adblock: update 3.8.5

* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 45cb0e1023a924ffbff73d8d6b256ec4f6a5929f)

glib2: don't use libelf during host build

Since commit 2e490e7e46a4f6fbf66fa930a25c2991e24c0f83 tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.

In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

lighttpd: Makefile polishing

- Correct SPDX License Identifier
- Move MAINTAINER, SUBMENU to more appropriate place
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e06086c4c)

lighttpd: Update to version 1.4.54

Fixes CVE-2019-11072

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80c721c6a)

knot: update to 2.8.3

Added lmdb dependency

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 0b19979301d207584da35600f3a5a917e0a4f4c4)

knot: upgrade to vetsion 2.8.2

Upgrade of Knot DNS package to version 2.8.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 30627a9928eff09c90736055bcee29a9fbabfe9b)

measurement-kit: Fix compilation with uClibc-ng

nextafter is not included in std with uClibc-ng. Don't use the std version

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e613acffad65b312a75216a47898b76c19e1fd3c)

libgpg-error: Fix compilation with GAWK 5.0

Patch from Upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fastd: fix init script for multiple VPN instances

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087c6e948aba45b74c261cd7337433523)

pulseaudio: fix recursive dependencies

Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098: symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863: symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
qtmp/.config-package.in:121878: symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

This commit addresses the pulseaudio package's own recursive
dependencies and partially resolves #9300 (baresip will be handled in
telephony repository).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
cherry picked from commit ec3d077287d9b9cf8560e42123972c0edad97c18
to correct the errors related to backported config parsing changes.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

boost: fix raw kconfig syntax

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
cherry picked from commit af4cacd10869b8e7996c540643bb6f2cd32a8a12
to correct the errors related to kernel config parsing.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

boost: Makefile polishing

Corrected License according to SPDX in PKG_LICENSE
Added PKG_LICENSE_FILES
HTTPS in their website
Reordered some stuff

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
cherry picked from commit 79831ee0abf663faefe179f9a2ae8d84049078bb
to correct the errors related to kernel config parsing.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

syslog-ng: Add GPL license for plugins

- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d4eed8c4224e88dc15a9eec6d6d14e57553472e6)

syslog-ng: Update to version 3.23.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 298a91364ca8c3ecf0e452ad7d53575c4a921a38)

python-sqlalchemy: Update to version 1.3.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 2ee4b09760b0557121d4a366902b53deb163cffd)

python-slugify: Update to version 3.0.3

Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d3c2ff35b573a3a86ad6cf4b8ac71d91243bb90e)

python-yaml: Update to version 5.1.2

PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3cfbdbf25bab534dc17bc22c375e5c992ef08445)

python-voluptuous-serialize: Update to version 2.2.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit af213059f5aa6982f16aad718f56d32b09727f09)

python-voluptuous: Update to version 0.11.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 0835e5e6dcd0b86f13d29044c7c7e4c54dc03986)

Merge pull request #9911 from jefferyto/python-pyasn1-0.4.7-openwrt-19.07

[openwrt-19.07] python-pyasn1: Update to 0.4.7

python-pyasn1: Update to 0.4.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

haveged: update to 1.9.6

Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c933ac5dcb85361baeb9ff9ec424533b67bb2578)

exfat-nofuse: drop BUILD_PATENTED

Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit 4c9d0c7b56365761fd1986ff954edf963feb2931)

unbound: update to 1.9.3

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry-picked from commit c36d8a49fdbc53bf9aac81bf9011f6be0bf15fc7)

bind: update to 9.14.4

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from commit e7d35f6deb1dfba708044b58e2b4db2ddb5159cf)

python-dateutil: bump to version 2.8.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0699a69ba1b89290895c3bff5cf1d007ef3d7343)

python-lxml: bump to version 4.4.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 621f5777d3416b1913249a7859a87e68a5f0e7e5)

python-pytz: bump to version 2019.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 16c9fcdda8ba7534a2b3e3fb64fe55f0d37830dd)

Merge pull request #9869 from gladiac1337/haproxy-2.0.5-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.5

Merge pull request #9872 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.4

Shorewall6: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

haproxy: Update HAProxy to v2.0.5

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

travelmate: update 1.4.12

* automatically add open uplinks to your wireless config,
  e.g. hotel captive portals (disabled by default)
* shift net status check in a separate function
* (s)hellcheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d90509b0351458f66c68d8106f7a8e9bfdd904d)

adblock: update 3.8.4

* fix the 'adb_sysver' output
* pass the adblock version information to the helper scripts correctly

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 161597f2fa219099ce3e350736f3c1a2f52a4fd6)

adblock: update 3.8.3

* fix a dns restart issue if 'flush dns cache' is set
* fix a suspend/resume issue, the status wasn't properly updated
* fix a long standing query issue
* rework return code handling, mostly for debugging
* various cleanups & cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 95189994e721cb08282c3a8784dbf0b552cfb828)

lmdb: update to version 0.9.24

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 4841f52)

lmdb: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f311ec0)

Merge pull request #9823 from adde88/openwrt-19.07

hcxtools: Added both hcxtools and hcxdumptool to openwrt-19.07 branch.

hcxdumptool: fix missing directory

Signed-off-by: Andreas Nilsen <adde88@gmail.com>

luajit: fix building for 64-bit targets

Host and target architectures need to have the same pointer size.
When building on x86_64, do not force 32-bit host binaries if the target
architecture is also 64-bit.

See http://luajit.org/install.html#cross

Add 64-bit arm (aarch64) to the list of architectures.

Signed-off-by: Eric Kinzie <ekinzie@labn.net>
(cherry-picked from commit 5b0ef0e1b96ac25dd340ac65cb1b54c8f86924ac)

nano: update to 4.4

Update nano editor to 4.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d9347059a80fc8977a1e148153693a2851b4e253)

hcxtools: Added both hcxtools and hcxdumptool to openwrt-19.07 branch.

Signed-off-by: Andreas Nilsen <adde88@gmail.com>

dovecot: Improve packaging and include configs

- Add dovenull user, otherwise, dovecot doesn't start
- Build docs to have configuration files for dovecot
- Remove init script as conffile
- Move build options from Makefile to Config.in
- Install section to be more readable
- Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e27438f14082ae2f5fee3353033b0396175c855b)

dovecot: update to version 2.3.7.1

Move PKG_MAINTAINER above PKG_LICENSE to be sync with other packages

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit fcbc1cad2c9e79eb77ab01f14496d526192d8683)

dovecot: update to 2.3.7

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry-picked from commit 971b20380eef8a2a8358ed4619c5d18e64ed2915)

python-oauthlib: bump to 3.1.0

This is a feature release including improvement to OIDC and security
enhancements, as well as bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit ab990af307cb401317e4e3d041b2bfe60ee0ccdb)

measurement-kit: update to version 0.10.5

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from 17ebaf2a3f0fcda71e92f0047485faaae4b4d583)

netdata: Add patch to disable optional libraries

Netdata adds optional libraries if found, add patch (PR#6658) to avoid pulling in unnecessary libraries.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry-picked from commit 35a7f8721ab86fc0f2c5bb8274418de7e1a82a84)

netdata: Update to 1.16.1, disable https and dbengine

Disable https and dbengine to get rid of openssl and liblz4
Add (lib)json-c as dependency
Disable anonymous statistics sent to Google Analytics

Source: https://github.com/netdata/netdata/blob/master/docs/anonymous-statistics.md

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry-picked from commit b95f19207e006b447b7355ab29485781d21ebd8b)

netdata: update to version 1.16.0

- Add dependencies: libopenssl, liblz4
- Correct SPDX License Identifier
- Change URL of the website

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b64558b1badbb6e043b2d16abd93f38687fde381)

netdata: netdata.init: fix indentation

(cherry-picked from commit 9ff174097b54a7946692884d14c37affe241f8f3)

syslog-ng: update to version 3.22.1

- Bump version in the config and improve a link for documentation
- Disable snmp destination for now

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e07cc32)

adblock: update 3.8.2

* background service: no longer miss "signal" events for the
  dns backend (to trigger adblock)
* fix a dns backend reload issue during switch between
  different blocking modes
* domain query: report found domains only once in
  "null" blocking mode with IPv4 & IPv6 list entries

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 806f5ca9d807657d7ad16490aa114f0b8488368c)

adblock: update 3.8.1

* fix a possible race condition during DNS file reset on slow hardware
* optimize DNS restart behaviour in 'null' blocking mode
* mute useless warnings

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 866878aa78cd04f97174e726670f634983abd6a6)

adblock: release 3.8.0

* add support for 'DNS File Reset', where the final DNS blockfile
  will be purged after DNS backend loading (save storage space).
  A small background service will be started to trace/handle
  dns backend reloads/restarts
* add support for the 'null' blocking variant in dnsmasq
  (via addn-hosts), which may provide better response times
  in dnsmasq
* enhance the report & search engine to support
  the new blocking variants. Search now includes
  backups & black-/whitelist as well
* compressed source list backups are now mandatory (default to '/tmp')
* speed up TLD compression
* E-Mail notification setup is now integrated in UCI/LuCI
* update the LuCI frontend to reflect all changes (separate PR)
* drop preliminary dnscrypt-proxy-support (use dnsmasq instead)
* drop additional 'dnsjail' blocklist support (not used by anyone)
* procd cleanups in init
* various shellcheck cleanups
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 504412ccdbe9e6f1f65b34cf28641ec9aa9b7c22)

Merge pull request #9800 from Rixerx/openwrt-19.07

[OpenWrt 19.07] zabbix: update to 4.0.11

zabbix: update to 4.0.11

Updated to 4.0.11 LTS version.

Deleted 003-change-user-and-foreground.patch in according to [ZBX-10611] fixed changing process user owner on startup in foreground when AllowRoot disabled.

Compile tested: Yes, lantiq
Run tested: Yes, lantiq

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>

ruamel-yaml: Update to version 0.15.100

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 907287b)

fastd: update URL and PKG_SOURCE_URL

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

libuecc: update URL and PKG_SOURCE_URL

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

golang: Update to 1.12.9

Includes fixes (in 1.12.8) for:
CVE-2019-14809 - https://nvd.nist.gov/vuln/detail/CVE-2019-14809
CVE-2019-9512 - https://nvd.nist.gov/vuln/detail/CVE-2019-9512
CVE-2019-9514 - https://nvd.nist.gov/vuln/detail/CVE-2019-9514

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

clamav: update to version 0.101.3

Correct SPDX License Identifier

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from e19f753be5981f94a81a61d2ba8cb190d245c5de)

clamav: don't install dev files into package

This avoids copying /usr/include, unversioned *.so files, pkgconfig,
/usr/lib/*.la, and the build-time libs/cflags configuration utility
clamav-config.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 815e05e38eddd0933d06078e4bbf5ba2fd95457f)

clamav: avoid host pickup of libxml2

If libxml2 is installed in the host, then the host library is used and
compilation fails.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 199ccc94756bc6c577bf4be96014c27bf12ea3ef)

yggdrasil: fix #9712 upstream dependency with branch develop

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 07625bb6a7daf5af49a0a303ff42d426ebe43319)

yggdrasil: properly call the daemon with procd

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 9436ff426171d5ff4f3b4d31edf5c7db7b08a78b)

yggdrasil: match contributing.md order of config section

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from fee12663cb4b67d790f54cbb12c262e019418293)

yggdrasil: package LICENSE filename, update license id name

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from e08d17fbe043ad7ae73aa004ee57ad6a425db846)

yggdrasil: bump to 0.3.6

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 8128ef3793beb16d7b72154afa37ed7b60396bc6)

squashfs-tools: need to include sys/sysmacros.h

The inclusion of <sys/sysmacros.h> by <sys/types.h> was deprecated and
removed.  This is causing major, minor, and makedev to be undefined.

The patch is an upstream commit fixing it.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #9764 from stangri/19.07-simple-adblock

[19.07] simple-adblock: support for varios DNS resolvers/options

[19.07] simple-adblock: support for varios DNS resolvers/options

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #9762 from jefferyto/host-python-mac-openwrt-19.07

[openwrt-19.07] python,python3: Fix host Python compilation for macOS

python,python3: Fix host Python compilation for macOS

* Remove $$$$(pkg-config --static --libs libcrypto libssl) from
  HOST_LDFLAGS

  Having this leads to an "unknown type name 'u_int'" error on Mac.
  Removing it doesn't appear to affect Python's ability to find
  buildroot LibreSSL.

* Change -Wl,-rpath=... to -Wl,-rpath,... in HOST_LDFLAGS

  The equals sign version is not supported by the Mac linker (appears to
  be an GNU extension). The comma version is supported; -rpath and its
  argument will be separated by a space when passed to the linker.

* Add ac_cv_header_libintl_h=no to HOST_CONFIGURE_VARS for Mac

  Python on Mac doesn't expect to use libintl, but if gettext-full is
  compiled for host, it will try, leading to undefined symbol errors
  during compilation. This prevents configure from finding libintl.h.

Fixes #7171.
Fixes #9621.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9714 from jefferyto/python-twisted-19.7.0-openwrt-19.07

[openwrt-19.07] python-twisted: Update to 19.7.0, refresh patches

Merge pull request #9751 from champtar/openwrt-19.07

[19.07] prometheus-node-exporter-lua: add target & system to OpenWrt collector

prometheus-node-exporter-lua: add target & system to OpenWrt collector

Before:
node_openwrt_info{revision="r10756+1-7546be6007",model="GL.iNet GL-AR150",id="OpenWrt",board_name="glinet,gl-ar150",release="SNAPSHOT"} 1

After:
node_openwrt_info{revision="r10756+1-7546be6007",target="ath79/generic",board_name="glinet,gl-ar150",id="OpenWrt",model="GL.iNet GL-AR150",release="SNAPSHOT",system="Atheros AR9330 rev 1"} 1

Fixes #9730, replace #9735

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit a14bed1bc959116617b0eb75d2d9a46551a480e6)

coova-chilli: disable parallel build

Parallel building is causing a failure because it executes some
commands, such as patch, more than once.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

travelmate: update 1.4.11

* fix logical glitch in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 751f312334b4d30f05059560f912c9b1bfdd1aca)

travelmate: update 1.4.10

* add missing dnsmasq dependency
* add a captive portal auto-login hook (configurable via uci/LuCI),
  you could reference an external auto-login script - see readme
* provide an auto-login script for german ICE hotspots
  (/etc/travelmate/wifionice.login), requires 'curl'
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5a2a4fa20a29d39aae91448c632be447444aa11f)

python-twisted: Update to 19.7.0, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9731 from jefferyto/ci-improvements-openwrt-19.07

[openwrt-19.07] CI fixes and improvement

circleci: provide prereq output in the build log

Commit 200f2666fb1c ("sdk: fix GCC and Python dangling symlinks") in
master tree has forced prereq build step, which is now failing on the CI
as the Docker CI images are missing Python3 support, so now every build
fails with the following error:

 make: *** [staging_dir/host/.prereq-build] Error 1

which is not helpful due to the silenced output of `make defconfig >
/dev/null`, so let's add `make prereq` build step in order to get
something usable next time.

Reported-by: Karl Palsson <karlp@etactica.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: use Docker image v1.0.4

This new image which is already available contains Python3 support.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: make logs of build failures more readable

Due to concurrent build, it's currently not that easy to find the proper
reason for the package build failure, so let's just build the failing
package with -j1 in order to provide more human readable build log
failures.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: add python3 package into Docker image

We've switched to Python3 some time ago so it would make sense to
provide Python3 in the CI image as well.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

net/mosquitto: bump to 1.6.4

Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/

Fixes a regression in persistent session handling, and various other
regressions related to the mqtt5 support.

Signed-off-by: Karl Palsson <karlp@etactica.com>

zeromq: update to version 4.1.7 (security fix)

Fixes:
CVE-2019-13132
Added CPE ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 92bf4b40126438c77f99a758ba7884436314ee12)

gddrescue: Add uClibc-ng support

It turns out, this breaks only when compiling with both uClibc-ng and
uClibc++. If the libc or libc++ gets swapped out, it compiles fine.

libstdcpp is fine because it already undefs these macros. The actual
bug is probably in uClibc-ng but this is a fine workaround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d6af6a4d75bd520510aaf2ef97b89024b427cac3)

fossil: Remove

The maintainer is inactive, in addition to this package being woefully out
of date. It probably does not work properly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 196976cdf0f7206caea7c680e08046b0028aaf01)

Merge pull request #9680 from mrstegeman/remove

node-mozilla-iot-gateway: Remove package

node-mozilla-iot-gateway: Remove package

As the WebThings Gateway moves into a full-fledged router
distribution, it no longer makes sense to have this as a
standalone package, as it now modifies system-wide settings.

References #9629
References mozilla-iot/gateway#2060
References https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/452

Signed-off-by: Michael Stegeman <michael@stegeman.me>

Merge pull request #9656 from liudf0716/kcptun

[openwrt-19.07]kcptun: add new package

kcptun: add new package

kcptun is a stable & secure tunnel based on kcp with N:M multiplexing.
https://github.com/xtaci/kcptun

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

ntpdate: use uci configured servers instead of static list

If we're going to have a list of ntp servers, we should at least respect
them.  Fallback to the original static list if no configured servers are
found.

Signed-off-by: Karl Palsson <karlp@etactica.com>

subversion: update to the latest release

Update to the latest maintenance release, fixing CVE-2018-11782 and
CVE-2019-0203 among other things.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry-picked from commit 53f33e5e74e648cd1b1435d354ccd214098d885b)