libedit: update to version 20230828-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

Merge pull request #21992 from osedl/pr/20230901-modemmanager-fix-permission-denied

modemmanager: Fix Permission Denied error

Merge pull request #21994 from danielpinto8zz6/fix-desec-update-dns

ddns-scripts: desec.io - update url to https

lua-eco: update to 2.5.1

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

ddns-scripts: desec.io - update url to https

Signed-off-by: Daniel Pinto <danielpinto8zz6@gmail.com>
desec.io ddns update is not working, after testing the endpoint I got a 301, after a bit of search I found out we are
supposed to use https instead of http
more info here: https://talk.desec.io/t/301-from-update-dedyn-io/644/2

bump PKG_RELEASE

treewide: change my no longer used email

Since February 2023, I decided to no longer work with Turris, I mean CZ.NIC company
due to some reasons how the development goes and since that day my work address is not
available and not sure if there is some redirect to someone else, but if anyone wants to
reach me, use my email address, where they can find me.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-websockets: Update to 11.0.3, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-wcwidth: Update to 0.2.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-voluptuous-serialize: Update to 2.6.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-voluptuous: Update to 0.13.1, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-urllib3: Update to 2.0.4

The package changed to the hatchling build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-ubus: Update to 0.1.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21965 from jonasjelonek/croc

croc: new package

Merge pull request #21943 from stangri/master-adblock-fast

adblock-fast: initial commit

Merge pull request #22015 from stangri/master-https-dns-proxy

https-dns-proxy: fix dns resolution not working on boot

https-dns-proxy: fix dns resolution not working on boot

* fix dns resolution not working on boot
* add hotplug-online script
* reorganizes files/ and Makefile to reflect files destinations

Signed-off-by: Stan Grishin <stangri@melmac.ca>

python-websocket-client: update to 1.6.2

 - Add support for SSLKEYLOGFILE environment variable
 - Add support for callable header arguments
 - Change handling of proxy environment variables, is_secure set to
 true now prevents http_proxy from getting used

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.21.0

Signed-off-by: Javier Marcet <javier@marcet.info>

python-ble2mqtt: update to 0.2.0

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python-dbus-fast: update to 1.94.1

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

snort3: update to 3.1.69.0

Upstream bump

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>

mhz: respect CC and CFLAGS passed by buildsystem

It seems that the Makefile has both CC and CFLAGS hardcoded and does not
allow overriding them by ones being passed by the buildsystem.

This works fine until CONFIG_PKG_ASLR_PIE_ALL is selected, then building
will fail with:
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o: relocation R_ARM_MOVW_ABS_NC against `a local symbol' can not be used when making a shared object; recompile with -fPIC
arm-openwrt-linux-muslgnueabi/bin/ld.bfd: mhz.o(.text+0x75c): unresolvable R_ARM_CALL relocation against symbol `__aeabi_l2d@@GCC_3.5

So, lets add a patch pending upstream that allows both CC and CFLAGS to be
overriden so that ones passed by the buildsystem are actually respected.

Fixes: 89123b308f98 ("mhz: add new package")
Signed-off-by: Robert Marko <robimarko@gmail.com>

libucontext: Add package

Description (from libucontext github page):
libucontext (https://https://github.com/kaniini/libucontext) is a
library which provides the ucontext.h C API. Unlike other
implementations, it faithfully follows the kernel process ABI when
doing context swaps. libucontext is used on almost all musl
distributions to provide the legacy ucontext.h API.

This package is meant as a development package. There is no need
to install a package on the router if an application or library
is linked against the static libraries. Though, shared libraries
are provided also.

It is used to link libraries/applications against it which need the
system calls

* makecontext
* swapcontext
* getcontext
* setcontext

E.g. the asynchronous API of libmariadb (c-connector) uses this
system calls. Because libmusl didn't provide that system calls this
synchronous API is currently (without libucontexe) not working - it
segfaults.

Co-developed-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Volker Christian <me@vchrist.at>

knot-resolver: update to version 5.7.0

Changelog:
https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

tor: update to 0.4.8.4 stable

First release of the 0.4.8.x series, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.4/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

dmx_usb_module: use upstream commit to fix compilation with kernel 6.2+

Recently, there was pushed patch, which fixed only part to get it working with
Linux kernel 6.2+, but it was only local change and it did not use the changes,
which are going to be included in the upcoming dmx_usb_module release.

This commit use the commit from the upstream repository:
https://github.com/lowlander/dmx_usb_module/commit/eeecf40c3eb3dbdf1981c508080ab3aa61e105e2

Fixes: e15d9f75dac2888b9d863c6f2d1c19637631c1fb ("dmx_usb_module: fix compilation warning")
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

jool: update package to version 4.1.10

Update jool to version 4.1.10 and remove a no longer needed patch.
There was also a need to backport a patch to fix compile in some archs.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>

lua-eco: update to 2.5.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

v2raya: Update to 2.2.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libre2: fix install

Need the suffixed library too.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

collectd-mod-ipstatistics: fix handling of long `/proc` lines

`/proc/net/netstat` `TcpExt:` line is 2064 chars long on linux 6.1

Signed-off-by: Alex Shumsky <alexthreed@gmail.com>
[PKG_RELEASE bump added]

modemmanager: Fix Permission Denied error

The proto_send_update function is sending a notification to netifd
during the teardown section. However, netifd filters link update
notifications executed during teardown, as indicated here:
https://git.openwrt.org/?p=project/netifd.git;a=blob;f=proto-shell.c#l515
This was leading to a Permission Denied error due to its behavior,
making proto_send_update ineffective during teardown.

To address the issue, the proto_send_update function has been removed
from the teardown section. This prevents the Permission Denied error
while ensuring proper operation during teardown.

Additionally, in the 10-report-down helper script, a check has been
implemented to determine if the interface is already down. This check
is crucial to avoid triggering a Permission Denied error, especially
in cases where netifd is already aware of a controlled ifdown operation.

Signed-off-by: Oliver Sedlbauer <osedlbauer@tdt.de>

libre2: fix pkgconfig paths

Upstream broke them.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

croc: new package

croc is a tool written in Go for sending files from one device to
another over the internet using a relay. It runs on multiple platforms,
provides end-to-end encryption and works without port forwarding and
fixed IP/DynDNS.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

nss: update to 3.93

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

libreswan: update to 4.12
fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

mpd: Update to 0.23.13

ver 0.23.13 (2023/05/22)
* input
  - curl: fix busy loop after connection failed
  - curl: hide "404" log messages for non-existent ".mpdignore" files
* archive
  - zzip: fix crash bug
* database
  - simple: reveal hidden songs after deleting containing CUE
* decoder
  - ffmpeg: reorder to a lower priority than "gme"
  - gme: require GME 0.6 or later
* output
  - pipewire: fix corruption bug due to missing lock
* Linux
  - shut down if parent process dies in --no-daemon mode
  - determine systemd unit directories via pkg-config
* support libfmt 10

ver 0.23.12 (2023/01/17)
* input
  - curl: require CURL 7.55.0 or later
* decoder
  - mad: fix integer underflow with very small files
* tags
  - fix crash bug due to race condition
* output
  - pipewire: adjust to PipeWire 0.3.64 API change
* fix build failures with GCC 13

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-wheel: Update to 0.41.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pluggy: Update to 1.3.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

mpfr: Update to 4.2.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-trio: Update to 0.22.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-tornado: Update to 6.3.3, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-sqlalchemy: Update to 2.0.20, update list of dependencies

This also adds a build dependency on python-cython/host.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-slugify: Update to 8.0.1, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-sentry-sdk: Update to 1.29.2, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-schema: Update to 0.7.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-schedule: Update to 1.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-rsa: Update to 4.9, update list of dependencies

The package changed to the poetry-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21552 from jefferyto/python-platform-triplet

python3: Restore platform triplet to paths

zerotier: update to 1.12.1

* split up "fix makefile" patch logical distinct parts
* add libatomic dependency needed for prometheus-cpp-lite-1.0
* refresh patch series
* improve warning message in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>

xray-core: Update to 1.8.4

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

tang: tang-show-keys defaults on the default 9090 port

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

tang: tang-show-keys uses wget instead of curl

Resolves: #15592

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

tang: do not require bash

It is not used by its included scripts.

Resolves: #21799

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

tang: corrected hash for v14

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #21857 from TDT-AG/pr/20230818-modemmanager

modemmanager: copy dbus interfaces file to staging

pdns-recursor: update to 4.9.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

sing-box: update to 1.4.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

knot: enable QUIC support

Signed-off-by: Jan Hák <jan.hak@nic.cz>

knot: update to version 3.3.0

Signed-off-by: Jan Hák <jan.hak@nic.cz>

tang: updated to v14

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #21928 from stangri/miniupnpd-nftables

miniupnpd: remove uci-defaults and fw4-include files for nftables variant

adblock-fast: initial commit

* this package replaces simple-adblock package
* it was impossible to keep existing config structure and continue
  improving the simple-adblock the way I wanted, hence the new
  package name
* the migration script for existing simple-adblock config is included in
  the uci-defaults file

Signed-off-by: Stan Grishin <stangri@melmac.ca>

tailscale: enable autodect of fw type

Signed-off-by: Tyler Young <git@yfh.addy.io>

python-ble2mqtt: update to 0.1.9

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python-dbus-fast: update to 1.93.0

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

v2raya: Update to 2.2.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: Update to 1.72.0

Version 1.72.0 (2023-08-24)
==========================

Language
--------
- [Replace const eval limit by a lint and add an exponential backoff warning](https://github.com/rust-lang/rust/pull/103877/)
- [expand: Change how `#![cfg(FALSE)]` behaves on crate root](https://github.com/rust-lang/rust/pull/110141/)
- [Stabilize inline asm for LoongArch64](https://github.com/rust-lang/rust/pull/111235/)
- [Uplift `clippy::undropped_manually_drops` lint](https://github.com/rust-lang/rust/pull/111530/)
- [Uplift `clippy::invalid_utf8_in_unchecked` lint](https://github.com/rust-lang/rust/pull/111543/)
- [Uplift `clippy::cast_ref_to_mut` lint](https://github.com/rust-lang/rust/pull/111567/)
- [Uplift `clippy::cmp_nan` lint](https://github.com/rust-lang/rust/pull/111818/)
- [resolve: Remove artificial import ambiguity errors](https://github.com/rust-lang/rust/pull/112086/)
- [Don't require associated types with Self: Sized bounds in `dyn Trait` objects](https://github.com/rust-lang/rust/pull/112319/)

Compiler
--------
- [Remember names of `cfg`-ed out items to mention them in diagnostics](https://github.com/rust-lang/rust/pull/109005/)
- [Support for native WASM exceptions](https://github.com/rust-lang/rust/pull/111322/)
- [Add support for NetBSD/aarch64-be (big-endian arm64).](https://github.com/rust-lang/rust/pull/111326/)
- [Write to stdout if `-` is given as output file](https://github.com/rust-lang/rust/pull/111626/)
- [Force all native libraries to be statically linked when linking a static binary](https://github.com/rust-lang/rust/pull/111698/)
- [Add Tier 3 support for `loongarch64-unknown-none*`](https://github.com/rust-lang/rust/pull/112310/)
- [Prevent `.eh_frame` from being emitted for `-C panic=abort`](https://github.com/rust-lang/rust/pull/112403/)
- [Support 128-bit enum variant in debuginfo codegen](https://github.com/rust-lang/rust/pull/112474/)
- [compiler: update solaris/illumos to enable tsan support.](https://github.com/rust-lang/rust/pull/112039/)

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

Libraries
---------
- [Document memory orderings of `thread::{park, unpark}`](https://github.com/rust-lang/rust/pull/99587/)
- [io: soften ‘at most one write attempt’ requirement in io::Write::write](https://github.com/rust-lang/rust/pull/107200/)
- [Specify behavior of HashSet::insert](https://github.com/rust-lang/rust/pull/107619/)
- [Relax implicit `T: Sized` bounds on `BufReader<T>`, `BufWriter<T>` and `LineWriter<T>`](https://github.com/rust-lang/rust/pull/111074/)
- [Update runtime guarantee for `select_nth_unstable`](https://github.com/rust-lang/rust/pull/111974/)
- [Return `Ok` on kill if process has already exited](https://github.com/rust-lang/rust/pull/112594/)
- [Implement PartialOrd for `Vec`s over different allocators](https://github.com/rust-lang/rust/pull/112632/)
- [Use 128 bits for TypeId hash](https://github.com/rust-lang/rust/pull/109953/)
- [Don't drain-on-drop in DrainFilter impls of various collections.](https://github.com/rust-lang/rust/pull/104455/)
- [Make `{Arc,Rc,Weak}::ptr_eq` ignore pointer metadata](https://github.com/rust-lang/rust/pull/106450/)

Rustdoc
-------
- [Allow whitespace as path separator like double colon](https://github.com/rust-lang/rust/pull/108537/)
- [Add search result item types after their name](https://github.com/rust-lang/rust/pull/110688/)
- [Search for slices and arrays by type with `[]`](https://github.com/rust-lang/rust/pull/111958/)
- [Clean up type unification and "unboxing"](https://github.com/rust-lang/rust/pull/112233/)

Stabilized APIs
---------------
- [`impl<T: Send> Sync for mpsc::Sender<T>`](https://doc.rust-lang.org/nightly/std/sync/mpsc/struct.Sender.html#impl-Sync-for-Sender%3CT%3E)
- [`impl TryFrom<&OsStr> for &str`](https://doc.rust-lang.org/nightly/std/primitive.str.html#impl-TryFrom%3C%26'a+OsStr%3E-for-%26'a+str)
- [`String::leak`](https://doc.rust-lang.org/nightly/alloc/string/struct.String.html#method.leak)

These APIs are now stable in const contexts:

- [`CStr::from_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_bytes_with_nul`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
- [`CStr::to_str`](https://doc.rust-lang.org/nightly/std/ffi/struct.CStr.html#method.from_bytes_with_nul)

Cargo
-----
- Enable `-Zdoctest-in-workspace` by default. When running each documentation
  test, the working directory is set to the root directory of the package the
  test belongs to.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-test.html#working-directory-of-tests)
  [#12221](https://github.com/rust-lang/cargo/pull/12221)
  [#12288](https://github.com/rust-lang/cargo/pull/12288)
- Add support of the "default" keyword to reset previously set `build.jobs`
  parallelism back to the default.
  [#12222](https://github.com/rust-lang/cargo/pull/12222)

Compatibility Notes
-------------------
- [Alter `Display` for `Ipv6Addr` for IPv4-compatible addresses](https://github.com/rust-lang/rust/pull/112606/)
- Cargo changed feature name validation check to a hard error. The warning was
  added in Rust 1.49. These extended characters aren't allowed on crates.io, so
  this should only impact users of other registries, or people who don't publish
  to a registry.
  [#12291](https://github.com/rust-lang/cargo/pull/12291)

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

miniupnpd: remove uci-defaults and fw4-include files for nftables variant

* remove firewall4.include file as it is not needed and procuces a firewall
  error on service miniupnpd restart
* remove the uci-defaults file as its sole purpose was to install the
  firewall include file
* modify the Makefile to reflect the deleted files

Signed-off-by: Stan Grishin <stangri@melmac.ca>

lua-lsqlite3: add build VARIANT for Lua5.3

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Merge pull request #21896 from mhei/php8-update-to-8.2.9

php8: update to 8.2.9

python3: Restore platform triplet to paths

This removes 014-remove-platform-so-suffix.patch and
016-adjust-config-paths.patch, restoring the platform triplet to paths
for:

* C extensions (*.cpython-311-*.so)

* Build config data directory (/usr/lib/python3.11/config-3.11-*/)

* sysconfig data file (/usr/lib/python3.11/_sysconfigdata_*.py)

Setting `_PYTHON_SYSCONFIGDATA_NAME` during package builds ensures that
sysconfig data for target Python is loaded, in particular so that C
extensions built will have the correct extension / platform triplet.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3: Fix/expand platform triplet detection

Currently, configure does not find the correct platform triplet for musl
as the default build/host values passed by OpenWrt buildroot does not
contain the text "linux-musl".

This backports
https://github.com/python/cpython/commit/c163d7f0b67a568e9b64eeb9c1cbbaa127818596
to add detection for mips soft float and musl.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3: Centralize config file adjustments in Build/Install

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: Rework filespec install script

* Support wildcards in install (`+`) paths

* Add fourth parameter to set directory permissions

  If file permissions are given (third parameter), these will now apply
  to files only.

* Add non-recursive set permissions command (`==`)

* Be more strict about filespec format

  Blank lines and lines starting with `#` will be ignored. Other errors
  (unknown command, missing path parameter, etc.) will cause the script
  to exit.

* Be more strict about ensuring paths exist for all commands

* Avoid spawning subshells

This also removes outdated filespec paths in the python3 package; these
paths delete files that are no longer present.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3: Fix package descriptions

* Fix default Python package description not included in individual
  package descriptions

* Update default Python package description text (from General Python
  FAQ, "What is Python?")

* Add package descriptions for Python module packages

* Reduce duplication in package titles

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3: Use regular package recipes for python3 package

There is no need to use Py3Package for python3 as it does not package
any Python files; it is an empty package with dependencies to install
the full Python installation.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-setuptools: Update to 68.1.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-poetry-core: Update to 1.7.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-click: Update to 8.1.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pytest-xdist: Update to 3.3.1, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pytest: Update to 7.4.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyrsistent: Update to 0.19.3, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyparsing: Update to 3.1.1

The package has changed to the flit-core build backend.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyotp: Update to 2.9.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyfuse3: Update to 3.3.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-py: Update to 1.11.0, update list of dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

xray-core: backport pending patch for Go 1.21 update

Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

vnstat2: update to version 2.11

This release breaks the noexit patch, because the code for removing old
now returns an error when no interfaces are configured. As it is run on
startup, the daemon exits in this case. To avoid this, add an additional
check so an error is only returned in an actual error case.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>

tailscale: Update to 1.48.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

net/mosquitto: bump to 2.0.17

This is a security and bug fix release.

Security:
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
  messages with the same message ID, but then never respond to the PUBREC
  commands.
- CVE-2023-0809: Fix excessive memory being allocated based on malicious
  initial packets that are not CONNECT packets.
- CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a
  will message that contains invalid property types.
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
  identity are valid UTF-8.
- Fix potential crash when loading invalid persistence file.
- Library will no longer allow single level wildcard certificates, e.g. *.com

Bugfixes of note or relevance to OpenWrt:
- Fix bridges with non-matching cleansession/local_cleansession being expired
  on start after restoring from persistence. Closes #2634.
Client library:
- Use CLOCK_BOOTTIME when available, to keep track of time. This solves the
  problem of the client OS sleeping and the client hence not being able to
  calculate the actual time for keepalive purposes. Closes #2760.

Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt
plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt
(2.0.17 fixes regressions from the 2.0.16 release)

Signed-off-by: Karl Palsson <karlp@tweak.au>

v2ray-core: backport upstream Go 1.21 updates

Fix build for Go 1.21.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mdio-tools: update to 1.3.0

Update the mdio-netlink kmod and userspace mdio-tools to version 1.3.0.

[v1.3.0] - 2023-07-24
---------------------

Primarily widen the gamut of supported kernel versions, now supporting
all kernels from 5.2 and onwards.

- mvls: Support for 88E6320/88E6321

- mdio-netlink: Adapt to the upstream C22/C45 refactor.

Signed-off-by: Zhi-Jun You <hujy652@protonmail.com>

bottom: New package

Bottom is a top/htop workalike with few additional features, written in
rust.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

natmap: update to 20230820

Signed-off-by: Ray Wang <r@hev.cc>

sqm-scripts: Bump to v1.6.0

Fixes an issue with DSA switch compatibility

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Merge pull request #21874 from thess/unbound-SSL-workaround

Unbound: Silence SSL unexpected eof messages

Unbound: Silence SSL unexpected eof messages

Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>

php8: update to 8.2.9

This fixes:
    - CVE-2023-3824

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21882 from dobo90/adguardhome_0.107.36

adguardhome: update to 0.107.36 and fix compilation with Go 1.21