iperf3: fix usage with big endian

Upstream submissions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sing-box: update to 1.9.1

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

banip: release 1.0

* made sure, that the domain lookup always add the found IPs to the underlying allow-/blocklist-Set
* major readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>

nghttp2: update 1.62.1

- Switch source back to .xz according to CONTRIBUTING.md

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

devel: gcc: update to 13.3

Update GCC13 to 13.3, like in the root repo.

It fixes buildbot error:
make[3]: *** [Makefile:257: /builder/shared-workdir/build/sdk/dl/gcc-13.3.0.tar.xz] Error 255

Signed-off-by: Robert Marko <robimarko@gmail.com>

python-networkx: update to 3.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

pdns-recursor: update to 5.0.6

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

curl: update to 8.8.0

- Switch source to .xz according to CONTRIBUTING.md
- Switch project URL to  HTTPS
- Drop upstreamed patch
- Refresh remaining patch
- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

ngtcp2: update to 1.5.0

- Switch source to .xz according to CONTRIBUTING.md
- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

nghttp3: update to 1.3.0

- Switch source to .xz according to CONTRIBUTING.md
- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

frr: fix compilation with GCC14

Fixes:
zebra/zebra_netns_notify.c: In function 'zebra_ns_ready_read':
zebra/zebra_netns_notify.c:265:40: error: implicit declaration of function 'basename' [-Wimplicit-function-declaration]
  265 |         if (strmatch(VRF_DEFAULT_NAME, basename(netnspath))) {
      |                                        ^~~~~~~~

Fixed by including libgen.h, then since basename may modify its
parameter, allocate a copy on the stack, using strdupa, and pass the
temporary string to basename.

According to the man page for basename:
With glibc, one gets the POSIX version of basename() when
<libgen.h> is included, and the GNU version otherwise.

The POSIX version of basename may modify the contents of path,
so we should to pass a copy when calling this function.

[1] https://man7.org/linux/man-pages/man3/basename.3.html

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

Revert "ci: no longer require real name"

It was decided that we should require to use real name once again.
There was discussion about it on the mailing list [1], which
was based on the commit in different OpenWrt repo [2]

This reverts commit 7e6cd98ad481184b1a620a9862aa3713d1ab85cc.

[1] https://lists.openwrt.org/pipermail/openwrt-devel/2024-April/042711.html
[2] https://github.com/openwrt/actions-shared-workflows/commit/12d9551f2d07ec34ac813da8612c8014fb393af6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

natmap: update to 20240603

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

prometheus-node-exporter-lua: fix netclass duplicate TYPE lines

Fixes a315c40b7232bbc83582685c98e41466d84d7a35

[initial fix]
Signed-off-by: René Treffer <treffer@measite.de>
[fixup René version]
Signed-off-by: PichetGoulu <pichet@nosuid.be>
[actual commit]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Merge pull request #24037 from TDT-AG/pr/20240429-keepalived

keepalived: remove not supported notify script handling

mdnsreponder: update to 2200.100.94.0.2

The IETF fork is unmaintained. In addition, the versioning is incompatible with apk.

010-uclibc.patch is pointless as uclibc is no longer used by OpenWrt.

020-fix-core-dump-while-parsing-interface-list.patch was an upstream
backport. No longer needed.

Added tls=no to avoid mbedtls dependency.

mDNSIdentify is gone.

Added back patches from version 878.200.35. They required manual
refreshing. 120-reproducible-builds.patch is probably needed. Not sure
about 100-linux_fixes.patch.

Add OpenEmbedded patches. Some crash fixes. mdnsd is less noisy with
them.

Log stderr to the log. Otherwise there's no output.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sane-backends: fix compilation with GCC14

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gdbm: update to 1.23

Just make the library instead of everthing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ostiary: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libv4l: fix compilation without utils

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

v4l2camera: update to 0.2.0

fix compilation when ALSA is found

Need to link against libasound.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgpiod: update to 2.1.2

Signed-off-by: Russell Senior <russell@personaltelco.net>

Merge pull request #24183 from TDT-AG/pr/20240517-ddns

ddns-scripts: do not verify DNS server on start

frr: add support for BGP MD5 authentication

You have to enable the CONFIG_TCP_MD5SIG kernel config option to be able
to use the BGP MD5 authentication.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

node: bump to v20.14.0

Notable Changes
* src,permission: throw async errors on async APIs (Rafael Gonzaga)
* (SEMVER-MINOR) test_runner: support forced exit (Colin Ihrig)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

hev-socks5-server: update to 2.6.6

Signed-off-by: Ray Wang <r@hev.cc>

acme-common: export main_domain

To avoid confusion, first create the main_domain var and only then export it.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

acme-common: migrate deprecated options

Add to uci-defaults script a migration from old deprecated options to new:
  use_staging to staging
  keylength to key_type
  remove standalone
  add missing validation_method

We still support the old options in the acme.init if old config was copied after installing of the newer version of the acme-common.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

at: update to 3.2.5

- Use upstream tarball
- Update project URL
- Drop obsolete patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

ffmpeg: fix compilation with gcc14

Requires disabling a warning as there's an incompatibility between musl
ioctl and v4l2_ioctl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

apache: update to 2.4.59

- Remove obsolete OpenSSL patch - upstream handles it by itself now
- Refresh another patch
- Remaining patches are unaffected

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

c-ares: update to 1.29.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

zstd: update to 1.5.6

- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

fping: update to 5.2

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

gst1-libav: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

prometheus-node-exporter-lua-hostapd_stations: fix not reporting metrics

- fix incorrect interface name mapping in hostapd_stations exporter

Signed-off-by: Balázs Urbán <szalab9@gmail.com>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

prometheus-node-exporter-lua: add missing libubus-lua dependency

Fixes a315c40b7232bbc83582685c98e41466d84d7a35

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

whois: update to 5.5.23

- Switch to local tarball

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

wsdd2: fix compilation with GCC14 and 64-bit

struct msghdr under musl uses padding ints for 64-bit, which means we
can't direct initialize like this. Switch to initializing each member
explicitly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: update to 3.7.4

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

unrar: update to 7.0.9

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

lynx: update to 2.9.2

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

erlang: update to 27.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

imagemagick: update to 7.1.1.33

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

hwdata: update to 0.383

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libssh: fix bad pkgconfig paths

Avoid leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libjpeg-turbo: update to 3.0.3

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

banip: update 0.9.6-3

* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <dev@brenken.org>

collectd: enable write_prometheus plugin

Signed-off-by: Louis Dupré Bertoni <github@louisdb.xyz>
[PKG_RELEASE bump added]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

cargo-c: New host package

It is useful to build crates as C libraries.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

Merge pull request #24068 from stangri/master-ngtcp2

ngtcp2: drop maintainership

Merge pull request #24271 from neheb/m

ngtcp2: fix bad pkgconfig paths

gst1-libav: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

ngtcp2: fix bad pkgconfig paths

Avoids leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <hukk1996@gmail.com>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <mike@flyn.org>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>