python3: Update to 3.9.13

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

CircleCI: Add 21.02 GPG and usign public keys and update to Debian 10

Debian 9 (stretch) comes with Python 3.5 by default and End of Life is going to be
on 30th June 2022, let's update it to Debian 10 (buster).

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 599e41c14b8d5ab513a6a7581458a60e06543f89)

irqbalance: remove local patch for socket directory

Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad972ddb105264bdce3fffd0622edbd59b)

irqbalance: update to 1.9.0

Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d956c719b3b57707f1ef690aeb4d707c)

protobuf-c: don't build shared host library

No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89c2971c6effb3c1b3525cdb26e20c95013f6701)

protobuf: update to 3.15.6

Remove upstreamed patch.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1d0d8e057cab2a2fb573c3952b88b26a9def5d96)

openwisp-config: update to 1.0.0

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>

xray-core: fix build in go 1.17

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.5.6

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589f48345ec98a0808cfbd8b5cb0ca190)

yq: Update to 4.25.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff30315124f8e3733bac62b5846a23c24)

Merge pull request #18653 from mhei/21.02-libxml2-update

[21.02] libxml2: update to 2.9.14

libxml2: update to 2.9.14

This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e)

Merge pull request #18630 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.19

php8: update to 8.0.19

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

node: bump to v14.19.3

Updates OpenSSL to 1.1.1o (No impact in openwrt)
Upgrade npm to v6.14.17.
etc...

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

vpnc: Update to 0.5.3+git20220517

The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb8cd43b765ba65e70a036820c03de83)

haproxy: Update HAProxy to v2.2.24

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

audit: Fix compilation with kernel 5.15

Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d59ef59bfcb4b8c38fa9c93038cde8fb)

bluez: Update to 5.64, update/refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c307ff3c1d549ff8ab1eb005a2b9dcd67)

bluez: fix compilation with glibc

sync() is implemented now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df8a0f324d377d1ebdca11fef45f877c3256185d)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

bluez: update to 5.62

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ee221d0166f3e555e5cc7f07a68113f6d2697bf)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

bluez: update to 5.60

Switch to AUTORELEASE for simplicity.

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5c467bb76f38179dcbba3868c686b9b6cc8d4c55)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

docker: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac56718b64c29780a6464d39ef5e1f5c5278)

dockerd: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b129555835a79c064166c170bf3ae53)

libnetwork: Updated to 339b97 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898deb76cc1645301f07d579366c5d08b)

containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7bdcefe5e9c97e0f8ec17bc4f97b9251)

runc: Update to v1.1.1 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c495b88265165f9ed9093559f7ee5136)

openldap: update to 2.4.58

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f200ccd6fc6050357874e4732533aee14a6b2ea1)

* remove a dead mirror
* use https
* fixes CVE-2021-27212

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

usteer: update to latest HEAD

7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a0578d0759e5a03309e5be38cf746db)

Merge pull request #18362 from stangri/openwrt-21.02-https-dns-proxy

[21.02] https-dns-proxy: 2021-11-22-3: add support for Canary Domains

telegraf: Update to version 1.22.4

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bbc7b66439437429fbd4f2c9fbfa0725)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Merge pull request #18544 from hexian000/openwrt-21.02

[openwrt-21.02] privoxy: update to 3.0.33 and fix the init script

golang: Update to 1.17.10

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

ci: Look for changed packages in the PR branch only

Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac379ecae55993a8faa583910423f620e7)

privoxy: update to 3.0.33 and fix the init script

1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b957891c23d030c1e64c4857cb1a1035650)

lxc: export systemd cgroups after install

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b95053bf958a4001fb0a82c4563bf345e2)

postgresql: security update to 13.7

* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

dawn: update to 2022-05-09

7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

docker:  Update to 20.10.14

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb8fc30e33f6d4fa670f7379d4d31e6a)

dockerd: Update to 20.10.14, and update version checking mechanism

https://github.com/moby/moby/commit/a7a7c732c0dc02ee5b5515f4ca868ef50cafa4a1
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22a89bfdf4dd1edac25e4a8256717a68)

containerd: Update to 1.5.11

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a0784f1b0a04670f38ffedddb46087dee)

runc: update to 1.0.3

* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995ab3c6d56c22b282c277a9335ba978f0)

Merge pull request #18324 from jamesmacwhite/21.02-adguardhome-v0.107.6

[21.02] adguardhome: Update v0.107.6

adblock: list maintenance

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf00f387a04cd174da99064f88c21cab)

adblock: 4.1.3-8

* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec60690674d4525dd14bade280110743e61b)

 adblock: 4.1.3-7

* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b366f0fe90d4b0cda5a78f91aa4a738)

adblock: 4.1.3-6

* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81d468489f922dfc30195772f63d6284a6f6f508)

adblock: make reproducible

Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5d095a136610e599bbd73ff164aeec89d2cde171)

htop: update to 3.2.0

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d92257505526a5b8ceac94f9f28f887abbd)

youtube-dl: update to 2021.12.17

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163669257c137ebf4e459757b37ddce96)

youtube-dl: update to version 2021.6.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fbe30791792f47e6b925f80ca32f6b4573f4fb0d)

usteer: update to latest HEAD

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

ecdsautils: update to v0.4.1

This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e58226a4cd062e92c2b12e20dcd7854e82)

hwdata: update to version 0.359

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6a765695e652b1029478611ef4f0e79)

tor: bump to 0.4.7.7 stable

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514443f0cf74f0a302e31752d2cb55496)

tor: bump to 0.4.6.10 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790b74dcd4da352e70e059c9585a3f8d7)

tor: bump to 0.4.6.9 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 72974bed43d5af0ea17769f33ce6a3824cc858ec)

tor: bump to 0.4.6.8 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 2997d2dcf53a6a687b9a37016a7dbbdb68096831)

tor: bump to 0.4.6.7

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit c12cb0cdde8e7e43ed8c208797cc80e0a3c9ca81)

tor: bump to 0.4.6.6 stable

Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a45b962eef0b2cb85525ddafce11a63b4f9190d5)

rclone: Update to 1.58.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418cfe4c07b8b69e068e5663c0ceaa75b)

libtorrent-rasterbar: Update to 2.0.6

Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b1548d3070839bd1ee6977e25fc55030e6)

libtorrent-rasterbar: update to 2.0.5

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a12be0f1fb1634b1364074cda790f28)

libtorrent-rasterbar: update to 2.0.4

Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff09107ab9b03331e433a1750c826c3747dd)

libtorrent-rasterbar: update to 1.0.2

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6ea205611b1915f823d007514adc3039)

yq: Update to 4.25.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255ed514a032dce97fb56dadf11c63f0a)

telegraf: upgrade to version 1.22.3

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5bc3a54c696d2903c7d45cae8890e235)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

django: bump to version 3.2.13

Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

nano: update to 6.3

Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40da733a9f4736cb503af79484db6b160)

knot: update to 3.1.7

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572c7f1acf34d60c468a3a1cceafbf426)

Merge pull request #18392 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.18

php8: update to 8.0.18

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

telegraf: Update to version 1.22.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba12b8c2d21fb8b8cbcb2d6e4821b5f57)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

xray-core: Update to 1.5.5

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee1a533e4106a6902260848645f39332)

prometheus-node-exporter-lua: improve ubnt-manager

It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11ccb4c04f610faa56b4695adbbab224d)

Merge pull request #18365 from turris-cz/ffmpeg

ffmpeg: update to version 4.3.4

git: update to version 2.34.3

Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d9c3f07c27dd3abe9c666eec003fb8b)

Merge pull request #18369 from jefferyto/golang-1.17.9-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.9

golang: Update to 1.17.9

Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

https-dns-proxy: 2021-11-22-3: add support for Canary Domains

Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be433f43838a109c326152ef86354fa8da)

ffmpeg: update to version 4.3.4

Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n4.3.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ruby: update to 3.0.4

Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ci: use openwrt/gh-action-sdk@v4

[ Upstream commit b1355832a05f96d96081044a90b4c9137eb15fad ]

In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

Merge pull request #18298 from jamesmacwhite/21.02-ooniprobe-v3.14.2

[21.02] ooniprobe v3.14.2

delve: Update to 1.8.2

See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>

usteer: update to latest HEAD

f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6ba0ab1aad8a6c816354486067e5e521)

python3-speedtest-cli: update to 2.1.3

This includes a fix for a breaking change in the Speedtest API.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f4945ea116365ccab3070ab31bed99ce7)
Signed-off-by: James White <james@jmwhite.co.uk>

adguardhome: Update v0.107.6

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73ec5f2e027778aa1582d38bab851f66a)

ooniprobe: Update 3.14.2

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf8fc6067b9265d44aa9b593a591fa68)

ooniprobe: update to version 3.10.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3f62bd9df117b225a57a9f85f61728a9ebe39b74)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.9.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eda48170ecffad0e6239ef2190cfb063ef3b10b4)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.9.0

Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 354523d5b5a563d2d8c6a59a12f1950a471ddba5)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b2921628abbc9bd13321ed3d09bdcd8a378f6463)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.7.0

Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17b18d825cc385fc2df0fa2f6a5e7775d778ef65)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.5.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3b25f4561f3f29066e85df4907c1e277881f2fcd)
Signed-off-by: James White <james@jmwhite.co.uk>

yq: Update to 4.24.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad061071aaf5b229db323eb3cdf01b5bb064b)

yq: Update to 4.24.4

Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a74fd6663dbc9b7f1e9d7cfc89e22e1)

prometheus-node-exporter-lua: fix ubnt-manager collector

Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9eb (" prometheus-node-exporter-lua: add ubnt-manager collector ")
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039bba1daa2af11b3b3cebe367e2a3d7c3)

prometheus-node-exporter-lua: add ubnt-manager collector

Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9ebcbff3fbaeeda0d83bba6573cf578)

ubnt-manager: add ubnt-manager

This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29d8f7f00089b14564d5248694e12638)