dnsdist: update to 1.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 573829d625fecdd90e3a7e3e7f195e7d8875833a)

dawn: update to 2022-06-13

88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf5812561499c30f74095e450a9992a657)

dawn: update to 2022-06-11

4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a790c81ff57ad1d7741489bf5e1839839)

dawn: update to 2022-06-09

850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f785f4b0a8fae2b97feb6df0753c96ee7)

telegraf: update to version 1.23.0

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851557f89a77389db7840ce0a45494df7)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

node: bump to v16.15.1

Upgrade npm to 8.11.0
Suppressed unnecessary builds.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d8dc54ceea04070a6999c5a3b2e86225fec0d498)

lighttpd: update to lighttpd 1.4.65 release hash

* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e5458e27152b02c57609f2224586843271)

Merge pull request #18743 from champtar/prom-lua

[22.03] prometheus-node-exporter-lua: backport recent commits

irqbalance: upstream patch to fix segfault

Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e85aaab1e0ff2ba6874e7d6b09f45d5)

irqbalance: upstream patch to fix irq-module relation

Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fabe8c12baa4b9d9788790594cc606a4)

prometheus-node-exporter: fix ubus stations

Not every radio has also ubus support. Only query radios with ubus
functions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
[fixup, call ubus.connect() once per scrape]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 0a07237514467da0767e09cfe317f9649fc7d928)

prometheus-node-exporter-lua: use uhttpd-mod-lua

listen_ipv6 config option is removed and we now
listen on both ipv4 and ipv6 addresses.
HTTP keepalive is enabled and set to 70s by default.

With uhttpd-mod-lua there is a small change in behavior,
all code is loaded/parsed/executed once on startup as before,
but now each request is executed in his own fork, so we can't
keep a state between requests.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 60460f00463ad279135f7ee65eb096d08cf3a2cf)

prometheus-node-exporter-lua: fixup openwrt collector

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 3afccecdb2c1a8a99b688a34453c250fb30b1acb)

prometheus-node-exporter-lua: add netclass.lua collector

All current node_exporter netclass metrics will be available. This includes
speed metrics per lan port on supported DSA switches.

Signed-off-by: René Treffer <treffer@measite.de>
(cherry picked from commit a315c40b7232bbc83582685c98e41466d84d7a35)

mosh-full: Add perlbase-text dependency

Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e74f04415f17a96de156bed4964ff0c2)

mosh-full: Sort dependencies alphabetically

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d2424f347aa582841aebbbdcc015041)

beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532

1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf2502c75ffc8ac11fffd539f5c070f77c3)

node: bump to v16.15.0

Description:
Update from  v16.15.0
Changed handling of host's npm problems due to npm updates.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fcfd2599d9fad84301a42b9597e9a71bdd0f267f)

xray-core: increase nofile limitation

This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd528652c58e106a9bb4becd5ac8bb19a0ffb)

xray-core: Update to 1.5.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a9023f5a3f27690b0fa61ed2899efe1)

dnsproxy: Update to 0.43.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b7e1077a60e9890e30f75e091a3a168ed266ebe6)

golang: Update to 1.18.3

Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf0903125837bc7990813105cbe7ce23f5ece)

gg: Update to 0.2.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 576032a0e4d84bf07ba227e9cfebe0685f8d7e6b)

htop: update to 3.2.1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a1978519e8f2c1e5b77cad4190fa218)

libcoap: make sure `libcoap-3-notls.so` is installed

This commit fixes an issue where the `libcoap-3-notls.so` is not installed,
in some cases leaving the target's root with no library and just a broken link
from `libcoap-3.so` to `libcoap-3-notls.so`.

Signed-off-by: Leo Soares <leo@hyper.ag>
(cherry picked from commit 80c4d675c22ee12516435b6ff4ce80e13c676d9b)

ksmbd-tools: update to 3.4.5

Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

irqbalance: remove local patch for socket directory

Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad972ddb105264bdce3fffd0622edbd59b)

irqbalance: update to 1.9.0

Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d956c719b3b57707f1ef690aeb4d707c)

yggdrasil: stop properly

Previously it was using killall with procd respand enabled

This was causing yggdrasil to restart after being killed

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
Terminated
143
 6701 root      653m S    /usr/sbin/yggdrasil -useconffile /tmp/yggdrasil.conf
 6748 root      1308 S    grep yggdrasil

Now it's just using whatever procd is using and see there, it actually stops

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
0
 6802 root      1308 S    grep yggdrasil

I assume there was some procd bug that kept it from being used properly

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
(cherry picked from commit 17bb2d25191704d0526bd1bdc0e9060dbf02e12b)

openwisp-config: update to 1.0.0

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>

xray-core: Update to 1.5.6

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589f48345ec98a0808cfbd8b5cb0ca190)

cloudflared: Update to 2022.5.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce63c3fd86a034996efd2750707d3211946cee2)

yq: Update to 4.25.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff30315124f8e3733bac62b5846a23c24)

Merge pull request #18652 from mhei/22.03-php8-update

[22.03] php8: update to 8.1.6

Merge pull request #18651 from mhei/22.03-libxml2-update

[22.03] libxml2: update to 2.9.14

php8: update to 8.1.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fbcb35b33f22d11c6f441fae01911d7fac7ebe76)

php8: update to 8.1.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ef1249f35428a9df6999e9c296dad80a80452c38)

libxml2: update to 2.9.14

This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e)

pdns-recursor: update to 4.7.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b6247214350e67d9e16dcb3016a47b51f838bc2c)

Merge pull request #18518 from lowjoel/strongswan-rekey-bytes-packets-22.03

strongswan: support child rekey by bytes and packets

lua-openssl: update to version 0.8.2-1

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>

banip: mark as broken

banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a2f02572726d4659cd3f5e28387094b263dc6b74)

dnslookup: Update to 1.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 202f0007d66fc2145f5d6856b82224f3ac656113)

dnsproxy: Update to 0.43.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 20a51c2efd60eea79abd210043fc5961732567b9)

dnsproxy: Update to 0.42.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35961ec90d66f0615f541d5dcd45696efb9751ca)

vpnc: Update to 0.5.3+git20220517

The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb8cd43b765ba65e70a036820c03de83)

haproxy: Update HAProxy to v2.4.17

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

tailscale: update to version 1.24.2

Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d14e59435506fae0a31dfc908175dde4)

node-serialport: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit acd8384ede34015bffbcefeb4598bf3b7bd06952)

node-hid: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 20876aadf847d4266a1636d5f41d4a2c4f8b0f7c)

node-cylon: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 46ce0df5232d8031de2461e3b8d3de9bdc9b5226)

node-arduino-firmata: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 005e114ddd0d9a6b3bf63cac1d39b5a27ef7460d)

node-serialport-bindings: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fb36a5226c74f8994d7882810ef29ee2f47bc47c)

node-yarn: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 285efba8ea9c3f49334c54cd6a96b2721deb0e2b)

node-homebridge: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3138eacbe3d92a05e8c3f45879981e302362ecb4)

node-javascript-obfuscator: Support for npm@8

With the upgrade of node.js to version 16, the npm version will also change to version 8.
This fix is to support npm@8. npm@6 can also build without problems.

The modification method is different from other node modules.
The reason is due to the npm@8 issue.
https://github.com/npm/cli/issues/4027

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit eee26dbac657d8bdf33df0c71b5affcae094ee0c)

node: Major update from v14 to v16

This update also changes npm from v6 to v8.
This change also requires node module packages to be modified.
Each package will be updated later.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 28be0c92c2f883df59b346631868d45c215098f4)

ffmpeg: update to 5.0.1

Bump to latest upstream version, patches automatically rebased.

Removed upstreamed:
    060-configure-link-to-libatomic-when-its-present.patch

Tested using:
ffmpeg -f lavfi -i testsrc=duration=10:size=1280x720:rate=30 testsrc.mpg

Resulting mpg was good.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 5b85e7466c808dc88ba02f1b3fef066daf923ef6)

pigeonhole: update to 2.3.18

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c0fbb4f7fd66413ee70bf5e1e8f4b1fb442963b1)

dovecot: update to 2.3.18

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 4c2306468a6c04a87073adacc8354a7bb307ca7b)

openconnect: bump to version 9.01

Now with basic support for the Array Networks SSL VPN protocol.

Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs,
for the time being, so select them if compiling against OpenSSL.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a85a057b145660127e2a47e4c64e8d9444baec9f)

miniflux: update to 2.0.36

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 68879aea2051fde1fee2d9ccf70431219c6806a8)

openldap: drop use of HTTP in favor of HTTPS

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit bab2f020eec5524984902c382591fc562b6e08aa)

audit: avoid interferece with base libaudit build

Both audit in the packages feed and libaudito from the base repo use the
same sources.

Have 'audit' use a different build directory than 'libaudit' package to
avoid interference between them.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c0f26f4980cfb6d2abb1b1548530cee41c5f92aa)

audit: remove host build

The audit package in the packages feed share the same sources as the
libaudit package in the base repo.  libaudit performs a host build, used
only by libsemanage in base.

There is no package depending on 'audit/host', so we can remove it to
avoid possible confusion.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1d54defb0fe7a964a19e3aa36e35a8159bcc2262)

audit: Fix compilation with kernel 5.15

Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d59ef59bfcb4b8c38fa9c93038cde8fb)

poemgr: add package

Add the poemgr package. This package is required to control the PSE
controller for the PoE outputs on the Ubiquiti UniFi Switch Flex.

Signed-off-by: David Bauer <mail@david-bauer.net>

shadowsocks-libev: fix compat issue with newer version of ucode

Reported-by: Huangbin Zhan <zhanhb88@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 93162b35c833569243592e650957cc66e45269fe)

bluez: Update to 5.64, update/refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c307ff3c1d549ff8ab1eb005a2b9dcd67)

docker: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac56718b64c29780a6464d39ef5e1f5c5278)

dockerd: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b129555835a79c064166c170bf3ae53)

libnetwork: Updated to 339b97 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898deb76cc1645301f07d579366c5d08b)

containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7bdcefe5e9c97e0f8ec17bc4f97b9251)

runc: Update to v1.1.1 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c495b88265165f9ed9093559f7ee5136)

icu: bump to 71.1

Description:
ICU 71 updates to CLDR 41 locale data with various additions and corrections.

ICU 71 adds phrase-based line breaking for Japanese. Existing line breaking methods follow standards and conventions for body text but do not work well for short Japanese text, such as in titles and headings. This new feature is optimized for these use cases.

ICU 71 adds support for Hindi written in Latin letters (hi_Latn). The CLDR data for this increasingly popular locale has been significantly revised and expanded. Note that based on user expectations, hi_Latn incorporates a large amount of English, and can also be referred to as “Hinglish”

ICU 71 and CLDR 41 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15 which is planned for September.) We are also working to re-establish continuous performance testing for ICU, and on development towards future versions.

ICU 71 updates to the time zone data version 2022a. Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d46237f17cd7ceb10e7a00d032b58c41aa6de0e4)

usteer: update to latest HEAD

7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a0578d0759e5a03309e5be38cf746db)

Merge pull request #18363 from stangri/openwrt-22.03-https-dns-proxy

[22.03] https-dns-proxy: 2021-11-22-3: add support for Canary Domains

telegraf: Update to version 1.22.4

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bbc7b66439437429fbd4f2c9fbfa0725)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Merge pull request #18543 from hexian000/openwrt-22.03

[openwrt-22.03] privoxy: update to 3.0.33 and fix the init script

golang: Update to 1.18.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4a72507b16dca5b2962ff21580e1ff3)

micropython-lib: Update to latest master

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8550edbe85a54427e7e28d4c18564216c821686e)

ci: Look for changed packages in the PR branch only

Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac379ecae55993a8faa583910423f620e7)

docker: fix compilation with glibc

Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 624f48a6027f99cd7f1213e43804bed57c8a3d55)

dockerd: fix compilation with glibc

Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 9963312067185d7d47970d2abfb59b6c1a7bfdd5)

dockerd: Add firewall independent dependencies

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 1f96ec16ecdb98b83244b4c97faf314552948924)

dockerd: Sorted dependencies for better diffs

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 34c77110f1b01e374d9dca0d288933cd6ef9a10e)

docker:  Update to 20.10.14

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb8fc30e33f6d4fa670f7379d4d31e6a)

dockerd: Update to 20.10.14, and update version checking mechanism

https://github.com/moby/moby/commit/a7a7c732c0dc02ee5b5515f4ca868ef50cafa4a1
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22a89bfdf4dd1edac25e4a8256717a68)

containerd: Update to 1.5.11

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a0784f1b0a04670f38ffedddb46087dee)

runc: update to 1.0.3

* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995ab3c6d56c22b282c277a9335ba978f0)

privoxy: update to 3.0.33 and fix the init script

1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b957891c23d030c1e64c4857cb1a1035650)

lxc: export systemd cgroups after install

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b95053bf958a4001fb0a82c4563bf345e2)

cloudflared: Update to 2022.5.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 95a0d040467559ad81797f3465bd32796e3215c0)

dnsproxy: Update to 0.42.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcb0495ca1dc617fd1e1f9201cefda9b4705fe52)

dawn: update to 2022-05-09

7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

haproxy: Update HAProxy to v2.4.16

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

strongswan: support child rekey by bytes and packets

This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 5c8af06c94330a895f9df5ccc47fdfe29a1838ed)

Merge pull request #18469 from lowjoel/strongswan-wolfssl-22.03

strongswan: add wolfssl plugin

Merge pull request #18462 from 1715173329/cr

[openwrt-22.03] cloudreve: Update to 3.5.3