Merge pull request #17094 from stintel/miniupnpd

miniupnpd: drop igdv1 variant, add nftables support

miniupnpd: create iptables and nftables variant

The next OpenWrt stable release aims to use firewall4 by default. As
this uses nftables as backend, miniupnpd will no longer work. Create an
iptables and nftables variant of the miniupnpd package so that miniupnpd
can be used with either firewall variant.

See #16818 for more info.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Revert "miniupnpd: introduce IGDv1 variant"

Since version 2.2.3, miniupnpd will detect MS clients and force IGDv1.

This reverts commit 7f5534ac7a88124c59b23188bcdc39bd9e92d879.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

miniupnpc: update to version 2.2.3

Signed-off-by: Shaleen Jain <shaleen@jain.sh>

miniupnpd: update to version 2.2.3

Signed-off-by: Shaleen Jain <shaleen@jain.sh>

inadyn: update to 2.9.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #17435 from pprindeville/perl-cgi-update-4.53

perl-cgi: update to 4.53

Merge pull request #17434 from pprindeville/perl-text-csv_xs-update-1.47

perl-text-csv_xs: update to 1.47

Merge pull request #17460 from BKPepe/stem

python-stem: backport patch to fix Python 3.10

Merge pull request #17442 from commodo/django-restframework

django-restframework: bump to version 3.13.1

Merge pull request #17466 from BKPepe/markdown

python-markdown: update to version 3.3.6

Merge pull request #17463 from BKPepe/voluptuous-serialize

python-voluptuous-serialize: update to version 2.5.0

python-stem: backport patch to fix Python 3.10

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #17462 from BKPepe/zeroconf-update

python-zeroconf: update to version 0.38.1

Merge pull request #17458 from BKPepe/dnspython-2.1.0

python-dns: update to version 2.1.0

Merge pull request #17440 from commodo/openblas-numpy

openblas,numpy: bump versions

dtc: drop package

It has been imported as core package into OpenWrt repository. Its fdtget
is required by sysupgrade on U-Boot devices so it couldn't live in an
extra feed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

getdns: add optional support for libevent2

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

getdns: clean up the configuration menu

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

stubby: clean up the makefile

These cmake modules are actually never referenced. Stubby itself doesn't link to
libidn or libunbound, only getdns does. They're most likely leftovers from when
stubby was split from getdns to its own repository.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

perl-text-csv_xs: update to 1.47

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

perl-cgi: update to 4.53

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

adguardhome: Update to v0.107.2 stable

Signed-off-by: James White <james@jmwhite.co.uk>

Merge pull request #17475 from 1715173329/dp

dnsproxy: Update to 0.40.3

dnsproxy: Update to 0.40.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

acpica-unix: Update to 20211217

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #17464 from BKPepe/libtorrent-rasterbar

libtorrent-rasterbar: backport patch to fix compilation with boost 1.…

python-markdown: update to version 3.3.6

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libtorrent-rasterbar: add patch to fix compile with boost 1.78.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-voluptuous-serialize: update to version 2.5.0

- Release notes:
https://github.com/home-assistant-libs/voluptuous-serialize/releases/tag/2.5.0

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-zeroconf: update to version 0.38.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-dns: update to version 2.1.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

boost: Bump to version 1.78.0

This commit updates boost to version 1.78.0
More info about Boost 1.78.0 can be found at the usual place [1].

No new libraries have been added.

[1]: https://www.boost.org/users/history/version_1_78_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

Merge pull request #17446 from jefferyto/golang-1.17.5

golang: Update to 1.17.5, add patch

dnsproxy: Update to 0.40.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mg: bump to 7.0

This is mg as it appears in OpenBSD 7.0.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #17418 from TDT-AG/pr/20211222-mwan3

mwan3: fix mwan3 flush conntrack table call

golang: Update to 1.17.5, add patch

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

django-restframework: bump to version 3.13.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #17282 from TDT-AG/pr/20211207-openwisp

openwisp-config: refactoring and update openwisp-config package

numpy: bump to version 1.21.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libs: openblas: bump to version v0.3.19

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python3-paramiko: update to version 2.9.1

Signed-off-by: Javier Marcet <javier@marcet.info>

stubby: quote address value in config

fixes #17421

Signed-off-by: Dmitry Mikhirev <mikhirev@gmail.com>

Merge pull request #17409 from alaviss/adguardhome-update

adguardhome: update to 0.107.0

usteer: fix PKG_SOURCE_DATE

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: David Bauer <mail@david-bauer.net>

prometheus-node-exporter-lua: Added entropy.lua.

Signed-off-by: Jonathan Davies <jpds@protonmail.com>

Merge pull request #17388 from AuthorReflex/openvpn-2.5.5

openvpn: update to 2.5.5

Merge pull request #17427 from 1715173329/xr

xray-core: Update to 1.5.2

Merge pull request #17426 from 1715173329/yq

yq: Update to 4.16.2

Merge pull request #17425 from 1715173329/dp

dnsproxy: Update to 0.40.1

yq: Update to 4.16.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.40.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.5.2

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #17389 from clayface/openldap

openldap: hide configurables when libopenldap is not enabled

adguardhome: update to 0.107.0

Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
https://github.com/AdguardTeam/AdGuardHome/commit/c6888326b034daea9e69de5ee0a8f37aede45892#diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>

adblock: 4.1.3-4

* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>

geoipupdate: initial commit

Add MaxMind's geoipupdate utility. mmdb files are downloaded to /var/GeoIP
by default. The user should update /etc/GeoIP.conf with their API key and
DB choice, currently set to country only. So as not to exceed MaxMind's
download limitations, the user should manually run the utility or set up a
cron job.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>

openldap: hide configurables when libopenldap is not enabled

When openldap is not enabled, the following configurables remain present
in the config:

CONFIG_OPENLDAP_DEBUG=y
\# CONFIG_OPENLDAP_CRYPT is not set
\# CONFIG_OPENLDAP_MONITOR is not set
\# CONFIG_OPENLDAP_DB47 is not set
\# CONFIG_OPENLDAP_ICU is not set

This patch adds a libopenldap dependency for these options, removing the
above from .config when libopenldap is not used. Further, move these
configurables to Config.in.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>

openwisp-config: refactoring and update openwisp-config package

With the last upstream change, all build variants were removed so that
we only have one package. It is now called openwisp-config.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

mwan3: fix mwan3 flush conntrack table call

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

crowdsec-firewall-bouncer: remove crowdsec package dependency

Remove un-necessary crowdsec package dependency, to be able to use
crowdsec-firewall-bouncer independently from crowdsec local installation.
(with remote API)

Fix issue: https://github.com/openwrt/packages/issues/17406

Description:
  using crowdsec-firewall-bouncer on many OpenWRT devices connected
  with my domain LAPI server (which collect many crowdsec machines,
  mostly nginx), it works great. Actually, crowdsec package is not
  mandatory for that usage, it would be great if it was not a dependency.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>

gg: add new package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.5.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

minizip: update to 3.0.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

zabbix: update to 5.0.18

Updated to latest 5.0 LTS minor release

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>

sqlite: update to v3.37 (2021-11-27)

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

knot: update to 3.1.5

Signed-off-by: Jan Hák <jan.hak@nic.cz>

Merge pull request #17404 from mhei/php8-update

php8: update to 8.1.1

neon: update to 0.32.1

Add patch to get rid of xmlto dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-lxml: update to version 4.7.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

php8: update to 8.1.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #17395 from mhei/fix-issue-17332-php8-pecl-http-compile-failure

php8-pecl-http: add compile-time hint about TLS13 ciphers (fixes #17332)

Merge pull request #17391 from clayface/logrotate

logrotate: add logrotate.d to conffiles definition

alsa-utils: update to 1.2.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

alsa-ucm-conf: update to 1.2.6.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

alsa-lib: update to 1.2.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tailscale: update to 1.18.2

Signed-off-by: Wes Morgan <git@wesmorgan.me>

whois: update to 5.5.10

Signed-off-by: Rosen Penev <rosenp@gmail.com>

freetype: update to 2.11.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #17376 from neheb/20

jsoncpp: update to 1.9.5

Merge pull request #17378 from neheb/22

davfs2: update to 1.6.1

uvol: update to 0.6

 * auto-created meta volume
Automatically create volume '.meta' sized 0.01% of the total space
managed by uvol, the minimum size being 4 MiB.
This volume should be used to keep metadata about stored volumes, such
as container runtime configuration (in /var/run/uvol/.meta/uxc) or
the database of installed container packages.

 * configurable LVM volume group
Allow setting volume group to be used by uvol using UCI.
This is useful on devices which do not boot off the device which
should be used for uvol and hence cannot make use of autopart and
physical volume detection based on kernel cmdline.
Use option vg_name in uvol section of fstab UCI config package.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

tgt: update to 1.0.81

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Merge pull request #17330 from flyn-org/selinux

Update SElinux utilities

php8-pecl-http: add compile-time hint about TLS13 ciphers (fixes #17332)

When cURL is built with OpenSSL as backend SSL/TLS library,
pecl_http's configure tries to detect whether TLS 1.3 ciphers
are enabled. This does not work when cross-compiling so let's
pass it based on OpenSSL build configuration.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

logrotate: add logrotate.d to conffiles definition

Currently the contents of logrotate.d is not kept across sysupgrades.
Add this directory to the conffiles definition to ensure its content is
maintained.

Bump the release as well.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>

telegraf: update package to version 1.21.1

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Merge pull request #17335 from mhei/migrate-bandwidthd-to-php8

bandwidthd: migrate dependencies to php8 (fixes #17296)

Merge pull request #17265 from TDT-AG/pr/20211203-modemmanager

modemmanager: refactoring procd init script

openvpn: update to 2.5.5

Maintainer: me / @mkrkn
Compile tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500
Run tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500

openvpn: update to 2.5.5

use of CFG Spectre-mitigations in MSVC builds
bring back OpenSSL config loading to Windows builds
several build fixes, refer to https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

alpine: update to 2.25

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gptfdisk: remove myself from maintainer

Returning package maintainership to OpenWrt developers.
Feel free to adopt this package.

Signed-off-by: Alif M. Ahmad <alive4ever@live.com>

libtorrent-rasterbar: update to 2.0.5

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

atftp: update to 0.7.5

Remove upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shairport-sync: update to 3.3.9

Signed-off-by: Rosen Penev <rosenp@gmail.com>

jose: remove libjose

It can be built statically as nothing else uses it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nft-qos: bump PKG_RELEASE

Signed-off-by: Imran Khan <gururug@gmail.com>

nft-qos: fix monitor duplicates

nft command syntax is incorrect

rearrange parameter order

Signed-off-by: Imran Khan <gururug@gmail.com>

nft-qos: fix include on image build service enable

Fixes: f88485f572ec1ff9082106ccf0ccb20fc7af5801 ("nft-qos: silence buildsystem errors")
Prefixing IPKG_INSTROOT to sourced includes is ineffective for this
package.

Source includes only when empty to avoid image make errors.

Signed-off-by: Imran Khan <gururug@gmail.com>