python3-netifaces: Update to 0.11.0, rename source package

This renames the source package to python-netifaces to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 935f791e764b350facee5cea4463ef78db700059)

Merge pull request #21633 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: improve CLI messaging

Merge pull request #21432 from stangri/openwrt-23.05-nebula

[23.05] nebula: update to 1.7.2 (and cosmetic fixes)

Merge pull request #21630 from stangri/openwrt-23.05-simple-adblock

[23.05] simple-adblock: dnsmasq access bugfix & misc improvements

https-dns-proxy: improve CLI messaging

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 649fbcf9fcab34df3d39b0642cd5b566eefb569e)

simple-adblock: dnsmasq access bugfix & misc improvements

* fix permission to dnsmasq files for ad-blocking
* add pause function to pause the ad-blocking temporarily
* introduce pause_timeout option to control default pause time
* update default config and config-update file
* use $param instead of $1 in adb_start()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit dea274cc333ab99e42b569bf412c23e0dfd8a87a)

rust: put host build dir to target build dir

When user runs `make clean` command, everything in `$(STAGING_DIR)`
(where we installed rust) will be removed, but `$(BUILD_DIR_HOST)`
(where we compiled rust and stored build stage) is untouched.

So when user starts a new build after that, OpenWrt buildroot will
still consider `rust` is installed already, resulting the build error
"cargo: command not found".

Fix this by moving to target build dir as well.

Fixes: f489e019ac4a ("rust: compile host package per target")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit efdbac38dc8b649ca26b49fac27abeb5cf76cd28)

rclone: Update to 1.63.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34d1c310b36ce0473a457ee1f82414ff994cd92c)

dnsproxy: Update to 0.52.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dc3af571d7c7328d3013b52812bc9e22d14676df)

cloudflared: Update to 2023.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 498343e2c0b21383c9ebb77fbfd1b6a0dbe1acf6)

Merge pull request #21573 from 1715173329/2305-adg

[openwrt-23.05] adguardhome: bump to 0.107.33

Merge pull request #21588 from jefferyto/python-babel-2.12.1-openwrt-23.05

[openwrt-23.05] python-babel: Update to 2.12.1, add host build

Merge pull request #21599 from jefferyto/python-pip-23.2-openwrt-23.05

[openwrt-23.05] python-pip: Update to 23.2

snowflake: update to 2.6.0

Tor projects tries to migrate away from git.torproject.org [0,1]. We
need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport
patches to fix compiling on riscv64, so add:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/2fa8fd9188078eaa169f1edd16815deae4004c6c

[0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86
[1] - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/82cc0f38f73c4ca4e12d22173562a092ebd4dea0

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0281f7594b31a5a947c26b895343daedc8a808e8)

rust: Update to 1.71.0

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 971d326768b962dc4acdea181ae58b72c609e119)

rust: compile host package per target

While the compiled binaries are intended to run on the host system, the
rust/host package does include the target matching the configured
OpenWrt target.

If using (for example) ./scripts/env to switch between different
OpenWrt configurations, this will cause issues if the different
configuration is for a different target. In such case there will be a
mismatch between the available Rust target and OpenWrt target and the
following error will be printed:

> error[E0463]: can't find crate for `core`
> note: the `XXX` target may not be installed

This fix will add the RUSTC_TARGET_ARCH as HOST_BUILD_DIR and CARGO_HOME
suffix, such that rust/host will be compiled in case an OpenWrt
configuration change causes the RUSTC_TARGET_ARCH to change.

Fixes: #21530
Signed-off-by: Orne Brocaar <info@brocaar.com>
[Applied Jeffery To's suggestion for build and install path]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f489e019ac4a15e974518d9928ef913a157d135a)

Merge pull request #21587 from jefferyto/python-mako-reimport-openwrt-23.05

[openwrt-23.05] python-mako: Re-import host-only package from abandoned packages repo

Merge pull request #21596 from jefferyto/golang-1.20.6-openwrt-23.05

[openwrt-23.05] golang: Update to 1.20.6

python-pip: Update to 23.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5e66a69433e59c5f1089167917364f91b45b91be)

golang: Update to 1.20.6

Includes fix for CVE-2023-29406 (net/http: insufficient sanitization of
Host header).

This also updates the copyright information for various Go packaging
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8000a7f7691e733dd27dea30bed32dfc3d805ffb)

python-babel: Update to 2.12.1, add host build

Also updated dependencies for the new version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0174cea69757589be50b9dd774394ce18cf61dae)

python-mako: Re-import host-only package from abandoned packages repo

Mako was removed in 60ce07b9a1d5c7a53297f177f10af68f3304be9e; at the
time we were using host pip to install host Python packages and so
having this package was not necessary.

With the move away from host pip and toward proper host packages, it
would be better to have a Mako host-only package here to support the
mesa package in the video feed.

This re-imports the package from the abandoned packages feed, updates
the makefile with current Python package conventions, and updates the
package to the latest version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 666ea9397789b79aca402cbdab7d090f78623845)

banip: release 0.9.0-1

* supports allowing / blocking of certain VLAN forwards in segregated network environments,
   set 'ban_vlanallow', ''ban_vlanblock' accordingly
* simplified the code/JSON to generate/parse the banIP status
* enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1'
* made the new vlan options available to LuCI (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c14eb6d8ced8bc49825bc109984a8b6715c1a08)

adguardhome: bump to 0.107.33

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.30
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.31
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.32
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.33

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 46bf47d855df5f58875f6a76d00825df11c6b5fb)

adguardhome: bump to 0.107.29

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.26
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.27
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.28
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.29

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 684010e9cb050077a5db1ab359d441fbc800387e)

yq: Update to 4.34.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1cb2590c1743eeb4c357b1f0d7e3fb47b3640ae6)

cloudflared: Update to 2023.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5e0c715a51cd146867d0ca9efd5158307410f042)

inih: Update to r57

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 195053fba4fe8a910fb19317fb0af7fb6620fa0f)

Merge pull request #21562 from jefferyto/python-cython-0.29.36-openwrt-23.05

[openwrt-23.05] python-cython: Update to 0.29.36

Merge pull request #21564 from jefferyto/python-trove-classifiers-2023.7.6-openwrt-23.05

[openwrt-23.05] python-trove-classifiers: Update to 2023.7.6

Merge pull request #21563 from jefferyto/python-editables-0.4-openwrt-23.05

[openwrt-23.05] python-editables: Update to 0.4

Merge pull request #21561 from jefferyto/click-8.1.4-openwrt-23.05

[openwrt-23.05] click: Update to 8.1.4, rename source package

Merge pull request #21567 from mcha-forks/openwrt-23.05

tailscale: update to 1.44.0

tailscale: update to 1.44.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 2ee93efe5d8824ae7622265195c9e8fdbfb14c7d)

tailscale: update to 1.42.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 3d368ddc35a3e73aadfd9e53784e2ff5c26cacff)

Merge pull request #21565 from jefferyto/ooniprobe-3.18.0-openwrt-23.05

[openwrt-23.05] ooniprobe: Update to 3.18.0

Merge pull request #21560 from mhei/23.05-php8-update-to-8.2.8

[23.05] php8: update to 8.2.8

ooniprobe: Update to 3.18.0

This version includes support for Go 1.20 (specifically 1.20.5).

This also:

* Adds a workaround for musl 1.2.4 compatibility in mattn/go-sqlite3[1]

* Sets GO_PKG_BUILD_PKG to build the main binary (ooniprobe) only

* Updates the package license; the project was relicensed in 3.13.0[2]

[1]: https://github.com/mattn/go-sqlite3/issues/1164
[2]: https://github.com/ooni/probe-cli/pull/446

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc7382ec65c4f22bb1e363f7d89c3c427ade4b5d)

python-trove-classifiers: Update to 2023.7.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b68832d51eb86404020da8d35bea74ccea3619fa)

python-editables: Update to 0.4

The build backend was changed from setuptools to flit-core.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9a5f66acc37d77ddfe98b87fcdcbd260365c9c70)

python-cython: Update to 0.29.36

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 96c4a3f0c705954b43f7bf1b59580ec5ced172da)

click: Update to 8.1.4, rename source package

This renames the source package to python-click to match other Python
packages.

This also updates the package dependencies, licence file, package title
and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5710f272dbef52f9186fc36c022071cee7789651)

php8: update to 8.2.8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 75bd8ebde41dc1959ee4cdd0d8da51df1a417b04)

banip: update 0.8.9-4

* made the etag id parsing more bulletproof (to catch unverified etags as well)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5e2a9f082aa271dd2b7c2bd7f884bc2aef0b9be6)

banip: update 0.8.9-3

* prevent superflous etag function calls during start action (on start backups will be used anyway)
* changed the ipthreat feed download URL (load a compressed file variant to save bandwidth)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 88e64a2ae488e1cd8d4d539c6d976c9ccc728d2f)

banip: update 0.8.9-2

* fix a corner case backup issue with empty feed downloads

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 137045faa904fd826be9e82b22aa2ee1d65229b7)

banip: release 0.8.9-1

* added HTTP ETag or entity tag support to download only ressources that have been updated on the server side,
  to save bandwith and speed up banIP reloads
* added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme)
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 68cdc3952dd7adf6fb1ed4b8138ec5478ac18b9a)

nginx: don't install all module for FULL variant

We currently have a more or less circular dependency with nginx ssl and
full variant.

FULL variant depends on every nginx module. Every nginx module depends
on nginx-ssl.

Since nginx-full depends on an nginx module, nginx-ssl is installed as
module depends on it and then the installation fails as nginx-full
conflicts with nginx-ssl.

nginx-full in it's meaning is nginx built with every config selected and
it should not have module as dependency. In fact an user should always
install them separetly as while other things, local modification to the
nginx config file are required to include the just installed module.

To fix this circular dependency problem, drop the dependency of every
nginx module for FULL variant.

Fixes: #21300
(cherry picked from commit 3d0183e9c50ee6c709affa830460f4cd9b0ec85e)
[ fix conflict error and bump pkg release ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #21494 from jefferyto/python-typing-extensions-4.7.1-openwrt-23.05

[openwrt-23.05] python-typing-extensions: Update to 4.7.1

rclone: Update to 1.63.0

While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 952844c976bae289c603f9c93662a08f6ff49290)

dnsproxy: Update to 0.51.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9cf533dffe8363349530e808a2dedf5d7ee4685f)

vala: add self as maintainer of unmaintained package

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ae94714081336622afeeec6e46d441fdb9e015eb)

vala: patch to circumvent apparent pkgconf bug

There is an apparent bug in pkgconf 1.9 that broke building the OpenWrt
Vala package. This adds a patch to circumvent the bug. For the related
discussion, see:

https://github.com/openwrt/packages/issues/21359

The pkgconf bug appears similar to the one discussed here:

https://github.com/pkgconf/pkgconf/issues/268

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a7e1ba32fdf4b736a44d467b0f79b7f4665ce32d)

python-typing-extensions: Update to 4.7.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 207d01c3a918bf6452c5962660a605bb0d8b8d6b)

python-markupsafe: Update to 2.1.3, add host build

The host build will be used for mako (to be added later).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ff51716aaae66c3e307b07f019f17aee3e455d03)

python-libmodbus: Update to 0.6.2

This also adds a source package (python3-libmodbus-src).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 40b9f05a5818e3793271902771a8a6b9d93f8075)

python-gnupg: Update to 0.5.0

This also removes the dependency on gnupg as there are two packages for
gpg, gnupg and gnupg2; this library should work with either one.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 67af34188da75c737556fd439ab1a1a8c7d954a7)

python-service-identity: Update to 23.1.0

This adds new build dependencies as the package switched to
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit e1ef13a30c8e5bc687e917edce75f75c60e56a86)

python-hatchling: Update to 1.18.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2ec3b9f09596224c7bfc2d656a26eea02d3052a4)

python-pluggy: Update to 1.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit f6190a379bf1a9be9e9f5d6dc66f1357a2666ebd)

python-werkzeug: Update to 2.3.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit acc915083d44386cb4890818ddacd8221573b7b0)

python-packages: Take over maintainership from Daniel Golle

This was requested in
https://github.com/openwrt/packages/pull/21227#issuecomment-1567676980.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b5dbf77501b4b4921ebd4d6abc6389875b64d3fa)

netbird: update to 0.21.7

1. Release notes:
   https://github.com/netbirdio/netbird/releases/tag/v0.21.2
   https://github.com/netbirdio/netbird/releases/tag/v0.21.3
   https://github.com/netbirdio/netbird/releases/tag/v0.21.4
   https://github.com/netbirdio/netbird/releases/tag/v0.21.5
   https://github.com/netbirdio/netbird/releases/tag/v0.21.6
   https://github.com/netbirdio/netbird/releases/tag/v0.21.7
2. Update GO_PKG_LDFLAGS, because of https://github.com/netbirdio/netbird/commit/292ee260ad564d1e65199b1cb3430b0cd7ba9646
3. Define the configuration file.

Signed-off-by: Salem Huang <solohoh@hotmail.com>
(cherry picked from commit b9b785b00ba59ec2fb3835492c3a78606812b3f1)

python-setuptools: Update to 68.0.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c698a615f934e27c5c73d39b9ac22a7dcf05851f)

adblock: update to 4.1.5-8

* adapt adguard_tracking source changes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e1fa285f325543cc96dcfe2beb17fe83cc1a76e3)

Merge pull request #21436 from jefferyto/selinux-update-openwrt-23.05

[openwrt-23.05] selinux: Update selinux packages to 3.5, setools to 4.4.2, reorganize packages

semodule-utils: Update to 3.5, reorganize package

* Add separate packages for each tool (semodule-*)

* Update the semodule-utils package as a meta-package that installs all
  tools, keeping it functionally the same as the current semodule-utils
  package

* Remove host build (not used by any other package)

* Update package titles, descriptions, and license files

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa4085a13f224e8bf5917aace318ae21b49adf2a)

selinux-python: Update to 3.5, reorganize package

* Added packages:

  * python3-seobject

    Contains the seobject.py library file which was previously included
    in selinux-semanage

  * selinux-sepolicy

    Contains the sepolicy and sepolgen tools which were previously
    included in python3-sepolicy

  * selinux-sepolgen-ifgen

    Contains the sepolgen-ifgen tool which was previously included in
    selinux-audit2allow

  * selinux-python

    A meta-package to install all tools

* Change the python3-sepolgen data_dir from /usr/share/sepolgen to
  /etc/sepolgen (updated 0001-sepolgen-adjust-data_dir.patch), and add
  the directory to conffiles

  By default, the sepolgen-ifgen tool writes to a file named
  "interface_info" in the data directory, to be read by the audit2allow
  tool. The header comment in the perm_map file also suggests that the
  file is customizable.

  The best place for these files would be in /var/lib, but /etc is more
  appropriate than /usr.

* Remove gui files from python3-sepolicy (0003-sepolicy-no-gui.patch)

* Fix ModuleNotFoundError raised by sepolicy
  (0004-sepolicy-fix-get_os_version-except.patch)

  Patch has been submitted upstream:
  https://lore.kernel.org/selinux/20230619063217.3165462-1-jeffery.to@gmail.com/

* Update package titles, descriptions, and dependencies

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6bd71dac0cb7711777feaf04d1156d2e0eb9e1bd)

selinux-python: Add default sections for Python and util packages

This also moves the python3-selinux dependency from the default section
into each util package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 61e79aad69015d71286d7b47f6bcccee20baf796)

selinux-python: Order package sections alphabetically

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03225ca7b0755eb342191f7bff8871a8ddfddb1c)

python3-libsemanage: Update to 3.5, rename source/target package

* Rename:

  * Source package from python3-libsemanage to python-semanage
  * Target package from python3-libsemanage to python3-semanage

* Update dependents with new target package name

* Update package title, license files, and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 23ff8177f030610f40300519cd888dbfd47f3e3a)

python3-libselinux: Update to 3.5, rename source/target package

* Rename:

  * Source package from python3-libselinux to python-selinux
  * Target package from python3-libselinux to python3-selinux

* Update dependents with new target package name

* Remove patches:

  * 010-setup-py-custom-cc.patch: LDSHARED is already set as part of
    $(PYTHON3_VARS)

  * 020-Make-use-of-variables-when-defining-libdir-and-inclu.patch: This
    package doesn't install the libselinux.pc file

* Update package title and dependencies

* Remove Build/InstallDev (files not used by any other package)

* Use Py3Package to build Python bytecode and source packages

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a205483547ca835d98d5da1284e8a77c88eb5f97)

setools: Update to 4.4.2, reorganize package

* Add separate packages for each tool (setools-*) and a package for the
  Python bindings (python3-setools)

* Update the setools package as a meta-package that installs all tools,
  keeping it functionally the same as the current setools package

* Remove gui tool (apol) and Python binding (setoolsgui)

* Simplify 030-remove-host-paths.patch (libraries installed by
  Build/InstallDev are placed in $(STAGING_DIR)/usr/lib only)

* Update package titles, descriptions, license, and dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6938f58a4528c6b3d314808fd2ec6da2a2dff77c)

haproxy: update to v2.8.0

- New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html)

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 3e454f418da95e4dff75ac2ff995f204dfe3dc2c)

nebula: update to 1.7.2 (and cosmetic fixes)

* update binaries to 1.7.2
* move sharedMemoryOutput variable declaration into output function as it doesn't
  need to be global
* rename parse_yaml function to yaml_parse
* add TODOs for future development

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 204e6076d352d5c7232e18de0fcf58503ef6ae9b)

banip: update 0.8.8-2

* process local lists in strict sequential order to prevent possible race conditions
* support ranges in the IP search, too
* fix some minor search issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c3084be415f5c701a319342c85ca626996b5b463)

banip: release 0.8.8-1

* Support MAC-/IPv4/IPv6 ranges in CIDR notation
* Support  concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme)
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b9bd6cdb0dcd85b30999b162a06a10c5229908e7)

banip: release 0.8.7-1

* Optionally auto-add entire subnets to the blocklist Sets based on an additional RDAP request with the
   monitored suspicious IP, set 'ban_autoblocksubnet' accordingly (disabled by default).
   For more information regarding RDAP see
   https://www.ripe.net/manage-ips-and-asns/db/registration-data-access-protocol-rdap for reference.
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 767d1ec663b980f86f31354ceaee07c6184656eb)

vsftpd: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a9cda9150232c4907607a3f19ad1d0833541bc89)

gitlab-runner: Update to 16.0.2

* Added test.sh script
* Fixed build with riscv64
* Passed package version via go ldflags
* Refreshed patches
* Removed useless test binaries from package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 27b4291bd474f1517fc1a00ee7b8e7e69ded8a55)

python-ble2mqtt: fix installation of python program

This was broken when the init script was added in 408502ee0.

(cherry picked from commit 5cf30460555ba0687bbd61769c30edfb43e39949)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

c-ares: bump to 1.19.1

This is a security and bugfix release.

Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation

Fixing libcares.pc
 The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
 and causes build errors with Openwrt packages that use libcares.
 For this reason, libcares.pc was replaced.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4c4d3b900197785292ef92055effcccd7f3b805b)

cloudflared: Update to 2023.6.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1aa41e92ac8733be9a25b77eddea7cdac3bedc34)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4a22284cb5ddbcaccdea1ad850a573f9d783026)

xray-core: update to 1.8.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c912e2bcedfcfb50c1ee02d0fa120f0b0025ac2c)

cloudflared: Update to 2023.6.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 194cf52a82df2bdf98d52687762287ae689b6fc6)

node: June 20 2023 Security Releases

Update to v18.16.1

The following CVEs are fixed in this release:
* CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
* CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
* CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
* CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
* CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
* OpenSSL Security Releases (Depends on shared library provided by OpenWrt)
    * OpenSSL security advisory 28th March.
    * OpenSSL security advisory 20th April.
    * OpenSSL security advisory 30th May
* c-ares vulnerabilities: (Depends on shared library provided by OpenWrt)
    * GHSA-9g78-jv2r-p7vc
    * GHSA-8r8p-23f3-64c2
    * GHSA-54xr-f67r-4pc4
    * GHSA-x6mf-cxr9-8q6v

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 286d1d11ae451e9e90897aacd7ae20ec76e2cab5)

modemmanager: if an alias name is used do not check sysfs path

If an alias name is used for the modem, then a check if the device exists
in sysfs does not work. To fix this remove the check if the sysfs device
exists. The protocoll handler already checks if the modem is responsible
for this device on the next line.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit fd63e400ba1c2cf7242517ebb5675bfdcd22fc3f)

modemmanager: do not cache virtual device events

On small systems with many virtual devices, the modem manager sometimes
could not start because it took too long until all devices for the modem
were recognised. This is because all system events that are stored in
the file events.cache have to be processed. To speed up the processing,
all devices under /sys/devices/virtual are now filtered out so that they
do not have to be processed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e66fead6d479b5870280918ea42160c7dd0fc532)

Merge pull request #21413 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: update to 2023-05-25-2

dockerd: Update to 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 17589190e58ea5686e88379140de6f2291f5aac7)

docker: Update to 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b089ccb0836b90b1dde2a9c9f34b30f863db6c12)

containerd: Update to 1.7.1 for docker 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e1e05fef027aedefebd1062b5c8782726c2cedbc)

runc: Update to 1.1.7 for docker 24.0.2

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 754db89160ef37eb60e4a91d84ab7c43a23fb545)

Merge pull request #21284 from stangri/openwrt-23.05-curl

[23.05] curl: update to 8.1.2

https-dns-proxy: update to 2023-05-25-2

bugfix: proper mdns object creation
bugfix: prevent fw errors by allowing custom interfaces in config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a31640ac7cfab78c75808e22fc7fc2da48bd8e7f)

gost_engine: disable tests, reset patches dir

Tests are breaking compilation for mipsel targets because of the removal
of the sysmips call.  Let's just not build them.

While at it, remove patches from 1.1 version and move the current ones
to the default 'patches' directory.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085dc8d965a4baa06e60845e98fa7e23869ad213)

libuv: bump to 1.45.0

1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers

1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit cf7e9a77c991d5d394a0f434783a37bda85bff03)

CI: update build architectures

- armvirt target has been renamed to armsr (Arm SystemReady) [1].
- armsr-armv8 has been switched to aarch64_generic architecture [2].

1. https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1
2. https://github.com/openwrt/openwrt/commit/e0f06ddc23b2503a1791ae7e97b02e2647e8a70d

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bf88b371c5be3513b26592d6056a7de0419b0d87)

qemu: change references from armvirt to armsr

armvirt target has been renamed to armsr (Arm SystemReady) [1],
so the dependency need to be changed as well.

https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e007556915a8528986539e6c1c9a40d938c757cb)