zabbix: update to 4.0.11

Updated to 4.0.11 LTS version.

Deleted 003-change-user-and-foreground.patch in according to [ZBX-10611] fixed changing process user owner on startup in foreground when AllowRoot disabled.

Compile tested: Yes, lantiq
Run tested: Yes, lantiq

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>

ruamel-yaml: Update to version 0.15.100

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 907287b)

fastd: update URL and PKG_SOURCE_URL

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

libuecc: update URL and PKG_SOURCE_URL

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

golang: Update to 1.12.9

Includes fixes (in 1.12.8) for:
CVE-2019-14809 - https://nvd.nist.gov/vuln/detail/CVE-2019-14809
CVE-2019-9512 - https://nvd.nist.gov/vuln/detail/CVE-2019-9512
CVE-2019-9514 - https://nvd.nist.gov/vuln/detail/CVE-2019-9514

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

clamav: update to version 0.101.3

Correct SPDX License Identifier

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from e19f753be5981f94a81a61d2ba8cb190d245c5de)

clamav: don't install dev files into package

This avoids copying /usr/include, unversioned *.so files, pkgconfig,
/usr/lib/*.la, and the build-time libs/cflags configuration utility
clamav-config.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 815e05e38eddd0933d06078e4bbf5ba2fd95457f)

clamav: avoid host pickup of libxml2

If libxml2 is installed in the host, then the host library is used and
compilation fails.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 199ccc94756bc6c577bf4be96014c27bf12ea3ef)

yggdrasil: fix #9712 upstream dependency with branch develop

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 07625bb6a7daf5af49a0a303ff42d426ebe43319)

yggdrasil: properly call the daemon with procd

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 9436ff426171d5ff4f3b4d31edf5c7db7b08a78b)

yggdrasil: match contributing.md order of config section

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from fee12663cb4b67d790f54cbb12c262e019418293)

yggdrasil: package LICENSE filename, update license id name

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from e08d17fbe043ad7ae73aa004ee57ad6a425db846)

yggdrasil: bump to 0.3.6

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 8128ef3793beb16d7b72154afa37ed7b60396bc6)

squashfs-tools: need to include sys/sysmacros.h

The inclusion of <sys/sysmacros.h> by <sys/types.h> was deprecated and
removed.  This is causing major, minor, and makedev to be undefined.

The patch is an upstream commit fixing it.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #9764 from stangri/19.07-simple-adblock

[19.07] simple-adblock: support for varios DNS resolvers/options

[19.07] simple-adblock: support for varios DNS resolvers/options

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #9762 from jefferyto/host-python-mac-openwrt-19.07

[openwrt-19.07] python,python3: Fix host Python compilation for macOS

python,python3: Fix host Python compilation for macOS

* Remove $$$$(pkg-config --static --libs libcrypto libssl) from
  HOST_LDFLAGS

  Having this leads to an "unknown type name 'u_int'" error on Mac.
  Removing it doesn't appear to affect Python's ability to find
  buildroot LibreSSL.

* Change -Wl,-rpath=... to -Wl,-rpath,... in HOST_LDFLAGS

  The equals sign version is not supported by the Mac linker (appears to
  be an GNU extension). The comma version is supported; -rpath and its
  argument will be separated by a space when passed to the linker.

* Add ac_cv_header_libintl_h=no to HOST_CONFIGURE_VARS for Mac

  Python on Mac doesn't expect to use libintl, but if gettext-full is
  compiled for host, it will try, leading to undefined symbol errors
  during compilation. This prevents configure from finding libintl.h.

Fixes #7171.
Fixes #9621.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9714 from jefferyto/python-twisted-19.7.0-openwrt-19.07

[openwrt-19.07] python-twisted: Update to 19.7.0, refresh patches

Merge pull request #9751 from champtar/openwrt-19.07

[19.07] prometheus-node-exporter-lua: add target & system to OpenWrt collector

prometheus-node-exporter-lua: add target & system to OpenWrt collector

Before:
node_openwrt_info{revision="r10756+1-7546be6007",model="GL.iNet GL-AR150",id="OpenWrt",board_name="glinet,gl-ar150",release="SNAPSHOT"} 1

After:
node_openwrt_info{revision="r10756+1-7546be6007",target="ath79/generic",board_name="glinet,gl-ar150",id="OpenWrt",model="GL.iNet GL-AR150",release="SNAPSHOT",system="Atheros AR9330 rev 1"} 1

Fixes #9730, replace #9735

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit a14bed1bc959116617b0eb75d2d9a46551a480e6)

coova-chilli: disable parallel build

Parallel building is causing a failure because it executes some
commands, such as patch, more than once.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

travelmate: update 1.4.11

* fix logical glitch in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 751f312334b4d30f05059560f912c9b1bfdd1aca)

travelmate: update 1.4.10

* add missing dnsmasq dependency
* add a captive portal auto-login hook (configurable via uci/LuCI),
  you could reference an external auto-login script - see readme
* provide an auto-login script for german ICE hotspots
  (/etc/travelmate/wifionice.login), requires 'curl'
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5a2a4fa20a29d39aae91448c632be447444aa11f)

python-twisted: Update to 19.7.0, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9731 from jefferyto/ci-improvements-openwrt-19.07

[openwrt-19.07] CI fixes and improvement

circleci: provide prereq output in the build log

Commit 200f2666fb1c ("sdk: fix GCC and Python dangling symlinks") in
master tree has forced prereq build step, which is now failing on the CI
as the Docker CI images are missing Python3 support, so now every build
fails with the following error:

 make: *** [staging_dir/host/.prereq-build] Error 1

which is not helpful due to the silenced output of `make defconfig >
/dev/null`, so let's add `make prereq` build step in order to get
something usable next time.

Reported-by: Karl Palsson <karlp@etactica.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: use Docker image v1.0.4

This new image which is already available contains Python3 support.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: make logs of build failures more readable

Due to concurrent build, it's currently not that easy to find the proper
reason for the package build failure, so let's just build the failing
package with -j1 in order to provide more human readable build log
failures.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: add python3 package into Docker image

We've switched to Python3 some time ago so it would make sense to
provide Python3 in the CI image as well.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

net/mosquitto: bump to 1.6.4

Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/

Fixes a regression in persistent session handling, and various other
regressions related to the mqtt5 support.

Signed-off-by: Karl Palsson <karlp@etactica.com>

zeromq: update to version 4.1.7 (security fix)

Fixes:
CVE-2019-13132
Added CPE ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 92bf4b40126438c77f99a758ba7884436314ee12)

gddrescue: Add uClibc-ng support

It turns out, this breaks only when compiling with both uClibc-ng and
uClibc++. If the libc or libc++ gets swapped out, it compiles fine.

libstdcpp is fine because it already undefs these macros. The actual
bug is probably in uClibc-ng but this is a fine workaround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d6af6a4d75bd520510aaf2ef97b89024b427cac3)

fossil: Remove

The maintainer is inactive, in addition to this package being woefully out
of date. It probably does not work properly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 196976cdf0f7206caea7c680e08046b0028aaf01)

Merge pull request #9680 from mrstegeman/remove

node-mozilla-iot-gateway: Remove package

node-mozilla-iot-gateway: Remove package

As the WebThings Gateway moves into a full-fledged router
distribution, it no longer makes sense to have this as a
standalone package, as it now modifies system-wide settings.

References #9629
References mozilla-iot/gateway#2060
References https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/452

Signed-off-by: Michael Stegeman <michael@stegeman.me>

Merge pull request #9656 from liudf0716/kcptun

[openwrt-19.07]kcptun: add new package

kcptun: add new package

kcptun is a stable & secure tunnel based on kcp with N:M multiplexing.
https://github.com/xtaci/kcptun

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

ntpdate: use uci configured servers instead of static list

If we're going to have a list of ntp servers, we should at least respect
them.  Fallback to the original static list if no configured servers are
found.

Signed-off-by: Karl Palsson <karlp@etactica.com>

subversion: update to the latest release

Update to the latest maintenance release, fixing CVE-2018-11782 and
CVE-2019-0203 among other things.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry-picked from commit 53f33e5e74e648cd1b1435d354ccd214098d885b)

btrfs-progs: scan devices in preinit instead of init script

There is no gain to do device scan in init. Commonly we want to always
scan BTRFS devices to ensure that after boot raids are correctly linked.
It should be done before any init script tries to mount any raid FS.

Comparing init scripts and preinit scripts there are I think two primary
considerations. First is if user is expected to restart/reload/stop
given service on will. I think that there is no such reason for this as
user can easily enough just call btrfs utility it self. Second
consideration is if it makes sense to have it optional. This means if we
want to have ability to enable and disable given service. I think that
there is no such need in this case. It is pretty much doing nothing if
you don't have BTRFS FS connected and when you have you probably want to
scan it.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

btrfs-progs: use box version of btrfs tool (busybox like)

This instead of building every tool separately builds one btrfs binary
and additional tools are links to this binary. This is same approach as
busybox is using.

This splits list of tools to two. boxprogs are tools that are boxed to
code btrfs binary and progs are tools that are not.
This also overload default all make target of Build/Compile and instead
builds (unified) btrfs.progs and separate progs.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

btrfs-progs: Update to version 5.2.1

- Move Depends under URL
- Fix PKG_LICENSE to use correct SPDX License Identifier instead of
deprecated one

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libsigar: Add missing header

The new version of musl does not include this header internally anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b97f32ec4401dba64ea80d0c066fcb79658a58b7)

libsigar: Remove deprecated rindex function

Optionally unavailable with uClibc-ng.

Switched to local tarballs. .xz is smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b134eb3800f174376a90a382000a5a7af5bea619)

mt-st: Add missing header

New version of musl no longer includes this header internally.

Removed several unnecessary variables in Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 4cda68c72b54885e0465411ba8667e543771d2e2)

xz: Remove bash dependency

Bash is not needed here. These scripts are POSIX compliant.

This was originally added as the configure script looks for /bin/bash
locally. Passing gl_cv_posix_shell overrides this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d0e3aa7493edf6110ca80134bd04c839ecc09459)

Merge pull request #9661 from gladiac1337/haproxy-2.0.3-2

[openwrt-19.07] haproxy: Update all patches for HAProxy v2.0.3

Merge pull request #9649 from jefferyto/python-pyasn1-0.4.6-openwrt-19.07

[openwrt-19.07] python-pyasn1: Update to 0.4.6

Merge pull request #9651 from jefferyto/python-pyasn1-modules-0.2.6-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.6

haproxy: Update all patches for HAProxy v2.0.3

- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.3.html)
- Raise PKG_RELEASE to 2

Signed-off-by: Christian Lachner <gladiac@gmail.com>

haproxy: Get rid of bashisms from get-latest-patches.sh

Plus some other shellcheck cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

findutils: Add missing header

New version of musl no longer internally includes this header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8ca5cf042d6e08f1e7b9f86cb8338d2982a9d296)

findutils: Fixed up LICENSE information.

Also cleaned some whitespace.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fca20e2b2fdf4a83db8e2c7904225422b11f0d2e)

python-pyasn1-modules: Update to 0.2.6

Requires python-pyasn1 0.4.6 (#9649).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyasn1: Update to 0.4.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9642 from noblepepper/gcc-7.4.0

gcc: fix build on x86 targets

gcc: fix build on x86 targets

Signed-off-by: Noble Pepper <noblepepper@gmail.com>

Merge pull request #9627 from jefferyto/slide-switch-0.9.5-openwrt-19.07

[openwrt-19.07] slide-switch: Update to 0.9.5

php7: update to 7.2.21

This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

gnutls: updated to 3.6.9

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

slide-switch: Update to 0.9.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9624 from micmac1/19.07-maria10226

mariadb (19.07): security bump to 10.2.26

mariadb: security bump to 10.2.26

mariadb: security bump to 10.2.26

New upstream release. Addresses:

  CVE-2019-2805
  CVE-2019-2740
  CVE-2019-2739
  CVE-2019-2737
  CVE-2019-2758

Package updates:

  - includes "THIRDPARTY" in PKG_LICENSE_FILES
  - drops client_ed25519 as a dynamic plugin and install it with the lib
    as per upstream decision
  - refreshes patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

ulogd: Backport JSON network patch

It was requested in #9065 .

Cleaned up Makefile slightly.

Removed inactive maintainer.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 23a36b00e243137d50b8c6c0edd58f4446b6714e)

bcrypt: add python-cffi/host build dependency

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 86fb008751718c4c28d4031006289850a0ca393d)

Merge pull request #9567 from blocktrron/openwrt-19.07

[19.07] fastd: fix segmentation fault with musl >1.1.20

fastd: fix segmentation fault with musl >1.1.20

When compiled with musl >1.1.20, fastd will crash in case it can't
resolve a peers hostname. This is due to a changed implementation of
freeaddrinfo in musl 1.1.21 onwards.

This segfault is fixed by not calling freeaddrinfo in case the supplied
pointer is null.

Signed-off-by: David Bauer <mail@david-bauer.net>

Merge pull request #9544 from jefferyto/prometheus-fix-mips64-build-openwrt-19.07

[openwrt-19.07] prometheus: Fix build for mips64/mips64el

netifyd: Don't build on uClibc-ng

This absolutely needs symbols from libresolv, which uClibc-ng does not
support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0a3ebb32a134df9cfb4cd0d80e5ae5dc259f314b)

haproxy: Update HAProxy to v2.0.3

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

opendkim: Fix compilation with uClibc-ng

res_nsend and res_send are both not available in uClibc-ng as configured
in OpenWrt. Having this function return an error is the only sensible way
to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b5b776fc9ad807739977e82f809c3fe7b485d262)

python-cachelib: package added

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

prometheus: Fix build for mips64/mips64el

Prometheus uses an older version of fsnotify, which uses a system call
(unix.InotifyInit) that is not implemented for mips64/mips64el.

This patches Prometheus to use a newer version of fsnotify that uses a
different system call (unix.InotifyInit1) that should be available on
all Linux systems.

Fixes #9494.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: add patch for CVE-2018-20852

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #9533 from jefferyto/python-musl-find_library-openwrt-19.07

[openwrt-19.07] python,python3: Fix ctypes.util.find_library()

python,python3: Fix ctypes.util.find_library()

Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

tgt: update to 1.0.79

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry-picked from 9c5d11a9daac433d6691288a970388c374a7589d)

golang: Update to 1.12.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

diffutils: provide diff, cmp as alternatives

Resolves openwrt/packages#6361

Resolves openwrt/packages#9524 by backporting from master b02e4eafd

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

ddns-scripts: various fixes

* use '$ddns_rundir' in 'get_service_data' for pipe creation, fix #8971
* add missing local variables in 'get_service_data'
* change DNS server verification with drill in 'verify_host_port',
fix/supersed #8935
* remove needless cat calls in 'verify_host_port'
* set cloudfare TTL to min. 120 seconds, fix #7745
* bump/align package version number

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2e06c4ec93acb0f941b4aabe79df4437b9520110)

ddns-scripts: modify deSEC update url

the latest update url format for deSEC is
http(s)://update.dedyn.io/update?username=[USERNAME]&password=[PWD]

Signed-off-by: James Qian <sotux82@gmail.com>
(cherry picked from commit e4951651e2c57c86e681d239dc98887f7970bc45)

softethervpn5: update to 5.01.9671

* update to 5.01.9671
* switch to release tar's
* add cmake iconv and musl patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-pick from 46c320f18f8f6715d4e578ce8015de6a5a249843)

softethervpn: Really fix iconv support

softethervpn overrides nls.mk by defining its iconv functions. This only
works if the libc has iconv. In addition, it does not allow external
libiconv usage. TARGET_LDFLAGS is also the wrong place to add -liconv.

Removed SSL3 patch. It was needed for OpenSSL 1.0.2 but not anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fb480e297c04f6e428324cb787d276c9c3cfe0a6)

coova-chili: Fix compilation with newer GCC

Added -Wno-error to fix.

Also added patch to fix compilation without deprecated OpenSSL APIs.

Added PKG_BUILD_PARALLEL for faster compilation.

Switched libcyassl to libwolfssl.

Reorganized makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 266b0ba9d9c21e3a879aaa28f8ba93448d4ea0a4)

dosfsutils: Properly fix iconv linking

Necessary when using libiconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbfe49d7ffeae87e3d6538ab49cd7dea3b887142)

linknx: Update iconv patch to work with libiconv-full

libiconv-full requires a const char for its second parameter. Otherwise
-fpermissive error is thrown.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ee94a1e9120e369666909de97ddf68966d61f8e2)

linknx: Fix compilation with libiconv

This applies to uClibc-ng and libiconv-full

Switched to building with uClibc++.

Fixed license information.

Fixed BUILD_DEPENDS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fec9257655803cdb704fa4fbb0b03b496c2290cc)

elektra: Fix compilation with uClibc-ng

Add patch that checks for libiconv instead of iconv. nls.mk handles this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50719a639a89a3da57b2fbdf393cee03837dd640)

squid: Fix compilation with GCC9

by passing -Werror. Also added -latomic as some platforms need it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from c18cb9e7c57a1806017a473c2a076c2a5d9aabee)

gddrescue: Do not build with uClibc-ng

From the developer:

It seems that uClibc-ng is defining fgetc, fputc, feof, and ferror as
macros and not including them in std.

IMO this is a bug in uClibc-ng (maybe caused by lack of clarity in the
C++ standard), because even the C functions that are alowed to be
defined as macros (putc, getc) should be included in std for
consistency. Just imagine the chaos if std::getc were defined or
undefined depending on how it is implemented.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(9172e2828f29d1c6de3997ab7b0246bf351d33d7)

flashrom: Add ARC support

Mainly endian definitions are needed.

Removed sys/io.h patch. It's a GNU header unsupported by uClibc-ng.

Cleaned up Makefile slightly.

Added HTTPS everywhere.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 12378cd4d3d96975f1066e26089500cac73ac68e)

open2300: Switch to GitHub fork

It applies the single patch here as well as adding some fixes.

The upstream project is dead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d2af82a6f599f781b17e0c6c3967572242caed00)

apinger: Update to latest git revision

This project seems abandoned. Updated to latest version.

Also cleaned up the Makefile quite a bit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from dff6d2639eabb93e2d3782bfc1262bb6f7dccc33)

fbzmq: Fix compilation with newer GCC

Added -faligned-new to fix compilation.

As fbzmq is passing -Werror, fixed compilation with newer GCC versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50f865714127755dde89294a68215a6c73d200e8)

node-mozilla-iot-gateway: Remove unnecessary step

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1314b86231f34a25619523d1656e127bbb1262fe)

Merge pull request #9504 from jefferyto/circleci-usign-openwrt-19.07

[openwrt-19.07] CircleCI: Add support for usign signatures

oniguruma: fix CVE-2019-13224 & CVE-2019-13225

The patches were taken from upstream commits.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

CircleCI: Add support for usign signatures

It appears snapshot target builds have switched from GPG signatures
(sha256sums.asc) to usign signatures (sha256sums.sig).

This adds support for verifying these usign signatures. (GPG signatures
will also be verified if found.)

This also restores the alphabetical ordering of packages to be installed
by apt-get.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyrsistent: add a new package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>