libmaxminddb: install pkgconfig file

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c0be86e1ac2a632842616fa228c43e1a52e97390)

libmaxminddb: update to 1.7.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 448cd7fba15b0c6c3620e350a1840a8e861ad0ed)

AdGuardHome: update to v0.107.21

Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 60ae1e56378e7e614918f6ecda52f92ab6e18c73)

libnetwork: Update to dcdf8f1 for Docker v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit ec191eb08e5673b8670cd180abbc8ff5036a218b)

containerd: Update to v1.6.13 for Docker v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b684f741e4c6df51a2e0d6cdfd804b511d2d7264)

docker: Update to v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit fc7a7f61378bc71f9a698ce47a70047477f1dd38)

dockerd: Update to v20.10.22

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 3c06e3a249efa362df0ab6d579d0cc494d2fab31)

owntone: Update to 28.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 983006f12a041dfe9f4f7b8bee21b5b463453ee3)

owntone: update to 28.4

Included changes:
* Install web UI
* Remove libantlr3c dependency
* Add Spotify support to description
* Updated conf file

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit feda8e036d14a2ad2504da075a4323bfa033c6c6)

mxml: update to 3.3.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit 94f6216ef5d3e1587750cf383cc9763d524d1e5b)

docker-compose: Update to version 2.14.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 4c58d6d288f303a7a729e88d82496d0f1afd5301)

docker-compose: Update to version 2.14.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 24faf56110522e8a10be394e83af632cd022f0b7)

docker-compose: Update to version 2.14.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 37a86626e05b8324e0d6234cf4f3a3f65c88c0a4)

docker-compose: Update to version 2.12.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 17badaee1c630db3cf2c05b7fe903d2f225cece7)

docker-compose: Update to version 2.12.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d4134174bcd985c15b0407e3f7d39e089bc81cce)

docker-compose: Update to version 2.11.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 25e3d9ef42260600264d73a3379064e7e8f4fbd7)

docker-compose: Update to version 2.11.1

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 86fc30e177188f4b8bf2934dc2f75b2a6d455696)

docker-compose: Update to version 2.11.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2aee5cfa461c25ccbc782a372ca380014e8e3355)

docker-compose: Update to version 2.10.2

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ebf86a645affaa6db89d564f7f1d93feeed009a7)

docker-compose: Update to version 2.9.0

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 35b1a03b8393ab8b8324db455cbf459faac064b2)

docker-compose: Update to version 2.7.0

What's Changed:

 - Enhancements:

   - add support of environment secret during build step by @glours

 - Fixes:

   - networks: prevent issues due to duplicate names by @milas
   - Use appropriate dependency condition for one-shot containers when
   running compose up --wait by @laurazard
   - Fix environment variable expansion by @ulyssessouza in
   compose-spec/compose-go#276
   - Validate depended-on services exist in consistency check by
   @laurazard in compose-spec/compose-go#281
   - Fix hash usage in environment values by @ulyssessouza in
   compose-spec/compose-go#283
   - build: respect dependency order for classic builder by @milas
   - fix: panic caused by empty string argument by @nicksieger
   - (re)start should not impact one-off containers by @ndeloof
   - Fix issue with close networks name on up and down command by
   @glours
   - keep the container reference when volumes_from target a container
   and not a service by @glours
   - build.go: initialize CustomLabels map if nil by @paroque28

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit de563c1ae154e2a46f8942adaed79479b07a2fee)

docker-compose: Update to version 2.6.1

Enhancements:

 - Support for setting secret from env variable by @ndeloof

Fixes:

 - Do not start unrelated dependencies on run by @laurazard
 - Fix service not found errors when using --no-deps by @nicksieger
 - Respect COMPOSE_REMOVE_ORPHANS env var on down by @nicksieger
 - Fix project level bind mounts volumes by @ulyssessouza
 - Respect deploy.limits.cpus and deploy.limits.pids by @glours

Internal:

 - Upgrade: Go v1.18.3 by @thaJeztah
 - Upgrade: compose-go v1.2.8 by @milas
 - Upgrade: buildx v0.8.2 by @dependabot
 - Upgrade: containerd v1.6.6 by @dependabot

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 5995e4d90b51239f3caaae75abeb8712979261b4)

docker-compose: Update to version 2.6.0

What's Changed:

 - fix TestLocalComposeUp which fail locally and bump compose-go to
 1.2.7 by @glours
 - attach only to services declared by project applying profiles by
 @ndeloof
 - Add ddev's e2e test by @ulyssessouza
 - Fix local run of make e2e-compose-standalone by @ulyssessouza
 - fix: prevent flickering prompt when pulling same image from N
 services by @maxcleme
 - add tags property to build section by @glours
 - update golang version to 1.18 by @glours
 - bump compose-go to 1.2.6 by @maxcleme
 - add e2e tests to verify env variables priority by @glours
 - Import dotenv file to os environment by @ulyssessouza

New Contributors:

 - @maxcleme made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 8089548622c46a7f0b18b2a98a52bc658e544f3c)

docker-compose: Update to version 2.5.1

What's Changed:

 - Fix relative paths on envfile label by @ulyssessouza
 - down: Reject all arguments by @Jille
 - Clarify what default work dir is when multiple compose files by
 @quite
 - compose down exit=0 if nothing to remove by @ndeloof
 - cp command: copy to all containers of a service as default
 behaviour by @glours
 - Fix extra space printed with --no-log-prefix option by @jan4843
 - bump compose-go to 1.2.5 by @ndeloof

New Contributors:

 - @Jille made their first contribution
 - @quite made their first contribution
 - @jan4843 made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 32d87ae946ea27c89419fee80f635473fc0fbb60)

docker-compose: Update to version 2.5.0

What's Changed:

 - Fix search/replace typo in --no-TTY documentation by @ericfreese
 - Fix panic with down command when -p flag specified by @glours
 - use project we just created to start services by @ndeloof
 - include services declared by links as implicit dependencies by
 @ndeloof
 - pull to respect pull_policy by @ndeloof
 - don't ignore error by @ndeloof
 - project name MUST be lowercase by @ndeloof
 - add support for build secrets by @ndeloof
 - create also a checksums.txt file, add --binary by @MaxPeal
 - add support for ppc64le for docker compose by @snehakpersistent
 - inspect image ID after pull to se com.docker.compose.image by
 @ndeloof
 - Fix cannot setup IPAM gateway by @qnap-ericfan

New Contributors:

 - @ericfreese made their first contribution
 - @MaxPeal made their first contribution
 - @snehakpersistent made their first contribution
 - @qnap-ericfan made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit ac02159f6370cdb70677b91d4bc9da49d7323d3a)

docker-compose: Update to version 2.4.1

What's Changed:

 - now we use directly the Docker CLI to run autoremove flag should
 be p… by @glours
 - use ssh config when building from compose up by @glours
 - get Tty from container to know adequate way to attach to by
 @ndeloof

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 3e4ec2a9a82077c533fa5d1c26cf3e4764de50cd)

docker-compose: Update to version 2.4.0

What's Changed:

 - pass interactive flag to ExecOptions for the RunExec command by
 @glours
 - go.mod: pin k8s version to fix build on go1.16, and update buildx
 to v0.8.1 by @thaJeztah
 - support cache_from|to|no|pull by @ndeloof
 - fix race condition on start-stop e2e tests running in parrallel by
 @glours
 - Add support of ssh authentications defined in compose file or via
 cli… by @glours
 - fix typo in ssh option description by @mschoettle
 - Takes COMPOSE_PROJECT_NAME into consideration on commands by
 @ulyssessouza
 - Remove dead warning code by @ulyssessouza
 - Fix down command without any resource to delete by @ulyssessouza
 - vendor: github.com/containerd/containerd v1.6.2 by @thaJeztah

New Contributors:

 - @mschoettle made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 29a007ee5b15ff99c1dabebf2106519fa23a6bc1)

docker-compose: Update to version 2.3.4

What's Changed:

 - don't fail trying to remove container with no candidate by @ndeloof
 - recreate container after image has been rebuilt/pulled by @ndeloof
 - ps: un-deprecate --filter, and enhance docs by @thaJeztah
 - Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot
 - Remove DEPRECATED text, since it's just the default by
 @ulyssessouza
 - Bump Buildx to v0.8.0 by @ndeloof
 - kill only need project name by @ndeloof
 - don't remove external volumes/networks by @ndeloof
 - use docker/cli RunExec and RunStart to handle all the
 interactive/tty/* terminal logic by @ndeloof
 - Validate doc on pr by @glours

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit b33c5dbd0695d5d2198c6888d3f75243b904f494)

telnet-bsd: add package

net/telnet-bsd: Add telnet-bsd 1.2 to repo

Patch sources:
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-misc/telnet-bsd/files
https://ftp.uni-erlangen.de/gentoo-portage/net-misc/telnet-bsd/files

Template for excluding telnetd:
https://github.com/theeternalsw0rd/telnet-macos

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
[set me as maintainer, add patches suggested by @pkgadd]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 51d381e5493f5d414316dfb8f6d8464683e9be11)
Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>

domoticz: update to 2022.1

change to codeload
fix python 3.10 plugin loading and usage

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit e1ed4ee3d33630b32ea3fb4a9463b00dd0844f92)

bind: update to version 9.18.10

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 07f528b33121c5b26b868b6a72700e4029fe8f81)
Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #20156 from paper42/libarchive-cve-22

[22.03] libarchive: update to 3.5.3, fix CVE-2022-36227

golang: backport an upstream fix for non-retpoline-compatible error

This fixes the following build error:
```
Building targets
runtime
<autogenerated>:1: non-retpoline-compatible: 00200 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:915)       JMP     (R15)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00115 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:614)       JMP     (AX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00028 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:452)       JMP     (R11)(R10*8)
<autogenerated>:1: non-retpoline-compatible: 00021 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/error.go:261)      JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00050 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:691)       JMP     (CX)(R12*8)
<autogenerated>:1: non-retpoline-compatible: 00024 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/debuglog.go:616)   JMP     (CX)(SI*8)
<autogenerated>:1: non-retpoline-compatible: 00079 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/time.go:617)       JMP     (R9)(R8*8)
<autogenerated>:1: non-retpoline-compatible: 00025 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/cgocall.go:453)    JMP     (R9)(DX*8)
<autogenerated>:1: non-retpoline-compatible: 00018 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/type.go:66)        JMP     (DX)(CX*8)
<autogenerated>:1: non-retpoline-compatible: 00020 (/home/username/works/openwrt/staging_dir/hostpkg/lib/go-cross/src/runtime/alg.go:156)        JMP     (SI)(DX*8)
<autogenerated>:1: too many errors
```

Fixes: #20026
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35f33c99b126cfa3ac51b9d7634340d43458b7db)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ea969a117a2a94de81489082f6ef83de438cf313)

v2ray-core: Update to 5.2.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7ea1c47c444cda08950b797ee60df5cf7580f6dc)

xray-core: Update to 1.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9a7926339bba3e5d3830e2674021365f65bc83dd)

rclone: Update to 1.61.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 822d44e8f8637c028b66cdf0ae84869699c24788)

cloudreve: Update to 3.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c67193be6169fec4141b95fafae56a53571b2d47)

xray-core: Update to 1.6.6-2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4afc17e6e0784bd507994c0e53e13a5aa21af2d6)

yq: Update to 4.30.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 071e97949f75de5a7dc1d19c48663e01f0c02a00)

dnsproxy: Update to 0.46.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4e9c47e5582b69e37c891008a54534ef6627abda)

dnslookup: Update to 1.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 62cc9d2a39d35180f7f98cb7547da06c30795d0b)

cloudflared: Update to 2022.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f526a1d169eabbeb19e30f7803d08c0607d9107b)

natmap: update to 20221225

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 6163de4ffa21ad3fdd0df167d2ad926954e4f673)

natmap: fix service not stopped when disabled in luci

luci removes `enable` option when disabled,
fix by setting default value to 0.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 8111d494749ad1f56218852fb9a587e99c173870)

natmap: add Package/conffiles

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 39af47f1c08ba161b0320e6d3af02ed19f549911)

node: bump to v16.19.0

Notable Changes
*OpenSSL 1.1.1s
*Root certificates updated to NSS 3.85
*Time zone update to 2022f

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit f8bd5eaa6edcf437130118295380c93f2acdfdc3)

Merge pull request #20160 from stangri/openwrt-22.03-pbr

[22.03] pbr: bugfix: Makefile, rt_tables fix

pbr: bugfix: Makefile, rt_tables fix

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit edbcb97b78d36a813e6aa04f6b6ff9bc20be2eb3)

libarchive: add missing CONFLICT

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

libarchive: fix CVE-2022-36227

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

libarchive: update to 3.5.3

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

Merge pull request #20154 from ysc3839/natmap-fix-2203

[22.03] natmap: add forward_port option

natmap: add forward_port option

The bind port (-b) can be used with forward port (-p),
so expose this option in config file.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit cd51b58efdfa689f282e808c14a6f8b054eedb57)

Merge pull request #20114 from stangri/openwrt-22.03-pbr

[22.03] pbr: update to 1.0.1-1

pbr: update to 1.0.1-1

* add more error/warning messages
* better return statements from ips/nftset functions
* better error/warning handling when inserting policies
* comment out unnecessary nft set/ipst clean ups
* shellchecked status functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 5bec4a25415e751c4000bdb4b18f662ac2f1a98d)

mwan3: make mwan3.user executable

This is a fix for the the following change:
https://github.com/openwrt/packages/commit/3d824ea288d907a31729c3629e884ea122c30da0

Before the change, it was only possible to execute a shell script. To
remove this restriction, a binary or other script language can now also
be used for 'mwan3.user'. Unfortunately, the old shell script was not
executable for older mwan3 version. During a sysupgrade with config transfer,
this 'mwan3.user' script could not be executed for newer mwan3 versions.
To fix this, the calling script checks whether the 'mwan3.user' is executable,
and if not, this executable bit is now set.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0434407428b25ae5309525f060964218034b86c5)

mwan3: update to 2.11.3

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8fea564fc9b612fe27b60bbd5839214184be7456)

mwan3: only send disconnected event if interface was connected before

Up to now on every interface down event a mwan3 disconnected event was
send. This is wrong because if the interface was never connected, then a
disconnected event should not get generated. This commit fixes this bug.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 997c0842ca8b05de83a1ecd3160ecd18fa3d8aee)

mwan3: change log message on already added route

Only show message on already set route, if debugging is enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6606bed17bbddb7ae10405f6b0358fdda26fd17)

mwan3: support offload routing modifier

Signed-off-by: Denys Yarkovyi <dyarkovoy@gmail.com>
(cherry picked from commit 675ecfba89afaddebbc0b0d7bbc084ea312fc927)

mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNS

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 1a703ed6a61420318bd771273fc1ae835a825978)

mwan3: fix balanced default config

The metrics and weight need to be the same. A 50% balanced would be
require member policies of the same metric and weight value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0ed8450d2fdb39df5b6ea2e587e6554cadcfd0dc)

golang: Update to 1.19.4

go1.19.4 (released 2022-12-06) includes security fixes to the net/http
and os packages, as well as bug fixes to the compiler, the runtime,
and the crypto/x509, os/exec, and sync/atomic packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6a0ee524b14f5f2390dbf4414b5980add7aa95ed)

privoxy: fix preinst/postinst script indentation

Fix the indentation of the preinst/postinst scripts for the privoxy
package.

Because these scripts didn't start with `#!/bin/sh`
(they instead started with the TAB character), `/bin/sh` was not used
to start them.

On x86_64 and i386_pentium-mmx, this seems to be fine, but on
arm_cortex-a15_neon-vfpv4 and aarch64_cortex-a53, running these
scripts fails with a:

```
Installing privoxy (3.0.33-3) to root...
Collected errors:
 * pkg_run_script: package "privoxy" preinst script returned status 1.
 * preinst_configure: Aborting installation of privoxy.
 * opkg_install_cmd: Cannot install package privoxy.
```

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 6703d7623097b591ea08c12e66351eed884e1005)

tailscale: preserve tailscaled state file

Fixes #19774

Signed-off-by: Carlo Alberto Ferraris <cafxx@strayorange.com>
(cherry picked from commit 02e154d3e56bd35b2db345250c17e41da0edcfa9)

knot: update to version 3.2.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit c933a15cebe43e6d35d59281a5414438cd3c1455)

yt-dlp: update to 2022.11.11

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e398becaa68043ad8c9f301e6308d824d4dfa80c)

perl: enable threading support for aarch64 by default

Perl threads seem to be supported and working for aarch64, and
including aarch64 here would allow packages like freeswitch-mod-perl
to become available from the standard OpwnWrt package repository for
popular routers such as the Linksys E8450 and Belkin RT3200.

Signed-off-by: Doug Thomson <dwt62f+github@gmail.com>
(cherry picked from commit 6db2fe93cd9db6e1f26fded0c4fd4b1c58484e49)

lxc-auto: made init script compatible with image builder

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e70844a9ca327b98eb33d1c9a3cce987cc91a190)

igmpproxy: update to version 0.4.0

Signed-off-by: Oli Ze <olze@trustserv.de>
(cherry picked from commit 44e1c2115ea91b97e9454c19428a59f155e9f677)

apr-util: disable parallel build

Build reliably fails with -j20

    crypto/apr_passwd.c:200:1: fatal error: error closing -: Broken pipe
      200 | }
          | ^
    compilation terminated.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bd9e119d68fba792a1f760525540c0e0cf10e63f)

python3-pytz: bump to version 2022.6

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

nano: update to 7.1

Update nano editor to version 7.1
* drop the backported upstream fix for 7.0
* drop AUTORELEASE
* disable justify from 'plus'. Rarely needed with OpenWrt

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 89dc1b17e9d8234c8085ffdb4fbe00d0e9093725)

Merge pull request #20017 from commodo/stress-ng-update-22.03

stress-ng: adjust build with xxhash & libegl

wget: apply upstream fix to avoid nettle linking in nossl

Replace my own patch with the upstream solution, which they issued
in response to my bug report.
(Two patches as they overlooked something on the first try.
Reference to https://savannah.gnu.org/bugs/index.php?63431 )

The nettle lib evaluation is now conditional to not having "--disable-ntlm".

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit fd7da3333e98c0d2ef1ed9d7997fe78000474caf)

wget: update to 1.21.3

Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a694130993d9d9eed8689ecdc1d6044dca3dc40e)

stress-ng: disable xxhash & libegl stressors

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #20063 from stangri/openwrt-22.03-pbr

[22.03] pbr: detect missing iptables

syncthing: update to 1.22.2

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
(cherry picked from commit d22bed1dc3ba056dd3f3a931d22da5fbc5c08b75)

Merge pull request #20077 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate

Merge pull request #20073 from luizluca/22.03/ruby-3.0.5

ruby: update to 3.0.5

simple-adblock: bugfix: add dnsmasq.nftset to uci_load_validate

* fixes https://github.com/openwrt/openwrt/issues/11481 thanks to:
* https://github.com/mistepien for reporting
* https://github.com/dave14305 for diagnosing

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fff884e67f62f0ee16bb95507c782d25a6d91eea)

ruby: update to 3.0.5

This release includes a security fix.

- CVE-2021-33621: HTTP response splitting in CGI

For more details:
- https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

pbr: detect missing iptables

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit a86985879fa117782dc232122819e9bbb93be175)

Merge pull request #20053 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: fix restart

https-dns-proxy: fix restart

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 75ac50ca895e9e042afe9c4a64a367e3863e471f)

Merge pull request #20043 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: add mdns service records

Merge pull request #20051 from stangri/openwrt-22.03-simple-adblock

[22.03] simple-adblock: support new OISD dnsmasq config

simple-adblock: support new OISD dnsmasq config

* OISD dnsmasq config files switched from using address= to server=

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3950f0ce99844425805887a8e312db6c911fe398)

dnsproxy: Update to 0.46.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88d33fef91e6bdeb195bf40b80ceb4644334a00b)

cloudflared: Update to 2022.11.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1a14c1103e83ec31d437c0893833026d211805d)

https-dns-proxy: add mdns service records

* add mdns records for started instances
* Makefile: use $(PKG_VERSION) as a value for PKG_SOURCE_DATE instead of
  hard-coding it

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ee37d0ec863a2254c4bfecd7bb65155e276fed88)

github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

Merge pull request #20033 from peter-stadler/openwrt-22.03

django: bump version 4.0.8

django: bump version 4.0.8

fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

natmap: merge "ipv4" and "ipv6" options into single "family" option

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 190e04caf69746b862dafdff7b16f539f86a7544)

snowflake: update to version 2.4.1

Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f9277ee30fa0699cdf1aded5a0bc50aac6)

natmap: add new package

NATMap is a program for opening port behind full cone NAT (NAT-1),
without the need for using UPnP or another port forward settings.

More details can be found at original repo: https://github.com/heiher/natmap

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit e691a25cb3398b83bedc9581ef119382760cfacc)

xz: update to 5.2.9

Update xz to version 5.2.9.

Switch back to .bz2 sources, as we already download .bz2 for tools/
No sense to re-download sources as a .xz file.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c1222365526e1fab7f021f2b3a629e859be6b489)