Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <hukk1996@gmail.com>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <mike@flyn.org>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

xfrpc: Revised the config file and adjusted the corresponding init file

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

augeas: update to 1.14.1

Seems upstream now releases on GitHub.

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

docker-compose: Update to version 2.27.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.27.1

Signed-off-by: Javier Marcet <javier@marcet.info>

taglib: update to 2.0.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opus: update to 1.5.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

upmpdcli: update to 1.8.11

Autotools is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.26.5

Autotools build is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 6.1.3

Install static libraries too to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libimobiledevice: update to 2024-05-20

Add patch to fix compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24231 from nmav/ocserv-fix-startup

ocserv: use a more neutral character for sed

acme-common: v1.2.0

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24123 from mhei/update-libgpiod-to-2.1.1-with-deps

Update libgpiod to 2.1.1 and update dependent packages

ocserv: use a more neutral character for sed

This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

libshout: fix compilation with GCC14

Missing headers.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ffmpeg: update to 5.1.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24208 from BKPepe/msmtp

msmtp: update to version 1.8.26

klish: fix compilation with GCC14

Proper types are now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acme-common: fallback to deprecated use_staging if the staging option is not set

The use_staging option was deprecated in 9d2d8787cafdfb49339766a00ced422fa75cb883.
But it still has a bigger priority than the staging option.
This happens because config_get_bool returns 0 when the use_staging option wasn't set.
So the next check for the staging var emptiness is always false.

As the simplest fix, use the config_get staging that returns a plain string when the option is not set and if it's empty then fallback to the use_staging.

Once the use_staging option is removed we should get back to the config_get_bool staging.

Also use config_get_bool debug.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

treewide: use config_get_bool instead of config_get enabled

The config_get_bool function parses not just the 1 but on/yes, true/false or enabled/disabled.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

iperf3: update to 3.17.1

Changelogs since last release:
https://github.com/esnet/iperf/releases/tag/3.17
https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <therealgraysky@proton.me>

nextdns: Update to version 1.43.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

cloudflared: Update to 2024.5.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: update to 1.8.13

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.44.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

treewide: fix incorrect hashes

It seems that PR #24113 introduced incorrect hashes for multiple packages.

So, lets fix all of them at once.

Signed-off-by: Robert Marko <robimarko@gmail.com>

Revert "github: Improve Pull Request template"

This commit was accidently pushed to wrong remote and
it should be properly reviewed.

This reverts commit 6859b0a6f29bc06dd5726658efa91e866b7de1a9.

github: Improve Pull Request template

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #24057 from BKPepe/gitignore

Introduce .gitignore

nghttp3: drop maintainership

* switch back to using tar.gz archives, switch to xz was
  probably unnecessary and the previous problem building
  from the tagged release gz was probably cache-related
* drop maintainership

Signed-off-by: Stan Grishin <stangri@melmac.ca>

nebula: drop maintainership

Signed-off-by: Stan Grishin <stangri@melmac.ca>

msmtp: add test.sh

This file ensures that msmtp is run tested inside GitHub Actions
to help to ensure that this application is compiled and run
tested for OpenWrt master.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

msmtp: update to version 1.8.26

Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-26/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

openldap: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cyrus-sasl: fix compilation with GCC14

Missing time.h header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tailscale: Update to 1.66.4

https://github.com/tailscale/tailscale/releases/v1.66.4
Signed-off-by: Zephyr Lykos <git@mochaa.ws>

sslh: update to v1.23.1

The sslh Makefile's default target "all" now also tries to compile a new version sslh-ev.
To disable its compilation the Build/Compile is overridden and to call directly "make sslh-select" or "make sslh-fork" depending on CONFIG_SSLH_SELECT.

Some changes from 001-configfile-fix.patch were applied to the upstream and we can remove them.
The only left is a notice "sslh command line arguments override the config".

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

dnsdist: update to 1.9.4

fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

libedit: update to version 20240517-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

pdns-recursor: update to 5.0.5

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

sing-box: update to 1.8.14

Signed-off-by: brvphoenix <brvphoenix@gmail.com>

speedtest-go: update to 1.7.7

Update speedtest-go version to 1.7.7

Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>

liburing: Update to v2.6

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #24188 from gladiac/haproxy-2.8.9

haproxy: update to v2.8.9

haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

unixodbc: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

quota: fix compilation with GCC14

Header is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tac_plus: fix compilation with GCC14

Missing declaration and wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nsutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nvme-cli: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Revert "net-snmp: fix compilation with GCC 14"

This reverts commit 7d398682941d79be1e3c2f83f6a57f163ef43a50.

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

setserial: fix compilation with GCC14

Need to add explicit int.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snort3: build against gperftools for more than x86

Other targets should be able to build against gperftools and
realize speed and efficiency gains.

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #24146 from TDT-AG/pr/20240513-rust

rust: fix remote filesystem issue

remserial: fix compilation with GCC14

Missing function declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rust: add patch to fix remote filesystem issue

If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

udptunnel: fix compilation with GCC14

Missing int in main.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpfring: update to 8.6.1

Remove upstreamed patch, backport one, and switch one from downstream to
upstream patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nfdump: update to 1.7.4

Add patch fixing compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shareport-sync: add support to mbedtls3

updated various function calling as new version needed

Signed-off-by: Seo Suchan <tjtncks@gmail.com>

libcli: fix compilation with GCC14

GCC 14 does not like 1 as the second parameter to calloc.

Clean up definition to avoid using PKG_SOURCE_DATE and to just use
PKG_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libroxml: fix compilation with GCC14

Need casts for integer conversion

Signed-off-by: Rosen Penev <rosenp@gmail.com>