strongswan: Fix CI/CD complaints about kmod dependencies

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20725 from pprindeville/fix-indent-strongswan

strongswan: Fix indent for hw_offload, interface, priority

cni-plugins-nft: update to 1.0.12

Changelog:
 - docs: update install instructions
 - upgrade to go1.19

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gummiboot: update to 48.1

 - disable man pages generation

Mostly bug fixes.

Full list of changes: https://cgit.freedesktop.org/gummiboot/log/

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #20600 from oskarirauta/curl

curl: enable unix sockets by default

natmap: update to 20230322

Signed-off-by: Ray Wang <r@hev.cc>

sing-box: update to 1.2.1

Changelogs: https://github.com/SagerNet/sing-box/releases/tag/v1.2.1
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

yq: Update to 4.33.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.14.5

Release Notes

Management

 - Introduce a new ACL engine based on Rego (Open Policy Agent) for firewall control
 - Personal access tokens generation as a first iteration toward public API release
 - Add Keycloak support as an IDP manager

Agent

 - Introduce a Firewall interface to apply granular access control (e.g., connection direction, port, or protocol level)
 - Make the agent run on Android (mobile support)

Changelog

 - Feat rego default policy
 - Don't drop Rules from file storage after migration to Policies
 - Add version info command to signal server
 - Feat firewall controller interface
 - Adding Personal Access Token generation
 - Exchange proxy mode via signal
 - Fix connstate indication
 - Mobile
 - PAT persistence
 - Add Keycloak Idp Manager
 - Adjustments for the change server flow
 - Disable peer expiration of peers added with setup keys
 - Add JWT middleware validation failure log

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

docker-compose: Update to version 2.17.2

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #20708 from commodo/sudo

sudo: bump to verison 1.9.13p3

borgbackup: bump to 1.2.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

borgbackup: add missing dependencies

The initial package submission was missing
some required and optional dependencies
due to lack of testing on a system without any python
related packages pre-installed.

Some optional but highly recommended dependencies
were discovered with the stdlib module as described in:
https://github.com/openwrt/packages/blob/392a68e24774294590abf9c08ea1832f2cee190d/lang/python/README.md

Fixes #20441

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

banip: update to 0.8.2-4

* fixed a race condition if the service is in a disabled state

Signed-off-by: Dirk Brenken <dev@brenken.org>

strongswan: simplify indentation

Allow passing multiple config lines with the same indent level.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

strongswan: Fix indent for hw_offload, interface, priority

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

samba4: update to 4.18.0

Samba release history: https://www.samba.org/samba/history/samba-4.18.0.html

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

dnsproxy: Update to 0.48.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: update to version 5.4.2

Update to 5.4.2  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

haproxy: update to v2.6.11

- Update haproxy PKG_VERSION and PKG_HASH
- This release includes a fix for an OOB write. The official notes
  do not list a CVE entry but I guess there is a chance for
  security implications
- See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

syncthing: Update to 1.23.2

Fixed build with go 1.20

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20709 from akosiaris/collectd_fix_ltq-dsl_compilation

collectd: Fix ltq-dsl compilation errors

sing-box: update to 1.2.0

Changelogs: https://github.com/SagerNet/sing-box/releases/tag/v1.2.0
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

rust: fix build with glibc

Don't set musl-specific options/ldflags when using glibc.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: enable use of prebuilt llvm toolchain

llvm-bpf is not ready for generic usage, so use prebuilt llvm toolchain
provided by the rust project to speedup build (~1hour faster).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ripgrep: adapt new rust build standard

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

maturin: Update to 0.14.15

Fixed a build error:
> unresolved import `time::macros`

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

maturin: adapt new rust build standard

While at it, move maturin out of rust directory.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: refactor build helper

Added new RustBinPackage, RustBinHostBuild wrapper.
Added new RUST_PKG_FEATURES flag.
Moved CARGO_HOME to STAGING_DIR_HOSTPKG.
Overrode default Build/Compile and Host/Compile to Cargo build.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: remove useless target dependencies and configuration

They are for the target build which is not supported yet, drop them.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: remove useless tarball package

These tarball cannot be reused, so simply drop them.

Also move cargo config to a file instead of using echo command.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

sudo: bump to verison 1.9.13p3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

collectd: Fix ltq-dsl compilation errors

Per

https://github.com/openwrt/packages/pull/19396#issuecomment-1480780893

prefix ltq-dsl-app with a @ character to fix the compilation issues
witnessed in PR #19396 and #20662

Signed-off-by: Alexandros Kosiaris <akosiaris@gmail.com>

banip: update to 0.8.2-3

* raise max. timeouts from 10 to 30 seconds to stabilize the autodetection on slow hardware
* made interface trigger action configurable, set 'ban_triggeraction' accordingly (default: 'start')
* made E-Mail notifications configurable to receive status E-Mais with every banIP run,
  set 'ban_mailnotification' accordingly (default: disabled)
* small fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnslookup: Update to 1.9.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20664 from mhei/fix-gensio-build-20604

gensio: fix python bindings build by using a pcre enabled host swig (fixes #20604)

netbird: update to 0.14.4

Bug fixes & refactor
Fix: send remote agents updates when peer re-authenticates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

node: bump to v18.15.0

Update to v18.15.0
Fixed bug using system-icu

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

adblock: update to 4.1.5-7

* fix cornercase issue with duplicate entries in black- and whitelist
* change cpbl source URL
* firewall redirects now blocks IPv4 and IPv6 (set family to "any")

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.48.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.32.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.3.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2raya: Update to 2.0.4

- Added TproxyNotSkipBr flag for OpenWrt.
- Removed all upstreamed patches.
- Removed deprecated option.
- Re-enable ipv6/nftables auto-detect.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

haproxy: update to v2.6.10

- Update haproxy download URL and hash
- See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

transmission: update to version 4.0.2

See release notes for more details:
https://github.com/transmission/transmission/releases/tag/4.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

open-vm-tools: update to 12.2.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

rpcsvc-proto: fix build with updated autotools

After recent autotools update, rpcsvc-proto no longer
compiles without autoreconf fixup because automake 1.15
is not found.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

openssh: update to 9.3p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>

Merge pull request #20656 from pprindeville/strongwan-update-5.9.10

strongswan: Update to 5.9.10

rclone: Update to 1.62.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

git: update to 2.39.2

GITWEB_* variable values don't work as they should since 2.38, so let's
remove them and add a workaround. This issue was reported in
https://lore.kernel.org/git/80eb3972-4960-5727-ce86-acc3a4425fd4@nic.cz/T/#u

* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

Merge pull request #20665 from mhei/php8-update-8.2.3

php8: update to 8.2.3

libndpi: Update to 4.6

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

liburcu: update to version 0.14.0

Signed-off-by: Jan Hák <jan.hak@nic.cz>

udpspeeder: bump to 20230206.0

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

Merge pull request #20661 from jefferyto/golang-1.19.7

golang: Update to 1.19.7

gensio: move package into Python submenu

While at, fine-tune the description string slightly.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

gensio: fix build of Python binding (refs #20604)

We need the host build of swig only.

And the binding uses libgensiocpp - not the plain
C library, so fix the dependency.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

swig: enable pcre2 support (refs #20604)

Now since pcre2 provides a host build, let's use it.
This is required for e.g. gensio package to provide
python bindings.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

zerotier: do not allow executable stack

zerotier as default has executable stack.
[   11.343143] process '/usr/bin/zerotier-one' started with executable stack

executable stacks are not recommend, possibly provide a threat and there
seems to be no advantage of executable stack with zerotier-one - so let's
build it without instead.

Stack is executable on x86_64, but not on all archs, such as ramips.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

libjpeg-turbo: enable static library

Allow build of libjpeg as a static library as well;
one is provided for libpng and possibly for other
formats as well.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

pcre2: add host build (refs #20604)

This adds a host build which can be used later by tools,
e.g. swig - which in turn is used by gensio package to
provide python bindings.

While at, switch back from $(AUTORELEASE).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php8: update to 8.2.3

This fixes:
    - CVE-2023-0567
    - CVE-2023-0568
    - CVE-2023-0662

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #20653 from mhei/mmc-utils-update

mmc-utils: update to latest upstream revision

snort3: update to 3.1.57.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

sqlite3: Update to 3.41.1

Removed `SQLITE3_JSON1` option as it was dropped by upstream.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20621 from banburybill/ddns-mythic-v2

ddns-scripts: Add v2 API for mythic-beasts.com provider

golang: Update to 1.19.7

Includes fix for CVE-2023-2453 (crypto/elliptic: specific unreduced
P-256 scalars produce incorrect results).

This also includes makefile updates for Go 1.19.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

dockerd: Disabled MIPS
* Buildkit doesn't appear to compile

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 23.0.1

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

docker: Update to 23.0.1

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.6.16 for dockerd

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

libnetwork: Remove unused package

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

zerotier: update to 1.10.4

Signed-off-by: Moritz Warning <moritzwarning@web.de>

rust-lang: update to 1.68.0

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

netbird: update to 0.14.3

Bug fixes & refactor

Release notes:
 - Fix: send remote agents updates when peer re-authenticates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

CI: update build architectures

Removed arc_archs - archs38 was marked as source-only [1].
Renamed powerpc_8540 to powerpc_8548 [2].

1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351
2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

strongswan: Update to 5.9.10

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20261 from pprindeville/strongswan-update-5.9.9

strongswan: Update to 5.9.9

strongswan: Update to 5.9.9

Add patch to remove definition of RNG leaking in from wolfssl.h.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

curl: enable unix sockets by default

 - changed Config.in to enable unix sockets support by default
 - release number bumped

Description:
socket support is very handy when communicating with
various REST APIs.

Size increases are very small, nearly unnoticiable.

Tested-by: Stan Grishin <stangri@melmac.ca>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

mmc-utils: update to latest upstream revision

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libdaq3: update to 3.0.11

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

snort3: update to 3.1.56.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

lolcat: update to version 1.4

Bump to the latest stable release.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

Merge pull request #20645 from stangri/master-simple-adblock

simple-adblock: update init file and config

Merge pull request #20648 from champtar/mv88e6xxx_dump_update

mv88e6xxx_dump: update to 2023.03.08

mv88e6xxx_dump: update to 2023.03.08

This fixes 2 issues where mv88e6xxx_dump was displaying
data incorrectly for --vtu and --global2

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

simple-adblock: update init file and config

* move network.sh and jshn.sh includes into load_validate_config function
  to prevent errors when adding the package to image with the Image Builder
* add @bongochong compressed domains block-list to the config

Signed-off-by: Stan Grishin <stangri@melmac.ca>

netifyd: update to v4.4.1

- Explicitly request the C++11 standard (codebase is not C++17 compliant).
- Removed categories.json from conffiles -- it's not a configuration
  file.
- Removed commented-out convenience git hash place-holder -- for some
  reason it irritates people.
- Added radix header file to devel files.
- Removed redundant call to Build/Configure (not needed).

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>

protobuf-c: update to 1.4.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.7

Remove upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

icu: fix ccache issue

build error with ccache:
https://github.com/openwrt/packages/issues/20618

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Revert "libgpiod: update to 2.0"

This reverts commit 983835afe6fad074b347a8ff1dc8986d40773de5.

I merged the library update to v2.0 to fast, it breaks openocd build
due to API change.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Revert "libgpiod: introduce libgpiodcxx package for C++ binding"

This reverts commit 82ea104b978dcd84919dfe5d1ee630791d85df10.

I merged the library update to v2.0 to fast, it breaks openocd build
due to API change.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #20609 from mhei/libgpiod-update-2.0

libgpiod: update to 2.0 and introduce C++ binding

banip: update 0.8.2-2

* fix the auto-detection for pppoe and 6in4 tunnel interfaces
* add the new 'ban_nftpolicy' option to expose the nft set policy, values: memory (default), performance
* add the new 'ban_nftlogevel' option to expose the nft syslog level, values: emerg, alert, crit, err, warn (default),
  notice, info, debug, audit
* status optimizations
* logging optimizations
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

rust-lang: Add an Host/Compile helper as well

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>