erlang: update to 27.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

imagemagick: update to 7.1.1.33

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

hwdata: update to 0.383

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libssh: fix bad pkgconfig paths

Avoid leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libjpeg-turbo: update to 3.0.3

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

banip: update 0.9.6-3

* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <dev@brenken.org>

collectd: enable write_prometheus plugin

Signed-off-by: Louis Dupré Bertoni <github@louisdb.xyz>
[PKG_RELEASE bump added]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

cargo-c: New host package

It is useful to build crates as C libraries.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

Merge pull request #24068 from stangri/master-ngtcp2

ngtcp2: drop maintainership

Merge pull request #24271 from neheb/m

ngtcp2: fix bad pkgconfig paths

gst1-libav: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

ngtcp2: fix bad pkgconfig paths

Avoids leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <hukk1996@gmail.com>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <mike@flyn.org>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

xfrpc: Revised the config file and adjusted the corresponding init file

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

augeas: update to 1.14.1

Seems upstream now releases on GitHub.

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

docker-compose: Update to version 2.27.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.27.1

Signed-off-by: Javier Marcet <javier@marcet.info>

taglib: update to 2.0.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opus: update to 1.5.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

upmpdcli: update to 1.8.11

Autotools is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.26.5

Autotools build is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 6.1.3

Install static libraries too to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libimobiledevice: update to 2024-05-20

Add patch to fix compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24231 from nmav/ocserv-fix-startup

ocserv: use a more neutral character for sed

acme-common: v1.2.0

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24123 from mhei/update-libgpiod-to-2.1.1-with-deps

Update libgpiod to 2.1.1 and update dependent packages

ocserv: use a more neutral character for sed

This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

libshout: fix compilation with GCC14

Missing headers.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ffmpeg: update to 5.1.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24208 from BKPepe/msmtp

msmtp: update to version 1.8.26

klish: fix compilation with GCC14

Proper types are now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acme-common: fallback to deprecated use_staging if the staging option is not set

The use_staging option was deprecated in 9d2d8787cafdfb49339766a00ced422fa75cb883.
But it still has a bigger priority than the staging option.
This happens because config_get_bool returns 0 when the use_staging option wasn't set.
So the next check for the staging var emptiness is always false.

As the simplest fix, use the config_get staging that returns a plain string when the option is not set and if it's empty then fallback to the use_staging.

Once the use_staging option is removed we should get back to the config_get_bool staging.

Also use config_get_bool debug.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

treewide: use config_get_bool instead of config_get enabled

The config_get_bool function parses not just the 1 but on/yes, true/false or enabled/disabled.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

iperf3: update to 3.17.1

Changelogs since last release:
https://github.com/esnet/iperf/releases/tag/3.17
https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <therealgraysky@proton.me>

nextdns: Update to version 1.43.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

cloudflared: Update to 2024.5.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: update to 1.8.13

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.44.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

treewide: fix incorrect hashes

It seems that PR #24113 introduced incorrect hashes for multiple packages.

So, lets fix all of them at once.

Signed-off-by: Robert Marko <robimarko@gmail.com>

Revert "github: Improve Pull Request template"

This commit was accidently pushed to wrong remote and
it should be properly reviewed.

This reverts commit 6859b0a6f29bc06dd5726658efa91e866b7de1a9.

github: Improve Pull Request template

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #24057 from BKPepe/gitignore

Introduce .gitignore

nghttp3: drop maintainership

* switch back to using tar.gz archives, switch to xz was
  probably unnecessary and the previous problem building
  from the tagged release gz was probably cache-related
* drop maintainership

Signed-off-by: Stan Grishin <stangri@melmac.ca>

nebula: drop maintainership

Signed-off-by: Stan Grishin <stangri@melmac.ca>

msmtp: add test.sh

This file ensures that msmtp is run tested inside GitHub Actions
to help to ensure that this application is compiled and run
tested for OpenWrt master.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

msmtp: update to version 1.8.26

Release notes:
https://marlam.de/msmtp/news/msmtp-1-8-26/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

openldap: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cyrus-sasl: fix compilation with GCC14

Missing time.h header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tailscale: Update to 1.66.4

https://github.com/tailscale/tailscale/releases/v1.66.4
Signed-off-by: Zephyr Lykos <git@mochaa.ws>

sslh: update to v1.23.1

The sslh Makefile's default target "all" now also tries to compile a new version sslh-ev.
To disable its compilation the Build/Compile is overridden and to call directly "make sslh-select" or "make sslh-fork" depending on CONFIG_SSLH_SELECT.

Some changes from 001-configfile-fix.patch were applied to the upstream and we can remove them.
The only left is a notice "sslh command line arguments override the config".

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

dnsdist: update to 1.9.4

fixes CVE-2024-25581

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

libedit: update to version 20240517-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

pdns-recursor: update to 5.0.5

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

sing-box: update to 1.8.14

Signed-off-by: brvphoenix <brvphoenix@gmail.com>

speedtest-go: update to 1.7.7

Update speedtest-go version to 1.7.7

Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>

liburing: Update to v2.6

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #24188 from gladiac/haproxy-2.8.9

haproxy: update to v2.8.9

haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <git@mochaa.ws>