Add extractors
- raiplay: Fix DRM detection
- reddit: Support --ignore-no-formats-error
- royalive: Add extractor
- rtve: Rework extractors
- rumble: Improve format extraction
- tokfmpodcast: Fix formats extraction
- tv2dk: Fix extractor
- tvp: vod: Improve _VALID_URL
- tvw: tvchannels: Add extractor
- twitcasting: Fix livestream extraction
- twitch: clips: Fix uploader metadata extraction
- twitter
  - Fix extraction when logged-in
  - spaces: Improve metadata extraction
- vimeo: Extract from mobile API
- vk
  - Fix chapters extraction
  - Fix uploader extraction
- youtube
  - Add context to video request rate limit error
  - Add extractor arg to skip "initial_data" request
  - Add warning on video captcha challenge
  - Cache signature timestamps
  - Detect and warn when account cookies are rotated
  - Detect player JS variants for any locale
  - Do not strictly deprioritize missing_pot formats
  - Improve warning for SABR-only/SSAP player responses
  - tab: Extract continuation from empty page
- zdf: Fix extractors

Downloader changes

- niconicodmc: Remove downloader

Networking changes

- Add PATCH request shortcut

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.04.30
Signed-off-by: George Sapkin <[email protected]>

yt-dlp: update package description

Signed-off-by: George Sapkin <[email protected]>

lrzsz: fix compilation with GCC14

Trying to compile with GCC14 will fail on compiler sanity check with:
configure:1056:1: error: return type defaults to 'int' [-Wimplicit-int]
 1056 | main(){return(0);}
      | ^~~~

This is due to GCC14 not allowing implicit integer types anymore[1].

So, patch configure to avoid this and make it compile with GCC14.

Proper fix would be to use autoreconf to rebuild configure but configure.in
is completely outdated and would likely be more broken when regenerated.

[1] https://gcc.gnu.org/gcc-14/porting_to.html#implicit-int

Signed-off-by: Robert Marko <[email protected]>

ntpd: update to 4.2.8p18

Add small patch fixing compilation with GCC14.

Remove inactive maintainer.

Signed-off-by: Rosen Penev <[email protected]>

mailsend: fix compilation with GCC14

Also fix CFLAGS not being passed.

Signed-off-by: Rosen Penev <[email protected]>

xfrpc: update to 4.04.856

Fixes compilation with GCC14.

Switch to local tarballs instead of codeload. Smaller archives.

Signed-off-by: Rosen Penev <[email protected]>

chrony: enable support for non-MD5 keys in nts variant

gnutls and nettle are already required for NTS. Enable their use for
authentication with non-MD5 symmetric keys as the SECHASH feature
printed by the configure script.

Also drop the --enable,nts (typo) configure option. It's enabled by
default.

Signed-off-by: Miroslav Lichvar <[email protected]>

tang: update to 15

Rebase patch

Signed-off-by: Rosen Penev <[email protected]>

dnsdist: update to 1.9.9

fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <[email protected]>

php8: pass configure hints for snmp extension

The 'snmp' extension module uses net-snmp as library, but fails
to detect whether the library uses openssl when cross-compiling.
Pass the according autoconf variables as hint - net-snmp is not
using openssl at the moment as defined in the Makefile.

Signed-off-by: Michael Heimpold <[email protected]>

php8: update to 8.4.6

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.6

Signed-off-by: Michael Heimpold <[email protected]>

sing-box: Update to 1.11.9

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.11.9

Signed-off-by: Anton P. <[email protected]>
[line break added after commit title, accidental line removal fixed]

perl-ack: Update to 3.8.2

ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <[email protected]>

chrony: add configuration parameters

The existing config sections were anonymous, implying multiple can
coexist. Those are now named so that only one shall exist.

Added:
- smoothtime (in case of large frequency offsets)
- systemclock parameters
- logchange (increase awareness of clock drift in syslog)
- maxsources (for peers; internal default: 4)
- prefer (one server over others)
- interleave (xleave - more accurate transmit timestamps - good to have)

Refactored handle_allow() to handle 'list interface' instead of option.
Then only a single section is required.

Signed-off-by: Paul Donald <[email protected]>

netatalk: update to 4.2.2

As of netatalk-4.2.0 the iniparser library is a prerequisite.

Signed-off-by: Antonio Pastor <[email protected]>

iniparser: library for parsing of ini files in C

Package is present in multiple linux distributions.
Upstream is actively maintained.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: fix small issues with sample config and config generation

Small issues with sample configureation caused services not to start
or flood log with errors.

Signed-off-by: Antonio Pastor <[email protected]>

netbird: update to 0.43.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.1

Signed-off-by: Wesley Gimenes <[email protected]>

ffmpeg: fix compilation with GCC14

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>