v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.28.9

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: add test

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

c-ares: update to 1.33.1

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

liburing: update to 2.7

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

clamav: update to 1.4.0

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

xray-core: update to 1.8.24

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

apfree-wifidog: update to 7.08.2035

https://github.com/liudf0716/apfree-wifidog/releases/tag/7.08.2035

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

apfree-wifidog: modify wifidogx.init
1. to address the isssue of incomplement firwall rules
2. added support for gateway settings

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

lpac: update maintainer E-Mail address

Signed-off-by: David Bauer <david.bauer@uniberg.com>

lpac: add uqmi backend

This adds an additional OpenWrt specific backend to use lpac with the
uqmi tooling used by OpenWrt to manage QMI based modems.

This allows lpac to manage eUICC chips without the need for other,
potentially bigger, software using the installed modem.

Also set this backend as the new default, as users probably expect being
able to download profiles using their cellular modem.

Profile-Switching
-----------------
With some eUICC modem combinations you might require to powercycle the
UIM slot using uqmi after changing the active profile. To do this,
simply execute

$ uqmi -d /dev/cdc-wdm0 --uim-power-off --uim-slot=1
$ uqmi -d /dev/cdc-wdm0 --uim-power-on --uim-slot=1

Note
----
SM-DP+ might use encryption parameters which are incompatible with
mbedtls which cURL is by default compiled for.

This was observed when attempting to download a profile from
Vodafone DE.

If you encounter issues in that regard, try to install a version of
libcurl which is compiled with OpenSSL support.

Signed-off-by: David Bauer <david.bauer@uniberg.com>

lpac: update to v2.1.0

fd58ad7 Bump 2.1.0
319f55f chore(docs): add interactive preview mode option
da1cf1a update download cancel process
cee7190 workaround for es9p cancel session override error_detail
b11878f typo
e6b32e1 Merge branch 'main' of github.com:estkme/lpac
302984f preview && cancel session
56352c5 docs: Add parameters for 'notification process' (#144)
19df553 chore(driver): improve memory management in at driver (#140)
c86edd5 chore(driver): set pcsc and curl as default drivers. (#137)
3bde4a1  driver(APDU): add QMI backend (#131)
0011ea6 docs: add link to lpa-gtk ui for lpac (#125)
d508b28 refactor: bash scripts (#123)
f5956dd chore: move rlpa-server to independent repo (#122)

Signed-off-by: David Bauer <david.bauer@uniberg.com>

unbound: update to 1.21.0

Signed-off-by: Jan Klos <jan@klos.xyz>

afalg_engine: bump to 1.2.1

This adapts the package to semantic versioning.
Added a simple Ci test script.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

graphicsmagick: update to 1.3.44

Explicitly disable gs and libzip in configure
to prevent host dependencies leakage.

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

imagemagick: update to 7.1.1.37

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

mc: update to 4.8.32

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

netbird: add kmod-wireguard dependency

netbird supports the wireguard kernel module, but it can work without it in userspace,
losing some performance, but we know in advance that netbird will run as root,
therefore supporting the wireguard kernelspace with better performance.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

mstflint: update to 4.29.0

This commit updates the mstflint package to the latest 4.29.0
release, including the new binaries mstfwctrl, mstlink, mstreg,
and libexpat as a new dependency.

Signed-off-by: Til Kaiser <mail@tk154.de>

tailscale: Update to 1.72.1

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

node: bump to v20.17.0

Notable Changes
module: support require()ing synchronous ESM graphs
path: add matchesGlob method
stream: expose DuplexPair API

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Revert "qfirehose: new package"

This reverts commit df1cd5792a9b2e8514d7a34857a0369ee78b0ceb as the
current licensing terms prevents use in FOSS projects:

  Under no circumstances may customers modify, demonstrate, use, deliver
  or disclose any portion of the Software in source code form.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

numpy: bump to version 2.1.0

Re-applied:
   003-without-vendored-meson.patch

Added:
   004-workaround-for-multiple-top-level-packages-discovered.patch

Suggestion found here:
   https://stackoverflow.com/questions/72294299/multiple-top-level-packages-discovered-in-a-flat-layout

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

django: bump to 5.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

dnsproxy: add hosts configurations

trim whitespaces while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libuwsc: bump PKG_RELEASE for APK

PKG_RELEASE must be an integer.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-try-tiny: update to 0.32

This doesn't include functional changes, but fixes tests with Perl >=
5.41.3.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>

dockerd: Update to 27.1.2

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

docker: Update to 27.1.2

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

cloudflared: Update to 2024.8.3

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

libgpiod: update to 2.1.3

Upstream bug fixes:
- fix C++ tests with recent kernels which introduced stricter reconfigure
  behavior
- fix a use-after-free bug in python bindings
- fix passing the event clock property to line requests in python bindings
- fix a memory leak in tools
- make sure the string buffers in line-info and chip-info are big enough to not
  truncate the strings they hold below the size accepted by the kernel

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libpqxx: update to 7.9.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openblas: bump to version 0.3.28

Also change URL to new page.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

tcpreplay: add simple test.sh for all executables

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

tcpreplay: bump to version 4.5.1

Dropped CVE patch.
It's included.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

db47: replace with db

There's no need to maintain an old version.

Removed all patches as they are all upstream.

Import new ones from Arch, Debian, and OpenEmbedded.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

freeradius3: fix when host readline is present

autoreconf messes things up.

Fixed a typo regarding unixodbc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

knxd: bump to version 0.14.63

Signed-off-by: Othmar Truniger <github@truniger.ch>

dnsproxy: Update to 0.73.1

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

ddns-scripts: add support for Porkbun

Extends DDNS support for the Porkbun v3 JSON API with a custom update
script and service configuration.

See: https://porkbun.com/api/json/v3/documentation

Depends on cURL (with SSL) for transport. Porkbun authentication API keys
and secret keys are passed through the ddns-scripts "username" and
"password" variables, respectively. As Porkbun DNS is currently backed by
Cloudflare, also support ddns-scripts "rec_id" variable for specific
record targeting.

Signed-off-by: Ansel Horn <dev@cahorn.net>

ddns-scripts: Add IPv6 and https for OVH

ovh.com supports https and IPv6 since March 2024.
New API operates under domain dns.eu.ovhapis.com
Add IPv6 support, use https and updated domain for ovh.com.

Signed-off-by: Karol Kolacinski <kolacinskikarol@live.com>

znc: update to 1.9.1

Update ZNC to latest release 1.9.1.

Changelog:

* https://wiki.znc.in/ChangeLog/1.9.1

Since we never provided modtcl, OpenWrt was never affected by
CVE-2024-39844.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>

openwisp-monitoring: add missing PKG_VERSION for APK

The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.

Signed-off-by: Oliver Kraitschy <ok@dev.tdt.de>

openwisp-config: add missing PKG_VERSION for APK

The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.

Signed-off-by: Oliver Kraitschy <ok@dev.tdt.de>

adblock: update to 4.2.2-3

* bugfix: users reported unexpected side effects with  the newly introduced rpc-sys ubus service, reverted that part
*bugfix: made "tcpdump" optional

Signed-off-by: Dirk Brenken <dev@brenken.org>

adblock: update to 4.2.2-2

* removal of a superfluous opkg code block (missed in the last commit)
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.73.0

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

sing-box: update to 1.9.4

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>

basicstation: fix compilation for new mbedtls version 3.x

The basicstation build fails since the change to the new major version
3.x of mbedtls, because of API changes in the new mbedtls version.

To fix the compilation for new mbedtls version, the waiting pullrequest
is backported as a patch.

Thanks to 'Glenn Strauss' to create this PR:
https://github.com/lorabasics/basicstation/pull/198

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

libmspack: update to 0.11alpha

Reworked PKG_VERSION for apk compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bonding: fix apk version

Fix apk version schema by changing the 'PKG_VERSION'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

bluez-tools: fix apk version

Fix apk version schema by removing 'PKG_VERSION'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ntfs-3g: Bump to 2022.10.3

This fixes CVE-2022-40284.

Security release 2022.10.3 (Oct 31, 2022)

 * Rejected zero-sized runs
 * Avoided merging runlists with no runs

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>

pingcheck: update to latest master

Removed PKG_VERSION for apk compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liboping: add pkgconfig to dev install target

The packages 'liboping' does also provide da 'pkgconfig' file. So that other
programs that link against this library and use pkgconfig can find it more
easily, the provided pkconfig file must also be copied into the staging dir.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

libradiotap: update to latest master

Use PKG_SOURCE_DATE for compatibility with apk.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

v4l2loopback: update to 0.13.2

Use PKG_VERSION for apk compat Need to remove the v.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnet: move to new upstream

SourceForge is 10 years old.

Allows removal of various old hacks.

Updated InstallDev with new stuff.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libre2: use local tarballs

Helps to add compatibility with apk.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sslh: update to 2.1.2

Fix apk compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

adblock: update to 4.2.2

* get rid of the opkg dependency
* fixed remaining hagezi category issues
* adblock still depends on 'gawk', but also accepts busybox awk. The readme describes two officially unsupported installation variants.

Signed-off-by: Dirk Brenken <dev@brenken.org>

squeezelite: handle option to unmute ALSA control

Add logic in squeezelite.init to handle -U <control> cmdline option and
squeezelite.options.unmute=<control> uci option.

Signed-off-by: Kel Modderman <kelvmod@gmail.com>

ci: final round of APK CI fixes

Using -ne wasn't such a good idea since it would do a numeric compare.
Now use -n which checks if the length is non-zero. APK prints the
problematic version if - problematic - so this should now do the trick.

Signed-off-by: Paul Spooren <mail@aparcar.org>

tmate-ssh-server: take over the maintainership

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tmate-ssh-server: bump to latest git HEAD

Switch to standard git versioning.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xupnpd: update to latest version

Switch to local tarballs for APK compatibility.

Full changelog: https://github.com/clark15b/xupnpd/compare/e4e542d9b6d0043d470fda283e2cd325bbb91950...2bc1e741e0efe04cb3150430ff25410093618b4f

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

udpxy: update to latest version

Fixes uninitialized address.
Switch to local tarballs for APK compatibility.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

bcm27xx-eeprom: update to latest version

This update contains multiple improvements for BCM2711 and BCM2712.
Switch to local tarballs for APK compatibility.

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.04.20-2712...v2024.06.05-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

sudo: modify version to Alpine Linux one

The goal here is compatibility with APK.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

elektra: update to 0.9.14

Adjusted lua dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bc: takeover the maintainership

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

bc: update to 1.07.1

- Switch to GNU package URLs
- Switch license to GNU-3.0
- Manually rebase one patch
- Add 3 more patches from Buildroot project

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

tcl: update to 8.6.14

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

v4l2rtspserver: update to v0.3.11 and enable sound

Signed-off-by: Michel Promonet <michel.promonet@free.fr>

ffmpeg: update to 6.1.2

- Remove 020-ioctl patch - upstreamed
- Remove 030-h264-mips patch - implemented slightly different in the upstream
- Two remaining patches are unaffected
- Fixup CPU type detected as ' ' on x86_64

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>

libedit: replace version format with apk compatible version

Signed-off-by: Jan Hák <jan.hak@nic.cz>

libedit: package download protocol has been changed to HTTPS

Signed-off-by: Jan Hák <jan.hak@nic.cz>

libedit: update to version 20240808-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

docker-compose: Update to version 2.29.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.29.2

Signed-off-by: Javier Marcet <javier@marcet.info>

liblz4: update to 1.10.0

Switch to normal tarballs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libvorbisidec: update to latest git

Only differences are two crash fixes from Chromium fuzzing.

Also made compatible with APK by just using PKG_SOURCE_DATE instead of a
bogus PKG_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libx264: update to latest master

Use PKG_SORUCE_DATE for apk compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nerdctl: update to 1.7.6

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

natmap: allow binding to a port or port range

Signed-off-by: Ray Wang <r@hev.cc>

ci: fix APK version detection

This action was mostly based on the autorelease CI job and somehow there
is an error that if multiple packages are affected, the path is
concatenated instead of adding a space.

Secondly the APK return code 0 wasn't good enough for the if condition
and caused it to trigger even on valid versions.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #24765 from dibdot/unbound-gawk

unbound: fix gawk incompatibility

unbound: fix local cnames

For cnames with a local data target the A RR is not resolved and
missing in the response. As most applications don't send another
query and fail, these entries are placed in a rpz zone instead.

Signed-off-by: Tobias Waldvogel <tobias.waldvogel@gmail.com>

ci: check if packages use an APK compatible version

APK uses a deterministic version schema, have the CI check that changed
packages actually follow that version schema.

Signed-off-by: Paul Spooren <mail@aparcar.org>

crowdsec-firewall-bouncer: new upstream release version 0.0.29

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.4

Description:
 - updated to new upstream release version 0.0.29
 - added retry_initial_commit option to init script (by Quba1)
 - aligned namings in script with crowdsec-firewall-bouncer

Co-authored-by: Quba1 <22771850+Quba1@users.noreply.github.com>

hev-socks5-server: update to 2.6.7

This commit follows the upstream project's change of license from GPLv3
to MIT.

Link: https://github.com/heiher/hev-socks5-server/commit/3175713e779a98f1d53fc4463b3e83944155ddbc
Signed-off-by: Ray Wang <r@hev.cc>

natmap: update to 20240813

Signed-off-by: Ray Wang <r@hev.cc>

unbound: fix gawk incompatibility

* fix gawk incompatibility in iptools.sh

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #24738 from stangri/master-pbr

pbr: update to 1.1.6-20

Merge pull request #24715 from stangri/master-https-dns-proxy

https-dns-proxy: update to 2023.12.26-1

owut: update to 2024.08.09

Bug fixes:
  efahl/owut@9ecbea5 owut: ensure shell exit status is correct

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

libucontext: Update to latest upstream version 1.3.1

Signed-off-by: Volker Christian <me@vchrist.at>

lua-eco: update to 3.6.0

A new package lua-eco-packet added since 3.6.0.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

rust: update to 1.80.1

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

inih: remove r from version

Adds compatibility with APK. Switches from codeload to local tarballs.
Smaller and simpler.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gcc: add GCC 14.2

Deleted (upstreamed):

020-Include-safe-ctype.h-after-C-standard-headers-to-avo.patch [1]
021-libcc1-fix-vector-include.patch [2]

All other patches automatically rebased.

[1] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=9970b576b7e4ae337af1268395ff221348c4b34a
[2] https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=5213047b1d50af63dfabb5e5649821a6cb157e33

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>