adblock-fast: update to 1.1.1-3

* allow top-level domains in the blocked-domains options fixes
  https://github.com/openwrt/packages/issues/23125

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0f059b6523f3720441cf608cbd9769265d859de6)

Merge pull request #23117 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: sync with main branch

adblock-fast: sync with main branch

* somehow parts of the code of the init script got different between the
  main branch and release branch, this PR fixes that.

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #23101 from stangri/openwrt-23.05-nebula

[23.05] nebula: update to 1.8.2

nebula: update to 1.8.2

* update to 1.8.2: https://github.com/slackhq/nebula/releases/tag/v1.8.2

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 91afa9f641382c459a19321127bac04cf296efaa)

Merge pull request #23085 from muink/openwrt-23.05

[23.05] sing-box: Update to 1.8.0

sing-box: update to 1.8.0

New features for v1.8.0:
1. Migrate cache file from Clash API to independent options
2. Introducing Rule Set
3. Add `sing-box geoip`, `sing-box geosite` and `sing-box rule-set` commands
4. Allow nested logical rules
5. Independent `source_ip_is_private` and `ip_is_private` rules
6. Add context to JSON decode error message
7. Reject internal fake-ip queries
8. Add GSO support for TUN and WireGuard system interface
9. The legacy LWIP stack has been deprecated and removed
10. Add `idle_timeout` for URLTest outbound
11. Added some new uTLS fingerprints
...
Release notes: https://github.com/SagerNet/sing-box/releases/tag/v1.8.0

The new version has some breaking changes and may stop working after upgrading if use the original config.
Please see the migration manual to migrate the config: https://sing-box.sagernet.org/migration/

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 8fe2f6848511c3edd2feb46c04c1f8b6ffd1b99e)

rust: Update to 1.75.0

Changelog: https://blog.rust-lang.org/2023/12/28/Rust-1.75.0.html

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 546e6eba4fd14607e8068787cea8e3d7f9f49e42)

rust: unexport host sccache env variable

Users might configure their own env variables on the host, and sometimes
it can lead build failure or unexpected behavior.

Fixes: #22889
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9f01010958b9f57ef51903f69c7223eaefabf139)

dnsproxy: Update to 0.61.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37a77ffaf5105c31ee35b009691fa0b8a1c6a64a)

v2ray-geodata: Update to latest versin

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6316772b3d317a3420cfd5fc586da9f2b7e7af80)

v2raya: Update to 2.2.4.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ce684797e67d79fcef93ca0ecec58a757e51e94a)

btop: Update to 1.3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37ce0e6803f1d3f116bbd59ff7f14e160c99aa47)

btop: opt out of lto usage

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 107312a73f29a6a99df5b0dca3aec99986358512)

uspot: update to Git HEAD (2024-01-09)

0cffba9458d3 treewide: add support for RADIUS Reply-Message
c9fb744fdee8 treewide: add support for 'lang=' & ChilliSpot-Lang
584a162cb19a handler-uam: ensure that 'seconds_remaining' is always set
bd1f7c5de1ae Makefile: align with packages feed one
0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
e6a286ccfdbf uspot/uspotfilter: use 'logger -t'
427ed16cfde5 uspot: expose ratelimits in client data
4ba1dd9c5135 uspot: don't send NAS-Port-Type
78a37ef49b85 templates: add id="replymsg" to reply msg header
e3f4e179fd17 templates: show remaining time in "connected"
398762dff711 radius-client: correctly use str_to_hex()
730ef800d9da templates: simplify HTML
6bb39282fd8f Documentation update
b6c802adac19 portal: handle_request() logic refactoring
1aa1a5eb28d7 uspotfilter: implement peer_lookup()
ba5547ec61f1 portal: speedup peer lookup by leveraging spotfilter
d551376c29bb templates: added html5 time tag to timeleft output
154c98e0b77b uspotfilter: mark client as active when set()
8dcb03a37a77 uspotfilter: rework neigh management
cfb2ce7909da uspotfilter: use client_remove() where applicable
8411314dbf90 Documentation update
8dacf3df9935 uspot: use a single operation for client removal
297b7857c1e0 uspotfilter: fix DELNEIGH processing
76003917c205 uspotfilter: client_set() only clear idle when allowing
f46a855c5085 uspotfilter: remove botched IPv6 "support"
4ff31cbf0e2b uspot: client_remove(): stay in sync with spotfilter
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging
52e24aecf2db uspotfilter: use ucode '??=' syntax
c4b6f2f0bb1e Update README

Update the package Makefile to reflect the changes from the following
above-listed commits:

0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit ab20c1bd90df66c8351a063a7a3318100f5c22af)

travelmate: update 2.1.2-2

* fix a possible re-connection issue/cornercase seen on single radio units

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4518ecf60bb271fb510192661df7ea85b67a51d8)

Merge pull request #23077 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfix: pause command

adblock-fast: bugfix: pause command

* the pause command used to incorrectly cause block-lists reload, this
  has been fixed in this version

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dfeeabbebf7fa337f02fa24d40a488e2acfccbbb)

banip: update 0.9.3-4

* made the default mail template "responsive" to get a better view esp. on mobile devices

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 6c9cd775962a3165b70ab7722ba1c6a98b3b5f15)

travelmate: release 2.1.2-1

* fix a station scanning issue on single radio units (mainly a LuCI/JS issue) reported in the forum by multiple users

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ce20f8d88be4fefaae15b06d18eef1639e992cd8)

travelmate: Added H-Rewards hotel login
Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>
(cherry picked from commit f12c63b9b988b2046fb2059fd9ce7b2fd2efd4b4)

Merge pull request #22986 from stangri/openwrt-23.05-nebula

[23.05] nebula: update to 1.8.1

strongswan: trigger reload when interfaces are specified

Fixes #20848

Add interface triggers if interfaces to listen to are specified in
`/etc/config/ipsec`. This fixes the "running with no instances" scenario
after rebooting a router.

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit f2d209e4fff3048883ee5953c3a312d9f5aaab1b)

sing-box: Update to 1.7.7

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 2cf219c8379e178622b5e302754b4b87b581bc56)

Merge pull request #23000 from mhei/23.05-php8-update-to-8.2.14

[23.05] php8: update to 8.2.14

django: bump to version 4.2.8

To address
   https://nvd.nist.gov/vuln/detail/CVE-2023-43665

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

 banip: update 0.9.3-3

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8c8a335eaf240802334c58fc5a076c33e8215056)

 banip: update 0.9.3-2

* rework the device/interface auto-detection (only layer-3 network devices will be detetcted correctly), disable the auto-detection e.g. for special tunnel interfaces
* supports now full gawk (preferred, if installed) and busybox awk
* raise the default boot timeout to 20 seconds (if 'ban_triggerdelay' is not set)
* various small fixes and improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5af101564a9f889807e0e2762934e03cb0259eb1)

banip: bump to release 0.9.3-1

* provides an option to transfer log events on remote servers via cgi interface (disabled by default), see readme for details
* refine the allowlist check to support IP intervals as well before adding an IP to the blocklist

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df81585cea0c0b35f01f978e7dc245ad9de32a07)

php8: update to 8.2.14

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dnsproxy: Update to 0.61.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit df24c8d097c1ef945a0adaa2c5b51b089293a015)

yq: Update to 4.40.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 708b69f86f755c2cb13b019c54f5c3296590be41)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7114155a9194e9ffd21dfcba82e72cb4995b5009)

v2ray-core: Update to 5.13.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5ca3b2ed4461ff8ed82ce78981f440da045fa33d)

dnsproxy: Update to 0.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3900f2aab4f5994cbbdd84a0da0e2a343533af95)

tailscale: Update to 1.56.1

Signed-off-by: Shi JiaYang <shi05275@163.com>
(cherry picked from commit a2b72f13fff065aff3e3803e823b3764d037dd90)

wsdd2: update to 2023-12-21

Signed-off-by: Alan Luck <luckyhome2008@gmail.com>
(cherry picked from commit 25ded48f9f3c36cbbe954dffdd80b2dc0edd0854)

mosquitto: update to 2.0.18

Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aa89f847c673343af0cde4dbd9535a63272f7f14)

nebula: update to 1.8.1

* https://github.com/slackhq/nebula/releases/tag/v1.8.1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 731d594ee31df8c0fadf980f29939461d13bc395)

libxcrypt: update to 4.4.36

Upstream bump required to fix build issues reported here:
https://forum.openwrt.org/t/i-cannot-build-my-image-due-to-failure-in-libxcrypt/168114

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit b1d28936cbfe9739f9480fefb34fa4ab8ff15bd8)

libtorrent-rasterbar: Update to 2.0.9

Switch to use release tarball to avoid try_signal hack.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b0608547b1b3965fc0ccfb2e9e14a31fa5ca71d)

snowflake: update to 2.8.0

Release Notes:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.8.0/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 12defee0ce84910ac627031f5434aca7a0c8b578)

Merge pull request #22906 from mhei/23.05-php8-update-to-8.2.13

[23.05] php8: update to 8.2.13

wifidog: make it compile again with recent version of WolfSSL

Recent version of WolfSSL dropped CyaSSL shims and made the package not
compilable. Converting it to the WolfSSL library is simple enough as the
API used are very basic and can be converted directly. Add patch that
fully convert the package to WolfSSL and doesn't use the compat shim
anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b38e3cd257b3db79897d7ae7c9976af1d57f29b3)

php8: update to 8.2.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

tang: silence errors on first installation

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

haproxy: update to v2.8.5

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #22888 from jefferyto/python-3.11.7-openwrt-23.05

[openwrt-23.05] python3: Update to 3.11.7, refresh patches

Merge pull request #22880 from QuintinHill/ble2mqtt-0.2.1-for-23.05

[23.05] Python3-Ble2mqtt: update to 0.2.1 and bump dependencies

Merge pull request #22897 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: update to 1.1.1-1

adblock-fast: update to 1.1.1-1

* move reload/restart logic from json() to config_cache()
* improve fw4 restart decision logic
* no longer store reload/restart info in ubus/status json file
* rename variables pointing to run-time information
* create dns_set_output_values to reuse code in principal all and luci app
* improve append_url to store collected URLs in an alternative variable

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bab17f480c638350aa3734d7757bbae353c1c740)

Merge pull request #22859 from stangri/openwrt-23.05-nebula

[23.05] nebula: update to 1.8.0

Merge pull request #22857 from stangri/openwrt-23.05-curl

[23.05] curl: update to 8.5.0

python3: Update to 3.11.7, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d4f5759190ce7bbebbeaa4161333c91d0d7a4da1)

unbound: fix `create_host_record_from_host` error when `dns` is not set

The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit 8d60419251b2c94f87425f41ce49214771d2bf6a)

unbound: create extra host records from DHCP static leases

The "Extra DNS" option allows to create records from the DHCP
"Hostnames" configuration entries.
This allows to create such records from the DHCP "Static leases"
configuration entries too.

Fixes: #22593
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
(cherry picked from commit b4a31f92deb8de923d6bc6fb12506e24f4475581)

golang: Update to 1.21.5

Includes fix for CVE-2023-39326 (net/http: limit chunked data overhead).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b8254cdac4aa62e19598c281109c17f77339d982)

Merge pull request #22878 from efahl/openwrt-23.05

[23.05] syncthing: fix duplicate command line parameters on service

python3-ble2mqtt: bump version to 0.2.1

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 0937af539d2d13f5c2bc94701972e4067b24380f)

python3-bleak: bump version to 0.21.1

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit 64fa106b0711a28732495b9cd334cfd6dfad9683)

python3-dbus-fast: bump version to 2.20.0

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
(cherry picked from commit ca2171c00584bdf7448b2a754ba5b5a4431de0f2)

Merge pull request #22875 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: only restart firewall when needed

syncthing: fix duplicate command line parameters on service

  - This patch fixes 9d17ba1 and #22760

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 6849a9df90d8c9c99dd50356b8f969d64026c16d)

https-dns-proxy: only restart firewall when needed

* only restart firewall when needed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8b6635bae9717babbc3dcf1347cf4727fc15f9bd)

Merge pull request #22864 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: better allow-listing

adblock-fast: better allow-listing

* improve allow-listing reliability by running sed from the script-file
  instead of the command-line
* fix user for smartdns files ownership

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 693287e9610b379111b1c2a5a7589a576a8ce663)

Merge pull request #22854 from stangri/openwrt-23.05-adblock-fast

adblock-fast: bugfix: block domains from config when not using block-lists

nebula: update to 1.8.0

* https://github.com/slackhq/nebula/releases/tag/v1.8.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e9b04f32a4ded93260ca04c35bb0e317ea27d238)

curl: update to 8.5.0

* https://curl.se/changes.html#8_5_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 6501290c17fb2c65e0fb589da94d121ff89e7d5e)

upmpdcli: Update to 1.8.6

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c438a1605215c449027d97cb1628e20a119c91da)

libupnpp: Update to 0.24.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8facff466be9354d0376dc587237dec03d0cff64)

libnpupnp: Update to 5.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 24b4173030329622f12d4955de2023608b02dfa4)

upmpdcli: update to 1.8.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 303b7b665c5f2aa177d1c4ebbc4346eafd51809b)

libupnpp: update to 0.24.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f53100b69e775caa01a53e48308e95b823fabfdc)

libnpupnp: update to 5.1.1

Build with meson. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 36360b7406e3fe62b38d45990689bb524c8d5603)

adblock-fast: bugfix: block domains from config when not using block-lists

* remove empty lines from the combined list to allo optimization code
  to work properly

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1914114ed39f29c8dd81305969741f7636254280)

Merge pull request #22851 from hnyman/irqfix

[23.05] irqbalance: Fix log spam and correct meson version

irqbalance: Fix log spam and correct meson version

Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.

Also correct the version in our own meson.build patch.

Log and strace:

Sat Dec  9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument

open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000
ioctl(6, TIOCGWINSZ, 0xbeb134e8)        = -1 ENOTTY (Not a tty)
writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument)
close(6)                                = 0
munmap(0xb6ed9000, 4096)                = 0
clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0
sendto(5, "<28>Dec  9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80
writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument
) = 48

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

dnsproxy: Update to 0.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3a708afd04cfa297b3749734f5f46a334a831732)

yq: Update to 4.40.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a18841e459195bd6ef27eb1062208f0df97b1d33)

rclone: Update to 1.65.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410dfa0958494b004e07d427cad7dd9cf)

v2raya: update to 2.2.4.3

Switched back to tar.gz archive to avoid potential permission issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255e244980abf8c028d8ec72e3a15eddc3b63235)

python-cryptography: Update to 41.0.7

41.0.6 included a fix for CVE-2023-49083 (loading certificates from a
PKCS#7 bundle could lead to a null-pointer-dereference and segfault).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5f829ad1625901054c75eee0cd6bc970f57e04b7)

python-cryptography: Update to 41.0.5

This also adds a CPE ID for the package and updates the test.sh script
to use an assert.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c4a223ed8714d43a6e06d9c675447281f8c50127)

Merge pull request #22840 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfixes: getsize/resolver

adblock-fast: bugfixes: getsize/resolver

* do not use standalone grep-package dependent syntax to get the remote
  file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
  are not installed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 496d9b71ab83b1cfcc8c71c894de432ff841616c)

Merge pull request #22808 from jefferyto/ci-fix-helper-openwrt-23.05

[openwrt-23.05] CI: Fix CI_HELPER

iperf3-mt: remove package

This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from 4fb1bdc86c)

iperf3: update to 3.16

notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from bdb6d2a37f)

fail2ban: Fix compatibility with Python 3.11

This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed202c9126966f7a9e73eaa7f48d51b6b)

dhtd: udpate to 0.2.6

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 75d5ffd1677d4375996ce4d19de13cf4189c1f5f)

Merge pull request #22825 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: add smartdns ipset/nftset support

adblock-fast: add smartdns ipset/nftset support

* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
  procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 28cd5ecf6e29fedfbd8dfcb63ea5124dac69880c)

uspot: add package

uspot is an OpenWrt-native captive portal system.

It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4,
ucode, without needing any external kernel module.

It can achieve the maximum performance allowed by nftables (flow
offloading works).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit e6e8e58ae0ca981a2301f8951f6416be3b74fbe5)

AriaNg: bump 1.3.2 to 1.3.6

    Fix the problem that cannot create new task after clearing checksum option
    Other bug fix and user interface optimization

    Support overriding aria2 global settings with empty content when create new download task (#712)
    Other bug fix and user interface optimization

    Update Traditional Chinese translation (#705, thx @ChiaYen-Kan)
    Other bug fix and user interface optimization

    Add check-integrity to task settings tab (#693, thx @raytrap)
    Fix a spelling mistake (#696, thx @rusq)

     fix due to the index.html (1.3.6) cite these 2 png files. To keep the page looks fine without 404, added these 2 png files.

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit 904438be39d2fb80573ab45ce606a20bb4fbe7e1)

netbird: update to version 0.24.3

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 2dd3b1b17740740096539dfc88be80e2e7bedcba)

aardvark-dns: update to version 1.9.0

Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 88ed83a55b28127e336cd4636362e49a0c2104df)

netavark: update to version 1.9.0

Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit aa3abde67e32e193e4fcc23ff6f27190440a3e94)

podman: update to version 4.8.0

Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9ab2b8a04dfe250139799a8e51fc36232c3c4145)

crun: update to version 1.12

Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ff51a0b495148ac143deff5bf4e838a144aaeb8d)