bind: detect new interfaces when they come up

Reload the service when interfaces flap; note that libcap support
is required to open new sockets on interfaces coming up during
a reload, otherwise a full restart would be needed.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bossa: add bossa

Based on the work of Hirokazu MORIKAWA (nxhack):
https://github.com/nxhack/openwrt-arduino-packages/tree/master/bossa

BOSSA is a flash programming utility for Atmel's SAM family of
flash-based ARM microcontrollers. The motivation behind BOSSA is to
create a simple, easy-to-use, open source utility to replace Atmel's
SAM-BA software.

Signed-off-by: Nick Hainke <vincent@systemli.org>

dosfstools: fix AM_ICONV triggered build error

Fix this build error:

 gcc -Wall -Wextra -Wno-sign-compare -Wno-missing-field-initializers \
  -Wmissing-prototypes -Wstrict-prototypes -Wwrite-strings -O2 \
  -I/usr/local/src/openwrt/staging_dir/host/include \
  -L/usr/local/src/openwrt/staging_dir/host/lib \
  -o fsck.fat check.o file.o fsck.fat.o lfn.o boot.o common.o fat.o io.o \
  charconv.o @LIBICONV@
 gcc: error: LIBICONV@: No such file or directory
 make[4]: *** [Makefile:449: fsck.fat] Error 1

Suggested-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Bjørn Mork <bjorn@mork.no>

Merge pull request #16949 from neheb/10

libtasn1: don't build host shared libs

Merge pull request #16958 from mhei/php7-update

php7: update to 7.4.25

Merge pull request #16957 from mhei/php8-update

php8: update to 8.0.12

Merge pull request #12175 from jekkos/collectd-ltq-dsl

collectd: Add collector for lantiq dsl metrics

libnpupnp: update to 4.1.5

Add libmicrohttpd to PKG_BUILD_DEPENDS as it doesn't get added for some
reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpd: update to 0.23.2

Switch to libnpupnp for full builds. Also update arguments.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

glib2: update to 2.70

Remove various outdated patches. No more uClibc and distutils is a
requirement.

Compile host libraries statically. Size is not a concern there. Also
avoids rpath hacks. Disable NLS as well. Avoids gettext dependencies.

Add libpcre dependency. Seems to be a requirement now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

frr: fixes and update to latest

ospf running in instance mod will keep cpu to 100% so revert offending commit
if daemon is disabled in the file while running also close that daemon
also add the pythontools to support reload

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

gnunet: fix compilation with big endian

if is in the wrong spot.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

wsdd: update to 2021-10-22

Fixes another segfault.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libffi: don't build host shared libs

Avoids rpath hacks.

Add --with-pic. Needed for static library.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

php7: update to 7.4.25

This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

collectd: Add lua and exec collectors for lantiq dsl metrics

Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>

php8: update to 8.0.12

This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

nextdns: Update to version 1.37.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

yq: Update to 4.13.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

apparmor: update to 3.0.3

Fix compilation under Fedora. There's some weird systemd target. Just
remove it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtasn1: don't build host shared libs

Avoids rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

protobuf-c: don't build shared host library

No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

poco: switch to building with cmake

Faster and works with mips64 targets.

Removed all options as the defaults are updated. Added new dependencies.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

miniflux: new package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

dawn: respawn dawn in case of crash

Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>

wsdd2: update to 2021-10-14

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cloudreve: add new package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

statik: add new packages

This is required by cloudreve.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

telegraf: Upgrade package telegraf to version 1.20.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

telegraf: Add package for telegraf

Telegraf is a plugin-driven agent for collecting and sending metrics
and events. It supports various inputs (including prometheus
endpoints) and is able to send data into InfluxDB.
https://www.influxdata.com/time-series-platform/telegraf/

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

tvheadend: add patch to update hdhomerun

Tarball with libhdhomerun_20171221 [1] was removed from upstream repository
and as it can not be found.

[1] http://download.silicondust.com/hdhomerun/libhdhomerun_20171221.tgz

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

django: bump to version 3.2.8

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-cffi: bump to version 1.15.0

And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-idna: bump to version 3.3

And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 8.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

expat: don't build host libs

tools/expat is actually what's used by the various packages that
supposedly depend on expat/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.54.2

Remove shared libraries. Allows removing rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #16929 from stangri/master-vpn-policy-routing

vpn-policy-routing: bugfixes: killall and tmpfs params

vpn-policy-routing: bugfixes: killall and tmpfs params

* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>

dfu-util: Upgrade to version 0.11

Tested on RAMIPS with STM32 L1 and STM32 L4

Signed-off-by: Bruno Randolf <br1@einfach.org>

checksec: update to version 2.5.0

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

Merge pull request #16911 from stangri/master-vpn-policy-routing

vpn-policy-routing: revert to 0.3.4-8

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

dnscrypt-proxy2: update to version 2.1.1

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ksmbd-tools: update to 3.4.2

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>

ksmbd: update to 3.4.2

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>

msmtp: update to version 1.8.17

- Use AUTORELEASE fce
It helps when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

syslog-ng: update to version 3.34.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

vpn-policy-routing: revert to 0.3.4-8

* there are reports that 0.3.5-x versions do not work on some configs
* the development of the new features moved to the new package (pbr)
* revert to the last known good version of vpn-policy-routing

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #16908 from turris-cz/git

git: update to version 2.33.1

git: update to version 2.33.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #16890 from paper42/knot-resolver-5.4.2

knot-resolver: update to 5.4.2

rclone: add test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: fix logic err in service file

- Corrected `enable` detection.
- Granted config/log write permission for `rclone` user.

Fixes: d51823988847fc ("rclone: initial package")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lua-wsapi: build each variant in its own dir

This avoids unnecessary package rebuilds, when running make back to
back.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16898 from stangri/master-simple-adblock

simple-adblock: update to 1.8.8-1

simple-adblock: update to 1.8.8-1

* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>

lua-openssl: update to 0.8.0-6

Remove upstreamed patches and backport cmake fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #16628 from mwarning/uradvd

uradvd: add new package

gl-puli-mcu: add GL.iNet GL-XE300 (Puli) power monitoring daemon

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

rclone-ng: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone-webui-react: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

wsdd2: fix usage with musl 1.2.0

This package uses a wrong format string for time_t. Cast to long long to
fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

at: bump to version 3.2.2

Signed-off-by: Phil Eichinger <phil@zankapfel.net>

node: bump to 14.18.1 / October 12th 2021 Security Releases

October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

msgpack-c: Update to 4.0.0

- Fixed typo error in PKG_LICENSE_FILES.
- Updated CMAKE_OPTIONS.
- Refreshed the patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

knot-resolver: update to 5.4.2

* refresh patches
* disabling kres_gen_test is not required anymore for cross compilation, it was fixed upstream with the 5.4.1 release

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

uradvd: add new package

Send IPv6 router advertisments.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
Co-authored-by: Matthias Schiffer <mschiffer@universe-factory.net>

hs20: switch dependencies to php8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

transmission: build with wolfSSL again

The problem was discovered and is now patched with an upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openvpn: update to 2.5.4
Include a number of small improvements and bug fixes.
Improve compatibility on Windows systems

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

git-lfs: update to version 3.0.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

atlas-probe: allow parallel build

Set PKG_BUILD_PARALLEL:=1

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

atlas-probe: Fix compilation with gcc11

This uses some definitions from <sys/cdefs.h> in gcc 8.4.0, not present
in musl or gcc11.

Also use clock_gettime() instead of syscall(__NR_clock_gettime,...),
which is not currently defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

python-qrcode: bump to 7.3.1

This is a major update, which drops support for python < 3.6, among
other changes, better seen at:
https://github.com/lincolnloop/python-qrcode/blob/v7.3.1/CHANGES.rst

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

django-formtools: bump to 2.2.0

This is the highest version supported by seafile-seahub, because of
the django1 requirement.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

django-webpack-loader: bump to 0.7.0

This is the highest version that works with seafile-seahub 7.1.5.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

python-oauthlib: bump to 3.1.1

This is a minor update, which officially supports Python 3.8, and
removes Python 2 code, among several bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

pyjwt: update to 2.2.0

This is a major update to the latest version.

There are many changes, better seen at
https://github.com/jpadilla/pyjwt/blob/2.2.0/CHANGELOG.rst

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

defusedxml: bump to v. 0.7.0

This release adds support for Python 3.9.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16776 from stangri/master-https-dns-proxy

https-dns-proxy: update to 2021-09-27

https-dns-proxy: update to 2021-09-27

* update to [2021-09-27](https://github.com/aarond10/https_dns_proxy/commit/da2501f542a732167a78f1851a511d9c0abc2fd8)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>

python-docker: Update to 5.0.3

Features:
 - Add cap_add and cap_drop parameters to service create and
 ContainerSpec
 - Add templating parameter to config create

Bugfixes:
 - Fix getting a read timeout for logs/attach with a tty and slow
 output

Miscellaneous:
 - Fix documentation examples

Signed-off-by: Javier Marcet <javier@marcet.info>

python-dotenv: update to v0.19.1

What's Changed

 - CHANGELOG.md: Fix typos discovered by codespell by @cclauss in #350
 - Add Python 3.10 support by @theskumar in #359

Signed-off-by: Javier Marcet <javier@marcet.info>

python3-paramiko: update to version 2.8.0

Signed-off-by: Javier Marcet <javier@marcet.info>

ooniprobe: update to version 3.10.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

python-certifi: bump to 2021.11.8

Latest bundle form mozilla.org.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16808 from mhei/zabbix-upgrade-to-php8

zabbix: switch dependencies to php8

yq: Update to 4.13.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dawn: update to 2021-10-13

d222d12bcb58 ubus: use local blub_buffer definitions and free

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #16856 from jefferyto/python-pyopenssl-21.0.0

python-pyopenssl: Update to 21.0.0

oniguruma: bump to 6.9.7.1

Changelog:

*  NEW API: ONIG_OPTION_CALLBACK_EACH_MATCH
*  NEW API: ONIG_OPTION_IGNORECASE_IS_ASCII
*  NEW API: ONIG_SYNTAX_PYTHON
*  Fixed some problems found by OSS-Fuzz
*  fix: replace UChar to OnigUChar in oniguruma.h

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16844 from erdoukki/crowdsec-firewall-bouncer

crowdsec-firewall-bouncer: initial package v0.0.15

Merge pull request #16244 from erdoukki/crowdsec

crowdsec: initial package v1.2.0

golang: Update to 1.17.2

Includes fix for CVE-2021-38297 (passing very large arguments to WASM
module functions can cause portions of the module to be overwritten).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

pynacl: fix build with updated sodium-minimal patch

Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

python-pyopenssl: Update to 21.0.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

gitlab-runner: update to version 14.3.2

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

rrdtool: Keep time as 'long' despite 64bit time_t in musl

Adjust to the 64 bit time_t in musl 1.2.2 by keeping time
internally in RRD still as 'long', so that old databases
created during musl 1.1.x still work in 32 bit targets.

That also helps with several interal functions that use 'long'
for calculations and printf formatting.

* Define internal type TIME_INT as 'long', and use that
  internally in calculations
* Use time_t vs. TIME_INT casting when necessary
* Provide time_t variable pointers for functions expecting
  a time_t pointer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>