ncdu: update to 1.18

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

clocate: update to latest HEAD

510cc94 main: remove duplicate import
bd84e09 log: add macro

Signed-off-by: David Bauer <mail@david-bauer.net>

pdns-recursor: update to 4.8.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

treewide: bump PKG_RELEASE for libiwinfo dependant packages

Bump PKG_RELEASE for libiwinfo dependant packages.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #20372 from stangri/master-pbr

pbr: bugfix: fix is_domain()

Merge pull request #20350 from turris-cz/bash

bash: update to version 5.2.15

uvol: fix regression in handling fractional megabytes free

Also, fix off-by-one issue when computing free size.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

pbr: bugfix: fix is_domain()

* fixes https://github.com/openwrt/packages/issues/20352

Signed-off-by: Stan Grishin <stangri@melmac.ca>

tcpreplay: bump to version 4.4.3

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #20280 from oskarirauta/nasm

nasm: new package

libwebp: bump to version 1.3.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

nasm: new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

xfrpc: update to version 2.1.606

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

python-requests: bump to version 2.28.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-pytz: bump to version 2022.7.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 9.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #20363 from 1715173329/crun

crun: add libgcrypt dependency

crun: add libgcrypt dependency

Fixes: ad0aa1b2fc64e8 ("crun: update to 1.7.2")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.1.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

atlas-sw-probe: add more binaries

They were added in these commits [1] [2] and if they are not included,
the RIPE Atlas SW Probe does not work correctly.

This should also prevent this from happening in the future as it now. We include all
files with .sh extension file type.

[1] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/70ced29fc3217dd8d61e2b78506b6103ded100aa
[2] https://github.com/RIPE-NCC/ripe-atlas-software-probe/commit/71a4ff0e68c55464f766ddb9f1dfe21b22e530db

Fixes: https://github.com/openwrt/packages/issues/20338
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

snort3: update to 3.1.52.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

snort3: update to 3.1.51.0

Upstream bump

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #20330 from dhewg/lrzsz

lrzsz: update to v0.12.21rc and fix a CVE

nano: update to 7.2

Update nano editor to version 7.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

treewide: quote CC and CXX

When CC is set to e.g. "ccache mips-openwrt-linux-musl-gcc" it needs
to be quoted to avoid word splitting on substitution.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

openocd: select new libjaylink

Without the +select, openocd's internal autoselection between internal
libjaylink and external libjaylink can result in linking against
external, without the depends declaration, leading to missing
depdendencies errors.

Hard depend on the external libjaylink, as that's the future direction
anyway.

Reported-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Karl Palsson <karlp@etactica.com>

openocd: update to 0.12.0

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

libjaylink: new package

libjaylink is a shared library written in C to access SEGGER J-Link
and compatible devices.

This is used by future OpenOCD versions to handle J-Link debug
adapters.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

bash: update to version 5.2.15

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

udphp-client: bump to latest git HEAD

Fix build with gcc12.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20337 from bdrung/hosting.de

ddns-scripts: add hosting.de provider

git: update to 2.34.6

Fixes CVE-2022-23521
Fixes CVE-2022-41903
Fixes CVE-2022-39260
Fixes CVE-2022-39253
Fixes CVE-2022-29187

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

efibootmgr: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

efivar: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

v2ray-core: Update to 5.2.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20256 from TDT-AG/pr/20230109-acpica-unix

acpica-unix: update version and fix gcc12 build

hiredis: update to version 1.1.0

See project release page[1] for more details.
Switch build to use CMake instead of autotools, allows removal of
local patch.

[1]: https://github.com/redis/hiredis/releases
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ddns-scripts: add hosting.de provider

Add hosting.de provider. To use dynamic DNS you have to create a DDNS
host with a separate DDNS user.

Note: As of 2023-01-17 hosting.de does not work with wget which will
fail with `400: Bad Request` (it will work with `--auth-no-challenge`).
You should use curl instead. I have reported that to the provider.

Signed-off-by: Benjamin Drung <bdrung@bdrung.de>

libv4l: update to 1.22.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #20311 from ValdikSS/miredo

miredo: add miredo.conf conffile

Merge pull request #20313 from neheb/10

stress: update to 1.0.5

borgbackup: bump to 1.2.3

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

python-exceptiongroup: bump to 1.1.0

Signed-off-by: Julien Malik <julien.malik@paraiso.me>

Merge pull request #20317 from stangri/master-simple-adblock

simple-adblock: update sed for allowing domains

Merge pull request #20335 from stangri/master-pbr

pbr: update to 1.0.1-14

pbr: update to 1.0.1-14

* improve install/uninstall messages
* fix ips add command
* add boot() to init file

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #20213 from stangri/master-pbr

pbr: update to 1.0.1-10

pbr: update to 1.0.1-10

Bugfixes:
* better error information for empty tid/mark and failure to resolve domains
* better handling of entries in /etc/iproute2/rt_tables
* update packages definitions and descriptions
* remove firewall4 from dependencies to prevent dependency recursion

Updates:
* introduce nft_user_set_policy and nft_user_set_counter to control options for
  user nft sets this service creares
* use counters in internal nft sets

Signed-off-by: Stan Grishin <stangri@melmac.ca>

miredo: add miredo.conf conffile

Keep miredo.conf modified configuration upon upgrades

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>

Merge pull request #20296 from neheb/1

libxml2: build with cmake

podman: update to 4.3.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

atlas-sw-probe: update to version 5080

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

yq: Update to 4.30.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #20326 from neheb/14

xinetd: fix URL

libgd: update to 2.3.3

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snowflake: update to 2.4.2

Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>

lrzsz: update to v0.12.21rc and fix a CVE

This updates to v0.12.21rc from 1999 (sic), which was never officially
released. There're fixes in there, and it's what debian ships, so let's
use that too. While at it, use debian's autohell hack and package
description too.

Patch 1 fixes a hang with musl.
Patch 2 fixes CVE-2018-10195, add PKG_CPE_ID while at it.

Refesh the rest.

Fixes: CVE-2018-10195
Signed-off-by: Andre Heider <a.heider@gmail.com>

python3-libselinux: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python3-libsemanage: fix URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rtl-sdr: switch to git tarball

Upstream switched URLs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

flashrom: update to 1.2.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rp-pppoe: update to 3.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>

atlas-probe: update to 2.6.3

Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

foolsm: update to 1.0.21

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xinetd: fix URL

Something went wrong here. Switch to git tarballs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pcsc-tools: update to 1.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

stress: update to 1.0.5

New upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pigz: update to 2.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netperf: use git tarball

netperf.org is gone now. Only github is left.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-compress-bzip2: update to 2.28

Signed-off-by: Rosen Penev <rosenp@gmail.com>

socat: update to 1.7.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bc: use @DEBIAN

Seems Debian no longer offers ftp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

simple-adblock: update sed for allowing domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>

alpine: fix old URL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

qfirehose: new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnunet-fuse: update to version 0.19.1

ChangeLog file excert:
Fri Dec 30 12:51:11 AM CET 2022
Releasing gnunet-fuse 0.19.1: fix build for GNUnet 0.19.0+.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

gnunet: update to version 0.19.2

GNUnet has not been updated for a while due to the gnurl-situation.
Now that we got libcurl-gnutls, we can update GNUnet.
For details, please see the GNUnet release notes:

https://www.gnunet.org/en/news/2022-09-0.17.6.html
https://www.gnunet.org/en/news/2022-10-0.18.0.html
https://www.gnunet.org/en/news/2022-11-0.18.1.html
https://www.gnunet.org/en/news/2022-12-0.19.0.html
https://www.gnunet.org/en/news/2022-12-0.19.1.html
https://www.gnunet.org/en/news/2023-01-0.19.2.html

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libcurl-gnutls: add package, replaces gnURL

The gnURL-fork of cURL is no longer maintained as cURL finally supports
probing and selecting the TLS implementation at run-time.

Hence just build a gnuTLS-backed variant of libcurl, use patchelf to
change the shared object name, call the result libcurl-gnutls and be
done. Other distributions have opted for similar solutions.

In future we could convert the curl package to provide build-variants
for each TLS implementation; however, this is out of the scope of the
needs of GNUnet which used to be only user of libgnurl.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

yq: Update to 4.30.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xz: update to version 5.4.1

Update to 5.4.1  (keep in sync with xz in tools/)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

clamav: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

golang: Update to 1.19.5

Go1.19.5 (released 2023-01-10) includes fixes to the compiler,
the linker, and the crypto/x509, net/http, sync/atomic,
and syscall packages.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

hidapi: remove now obsolete iconv patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

evtest: update to 1.35

Switch to git tarballs as the old freedesktop cgit doesn't work properly
anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bluez: update to version 5.66

ver 5.66:
Fix issue with A2DP and transport connection collisions.
Fix issue with allowing application specific error codes.
Fix issue with not setting initiator flag correctly.
Fix issue with HoG Report MAP size handling.
Add initial support for Basic Audio Profile.
Add initial support for Volume Control Profile.

ver 5.65:
Fix issue with A2DP cache invalidation handling.
Fix issue with A2DP and not initialized SEP codec.
Fix issue with A2DP and multiple SetConfiguration to same SEP
Fix issue with AVRCP and not properly initialized volume.
Fix issue with SDP records when operating in LE only mode.
Fix issue with HoG and not reading report map of instances.
Fix issue with GATT server crashing while disconnecting.
Fix issue with not removing connected devices.
Fix issue with enabling wake support without RPA Resolution.
Fix issue with pairing failed due to the error of Already Paired.
Add support for CONFIGURATION_DIRECTORY environment variable.
Add support for STATE_DIRECTORY environment variable.
Add support for "Bonded" property with Device API.
Add experimental support for ISO socket.

Package btmon in new package 'bluez-utils-btmon' to prevent adding
glib2 it now requires as a dependency for all of bluez-utils.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

sbc: update to version 2.0

Fixes issue with use of x86-specific compiler primitives on non-x86
systems which we had previously patched downstream, remove this patch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libmad: update URL to use codeberg

Upstream abandoned GitHub.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxml2: build with cmake

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opendkim: use pkgconfig for libbsd

Allows using the overlay. Also remove the outdated uClibc patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tiff: don't use AUTORELEASE

Seems upstream wants to get rid of it.

Backport upstream patches fixing several CVEs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mpd: update to 0.23.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>

postgresql: update to version 15.1

https://www.postgresql.org/docs/release/15.0/
https://www.postgresql.org/docs/release/15.1/

A dump/restore using pg_dumpall or use of pg_upgrade or logical
replication is required for those wishing to migrate data from any
previous release.

Do not backport to release branch which should remain on version 14.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

safe-search: fix use with dnsmasq in ujail

The safe-search package creates symlinks in a configured additional
hosts directory. The link targets are inside another directory which
has to be made available to dnsmasq as well.
Now that support for adding additional paths to dnsmasq was added by
commit openwrt/openwrt@aa12a0fdd1c5a004281633c5b0758da1781bb41c
implement adding this path using the existing uci-defaults script.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

stress-ng: bump to version 0.15.01

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libreswan: set DNSSEC_ROOTKEY_FILE, LINUX_VARIANT

Libreswan will set DEFAULT_DNSSEC_ROOTKEY_FILE from the LINUX_VARIANT
variable, which is taken from the ID field in /etc/os-release.  This
points to the host file, which is wrong.

Set both variables when calling make.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

i2pd: update to version 2.45.0

Maintainer   : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)
Run tested   : r7800 OpenWrt git master (r21756, commit 55c32a6ce3)

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>

elektra: get rid of pointless iconv patch

A better solution was discovered.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gphoto2: fix compilation with BUILD_NLS

Signed-off-by: Rosen Penev <rosenp@gmail.com>

faad2: update to 2.10.1

Switch to local tarballs. Smaller and faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxcrypt: update to 4.4.33

Signed-off-by: Rosen Penev <rosenp@gmail.com>