iperf3: update to 3.15

see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 8a223d4724d996db13bc8077035b27562b5e8fbd)

zerotier: update to 1.12.2

see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
(cherry picked from commit 0343dffefa2b1b5dbd731516ed0a9431d6ed4cae)

crowdsec: new upstream release version 1.5.4

Update crowdsec to latest upstream release version 1.5.4

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Build tested: package build checked, no run test due to limited space

Description: update to latest version of upstream
(cherry picked from commit 7528bf76821eb9234d4665752371c85496ca5b89)

apfree-wifidog: Update to v6.08.1950

Fixed some memory leak bug

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5b3e517be4a1d2674fc12ea81a60ba885423758a)

libmariadb: Fix async api by linking to libucontext

The asynchronous API of libmariadb uses cooperative multi threading
by using the system calls
  * makecontext
  * swapcontext
  * getcontext
  * setcontext
of the ucontext.h C-API.

Thus additionally link libmariadb to libucontext which is a library
providing these system calls on platforms not supporting them out of
the box - like musl based platforms.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 6748f95168660792a2162d8d35ce1ecf85f2d865)

xfrpc: update to version 2.9.644

Release notes:
https://github.com/liudf0716/xfrpc/releases/tag/2.9.644

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

samba4: update to 4.18.6

Fixes various security issues. For detailed history see:

* https://www.samba.org/samba/history/samba-4.18.6.html
* https://www.samba.org/samba/history/samba-4.18.5.html
* https://www.samba.org/samba/history/samba-4.18.4.html
* https://www.samba.org/samba/history/samba-4.18.3.html
* https://www.samba.org/samba/history/samba-4.18.2.html
* https://www.samba.org/samba/history/samba-4.18.1.html

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

czmq: drop libpcre dependency

It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48a ("czmq: add new package")
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e3ab95185cb67e6d5753b2d7380bac74c4ef4acd)

mg: switch pcre to pcre2

Switch pcre to pcre2
https://github.com/openwrt/packages/issues/22006

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3d11e5c197e250f0a32ca813ff07d480b59311d0)

msmtp: update to version 1.8.24

Release notes:
https://github.com/marlam/msmtp-mirror/commit/ef62463e4d0dc1f8e7f1db4f8dd35650999c13f9X

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 29a9a6a4a7b797097992eb7ff2cfd84d11920b25)

setools: Update to 4.4.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0ea5e63b15065b79fc6d9fef799e3947750c8368)

Merge pull request #22168 from jefferyto/rust-cargo-rustflags-openwrt-23.05

[openwrt-23.05] rust: Set rustflags by environment variable

rust: Set rustflags by environment variable

In order to use $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR, the line to
include rust-values.mk in the Rust makefile was moved in
f489e019ac4a15e974518d9928ef913a157d135a, causing it to be included
before package.mk is included.

This had the side effect of preventing "-lssp_nonshared" from being
added to RUSTC_LDFLAGS, because PKG_SSP is indirectly set by package.mk
(package.mk includes hardening.mk, hardening.mk sets PKG_SSP).

There is a deeper issue; it is the Rust package's PKG_SSP value that
causes RUSTC_LDFLAGS to be set and written to the Cargo config file. For
packages that use Rust to build, their PKG_SSP value does not affect the
linker flag.

This sets rustflags with the RUSTFLAGS environment variable, instead of
writing the value to the Cargo config file, allowing PKG_SSP from the
package being built to be used and for the package being built to modify
the rustflags used.

This also:

* Fix "-lssp_nonshared" being added to TARGET_CFLAGS instead of
  RUSTC_LDFLAGS, when CONFIG_PKG_CC_STACKPROTECTOR_STRONG is set.

* Remove the use of $(RUSTC_TARGET_ARCH) in HOST_BUILD_DIR and move the
  include line for rust-values.mk back to after package.mk.

  Since the host build directory was moved under the target build
  directory in efdbac38dc8b649ca26b49fac27abeb5cf76cd28, it is no longer
  necessary to separate build directories with RUSTC_TARGET_ARCH;
  $(BUILD_DIR) already separates build directories by target.

* Add BUILDONLY:=1, as the Rust package does not build a target package.

* Install the Cargo config file as "config.toml" instead of "config", as
  this is the preferred form[1].

* Rename RUST_CFLAGS to RUSTC_CFLAGS and CONFIG_HOST_SUFFIX to
  RUSTC_HOST_SUFFIX, for consistency.

* Allow CARGO_VARS to be set before rust-values.mk is included.

[1]: https://doc.rust-lang.org/cargo/reference/config.html#hierarchical-structure

Fixes: f489e019ac4a ("rust: compile host package per target")
Fixes: 83785a7ce016 ("rust-lang: Add the rust language support")
Fixes: https://github.com/openwrt/packages/issues/22133
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37762abcb46955467482174019249178d68e9aea)

node: bump to v18.18.0

Update to v18.18.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 86355454094ce47f47a468727897e335ba2f316d)

rust: Update to 1.72.0

Version 1.72.0 (2023-08-24)
==========================

Language
--------
- [Replace const eval limit by a lint and add an exponential backoff warning](https://github.com/rust-lang/rust/pull/103877/)
- [expand: Change how `#![cfg(FALSE)]` behaves on crate root](https://github.com/rust-lang/rust/pull/110141/)
- [Stabilize inline asm for LoongArch64](https://github.com/rust-lang/rust/pull/111235/)
- [Uplift `clippy::undropped_manually_drops` lint](https://github.com/rust-lang/rust/pull/111530/)
- [Uplift `clippy::invalid_utf8_in_unchecked` lint](https://github.com/rust-lang/rust/pull/111543/)
- [Uplift `clippy::cast_ref_to_mut` lint](https://github.com/rust-lang/rust/pull/111567/)
- [Uplift `clippy::cmp_nan` lint](https://github.com/rust-lang/rust/pull/111818/)
- [resolve: Remove artificial import ambiguity errors](https://github.com/rust-lang/rust/pull/112086/)
- [Don't require associated types with Self: Sized bounds in `dyn Trait` objects](https://github.com/rust-lang/rust/pull/112319/)

Compiler
--------
- [Remember names of `cfg`-ed out items to mention them in diagnostics](https://github.com/rust-lang/rust/pull/109005/)
- [Support for native WASM exceptions](https://github.com/rust-lang/rust/pull/111322/)
- [Add support for NetBSD/aarch64-be (big-endian arm64).](https://github.com/rust-lang/rust/pull/111326/)
- [Write to stdout if `-` is given as output file](https://github.com/rust-lang/rust/pull/111626/)
- [Force all native libraries to be statically linked when linking a static binary](https://github.com/rust-lang/rust/pull/111698/)
- [Add Tier 3 support for `loongarch64-unknown-none*`](https://github.com/rust-lang/rust/pull/112310/)
- [Prevent `.eh_frame` from being emitted for `-C panic=abort`](https://github.com/rust-lang/rust/pull/112403/)
- [Support 128-bit enum variant in debuginfo codegen](https://github.com/rust-lang/rust/pull/112474/)
- [compiler: update solaris/illumos to enable tsan support.](https://github.com/rust-lang/rust/pull/112039/)

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

Libraries
---------
- [Document memory orderings of `thread::{park, unpark}`](https://github.com/rust-lang/rust/pull/99587/)
- [io: soften ‘at most one write attempt’ requirement in io::Write::write](https://github.com/rust-lang/rust/pull/107200/)
- [Specify behavior of HashSet::insert](https://github.com/rust-lang/rust/pull/107619/)
- [Relax implicit `T: Sized` bounds on `BufReader<T>`, `BufWriter<T>` and `LineWriter<T>`](https://github.com/rust-lang/rust/pull/111074/)
- [Update runtime guarantee for `select_nth_unstable`](https://github.com/rust-lang/rust/pull/111974/)
- [Return `Ok` on kill if process has already exited](https://github.com/rust-lang/rust/pull/112594/)
- [Implement PartialOrd for `Vec`s over different allocators](https://github.com/rust-lang/rust/pull/112632/)
- [Use 128 bits for TypeId hash](https://github.com/rust-lang/rust/pull/109953/)
- [Don't drain-on-drop in DrainFilter impls of various collections.](https://github.com/rust-lang/rust/pull/104455/)
- [Make `{Arc,Rc,Weak}::ptr_eq` ignore pointer metadata](https://github.com/rust-lang/rust/pull/106450/)

Rustdoc
-------
- [Allow whitespace as path separator like double colon](https://github.com/rust-lang/rust/pull/108537/)
- [Add search result item types after their name](https://github.com/rust-lang/rust/pull/110688/)
- [Search for slices and arrays by type with `[]`](https://github.com/rust-lang/rust/pull/111958/)
- [Clean up type unification and "unboxing"](https://github.com/rust-lang/rust/pull/112233/)

Stabilized APIs
---------------
- [`impl<T: Send> Sync for mpsc::Sender<T>`](https://doc.rust-lang.org/nightly/std/sync/mpsc/struct.Sender.html#impl-Sync-for-Sender%3CT%3E)
- [`impl TryFrom<&OsStr> for &str`](https://doc.rust-lang.org/nightly/std/primitive.str.html#impl-TryFrom%3C%26'a+OsStr%3E-for-%26'a+str)
- [`String::leak`](https://doc.rust-lang.org/nightly/alloc/string/struct.String.html#method.leak)

These APIs are now stable in const contexts:

- [`CStr::from_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_str`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)

Cargo
-----
- Enable `-Zdoctest-in-workspace` by default. When running each documentation
  test, the working directory is set to the root directory of the package the
  test belongs to.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-test.html#working-directory-of-tests)
  [#12221](https://github.com/rust-lang/cargo/pull/12221)
  [#12288](https://github.com/rust-lang/cargo/pull/12288)
- Add support of the "default" keyword to reset previously set `build.jobs`
  parallelism back to the default.
  [#12222](https://github.com/rust-lang/cargo/pull/12222)

Compatibility Notes
-------------------
- [Alter `Display` for `Ipv6Addr` for IPv4-compatible addresses](https://github.com/rust-lang/rust/pull/112606/)
- Cargo changed feature name validation check to a hard error. The warning was
  added in Rust 1.49. These extended characters aren't allowed on crates.io, so
  this should only impact users of other registries, or people who don't publish
  to a registry.
  [#12291](https://github.com/rust-lang/cargo/pull/12291)

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 846ee0b9d0a84ea0868c7f3a3a6bb2e1730c16d7)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

fastd: update repository URL

I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit ac897e05dd6a30be498897494843962db4633436)

libuecc: update repository URL

I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1df594bc01b0c7be34cd6eb477ebd1621959d15d)

nextdns: Update to version 1.40.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 66b72b6db341e7026d96cd1b6ee222e321a7a08d)

rclone: Update to 1.64.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1b75de7e5ca20280ba9e0b4672506abd1a7e2823)

alpine: disable parallel build

Parallel build does not work because it may reach a point where OSTYPE
might be needed before it is actually built.  They appear to run
parallel to each other:

echo slx > OSTYPE
[...]
cat: OSTYPE: No such file or directory
sh: line 1: test: too many arguments
cat: OSTYPE: No such file or directory
Already built for -- you must do "make clean" first
make[6]: *** [Makefile:706: rebuild] Error 1
make[6]: *** Waiting for unfinished jobs....

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e652e244928afd3ac9490589542de0263b89e44)

sudo: bump to verison 1.9.14p3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit a1edb560836c4710b6f536b34df042ee4549fdf2)

sudo: bump to verison 1.9.14p1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7953466d7f78ba4ff28a9a4b705f09e46585e2eb)

knot: update to version 3.3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a6dc24882721b6c93623c8d55175de04c76852c)

libreswan: update to 4.12
fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 5a1b878010217c0404483099b52e3cd30319ced2)

collectd: remove target dependency from cpufreq plugin

We currently have more package architectures supporting
CPU frequency scaling than earlier, and the package architecture
vs. CPU target SDK matching does not fully reflect that.
(E.g. aarch64_cortex-a53 is currently using bcm27xx/bcm2710)

Simplify things by removing the target dependency and let the plugin
be built for all architectures.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 87a9305ddd5a61602c5f283996352e1122afaf1e)

transmission: add copy_file_range syscall to seccomp

Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit f0926b44f48fa04401c660b0818e74f6b654e5bc)

transmission: add ftruncate syscall to seccomp

Fixes many crashes.

Fixes #22071.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit a0372545887a2f16329be56949465e13af0d04c7)
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

transmission: Fix env variables passing

It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>
(cherry picked from commit c662aefd9aaa15b3a1f7570ccd1d5fe33aeb2a45)

ffmpeg: update to version 5.1.3

Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87b2a2bb57c42b3c91393a387cd02367e59910f5)

python-build: Update to 1.0.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 21eb9b7456d0137383e8f41fccaa21bf55046b61)

python-build: Update to 1.0.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ba17298db547fb0771241f9faacf785747b910fa)

python-setuptools: Update to 68.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e309346104ed9303f68d253141ae00f790e0d71e)

Merge pull request #22124 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: improve boot up startup

https-dns-proxy: improve boot up startup

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 22d21e28a79a5246e4f6068cbc0be59e5226c486)

Merge pull request #22119 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfix: remove domains on allow

Merge pull request #22117 from stangri/openwrt-23.05-curl

[23.05] curl: update to version 8.3.0

adblock-fast: bugfix: remove domains on allow

* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bce310bfcd41a20b85fbe85fdcdf47ab1d5032bf)

unbound: update to 1.18.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 03f70dcfd530560c088f05819a11715286ce45d9)

Unbound: Silence SSL unexpected eof messages

Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 2a71e17ca12341682430e587889d8fb7af58ae30)

curl: update to version 8.3.0

Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 07c0a5eab8fe073fabcba999e6176fec93bd696b)

treewide: change my no longer used email

Since February 2023, I decided to no longer work with Turris, I mean CZ.NIC company
due to some reasons how the development goes and since that day my work address is not
available and not sure if there is some redirect to someone else, but if anyone wants to
reach me, use my email address, where they can find me.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1e1b2051db47a82513f4eb4e9da892207785b7e2)

bandwidthd: drop this package

This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit bb4c3b5a20807e6fdf23e0c66a6d13a6e368db92)

Merge pull request #22108 from jefferyto/rust-arch-depends-openwrt-23.05

[openwrt-23.05] rust: Move RUST_ARCH_DEPENDS into rust-values.mk

libucontext: Add package

Description (from libucontext github page):
libucontext (https://https://github.com/kaniini/libucontext) is a
library which provides the ucontext.h C API. Unlike other
implementations, it faithfully follows the kernel process ABI when
doing context swaps. libucontext is used on almost all musl
distributions to provide the legacy ucontext.h API.

This package is meant as a development package. There is no need
to install a package on the router if an application or library
is linked against the static libraries. Though, shared libraries
are provided also.

It is used to link libraries/applications against it which need the
system calls

* makecontext
* swapcontext
* getcontext
* setcontext

E.g. the asynchronous API of libmariadb (c-connector) uses this
system calls. Because libmusl didn't provide that system calls this
synchronous API is currently (without libucontexe) not working - it
segfaults.

Co-developed-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 635a702255e77b211c77e4a5bcd513abe6041721)

openssh: update to 9.4p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 7fb8e823b977c6d95225cc98fdb1f31455b5e179)

openssh: add server config subdirectory

Most distros allow dropping site configuration files into
/etc/sshd_config.d/ so that you don't have to tweak the main
server configuration file.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ead95a26b68f4145937034d84abdf9e0f7fe1eb7)

openssh: update to 9.3p2

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
(cherry picked from commit 731f0d70a8392f1d3abf1877334cfe25c6a0786f)

syslog-ng: update to version 4.3.1

Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c43599b0c885bbb3b6aae2cac34aa8d526fb8274)

rust: Move RUST_ARCH_DEPENDS into rust-values.mk

This allows other packages access to RUST_ARCH_DEPENDS by including
rust-values.mk, instead of rust-package.mk which also sets
Build/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 985738b3991611be3b0b85e2b47cfb3ef0bbc335)

python3: Update to 3.11.5, refresh patches

Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).

This also:

* Remove 027-install-python3-symlink-after-stdlib.patch

  This was merged upstream in
  https://github.com/python/cpython/pull/104693.

* Remove fix for unnecessary linking with libbsd
  (60bf01cb606344619e002901646171da1e69c0f9)

  This was fixed upstream in
  https://github.com/python/cpython/pull/105236.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e42c8450393a317ab6df39f6e01411722872fd6b)

python-crcmod: Fix package section

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8e5ca3fc3e78d92a2e9cfa1ac1696f5151351816)

python-pyserial: Update to 3.5, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4f3a0fe6232f7746e80c68b5d5f51797c6984896)

python-cryptodomex: Update to 3.18.0, refresh patches

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a1b3595550ebc6db9f21bce7a1a958bf7accedbe)

python-cryptodome: Update to 3.18.0, refresh patches

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03f1f4b9bb426670ddf4b870ed4dfbe354e19fcf)

ruamel-yaml: Update to 0.17.32, rename source package

This renames the source package to python-ruamel-yaml to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fdff92f0855d40d65a77d47e0e0db8e23f75a1f3)

python-zipp: Update to 3.16.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 202140aeff26f5f61ff8ae0016093e857a55b50d)

python-yaml: Update to 6.0.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60315a663884b9cf76f787eca10714bfc085335e)

mwan3: fix mwan3_connected ubus output

During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a56e111c499f6d5896ffe9b1bdab0fb0072ee735)

Merge pull request #22048 from jefferyto/python-platform-triplet-openwrt-23.05

[openwrt-23.05] python3: Restore platform triplet to paths

python-zeroconf: Update to 0.97.0, update list of dependencies

The package changed to the poetry-core build backend (and also requiring
python-cython/host).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8957d34d09eac268815ba8abc8ec5bcb1cd0f1f4)

xmltodict: Update to 0.13.0, rename source package

This renames the source package to python-xmltodict to match other
Python packages.

This also updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4872c325808357c0cb81a4367d053cc5b5468028)

Merge pull request #22068 from jefferyto/slang2-modules-openwrt-23.05

[openwrt-23.05] slang2: Avoid building dependencies unless necessary, remove pcre module

Merge pull request #22065 from gladiac/haproxy-2.8.3-openwrt-23.05

[openwrt-23.05] haproxy: update to v2.8.3

slang2: Remove pcre module

pcre is obsolete and upstream has not yet migrated to pcre2.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 106304c988fddf0b66220a7ca04bbf2902719616)

slang2: Avoid building dependencies unless necessary

This also hides the module packages in menuconfig unless the libslang2
package is selected.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03ef02f0f45b2999625de08d0f1a274418076bd6)

python-websockets: Update to 11.0.3, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 98453732e2b7f74234776445844609f3b4dc70d0)

python-wcwidth: Update to 0.2.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 3684df0dc356a9c5b1e7c51cc43e203c7254c8e5)

python-voluptuous-serialize: Update to 2.6.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 92d49899e448efb1e362568184a5dab82c171542)

python-ble2mqtt: update to 0.2.0

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit bfe98f95b6eab697fb617af9b7f0b4fc56b8043a)

python-dbus-fast: update to 1.94.1

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 689f0e01052b25055691e5df34eca1ce58e9d598)

python-voluptuous: Update to 0.13.1, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6c7a53bd7da4d8eeb49429f0321bfa0ce59a311c)

python-urllib3: Update to 2.0.4

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1b2811920a5c6b02963a449bed51fb7b92d01fcc)

python-ubus: Update to 0.1.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd1a16e2276ffb706c3f1e823ece65f3)

haproxy: update to v2.8.3

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0c6ba40d9ad56b050dd01761ef6a526e472185c)

v2raya: Update to 2.2.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 058413daa4b810b04b7f4cdbdc2dbcaf4c7b38a9)

xray-core: Update to 1.8.4

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3b8921d1aed3c183cc02f57fe7809af4d20ecf18)

lua-eco: update to 2.5.1

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 4af428ec71af88470903d3459b720727714cde16)

python3: Restore platform triplet to paths

This removes 014-remove-platform-so-suffix.patch and
016-adjust-config-paths.patch, restoring the platform triplet to paths
for:

* C extensions (*.cpython-311-*.so)

* Build config data directory (/usr/lib/python3.11/config-3.11-*/)

* sysconfig data file (/usr/lib/python3.11/_sysconfigdata_*.py)

Setting `_PYTHON_SYSCONFIGDATA_NAME` during package builds ensures that
sysconfig data for target Python is loaded, in particular so that C
extensions built will have the correct extension / platform triplet.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0fe10114208e2c5cd572df043945a52e3ebeb6dd)

python3: Fix/expand platform triplet detection

Currently, configure does not find the correct platform triplet for musl
as the default build/host values passed by OpenWrt buildroot does not
contain the text "linux-musl".

This backports
https://github.com/python/cpython/commit/c163d7f0b67a568e9b64eeb9c1cbbaa127818596
to add detection for mips soft float and musl.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5a0055df0621d4347723993b04a2fcf045929acf)

python3: Centralize config file adjustments in Build/Install

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b595362b8567521b9bdf003dcc88f9b962c22b10)

python: Rework filespec install script

* Support wildcards in install (`+`) paths

* Add fourth parameter to set directory permissions

  If file permissions are given (third parameter), these will now apply
  to files only.

* Add non-recursive set permissions command (`==`)

* Be more strict about filespec format

  Blank lines and lines starting with `#` will be ignored. Other errors
  (unknown command, missing path parameter, etc.) will cause the script
  to exit.

* Be more strict about ensuring paths exist for all commands

* Avoid spawning subshells

This also removes outdated filespec paths in the python3 package; these
paths delete files that are no longer present.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2ffb87726b93ffd73a5291d6db1bc3d13fbcde17)

python3: Fix package descriptions

* Fix default Python package description not included in individual
  package descriptions

* Update default Python package description text (from General Python
  FAQ, "What is Python?")

* Add package descriptions for Python module packages

* Reduce duplication in package titles

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 329f9a139157840ad129991e961a63f7f4362d62)

python3: Use regular package recipes for python3 package

There is no need to use Py3Package for python3 as it does not package
any Python files; it is an empty package with dependencies to install
the full Python installation.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87631ecdd4ece794ae600d35e259cc1227795313)

vnstat2: update to version 2.11

This release breaks the noexit patch, because the code for removing old
now returns an error when no interfaces are configured. As it is run on
startup, the daemon exits in this case. To avoid this, add an additional
check so an error is only returned in an actual error case.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 98719797074637cecdff6a0cdb782a1e807a13e9)

zerotier: update to 1.12.1

* split up "fix makefile" patch logical distinct parts
* add libatomic dependency needed for prometheus-cpp-lite-1.0
* refresh patch series
* improve warning message in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6cf39ba626e35474b5b3c59754610f20c240d202)

lua-eco: update to 2.5.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 1cd4324a0f4d1d9cd37753c04b3d37100638a775)

Merge pull request #22017 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: initial commit

Merge pull request #22016 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: fix dns resolution not working on boot

adblock-fast: initial commit

* this package replaces simple-adblock package
* it was impossible to keep existing config structure and continue
  improving the simple-adblock the way I wanted, hence the new
  package name
* the migration script for existing simple-adblock config is included in
  the uci-defaults file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit be69e34ce3b4f4c144b4b9e7ec2a6b480ee4d44a)

https-dns-proxy: fix dns resolution not working on boot

* fix dns resolution not working on boot
* add hotplug-online script
* reorganizes files/ and Makefile to reflect files destinations

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9a2c5ae18c5a4bce20d1a8c572d1261b191701dc)

qemu: enable host support for armsr/armv8

As of OpenWrt main branch commit e505873e65f72 ("armsr: armv8:
enable KVM host") [merged 2023-08-15], armsr/armv8 has
KVM host support. We can now enable QEMU host for this
target.

For example, you can run OpenWrt armsr/armv8 as a guest
like so:
qemu-system-aarch64 -nographic -M virt -cpu host --enable-kvm \
-bios u-boot.bin -smp 1 -m 1024 \
-drive file=openwrt-armsr-armv8-generic-ext4-combined.img,format=raw,index=0,media=disk

A compatible u-boot.bin can be obtained from u-boot-qemu_armv8/u-boot.bin
that is built with the armsr target and available from
downloads.openwrt.org.

Signed-off-by: Mathew McBride <matt@traverse.com.au>
(cherry picked from commit 821bbcdf8bea7a864a038751908434578ec16339)

python-wheel: Update to 0.41.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0b99bec49b498443169d883cf7a3ee7df80d555a)

python-pluggy: Update to 1.3.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 88632b7b64309fb18cdd83ddef5076bb66d4b21c)

mpfr: Update to 4.2.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5c11c3717abdbcdab8bf56f33308e68492df0410)

python-trio: Update to 0.22.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b6ea7efe1c8e2584a0c788f06ef826f1030c6e9)

python-tornado: Update to 6.3.3, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e7a8d18385e6d1de27d0501940259ab23e50be6f)

python-sqlalchemy: Update to 2.0.20, update list of dependencies

This also adds a build dependency on python-cython/host.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8b6a817af298364134f3ec37cbb8bfda48b2a35f)

python-slugify: Update to 8.0.1, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1ec68a6e98ec0c1a7256023baee1f9b01ccbf5d2)

python-sentry-sdk: Update to 1.29.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f279ae9418fff4f83bd16b353ef008e548d82cd7)