unbound: fix `create_host_record_from_host` error when `dns` is not set

The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>

Merge pull request #22713 from zhaojh329/lua-eco

lua-eco: update to 3.1.0

Merge pull request #22625 from ecammit/python_requirements_for_homeassistant

Added python-fnv-hash-fast, python-lru-dict, and python-orjson

acme-acmesh: Update to 3.0.7

Signed-off-by: Kevin White <kwhite@kevbo.org>

lua-eco: update to 3.1.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

python-orjson: Added for v3.9.10

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

python-lru-dict: Added for v1.3.0

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

gl-puli-mcu: Add power monitoring for XE3000 (Puli AX) variant

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>

gl-puli-mcu: Fix compilation warning

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>

openvpn: update to 2.6.8

This is a bugfix release containing security fixes.

Security Fixes (included in 2.6.7):

CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly use a send buffer
after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer.
All configurations using TLS (e.g. not using --secret) are affected by this issue.

CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly restore --fragment configuration
in some circumstances, leading to a division by zero when --fragment is used.
On platforms where division by zero is fatal, this will cause an OpenVPN crash.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.8/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

Merge pull request #22701 from mhei/gensio-fix-python-detection

gensio: add patch to fix python detection

gensio: add patch to fix python detection

Upstream PR: https://github.com/cminyard/gensio/pull/69

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dnsproxy: Update to 0.59.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gummiboot: release bump

Changes:
 - fixes conflicts with EFI headers mentioned in issue #22433

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

netbird: update to version 0.24.2

Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.24.2

Also fixes issue of not being able to build with musl (>1.2.4)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

libzip: update to 1.10.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

hcxtools: update to 6.3.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

hcxdmptool: update to 6.3.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

elektra: fix compilation with GCC13

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snort3: fix compilation with gcc13

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liburing: Update to v2.5

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #22688 from mcha-forks/master

tailscale: Update to 1.54.0

Merge pull request #22244 from tiagogaspar8/strongswan_replay

strongswan: swanctl: add support for replay window

strongswan: swanctl: add support for replay window

Add support for replay window configuration in UCI.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>

tailscale: Update to 1.54.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

avahi: remove compat library

It seems this is meant for distributions that lack mdnsresponder. It's
heavier than it as dbus is required.

Since this happens to conflict with mdnsresponder, just remove it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shairplay: remove

This package is not only abandoned upstream, it has not worked with iOS
versions since at least 2019:

https://github.com/juhovh/shairplay/pull/80

Signed-off-by: Rosen Penev <rosenp@gmail.com>

upmpdcli: update to 1.8.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.24.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 5.1.1

Build with meson. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fuse3: update to 3.16.2

Add PKG_BUILD_DEPENDS to fix potential problems.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

docker-compose: Update to version 2.23.1

Signed-off-by: Javier Marcet <javier@marcet.info>

dhtd: update to 0.2.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

pulseaudio: disable compiling against libwrap and (bluez5-)gstreamer

problem: libwrap.so.0, libgstapp-1.0.so.0 and libgstreamer-1.0.so.0 not found during compilation of pulseaudio when e.g. libwrap was built before pulseaudio
Due to
https://github.com/pulseaudio/pulseaudio/commit/156e16f941789c5d53cdb0c46be480c64e3149f1
for libwrap.

Fixes: https://github.com/openwrt/packages/commit/aafc57c1ded5450419b9690056163acf3d19d51f (no sepearate issue generated)
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>

pps-tools: use %lld in printf for 64-bit time_t

musl 1.2.0 switched to use 64-bit time_t everywhere, including 32-bit
architectures, causing garbage values to be printed from ppswatch and
ppstest.

Use the correct format string for the affected printf statements and
explicitly cast to long long to avoid potential compatibility issues
with 32-bit glibc.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>

pdns-recursor: update to 4.9.2 and fix conffile path

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #22649 from mwarning/dhtd

dhtd: new package

python-fnv-hash-fast: Added for v0.5.0

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

python-fnvhash: Added for v0.1.0

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

Merge pull request #22646 from dynasticorpheus/fx

fx: add new package

fx: add new package

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

dhtd: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #22663 from mhei/gensio-fix-build-disable-udev

gensio: disable cm108gpio gensio and prevent using libudev

freeradius3: Fix build when pcre is present

If pcre is built before freeradius, then freeradius' configure will
detect pcre and freeradius will be built with pcre functionality
enabled. This causes a "missing dependencies" error at the end of
package build.

This passes --without-pcre to configure to disable this autodetection.

This also removes the dependency on libpcre2 as freeradius v3 does not
have support for pcre2.

Fixes: 19ec30255f13 ("freeradius3: switch to pcre2")
Fixes: https://github.com/openwrt/packages/issues/22574
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

pipx: Add new package

From the README:

pipx is a tool to help you install and run end-user applications written
in Python. It's roughly similar to macOS's brew, JavaScript's npx, and
Linux's apt.

It's closely related to pip. In fact, it uses pip, but is focused on
installing and managing Python packages that can be run from the command
line directly as applications.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-userpath: Add new package

The patches have been submitted upstream in
https://github.com/ofek/userpath/pull/52 and
https://github.com/ofek/userpath/pull/53.

From the README:

This is a tool for modifying a user's PATH.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-argcomplete: Add new package

From the README:

Argcomplete provides easy, extensible command line tab completion of
arguments for your Python application.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

crowdsec: new upstream release version 1.5.5

Update crowdsec to latest upstream release version 1.5.5

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested. not able to test run due to limited space (package is big)

Description: update to latest version of upstream

python-twisted: Update to 23.10.0, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.41.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-poetry-core: Update to 1.8.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Dysk: Add new package

Dysk is a command-line tool designed for efficient file and directory management in Unix-like environments

Signed-off-by: Facundo Acevedo <facevedo@disroot.org>

python-trove-classifiers: Update to 2023.11.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-mako: Update to 1.3.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-vcs: Update to 0.4.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #22659 from douglarek/sb

sing-box: update to v1.6.4

gensio: disable cm108gpio gensio and prevent using libudev

libudev seems to be required only for cm108gpio gensio
which is a relatively special one. Let's disable it
and also the libudev lookup, so that there is no need
to link/use libudev.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #22650 from jefferyto/golang-1.21.4

golang: Update to 1.21.4

sing-box: update to v1.6.4

see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.6.4

Signed-off-by: Leo Douglas <douglarek@gmail.com>

Merge pull request #22655 from stangri/master-adblock-fast

adblock-fast: bugfix: ensure downloaded block-lists end with newline

adblock-fast: bugfix: ensure downloaded block-lists end with newline

* ensure downloaded block-lists end with newline
* turn free/total RAM checks into functions calls

Signed-off-by: Stan Grishin <stangri@melmac.ca>

golang: Update to 1.21.4

Includes fixes for CVE-2023-45283 and CVE-2023-45284 (path/filepath:
insecure parsing of Windows paths).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #22644 from mhei/gensio-fix-build-disable-dnssd

gensio: prevent accidental use of dns_sd

unbound: update to 1.19.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

unbound: create extra host records from DHCP static leases

The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>

irqbalance: update to 1.9.3

Update irqbalance to version 1.9.3.
* remove upstreamed patch.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #22640 from mcha-forks/master

tailscale: Update to 1.52.1

Merge pull request #22643 from douglarek/sb

sing-box: update to v1.6.3

gensio: prevent accidental use of dns_sd

Buildbots spottet this error that when dns_sd library is
available, then gensio's configure will pick it up.
This is not desired since we already link to libavahi
for the mdns stuff, so let's disable dnssd lookup explicitly.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

sing-box: update to v1.6.3

see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.6.3

Signed-off-by: Leo Douglas <douglarek@gmail.com>

Merge pull request #22619 from stangri/master-adblock-fast

adblock-fast: update to 1.0.1-1

sstp-client: bump to 1.0.19

After 1.0.18, this project moved from SourceForge to gitlab

Also, since 1.0.19, the configure script is not present
by default anymore, so we need to add autoreconf to generate it

Release notes:
https://gitlab.com/sstp-project/sstp-client/-/releases

Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com>

tailscale: Update to 1.52.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

icu: bump to 74.1

ICU 74 updates to Unicode 15.1, including new characters, emoji, security mechanisms, and corresponding APIs and implementations. It also updates to CLDR 44 (blog) locale data with new locales and various additions and corrections.

ICU 74 and CLDR 44 are major releases, including a new version of Unicode and major locale data improvements. They subsume the changes for the ICU 73.2 and CLDR 43.1 maintenance releases.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #22634 from nmav/fix-22632

tang: set the right permissions to keys

tang: set the right permissions to keys

Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

tang: set the right maintainer

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

croc: update to 9.6.6

see changelog: https://github.com/schollz/croc/releases/tag/v9.6.6

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

lua-eco: update to 3.0.2

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

libdaq3: update to 3.0.13

Upstream bump

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

snort3: update to 3.1.74.0

Upstream bump

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.74.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.13
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.12 24 Oct 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.3
           Using Hyperscan version 5.4.2 2023-11-08

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

iperf3: Fix dependecy conflict with iperf3-ssl

When selecting both iperf3 and iperf3 ssl, there is a problem that
both packages install same binary file.
This patch fixes this issue by adding conflict between those packages.

Signed-off-by: Jakub Raczynski <myszsoda@gmail.com>

banip: update 0.9.2-2

* support backup/restore for remote allowlists
* report the used log variant in status message

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #22623 from jow-/nano-ucode-syntax-highlighting

nano: add syntax highlighting for ucode scripts

nano: add syntax highlighting for ucode scripts

Introduce local syntax highlighting support for ucode scripts, like
it is done already for uci configuration files.

Ref: https://github.com/jow-/ucode/issues/178
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

adblock-fast: update to 1.0.1-1

* update Makefile copyright info
* organize functions shared between the init script, uci-defaults and
  luci app in alphabetical order
* update error, warning and status messaging
* use single quotes instead double quotes for static text labels
* better warning for missing recommended packages
* rename dns function to resolver to better reflect its purpose
* improve resolver cleanup code
* move _resolver_config function inside resolver function to improve code readlibity
* rename _process_file_url to process_file_url_wrapper to better reflect its purpose
* add preflight check for available RAM vs total size of block lists
* move _config_add_url_size function inside adb_sizes function to improve code readlibity
* remove uci validation from status_service function to improve performance
* source init script from uci-defaults to include shared functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>

CI: Update sdk action, always upload artifacts

The updated version of gh-action-sdk will return compiled packages and
build logs for both build success and build errors.

This ensures these artifacts are always uploaded. This also sets the V
environment variable to enable verbose build output.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

quassel-irssi: fix compilation error with new version of irssi

Add patch fixing compilation error with new version of irssi where the
renamed some functions.

Fixes: #22384
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

v2raya: Update to 2.2.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #22577 from SuperSandro2000/udp-broadcast-relay-redux-multicast

udp-broadcast-relay-redux-openwrt: add multicast config option

pptpd: use boolean options

Use boolean options and fix the relevant init error.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>

micropython-lib: Update to latest version, remove patch

Remove 004-unix-ffi-re-convert-to-PCRE2.patch as it has been merged in
this version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

tinc: fetch ed25519 public keys from uci

Fetch Ed25519 public keys from UCI host sections.
Update options and syntax to current version.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>

v2ray-core: Update to 5.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21409 from morganchristiansson/ser2net

This major update not only updates the ser2net daemon version,
but also migrates the UCI configuration handling to the newer
YAML configuration file format.

If you only configured ser2net using UCI, then there should
be no noticable difference and your configuration should
still work as before.

If you modified /etc/ser2net.conf before, or used custom adaptions
etc., then you must migrate to newer /etc/ser2net.yaml on your
own and/or double-check your installation - there is no automatic
migration logic during package upgrade path.

nmap: backport fix to be able to compile it with OpenSSL 1.1

The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] https://github.com/nmap/nmap/commit/d6bea8dcdee36a3902cece14097993350306f1b6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ser2net: update to 4.5.0 (closes #21409)

This major update not only updates the ser2net daemon version,
but also migrates the UCI configuration handling to the newer
YAML configuration file format.

If you only configured ser2net using UCI, then there should
be no noticable difference and your configuration should
still work as before.

If you modified /etc/ser2net.conf before, or used custom adaptions
etc., then you must migrate to newer /etc/ser2net.yaml on your
own and/or double-check your installation - there is no automatic
migration logic during package upgrade path.

Signed-off-by: Morgan Christiansson <git@mog.se>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #22545 from mhei/gensio-update-to-2.7.6

gensio: update to 2.7.6

Merge pull request #22596 from muink/dnsproxy-main

dnsproxy: add more options

banip: release 0.9.2-1

* the log file monitor now supports standard log files used by other log daemons like syslog-ng
  Set 'ban_logreadfile' accordingly, by default it points to /var/log/messages
* removed logd dependency, closes #21932

Signed-off-by: Dirk Brenken <dev@brenken.org>