knot-resolver: update to version 5.3.0

Changes:
- remove arch limit
- add libnghttpd2 dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9103076ec73aa1e941e1316075f8a1e8ca053bfe)

Merge pull request #14976 from G-M0N3Y-2503/dockerd-ipv6-config-bridge

dockerd: ipv6 bridge config

syncthing: update to 1.13.1

Also start using $(AUTORELEASE)

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit dda59fedccf4340780908d16ae4d273308017a43)

CI: fix handling of release branches

The "changed package" logic triggers all packages changed since
`origin/master` while for releases branches all changes since e.g.
`origin/openwrt-21.02` should be considered.

First figure out the active branch, then find changed packages.

Signed-off-by: Paul Spooren <mail@aparcar.org>

mwan3: disable DNS lookups for ping checks

By default, ping does a reverse DNS of the IP that you are pinging.
When you have a network issue (such as when a link has just gone down
and you haven't yet marked it down), this lookup can cause failures on
tests for links that are still good.

This option only works for iputils ping.
For busybox the option is not evaluated, but it is accepted without
throwing an error.

Fixes: #14968
Fixes: #14924
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Suggested-by: David Lang <david@lang.hm>
(cherry picked from commit 7cfb282432dad52aca0c2c578b43a99da4f8522a)

dockerd: package release bump

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Added options to setup a dualstack default bridge
* Added IPv6 Support

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

CI: enhance package detection logic

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit a2b08b5cbfb655d853a92f845d7e93e6b4031456)

Merge pull request #14946 from G-M0N3Y-2503/docker-20.10.3

docker,dockerd: Updated to 20.10.3

Merge pull request #14963 from EricLuehrsen/unbound_1131_2102

[openwrt-21.02] unbound: update to 1.13.1

unbound: update to 1.13.1

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

safe-search: fix typos in package scripting

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 8d09fc0cfbe126ce3e7123d011c9597e1fae795c)

utils/findutils: update to 4.8.0

* utils/findutils/Makefile (PKG_VERSION): Update to latest.
(PKG_RELEASE): Reset to 1.
(PKG_HASH): Update.

Signed-off-by: Bernhard Voelker <mail@bernhard-voelker.de>
(cherry picked from commit 3614a520d22f48b753460f5d6ca25e89e5300c21)

static-neighbor-reports: add missing Lua dependency

Add a missing dependency on Lua. Otherwise the script installing the
neighbor report can't be executed in case Lua is not installed on the
system.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 83d572af980db83f91851327dc0e0ed07383f5c8)

vim: fix compile with BUILD_NLS

Avoids having to use msgfmt, which happens to be broken with gettext-full.

msgfmt is used for the desktop gvim application, which is not used here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d5ddc98cb6070b1dd412c13ffab87e43722bb80d)

docker,dockerd: Updated to 20.10.3

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

docker,dockerd: Added git-short-commit to verify short commit

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Merge pull request #14937 from nxhack/2102_add_node-yarn

[21.02] node-yarn: add new package - for building adguardhome

Merge pull request #14935 from G-M0N3Y-2503/dockerd-use-host-dns

dockerd: Added option to configrue docker to use host Dnsmasq for DNS

dockerd: Package release bump

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: set docker zone chain defaults to ACCEPT
* Since the docker0 is a private network by default we can be
  more accepting like the LAN is by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Added option to set dns servers
* The default server is the default switch so that
  queries will go through the hosts dnsmasq by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Merge pull request #14839 from G-M0N3Y-2503/dockerd-maintainence-backport

dockerd: misc maintainence

Merge pull request #14920 from luizluca/21.02/sane-backends-1.0.32

[21.02] sane backends 1.0.32

adblock: update 4.1.0

* major source changes:
  * split oisd.nl in basic and full variant
  * add swedish regional list
  * made archive categories for shallalist and utcapitole selectable
    via LuCI
  * made all list variants of energized and stevenblack selectable
    via LuCI
* removed dns filereset mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 215ffbe35753484c3cd0807341cd82bdba56884f)

travelmate: update to 2.0.3

* refine the wifi reconfigure logic

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2b476ffd384193044237701a769430ebd416eccb)

Merge pull request #14919 from stangri/21.02-vpn-policy-routing

[21.02] vpn-policy-routing: bugfix: netflix user file missing redirect

dockerd: Package release bump

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Added iptables wait to ensure rules are added

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Made blocked_interfaces ip rule REJECT
* Changed from DROP to REJECT to be consistant with other firewall rules

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: made registry_mirrors and hosts omittable
* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
  Otherwise, docker defaults can be assumed

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Normalized config quotation marks

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

vpn-policy-routing: bugfix: netflix user file missing redirect

Signed-off-by: Stan Grishin <stangri@melmac.net>

sane-backends: update to 1.0.32

Dropped patches:
-102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch (merged)
-101-fix_uclibc_std_rand.patch std::round was unavailable because of a wrong configure
 var from the uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit bf1a138f9276718a76589b3b170648d85bbb8c0b)
(cherry picked from commit 49e75e810585a1e173e74fe3b7154a65835675c7)

libv4l: fix glibc compilation

There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b945b0790f8ababf8c36b9327d8d37f2ff90675b)

php7: fix build with QUILT

When building with QUILT, unlike the regular build, Build/Prepare does
not apply the patches.  So when buildconf is called with QUILT on, at
the end of Build/Prepare, it will not have the patched sources, and
build will fail.

To fix the problem, run buildconf in Build/Prepare only when QUILT is
off, and do it in Build/Configure otherwise.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d4979cff06b29ec4c8201d619bbb452b34bb1175)

php7: fix pecl build with QUILT

Commit d741a64b7 ("lang/php7: Don't run phpize7 with QUILT") changed
pecl.mk to not run phpize7 during Package/prepare if QUILT is set.  The
intention was to allow prepare, refresh and update targets to run
without building dependencies.

As a side-effect, Package/configure and Package/compile fail when QUILT
is defined because they can't find ./configure or a Makefile.  It also
impacts the github tests run with pull requests, because QUILT is
defined there.

To avoid that failure and still keep the prepare, refresh, and update
speedup, call phpize7 before Package/Configure if QUILT is defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 3476816cc8f03dcd7d118bb1faf77a9ef224d66f)

mstpd: bump to version 0.0.9

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8520aba2735d9c8b397d6283f779931a8e1bca58)

ruby: update to 3.0.0

This release goal is performance, concurrency, and typing. See details
in https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/

New subpackages (reflect of mostly complete upstream ruby gemification)
- ruby-abbrev (from ruby-misc)
- ruby-base64 (from ruby-misc)
- ruby-coverage (from ruby-misc)
- ruby-continuation (from ruby-misc)
- ruby-debug (from ruby-debuglib)
- ruby-english (from ruby-misc)
- ruby-expect (from ruby-misc)
- ruby-fiber (from ruby-misc)
- ruby-find (from ruby-filelib)
- ruby-io-nonblock (from ruby-multithread)
- ruby-io-wait (from ruby-multithread)
- ruby-monitor (from ruby-multithread)
- ruby-net-ftp (from ruby-net)
- ruby-net-http (from ruby-net)
- ruby-net-imap (from ruby-net)
- ruby-net-pop (from ruby-net)
- ruby-net-protocol (from ruby-net)
- ruby-objspace (from ruby-debuglib)
- ruby-open-uri (from ruby-net)
- ruby-pathname (from ruby-filelib)
- ruby-pp (from ruby-prettyprint)
- ruby-pty (from ruby-misc)
- ruby-rbs (NEW)
- ruby-resolv (from ruby-socket)
- ruby-resolv-replace (from ruby-socket)
- ruby-securerandom (from ruby-misc)
- ruby-set (from ruby-misc)
- ruby-shellwords (from ruby-misc)
- ruby-syslog (from ruby-logger)
- ruby-tempfile (from ruby-filelib)
- ruby-tmpdir (from ruby-filelib)
- ruby-tsort (from ruby-misc)
- ruby-typeprof (NEW)
- ruby-un (from ruby-mkmf)
- ruby-weakref (from ruby-misc)

Removed subpackages
- ruby-debuglib (split into ruby-debug,ruby-objspace)
- ruby-filelib (split into ruby-find,ruby-pathname,ruby-tempfile,ruby-tmpdir)
- ruby-misc (split into ruby-abbrev,ruby-base64,ruby-continuation,
    ruby-coverage,ruby-english,ruby-expect,ruby-fiber,ruby-securerandom,
    ruby-set,ruby-shellwords,ruby-tsort,ruby-weakref)
- ruby-multithread (split into ruby-io-nonblock,ruby-io-wait,ruby-monitor)
- ruby-net (split into ruby-net-ftp,ruby-net-http,ruby-net-imap,ruby-net-pop,
    ruby-net-protocol,ruby-open-uri)
- ruby-net-telnet (removed upstream)
- ruby-sdbm (removed upstream)
- ruby-webrick (removed upstream)
- ruby-xmlrpc (removed upstream)

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit fe4020f23e0ba93aa9d5abef3ce4fee079f03f85)

boinc: update to 7.16.16

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ce361e3c1a2220f2c6d798ac1ca65dc57fdaff8b)

dovecot: update to 2.3.13

Fixed and refreshed patches.

Switched to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6baf7dd125a4a318dd6b161324b5cb52f40ede1c)

curl: update to 7.75.0

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d55ea14a46be1cbf78ebb1c4a82bd881154a7225)

node: bump to v14.16.0

Update to v14.16.0

February 2021 Security Releases
- HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)
- DNS rebinding in --inspect (CVE-2021-22884)
- OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a68820bb7439a3c81f0f409cd5a95b6f8ffece8f)

node: make hostpkg icu-enabled

Made the necessary changes to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 884761c4dfac2d6cca0413e2b876321036a11698)

dockerd: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8a4bb56478036efccbf6f092647da53e52574518)

dockerd: Package release bump

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e882ff47e51981ea99e897cf4517c843dfd6286f)

oci-runtime-tools: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit bb9641e7021293fe1afa6b77e24896874d238c37)

libnetwork: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d9f7dff4a09c82c736560bfe1362873453f6374b)

docker: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 5b2d0609c7ab0698c2fa138d664847195b0b452f)

containerd: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2d48a7b6e0a5d73962a7cf4bd32a80c762d2f35b)

cni: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 619270da0e3b81af08cb2924c8484e92b22339de)

tor-fw-helper: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit cffae02037e21471e5a0fdc47b171aedbe926e8f)

restic-rest-server: fix build with golang 1.16

Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b732157dec0be4d90aad5cec48056bd69939bb45)

node-yarn: add new package - for building adguardhome

Add the necessary new package to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

django: bump to version 3.1.7

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmai.com>
(cherry picked from commit dd58d2469990396466cc780b8995710f35908049)

setools: Avoid using host libraries

This adds $STAGING_DIR to library search paths in setup.py, to avoid
picking up host libraries when linking.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0aff79f29fee274441c22e1eecb199636c3b11ff)

libupm: enforce disabling python2

If there are more than two python3 interpreters, and no python2,
libupm thinks one of them is python2 and fails.  Avoid that by
telling it that python2 was not found.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 30a8d8db6aa5c96799b9d869be62cda5fb14fd88)

lxc: fix build without seccomp if libseccomp built

This fixes compiling lxc without seccomp support if libseccomp is
already installed to the staging dir.  Patches were applied upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 470176905d3bfcb3e34058490a52e135dfed4df6)

libdaq3,snort3: install/use libdaq3 in its own dir

If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 92cdc620b6a6e9974b1a0d69a482ae02f1dd4d5d)

libdaq,snort: install/use libdaq2 in its own dir

If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 48e2b6ebb3ebb688de1c8a069c7b43d9478b3298)

Merge pull request #14904 from stangri/21.02-vpn-policy-routing

[21.02] vpn-policy-routing: update user netflix file

vpn-policy-routing: update user netflix file

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #14884 from jefferyto/treewide-refresh-patches-openwrt-21.02

[openwrt-21.02] treewide: Run refresh on all packages

nano: update to version 5.6

Upgrade nano to version 5.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit dffdfe4ac8c903fa843695af329c83c70a7c7e1a)

Merge pull request #14889 from stangri/21.02-vpn-policy-routing

[21.02] vpn-policy-routing: custom user scripts improvements

vpn-policy-routing: custom user scripts improvements

Signed-off-by: Stan Grishin <stangri@melmac.net>

treewide: Run refresh on all packages

The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit 5d8d4fbbcb5c5de9370711c19bb3510210989a98)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

liburcu: update to version 0.12.2

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 94432033772019d7abf35fd3ab6fce22c6d0c8e2)

libedit: update to version 20210216-3.1

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit fd7f43ae4674b234a975ec67c604abf6e933a0b3)

knot-resolver: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit bb1f6174fa22d924bada763ec1539c4dbb67fa5a)

Merge pull request #14852 from 1715173329/2102-xr-mter

[openwrt-21.02] xray-core: remove myself from maintainters

Merge pull request #14866 from stangri/21.02-https-dns-proxy

[21.02] https-dns-proxy: add Force DNS support

Merge pull request #14868 from stangri/21.02-vpn-policy-routing

[21.02] vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY

screen: backport fix for CVE-2021-26937

Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c250298fa3e60251dfbbb0df40b36c6d67bbea09)

vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY

Signed-off-by: Stan Grishin <stangri@melmac.net>

https-dns-proxy: add Force DNS support

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #14834 from jefferyto/golang-1.16-openwrt-21.02

[openwrt-21.02] golang: Update to 1.16

Merge pull request #14851 from 1715173329/2102-yq-mter

[openwrt-21.02] yq: bump to 4.6.0, remove myself from maintainters

Merge pull request #14848 from jefferyto/python-config-macos-openwrt-21.02

[openwrt-21.02] python3: Fix target python-config when building on macOS

netdata: update to version 1.29.2

Release notes:
https://github.com/netdata/netdata/releases/tag/v1.29.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e8021bf14d591edfb3fe36dd194b8109d4f7ffd3)

xray-core: remove myself from maintainters

Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from 024112605aaf365dbfce185d4afb765b55652775)

yq: Update to 4.6.0

Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from b8a2c86aa7e0d008ee896ddc10dd467d406f5499)

yq: remove myself from maintainters

Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from f56d697985a8db193e744754757f5ac41b1ae229)

python3: Fix target python-config when building on macOS

The Python version of python-config is installed when building on macOS,
rather than the shell script version when building on Linux. When run on
macOS, the Python version of python-config will return values with
Mac-specific customizations.

This patches the python-config install recipe so that which version is
installed can be controlled by the package makefile. When building on
macOS, this installs the Python version for host Python and the shell
script version for target Python.

This also updates Host/Compile and Host/Install to use the default host
build recipes, so that the various HOST_* variables are taken into
account automatically.

Fixes https://github.com/openwrt/packages/issues/14652

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 18330902a0ca1b162e1ae938d8024cfb7e7c524d)

golang: Update to 1.16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc587eccb7ad9f12ef4498ecb339a484299c39ba)

git-lfs: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0bc2f89ae1d77de2f5a5ebb54b8e56f6d7e22b23)

perl-try-tiny: use relative include of perlmod.mk

The $(TOPDIR) seemed to cause Makefile parsing issues with CI.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 52668b1e9798719f5e7d956f981f2dd2663b2c09)

dnstap: update to version 0.4.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5514fca2b7c39fc96cf2e0b15bfede1ffc902d04)

bind: bump to 9.17.10

Add build dependency on libnghttp2 for DNS-over-HTTPS support

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit f33ab760192c02f226dac67236f97a57209d5153)

tor: update to version 0.4.5.6

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17056742ad3115cef0f7022530cbddff2ba0415f)

zerotier: bump to 1.6.4

Signed-off-by: Moritz Warning <moritzwarning@web.de>

banip: update to 0.7.3

* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b65353b4f76f89c11a8e7f2c6307d461e0dce696)

rng-tools: fix init START

We should be using "00" to deal with alphabetical order.

Fixes: d9cea6747 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from 55b22d131)

rng-tools: start as early as possible

Raspberry Pi devices (bcm2708) need this to get from:
[  102.310494] random: crng init done
to:
[   12.539744] random: crng init done

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from commit e9a126c14)

Merge pull request #14805 from apple-etan/21-02/feature/ek/libnetfilter-queue/ipv6

libnetfilter-queue: fix IPv6 header handling

libnetfilter-queue: fix IPv6 header handling

Import 51f25df304aeaa6c1b02ef7456a61278ee70c102 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit a16faf72b19aba203a8185cba6eae45f62150840)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>

Merge pull request #14803 from apple-etan/21-02/feature/ek/libnetfilter-queue/icmp

libnetfilter-queue: add pkt_buff function for ICMP

libnetfilter-queue: add pkt_buff function for ICMP

Import 662c8f44d53492d2e0ebd430dadef12d580ec330 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit 73060f910443476f4f13b76d0f3c9b63473ebbaf)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>

Merge pull request #14795 from apple-etan/21-02/feature/ek/libnetfilter-queue/fixup

libnetfilter-queue: re-add PKG_FIXUP to fix build

reptyr: Don't build for mipsel

The package does not support any mips archs, including mipsel.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit ac3beceb9614021d0de2b57c8d7aad716d824554)