feed/packages.git
18 months ago banip: release 0.8.5-1
Dirk Brenken [Sat, 6 May 2023 20:41:56 +0000 (22:41 +0200)]
 banip: release 0.8.5-1

* add support for external allowlist URLs to reference additional IPv4/IPv6 feeds, set 'ban_allowurl' accordingly
* make download retries in case of an error configurable, set 'ban_fetchretry' accordingly (default 5)
* small fixes
* readme update
* LuCI update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
18 months agolibxml2: remove - moved to OpenWrt main repo
Hannu Nyman [Sat, 6 May 2023 08:48:26 +0000 (11:48 +0300)]
libxml2: remove - moved to OpenWrt main repo

Remove libxml2 that was moved into the main OpenWrt repo.
Commit in OpenWrt: 9b0b46985c112c664354dc745d8cfb313166744b

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
18 months agogperf: remove - moved to OpenWrt main repo
Hannu Nyman [Sat, 6 May 2023 08:46:49 +0000 (11:46 +0300)]
gperf: remove - moved to OpenWrt main repo

Remove gperf that was moved into the main OpenWrt repo.
Commit in OpenWrt: 2070a2ca27bdb2b1e4e1587274e192e42f247516

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
18 months agonginx: fix compilation error for nginx-full 20934/head
Christian Marangi [Fri, 5 May 2023 12:29:16 +0000 (14:29 +0200)]
nginx: fix compilation error for nginx-full

Fix compilation error for stream module not converted to use the PACKAGE
config flag and a missing required dependency for the DAV ext module.

Drop additional config for STREAM module since they are now included and
built by default.

Fixes: 65a676ed56fb ("nginx: introduce support for dynamic modules")
Fixes: #20906
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agoMerge pull request #20925 from jefferyto/python-hatchling-1.14.1
Tianling Shen [Sat, 6 May 2023 12:28:23 +0000 (20:28 +0800)]
Merge pull request #20925 from jefferyto/python-hatchling-1.14.1

python-hatchling: Update to 1.14.1

18 months agortl_433: update to 22.11
Robert Högberg [Thu, 4 May 2023 07:25:57 +0000 (09:25 +0200)]
rtl_433: update to 22.11

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
18 months agouwsgi: make LuCI work
Glen Huang [Thu, 4 May 2023 09:27:52 +0000 (17:27 +0800)]
uwsgi: make LuCI work

LuCI is no longer powered by lua, but ucode

Signed-off-by: Glen Huang <me@glenhuang.com>
18 months agoMerge pull request #20912 from stangri/master-pbr
Stan Grishin [Fri, 5 May 2023 01:41:14 +0000 (19:41 -0600)]
Merge pull request #20912 from stangri/master-pbr

pbr: update to 1.1.1-1

18 months ago banip: update 0.8.4-5
Dirk Brenken [Thu, 4 May 2023 20:40:48 +0000 (22:40 +0200)]
 banip: update 0.8.4-5

* fix remaining small issues
* standardize log wording
* polished up for branch 23.x

Signed-off-by: Dirk Brenken <dev@brenken.org>
18 months ago banip: update 0.8.4-4
Dirk Brenken [Thu, 4 May 2023 10:07:09 +0000 (12:07 +0200)]
 banip: update 0.8.4-4

* add housekeeping to the autoallow function, only the current uplink will be held
* fix small issues
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
18 months agomwan3: bump PKG_VERSION to 2.11.6
Anna Tikhomirova [Wed, 3 May 2023 07:32:22 +0000 (10:32 +0300)]
mwan3: bump PKG_VERSION to 2.11.6

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
18 months agomwan3: fix addition of routes to mwan3_connected ipset
Anna Tikhomirova [Fri, 28 Apr 2023 20:12:37 +0000 (23:12 +0300)]
mwan3: fix addition of routes to mwan3_connected ipset

Addition of routes to mwan3_connected ipset is broken. The ipset name was
changed from mwan3_connected_v4/6 to mwan3_connected_ipv4/6, but this
change was not reflected in mwan3rtmon.

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* Update commit message
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
18 months agomwan3: bump PKG_VERSION to 2.11.5
Anna Tikhomirova [Wed, 3 May 2023 06:40:34 +0000 (09:40 +0300)]
mwan3: bump PKG_VERSION to 2.11.5

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
18 months agomwan3: fix addition of iptables rules for mwan3 sticky rules
Anna Tikhomirova [Fri, 28 Apr 2023 20:33:39 +0000 (23:33 +0300)]
mwan3: fix addition of iptables rules for mwan3 sticky rules

Addition of iptables rules for mwan3 sticky rules is broken, resulting
in non-working sticky rules. The required parameters for the function
'mwan3_set_sticky_iptables' were passed in the wrong order.

Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* Update commit message
* Quoting function arguments
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
18 months agopython-hatchling: Update to 1.14.1 20925/head
Jeffery To [Thu, 4 May 2023 06:10:43 +0000 (14:10 +0800)]
python-hatchling: Update to 1.14.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
18 months agotailscale: update to 1.40.0
Zephyr Lykos [Tue, 2 May 2023 10:14:54 +0000 (18:14 +0800)]
tailscale: update to 1.40.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
18 months ago banip: update 0.8.4-3
Dirk Brenken [Tue, 2 May 2023 19:41:37 +0000 (21:41 +0200)]
 banip: update 0.8.4-3

* add the option 'ban_autoallowuplink' to limit the uplink autoallow function: 'subnet' (default), 'ip' or 'disable'

Signed-off-by: Dirk Brenken <dev@brenken.org>
18 months agosqlite3: Update to 3.41.2
Tianling Shen [Tue, 2 May 2023 13:40:18 +0000 (21:40 +0800)]
sqlite3: Update to 3.41.2

Fixes: CVE-2021-20227
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
18 months agoMerge pull request #20768 from stangri/master-simple-adblock
Stan Grishin [Tue, 2 May 2023 01:35:55 +0000 (19:35 -0600)]
Merge pull request #20768 from stangri/master-simple-adblock

simple-adblock: implement curl_additional_param compressed_cache_dir

18 months agosing-box: update to 1.2.6
Van Waholtz [Mon, 1 May 2023 11:04:24 +0000 (19:04 +0800)]
sing-box: update to 1.2.6

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
18 months agoCI: Enable runtime_test for mips_24kc
Van Waholtz [Mon, 1 May 2023 11:04:24 +0000 (19:04 +0800)]
CI: Enable runtime_test for mips_24kc

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
18 months agosedutil: Add new package
Javier Marcet [Wed, 8 Feb 2023 13:40:10 +0000 (14:40 +0100)]
sedutil: Add new package

The Drive Trust Alliance Self Encrypting Drive Utility

Signed-off-by: Javier Marcet <javier@marcet.info>
18 months agocache-domains: added pre-test.sh CI step
Gerard Ryan [Sat, 29 Apr 2023 06:25:49 +0000 (16:25 +1000)]
cache-domains: added pre-test.sh CI step

Some packages variants have conflicting dependencies with the
base packages and the CI test will fail to install before anything
can be done by the packages to setup the system for install.

This change adds a pre-test.sh that runs before the install so things
like the default libustream variant can be swapped out as shown in the
updated cache-domains.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
18 months agokea: procd_close_instance doesn't take a parameter
Philip Prindeville [Thu, 20 Apr 2023 00:32:54 +0000 (18:32 -0600)]
kea: procd_close_instance doesn't take a parameter

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
18 months agokea: Update to 2.2.0
Philip Prindeville [Wed, 19 Apr 2023 00:21:29 +0000 (18:21 -0600)]
kea: Update to 2.2.0

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
18 months agogetdns: fix compilation with OPENSSL_NO_DEPRECATED
Andre Heider [Tue, 21 Feb 2023 14:54:16 +0000 (15:54 +0100)]
getdns: fix compilation with OPENSSL_NO_DEPRECATED

SSL_get_peer_certificate() is deprecated, OpenSSL v3.0 added
SSL_get0_peer_certificate() and SSL_get1_peer_certificate().

Use the latter since the return value is explicitely X509_free()ed
here, see [0].

[0] https://www.openssl.org/docs/manmaster/man3/SSL_get_peer_certificate.html

Signed-off-by: Andre Heider <a.heider@gmail.com>
18 months agopython-hatchling: Update to 1.14.0
Jeffery To [Fri, 14 Apr 2023 08:09:36 +0000 (16:09 +0800)]
python-hatchling: Update to 1.14.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
18 months agopython-trove-classifiers: Add new host-only package
Jeffery To [Fri, 14 Apr 2023 08:03:02 +0000 (16:03 +0800)]
python-trove-classifiers: Add new host-only package

From the README:

Canonical source for classifiers on PyPI.

Classifiers categorize projects per PEP 301. Use this package to
validate classifiers in packages for PyPI upload or download.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
18 months agopython-calver: Add new host-only package
Jeffery To [Fri, 14 Apr 2023 07:57:46 +0000 (15:57 +0800)]
python-calver: Add new host-only package

From the README:

The calver package is a setuptools extension for automatically defining
your Python package version as a calendar version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
18 months agoopenssh: add respawn and reloading via signal
Erik Karlsson [Wed, 12 Apr 2023 16:09:07 +0000 (18:09 +0200)]
openssh: add respawn and reloading via signal

Configure the openssh server to respawn. Reload by sending SIGHUP

Signed-off-by: Erik Karlsson <erik.karlsson@genexis.eu>
18 months agozoneinfo: adjust to current timezone data file structure
Hannu Nyman [Sun, 30 Apr 2023 07:50:56 +0000 (10:50 +0300)]
zoneinfo: adjust to current timezone data file structure

Tweak the package to better match the current file structure in the
upstream time zone database. Add missing aliases. Make some clarifications

* Combine -northmerica and -southamerica into -america, as all
  current official America/xxx definitions were already in -northamerica
  and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were
  in -southamerica. (Confusingly America/Sao_Paulo was in northamerica,
  while Brazil was in southamerica.)
  * Add PROVIDES for the old package names

* Add missing top-level dir country/nation alias links.
* Define Eire in -europe instead of -core.

* Rename -india to -indian, as it contains the Indian ocean islands
  instead of the actual Asia/Kolkata zone for the mainland India.
  * Add PROVIDES for the old package name

* Add 'Ocean' to all ocean zone titles.

* Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab,
  the UTC based definitions and the still existing short zone codes are
  always available.

* Clarify menuconfig menu as "Time Zone info"

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
18 months agolighttpd: build fixes
Glenn Strauss [Sun, 30 Apr 2023 08:11:01 +0000 (04:11 -0400)]
lighttpd: build fixes

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
18 months agopbr: update to 1.1.1-1 20912/head
Stan Grishin [Mon, 1 May 2023 00:44:34 +0000 (00:44 +0000)]
pbr: update to 1.1.1-1

*** MAKEFILE ***
* remove libubus dependency as it was causing issues
  https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318
* move firewall hotplug directory/file creation out of default section into
  pbr and pbr-iptables packages sections in preparation for dropping it from pbr
* fix no new line after output when uninstalling packages

*** UCI-DEFAULTS ***
* only add firewall include to firewall config if the include file exists
* add shellcheck exception to netifd uci-defaults file

*** SCRIPTS ***
* more informative logging for firewall and iface hotplug scripts
* more informative logging for firewall include script

*** SERVICE ***
* introduce lock-file to prevent package starting on external events if it hasn't
  been auto- or manually started before
* use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02
* parse firewall WAN zone to append list of interfaces
* append error and warning "arrays" with new messages
* used shared memory to store the service output/logging messages
* improve is_ovpn function to filter out false positives when interface names started
  with `tun`
* introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config
  matches the device name in network config
* introduce opkg_get_version to compare versions of principal and luci packages
* better code to obtain AdGuardHome version with betas installed
* optimize code and add better logging for errors when inserting policies with iptables
* optimize code and add better logging for errors when inserting policies with nft
* bugfix: insert policies in all specified protocols
* bugfix: support using physical devices in policies in nft mode
* bugfix: use iptPrefix, not nftPrefix in iptables commands
* implement Tor support in nft mode
* bugfix: fix spelling for User File Syntax error
* restart service fully (instead of quick reload) for OpenVPN interface events, as
  the order/number of supported interfaces
* more verbose output (showing handles) of status in nft mode
* improve `icmp_interface`, `ignored_interface`, `supported_interface` validation
  regexes
* improve `interface`, validation regex

Signed-off-by: Stan Grishin <stangri@melmac.ca>
18 months agosamba4: decouple quotas from vfs option
Javier Marcet [Sun, 23 Apr 2023 13:25:36 +0000 (15:25 +0200)]
samba4: decouple quotas from vfs option

Signed-off-by: Javier Marcet <javier@marcet.info>
18 months agopython-eventlet: bump to version 0.33.3
Stepan Henek [Thu, 27 Apr 2023 13:02:18 +0000 (15:02 +0200)]
python-eventlet: bump to version 0.33.3

old eventlet is not working well with python3.10

```
root@turris:~# python3
Python 3.10.9 (main, Feb  9 2023, 10:37:45) [GCC 11.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import eventlet
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout
TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError'
```

see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
18 months agorestic: update to 0.15.2
Tom Stöveken [Thu, 27 Apr 2023 16:33:41 +0000 (18:33 +0200)]
restic: update to 0.15.2

Maintainer: Tom Stöveken <tom@naaa.de>
Compile tested: SDK for OpenWrt 22.03.4
Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.4

Description:
Updated to version 0.15.2

Signed-off-by: Tom Stöveken <tom@naaa.de>
18 months agobanip: update 0.8.4-2
Dirk Brenken [Fri, 28 Apr 2023 10:07:06 +0000 (12:07 +0200)]
banip: update 0.8.4-2

* fix domain lookup function (parse banIP config vars)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
18 months agolibreswan: update to 4.10
Nick Hainke [Tue, 25 Apr 2023 21:37:11 +0000 (23:37 +0200)]
libreswan: update to 4.10

Release Notes:
https://github.com/libreswan/libreswan/releases/tag/v4.10

Fixes: CVE-2023-23009
Signed-off-by: Nick Hainke <vincent@systemli.org>
18 months agonginx: rename nginx-all-module to nginx-full 16842/head
Christian Marangi [Thu, 20 Apr 2023 19:11:11 +0000 (21:11 +0200)]
nginx: rename nginx-all-module to nginx-full

Rename nginx-all-module to nginx-full to follow pattern used by other
package and other projects.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agonginx: update to 1.24.0 and update headers-more module
Christian Marangi [Thu, 20 Apr 2023 12:17:20 +0000 (14:17 +0200)]
nginx: update to 1.24.0 and update headers-more module

Update nginx to 1.24.0 and update headers-more module to fix compilation
error.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agonginx: update lua module to latest openresty version
Christian Marangi [Thu, 20 Apr 2023 11:50:21 +0000 (13:50 +0200)]
nginx: update lua module to latest openresty version

Update lua module to latest openrestry version. Additional config are
required to correctly use it.

Switch it to luajit from liblua as this is what is currently supported
for the module since plain lua support was dropped from the module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agonginx: introduce support for dynamic modules
Christian Marangi [Fri, 8 Oct 2021 23:18:41 +0000 (01:18 +0200)]
nginx: introduce support for dynamic modules

Start building sub package that provide dynamic modules.

Each module needs to be loaded using load_modules.
Refer to nginx documentation on how to use this.

This should result in lower memory usage as only used module are loaded.

Also fix the uci-default scripts to add the required ubus module for
luci module.

-fvisibility=hidden is needed to be dropped to correctly support loading
dynamic modules.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agonginx-util: add support for loading dynamic module in uci template
Christian Marangi [Thu, 20 Apr 2023 10:59:08 +0000 (12:59 +0200)]
nginx-util: add support for loading dynamic module in uci template

Add support for loading dynamic module in uci template by adding .module
file in module.d directory.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
18 months agoacme: remove redundant postinst
Glen Huang [Wed, 26 Apr 2023 11:46:46 +0000 (19:46 +0800)]
acme: remove redundant postinst

opkg runs uci-defaults if a package installs one, in acme-common's case
that's identical to postinst.

prerm shouldn't be run a image builder, so it's unnecessary to check
IPKG_INSTROOT

Signed-off-by: Glen Huang <me@glenhuang.com>
18 months agoiperf3: update to 3.13
Nick Hainke [Wed, 26 Apr 2023 06:21:25 +0000 (08:21 +0200)]
iperf3: update to 3.13

Release Notes:
https://software.es.net/iperf/news.html#iperf-3-13-released

Signed-off-by: Nick Hainke <vincent@systemli.org>
18 months agopcre2: only build static library for host
Tianling Shen [Wed, 26 Apr 2023 00:00:10 +0000 (08:00 +0800)]
pcre2: only build static library for host

Fix potential linking issue:
```
/mnt/snapshot/staging_dir/hostpkg/bin/swig: error while loading shared
  libraries: libpcre2-8.so.0: cannot open shared object file:
    No such file or directory

error: command '/mnt/snapshot/staging_dir/hostpkg/bin/swig' failed with
  exit code 127
```

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
18 months agolibrespeed-go: update file permissions for ujail
Tianling Shen [Wed, 26 Apr 2023 03:35:19 +0000 (11:35 +0800)]
librespeed-go: update file permissions for ujail

This fixes "permission denied" error when access files as a normal user.

Reported-by: Anya Lin <hukk1996@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
18 months agoiperf: update to 2.1.9
Nick Hainke [Wed, 26 Apr 2023 06:10:38 +0000 (08:10 +0200)]
iperf: update to 2.1.9

Changelog can be found here:
https://sourceforge.net/projects/iperf2/files/

Signed-off-by: Nick Hainke <vincent@systemli.org>
18 months agogzip: update to 1.12
Nick Hainke [Tue, 25 Apr 2023 21:30:11 +0000 (23:30 +0200)]
gzip: update to 1.12

Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2022-04/msg00003.html

Fixes: CVE-2022-1271
Signed-off-by: Nick Hainke <vincent@systemli.org>
18 months agokmod: update to 30
Nick Hainke [Thu, 6 Apr 2023 06:23:52 +0000 (08:23 +0200)]
kmod: update to 30

Release Notes:
- https://github.com/kmod-project/kmod/releases/tag/v28
- https://github.com/kmod-project/kmod/releases/tag/v29
- https://github.com/kmod-project/kmod/releases/tag/v30

Signed-off-by: Nick Hainke <vincent@systemli.org>
19 months agoyaml: only build static library
Luiz Angelo Daros de Luca [Tue, 25 Apr 2023 16:48:22 +0000 (13:48 -0300)]
yaml: only build static library

Do not build shared libraries to avoid host programs to dynamic link
libraries at non-standard paths.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
19 months agoruby: statically link extensions into host ruby
Luiz Angelo Daros de Luca [Mon, 24 Apr 2023 20:06:13 +0000 (17:06 -0300)]
ruby: statically link extensions into host ruby

Ruby uses extensions (.so files) that might also depend on other
libraries. When the linker builds an executable, it will refer to the
path it found the library, including those in the stagging dir. However,
when it links a shared library (like ruby exts), it will let that
dependency to be resolved at runtime.

During host and target build, ruby build script runs ruby scripts. When
it loads a ext that depends on another library, it will, by default,
look for the system libraries to satisfy that, breaking the build when
it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid
workaround.

Ruby can also be built statically linking all exts into ruby executable.
That will make the linker point to the stagging library path, fixing the
issue. It was used in the past but, at some point, ruby broke it. Now it
is working as expected.

Closes #20839

While at it, clean up excluded extensions not used by host ruby.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
19 months agopython: Update find stdlib script
Jeffery To [Tue, 18 Apr 2023 09:18:06 +0000 (17:18 +0800)]
python: Update find stdlib script

This updates the python3-find-stdlib-depends.sh script for these
changes:

* The gdbm (dbm.gnu) package was merged into the dbm package in
  78f6c2c5ad2fd3de8a33a1cddb02204177cf60ad.

* The uuid module was split into a separate package in
  4e05541782edeb06b51d691dadf52648df24c940.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agopython-idna: Update to 3.4
Jeffery To [Mon, 17 Apr 2023 12:46:40 +0000 (20:46 +0800)]
python-idna: Update to 3.4

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agopython-zope-interface: Update to 6.0, refresh patch
Jeffery To [Mon, 17 Apr 2023 09:00:16 +0000 (17:00 +0800)]
python-zope-interface: Update to 6.0, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agopython-pyasn1: Update to 0.5.0
Jeffery To [Mon, 24 Apr 2023 06:10:19 +0000 (14:10 +0800)]
python-pyasn1: Update to 0.5.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agoopenssh: preserve authorized_keys
Glen Huang [Thu, 13 Apr 2023 09:55:02 +0000 (17:55 +0800)]
openssh: preserve authorized_keys

The root user is usually the user that clients ssh into with, so in most
cases its authorized_keys determines what clients are allowed to ssh
into this device. Without preserving this file, they could potentially
be locked out after upgrading.

Signed-off-by: Glen Huang <me@glenhuang.com>
19 months agoMerge pull request #20836 from hgl/strongswan-deps
Philip Prindeville [Mon, 24 Apr 2023 17:49:52 +0000 (11:49 -0600)]
Merge pull request #20836 from hgl/strongswan-deps

strongswan: add missing PKG_MOD_AVAILABLE

19 months agostrongswan: add missing PKG_MOD_AVAILABLE 20836/head
Glen Huang [Tue, 18 Apr 2023 13:11:37 +0000 (21:11 +0800)]
strongswan: add missing PKG_MOD_AVAILABLE

Without these charon will warn with messages like:

plugin 'kdf': failed to load - kdf_plugin_create not found and no plugin file available
plugin 'drbg': failed to load - drbg_plugin_create not found and no plugin file available

Signed-off-by: Glen Huang <me@glenhuang.com>
19 months agoMerge pull request #20832 from hgl/strongswan
Philip Prindeville [Mon, 24 Apr 2023 14:34:55 +0000 (08:34 -0600)]
Merge pull request #20832 from hgl/strongswan

strongswan: enable nonce unconditionally

19 months agostrongswan: enable nonce unconditionally 20832/head
Glen Huang [Tue, 18 Apr 2023 09:59:46 +0000 (17:59 +0800)]
strongswan: enable nonce unconditionally

Without nonce, charon won't start, so it's not an optional plugin. I
asked one of the strongSwan maintainers (ecdsa), and he confirmed this:

> It definitely has to be enabled unconditionally. The only other
> provider for the NONCE_GEN plugin feature is in charon-tkm, so
> completely irrelevant on OpenWrt

Signed-off-by: Glen Huang <me@glenhuang.com>
19 months agosnort3: update to 3.1.60.0
John Audia [Sat, 22 Apr 2023 12:05:57 +0000 (08:05 -0400)]
snort3: update to 3.1.60.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
19 months agobanip: release 0.8.4-1
Dirk Brenken [Sun, 23 Apr 2023 20:03:09 +0000 (22:03 +0200)]
banip: release 0.8.4-1

* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
19 months agoqemu: add zstd option
Vladimir Ermakov [Thu, 20 Apr 2023 12:26:50 +0000 (14:26 +0200)]
qemu: add zstd option

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
19 months agoqemu: update to 8.0.0
Vladimir Ermakov [Thu, 20 Apr 2023 10:23:19 +0000 (12:23 +0200)]
qemu: update to 8.0.0

- Update version to 8.0.0
- Refresh patches
- Update configure opttions to disable libdw

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
19 months agoksmbd-tools: update to 3.4.8 release
Andrew Sim [Sun, 23 Apr 2023 05:15:45 +0000 (07:15 +0200)]
ksmbd-tools: update to 3.4.8 release

Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8

Maintainer: nobody
Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master
Run tested: Mediatek filogic, Asus TUF AX4200, lastest master

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
19 months agoshadowsocks-libev: ACL support
Kirill Fertikov [Fri, 21 Apr 2023 19:48:21 +0000 (00:48 +0500)]
shadowsocks-libev: ACL support

Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
19 months agoMerge pull request #20857 from pprindeville/strongswan-drop-local_gateway
Philip Prindeville [Sun, 23 Apr 2023 04:58:28 +0000 (22:58 -0600)]
Merge pull request #20857 from pprindeville/strongswan-drop-local_gateway

strongswan: local_gateway unused in swanctl.init

19 months agostrongswan: local_gateway unused in swanctl.init 20857/head
Philip Prindeville [Fri, 21 Apr 2023 18:02:28 +0000 (12:02 -0600)]
strongswan: local_gateway unused in swanctl.init

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
19 months agodocker-compose: Update to version 2.17.3
Javier Marcet [Sat, 22 Apr 2023 08:46:19 +0000 (10:46 +0200)]
docker-compose: Update to version 2.17.3

Signed-off-by: Javier Marcet <javier@marcet.info>
19 months agoMerge pull request #20845 from jefferyto/ci-local-feed
Tianling Shen [Fri, 21 Apr 2023 23:36:39 +0000 (07:36 +0800)]
Merge pull request #20845 from jefferyto/ci-local-feed

CI: Add local feed for CI-built packages

19 months agotreewide: remove AUTORELEASE
Paul Fertser [Fri, 21 Apr 2023 16:32:27 +0000 (16:32 +0000)]
treewide: remove AUTORELEASE

Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
19 months agoicu: bump to 73.1
Hirokazu MORIKAWA [Sat, 15 Apr 2023 12:56:03 +0000 (21:56 +0900)]
icu: bump to 73.1

Description:
It updates to CLDR 43 locale data with various additions and corrections.
ICU 73 improves Japanese and Korean short-text line breaking, reduces C++ memory use in date formatting, and promotes the Java person name formatter from tech preview to draft.
ICU 73 and CLDR 43 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15.1 which is planned for September.)
ICU 73 updates to the time zone data version 2023c (2023-mar). Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
19 months agorust: update to 1.69.0
Luca Barbato [Thu, 20 Apr 2023 18:52:32 +0000 (18:52 +0000)]
rust: update to 1.69.0

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
19 months agonginx: split DAV_EXT from standard nginx DAV config 20851/head
Christian Marangi [Thu, 20 Apr 2023 05:43:53 +0000 (07:43 +0200)]
nginx: split DAV_EXT from standard nginx DAV config

Split DAV_EXT from standard nginx DAV config as additional WebDAV
methods are provided by an external module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
19 months agoMerge pull request #20846 from johnfzc/sscep-license
Florian Eckert [Thu, 20 Apr 2023 06:16:34 +0000 (08:16 +0200)]
Merge pull request #20846 from johnfzc/sscep-license

scep: fix license

19 months agopdns-recursor: update to 4.8.4
Peter van Dijk [Wed, 29 Mar 2023 13:09:20 +0000 (15:09 +0200)]
pdns-recursor: update to 4.8.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
19 months agopdns: update to 4.7.4
Peter van Dijk [Mon, 17 Apr 2023 08:24:04 +0000 (10:24 +0200)]
pdns: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
19 months agoMerge pull request #20824 from jefferyto/newt-0.52.23
Josef Schlehofer [Wed, 19 Apr 2023 15:55:05 +0000 (17:55 +0200)]
Merge pull request #20824 from jefferyto/newt-0.52.23

newt: Update to 0.52.23

19 months agoscep: fix license 20846/head
John Marrett [Wed, 19 Apr 2023 12:52:04 +0000 (08:52 -0400)]
scep: fix license

Signed-off-by: John Marrett <johnf@zioncluster.ca>
19 months agoCI: Add local feed for CI-built packages 20845/head
Jeffery To [Wed, 22 Mar 2023 07:46:13 +0000 (15:46 +0800)]
CI: Add local feed for CI-built packages

To test each package, the CI-built target package (ipk) file is
installed, but currently the target package's dependencies are installed
from the standard opkg feeds.

There are cases when the CI-built target packages should be
installed/tested together:

* If a pull request contains several new packages that depend on each
  other, the test step will fail as the new dependencies cannot be found
  in the current packages feed.

* If a pull request upgrades a source package that builds several target
  packages that depend on each other, the test step may fail due to the
  version/ABI mismatch between a newer target package and the older
  dependencies installed from the packages feed.

This sets up a local feed for the CI-built packages so that dependencies
are also installed from the same set of packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agolighttpd: adjust packages for built-in modules
Glenn Strauss [Wed, 12 Apr 2023 17:15:49 +0000 (13:15 -0400)]
lighttpd: adjust packages for built-in modules

(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
19 months agolighttpd: fix package DEPENDS syntax
Glenn Strauss [Fri, 14 Apr 2023 19:19:36 +0000 (15:19 -0400)]
lighttpd: fix package DEPENDS syntax

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
19 months agoxray-core: Update to 1.8.1
Tianling Shen [Tue, 18 Apr 2023 20:12:30 +0000 (04:12 +0800)]
xray-core: Update to 1.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
19 months agodnsproxy: Update to 0.49.1
Tianling Shen [Tue, 18 Apr 2023 20:11:52 +0000 (04:11 +0800)]
dnsproxy: Update to 0.49.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
19 months agoMerge pull request #20826 from jefferyto/obfs4proxy-0.0.14
Josef Schlehofer [Tue, 18 Apr 2023 14:51:55 +0000 (16:51 +0200)]
Merge pull request #20826 from jefferyto/obfs4proxy-0.0.14

obfs4proxy: Update to 0.0.14

19 months agoMerge pull request #20827 from jefferyto/slang2-2.3.3
Josef Schlehofer [Tue, 18 Apr 2023 14:39:32 +0000 (16:39 +0200)]
Merge pull request #20827 from jefferyto/slang2-2.3.3

slang2: Update to 2.3.3, refresh patches

19 months agodnsdist: update to 1.8.0
Peter van Dijk [Thu, 30 Mar 2023 14:41:34 +0000 (16:41 +0200)]
dnsdist: update to 1.8.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
19 months agoknxd: bump to new upstream release 0.14.58
Othmar Truniger [Mon, 17 Apr 2023 16:08:57 +0000 (18:08 +0200)]
knxd: bump to new upstream release 0.14.58

Signed-off-by: Othmar Truniger <github@truniger.ch>
19 months agoznc: add push external module 20716/head
Christian Marangi [Sat, 25 Mar 2023 06:46:40 +0000 (07:46 +0100)]
znc: add push external module

Add push external module. This is very useful for an IRC Bounder as this
module permits to register various services and receive a push
notification on the registered service.

One example is attaching a telegram bot and receive notification on your
phone when an user tags you in one of the connected channels.

Bump and drop AUTORELEASE from PKG_RELEASE since we are adding a new
module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
19 months agoznc: drop playback patch and reference from github repository
Christian Marangi [Sat, 25 Mar 2023 06:43:36 +0000 (07:43 +0100)]
znc: drop playback patch and reference from github repository

We currently inclde the playback external module with a separate patch.
This is ugly and can be better handled.

Add required changes to download the external module from his own github
repository. Then create a link in the znc modules to reference the cpp
source.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
19 months agov2ray-core: Update to 5.4.1
Tianling Shen [Mon, 17 Apr 2023 15:27:11 +0000 (23:27 +0800)]
v2ray-core: Update to 5.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
19 months agoslang2: Update to 2.3.3, refresh patches 20827/head
Jeffery To [Mon, 17 Apr 2023 14:24:32 +0000 (22:24 +0800)]
slang2: Update to 2.3.3, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agoobfs4proxy: Update to 0.0.14 20826/head
Jeffery To [Mon, 17 Apr 2023 14:05:51 +0000 (22:05 +0800)]
obfs4proxy: Update to 0.0.14

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agoboost: Updates package to version 1.82.0
Carlos Miguel Ferreira [Mon, 17 Apr 2023 11:45:57 +0000 (12:45 +0100)]
boost: Updates package to version 1.82.0

This commit updates boost to version 1.82.0

A new header-only library is available:
- MySql: a C++11 client for the MySQL database server, based on
Boost.Asio, from Ruben Perez. [1]

More info about Boost 1.82.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_82_0/libs/mysql/doc/html/index.html
[2]: https://www.boost.org/users/history/version_1_82_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
19 months agonewt: Update to 0.52.23 20824/head
Jeffery To [Mon, 17 Apr 2023 11:59:42 +0000 (19:59 +0800)]
newt: Update to 0.52.23

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 months agonmap: refresh patch
Nuno Gonçalves [Mon, 17 Apr 2023 08:48:59 +0000 (09:48 +0100)]
nmap: refresh patch

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
19 months agophp8: update to 8.2.5
Michael Heimpold [Sat, 15 Apr 2023 13:56:23 +0000 (15:56 +0200)]
php8: update to 8.2.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
19 months agonmap: update license
Nuno Gonçalves [Sat, 15 Apr 2023 22:54:20 +0000 (23:54 +0100)]
nmap: update license

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
19 months agonmap: bump to 7.93
Nuno Gonçalves [Sat, 15 Apr 2023 22:30:30 +0000 (23:30 +0100)]
nmap: bump to 7.93

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>