zerotier: fix option disabled

Signed-off-by: Moritz Warning <moritzwarning@web.de>

zerotier: update to 1.14.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

banIP: update to 1.0.0-7

* fixed auto allow-/blocklist-issue with IPv6 addresses in CIDR notation
* removed edrop feed from readme (had been removed from feeds for a while)

Signed-off-by: Dirk Brenken <dev@brenken.org>

linuxptp: update to v4.4

- Replaced SF project and download URLs with nwtime ones.
  The project is now hosted at https://linuxptp.nwtime.org/.

- Removed 020-gcc14.patch. Missing include was fixed upstream
  in v4.2.

- Added patch to disable MAC library autodetection. That
  can silently pick up unwanted dependencies, depending on
  package build order. We can add linuxptp-<mac lib> variants
  of this package later if there are users of authenticated
  PTP.

Signed-off-by: Shenghao Yang <me@shenghaoyang.info>

podman: Update to 5.2.2

- Cleanup Makefile
- Refresh patches
- Simplify go tags
- Separate go tags with space due to upstream change
- Remove vars which are indentical to upstream or empty
- Invoke built-in go vars instead of duplicating one by one

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tested-by: Dirk Buchwalder <buchwalder@posteo.de>

aardvark-dns: Update to 1.12.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tested-by: Dirk Buchwalder <buchwalder@posteo.de>

netavark: Update to 1.12.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tested-by: Dirk Buchwalder <buchwalder@posteo.de>

slirp4netns: Update to 1.3.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

crun: Update to 1.17

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

conmon: Update to 2.1.12

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

adblock: update to 4.2.2-5

* filter out unrelated multicast traffic from reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>

tiff: update to 4.7.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

alist: Update to 3.37.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-core: Update to 5.18.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

curl: update to 8.10.1

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

sexpect: update to 2.3.14

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

adblock: update to 4.2.2-4

* fixed wrongly detected NX domains in adblock reporting
* remove existing pcap files when restarting/stopping adblock
   to prevent problems when changing tcpdump parameters

Signed-off-by: Dirk Brenken <dev@brenken.org>

libs/glib2: update to 2.82.0

Remove the obsolete patch as the required functionality was already
available upstream.

Refresh 006-c99.patch.

Remove -Ddefault_library option from MESON_HOST_ARGS and MESON_ARGS as
this is now the default behavior.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libarchive: disable linking with pcre2

Looks like libarchive v3.7.3 adds support for pcre2 (https://github.com/libarchive/libarchive/commit/d1231a7ea7df4db6ddba73f06df67dbab0174a5c).

Because of this, the following build error is observed (in the case pcre2 is compiled before libarchive):
Package libarchive is missing dependencies for the following libraries:
libpcre2-8.so.0
libpcre2-posix.so.3

So let's disable linking with pcre2, just like linking with pcre was disabled before.

Signed-off-by: Matthias FRANCK <matthias.franck@softathome.com>

lxc: update to 6.0.2

No patches needed to be rebased, simple version bump.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

memcached: update to 1.6.31

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

zerotier: split configuration

Split configuration in global and per-network sections.
This change breaks existing configurations.

The following per-network settings are available:

* allow_managed
* allow_global
* allow_default
* allow_dns

See  https://docs.zerotier.com/config/#network-specific-configuration

Signed-off-by: Óscar García Amor <contact@ogarcia.me>
Reviewed-by: Moritz Warning <moritzwarning@web.de>

netbird: update to 0.29.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

dnsproxy: Update to 0.73.2

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

docker-compose: Update to version 2.29.4

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.4

Signed-off-by: Javier Marcet <javier@marcet.info>

boost: Updates package to version 1.86.0

This commit updates boost to version 1.86.0

This update does not bring new libraries.

More info about Boost 1.86.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_86_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

jool: update to 4.1.13

* update jool to 4.1.13
* refresh patch

Changelog: https://github.com/NICMx/Jool/releases/tag/v4.1.13

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>

mdns-repeater: add respawn to init

Sometimes mdns-repeater quits or crashes, leaving service stopped. This commit should fix that by enabling respawn in procd.

Signed-off-by: Tina DiPierro <tina@dipier.ro>

vncrepeater: remove package

Upstream seems dead. NXDOMAIN.

Signed-off-by: Yanase Yuki <dev@zpc.st>

ripgrep: update to 4.1.1

- Add patch to fix build on riscv64

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

travelmate: update to 2.1.3-1

* fixed STA connection issues / restart the travelmate interface on new connections via ubus
* fixed NTP hotplug issues / trigger the NTP hotplug event via ubus
* fixed minor log issues (mail/hotplug)
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>

travelmate: update online readme

- added a major readme update based on the work of @richb-hanover

Signed-off-by: Dirk Brenken <dev@brenken.org>

dockerd: fix typo in config for no_proxy

the "http_proxy" here should be "no_proxy"

Signed-off-by: Joe Zheng <joe.zheng@intel.com>

miredo: remove package

According to official website [1], Miredo is no longer maintained
and default Teredo server has been terminated.

From upstream website:
> The source code and documentation will be
> kept here for historical reasons.

[1]: https://www.remlab.net/miredo/

Signed-off-by: Yanase Yuki <dev@zpc.st>

expat: update to 2.6.3

- This release contains fixes for CVE-2024-45490,
CVE-2024-45491, CVE-2024-45492.
- Since official place for expat development moved from SourceForge
to GitHub, SourceForge was removed from PKG_SOURCE_URL.
- Use gzip archive to avoid xz usage.
- Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because
we already have EXPAT_BUILD_DOCS=OFF, which has same effect.

Signed-off-by: Yanase Yuki <dev@zpc.st>

dockerd: increase PKG_RELEASE for http proxy update

Fixes: e795bab25325 ("dockerd: add config options for http proxy")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

docker-compose: Update to version 2.29.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.3

Signed-off-by: Javier Marcet <javier@marcet.info>

nerdctl: update to 1.7.7

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

dockerd: add config options for http proxy

add config options to set http porxy for dockerd, refer to
https://docs.docker.com/engine/daemon/proxy/ for details

use the *_proxy environment variable as the default value, so in most
cases, dockerd can use the system proxy settings just like opkg.

Signed-off-by: Joe Zheng <joe.zheng@intel.com>

curl: update to 8.10.0

- Refresh a patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

nghttp3: update to 1.5.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

ngtcp2: update to 1.7.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

xfsprogs: update to 6.10.1

- libblkid is now a hard dependency
- Don't set configure options matching the default
- Enable LTO
- Disable debug asserts at configure stage, drop the patch
- Compile with target optimizations instead of -O2
- Update package URL

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

haproxy: update to v3.0.4

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog
- Fixes CVE-2024-45506

Signed-off-by: Christian Lachner <gladiac@gmail.com>

daemonlogger: remove package

Upstream repository[1] is now read-only.
It seems daemonlogger is no longer maintained.

[1] https://github.com/Cisco-Talos/Daemonlogger

Signed-off-by: Yanase Yuki <dev@zpc.st>

ntpd: disable autoreconf fixup

Fixes #24918 which got introduced with openwrt c364cb8.

Credit for the fix goes to Hirokazu MORIKAWA.

Signed-off-by: Christian Svensson <blue@cmd.nu>

zoneinfo: Updated to 2024b release.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

alist: Update to 3.37.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: Update to 1.68.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

polipo: remove package

Polipo is no longer maintained by upstream
See https://www.irif.fr/~jch/software/polipo/

Signed-off-by: Yanase Yuki <dev@zpc.st>

banip: update 1.0.0-6

* automatic blocking of IP ranges via RDAP request now supports multiple CIDRs
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

hwdata: update to 0.387

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

golang: Update to 1.22.7

go1.22.7(released 2024-09-05)includes security fixes to the encoding/gob,
go/build/constraint, and go/parser packages,
as well as bug fixes to the fix command and the runtime.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

sqlite: update to 3460100

- Change package URL to HTTPS

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

rust: update to 1.81.0

- Automatically refresh one patch
- Other patch is unchanged

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

owut: update to 2024.09.07

Bug fixes:
    efahl/owut@6564aa2 owut: handle non-JSON responses
Enhancements:
    efahl/owut@e0a0c49 owut: add age to build time output
    efahl/owut@d811a24 examples: compress the manifest

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

croc: update to 10.0.12

release notes:
https://github.com/schollz/croc/releases/tag/v10.0.12

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

eza: update to 0.19.2

release notes:
0.18.24: https://github.com/eza-community/eza/releases/tag/v0.18.24
0.19.0: https://github.com/eza-community/eza/releases/tag/v0.19.0
0.19.1: https://github.com/eza-community/eza/releases/tag/v0.19.1
0.19.2: https://github.com/eza-community/eza/releases/tag/v0.19.2

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

qbee-agent: bump version to 2024.36

Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>

chrony: update to 4.6

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

pbr: update to 1.1.7-7

Makefile:
* remove pbr-iptables flavour

Init-script:
* improve detection of wireguard server and client instances
* integrate wg_server_and_client into init script
* remove traffic_killswitch() and trap() and related options/code
* remove internal nft_file_support variable as fw4 nft file is the only running mode
* improve debug() and is_supported_interface() functions
* improve detection of incompatible user script files
* double-quote some strings due to shellcheck errors
* flush ip rules from pbr tables instead of deleting last one

Other files:
* remove /usr/share/pbr/pbr.user.wg_server_and_client as obsolete
* remove references to the file above in config on update thru uci-defaults
* minor updates to netifd uci-defaults script

Signed-off-by: Stan Grishin <stangri@melmac.ca>

openssh: Use apk-compatible versioning

Adjust openssh's versioning to be compatible with apk:
8.9p1-r2 --> 8.9_p1-r2

"_p" is an allowed semantic suffix, so use that.
(Alternative might have been 8.9.1-r2)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

nano: update to 8.2

Update nano editor to version 8.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

mwan3: fix grep order for nping track method

Signed-off-by: Eduardo Aldaz-Carroll <ealdaz@sees.ai>

php8: update to 8.3.11

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.11

A minor adaption to a single patch is required.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

tayga: add options for static mapping

The commit adds options for static mapping, which is essential for
464xlat(clat) usage. But be noted that routes and firewall rules have
to be configured manually, for now.

To use tayga as clat/nat46:
0. specify $ipv4_addr, $prefix, $map_{ipv4,ipv6} properly, and
   set $noroutes to 1 to prevent creating routes for nat64
1. add custom IPv4 routes to tayga, possibly with a reasonable metric
   for default route
2. add a SNAT firewall rule for processing IPv4 traffic destined for
   tayga
3. add firewall rules to allow FORWARD traffic between tayga and WAN6
4. add a $map_ipv6 route to tayga for guiding return traffic

Signed-off-by: Hung-I Wang <whygowe@gmail.com>

gg: Update to 0.2.19

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

graphicsmagick: update to 1.3.45

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

hev-socks5-tunnel: add new package

HevSocks5Tunnel is a high-performance tun2socks for Unix.

More details: https://github.com/heiher/hev-socks5-tunnel

Signed-off-by: Ray Wang <r@hev.cc>

hev-socks5-tproxy: add new package

HevSocks5TProxy is a simple, lightweight transparent proxy for Linux.

More details: https://github.com/heiher/hev-socks5-tproxy

Signed-off-by: Ray Wang <r@hev.cc>

dhcpcd: bump to 10.0.10

Fixes: https://github.com/openwrt/openwrt/issues/16254
Signed-off-by: Rany Hany <rany_hany@riseup.net>

ci: avoid subshell invocation on APK version check

Use return code instead of scraping the stdio of `apk version --check`.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

knot: update to version 3.4.0

Signed-off-by: Jan Hák <jan.hak@nic.cz>

liburcu: update to version 0.14.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

imagemagick: update to 7.1.1.38

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

freetype: update to 2.13.3

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

rsyslog: update to 8.2408.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

libmaxminddb: update to 1.11.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

apr: update to 1.7.5

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

mwan3: fix sed regex for tracking output ping check_quality

Signed-off-by: William Solichin <william.r.solichin@protonmail.com>

cloudflared: reload service if wan inferface has (re)connected

Sometimes the wan connection needs time to be established (e.g. cold
boot after power loss) and the service may crash as the internet is
yet available. Add a trigger to reload the service once the wan
interface is up.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tvheadend: update to latest master

Removed PKG_VERSION for compatibility with apk.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

uhubctl: update to 2.6.0

Signed-off-by: Christian Svensson <blue@cmd.nu>

atop: update to 2.11.0

- Remove obsolete patch
- Add newly acquired glib2 dependency

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

bash: update to 5.2.32

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

i2pd: Update to 2.53.1

Signed-off-by: David Yang <mmyangfl@gmail.com>

v2ray-core: Update to 5.17.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.44.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.28.9

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: add test

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

c-ares: update to 1.33.1

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

liburing: update to 2.7

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

clamav: update to 1.4.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

xray-core: update to 1.8.24

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

apfree-wifidog: update to 7.08.2035

https://github.com/liudf0716/apfree-wifidog/releases/tag/7.08.2035

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

apfree-wifidog: modify wifidogx.init
1. to address the isssue of incomplement firwall rules
2. added support for gateway settings

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

lpac: update maintainer E-Mail address

Signed-off-by: David Bauer <david.bauer@uniberg.com>

lpac: add uqmi backend

This adds an additional OpenWrt specific backend to use lpac with the
uqmi tooling used by OpenWrt to manage QMI based modems.

This allows lpac to manage eUICC chips without the need for other,
potentially bigger, software using the installed modem.

Also set this backend as the new default, as users probably expect being
able to download profiles using their cellular modem.

Profile-Switching
-----------------
With some eUICC modem combinations you might require to powercycle the
UIM slot using uqmi after changing the active profile. To do this,
simply execute

$ uqmi -d /dev/cdc-wdm0 --uim-power-off --uim-slot=1
$ uqmi -d /dev/cdc-wdm0 --uim-power-on --uim-slot=1

Note
----
SM-DP+ might use encryption parameters which are incompatible with
mbedtls which cURL is by default compiled for.

This was observed when attempting to download a profile from
Vodafone DE.

If you encounter issues in that regard, try to install a version of
libcurl which is compiled with OpenSSL support.

Signed-off-by: David Bauer <david.bauer@uniberg.com>