python-libraries: Force old build process

These packages will need adjustments to work with pyproject.toml-based
builds, so set PYTHON3_PKG_FORCE_DISTUTILS_SETUP:=1 to force the old
build process (when pyproject.toml-based builds are in place) for now.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-ubus: Force old build process

This package will not build with the pyproject.toml-based build process
because it has a build dependency on pytest-runner[1].

pytest-runner has been deprecated[2], so instead of adding a package for
pytest-runner to fulfill the build dependency, force this package to use
the old build process.

[1]: https://gitlab.nic.cz/turris/python-ubus/-/blob/v0.1.1/setup.py#L35
[2]: https://github.com/pytest-dev/pytest-runner#deprecation-notice

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-twisted: Update to 22.10.0

Includes fix for CVE-2022-39348 (NameVirtualHost Host header injection).

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pytest-forked: Update to 1.6.0

The overly-strict build requirements in 1.3.0[1] would cause a build
failure with pyproject.toml-based builds.

[1]: https://github.com/pytest-dev/pytest-forked/blob/v1.3.0/pyproject.toml#L2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pytest: Update to 7.3.0

This also removes BROKEN from the package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pycrate: Update to 0.6.0

This also changes the download to PyPI and updates several package
makefile fields.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-jsonschema: Add build dependencies

These will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-incremental: Update to 22.10.0, redo patch, add host build

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-exceptiongroup: Update to 1.1.1

This adds a build dependency that will be required for
pyproject.toml-based builds.

This also removes the run-time dependency on python3-attrs; there is no
indication this package is required.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-docker: Add missing build dependency

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-dns: Update to 2.3.0

This adds a build dependency that will be required for
pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-dbus-fast: Add build dependencies

These will be required for pyproject.toml-based builds.

This also includes a patch to unpin the version requirement for
setuptools, as the current in-repo version of setuptools does not
fulfill this requirement, and there does not appear to be any specific
reason why this version requirement is necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-cryptography: Update patch to disable Rust

This extends the patch to also apply for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-bleak: Add build dependency

This will be required for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-astral: Update to 3.2

This adds a build dependency that will be required for
pyproject.toml-based builds.

This also marks the package as BROKEN (for now) as it requires proper
support for pyproject.toml-based builds.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

borgbackup: Add missing build dependencies

setuptools-scm is a declared build dependency[1], and pkgconfig will
allow setup to find the required libraries, replacing the need to set
environment variables.

[1]: https://github.com/borgbackup/borg/blob/1.2.4/setup.py#L313

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pkgconfig: Add new host-only package

From the README:

pkgconfig is a Python module to interface with the pkg-config command
line tool for Python 3.3+.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

xxhash: Fix pkg-config metadata file

Currently, Build/InstallDev installs libxxhash.pc.in, which is the
template for libxxhash.pc and does not contain the correct information.
(pkg-config also does not recognize this file name.)

This uses PKG_INSTALL:=1 so that libxxhash.pc is generated (by 'make
install').

This also removes the need to override Build/Prepare by setting the
correct command in PKG_UNPACK.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

snort3: update to 3.1.60.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

banip: release 0.8.4-1

* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

qemu: add zstd option

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>

qemu: update to 8.0.0

- Update version to 8.0.0
- Refresh patches
- Update configure opttions to disable libdw

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>

ksmbd-tools: update to 3.4.8 release

Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8

Maintainer: nobody
Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master
Run tested: Mediatek filogic, Asus TUF AX4200, lastest master

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

shadowsocks-libev: ACL support

Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #20857 from pprindeville/strongswan-drop-local_gateway

strongswan: local_gateway unused in swanctl.init

strongswan: local_gateway unused in swanctl.init

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

docker-compose: Update to version 2.17.3

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #20845 from jefferyto/ci-local-feed

CI: Add local feed for CI-built packages

treewide: remove AUTORELEASE

Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

icu: bump to 73.1

Description:
It updates to CLDR 43 locale data with various additions and corrections.
ICU 73 improves Japanese and Korean short-text line breaking, reduces C++ memory use in date formatting, and promotes the Java person name formatter from tech preview to draft.
ICU 73 and CLDR 43 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15.1 which is planned for September.)
ICU 73 updates to the time zone data version 2023c (2023-mar). Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

rust: update to 1.69.0

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

nginx: split DAV_EXT from standard nginx DAV config

Split DAV_EXT from standard nginx DAV config as additional WebDAV
methods are provided by an external module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #20846 from johnfzc/sscep-license

scep: fix license

pdns-recursor: update to 4.8.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

pdns: update to 4.7.4

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #20824 from jefferyto/newt-0.52.23

newt: Update to 0.52.23

scep: fix license

Signed-off-by: John Marrett <johnf@zioncluster.ca>

CI: Add local feed for CI-built packages

To test each package, the CI-built target package (ipk) file is
installed, but currently the target package's dependencies are installed
from the standard opkg feeds.

There are cases when the CI-built target packages should be
installed/tested together:

* If a pull request contains several new packages that depend on each
  other, the test step will fail as the new dependencies cannot be found
  in the current packages feed.

* If a pull request upgrades a source package that builds several target
  packages that depend on each other, the test step may fail due to the
  version/ABI mismatch between a newer target package and the older
  dependencies installed from the packages feed.

This sets up a local feed for the CI-built packages so that dependencies
are also installed from the same set of packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

lighttpd: adjust packages for built-in modules

(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: fix package DEPENDS syntax

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.49.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20826 from jefferyto/obfs4proxy-0.0.14

obfs4proxy: Update to 0.0.14

Merge pull request #20827 from jefferyto/slang2-2.3.3

slang2: Update to 2.3.3, refresh patches

dnsdist: update to 1.8.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

knxd: bump to new upstream release 0.14.58

Signed-off-by: Othmar Truniger <github@truniger.ch>

znc: add push external module

Add push external module. This is very useful for an IRC Bounder as this
module permits to register various services and receive a push
notification on the registered service.

One example is attaching a telegram bot and receive notification on your
phone when an user tags you in one of the connected channels.

Bump and drop AUTORELEASE from PKG_RELEASE since we are adding a new
module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

znc: drop playback patch and reference from github repository

We currently inclde the playback external module with a separate patch.
This is ugly and can be better handled.

Add required changes to download the external module from his own github
repository. Then create a link in the znc modules to reference the cpp
source.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

v2ray-core: Update to 5.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

slang2: Update to 2.3.3, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

obfs4proxy: Update to 0.0.14

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

boost: Updates package to version 1.82.0

This commit updates boost to version 1.82.0

A new header-only library is available:
- MySql: a C++11 client for the MySQL database server, based on
Boost.Asio, from Ruben Perez. [1]

More info about Boost 1.82.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_82_0/libs/mysql/doc/html/index.html
[2]: https://www.boost.org/users/history/version_1_82_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

newt: Update to 0.52.23

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

nmap: refresh patch

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

php8: update to 8.2.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

nmap: update license

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

nmap: bump to 7.93

Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>

apk: Update to 2.12.11

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20811 from jefferyto/python-cython-0.29.34

python-cython: Update to 0.29.34

sshtunnel: fix type, case and whitespace issues

Signed-off-by: Stefan Weil <sw@weilnetz.de>

python-cython: Update to 0.29.34

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

node: bump to v18.16.0

Description:
Update to v18.16.0
Fixed a bug when selecting arm-fpu for vfpv3-d16.

Notable changes
Add initial support for single executable applications
Replace url parser with Ada

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #20804 from 1715173329/g1203

golang: Update to 1.20.3

golang: Update to 1.20.3

Included fixes for:
- CVE-2023-24534
- CVE-2023-24536
- CVE-2023-24537
- CVE-2023-24538

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.49.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.4.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

syslog-ng: update to version 4.1.1

- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.1

- Updated version in config

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #20795 from Payne-X6/master

knot: update to version 3.2.6

 banip: update 0.8.3-2

* more init fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

knot: update to version 3.2.6

Signed-off-by: Jan Hák <jan.hak@nic.cz>

ruby: update to 3.2.2

This release includes security fixes. Please check the topics below for
details.

- CVE-2023-28755: ReDoS vulnerability in URI
- CVE-2023-28756: ReDoS vulnerability in Time

See https://github.com/ruby/ruby/releases/tag/v3_2_2 for further details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ruby: update to 3.2.1

Ruby 3.2 changes include:
* WASI based WebAssembly support
* Production-ready YJIT
* Regexp improvements against ReDoS
See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/

Ruby 3.2.1 changes includes:
* Bugfixes
See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/

Package-related changes are:

* libyaml is no longer bundled, requiring OpenWrt to build it as a host
  library for ruby/host.
* Added sub-packages:
 - ruby-mjit: files for mJIT, although disabled during build
 - ruby-syntax_suggest: finds missing ends
* Backported patches dropped:
 - 001-fix-build-with-libressl-3.5.patch
 - 002-fix-operator-precedence.patch
* Usual dependencies adjustments

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

yaml: enable host build

ruby 3.2 does not ship libyaml embedded anymore.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

sscep: add package

Signed-off-by: John Marrett <johnf@zioncluster.ca>

python3-ble2mqtt: add init script

Note that init script won't do much without configuration provided.
The init script comes from the upstream README file.

Also add missing dependency.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

python3-bleak: bump to 0.20.1

This has a small fix on top of 0.20.0.

Signed-off-by: Quintin Hill <stuff@quintin.me.uk>

snort3: update to 3.1.59.0

Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>

minidlna: update to 1.3.2 release

- Updated to latest version
- Removed upstreamed patches
- Refreshed patches

Project changelog:

1.3.2 - Released 30-Aug-2022
--------------------------------
- Improved DNS rebinding attack protection.
- Added Samsung Neo QLED series (2021) support.
- Added webm/rm/rmvb support.

1.3.1 - Released 11-Feb-2022
--------------------------------
- Fixed a potential crash in SSDP request parsing.
- Fixed a configure script failure on some platforms.
- Protect against DNS rebinding attacks.
- Fix an socket leakage issue on some platforms.
- Minor bug fixes.

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

strongswan: add support for remote cacerts

Signed-off-by: Glen Huang <me@glenhuang.com>

strongswan: add support for pools section

Signed-off-by: Glen Huang <me@glenhuang.com>

v2raya: Update to 2.0.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20784 from pprindeville/acpica-update-20230331

acpica-unix: Update to 20230331

treewide: opt out of LTO usage

These fail to build or packages depending on them do when enabling
CONFIG_USE_LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=lto

See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS"
on the main repository.

Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This
fixes it and properly enables LTO.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=gc-sections

See commit da370098 "treewide: add support for "gc-sections" in
PKG_BUILD_FLAGS" on the main repository.

Note: This only touches packages which use all three parts
(-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by
this build flag. Some packages only use a subset, and these are left
unchanged for now.

Signed-off-by: Andre Heider <a.heider@gmail.com>

treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

acpica-unix: Update to 20230331

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #20731 from pprindeville/isc-dhcp-update-4.4.3-P1

isc-dhcp: Update to 4.4.3-P1

Merge pull request #20730 from pprindeville/strongswan-fix-cicd-kmod

strongswan: Fix CI/CD complaints about kmod dependencies

fio: update to 3.34

Signed-off-by: Tjeu Kayim <hasbaddana@outlook.com>

lxc: update to 5.0.2

Bump to latest upstream release.

Removed upstreamed patches:
001-build-detect-where-struct-mount_attr-is-declared.patch[1]
002-build-detect-sys-pidfd.h-availability.patch[2]
003-build-check-for-FS_CONFIG_-header-symbol-in-sys-moun.patch[3]
011-tree-wide-wipe-direct-or-indirect-linux-mount.h-incl.patch[4]
012-tree-wide-use-struct-clone_args-directly.patch[5]
013-tree-wide-use-struct-open_how-directly.patch[6]

1. https://github.com/lxc/lxc/commit/b7b269680f4a773a54b274d7fbd1140fc32e1935
2. https://github.com/lxc/lxc/commit/e510d6bd870c15fc509477343cb1268b9726caa6
3. https://github.com/lxc/lxc/commit/02f4bd00f5b5648b7f71c266d36a961fe54dbfc6
4. https://github.com/lxc/lxc/commit/497479ea3b8d13900a8f9427a5ade8a51facd7ab
5. https://github.com/lxc/lxc/commit/c9bca33263ed82190edc77960cdc19c3088167e6
6. https://github.com/lxc/lxc/commit/d1dfce9c59067aac0a22cdffe8b6d80f6bbdae87

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

 banip: release 0.8.3-1

* add the new init command 'lookup', to lookup the IPs of domain names in the local lists and update them
* significant acceleration of the domain lookup function
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

dnsproxy: Update to 0.48.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nano: make nanorc world readable

If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

zoneinfo: updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

tinyproxy: Update to 1.11.1

Signed-off-by: Zhang Rui <rui.crater@gmail.com>

coreutils: update to 9.2

Build system: Ubuntu Linux 22.04, macOS 12.6.3
Run-tested: x64, WRT3200ACM, TL-WR1043ND v4

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>

Merge pull request #20751 from cotequeiroz/openssl-providers

afalg_engine, gost_engine: adjust to new openssl module infrastructure

gost_engine: adapt to new engine build config

This adapts the package to the new include/openssl-module.mk, and
updated runtime configuration.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>