libfmt: bump to version 11.1.1

Signed-off-by: Othmar Truniger <github@truniger.ch>

imx-uuc: add package 'sdimage' and 'ufb'

This adds two small tools useful only on the Freescale/NXP i.MX23/28
devices, so it is bound to the mxs target:
- sdimage: helper to write the required header for the bootstream,
  e.g. during bootloader update
- ufb: can be used in conjunction with NXP's host side mfgtool

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dnsproxy: Update to 0.74.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.35.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: update to 0.35.0

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: revert fix to build with musl >1.2.4

Partially revert: 7b3d033ab651dd11e0db5fb099d106c9e09a2dc6
 - Revert: Also fixes issue of not being able to build with musl >1.2.4,
   The issue has been resolved as of March 2024. For more details, see:
   https://github.com/mattn/go-sqlite3/issues/1164#issuecomment-1975022901

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

node: remake - do not use shared abseil-cpp

remake this commit https://github.com/openwrt/packages/pull/25582

Fix nodejs compile errors after the introduction of abseil-cpp in #25565

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

golang: Update to 1.23.4

go1.23.4 (released 2024-12-03) includes fixes to the compiler, the
runtime, the trace command, and the syscall package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libwebp: bump to version 1.5.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

numpy: bump to version 2.2.1

Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

bcm27xx-eeprom: update to v2024.11.12-2712

bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-10-use-soft-reset-to-preseve-sdram-contents-after-ramoops-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-10-add-support-to-override-the-boot-mode-at-power-on-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-05-numa---add-system_heapmax_order0-when-needed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-12-enable-initial_turbo60-by-default-latest

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.09.23-2712...v2024.11.12-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

php8: add patch for loongarch64 support

This backported patch is required to fix the build for loongarch64:
...
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `zend_fiber_init_context':
zend_fibers.c:(.text+0xb34): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb38): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb74): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb78): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `.L170':
zend_fibers.c:(.text+0xe34): undefined reference to `swapcontext'
...

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Revert "node: Do not use shared `abseil-cpp`"

This reverts commit 9e70d3c5b07ac87d0f6d2ad85f60ca8bd0e74105.

As mentioned here:
   https://github.com/openwrt/packages/pull/25582#issuecomment-2561673222

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <softovick@gmail.com>

lua-eco: update to 3.7.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

stress-ng: bump to version 0.18.07

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-lxml: bump to version 5.3.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-et_xmlfile: bump to 2.0.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

django: bump to 5.1.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

sudo: bump to version 1.9.16p2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

knxd: bump to new version 0.14.71

Signed-off-by: Othmar Truniger <github@truniger.ch>

libyder: add package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-platformio: Add package (build system)

Signed-off-by: Austin Lane <vidplace7@gmail.com>

node: Do not use shared `abseil-cpp`

Signed-off-by: Austin Lane <vidplace7@gmail.com>

cloudflared: Update to 2024.12.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

net-snmp: support compilation with GCC 11 permissively

Use #elif defined instead of #elifdef as seen elsewhere throughout the patch
file. This avoids the following errors when compiling with GCC 11:

```
mibgroup/ucd-snmp/proc.c:45:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
   45 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef

mibgroup/ucd-snmp/proc.c:243:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
  243 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef
```

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>

ack: Update to 3.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

lxc: update to 6.0.3

No patches needed to be rebased/simple version bump.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>

dnsdist: update to 1.9.8

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

pdns: update to 4.9.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

pbr: update to 1.1.8

* update to 1.1.8 release version
* APK-style version stamping for init script

Signed-off-by: Stan Grishin <stangri@melmac.ca>

python-pypubsub: Add package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

abseil-cpp: Add Package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-tabulate: add package / hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-click: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

libulfius: Install library on target

Signed-off-by: Austin Lane <vidplace7@gmail.com>

alist: Update to 3.41.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-pyelftools: add package / hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-pyserial: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

qbee-agent: bump version to 2024.50

Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.73.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

docker-compose: Update to version 2.32.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <javier@marcet.info>

liborcania: Install library on target

Signed-off-by: Austin Lane <vidplace7@gmail.com>

knxd: bump to version 0.14.68

Signed-off-by: Othmar Truniger <github@truniger.ch>

qemu: add build for qemu-ga & virtio-console-helper on x86 target

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

pbr: improve status_service output

Signed-off-by: Stan Grishin <stangri@melmac.ca>

docker-compose: Update to version 2.32.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.31.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.30.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <javier@marcet.info>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <ynezz@true.cz>

qemu: fix error on python dependency at build

qemu need a recent version of python build , this is visible when you build with the docker image of the sdk see https://github.com/openwrt/docker/
error generated during the build : found no usable tomli, please install it

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

haproxy: update to v3.0.7

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

wfb-ng: Add wfb-ng package

WFB-ng is long-range packet radio link based on raw WiFi radio.
Adding it to openwrt base packages will help a lot of it users
to use cheap wifi routers (supporting minitoring mode) instead
of build custom hardware yourself.

Signed-off-by: Vasily Evseenko <svpcom@gmail.com>

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

owut: update to 2024.12.10

Bug fixes:
    efahl/owut@887ef92 owut: remove non-upgradable packages from update checks
Enhancements:
    efahl/owut@e38844a owut: cosmetic: add OpenWrt version to request output

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

yq: Update to 4.44.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2024.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gst1-plugins-bad: build Intel QuickSync plugin only on x86

Intel Media SDK lacks support for many architectures and leads to build
failing. As the QuickSync hardware feature is anyway only supported on
x86 CPUs simply don't build the plugin on other platforms.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

acme-common: Create challenge directory on boot

The challenge directory (for webroot challenges) is on a tmpfs, which
means it doesn't exist on boot. Some web servers (uhttpd in particular)
don't like being configured to serve files from a non-existent
directory. So add a boot() section to the ACME init script that just
creates the challenge directory, and make sure it runs relatively early.
That should take care of the non-existent directory issue, while still
keeping the actual certificate renewal controlled by cron.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

python-requests: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

netbird: change maintainer

- Add myself as maintainer
- Remove `Oskari Rauta <oskari.rauta@gmail.com>`

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

libideviceactivation: update to the latest git version

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libideviceactivation: fix compilation with full NLS

nls.mk is needed.

Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

idevicerestore: update to the latest git version

Notable changes
- initial support for iPhone 16 restore
- depends on libtatsu

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libirecovery: update to 1.2.1

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libimobiledevice: update to the latest git version

Notable changes
- add detection and note about passcode requirement for iOS 16.1
- add support for iOS 17+ Personalized Developer Disk image mounting
- fix heap buffer overflow in ideviceimagemounter
- tools/afcclient: add missing time.h header
- depends on libtatsu, which depends on libcurl

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libtatsu: add package 1.0.4

required by new versions of libimobiledevice and idevicerestore
depends on libcurl

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libimobiledevice-glue: update to 1.3.1

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

usbmuxd: update to the latest git version

Notable changes
- revert default mode back to 1
- add support for modes 4 and 5
- correctly display 10 Gbps USB 3.x
- use more reliable macros to print --version output
- requires libplist 2.6.0

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libplist: update to 2.6.0

required to update usbmuxd

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

python-orjson: update to version 3.10.12
Relevant changes since previous 3.10.0:
- FIXED: Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.
- FIXED: Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.
- Improve performance of serializing.
- Drop support for arm7.
- int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

ksmbd-tools: adjust smb2 max read/write/trans and cache

Now for all devices with every size of RAM it is set to:
`smb2 max read = 64K`
`smb2 max write = 64K`
`smb2 max trans = 64K`

Instead of fixed value to 64K is better to check RAM size and adjust to:

32 ~ 64MB RAM, set the value to 64K
64 ~ 128MB, set it to 128KB
128 ~ 256MB, set it to 1MB
More than 256MB leave default size to 4MB

With 64MB and 128MB is better also to disable the read/write cache
`cache read buffers = no`
`cache write buffers = no`

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>

netbird: update to 0.34.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.34.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

tailscale: update to 1.78.1

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>

knot: update to version 3.4.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>

python-urllib3: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

luajit2: update to v2.1-20241113

Signed-off-by: Javier Marcet <javier@marcet.info>

haproxy: Require lua 5.4

Upstream installation guide use lua 5.4, let's follow it.

Link: https://github.com/haproxy/haproxy/blob/master/INSTALL
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>

microsocks: backport upstream fixes

Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-certifi: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-idna: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-chardet: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

ksmbd-tools: update to version 3.5.3

- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>

dhtd: update to 1.0.5

Signed-off-by: Moritz Warning <moritzwarning@web.de>

pbr: 1.1.7-65 bugfixes and improvements

Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2
Run tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2

Description:
* stop building netifd flavour until netifd isuees are resolved
* improve output()
* improve inline_set()
* improve is_config_enabled()
* bugfix is_domain()
* improve is_supported_protocol()
* improve is_supported_interface()
* bugfix is_tor_running()
* improve ipv4_leases_to_nftset()
* improve ipv6_leases_to_nftset()
* add check for ip-full binary on start
* bugfix: load environment on boot
* bugfix: hack around dnsmasq confdir instances
* bugfix: IPv6-related fixes for internet_routing() and status_service()
* improve netifd setup by bringing code into the init script from uci-defaults
* bugfix: do not attempt to use IPv6 prefixes in pbr.user.aws if IPv6 support is disabled in pbr config

Signed-off-by: Stan Grishin <stangri@melmac.ca>

adblock-fast: bugfix: dnsmasq instances confdir hack

* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <stangri@melmac.ca>

netatalk: Update to 4.0.7

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>

libdrm: fix architecture dependencies of sub-packages

drm_intel should depend on i386||i686 (x86 doesn't exist).
drm_etnaviv is available on RISC-V as well.

Fixes: e092819cd ("libdrm: split into sub-packages")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

python-pycares: bump to 4.5.0

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>

owut: update to 2024.11.29

Bug fixes:
    efahl/owut@334534b owut: use robust method for setting new kernel version

Enhancements:
    efahl/owut@286d101 examples: update the pre-install.sh with firmware backup

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

ci: drop APK version checking

APK is now the default, the SDK action will try to compile things and
fails if the version doesn't fit.

Signed-off-by: Paul Spooren <mail@aparcar.org>

ruby: update to 3.3.6

Ruby 3.3.6 is a routine update that includes minor bug fixes. It also
stops warning missing default gem dependencies that will be bundled gems
in Ruby 3.5.

Link: https://github.com/ruby/ruby/releases/tag/v3_3_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

eza: update to 0.20.10

release notes:
0.20.6: https://github.com/eza-community/eza/releases/tag/v0.20.6
0.20.7: https://github.com/eza-community/eza/releases/tag/v0.20.7
0.20.8: https://github.com/eza-community/eza/releases/tag/v0.20.8
0.20.9: https://github.com/eza-community/eza/releases/tag/v0.20.9
0.20.10: https://github.com/eza-community/eza/releases/tag/v0.20.10

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>