Merge pull request #20317 from stangri/master-simple-adblock

simple-adblock: update sed for allowing domains

Merge pull request #20335 from stangri/master-pbr

pbr: update to 1.0.1-14

pbr: update to 1.0.1-14

* improve install/uninstall messages
* fix ips add command
* add boot() to init file

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #20213 from stangri/master-pbr

pbr: update to 1.0.1-10

pbr: update to 1.0.1-10

Bugfixes:
* better error information for empty tid/mark and failure to resolve domains
* better handling of entries in /etc/iproute2/rt_tables
* update packages definitions and descriptions
* remove firewall4 from dependencies to prevent dependency recursion

Updates:
* introduce nft_user_set_policy and nft_user_set_counter to control options for
  user nft sets this service creares
* use counters in internal nft sets

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #20296 from neheb/1

libxml2: build with cmake

podman: update to 4.3.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

atlas-sw-probe: update to version 5080

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

yq: Update to 4.30.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20326 from neheb/14

xinetd: fix URL

libgd: update to 2.3.3

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snowflake: update to 2.4.2

Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>

python3-libselinux: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python3-libsemanage: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rtl-sdr: switch to git tarball

Upstream switched URLs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

flashrom: update to 1.2.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rp-pppoe: update to 3.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>

atlas-probe: update to 2.6.3

Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

foolsm: update to 1.0.21

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xinetd: fix URL

Something went wrong here. Switch to git tarballs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pcsc-tools: update to 1.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pigz: update to 2.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netperf: use git tarball

netperf.org is gone now. Only github is left.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-compress-bzip2: update to 2.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>

socat: update to 1.7.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bc: use @DEBIAN

Seems Debian no longer offers ftp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

simple-adblock: update sed for allowing domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>

alpine: fix old URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

qfirehose: new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnunet-fuse: update to version 0.19.1

ChangeLog file excert:
Fri Dec 30 12:51:11 AM CET 2022
Releasing gnunet-fuse 0.19.1: fix build for GNUnet 0.19.0+.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

gnunet: update to version 0.19.2

GNUnet has not been updated for a while due to the gnurl-situation.
Now that we got libcurl-gnutls, we can update GNUnet.
For details, please see the GNUnet release notes:

https://www.gnunet.org/en/news/2022-09-0.17.6.html
https://www.gnunet.org/en/news/2022-10-0.18.0.html
https://www.gnunet.org/en/news/2022-11-0.18.1.html
https://www.gnunet.org/en/news/2022-12-0.19.0.html
https://www.gnunet.org/en/news/2022-12-0.19.1.html
https://www.gnunet.org/en/news/2023-01-0.19.2.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libcurl-gnutls: add package, replaces gnURL

The gnURL-fork of cURL is no longer maintained as cURL finally supports
probing and selecting the TLS implementation at run-time.

Hence just build a gnuTLS-backed variant of libcurl, use patchelf to
change the shared object name, call the result libcurl-gnutls and be
done. Other distributions have opted for similar solutions.

In future we could convert the curl package to provide build-variants
for each TLS implementation; however, this is out of the scope of the
needs of GNUnet which used to be only user of libgnurl.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

yq: Update to 4.30.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: update to version 5.4.1

Update to 5.4.1  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

clamav: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: Update to 1.19.5

Go1.19.5 (released 2023-01-10) includes fixes to the compiler,
the linker, and the crypto/x509, net/http, sync/atomic,
and syscall packages.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

hidapi: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

evtest: update to 1.35

Switch to git tarballs as the old freedesktop cgit doesn't work properly
anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bluez: update to version 5.66

ver 5.66:
Fix issue with A2DP and transport connection collisions.
Fix issue with allowing application specific error codes.
Fix issue with not setting initiator flag correctly.
Fix issue with HoG Report MAP size handling.
Add initial support for Basic Audio Profile.
Add initial support for Volume Control Profile.

ver 5.65:
Fix issue with A2DP cache invalidation handling.
Fix issue with A2DP and not initialized SEP codec.
Fix issue with A2DP and multiple SetConfiguration to same SEP
Fix issue with AVRCP and not properly initialized volume.
Fix issue with SDP records when operating in LE only mode.
Fix issue with HoG and not reading report map of instances.
Fix issue with GATT server crashing while disconnecting.
Fix issue with not removing connected devices.
Fix issue with enabling wake support without RPA Resolution.
Fix issue with pairing failed due to the error of Already Paired.
Add support for CONFIGURATION_DIRECTORY environment variable.
Add support for STATE_DIRECTORY environment variable.
Add support for "Bonded" property with Device API.
Add experimental support for ISO socket.

Package btmon in new package 'bluez-utils-btmon' to prevent adding
glib2 it now requires as a dependency for all of bluez-utils.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

sbc: update to version 2.0

Fixes issue with use of x86-specific compiler primitives on non-x86
systems which we had previously patched downstream, remove this patch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libmad: update URL to use codeberg

Upstream abandoned GitHub.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxml2: build with cmake

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opendkim: use pkgconfig for libbsd

Allows using the overlay. Also remove the outdated uClibc patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tiff: don't use AUTORELEASE

Seems upstream wants to get rid of it.

Backport upstream patches fixing several CVEs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpd: update to 0.23.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>

postgresql: update to version 15.1

https://www.postgresql.org/docs/release/15.0/
https://www.postgresql.org/docs/release/15.1/

A dump/restore using pg_dumpall or use of pg_upgrade or logical
replication is required for those wishing to migrate data from any
previous release.

Do not backport to release branch which should remain on version 14.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

safe-search: fix use with dnsmasq in ujail

The safe-search package creates symlinks in a configured additional
hosts directory. The link targets are inside another directory which
has to be made available to dnsmasq as well.
Now that support for adding additional paths to dnsmasq was added by
commit openwrt/openwrt@aa12a0fdd1c5a004281633c5b0758da1781bb41c
implement adding this path using the existing uci-defaults script.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

stress-ng: bump to version 0.15.01

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libreswan: set DNSSEC_ROOTKEY_FILE, LINUX_VARIANT

Libreswan will set DEFAULT_DNSSEC_ROOTKEY_FILE from the LINUX_VARIANT
variable, which is taken from the ID field in /etc/os-release.  This
points to the host file, which is wrong.

Set both variables when calling make.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

i2pd: update to version 2.45.0

Maintainer   : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)
Run tested   : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>

elektra: get rid of pointless iconv patch

A better solution was discovered.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gphoto2: fix compilation with BUILD_NLS

Signed-off-by: Rosen Penev <rosenp@gmail.com>

faad2: update to 2.10.1

Switch to local tarballs. Smaller and faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxcrypt: update to 4.4.33

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.56.3

Get rid of AUTORELEASE. This barely gets updated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-requests: update URL

The old 2.python-requests.org URL is not reachable on modern browsers,
and is not the current canonical URL for the project.  Update to the
current best URL for the project.

Signed-off-by: Karl Palsson <karlp@etactica.com>

ztdns: new package

ztDNS is a dedicated DNS server for a ZeroTier virtual network.
ztdns is alternative to zerotier's own zeronds.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gcc: limit postinst and postrm only with INCLUDE_STATIC_LINK_SPEC

Limit postinst and postrm only with INCLUDE_STATIC_LINK_SPEC enabled
as it's only needed to install and remove the generated spec file.

Also remove extra tab from scripts.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

gcc: add support for gcc 12

Copy patch from gcc 11 to gcc 12 and add missing hash.
Refresh patch for .c -> .cc change and drop
931-libffi-fix-MIPS-softfloat-build-issue as it got merged in
gcc 12.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

conmon: update to 2.1.5

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

crun: update to 1.7.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #20264 from TDT-AG/pr/20230111-xinetd

xinetd: add processing of redirect option in init script

xinetd: add processing of redirect option in init script

Signed-off-by: Helge Mader <ma@dev.tdt.de>

frp: update to 0.46.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

frp: update to 0.46.0

Add `test.sh`.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

squeezelite: bump to 1.9.9-1415

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

yt-dlp: update to 2023.1.6

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

ocserv: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error
due to missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

knot: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error due to
missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

speedtestpp: drop libxml2 dependency

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

docker-compose: Update to version 2.15.1

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #20246 from mhei/php8-update-8.2.1

php8: update to 8.2.1

django: bump to version 4.1.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-pytz: bump to version 2022.7

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-lxml: bump to version 4.9.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

bind: disable geoip

Signed-off-by: Javier Marcet <javier@marcet.info>
[modified also PKG_RELEASE]

Merge pull request #20225 from rapid-renard/ddns_luadns

ddns-scripts: add support for LuaDNS

ddns-scripts: add support for LuaDNS

Signed-off-by: Jihoon Han <rapid_renard@renard.ga>

Merge pull request #20244 from stargieg/ddns-scripts

ddns-scripts: add strato ipv6 support

xray-core: Update to 1.7.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ddns-scripts: add strato ipv6 support

Signed-off-by: Patrick Grimm <patrick@lunatiki.de>

Merge pull request #19358 from AenBleidd/vko_add_boinc-wrapper

boinc-wrapper: add new package

Merge pull request #20201 from LecrisUT/ddns-scripts/pdns

ddns-scripts: Allow setting root record for pdns script

php8: update to 8.2.1

This fixes:
    - CVE-2022-31631

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #20227 from the2masters/dfu-programmer

dfu-programmer: update to 1.0.0

Merge pull request #20178 from cotequeiroz/icecast_libxml2

icecast: add libxml2 include directory

udphp-client: new package

Signed-off-by: Almaz Gaifullin <gargargar@yandex.ru>

Merge pull request #20233 from aquilacooper/patch-1

getdns: Update to 1.7.3

Merge pull request #20212 from gstrauss/lighttpd-1.4.68

lighttpd: update to lighttpd 1.4.68 release hash

getdns: Update to 1.7.3

Changelog from upstream (https://github.com/getdnsapi/getdns/releases/tag/v1.7.3):

* 2022-12-22: Version 1.7.3
  * PR getdnsapi/getdns#532: Increase CMake required version 3.5 -> 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue getdnsapi/getdns#517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release

* 2022-08-19: Version 1.7.2
  * Stubby updated to 0.4.2 quickfix release

* 2022-08-19: Version 1.7.1
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake processing
    (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue getdnsapi/stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo and
    expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue getdnsapi/getdns#524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue getdnsapi/getdns#517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue getdnsapi/getdns#512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.

Signed-off-by: Aquila Cooper <aquila@cpr.is>

docker-compose: Update to version 2.15.0

Signed-off-by: Javier Marcet <javier@marcet.info>

syncthing: update to 1.23.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

dfu-programmer: update to 1.0.0

The project website http://dfu-programmer.github.io seams dead, but
there are new releases on github. They just released 1.0.0, update
to it.

I removed docs, bash-completion and the fedora spec file from
configure.ac to fix cross compilation problems.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

libwebsockets: update PKG_RELEASE

Fixes: df13b03e50 ("libwebsockets: fix uloop support")
Signed-off-by: John Crispin <john@phrozen.org>

boinc-wrapper: add new package

Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

lighttpd: collect mods now built into lighttpd exe

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: fix meson build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

libmaxminddb: install pkgconfig file

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtorrent-rasterbar: Update to 2.0.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20166 from stangri/master-pbr

pbr: add provides: pbr to variants