python-pytz: bump to version 2022.7.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 9.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #20363 from 1715173329/crun

crun: add libgcrypt dependency

crun: add libgcrypt dependency

Fixes: ad0aa1b2fc64e8 ("crun: update to 1.7.2")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.1.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

atlas-sw-probe: add more binaries

They were added in these commits [1] [2] and if they are not included,
the RIPE Atlas SW Probe does not work correctly.

This should also prevent this from happening in the future as it now. We include all
files with .sh extension file type.

[1] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/70ced29fc3217dd8d61e2b78506b6103ded100aa
[2] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/71a4ff0e68c55464f766ddb9f1dfe21b22e530db

Fixes: https://github.com/openwrt/packages/issues/20338
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

snort3: update to 3.1.52.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

snort3: update to 3.1.51.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #20330 from dhewg/lrzsz

lrzsz: update to v0.12.21rc and fix a CVE

nano: update to 7.2

Update nano editor to version 7.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

treewide: quote CC and CXX

When CC is set to e.g. "ccache mips-openwrt-linux-musl-gcc" it needs
to be quoted to avoid word splitting on substitution.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

openocd: select new libjaylink

Without the +select, openocd's internal autoselection between internal
libjaylink and external libjaylink can result in linking against
external, without the depends declaration, leading to missing
depdendencies errors.

Hard depend on the external libjaylink, as that's the future direction
anyway.

Reported-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Karl Palsson <karlp@etactica.com>

openocd: update to 0.12.0

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

libjaylink: new package

libjaylink is a shared library written in C to access SEGGER J-Link
and compatible devices.

This is used by future OpenOCD versions to handle J-Link debug
adapters.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

udphp-client: bump to latest git HEAD

Fix build with gcc12.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20337 from bdrung/hosting.de

ddns-scripts: add hosting.de provider

git: update to 2.34.6

Fixes CVE-2022-23521
Fixes CVE-2022-41903
Fixes CVE-2022-39260
Fixes CVE-2022-39253
Fixes CVE-2022-29187

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

efibootmgr: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

efivar: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

v2ray-core: Update to 5.2.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20256 from TDT-AG/pr/20230109-acpica-unix

acpica-unix: update version and fix gcc12 build

hiredis: update to version 1.1.0

See project release page[1] for more details.
Switch build to use CMake instead of autotools, allows removal of
local patch.

[1]: https://github.com/redis/hiredis/releases
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ddns-scripts: add hosting.de provider

Add hosting.de provider. To use dynamic DNS you have to create a DDNS
host with a separate DDNS user.

Note: As of 2023-01-17 hosting.de does not work with wget which will
fail with `400: Bad Request` (it will work with `--auth-no-challenge`).
You should use curl instead. I have reported that to the provider.

Signed-off-by: Benjamin Drung <bdrung@bdrung.de>

libv4l: update to 1.22.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #20311 from ValdikSS/miredo

miredo: add miredo.conf conffile

Merge pull request #20313 from neheb/10

stress: update to 1.0.5

borgbackup: bump to 1.2.3

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-exceptiongroup: bump to 1.1.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

Merge pull request #20317 from stangri/master-simple-adblock

simple-adblock: update sed for allowing domains

Merge pull request #20335 from stangri/master-pbr

pbr: update to 1.0.1-14

pbr: update to 1.0.1-14

* improve install/uninstall messages
* fix ips add command
* add boot() to init file

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #20213 from stangri/master-pbr

pbr: update to 1.0.1-10

pbr: update to 1.0.1-10

Bugfixes:
* better error information for empty tid/mark and failure to resolve domains
* better handling of entries in /etc/iproute2/rt_tables
* update packages definitions and descriptions
* remove firewall4 from dependencies to prevent dependency recursion

Updates:
* introduce nft_user_set_policy and nft_user_set_counter to control options for
  user nft sets this service creares
* use counters in internal nft sets

Signed-off-by: Stan Grishin <stangri@melmac.ca>

miredo: add miredo.conf conffile

Keep miredo.conf modified configuration upon upgrades

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>

Merge pull request #20296 from neheb/1

libxml2: build with cmake

podman: update to 4.3.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

atlas-sw-probe: update to version 5080

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

yq: Update to 4.30.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20326 from neheb/14

xinetd: fix URL

libgd: update to 2.3.3

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snowflake: update to 2.4.2

Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>

lrzsz: update to v0.12.21rc and fix a CVE

This updates to v0.12.21rc from 1999 (sic), which was never officially
released. There're fixes in there, and it's what debian ships, so let's
use that too. While at it, use debian's autohell hack and package
description too.

Patch 1 fixes a hang with musl.
Patch 2 fixes CVE-2018-10195, add PKG_CPE_ID while at it.

Refesh the rest.

Fixes: CVE-2018-10195
Signed-off-by: Andre Heider <a.heider@gmail.com>

python3-libselinux: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python3-libsemanage: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rtl-sdr: switch to git tarball

Upstream switched URLs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

flashrom: update to 1.2.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rp-pppoe: update to 3.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>

atlas-probe: update to 2.6.3

Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

foolsm: update to 1.0.21

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xinetd: fix URL

Something went wrong here. Switch to git tarballs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pcsc-tools: update to 1.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

stress: update to 1.0.5

New upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pigz: update to 2.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netperf: use git tarball

netperf.org is gone now. Only github is left.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-compress-bzip2: update to 2.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>

socat: update to 1.7.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bc: use @DEBIAN

Seems Debian no longer offers ftp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

simple-adblock: update sed for allowing domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>

alpine: fix old URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

qfirehose: new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnunet-fuse: update to version 0.19.1

ChangeLog file excert:
Fri Dec 30 12:51:11 AM CET 2022
Releasing gnunet-fuse 0.19.1: fix build for GNUnet 0.19.0+.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

gnunet: update to version 0.19.2

GNUnet has not been updated for a while due to the gnurl-situation.
Now that we got libcurl-gnutls, we can update GNUnet.
For details, please see the GNUnet release notes:

https://www.gnunet.org/en/news/2022-09-0.17.6.html
https://www.gnunet.org/en/news/2022-10-0.18.0.html
https://www.gnunet.org/en/news/2022-11-0.18.1.html
https://www.gnunet.org/en/news/2022-12-0.19.0.html
https://www.gnunet.org/en/news/2022-12-0.19.1.html
https://www.gnunet.org/en/news/2023-01-0.19.2.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libcurl-gnutls: add package, replaces gnURL

The gnURL-fork of cURL is no longer maintained as cURL finally supports
probing and selecting the TLS implementation at run-time.

Hence just build a gnuTLS-backed variant of libcurl, use patchelf to
change the shared object name, call the result libcurl-gnutls and be
done. Other distributions have opted for similar solutions.

In future we could convert the curl package to provide build-variants
for each TLS implementation; however, this is out of the scope of the
needs of GNUnet which used to be only user of libgnurl.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

yq: Update to 4.30.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: update to version 5.4.1

Update to 5.4.1  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

clamav: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: Update to 1.19.5

Go1.19.5 (released 2023-01-10) includes fixes to the compiler,
the linker, and the crypto/x509, net/http, sync/atomic,
and syscall packages.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

hidapi: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

evtest: update to 1.35

Switch to git tarballs as the old freedesktop cgit doesn't work properly
anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bluez: update to version 5.66

ver 5.66:
Fix issue with A2DP and transport connection collisions.
Fix issue with allowing application specific error codes.
Fix issue with not setting initiator flag correctly.
Fix issue with HoG Report MAP size handling.
Add initial support for Basic Audio Profile.
Add initial support for Volume Control Profile.

ver 5.65:
Fix issue with A2DP cache invalidation handling.
Fix issue with A2DP and not initialized SEP codec.
Fix issue with A2DP and multiple SetConfiguration to same SEP
Fix issue with AVRCP and not properly initialized volume.
Fix issue with SDP records when operating in LE only mode.
Fix issue with HoG and not reading report map of instances.
Fix issue with GATT server crashing while disconnecting.
Fix issue with not removing connected devices.
Fix issue with enabling wake support without RPA Resolution.
Fix issue with pairing failed due to the error of Already Paired.
Add support for CONFIGURATION_DIRECTORY environment variable.
Add support for STATE_DIRECTORY environment variable.
Add support for "Bonded" property with Device API.
Add experimental support for ISO socket.

Package btmon in new package 'bluez-utils-btmon' to prevent adding
glib2 it now requires as a dependency for all of bluez-utils.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

sbc: update to version 2.0

Fixes issue with use of x86-specific compiler primitives on non-x86
systems which we had previously patched downstream, remove this patch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libmad: update URL to use codeberg

Upstream abandoned GitHub.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxml2: build with cmake

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opendkim: use pkgconfig for libbsd

Allows using the overlay. Also remove the outdated uClibc patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tiff: don't use AUTORELEASE

Seems upstream wants to get rid of it.

Backport upstream patches fixing several CVEs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpd: update to 0.23.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>

postgresql: update to version 15.1

https://www.postgresql.org/docs/release/15.0/
https://www.postgresql.org/docs/release/15.1/

A dump/restore using pg_dumpall or use of pg_upgrade or logical
replication is required for those wishing to migrate data from any
previous release.

Do not backport to release branch which should remain on version 14.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

safe-search: fix use with dnsmasq in ujail

The safe-search package creates symlinks in a configured additional
hosts directory. The link targets are inside another directory which
has to be made available to dnsmasq as well.
Now that support for adding additional paths to dnsmasq was added by
commit openwrt/openwrt@aa12a0fdd1c5a004281633c5b0758da1781bb41c
implement adding this path using the existing uci-defaults script.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

stress-ng: bump to version 0.15.01

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libreswan: set DNSSEC_ROOTKEY_FILE, LINUX_VARIANT

Libreswan will set DEFAULT_DNSSEC_ROOTKEY_FILE from the LINUX_VARIANT
variable, which is taken from the ID field in /etc/os-release.  This
points to the host file, which is wrong.

Set both variables when calling make.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

i2pd: update to version 2.45.0

Maintainer   : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)
Run tested   : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>

elektra: get rid of pointless iconv patch

A better solution was discovered.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gphoto2: fix compilation with BUILD_NLS

Signed-off-by: Rosen Penev <rosenp@gmail.com>

faad2: update to 2.10.1

Switch to local tarballs. Smaller and faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxcrypt: update to 4.4.33

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.56.3

Get rid of AUTORELEASE. This barely gets updated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-requests: update URL

The old 2.python-requests.org URL is not reachable on modern browsers,
and is not the current canonical URL for the project.  Update to the
current best URL for the project.

Signed-off-by: Karl Palsson <karlp@etactica.com>

ztdns: new package

ztDNS is a dedicated DNS server for a ZeroTier virtual network.
ztdns is alternative to zerotier's own zeronds.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gcc: limit postinst and postrm only with INCLUDE_STATIC_LINK_SPEC

Limit postinst and postrm only with INCLUDE_STATIC_LINK_SPEC enabled
as it's only needed to install and remove the generated spec file.

Also remove extra tab from scripts.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

gcc: add support for gcc 12

Copy patch from gcc 11 to gcc 12 and add missing hash.
Refresh patch for .c -> .cc change and drop
931-libffi-fix-MIPS-softfloat-build-issue as it got merged in
gcc 12.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

conmon: update to 2.1.5

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

crun: update to 1.7.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #20264 from TDT-AG/pr/20230111-xinetd

xinetd: add processing of redirect option in init script

xinetd: add processing of redirect option in init script

Signed-off-by: Helge Mader <ma@dev.tdt.de>

frp: update to 0.46.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

frp: update to 0.46.0

Add `test.sh`.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

squeezelite: bump to 1.9.9-1415

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

yt-dlp: update to 2023.1.6

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

ocserv: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error
due to missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

knot: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error due to
missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>