cloudflared: Update to 2022.9.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2bad3b604ac8574b3585412206e1d6a7b83fcafc)

lxc: update to 5.0.1

Bump to latest and update Makefile to use meson which is upstream's standard.
Deleted unneeded 010-Remove-distro-check.patch (reference to configure).

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit d957a2293b2a21b1edca1aa92e141bad8292251a)

syslog-ng: update to version 3.38.1

- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1

- Update the configuration file to use version 4.0 as mentioned in the
  release notes to try the latest changes

Fixes: CVE-2022-38725
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 34b7af9e0859418bb85e7d3ca131101dd912ae53)

miniupnpd: rework firewall4 integration

 - Bump to the latest Git version in order to increase the package version
   for simpler opkg upgrade of the broken version

 - (Re-)Introduce PKG_RELEASE into the package, omitting it may lead to
   opkg segmentation faults under certain circumstances

 - Utilize automatic include hooks to drop the isolated miniupnpd table
   in favor to chains within the main inet fw4 table, otherwise PCP is
   unreliable as the upnp table might accept traffic which is later
   rejected by fw4

 - Install a fw4 script hook to restart miniupnpd on fw4 restarts and
   reloads in order to repopulate the upnp chains with forward rules

 - Register the used miniupnpd configuration file and the firewall uci
   configuration as change sources, otherwise `/etc/init.d/miniupnpd reload`
   has no effect if the firewall or upnpd config was changed

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3c6ff6c6c9175b53453825e47f674af4881c2bc1)

miniupnpd: update and fix nftables variant

Update the package to a commit that fixes an issue with removing PCP
mappings from nftables.
This also allows us to fix the nftables miniupnpd implementation on
openwrt.
In this new implementation, a table is created at the start of miniupnpd
and it is dedicated to miniupnpd with a priority above the firewall4
table. This allows miniupnpd to go ahead of the drop rules of firewall4
and forward traffic as needed. There was the possibility of adding a
chain inside the firewall4 table, but this would raise an issue where
if firewall4 was reloaded the port forwardings would be lost and
miniupnpd could be out of sync. When miniupnpd is stopped the table is
deleted, taking the port forwardings with it.

Some of this commit is based of msylgj's work, mainly the logic of the
init/hotplug scripts and the makefile build parameters.

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 651a578cac6168566cf727d6b82ce819e41bbbbe)

dnslookup: Update to 1.7.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 982903e0a36b857ad356e0922f013348235c4d9e)

dnsproxy: Update to 0.44.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2acf2d920ff53e6ec82adca35940578d8b6876e3)

cloudflared: Update to 2022.8.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 529164d054971925d4f7a2f4159db169c130e68e)

pillow: bump to version 9.2.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit ed8420cd976e1a443f783c5ea8ce76097e870702)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

pillow: bump to version 9.1.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e65d9825417005cf026a2637d862fefcecae841d)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

pillow: bump to version 9.1.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 2c2a8990bb20949c24976caf6aa4ea5c23b0304b)
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

gg: Update to 0.2.9

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a6c043c296fdbda69608ca7cb647e0e1a77b0eb0)

xray-core: Update to 1.5.10

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ddd4082d30f843e522fc69ecaa5e91d6bb65365c)

yq: Update to 4.27.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90a76f6467c85157fabf1b614958f873b2169690)

uvol: fix autopart handling double/float number

Consider only integer part of free space in megabytes when
deciding the boundaries of the to be created partition.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f50a289e515fcdc49da5c19d58ed3af54c640cd4)

python-pycares: add new package

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 90ef79afd8c4ad73b3c8a20539eaab66d4b372c2)

node: bump to v16.17.0

Notable Changes:
Experimental command-line argument parser API
Experimental ESM Loader Hooks API
Experimental test runner
Improved interoperability of the Web Crypto API

Dependency updates:
Updated Corepack to 0.12.1
Updated ICU to 71.1
Updated npm to 8.15.0
Updated Undici to 5.8.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 841b38f37a5e3f9ad1812aaae1688dcba69e1fe5)

strongswan: add kernel module dependency on chapoly

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 6a30ed6fbd5aa625221607b215521fbec1f06677)

i2pd: update to version 2.43.0

Maintainer   : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (commit a434795809)
Run tested   : r7800 OpenWrt git master (commit a434795809)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
(cherry picked from commit 58b3857a5a8a2e66ac514be6af485b693e936ca5)

i2pd: Update package

* Update to 2.42.1
* Replace spaces with tabulation in init file

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit bdd8ab6faf1ade127765f2629ffc955595967510)

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 89c2fa9d9b5cd8f6e1cf9859965de04b3707fa5a)

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit cb5bf2b007940c14825dc734814bfe5ceae5b09f)

Merge pull request #19262 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix for allow command

simple-adblock: bugfix for allow command

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 717499e62b59e0a03b9550de56cadc6885b05b2d)

perl-ack: Update to 3.6.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d04fefc2b718d526a06ab3895e885475a16a1e12)

syslog-ng: fix OOM issues by adding support for logrotate

With heavy system logging which goes by default into `/var/log/messages`
log file which is usually placed in tmpfs/RAM one can trigger OOM killer
fairly easily, thus killing random processes and in some cases making
system unusable.

This is likely happening due to the fact, that Linux by default uses 1/2
of available RAM for tmpfs, which might be for example an issue on low
RAM devices with ath10k wireless.

So let's fix it by adding logrotate functionality which should limit the
size of `/var/log/messages` log file to 1M by default, but could be
tweaked by config knob if needed be.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 660fa63faf2881d69f903a589568b72fbd4d61f5)

python-uci: update to version 0.9.0

- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a124d1dcda2768ce3dfbcbaaf30fac44e)

v2raya: Update to 1.5.9.1698.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c43f65ae90fd7de6a5bb91d1560917db1b281dd)

sqm-scripts: Bump to v1.5.2

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
(cherry picked from commit a69e80648ad0e78a1bb87d752ff31f1ab5d298c4)

Merge pull request #19224 from commodo/django-22.03

[22.03] django: bump to version 4.0.7

vim: variants conflict with each other

This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468aeaf7747c2e94e579020aa7f595c649)

libgd: add conflicts to each other

The full variant should conflict with the default variant. This prevents that
libgd and libgd-full could be installed side by side, and also, the full
variant should provide the libgd. Otherwise, if you install libgd-full,
you can not install vnstat.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 42b36b7180a1859502d72a42dcd6e9ef80519c55)

pdns-recursor: update to 4.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0e660c9f501e3dde48bb7c4ead37ced7120542af)

Merge pull request #19246 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update to 1.9.0-1

simple-adblock: update to 1.9.0-1

* Update maintainer's email address
* Style Make and init file to OpenWrt standard
* Rename dnsmasq and unbound-related variables to better reflect
  their use
* New 'allow' CLI parameter to quickly unblock domain(s)
* Switch to uci wrappers
* Beautify the output of the 'check' CLI parameter
* Better handling of output files directory creation error
* Support for (upcoming) dnsmasq nftsets

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3b686b08a54df89582af7092465fc5f0c76fed31)

stress-ng: add libjpeg dep

Fixes: https://github.com/openwrt/packages/issues/19210
If libjpeg isn't selected by another package, all is fine.
But if it is selected, the stress-ng build will see it and try to build the
jpeg stressor. This would usually fail sometime and link-time.

In any case, it's better to just pick-up libjpeg as a dependency of
stress-ng. If people want to stress their system with this tool, they can
probably expect libjpeg as well.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit fc6f44b13aef281a70327fa3786883a9a6489894)

pciutils: backport patch to fix compilation with older binutils

While building pciutils 3.8.0 for OpenWrt 21.02 includes target
mvebu/cortex-a9, mvebu/cortex-a53 and powerpc/8540, it fails because of
this error:

-I<turris1x/ws/build/staging_dir/toolchain-powerpc_8548_gcc-8.4.0_musl/include>   -c -o filter.o filter.c
{standard input}: Assembler messages:
{standard input}:6: Error: multiple versions [`pci_filter_init@@LIBPCI_3.8'|`pci_filter_init@LIBPCI_3.3'] for symbol `pci_filter_init_v38'
{standard input}:8: Error: multiple versions [`pci_filter_parse_slot@@LIBPCI_3.8'|`pci_filter_parse_slot@LIBPCI_3.3'] for symbol `pci_filter_parse_slot_v38'
{standard input}:10: Error: multiple versions [`pci_filter_parse_id@@LIBPCI_3.8'|`pci_filter_parse_id@LIBPCI_3.3'] for symbol `pci_filter_parse_id_v38'
{standard input}:12: Error: multiple versions [`pci_filter_match@@LIBPCI_3.8'|`pci_filter_match@LIBPCI_3.3'] for symbol `pci_filter_match_v38'
make[4]: *** [<builtin>: filter.o] Error 1
make[4]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/lib'>
make[3]: *** [Makefile:70: lib/libpci.so.3.8.0] Error 2
make[3]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0'>
make[2]: *** [Makefile:88: <turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/.built]> Error 2
make[2]: Leaving directory '<turris1x/ws/build/feeds/packages/utils/pciutils'>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f08dadd517e4ecd5c15d4016dd6261d9fee3d41b)

liburcu: update to version 0.13.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 754ba8920b1d5a61250897e146d1ad50778a7567)

knot: update to version 3.2.0

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 74e2bfdd27bbf3625498ede40e357c8d409fbe91)

django: bump to version 4.0.7

Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

squid: bump to 4.17

Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
(cherry picked from commit 15132b85b76409108c441470998c79d1b8d37814)

dnscrypt-proxy2: update to version 2.1.2

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 2c617bbe224ab2e6878e86c5cd61dbfa59440500)

coova-chilli: Fix compile problem with _init()

The _init() function collides with a _init() function in crti.o.
This results in the following error in OpenWrt:
arc-openwrt-linux-gnu/bin/ld: libxt_coova.o: in function `_init':
/lib/gcc/arc-openwrt-linux-gnu/11.3.0/crti.o:(.init+0x4): first defined here
collect2: error: ld returned 1 exit status
make[7]: *** [Makefile:22: libxt_coova.so] Error 1

Fix this by suing a constructor attribute instead. This function will
still be called after the shared library was loaded.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 55297e45c85d0ab3ba31e413c0c58729cddbf72f)

mpd: update to 0.23.9

Fixes compilation with newer ffmpeg.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b1999ec1330f587b01ceccda7b01614462d6e59d)

mpd: update to 0.23.8

Simplify iconv patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63ba2ccbdaa27e128cfcbcc5d85af547328ad92d)

pciutils: update to 3.8.0

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit c5ec5c70b3bcb053fea8441f028dfac0c3a18d56)

travelmate: update 2.1.0

* vpn support can be disabled (enabled by default), fixes #19107 (see trm_vpn option)
* vpn support can be limited to certain interfaces (see trm_vpnifacelist list option)
* openvpn support works now per instance (same as wireguard today)
* add an auto-login script for tplink-omada hotspots provided by Sebastian Muszynski <basti@linkt.de>
* remove pipefail command, see #19043 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 963137dcc5bbfca4810860a8d85688b612d1c955)

miniflux: update to 2.0.38

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit db0de16e8ebbac548c493d766a70c3807da3cd6a)

miniflux: update to 2.0.37

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 62f57441af3868416093df5a0caeb8bc79f50ed8)

yt-dlp: update to 2022.8.14

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 6c6b3f33a8e4b9621cd240a2199677d600825ee5)

yt-dlp: update to 2022.7.18

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9c4f8aa8c995875ad964ce833cbb6a3d648809a1)

yt-dlp: update to 2022.6.22.1

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 6c97e721a480c2c8cbc98b73b79a050b0394fed1)

ddns-scripts: Fix typo s/ganid/gandi/

Signed-off-by: Bheesham Persaud <me@bheesham.com>
(cherry picked from commit ad7f24684e42d74e6173b11d6f4e4c7662a656ac)

host-pip-requirements: update Cython to version 0.29.28

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e78352c04398993bd832aef5d6e7811a1fb7e43d)

libmbim: bump to 1.26.4

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 1d2ef5abbbdff8528ec225d4bc499643bc29ea12)

libmbim: switch to meson build tools

Using https://gitlab.freedesktop.org/mobile-broadband/libmbim.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit fea19c23994dcc84332dfaeb9d585df46a847b10)

modemmanager: switch to meson build tools

Using https://gitlab.freedesktop.org/mobile-broadband/ModemManager.git to download the source code.
Added compile option to compile qrtr support.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 6ae8b15d68c260edd494f03e30a735ecddbacf74)

libqmi: bump to 1.30.6

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 45e8d072ee2d52b5d8f0b053d706ce6a2ae06aae)

libqmi: polish Makefile

PKG_VERSION replaced by PKG_SOURCE_VERSION.
Simplify for collection selection.
Removed unneeded python3/host dep.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit ff5837ee8f483bb425d33b18c1185586507d495c)

libqmi: switch to meson build tools

Using https://gitlab.freedesktop.org/mobile-broadband/libqmi.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Added support for selecting qmi message collection.
Selected basic qmi message collection by default (modemmanager requires it).
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit f7cbd445408756b7a44764080063a9a4158988ed)

rclone: Update to 1.59.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5c4b54de567847f05d25260d4991bfa4ebe97c6e)

gg: Update to 0.2.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6c757f0ff82b6f640c599425ea87ee1ca2e6685c)

usteer: update to latest HEAD

7d2b17c ubus: optimize connected_clients output format
8b10a4b policy: don't alter stats when remaining idle
3cc0f45 policy: count kick total
aadc562 policy: make steering ability evaluation uniform
17c558d ubus: include SSID in node dump
fc158e0 policy: only trigger roam-sm after client becomes roamable
837f144 usteer: add connected-since
9e6002d policy: improve readability

Build-tested: ath79-generic / ramips-mt76x8
Run-tested: ath79-generic / UniFi AC Lite

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 6e1687df30699d5a52ebbf97f24970e174aa1a86)

usteer: bump to git HEAD

  041e884 local_node: query client MBO support from hostapd

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6155b8245f40acfe79a4b299af4d1ffb2e4bee9b)

telegraf: Update to version 1.23.4

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e4555e03ee86ef62cf09ce1436c865d5eb472960)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

telegraf: Add influxdb2 output plugin to package version small

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a5e96189c3dadabb3e20d8139638bbb6da6773bf)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

stress-ng: update to 0.14.03

Signed-off-by: Guilherme Janczak <guilherme.janczak@yandex.com>
Co-authored-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 9a8543701657b42b65b20c449bf1139f00d97354)

squeezelite: update to 1.9.9-1403

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ffab7728e3b53aef91c438924d2a2457fca4c13)

frp: update to 0.44.0

Changelog: https://github.com/fatedier/frp/release

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

opendoas: fix build with PAM

When PAM is available, the build system will detect and use it, but the
package dependency was missing.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 626be1159397e8d835cc5d78e9272c5bb87403d4)

cloudflared: Update to 2022.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 92f0b1b5a454efa34c67207cfaa0e69dd418696e)

lighttpd: update to lighttpd 1.4.66 release hash

* update to lighttpd 1.4.66 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 5eaf000c837612df72c9207e225a2911a190f86f)

ariang: update to 1.2.4

Changelog: https://github.com/mayswind/AriaNg/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

knot: update to 3.1.9

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 39a08a7aaf18a7b4a4a12f46006238336bd5dba3)

rsync: bump to 3.2.5

With the new OW release approaching, it might be better to get an officially
tagged upstream release in as PR#19087 just contained a fix for CVE-2022-29154
which itself introduced a few bugs.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit eeaacc9052efe6aff1c853e38b9fe04f3eb33979)

opendoas: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ad7d2e5270e79f7209fc73e687ac2342fb4eccbb)

rclone: fix init script on CIDR format ipaddr

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 7af716f12d7aeaef48ccc3f025927808af0bf461)

rsync: bump to 3.2.4

Bump to latest upstream release.

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 487640117413eaa0e3a2fe3d2591ce0079125054)

rsync: fix CVE-2022-29154

The rsync package is vulnerable to CVE-2022-29154[1], which is not yet in a
non-preview release. This commit applies the upstream commit to fix it and
several subsequent commits needed to fix bugs the initial fix introduced[2].

1. https://rsync.samba.org/ftp/rsync/NEWS#SECURITY_FIXES-3.2.5
2. https://bugs.archlinux.org/task/75558

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 2611b86547aec7ef14ad2882381e9e66d7ee9bec)

python-websockets: update to version 10.3

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07fab643b85217b35f8c7857a9e3199c1)

unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699

Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit 2179432991fd69ba790225c7959b080986ce363d)

unbound: update to 1.16.1

Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit e702a6605805b1160341bfc949ec1de4687af06d)

antfs: require kernel version 5.10 to build

ANTFS does not compile with OpenWrt's current testing kernel 5.15,
as it needs to be modified for the Linux 5.12 idmapped mounts changes
2f221d6f7b88 ("attr: handle idmapped mounts")
https://lore.kernel.org/all/20210121131959.646623-1-christian.brauner@ubuntu.com/

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
(cherry picked from commit f043d0a7d8045328c6b6ecca0fa97636a1127e18)

ptunnel-ng: fix compilation with kernel 5.15

Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f1d4d47effa37bd69de69ae5aff29b7)

pingcheck: update to 2022-03-01

Fixes compilation with kernel 5.15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bd4564d71db7194034681bced203d2af3074e4e)

libpfring: update to 8.0.0

Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b754495eca6cf821eaa730462429972)

shadowsocks-libev: ss-rules: nft rule cleanup on reload

Remove nft rules file generated by ss-rules if ss-rules was or should be
turned off for by configuration.  Use "fw4 restart" instead of "fw4
reload" to force the runtime rule reloading

Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 04ee0326997c7d19b89621f8273331501a4137b6)

shadowsocks-libev: ss-rules: setup policy rules for udp/ip6

Supersedes: https://github.com/openwrt/packages/pull/18852
Fixes: https://github.com/openwrt/packages/issues/18850
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a67ad632b6721434a26cacb56b21323c0e7b8f69)

cgi-io: update to latest Git HEAD

901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17e29466cc81f44504602d66d993bf86)

Merge pull request #19137 from mhei/22.03-php8-update-8.1.9

[22.03] php8: update to 8.1.9

watchcat: fix broken ping invocation for no-address-family configuration

Fix for issue #19010

Signed-off-by: John Kohl <jtk.git@bostonpog.org>
Signed-off-by: Michal Kowalski <18610805+kofec@users.noreply.github.com>
(cherry picked from commit 406adc536325d955cbccfacb2a2986ea6643ff0b)

yq: Update to 4.27.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b736642d263038e0b596c620fa5102e7)

php8: update to 8.1.9

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 55e06d66fa960c127670644b2939f6294ee9e824)

Merge pull request #19117 from commodo/squashfs-tools-zstd-22.03

[22.03] squashfs-tools: enable zstd compression by default

python-paho-mqtt: add missing dependency

The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 52ae0a2018473964c5d631ba2c603065e0227858)

Merge pull request #19120 from autobakterie/libgpg-error_1-45_22-03

libgpg-error: update to 1.45

sslh: update to v1.22c
Change notes:
Updated Makefile package version and hash.
Added libpcre2 dependency
Removed USELIBPCRE make flag (no longer optional within sslh)
Updated patch 001 to work with new sslh Makefile

Signed-off-by: Martin Moreno <fett3270@yahoo.com>
(cherry picked from commit 9b90bb37ee1a6be8da60fb1d4142b7803006d991)

luajit: patch: PPC/e500 SPE: use soft float instead of failing

makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca5c185456cf5ac26e6f47c03ca426e9)

libgpg-error: update to 1.45

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd2081748dbb8d12dd8856e870f73a3108)

squashfs-tools: enable zstd compression by default

Requested via:
  https://github.com/openwrt/packages/issues/19111

PKG_RELEASE is set to AUTORELEASE, so no need to bump.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit f0d45ba3401df4559b17370a19f7800894365d6a)