frr: add support for BGP MD5 authentication

You have to enable the CONFIG_TCP_MD5SIG kernel config option to be able
to use the BGP MD5 authentication.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

node: bump to v20.14.0

Notable Changes
* src,permission: throw async errors on async APIs (Rafael Gonzaga)
* (SEMVER-MINOR) test_runner: support forced exit (Colin Ihrig)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

hev-socks5-server: update to 2.6.6

Signed-off-by: Ray Wang <r@hev.cc>

acme-common: export main_domain

To avoid confusion, first create the main_domain var and only then export it.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

acme-common: migrate deprecated options

Add to uci-defaults script a migration from old deprecated options to new:
  use_staging to staging
  keylength to key_type
  remove standalone
  add missing validation_method

We still support the old options in the acme.init if old config was copied after installing of the newer version of the acme-common.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

at: update to 3.2.5

- Use upstream tarball
- Update project URL
- Drop obsolete patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

ffmpeg: fix compilation with gcc14

Requires disabling a warning as there's an incompatibility between musl
ioctl and v4l2_ioctl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

apache: update to 2.4.59

- Remove obsolete OpenSSL patch - upstream handles it by itself now
- Refresh another patch
- Remaining patches are unaffected

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

c-ares: update to 1.29.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

zstd: update to 1.5.6

- Adopt the package

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

fping: update to 5.2

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

gst1-libav: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.24.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

prometheus-node-exporter-lua-hostapd_stations: fix not reporting metrics

- fix incorrect interface name mapping in hostapd_stations exporter

Signed-off-by: Balázs Urbán <szalab9@gmail.com>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

prometheus-node-exporter-lua: add missing libubus-lua dependency

Fixes a315c40b7232bbc83582685c98e41466d84d7a35

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

whois: update to 5.5.23

- Switch to local tarball

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

wsdd2: fix compilation with GCC14 and 64-bit

struct msghdr under musl uses padding ints for 64-bit, which means we
can't direct initialize like this. Switch to initializing each member
explicitly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: update to 3.7.4

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

unrar: update to 7.0.9

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

lynx: update to 2.9.2

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

erlang: update to 27.0

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

imagemagick: update to 7.1.1.33

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

hwdata: update to 0.383

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

libssh: fix bad pkgconfig paths

Avoid leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libjpeg-turbo: update to 3.0.3

Signed-off-by: krant <aleksey.vasilenko@gmail.com>

banip: update 0.9.6-3

* fixed concurrent, too high nft loads during feed processing (seen in LuCI frontend)

Signed-off-by: Dirk Brenken <dev@brenken.org>

collectd: enable write_prometheus plugin

Signed-off-by: Louis Dupré Bertoni <github@louisdb.xyz>
[PKG_RELEASE bump added]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

cargo-c: New host package

It is useful to build crates as C libraries.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

Merge pull request #24068 from stangri/master-ngtcp2

ngtcp2: drop maintainership

Merge pull request #24271 from neheb/m

ngtcp2: fix bad pkgconfig paths

gst1-libav: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.24.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

pdns: update to 4.9.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #24265 from muink/master

sing-box: update to 1.9.0

acme-common: create a symlink to webroot

The webroot option was deprecated and users should use the /var/run/acme/challenge by default.
The folder itself should be exposed to web.
The simplest way to do this is to create a symlink from /www.
This is a default web location for most routers and should cover most cases.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24269 from neheb/o

openblad: avoid leaking host paths

ngtcp2: fix bad pkgconfig paths

Avoids leaking host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openblad: avoid leaking host paths

Potentially fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

banip: update 0.9.6-2

* fix regex for nixspam and sslbl feed
* list the pre-routing limits in the banIP status
* small fixes and log improvements

Signed-off-by: Dirk Brenken <dev@brenken.org>

sing-box: update to 1.9.0

Signed-off-by: Anya Lin <hukk1996@gmail.com>

Merge pull request #24251 from mhei/php8-update-to-8.3.7

php8: update to 8.3.7

pciutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: update to 2.6.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>

haproxy: update to v3.0.0

- New major LTS release
- Update haproxy PKG_VERSION and PKG_HASH
- Enabled QUIC support. It still has to be enabled in the haproxy config
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python-selinux: update to 3.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.15.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.49

Signed-off-by: W. Michael Petullo <mike@flyn.org>

croc: update to 10.0.5

breaking changes to fix several CVEs. croc v10.x.x cannot be used with
with previous croc versions.

release notes:
https://github.com/schollz/croc/releases/tag/v9.6.16
https://github.com/schollz/croc/releases/tag/v9.6.17
(9.6.16 + .17 were later rereleased as 10.0.0)
https://github.com/schollz/croc/releases/tag/v10.0.0
https://github.com/schollz/croc/releases/tag/v10.0.1
https://github.com/schollz/croc/releases/tag/v10.0.2
https://github.com/schollz/croc/releases/tag/v10.0.3
https://github.com/schollz/croc/releases/tag/v10.0.4
https://github.com/schollz/croc/releases/tag/v10.0.5

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

attr: switch to normal tarballs

Avoids having to use autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acl: switch to normal tarballs

Avoids having to patch autoconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mg: fix compilation with GCC 14

Addressing compile errors with gcc-14

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

php8: update to 8.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

treewide: update packages to use new toolchain define

Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

golang: Update to 1.22.3

go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.27.10

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

frr: merge frr-libfrr and frr-vtysh to frr

frr-libfrr and frr-vtysh are required components, which makes their
menuconfig entries obsolete. Merge them in the frr package.

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: enable frr-vtysh by defalult and hide it

Fixes [1]
lib/vty.c: In function 'vty_mgmt_resume_response':
lib/vty.c:195:27: error: 'VTYSH_READ' undeclared (first use in this function); did you mean 'VTY_READ'?
  195 |                 vty_event(VTYSH_READ, vty);
      |                           ^~~~~~~~~~
      |                           VTY_READ

The error is a bug in frr: not all use cases of the VTYSH_* enums are
guarded by #ifdef VTYSH. These enums are enabled by the VTYSH macro,
which is defined if sub package frr-vtysh is enabled in menuconfig.
According to support ticket [2], building without frr-vtysh is
no longer supported.

[1] https://github.com/openwrt/packages/issues/24063
[2] https://github.com/FRRouting/frr/issues/15752#issuecomment-2059328993

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

frr: fix grep warning in frrcommon.sh

Fixes:
grep: warning: stray \ before -

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

gost_engine: add CI test

Thi adds one MD and one cipher test from upstream, adapted to a shell
script.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

gost_engine: fix config installation directory

The engine configuration directory was moved to /etc/ssl/modules.cnf.d/,
but the gost_engine package was using /etc/ssl/engines.cnf.d/ by
mistake.

Fixes: 3b2fcd6b2 ("gost_engine: adapt to new engine build config")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

net-snmp: finish up GCC14 fix

This fixes it with musl support. Also fixed several -Wformat warnings.

Main problem was __fd_mask not existing on musl but fd_mask existing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

gst1-libav: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-ugly: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-bad: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-good: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gst1-plugins-base: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gstreamer1: update to 1.22.12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xfrpc: update to 3.05.661

This version is compatible with FRPS 0.58.0

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

xfrpc: Revised the config file and adjusted the corresponding init file

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

augeas: update to 1.14.1

Seems upstream now releases on GitHub.

Fixes compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

docker-compose: Update to version 2.27.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.27.1

Signed-off-by: Javier Marcet <javier@marcet.info>

taglib: update to 2.0.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opus: update to 1.5.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

upmpdcli: update to 1.8.11

Autotools is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.26.5

Autotools build is gone. meson is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 6.1.3

Install static libraries too to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libimobiledevice: update to 2024-05-20

Add patch to fix compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24231 from nmav/ocserv-fix-startup

ocserv: use a more neutral character for sed

acme-common: v1.2.0

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

Merge pull request #24123 from mhei/update-libgpiod-to-2.1.1-with-deps

Update libgpiod to 2.1.1 and update dependent packages

ocserv: use a more neutral character for sed

This resolves a startup issue.

Resolves: #24203

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

libshout: fix compilation with GCC14

Missing headers.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ffmpeg: update to 5.1.4

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #24208 from BKPepe/msmtp

msmtp: update to version 1.8.26

klish: fix compilation with GCC14

Proper types are now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

acme-common: fallback to deprecated use_staging if the staging option is not set

The use_staging option was deprecated in 9d2d8787cafdfb49339766a00ced422fa75cb883.
But it still has a bigger priority than the staging option.
This happens because config_get_bool returns 0 when the use_staging option wasn't set.
So the next check for the staging var emptiness is always false.

As the simplest fix, use the config_get staging that returns a plain string when the option is not set and if it's empty then fallback to the use_staging.

Once the use_staging option is removed we should get back to the config_get_bool staging.

Also use config_get_bool debug.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

treewide: use config_get_bool instead of config_get enabled

The config_get_bool function parses not just the 1 but on/yes, true/false or enabled/disabled.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>

iperf3: update to 3.17.1

Changelogs since last release:
https://github.com/esnet/iperf/releases/tag/3.17
https://github.com/esnet/iperf/releases/tag/3.17.1

Signed-off-by: John Audia <therealgraysky@proton.me>

nextdns: Update to version 1.43.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

cloudflared: Update to 2024.5.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>