python-exceptiongroup: bump to 1.1.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f04af1261cc3951305e7a2cb2acf0e596a8ce488)

borgbackup: bump to 1.2.3

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 5dffc0af0e8f7b8e609c309985ea23e95ed46fef)

snowflake: update to 2.4.2

Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5435ddb8f8f626997202b96d0cc1306c2da03a75)

miredo: add miredo.conf conffile

Keep miredo.conf modified configuration upon upgrades

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit 95acb627f4b6853cd8fa0329f127d52118013e65)

Merge pull request #20318 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update sed for allowing domains

Merge pull request #20336 from stangri/openwrt-22.03-pbr

[22.03] pbr: update to 1.0.1-14

pbr: update to 1.0.1-14

* improve install/uninstall messages
* fix ips add command
* add boot() to init file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f4f899f6f992db1e92f02881649e1580958dae18)

atlas-sw-probe: update to version 5080

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12fd3cfe1e2d96f9e5d9c69260cf21e7f6bede45)

golang: Update to 1.19.5

Go1.19.5 (released 2023-01-10) includes fixes to the compiler,
the linker, and the crypto/x509, net/http, sync/atomic,
and syscall packages.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5a25a731c615bb50ef6b262818c6ee2379eb0b87)

atlas-probe: update to 2.6.3

Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3eace67a3001b68052c81a18ee361dc7597cf71a)

simple-adblock: update sed for allowing domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 4b77f94b5398111c839f7fe0f48b52a1087585b0)

xz: update to version 5.4.1

Update to 5.4.1  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 84856c9042ce2b732c17f33e5fc71dfa88b982ea)

docker-compose: Update to version 2.15.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e7f2e6f01cbf8cdde49c8683e7e1c6fd50b6487a)

speedtestpp: drop libxml2 dependency

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 281d62420383369a145ad41090ff498ee7067727)

yt-dlp: update to 2023.1.6

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b7d25185892c19c16ae65e60a42d9b1a7944904b)

ocserv: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error
due to missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 508c4548dc7c73d6e824bd5a9b1dcb8fb7132ab3)

knot: disable libmaxminddb detection

Disable libmaxminddb detection to fix a build error due to
missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ce46bf8a4307ae2e0ec6d3f517cad05666eb7a22)

Merge pull request #20242 from aquilacooper/openwrt-22.03-update-stubby-to-0.4.3-1

[openwrt-22.03] stubby: Update to 0.4.3

python-pytz: bump to version 2022.7

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

bind: disable geoip

Signed-off-by: Javier Marcet <javier@marcet.info>
[modified also PKG_RELEASE]
(cherry picked from commit 073ee02500ca5bd0b5b530efcc662690c55ca2ac)

docker-compose: Update to version 2.15.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit e38eee42a5cddb1693a55e59042925fccb59cef9)

stubby: Restart on interface trigger

Cherry-picked from commit 3c04a6d235346f82b9c5a79baeee1367eeb2a979.

Force restart stubby if any of the trigger interfaces goes up or down. Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.

Signed-off-by: Aquila Cooper <aquila@cpr.is>

stubby: Update to 0.4.3

Changelog from upstream (https://github.com/getdnsapi/stubby/blob/v0.4.3/ChangeLog):

* 2022-12-22: version 0.4.3
  * Fix Issue getdnsapi/stubby#330 and PR getdnsapi/stubby#324: PrivateUsers=false needed in systemd
    stubby.service file for stubby to start.
    Thanks Archcan and Petr Menšík
  * PR getdnsapi/stubby#323: Reduce log messages when interface is offline.
    Thanks Russ Bubley and Andre Heider

* 2022-08-19: version 0.4.2
  * Fix Issue getdnsapi/stubby#320: Stubby doesn't start without "log_level"
    entry. Thanks Johnny S. Lee

* 2022-08-19: Version 0.4.1
  * Several updates to the servers in the config file:
     * sinodun.dnsovertls*.com servers are removed and will be
       decommissioned in the near future. This leaves only the
       getdnsapi.net server as the default.
       A recommendation is made that users choose additional servers
       from the list available.
     * Additional Quad9 servers added (thanks pataquets).
     * LDN servers removed as the service is now stopped.
     * Tidy up of remaining server data.
     * Change `comment` lines on Uncensored server data to more clearly
       be comments (not valid YAML)
     * Fix and improve descriptions of default values
     * getdnsapi.net DoT servers liston on port 443 now too
  * Fixes for parsing of quoted key values for `tls-ca-file`,
    `tls-curves-list` and `resolvconf`
  * Add Dockerfile into `contrib` - thanks to pataquets.
  * Strengthen version checking for LibIDN2 during the cmake step so
    LibIDN2 version 2.3.3 can be properly found (thanks jpbion).
  * Updated stubby.service file. Thanks Bruno Pagani
  * log level configurable in config file with log_level setting
    Command line setting (with -v or -l) overrules the config file
    setting

Signed-off-by: Aquila Cooper <aquila@cpr.is>

Merge pull request #20234 from aquilacooper/patch-2

[openwrt-22.03] getdns: Update to 1.7.3

getdns: Update to 1.7.3

Changelog from upstream (https://github.com/getdnsapi/getdns/releases/tag/v1.7.3):

* 2022-12-22: Version 1.7.3
  * PR getdnsapi/getdns#532: Increase CMake required version 3.5 -> 3.20, because we
    need cmake_path for Absolute paths in pkg-config (See Issue getdnsapi/getdns#517)
    Thanks Gabriel Ganne
  * Updated to Stubby 0.4.3 quickfix release

* 2022-08-19: Version 1.7.2
  * Stubby updated to 0.4.2 quickfix release

* 2022-08-19: Version 1.7.1
  * Always send the `dot` ALPN when using DoT
  * Strengthen version determination for Libidn2 during cmake processing
    (thanks jpbion).
  * Fix for issue in UDP stream selection in case of timeouts.
    Thanks Shikha Sharma
  * Fix using asterisk in ipstr for any address. Thanks uzlonewolf.
  * Issue getdnsapi/stubby#295: rdata not correctly written for validation for
    certain RR type. Also, set default built type to RelWithDebInfo and
    expose CFLAGS via GETDNS_BUILD_CFLAGS define and via
    getdns_context_get_api_information()
  * Issue getdnsapi/getdns#524: Bug fixes from submodules' upstream?
    Thanks Johnnyslee
  * Issue getdnsapi/getdns#517: Allow Absolute path CMAKE_INSTALL_{INCLUDE,LIB}DIR in
    pkg-config files. Thanks Alex Shpilkin
  * Issue getdnsapi/getdns#512: Update README.md to show correct PGP key location.
    Thanks Katze Prior.

Signed-off-by: Aquila Cooper <aquila@cpr.is>

libtorrent-rasterbar: Update to 2.0.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 991c2d452cd12bd49c65a945a966f09223542c4b)

syncthing: update to 1.23.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 27b1869820eb88ec14991ccdbecb47e0c35c40c0)

libmaxminddb: install pkgconfig file

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c0be86e1ac2a632842616fa228c43e1a52e97390)

libmaxminddb: update to 1.7.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 448cd7fba15b0c6c3620e350a1840a8e861ad0ed)

AdGuardHome: update to v0.107.21

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 60ae1e56378e7e614918f6ecda52f92ab6e18c73)

libnetwork: Update to dcdf8f1 for Docker v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit ec191eb08e5673b8670cd180abbc8ff5036a218b)

containerd: Update to v1.6.13 for Docker v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b684f741e4c6df51a2e0d6cdfd804b511d2d7264)

docker: Update to v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit fc7a7f61378bc71f9a698ce47a70047477f1dd38)

dockerd: Update to v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 3c06e3a249efa362df0ab6d579d0cc494d2fab31)

owntone: Update to 28.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 983006f12a041dfe9f4f7b8bee21b5b463453ee3)

owntone: update to 28.4

Included changes:
* Install web UI
* Remove libantlr3c dependency
* Add Spotify support to description
* Updated conf file

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit feda8e036d14a2ad2504da075a4323bfa033c6c6)

mxml: update to 3.3.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 94f6216ef5d3e1587750cf383cc9763d524d1e5b)

docker-compose: Update to version 2.14.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 4c58d6d288f303a7a729e88d82496d0f1afd5301)

docker-compose: Update to version 2.14.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 24faf56110522e8a10be394e83af632cd022f0b7)

docker-compose: Update to version 2.14.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 37a86626e05b8324e0d6234cf4f3a3f65c88c0a4)

docker-compose: Update to version 2.12.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 17badaee1c630db3cf2c05b7fe903d2f225cece7)

docker-compose: Update to version 2.12.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d4134174bcd985c15b0407e3f7d39e089bc81cce)

docker-compose: Update to version 2.11.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 25e3d9ef42260600264d73a3379064e7e8f4fbd7)

docker-compose: Update to version 2.11.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 86fc30e177188f4b8bf2934dc2f75b2a6d455696)

docker-compose: Update to version 2.11.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2aee5cfa461c25ccbc782a372ca380014e8e3355)

docker-compose: Update to version 2.10.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ebf86a645affaa6db89d564f7f1d93feeed009a7)

docker-compose: Update to version 2.9.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 35b1a03b8393ab8b8324db455cbf459faac064b2)

docker-compose: Update to version 2.7.0

What's Changed:

 - Enhancements:

   - add support of environment secret during build step by @glours

 - Fixes:

   - networks: prevent issues due to duplicate names by @milas
   - Use appropriate dependency condition for one-shot containers when
   running compose up --wait by @laurazard
   - Fix environment variable expansion by @ulyssessouza in
   compose-spec/compose-go#276
   - Validate depended-on services exist in consistency check by
   @laurazard in compose-spec/compose-go#281
   - Fix hash usage in environment values by @ulyssessouza in
   compose-spec/compose-go#283
   - build: respect dependency order for classic builder by @milas
   - fix: panic caused by empty string argument by @nicksieger
   - (re)start should not impact one-off containers by @ndeloof
   - Fix issue with close networks name on up and down command by
   @glours
   - keep the container reference when volumes_from target a container
   and not a service by @glours
   - build.go: initialize CustomLabels map if nil by @paroque28

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit de563c1ae154e2a46f8942adaed79479b07a2fee)

docker-compose: Update to version 2.6.1

Enhancements:

 - Support for setting secret from env variable by @ndeloof

Fixes:

 - Do not start unrelated dependencies on run by @laurazard
 - Fix service not found errors when using --no-deps by @nicksieger
 - Respect COMPOSE_REMOVE_ORPHANS env var on down by @nicksieger
 - Fix project level bind mounts volumes by @ulyssessouza
 - Respect deploy.limits.cpus and deploy.limits.pids by @glours

Internal:

 - Upgrade: Go v1.18.3 by @thaJeztah
 - Upgrade: compose-go v1.2.8 by @milas
 - Upgrade: buildx v0.8.2 by @dependabot
 - Upgrade: containerd v1.6.6 by @dependabot

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5995e4d90b51239f3caaae75abeb8712979261b4)

docker-compose: Update to version 2.6.0

What's Changed:

 - fix TestLocalComposeUp which fail locally and bump compose-go to
 1.2.7 by @glours
 - attach only to services declared by project applying profiles by
 @ndeloof
 - Add ddev's e2e test by @ulyssessouza
 - Fix local run of make e2e-compose-standalone by @ulyssessouza
 - fix: prevent flickering prompt when pulling same image from N
 services by @maxcleme
 - add tags property to build section by @glours
 - update golang version to 1.18 by @glours
 - bump compose-go to 1.2.6 by @maxcleme
 - add e2e tests to verify env variables priority by @glours
 - Import dotenv file to os environment by @ulyssessouza

New Contributors:

 - @maxcleme made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 8089548622c46a7f0b18b2a98a52bc658e544f3c)

docker-compose: Update to version 2.5.1

What's Changed:

 - Fix relative paths on envfile label by @ulyssessouza
 - down: Reject all arguments by @Jille
 - Clarify what default work dir is when multiple compose files by
 @quite
 - compose down exit=0 if nothing to remove by @ndeloof
 - cp command: copy to all containers of a service as default
 behaviour by @glours
 - Fix extra space printed with --no-log-prefix option by @jan4843
 - bump compose-go to 1.2.5 by @ndeloof

New Contributors:

 - @Jille made their first contribution
 - @quite made their first contribution
 - @jan4843 made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 32d87ae946ea27c89419fee80f635473fc0fbb60)

docker-compose: Update to version 2.5.0

What's Changed:

 - Fix search/replace typo in --no-TTY documentation by @ericfreese
 - Fix panic with down command when -p flag specified by @glours
 - use project we just created to start services by @ndeloof
 - include services declared by links as implicit dependencies by
 @ndeloof
 - pull to respect pull_policy by @ndeloof
 - don't ignore error by @ndeloof
 - project name MUST be lowercase by @ndeloof
 - add support for build secrets by @ndeloof
 - create also a checksums.txt file, add --binary by @MaxPeal
 - add support for ppc64le for docker compose by @snehakpersistent
 - inspect image ID after pull to se com.docker.compose.image by
 @ndeloof
 - Fix cannot setup IPAM gateway by @qnap-ericfan

New Contributors:

 - @ericfreese made their first contribution
 - @MaxPeal made their first contribution
 - @snehakpersistent made their first contribution
 - @qnap-ericfan made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ac02159f6370cdb70677b91d4bc9da49d7323d3a)

docker-compose: Update to version 2.4.1

What's Changed:

 - now we use directly the Docker CLI to run autoremove flag should
 be p… by @glours
 - use ssh config when building from compose up by @glours
 - get Tty from container to know adequate way to attach to by
 @ndeloof

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 3e4ec2a9a82077c533fa5d1c26cf3e4764de50cd)

docker-compose: Update to version 2.4.0

What's Changed:

 - pass interactive flag to ExecOptions for the RunExec command by
 @glours
 - go.mod: pin k8s version to fix build on go1.16, and update buildx
 to v0.8.1 by @thaJeztah
 - support cache_from|to|no|pull by @ndeloof
 - fix race condition on start-stop e2e tests running in parrallel by
 @glours
 - Add support of ssh authentications defined in compose file or via
 cli… by @glours
 - fix typo in ssh option description by @mschoettle
 - Takes COMPOSE_PROJECT_NAME into consideration on commands by
 @ulyssessouza
 - Remove dead warning code by @ulyssessouza
 - Fix down command without any resource to delete by @ulyssessouza
 - vendor: github.com/containerd/containerd v1.6.2 by @thaJeztah

New Contributors:

 - @mschoettle made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 29a007ee5b15ff99c1dabebf2106519fa23a6bc1)

docker-compose: Update to version 2.3.4

What's Changed:

 - don't fail trying to remove container with no candidate by @ndeloof
 - recreate container after image has been rebuilt/pulled by @ndeloof
 - ps: un-deprecate --filter, and enhance docs by @thaJeztah
 - Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot
 - Remove DEPRECATED text, since it's just the default by
 @ulyssessouza
 - Bump Buildx to v0.8.0 by @ndeloof
 - kill only need project name by @ndeloof
 - don't remove external volumes/networks by @ndeloof
 - use docker/cli RunExec and RunStart to handle all the
 interactive/tty/* terminal logic by @ndeloof
 - Validate doc on pr by @glours

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b33c5dbd0695d5d2198c6888d3f75243b904f494)

telnet-bsd: add package

net/telnet-bsd: Add telnet-bsd 1.2 to repo

Patch sources:
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-misc/telnet-bsd/files
https://ftp.uni-erlangen.de/gentoo-portage/net-misc/telnet-bsd/files

Template for excluding telnetd:
https://github.com/theeternalsw0rd/telnet-macos

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
[set me as maintainer, add patches suggested by @pkgadd]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 51d381e5493f5d414316dfb8f6d8464683e9be11)
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>

domoticz: update to 2022.1

change to codeload
fix python 3.10 plugin loading and usage

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit e1ed4ee3d33630b32ea3fb4a9463b00dd0844f92)

bind: update to version 9.18.10

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 07f528b33121c5b26b868b6a72700e4029fe8f81)
Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #20156 from paper42/libarchive-cve-22

[22.03] libarchive: update to 3.5.3, fix CVE-2022-36227

golang: backport an upstream fix for non-retpoline-compatible error

This fixes the following build error:
```
Building targets
runtime
<autogenerated>:1: non-retpoline-compatible: 00200 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:915)       JMP     (R15)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00115 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:614)       JMP     (AX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00028 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:452)       JMP     (R11)(R10*8)
<autogenerated>:1: non-retpoline-compatible: 00021 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/error.go:261)      JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00050 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:691)       JMP     (CX)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00024 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/debuglog.go:616)   JMP     (CX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00079 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:617)       JMP     (R9)(R8*8)
<autogenerated>:1: non-retpoline-compatible: 00025 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/cgocall.go:453)    JMP     (R9)(DX*8)
<autogenerated>:1: non-retpoline-compatible: 00018 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:66)        JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00020 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/alg.go:156)        JMP     (SI)(DX*8)
<autogenerated>:1: too many errors
```

Fixes: #20026
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35f33c99b126cfa3ac51b9d7634340d43458b7db)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ea969a117a2a94de81489082f6ef83de438cf313)

v2ray-core: Update to 5.2.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ea1c47c444cda08950b797ee60df5cf7580f6dc)

xray-core: Update to 1.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9a7926339bba3e5d3830e2674021365f65bc83dd)

rclone: Update to 1.61.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 822d44e8f8637c028b66cdf0ae84869699c24788)

cloudreve: Update to 3.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c67193be6169fec4141b95fafae56a53571b2d47)

xray-core: Update to 1.6.6-2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4afc17e6e0784bd507994c0e53e13a5aa21af2d6)

yq: Update to 4.30.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 071e97949f75de5a7dc1d19c48663e01f0c02a00)

dnsproxy: Update to 0.46.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4e9c47e5582b69e37c891008a54534ef6627abda)

dnslookup: Update to 1.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 62cc9d2a39d35180f7f98cb7547da06c30795d0b)

cloudflared: Update to 2022.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f526a1d169eabbeb19e30f7803d08c0607d9107b)

natmap: update to 20221225

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 6163de4ffa21ad3fdd0df167d2ad926954e4f673)

natmap: fix service not stopped when disabled in luci

luci removes `enable` option when disabled,
fix by setting default value to 0.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 8111d494749ad1f56218852fb9a587e99c173870)

natmap: add Package/conffiles

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 39af47f1c08ba161b0320e6d3af02ed19f549911)

node: bump to v16.19.0

Notable Changes
*OpenSSL 1.1.1s
*Root certificates updated to NSS 3.85
*Time zone update to 2022f

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit f8bd5eaa6edcf437130118295380c93f2acdfdc3)

Merge pull request #20160 from stangri/openwrt-22.03-pbr

[22.03] pbr: bugfix: Makefile, rt_tables fix

pbr: bugfix: Makefile, rt_tables fix

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit edbcb97b78d36a813e6aa04f6b6ff9bc20be2eb3)

libarchive: add missing CONFLICT

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

libarchive: fix CVE-2022-36227

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

libarchive: update to 3.5.3

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

Merge pull request #20154 from ysc3839/natmap-fix-2203

[22.03] natmap: add forward_port option

natmap: add forward_port option

The bind port (-b) can be used with forward port (-p),
so expose this option in config file.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit cd51b58efdfa689f282e808c14a6f8b054eedb57)

Merge pull request #20114 from stangri/openwrt-22.03-pbr

[22.03] pbr: update to 1.0.1-1

pbr: update to 1.0.1-1

* add more error/warning messages
* better return statements from ips/nftset functions
* better error/warning handling when inserting policies
* comment out unnecessary nft set/ipst clean ups
* shellchecked status functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5bec4a25415e751c4000bdb4b18f662ac2f1a98d)

mwan3: make mwan3.user executable

This is a fix for the the following change:
https://github.com/openwrt/packages/commit/3d824ea288d907a31729c3629e884ea122c30da0

Before the change, it was only possible to execute a shell script. To
remove this restriction, a binary or other script language can now also
be used for 'mwan3.user'. Unfortunately, the old shell script was not
executable for older mwan3 version. During a sysupgrade with config transfer,
this 'mwan3.user' script could not be executed for newer mwan3 versions.
To fix this, the calling script checks whether the 'mwan3.user' is executable,
and if not, this executable bit is now set.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0434407428b25ae5309525f060964218034b86c5)

mwan3: update to 2.11.3

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8fea564fc9b612fe27b60bbd5839214184be7456)

mwan3: only send disconnected event if interface was connected before

Up to now on every interface down event a mwan3 disconnected event was
send. This is wrong because if the interface was never connected, then a
disconnected event should not get generated. This commit fixes this bug.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 997c0842ca8b05de83a1ecd3160ecd18fa3d8aee)

mwan3: change log message on already added route

Only show message on already set route, if debugging is enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6606bed17bbddb7ae10405f6b0358fdda26fd17)

mwan3: support offload routing modifier

Signed-off-by: Denys Yarkovyi <dyarkovoy@gmail.com>
(cherry picked from commit 675ecfba89afaddebbc0b0d7bbc084ea312fc927)

mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNS

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 1a703ed6a61420318bd771273fc1ae835a825978)

mwan3: fix balanced default config

The metrics and weight need to be the same. A 50% balanced would be
require member policies of the same metric and weight value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0ed8450d2fdb39df5b6ea2e587e6554cadcfd0dc)

golang: Update to 1.19.4

go1.19.4 (released 2022-12-06) includes security fixes to the net/http
and os packages, as well as bug fixes to the compiler, the runtime,
and the crypto/x509, os/exec, and sync/atomic packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6a0ee524b14f5f2390dbf4414b5980add7aa95ed)

privoxy: fix preinst/postinst script indentation

Fix the indentation of the preinst/postinst scripts for the privoxy
package.

Because these scripts didn't start with `#!/bin/sh`
(they instead started with the TAB character), `/bin/sh` was not used
to start them.

On x86_64 and i386_pentium-mmx, this seems to be fine, but on
arm_cortex-a15_neon-vfpv4 and aarch64_cortex-a53, running these
scripts fails with a:

```
Installing privoxy (3.0.33-3) to root...
Collected errors:
 * pkg_run_script: package "privoxy" preinst script returned status 1.
 * preinst_configure: Aborting installation of privoxy.
 * opkg_install_cmd: Cannot install package privoxy.
```

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 6703d7623097b591ea08c12e66351eed884e1005)

tailscale: preserve tailscaled state file

Fixes #19774

Signed-off-by: Carlo Alberto Ferraris <cafxx@strayorange.com>
(cherry picked from commit 02e154d3e56bd35b2db345250c17e41da0edcfa9)

knot: update to version 3.2.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit c933a15cebe43e6d35d59281a5414438cd3c1455)

yt-dlp: update to 2022.11.11

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e398becaa68043ad8c9f301e6308d824d4dfa80c)

perl: enable threading support for aarch64 by default

Perl threads seem to be supported and working for aarch64, and
including aarch64 here would allow packages like freeswitch-mod-perl
to become available from the standard OpwnWrt package repository for
popular routers such as the Linksys E8450 and Belkin RT3200.

Signed-off-by: Doug Thomson <dwt62f+github@gmail.com>
(cherry picked from commit 6db2fe93cd9db6e1f26fded0c4fd4b1c58484e49)

lxc-auto: made init script compatible with image builder

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e70844a9ca327b98eb33d1c9a3cce987cc91a190)

igmpproxy: update to version 0.4.0

Signed-off-by: Oli Ze <olze@trustserv.de>
(cherry picked from commit 44e1c2115ea91b97e9454c19428a59f155e9f677)

apr-util: disable parallel build

Build reliably fails with -j20

    crypto/apr_passwd.c:200:1: fatal error: error closing -: Broken pipe
      200 | }
          | ^
    compilation terminated.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bd9e119d68fba792a1f760525540c0e0cf10e63f)

python3-pytz: bump to version 2022.6

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>