Merge pull request #20053 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: fix restart

https-dns-proxy: fix restart

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 75ac50ca895e9e042afe9c4a64a367e3863e471f)

Merge pull request #20043 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: add mdns service records

Merge pull request #20051 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: support new OISD dnsmasq config

simple-adblock: support new OISD dnsmasq config

* OISD dnsmasq config files switched from using address= to server=

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3950f0ce99844425805887a8e312db6c911fe398)

dnsproxy: Update to 0.46.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88d33fef91e6bdeb195bf40b80ceb4644334a00b)

cloudflared: Update to 2022.11.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1a14c1103e83ec31d437c0893833026d211805d)

https-dns-proxy: add mdns service records

* add mdns records for started instances
* Makefile: use $(PKG_VERSION) as a value for PKG_SOURCE_DATE instead of
  hard-coding it

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ee37d0ec863a2254c4bfecd7bb65155e276fed88)

github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

Merge pull request #20033 from peter-stadler/openwrt-22.03

django: bump version 4.0.8

django: bump version 4.0.8

fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

natmap: merge "ipv4" and "ipv6" options into single "family" option

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 190e04caf69746b862dafdff7b16f539f86a7544)

snowflake: update to version 2.4.1

Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f9277ee30fa0699cdf1aded5a0bc50aac6)

natmap: add new package

NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit e691a25cb3398b83bedc9581ef119382760cfacc)

xz: update to 5.2.9

Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c1222365526e1fab7f021f2b3a629e859be6b489)

xz: update to 5.2.7

Update to latest version. No release notes available.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 964e59d385ca986fedced9848ffd1a491c123358)

xz: update to 5.2.6

Release Notes:
https://git.tukaani.org/?p=xz.git;a=blob;f=NEWS;hb=HEAD

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d7d39043c34a5cfd5099a287d27fc7d484ef7b49)

tailscale: Update to version 1.32.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 1ffe60bc859db3b6b900a9fd6950d53ee1184aa1)

tailscale: update to v1.32.0

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 9434a2dfb2f8d6efa3df4dea46b35eaa423de83a)

Merge pull request #20010 from stangri/openwrt-22.03-pbr

[22.03] pbr: initial commit

adguardhome: bump to 0.107.18

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit e3dc7537812338a6200b16ba7b218ce5e6745cf4)

AdGuardHome: update to v0.107.16

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 64dabe2d681f013c834f447496ad57b413790b0b)

AdGuardHome: update to v0.107.12

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit e806d85e46ae563e9fd334972dcb019a88442cbd)

AdGuardHome: update to v0.107.11

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 79acc3c21f48b5d38f9e43d802d7dcdfee9f6606)

Merge pull request #20003 from mhei/22.03-php8-update-8.1.13

[22.03] php8: update to 8.1.13

btrfs-progs: Update to version 6.0.1

This fixes compilation problems with glibc 2.36.

Full Changelog:
btrfs-progs-6.0 (2022-10-11)
-----------------------------
   * fi usage: in tabular output, print total size and slack size
   * mkfs:
      * option -O now accepts values from -R to unify the interface (-R will
continue to work)
      * zone reset and discard is done in parallel on all devices
      * removed option --leafsize, deprecated long time ago
   * corrupt-block: recalculate checksum when changing generation
   * fixes:
      * convert: fix reserved range detection and overlaps
      * mkfs: fix creating files with reserved inode numbers with --rootdir
      * receive: escape filenames in command attributes
      * fix extent buffer leaks after transaction abort
   * experimental:
      * mkfs: support for block-group-tree (kernel 6.1)
      * fsverity in send (protocol v3, WIP)
      * btrfstune -b converts to block-group-tree
   * other:
      * cleanups, refactoring
      * new and updated tests
      * update documentation

btrfs-progs-6.0.1 (2022-11-04)
""""""""""""""""""""""""""""""
   * send: minor speed up for v2 due to increased buffer size
   * resize: invalid command line options fail with error code
   * quota rescan:
      * add long options --status and --wait
      * new option to wait but don't start rescan
   * qgroup show: print path by default, updated format
   * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes
   * experimental:
      * add warnings to commands that have it enabled (mkfs, image, btrfstune)
   * other:
      * documentation, help text, error message updates

btrfs-progs-5.19 (2022-08-16)
-----------------------------
   * send: support protocol version 2
   * fi show: print all missing devices
   * device stats: add tabular output
   * replace: add alias to device group (device replace)
   * check: validate free space tree items
   * fixes:
      * convert: support large filesystems (block count > 32bit)
      * recognize filesystems with verity enabled
      * mkfs and DUP could write out of order, fix it for zoned mode
   * build:
      * optional support for LZO and ZSTD in receive
      * compatibility with glibc 2.36 (mount.h)
      * add fallbacks for new GCC builtins
   * other:
      * corrupt-block: target specific items, offsets
      * documentation updates, new pages from wiki
      * new tests

btrfs-progs-5.19.1 (2022-09-12)
"""""""""""""""""""""""""""""""
   * fix memory leaks (extent buffer, path)
   * check: verify block device size vs item
   * rescue fix-device-size: allow to shrink device item
   * receive: fix crash on wrong pinter free()
   * other:
      * experimental: support for block-group-tree
      * documentation updates
      * new tests

btrfs-progs-5.18 (2022-05-25)
-----------------------------
   * fixes:
      * dump-tree: don't print traling zeros in checksums
      * recognize paused balance as exclusive operation state, allow to start
        device add
      * convert: properly initialize target filesystem label
      * mkfs: don't create free space bitmaps for empty filesystem
   * restore: make lzo support build-time configurable, print supported
     compression in help text
   * update kernel-lib sources
   * other:
      * documentation updates, finish conversion to RST, CHANGES and INSTALL
        could be included into RST
      * fix build detection of experimental mode
      * new tests

btrfs-progs-5.18.1 (2022-06-06)
"""""""""""""""""""""""""""""""
   * fixes:
      * convert: fix self reference of toplevel directory
      * build: make kernel lib headers compatible with C++
   * zoned mode: verify minimum zone size 4MiB
   * libbtrfs: cleanups, merge headers and remove declarations of unexported
     symbols
   * other: documentation updates

btrfs-progs-5.17 (2022-04-26)
-----------------------------
   * check:
      * repair wrong num_devices in superblock
      * recognize overly long xattr names
      * fix wrong total bytes check for seed device
   * auto-repair on read on RAID56
   * property set: unify handling of empty value to mean default, changed meaning
     for property 'compression' to allow reset to default and to set NOCOMPRESS,
     since kernel 5.14
   * fixes:
       * dump-tree: print fs-verity items
       * fix location of system chunk on zoned filesystem
       * do not allow setting seeding flag on a filesystem with dirty log
       * mkfs and subpage support: use sectorsize as nodesize fallback for mixed
 profiles
   * preparatory work for extent tree v2, global roots
   * experimental feature (unstable interface, not built by default,
       do not use for production)
       * btrfstune: option --csum to switch checksum algorithm
   * other:
       * cleanups, refactoring
       * update documentation build, remove asciidocs leftovers
       * update fssum to consider xattrs
       * add fsstress

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 99f5604905da0ba931f3dfa5119bb9823036475b)

libgpg-error: copy gpg-error.pc to staging directory

Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a93e0269a10cbca0679ae390d6b89aedbb2435e6)

gnupg: compile with -fcommon

This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>
(cherry picked from commit f4058c1c18138ae1011abfe0e7aca74659834b21)

privoxy: fix postinst missing $

fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 46e4def61f6b670daac1725df8f3fc4475fe5450)

privoxy: correctly format /etc/services additions

This adds the missing protocol (e.g. /tcp and /udp) to the entry in
/etc/services. If the entry already exists, it will add the /tcp to it.
Otherwise, it will look and add the tcp and udp entries if either is
missing.

fixes: openwrt#19665

Signed-off-by: Josh Powers <powersj@fastmail.com>
(cherry picked from commit 95edfa723c9e7b1b99361a86022b9b20ac6f8ead)

golang: update to v1.19.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 440dcd8d34d139e4e80fff51b7799e41d8f1196e)

golang: update to v1.19.2

Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
(cherry picked from commit 0ad7a2fe1841a46107b88026a3b95b54571afb88)

pbr: initial commit

* The makefile produces the nft and iptables capable `pbr` package
  and the `pbr-iptables` package for legacy setups
* This replaces `vpnbypass` and `vpn-policy-routing` packages
* I'm soliciting feedback on this package and my intention is to
  update the version to 1.0.0 before this is merged, but I need the
  feedback on this and luci-app-pbr before then.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 47eca64cb82a5459668fc14df9422e365c8343b6)

Merge pull request #19994 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: localizable error/warning messages

borgbackup: add package for 1.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 2ad61a4529a5f600da47c071bb1bf2ce7462c14c)

python-pyfuse3: add package for 3.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 17f58b94a745a9f058182822d420ed65b3730437)

python-trio: add package for 0.22.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 07e29c3782f5eb4fb0e3cc3cdf587c77eafb96e6)

python-sniffio: add package for 1.3.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f35f4dace76761048ab43edd91ca6c44123ff6ac)

python-outcome: add package for 1.2.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 750facea90aafb75c5937259671369a83e43881a)

python-async-generator: add package for 1.10

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 8fe1dab3715197409192fedfedc0b5f6956781f3)

python-exceptiongroup: add package for 1.0.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit a19f331b068ba9f5fab60f149acdd9805ccdb390)

python-sortedcontainers: add package for 2.4.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 69655222fcedb299054bfdff8cf7acf24de4cefa)

xxhash: add package for 0.8.1

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit dcbb2cf3d58758c86ba31ece78fa48c33d7ecda9)

samba4: support both user map and valid users on same time

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01f5144a60541e6468a9f4451f26c8ab)

lighttpd: lighttpd.conf vars, comments, guidance

lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb879f416705e85fa31539472aeff2d8)

lighttpd: print stderr trace if validation fails

lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e422bac544eee9578830a8b6a49265be1)

php8: update to 8.1.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 056051da496078ebaa45d25d6fe6cbb392a60ec1)

v2raya: backports upstream fixes and add 3 new options

It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c88da583c039d81b800b3edad5a6053)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 664ecae4e6379928aae0527b96b65ffe0199049d)

xray-core: Update to 1.6.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f33517747ef9fb48536cced4e42f7abc99)

yq: Update to 4.30.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007ab9a0dbefab88f0be934f6cffe5ed5)

libqmi: bump to 1.30.8

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d53efdfd6abd7d9cbb57a770273c5319)

simple-adblock: localizable error/warning messages

* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8047d2ccb716ac90f267cc2ceb3723c15c375bd2)

Merge pull request #19988 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix: detect dnsmasq ipset support

Merge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: improve performance on restart

librespeed-go: add new package

Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a157e382df81ba1d40ba275730d7adf627508004)

simple-adblock: bugfix: detect dnsmasq ipset support

* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cc10774e6e3799ac86af83d8c35c6a37fd73c15a)

https-dns-proxy: improve performance on restart

* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e6d746a0baa184db3caf7a088179356c798a96d3)

pdns-recursor: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 7bcc02e7c92171044a0aeabd9d988189c6b849b1)

liburing: Update to v2.3

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit f01ebf5f335dc0ca7f2448e24f7f2b1b7326ebc5)

liburing: Update to v2.2

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 3f82f9a0023080ffb74d7d3d75a65eb384c64ce7)

ices: Update to 2.0.3

This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>
(cherry picked from commit 4e2b09bd95c796456d6a3961bed59d97aa516ee0)

gphoto2: update to 2.5.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc3ab606d561e47f1469f97242919ee241885056)

libgphoto2: update to 2.5.30

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f3a4366f01cfa0e8562d42aec06669dac09d466)

syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4d5c427922fa59e078bbd5f3f55346e569de49a2)

syncthing: update to 1.20.1

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b48482fdf85ca8c5cc4d6f198f4c5ab7f4c40f1d)

syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 9d17ba1a9387efdc08e236d4eaa937eb103472f4)

tvheadend: update to git master 2022-11-20

- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit bf279120190c6064af07721690405649d4e41cc1)

knot: update to version 3.2.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4370e457c8eabc6c4c3decdb197fccc876f45a19)

cloudflared: Update to 2022.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 804ab5540e13075564841658d23d3549667e06d7)

Merge pull request #19957 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: update Makefile package descrition

ooniprobe: Update to 3.16.5

Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1c6570dcc7c4ce9843b763e8863baf92277fa008)

unbound: update to 1.17.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 6bc0293a73f5a1d86a951ebd4c00cbc7b09e4529)

librespeed-cli: rename binary to librespeed-cli

upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit c2ad338b0f0fb5df4c84770fa6408f18bd347671)

rclone: Update to 1.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88a1535d00e1047041cb9328a6f6eac310af1714)

gg: Update to 0.2.15

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fec75efd8bd4c201e183a460a72e508a9728aaff)

sqlite3: Update to 3.40.0

1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4a0f0793bf7016d813b67a413ee4010917270c0)

https-dns-proxy: update Makefile package descrition

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0765fb0790e41d9fbee7e22a7e33022dc943d3fd)

xray-core: Update to 1.6.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d36c34f9847d20450f61c955ccab745a5c90e90f)

nextdns: Update to version 1.38.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 1acf423ef5891eb88c8e2bbdf8dad7896b8db398)

Merge pull request #19901 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update to 1.9.3-1

nano: update to 7.0

Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4a89a577a71adffc6cbad99971b4c064193b3566)

bcp38: migrate to nftables

Signed-off-by: Stefan Brusch <ne20002@gmx.ch>
(cherry picked from commit 471ffdd98c3a543e4935c3e76ac19301ac16c52d)

yq: Update to 4.30.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8762261112c8235f7f85a6f57dbf342cf17093b9)

frp: update to 0.45.0

Signed-off-by: van waholtz <brvphoenix@gmail.com>

ariang: update to 1.3.2

Signed-off-by: van waholtz <brvphoenix@gmail.com>

Revert "openthread-br: new package"

The PR to add openthread-br in master isn't merged yet, as it has draft
status. This was merged prematurely. Revert.

This reverts commit 27dd30aadb0b9ae1b7e710e0ea479f6fbe142918.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

simple-adblock: update to 1.9.3-1

* introduce the new curl_max_file_size option
* prevent warnings/errors to be displayed each time the load_environment
  is invoked
* better organize dl_command appendixes
* implement support for downloading/using external dnsmasq config file
* refactor adb_check and adb_allow for better readability
* update default values for some options in the uci_load_validate call
* update reload trigger to include curl options

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f11ce28bafc8ae202261d6af7ade35d596385f8c)

yq: Update to 4.30.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4d667ec8e8ffb23e2d42a42c58f0318b3d248dff)

yq: Update to 4.30.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2cba6e5f73326bfa91f3b5d0f432f85064255ee4)

rsync: update to 3.2.7

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit de85ed88a70968acfd9bf47a2ea5d86d14fc0ae0)

rsync: incorporate upstream fixes

Upstream is requesting that packagers cherry-pick two commits to fix the
current release.[1]

1. https://www.mail-archive.com/rsync@lists.samba.org/msg33576.html

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit deddf26cc286240e83b1ad43811ab1bc30bc73bf)

rsync: bump to 3.2.6

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 454bbae88863e9507f1a2207147639155e3f52b5)

zerotier: update to 1.10.2

Signed-off-by: Moritz Warning <moritzwarning@web.de>

irqbalance: update to 1.9.2

Update irqbalance to version 1.9.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5c8d0939e8c986d0e2c625752215a9fcb6bf6c3c)

gg: Update to 0.2.14

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1e633ccfdd5de441a56e89e17e8854d024737d8c)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e5c3c3409c1e25d21e6697cb29486296ea9bfbd2)

xray-core: Update to 1.6.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f4c931e122dd66ca6196f6262f35c78)

openthread-br: new package

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit ff49c0c02b290a3939b8a7f25fd58c160a904dbb)

golang: update to version 1.18.8

Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d886918cfbc1af8d60cbb530ba563084b67)