xz: update to 5.2.9

Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

tvheadend: Fix github warning about AUTORELEASE

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

tvheadend: add conditions for -O3 and LTO optimizations

Building for arc, mips and powerpc platforms fails if -O3 and LTO optimizations are enabled. This patch removes that option for everything other than arm and x86_64. These are known to work.
Fixes issue #19923.
Also fixes a typo in the description.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

bpfcountd: add initial package

bpfcountd was created to obtain packet statistics in larger networks
without stressing the cpu resources. bpfcountd will count the amount
of packages and bytes over time (for each defined rule). The rules
are defined using the tcpdump filter syntax (bpf). The collected
data is provided on a unix socket in plaintext.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Merge pull request #19993 from stangri/master-simple-adblock

simple-adblock: localizable error/warning messages

ci: only comment AUTORELEASE deprecation if exists

If it doesn't exists, don't confuse the contributors.

Signed-off-by: Paul Spooren <mail@aparcar.org>

stubby: bump to latest 0.4.2

Maintainer: @neheb (find it by checking history of the package Makefile)
Compile tested: aarch64/ipq8074
Run tested: aarch64/ipq8074

Description: stubby: bump to latest 0.4.2

Signed-off-by: Rudy Andram <rmandrad@gmail.com>

frr: update to 8.4.1

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

nss: update to 3.85

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1

add lighttpd-mod-rrdtool dependency on rrdtool1

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: lighttpd-1.4.67-4

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: lighttpd.conf vars, comments, guidance

lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: print stderr trace if validation fails

lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

microsocks: add low resource SOCKS5 TCP/IP only proxy server

Initial version 1.0.3

Signed-off-by: Mateusz Korniak <matkorgithubcom@ant.gliwice.pl>

Merge pull request #19992 from hnyman/wget

wget: update to 1.21.3

simple-adblock: localizable error/warning messages

* store all error/warning messages with the error text id so that
  they can be made localizable for the luci app

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #19987 from stangri/master-simple-adblock

simple-adblock: bugfix: detect dnsmasq ipset support

Merge pull request #19985 from stangri/master-https-dns-proxy

https-dns-proxy: improve performance on restart

wget: update to 1.21.3

Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19973 from julienmalik/borg

borgbackup: initial commit

snort3: update to 3.1.47.0-1

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #19980 from mhei/php8-update-8.1.13

php8: update to 8.1.13

simple-adblock: bugfix: detect dnsmasq ipset support

* Fixes https://github.com/openwrt/packages/issues/19978, thank you
  @parona-source for the report/patch!

Signed-off-by: Stan Grishin <stangri@melmac.ca>

https-dns-proxy: improve performance on restart

* instead of doing stop/start which involves restarting dnsmasq twice,
  kill the existing service instances on restart instead

Signed-off-by: Stan Grishin <stangri@melmac.ca>

v2raya: backports upstream fixes and add 3 new options

It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.6.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.30.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #19936 from hgl/acme

haproxy: use .crt as extension for certificates

haproxy: use .crt as extension for certificates

Signed-off-by: Glen Huang <i@glenhuang.com>

samba4: support both user map and valid users on same time

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

php8: update to 8.1.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #19938 from hgl/acme2

acme: ensure symlinks for renewed certificates

acme: ensure symlinks for renewed certificates

Signed-off-by: Glen Huang <i@glenhuang.com>

CI: deprecate $(AUTORELEASE) via comments

Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.

With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

librespeed-go: add new package

Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

borgbackup: add package for 1.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-pyfuse3: add package for 3.2.2

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-trio: add package for 0.22.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-sniffio: add package for 1.3.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-outcome: add package for 1.2.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-async-generator: add package for 1.10

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-exceptiongroup: add package for 1.0.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-sortedcontainers: add package for 2.4.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

xxhash: add package for 0.8.1

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

privoxy: fix postinst missing $

fixes: #19949

Signed-off-by: Josh Powers <powersj@fastmail.com>

pdns-recursor: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

gnupg: compile with -fcommon

This fixes a segfault because gnupg/g10/options.h struct opt
is otherwise not shared between the different compilation units,
resulting in opt.homedir being NULL when passed to make_filename.

$ gpg1 -i

gpg: signal 11 caught ... exiting
Segmentation fault

(gdb) bt
    #0  0x00007f17bb2185e2 in strlen (s=s@entry=0x0) at src/string/strlen.c:17
    #1  0x0000000000460ea0 in make_filename (first_part=first_part@entry=0x0) at gnupg-1.4.23/util/fileutil.c:174
    #2  0x000000000040ee42 in keydb_add_resource (url=url@entry=0x46bfe3 "secring.gpg", flags=flags@entry=4, secret=secret@entry=1)
        at gnupg-1.4.23/g10/keydb.c:238
    #3  0x00000000004062ee in main (argc=<optimized out>, argv=<optimized out>) at gnupg-1.4.23/g10/gpg.c:3323

Signed-off-by: Tjeu Kayim <15987676+TjeuKayim@users.noreply.github.com>

Merge pull request #19652 from wormi4ok/lang-golang-update-1-19-2

golang: update to v1.19.2

gphoto2: update to 2.5.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgphoto2: update to 2.5.30

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: update to v1.19.3

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>

Merge pull request #19948 from tvogel/ices-2.0.3

ices: Update to 2.0.3

Merge pull request #19956 from stangri/master-https-dns-proxy

https-dns-proxy: update Makefile package descrition

knot: update to version 3.2.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>

liburing: Update to v2.3

- Updated download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

tvheadend: update to git master 2022-11-20

- EPG database switched from v2 to v3. This commit updates OpenWrt init script to use the new database file.
- EPG database symlink created by OpenWrt config option is overwritten with a real file by tvheadend.
  The latest tvheadend commit included here fixes that.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

yggdrasil: bump to 0.4.7

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>

cloudflared: Update to 2022.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

https-dns-proxy: update Makefile package descrition

Signed-off-by: Stan Grishin <stangri@melmac.ca>

upmpdcli: bump to 1.5.19

Signed-off-by: Fabien Pozzobon <12074690+fpozzobon@users.noreply.github.com>

wifi-presence: Update to version v0.3.0

This version handles the new hostapd connect message format,
as introduced in: https://github.com/openwrt/openwrt/commit/8cb995445a26ee124e40b8ef97cc0ddd9d10f82a

Signed-off-by: Adam Williams <pwnfactory@gmail.com>

librespeed-cli: rename binary to librespeed-cli

upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

ices: Update to 2.0.3

This fixes a timing issue causing a playlist to be streamed as-fast-as-
possible until memory exhaustion, finally crashing ices and making it
basically useless.

This problem occurred in  the timing code in src/common/timing/ and is
probably related to libc header changes because ices 2.0.2 worked up until
OpenWrt 21.02.3 (at least) but failed in OpenWrt 22.03.2.

Signed-off-by: Tilman Vogel <tilman.vogel@web.de>

rclone: Update to 1.60.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gg: Update to 0.2.15

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

unbound: update to 1.17.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

ooniprobe: Update to 3.16.5

Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xfrpc: Update to 1.11.587

refactor tcp mux

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

Merge pull request #19900 from stangri/master-simple-adblock

simple-adblock: update to 1.9.3-1

Merge pull request #19932 from flyn-org/libgpg-error

libgpg-error: copy gpg-error.pc to staging directory

lm-sensors: Add support for dev_name formatted like "a000000.wifi"

Signed-off-by: Florence Riker <1460830@gmail.com>

sqlite3: Update to 3.40.0

1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libgpg-error: copy gpg-error.pc to staging directory

Packages like libassuan and libksba would not compile after updating
libgpg-error to 1.46. This was because gpg-error.m4 (and thus the affected
packages' configure scripts) relies on gpgrt-config, which in turn needs
access to gpg-error.pc. This modifies the libgpg-error build process to
copy gpg-error.pc to OpenWrt's staging directory, so that it is available
for subsequent dependent package builds.

Fixes: https://github.com/openwrt/packages/issues/19880
Signed-off-by: W. Michael Petullo <mike@flyn.org>

xray-core: Update to 1.6.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

uhubctl: update to 2.5.0

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>

jq: fix hash mismatch problem

change jq source proto to git to deal with hash mismatch problem.

Signed-off-by: Bradford Zhang <zyc@zyc.name>

nano: update to 7.0

Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19927 from hgl/acme

acme: make certificates use .crt as the extension

acme: make certificates use .crt as the extension

Signed-off-by: Glen Huang <i@glenhuang.com>

adguardhome: bump to 0.107.18

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Merge pull request #19915 from mhei/php8-pecl-xdebug-update

php8-pecl-xdebug: update to 3.1.6

frp: update to 0.45.0

Signed-off-by: van waholtz <brvphoenix@gmail.com>

ariang: update to 1.3.2

Signed-off-by: van waholtz <brvphoenix@gmail.com>

pugixml: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

spdlog: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libebml: remove

Since libmatroska was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmatroska: remove

Since gerbera was removed, this is unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nextdns: Update to version 1.38.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

php8-pecl-xdebug: update to 3.1.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #19905 from ne20002/bcp38

bcp38: migrate to nftables

bcp38: migrate to nftables

Signed-off-by: Stefan Brusch <ne20002@gmx.ch>

yq: Update to 4.30.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ovpn-dco: bump package to fix kernel 6.1 compile

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>

siit: fix kernel 5.16 compile

siit-1.2/siit.c:1379:9: error: implicit declaration of function
'random_ether_addr' [-Werror=implicit-function-declaration]
 1379 |         random_ether_addr(dev->dev_addr);
      |         ^~~~~~~~~~~~~~~~~

Linux 3.6 renamed random_ether_addr to eth_random_addr [0]
Linux 5.16 removed random_ether_addr [1]

[0]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a4dd594982a321699000218715e28664ec49169
[1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ba530fea8ca1b57ee71d4e62f287a5d7ed92f789

Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>

btop: Update to 1.2.13

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

btop: append `--utf-force` argument by default

btop reads the `LANG` env variable to delect if the system has utf8
support, which exists on common Linux distributions.

However, OpenWrt does not ship it, and results in btop reporting
"No UTF-8 locale detected!". Users have to manually pass `--utf-force`
to make btop happy.

To make it OOTB, append `--utf-force` argument by default via alias.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

expat: update to 2.5.0

Fixes: CVE-2022-43680
Added GitHub mirror.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: update to v1.19.2

Includes fixes for security vulnerabilities:
 * [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
 * [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
 * [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
 * [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
 * [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps

Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613

Signed-off-by: Stanislav Petrashov <s@petrashov.ru>

simple-adblock: update to 1.9.3-1

* introduce the new curl_max_file_size option
* prevent warnings/errors to be displayed each time the load_environment
  is invoked
* better organize dl_command appendixes
* implement support for downloading/using external dnsmasq config file
* refactor adb_check and adb_allow for better readability
* update default values for some options in the uci_load_validate call
* update reload trigger to include curl options

Signed-off-by: Stan Grishin <stangri@melmac.ca>