Merge pull request #18339 from mwarning/zt-openwrt-22.03

[22.03] zerotier: fix segfault on ARM platforms

Merge pull request #18332 from clarkwang/v22.03-sexpect

[22.03] sexpect: Expect for Shells

Merge pull request #18333 from clarkwang/v22.03-passh

[22.03] passh: an sshpass alternative

adblock: list maintenance

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf00f387a04cd174da99064f88c21cab)

Merge pull request #18359 from 1715173329/v3

[openwrt-22.03] v2rayA: Update to 1.5.7

htop: update to 3.2.0

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d92257505526a5b8ceac94f9f28f887abbd)

v2rayA: Update to 1.5.7

- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98ce3117fac28020f96f3e7f49ff6106)

youtube-dl: update to 2021.12.17

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163669257c137ebf4e459757b37ddce96)

usteer: update to latest HEAD

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

ecdsautils: update to v0.4.1

This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e58226a4cd062e92c2b12e20dcd7854e82)

hwdata: update to version 0.359

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6a765695e652b1029478611ef4f0e79)

tor: bump to 0.4.7.7 stable

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514443f0cf74f0a302e31752d2cb55496)

etherwake-nfqueue: swap iptables for nftables dependency

Signed-off-by: Mister Benjamin <144dbspl@gmail.com>

rclone: Update to 1.58.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418cfe4c07b8b69e068e5663c0ceaa75b)

apfree-wifidog: fix compile error

which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1dcf4925671142314e2493861bb0e5e6)

gst1-libav: fix compilation with ffmpeg5

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1717048598443973df96cc30ec4044591b72718b)

libtorrent-rasterbar: Update to 2.0.6

Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b1548d3070839bd1ee6977e25fc55030e6)

yq: Update to 4.25.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255ed514a032dce97fb56dadf11c63f0a)

dnsproxy: Update to 0.42.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20a0ad17fdc93545942e5a567872254e)

telegraf: upgrade to version 1.22.3

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5bc3a54c696d2903c7d45cae8890e235)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

frp: update to 0.42.0

Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

dnsdist: update to 1.7.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e2f8ac23f641647c5d9855639788465929f20a65)

nano: update to 6.3

Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40da733a9f4736cb503af79484db6b160)

passh: updated per OpenWrt's common practice

- removed extra white spaces in Makefile
- changed license from GPL-3.0 to GPL-3.0-only
- added test.sh

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 580fe568d62a086f2f864435dd8545a38a2b5d43)

passh: an sshpass alternative

Sshpass does not work well in a few scenarios. Passh is an sshpass
alternative which tries to fix the issues.

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 1221ceed8d85199f1c48f1acd64f309a42f42c06)

knot: update to 3.1.7

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572c7f1acf34d60c468a3a1cceafbf426)

tor: bump to 0.4.6.10 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790b74dcd4da352e70e059c9585a3f8d7)

sexpect: updated per OpenWrt's common practice

- removed extra white spaces in Makefile
- changed license from GPL-3.0 to GPL-3.0-only
- added test.sh

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 17d4d05fd5ae572d7621fe57b5feb610edfb4c07)

sexpect: Expect for Shells

Sexpect is another implementation of Expect which is specifically
designed for shells. It's lightweight and has no dependency on other
packages.

Signed-off-by: Clark Wang <dearvoid@gmail.com>
(cherry picked from commit 49b1e63444454a7d9142d09bc96ca5eabb2ffabc)

django: bump to version 4.0.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

kitty-terminfo: Terminfo for kitty, an OpenGL-based terminal emulator

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>

telegraf: Update to version 1.22.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba12b8c2d21fb8b8cbcb2d6e4821b5f57)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

xray-core: Update to 1.5.5

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee1a533e4106a6902260848645f39332)

cloudreve: Update to 3.5.1

Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f5401ff6dc515e0e3d4f59b6fa3fc70e7fc3d9af)

pdns-recursor: update to 4.6.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 5f6dcc013dcf0c5ba06b3c2e43a3a4fdd10987ab)
(cherry picked from commit cbcc4c08df0e8b6e0c821c90095d2db11e3fbf33)

pdns: update to 4.6.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0aaea23c079bd9ede81b77e22835cb102d5f4fb8)
(cherry picked from commit da524a4d08ded783aab1daf71df712cb15cb4b09)

uvol: update to version 0.8

Bump version to reset PKG_RELEASE counter.
Add missing dependency on ucode-mod-math which is needed for the
mkdtemp() implementation used to format UBI volumes.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

uvol: unbreak if LVM is installed but unused

Fix and simplify console output, make sure uvol doesn't break in case
of LVM being installed but not used.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3959a9b22c52e3328e462af419c72a3a0f0814cd)

uvol: yet another small compatibility hack

Shift ARGV until actual parameters start to compensate for older
versions of ucode passing the complete cmdline.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31f02d5c1e1fcad0205ac814f52014ed8906db79)

uvol: fixes and adapt to in-tree ucode

Don't use features which are not yet present in the version of ucode
currently shipped with OpenWrt (such as `fs.access()` or assuming raw
mode by default).
Fix syntax error in main executable.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 74caff0d5988b721c08b9a8e35bce79a3d167dd6)

uvol: unbreak build and adapt to updated ucode

 * Fix build which was broken by a wrong path in the Makefile.

Adapt to ucode commit 4618807 ("main: rework CLI frontend"):
 * ucode now no longer needs the {% %} around each code file, remove
   that and safe one level of indentation.
 * ARGV now no longer includes ucode executable and script itself

Fixes: 6350c7bc6 ("uvol: replace with re-write in ucode")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 22d202e3a56d6756543713ec2a2af3c65da31572)

uvol: update to re-write in ucode

Replace previous Shell draft-quality implementation of uvol with a
rewrite in ucode[1].
While the new code is slightly larger, it performs much better (as
we no longer fork() for parsing strings like in Shell with grep, sed
and friends).

Before:
  time uvol list -j
  [ ... ]
  real 0m 0.82s
  user 0m 0.13s
  sys 0m 0.10s

After:
  time uvol list -j
  [ ... ]
  real 0m 0.47s
  user 0m 0.05s
  sys 0m 0.05s

[1]: https://github.com/jow-/ucode
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6350c7bc63a1cf32e4ef9de42d2e47983df25932)

prometheus-node-exporter-lua: improve ubnt-manager

It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11ccb4c04f610faa56b4695adbbab224d)

git: update to version 2.34.3

Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d9c3f07c27dd3abe9c666eec003fb8b)

ruby: update to 3.0.4

Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ola: fix compilation with musl 1.2.3

Upstream sent patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e35467459b8b7d51d498e380c8216b79b0dc4fd3)

powertop: add gettext-version fixup

I hit this locally on Fedora 35 for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8324c1fe06ef0b7a4b08368a75d89be04a434759)

powertop: update to 2.14

Upstream switched to github.

Fix license information.

Backport patch for ncurses 6.3. Remove other backported patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 32241d76d8e4d72400ce667e497288e50e458f6a)

zerotier: fix segfault on ARM platforms

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b45d39c1423444672abf8ea4ce3b53f75a1b2741)

usteer: update to latest HEAD

f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6ba0ab1aad8a6c816354486067e5e521)

python-twisted: Update to 22.4.0, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 43a380f953df0b7db9d11c13e6488caedcb7ebd2)

yq: Update to 4.24.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad061071aaf5b229db323eb3cdf01b5bb064b)

yq: Update to 4.24.4

Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a74fd6663dbc9b7f1e9d7cfc89e22e1)

prometheus-node-exporter-lua: fix ubnt-manager collector

Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9eb (" prometheus-node-exporter-lua: add ubnt-manager collector ")
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039bba1daa2af11b3b3cebe367e2a3d7c3)

prometheus-node-exporter-lua: add ubnt-manager collector

Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9ebcbff3fbaeeda0d83bba6573cf578)

ubnt-manager: add ubnt-manager

This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29d8f7f00089b14564d5248694e12638)

adguardhome: Update v0.107.6

Remove Go 1.18 patch as upstream source has updated go dependencies

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73ec5f2e027778aa1582d38bab851f66a)

adguardhome: Patch quic-go to fix compilation on Go 1.18

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 4165f7c7ddd13b8ff9819b653396a8e4f52db7c7)

golang: Fix conditionals not stripped

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 86fd1ebbe44e5c0747b8429493257e9317eacb07)

golang: Update to 1.18.1

Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c0477a89525422f633e9693cc1fe6192db785df)

golang: Update to 1.18, update patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 478666b00b8caeccf1d51c44ebb71788b0ca4388)

dnslookup: Update to 1.6.0

Fixed typo error: `AUTORELESE` > `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6a86a2b6395318b595a700831ca9172a6b81bda)

syncthing: Update to 1.19.2

Includes patch based on upstream change[1] to fix compilation with Go
1.18.

Fixes https://github.com/openwrt/packages/issues/18267.

[1]: https://github.com/syncthing/syncthing/commit/e30898ddb3e51225d4bda8661a1510c5cc9afe08

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b7ff2df5eea9688e9652b552a92f7ecd5ebf1ea)

ooniprobe: Update 3.14.2

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf8fc6067b9265d44aa9b593a591fa68)

cloudflared: Update to 2022.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74bf9cc71cf1d3d148507886a96eeaefcc5dd1ff)

glibs: revert "fix compilation with Alpine Linux"

This reverts commit 0ce744202ad2a2feaa3b841ce934765416d1339e.

Broken everywhere else. A better solution will need to be found.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2784618ab57a9533a615eb139e87b920f733c002)

Merge pull request #18289 from mhei/22.03-php8-updates

[22.03] PHP8 / PHP8 PECL updates

adblock: 4.1.3-8

* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec60690674d4525dd14bade280110743e61b)

php8-pecl-redis: update to 5.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 16a7a82e6c05b3e8c7cbec9ddd861480cacbd403)

php8-pecl-imagick: update to 3.7.0

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5877d902e93801016304d577c913bb5629c166ad)

php8-pecl-http: update to 4.2.2

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d30b18257dc7c495a4bcf2095be49a636802f146)

php8: update to 8.1.4

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 7c31879f78725fbe0979c24bdea92a7cd0e9c2b2)

haveged: update to 1.9.18

Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbbfaf5c47049e9365ccfb7b553621d15)

cloudflared: Update to 2022.4.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 51208c95148c9f29c4143184a7e8506188ef2d27)

telegraf: Update to version 1.22.1

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 86b8b30683cb7e338324c4cba5bee69cc6f1dcd6)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

keepalived: fix libip6tc dependency

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit eed4277d5cc923c41ae2c4e182fc7449bb44b090)

keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 209bcc649ad0f74534a4d288849180c9119380a1)

telegraf: Update to version 1.22.0

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 2c9c48582209a97e2e3ce9452e4cb15e9820886c)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

strongswan: fix forecast plugin dependency

The forecast plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6e132e74fd2f4d75eec8953066c3a6b164443da4)

strongswan: fix connmark plugin dependency

The connmark plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6cb15df69a5190cc552bd07821eeb035b661410c)

strongswan: move iptables deps to updown plugin

Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 93fbbcbfee678f9406e443abe61d5671a929e3b4)

Merge pull request #18261 from 1715173329/d3

[openwrt-22.03] dnsproxy: Update to 0.42.1

dnsproxy: Update to 0.42.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1f86641d2fb8a1cef2fb16d6e21600162774860)

python-pytz: bump to version 2022.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 685826db73fd32e0492ba241b543179d499bf5d1)

yq: Update to 4.24.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3cbdc7e4224be4e637550e0714af96ac4023fa91)

dnsproxy: Update to 0.42.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f3a1d2ed1f0acded39eaca340eddb8b78f57196f)

openvswitch: bump to 2.15.3

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f8c8348f32a91ce1f60d9fe09d3c9fce607b0fe9)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

openvswitch: enable AUTORELEASE

Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit cf1e1468588d69f413fc1305a3bdf811197551e6)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

ksmbd-tools: revert update to 3.4.4

This reverts commit 3ffd540b049dd521dd62f43427f61f264396ad97.

This does not work with the kmod currently in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #18122 from jefferyto/python-3.10.3-openwrt-22.03

[openwrt-22.03] python3: Update to 3.10.4

vala: update to version 0.56.0 (LTS version)

According, to the project website [1], we were not using long-term
version, but stable one. Let's use LTS version.

Changelog can be found on their GitLab [2].

[1] https://wiki.gnome.org/Projects/Vala
[2] https://gitlab.gnome.org/GNOME/vala/raw/0.56/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 189f078a35eaf07fa5fe32945b49100579df0aef)

vala: update to version 0.54.8

Changelog:
https://gitlab.gnome.org/GNOME/vala/raw/0.54/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 474414dff131d485b30bc49f820fb58a43dcaf87)

cloudflared: Update to 2022.3.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99dfcbd2fbabfce2bb771ad4bfff3613aae59ee7)

cloudflared: Update to 2022.3.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed260f3b98b2c7e1091dca685f34d2a74cc0fa22)

mwan3: fix sticky chain length

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87c611abf8facb3b401006cece0c722676c63860)

python3: Update to 3.10.4

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d0efe27a8c35b5580304838548542e9aaf344ac5)

python3: Update to 3.10.3, refresh patches

Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit bed8dc2132ebce2b95d9271a61e5b928160937fb)

yq: Update to 4.23.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8d7b7fbfb46c59a1c64c3a060f4903911bae6a4f)

xray-core: Update to 1.5.4

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d04499783b98b2f98d373e32260927c)

horst: fix compilation with ncurses 6.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2bf3d9a7777b5e29663c0ce18c7f3e26e5352933)