python-docutils: Update to 0.20.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-editables: Update to 0.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pathspec: Update to 0.11.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

lxc: update to 5.0.3

Bump to latest upstream release.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

snort3: update to 3.1.67.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

docker: Update to 24.0.5

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 24.0.5

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Update to 1.1.8 for docker v24.0.5

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

knot: update to version 3.2.9

Signed-off-by: Jan Hák <jan.hak@nic.cz>

Merge pull request #21687 from stangri/master-curl

curl: update to 8.2.1

Merge pull request #21597 from pprindeville/isc-dhcp-fix-multiple-routes

isc-dhcp: fix handling multiple instances of 'routes' list

curl: update to 8.2.1

* https://curl.se/changes.html#8_2_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>

isc-dhcp: some IoTs need forced rebinding/renewal times

I've noticed my AppleTV's refresh their leases ever minute unless
I explicitly force their renewal time higher, because it doesn't
default to 50% of the lease time.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

isc-dhcp: fix handling multiple instances of 'routes' list

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

libudev-zero: bump to 1.0.3

libudev-zero bump to 1.0.3. Resolves bug with USBIP.

Error behavior with USBIP attach:
libusbip: error: no available ports
usbip: error: open vhci_driver
usbip: error: list imported devices

Expected behaviour - USBIP:
root@OpenWrt:~# usbip port
Imported USB devices

Signed-off-by: Taylor Brown <taylorami@hotmail.com>

cloudflared: Update to 2023.7.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-certifi: add github runtime test

This loads the module, which should return the path of the CA bundle
and verifies that the file exists.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #20662 from akosiaris/collectd_mqtt

collectd: Support config of mqtt plugin

Merge pull request #21638 from stangri/master-curl

curl: update to 8.2.0

mg: bump to 7.3

Description:
Sync to OpenBSD 7.3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

collectd: Support config of mqtt plugin

mqtt plugin is already built and shipped in
collectd-mod-mqtt, however it is not possible to configure it via
uci currently, instead having to rely on populating the config file manually.

Add support by adding 2 functions, process_mqtt() and
process_mqtt_block(). First one just enables/disables the plugin.
The second one, in the spirit of the curl plugin, adds support for
populating multiple <Publish> and <Subscribe> blocks under <Plugin mqtt>
with support for some parameters. Those are:

* blocktype. Publish or Subscribe. Mandatory
* name. The name of the block. Mandatory
* Host. Mandatory
* Port. Optional
* User. Optional
* Password. Optional
* ClientId. Optional
* QoS. Optional
* Prefix. Optional
* Retain. Optional
* StoreRates. Optional
* CleanSession. Optional
* Topic. Optional

Bump PKG_RELEASE per comments in PR

Signed-off-by: Alexandros Kosiaris <akosiaris@gmail.com>

Merge pull request #21666 from pprindeville/isc-dhcp-drop-uci_get_state

isc-dhcp: deprecate use of uci_get_state in client scripts

isc-dhcp: use network_get_device in client scripts

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

openvpn: update to 2.6.5 and add DCO support

This commit updates openvpn to version 2.6.5 and add DCO support.

There are several changes:

- Starting with version 2.6.0, the sources are only provided as .tar.gz
  file.

- removed OPENVPN_<variant>_ENABLE_MULTIHOME:
  multihome support is always included and cannot be disabled anymore
  with 2.6.x.

- removed OPENVPN_<variant>_ENABLE_DEF_AUTH:
  deferred auth support is always included and cannot be disabled
  anymore with 2.6.x.

- removed OPENVPN_<variant>_ENABLE_PF:
  PF (packet filtering) support was removed in 2.6.x.

- The internal lz4 library was removed in 2.6.x; we now use the liblz4
  package if needed

- To increase reproducibility, _DATE_ is only used for development
  builds and not in release builds in 2.6.x.

- wolfSSL support was integrated into upstream openvpn

- DES support was removed from openvpn

The first two wolfSSL patches were created following these 2 commits:
https://github.com/OpenVPN/openvpn/commit/4cf01c8e4381403998341aa32f79f4bf24c7ccb1
https://github.com/OpenVPN/openvpn/commit/028b501734b4a57dc53edb8b11a4b370f5b99e38

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

ovpn-dco: Update to v0.2.20230426

OpenVPN 2.6.2+ changes the way OpenVPN control packets are handled on
Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1
under high client connect/disconnect activity. This is an INCOMPATIBLE
change and therefore an ovpn-dco kernel module older than v0.2.20230323
(commit ID 726fdfe0fa21) will not work anymore and must be upgraded.
The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight
this change and ensure that users and userspace software could easily
understand which version is loaded. Attempting to use the old ovpn-dco
with 2.6.2+ will lead to disabling DCO at runtime.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

python-gnupg: Update to 0.5.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.41.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-awscli: Update to 1.29.7, update dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-boto3: Update to 1.28.7, update dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-s3transfer: Update to 0.6.1, update dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-botocore: Update to 1.31.7, update dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-awesomeversion: Update to 23.5.0, update dependencies

The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-atomicwrites: Update to 1.4.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-sqlparse: Update to 0.4.4, rename source package

This renames the source package to python-sqlparse to match other Python
packages.

This also updates the build dependencies; package now uses the flit-core
build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-aiohttp: Update 3.8.5, update dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-aiosignal: Add new package

From the README:

A project to manage callbacks in asyncio projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-frozenlist: Add new package

From the README:

frozenlist.FrozenList is a list-like structure which implements
collections.abc.MutableSequence. The list is mutable until
FrozenList.freeze is called, after which list modifications raise
RuntimeError.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-charset-normalizer: Add new package

From the README:

A library that helps you read text from an unknown charset encoding.
Motivated by chardet, I'm trying to resolve the issue by taking a new
approach. All IANA character set names for which the Python core library
provides codecs are supported.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-pyroute2: Update to 0.7.9, rename source package

This renames the source package to python-pyroute2 to match other Python
packages.

This also updates/simplifies the package dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-apipkg: Update to 3.0.1

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-maxminddb: Update to 2.4.0, rename source package

This renames the source package to python-maxminddb to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-async-timeout: Update to 4.0.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-execnet: Update to 2.0.2

The package changed to the hatchling build backend and removed the
dependency on apipkg.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

transmission: add copy_file_range syscall to seccomp

Fixes this crash:

root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log
type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000
root@RPi3OpenWrt:/# ausyscall 285
copy_file_range
root@RPi3OpenWrt:/#

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

python-pip: Update to 23.2.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

knxd: new upstream version 0.14.59

Signed-off-by: Othmar Truniger <github@truniger.ch>

modemmanager: improve 'simple connection' option handling

The line to generate the argument list for 'simple connect' is quite
long and is not maintainable. To improve the handling a function
'append_param' was added for appending the 'simple connect' options.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: Adding support for 'allow_roaming' option

Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.net>
* Update commit head
* Rebase patch to the latest changes
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #21621 from TDT-AG/pr/20230721-modemmanager

modemmanager: improve teardown handling

modemmanger: add missing proto_init_update in teardown

Inform netifd with missing 'proto_update', that the interface is not
up anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: do not set proto_notify_error on teardown

If on teardown the 'proto_notify_error' is set to 'MM_TEARDOWN_IN_PROGRESS',
then an error which is set on 'setup' is not visible in the ubus
network.interface.<iface> status output.

{
  "up": false,
  "pending": false,
  "available": true,
  "autostart": false,
  "dynamic": false,
  "proto": "modemmanager",
  "data": {
  },
  "errors": [
    {
      "subsystem": "dualsim",
      "code": "MM_TEARDOWN_IN_PROGRESS"
    }
  ]
}

It alway shows the code 'MM_TEARDWON_IN_PROGRESS'!

By removing the line 'proto_notify_error "${interface}" MM_TEARDOWN_IN_PROGRESS'
in teardown, the last error is show in the proto stack from setup.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #16300 from maxrd2/modemmanager-plmn-support

modemmanager: support setting plmn

easyloggingpp: Update version to 9.97.1

Update to version 9.97.1 of easyloggingpp

Changelog from upstream
* Ensuring the build on ARM64 works
* Update gtest and cmake now requires C++14 because of that

Compile tested: arm_cortex-a7_neon-vfpv4, mips_24kc, aarch64_cortex-a53

Run tested: Linksys MR8300 (arm_cortex-a7_neon-vfpv4)
            GL.iNet GL-A1800 (arm_cortex-a7_neon-vfpv4)
            TP-Link_Archer A7 (mips_24kc),
            GL.iNet GL-MT3000 (aarch64_cortex-a53)

Signed-off-by: Volker Christian <me@vchrist.at>

base16384: bump to version 2.2.4

Signed-off-by: 源 文雨 <fumiama@foxmail.com>

Merge pull request #21631 from stangri/master-https-dns-proxy

https-dns-proxy: improve CLI messaging

Merge pull request #21431 from stangri/master-nebula

nebula: update to 1.7.2 (and cosmetic fixes)

curl: update to 8.2.0

* https://curl.se/changes.html#8_2_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #21628 from stangri/master-simple-adblock

simple-adblock: dnsmasq access bugfix & misc improvements

node: bump to v18.17.0

Notable Changes:
*Ada 2.0
 Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.

*Web Crypto API
 Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #21570 from stintel/bump/softflowd

softflowd: bump to 1.1.0

softflowd: bump to 1.1.0

The tag is now prefixed with v; update PKG_SOURCE_URL and PKG_BUILD_DIR
to reflect this.
Drop upstreamed patches. Refresh leftover patch.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

https-dns-proxy: improve CLI messaging

Signed-off-by: Stan Grishin <stangri@melmac.ca>

simple-adblock: dnsmasq access bugfix & misc improvements

* fix permission to dnsmasq files for ad-blocking
* add pause function to pause the ad-blocking temporarily
* introduce pause_timeout option to control default pause time
* update default config and config-update file
* use $param instead of $1 in adb_start()

Signed-off-by: Stan Grishin <stangri@melmac.ca>

rust: put host build dir to target build dir

When user runs `make clean` command, everything in `$(STAGING_DIR)`
(where we installed rust) will be removed, but `$(BUILD_DIR_HOST)`
(where we compiled rust and stored build stage) is untouched.

So when user starts a new build after that, OpenWrt buildroot will
still consider `rust` is installed already, resulting the build error
"cargo: command not found".

Fix this by moving to target build dir as well.

Fixes: f489e019ac4a ("rust: compile host package per target")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

snort3: update to 3.1.66.0

Upstream bump

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>

rclone: Update to 1.63.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

modemmanager: support setting plmn

Signed-off-by: Mladen Milinkovic <maxrd2@smoothware.net>

Merge pull request #21585 from commodo/python-updates2

django,numpy,lxml: bump versions

Merge pull request #21604 from jefferyto/python3-netifaces-0.11.0

python3-netifaces: Update to 0.11.0, rename source package

Merge pull request #21608 from jefferyto/python3-unidecode-1.3.6

python3-unidecode: Update to 1.3.6, rename source package

docker-compose: Update to version 2.20.2

Signed-off-by: Javier Marcet <javier@marcet.info>

easyloggingpp: Add package
Maintainer: me@vchrist.at
Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2

Description:
Easylogging++ is single header efficient logging library for C++ applications. It is extremely powerful,
highly extendable and configurable to user's requirements.

Signed-off-by: Volker Christian <me@vchrist.at>

v4l2camera: add new package

Signed-off-by: Michel Promonet <michel.promonet@free.fr>
Co-authored-by: Tianling Shen <cnsztl@gmail.com>

python3-unidecode: Update to 1.3.6, rename source package

This renames the source package to python-unidecode to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-netifaces: Update to 0.11.0, rename source package

This renames the source package to python-netifaces to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

dnsproxy: Update to 0.52.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

snowflake: update to 2.6.0

Tor projects tries to migrate away from git.torproject.org [0,1]. We
need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport
patches to fix compiling on riscv64, so add:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/2fa8fd9188078eaa169f1edd16815deae4004c6c

[0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86
[1] - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/82cc0f38f73c4ca4e12d22173562a092ebd4dea0

Signed-off-by: Nick Hainke <vincent@systemli.org>

cpusage: remove AUTORELEASE

Commit 0c10c224be81 only handles the case where AUTORELEASE is used in
PKG_RELEASE thus this package was left behind. Let's fix this up.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>

transmission: add ftruncate syscall to seccomp

Fixes many crashes.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

nvme-cli: Add new package

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

Merge pull request #21593 from jefferyto/ci-fix-pkg-source

CI: Fix finding test script

rust: Update to 1.71.0

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: compile host package per target

While the compiled binaries are intended to run on the host system, the
rust/host package does include the target matching the configured
OpenWrt target.

If using (for example) ./scripts/env to switch between different
OpenWrt configurations, this will cause issues if the different
configuration is for a different target. In such case there will be a
mismatch between the available Rust target and OpenWrt target and the
following error will be printed:

> error[E0463]: can't find crate for `core`
> note: the `XXX` target may not be installed

This fix will add the RUSTC_TARGET_ARCH as HOST_BUILD_DIR and CARGO_HOME
suffix, such that rust/host will be compiled in case an OpenWrt
configuration change causes the RUSTC_TARGET_ARCH to change.

Fixes: #21530
Signed-off-by: Orne Brocaar <info@brocaar.com>
[Applied Jeffery To's suggestion for build and install path]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-pip: Update to 23.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

jq: remove _GNU_SOURCE from Makefile and instead backport patch

Commit 4bb18b04 added _GNU_SOURCE to jq's Makefile to fix a segfault.
This has since been fixed upstream, so this commit backports the upstream
patch instead. This keeps things closer to upstream, and it will prevent
the Makefile from containing a redundant fix once upstream releases the
next version.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #21590 from jefferyto/golang-1.20.6

golang: Update to 1.20.6

CI: Fix finding test script

Currently, the run-test code tries to find the package source directory
based on the directory name only. This fails for the Go compiler package
because there is more than one directory named "golang".

This uses the full path listed in the "Source:" line of the control file
to find the package source directory.

This also:

* Checks for the test script earlier, to avoid installing and removing
  ipk files when there is no test script to be run

* Makes PKG_VERSION parsing more lenient, as the package may not have a
  PKG_RELEASE, e.g. attendedsysupgrade-common

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

golang: Update to 1.20.6

Includes fix for CVE-2023-29406 (net/http: insufficient sanitization of
Host header).

This also updates the copyright information for various Go packaging
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-babel: Update to 2.12.1, add host build

Also updated dependencies for the new version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

numpy: bump to version 1.25.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-django: bump to 4.2.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-lxml: bump to 4.9.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

Merge pull request #21566 from jefferyto/python-mako-reimport

python-mako: Re-import host-only package from abandoned packages repo

Merge pull request #21576 from commodo/libwebp

libwebp: bump to version 1.3.1

Merge pull request #21577 from commodo/tcpreplay

tcpreplay: bump to version 4.4.4

Merge pull request #21575 from commodo/sudo

sudo: bump to verison 1.9.14p1

Merge pull request #21568 from commodo/python-updates1

pillow, pymysql, requests: bump versions

banip: release 0.9.0-1

* supports allowing / blocking of certain VLAN forwards in segregated network environments,
   set 'ban_vlanallow', ''ban_vlanblock' accordingly
* simplified the code/JSON to generate/parse the banIP status
* enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1'
* made the new vlan options available to LuCI (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

tcpreplay: bump to version 4.4.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>