v2raya: do not allow changing config/log directory

We need stable path to persist configurations and read log from LuCI.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 272cff0d1c6265fe374aeed582423858beedf6bc)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aaa5c045dd835331d6c5bb70636e9d34d6bb530)

rclone: Update to 1.65.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05b61b3b6d8c3e2ab8f20e8b08932adfd25fbc3a)

rclone: Update to 1.65.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410dfa0958494b004e07d427cad7dd9cf)

Merge pull request #22999 from mhei/22.03-php8-update-to-8.1.27

[22.03] php8: update to 8.1.27

mosquitto: update to 2.0.18

Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aa89f847c673343af0cde4dbd9535a63272f7f14)

php8: update to 8.1.27

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

curl: update to 8.5.0

* https://curl.se/changes.html#8_5_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6501290c17fb2c65e0fb589da94d121ff89e7d5e)

Merge pull request #22904 from mhei/22.03-php8-update-to-8.1.26

[22.03] php8: update to 8.1.26

php8: update to 8.1.26

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #22874 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: only restart firewall when needed

https-dns-proxy: only restart firewall when needed

* only restart firewall when needed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8b6635bae9717babbc3dcf1347cf4727fc15f9bd)

Merge pull request #22747 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: fix unintentional call of service_stopped in boot()

https-dns-proxy: fix unintentional call of service_stopped in boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 2e9f6c44460a48876cd85cde3557ce373693df6b)

Merge pull request #22738 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: bugfix: prevent erros from boot()

https-dns-proxy: bugfix: prevent erros from boot()

* fixes https://github.com/openwrt/packages/issues/22674
* rename resolver_health_check to is_resolver_running for readability
* reorder functions in the init file by name

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f519b68401b68f011091e83badadb54a43eae33d)

numpy: bump version to 1.24.3

Need to also fix build for GCC 13 + musl.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8f176e30f3dae121e374be4ca7f641cc157ea152)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

tang: set the right permissions to keys

Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

crowdsec-firewall-bouncer: add ujail

* added ujail for crowdsec-firewall-bouncer
* set nice to reduce priority for process

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0

(cherry picked from commit a8df73ce7277134c5bd318b3e63cc14e2c70e9a7)

nmap: backport fix to be able to compile it with OpenSSL 1.1

The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] https://github.com/nmap/nmap/commit/d6bea8dcdee36a3902cece14097993350306f1b6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2c87004346f9456cfd5cc58559ab8ff4e94cd773)

netbird: downgrade to version 0.17.0

The version, which is currently in OpenWrt 22.03 requires Go 1.20.

See the output:
../../../../../dl/go-mod-cache/github.com/netbirdio/wireguard-go@v0.0.0-20230524172305-5a498a82b33f/tun/tun_linux.go:362:18: undefined: errors.Join
note: module requires Go 1.20

Having Go 1.20 in OpenWrt 22.03 could be time consuming and as it is the stable branch, it seems like better idea to downgrade netbird to version 0.17.0, which is the latest version, which requires to use Go 1.19.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #22598 from muink/dnsproxy-22.03

[22.03] dnsproxy: add more options

dnsproxy: new features

1. Add new options:
  --http3    Enable HTTP/3 support (H3 first)
  --timeout  Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)

2. Allows listen on multiple interfaces and ports

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 47b4ebc5cb5d3bf24c8a15a8f5cb9a99faed5e1a)
Signed-off-by: Anya Lin <hukk1996@gmail.com>

python-poetry-core: Update to 1.7.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bc32e54713361dd6c3c8d676ee7b78c7eecb65eb)

python-poetry-core: Update to 1.6.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ac59c69237d8be99c66134f535c96f40c0bee9c9)

expat: update to 2.5.0

Fixes: CVE-2022-43680
Added GitHub mirror.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 409dbb05c9ea0877549e0f2536dd5efce1747048)

python-calver: Add new host-only package

From the README:

The calver package is a setuptools extension for automatically defining
your Python package version as a calendar version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f4a18fbd3de380b4c8a689dddb4212c572fff259)

numpy: Avoid build user config files

This stops numpy from reading .numpy-site.cfg in the build user's home
directory. The code actually tries to find both .numpy-site.cfg and
site.cfg in the user's home directory; this patch prevents both.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3cee44d88837b5679a96f0155205ec15883d5aef)

numpy: Fix compilation when OpenBLAS support is not enabled

Currently, if OpenBLAS support is not enabled, a site.cfg file is not
written and numpy will use build host paths for libraries. If the build
host has any conflicting libraries, specifically libpython3.10.a, then
compilation will fail.

This ensures site.cfg is always written with buildroot paths.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5cafab68ff5bddf5470e7674bb0bf8d0415e8804)

numpy: Fix pyproject.toml-based build

The versions of setuptools and wheel pinned in pyproject.toml are older
than the versions available in the packages repo. This unpins the
versions so that the build can proceed.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d331953f34a1ed231cb24893c68606813c36824)

nmap: drop upstream backports

These patches were introduced for old version, which we had in this repository from upstream in commit 129b7c3 ("nmap: fix ncat proxy mode with upstream patches"), but because nmap was recently updated in commit c12313f ("nmap: bump to 7.93
"), they are not required anymore.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-incremental: Add missing host build dependencies

Fixes: 8d81b6732757 ("python-incremental: Update to 22.10.0, redo patch, add host build")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2c54b7637ea5035995e1e4caabd2105b395492ba)

python-ubus: Update to 0.1.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd1a16e2276ffb706c3f1e823ece65f3)

python-ubus: Force old build process

This package will not build with the pyproject.toml-based build process
because it has a build dependency on pytest-runner[1].

pytest-runner has been deprecated[2], so instead of adding a package for
pytest-runner to fulfill the build dependency, force this package to use
the old build process.

[1]: https://gitlab.nic.cz/turris/python-ubus/-/blob/v0.1.1/setup.py#L35
[2]: https://github.com/pytest-dev/pytest-runner#deprecation-notice

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4a7173d27d7969b95efac18eb34402c5fa69e3a1)

python3-packages: Set PYTHON3_PKG_BUILD:=0

This sets PYTHON3_PKG_BUILD:=0 so that python3-package.mk does not set
any default build recipes.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bcba053fb06f4182fca9f36cdf93242cdb3f6762)

python-trove-classifiers: Add new host-only package

From the README:

Canonical source for classifiers on PyPI.

Classifiers categorize projects per PEP 301. Use this package to
validate classifiers in packages for PyPI upload or download.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7dc6b103c5e5eb2b1c0ec1c0d9b03b94d244e6c8)

python-pathspec: Add new host-only package

From the README:

pathspec is a utility library for pattern matching of file paths. So far
this only includes Git's wildmatch pattern matching which itself is
derived from Rsync's wildmatch. Git uses wildmatch for its gitignore
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a1cfdba19cde26fa79c8558f0b4a396d690c6c1a)

python-editables: Add new host-only package

From the README:

A Python library for creating "editable wheels"

This library supports the building of wheels which, when installed, will
expose packages in a local directory on sys.path in "editable mode". In
other words, changes to the package source will be reflected in the
package visible to Python, without needing a reinstall.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4465e57e5d8ce0cc9a153a0666c5a38d00fa2e8a)

Revert "python-libraries: Force old build process"

This commit was already applied 3 weeks ago in d640b11160aaa59eeeb6b900f1b81914d548d04d, thus I bring it once again back, which was mistake as it was redone in 903003695ae5c5f21c1aae8565ec1bfbe995ba85.

This reverts commit 60f0e661c50178f9a1c993b0f397bd04053ccffe.

fail2ban: Override Build/Compile instead of Py3Build/Compile

This allows changes to the Python build system apply more easily to the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4195e5c4a8dcb0dfce8049e3e61844a3c1a90d67)

nmap: Force old Python build process

This package isn't compatible with the new Python build process yet, so
force the old build process for now.

This also adds a call to Py3Build/Install, for when the new build
process can be used.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da55275f3bbf3987771b97f7722d3023a0a8d7c4)

nmap: update license

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit 0563e5092c82d03a5861cb7dc17c55d6cf0d0498)

nmap: bump to 7.93

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
(cherry picked from commit 43c990c43fb145c6b24ac1adbf2a5647dc1aa69e)

python-jsonschema: Remove previous build workaround

With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 107e0377637ba8ef6e46c0368b0df8f7c96a5a70)

python-exceptiongroup: Remove previous build workaround

With proper support for pyproject.toml-based builds in place, this is no
longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 773450269365bc1710c8c85b52566d0db0bb0b27)

python-astral: Remove BROKEN

With proper support for pyproject.toml-based builds in place, this
package will now build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 628202d269f9cef99084380418c77972510a753a)

onionshare-cli: Force old Python build process

This package requires poetry to build using the new Python build process
but poetry is not available, so force the old build process for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 705176cd6ab47ff51ca75a9f05e97c2e4804f6cc)

python-libraries: Force old build process

These packages will need adjustments to work with pyproject.toml-based
builds, so set PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1 to force the old
build process (when pyproject.toml-based builds are in place) for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e6ae9e29d59001a8c31781c1e2c32261f34c05be)

python-twisted: Update to 22.10.0

Includes fix for CVE-2022-39348 (NameVirtualHost Host header injection).

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 56b10770fc0741c79b697e9954b27090a4560a9a)

python-pytest-forked: Update to 1.6.0

The overly-strict build requirements in 1.3.0[1] would cause a build
failure with pyproject.toml-based builds.

[1]: https://github.com/pytest-dev/pytest-forked/blob/v1.3.0/pyproject.toml#L2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 17d5bf224cd432bf0cb9c683f17fc9fb5415a6e4)

python-jsonschema: Add build dependencies

These will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b1a8e4769f333120b7e925f4782593f04e7c68fd)

python-exceptiongroup: Update to 1.1.1

This adds a build dependency that will be required for
pyproject.toml-based builds.

This also removes the run-time dependency on python3-attrs; there is no
indication this package is required.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 59b7a81964c879e9a92af3122916f8d33ac2ee0a)

python-dns: Update to 2.3.0

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 68c0c77df6b8f4509859a93344715a7fb21f864e)

python-cryptography: Update patch to disable Rust

This extends the patch to also apply for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0b5091bbff52ef8e2e8b6b1f173928088ebe5cc6)

python-astral: Update to 3.2

This adds a build dependency that will be required for
pyproject.toml-based builds.

This also marks the package as BROKEN (for now) as it requires proper
support for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1a1b4445715a9970f1d9d3964e06e965c8693531)

borgbackup: Add missing build dependencies

setuptools-scm is a declared build dependency[1], and pkgconfig will
allow setup to find the required libraries, replacing the need to set
environment variables.

[1]: https://github.com/borgbackup/borg/blob/1.2.4/setup.py#L313

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6649314a0326477877e2691b181b192e19cee959)

xxhash: Fix pkg-config metadata file

Currently, Build/InstallDev installs libxxhash.pc.in, which is the
template for libxxhash.pc and does not contain the correct information.
(pkg-config also does not recognize this file name.)

This uses PKG_INSTALL:=1 so that libxxhash.pc is generated (by 'make
install').

This also removes the need to override Build/Prepare by setting the
correct command in PKG_UNPACK.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2f4b161e2828a645ac1bfc2a77e9506fe3c8772d)

dnsdist: bump to force rebuild against new h2o

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

h2o: ABI-breaking patch for CVE-2023-44487

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 5b9239a95b8cbbeec61e8508538d4aa0da5f469f)

lighttpd: update to lighttpd 1.4.73 release hash

* update to lighttpd 1.4.73 release hash
* update maintainer

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f3e26bef52ef4c401a3a582b839bc632376d4de7)

python-incremental: Update to 22.10.0, redo patch, add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d81b6732757abca7e58c13508689954ea915209)

python-pytest: Update to 7.3.0

This also removes BROKEN from the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c7820e4fb134a11f91307e8a0645df6a2d986af9)

python-pluggy: Update to 1.0.0, add host build, add myself as maintainer

This also marks python3-pytest as BROKEN (for now) as the in-tree
version is not compatible with this version of pluggy.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b453daa336edba33d6f8a4faaf1f1bdb6856c539)

python-flit-scm: Add new host-only package

From the README:

A PEP 518 build backend that uses setuptools_scm to generate a version
file from your version control system, then flit_core to build the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bbc9b144700accb5041e34c27ab53265c1290495)

python-pycrate: Update to 0.6.0

This also changes the download to PyPI and updates several package
makefile fields.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 550c29368e2c7c14d26a6dc214c167e3d70a3b2b)

python-poetry-core: Update to 1.6.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 626c7efda92b9fc386d3e408d72f18bcd9e9d2c7)

python-poetry-core: Add new host-only package

From the README:

A PEP 517 build backend implementation developed for Poetry. This
project is intended to be a light weight, fully compliant,
self-contained package allowing PEP 517 compatible build frontends to
build Poetry managed projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 82766de815963cf8fec3e6b3e0d6f97435aef755)

python-pkgconfig: Add new host-only package

From the README:

pkgconfig is a Python module to interface with the pkg-config command
line tool for Python 3.3+.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d7bc1deb0ef272fea2aa347f831e706d63c1b2eb)

lrzsz: update to v0.12.21rc and fix a CVE

This updates to v0.12.21rc from 1999 (sic), which was never officially
released. There're fixes in there, and it's what debian ships, so let's
use that too. While at it, use debian's autohell hack and package
description too.

Patch 1 fixes a hang with musl.
Patch 2 fixes CVE-2018-10195, add PKG_CPE_ID while at it.

Refesh the rest.

Fixes: CVE-2018-10195
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 6d6c4b21b5e22a9f1058db5b61521a298e00a5f0)

python: Add proper support for pyproject.toml-based builds

This removes the changes made in
61f202c0170785addbbc449e4de61cc5886f0833 and adds actual support for
pyproject.toml-based (PEP 517) builds of Python packages.

Packages can force the use of the old build process by setting
PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1; this should only be a temporary
workaround until the package can be updated/fixed to use the new build
process.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5156c0c82bcb18481bf588ba4b1ff67c12422a80)

postgresql: update to version 14.9

Update to latest PostgreSQL version 14 for OpenWrt 22.03.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #22521 from mhei/22.03-php8-update-to-8.1.25

[22.03] php8: update to 8.1.25

rclone: Update to 1.64.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0d6bbc3bddeb0a0c2b9daaff9d40e3e0361ee763)

rclone: Update to 1.64.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0449b530ba1d75911abf52c30d3cbee056b8f7b4)

exim: update to version 4.96.2

Fixes vulnerabilities:
 - Improper Neutralization of Special Elements (CVE-2023-42117)
 - dnsdb Out-Of-Bounds Read (CVE-2023-42119)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86ec7b19bc5f5935152b1423bb4f450ccefaabae)

php8: update to 8.1.25

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #22512 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: bugfix: crashes on logging from upstream

https-dns-proxy: bugfix: crashes on logging from upstream

* update to 2023-10-25 upstream version which fixes the crashes on logging on ath79
* remove no longer needed 030-src-logging.c-fix-crash.patch
* update 010-cmakelists-remove-cflags.patch to work with a new version
* update 020-src-options.c-add-version.patch to work with a new version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6b92b6c6d27a8ec67e63a5726dee0c9e8cc2b7ec)

Merge pull request #22490 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: bugfix: prevent crashes on IPv6 systems

https-dns-proxy: bugfix: prevent crashes on IPv6 systems

* update service triggers so that procd_add_raw_trigger is only
  executed on boot and not on other service actions
* remove outdated iface hotplug script

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5dd08fe23f0ad376bcc3f12c7a50d7ac8c73e2bb)

python-typing-extensions: Add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit abf3f3d77c53f3c8fb564b38120366f286d5a5ed)

python-tomli: Add new host-only package

From the README:

Tomli is a Python library for parsing TOML. Tomli is fully compatible
with TOML v1.0.0.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 7d171049fde47161c67b2c2e905b833bc66613f0)

shadowsocks-libev: convert to PCRE2

Convert package to PCRE2 by porting a pending patch from a closed PR.

The PR is old but the code never changed and is simple enough to check
the changes. The patch apply directly with no changes (aside from
commenting out the travis CI file)

The PR was never merged as PCRE2 at times was too new and they were
trying to find a better regex lib.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit db305165c9a0b9b69a83f6379d0994c3708d58e8)

shadowsocks-libev: ACL support

Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d1ad585ca9aa322ac98eb664488750a50a571e97)

net-snmp: backport patch fixing memory leak for PCRE2

Backport patch fixing memory leak for PCRE2 present upstream.

Fixes: #22428
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 9f5036169175d853e2e0c76663f0bc98a8645f85)

conntrack-tools: update to 1.4.8

Release Notes:
https://marc.info/?l=netfilter&m=169598613909790&w=2

Furthermore, switch to "tar.xz".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit af666be21fac7ba06bd8bbd7d70c15cb60c1bd7c)

conntrack-tools: update to 1.4.7

Release Notes:
https://marc.info/?l=netfilter&m=166506855929074&w=2

Remove upstreamed:
- 001-endianness_fix.patch (upstreamed: conntrackd: fix endianness bug
  in IPv4 and IPv6 address)
- 002-conntrackd-do-not-include-conntrack-ID-in-hashtable-cmp.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1d6c7506ab38d499798f9dc8a2f100726abc149b)

shairport-sync: fix init script

'name' may contains '%h' or '%v', printf will fail on that

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 97ec5d2a6855180295c024782aad50da8081504f)

Merge pull request #22423 from stangri/openwrt-22.03-https-dns-proxy

python-cffi: Update to 1.16.0

This includes a patch to unpin the version of setuptools required for
build; the required version is newer than the version bundled with
Python 3.11. This patch should not be necessary when Python 3.12 is
available.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd5af62695e2c0fcf421adfffbea92f37d1a652d)

bcrypt: Update to 3.2.2, rename source package

This is the last released version before bcrypt's Rust rewrite; this
package can be further updated after the OpenWrt Rust toolchain has
stablized.

This also renames the source package from bcrypt to python-bcrypt to
match other Python packages, and updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3def783d3c72effdb87b1168315e51295cebc20f)

python-wheel: Update to 0.41.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6e1785d14864e53def999d01c782b8f6bfbb4813)

python-hatchling: Update to 1.17.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fdc320dc0caf18b77620e66f22ccb29494c95d05)

python-hatchling: Update to 1.14.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 54c1303dc476bc678b2b40489408f6b0a0541486)

python-hatchling: Update to 1.14.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe0dc6f48ae6b98c4663e3e93f6df12d8ef55203)

python-requests: bump to version 2.31.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 04774bb7200eadf3bee86100cd71ddef759e4eec)

python-requests: bump to version 2.30.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 5c131f8a9075887dd47b6623f85907fe408a09b2)

python-requests: bump to version 2.28.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1f1bd5ade9f32da7c535fe94385b3b6543e7ca9d)

python-requests: bump to version 2.28.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 884ac1e35be5d5512ca77fd8d97600c79586813e)

setools: Update to 4.4.2, reorganize package

* Add separate packages for each tool (setools-*) and a package for the
  Python bindings (python3-setools)

* Update the setools package as a meta-package that installs all tools,
  keeping it functionally the same as the current setools package

* Remove gui tool (apol) and Python binding (setoolsgui)

* Simplify 030-remove-host-paths.patch (libraries installed by
  Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)

* Update package titles, descriptions, license, and dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6938f58a4528c6b3d314808fd2ec6da2a2dff77c)