natmap: add new package

NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>

Merge pull request #19992 from hnyman/wget

wget: update to 1.21.3

Merge pull request #19987 from stangri/master-simple-adblock

simple-adblock: bugfix: detect dnsmasq ipset support

Merge pull request #19985 from stangri/master-https-dns-proxy

https-dns-proxy: improve performance on restart

wget: update to 1.21.3

Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19973 from julienmalik/borg

borgbackup: initial commit

snort3: update to 3.1.47.0-1

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #19980 from mhei/php8-update-8.1.13

php8: update to 8.1.13

simple-adblock: bugfix: detect dnsmasq ipset support

* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>

https-dns-proxy: improve performance on restart

* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>

v2raya: backports upstream fixes and add 3 new options

It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.6.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.30.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #19936 from hgl/acme

haproxy: use .crt as extension for certificates

haproxy: use .crt as extension for certificates

Signed-off-by: Glen Huang <i@glenhuang.com>

samba4: support both user map and valid users on same time

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

php8: update to 8.1.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #19938 from hgl/acme2

acme: ensure symlinks for renewed certificates

acme: ensure symlinks for renewed certificates

Signed-off-by: Glen Huang <i@glenhuang.com>

CI: deprecate $(AUTORELEASE) via comments

Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.

With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

librespeed-go: add new package

Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

borgbackup: add package for 1.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-pyfuse3: add package for 3.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-trio: add package for 0.22.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-sniffio: add package for 1.3.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-outcome: add package for 1.2.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-async-generator: add package for 1.10

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-exceptiongroup: add package for 1.0.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-sortedcontainers: add package for 2.4.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

xxhash: add package for 0.8.1

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

privoxy: fix postinst missing $

fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>

pdns-recursor: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

gnupg: compile with -fcommon

This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>

Merge pull request #19652 from wormi4ok/lang-golang-update-1-19-2

golang: update to v1.19.2

gphoto2: update to 2.5.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgphoto2: update to 2.5.30

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: update to v1.19.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>

Merge pull request #19948 from tvogel/ices-2.0.3

ices: Update to 2.0.3

Merge pull request #19956 from stangri/master-https-dns-proxy

https-dns-proxy: update Makefile package descrition

knot: update to version 3.2.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>

liburing: Update to v2.3

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

tvheadend: update to git master 2022-11-20

- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

yggdrasil: bump to 0.4.7

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>

cloudflared: Update to 2022.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

https-dns-proxy: update Makefile package descrition

Signed-off-by: Stan Grishin <stangri@melmac.ca>

upmpdcli: bump to 1.5.19

Signed-off-by: Fabien Pozzobon <12074690+fpozzobon@users.noreply.github.com>

wifi-presence: Update to version v0.3.0

This version handles the new hostapd connect message format,
as introduced in: https://github.com/openwrt/openwrt/commit/8cb995445a26ee124e40b8ef97cc0ddd9d10f82a

Signed-off-by: Adam Williams <pwnfactory@gmail.com>

librespeed-cli: rename binary to librespeed-cli

upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

ices: Update to 2.0.3

This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>

rclone: Update to 1.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gg: Update to 0.2.15

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

unbound: update to 1.17.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

ooniprobe: Update to 3.16.5

Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xfrpc: Update to 1.11.587

refactor tcp mux

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

Merge pull request #19900 from stangri/master-simple-adblock

simple-adblock: update to 1.9.3-1

Merge pull request #19932 from flyn-org/libgpg-error

libgpg-error: copy gpg-error.pc to staging directory

lm-sensors: Add support for dev_name formatted like "a000000.wifi"

Signed-off-by: Florence Riker <1460830@gmail.com>

sqlite3: Update to 3.40.0

1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libgpg-error: copy gpg-error.pc to staging directory

Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880
Signed-off-by: W. Michael Petullo <mike@flyn.org>

xray-core: Update to 1.6.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

uhubctl: update to 2.5.0

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>

jq: fix hash mismatch problem

change jq source proto to git to deal with hash mismatch problem.

Signed-off-by: Bradford Zhang <zyc@zyc.name>

nano: update to 7.0

Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19927 from hgl/acme

acme: make certificates use .crt as the extension

acme: make certificates use .crt as the extension

Signed-off-by: Glen Huang <i@glenhuang.com>

adguardhome: bump to 0.107.18

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Merge pull request #19915 from mhei/php8-pecl-xdebug-update

php8-pecl-xdebug: update to 3.1.6

frp: update to 0.45.0

Signed-off-by: van waholtz <brvphoenix@gmail.com>

ariang: update to 1.3.2

Signed-off-by: van waholtz <brvphoenix@gmail.com>

pugixml: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

spdlog: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libebml: remove

Since libmatroska was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmatroska: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nextdns: Update to version 1.38.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

php8-pecl-xdebug: update to 3.1.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #19905 from ne20002/bcp38

bcp38: migrate to nftables

bcp38: migrate to nftables

Signed-off-by: Stefan Brusch <ne20002@gmx.ch>

yq: Update to 4.30.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ovpn-dco: bump package to fix kernel 6.1 compile

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>

siit: fix kernel 5.16 compile

siit-1.2/siit.c:1379:9: error: implicit declaration of function
'random_ether_addr' [-Werror=implicit-function-declaration]
 1379 |         random_ether_addr(dev->dev_addr);
      |         ^~~~~~~~~~~~~~~~~

Linux 3.6 renamed random_ether_addr to eth_random_addr [0]
Linux 5.16 removed random_ether_addr [1]

[0]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a4dd594982a321699000218715e28664ec49169
[1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ba530fea8ca1b57ee71d4e62f287a5d7ed92f789

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>

btop: Update to 1.2.13

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

btop: append `--utf-force` argument by default

btop reads the `LANG` env variable to delect if the system has utf8
support, which exists on common Linux distributions.

However, OpenWrt does not ship it, and results in btop reporting
"No UTF-8 locale detected!". Users have to manually pass `--utf-force`
to make btop happy.

To make it OOTB, append `--utf-force` argument by default via alias.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

expat: update to 2.5.0

Fixes: CVE-2022-43680
Added GitHub mirror.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: update to v1.19.2

Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>

simple-adblock: update to 1.9.3-1

* introduce the new curl_max_file_size option
* prevent warnings/errors to be displayed each time the load_environment
  is invoked
* better organize dl_command appendixes
* implement support for downloading/using external dnsmasq config file
* refactor adb_check and adb_allow for better readability
* update default values for some options in the uci_load_validate call
* update reload trigger to include curl options

Signed-off-by: Stan Grishin <stangri@melmac.ca>

sed: update GNU sed to v4.9

Signed-off-by: Russell Senior <russell@personaltelco.net>

yq: Update to 4.30.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #19890 from mhei/mmc-utils-update

mmc-utils: update to latest upstream revision

mmc-utils: update to latest upstream revision

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

yq: Update to 4.30.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

qemu: enable usb passthrough by default

The total uncompressed size increase (qemu-system-x86_64 and the new libusb
dependency) is less than 1%.

Signed-off-by: Nicola Corna <nicola@corna.info>

privoxy: correctly format /etc/services additions

This adds the missing protocol (e.g. /tcp and /udp) to the entry in
/etc/services. If the entry already exists, it will add the /tcp to it.
Otherwise, it will look and add the tcp and udp entries if either is
missing.

fixes: openwrt#19665

Signed-off-by: Josh Powers <powersj@fastmail.com>

modemmanager: fix unquoted strings when launching pppd

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>

libmaxminddb: update to 1.7.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

neon: update to 0.32.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

hwinfo: Backport build fix for glibc 2.36

This backports a build fix for hwinfo when compiling against glibc 2.36.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

ulogd: bump to version 2.0.8

Removed upstream patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

crun: Update to version 1.6

This fixes compilation problems with glibc 2.36.

Full changelog:
* crun-1.6

- runc compatibility: -v now prints the version string.
- build: fix build with glibc 2.36.
- container: drop intermediate userns custom feature.
- cgroup: change the delegate cgroup semantic so that the cgroup is
  created in the container payload after the cgroup namespace is created.
- seccomp: use helper process to send file descriptor to the listener
  socket.  It enables to be notified on every syscall without hanging
  the main process.
- linux: add a fallback to using kill(2) if pidfd_send_signal(2) fails
  with ENOSYS.
- krun: add support for krun-sev.
- wasmtime: always grant file system capability for workdir inside the container.
- wasmtime: inherit arguments list from the handler instead of the current process.
- wasmedge: use released wasmedge library instead of libwasmedge_c.so.

* crun-1.5

- add mono based native .NET handler
- new Wasmtime backend for running WebAssembly
- add support for wasmedge 0.10 and dropping support for wasmedge 0.9.x
- dropping support for experimental `WasmEdgeProcess` from wasmedge handler
- honor process user's uid when setting the HOME environment variable
- create the current working directory if it is missing in the container
- fallback to using a tmpfs mount if umount of /sys and /proc fails
- fallback to netlink to setup lo device
- fix creating devices in the rootfs
- fallback to using io.weight if io.bfq.weight doesn't exist
- remove tun/tap from the default allow list
- linux: devices mounts have noexec and nosuid
- fix copyup of files from the container to the tmpfs
- honor $PATH for newgidmap and newguidmap
- krun: limit the number of vCPUs to 8
- cgroup: add support for cpu.idle

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

netifyd: Updated to v4.2.2.

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>