python3: Update to 3.11.4, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

xtables-addons: fix compilation error on kernel 6.1

Fix compilation error on kernel 6.1.
Fix compilation error:
In file included from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/controller.h:24,
                 from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/xt_LUA_target.c:27:
/mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/lua/lua.h:12:10: fatal error: stddef.h: No such file or directory
   12 | #include <stddef.h>
      |          ^~~~~~~~~~
compilation terminated.

The error is caused by commit 04e85bbf71c9 ("isystem: delete global
-isystem compile option") present upstream from kernel 5.16. This
commit dropped the inclusion of system headers by default and caused
error on LUA module.
Following what is done in the commit for the required code, modify the
LUA Kbuild to include these header and restore correct compilation of
the LUA module.

Fixes: #21294
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

glib2: disable gnulib printf

A compiler bug (suspiciously) blocks gnulib compilation for
mipsel_24kc_24kf. While we had this patch to disable gnulib, it was
accidentally removed by 5d27631d9fbca076eb6377fc8c10f474ce9f4fea. Add it
back to fix the long broken build for mipsel_24kc_24kf.

Fixes: #19511
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>

podman: update to v4.5.1

Contains several bug fixes.
Package now contains additional tool quadlet.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

aardvark-dns: update to v1.6.0

aardvark-dns v1.6.0 was released,
so instead of using git version, use release -
similarly like netavark.
Very much hasn't changed but list of changes
is in git commit log of aardvark-dns.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

dnsproxy: Update to 0.50.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nginx: bump to new 1.25.0 release

Bump nginx to new 1.25.0 release.
Changes:

 *) Feature: experimental HTTP/3 support.

Every patch automatically refreshed.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

parted: update to v3.6.0

Lot's of changes, but no online release notes
available, check ChangeLog file once extracted
if necessary

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

crun: update v1.8.5

Moved to from git to release version,
but release version does not have submodule
libocispec included, so additional download added.

Release notes: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

mtools: update to version 4.0.43

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnu-efi: update to version 3.0.17

update library + add new package containing efi programs
provided by gnu-efi library.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #21282 from stangri/master-curl

curl: update to 8.1.2

nginx: fix problem with migration of uci conf template

Fix some problem with migration of uci conf template and include of
module.d directive.

Fix 2 case:
- uci.conf.template not versioned but with the include module.d
  resulting in double include module.d

- uci.conf.template version 1.1 with the include module.d at the end
  of the config. This is problematic for nginx as modules must be
  included before any http directive.

Handle this 2 case to restore a working uci.conf.template configuration
on migrated config.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx-util: bump uci conf template version

Bump uci conf template version to 1.2 to sync with nginx version
handling some migration problem.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

transmission: Fix env variables passing

It's not possible to configure custom Transmission web home as corresponding
env var gets overwritten by the command that sets CA bundle env var.

Signed-off-by: Leonid Bogdanov <leonidbogdanov86@gmail.com>

netbird: update to 0.21.1

Release notes: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

acme-acmesh: Bump to version 3.0.6

Important security fix.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

dockerd: Update to 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

docker: Update to 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.7.1 for docker 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Update to 1.1.7 for docker 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

avahi: Import patches for security fixes

Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

openvpn: fix ipchange hotplug event

In f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4 openvpn introduced new hotplug events.
For server config, ipchange hotplug event produces an error.
So, make ipchange hotplug event for client only

Fixes https://github.com/openwrt/packages/issues/21200

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

crowdsec: new upstream release version 1.5.2

Update crowdsec to latest upstream release version 1.5.2

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream

python3-asgiref: Update to 3.7.2, rename source package

This renames the source package to python-asgiref to match other Python
packages.

This also updates the package title and URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21265 from mhei/php8-fix-linking-on-riscv64

php8: fix linking on riscv64 platform

Merge pull request #21298 from 1715173329/rust

rust: enable riscv64 support

knot: update to version 3.2.7

Signed-off-by: Jan Hák <jan.hak@nic.cz>

python3-django-etesync-journal: Remove package

This package was originally added[1] as it was a dependency of
etesync-server 0.3.0. When etesync-server was renamed to etebase and
upgraded to 0.6.1[2], this dependency was removed. No other package in
the packages feed depends on this package.

Upstream has also archived the git repo[3] and stated that the
repo/package is deprecated. It does not appear that any newer version of
etebase uses this package.

This removes the python3-django-etesync-journal package; it will be
submitted to the abandoned packages repo.

[1]: https://github.com/openwrt/packages/pull/10469
[2]: https://github.com/openwrt/packages/pull/14063
[3]: https://github.com/etesync/journal-manager

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

rust: enable riscv64 support

rust natively supports riscv64 so let's enable it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: bump libc to 0.2.146

Fixes build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

passlib: Update to 1.7.4, rename source package

This renames the source package from passlib to python-passlib to match
other Python packages.

This also updates the package URL and list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

pdns: update to 4.8.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

gawk: disable mpfr detection

Disable mpfr detection to fix a build error due to (unncessary)
missing dependency:

```
Package gawk is missing dependencies for the following libraries:
libgmp.so.10
libmpfr.so.6
```

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tree: bump to 2.1.1

    Build system: x86_64
    Build-tested: bcm2711/RPi4B
    Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

adguardhome: bump to 0.107.29

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.26
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.27
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.28
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.29

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Merge pull request #21275 from jefferyto/python-typing-extensions-4.6.3

python-typing-extensions: Update to 4.6.3

Merge pull request #21274 from jefferyto/python-poetry-core-1.6.1

python-poetry-core: Update to 1.6.1

Merge pull request #21273 from jefferyto/python-hatchling-1.17.1

python-hatchling: Update to 1.17.1

curl: update to 8.1.2

* https://curl.se/changes.html#8_1_2

Signed-off-by: Stan Grishin <stangri@melmac.ca>

banip: release 0.8.7-1

* Optionally auto-add entire subnets to the blocklist Sets based on an additional RDAP request with the
   monitored suspicious IP, set 'ban_autoblocksubnet' accordingly (disabled by default).
   For more information regarding RDAP see
   https://www.ripe.net/manage-ips-and-asns/db/registration-data-access-protocol-rdap for reference.
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

snort3: update to 3.1.63.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

python3-bottle: Update to 0.12.25

Fix build with Python 3.11

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-yarl: Update to 1.9.2

Fix build with Python 3.11.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-typing-extensions: Update to 4.6.3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-poetry-core: Update to 1.6.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21268 from 1715173329/packr

packr: remove package

rust: update to 1.70.0

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

python-hatchling: Update to 1.17.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21251 from jefferyto/zabbix-pkg-source-url

zabbix: Add "oldstable" source URL

php8: fix linking on riscv64 platform

The buildbots failed for the mentioned platform with the following error:
(I shortened the pathnames and broke long lines a little bit for readability)

.../lib/gcc/riscv64-openwrt-linux-musl/12.3.0/../../../../
  riscv64-openwrt-linux-musl/bin/ld: Zend/zend_execute_API.o: in function `.L533':
zend_execute_API.c:(.text+0x1b1c): undefined reference to `__atomic_exchange_1'
.../riscv64-openwrt-linux-musl/bin/ld: Zend/zend_atomic.o:
  in function `zend_atomic_bool_exchange':
zend_atomic.c:(.text+0xc): undefined reference to `__atomic_exchange_1'
collect2: error: ld returned 1 exit status
make[4]: *** [Makefile:350: sapi/cli/php] Error 1

Inspired by the blog post[1], linking to libatomic explicitly seems to
do the trick.

[1] A RISC-V gcc pitfall revealed by a glibc update
https://blog.jiejiss.com/A-RISC-V-gcc-pitfall-revealed-by-a-glibc-update

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

packr: remove package

In Go 1.18+ embedded files is natively supported, so this package
is useless now. It has been archived on Jun 2022 and failed to build
on the riscv64 target.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

speedtestcpp: add new package

speedtestcpp is a fork of Taganaka's speedtest, rewritten.

It has some improvements such as
 - interactive result show
 - use server recommended profiles, which makes it faster (can be disabled)
 - and more..

It also provides it's functions in shared and static libraries
and offers development headers for integrating speedtest to
features to another projects.

This commit replaces speedtestpp since this fork has
all the same features + more.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

xfrpc: update to 2.6.633

support socks5

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

Merge pull request #21267 from jefferyto/golang-enable-riscv64

golang: Enable riscv64 for Go compiler and packages

golang: Enable riscv64 for Go compiler and packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21256 from jefferyto/micropython-1.20.0

micropython: Update to 1.20.0, update/add related packages

CI: Add build test for riscv64_riscv64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

CI: Sort build architectures in alphabetical order

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

zabbix: Add "oldstable" source URL

Zabbix moved the 6.2 directory from "stable" into "oldstable". This adds
the "oldstable" URL to PKG_SOURCE_URL.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

micropython-mpremote: Add new package

From the README:

This CLI tool provides an integrated set of utilities to remotely
interact with and automate a MicroPython device over a serial
connection.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-requirements-txt: Add new host-only package

From the README:

Hatchling plugin to read project dependencies from requirements.txt

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

micropython-lib: Update to master, split target package

The package has been reworked to install the same files that are
available to be downloaded/installed by mip, the package manager new to
MicroPython 1.20.0.

This also splits the original target package into four:

* micropython-lib
  * Includes packages common to all MicroPython ports (python-stdlib,
    python-ecosys, micropython)
  * Contains mpy bytecode files

* micropython-lib-src
  * Includes packages common to all MicroPython ports (python-stdlib,
    python-ecosys, micropython)
  * Contains py source files

* micropython-lib-unix
  * Includes packages specific to the MicroPython Unix port (unix-ffi)
  * Contains mpy bytecode files
  * Installs a specific launcher (micropython-unix) that adds the Unix
    package directory into MicroPython's library path

* micropython-lib-unix-src
  * Includes packages specific to the MicroPython Unix port (unix-ffi)
  * Contains py source files

This also updates the package license, title, and description.

Patches:

* 001-build-unix-ffi.patch

  This enables the repo build script to also build the Unix-specific
  packages. Not sure if upstream is open to accepting this since the
  Unix-specific packages don't fit well into the existing package
  distribution mechanism.

* 002-add-unix-ffi-os-path.patch and 003-add-unix-ffi-uu.patch

  These fix instances where the unix-ffi version of the os package is
  overridden by the python-stdlib version. These have been submitted to
  upstream: https://github.com/micropython/micropython-lib/pull/672

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

micropython: Update to 1.20.0, refresh/rework patches

Patches 000-Makefile-no-errors.patch and 020-mpy-cross-fix-flags.patch
are no longer necessary.

This also adds a Build/InstallDev recipe to install files necessary for
micropython-lib.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

dnsproxy: Update to 0.49.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nfs-kernel-server: remove libwrap from the dependencies

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

lua-eco: update to 2.3.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Merge pull request #20747 from blocktrron/respondd-20230330

respondd: add new package

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.34.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-core: Update to 5.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.5.1

Fixed build issue with Go 1.20.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tang: create user tang

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #21079 from hgl/acme-common

acme: improve

apfree-wifidog: Update to 6.02.1939

1. support fw4
2. support openssl3.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

Werkzeug: Update to 2.3.4, rename source package

This renames the source package from Werkzeug to python-werkzeug to
match other Python packages.

This also updates the package title, description, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

MarkupSafe: Update to 2.1.2, rename source package

This renames the source package from MarkupSafe to python-markupsafe to
match other Python packages.

This also updates the package title and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Jinja2: Update to 3.1.2, rename source package

This renames the source package from Jinja2 to python-jinja2 to match
other Python packages.

This also updates the package license files, title, and list of
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21229 from thess/zile-build

Zile: Remove autoreconf

Zile: Remove autoreconf.

It is no longer required since gnulib is now local to host build environment (tools/gnulib).

Signed-off-by: Ted Hess <thess@kitschensync.net>

collectd: enable AllPortsSummary for tcpconns plugin

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

click-log: Update to 0.4.0, rename source package

This renames the source package from click-log to python-click-log to
match other Python packages.

This also updates the package to download from PyPI, and updates the
package title, URL, and dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-typing-extensions: Update to 4.6.2

This also updates the SPDX license identifier, title, description and
URL for the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-trove-classifiers: Update to 2023.5.24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-gmpy2: Update to 2.1.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libmpc: Add package

From the documentation:

GNU MPC is a portable library written in C for arbitrary precision
arithmetic on complex numbers providing correct rounding. It implements
a multiprecision equivalent of the C99 standard. It builds upon the GNU
MP and the GNU MPFR libraries.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

mpfr: Add package

From the documentation:

MPFR is a portable library written in C for arbitrary precision
arithmetic on floating-point numbers. It is based on the GNU MP library.
It aims to provide a class of floating-point numbers with precise
semantics.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cython: Update to 0.29.35

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-hatch-fancy-pypi-readme: Update to 23.1.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

bcrypt: Update to 3.2.2, rename source package

This is the last released version before bcrypt's Rust rewrite; this
package can be further updated after the OpenWrt Rust toolchain has
stablized.

This also renames the source package from bcrypt to python-bcrypt to
match other Python packages, and updates the list of dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

freeradius3: Update to 3.0.26

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

ragel: new package to build vectorscan

This is a new package for ragel which is a dependency for another
new package vectorscan

Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: John Audia <therealgraysky@proton.me>

luaposix: update to 36.1

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

pyodbc: Update to 4.0.39

* Fixed build with Python 3.11
* Removed unnecessary build depends

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-packages: Replace --global-option with --build-option

setuptools 64.0.0 deprecated the use of --global-option to pass build
parameters[1]. This replaces the use of --global-option with
--build-option.

[1]: https://github.com/pypa/setuptools/blob/main/CHANGES.rst#v6400

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

apparmor: gcc 13 compatibility fix

when built with gcc 13, fixes following error:

capability.h:46:6: error: variable or field '__debug_capabilities' declared void
   46 | void __debug_capabilities(uint64_t capset, const char *name);
      |      ^~~~~~~~~~~~~~~~~~~~
capability.h:46:27: error: 'uint64_t' was not declared in this scope

patch is back ported from upstream patch at
https://gitlab.com/apparmor/apparmor/-/commit/64a64be7ffb5a84f27daa9f37ae8ad92800943d3.patch

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

lighttpd: update to lighttpd 1.4.71 release hash

remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

Merge pull request #21194 from 1715173329/pgr

python-greenlet: Update to 2.0.2

Merge pull request #21190 from jefferyto/python-split-packages

python3: Split venv into separate package, pip and setuptools into separate source packages

python-greenlet: Update to 2.0.2

Fix build with Python 3.11.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>