libfmt: bump to upstream version 10.2.1

Signed-off-by: Othmar Truniger <github@truniger.ch>

uspot: update to Git HEAD (2024-01-09)

0cffba9458d3 treewide: add support for RADIUS Reply-Message
c9fb744fdee8 treewide: add support for 'lang=' & ChilliSpot-Lang
584a162cb19a handler-uam: ensure that 'seconds_remaining' is always set
bd1f7c5de1ae Makefile: align with packages feed one
0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
e6a286ccfdbf uspot/uspotfilter: use 'logger -t'
427ed16cfde5 uspot: expose ratelimits in client data
4ba1dd9c5135 uspot: don't send NAS-Port-Type
78a37ef49b85 templates: add id="replymsg" to reply msg header
e3f4e179fd17 templates: show remaining time in "connected"
398762dff711 radius-client: correctly use str_to_hex()
730ef800d9da templates: simplify HTML
6bb39282fd8f Documentation update
b6c802adac19 portal: handle_request() logic refactoring
1aa1a5eb28d7 uspotfilter: implement peer_lookup()
ba5547ec61f1 portal: speedup peer lookup by leveraging spotfilter
d551376c29bb templates: added html5 time tag to timeleft output
154c98e0b77b uspotfilter: mark client as active when set()
8dcb03a37a77 uspotfilter: rework neigh management
cfb2ce7909da uspotfilter: use client_remove() where applicable
8411314dbf90 Documentation update
8dacf3df9935 uspot: use a single operation for client removal
297b7857c1e0 uspotfilter: fix DELNEIGH processing
76003917c205 uspotfilter: client_set() only clear idle when allowing
f46a855c5085 uspotfilter: remove botched IPv6 "support"
4ff31cbf0e2b uspot: client_remove(): stay in sync with spotfilter
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging
52e24aecf2db uspotfilter: use ucode '??=' syntax
c4b6f2f0bb1e Update README

Update the package Makefile to reflect the changes from the following
above-listed commits:

0ea6ad3c4e54 Makefile: mark uspot-www and uspotfilter "PKGARCH:=all"
edc9ad7e60a3 uspot/uspotfilter: use ucode-mod-log for logging

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>

travelmate: update 2.1.2-2

* fix a possible re-connection issue/cornercase seen on single radio units

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #23076 from stangri/master-adblock-fast

adblock-fast: bugfix: pause command

Merge pull request #22440 from myszsoda/atftpd_option_enable

atftpd: Add 'enable' config option

btop: Update to 1.3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alist: Update to 3.30.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

adblock-fast: bugfix: pause command

* the pause command used to incorrectly cause block-lists reload, this
  has been fixed in this version

Signed-off-by: Stan Grishin <stangri@melmac.ca>

banip: update 0.9.3-4

* made the default mail template "responsive" to get a better view esp. on mobile devices

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #23070 from muink/master

sing-box: update to 1.8.0

sing-box: update to 1.8.0

New features for v1.8.0:
1. Migrate cache file from Clash API to independent options
2. Introducing Rule Set
3. Add `sing-box geoip`, `sing-box geosite` and `sing-box rule-set` commands
4. Allow nested logical rules
5. Independent `source_ip_is_private` and `ip_is_private` rules
6. Add context to JSON decode error message
7. Reject internal fake-ip queries
8. Add GSO support for TUN and WireGuard system interface
9. The legacy LWIP stack has been deprecated and removed
10. Add `idle_timeout` for URLTest outbound
11. Added some new uTLS fingerprints
...
Release notes: https://github.com/SagerNet/sing-box/releases/tag/v1.8.0

The new version has some breaking changes and may stop working after upgrading if use the original config.
Please see the migration manual to migrate the config: https://sing-box.sagernet.org/migration/

Signed-off-by: Anya Lin <hukk1996@gmail.com>

libs/xmlrpc-c: fix pkg-config files

Add an upstream patch that uses conventional variables in
pkg-config files so they can be overridden at pkg-config time.

This patch was created using the following upstream revisions:

- https://sourceforge.net/p/xmlrpc-c/code/3203/
- https://sourceforge.net/p/xmlrpc-c/code/3205/

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libs/xmlrpc-c: update to 1.59.02

Also remove the already upstreamed patch.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

dovecot: update to 2.3.21

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openssh: fix build failure on powerpc_8548
https://github.com/openssh/openssh-portable/commit/1036d77b34a5fa15e56f516b81b9928006848cbd

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>

openssh: bump to 9.6p1

Release notes: https://www.openssh.com/txt/release-9.6

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>

travelmate: release 2.1.2-1

* fix a station scanning issue on single radio units (mainly a LuCI/JS issue) reported in the forum by multiple users

Signed-off-by: Dirk Brenken <dev@brenken.org>

shairport-sync: Enable pipe audio backend support

UCI's shairport-sync's pipe conf block is defined but has no effect without shairport-sync's pipe support

Rationale for pipe support:
- On SBC with no sound card available (built-in or external)
  and without ALSA plugins support on OpenwRT (no package)
  to reroute a stream from shairport-sync's ALSA default output
  to a PulseAudio controlled Bluetooth sink , then pipe support
  is required to enable the following flow:
  - shairport-sync -> fifo pipe -> custom_binary_to_send_stream_to_pulse_audio_BT_sink
- small bump in package size: diff: +746 bytes
  - shairport-sync-openssl_4.3.2-0_aarch64_generic.ipk without --pipe: 110806 bytes
  - shairport-sync-openssl_4.3.2-0_aarch64_generic.ipk with --pipe: 111552 bytes

Signed-off-by: David Andreoletti <david@andreoletti.net>

nfdump: add dependency on libzstd

Signed-off-by: W. Michael Petullo <mike@flyn.org>

mpfr: remove package, moved into main OpenWrt repo

mpfr has been moved to the main OpenWrt source repository,
as it is required by gbd 14. Remove it from the feeds repo.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

nginx: update to 1.25.3

Update nginx to the latest version.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>

swig: bump to 4.2.0

    SWIG-4.2.0 summary:

        Various template wrapping improvements: template template parameters,
        variadic templates, partially specialized templates, const template
        parameters and improved error checking instantiating templates.
        Improved decltype() support for expressions.
        C++14 auto without trailing return type and C++11 auto variables.
        Numerous C++ using declarations improvements.
        Numerous fixes for constructors, destructors and assignment operators:
        implicit, default and deleted and related non-assignable variable
        wrappers.
        STL: std::array and std::map improvements, std::string_view support
        added.
        Various C preprocessor improvements.
        Various issues fixed to do with architecture specific long type.
        Various Doxygen improvements.
        D1/Tango support removed. D2/Phobos is now the supported D version
        and SWIG now generates code which works with recent D2 releases.
        New Javascript generator targeting Node.js binary stable ABI Node-API.
        Octave 8.1 support added.
        PHP7 support removed, PHP8 is now the supported PHP version.
        Python STL container wrappers now use the Python Iterator Protocol.
        Python stable ABI support added.
        Python 3.12 support added.
        Ruby 3.2 and 3.3 support.
        Scilab 2023.* support added.
        Various minor enhancements for C#, Go, Guile, Javascript, Lua, Ocaml,
        Perl, PHP, R, Racket, Ruby, Scilab and Tcl.
        A number of deprecated features have been removed.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

wifi_schedule: fix startup problems

Fixes: e0d7181a6
Closes: #22973
Closes: #22988
1. Make the new `startup()` function in `/usr/bin/wifi_schedule.sh`
   respect the global `enabled` config flag; in particular, make no
   changes to `/etc/config/wireless` when wifi_schedule is disabled.
2. Make the new `/etc/init.d/wifi_schedule` service script executable.

Signed-off-by: Rani Hod <rani.hod@gmail.com>

dhtd: update to 1.0.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

libsodium: Update to 1.0.19 and fix patches

Also add TAR_OPTIONS and TAR_CMD. Unfortunately, latest version of libsodium extracts to an additional libsodium-latest subfolder, which is unneccessary and removed by these options.

Signed-off-by: Carsten Schuette <schuettecarsten@googlemail.com>

dnsproxy: Update to 0.61.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest versin

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2raya: Update to 2.2.4.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #23047 from neheb/fu

openconnect: update to 9.12

libdaq: remove package

Replaced with libdaq3.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

snort: remove package

Replaced with snort3.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

python-gevent: add python-gevent

https://pypi.org/project/gevent/

https://www.gevent.org/development/installing_from_source.html

source code

https://github.com/gevent/gevent
Signed-off-by: Andy Syam <privasisource@gmail.com>

numpy: update to version 1.26.2

https://github.com/numpy/numpy/releases

NumPy 1.26.2 Release Notes
NumPy 1.26.2 is a maintenance release that fixes bugs and regressions
discovered after the 1.26.1 release. The 1.26.release series is the last
planned minor release series before NumPy 2.0. The Python versions
supported by this release are 3.9-3.12.

Signed-off-by: Andy Syam <privasisource@gmail.com>

hs20: fix compilation with libxml 2.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-zeroconf: update version 0.131.0

Signed-off-by: Andy Syam <privasisource@gmail.com>

libmad: update to 0.16.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openconnect: update to 9.12

Remove upstream backport and fix libxml 1.12 compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-msgpack: update version 1.0.7

Signed-off-by: Andy Syam <privasisource@gmail.com>

netbird: update to version 0.25.2

Signed-off-by: Misha Bragin <bangvalo@gmail.com>

snort3: add missing action-override option

Allow use of rules as-defined, and don't override their actions.  This
is generally the best way to use the ruleset, and overriding their
actions should only be undertaken when you fully understand how it
affects their use.

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

snort3: compile with lzma support

This PR adds the ability of snort to process rules that target
swf and pdf files requiring lzma decompression to look for
malicious payloads therein.  This change only increases the size
of the snort3 executable by a fraction of a KB and the added
dependency of liblzma (based on currently offered 5.4.4-1) is
only a 169 KB shared object.  Based on CPU requirements of snort,
x86 users likely represent the majority user-base and space their
rootfs is not an issue as it may be for lower-powered SoCs.

Size of snort3-3.1.76.0-2: 7354403 bytes
Size of snort3-3.1.76.0-3: 7354435 bytes

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

Openvpn: add missing script event options

Maintainer: @mkrkn  @neheb
Compile tested: aarch64, cortex-a53, OpenWRT Master
Run tested: Dynalink DL-WRX36

Description:
[A previous commit](https://github.com/openwrt/packages/commit/f8a8b71e26b9bdbf86fbb7d4d1482637af7f3ba4) has added more script event options.
However it looked like that commit was not complete as it stops the use of the script events route-up, route-pre-down, and ipchange when those are placed in the openvpn config file.

This PR fixes a regression that makes it problematic to specify certain event options in the OpenVPN configuration file.

Discussion in [this thread](https://forum.openwrt.org/t/openvpn-custom-route-up-script-in-23-05-rc2/167105/13) and [here](https://forum.openwrt.org/t/openvpn-route-up-and-route-pre-down-broken-in-23-05/176568)

Please have a look and consider implementing or make it possible to use all script event options in the openvpn config file in another way.

Pull request has been discussed and improved with the help of @AuthorReflex, see: https://github.com/openwrt/packages/pull/21732

Signed-off-by: Erik Conijn <egc112@msn.com>

python3-bleak: add missing python3-typing-extensions dependency

Dependency introduced by https://github.com/hbldh/bleak/commit/21094e67cf5d238b911352ba8c45a33d72f47d80
and
https://github.com/hbldh/bleak/commit/3c1fac9773e13acf52cebfe4e9df5c60bffaf76b

(And only for python versions below 3.12.)

Fixes: 64fa106 (python3-bleak: bump version to 0.21.1)
Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

syncthing: fix wrong group name in syncthing.init

The group does not always have the same name as user, and when I try
to run syncthing with nobody I get an error. Since nobody belongs to
the group nogroup, I added some code to find out which group user
belongs to.

Signed-off-by: Xiang W <wxjstz@126.com>

python3-distro: update to version 1.9.0

- ENHANCEMENTS:

  - Refactor distro.info() method to return an InfoDict
  - Ignore the file '/etc/board-release'
  - Ignore the file '/etc/ec2_version'

- RELEASE:

  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort

- TESTS:

  - Test on modern versions of CPython and PyPy and macOS
  - Add support for ALT Linux Server 10.1 distribution
  - Add Debian Testing to the tests
  - Update archlinux resource for tests

Signed-off-by: Javier Marcet <javier@marcet.info>

python-docker: Update to 7.0.0

Upgrade Notes:
 - Removed SSL version (ssl_version) and explicit hostname check
 (assert_hostname) options
   - assert_hostname has not been used since Python 3.6 and was
   removed in 3.12
   - Python 3.7+ supports TLSv1.3 by default
 - Websocket support is no longer included by default
   - By default, docker-py hijacks the TCP connection and does not use
   Websockets
   - Websocket client is only required to use attach_socket(container,
   ws=True)
 - Python 3.7 no longer officially supported (reached end-of-life June
 2023)

Features:
 - Python 3.12 support
 - Full networking_config support for containers.create()
   - Replaces network_driver_opt (added in 6.1.0)
 - Add health() property to container that returns status (e.g.
 unhealthy)
 - Add pause option to container.commit()
 - Add support for bind mount propagation (e.g. rshared, private)
 - Add filters, keep_storage, and all parameters to prune_builds()
 (requires API v1.39+)

Bugfixes:
 - Consistently return docker.errors.NotFound on 404 responses
 - Validate tag format before image push

Miscellaneous:
 - Upgraded urllib3 version in requirements.txt (used for
 development/tests)
 - Documentation typo fixes & formatting improvements
 - Fixed integration test compatibility for newer Moby engine versions
 - Switch to ruff for linting

Signed-off-by: Javier Marcet <javier@marcet.info>

pyproject-metadata: add pyproject-metadata

https://pypi.org/project/pyproject-metadata/

source code
https://github.com/FFY00/python-pyproject-metadata

add the pyproject-metadata package that numpy requires

Signed-off-by: Andy Syam <privasisource@gmail.com>

python-cython: update to version 3.0.7

Signed-off-by: Andy Syam <privasisource@gmail.com>

python-zope-event: add python-zope-event

https://pypi.org/project/zope.event/

source code

https://github.com/zopefoundation/zope.event
Signed-off-by: Andy Syam <privasisource@gmail.com>

python-dbus-fast: update version 2.21.0

Signed-off-by: Andy Syam <privasisource@gmail.com>

python-sqlalchemy: update version 2.0.23

Signed-off-by: Andy Syam <privasisource@gmail.com>

python-greenlet: update version 3.0.2

Signed-off-by: Andy Syam <privasisource@gmail.com>

python-websocket-client: update to 1.7.0

  - Renamed `mask` variable in ABNF to prevent name collision with
  `mask()` function (9b51f73)
  - Fixed old http import of HTTPStatus in _handshake.py (9b51f73)
  - Add `send_text()` and `send_bytes()` to _app.py
  - Improved typehint support (9b51f73, 8b73d00)
  - General readability improvements, made all string concatenations
  use f-strings (780584f, 3eabc6e)
  - Applied black formatting style to code (da7f286)

Signed-off-by: Javier Marcet <javier@marcet.info>

shairport-sync: Upgrade to v4.3.2 and add AirPlay2 support

Signed-off-by: Ben Klang <bklang@wirehack.net>

nqptp: Add new port nqptp for use with shairport-sync

Signed-off-by: Ben Klang <bklang@wirehack.net>

setools: update to 4.4.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

semodule-utils: update to 3.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

python-networkx: update to 3.2.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

pigeonhole: update to 0.5.21

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.6.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

nfdump: update to 1.7.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdmapsharing: update to 3.9.13

Signed-off-by: W. Michael Petullo <mike@flyn.org>

hwloc: update to 2.10.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

fuse-overlayfs: update to 1.13

Signed-off-by: W. Michael Petullo <mike@flyn.org>

luasec: update to 1.3.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

shared-mime-info: update to 2.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.15.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgcrypt: update to 1.10.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

krb5: update to 1.21.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vala: update to 0.56.14

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libsoup3: update to 3.4.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libsoup: remove package

Remove libsoup package, as all of the packages that have depended on it
moved to libsoup3.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: use libsoup3 instead of libsoup

Signed-off-by: W. Michael Petullo <mike@flyn.org>

snowflake: update to 2.8.1

Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.8.1/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #23032 from flyn-org/php8-pecl-mcrypt

php8-pecl-mcrypt: update to 1.0.7

php8-pecl-mcrypt: update to 1.0.7

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #23009 from muink/master

sing-box: Update to 1.7.7

rust: Update to 1.75.0

Changelog: https://blog.rust-lang.org/2023/12/28/Rust-1.75.0.html

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: unexport host sccache env variable

Users might configure their own env variables on the host, and sometimes
it can lead build failure or unexpected behavior.

Fixes: #22889
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

docker: Update to 24.0.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 24.0.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Update to 1.1.9

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.7.6

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Merge pull request #23007 from mhei/php8-update-to-8.3.1

php8: update to 8.3.1

sing-box: Update to 1.7.7

Signed-off-by: Anya Lin <hukk1996@gmail.com>

dnsdist: Enable custom load-balancing policies in the light version

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

libs/xmlrpc-c: install pkgconf files

Copy *.pc files into the staging directory.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

 banip: update 0.9.3-3

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #22917 from commodo/django1

django: bump to version 5.0

 banip: update 0.9.3-2

* rework the device/interface auto-detection (only layer-3 network devices will be detetcted correctly), disable the auto-detection e.g. for special tunnel interfaces
* supports now full gawk (preferred, if installed) and busybox awk
* raise the default boot timeout to 20 seconds (if 'ban_triggerdelay' is not set)
* various small fixes and improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>

zoneinfo: Updated to the latest (2023d) release.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

rtty: update to 8.1.0

Signed-off-by: Shi JiaYang <shi05275@163.com>

sshtunnel: update to v5.2

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

sshtunnel: simplify command composition

Remove append_params and use shell expressions instead e.g. ${port:+-p $port}.

Note that we can't do that with ProxyCommand because it has to be quoted.

The order of options was changed from more important like hostname to just static -nN.

The CompressionLevel option is removed from SSH2.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

sshtunnel: ProxyCommand option

The ProxyCommand may have spaces so it must be quoted.
So we must use the procd_append_param.
Currently the option is not supported by Dropbear.
But it has -J instead which in OpenSSH means ProxyJump.
So we can't use it to avoid conflict.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

django: bump to version 5.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

php8: update to 8.3.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

exfatprogs: Update to 1.2.2

exfatprogs 1.2.2 - released 2023-10-26
======================================

CHANGES :
 * exfat2img: Allow dumps for read-only devices.
 * fsck.exfat: Revert Repairing zero size directory.

NEW FEATURES :
 * fsck.exfat: Repair duplicated filename.
 * mkfs.exfat: Add the option "q" to print only error messages.
 * mkfs.exfat: Add the option "U" to set volume GUID.
 * tune.exfat: Add the option "U" / "-u" to set or print volume GUID.

BUG FIXES:
 * fsck.exfat: Fix some out-of-bounds memory accesses.
 * fsck.exfat: Change not to delete volume GUID directory entry.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nebula: update to 1.8.1

* https://github.com/slackhq/nebula/releases/tag/v1.8.1

Signed-off-by: Stan Grishin <stangri@melmac.ca>

lua-eco: update to 3.2.0

Some code refactoring has been done since 3.2.0 that
bufio.lua no longer exists, libeco.so and bufio.so have been added.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>