znc: add push external module

Add push external module. This is very useful for an IRC Bounder as this
module permits to register various services and receive a push
notification on the registered service.

One example is attaching a telegram bot and receive notification on your
phone when an user tags you in one of the connected channels.

Bump and drop AUTORELEASE from PKG_RELEASE since we are adding a new
module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

znc: drop playback patch and reference from github repository

We currently inclde the playback external module with a separate patch.
This is ugly and can be better handled.

Add required changes to download the external module from his own github
repository. Then create a link in the znc modules to reference the cpp
source.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

v2ray-core: Update to 5.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

boost: Updates package to version 1.82.0

This commit updates boost to version 1.82.0

A new header-only library is available:
- MySql: a C++11 client for the MySQL database server, based on
Boost.Asio, from Ruben Perez. [1]

More info about Boost 1.82.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_82_0/libs/mysql/doc/html/index.html
[2]: https://www.boost.org/users/history/version_1_82_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

nmap: refresh patch

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

php8: update to 8.2.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

nmap: update license

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

nmap: bump to 7.93

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

apk: Update to 2.12.11

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20811 from jefferyto/python-cython-0.29.34

python-cython: Update to 0.29.34

sshtunnel: fix type, case and whitespace issues

Signed-off-by: Stefan Weil <sw@weilnetz.de>

python-cython: Update to 0.29.34

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

node: bump to v18.16.0

Description:
Update to v18.16.0
Fixed a bug when selecting arm-fpu for vfpv3-d16.

Notable changes
Add initial support for single executable applications
Replace url parser with Ada

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #20804 from 1715173329/g1203

golang: Update to 1.20.3

golang: Update to 1.20.3

Included fixes for:
- CVE-2023-24534
- CVE-2023-24536
- CVE-2023-24537
- CVE-2023-24538

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.49.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.4.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

syslog-ng: update to version 4.1.1

- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.1

- Updated version in config

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #20795 from Payne-X6/master

knot: update to version 3.2.6

 banip: update 0.8.3-2

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

knot: update to version 3.2.6

Signed-off-by: Jan Hák <jan.hak@nic.cz>

ruby: update to 3.2.2

This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

See https://github.com/ruby/ruby/releases/tag/v3_2_2 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ruby: update to 3.2.1

Ruby 3.2 changes include:
* WASI based WebAssembly support
* Production-ready YJIT
* Regexp improvements against ReDoS
See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/

Ruby 3.2.1 changes includes:
* Bugfixes
See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/

Package-related changes are:

* libyaml is no longer bundled, requiring OpenWrt to build it as a host
  library for ruby/host.
* Added sub-packages:
 - ruby-mjit: files for mJIT, although disabled during build
 - ruby-syntax_suggest: finds missing ends
* Backported patches dropped:
 - 001-fix-build-with-libressl-3.5.patch
 - 002-fix-operator-precedence.patch
* Usual dependencies adjustments

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

yaml: enable host build

ruby 3.2 does not ship libyaml embedded anymore.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

sscep: add package

Signed-off-by: John Marrett <johnf@zioncluster.ca>

python3-ble2mqtt: add init script

Note that init script won't do much without configuration provided.
The init script comes from the upstream README file.

Also add missing dependency.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-bleak: bump to 0.20.1

This has a small fix on top of 0.20.0.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

snort3: update to 3.1.59.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

minidlna: update to 1.3.2 release

- Updated to latest version
- Removed upstreamed patches
- Refreshed patches

Project changelog:

1.3.2 - Released 30-Aug-2022
--------------------------------
- Improved DNS rebinding attack protection.
- Added Samsung Neo QLED series (2021) support.
- Added webm/rm/rmvb support.

1.3.1 - Released 11-Feb-2022
--------------------------------
- Fixed a potential crash in SSDP request parsing.
- Fixed a configure script failure on some platforms.
- Protect against DNS rebinding attacks.
- Fix an socket leakage issue on some platforms.
- Minor bug fixes.

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

strongswan: add support for remote cacerts

Signed-off-by: Glen Huang <me@glenhuang.com>

strongswan: add support for pools section

Signed-off-by: Glen Huang <me@glenhuang.com>

v2raya: Update to 2.0.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20784 from pprindeville/acpica-update-20230331

acpica-unix: Update to 20230331

treewide: opt out of LTO usage

These fail to build or packages depending on them do when enabling
CONFIG_USE_LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=lto

See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS"
on the main repository.

Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This
fixes it and properly enables LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=gc-sections

See commit da370098 "treewide: add support for "gc-sections" in
PKG_BUILD_FLAGS" on the main repository.

Note: This only touches packages which use all three parts
(-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by
this build flag. Some packages only use a subset, and these are left
unchanged for now.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

acpica-unix: Update to 20230331

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20731 from pprindeville/isc-dhcp-update-4.4.3-P1

isc-dhcp: Update to 4.4.3-P1

Merge pull request #20730 from pprindeville/strongswan-fix-cicd-kmod

strongswan: Fix CI/CD complaints about kmod dependencies

fio: update to 3.34

Signed-off-by: Tjeu Kayim <hasbaddana@outlook.com>

lxc: update to 5.0.2

Bump to latest upstream release.

Removed upstreamed patches:
001-build-detect-where-struct-mount_attr-is-declared.patch[1]
002-build-detect-sys-pidfd.h-availability.patch[2]
003-build-check-for-FS_CONFIG_-header-symbol-in-sys-moun.patch[3]
011-tree-wide-wipe-direct-or-indirect-linux-mount.h-incl.patch[4]
012-tree-wide-use-struct-clone_args-directly.patch[5]
013-tree-wide-use-struct-open_how-directly.patch[6]

1. https://github.com/lxc/lxc/commit/b7b269680f4a773a54b274d7fbd1140fc32e1935
2. https://github.com/lxc/lxc/commit/e510d6bd870c15fc509477343cb1268b9726caa6
3. https://github.com/lxc/lxc/commit/02f4bd00f5b5648b7f71c266d36a961fe54dbfc6
4. https://github.com/lxc/lxc/commit/497479ea3b8d13900a8f9427a5ade8a51facd7ab
5. https://github.com/lxc/lxc/commit/c9bca33263ed82190edc77960cdc19c3088167e6
6. https://github.com/lxc/lxc/commit/d1dfce9c59067aac0a22cdffe8b6d80f6bbdae87

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

 banip: release 0.8.3-1

* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.48.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nano: make nanorc world readable

If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

tinyproxy: Update to 1.11.1

Signed-off-by: Zhang Rui <rui.crater@gmail.com>

coreutils: update to 9.2

Build system: Ubuntu Linux 22.04, macOS 12.6.3
Run-tested: x64, WRT3200ACM, TL-WR1043ND v4

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

Merge pull request #20751 from cotequeiroz/openssl-providers

afalg_engine, gost_engine: adjust to new openssl module infrastructure

gost_engine: adapt to new engine build config

This adapts the package to the new include/openssl-module.mk, and
updated runtime configuration.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

afalg_engine: adapt to new engine build config

This adapts the package to the new include/openssl-module.mk, and
updated runtime configuration.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #20764 from commodo/python-updates1

python-pillow,pytz: update versions

Merge pull request #20762 from commodo/squashfs

squashfs-tools: bump to version 4.6.1

Merge pull request #20763 from commodo/stress-ng

stress-ng: bump to version 0.15.06

Merge pull request #20765 from commodo/openblas

openblas: bump to version 0.3.23

pax-utils: add new package

Description:
A suite of ELF tools to aid auditing systems.
Contains various ELF related utils for ELF32, ELF64
binaries useful for displaying PaX and security info
on a large groups of binary files.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

yq: Update to 4.33.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openblas: bump to version 0.3.23

Make hard-float a requirement.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

stress-ng: bump to version 0.15.06

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-pytz: bump to version 2023.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

pillow: bump to version 9.5.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

squashfs-tools: bump to version 4.6.1

Also, enable xattr support.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

rust: update to 1.68.2

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

dmapd: update to 0.0.95

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdmapsharing: update to 3.9.12

This version now requires libsoup3, rather than libsoup.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #20657 from jefferyto/python-pyproject-host

python: Add pyproject.toml-based builds for host Python packages, add host packages

python: Better host pip options

pip by default will read system-wide and per-user configuration
files[1]. Setting PIP_CONFIG_FILE=/dev/null instructs pip to not read
any config files[2].

pip will spawn child processes of itself to do work, but not all options
are passed down to the child processes[3]. Setting global options as
environment variables[4] ensures they are passed down to any child
processes.

[1]: https://pip.pypa.io/en/stable/topics/configuration/#configuration-files
[2]: https://pip.pypa.io/en/stable/topics/configuration/#pip-config-file
[3]: https://github.com/pypa/pip/issues/9081#issue-733819665
[4]: https://pip.pypa.io/en/stable/topics/configuration/#environment-variables

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-fancy-pypi-readme: Add new host-only package

From the README:

hatch-fancy-pypi-readme is a Hatch metadata plugin for everyone who
cares about the first impression of their project’s PyPI landing page.
It allows you to define your PyPI project description in terms of
concatenated fragments that are based on static strings, files, and most
importantly: parts of files defined using cut-off points or regular
expressions.

Once you’ve assembled your readme, you can additionally run regular
expression-based substitutions over it. For instance to make relative
links absolute or to linkify users and issue numbers in your changelog.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-vcs: Add new host-only package

From the README:

This provides a plugin for Hatch that uses your preferred version
control system (like Git) to determine project versions.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatchling: Add new host-only package

From the README:

This is the extensible, standards compliant build backend used by Hatch.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pluggy: Update to 1.0.0, add host build, add myself as maintainer

This also marks python3-pytest as BROKEN (for now) as the in-tree
version is not compatible with this version of pluggy.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pathspec: Add new host-only package

From the README:

pathspec is a utility library for pattern matching of file paths. So far
this only includes Git's wildmatch pattern matching which itself is
derived from Rsync's wildmatch. Git uses wildmatch for its gitignore
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-editables: Add new host-only package

From the README:

A Python library for creating "editable wheels"

This library supports the building of wheels which, when installed, will
expose packages in a local directory on sys.path in "editable mode". In
other words, changes to the package source will be reflected in the
package visible to Python, without needing a reinstall.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-flit-scm: Add new host-only package

From the README:

A PEP 518 build backend that uses setuptools_scm to generate a version
file from your version control system, then flit_core to build the
package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-poetry-core: Add new host-only package

From the README:

A PEP 517 build backend implementation developed for Poetry. This
project is intended to be a light weight, fully compliant,
self-contained package allowing PEP 517 compatible build frontends to
build Poetry managed projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-setuptools-scm: Add new host-only package

The host build replaces the use of the host pip requirements file. This
also updates the dependants of setuptools-scm to depend on the host
build.

This also removes the toml host pip requirements file as toml is not
used by any other package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-typing-extensions: Add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cffi: Update to 1.15.1, add host build

The host build replaces the use of the host pip requirements file. This
also updates the dependants of cffi to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pycparser: Add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-ply: Add host build

The host build replaces the use of the host pip requirements file. This
also updates the dependants of ply to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cython: Add new host-only package

The host build replaces the use of the host pip requirements file. This
also updates the dependants of Cython to depend on the host build.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Add new host-only package

From the README:

This library is the reference implementation of the Python wheel
packaging standard, as defined in PEP 427.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-build: Add new host-only package

From the documentation:

A simple, correct PEP 517 build frontend.

build will invoke the PEP 517 hooks to build a distribution package. It
is a simple build tool and does not perform any dependency management.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyproject-hooks: Add new host-only package

From the README:

This is a low-level library for calling build-backends in
pyproject.toml-based project. It provides the basic functionality to
help write tooling that generates distribution files from Python
projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-tomli: Add new host-only package

From the README:

Tomli is a Python library for parsing TOML. Tomli is fully compatible
with TOML v1.0.0.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-packaging: Update to 23.0, add host build

This also adds myself as maintainer, and marks the target package as
BROKEN (for now) as the update requires proper support for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-installer: Add host-only package

From the README:

This is a low-level library for installing a Python package from a wheel
distribution. It provides basic functionality and abstractions for
handling wheels and installing packages from wheels.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

rust: update to 1.68.1

also add new variable CARGO_VARS to make it possible
to pass environment variables for cargo process.
This is necessary when for example, cross-compiling
netavark.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

banip: update to 0.8.2-6

* restored some accidently removed init stuff in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>

banip: update to 0.8.2-5

* fixed missing version number when installed as separate package (not in build)
* fixed cornercase init and mailing issues
* sorted Country list by country names ascending
* fixed some shellcheck findings

Signed-off-by: Dirk Brenken <dev@brenken.org>

curl: update to 8.0.1

* https://curl.se/changes.html#8_0_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>

net-snmp: rename stop_service to service_stopped

The commands in the function 'stop_service' do not stop the service.
Rather, they are commands that are to be executed when the service has
already been stopped. By renaming the function, the commands are now
executed after the service has been stopped.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net-snmp: fix whitespaces

Replace spaces with tabs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

snort3: update to 3.1.58.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #20633 from QuintinHill/python-mqtt

Package dependencies for ble2mqtt python package

python-flit-core: Add host-only package

From the README:

This provides a PEP 517 build backend for packages using Flit. The only
public interface is the API specified by PEP 517, at flit_core.buildapi.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: Add pyproject.toml-based builds for host Python packages

Using pip to install host packages with pyproject.toml-based (PEP 517)
builds is problematic:

* If build isolation is used, pip will create an isolated build
  environment, install any build dependencies for the requested package,
  then build the requested package.

  It does not appear currently possible to have pip install the build
  dependencies with hash-checking mode enabled[1].

* If build isolation is not used, any build dependencies must be
  installed in the build environment before invoking pip to build the
  requested package[2].

  This would require creating a package dependency resolution system to
  install build dependencies, and any dependencies of dependencies, in
  the correct order.

* It is very difficult to patch the packages installed by pip.

This adds a new include file (python3-host-build.mk) with recipes to
install host Python packages with pyproject.toml-based builds. This is
backwards-compatible with packages that require running setup.py.

Besides addressing the above issues (the OpenWrt build system already
resolves dependencies between packages, checks all source downloads
against known hashes, and supports patching packages), host packages
also:

* Capture package licensing and maintainer information
* Enable uscan checking for package updates/CVEs
* Are a known concept for OpenWrt packagers/developers

The existing functionality of using host pip to install packages will
remain for now, but should be considered deprecated and expected to be
removed in the future.

This also updates Py3Build/CheckHostPipVersionMatch for the case where
the host-pip-requirements directory does not exist or is empty.

[1]: https://pip.pypa.io/en/stable/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020
[2]: https://pip.pypa.io/en/stable/cli/pip_install/#cmdoption-no-build-isolation

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: Unset Python environment variables

This will prevent the user's environment variables from affecting host
Python, removing the need to manually override these variables.

It is also not necessary to set PYTHONPATH (when not working on target
Python packages) because the given directories are already included in
Python's search path by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #20700 from jefferyto/ci-autoremove

CI: Add --autoremove, ignore removal errors