Eric Fahlgren [Tue, 9 Apr 2024 14:23:46 +0000 (07:23 -0700)]
snort3: fix bug with unset variable
- Parameter not set in two places:
/usr/bin/snort-mgr: eval: line 125: options: parameter not set
Reported-by: @klingon888
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
Christian Marangi [Tue, 7 Nov 2023 00:17:25 +0000 (01:17 +0100)]
snort3: add patch and move to PCRE2
Add experimental patch and move package to PCRE2 as PCRE is EOL and
won't receive any security updates anymore.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Tianling Shen [Sat, 27 Apr 2024 05:18:55 +0000 (13:18 +0800)]
cloudflared: Update to 2024.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Nathan Friedly [Thu, 25 Apr 2024 17:19:33 +0000 (13:19 -0400)]
librespeed-go: improve the description
This swaps the order of the lines in the description so that when LuCI displays only the first line, it still offers some helpful information.
Signed-off-by: Nathan Friedly <nathan@nfriedly.com>
Paul Donald [Sun, 31 Mar 2024 18:25:17 +0000 (20:25 +0200)]
p910nd: set bidi only if not already set
Closes #23774
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Dirk Brenken [Fri, 26 Apr 2024 15:03:14 +0000 (17:03 +0200)]
banip: update 0.9.5-3
* allow multiple protocol/port definitions per feed, e.g. 'tcp udp 80 443 50000'
* removed the default protocol/port limitation from asn feed
Signed-off-by: Dirk Brenken <dev@brenken.org>
Josef Schlehofer [Fri, 26 Apr 2024 09:24:57 +0000 (11:24 +0200)]
syslog-ng: update to version 4.7.1
Release notes:
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.0
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.1
Also bump version in the config file to avoid warning
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Josef Schlehofer [Fri, 26 Apr 2024 08:47:43 +0000 (10:47 +0200)]
Merge pull request #13619 from aparcar/no-circle
CI: remove CircleCI for now
Paul Spooren [Sat, 10 Oct 2020 01:31:01 +0000 (15:31 -1000)]
CI: remove CircleCI for now
The GitHub CI offers currenlty more architecture and the Signed-of-by
test is covered via the DOC CI test. In case GitHub ever changes
policies, we can simply switch back.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Goetz Goerisch [Fri, 19 Apr 2024 16:34:19 +0000 (18:34 +0200)]
jool: update documentation
* corrected the documentation links for upstream
* fixed style to be correctly rendered
* add reference to OpenWrt tutorial
Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Stan Grishin [Thu, 25 Apr 2024 21:33:57 +0000 (14:33 -0700)]
Merge pull request #23984 from stangri/master-adblock-fast
adblock-fast: bugfix: unbound-related fixes
Javier Marcet [Thu, 25 Apr 2024 17:25:35 +0000 (19:25 +0200)]
docker-compose: Update to version 2.27.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.27.0
Signed-off-by: Javier Marcet <javier@marcet.info>
Dirk Brenken [Thu, 25 Apr 2024 17:20:47 +0000 (19:20 +0200)]
Merge pull request #23991 from friendly-bits/master-geoip-shell
geoip-shell: update to v0.5.2
Florian Eckert [Thu, 25 Apr 2024 14:35:33 +0000 (16:35 +0200)]
libqmi: add missing PKG_VERSION for APK
The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Florian Eckert [Thu, 25 Apr 2024 14:35:01 +0000 (16:35 +0200)]
libmbim: add missing PKG_VERSION for APK
The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Jianhui Zhao [Wed, 24 Apr 2024 09:55:40 +0000 (17:55 +0800)]
lua-eco: update to 3.4.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
Stan Grishin [Thu, 25 Apr 2024 00:04:42 +0000 (17:04 -0700)]
Merge pull request #23911 from qosmio/nebula-fix-release-number
nebula: Use APK style release number
Stan Grishin [Thu, 25 Apr 2024 00:01:09 +0000 (17:01 -0700)]
Merge pull request #23907 from qosmio/nghttp3-fix-release-number
nghttp3: Use APK style release number
Stan Grishin [Thu, 25 Apr 2024 00:00:56 +0000 (17:00 -0700)]
Merge pull request #23908 from qosmio/ngtcp2-fix-release-number
ngtcp2: Use APK style release number
David Andreoletti [Sat, 9 Mar 2024 15:08:04 +0000 (23:08 +0800)]
shairport-sync: support mqtt based remote control
Enable MQTT support to control shairport-sync remotely
Signed-off-by: David Andreoletti <david@andreoletti.net>
Ray Wang [Sat, 20 Apr 2024 14:53:03 +0000 (22:53 +0800)]
natmap: add log_std{out,err} options
Introduce `log_stdout` and `log_stderr` options for managing logging output.
Signed-off-by: Ray Wang <r@hev.cc>
Hirokazu MORIKAWA [Wed, 24 Apr 2024 01:38:27 +0000 (10:38 +0900)]
node: bump to v20.12.2
This is a security release.
Notable Changes
* CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Georgi Valkov [Sat, 20 Apr 2024 15:46:18 +0000 (18:46 +0300)]
perl: fix not a Mach-O file on macOS
Reverts [1] to resolve the following build error on macOS:
/Volumes/wrt3200/openwrt/staging_dir/hostpkg/usr/bin/perl installperl --destdir=/Volumes/wrt3200/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/perl/perl-5.38.2/ipkg-install
WARNING: You've never run 'make test' or some tests failed! (Installing anyway.)
/usr/bin/perl5.38.2
error: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/install_name_tool: input file: /Volumes/wrt3200/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/perl/perl-5.38.2/ipkg-install/usr/bin/perl5.38.2 is not a Mach-O file
[1] https://github.com/Perl/perl5/commit/
88efce38149481334db7ddb932f9b74eaaa9765b
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Rosen Penev [Fri, 19 Apr 2024 23:13:45 +0000 (16:13 -0700)]
cni-plugins-nft: use local tarballs
Avoids having to override PKG_UNPACK.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 19 Apr 2024 23:17:56 +0000 (16:17 -0700)]
cni-plugins: use local tarballs
Avoids having to override PKG_UNPACK.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sun, 21 Apr 2024 20:54:45 +0000 (13:54 -0700)]
snort3: use local tarballs
Avoids having a bad tarball name with just the version.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Tue, 23 Apr 2024 22:21:23 +0000 (15:21 -0700)]
treewide: exclude mips64
These packages exclude mips but forget to exclude mips64.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sun, 21 Apr 2024 20:48:53 +0000 (13:48 -0700)]
luasocket: switch to local tarballs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sun, 21 Apr 2024 20:42:56 +0000 (13:42 -0700)]
luaexpat: use local tarballs
Smaller and avoids badly named tarball with just the version.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Florian Eckert [Mon, 22 Apr 2024 08:26:15 +0000 (10:26 +0200)]
modemmanager: add missing PKG_VERSION for APK
The 'PKG_VERSION' string was missing and only 'PKG_SOURCE_VERSION' string
was used.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Anton Khazan [Tue, 23 Apr 2024 06:19:24 +0000 (09:19 +0300)]
geoip-shell: update to v0.5.2
Changes since v0.5:
Bugfixes:
- bugfix: 'geoip-shell on' command errors out on iptables-based systems
- bugfix: when changing the update cron schedule, old cron job does not get removed
- bugfix: in some edge cases, the update cron job may not be created
- bugfix: incorrect mask bits used when creating a rule allowing ipv6 link-local connections (/8 instead of /10)
- bugfix: geoip-shell-fetch.sh: fix running without root permissions
Improvements:
- nftables variant: attach the base chain to the prerouting netfilter hook with priority -141 (rather than -150) to make rules processing deterministic when other rules exist which have priority 'mangle' (-150), making it easier to create custom rules which will be processed before geoip-shell rules
- include information on currently used firewall backend utility (nftables or iptables) in the status report
- avoid unnecessary re-fetching of ip lists when running 'geoip-shell configure'
- randomize the default update schedule's minute between 10 and 20 (previously was always 15)
- randomize the automatic update second between 0 and 59
- improve console messages and the status report
- update and improve the general documentation
- improve OpenWrt-specific documentation
Signed-off-by: Anton Khazan <antonk.d3v@gmail.com>
Christian Marangi [Thu, 19 Oct 2023 13:29:05 +0000 (15:29 +0200)]
xtables-addons: fix broken compile with external Toolchain
Fix broken compile with external Toolchain.
Commit
32aaaaa7d379 ("xtables-addons: pass correct flags to
compile and install") simplified and dropped the custom Compile/Install
in favor of the default one. Problem is that it dropped DESTDIR
resulting in the package having problem on finishing install.
The commit then was reworked with
c83b8787a5f8 ("xtables-addons: adapt
build to EXTERNAL_TOOLCHAIN" that reintroduced DESTDIR and also
introduced a useless custom flag to fix wrong ARCH.
ARCH is fixed by kernel.mk and doesn't depend on external Toolchain or
not. For ARCH that require fixing, kernel.mk should be fixed instead of
adding custom function to packages Makefile.
Drop the custom ARCH handling and use Compile/Install everytime.
Fixes: 32aaaaa7d379 ("xtables-addons: pass correct flags to compile and install")
Fixes: c83b8787a5f8 ("xtables-addons: adapt build to EXTERNAL_TOOLCHAIN")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
krant [Mon, 22 Apr 2024 06:01:34 +0000 (09:01 +0300)]
imagemagick: update to 7.1.1.31
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
David Andreoletti [Sat, 9 Mar 2024 07:19:59 +0000 (15:19 +0800)]
shairport-sync: support before/after entering active state, unfixable error detected, volume set events in UCI config
- Add before/after active state event callbacks in UCI config.
- Add volume change event callbacks in UCI config.
- Add unfixable error event callbacks in UCI config.
As of the current shairport-sync release, all event callbacks have been
mapped to UCI config.
Signed-off-by: David Andreoletti <david@andreoletti.net>
Jianhui Zhao [Mon, 22 Apr 2024 01:18:26 +0000 (09:18 +0800)]
lua-eco: update to 3.4.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
Tianling Shen [Mon, 22 Apr 2024 07:26:30 +0000 (15:26 +0800)]
dnsproxy: Update to 0.70.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Mon, 22 Apr 2024 07:26:22 +0000 (15:26 +0800)]
v2ray-core: Update to 5.15.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Alexandru Ardelean [Mon, 22 Apr 2024 07:11:45 +0000 (10:11 +0300)]
Merge pull request #23975 from krant/libwebp
libwebp: update to 1.4.0
Zephyr Lykos [Sun, 21 Apr 2024 14:06:12 +0000 (22:06 +0800)]
tailscale: Update to 1.64.2
<https://github.com/tailscale/tailscale/releases/v1.64.2>
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
Eneas U de Queiroz [Mon, 22 Apr 2024 01:44:20 +0000 (22:44 -0300)]
Merge pull request #23978 from neheb/o
gost_engine: switch to local tarballs
Alexandru Ardelean [Mon, 15 Apr 2024 16:42:43 +0000 (19:42 +0300)]
python-lxml: bump to version 5.2.1
Also added python-cython/host as a build dependency.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Georgi Valkov [Sat, 20 Apr 2024 23:12:49 +0000 (02:12 +0300)]
usbmuxd: fix tethering not working after iPhone restart
If the iPhone restarts while the USB cable is still connected,
tethering does not work. This can be fixed by reconnecting.
Fix: if the hotplug.d script detects that carrier is disabled
(no communication), the USB link is reset, and then the
usbmuxd service is restarted. Tethering starts even before
the iPhone is unlocked. As a side effect, if tethering is not
enabled, the iPhone will ding a second time after 5 seconds.
Add dependency on usbutils for usbreset, remove dependency on librt.
[1] https://github.com/libimobiledevice/usbmuxd/issues/218
[2] https://github.com/openwrt/openwrt/issues/12566#issuecomment-
2066305622
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Rosen Penev [Sun, 21 Apr 2024 02:32:43 +0000 (19:32 -0700)]
mtd-rw: update version to latest master
Remove local patch as upstream has a different solution applied.
Use PKG_SOURCE_DATE to get rid of weird apk version.
Remove various variables that are default anyway.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Dirk Brenken [Sun, 21 Apr 2024 19:57:17 +0000 (21:57 +0200)]
banip: update 0.9.5-2
* fixed possible Set search race condition (initiated from LuCI frontend)
* fixed the "no result" Set search problem in LuCI
* removed abandoned feeds: spamhaus edrop (was merged with spamhaus drop)
Signed-off-by: Dirk Brenken <dev@brenken.org>
Christian Marangi [Sun, 21 Apr 2024 15:47:59 +0000 (17:47 +0200)]
nginx: bump to 1.25.5 release
Bump nginx to 1.25.5 release.
Patch automatically refreshed with make package/nginx/refresh.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Christian Marangi [Sun, 21 Apr 2024 15:39:49 +0000 (17:39 +0200)]
uwsgi: update Maintainer name
Update maintainer name with real name for Christian Marangi.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Christian Marangi [Sun, 21 Apr 2024 15:38:24 +0000 (17:38 +0200)]
uwsgi: bump to latest 2.0.25.1 release
Bump to latest 2.0.25.1 release
Drop upstream PCRE2 patch and alarm memory leak fix.
Rework and refresh patch due to release bump.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Stan Grishin [Sun, 21 Apr 2024 14:06:52 +0000 (14:06 +0000)]
adblock-fast: bugfix: unbound-related fixes
* include `server:` directive at the top of unbound file
* update unbound-related outputGzip variable to include full path
* return always_nxdomain for blocked domains
* also update copyright stamp/license
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Rosen Penev [Fri, 19 Apr 2024 21:36:01 +0000 (14:36 -0700)]
gost_engine: switch to local tarballs
Avoids PKG_UNPACK hacks.
Added PKG_LICENSE_FILES.
Reordered variables for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Jonas Jelonek [Sat, 20 Apr 2024 16:10:46 +0000 (18:10 +0200)]
eza: update to 0.18.11
changelogs:
0.18.10: https://github.com/eza-community/eza/releases/tag/v0.18.10
0.18.11: https://github.com/eza-community/eza/releases/tag/v0.18.11
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
Hauke Mehrtens [Sun, 14 Apr 2024 13:43:23 +0000 (15:43 +0200)]
libmraa: Fix compilation with musl libc 1.2.5
Support POSIX basename used in musl libc 1.2.5.
This backports a patch from upstream git.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Rosen Penev [Sat, 13 Apr 2024 21:35:46 +0000 (14:35 -0700)]
xxhash: build with cmake
Faster.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sat, 13 Apr 2024 21:33:22 +0000 (14:33 -0700)]
xxhash: switch to local git tarballs
Smaller and avoids having to use PKG_UNPACK.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Hauke Mehrtens [Sun, 14 Apr 2024 13:43:23 +0000 (15:43 +0200)]
tini: Fix compilation with musl libc 1.2.5
Support POSIX basename used in musl libc 1.2.5.
This fixes compilation with musl libc 1.2.5.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
krant [Sat, 20 Apr 2024 21:17:23 +0000 (00:17 +0300)]
libwebp: update to 1.4.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
Josef Schlehofer [Sat, 20 Apr 2024 17:03:20 +0000 (19:03 +0200)]
Merge pull request #23969 from dibdot/curl
curl: fix/bump PKG_RELEASE, remove maintainer
Dirk Brenken [Sat, 20 Apr 2024 11:05:05 +0000 (13:05 +0200)]
Merge pull request #23963 from dibdot/banIP
banip: release 0.9.5-1
Dirk Brenken [Fri, 19 Apr 2024 20:09:29 +0000 (22:09 +0200)]
banip: release 0.9.5-1
* added a DDoS protection rules in a new pre-routing chain to prevent common ICMP, UDP and SYN flood attacks and drop spoofed tcp flags & invalid conntrack packets, flood tresholds are configured via 'ban_icmplimit' (default 10/s), 'ban_synlimit' (default 10/s) and 'ban_udplimit' (default 100/s)
* the new pre-routing rules are tracked via named nft counters and are part of the standard reporting, set 'ban_logprerouting' accordingly
* block countries dynamically by Regional Internet Registry (RIR)/regions, e.g. all countries related to ARIN. Supported service regions are: AFRINIC, ARIN, APNIC, LACNIC and RIPE, set 'ban_region' accordingly
* it's now possible to always allow certain protocols/destination ports in wan-input and wan-forward chains, set 'ban_allowflag' accordingly - e.g. ' tcp 80 443-445'
* filter/convert possible windows line endings of external feeds during processing
* the cpu core autodetection is now limited to max. 16 cores in parallel, set 'ban_cores' manually to overrule this limitation
* set the default nft priority to -100 for banIP input/forward chains (pre-routing is set to -150)
* update readme
* a couple of bugfixes & performance improvements
* removed abandoned feeds: darklist, ipblackhole
* added new feeds: becyber, ipsum, pallebone, debl (changed URL)
* requires a LuCI frontend update as well (separate PR/commit)
Signed-off-by: Dirk Brenken <dev@brenken.org>
Hannu Nyman [Sat, 20 Apr 2024 06:21:07 +0000 (09:21 +0300)]
geoip-shell: remove extra r from PKG_RELEASE
Remove the unnecessary 'r' from PKG_RELEASE as it is
added automatically by the build system to the final versioning.
(Current version leads into 'geoip-shell_0.5-rr2_all.ipk')
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Dirk Brenken [Sat, 20 Apr 2024 05:41:20 +0000 (07:41 +0200)]
curl: fix/bump PKG_RELEASE, remove maintainer
* make PKG_RELEASE numeric again
* made a release bump due to a newly added patch (see https://github.com/openwrt/packages/commit/
de4ef9d169a182350796afca778742bf68052af4 for details)
* remove maintainer (as requested in #23890
Signed-off-by: Dirk Brenken <dev@brenken.org>
Paul Donald [Fri, 1 Mar 2024 20:49:30 +0000 (21:49 +0100)]
ntpd: update to version 4.2.8p17
Also some spell fixes for README.md
Drop patch-0001 - ntpd >= 4.2.8p16 patched this behaviour. See:
https://bugs.ntp.org/show_bug.cgi?id=3741 (and the linked diff there)
https://git.nwtime.org/websites/ntpwww/commit/
d2a7faef2fea5f10b28cc2ee1d842e4b241f414f
Signed-off-by: Paul Donald <newtwen@gmail.com>
Rosen Penev [Sat, 13 Apr 2024 21:44:40 +0000 (14:44 -0700)]
udpspeeder: use local tarballs
Simpler, smaller, and avoids PKG_UNPACK.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Hauke Mehrtens [Sun, 14 Apr 2024 14:10:31 +0000 (16:10 +0200)]
lua-eco: Fix compilation with musl libc 1.2.5
Support POSIX basename used in musl libc 1.2.5.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Hauke Mehrtens [Sun, 14 Apr 2024 14:10:31 +0000 (16:10 +0200)]
rtty: Fix compilation with musl libc 1.2.5
Support POSIX basename used in musl libc 1.2.5.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Rosen Penev [Sat, 13 Apr 2024 22:05:03 +0000 (15:05 -0700)]
yara: update to 4.5.0
Move away from codeload for smaller and better tarballs.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Zephyr Lykos [Wed, 17 Apr 2024 13:34:08 +0000 (21:34 +0800)]
tailscale: Update to 1.64.1
<https://github.com/tailscale/tailscale/releases/v1.64.1>
Signed-off-by: Zephyr Lykos <git@mochaa.ws>
krant [Fri, 19 Apr 2024 11:10:45 +0000 (14:10 +0300)]
socat: fix compile error when ccache is enabled
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
Rosen Penev [Sun, 14 Apr 2024 23:44:08 +0000 (16:44 -0700)]
ibrcommon: remove basename
Can be replaced with regular C++.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Maxim Storchak [Sun, 14 Apr 2024 12:27:28 +0000 (15:27 +0300)]
rsync: support xxhash and lz4
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
Rui Salvaterra [Fri, 19 Apr 2024 11:36:32 +0000 (12:36 +0100)]
Merge pull request #23943 from rsalvaterra/tor-bump
tor: update to 0.4.8.11 stable
Jo-Philipp Wich [Fri, 19 Apr 2024 11:16:39 +0000 (13:16 +0200)]
Merge pull request #23821 from friendly-bits/add_geoip-shell
geoip-shell: add package
Alexandru Ardelean [Fri, 19 Apr 2024 09:32:13 +0000 (12:32 +0300)]
Merge pull request #23939 from commodo/python-updates1
django,django-restframework: bump versions
Michael Heimpold [Fri, 19 Apr 2024 04:27:36 +0000 (06:27 +0200)]
Merge pull request #23955 from mhei/php8-update-to-8.3.6
php8: update to 8.3.6
Tianling Shen [Mon, 15 Apr 2024 07:18:04 +0000 (15:18 +0800)]
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Mon, 15 Apr 2024 07:20:07 +0000 (15:20 +0800)]
v2ray-geodata: make PKG_RELEASE numeric again
According to the documentation[1] 'PKG_RELEASE' should be a number,
so polulate the APK-style 'r' via 'VERSION' instead.
1. https://openwrt.org/docs/guide-developer/packages#buildpackage_variables
Fixes: 30796c59485b ("v2ray-geodata: use APK compatible version schema")
Reported-by: Sean Khan <datapronix@protonmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Felix Fietkau [Thu, 18 Apr 2024 19:58:13 +0000 (21:58 +0200)]
curl: fix SSL init with mbedtls 3.6
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Felix Fietkau [Thu, 18 Apr 2024 19:46:11 +0000 (21:46 +0200)]
libssh: update to version 0.10.6, fix build with mbedtls 3.6
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Josef Schlehofer [Thu, 18 Apr 2024 17:38:19 +0000 (19:38 +0200)]
Merge pull request #23953 from commodo/cython-update1
python-cython: bump to version 3.0.10
Marcus Folkesson [Mon, 12 Feb 2024 14:57:30 +0000 (15:57 +0100)]
python-jinja2: create /host target
Make the python-jinja2/host target available for the build environment
to be used with e.g. the PKG_BUILD_DEPENDS list.
This is needed for an upcoming package (libcamera).
Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
Marcus Folkesson [Mon, 12 Feb 2024 15:04:09 +0000 (16:04 +0100)]
python-yaml: create /host target
Make the python-yaml/host target available for the build environment
to be used with e.g. the PKG_BUILD_DEPENDS list.
This is needed for an upcoming package (libcamera).
Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
Sean Khan [Fri, 12 Apr 2024 18:03:04 +0000 (14:03 -0400)]
nginx: Use zst + APK style packaging for modules
Generates git tarballs in the new APK style format:
Note that `SOURCE_DATE` was added and need to be updated
as the commit date of the commit hash
Before:
```
nginx-mod-geoip2-
1cabd8a1f68ea3998f94e9f3504431970f848fbf.tar.xz
nginx-mod-headers-more-
bea1be3bbf6af28f6aa8cf0c01c07ee1637e2bd0.tar.xz
nginx-mod-brotli-
25f86f0bac1101b6512135eac5f93c49c63609e3.tar.xz
nginx-mod-rtmp-
f0ea62342a4eca504b311cd5df910d026c3ea4cf.tar.xz
nginx-mod-ts-
ef2f874d95cc75747eb625a292524a702aefb0fd.tar.xz
nginx-mod-naxsi-
d714f1636ea49a9a9f4f06dba14aee003e970834.tar.xz
nginx-mod-lua-
c89469e920713d17d703a5f3736c9335edac22bf.tar.xz
nginx-mod-lua-resty-core-
2e2b2adaa61719972fe4275fa4c3585daa0dcd84.tar.xz
nginx-mod-lua-resty-lrucache-
52f5d00403c8b7aa8a4d4f3779681976b10a18c1.tar.xz
nginx-mod-dav-ext-
f5e30888a256136d9c550bf1ada77d6ea78a48af.tar.xz
nginx-mod-ubus-
b2d7260dcb428b2fb65540edb28d7538602b4a26.tar.xz
```
After:
```
nginx-mod-geoip2-2020.01.22~
1cabd8a1.tar.zst
nginx-mod-headers-more-2022.07.17~
bea1be3b.tar.zst
nginx-mod-brotli-2020.04.23~
25f86f0b.tar.zst
nginx-mod-rtmp-2018.12.07~
f0ea6234.tar.zst
nginx-mod-ts-2017.12.04~
ef2f874d.tar.zst
nginx-mod-naxsi-2022.09.14~
d714f163.tar.zst
nginx-mod-lua-2023.08.19~
c89469e9.tar.zst
nginx-mod-lua-resty-core-2023.09.09~
2e2b2ada.tar.zst
nginx-mod-lua-resty-lrucache-2023.08.06~
52f5d004.tar.zst
nginx-mod-dav-ext-2018.12.17~
f5e30888.tar.zst
nginx-mod-ubus-2020.09.06~
b2d7260d.tar.zst
```
Run tested: aarch64, Dynalink DL-WRX36, Master Branch
Signed-off-by: Sean Khan <datapronix@protonmail.com>
Sean Khan [Fri, 12 Apr 2024 22:05:30 +0000 (18:05 -0400)]
nginx: autoload dynamic modules
In current setup, dynamic modules are not autoloaded, requiring users
to create and load additional config files.
We should assume that if a user installs additional modules, they want
them 'on' by default.
This commit does the following:
1.) generates a module load config in '/etc/nginx/modules.d' with the
format '${module_name}'.module
(i.e. /etc/nginx/modules.d/ngx_http_geoip2.module)
2.) deletes previous module conf for 'luci'
/etc/nginx/modules.d/luci.module if it exists, this will prevent
'module already loaded' errors.
The following is a portion of the final output when using the
default uci template `/etc/nginx/uci.conf.template` (via nginx-util):
```
nginx -T -c '/etc/nginx/uci.conf'
load_module /usr/lib/nginx/modules/ngx_http_brotli_filter_module.so;
load_module /usr/lib/nginx/modules/ngx_http_brotli_static_module.so;
load_module /usr/lib/nginx/modules/ngx_http_dav_ext_module.so;
load_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so;
load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so;
load_module /usr/lib/nginx/modules/ngx_http_lua_module.so;
load_module /usr/lib/nginx/modules/ngx_http_naxsi_module.so;
load_module /usr/lib/nginx/modules/ngx_http_ts_module.so;
load_module /usr/lib/nginx/modules/ngx_http_ubus_module.so;
load_module /usr/lib/nginx/modules/ngx_rtmp_module.so;
load_module /usr/lib/nginx/modules/ngx_stream_module.so;
load_module /usr/lib/nginx/modules/ngx_stream_geoip2_module.so;
```
Signed-off-by: Sean Khan <datapronix@protonmail.com>
Sean Khan [Fri, 12 Apr 2024 22:40:13 +0000 (18:40 -0400)]
nginx: fix geoip2 dependency on mod ngx_stream
Since the geoip2 package contains both `http` and `stream` versions. It
requires the module `ngx_stream` be installed and loaded and produces
the error:
```
2024/04/12 18:38:18 [emerg] 4402#0: dlopen()
"/usr/lib/nginx/modules/ngx_stream_geoip2_module.so" failed (Error
relocating /usr/lib/nginx/modules/ngx_stream_geoip2_module.so:
ngx_stream_complex_value: symbol not found) in
/etc/nginx/module.d/ngx_stream_geoip2.module:1 nginx: configuration file
/etc/nginx/uci.conf test failed
```
Add dependency so it's built at build time and installed automatically
by `opkg`
Signed-off-by: Sean Khan <datapronix@protonmail.com>
Michael Heimpold [Mon, 15 Apr 2024 19:44:25 +0000 (21:44 +0200)]
php8: update to 8.3.6
This fixes:
- CVE-2024-1874
- CVE-2024-2756
- CVE-2024-2757
- CVE-2024-3096
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Alexandru Ardelean [Tue, 16 Apr 2024 07:31:53 +0000 (10:31 +0300)]
python-cython: bump to version 3.0.10
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Anton Khazan [Tue, 16 Apr 2024 11:08:27 +0000 (14:08 +0300)]
geoip-shell: add package
Adds the geoip-shell package to OpenWrt.
geoip-shell is a flexible geoip blocker for Linux with a user-friendly command-line interface.
Signed-off-by: Anton Khazan <antonk.d3v@gmail.com>
Alexandru Ardelean [Mon, 15 Apr 2024 16:44:02 +0000 (19:44 +0300)]
django-restframework: bump to version 3.15.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Alexandru Ardelean [Mon, 15 Apr 2024 16:41:54 +0000 (19:41 +0300)]
django: bump to version 5.0.4
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Rui Salvaterra [Mon, 15 Apr 2024 12:45:27 +0000 (13:45 +0100)]
tor: update to 0.4.8.11 stable
Minor release, see the changelog [1] for what's new.
[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
Florian Eckert [Tue, 16 Apr 2024 06:45:17 +0000 (08:45 +0200)]
Merge pull request #23879 from TDT-AG/pr/
20240411-ucitrack
keepalived: remove file sync handling for ucitrack
Florian Eckert [Thu, 11 Apr 2024 14:18:51 +0000 (16:18 +0200)]
keepalived: remove file sync handling for ucitrack
The ucitrack file hanlding was converted to json. Therefore this is not
needed anymore.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Stan Grishin [Mon, 15 Apr 2024 21:43:13 +0000 (14:43 -0700)]
Merge pull request #23925 from stangri/master-pbr
pbr: bugfix: fix IPv6 interface errors
Stan Grishin [Sat, 13 Apr 2024 22:31:52 +0000 (22:31 +0000)]
pbr: bugfix: fix IPv6 interface errors
* update license to AGPL-3.0-or-later
* rename pbr_get_gateway to pbr_get_gateway4 for better readability
* improve IPv6 "gateway" detection/display on start
* prevent IPv6 interface errors on start
* revert release format
Signed-off-by: Stan Grishin <stangri@melmac.ca>
krant [Mon, 15 Apr 2024 05:05:24 +0000 (08:05 +0300)]
squid: update to 6.9
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
Tianling Shen [Mon, 15 Apr 2024 05:22:56 +0000 (13:22 +0800)]
cloudflared: Update to 2024.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Tianling Shen [Mon, 15 Apr 2024 05:22:09 +0000 (13:22 +0800)]
dnsproxy: Update to 0.69.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
krant [Sun, 14 Apr 2024 07:03:37 +0000 (10:03 +0300)]
erlang: update to 26.2.4
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
dracode [Wed, 3 Apr 2024 04:14:40 +0000 (00:14 -0400)]
hcxdumptool: Update to 6.3.4
Version 6.3.4 has some important fixes for the OpenWrt community.
This version properly supports Big-Endian systems (which are many); the previous OpenWrt packaged version crashed on such systems.
Signed-off-by: dracode <github@dragonbyte.org>
Paul Spooren [Thu, 11 Apr 2024 20:29:55 +0000 (22:29 +0200)]
mtd-rw: drop PKG_VERSION definition in Makefile
By default Kernel modules follow the version schema from openwrt.git,
which happens to be APK compatible. Instead of defining a entirely
custom format, use what's already out there.
This patch drops the individual PKG_VERSION definition.
Right now, the version becomes 6.1.82.0~
7e856206-r2.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Shi JiaYang [Sat, 6 Apr 2024 02:38:58 +0000 (10:38 +0800)]
adguardhome: update to 0.107.48
View the release notes for more information:
https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.48
Signed-off-by: Shi JiaYang <shi05275@163.com>