nebula: update to 1.6.0

* Update to https://github.com/slackhq/nebula/releases/tag/v1.6.0
* Update maintainer's email address
* Update for newest shellcheck

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit aa52a971a77d1f422ad8ab67551f5d7accff4c47)

node: July 7th 2022 Security Releases

Update to v16.16.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

No vulnerabilities related with openssl (uses system openssl)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8db0d09823764d50b38ff27a9b13cac7fa46bdd2)

nsutils: Update to latest version, switch to cmake

This also:

* Adds PKG_SOURCE_DATE and PKG_SOURCE_VERSION to PKG_VERSION (by
  default, when PKG_VERSION is defined, PKG_SOURCE_DATE and
  PKG_SOURCE_VERSION are not used)

* Fixes package copyright

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2dd1c17626176ca37e438c3af5c939c1326feb82)

nsutils: bump to new release

Few minor changes, like -h flag for program (help).
Added URL to package definition.

No new version release with version number, so version stays
as is, but pkg_release is still bumbed with this commit.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 8f66090160c2e9e837c80b961e046afc62fb698c)

python-cryptography: Fix failing build

Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d78837b7181b859472894aa243a2eae595b)

travelmate: update 2.0.9

* various vpn fixes/optimizations (run tested by forum users)
* refine several log statements

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cf1f9dc933eb86e6a78fba3e27ae15428809aa3c)

xtables-addons: update to 3.21

updated to kernel 5.10.121+ changes

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 69e4ed4b6f2e0fe33367ea13871d5ac227aaf922)

xtables-addons: update to 3.20

866bc7f Xtables-addons 3.20
aa70669 doc: move changelog to rST
d7de2a9 doc: remove old changelog entries
d7e49a8 build: bump supported kernel version to 5.17
966fa43 extensions: replace PDE_DATA

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c3141dc16aaf6ec0d9262a921a41a69e96241be8)

xtables-addons: add PKG_LICENSE_FILES and use SPDX

Add PKG_LICENSE_FILES. Use SPDX.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b4d00c1c203850644387378c37410f6216c998cf)

xtables-addons: fix various warning in lua patch

These will become errors in the next LTS kernel.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1cd93b673bfc01969946072a3d6989633e596804)

xtables-addons: update to 3.19

Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af50679587bf39fec31f4af75f7aa8efd498a0)

Revert "gcc: update 11 minor version"

This reverts commit 4db8466a14e54ae9c45989fb41c9e6a20002e670.

branch 22.03 has GCC 11.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #18866 from bluebrother/collectd-dsl-fixes-22.03

[22.03] collectd: Fix various issues with lantiq dsl metrics.

collectd: Fix various issues with lantiq dsl metrics.

- Handle bool values correctly. We get the values as bool, but collectd
  requires a bool value to be numeric in the range [0, 1].
- Remove profile and mode values. Those are strings, which cannot be
  represented by collectd.
- Update collectd type for some values.
- Fix latn value being present twice.

Signed-off-by: Dominik Riebeling <bluebrother@posteo.de>
(cherry picked from commit eb632da5bbd732bbffc2761fbb191267ef2375d0)

unbound: update to 1.16.0

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa43aac589f4c2044fa77ced1055c89b7)

yt-dlp: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 534b538598cff121ed9fa533505a3e5dbc238495)

youtube-dl: drop package

youtube-dl is still maintained, but moves very slowly and many other
distributions instead package an active fork, yt-dlp.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 89710ac58829119029373e6936e8694d67f72986)

Merge pull request #18830 from nemesisdesign/openwrt-22.03

[22.03] openwisp-config: update to 1.0.1

Merge pull request #18848 from nemesisdesign/monitoring-openwrt-22

[22.03] openwisp-monitoring: added 0.1.1

glib2: replace intl patch with upstream solution

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1e2f4f1bf7d5b5851ff2a569b8305ec26ed08769)

glib2: update libintl handling

glib2's meson.build runs check cc.has_function('ngettext', args :
osx_ldflags) and, if successful, it never looks for non-libc libintl.
For musl and glibc this test is always successful.

glib2 unconditionally sets ENABLE_NLS, so during compile <libintl.h>
gets included always. But then we have a disconnect when the OpenWrt pkg
is being built with BUILD_NLS=y, because the <libintl.h> will be from
libintl-full but glib2 will not link to libintl-full.

With BUILD_NLS=n there's no problem, because the <libintl.h> will be
from libc.

In lieu of proper libintl detection in glib2's meson build, removing the
SED call from the Makefile together with the added patch sorts this out.
The SED call can be removed because when we force libintl-full use, the
meson build will put the necessary linker flag into the pkg-config file
itself.

Alpine Linux does something similar (see [1]), but they always force
the use of the external libintl. I assume they always go for full NLS
support.

[1] https://git.alpinelinux.org/aports/tree/main/glib/musl-libintl.patch

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 721838ddd4832ed4fcad5f4eee6a4b784b30dcae)

glib2: update to 2.70.5

Enabled glib_checks to fix podman.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d0cd7eb5bf704cb8e314214f462c79d8f5b08632)

openwisp-monitoring: added 0.1.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae7442dff8a1536de404a2fc38337f2f)

openwisp-config: update to 1.0.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7ba54e75407970341c6070695928e40d)

Merge pull request #18837 from 1715173329/y3

[openwrt-22.03] yq: Update to 4.25.3

yq: Update to 4.25.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff102319f1405ace9f50aed42f6c3ce2cbbe9)

acme: switch from iptables to nft

Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
(cherry picked from commit d926da5182a4547e5248dad3e3e59abcd41d126f)

travelmate: update 2.0.8-3

* refine vpn timeout

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f0477d94993ab1ec297b317fbb6a167ed7c482ca)

gcc: update 11 minor version

- Update 11 minor version to match the upstream
- Rename patches dir to reflect new gcc 11 minor version
- Drop upstream patch

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 4db8466a14e54ae9c45989fb41c9e6a20002e670)

gcc: depend on libzstd

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 8e0bc54fcd8e6d5bd2c1a2c8be146b719a133b26)

gcc: update to allow compiling different versions

This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires two
additional patches:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

(2) 980-add-nostdinc++.patch, which backports a fix from 11.3.0 (11.2.0
only).

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ceaa6e840e0b57c1b47c784997187044e3311d23)

gcc: change maintainer

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit abbe33b369e8c6f16352c9333988e6911ee3eced)

travelmate: update 2.0.8-2

* make vpn handling more reliable

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 06784b4e322c9f82f96185bd3ebe7cdba8558eb7)

syslog-ng: update to version 3.37.1

- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111382630c7046cfb4539b3f1a72ff402)

dnsdist: switch from liblua to luajit

luajit provides higher performance for requests handled in Lua hooks.
It also enables access to dnsdist functionality only exposed via FFI,
and allows configurations/hooks to call functions in any C library
without providing separate bindings.

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 283b269c7c0f164311b11d459953b1b34f6974cf)

Revert "lxc: export systemd cgroups after install"

The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b95053bf958a4001fb0a82c4563bf345e2.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5d3ba2b0f6f53ab8330ab9fea2f7adf)

lxc: export systemd cgroups after install

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b95053bf958a4001fb0a82c4563bf345e2
reverted in 039912dec5d3ba2b0f6f53ab8330ab9fea2f7adf

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da73565399f915f516c6cdd74a58f984d519e4b)

libreswan: update to 4.7

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8cf8518a0886e82ae3b3ad905af914bc63f4cce3)

nfdump: update to 1.6.24

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26ef278b3d38d47b88ae221aa967492f)

knot-resolver: update to version 5.5.1

Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac189d7315db3b615da2afc8c95e920bb)

travelmate: update 2.0.8

* the domain whitelist feature has been extended to free up multiple nested captive portal domains.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0ee0aa2b5399606741bfa21e994f4869e04a9d28)

luajit: backport softfloat ppc support

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2561611776e50c8876a7b040ffd6fdc)

Merge pull request #18698 from stangri/openwrt-22.03-curl

[22.03] curl: bump to 7.83.1

xray-core: Update to 1.5.8

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402822e91050b427fcb981e725e681f45)

cloudflared: Update to 2022.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f23aeedcbb9367e375a61ccf6cbaff3d42f3516b)

v2raya: Update to 1.5.8.1

1. Switched to use prebuilt web files to get rid of massive Node.js.
2. Increased nofile limitation to avoid "too many open files" error.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d629a6f8b2b3e37a98540b5ec043949d2069cb88)

django: bump to version 4.0.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit b9a47cc470b19346049d394d4992f5ebdada0702)

Merge pull request #18773 from AdorableJiang/openwrt-22.03-mydns

ddns-scripts: mydns.ip to mydns.jp

ddns-scripts: mydns.ip to mydns.jp

The provider is `mydns.jp` not `mydns.ip` which is wrong and misleading.
Same as #18467.

Signed-off-by: Shengjiang Quan <qsj287068067@126.com>

Merge pull request #18771 from champtar/prom-lua-wait-2203

[22.03] prometheus-node-exporter-lua: fix waiting for interface

prometheus-node-exporter-lua: fix waiting for interface

Instead of waiting for interface to be up,
wait for it to have IPs, as this is what we need.

Also do not call procd_open_instance when not ready.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 1dd46bca627a876158a05be14a0c91948d037445)

python3: Update to 3.10.5, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 57e2b656cb293b9d7991bfe8aa4ffe9fe59dfbfd)

dnsdist: update to 1.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 573829d625fecdd90e3a7e3e7f195e7d8875833a)

dawn: update to 2022-06-13

88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf5812561499c30f74095e450a9992a657)

dawn: update to 2022-06-11

4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a790c81ff57ad1d7741489bf5e1839839)

dawn: update to 2022-06-09

850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f785f4b0a8fae2b97feb6df0753c96ee7)

telegraf: update to version 1.23.0

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851557f89a77389db7840ce0a45494df7)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

node: bump to v16.15.1

Upgrade npm to 8.11.0
Suppressed unnecessary builds.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d8dc54ceea04070a6999c5a3b2e86225fec0d498)

lighttpd: update to lighttpd 1.4.65 release hash

* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e5458e27152b02c57609f2224586843271)

Merge pull request #18743 from champtar/prom-lua

[22.03] prometheus-node-exporter-lua: backport recent commits

irqbalance: upstream patch to fix segfault

Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e85aaab1e0ff2ba6874e7d6b09f45d5)

irqbalance: upstream patch to fix irq-module relation

Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fabe8c12baa4b9d9788790594cc606a4)

prometheus-node-exporter: fix ubus stations

Not every radio has also ubus support. Only query radios with ubus
functions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
[fixup, call ubus.connect() once per scrape]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 0a07237514467da0767e09cfe317f9649fc7d928)

prometheus-node-exporter-lua: use uhttpd-mod-lua

listen_ipv6 config option is removed and we now
listen on both ipv4 and ipv6 addresses.
HTTP keepalive is enabled and set to 70s by default.

With uhttpd-mod-lua there is a small change in behavior,
all code is loaded/parsed/executed once on startup as before,
but now each request is executed in his own fork, so we can't
keep a state between requests.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 60460f00463ad279135f7ee65eb096d08cf3a2cf)

prometheus-node-exporter-lua: fixup openwrt collector

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 3afccecdb2c1a8a99b688a34453c250fb30b1acb)

prometheus-node-exporter-lua: add netclass.lua collector

All current node_exporter netclass metrics will be available. This includes
speed metrics per lan port on supported DSA switches.

Signed-off-by: René Treffer <treffer@measite.de>
(cherry picked from commit a315c40b7232bbc83582685c98e41466d84d7a35)

mosh-full: Add perlbase-text dependency

Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e74f04415f17a96de156bed4964ff0c2)

mosh-full: Sort dependencies alphabetically

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d2424f347aa582841aebbbdcc015041)

beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532

1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf2502c75ffc8ac11fffd539f5c070f77c3)

node: bump to v16.15.0

Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fcfd2599d9fad84301a42b9597e9a71bdd0f267f)

xray-core: increase nofile limitation

This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd528652c58e106a9bb4becd5ac8bb19a0ffb)

xray-core: Update to 1.5.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a9023f5a3f27690b0fa61ed2899efe1)

dnsproxy: Update to 0.43.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b7e1077a60e9890e30f75e091a3a168ed266ebe6)

golang: Update to 1.18.3

Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf0903125837bc7990813105cbe7ce23f5ece)

gg: Update to 0.2.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 576032a0e4d84bf07ba227e9cfebe0685f8d7e6b)

htop: update to 3.2.1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a1978519e8f2c1e5b77cad4190fa218)

curl: bump to 7.83.1

* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726a019fa864420fc9d50523ab8ec8901)

libcoap: make sure `libcoap-3-notls.so` is installed

This commit fixes an issue where the `libcoap-3-notls.so` is not installed,
in some cases leaving the target's root with no library and just a broken link
from `libcoap-3.so` to `libcoap-3-notls.so`.

Signed-off-by: Leo Soares <leo@hyper.ag>
(cherry picked from commit 80c4d675c22ee12516435b6ff4ce80e13c676d9b)

ksmbd-tools: update to 3.4.5

Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

irqbalance: remove local patch for socket directory

Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad972ddb105264bdce3fffd0622edbd59b)

irqbalance: update to 1.9.0

Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d956c719b3b57707f1ef690aeb4d707c)

yggdrasil: stop properly

Previously it was using killall with procd respand enabled

This was causing yggdrasil to restart after being killed

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
Terminated
143
 6701 root      653m S    /usr/sbin/yggdrasil -useconffile /tmp/yggdrasil.conf
 6748 root      1308 S    grep yggdrasil

Now it's just using whatever procd is using and see there, it actually stops

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
0
 6802 root      1308 S    grep yggdrasil

I assume there was some procd bug that kept it from being used properly

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
(cherry picked from commit 17bb2d25191704d0526bd1bdc0e9060dbf02e12b)

openwisp-config: update to 1.0.0

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>

xray-core: Update to 1.5.6

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589f48345ec98a0808cfbd8b5cb0ca190)

cloudflared: Update to 2022.5.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce63c3fd86a034996efd2750707d3211946cee2)

yq: Update to 4.25.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff30315124f8e3733bac62b5846a23c24)

Merge pull request #18652 from mhei/22.03-php8-update

[22.03] php8: update to 8.1.6

Merge pull request #18651 from mhei/22.03-libxml2-update

[22.03] libxml2: update to 2.9.14

php8: update to 8.1.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fbcb35b33f22d11c6f441fae01911d7fac7ebe76)

php8: update to 8.1.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ef1249f35428a9df6999e9c296dad80a80452c38)

libxml2: update to 2.9.14

This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e)

pdns-recursor: update to 4.7.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b6247214350e67d9e16dcb3016a47b51f838bc2c)

Merge pull request #18518 from lowjoel/strongswan-rekey-bytes-packets-22.03

strongswan: support child rekey by bytes and packets

lua-openssl: update to version 0.8.2-1

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>

banip: mark as broken

banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a2f02572726d4659cd3f5e28387094b263dc6b74)

dnslookup: Update to 1.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 202f0007d66fc2145f5d6856b82224f3ac656113)

dnsproxy: Update to 0.43.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 20a51c2efd60eea79abd210043fc5961732567b9)

dnsproxy: Update to 0.42.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35961ec90d66f0615f541d5dcd45696efb9751ca)

vpnc: Update to 0.5.3+git20220517

The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb8cd43b765ba65e70a036820c03de83)