mosquitto: update to 2.0.18

Switch to CMake. Allows faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tesseract: update to 5.3.3

Fixes compilation with GCC13.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libs/xmlrpc-c: restore support for xmlrpc-c-libxml2 package

Remove xmlrpc-c Package definition and let both xmlrpc-c-internal
and xmlrpc-c-libxml2 provide xmlrpc-c.

Also add a patch removing the unnecessary linking.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libs/xmlrpc-c: fix xmlrpc-c-abyss and xmlrpc-c-server-abyss packages

When building abyss feature, the following error occurs:

xmlrpc_server_abyss.c:783:13: warning: format not a string literal and
no format arguments [-Wformat-security]
783 | xmlrpc_faultf(envP, error);

Add a patch fixing the format parameter.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

libs/xmlrpc-c: update to 1.54.06

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>

perl: update to version 5.38.2

removed one that no longer exists in perl-5.38.2

updated one patch

fixed missing builtin.pm

Signed-off-by: Andy Syam <privasisource@gmail.com>

netbird: update to version 0.24.3

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

aardvark-dns: update to version 1.9.0

Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

netavark: update to version 1.9.0

Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

podman: update to version 4.8.0

Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

crun: update to version 1.12

Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #22645 from yggdrasil-openwrt/yggdrasil-2023-11-11

yggdrasil: overhaul package with netifd support

fail2ban: Fix compatibility with Python 3.11

This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wheel: Update to 0.42.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-setuptools: Update to 69.0.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyasn1: Update to 0.5.1

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-idna: Update to 3.6

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

node: upgrade to v20.10.0

Notable Changes
* --experimental-default-type flag to flip module defaults
* Detect ESM syntax in ambiguous JavaScript
* New flush option in file system functions
* Experimental WebSocket client
* vm: fix V8 compilation cache support for vm.Script

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

python-jsonschema: Update to 4.19.1, update list of dependencies

This also adds a test.sh script for the packages feed CI.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonschema-specifications: Add new package

From the README:

JSON support files from the JSON Schema Specifications (metaschemas,
vocabularies, etc.), packaged for runtime access from Python as a
referencing-based Schema Registry.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-referencing: Add new package

From the README:

An implementation-agnostic implementation of JSON reference resolution.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-rpds-py: Add new package

From the README:

Python bindings to the Rust rpds crate for persistent data structures.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

domoticz: update to 2023.2

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

external-protocol: rename and update cni-protocol

cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.

I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

yggdrasil: bump to 0.5.4

Signed-off-by: William Fleurant <meshnet@protonmail.com>

Merge pull request #22762 from pprindeville/strongswan-update-5.9.12

strongswan: Update to 5.9.12

Merge pull request #22768 from Forceu/travelmate-hrewards

travelmate: Add h-reward hotel wifi autologin

travelmate: Added H-Rewards hotel login
Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>

strongswan: Update to 5.9.12

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

yggdrasil: bump to 0.5.3

Signed-off-by: William Fleurant <meshnet@protonmail.com>

dhtd: update to 0.2.5

Signed-off-by: Moritz Warning <moritzwarning@web.de>

yt-dlp: bump to version 2023.11.16

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

aria2: bump to version 1.37

Release notes:
- https://github.com/aria2/aria2/releases/tag/release-1.37.0

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

luajit2: update to v2.1-20231117

Signed-off-by: Javier Marcet <javier@marcet.info>

mc: bump to release 4.8.30

* News: http://midnight-commander.org/wiki/NEWS-4.8.30
* refresh patches
* remove obsolete / adapt changed options

Signed-off-by: Dirk Brenken <dev@brenken.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.8.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-core: Update to 5.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.40.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.59.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #22746 from stangri/master-https-dns-proxy

https-dns-proxy: fix unintentional call of service_stopped in boot()

Merge pull request #22753 from stangri/master-adblock-fast

adblock-fast: bugfix: call to missing function

adblock-fast: bugfix: call to missing function

* fix call to is_number to is_integer
* improve boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>

upmpdcli: Update to 1.8.6

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libupnpp: Update to 0.24.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libnpupnp: Update to 5.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #22553 from maxberger/master

ddns-scripts: Fix Route53 provider

ddns-scripts: Fix Route53 provider

This fixes the Invalid Resource Record: FATAL problem: ARRDATAIllegalIPv4Address error message described in https://forum.openwrt.org/t/route53v1-script-error/160068

Maintainer: @chris5560, @maxberger, @dibdot
Tested: Checked on local system
Signed-off-by: Max Berger <max@berger.name>

banip: update 0.9.2-4

* fix: accidently upload a faulty urlhaus feed regex in the former commit

Signed-off-by: Dirk Brenken <dev@brenken.org>

banip: update 0.9.2-3

* fix the urlhaus regex
* fix a possible init race condition

Signed-off-by: Dirk Brenken <dev@brenken.org>

https-dns-proxy: fix unintentional call of service_stopped in boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>

docker-compose: Update to version 2.23.3

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.23.2

Signed-off-by: Javier Marcet <javier@marcet.info>

python-trove-classifiers: Update to 2023.11.14

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-argcomplete: Update to 3.1.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #22740 from stangri/master-adblock-fast

adblock-fast: bufgix: fix boot()

Merge pull request #22737 from stangri/master-https-dns-proxy

https-dns-proxy: bugfix: prevent erros from boot()

adblock-fast: bufgix: fix boot()

* fix boot()
* reintroduce procd_boot_delay variable to control delay of service
  start on boot
* introduce `check_lists` command to check enabled block-lists for
  domain(s)
* use config_get_bool instead of config_get for boolean options

Signed-off-by: Stan Grishin <stangri@melmac.ca>

https-dns-proxy: bugfix: prevent erros from boot()

* fixes https://github.com/openwrt/packages/issues/22674
* rename resolver_health_check to is_resolver_running for readability
* reorder functions in the init file by name

Signed-off-by: Stan Grishin <stangri@melmac.ca>

perl: update to version 5.38.0

removed some sources to download perl. I believe I only need one source to download perl at https://www.cpan.org/src/5.0. I see some Linux distributions use that source to download.
change the position of PKG_MAINTAINER to make it neater and prettier

perform a patch refresh
removes some patches that have been applied in perl-5.38.0 as well as patches that are no longer used in perl-5.38.0

added one patch Perl/perl5@ba6e2c3 this fixes the issue regcomp*.c, regexec.c - fixup regex engine build under -Uusedl

provided updates and synchronized libc.config base.config version.config to perl-5.38.0
removed deprecated arybase in perl-5.29.4

Signed-off-by: Andy Syam <privasisource@gmail.com>

Merge pull request #22721 from jcassette/fix-22691

unbound: fix `create_host_record_from_host` error when `dns` is not set

sockread: cleanup code and allow arguments

* cleanup code style
* allow arguments to be passed from the command line

Signed-off-by: Moritz Warning <moritzwarning@web.de>

rust: Update to 1.74.0

- Bumped libc to 0.2.147 to align deps.
- Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

quassel-irssi: drop this package

Based on the discussion on GitHub [1], we found out that quassel irssi is not maintained anymore, thus it is dead and confirmed by developers [2]. There is no reason to keep this package anymore here in our repositories, because otherwise we will need to take care of it and thats not what is going to happen.

[1] https://github.com/openwrt/packages/pull/22605
[2] https://github.com/phhusson/quassel-irssi/issues/36

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

quasselc: drop unmaintained project

This project [1] has the latest commit from 2017, it seems like we are maintaing this software here, but we don't have enough people to do so.

Let's drop this package.

[1] https://github.com/phhusson/QuasselC

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #22724 from brvphoenix/sing-box

sing-box: update to 1.6.6

unbound: fix `create_host_record_from_host` error when `dns` is not set

The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>

Merge pull request #22723 from mhei/fix-gensio-build

gensio: add patches/fixes to workaround swig and python detection

sing-box: update to 1.6.6

Changes: https://github.com/SagerNet/sing-box/compare/v1.6.4...v1.6.6

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

Merge pull request #22706 from mwarning/master_dhtd_022

dhtd: update to 0.2.4

Merge pull request #22709 from gladiac/haproxy-2.8.4

haproxy: update to v2.8.4

gensio: add patches/fixes to workaround swig and python detection

The built-in swig/python detection does not works well
when system-wide m4 macros are available with same name
but different content.
So make the configure stuff compatible, resp. workaround
a little bit.

It seems also necessary to pass the PYTHON_LIBS environment
during the compile phase.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dhtd: update to 0.2.4

* add option to execute a script for each result

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #22713 from zhaojh329/lua-eco

lua-eco: update to 3.1.0

Merge pull request #22625 from ecammit/python_requirements_for_homeassistant

Added python-fnv-hash-fast, python-lru-dict, and python-orjson

acme-acmesh: Update to 3.0.7

Signed-off-by: Kevin White <kwhite@kevbo.org>

lua-eco: update to 3.1.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

python-orjson: Added for v3.9.10

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

python-lru-dict: Added for v1.3.0

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

gl-puli-mcu: Add power monitoring for XE3000 (Puli AX) variant

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>

gl-puli-mcu: Fix compilation warning

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>

haproxy: update to v2.8.4

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

openvpn: update to 2.6.8

This is a bugfix release containing security fixes.

Security Fixes (included in 2.6.7):

CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly use a send buffer
after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer.
All configurations using TLS (e.g. not using --secret) are affected by this issue.

CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly restore --fragment configuration
in some circumstances, leading to a division by zero when --fragment is used.
On platforms where division by zero is fatal, this will cause an OpenVPN crash.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.8/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

Merge pull request #22701 from mhei/gensio-fix-python-detection

gensio: add patch to fix python detection

gensio: add patch to fix python detection

Upstream PR: https://github.com/cminyard/gensio/pull/69

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dnsproxy: Update to 0.59.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gummiboot: release bump

Changes:
 - fixes conflicts with EFI headers mentioned in issue #22433

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

netbird: update to version 0.24.2

Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.24.2

Also fixes issue of not being able to build with musl (>1.2.4)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

libzip: update to 1.10.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

hcxtools: update to 6.3.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

hcxdmptool: update to 6.3.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

elektra: fix compilation with GCC13

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snort3: fix compilation with gcc13

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

yggdrasil: support public key in config generation

Signed-off-by: William Fleurant <meshnet@protonmail.com>

liburing: Update to v2.5

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #22688 from mcha-forks/master

tailscale: Update to 1.54.0

Merge pull request #22244 from tiagogaspar8/strongswan_replay

strongswan: swanctl: add support for replay window

strongswan: swanctl: add support for replay window

Add support for replay window configuration in UCI.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>

tailscale: Update to 1.54.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

avahi: remove compat library

It seems this is meant for distributions that lack mdnsresponder. It's
heavier than it as dbus is required.

Since this happens to conflict with mdnsresponder, just remove it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>