pbr: initial commit

* The makefile produces the nft and iptables capable `pbr` package
  and the `pbr-iptables` package for legacy setups
* This replaces `vpnbypass` and `vpn-policy-routing` packages
* I'm soliciting feedback on this package and my intention is to
  update the version to 1.0.0 before this is merged, but I need the
  feedback on this and luci-app-pbr before then.

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 47eca64cb82a5459668fc14df9422e365c8343b6)

Merge pull request #19994 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: localizable error/warning messages

borgbackup: add package for 1.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 2ad61a4529a5f600da47c071bb1bf2ce7462c14c)

python-pyfuse3: add package for 3.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 17f58b94a745a9f058182822d420ed65b3730437)

python-trio: add package for 0.22.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 07e29c3782f5eb4fb0e3cc3cdf587c77eafb96e6)

python-sniffio: add package for 1.3.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit f35f4dace76761048ab43edd91ca6c44123ff6ac)

python-outcome: add package for 1.2.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 750facea90aafb75c5937259671369a83e43881a)

python-async-generator: add package for 1.10

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 8fe1dab3715197409192fedfedc0b5f6956781f3)

python-exceptiongroup: add package for 1.0.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit a19f331b068ba9f5fab60f149acdd9805ccdb390)

python-sortedcontainers: add package for 2.4.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 69655222fcedb299054bfdff8cf7acf24de4cefa)

xxhash: add package for 0.8.1

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit dcbb2cf3d58758c86ba31ece78fa48c33d7ecda9)

samba4: support both user map and valid users on same time

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01f5144a60541e6468a9f4451f26c8ab)

lighttpd: lighttpd.conf vars, comments, guidance

lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb879f416705e85fa31539472aeff2d8)

lighttpd: print stderr trace if validation fails

lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e422bac544eee9578830a8b6a49265be1)

v2raya: backports upstream fixes and add 3 new options

It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c88da583c039d81b800b3edad5a6053)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 664ecae4e6379928aae0527b96b65ffe0199049d)

xray-core: Update to 1.6.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f33517747ef9fb48536cced4e42f7abc99)

yq: Update to 4.30.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007ab9a0dbefab88f0be934f6cffe5ed5)

libqmi: bump to 1.30.8

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d53efdfd6abd7d9cbb57a770273c5319)

simple-adblock: localizable error/warning messages

* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 8047d2ccb716ac90f267cc2ceb3723c15c375bd2)

Merge pull request #19988 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix: detect dnsmasq ipset support

Merge pull request #19986 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: improve performance on restart

librespeed-go: add new package

Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a157e382df81ba1d40ba275730d7adf627508004)

simple-adblock: bugfix: detect dnsmasq ipset support

* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cc10774e6e3799ac86af83d8c35c6a37fd73c15a)

https-dns-proxy: improve performance on restart

* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit e6d746a0baa184db3caf7a088179356c798a96d3)

pdns-recursor: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 7bcc02e7c92171044a0aeabd9d988189c6b849b1)

liburing: Update to v2.3

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit f01ebf5f335dc0ca7f2448e24f7f2b1b7326ebc5)

liburing: Update to v2.2

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
(cherry picked from commit 3f82f9a0023080ffb74d7d3d75a65eb384c64ce7)

ices: Update to 2.0.3

This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>
(cherry picked from commit 4e2b09bd95c796456d6a3961bed59d97aa516ee0)

gphoto2: update to 2.5.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc3ab606d561e47f1469f97242919ee241885056)

libgphoto2: update to 2.5.30

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f3a4366f01cfa0e8562d42aec06669dac09d466)

syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4d5c427922fa59e078bbd5f3f55346e569de49a2)

syncthing: update to 1.20.1

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit b48482fdf85ca8c5cc4d6f198f4c5ab7f4c40f1d)

syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 9d17ba1a9387efdc08e236d4eaa937eb103472f4)

tvheadend: update to git master 2022-11-20

- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit bf279120190c6064af07721690405649d4e41cc1)

knot: update to version 3.2.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4370e457c8eabc6c4c3decdb197fccc876f45a19)

cloudflared: Update to 2022.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 804ab5540e13075564841658d23d3549667e06d7)

Merge pull request #19957 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: update Makefile package descrition

ooniprobe: Update to 3.16.5

Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1c6570dcc7c4ce9843b763e8863baf92277fa008)

unbound: update to 1.17.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 6bc0293a73f5a1d86a951ebd4c00cbc7b09e4529)

librespeed-cli: rename binary to librespeed-cli

upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit c2ad338b0f0fb5df4c84770fa6408f18bd347671)

rclone: Update to 1.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88a1535d00e1047041cb9328a6f6eac310af1714)

gg: Update to 0.2.15

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fec75efd8bd4c201e183a460a72e508a9728aaff)

sqlite3: Update to 3.40.0

1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4a0f0793bf7016d813b67a413ee4010917270c0)

https-dns-proxy: update Makefile package descrition

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 0765fb0790e41d9fbee7e22a7e33022dc943d3fd)

xray-core: Update to 1.6.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d36c34f9847d20450f61c955ccab745a5c90e90f)

nextdns: Update to version 1.38.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 1acf423ef5891eb88c8e2bbdf8dad7896b8db398)

Merge pull request #19901 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update to 1.9.3-1

nano: update to 7.0

Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4a89a577a71adffc6cbad99971b4c064193b3566)

bcp38: migrate to nftables

Signed-off-by: Stefan Brusch <ne20002@gmx.ch>
(cherry picked from commit 471ffdd98c3a543e4935c3e76ac19301ac16c52d)

yq: Update to 4.30.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8762261112c8235f7f85a6f57dbf342cf17093b9)

frp: update to 0.45.0

Signed-off-by: van waholtz <brvphoenix@gmail.com>

ariang: update to 1.3.2

Signed-off-by: van waholtz <brvphoenix@gmail.com>

Revert "openthread-br: new package"

The PR to add openthread-br in master isn't merged yet, as it has draft
status. This was merged prematurely. Revert.

This reverts commit 27dd30aadb0b9ae1b7e710e0ea479f6fbe142918.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

simple-adblock: update to 1.9.3-1

* introduce the new curl_max_file_size option
* prevent warnings/errors to be displayed each time the load_environment
  is invoked
* better organize dl_command appendixes
* implement support for downloading/using external dnsmasq config file
* refactor adb_check and adb_allow for better readability
* update default values for some options in the uci_load_validate call
* update reload trigger to include curl options

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f11ce28bafc8ae202261d6af7ade35d596385f8c)

yq: Update to 4.30.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4d667ec8e8ffb23e2d42a42c58f0318b3d248dff)

yq: Update to 4.30.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2cba6e5f73326bfa91f3b5d0f432f85064255ee4)

rsync: update to 3.2.7

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit de85ed88a70968acfd9bf47a2ea5d86d14fc0ae0)

rsync: incorporate upstream fixes

Upstream is requesting that packagers cherry-pick two commits to fix the
current release.[1]

1. https://www.mail-archive.com/rsync@lists.samba.org/msg33576.html

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit deddf26cc286240e83b1ad43811ab1bc30bc73bf)

rsync: bump to 3.2.6

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 454bbae88863e9507f1a2207147639155e3f52b5)

zerotier: update to 1.10.2

Signed-off-by: Moritz Warning <moritzwarning@web.de>

irqbalance: update to 1.9.2

Update irqbalance to version 1.9.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5c8d0939e8c986d0e2c625752215a9fcb6bf6c3c)

gg: Update to 0.2.14

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1e633ccfdd5de441a56e89e17e8854d024737d8c)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e5c3c3409c1e25d21e6697cb29486296ea9bfbd2)

xray-core: Update to 1.6.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f4c931e122dd66ca6196f6262f35c78)

openthread-br: new package

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit ff49c0c02b290a3939b8a7f25fd58c160a904dbb)

golang: update to version 1.18.8

Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d886918cfbc1af8d60cbb530ba563084b67)

Merge pull request #19871 from blocktrron/qcsuper-2203

qcsuper: add package with dependencies

qcsuper: add package

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit e4dfee088637d5ac71d4709325038c6fa7f1d297)

python-pycrate: add package

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit e956e733c31decc1c8c8c8a0b3cbe5624b758bcf)

python-crcmod: add package

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 341b07f92e62da1944aa1fb8839c4c6e213c99b9)

ffmpeg: libffmpeg-full package should provide libffmpeg package, too

The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c333c0e5229b7c4f14dd831e2c75709d0de1615e)

Merge pull request #19861 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update to 1.9.2-4

simple-adblock: update to 1.9.2-4

* update default config file to list options alphabetically
* rearrange some of the init script code to support transition
  of WebUI to javascript
* rename wan6_trigger to procd_trigger_wan6 for readability

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 7393b744574a72430f491183853729d941c634ea)

xray-core: Update to 1.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e606ea7e78c8f294e3d30df01aa82b3346dbeffe)

Merge pull request #19835 from mhei/22.03-php8-update-to-8.1.12

[22.03] php8: update to 8.1.12

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Fixes: 60ac7dd751240fa096a85794023b18f26a8317da ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7ae66ec7cac3cbfc94fc30149418698f15406543)

hub-ctrl: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 9579da76ecbb10c611f18e1dca9c4110ca60bb63)

announce: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d6b78a0a2bab396c070bc8809c610c4fb25d6fc0)

knot: update to version 3.2.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a5913d51c7024b9f62e213541812a0bdd67e2984)

pulseaudio: change homepage URLs to freedesktop.org

The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 00e3918069c5be726bcd5af80a093c0753d9d6e5)

pulseaudio: use AUTORELEASE variable

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 364054fbe749a6121d0b6ff4e2bdda80f17389e7)

pulseaudio: daemons should conflict to each other

It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a5bb15949f7cf0abb717245bc23508af2c48ed9)

pulseaudio: simplify and rework Makefile

There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 60ac7dd751240fa096a85794023b18f26a8317da)

luaexpat: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit b051bbcad8c21b0de77657923b9bb9b81030af36)

squid: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d3ef994b3515637e5cc6c6f5a4058c893121811f)

mini_snmpd: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 3d98f91fe2b5daa2c5a4c0b7270dc937389ed9df)

lynx: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 1ba153246b1fab19ac43591666b8d773a41a66d9)

librespeed-cli: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb33b55354f6a9b51f445c117c5fdb5fca0b5a44)

zoneinfo: updated to the latest release

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 1d88250815b5efe623bb01a591c4ca651c8f5600)

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 5a9e8698c94fcfa14ab6a0c314881eb4be1d47c7)

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 8d693a79bedd8a4bf00c2e14f43b0c95ec950155)

mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon

The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc5914 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
(cherry picked from commit abe35e89f60efb99dee76c53a1ebdc2bd48f73a1)

Merge pull request #19793 from stangri/openwrt-22.03-curl-7.86.0

[22.03] curl: update to 7.86.0

Merge pull request #19710 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: rename wan6_trigger option

Merge pull request #19708 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: rename options

php8: update to 8.1.12

This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 58b47869c018389218821c4f0947710b693847f4)

cloudflared: Update to 2022.10.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 33634e30c22c965d7fe4dc94ab41c33a815ec9ce)

rclone: Update to 1.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90e037b5e59043e70118eeb2675e22bef1ffe4e4)

yq: Update to 4.29.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f2b96b7eb17fc990765ae5fd47fe0d99c07c88)