rclone: Update to 1.65.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2024.1.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dos2unix: Update to 7.5.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

docker-compose: Update to version 2.24.4

Signed-off-by: Javier Marcet <javier@marcet.info>

ffmpeg: add V4L2 support

Enable V4L2 support on ffmpeg-full package.
Tested using V4L2 Raspberry Pi 4 encoder/decoder.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

openvpn: add missing script-security

Maintainer: @mkrkn  @neheb

Compile tested: armv7, cortexA15, OpenWRT 23.05
Run tested: Linksys EA8500

Compile tested: armv8, cortexA53, OpenWRT main
Run tested: Dynalink DL-WRX36

Description:
Script-security is always 2 and cannot be changed from the openvpn config file due to a missing rule in openvpn.init.

This is discussed in issue #23014

This patch adds the missing rule in openvpn.init to parse script-security from the openvpn config file.

Signed-off-by: Erik Conijn <egc112@msn.com>

erlang: remove CFLAGS modification since it has been fixed in the upstream

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

erlang: update to 26.2.1

- Update to Erlang/OTP 26.2.1
- Remove obsolete configure options
- Remove obsolete patches, add new one
- Add missing no_dot_erlang.boot file (fixes #20587)
- Change package URL to https

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libs/libgee: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:libgee

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/bwm-ng: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:bwm-ng_project:bwm-ng

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/acl: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aacl_project%3Aacl

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/cgroupfs-mount: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cgroupfs-mount_project:cgroupfs-mount

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/augeas: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:augeas:augeas

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/fastd: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fastd_project:fastd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/libmbim: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libmbim

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

admin/atop: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:atop_project:atop

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

lang/python/python-docker: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:docker:docker-py

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/pax-utils: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gentoo:pax-utils

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/crun: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:crun_project:crun

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/fail2ban: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fail2ban:fail2ban

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/libinput: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libinput

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/domoticz: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:domoticz:domoticz

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/freetype: fix PKG_CPE_ID

There is not a single CVE under cpe:/a:freetype:freetype2
so use cpe:/a:freetype:freetype:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freetype:freetype

Fixes: 456ae2f541f698e6b9106b696d385d52164ed860
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

lang/vala: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:vala

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

multimedia/gst1-plugins-bad: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:gst-plugins-bad

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/libyang: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cesnet:libyang

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/atftp: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:atftp_project:atftp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/fmtlib: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fmt:fmt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

knot: update to version 3.3.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>

ci: bump checkout/upload-artifact to v4

Fix Node.js 16 deprecation warning.
Ref: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #23182 from mhei/php8-update-to-8.3.2

php8: update to 8.3.2

python-dotenv: update to v1.0.1

Signed-off-by: Javier Marcet <javier@marcet.info>

python-ble2mqtt: update to 0.2.2

b3b0cc8 version 0.2.2
85515cd roidmi: initial support for NEX2 Pro
62addc2 isort imports
8695649 README: update other govee to govee_ht
33f6ade ruuvitag: remove device class for counter
2099607 Rename key govee->govee_ht
12acacd codestyle updates
dbba43d ruuvitag: drop redundant import
84878e0 base: add and use HumidityTemperatureSensor
e9f0046 xiaomi_lywsd03_atc: make send_custom a class variable
2f4809a base: use lowercase for instance variable
5b1af17 govee: add manufacturer
7891691 ruuvitag: add manufacturer
cfd799b ruuvitag: remove inheritance from SubscribeAndSetDataMixin
7be28a1 codestyle updates
bffcf5e Add Govee H5074 temperature/humidity sensor support (#77)

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python-dbus-fast: upgrade to 2.21.1

fix: avoid expensive runtime inspection of known callables (https://github.com/Bluetooth-Devices/dbus-fast/pull/277)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

php8: update to 8.3.2

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

bcm27xx-eeprom: switch to bcm27xx-utils

bcm27xx-userland is now deprecated and utils should be used instead.
https://github.com/raspberrypi/userland/commit/96a7334ae9d5fc9db7ac92e59852377df63f1848

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

libdaq3: update to 3.0.14

Update to latest version.

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.14

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

sing-box: update to 1.8.4

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

natmap: update to 20240126

Signed-off-by: Ray Wang <r@hev.cc>

 banip: update 0.9.3-5

* fix the nft Set survey function

Signed-off-by: Dirk Brenken <dev@brenken.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tailscale: Update to 1.58.2

https://github.com/tailscale/tailscale/releases/tag/v1.58.2

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

utils/cryptsetup: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cryptsetup_project:cryptsetup

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Merge pull request #23150 from ffontaine/fix-tcpreplay-cpeid

net/tcpreplay: fix PKG_CPE_ID

net/tcpreplay: fix PKG_CPE_ID

There is not a single CVE under cpe:/a:appneta:tcpreplay
so use cpe:/a:broadcom:tcpreplay:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:broadcom:tcpreplay

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Merge pull request #23138 from ffontaine/add-i2pd-cpeid

net/i2pd: assign PKG_CPE_ID

docker-compose: Update to version 2.24.3

Signed-off-by: Javier Marcet <javier@marcet.info>

libs/libestr: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aadiscon%3Alibestr

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/apr: fix PKG_CPE_ID

There is not a single CVE under cpe:/a:apache:apr
so use cpe:/a:apache:portable_runtime:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aapache%3Aportable_runtime

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/libvpx: fix PKG_CPE_ID

There is not a single CVEs under cpe:/a:john_koleszar:libvpx
so use cpe:/a:webmproject:libvpx:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Awebmproject%3Alibvpx

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

v2raya: do not allow changing config/log directory

We need stable path to persist configurations and read log from LuCI.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.63.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

net/i2pd: assign PKG_CPE_ID

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ai2pd%3Ai2pd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

gnutls: updated to 3.8.3

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

ocserv: updated source URL to https

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #23136 from nmav/tmp-ocserv1.2.4

ocserv: updated to 1.2.4

ocserv: updated to 1.2.4

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

pdns-recursor: Build rec-5.0.1, adding Rust dependencies

also fix license variable

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Otto Moerbeek <otto@drijf.net>
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #23128 from TDT-AG/pr/20240119-modemmanager

modemmanager: replace modem available check on start with the new monitore service

python-orjson: update to version 3.9.12

Relevant changes since 3.9.10:
- Improve performance of serializing. str is significantly faster. Documents
using dict, list, and tuple are somewhat faster.
- FIXED: Minimal musllinux_1_1 build due to sporadic CI failure.

Signed-off-by: Timothy Ace <openwrt@timothyace.com>

python-jsonschema: Update to 4.21.1

 - Slightly speed up the contains keyword by removing some unnecessary
 validator (re-)creation.

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.24.2

Signed-off-by: Javier Marcet <javier@marcet.info>

tailscale: Update to 1.58.0

https://github.com/tailscale/tailscale/releases/tag/v1.58.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

openvpn: remove myself as maintainer

Signed-off-by: Magnus Kroken <mkroken@gmail.com>

bcm27xx-eeprom: split into bcm2711 and bcm2712

Add support for the Raspberry Pi 5 by creating separate packages for bcm2711
(Raspberry Pi 4) and bcm2712.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

bcm27xx-eeprom: update to latest version

- Updates Raspberry Pi 4 (bcm2711) EEPROM files to latest version.
- Refresh patches.
- Add missing patch header.
- Add mount-utils dependency (findmnt is needed by "rpi-eeprom-update -r").
- Switch to default and latest instead of deprecated critical and stable.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

cloudflared: Update to 2024.1.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

evilginx2: add new package

Signed-off-by: W. Michael Petullo <mike@flyn.org>

sudo: bump to verison 1.9.15p5

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

snort3: update to 3.1.78.0

Upstream bump

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.78.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.14
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.12 24 Oct 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3
           Using Hyperscan version 5.4.2 2024-01-15
           Using LZMA version 5.4.4

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

modemmanger: bump PKG_RELEASE

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: suppress mm_log debug messages by default

The log is filled with 'debug' messages. This is not necessary and is
only normaly needed during development. To suppress this message, check
whether the level is 'debug' and if so, suppress it. If this message is
required again, the message can be generated by commenting out this line.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: replace modem available check on start with the new monitore service

Before this change, the status of the sysfs paths from the kernel events
was cached with a cache file. This is necessary to mark configured modems
as available for the netifd.

Using the new monitor service via the mmcli command 'mmcli -M' simplifies
the whole process. There is no need to start sub shells in the background
anymore that monitors whether the modem has already been added to the
ModemManager.

For this purpose, a new service was added that reacts on add and remove
events for modems in the ModemManager and, if necessary, marks the logical
netifd interface as available.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: move shell include to the beginning of the file

It is usual that the includes are listed at the beginning of the script.
So let's do it that way too.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: move generally applicable functions to modemmanager.common

These moved functions are general functions. This is a preparatory
commit so that these moved functions can also be used in other
ModemManager scripts.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: set allowedmode to 'any' if nothing is configured

The modem saves the permitted technology configuration in the modem
itself. If the technology configuration is deleted in the uci, this is
not passed on to the modem. This means that the previously saved
technology configuration is remains in the modem and is therefore still
active. By setting the technology to 'any', if no option is set, all
technologies are allowed again.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

python-jsonschema: Update to 4.21.0

 - Fix the behavior of enum in the presence of 0 or 1 to properly
  consider True and False unequal.
 - Special case the error message for {min,max}
 {Items,Length,Properties} when they're checking for emptiness rather
 than true length.

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.24.1

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #23126 from stangri/master-adblock-fast

adblock-fast: update to 1.1.1-3

adblock-fast: update to 1.1.1-3

* allow top-level domains in the blocked-domains options fixes
  https://github.com/openwrt/packages/issues/23125

Signed-off-by: Stan Grishin <stangri@melmac.ca>

openblas: bump to version 0.3.26

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

stress-ng: bump to version 0.17.04

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

restic: update to 0.16.3

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

sms-tool: version bump to 2023-09-21

Fixes:
"no SMS Messages if some of them contain From: field with special symbols":
https://github.com/4IceG/luci-app-sms-tool-js/issues/9

Signed-off-by: Andrey Butirsky <butirsky@gmail.com>

htop: update to 3.3.0

Changelog: https://github.com/htop-dev/htop/compare/3.2.2...3.3.0

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

nebula: update to 1.8.2

* update to 1.8.2: https://github.com/slackhq/nebula/releases/tag/v1.8.2

Signed-off-by: Stan Grishin <stangri@melmac.ca>

cloudflared: Update to 2024.1.2

Finally fixed build with Go 1.21.

Fixes: #22383
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: Update to 1.65.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.8.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tailscale: create combined tailscale/tailscaled

Modify Makefile to combine tailscale and tailscaled according to
Tailscale documentatio (https://tailscale.com/kb/1207/small-tailscale)

This resulted for x86_64 in an exec of 31MB + the symlink. Before it
was 29MB (tailscaled) and 10MB (tailscale).

Signed-off-by: Thomas Kupper <thomas.kupper@gmail.com>

ksmbd-tools: update to 3.5.1

Various fixes for ksmbd, most notably a visibility fix for the latest
ksmbd code.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

docker-compose: Update to version 2.24.0

Signed-off-by: Javier Marcet <javier@marcet.info>

node: bump to v20.11.0

Notable Changes
* crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot)
* doc: add MrJithil to collaborators (Jithil P Ponnan)
* doc: add Ethan-Arrowood as a collaborator (Ethan Arrowood)
* (SEMVER-MINOR) esm: add import.meta.dirname and import.meta.filename (James Sumners)
* fs: add c++ fast path for writeFileSync utf8 (CanadaHonk)
* (SEMVER-MINOR) module: remove useCustomLoadersIfPresent flag (Chengzhong Wu)
* (SEMVER-MINOR) module: bootstrap module loaders in shadow realm (Chengzhong Wu)
* (SEMVER-MINOR) src: add --disable-warning option (Ethan Arrowood)
* [SEMVER-MINOR) src: create per isolate proxy env template (Chengzhong Wu)
* (SEMVER-MINOR) src: make process binding data weak (Chengzhong Wu)
* stream: use Array for Readable buffer (Robert Nagy)
* stream: optimize creation (Robert Nagy)
* (SEMVER-MINOR) test_runner: adds built in lcov reporter (Phil Nash)
* (SEMVER-MINOR) test_runner: add Date to the supported mock APIs (Lucas Santos)
* (SEMVER-MINOR) test_runner, cli: add --test-timeout flag (Shubham Pandey)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #23084 from aparcar/pesudo

ci: no longer require real name

Merge pull request #23082 from yangfl/master

i2pd: Update to 2.50.2

Merge pull request #23081 from tru7/libfmt

libfmt: bump to upstream version 10.2.1

Merge pull request #23080 from tru7/knxd

knxd: bump to upstream version 0.14.60

ci: no longer require real name

This goes in accordance with the Linux Kernel:

> using a known identity (sorry, no anonymous contributions.)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst?id=HEAD#n442

Signed-off-by: Paul Spooren <mail@aparcar.org>

i2pd: Update to 2.50.2

Signed-off-by: David Yang <mmyangfl@gmail.com>

libfmt: bump to upstream version 10.2.1

Signed-off-by: Othmar Truniger <github@truniger.ch>