Merge pull request #22853 from stangri/master-adblock-fast

adblock-fast: bugfix: block domains from config when not using block-lists

adblock-fast: bugfix: block domains from config when not using block-lists

* remove empty lines from the combined list to allo optimization code
  to work properly

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #22767 from efahl/issue-22760

syncthing: fix duplicate command line parameters on service

irqbalance: Fix log spam and correct meson version

Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.

Also correct the version in our own meson.build patch.

Log and strace:

Sat Dec  9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument

open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000
ioctl(6, TIOCGWINSZ, 0xbeb134e8)        = -1 ENOTTY (Not a tty)
writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument)
close(6)                                = 0
munmap(0xb6ed9000, 4096)                = 0
clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0
sendto(5, "<28>Dec  9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80
writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument
) = 48

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

sing-box: update to 1.7.4

New features for v1.7.x:
1. Support excluding custom routes
2. `udp_disable_domain_unmapping` for inbound listen option
3. `HTTPUpgrade` transport
4. Migrate multiplex and UoT server to inbound and multiplexing support is no longer enabled by default and needs to be turned on explicitly in inbound options.
5. TCP Brutal support for multiplex

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

dnsproxy: Update to 0.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

adguardhome: Update to 0.107.42

Signed-off-by: Zuev Aleksandr <A.Zuev@stdev.su>

python-jsonschema-specifications: Update to 2023.11.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

snort3: update to 3.1.76.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.1.76.0

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.76.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.13
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.12 24 Oct 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3
           Using Hyperscan version 5.4.2 2023-12-03

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #22838 from PolynomialDivision/libxslt-1-1-39

libxslt: update to 1.1.39

Merge pull request #22839 from stangri/master-adblock-fast

adblock-fast: bugfixes: getsize/resolver

adblock-fast: bugfixes: getsize/resolver

* do not use standalone grep-package dependent syntax to get the remote
  file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
  are not installed

Signed-off-by: Stan Grishin <stangri@melmac.ca>

cligen: Address last minute review comments

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

libxslt: update to 1.1.39

Release Notes:
- https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.38
- https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.39

Fixes: #22836
Signed-off-by: Nick Hainke <vincent@systemli.org>

python-referencing: Update to 0.31.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonschema: Update to 4.20.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cryptography: Update to 41.0.7

41.0.6 included a fix for CVE-2023-49083 (loading certificates from a
PKCS#7 bundle could lead to a null-pointer-dereference and segfault).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-bcrypt: Update to 4.1.1

This also updates the test.sh script to use an assert.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

pipx: Update to 1.3.2, add new dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-platformdirs: Add new package

This also includes a test.sh script for the packages feed CI.

From the README:

When writing desktop application, finding the right location to store
user data and configuration varies per platform. Even for
single-platform apps, there may by plenty of nuances in figuring out the
right location.

This kind of thing is what the platformdirs package is for.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #22826 from mwarning/master_026

dhtd: udpate to 0.2.6

Merge pull request #22362 from pprindeville/clixon-initial

clixon: Initial packaging

dhtd: udpate to 0.2.6

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #22824 from stangri/master-adblock-fast

adblock-fast: add smartdns ipset/nftset support

adblock-fast: add smartdns ipset/nftset support

* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
  procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #22820 from stangri/master-adblock-fast

adblock-fast: add support for smartdns

clixon: Initial packaging

Clixon is a YANG-based configuration manager, with interactive CLI,
NETCONF and RESTCONF interfaces, an embedded database and transaction
mechanism.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #22359 from pprindeville/cligen-initial

cligen: Initial packaging

cligen: Initial packaging

CLIgen is a Command-Line Interface generator

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

yq: Update to 4.40.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: Update to 1.65.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2raya: update to 2.2.4.3

Switched back to tar.gz archive to avoid potential permission issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

uspot: add package

uspot is an OpenWrt-native captive portal system.

It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4,
ucode, without needing any external kernel module.

It can achieve the maximum performance allowed by nftables (flow
offloading works).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>

adblock-fast: add support for smartdns

* add support for smartdns
* switch from using `uci` commands to `uci_` functions
* rename `_resolver_config` to `_dnsmasq_instance_config`
* introduce `_smartdns_instance_config`
* improve resolvers restart code on changes
* update load_validate_config to allow for smartdns option

Signed-off-by: Stan Grishin <stangri@melmac.ca>

sstp-client: add support for custom port

Add support for connecting to a custom SSTP port.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>

Merge pull request #22809 from pprindeville/strongswan-update-5.9.13

strongswan: Update to 5.9.13

syncthing: fix duplicate command line parameters on service

  - This patch fixes 9d17ba1 and #22760

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

Merge pull request #22631 from TDT-AG/pr/20231109-modemmanager

modemmanager: add state check and set init_epsbearer

modemmanager: add possibilty for setting initial EPS bearer

If no GSM but only 4G is available and a special APN must be used, it
is necessary to set an inital EPS bearer beforehand. If this is not set,
then modem cannot log in and register in the mobile network.

The new option 'init_epsbearer' could be set to the following options.
* none: No init EPS bearer is used and the old one is deleted (default)
* default: Use init EPS bearer with the following config options
  'iptype', 'allowedauth', 'password', 'user' and 'apn' as for the
  connection bearer.
* custom: Other parameters are used that do not match those of the
  default connection bearer. These have an 'init_' prefix and are named
  in the same way as the default connection bearer config options.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: check modem state before establishing a connection

With this change the following modem 'state' are checked before a
connection attempt setup.
* failed: Stop connection attempt because of sim-missing
* locked: Stop connection attempt if no pincode is set

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

python-trove-classifiers: Update to 2023.11.29

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

strongswan: Update to 5.9.13

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

snort3: complete rework

  - Add many options to config file.
  - Move rules and generated snort.lua to /tmp.
  - Add script for downloading rules.
  - Add preliminary reporting capabilites.

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

AriaNg: bump 1.3.2 to 1.3.6

    Fix the problem that cannot create new task after clearing checksum option
    Other bug fix and user interface optimization

    Support overriding aria2 global settings with empty content when create new download task (#712)
    Other bug fix and user interface optimization

    Update Traditional Chinese translation (#705, thx @ChiaYen-Kan)
    Other bug fix and user interface optimization

    Add check-integrity to task settings tab (#693, thx @raytrap)
    Fix a spelling mistake (#696, thx @rusq)

     fix due to the index.html (1.3.6) cite these 2 png files. To keep the page looks fine without 404, added these 2 png files.

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>

freeradius3: add modules

freeradius3-mod-yubikey
freeradius3-mod-wimax
freeradius3-mod-utf8
freeradius3-mod-unpack
freeradius3-mod-sql-map
freeradius3-mod-sometimes
freeradius3-mod-soh
freeradius3-mod-replicate
freeradius3-mod-rediswho
freeradius3-mod-redis
freeradius3-mod-pam
freeradius3-mod-linelog
freeradius3-mod-krb5
freeradius3-mod-ippool
freeradius3-mod-eap-fast
freeradius3-mod-dynamic-clients
freeradius3-mod-date
freeradius3-mod-counter

Signed-off-by: Andy Syam <privasisource@gmail.com>

libs/libsocketcan: remove double line

The following line appeared twice:

include $(INCLUDE_DIR)/package.mk

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

CONTRIBUTING.md: fix typos

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

CI: allow PRs for CONTRIBUTING.md and README.md files

Also grep for CONTRIBUTING.md and README.md in the subject.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

snort: add experimental PCRE2 support patch

Add experimental PCRE2 support patch as PCRE is EOL and won't receive
any new updates anymore.

Since PCRE2 API changed, also snort plugins API changed and require some
tweka for any user downstream that compile custom plugins. The examples
are all updated and conversion patch contains additional info on the
changes required to the plugins.

Plugins needs to be compiled and require updates anyway so there isn't a
problem with user trying to load incompatible plugins.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

snort: bump to release 2.9.20

Update to relase 2.9.20 to make it easier to apply experimental PCRE2
support patch.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

iperf3: update to 3.16

notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

iperf3-mt: remove package

This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

Merge pull request #22772 from stangri/master-ngtcp2

ngtcp2: update to 1.1.0

Merge pull request #22770 from stangri/master-nghttp3

nghttp3: update to 1.1.0

libsocketcan: new package

Readd and update the libsocketcan package from OpenWrt 14.07:

https://git.archive.openwrt.org/?p=14.07/packages.git;a=blob;f=libs/libsocketcan/Makefile;hb=a2d1927140548a805970f0859150556ea0b22a78

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

snort3: update to 3.1.75.0

Upstream bump

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.75.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.13
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.12 24 Oct 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3
           Using Hyperscan version 5.4.2 2023-11-20

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

postfix: Fix enabling PCRE support

After the change from PCRE to PCRE2 when enabling POSTFIX_PCRE the
resulting postfix build no longer reports pcre as an available module.
(postfconf -m). This is caused by using the wrong syntax for the
HAS_PCRE build flag (HAS_PCRE2 vs HAS_PCRE=2). This fixes the build flag
to use the correct syntax.

Signed-off-by: Felix Matouschek <felix@matouschek.org>

CI: Fix CI_HELPER

Commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10 caused CI_HELPER to be
set to "''" (two single quotes), leading to an error when test.sh tries
to source $CI_HELPER.

CI_HELPER is not set anywhere else and not passed into the container
environment, so there is no need to test if it has a value.

This fixes the value of CI_HELPER.

Fixes: 18d3c529fa4a ("github-ci: error on any shell errors")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

wifischedule: updated to 1.0.5-1

    Fixed _get_wireless_interfaces, thanks to Trekky12
    Check schedule during router startup

Fixes: https://github.com/newkit/wifischedule/pull/9
Maintainer: @newkit
Tested: TP-Link WDR3600 with OpenWRT 23.05

Signed-off-by: Nils Koenig <openwrt@newk.it>

mosquitto: update to 2.0.18

Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tesseract: update to 5.3.3

Fixes compilation with GCC13.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libs/xmlrpc-c: restore support for xmlrpc-c-libxml2 package

Remove xmlrpc-c Package definition and let both xmlrpc-c-internal
and xmlrpc-c-libxml2 provide xmlrpc-c.

Also add a patch removing the unnecessary linking.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libs/xmlrpc-c: fix xmlrpc-c-abyss and xmlrpc-c-server-abyss packages

When building abyss feature, the following error occurs:

xmlrpc_server_abyss.c:783:13: warning: format not a string literal and
no format arguments [-Wformat-security]
783 | xmlrpc_faultf(envP, error);

Add a patch fixing the format parameter.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libs/xmlrpc-c: update to 1.54.06

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

perl: update to version 5.38.2

removed one that no longer exists in perl-5.38.2

updated one patch

fixed missing builtin.pm

Signed-off-by: Andy Syam <privasisource@gmail.com>

netbird: update to version 0.24.3

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

aardvark-dns: update to version 1.9.0

Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

netavark: update to version 1.9.0

Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

podman: update to version 4.8.0

Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

crun: update to version 1.12

Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #22645 from yggdrasil-openwrt/yggdrasil-2023-11-11

yggdrasil: overhaul package with netifd support

fail2ban: Fix compatibility with Python 3.11

This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.42.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-setuptools: Update to 69.0.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyasn1: Update to 0.5.1

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-idna: Update to 3.6

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

node: upgrade to v20.10.0

Notable Changes
* --experimental-default-type flag to flip module defaults
* Detect ESM syntax in ambiguous JavaScript
* New flush option in file system functions
* Experimental WebSocket client
* vm: fix V8 compilation cache support for vm.Script

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

python-jsonschema: Update to 4.19.1, update list of dependencies

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonschema-specifications: Add new package

From the README:

JSON support files from the JSON Schema Specifications (metaschemas,
vocabularies, etc.), packaged for runtime access from Python as a
referencing-based Schema Registry.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-referencing: Add new package

From the README:

An implementation-agnostic implementation of JSON reference resolution.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-rpds-py: Add new package

From the README:

Python bindings to the Rust rpds crate for persistent data structures.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

domoticz: update to 2023.2

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

external-protocol: rename and update cni-protocol

cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.

I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

yggdrasil: bump to 0.5.4

Signed-off-by: William Fleurant <meshnet@protonmail.com>

Merge pull request #22762 from pprindeville/strongswan-update-5.9.12

strongswan: Update to 5.9.12

ngtcp2: update to 1.1.0

* Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>

nghttp3: update to 1.1.0

* Changelog: https://github.com/ngtcp2/nghttp3/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #22768 from Forceu/travelmate-hrewards

travelmate: Add h-reward hotel wifi autologin

travelmate: Added H-Rewards hotel login
Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>

strongswan: Update to 5.9.12

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

yggdrasil: bump to 0.5.3

Signed-off-by: William Fleurant <meshnet@protonmail.com>

dhtd: update to 0.2.5

Signed-off-by: Moritz Warning <moritzwarning@web.de>

yt-dlp: bump to version 2023.11.16

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

aria2: bump to version 1.37

Release notes:
- https://github.com/aria2/aria2/releases/tag/release-1.37.0

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

luajit2: update to v2.1-20231117

Signed-off-by: Javier Marcet <javier@marcet.info>

mc: bump to release 4.8.30

* News: http://midnight-commander.org/wiki/NEWS-4.8.30
* refresh patches
* remove obsolete / adapt changed options

Signed-off-by: Dirk Brenken <dev@brenken.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.8.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-core: Update to 5.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.40.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>