Commit Graph

33795 Commits

Author SHA1 Message Date
Fabian Lipken d8a233f90a fx: update to 36.0.1
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2025-05-16 10:53:33 +03:00
Florian Eckert 0d18846dab xtables-addons: remove not needed iptables install dependency for RTSP helpers
The RTSP conntrack and nat does not dependent on iptables, but only on
nf_conntrack and nf_nat. The RTSP conntrack module is used as a helper in
firewall4 [1]. Previously, it was not possible to install RTSP kernel module
without also installing the not needed iptables modules. However, as firewall4
is based on nftables and not on iptables, this dependency is not necessary.

[1] https://github.com/openwrt/firewall4/blob/master/root/usr/share/firewall4/helpers#L89

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-15 14:34:32 +02:00
Florian Eckert d221309637 modemmanager: backport fixes for version 1.24.0
The following commits were added shortly after the release of Modemmanager
version '1.24.0'.

Patch: 0002-modem-helpers-cinterion-allow-spaces-in-SXRAT-test-r.patch
Backport: 6b6997362b
Issue: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/974

Patch: 0003-modem-helpers-fix-checking-of-CDMA-EVDO-access-techn.patch
Backport: 9e205f4784
Issue: no

Patch: 0004-iface-modem-voice-recheck-call-state-polling-when-ca.patch
Backport: 92e666e1c9
Issue: no

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-05-15 14:33:22 +02:00
Wesley Gimenes c91e9322ce netbird: update to 0.43.3
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.3

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-05-15 09:24:20 +02:00
Andris PE d63d5c202a net/bcp38: Add cgnat shared space to bcp38 list
Add CG-NAT address space to non-routable list
Mmake dhcp filter stricter

Signed-off-by: Andris PE <neandris@gmail.com>
2025-05-14 16:58:11 +02:00
Til Kaiser 536e1ff8d0 mstflint: update to 4.32.0
This commit updates the mstflint package to
the latest 4.32.0 release.

It also includes a patch to fix a musl build error that
has been merged into the upstream development branch [1],
but is not yet part of any official release.

Obsolete patches have been removed,
as they are now included in this version.

Additionally, three new binaries introduced
in 4.32.0 have been added to the package.

[1] https://github.com/Mellanox/mstflint/pull/1239

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-05-14 17:20:44 +03:00
Alexandru Ardelean 48a24c73f7 numpy: bump to version 2.2.5
Also needing to treat 'incompatible-pointer-types' as warnings.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-14 15:14:18 +03:00
Alexandru Ardelean 224a35ee4a django-restframework: bump to version 3.16.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-14 15:14:18 +03:00
Alexandru Ardelean 362d15d047 python-evdev: bump to version 1.9.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-14 15:14:18 +03:00
Alexandru Ardelean eeacf8474b python-lxml: bump to version 5.4.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-14 15:14:18 +03:00
Alexandru Ardelean f3c0c9722c pytz: bump to version 2025.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-14 15:14:18 +03:00
Nikolay Manev 34c02108ce adblock-fast: improve the processing of combined list
Signed-off-by: Nikolay Manev <just.ops@proton.me>

adblock-fast: modify gawk statement

Signed-off-by: Nikolay Manev <just.ops@proton.me>
2025-05-13 09:42:43 -07:00
Stan Grishin aafff5ff98 https-dns-proxy: update to 2025.05.11
* update to 2025.05.11 from upstream: a34e20d6e2
* update default config with default value for procd_fw_src_interfaces

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-05-12 15:53:36 -07:00
Rosen Penev e64ca4a0dc ffmpeg: add libatomic dependency
Some platforms lack builtin atomics and use libatomic. Add it.

Backport various patches to fix some warnings.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-05-12 16:42:58 +02:00
Toke Høiland-Jørgensen b3b67527c5 acme-acmesh: Bump to v3.1.1
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2025-05-12 16:11:14 +02:00
Alexandru Ardelean 929c515c1d stress-ng: bump to version 0.19.00
For MIPS and PowerPC, we need to disable atomics.
Otherwise we get linker errors with them.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-05-12 16:01:11 +03:00
Tianling Shen c8b52088c3
yq: Update to 4.45.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-12 19:58:42 +08:00
Tianling Shen 6e579e1a4e
dnsproxy: Update to 0.75.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-12 19:57:52 +08:00
Tianling Shen 5082f94791
btop: Update to 1.4.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-12 19:57:26 +08:00
Fabrice Fontaine 1774871476 libs/libuv: fix PKG_CPE_ID
libuv:libuv is a better CPE ID than libuv_project:libuv as this CPE ID
has the latest CVEs (whereas libuv_project:libuv only has a CVE from
2015):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️libuv:libuv

Fixes: f8ecbf529b (libuv: update to 1.32.0)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2025-05-11 21:26:15 +03:00
Fabrice Fontaine 6de9eebf51 lang/tcl: fix PKG_CPE_ID
tcl:tcl is a better CPE ID than tcl_tk:tcl_tk as this CPE ID has the
latest CVE (whereas tcl_tk:tcl_tk only has CVEs up to 2008):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️tcl:tcl

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2025-05-11 21:23:49 +03:00
Fabrice Fontaine 996f0b81c6 utils/logrotate: fix PKG_CPE_ID
logrotate_project:logrotate is a better CPE ID than gentoo:logrotate as
this CPE ID has the latest CVE (whereas gentoo:logrotate only has CVEs
up to 2011):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3🅰️logrotate_project:logrotate

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2025-05-11 21:23:13 +03:00
Sander Schutten 1292d304ce wiki: openwrt naming fixes and contribution improvement
Signed-off-by: Sander Schutten <schutten@hotmail.com>
2025-05-11 21:22:01 +03:00
Joel Low 03088536db strongswan: preserve changed configuration files
After reinstalling the packages with the preserved configuration files
after a sysupgrade, the reinstalled package config files overwrite what
is on disk rather than being placed as conf-opkg. Defining these config
files will preserve them appropriately.

Signed-off-by: Joel Low <joel@joelsplace.sg>
2025-05-11 21:18:37 +03:00
Maxim Storchak 061270cce3 smartmontools: update to 7.5
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2025-05-11 21:09:48 +03:00
Peter van Dijk 4ba4a69f88 pdns: update to 4.9.5
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2025-05-11 21:08:50 +03:00
Tan Zien 3c566fb06b open-vm-tools: update to 12.5.0
for detailed change log, please refer to:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog

Signed-off-by: Tan Zien <nabsdh9@gmail.com>
2025-05-11 21:04:15 +03:00
Marius Dinu 471960be94 tvheadend: update to 2024-11-12, new options, patch for bug #26422
Changes:
- update to git master 2024-11-12 (dev stalled since then)
- patch for OpenWrt bug #26422 / tvheadend bug #1786
- Options removed:
  - imagecache = tvheadend doesn't support disabling it anymore
- Options added:
  - detailed (but slow) memory utilization reporting
  - Timeshift (default on)
  - tsfile (currently bugged in tvheadend, commented out / always on)
  - HDHomeRun server emulation (default on)
  - Digital Devices DVB CI descrambling cards (default off)
- RegEx options cleaned up, PCRE2 is the new default.
- Some help text improved

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
2025-05-11 21:01:38 +03:00
Nikolay Manev 3d9eb08f8e adblock-fast: Fixed non-printable characters and bump PKG_VERSION
Signed-off-by: Nikolay Manev <just.ops@proton.me>
2025-05-11 10:04:26 -07:00
Hannu Nyman a5c182c363 libpng: Update to 1.6.48
Update libpng to version 1.6.48.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-05-11 17:29:40 +03:00
Hannu Nyman 01b5fcc9ee libpng: Revert "libpng: add symlink to debug library" as unnecessary
This reverts commit 5313dd9be from PR #25324 , related to #25323 and
https://github.com/openwrt/openwrt/pull/16899

The additional symlink libpng16.so -> libpng16d.so is now unnecessary as
OpenWrt main repo PR https://github.com/openwrt/openwrt/pull/18709
commit 703e7d2d5b
changed the cmake build type from 'Debug' to 'RelWithDebInfo', which
causes libpng .so to be compiled with the normal name libpng16.so
(instead of the debug-styled libpng16d.so).

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-05-11 17:29:40 +03:00
John Audia c851cf35c5 nfs-kernel-server: update to v2.8.3
Update to v2.8.3
Removed upstreamed: 210-patch-for-broken-libnfsimapd-static-and-regex-plugins.patch
Added: 210-nfsdctl.c-add-missing-basename.patch

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-05-10 09:00:41 +03:00
John Audia f2030e6256 nfs-kernel-server: update to v2.8.2
Update to latest release and change URL to official upstream mirror.

Removed upstreamed patch: 130-musl-svcgssd-sysconf.patch

Added new patch to correct host build error as we do not build with
gss enabled anyway: 100-fix-host-build.patch

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-05-10 09:00:41 +03:00
Eric Luehrsen a0df926a01 unbound: update to 1.23.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2025-05-09 21:52:16 +03:00
George Sapkin a7f229fce5 syncthing: add discovery and relay descriptions
Signed-off-by: George Sapkin <george@sapk.in>
2025-05-09 21:50:46 +03:00
George Sapkin 9f78bed3f8 syncthing: bump to 1.29.6
- chore(lib): expose model methods to obtain progress
- feat(gui): explanation to options enabled or disabled per folder type
- fix(gui): validate device ID in canonical form
- fix(config): remove discontinued primary STUN server
- fix(stun): better error handling
- chore(config): remove discontinued secondary STUN servers
- chore(fs): speed up case normalization
- build(deps): update dependencies
- feat(fs, config): add support for custom filesystem type construction
- build: replace underscore in Debian version
- chore(model): add metric for total number of conflicts
- fix(config): properly apply defaults when reading folder configuration
- fix(config): zero filesystemtype is "basic"
- build: push artifacts to Azure
- chore(config): resolve primary STUN servers via SRV record
- chore(fs): changes to allow Filesystem to be implemented externally
- fix(strings): differentiate setup(n) and set(v) up
- fix(gui): mark unseen disconnected devices as inactive
- fix(syncthing): use separate lock file instead of locking the
  certificate
- feat(api, gui): allow authentication bypass for metrics
- chore: add missing copyright in new files from infra branch
- fix(osutil): give threads same I/O priority on Linux
- chore(syncthing): remove support for TLS 1.2 sync connections
- chore(gui): update dependency copyrights, add script for periodic
  maintenance
- chore(api): log X-Forwarded-For
- feat(config): add option for audit file
- chore(gui): use go list --deps for dependency list
- fix(strelaysrv): make the session limiter session-dependent

Changelog: https://github.com/syncthing/syncthing/compare/v1.29.5...v1.29.6
Signed-off-by: George Sapkin <george@sapk.in>
2025-05-09 21:50:46 +03:00
Tianling Shen b36612de69
yq: Update to 4.45.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:29:31 +08:00
Tianling Shen 12b3f62910
cloudflared: Update to 2025.4.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:17:27 +08:00
Tianling Shen a91d278804
v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:17:19 +08:00
Tianling Shen 051fdf7cab
v2ray-core: Update to 5.31.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:14:36 +08:00
Tianling Shen 72fafd38ea
xray-core: Update to 25.4.30
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:13:45 +08:00
Tianling Shen d2c2a47ff0
rclone: Update to 1.69.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:12:12 +08:00
Wesley Gimenes cef2fb9d8e netbird: update to 0.43.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.43.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-05-09 10:11:54 +02:00
Stan Grishin 650fe4d62f pbr: bugfix: no errors on negated values
* do not display errors on negated values
* improved output in verbose mode

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-05-08 19:36:22 -07:00
George Sapkin 4f9e5b37d0 golang: bump to 1.24.3
go1.24.3 (released 2025-05-06) includes security fixes to the os
package, as well as bug fixes to the runtime, the compiler, the linker,
the go command, and the crypto/tls and os packages.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.24.2+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2025-05-08 14:23:41 +08:00
Othmar Truniger 73b21d4bb9 libfmt: bump to version 11.2.0
Signed-off-by: Othmar Truniger <github@truniger.ch>
2025-05-07 19:52:17 +03:00
Matthias Schiffer b98fb60635 perl: fix parallel build race condition in target build
We have received reports of builds of perl occasionally failing when
building with many parallel jobs, with a log like the following:

    LD_LIBRARY_PATH=[...]/perl/perl-5.40.0 ./miniperl -Ilib make_ext.pl \
        dist/constant/pm_to_blib  MAKE="make" LIBPERL_A=libperl.so
    File/Path.pm did not return a true value at [...]/hostpkg/usr/lib/perl5/5.40.0/ExtUtils/MakeMaker.pm line 13.
    BEGIN failed--compilation aborted at [...]/hostpkg/usr/lib/perl5/5.40.0/ExtUtils/MakeMaker.pm line 13.
    Compilation failed in require at Makefile.PL line 3.
    BEGIN failed--compilation aborted at Makefile.PL line 3.
    Unsuccessful Makefile.PL(dist/constant): code=65280 at make_ext.pl line 532.

The failing extension (dist/constant in the above log) would differ
between runs.

The cause of the issue is the `-Ilib` in the command line of miniperl.
In the host build, `./miniperl -I lib` will use the following include
path:

    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/AutoLoader/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Carp/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/PathTools
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/PathTools/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-Install/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-MakeMaker/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-Manifest/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/File-Path/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/ext/re
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Term-ReadLine/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/Exporter/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/ext/File-Find/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Text-Tabs/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/dist/constant/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/version/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Getopt-Long/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/Text-ParseWords/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/cpan/ExtUtils-PL2Bat/lib
    [..]/build_dir/hostpkg/perl/perl-5.40.0/lib
    .

Various dependencies of the extension build scripts (Makefile.PL) -
including File-Path, which failed to be loaded in the error log - are
included in the path by buildcustomize.pl, as these extensions are only
installed to `lib` as the build proceeds.

However, in a target build, miniperl is just a symlink to the previously
built host perl. As the host perl does not implicitly load
`buildcustomize.pl`, we get the following include path for
`./miniperl -Ilib`:

    lib
    [..]/staging_dir/hostpkg/usr/lib/perl5/site_perl/5.40.0/x86_64-linux
    [..]/staging_dir/hostpkg/usr/lib/perl5/site_perl/5.40.0
    [..]/staging_dir/hostpkg/usr/lib/perl5/5.40.0/x86_64-linux
    [..]/staging_dir/hostpkg/usr/lib/perl5/5.40.0

The host perl's install location is used as the default include path
which provides File-Path etc. for the target build; however, as more
and more libraries get installed into `lib` during the extension build,
they may get loaded from there instead, as `lib` is at the beginning of
the include path. When multiple extensions are built in parallel, a
Makefile.PL may attempt to load File/Path from `lib` after the file has
been created, but before its contents have been written fully, resulting
in the build to fail.

In fact, we should not load anything from `lib` during the target build,
as it is the staging directory for the target, including native
extensions built for the target architecture - with one exception: The
build scripts expect to find target information in the `Config` module,
so simply removing `lib` from the include path completely would break
the build.

Solve the issue by creating an alternative lib directory `lib_build`,
symlinking `Config.pm` and its dependencies in it, and replacing the
`-Ilib` argument with `-Ilib_build` using a wrapper script around the
host perl executable. This is similar to the approach seen in perl's own
obsolete/broken cross compile scripts (`Cross/Makefile`).

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2025-05-05 11:20:38 +02:00
Matthias Schiffer e7b5a35e5c perl: drop 110-always_use_miniperl.patch
The patch was introduced in commit 4c57844f0f ("lang/perl: Add hack to
make perl always use miniperl during build"), but it is not actually
necessary. By setting $perl to a non-empty value (using 'perl' as is
common on desktop distros), the logic works as intended and selects the
correct perl binary for host and target builds.

As miniperl just symlinks to host perl for target builds, the main
effect of this change is not unconditionally passing `-Ilib -I.`
anymore. This seems like a good thing; host libraries should be used
with host perl by default.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2025-05-05 11:20:38 +02:00
Matthias Schiffer 2a7dc15402 perl: replace 910-miniperl-needs-inc-dot.patch with smaller scope fix
The patch was first introduced in commit 4a94479f96 ("perl: update to
5.26.1") to fix the target build when the host perl has
default_inc_excludes_dot enabled. It just added back the `-I`. to every
call of miniperl; this solution is questionable however, as it adds `.` to
the beginning of the search path, not as a final fallback like perl did
before default_inc_excludes_dot (and like miniperl does).

It is also not necessary - only two scripts, write_buildcustomize.pl and
configpm, expect to be able to include a file from `.` (in both cases a
file the script just generated). Just fix the two scripts instead.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2025-05-05 11:20:38 +02:00
Nikolay Manev 434eaba41f zstd: update to v1.5.7
Signed-off-by: Nikolay Manev <just.ops@proton.me>
2025-05-05 11:17:45 +02:00