shadowsocks-libev: ss-rules: nft rule cleanup on reload

Remove nft rules file generated by ss-rules if ss-rules was or should be
turned off for by configuration.  Use "fw4 restart" instead of "fw4
reload" to force the runtime rule reloading

Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 04ee0326997c7d19b89621f8273331501a4137b6)

shadowsocks-libev: ss-rules: setup policy rules for udp/ip6

Supersedes: https://github.com/openwrt/packages/pull/18852
Fixes: https://github.com/openwrt/packages/issues/18850
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a67ad632b6721434a26cacb56b21323c0e7b8f69)

cgi-io: update to latest Git HEAD

901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17e29466cc81f44504602d66d993bf86)

Merge pull request #19137 from mhei/22.03-php8-update-8.1.9

[22.03] php8: update to 8.1.9

watchcat: fix broken ping invocation for no-address-family configuration

Fix for issue #19010

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
Signed-off-by: Michal Kowalski <18610805+kofec@users.noreply.github.com>
(cherry picked from commit 406adc536325d955cbccfacb2a2986ea6643ff0b)

yq: Update to 4.27.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b736642d263038e0b596c620fa5102e7)

php8: update to 8.1.9

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 55e06d66fa960c127670644b2939f6294ee9e824)

Merge pull request #19117 from commodo/squashfs-tools-zstd-22.03

[22.03] squashfs-tools: enable zstd compression by default

python-paho-mqtt: add missing dependency

The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 52ae0a2018473964c5d631ba2c603065e0227858)

Merge pull request #19120 from autobakterie/libgpg-error_1-45_22-03

libgpg-error: update to 1.45

sslh: update to v1.22c
Change notes:
Updated Makefile package version and hash.
Added libpcre2 dependency
Removed USELIBPCRE make flag (no longer optional within sslh)
Updated patch 001 to work with new sslh Makefile

Signed-off-by: Martin Moreno <fett3270@yahoo.com>
(cherry picked from commit 9b90bb37ee1a6be8da60fb1d4142b7803006d991)

luajit: patch: PPC/e500 SPE: use soft float instead of failing

makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca5c185456cf5ac26e6f47c03ca426e9)

libgpg-error: update to 1.45

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd2081748dbb8d12dd8856e870f73a3108)

squashfs-tools: enable zstd compression by default

Requested via:
  https://github.com/openwrt/packages/issues/19111

PKG_RELEASE is set to AUTORELEASE, so no need to bump.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit f0d45ba3401df4559b17370a19f7800894365d6a)

cryptsetup: fix library paths by calling autoreconf

Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent
accidental linkage against host libraries.

Fixes: #19011
Reported-by: @dreirund
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ad0ac5198decbc15c57801509a3005c1608ecbce)

ffmpeg: update to 5.1

Bump to latest upstream version, manually rebased: 050-glibc.patch

Tested using:
ffmpeg -f lavfi -i testsrc=duration=10:size=1280x720:rate=30 testsrc.mpg

Resulting mpg was good.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 5436f78d31606c1af5a5e90e6d30f39d247e303c)

chrony: Avoid building unused gnutls and ca dependencies

Avoid building unused gnutls and ca dependencies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 089eabedf931cb65013d1e74048e9366046bbeac)

gensio: Avoid building unused python and libstdcpp dependecies

Avoid building unused python and libstdcpp dependecies

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 0c245fda70d580737ee30cc39d42bcca6ddd7f3e)

gnutls: Avoid building unused gnutls dependency

Avoid building unused gnutls dependency

Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
(cherry picked from commit 32f4d46f518391503c3b0004a8ba7ba60e013284)

fail2ban: fix patch for python 3.10

89d5d2e091c8da10a1c963158a6de92b05079116 only patched importing
MutableMapping from collections, but importing Mapping has to be patched
too

Closes: #18681
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 4bd2169e73a037f0d71bbc71494bc492d7be7224)

django: bump to version 4.0.6

Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b0ddec3161969728b671018753a5eaca84e2e57a)

rclone: update to 1.59.0

Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f170342ffb0e8cbd5e1414ecf737469f)

nano: update to 6.4

Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed2021800de9f567f2301716287f225220e1ba)

Merge pull request #19058 from stangri/openwrt-22.03-curl

[22.03] curl: switch default SSL to mbedTLS

curl: switch default SSL to mbedTLS

The decision to switch the default to wolfSSL was taken because of
hostapd back from when curl was in base. Unfortunately, not only is
wolfSSL bigger but it has also been causing issues recently. There's
also no relation between hostapd and curl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0a65e4c6fa84e13a1732c26260615c1ad5efea5b)

Merge pull request #18917 from stangri/openwrt-22.03-nebula

[22.03] nebula: update to 1.6.0

telegraf: Update to version 1.23.3

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35830003e3844af6f195958715731dfb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

knot: update to 3.1.8

- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940e0136adaa20edb8923e90166847e3a)

dockerd: Update to v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

docker: Update to v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

libnetwork: Update to f6ccccb for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to v1.6.6 for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Update to v1.1.2 for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dawn: update to 2022-07-24

edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29bc0703474fd44815ceca6bd7b28efe6)

dawn: update to 2022-07-22

10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c232966b12b2f6e35a2705dc63883eec61c2)

usteer: update to latest HEAD

9059b9a ubus: derive RSSI from measurement report

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 7967abfae0cb26e7cd83d0aef25bc9ea14ba1847)

usteer: bump to git HEAD

  5be6819 policy: allow disabling load balancing
  80b0b65 main: disable load balancing by default
  fca4b87 policy: improve readability
  73c424b usteer: add option for probe steering
  87de1ab main: disable probe steering by default

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d0878c85040a926623abbe9ab3dcf620cda1080b)

dawn: update to 2022-07-21

bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc810e64602bbd758af4bef6c76844b1)

mutt: add PKG_CONFIG_DEPENDS

Should fix missing dependencies when manupulating options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ecd3a8a8de8d73a9e4c1b1b67e42e87f4a22de9d)

opusfile: add autoreconf

Fixes compilation under some hosts.

Added PKG_BUILD_PARALLEL for faster compilation.

Some small cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8588715b269ccaae7a4422065db83ddb29d336bb)

golang: Update to 1.18.4

Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60168651a2c7279a4a169be6b3d61be57e871e55)

libextractor: fix iconv handling

Autoreconf is enough to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df335b13912d85edd6134d2d5bdec898d808af30)

glib2: disable fortify source

The glib2 package fails to build when CONFIG_PKG_FORTIFY_SOURCE_1 or
CONFIG_PKG_FORTIFY_SOURCE_2 is enabled in the OpenWrt config:

In file included from ../glib/libcharset/localcharset.c:28:
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h: In function 'snprintf':
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:101:9: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  101 |         return __orig_snprintf(__s, __n, __f, __builtin_va_arg_pack());
      |         ^~~~~~
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h: In function 'sprintf':
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:110:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  110 |                 __r = __orig_snprintf(__s, __b, __f, __builtin_va_arg_pack());
      |                 ^~~
/home/stijn/Development/OpenWrt/openwrt/staging_dir/toolchain-powerpc64_e5500_gcc-11.2.0_musl/include/fortify/stdio.h:114:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
  114 |                 __r = __orig_sprintf(__s, __f, __builtin_va_arg_pack());
      |                 ^~~

Disable fortify source for the package as a workaround.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 723c4360c48a8483ab059e65dcd4a51cd6a5925b)

wifidog: fix compilation with more recent wolfssl

Needs an extra header. pthread.h is also no longer implicitly included.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4605f98b413b4b0433199e4fe6d3685344cbf933)

curl: fix compilation with wolfSSL

options.h header is needed now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 317575755a83fe21888439f1fd9adccca9e0f36e)

yq: Update to 4.26.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7f65960ca18c364b37f089b018a8dce)

xray-core: Update to 1.5.9

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afdc344e2e402e482d3318219006451c5)

dawn: update to 2022-07-18

e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed355264ca606d01699ca59edaf6848eab)

mpd: add missing AUDIO_SUPPORT in CONFIG_DEPENDS

Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
(cherry picked from commit 0bfe037f0f939bb33a53cc3b410329e0965229b0)

mpd-full: remove partial BUILD_PATENTED on ffmpeg

This removes the guard "CONFIG_BUILD_PATENTED" for the ffmpeg build
feature for mpd-full. ffmpeg was already unconditionally registered as a
dependency (at line 51).

The ffmpeg package already handles whether or not to include patented
codecs internally using the same config flag, so guarding its use as a
dependency here does not appear necessary anymore.

(For reference: guard "BUILD_PATENTED" was introduced in 44eb12f for
ffmpeg, then partially removed by 326c973).

Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
(cherry picked from commit f3fe7de8dc5c00f7b0356b9d63b42fd70a52e900)

postfix: fix download failure

cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6ee7b6477d53c28c9b151ae0c8974d8)

travelmate: update 2.0.9-2

* fix another vpn corner case
* add support for javascript based captive portals (location.href)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3ae7a46b822967f728da6164558f181a0700eff5)

dawn: update to 2022-07-16

0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83afe45bdf83f966e9532f83acf08ef0)

watchcat: add support to run a script

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
(cherry picked from commit 5c96ee5b1bedb392cdd27578f7fdcc760ef7fe7b)

watchcat: add IP version selection support; fix bug with unlockbands

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
(cherry picked from commit baed5531efe5f7791c42ab2324d8d1d6d1bf41ca)

libuwsc: fix compiltation with wolfSSL

wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac586ccb38a3a30aa4d0e1656aea2dc3)

pdns: update to 4.6.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 636da278eb34c37f6d9568bad99a613104fed9cd)

pdns-recursor: update to 4.7.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit c5480ef8a171e0c1ee5f27aaa455c84f6681a3e5)

telegraf: Update to version 1.23.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad333b36962aefbeccc6b0fa77e5826429)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

telegraf: Update to version 1.23.1

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52a29d8923a68234dd6ca068e245c6d0)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

dnslookup: Update to 1.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 798cf62bd8bf463f603f6582eb26ac69e154e439)

cloudflared: Update to 2022.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e858624d2916e812274e57adec2277fed7966603)

xr_usb_serial_common: bump to 2022-03-30

This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450857dcb98ceb55fbddc8b2a30660a7c)

fio: update to 3.29

Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a8af4c286cc47ca6ffc37e573ef15fc)

libarchive: fix ext2fs build race error condition

libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa0e7de8d6b0ada472bda63bb27f0cdc)

nebula: update to 1.6.0

* Update to https://github.com/slackhq/nebula/releases/tag/v1.6.0
* Update maintainer's email address
* Update for newest shellcheck

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit aa52a971a77d1f422ad8ab67551f5d7accff4c47)

node: July 7th 2022 Security Releases

Update to v16.16.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

No vulnerabilities related with openssl (uses system openssl)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8db0d09823764d50b38ff27a9b13cac7fa46bdd2)

nsutils: Update to latest version, switch to cmake

This also:

* Adds PKG_SOURCE_DATE and PKG_SOURCE_VERSION to PKG_VERSION (by
  default, when PKG_VERSION is defined, PKG_SOURCE_DATE and
  PKG_SOURCE_VERSION are not used)

* Fixes package copyright

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2dd1c17626176ca37e438c3af5c939c1326feb82)

nsutils: bump to new release

Few minor changes, like -h flag for program (help).
Added URL to package definition.

No new version release with version number, so version stays
as is, but pkg_release is still bumbed with this commit.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 8f66090160c2e9e837c80b961e046afc62fb698c)

python-cryptography: Fix failing build

Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d78837b7181b859472894aa243a2eae595b)

travelmate: update 2.0.9

* various vpn fixes/optimizations (run tested by forum users)
* refine several log statements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cf1f9dc933eb86e6a78fba3e27ae15428809aa3c)

xtables-addons: update to 3.21

updated to kernel 5.10.121+ changes

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 69e4ed4b6f2e0fe33367ea13871d5ac227aaf922)

xtables-addons: update to 3.20

866bc7f Xtables-addons 3.20
aa70669 doc: move changelog to rST
d7de2a9 doc: remove old changelog entries
d7e49a8 build: bump supported kernel version to 5.17
966fa43 extensions: replace PDE_DATA

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c3141dc16aaf6ec0d9262a921a41a69e96241be8)

xtables-addons: add PKG_LICENSE_FILES and use SPDX

Add PKG_LICENSE_FILES. Use SPDX.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b4d00c1c203850644387378c37410f6216c998cf)

xtables-addons: fix various warning in lua patch

These will become errors in the next LTS kernel.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1cd93b673bfc01969946072a3d6989633e596804)

xtables-addons: update to 3.19

Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af50679587bf39fec31f4af75f7aa8efd498a0)

Revert "gcc: update 11 minor version"

This reverts commit 4db8466a14e54ae9c45989fb41c9e6a20002e670.

branch 22.03 has GCC 11.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #18866 from bluebrother/collectd-dsl-fixes-22.03

[22.03] collectd: Fix various issues with lantiq dsl metrics.

collectd: Fix various issues with lantiq dsl metrics.

- Handle bool values correctly. We get the values as bool, but collectd
  requires a bool value to be numeric in the range [0, 1].
- Remove profile and mode values. Those are strings, which cannot be
  represented by collectd.
- Update collectd type for some values.
- Fix latn value being present twice.

Signed-off-by: Dominik Riebeling <bluebrother@posteo.de>
(cherry picked from commit eb632da5bbd732bbffc2761fbb191267ef2375d0)

unbound: update to 1.16.0

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa43aac589f4c2044fa77ced1055c89b7)

yt-dlp: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 534b538598cff121ed9fa533505a3e5dbc238495)

youtube-dl: drop package

youtube-dl is still maintained, but moves very slowly and many other
distributions instead package an active fork, yt-dlp.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 89710ac58829119029373e6936e8694d67f72986)

Merge pull request #18830 from nemesisdesign/openwrt-22.03

[22.03] openwisp-config: update to 1.0.1

Merge pull request #18848 from nemesisdesign/monitoring-openwrt-22

[22.03] openwisp-monitoring: added 0.1.1

glib2: replace intl patch with upstream solution

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1e2f4f1bf7d5b5851ff2a569b8305ec26ed08769)

glib2: update libintl handling

glib2's meson.build runs check cc.has_function('ngettext', args :
osx_ldflags) and, if successful, it never looks for non-libc libintl.
For musl and glibc this test is always successful.

glib2 unconditionally sets ENABLE_NLS, so during compile <libintl.h>
gets included always. But then we have a disconnect when the OpenWrt pkg
is being built with BUILD_NLS=y, because the <libintl.h> will be from
libintl-full but glib2 will not link to libintl-full.

With BUILD_NLS=n there's no problem, because the <libintl.h> will be
from libc.

In lieu of proper libintl detection in glib2's meson build, removing the
SED call from the Makefile together with the added patch sorts this out.
The SED call can be removed because when we force libintl-full use, the
meson build will put the necessary linker flag into the pkg-config file
itself.

Alpine Linux does something similar (see [1]), but they always force
the use of the external libintl. I assume they always go for full NLS
support.

[1] https://git.alpinelinux.org/aports/tree/main/glib/musl-libintl.patch

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 721838ddd4832ed4fcad5f4eee6a4b784b30dcae)

glib2: update to 2.70.5

Enabled glib_checks to fix podman.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d0cd7eb5bf704cb8e314214f462c79d8f5b08632)

openwisp-monitoring: added 0.1.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae7442dff8a1536de404a2fc38337f2f)

openwisp-config: update to 1.0.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7ba54e75407970341c6070695928e40d)

Merge pull request #18837 from 1715173329/y3

[openwrt-22.03] yq: Update to 4.25.3

yq: Update to 4.25.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff102319f1405ace9f50aed42f6c3ce2cbbe9)

acme: switch from iptables to nft

Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
(cherry picked from commit d926da5182a4547e5248dad3e3e59abcd41d126f)

travelmate: update 2.0.8-3

* refine vpn timeout

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f0477d94993ab1ec297b317fbb6a167ed7c482ca)

gcc: update 11 minor version

- Update 11 minor version to match the upstream
- Rename patches dir to reflect new gcc 11 minor version
- Drop upstream patch

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 4db8466a14e54ae9c45989fb41c9e6a20002e670)

gcc: depend on libzstd

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 8e0bc54fcd8e6d5bd2c1a2c8be146b719a133b26)

gcc: update to allow compiling different versions

This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires two
additional patches:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

(2) 980-add-nostdinc++.patch, which backports a fix from 11.3.0 (11.2.0
only).

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ceaa6e840e0b57c1b47c784997187044e3311d23)

gcc: change maintainer

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit abbe33b369e8c6f16352c9333988e6911ee3eced)

travelmate: update 2.0.8-2

* make vpn handling more reliable

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 06784b4e322c9f82f96185bd3ebe7cdba8558eb7)

syslog-ng: update to version 3.37.1

- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111382630c7046cfb4539b3f1a72ff402)

dnsdist: switch from liblua to luajit

luajit provides higher performance for requests handled in Lua hooks.
It also enables access to dnsdist functionality only exposed via FFI,
and allows configurations/hooks to call functions in any C library
without providing separate bindings.

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 283b269c7c0f164311b11d459953b1b34f6974cf)