mpd: run mpd as a non-root user

* Make /etc/mpd.conf worldreadable.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

whois: update to 5.5.9

* Updated the .ga TLD server.
* Removed the .cd and cf TLD servers.
* Removed 72 new gTLDs which are no longer active.

Signed-off-by: Paul Spooren <mail@aparcar.org>

apk: update to 2.12.4

Ariadne Conill (1):
      database: do not chroot(".") unless actually necessary

Martin Vahlensieck (1):
      Use correct port when redirected

Timo Teräs (5):
      db: fix control character check to use uint8_t
      libfetch: send Proxy-Authorization also for https connect
      del: report correctly package's provides names

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #15289 from dibdot/banip

banip: update to 0.7.6

Merge pull request #15291 from egorenar/mpd-lame-encoder

mpd-full: enable lame and vorbis encoders

frr: update to 7.5.1 and backports

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

mpd-full: enable lame and vorbis encoders

Enable Vorbis encoder for OGG format and lame for MP3.
This enables mpd to stream OGG and MP3 to e.g. Icecast2.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

banip: update to 0.7.6

* rework the central iptables function to significantly
  reduce the code complexity and the overall number of iptables calls
* check early and only once in the chain for ctstate NEW and
  return otherwise (thanks @ldir-EDB0)
* made the whitelist ordering within the chain more flexible

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #15012 from neheb/ninja

treewide: build CMake projects with Ninja

treewide: build CMake projects with Ninja

faster to compile.

A small selection of packages was tested going from:

Executed in  696.30 secs   fish           external
   usr time   82.98 mins  395.00 micros   82.98 mins
   sys time    9.02 mins    0.00 micros    9.02 mins

to:

Executed in  592.20 secs   fish           external
   usr time   84.84 mins  361.00 micros   84.84 mins
   sys time    8.85 mins   57.00 micros    8.85 mins

Tested by running make -j 12 and wiping staging/build_dir/target_x

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ninja: add custom target support for ninja-cmake

Allows fixing compilation with at least mariadb.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15288 from neheb/fontco

fontconfig: compile with meson

fontconfig: compile with meson

Faster compilation.

Backport upstream patch fixing cross compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15280 from egorenar/imagemagick-freetype-link-fix

imagemagick: fix linking of host libfreetype

imagemagick: fix linking of host libfreetype

Host's libfreetype is being linked during build.

libtool: warning: relinking 'MagickWand/libMagickWand-7.Q8.la'
libtool: install: (cd /home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5; /bin/sh "/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5/libtool"  --tag CC --mode=relink arm-openwrt-linux-muslgnueabi-gcc -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include/libpng16 -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include/freetype2 -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include/libpng16 -I/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/include -Os -pipe -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -mfloat-abi=hard -fmacro-prefix-map=/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5=ImageMagick-7.0.9-5 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -flto -Wall -fexceptions -pthread -DMAGICKCORE_HDRI_ENABLE=0 -DMAGICKCORE_QUANTUM_DEPTH=8 -no-undefined -Wl,--version-script=./MagickWand/libMagickWand.map -version-info 7:0:0 -L/home/egorenar/Repositories/openwrt-rel/staging_dir/toolchain-arm_cortex-a15+neon-vfpv4_gcc-8.4.0_musl_eabi/usr/lib -L/home/egorenar/Repositories/openwrt-rel/staging_dir/toolchain-arm_cortex-a15+neon-vfpv4_gcc-8.4.0_musl_eabi/lib -znow -zrelro -o MagickWand/libMagickWand-7.Q8.la -rpath /usr/lib MagickWand/libMagickWand_7_Q8_la-animate.lo MagickWand/libMagickWand_7_Q8_la-compare.lo MagickWand/libMagickWand_7_Q8_la-composite.lo MagickWand/libMagickWand_7_Q8_la-conjure.lo MagickWand/libMagickWand_7_Q8_la-convert.lo MagickWand/libMagickWand_7_Q8_la-deprecate.lo MagickWand/libMagickWand_7_Q8_la-display.lo MagickWand/libMagickWand_7_Q8_la-drawing-wand.lo MagickWand/libMagickWand_7_Q8_la-identify.lo MagickWand/libMagickWand_7_Q8_la-import.lo MagickWand/libMagickWand_7_Q8_la-magick-cli.lo MagickWand/libMagickWand_7_Q8_la-magick-image.lo MagickWand/libMagickWand_7_Q8_la-magick-property.lo MagickWand/libMagickWand_7_Q8_la-magick-wand.lo MagickWand/libMagickWand_7_Q8_la-mogrify.lo MagickWand/libMagickWand_7_Q8_la-montage.lo MagickWand/libMagickWand_7_Q8_la-operation.lo MagickWand/libMagickWand_7_Q8_la-pixel-iterator.lo MagickWand/libMagickWand_7_Q8_la-pixel-wand.lo MagickWand/libMagickWand_7_Q8_la-script-token.lo MagickWand/libMagickWand_7_Q8_la-stream.lo MagickWand/libMagickWand_7_Q8_la-wand.lo MagickWand/libMagickWand_7_Q8_la-wandcli.lo MagickWand/libMagickWand_7_Q8_la-wand-view.lo MagickCore/libMagickCore-7.Q8.la -lm -inst-prefix-dir /home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5/ipkg-install)
libtool: relink: arm-openwrt-linux-muslgnueabi-gcc -shared  -fPIC -DPIC  MagickWand/.libs/libMagickWand_7_Q8_la-animate.o MagickWand/.libs/libMagickWand_7_Q8_la-compare.o MagickWand/.libs/libMagickWand_7_Q8_la-composite.o MagickWand/.libs/libMagickWand_7_Q8_la-conjure.o MagickWand/.libs/libMagickWand_7_Q8_la-convert.o MagickWand/.libs/libMagickWand_7_Q8_la-deprecate.o MagickWand/.libs/libMagickWand_7_Q8_la-display.o MagickWand/.libs/libMagickWand_7_Q8_la-drawing-wand.o MagickWand/.libs/libMagickWand_7_Q8_la-identify.o MagickWand/.libs/libMagickWand_7_Q8_la-import.o MagickWand/.libs/libMagickWand_7_Q8_la-magick-cli.o MagickWand/.libs/libMagickWand_7_Q8_la-magick-image.o MagickWand/.libs/libMagickWand_7_Q8_la-magick-property.o MagickWand/.libs/libMagickWand_7_Q8_la-magick-wand.o MagickWand/.libs/libMagickWand_7_Q8_la-mogrify.o MagickWand/.libs/libMagickWand_7_Q8_la-montage.o MagickWand/.libs/libMagickWand_7_Q8_la-operation.o MagickWand/.libs/libMagickWand_7_Q8_la-pixel-iterator.o MagickWand/.libs/libMagickWand_7_Q8_la-pixel-wand.o MagickWand/.libs/libMagickWand_7_Q8_la-script-token.o MagickWand/.libs/libMagickWand_7_Q8_la-stream.o MagickWand/.libs/libMagickWand_7_Q8_la-wand.o MagickWand/.libs/libMagickWand_7_Q8_la-wandcli.o MagickWand/.libs/libMagickWand_7_Q8_la-wand-view.o   -L/home/egorenar/Repositories/openwrt-rel/staging_dir/toolchain-arm_cortex-a15+neon-vfpv4_gcc-8.4.0_musl_eabi/usr/lib -L/home/egorenar/Repositories/openwrt-rel/staging_dir/toolchain-arm_cortex-a15+neon-vfpv4_gcc-8.4.0_musl_eabi/lib -L/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5/ipkg-install/usr/lib -L/usr/lib -lMagickCore-7.Q8 -L/home/egorenar/Repositories/openwrt-rel/staging_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/usr/lib -lfreetype -lz -lltdl -lm  -Os -mfloat-abi=hard -fstack-protector -Wl,-z -Wl,now -Wl,-z -Wl,relro -flto -pthread -Wl,--version-script=./MagickWand/libMagickWand.map   -pthread -Wl,-soname -Wl,libMagickWand-7.Q8.so.7 -o MagickWand/.libs/libMagickWand-7.Q8.so.7.0.0
/usr/lib/libfreetype.so: file not recognized: file format not recognized
collect2: error: ld returned 1 exit status
libtool:   error: error: relink 'MagickWand/libMagickWand-7.Q8.la' with the above command before installing it
make[5]: *** [Makefile:6264: install-libLTLIBRARIES] Error 1
make[5]: Leaving directory '/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5'
make[4]: *** [Makefile:12263: install-am] Error 2
make[4]: Leaving directory '/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5'
make[3]: *** [Makefile:12257: install] Error 2
make[3]: Leaving directory '/home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5'
make[2]: *** [Makefile:153: /home/egorenar/Repositories/openwrt-rel/build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/ImageMagick-7.0.9-5/.built] Error 2
make[2]: Leaving directory '/home/egorenar/Repositories/openwrt-rel/feeds/packages/multimedia/imagemagick'
time: package/feeds/packages/imagemagick/compile#105.77#18.23#212.14
    ERROR: package/feeds/packages/imagemagick failed to build.
make[1]: *** [package/Makefile:114: package/feeds/packages/imagemagick/compile] Error 1
make[1]: Leaving directory '/home/egorenar/Repositories/openwrt-rel'
make: *** [/home/egorenar/Repositories/openwrt-rel/include/toplevel.mk:230: package/imagemagick/compile] Error 2

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

Merge pull request #14711 from pprindeville/strongswan-make-includes-persistent

strongswan: make the include's in the .conf files persistent

podman: update to version 3.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

conmon: update to version 2.0.27

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cni-plugins: update to version 0.9.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #15276 from dibdot/banip

banip: update to 0.7.5-4

Merge pull request #15251 from ja-pa/gnutls-3.7.1

gnutls: update to version 3.7.1

Merge pull request #15247 from neheb/fiber

boost: fixup mips64 fiber patch

strongswan: make the include's in the .conf files persistent

Having scripts diddle user written config files seems potentially
dangerous.  Plus there's really no downside to including some
empty files.  Best to just make the includes be permanent.

Additional feature suggested by Luiz: if a -opkg version of the
config file was created unnecessarily, remove it as part of the
upgrade process since changes won't be happening to that file
as an artifact of the service starting.  The include lines are
now permanent, which means that (1) additional configuration
synthesized by UCI won't be anywhere that opkg (or sysupgrade,
for that matter) cares about since it won't be persistent, and
(2) if changes are being made, then they're being done by a
person with an editor and they really should be distinguished.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

ipfs-http-client: update to 2021-03-01

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmariadb: update to 3.1.12

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fish: update to 3.2.1

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libulfus: update to 2.7.2

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liborcania: update to 2.2.0

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libical: update to 3.0.9

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Refresh and simplify patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

exim: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-mail-spamassassin: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mbusd: update to 0.5.0

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netstinky: fix no deprecated OpenSSL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libyang: update to 1.0.225

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libuwsc: update to 3.3.5

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtorrent-rasterbar: update to 1.0.2

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

forked-daapd: add missing dependency (libuuid)

Fix build error due to missing libuuid dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

docker-compose: Update to version 1.28.6

Bugs:

- Make --env-file relative to the current working directory and error out for
invalid paths. Environment file paths set with --env-file are relative to the
current working directory while the default .env file is located in the project
directory which by default is the base directory of the Compose file.

- Fix missing service property storage_opt by updating the compose schema

- Fix build extra_hosts list format

- Remove extra error message on exec

- Fix OpenSSL version mismatch error when shelling out to the ssh client

- Add missing build flags to the native builder: platform, isolation and
extra_hosts

- Remove info message on native build

- Avoid fetching logs when service logging driver is set to 'none'

Miscellaneous:

- Add compose.yml and compose.yaml to default filename list

Signed-off-by: Javier Marcet <javier@marcet.info>

oci-runtime-tools: bump to git HEAD

Remove local patch which was merged upstream.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

boost: fixup mips64 fiber patch

It turns out that this is also broken on mips64el. Further testing
reveals that

-mips32r2 -mtune=mips32r2 -mabi=32

compiles the PAUSE instruction just fine whereas

-mips64r2 -mtune=mips64r2 -mabi=64

does not. The PAUSE instruction was introduced in version 2.6 of the
MIPS ISA and GCC for some reason does not allow usage of it with MIPS64.
Modify the macro to fix the situation instead of just matching on
octeon, which is not quite correct.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acme: Get listener name from /proc/PID/exe instead of netstat output

It seems the command name output from netstat can be truncated in weird
ways, so let's get the binary name from /proc instead and use that for
matching which listener we have.

Fixes #15071.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

luajit: fix compilation with host clang

It errors out with this section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

luv: update to 1.36.0-0

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netopeer2: update to 1.1.70

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

banip: update to 0.7.5-4

* fix another IPv4/IPv6 related iptables chain creation problem
* fix counter during ipset creation
* fix regex for debug counters
* fix ipset housekeeping for local sources

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #15266 from pprindeville/strongswan-change-maintainers

strongswan: change maintainers

CI: revert adding of *depending* packages

While the idea may make sense the current implementation is faulty.
Problem is that OpenWrt uses the folder name of packages within the
build system while `opkg` spits out the actual packages names.

An example, compiling the packages of folder `vim` (`make
package/vim/compile`) creates a package called `xxd`, where `make
package/xxd/compile` would fail.

The current implementation uses `opkg` to figure out dependent packages,
but the resulting names do not match the above mentioned folders.

Revert this for now until we come up with a better implementation to
avoid false positive CI failures.

Signed-off-by: Paul Spooren <mail@aparcar.org>

mpd: remove libavfilter support

The ffmpeg package in OpenWrt is customizable and that can cause issues
with a dirty InstallDev. Just remove libavfilter support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

strongswan: change maintainers

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

tessdata: update to 2.1.0

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tesseract: update to 4.1.1

Switch to AUTORELEASE for simplicity.

Add libarchive dependency since it's now used.

Build with ninja for faster compilation.

Refresh SIMD CMake patch and add musl patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

leptonica: update to 1.80.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

https-dns-proxy: bugfix: correct PROCD firewall object

Signed-off-by: Stan Grishin <stangri@melmac.net>

postgresql: update to version 13.2

Adresses CVE-2021-20229 (Incorrect Authorization)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cryptsetup: update to version 2.3.5

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ccid: update to version 1.4.34

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

opensc: update to version 0.21.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pcsc-lite: update to version 1.9.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

exfatprogs: update to version 1.1.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libudev-zero: update to version 0.4.8

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ratechecker: update to 2020-01-30

Reorganize Makefile for consistency between packages.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15245 from neheb/gost

gost_engine: fix compilation without deprecated OpenSSL APIs

gnutls: update to version 3.7.1

Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #15239 from neheb/ul

uledd: update to 2020-09-15

Merge pull request #15216 from BKPepe/sshpass-update

sshpass: update to version 1.0.9

Merge pull request #15248 from neheb/spd

spdlog: update to 1.8.3

spdlog: update to 1.8.3

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15246 from neheb/pngg2

libpng: do not build MIPS MSA code at all

Merge pull request #15242 from neheb/cshark

cshark: update to 2020-07-22

uledd: update to 2020-09-15

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster speed.

Several cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpng: do not build MIPS MSA code at all

The CMake file matches on mipsel and mips64el. Just remove mips
altogether.

Also build with ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gost_engine: fix compilation without deprecated OpenSSL APIs

Build with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cshark: update to 2020-07-22

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15230 from ejurgensen/forked-daapd_update_274

 forked-daapd: update to 27.4

prometheus: update to 2.25.2

See changes at upstream release log:
https://github.com/prometheus/prometheus/releases

Signed-off-by: Paul Spooren <mail@aparcar.org>

forked-daapd: update to 27.4

Incl remove "--enable-itunes" compile option (no longer exists)

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Merge pull request #15228 from fatbob313/umurmur-0.2.20

uMurmur: Update to 0.2.20. Fix build against OpenSSL without deprecat…

uMurmur: Update to 0.2.20. Fix build against OpenSSL without deprecated API enabled.

Signed-off-by: Martin Johansson <martin@fatbob.nu>

CI: test build dependent packages

By using OPKGs `whatdepends` all packages dependent on a library are
printed. Use that feature to obtain packages which a version change may
break and build them as well.

Change "default" packages to contain a lib on which other packages
depend, instead of compiling `tmux` compile `attendedsysupgrade-common`
on which other packages depend.

Ignore any LuCI packages which only contains translations.

Signed-off-by: Paul Spooren <mail@aparcar.org>

CI: reformat extra long line

Better readability on split screens.

Signed-off-by: Paul Spooren <mail@aparcar.org>

CI: define matrix individually and add targets

This allows more specific definition per test, like on which target
packages should be compiled.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #15229 from dibdot/adblock

adblock: update 4.1.0-3

adblock: update 4.1.0-3

* add a restrictive "jail mode only" variant, just point your
  jail directory to your primary dns directory
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #15232 from neheb/syssss

sysrepo: update to 1.4.122

Merge pull request #15201 from neheb/lne

libnetconf2: update to 1.1.43

sysrepo: update to 1.4.122

Switch to AUTORELEASE for simplicity.

Use Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15171 from ldir-EDB0/miniupnpd

miniupnpd: add patience to firewall include

Merge pull request #15178 from neheb/mzip

minizip: update to 3.0.1

Merge pull request #15177 from neheb/log4c

log4cplus: update to 2.0.6

Merge pull request #15219 from stangri/master-https-dns-proxy

https-dns-proxy: support for additional Force DNS ports

Merge pull request #15226 from ja-pa/ooniprobe-3.8.0

ooniprobe: update to version 3.8.0

gitlab-runner: update to version 13.10.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

openvpn: add OpenVPN option server-poll-timeout

See https://www.mankier.com/8/openvpn#--server-poll-timeout

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

pkgconf: update to 1.7.4

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Revert "meson: reconfigure on incremental builds"

This reverts commit f1c40e3840f6f51b3cf6a74331bd128eeb8b3961.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #15212 from BKPepe/netdata-bump

netdata: update to version 1.29.3

ooniprobe: update to version 3.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #15222 from cotequeiroz/nss_pic_quilt

nss: quote $(PIC) usage and fix compilation with QUILT

nss: fix compilation with QUILT

Commit 657574f45 disabled building the host nsinstall program when using
QUILT.  However, the host nsinstall is needed to compile the package,
breaking compilation with QUILT.

Move the native compile to Build/Configure, which will not be called for
prepare, refresh, or update targets, but will be called before
Build/Compile.

nss does not have a configure script, so Build/Configure/Default is not
being called.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

nss: quote $(FPIC), as it may have multiple flags

FPIC may be defined with more than one flag.  In that case, it becomes
necessary to use it inside QUOTES in a shell context.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>