Unbound: Silence SSL unexpected eof messages

Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>

yq: Update to 4.35.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tunneldigger-broker: update to v0.4.0

Include new hook script to build

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: add rate-limit hook

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: add option to isolate bridge ports

Add new option to a config bridge section to indicate
if a bridge port added to the bridge should be isolated
or not.  The default is 0 (no isolation).

example

config bridge
     option interface 'br-mybridge1446'
     option mtu '1446'
     option isolate '1' # default '0'

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: update lib functions

Use config_foreach instead of config_cb

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: update config file and init for v0.4.0

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

rust: correct mistake in previous host-build fix

Fixes the commit 105fa3920e which was intended to make rust/host build
on aarch64 darwin working again. However, the fix contains a mistake
because it sets RUSTC_TARGET_ARCH instead of RUSTC_HOST_ARCH. Thus, the
fix doesn't work.
This properly sets the correct variable RUSTC_HOST_ARCH.

Fixes: 105fa3920e ("rust: fix host build on aarch64 darwin")
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

syncthing: disable quic to support GO 1.21

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

syncthing: update to 1.23.7

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

sing-box: update to 1.4.0-beta.5

Add support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

lua-eco: update to 2.4.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

libyang: update to 2.1.80

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

python-trove-classifiers: Update to 2023.8.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-psycopg2: Update to 2.9.7, update list of dependencies

This also adds a source package (python-psycopg2-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-msgpack: Update to 1.0.5, add host Cython dependency

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-psutil: Update to 5.9.5, replace patch

100_add_cross_platform_build_ability.patch was submitted upstream in
https://github.com/giampaolo/psutil/pull/2068, but that pull request was
closed without being merged.

This replaces that patch with a simpler version that only updates
setup.py, leaving the run-time library code unchanged.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-more-itertools: Update to 10.1.0

The package has changed to the flit-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-markdown: Update to 3.4.4, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-distro: Update to 1.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

frr: updat to 9.0

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

frp: update to 0.51.3

Includes some bug fixes and adds support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

rust: fix host build on aarch64 darwin

rust/host failed to compile on macOS running on Apple Silicon M1 Pro
because the host target triple is autogenerated to be
'arm64-unknown-linux-'. Rust doesn't have such a target triple, thus the
build failes because there are no pre-built artifacts for bootstrapping.

Fix this by setting RUSTC_HOST_ARCH to 'aarch64-apple-darwin' in case
our host is HOST_ARCH=arm64 and HOST_OS=darwin.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

Merge pull request #21839 from mhei/php8-fix-riscv64

php8: fix linking on riscv64 platform (again)

Merge pull request #21828 from stangri/master-simple-adblock

simple-adblock: bugfixes for uci_load_validate

php8: fix linking on riscv64 platform (again)

The initial fix was done in a2e76e497.
Later we could revert it with 5779ae4c5 since a global fix
in gcc was deployed.

But now, PHP itself applied a workaround/fix in 8.2.8,
so that we now require the initial fix again.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21766 from TDT-AG/pr/20230808-modemmanager

modemmanager: setting allowed and preferred mode

python3-ble2mqtt: update to 0.1.8

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-dbus-fast: update to 1.91.2

The patch is no longer required as host setuptools is now new enough.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-aio-mqtt-mod: update to 0.3.4

python3-openssl is now optional.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

dnslookup: Update to 1.9.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.54.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

qemu: enable host support for armsr/armv8

As of OpenWrt main branch commit e505873e65f72 ("armsr: armv8:
enable KVM host") [merged 2023-08-15], armsr/armv8 has
KVM host support. We can now enable QEMU host for this
target.

For example, you can run OpenWrt armsr/armv8 as a guest
like so:
qemu-system-aarch64 -nographic -M virt -cpu host --enable-kvm \
-bios u-boot.bin -smp 1 -m 1024 \
-drive file=openwrt-armsr-armv8-generic-ext4-combined.img,format=raw,index=0,media=disk

A compatible u-boot.bin can be obtained from u-boot-qemu_armv8/u-boot.bin
that is built with the armsr target and available from
downloads.openwrt.org.

Signed-off-by: Mathew McBride <matt@traverse.com.au>

simple-adblock: bugfixes for uci_load_validate

* fix validation for force_dns_port when missing in config
* fix validation for dns_instance when * or - are used

Signed-off-by: Stan Grishin <stangri@melmac.ca>

tgt: update to 1.0.87

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

smartmontools: update to 7.4

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

reptyr: Update to 0.10.0

* 0.10.0 (Jun 04, 2023)
 - Add arm7 and aarch64 support for FreeBSD

* 0.9.0 (Jun 12, 2022)
 - Add RISCV64 support on Linux
 - Fix tty-stealing on PowerPC

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21827 from jefferyto/golang-1.21.0

golang: Update to 1.21.0, remove patch

golang: Update to 1.21.0, remove patch

Upstream has updated the Go compiler to not use gold when building for
arm, and is waiting for a fix to binutils (released in 2.41) before
doing the same for aarch64.[1]

Based on the above, it does not appear that
https://github.com/golang/go/pull/49748 will be merged. This removes the
patch from that pull request.

[1]: https://github.com/golang/go/issues/22040

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

boost: Updates package to version 1.83.0

This commit updates boost to version 1.83.0

A new header-only library is available:
- Compat: A repository of C++11 implementations of standard components
  added in later C++ standards, from Peter Dimov and contributors. [1]

More info about Boost 1.83.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_83_0/libs/compat/doc/html/compat.html
[2]: https://www.boost.org/users/history/version_1_83_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

docker-compose: Update to version 2.20.3

Signed-off-by: Javier Marcet <javier@marcet.info>

ruby: fix riscv64 build

Fix build by adding missing macros.

The patch is taken from:
https://lists.openembedded.org/g/openembedded-core/message/161168

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: Update to 5.4.4

Update xz to match the version in tools/

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #21710 from Lankaster/openwrt-main-monit

monit: update to 5.33.0

Merge pull request #21800 from yogo1212/wget_pcre2

wget: use pcre2

smartdns: bump to 1.2023.43

Signed-off-by: Nick Peng <pymumu@gmail.com>

wget: use pcre2

Pcre (1) is unmaintained and reached its end of life in 2021.
The base system provides pcre2 exclusively since May.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>

v2raya: Update to 2.1.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-iniconfig: Update to 2.0.0

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonpath-ng: Update to 1.5.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jmespath: Update to 1.0.1

This also updates the Python dependency from python3 to python3-light.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-intelhex: Update to 2.3.0

This version includes the fix from the removed patch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

openssh: update to 9.4p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>

Merge pull request #21748 from jefferyto/python-influxdb-5.3.1

python-influxdb: Update to 5.3.1

Merge pull request #21795 from jefferyto/python-netdisco-3.0.0

python-netdisco: Update to 3.0.0, update list of dependencies

Merge pull request #21794 from jefferyto/python-multidict-6.0.4

python-multidict: Update to 6.0.4, update list of dependencies

python-netdisco: Update to 3.0.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-multidict: Update to 6.0.4, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

haproxy: update to v2.8.2

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #19218 from stintel/openthread

openthread-br: new package

Merge pull request #21787 from TDT-AG/pr/20230811-collectd

collectd: fix implicit dependence for collect-mod-disk to libudev

collectd: fix implicit dependence for collect-mod-disk to libudev

Fix missing dependencies for 'collectd-mod-disk' to 'libudev' if
collectd-mod-smart is not enabled.

Package collectd-mod-disk is missing dependencies for the following
libraries:
libudev.so.1

The package 'collect-mod-disk' is now build always with 'libudev' support,
independent of the enable/disable build state of 'collectd-mod-smart'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

node: August 2023 Security Releases

Update to v18.17.1
This is a security release.

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-32002: Policies can be bypassed via Module._load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases  (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 14th July.
    * OpenSSL security advisory 19th July.
    * OpenSSL security advisory 31st July

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

chrony: update to 4.4

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

prometheus: drop package

The package is terribly outdated and bundling it with the web UI is a
task I don't find myself willing to take. Dropping it.

FIX: #16008

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>

Merge pull request #21747 from jefferyto/python-ifaddr-0.2.0

python-ifaddr: Update to 0.2.0

gptfdisk: fix incorrect TARGET on non-linux host

Fixed by defining TARGET=linux, as suggested in the README.

By default TARGET is derived from the host using uname -s,
which produces build errors on a non-linux hosts:

TARGET is not set; trying to determine target based on host OS....
Detected OS is Darwin
Build target is macos
...
x86_64-openwrt-linux-musl-g++: error: unrecognized command-line option '-arch'

Helped-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

python-click: Update to 8.1.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.41.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-seasurf: Update to 1.1.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-login: Update to 0.6.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-httpauth: Update to 4.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-babel: Update to 3.1.0

The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-socketio: Update to 5.3.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-socketio: Update to 5.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-engineio: Update to 4.5.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

yt-dlp: add missing dependencies

Added missing python3-{logging,uuid} dependencies.

Signed-off-by: Rani Hod <rani.hod@gmail.com>

libxcrypt: update to 4.4.36

Upstream bump required to fix build issues reported here:
https://forum.openwrt.org/t/i-cannot-build-my-image-due-to-failure-in-libxcrypt/168114

Signed-off-by: John Audia <therealgraysky@proton.me>

modemmanager: add setting for allowed and preferred mode

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: remove unneeded teardown error reporting

Teardown error reporting is not needed, bacause it overrides init error
reporting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: fix white spaces

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

xtables-addons: add packaging for xt_asn, et al

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

xtables-addons: add MaxMind versions of xt_geoip_dl, etc.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #21761 from stangri/master-simple-adblock

simple-adblock: force_dns_port validation bugfix

simple-adblock: force_dns_port validation bugfix

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #21753 from domo-iot/fix-nvme-categories

nvme-cli: Fix categorization

Merge pull request #21734 from fractalclone/master

micropython: fix stackctrl compilation for GCC 13

openssh: add server config subdirectory

Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

openthread-br: new package

Add a new package for the OpenThread Border Router. Comes with a netifd
protocol handler. See README.md for more information.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

nvme-cli: Fix categorization

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

micropython: fix stackctrl compilation for GCC 13

On host PC using GCC 13, stackctrl.c fails to compile
with the following error:

../py/stackctrl.c: In function 'mp_stack_ctrl_init':
../py/stackctrl.c:32:32: error: storing the address of
   local variable 'stack_dummy'
   in 'mp_state_ctx.thread.stack_top' [-Werror=dangling-pointer=]
   32 |     MP_STATE_THREAD(stack_top) = (char *)&stack_dummy;
../py/stackctrl.c:31:18: note: 'stack_dummy' declared here
   31 |     volatile int stack_dummy;
      |                  ^~~~~~~~~~~
In file included from ../py/runtime.h:29,
                 from ../py/stackctrl.c:27:
../py/mpstate.h:296:23: note: 'mp_state_ctx' declared here
  296 | extern mp_state_ctx_t mp_state_ctx;
      |                       ^~~~~~~~~~~~
cc1: all warnings being treated as errors

Fixed accordingly by ignoring -dangling-pointer warning
inside mp_stack_ctrl_init function.

Signed-off-by: Jean-Paul Etienne <fractalclone@gmail.com>

python-influxdb: Update to 5.3.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-ifaddr: Update to 0.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

flashrom: Update to 1.3.0, package libflashrom

Notably, the meson args for programmers changed from a series of
individual 'config_$foo>, config_$bar' to a list of
'programmer=$foo,$bar'

The patches were all either already merged upstream (or similar ones, at
least), or aren't useful (bitbang_spi is no longer a separated
programmer; it's included in the defaults).

Signed-off-by: Brian Norris <computersforpeace@gmail.com>

Merge pull request #21739 from jefferyto/golang-1.20.7

golang: Update to 1.20.7

rust: Update to 1.71.1

Version 1.71.1 (2023-08-03)
===========================

- Fix CVE-2023-38497: Cargo did not respect the umask when extracting dependencies
- Fix bash completion for users of Rustup
- Do not show `suspicious_double_ref_op` lint when calling `borrow()`
- Fix ICE: substitute types before checking inlining compatibility
- Fix ICE: don't use `can_eq` in `derive(..)` suggestion for missing method
- Fix building Rust 1.71.0 from the source tarball

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

golang: Update to 1.20.7

Includes fix for CVE-2023-29409 (crypto/tls: verifying certificate
chains containing large RSA keys is slow).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

i2pd: update to version 2.48.0

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>

file: Fix FTBFS due to missing dependency

Fixes #21583

zstdlib and lzlib support is currently not neccessary for OpenWRT.
Thus, Explicitly disable zstdlib and lzlib as they would be enabled
automatically in case they are already installed.

Signed-off-by: Volker Christian <me@vchrist.at>

v2fly-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>