adblock-fast: Makefile bugfixes and hijack rework

* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <stangri@melmac.ca>

xray-core: Update to 24.12.31

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

boost: Updates package to version 1.87.0

This commit updates boost to version 1.87.0

New libraries in this release:
* Boost.Parser [2]: Framework for building parsers, from Zach Laine.

More info about Boost 1.87.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_87_0.html
[2]: https://www.boost.org/libs/parser/

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

lsof: update to 4.99.4

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

libsoup3: update to 3.6.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.6.9

Signed-off-by: W. Michael Petullo <mike@flyn.org>

fuse-overlayfs: update to 1.14

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgcrypt: 1.11.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.51

Signed-off-by: W. Michael Petullo <mike@flyn.org>

hwloc: update to 2.11.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

vips: update to 8.16.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

tgt: update to 1.0.94

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

wget: update alternative priority

Update wget-ssl and wget-nossl using differet alternative priorities for /usr/bin/wget.

Signed-off-by: Nick Liu <udhappy@gmail.com>

knxd: add dependency for inih

Signed-off-by: Othmar Truniger <github@truniger.ch>

libfmt: bump to version 11.1.1

Signed-off-by: Othmar Truniger <github@truniger.ch>

imx-uuc: add package 'sdimage' and 'ufb'

This adds two small tools useful only on the Freescale/NXP i.MX23/28
devices, so it is bound to the mxs target:
- sdimage: helper to write the required header for the bootstream,
  e.g. during bootloader update
- ufb: can be used in conjunction with NXP's host side mfgtool

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

dnsproxy: Update to 0.74.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

netbird: update to 0.35.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: update to 0.35.0

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.35.0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

netbird: revert fix to build with musl >1.2.4

Partially revert: 7b3d033ab651dd11e0db5fb099d106c9e09a2dc6
 - Revert: Also fixes issue of not being able to build with musl >1.2.4,
   The issue has been resolved as of March 2024. For more details, see:
   https://github.com/mattn/go-sqlite3/issues/1164#issuecomment-1975022901

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

node: remake - do not use shared abseil-cpp

remake this commit https://github.com/openwrt/packages/pull/25582

Fix nodejs compile errors after the introduction of abseil-cpp in #25565

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

golang: Update to 1.23.4

go1.23.4 (released 2024-12-03) includes fixes to the compiler, the
runtime, the trace command, and the syscall package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libwebp: bump to version 1.5.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

numpy: bump to version 2.2.1

Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

bcm27xx-eeprom: update to v2024.11.12-2712

bcm2711:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-10-use-soft-reset-to-preseve-sdram-contents-after-ramoops-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2711/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest

bcm2712:
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-10-add-support-to-override-the-boot-mode-at-power-on-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-10-21-fix-pcie-bar-issue-for-some-switches--latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-05-numa---add-system_heapmax_order0-when-needed-latest
https://github.com/raspberrypi/rpi-eeprom/blob/v2024.11.12-2712/firmware-2712/release-notes.md#2024-11-12-enable-initial_turbo60-by-default-latest

Full changelog: https://github.com/raspberrypi/rpi-eeprom/compare/v2024.09.23-2712...v2024.11.12-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

php8: add patch for loongarch64 support

This backported patch is required to fix the build for loongarch64:
...
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `zend_fiber_init_context':
zend_fibers.c:(.text+0xb34): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb38): undefined reference to `getcontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb74): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: zend_fibers.c:(.text+0xb78): undefined reference to `makecontext'
... loongarch64-openwrt-linux-musl/bin/ld.bfd: Zend/zend_fibers.o: in function `.L170':
zend_fibers.c:(.text+0xe34): undefined reference to `swapcontext'
...

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Revert "node: Do not use shared `abseil-cpp`"

This reverts commit 9e70d3c5b07ac87d0f6d2ad85f60ca8bd0e74105.

As mentioned here:
   https://github.com/openwrt/packages/pull/25582#issuecomment-2561673222

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <softovick@gmail.com>

lua-eco: update to 3.7.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

stress-ng: bump to version 0.18.07

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-lxml: bump to version 5.3.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-et_xmlfile: bump to 2.0.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

django: bump to 5.1.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

sudo: bump to version 1.9.16p2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

knxd: bump to new version 0.14.71

Signed-off-by: Othmar Truniger <github@truniger.ch>

libyder: add package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-platformio: Add package (build system)

Signed-off-by: Austin Lane <vidplace7@gmail.com>

node: Do not use shared `abseil-cpp`

Signed-off-by: Austin Lane <vidplace7@gmail.com>

cloudflared: Update to 2024.12.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

net-snmp: support compilation with GCC 11 permissively

Use #elif defined instead of #elifdef as seen elsewhere throughout the patch
file. This avoids the following errors when compiling with GCC 11:

```
mibgroup/ucd-snmp/proc.c:45:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
   45 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef

mibgroup/ucd-snmp/proc.c:243:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
  243 | #elifdef HAVE_PCRE_H
      |  ^~~~~~~
      |  ifdef
```

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>

ack: Update to 3.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

lxc: update to 6.0.3

No patches needed to be rebased/simple version bump.

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>

dnsdist: update to 1.9.8

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

pdns: update to 4.9.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

pbr: update to 1.1.8

* update to 1.1.8 release version
* APK-style version stamping for init script

Signed-off-by: Stan Grishin <stangri@melmac.ca>

python-pypubsub: Add package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

abseil-cpp: Add Package

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-tabulate: add package / hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-click: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

libulfius: Install library on target

Signed-off-by: Austin Lane <vidplace7@gmail.com>

alist: Update to 3.41.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-pyelftools: add package / hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

python-pyserial: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

qbee-agent: bump version to 2024.50

Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.73.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

docker-compose: Update to version 2.32.1

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.1

Signed-off-by: Javier Marcet <javier@marcet.info>

liborcania: Install library on target

Signed-off-by: Austin Lane <vidplace7@gmail.com>

knxd: bump to version 0.14.68

Signed-off-by: Othmar Truniger <github@truniger.ch>

qemu: add build for qemu-ga & virtio-console-helper on x86 target

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

pbr: improve status_service output

Signed-off-by: Stan Grishin <stangri@melmac.ca>

docker-compose: Update to version 2.32.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.32.0

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.31.0

Release notes:
https://github.com/docker/compose/releases/tag/v2.31.0

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 2.30.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.30.3

Signed-off-by: Javier Marcet <javier@marcet.info>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <ynezz@true.cz>

qemu: fix error on python dependency at build

qemu need a recent version of python build , this is visible when you build with the docker image of the sdk see https://github.com/openwrt/docker/
error generated during the build : found no usable tomli, please install it

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

haproxy: update to v3.0.7

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

wfb-ng: Add wfb-ng package

WFB-ng is long-range packet radio link based on raw WiFi radio.
Adding it to openwrt base packages will help a lot of it users
to use cheap wifi routers (supporting minitoring mode) instead
of build custom hardware yourself.

Signed-off-by: Vasily Evseenko <svpcom@gmail.com>

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

owut: update to 2024.12.10

Bug fixes:
    efahl/owut@887ef92 owut: remove non-upgradable packages from update checks
Enhancements:
    efahl/owut@e38844a owut: cosmetic: add OpenWrt version to request output

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>

yq: Update to 4.44.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2024.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gst1-plugins-bad: build Intel QuickSync plugin only on x86

Intel Media SDK lacks support for many architectures and leads to build
failing. As the QuickSync hardware feature is anyway only supported on
x86 CPUs simply don't build the plugin on other platforms.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

acme-common: Create challenge directory on boot

The challenge directory (for webroot challenges) is on a tmpfs, which
means it doesn't exist on boot. Some web servers (uhttpd in particular)
don't like being configured to serve files from a non-existent
directory. So add a boot() section to the ACME init script that just
creates the challenge directory, and make sure it runs relatively early.
That should take care of the non-existent directory issue, while still
keeping the actual certificate renewal controlled by cron.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

python-requests: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

netbird: change maintainer

- Add myself as maintainer
- Remove `Oskari Rauta <oskari.rauta@gmail.com>`

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

libideviceactivation: update to the latest git version

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libideviceactivation: fix compilation with full NLS

nls.mk is needed.

Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

idevicerestore: update to the latest git version

Notable changes
- initial support for iPhone 16 restore
- depends on libtatsu

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libirecovery: update to 1.2.1

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libimobiledevice: update to the latest git version

Notable changes
- add detection and note about passcode requirement for iOS 16.1
- add support for iOS 17+ Personalized Developer Disk image mounting
- fix heap buffer overflow in ideviceimagemounter
- tools/afcclient: add missing time.h header
- depends on libtatsu, which depends on libcurl

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libtatsu: add package 1.0.4

required by new versions of libimobiledevice and idevicerestore
depends on libcurl

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libimobiledevice-glue: update to 1.3.1

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

usbmuxd: update to the latest git version

Notable changes
- revert default mode back to 1
- add support for modes 4 and 5
- correctly display 10 Gbps USB 3.x
- use more reliable macros to print --version output
- requires libplist 2.6.0

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

libplist: update to 2.6.0

required to update usbmuxd

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

python-orjson: update to version 3.10.12
Relevant changes since previous 3.10.0:
- FIXED: Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.
- FIXED: Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.
- Improve performance of serializing.
- Drop support for arm7.
- int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>

ksmbd-tools: adjust smb2 max read/write/trans and cache

Now for all devices with every size of RAM it is set to:
`smb2 max read = 64K`
`smb2 max write = 64K`
`smb2 max trans = 64K`

Instead of fixed value to 64K is better to check RAM size and adjust to:

32 ~ 64MB RAM, set the value to 64K
64 ~ 128MB, set it to 128KB
128 ~ 256MB, set it to 1MB
More than 256MB leave default size to 4MB

With 64MB and 128MB is better also to disable the read/write cache
`cache read buffers = no`
`cache write buffers = no`

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>

netbird: update to 0.34.1

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.34.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>

tailscale: update to 1.78.1

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>

knot: update to version 3.4.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>

python-urllib3: add hostbuild

Signed-off-by: Austin Lane <vidplace7@gmail.com>

luajit2: update to v2.1-20241113

Signed-off-by: Javier Marcet <javier@marcet.info>

haproxy: Require lua 5.4

Upstream installation guide use lua 5.4, let's follow it.

Link: https://github.com/haproxy/haproxy/blob/master/INSTALL
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>

microsocks: backport upstream fixes

Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>