croc: update to 9.6.9

change overview:
9.6.6 -> 9.6.8: only CI + deployment changes
9.6.8 -> 9.6.9: crypto library version bump

changelogs:
9.6.6 -> 9.6.7: https://github.com/schollz/croc/releases/tag/v9.6.7
9.6.7 -> 9.6.8: https://github.com/schollz/croc/releases/tag/v9.6.8
9.6.9 -> 9.6.9: https://github.com/schollz/croc/releases/tag/v9.6.9

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

nbd: update to 3.25

- Use up-to-date project URLs
- Use up-to-date configure args
- Drop obsolete std=gnu99 from CFLAGS

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

erlang: update to 26.2.2

- Drop upstreamed patch
- Fix broken symlink /usr/bin/epmd
- Re-enable mips16
- Formatting

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

python-lxml: bump to version 5.1.0

Also add a quick test.sh file.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

django: bump to version 5.0.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

numpy: bump to version 1.26.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

squid: update to 6.7

- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

lyncx: fix wrongful include of 'bsd/stdlib.h' is some environments

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

v4l2camera: Update Makefile to fix mips build

Signed-off-by: Michel Promonet <michel.promonet@free.fr>

autossh: make forwarding optional
- previously localport option was required, which broke older configs
- now in-config forwarding is only optional
- ssh option still can be used for forwarding as in sample config

Signed-off-by: kkubicki <krzysiek.kubicki@gmail.com>

snort3: improve script reliability

 - Enable missing variable checking by default
 - Explicitly check variables are defined in all 'rm' commands

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

apr-util: update to 1.6.3

- Remove upstreamed patches
- Fix OS path leak in iconv configure script

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

usbutils: update to 017

- Add mandatory usbids dependency

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

openvpn: add OpenVPN option disable-dco

You maybe want to disable the DCO support, so let's add this option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

rsyslog: update to 8.2312.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libfastjson: update to 1.2304.0

- Use HTTPS for source URL

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

whois: update to 5.5.20

- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

xxhash: update to 0.8.2

- Switch URL to the official one

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

iptraf-ng: update to 1.2.1

- Update package URLs
- Remove rvnamed-ng target since it was merged into iptraf-ng

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libffi: update to 3.4.4

- Use proper tarball URL
- Use HTTPS for package URL
- Don't set default configure option

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

diffutils: update to 3.10

- Switch package URL to HTTPS
- Refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

pigz: update to 2.8

- Fix license name

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libinput: update to 1.25.0

- Switch sources to git since no proper tarball is available
- Switch URL to HTTPS
- Don't set default Meson options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

gitolite: update to 3.6.13

- Use git for sources since no proper tarball is available
- Switch package URL to HTTPS
- Refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

git-lfs: update to 3.4.1

- Update package URLs to the official ones

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

xmlrpc-c: install dev files only with 1st variant

This adds a variant check to run InstallDev only when the first variant
is built.  Otherwise, a dependent package may install the default
version, even though the second variant ends up in the staging dir,
causing downstream packages to miss library dependencies, such as:

Package rtorrent-rpc is missing dependencies for the following libraries:
libxmlrpc_xmlparse.so.3
libxmlrpc_xmltok.so.3

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

openldap: update to 2.6.7

- Remove dead mirror URL
- Clean-up configure args

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

lmdb: update to 0.9.32

- Switch to git source URL
- Rebase the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

hwdata: update to 0.379

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

minizip: update to 4.0.4

- Don't set default cmake option
- Switch URL to the official one

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

automake: update to 1.16.5

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

apr: update to 1.7.4

- Remove upstreamed patches
- Fix bindir in apr-1-config to fix subversion build

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

git: update to 2.43.0

- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

alsa-utils: update to 1.2.11

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

alsa-ucm-conf: update to 1.2.11

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

alsa-lib: update to 1.2.11

- Change package URL to HTTPS
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

autoconf: update to 2.72

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libarchive: update to 3.7.2

- Don't set CMake options matching the defaults

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

lynx: update to 2.9.0

- Remove stale mirrors
- Use HTTPS for package URL
- Don't set default configure args
- Disable newly added bz2 support
- Formatting

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

expat: update to 2.6.0

- Don't set default CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libmariadb: update to 3.1.23

- Replace dead source URL
- Rebase the patch
- Remove superfluous cmake option

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

knxd: bump to upstream version 0.14.61

Signed-off-by: Othmar Truniger <github@truniger.ch>

gzip: update to 1.13

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

Merge pull request #23308 from krant/fping

fping: update to 5.1

libid3tag: update to 0.16.3

- Switch package URL to the new upstream
- Switch PKG_SOURCE_PROTO to git
- Switch to CMake build
- Drop custom .pc file in favor of upstream version

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

fping: update to 5.1

- Don't set default configure arg

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

mpg123: update to 1.32.4

- Use package official URL
- Fix license name

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

oniguruma: bump to 6.9.9

Featured changes:
- Update Unicode version 15.1.0
- NEW API: ONIG_OPTION_MATCH_WHOLE_STRING
- Fixed: (?I) option was not enabled for character classes (Issue #264).
- Changed specification to check for incorrect POSIX bracket (Issue
  #253).
- Changed [[:punct:]] in Unicode encodings to be compatible with POSIX
  definition. (Issue #268)
- Fixed: ONIG_OPTION_FIND_LONGEST behavior
--- 6.9.8
- Whole options
  - (?C) : ONIG_OPTION_DONT_CAPTURE_GROUP
  - (?I) : ONIG_OPTION_IGNORECASE_IS_ASCII
  - (?L) : ONIG_OPTION_FIND_LONGEST
- Fixed some problems found by OSS-Fuzz

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

subversion: update to 1.14.3

- Adopt the package
- Remove default configure options
- Rebase the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

devel/autoconf: assign PKG_LICENSE_FILES

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

python-certifi: Update to 2024.2.2

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

opus: update to 1.4

- Add patch to fix build on ARM
- Use official source URL

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

python-orjson: update to version 3.9.13

Relevant changes since 3.9.12:
- FIXED: Serialization str escape uses only 128-bit SIMD.
- FIXED: Fix compatibility with CPython 3.13 alpha 3.
- Publish musllinux_1_2 instead of musllinux_1_1 wheels.
- Serialization uses small integer optimization in CPython 3.12 or later.

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

lang/python/python-yaml: fix PKG_CPE_ID

There is not a single CVE linked to pyyaml_project:pyyaml so use
pyyaml:pyyaml instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyyaml:pyyaml

Fixes: c06a04c754bdcfdb2ea0bd1d654128863a2b6738 (python-yaml: update to version 5.1)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

mwan3: use network_get_preferred_ipaddr6

This updates mwan3 to use network_get_preferred_ipaddr6 instead of
network_get_ipaddr6 if possible to determine a source ip for the
connectivity checks. This avoids issues where the first ip address
that is returned from network_get_ipaddr6 does not work anymore while
the preferred one returned from network_get_preferred_ipaddr6 works.

Signed-off-by: Jonas Lochmann <git@inkompetenz.org>

lualanes: Version bump to v3.16.2

Update the PKG_VERSION and PKG_SOURCE_VERSION to pull version 3.16.2
from upstream. The upstream version includes fixes for the
`pthread_yield: symbol not found` issue.

Removed patches 100-musl-compat.patch and 200-fix-redef-error.patch
as fixes were implemented upstream.

Build tested on aarch64, arm_cortex_a15/a9, i386, mips[el]_24kc,
powerpc_464fp/8548, riscv64, x86_64. Confirmed on x86_64.

Signed-off-by: Mark Baker <mark@vpost.net>

mosquitto: reenable options wrongly turned off

Signed-off-by: Rosen Penev <rosenp@gmail.com>

CONTRIBUTING.md: clarify pull request commit requirements

Corrects the commit subject being referred to as a "description"
and links the official OpenWrt patch submission standards for
commit messages. Adds additional notes about real names and
emails being required. Also fixes the capitalization of GitHub
and SourceForge.

Signed-off-by: Timothy Ace <openwrt@timothyace.com>

gnuplot: update to 6.0.0

- Add patch for MIPS and PowerPC systems

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libsamplerate: update to 0.2.2

- Update package/source URLs to official ones
- Change license according to upstream

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

freetype: update to 2.13.2

- change package URL to HTTPS

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

perl-time-moment: initial package at v0.44

Builds compiled perl module Time::Moment v0.44 from CPAN.

Signed-off-by: Timothy Ace <openwrt@timothyace.com>

libmaxminddb: update to 1.9.1

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

jq: update to 1.7.1

- Update package URLs
- Fix license
- Drop obsolete CFLAGS
- Drop obsolete patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libstrophe: update 0.13.0

- Use common Github URL
- Add missing zlib dependency

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libsndfile: update to 1.2.2

- Update package URL to the official one
- Update source URL to the official one
- Modernize CMake options
- Fixup pkgconfig file
- Enable mpg123 support per users request (+7kB)

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

p910nd: hotplug script

Signed-off-by: Paul Donald <newtwen@gmail.com>

graphicsmagick: update to 1.3.42

- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

snort3: finish up several incomplete capabilities

Reporting
 - Use json alert data for 10x speed improvement in report generation
 - Include both gid and sid, plus packet direction in report output
 - Add by-date incident filtering
 - Add verbose mode which displays actual rules triggered and their source
 - Attempt to look up host names from IPs in verbose mode
 - Clean up display of port number involved in incidents

Rules
 - Complete downloader for subscription rules using oinkcode (only tested
   with snort.org's "free" tier subscription)
 - Auto-detect multiple rules files and include them in lua 'ips.rules'
 - Add '--backup' option to copy out current rules before installing new
 - Add '--persistent' option to 'snort-rules', storing in persistent location

CLI interface
 - Completely rework command line option parsing in all user scripts
 - Allow options and commands to be in any order on command line
 - Add long-form names for all options ('--help' for '-h' and so on)
 - Detect errors properly in options, enhance help pages

Bug fixes
 - Use 'mkdir -p' on all directory creation
 - Use proper tmp directory from 'snort.snort.temp_dir' everywhere

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

iputils: bump to 20240117

Signed-off-by: Jan Klos <jan@klos.xyz>

procps-ng: update to 4.0.4

- Update the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

treewide: assign PKG_CPE_ID

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

telldus-mqtt: add new package in utils

Extends functionality of exisiting telldus-core package

Signed-off-by: PeterFromSweden <peterfromswe884@gmail.com>

make: update to 4.4.1

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

leptonica: update to 1.84.1

- remove upstreamed patch
- explicitly disable openjpeg to ignore host-installed library
- fix .cmake and .pc paths

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

nextdns: Update to version 1.42.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

imagemagick: take over maintainership

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

imagemagick: update to 7.1.1-27

- Use official source URL
- Add libstdcpp dependency
- Don't set configure options which are matching default values

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

flac: update to 1.4.3

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

vnstat2: update to version 2.12

This version includes several new features that allow to simplify the
package significantly: The noexit patch and hotplug script are no longer
needed, and the init script doesn't have to check for legacy databases
anymore.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>

zstd: update to 1.5.5

- Don't set Meson options which are matching defaults

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libcurl-gnutls: update to version 8.6.0

https://curl.se/changes.html#8_6_0

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>

utils/ntfs-3g: fix PKG_CPE_ID

tuxera:ntfs-3g is a better CPE ID than ntfs-3g:ntfs-3g as this CPE ID
has the latest CVEs (whereas ntfs-3g:ntfs-3g only has one CVE from 2007):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tuxera:ntfs-3g

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/gpsd: fix PKG_CPE_ID

gpsd_project:gpsd is a better CPE ID than berlios:gps_daemon as this CPE
ID has the latest CVEs (whereas berlios:gps_daemon only has one CVE from
2004):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gpsd_project:gpsd

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

lang/python/python-pip: fix PKG_CPE_ID

There is not a single CVE linked to python:pip so use pypa:pip instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pypa:pip

Moreover, CPE_ID missed PKG_ prefix

Fixes: eee273507b868ad5f6f7e744d513c85330967906 (python3: Split pip into separate source package)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/nbd: fix PKG_CPE_ID

There is not a single CVE linked to network_block_device:nbd so use
network_block_device_project:network_block_device instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:network_block_device_project:network_block_device

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

multimedia/motion: fix PKG_CPE_ID

motion_project:motion is a better CPE ID than lavrsen:motion as this CPE
ID has the latest CVE (whereas lavrsen:motion only a CVE from 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:motion_project:motion

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/miniupnpc: fix PKG_CPE_ID

cpe:/a:miniupnp_project:miniupnpc is the correct CPE ID for miniupnpc:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniupnp_project:miniupnpc

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/libidn2: fix PKG_CPE_ID

There is not a single CVE linked to libidn2_project:libidn2 so use
gnu:libidn2 instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnu:libidn2

Fixes: ceadbcbb64de727c3a974e552d9a723d532e4e40 (treewide: add PKG_CPE_ID for cvescanner)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

libs/expat: fix PKG_CPE_ID

There is not a single CVE linked to libexpat:expat so use
libexpat_project:libexpat instead:

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat

Fixes: 70c62ef2d77aef5d8a27ccca2b147bc2a69dc7f8 (expat: update to version 2.2.7 (security fix))
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/lrzsz: fix PKG_CPE_ID

PKG_CPE_ID was missing ":lrzsz"

Fixes: 6d6c4b21b5e22a9f1058db5b61521a298e00a5f0 (lrzsz: update to v0.12.21rc and fix a CVE)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

lang/python/python-paho-mqtt: fix license

python-paho-mqtt is licensed under EPL-2.0, not EPL-1.0, since version
1.6.0 and
https://github.com/eclipse/paho.mqtt.python/commit/fabe7500fb6fde31fd98c619e0117d1c651fd18d

While at it, add LICENSE.txt to PKG_LICENSE_FILES

Fixes: 784f2a519bb8cdfaa973070f65ff9a3a481e5cd1 (python-paho-mqtt: bump to version 1.6.1)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

zoneinfo: Updated to 2024a release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

net/ntpd: fix license

Replace "Unique" by the standard SPDX identifier for NTP license:
https://spdx.org/licenses/NTP.html

Fixes: 1aff45c6dd36f2a5875eadaeae2ed93da8ff6d45 (ntpd: add SPDX license information)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/lsof: fix license

Replace "Unique" by the standard SPDX identifier for lsof license:
https://spdx.org/licenses/lsof.html

Fixes: 59adfc86b9d1e5a8fb9d5c83db6546a6b49a77f5 (lsof: add license information)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/boinc: fix PKG_CPE_ID

boinc_project:boinc has never been a valid CPE ID so use
rom_walton:boinc instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rom_walton:boinc

Fixes: 9c2bd865c715cad8646157d6bbfb669d9970c322 (boinc: new package for distributed computing/data acquisition)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/zsh: fix PKG_CPE_ID

zsh:zsh is a better CPE ID than zsh_project:zsh as this CPE ID has the
latest CVEs (whereas zsh_project:zsh only has CVEs up to 2017):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:zsh:zsh

Fixes: ff056fcffcacf2632505bb108bf8e8c2a3cef09c (zsh: Update to 5.6.2)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

utils/tmux: fix PKG_CPE_ID

tmux_project:tmux is a better CPE ID than nicholas_marriott:tmux as this
CPE ID has the latest CVE (whereas nicholas_marriott:tmux only has a CVE
from 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tmux_project:tmux

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/tinyproxy: fix PKG_CPE_ID

tinyproxy_project:tinyproxy is a better CPE ID than banu:tinyproxy as
this CPE ID has the latest CVEs (whereas banu:tinyproxy only has CVEs up
to 2012):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tinyproxy_project:tinyproxy

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

net/tinc: fix PKG_CPE_ID

tinc-vpn:tinc is a better CPE ID than tinc:tinc as this CPE ID has the
latest CVEs (whereas tinc:tinc only has CVEs up to 2002):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tinc-vpn:tinc

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>