python-py: Update to 1.11.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

xray-core: backport pending patch for Go 1.21 update

Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

vnstat2: update to version 2.11

This release breaks the noexit patch, because the code for removing old
now returns an error when no interfaces are configured. As it is run on
startup, the daemon exits in this case. To avoid this, add an additional
check so an error is only returned in an actual error case.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>

tailscale: Update to 1.48.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

net/mosquitto: bump to 2.0.17

This is a security and bug fix release.

Security:
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
  messages with the same message ID, but then never respond to the PUBREC
  commands.
- CVE-2023-0809: Fix excessive memory being allocated based on malicious
  initial packets that are not CONNECT packets.
- CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a
  will message that contains invalid property types.
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
  identity are valid UTF-8.
- Fix potential crash when loading invalid persistence file.
- Library will no longer allow single level wildcard certificates, e.g. *.com

Bugfixes of note or relevance to OpenWrt:
- Fix bridges with non-matching cleansession/local_cleansession being expired
  on start after restoring from persistence. Closes #2634.
Client library:
- Use CLOCK_BOOTTIME when available, to keep track of time. This solves the
  problem of the client OS sleeping and the client hence not being able to
  calculate the actual time for keepalive purposes. Closes #2760.

Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt
plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt
(2.0.17 fixes regressions from the 2.0.16 release)

Signed-off-by: Karl Palsson <karlp@tweak.au>

v2ray-core: backport upstream Go 1.21 updates

Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mdio-tools: update to 1.3.0

Update the mdio-netlink kmod and userspace mdio-tools to version 1.3.0.

[v1.3.0] - 2023-07-24
---------------------

Primarily widen the gamut of supported kernel versions, now supporting
all kernels from 5.2 and onwards.

- mvls: Support for 88E6320/88E6321

- mdio-netlink: Adapt to the upstream C22/C45 refactor.

Signed-off-by: Zhi-Jun You <hujy652@protonmail.com>

bottom: New package

Bottom is a top/htop workalike with few additional features, written in
rust.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

natmap: update to 20230820

Signed-off-by: Ray Wang <r@hev.cc>

sqm-scripts: Bump to v1.6.0

Fixes an issue with DSA switch compatibility

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Merge pull request #21874 from thess/unbound-SSL-workaround

Unbound: Silence SSL unexpected eof messages

Unbound: Silence SSL unexpected eof messages

Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #21882 from dobo90/adguardhome_0.107.36

adguardhome: update to 0.107.36 and fix compilation with Go 1.21

adguardhome: update quic-go to v0.37.6

* quic-go v0.36.x cannot be compiled with Go 1.21. Update that
  AdGuardHome dependency to latest one from v0.37 series.
* It fixes following compilation error:
  go-mod-cache/github.com/quic-go/quic-go@v0.36.2/internal/qtls/go121.go:5:13: cannot use "The version of quic-go you're using can't be built on Go 1.21 yet. For more details, please see https://github.
  com/quic-go/quic-go/wiki/quic-go-and-Go-versions." (untyped string constant "The version of quic-go you're using can't be built on Go 1.21 yet.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

adguardhome: update to v0.107.36

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.34
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.35
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.36

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
[ Reword commit message ]
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

tailscale: Update to 1.48.0

Everything is working on pure upstream code.
Patching is not longer needed.

Added entire /etc/tailscale/ directory to conffiles for persistent ssh
host key & https certificate across sysupgrades.

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

yq: Update to 4.35.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tunneldigger-broker: update to v0.4.0

Include new hook script to build

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: add rate-limit hook

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: add option to isolate bridge ports

Add new option to a config bridge section to indicate
if a bridge port added to the bridge should be isolated
or not.  The default is 0 (no isolation).

example

config bridge
     option interface 'br-mybridge1446'
     option mtu '1446'
     option isolate '1' # default '0'

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: update lib functions

Use config_foreach instead of config_cb

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

tunneldigger-broker: update config file and init for v0.4.0

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>

rust: correct mistake in previous host-build fix

Fixes the commit 105fa3920e which was intended to make rust/host build
on aarch64 darwin working again. However, the fix contains a mistake
because it sets RUSTC_TARGET_ARCH instead of RUSTC_HOST_ARCH. Thus, the
fix doesn't work.
This properly sets the correct variable RUSTC_HOST_ARCH.

Fixes: 105fa3920e ("rust: fix host build on aarch64 darwin")
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

syncthing: disable quic to support GO 1.21

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

syncthing: update to 1.23.7

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

sing-box: update to 1.4.0-beta.5

Add support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

lua-eco: update to 2.4.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

libyang: update to 2.1.80

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

python-trove-classifiers: Update to 2023.8.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-psycopg2: Update to 2.9.7, update list of dependencies

This also adds a source package (python-psycopg2-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-msgpack: Update to 1.0.5, add host Cython dependency

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-psutil: Update to 5.9.5, replace patch

100_add_cross_platform_build_ability.patch was submitted upstream in
https://github.com/giampaolo/psutil/pull/2068, but that pull request was
closed without being merged.

This replaces that patch with a simpler version that only updates
setup.py, leaving the run-time library code unchanged.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-more-itertools: Update to 10.1.0

The package has changed to the flit-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-markdown: Update to 3.4.4, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-distro: Update to 1.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

frr: updat to 9.0

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

frp: update to 0.51.3

Includes some bug fixes and adds support for GO 1.21.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

rust: fix host build on aarch64 darwin

rust/host failed to compile on macOS running on Apple Silicon M1 Pro
because the host target triple is autogenerated to be
'arm64-unknown-linux-'. Rust doesn't have such a target triple, thus the
build failes because there are no pre-built artifacts for bootstrapping.

Fix this by setting RUSTC_HOST_ARCH to 'aarch64-apple-darwin' in case
our host is HOST_ARCH=arm64 and HOST_OS=darwin.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

Merge pull request #21839 from mhei/php8-fix-riscv64

php8: fix linking on riscv64 platform (again)

Merge pull request #21828 from stangri/master-simple-adblock

simple-adblock: bugfixes for uci_load_validate

php8: fix linking on riscv64 platform (again)

The initial fix was done in a2e76e497.
Later we could revert it with 5779ae4c5 since a global fix
in gcc was deployed.

But now, PHP itself applied a workaround/fix in 8.2.8,
so that we now require the initial fix again.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21766 from TDT-AG/pr/20230808-modemmanager

modemmanager: setting allowed and preferred mode

python3-ble2mqtt: update to 0.1.8

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-dbus-fast: update to 1.91.2

The patch is no longer required as host setuptools is now new enough.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-aio-mqtt-mod: update to 0.3.4

python3-openssl is now optional.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

dnslookup: Update to 1.9.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.54.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

qemu: enable host support for armsr/armv8

As of OpenWrt main branch commit e505873e65f72 ("armsr: armv8:
enable KVM host") [merged 2023-08-15], armsr/armv8 has
KVM host support. We can now enable QEMU host for this
target.

For example, you can run OpenWrt armsr/armv8 as a guest
like so:
qemu-system-aarch64 -nographic -M virt -cpu host --enable-kvm \
-bios u-boot.bin -smp 1 -m 1024 \
-drive file=openwrt-armsr-armv8-generic-ext4-combined.img,format=raw,index=0,media=disk

A compatible u-boot.bin can be obtained from u-boot-qemu_armv8/u-boot.bin
that is built with the armsr target and available from
downloads.openwrt.org.

Signed-off-by: Mathew McBride <matt@traverse.com.au>

simple-adblock: bugfixes for uci_load_validate

* fix validation for force_dns_port when missing in config
* fix validation for dns_instance when * or - are used

Signed-off-by: Stan Grishin <stangri@melmac.ca>

tgt: update to 1.0.87

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

smartmontools: update to 7.4

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

reptyr: Update to 0.10.0

* 0.10.0 (Jun 04, 2023)
 - Add arm7 and aarch64 support for FreeBSD

* 0.9.0 (Jun 12, 2022)
 - Add RISCV64 support on Linux
 - Fix tty-stealing on PowerPC

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21827 from jefferyto/golang-1.21.0

golang: Update to 1.21.0, remove patch

golang: Update to 1.21.0, remove patch

Upstream has updated the Go compiler to not use gold when building for
arm, and is waiting for a fix to binutils (released in 2.41) before
doing the same for aarch64.[1]

Based on the above, it does not appear that
https://github.com/golang/go/pull/49748 will be merged. This removes the
patch from that pull request.

[1]: https://github.com/golang/go/issues/22040

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

boost: Updates package to version 1.83.0

This commit updates boost to version 1.83.0

A new header-only library is available:
- Compat: A repository of C++11 implementations of standard components
  added in later C++ standards, from Peter Dimov and contributors. [1]

More info about Boost 1.83.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_83_0/libs/compat/doc/html/compat.html
[2]: https://www.boost.org/users/history/version_1_83_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

docker-compose: Update to version 2.20.3

Signed-off-by: Javier Marcet <javier@marcet.info>

ruby: fix riscv64 build

Fix build by adding missing macros.

The patch is taken from:
https://lists.openembedded.org/g/openembedded-core/message/161168

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: Update to 5.4.4

Update xz to match the version in tools/

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #21710 from Lankaster/openwrt-main-monit

monit: update to 5.33.0

Merge pull request #21800 from yogo1212/wget_pcre2

wget: use pcre2

smartdns: bump to 1.2023.43

Signed-off-by: Nick Peng <pymumu@gmail.com>

wget: use pcre2

Pcre (1) is unmaintained and reached its end of life in 2021.
The base system provides pcre2 exclusively since May.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>

v2raya: Update to 2.1.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-iniconfig: Update to 2.0.0

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonpath-ng: Update to 1.5.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jmespath: Update to 1.0.1

This also updates the Python dependency from python3 to python3-light.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-intelhex: Update to 2.3.0

This version includes the fix from the removed patch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

openssh: update to 9.4p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>

Merge pull request #21748 from jefferyto/python-influxdb-5.3.1

python-influxdb: Update to 5.3.1

Merge pull request #21795 from jefferyto/python-netdisco-3.0.0

python-netdisco: Update to 3.0.0, update list of dependencies

Merge pull request #21794 from jefferyto/python-multidict-6.0.4

python-multidict: Update to 6.0.4, update list of dependencies

python-netdisco: Update to 3.0.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-multidict: Update to 6.0.4, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

haproxy: update to v2.8.2

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #19218 from stintel/openthread

openthread-br: new package

Merge pull request #21787 from TDT-AG/pr/20230811-collectd

collectd: fix implicit dependence for collect-mod-disk to libudev

collectd: fix implicit dependence for collect-mod-disk to libudev

Fix missing dependencies for 'collectd-mod-disk' to 'libudev' if
collectd-mod-smart is not enabled.

Package collectd-mod-disk is missing dependencies for the following
libraries:
libudev.so.1

The package 'collect-mod-disk' is now build always with 'libudev' support,
independent of the enable/disable build state of 'collectd-mod-smart'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

node: August 2023 Security Releases

Update to v18.17.1
This is a security release.

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-32002: Policies can be bypassed via Module._load (High)
* CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
* CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
* OpenSSL Security Releases  (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 14th July.
    * OpenSSL security advisory 19th July.
    * OpenSSL security advisory 31st July

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

chrony: update to 4.4

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

prometheus: drop package

The package is terribly outdated and bundling it with the web UI is a
task I don't find myself willing to take. Dropping it.

FIX: #16008

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>

Merge pull request #21747 from jefferyto/python-ifaddr-0.2.0

python-ifaddr: Update to 0.2.0

gptfdisk: fix incorrect TARGET on non-linux host

Fixed by defining TARGET=linux, as suggested in the README.

By default TARGET is derived from the host using uname -s,
which produces build errors on a non-linux hosts:

TARGET is not set; trying to determine target based on host OS....
Detected OS is Darwin
Build target is macos
...
x86_64-openwrt-linux-musl-g++: error: unrecognized command-line option '-arch'

Helped-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

python-click: Update to 8.1.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.41.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-seasurf: Update to 1.1.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-login: Update to 0.6.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-httpauth: Update to 4.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-babel: Update to 3.1.0

The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flask-socketio: Update to 5.3.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-socketio: Update to 5.8.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-engineio: Update to 4.5.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

yt-dlp: add missing dependencies

Added missing python3-{logging,uuid} dependencies.

Signed-off-by: Rani Hod <rani.hod@gmail.com>

libxcrypt: update to 4.4.36

Upstream bump required to fix build issues reported here:
https://forum.openwrt.org/t/i-cannot-build-my-image-due-to-failure-in-libxcrypt/168114

Signed-off-by: John Audia <therealgraysky@proton.me>

modemmanager: add setting for allowed and preferred mode

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: remove unneeded teardown error reporting

Teardown error reporting is not needed, bacause it overrides init error
reporting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

modemmanager: fix white spaces

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

xtables-addons: add packaging for xt_asn, et al

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

xtables-addons: add MaxMind versions of xt_geoip_dl, etc.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #21761 from stangri/master-simple-adblock

simple-adblock: force_dns_port validation bugfix

simple-adblock: force_dns_port validation bugfix

Signed-off-by: Stan Grishin <stangri@melmac.ca>