banip: update 0.8.3-2

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

ruby: update to 3.2.2

This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

See https://github.com/ruby/ruby/releases/tag/v3_2_2 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ruby: update to 3.2.1

Ruby 3.2 changes include:
* WASI based WebAssembly support
* Production-ready YJIT
* Regexp improvements against ReDoS
See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/

Ruby 3.2.1 changes includes:
* Bugfixes
See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/

Package-related changes are:

* libyaml is no longer bundled, requiring OpenWrt to build it as a host
  library for ruby/host.
* Added sub-packages:
 - ruby-mjit: files for mJIT, although disabled during build
 - ruby-syntax_suggest: finds missing ends
* Backported patches dropped:
 - 001-fix-build-with-libressl-3.5.patch
 - 002-fix-operator-precedence.patch
* Usual dependencies adjustments

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

yaml: enable host build

ruby 3.2 does not ship libyaml embedded anymore.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

sscep: add package

Signed-off-by: John Marrett <johnf@zioncluster.ca>

python3-ble2mqtt: add init script

Note that init script won't do much without configuration provided.
The init script comes from the upstream README file.

Also add missing dependency.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-bleak: bump to 0.20.1

This has a small fix on top of 0.20.0.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

snort3: update to 3.1.59.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

minidlna: update to 1.3.2 release

- Updated to latest version
- Removed upstreamed patches
- Refreshed patches

Project changelog:

1.3.2 - Released 30-Aug-2022
--------------------------------
- Improved DNS rebinding attack protection.
- Added Samsung Neo QLED series (2021) support.
- Added webm/rm/rmvb support.

1.3.1 - Released 11-Feb-2022
--------------------------------
- Fixed a potential crash in SSDP request parsing.
- Fixed a configure script failure on some platforms.
- Protect against DNS rebinding attacks.
- Fix an socket leakage issue on some platforms.
- Minor bug fixes.

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

strongswan: add support for remote cacerts

Signed-off-by: Glen Huang <me@glenhuang.com>

strongswan: add support for pools section

Signed-off-by: Glen Huang <me@glenhuang.com>

v2raya: Update to 2.0.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20784 from pprindeville/acpica-update-20230331

acpica-unix: Update to 20230331

treewide: opt out of LTO usage

These fail to build or packages depending on them do when enabling
CONFIG_USE_LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=lto

See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS"
on the main repository.

Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This
fixes it and properly enables LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=gc-sections

See commit da370098 "treewide: add support for "gc-sections" in
PKG_BUILD_FLAGS" on the main repository.

Note: This only touches packages which use all three parts
(-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by
this build flag. Some packages only use a subset, and these are left
unchanged for now.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

acpica-unix: Update to 20230331

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20731 from pprindeville/isc-dhcp-update-4.4.3-P1

isc-dhcp: Update to 4.4.3-P1

Merge pull request #20730 from pprindeville/strongswan-fix-cicd-kmod

strongswan: Fix CI/CD complaints about kmod dependencies

fio: update to 3.34

Signed-off-by: Tjeu Kayim <hasbaddana@outlook.com>

lxc: update to 5.0.2

Bump to latest upstream release.

Removed upstreamed patches:
001-build-detect-where-struct-mount_attr-is-declared.patch[1]
002-build-detect-sys-pidfd.h-availability.patch[2]
003-build-check-for-FS_CONFIG_-header-symbol-in-sys-moun.patch[3]
011-tree-wide-wipe-direct-or-indirect-linux-mount.h-incl.patch[4]
012-tree-wide-use-struct-clone_args-directly.patch[5]
013-tree-wide-use-struct-open_how-directly.patch[6]

1. https://github.com/lxc/lxc/commit/b7b269680f4a773a54b274d7fbd1140fc32e1935
2. https://github.com/lxc/lxc/commit/e510d6bd870c15fc509477343cb1268b9726caa6
3. https://github.com/lxc/lxc/commit/02f4bd00f5b5648b7f71c266d36a961fe54dbfc6
4. https://github.com/lxc/lxc/commit/497479ea3b8d13900a8f9427a5ade8a51facd7ab
5. https://github.com/lxc/lxc/commit/c9bca33263ed82190edc77960cdc19c3088167e6
6. https://github.com/lxc/lxc/commit/d1dfce9c59067aac0a22cdffe8b6d80f6bbdae87

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

 banip: release 0.8.3-1

* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.48.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nano: make nanorc world readable

If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

tinyproxy: Update to 1.11.1

Signed-off-by: Zhang Rui <rui.crater@gmail.com>

coreutils: update to 9.2

Build system: Ubuntu Linux 22.04, macOS 12.6.3
Run-tested: x64, WRT3200ACM, TL-WR1043ND v4

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

Merge pull request #20751 from cotequeiroz/openssl-providers

afalg_engine, gost_engine: adjust to new openssl module infrastructure

gost_engine: adapt to new engine build config

This adapts the package to the new include/openssl-module.mk, and
updated runtime configuration.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

afalg_engine: adapt to new engine build config

This adapts the package to the new include/openssl-module.mk, and
updated runtime configuration.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #20764 from commodo/python-updates1

python-pillow,pytz: update versions

Merge pull request #20762 from commodo/squashfs

squashfs-tools: bump to version 4.6.1

Merge pull request #20763 from commodo/stress-ng

stress-ng: bump to version 0.15.06

Merge pull request #20765 from commodo/openblas

openblas: bump to version 0.3.23

pax-utils: add new package

Description:
A suite of ELF tools to aid auditing systems.
Contains various ELF related utils for ELF32, ELF64
binaries useful for displaying PaX and security info
on a large groups of binary files.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

yq: Update to 4.33.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openblas: bump to version 0.3.23

Make hard-float a requirement.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

stress-ng: bump to version 0.15.06

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-pytz: bump to version 2023.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

pillow: bump to version 9.5.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

squashfs-tools: bump to version 4.6.1

Also, enable xattr support.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

rust: update to 1.68.2

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

dmapd: update to 0.0.95

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdmapsharing: update to 3.9.12

This version now requires libsoup3, rather than libsoup.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #20657 from jefferyto/python-pyproject-host

python: Add pyproject.toml-based builds for host Python packages, add host packages

python: Better host pip options

pip by default will read system-wide and per-user configuration
files[1]. Setting PIP_CONFIG_FILE=/dev/null instructs pip to not read
any config files[2].

pip will spawn child processes of itself to do work, but not all options
are passed down to the child processes[3]. Setting global options as
environment variables[4] ensures they are passed down to any child
processes.

[1]: https://pip.pypa.io/en/stable/topics/configuration/#configuration-files
[2]: https://pip.pypa.io/en/stable/topics/configuration/#pip-config-file
[3]: https://github.com/pypa/pip/issues/9081#issue-733819665
[4]: https://pip.pypa.io/en/stable/topics/configuration/#environment-variables

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-fancy-pypi-readme: Add new host-only package

From the README:

hatch-fancy-pypi-readme is a Hatch metadata plugin for everyone who
cares about the first impression of their project’s PyPI landing page.
It allows you to define your PyPI project description in terms of
concatenated fragments that are based on static strings, files, and most
importantly: parts of files defined using cut-off points or regular
expressions.

Once you’ve assembled your readme, you can additionally run regular
expression-based substitutions over it. For instance to make relative
links absolute or to linkify users and issue numbers in your changelog.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-vcs: Add new host-only package

From the README:

This provides a plugin for Hatch that uses your preferred version
control system (like Git) to determine project versions.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatchling: Add new host-only package

From the README:

This is the extensible, standards compliant build backend used by Hatch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pluggy: Update to 1.0.0, add host build, add myself as maintainer

This also marks python3-pytest as BROKEN (for now) as the in-tree
version is not compatible with this version of pluggy.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pathspec: Add new host-only package

From the README:

pathspec is a utility library for pattern matching of file paths. So far
this only includes Git's wildmatch pattern matching which itself is
derived from Rsync's wildmatch. Git uses wildmatch for its gitignore
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-editables: Add new host-only package

From the README:

A Python library for creating "editable wheels"

This library supports the building of wheels which, when installed, will
expose packages in a local directory on sys.path in "editable mode". In
other words, changes to the package source will be reflected in the
package visible to Python, without needing a reinstall.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flit-scm: Add new host-only package

From the README:

A PEP 518 build backend that uses setuptools_scm to generate a version
file from your version control system, then flit_core to build the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-poetry-core: Add new host-only package

From the README:

A PEP 517 build backend implementation developed for Poetry. This
project is intended to be a light weight, fully compliant,
self-contained package allowing PEP 517 compatible build frontends to
build Poetry managed projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-setuptools-scm: Add new host-only package

The host build replaces the use of the host pip requirements file. This
also updates the dependants of setuptools-scm to depend on the host
build.

This also removes the toml host pip requirements file as toml is not
used by any other package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-typing-extensions: Add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cffi: Update to 1.15.1, add host build

The host build replaces the use of the host pip requirements file. This
also updates the dependants of cffi to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pycparser: Add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-ply: Add host build

The host build replaces the use of the host pip requirements file. This
also updates the dependants of ply to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cython: Add new host-only package

The host build replaces the use of the host pip requirements file. This
also updates the dependants of Cython to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Add new host-only package

From the README:

This library is the reference implementation of the Python wheel
packaging standard, as defined in PEP 427.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-build: Add new host-only package

From the documentation:

A simple, correct PEP 517 build frontend.

build will invoke the PEP 517 hooks to build a distribution package. It
is a simple build tool and does not perform any dependency management.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyproject-hooks: Add new host-only package

From the README:

This is a low-level library for calling build-backends in
pyproject.toml-based project. It provides the basic functionality to
help write tooling that generates distribution files from Python
projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-tomli: Add new host-only package

From the README:

Tomli is a Python library for parsing TOML. Tomli is fully compatible
with TOML v1.0.0.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-packaging: Update to 23.0, add host build

This also adds myself as maintainer, and marks the target package as
BROKEN (for now) as the update requires proper support for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-installer: Add host-only package

From the README:

This is a low-level library for installing a Python package from a wheel
distribution. It provides basic functionality and abstractions for
handling wheels and installing packages from wheels.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

rust: update to 1.68.1

also add new variable CARGO_VARS to make it possible
to pass environment variables for cargo process.
This is necessary when for example, cross-compiling
netavark.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

banip: update to 0.8.2-6

* restored some accidently removed init stuff in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>

banip: update to 0.8.2-5

* fixed missing version number when installed as separate package (not in build)
* fixed cornercase init and mailing issues
* sorted Country list by country names ascending
* fixed some shellcheck findings

Signed-off-by: Dirk Brenken <dev@brenken.org>

curl: update to 8.0.1

* https://curl.se/changes.html#8_0_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>

net-snmp: rename stop_service to service_stopped

The commands in the function 'stop_service' do not stop the service.
Rather, they are commands that are to be executed when the service has
already been stopped. By renaming the function, the commands are now
executed after the service has been stopped.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net-snmp: fix whitespaces

Replace spaces with tabs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

snort3: update to 3.1.58.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #20633 from QuintinHill/python-mqtt

Package dependencies for ble2mqtt python package

python-flit-core: Add host-only package

From the README:

This provides a PEP 517 build backend for packages using Flit. The only
public interface is the API specified by PEP 517, at flit_core.buildapi.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: Add pyproject.toml-based builds for host Python packages

Using pip to install host packages with pyproject.toml-based (PEP 517)
builds is problematic:

* If build isolation is used, pip will create an isolated build
  environment, install any build dependencies for the requested package,
  then build the requested package.

  It does not appear currently possible to have pip install the build
  dependencies with hash-checking mode enabled[1].

* If build isolation is not used, any build dependencies must be
  installed in the build environment before invoking pip to build the
  requested package[2].

  This would require creating a package dependency resolution system to
  install build dependencies, and any dependencies of dependencies, in
  the correct order.

* It is very difficult to patch the packages installed by pip.

This adds a new include file (python3-host-build.mk) with recipes to
install host Python packages with pyproject.toml-based builds. This is
backwards-compatible with packages that require running setup.py.

Besides addressing the above issues (the OpenWrt build system already
resolves dependencies between packages, checks all source downloads
against known hashes, and supports patching packages), host packages
also:

* Capture package licensing and maintainer information
* Enable uscan checking for package updates/CVEs
* Are a known concept for OpenWrt packagers/developers

The existing functionality of using host pip to install packages will
remain for now, but should be considered deprecated and expected to be
removed in the future.

This also updates Py3Build/CheckHostPipVersionMatch for the case where
the host-pip-requirements directory does not exist or is empty.

[1]: https://pip.pypa.io/en/stable/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020
[2]: https://pip.pypa.io/en/stable/cli/pip_install/#cmdoption-no-build-isolation

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: Unset Python environment variables

This will prevent the user's environment variables from affecting host
Python, removing the need to manually override these variables.

It is also not necessary to set PYTHONPATH (when not working on target
Python packages) because the given directories are already included in
Python's search path by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #20700 from jefferyto/ci-autoremove

CI: Add --autoremove, ignore removal errors

Merge pull request #20693 from jefferyto/golang-1.20.2

golang: Update to 1.20.2, refresh patch

haproxy: update to v2.6.12

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #20729 from pprindeville/beanstalkd-update-1.13

beanstalkd: Update to 1.13

Merge pull request #20733 from pprindeville/perl-text-csv_xs-update-1.50

perl-text-csv_xs: Update to 1.50

Merge pull request #20732 from pprindeville/perl-cgi-update-4.56

perl-cgi: Update to 4.56

transmission-web-control: fix web interface files path

Transmission 4.0 web interface files changed from /web to /public_html

This fixes https://github.com/openwrt/packages/issues/20737

Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com>

strongswan: Fix CI/CD complaints about kmod dependencies

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20725 from pprindeville/fix-indent-strongswan

strongswan: Fix indent for hw_offload, interface, priority

cni-plugins-nft: update to 1.0.12

Changelog:
 - docs: update install instructions
 - upgrade to go1.19

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gummiboot: update to 48.1

 - disable man pages generation

Mostly bug fixes.

Full list of changes: https://cgit.freedesktop.org/gummiboot/log/

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #20600 from oskarirauta/curl

curl: enable unix sockets by default

natmap: update to 20230322

Signed-off-by: Ray Wang <r@hev.cc>

sing-box: update to 1.2.1

Changelogs: https://github.com/SagerNet/sing-box/releases/tag/v1.2.1
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

yq: Update to 4.33.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.14.5

Release Notes

Management

 - Introduce a new ACL engine based on Rego (Open Policy Agent) for firewall control
 - Personal access tokens generation as a first iteration toward public API release
 - Add Keycloak support as an IDP manager

Agent

 - Introduce a Firewall interface to apply granular access control (e.g., connection direction, port, or protocol level)
 - Make the agent run on Android (mobile support)

Changelog

 - Feat rego default policy
 - Don't drop Rules from file storage after migration to Policies
 - Add version info command to signal server
 - Feat firewall controller interface
 - Adding Personal Access Token generation
 - Exchange proxy mode via signal
 - Fix connstate indication
 - Mobile
 - PAT persistence
 - Add Keycloak Idp Manager
 - Adjustments for the change server flow
 - Disable peer expiration of peers added with setup keys
 - Add JWT middleware validation failure log

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

docker-compose: Update to version 2.17.2

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #20708 from commodo/sudo

sudo: bump to verison 1.9.13p3

borgbackup: bump to 1.2.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

borgbackup: add missing dependencies

The initial package submission was missing
some required and optional dependencies
due to lack of testing on a system without any python
related packages pre-installed.

Some optional but highly recommended dependencies
were discovered with the stdlib module as described in:
https://github.com/openwrt/packages/blob/392a68e24774294590abf9c08ea1832f2cee190d/lang/python/README.md

Fixes #20441

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

isc-dhcp: Update to 4.4.3-P1

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

isc-dhcp: Fix isc-dhcp-dyndns meta package

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>