banip: release 0.8.4-1

* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c5d9b3ded28e13d34ae522179da609b2406f5cd8)

Merge pull request #20866 from jefferyto/newt-0.52.23-openwrt-22.03

[openwrt-22.03] newt: Update to 0.52.23

newt: Update to 0.52.23

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ce086321a0d39c19f8ac62c9293225663be8cb5e)

Merge pull request #20843 from jefferyto/obfs4proxy-0.0.14-openwrt-22.03

[openwrt-22.03] obfs4proxy: Update to 0.0.14

dnsproxy: Update to 0.49.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9ff57568f5ddd586eecf7861a62181f7014b916c)

dnsproxy: Update to 0.49.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e43676a92f20301f613b22f04968589a280cf9be)

xray-core: Update to 1.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c1019c64ea8642b72137f23154aa5e80cb2c3b03)

v2ray-core: Update to 5.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8674af1b0aee3f623566aadf0099a6c5fbca6cfd)

obfs4proxy: Update to 0.0.14

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0759341cd8bbc28a499a1098889be108ef91612f)

Merge pull request #20741 from stangri/openwrt-22.03-curl

[22.03] curl: update to 8.0.1

Merge pull request #20816 from mhei/php8-update-to-8.1.18

[22.03] php8: update to 8.1.18

ruby: update to 3.0.6

This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

This release also includes some bug fixes. See the
https://github.com/ruby/ruby/releases/tag/v3_0_6 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

htop: update to 3.2.2

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 3482ea24e43aafc23b8d26a6de90c13d2244f67e)

php8: update to 8.1.18

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #20805 from 1715173329/g1198

[openwrt-22.03] golang: Update to 1.19.8

Merge pull request #20798 from gstrauss/lighttpd-1.4.69-1-openwrt-22.03

lighttpd: update to lighttpd 1.4.69 release hash - backport to openwrt 22.03

golang: Update to 1.19.8

Included fixes for:
- CVE-2023-24534
- CVE-2023-24536
- CVE-2023-24537
- CVE-2023-24538

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lighttpd: update to lighttpd 1.4.69 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8f2fbf093a42040dcc226dee4fcd493a215645ed)

lighttpd: remove patch included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c5297aca299524a0a2e44a40eebc85f06133784d)

lighttpd: add lighttpd-mod-webdav_min package

add lighttpd-mod-webdav_min package alternative to lighttpd-mod-webdav

lighttpd-mod-webdav_min is more minimal than full lighttpd-mod-webdav.
lighttpd-mod-webdav_min does not support PROPPATCH, LOCK, UNLOCK, and
by not supporting those methods, removes dependencies on libxml2,
libsqlite3, and libuuid.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ed6fe528c1efc549891144967eefe51a73999511)

lighttpd: collect mods now built into lighttpd exe

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 85279b49ceeb411f98623e6febef48b83f04813b)

lighttpd: fix meson build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 74d26813f744ebdc195fb3fbe9b2cd5e8169b2a3)

lighttpd: remove patch included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 66001d5a91087dec6ff9e620b995beaff60506d7)

lighttpd: update to lighttpd 1.4.68 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 6383ae9407280df7f2ac29065bfe22d7bca73ed7)

lighttpd: modify build cmd for type: feature opts

modify build command for meson type: feature options

remove -Dwith_libev=disabled (option no longer has any effect)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4a3b62a92ab21bb6ae373dbbbfc1c5eb16ebc3f5)

lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1

add lighttpd-mod-rrdtool dependency on rrdtool1

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9f299e881ba7ae665d5251d1e4c8a9585b039911)

lighttpd: lighttpd-1.4.67-4

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a09dbfcf976f8d0c0247f068945dbd321e314bf8)

lighttpd: document crypto lib options in Makefile

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 43741e748f8569be4aaf3ba3a99867eef32c74e4)

cloudflared: Update to 2023.4.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 62fdfb827893a221975379a66ae30fa37396a4d8)

borgbackup: bump to 1.2.4

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 45a3afbfb771f43c39051916c6e920482d25fd09)

borgbackup: add missing dependencies

The initial package submission was missing
some required and optional dependencies
due to lack of testing on a system without any python
related packages pre-installed.

Some optional but highly recommended dependencies
were discovered with the stdlib module as described in:
https://github.com/openwrt/packages/blob/392a68e24774294590abf9c08ea1832f2cee190d/lang/python/README.md

Fixes #20441

Signed-off-by: Julien Malik <julien.malik@paraiso.me>
(cherry picked from commit 1f25be97b6c73691ec5a00a9deb9a7456e59be8c)

 banip: update 0.8.3-2

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d178bf5d35417141a201e9ada7d04e912e4d2d7d)

 banip: release 0.8.3-1

* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c07fae25e70a159b48154fadcb3fcb3fd4f73ef1)

Merge pull request #20791 from hnyman/apinger2203

Apinger: backport apinger-rrd and the procd conversion to 22.03

v2raya: Update to 2.0.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 23e134816688793d42cc52ad78a9fc65f4e6d3bc)

apinger: add rrd graph support

- add package apinger-rrd for RRD graphs
- add RPC to get an overview and update graphs
- fix interface hotplug to restart apinger instance
- add patch to split alarms list in the status

Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
(cherry picked from commit 4281b7639c79ece68b50031f37ee8c693f32b4ef)

apinger: improve uci and procd support

- convert apinger into procd instances
- generate instance specific apinger.conf from uci
- hotplug handling for apinger alarms
- restart apinger interface instance on ifup action of interface
- don't exit on packet count mismatch, allows to use apinger as monitor
  for multiple targets handling
- add srcip option to target configuration, allows specifying source ip
  used to monitor target
- allow creating status file in script parseable format

Patches are ported against latest version of apinger and referenced from
https://git.pld-linux.org/?p=packages/apinger.git;a=summary

Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
(cherry picked from commit e4e3206f3283e673bfac717e00332deb8dd2c079)

rrdtool: update PKG_SOURCE_URL

Signed-off-by: Ryan Shi <qweaszxcdf@users.noreply.github.com>
(cherry picked from commit 164e0257e7c079b06e5d862cbc31e1f11ac651cb)

dnsproxy: Update to 0.48.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 04d5fa8dfc92047e2875db39ff10256d4b0aed12)

yq: Update to 4.33.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0b255830e9b33c4848c4ee65419ca3755baf883f)

nano: make nanorc world readable

If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 76d02f933f006fb854c03fa1738ed795acc32e50)

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 23e6200e4d0a435915ab4ef9700a7297e89b68b3)
(cherry picked from commit 0ff1a8666be7cc3ebde5838c4b166a2438f87567)

node: bump to v16.20.0

Description:
Update to v16.20.0
Fixed a bug with system-icu.
Fixed a bug when selecting arm-fpu for vfpv3-d16.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

banip: update to 0.8.2-6

* restored some accidently removed init stuff in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 692fe359a9afab6a388907491f0169e155b9e0cd)

banip: update to 0.8.2-5

* fixed missing version number when installed as separate package (not in build)
* fixed cornercase init and mailing issues
* sorted Country list by country names ascending
* fixed some shellcheck findings

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9bf92c88d771cf4e3bbe851c271f641ff1a0957)

yq: Update to 4.33.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e2cf4fa9a119076d23f26e3803247b5d83c71547)

dnsproxy: Update to 0.48.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ac880fb12264144aedcb756ba0763626598a25a)

dnsproxy: Update to 0.48.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e5395396bd34c8eba0e01529fe01637e4468e401)

dnsproxy: Update to 0.48.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dbf66a3ae51a3b657ebf4c8be79780109ee4d694)

natmap: update to 20230322

Signed-off-by: Ray Wang <r@hev.cc>
(cherry picked from commit feccbf86124724d30e2e95773c4defb01b6b5732)

curl: update to 8.0.1

* https://curl.se/changes.html#8_0_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5640b7c94a6b90a2563c072b6080793f5fd86a1c)

banip: update to 0.8.2-4

* fixed a race condition if the service is in a disabled state

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 6b1df72e64628dbeb68a2b5fd2cfb68db87a2d2f)

banip: update to 0.8.2-3

* raise max. timeouts from 10 to 30 seconds to stabilize the autodetection on slow hardware
* made interface trigger action configurable, set 'ban_triggeraction' accordingly (default: 'start')
* made E-Mail notifications configurable to receive status E-Mais with every banIP run,
  set 'ban_mailnotification' accordingly (default: disabled)
* small fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1f5bc3f0f143536892302da6a1436e235e860a54)

sqlite3: Update to 3.41.1

Removed `SQLITE3_JSON1` option as it was dropped by upstream.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a7dfb006fe7478841e9a0f81ea594ab1a2fb04bf)

adblock: update to 4.1.5-7

* fix cornercase issue with duplicate entries in black- and whitelist
* change cpbl source URL
* firewall redirects now blocks IPv4 and IPv6 (set family to "any")

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a4b9697684ad13e9c60e22a830c5d5c28bd5e9ad)

yq: Update to 4.32.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65dc683efe329a13afdc632150f886b88d7f5edf)

cloudflared: Update to 2023.3.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c26190089c99367140de63f1b1ba188567569d)

v2raya: Update to 2.0.4

- Added TproxyNotSkipBr flag for OpenWrt.
- Removed all upstreamed patches.
- Removed deprecated option.
- Re-enable ipv6/nftables auto-detect.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5062779dc79091d63929d44b6354e1cbefa2e8f5)

Merge pull request #20682 from dibdot/banIP

[22.03] banip: push 0.8.2-2 to stable branch

banip: push 0.8.2-2 to stable branch

* banIP is now nft/fw4 compatible and has been successfully tested by many 22.03 users.

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #20678 from TDT-AG/pr/20220416-openwrt-22.3-strongswan-cves

strongswan: backport CVE fix

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4dd80ed51995ca9e8047003ada33fc98cb9ec57d)

xray-core: Update to 1.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0e96d2f862a67763f0809c80aa5990a5bfbe23fc)

strongswan: add fix for CVE-2022-40617

Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #20612 from paper42/22-yt-dlp-2023.3.4

[22.03] yt-dlp: update to 2023.3.4

Merge pull request #20675 from jefferyto/golang-1.19.7-openwrt-22.03

[openwrt-22.03] golang: Update to 1.19.7

Merge pull request #20666 from mhei/22.03-php8-update-8.1.16

[22.03] php8: update to 8.1.16

golang: Update to 1.19.7

Includes fix for CVE-2023-2453 (crypto/elliptic: specific unreduced
P-256 scalars produce incorrect results).

This also includes makefile updates for Go 1.19.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8677ed11e30b78de526dfacca58f24e041ff7833)

miniupnpd: bump to 2.3.3

Fixes: #19637
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f7c0e413f4fac6bfc0c2d17b0bb87da359d9479a)

php8: update to 8.1.16

This fixes:
    - CVE-2023-0567
    - CVE-2023-0568
    - CVE-2023-0662

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

gphoto2: fix compilation with BUILD_NLS

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b90f1b5ad1d3bf8497d76b27f04a537f693e88a4)

Merge pull request #20646 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: update init file and config

Merge pull request #20541 from stangri/openwrt-22.03-curl

[22.03] curl: update to 7.88.1

Merge pull request #20649 from champtar/mv88e6xxx_dump_update_2203

[22.03] mv88e6xxx_dump: update to 2023.03.08

mv88e6xxx_dump: update to 2023.03.08

This fixes 2 issues where mv88e6xxx_dump was displaying
data incorrectly for --vtu and --global2

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 2bf3832193fdfe86e948f35fcc08b3ea5a341562)

simple-adblock: update init file and config

* move network.sh and jshn.sh includes into load_validate_config function
  to prevent errors when adding the package to image with the Image Builder
* add @bongochong compressed domains block-list to the config

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 35f4830de79f332dd532fcb26e704d1356f99c94)

crowdsec: update to 1.4.6
Update crowdsec to latest upstream release version 1.4.6

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3

frp: update to 0.48.0

Changelog: https://github.com/fatedier/frp/releases/tag/v0.48.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 4f8874f636f39928a71da053103eefc70e71d0de)

frp: update to 0.47.0

A restart is only required if `$conf_file` has been modified.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit 8fcc48c339060b6652f6093278c8a74b0c7ca542)

v2raya: switch to use nftables

Backport a pending PR to add nftables support.
Upstream PR: https://github.com/v2rayA/v2rayA/pull/805

As nftables merged ipv4/ipv6 support into a single command, so simply
enable ipv6 support by default.

While at it, backport a upstreamed fix for simple-obfs plugin.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 41987abc8406775c88538cac2377d4b82875d0af)

perl-ack: Update to 3.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 26b92db22c9a051447ee445acaa11a795fb35a4e)
(cherry picked from commit de085a237a63f37695b6f1758eee3759861104ba)

v2ray-core: Update to 5.4.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d40efc08119d1bb79313fda252e4450fb114615a)

crowdsec-firewall-bouncer: update to 0.0.25

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.25

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3

Rework:
- now based on uci config file
- create nftables tables and chains in initd script

yt-dlp: update to 2023.3.4

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0c22dc099b0943f7423bcb0be6edccb9759cd218)

haproxy: update to v2.4.22

- Update haproxy download URL and hash
- This release fixes a critial flaw known as CVE-2023-25725. See:
  http://git.haproxy.org/?p=haproxy-2.4.git;a=commit;h=486cd730485c8a119ef65b3f792134b56e7941b4

Signed-off-by: Christian Lachner <gladiac@gmail.com>

v2raya: drop wrong patches

These patches should not be backported to OpenWrt, otherwise tproxy
won't work for devices connected to br-lan (bypassed by the fw rules).

We have introduced a new compile-time flag for new version (which
is not released yet), but it's unnecessray to backport redudant
patches as here is still at the old version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40669c4135d829254ba66b0f1a6827f94d229c96)

yq: Update to 4.31.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1343bb585607295d2e466dfed0dd596a14570c54)

yq: Update to 4.31.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b76bd94605c9c53b64935c78bba6ff98e2847e16)

cloudflared: Update to 2023.3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8e10f5f9a1e1b0c4b3362b09c8240b6faa989c7c)

cloudflared: Update to 2023.2.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b52fdec65966ead40aba5c9aefba88386623e614)

sed: remove old libpcre dependency

Signed-off-by: Alan Swanson <reiver@improbability.net>
(cherry picked from commit 0a00f0f2a582bc11979ecef2c60a68584fe4e935)

msgpack-c: Update to 5.0.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5890d2f2d76c31de85ae54a586c445a936cc4c14)

golang: Update to 1.19.6

go1.19.6 (released 2023-02-14) includes security fixes to the
crypto/tls, mime/multipart, net/http, and path/filepath packages,
as well as bug fixes to the go command, the linker, the runtime,
and the crypto/x509, net/http, and time packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0cdd7b8c0e7a5461e0a9311734c0cc6cd87aa188)

curl: add lang/perl-www-curl/patches/230-curl_7.88_compat.patch

* fixes compilation issues from https://github.com/openwrt/packages/pull/20540#issuecomment-1439537287

Signed-off-by: Stan Grishin <stangri@melmac.ca>

curl: update to 7.88.1

* https://curl.se/changes.html#7_88_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 678bad7e86c51aa96dc2f9336f7ff32b19c6de99)

node: bump to v16.19.1

Thursday February 16 2023 Security Releases

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
* CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
* CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
* CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 6cd5a2c57f8120d4b65518ee0dee559d4fe2c75c)

zerotier: update to 1.10.3

Signed-off-by: Moritz Warning <moritzwarning@web.de>

git: update to 2.34.7

Fixes CVE-2023-22490, CVE-2023-23946

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 06f466cc61ce5e5c98d1147c165d3e96c31e41cc)

Merge pull request #20555 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: 2022-10-15-11 update

https-dns-proxy: 2022-10-15-11 update

* config file update
* introduce boot() function

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 30aefce999bab3c24ce06594ee2f411cf2d8c72f)