dnsproxy: Update to 0.39.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

socat: update to 1.7.4.1

Remove upstreamed patch.

Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>

pillow: add webp support

Requested via: https://github.com/openwrt/packages/pull/16732

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libs: libwebp: bump to 1.2.1 & assign myself as maintainer

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

openpyxl: bump to version 3.0.9

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

stress-ng: bump to 0.13.03

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #16663 from zhujunsan/master

ddns-scripts: Add dnspod.cn

ddns-scripts: Add dnspod.cn

Signed-off-by: Jun Zhu <zhujunsan@gmail.com>

Merge pull request #16745 from neheb/tinc2

tinc: update to 1.1pre18

sudo: bump to version 1.9.8p2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #16746 from neheb/secc2

libseccomp: update to 2.5.2

Merge pull request #16679 from paper42/mutt-2.1.3

mutt: update to 2.1.3

Merge pull request #16760 from mhei/ci-typo

github-ci: fix small typo

github-ci: fix small typo

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #16756 from mhei/php7-update

php7: update to 7.4.24

Merge pull request #16755 from mhei/php8-update

php8: update to 8.0.11

fontconfig: avoid compilation problem (on Ubuntu)

Partially revert an upstream commit to avoid build breakage
on Ubuntu.

Refrerence to discussion starting at
https://github.com/openwrt/packages/pull/16726#issuecomment-927309052

Upstream commit:
  https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/ae9ac2a1bfb6fa800b99791b6fc36711dd0c1fbc
  meson: fix cross-compilation issues with gperf header file preprocessing

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

delve: Update to 1.7.2

See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>

Merge pull request #16515 from jow-/nlbwmon-bump

nlbwmon: update to latest Git HEAD

php8: update to 8.0.11

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: update to 7.4.24

This fixes:
    - CVE-2021-21706

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libarchive: update to 3.5.2

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openssh: update to 8.8p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>

python3: enable bluetooth support by default

Bluetooth support requires bluez-libs present, but they are only required
for the build, and don't seem to be needed to be present on the target.

There isn't any linking required to libbluetooth. It's only the bluetooth.h
header that is required for building BT support into Python.

For testing, this snippet was used from `Lib/test/test_socket.py` (inside
cpython):
```
def _have_socket_bluetooth():
    """Check whether AF_BLUETOOTH sockets are supported on this host."""
    try:
        # RFCOMM is supported by all platforms with bluetooth support. Windows
        # does not support omitting the protocol.
        s = socket.socket(socket.AF_BLUETOOTH, socket.SOCK_STREAM, socket.BTPROTO_RFCOMM)
    except (AttributeError, OSError):
        return False
    else:
        s.close()
    return True
```

Fixes: https://github.com/openwrt/packages/issues/16544
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

rtty: update to 8.0.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Merge pull request #16740 from mhei/php8-fix-16642

php8: fix module loading with glibc (refs #16642)

Merge pull request #16741 from mhei/php7-fix-16642

php7: fix module loading with glibc (refs #16642)

dnsdist/pdns/pdns-recursor: Remove 010-time_t-check.patch

This patch to remove PowerDNS' check for whether time_t is 64-bit is not needed anymore,
due to OpenWrt now having a more recent musl libc where time_t is 64-bit on all architectures.

Signed-off-by: Wout Bertrums <wout@wbnet.eu>

dnsdist: Update to v1.6.1

The patch for GCC 11 is not needed anymore because it is upstream now:
https://github.com/PowerDNS/pdns/pull/10400

Signed-off-by: Wout Bertrums <wout@wbnet.eu>

libseccomp: update to 2.5.2

Use AUTORELEASE for simplicity.

Add libtool patch to fix compilation under some platforms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tinc: update to 1.1pre18

Switch to AUTORELEASE for simplicity.

Switch to normal tarballs.

Add license information.

Reorganize Makefile for consistency between packages.

Add libtool patch fixing compilation under some conditions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ttyd: fix ssl ca option init

Signed-off-by: Max S Kash <asukms@ya.ru>

hidapi: update to 0.10.1

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

zerotier: update to 1.6.6

This is a security release (see [1]).

[1] https://www.zerotier.com/2021/09/21/incident-response-to-september-20th-2021

Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>

libconfig: update to 1.7.3

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libfstrm: update to 0.6.1

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpg123: update to 1.29.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nlohmannjson: update to 3.10.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

minizip: update to 3.0.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

protobuf: update to 3.17.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libcoap: update to 4.3.0

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

smcroute: update to version 2.5.3

Signed-off-by: Moritz Warning <moritzwarning@web.de>

libs: openblas: use GENERIC for MIPS{EL} and MIPS24K for CPU_TYPE == 24kc

Up until now, we were defaulting to MIPS24K for all MIPS archs.
But, we should use the GENERIC target for MIPS{EL} and the MIPS24K target
for the 24kc CPU_TYPE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libs: openblas: patch openblas to handle mips{64}el arch names

Related to PR: https://github.com/xianyi/OpenBLAS/pull/3387

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libs: openblas: use GENERIC target for MIPS64 archs and as default

The GENERIC target for OpenBLAS seems good enough for most configs, so try
to use it for MIPS64 and as default for other archs.
This was already being used for x86{_64} archs.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

php8: fix module loading with glibc (refs #16642)

Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: fix module loading with glibc (refs #16642)

Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #16738 from stangri/master-curl

curl: update to 7.79.1

curl: update to 7.79.1

* update to [7.79.1](https://curl.se/changes.html#7_79_1)

Signed-off-by: Stan Grishin <stangri@melmac.net>

usbip: Add init script for usbip-server

Signed-off-by: Alexander Sulfrian <asulfrian@zedat.fu-berlin.de>

pigeonhole: update to 0.5.16

Update URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fontconfig: update to 2.13.94

Remove upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lxc-auto: step by 1 sec up to $max_timeout

If the user defines a $max_timeout of 30, the service will wait 30 seconds
before it considers lxc-stop complete even though lxc-stop might actually
finish much sooner.  This introduces an unneeded delay.

This commit changes the behavior to check once per second to see when lxc-stop
actually stops doing so up to $max_timeout.  It also slightly simplifies the
code with logic to append the -t $max_timeout to the script.

Signed-off-by: John Audia <graysky@archlinux.us>

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

javascript-obfuscator: bump to 2.19.0 and switch to autorelease

New version of package node-javascript-obfuscator.

Signed-off-by: Zbyněk Kocur <zbynek.kocur@fel.cvut.cz>

freetype: update to 2.11.0

Remove upstreamed patches.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgcrypt: update to 1.9.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libexif: update to 0.6.23

Switch to AUTORELEASE for simplicity.

Fix license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Fixes CVE-2020-0198 and CVE-2020-0452.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libdrm: update to 2.4.107

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

m4: update to 1.4.19

Remove upstream backport.

Add patch fixing compilation with powerpc and musl.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gerbera: update to 1.9.1

Remove upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gzip: update to 1.11

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpd: update to 0.22.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gdbm: update to 1.21

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fuse3: update to 3.10.5

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pkgconf: update to 1.8.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

transmission: add two more syscalls to seccomp filter

Testing showed that additional syscalls are needed on ARMv7.
Add "clock_gettime64" and "statx" which seem to be used now instead
of "clock_gettime" and "stat" syscalls which are already listed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libuwsc: fix compilation with GCC11

Bad if identation is now an error.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dnsproxy: Update to 0.39.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.4.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

prometheus-node-exporter-lua: fix broken control flow

Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>

attendedsysupgrade-common: use sysupgrade.openwrt.org

A new server was added which runs within the OpenWrt cloud, it's much
faster and should be used instead. For development the server at
https://asu.aparcar.org stays available.

Signed-off-by: Paul Spooren <mail@aparcar.org>

auc: use /json/v1/

Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>

nut: Add the option to compile Nut NetXML drivers with the Nut package.

Also modifies the nut-server init script to include options specific to the netxml driver.

Signed-off-by: Seb Belcher <sdjbelcher@gmail.com>

hcxtools: update to 6.2.4

Refresh patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

hcxdumptool: update to 6.2.4

Remove upstreamed patch. Refresh other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #16687 from stintel/keepalived

keepalived: fix build with IPVS disabled

Merge pull request #16688 from paper42/apparmor-fix-include

apparmor: fix include path

Merge pull request #16690 from paper42/nnn-4.2

nnn: update to 4.2

openvswitch: add option for failure mode

When Open vSwitch is configured to use a controller, but is unable to
connect to it, Open vSwitch will setup flows to allow all traffic, if
the failure mode is not configured, or set to standalone.

As this might be a security hazard, it is also possible to configure
Open vSwitch in a secure failure mode. Enabling this mode causes Open
vSwitch to drop all traffic if it is unable to connect to the
controller.

Redirect stderr of the command to /dev/null as it does not support the
--if-exists option.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

openvswitch: fix build with libunbound

Due to a copy-paste error, libopenvswitch is missing a dependency when
Open vSwitch is configured to use unbound:

Package openvswitch-libopenvswitch is missing dependencies for the following libraries:
libunbound.so.8

Use the correct config symbol to solve this.

Fixes: 45c8cc9d8a7b ("openvswitch: make libunbound optional")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

nnn: update to 4.2

* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

keepalived: fix build with IPVS disabled

The genhash binary is only built when IPVS is enabled, so make its
installation depend on IPVS being enabled.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

dtc: switch to compiling with meson

Faster and more parallel friendly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openvswitch: add option for OpenFlow datapath desc

Add a UCI config option to set the OpenFlow datapath description. This
allows setting a human readable description of the bridge, e.g.
"Building x, Floor y, AP z", which makes it easier to recognize the AP.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

apparmor: fix include path

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

mdio-tools: Bump version to 1.0.0

Upstream released 1.0.0, so change the package to the git tag 1.0.0

Mainly documentation and argument handling changes

Signed-off-by: Damien Mascord <tusker@tusker.org>

mutt: update to 2.1.3

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

Merge pull request #16662 from kuanyili/mobile-broadband

bump libqmi and modemmanager

python3-texttable: update to version 1.6.4

 - Fix alignment bug when deco is modified

Signed-off-by: Javier Marcet <javier@marcet.info>

python-dotenv: update to v0.19.0

Changed:

 - Require Python 3.5 or a later version. Python 2 and 3.4 are no
 longer supported

 - Raise ValueError if quote_mode isn't one of always, auto or never
 in set_key

 - When writing a value to a .env file with set_key or dotenv set
 <key> <value>

Added:

 - The dotenv_path argument of set_key and unset_key now has a type of
 Union[str, os.PathLike] instead of just os.PathLike

Signed-off-by: Javier Marcet <javier@marcet.info>

python-docker: Update to 5.0.2

Bugfixes:

 - Fix disable_buffering regression

 - Bring back support for ssh identity file

 - Cleanup remaining python-2 dependencies

 - Fix image save example in docs

Miscellaneous:

 - Bump urllib3 to 1.26.5

 - Bump requests to 2.26.0

Signed-off-by: Javier Marcet <javier@marcet.info>

sudo: bump to version 1.9.8p1

This drops patch 010-cross-compile-fixes.patch
No longer required after:
- https://github.com/sudo-project/sudo/pull/109
- https://github.com/sudo-project/sudo/pull/111

The host-build part can be dropped as the build can now handle building the
mksigname & mksiglist tools with the host tools.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #16665 from 1715173329/yq

yq: Update to 4.13.2

Merge pull request #16667 from 1715173329/xray

xray-core: Update to 1.4.4

Merge pull request #16669 from 1715173329/dnsproxy

dnsproxy: Update to 0.39.6

dnsproxy: Update to 0.39.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.4.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.13.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

modemmanager: bump to 1.18.2

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>