simple-adblock: dnsmasq access bugfix & misc improvements

* fix permission to dnsmasq files for ad-blocking
* add pause function to pause the ad-blocking temporarily
* introduce pause_timeout option to control default pause time
* update default config and config-update file
* use $param instead of $1 in adb_start()

Signed-off-by: Stan Grishin <stangri@melmac.ca>

rust: put host build dir to target build dir

When user runs `make clean` command, everything in `$(STAGING_DIR)`
(where we installed rust) will be removed, but `$(BUILD_DIR_HOST)`
(where we compiled rust and stored build stage) is untouched.

So when user starts a new build after that, OpenWrt buildroot will
still consider `rust` is installed already, resulting the build error
"cargo: command not found".

Fix this by moving to target build dir as well.

Fixes: f489e019ac4a ("rust: compile host package per target")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

snort3: update to 3.1.66.0

Upstream bump

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>

rclone: Update to 1.63.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21585 from commodo/python-updates2

django,numpy,lxml: bump versions

Merge pull request #21604 from jefferyto/python3-netifaces-0.11.0

python3-netifaces: Update to 0.11.0, rename source package

Merge pull request #21608 from jefferyto/python3-unidecode-1.3.6

python3-unidecode: Update to 1.3.6, rename source package

docker-compose: Update to version 2.20.2

Signed-off-by: Javier Marcet <javier@marcet.info>

easyloggingpp: Add package
Maintainer: me@vchrist.at
Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2

Description:
Easylogging++ is single header efficient logging library for C++ applications. It is extremely powerful,
highly extendable and configurable to user's requirements.

Signed-off-by: Volker Christian <me@vchrist.at>

v4l2camera: add new package

Signed-off-by: Michel Promonet <michel.promonet@free.fr>
Co-authored-by: Tianling Shen <cnsztl@gmail.com>

python3-unidecode: Update to 1.3.6, rename source package

This renames the source package to python-unidecode to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-netifaces: Update to 0.11.0, rename source package

This renames the source package to python-netifaces to match other
Python packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

dnsproxy: Update to 0.52.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

snowflake: update to 2.6.0

Tor projects tries to migrate away from git.torproject.org [0,1]. We
need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport
patches to fix compiling on riscv64, so add:
- 0001-Bump-minimum-required-version-of-go.patch
- 0002-Update-dependencies.patch

Changelog:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/2fa8fd9188078eaa169f1edd16815deae4004c6c

[0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86
[1] - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/82cc0f38f73c4ca4e12d22173562a092ebd4dea0

Signed-off-by: Nick Hainke <vincent@systemli.org>

cpusage: remove AUTORELEASE

Commit 0c10c224be81 only handles the case where AUTORELEASE is used in
PKG_RELEASE thus this package was left behind. Let's fix this up.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>

transmission: add ftruncate syscall to seccomp

Fixes many crashes.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

nvme-cli: Add new package

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>

Merge pull request #21593 from jefferyto/ci-fix-pkg-source

CI: Fix finding test script

rust: Update to 1.71.0

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rust: compile host package per target

While the compiled binaries are intended to run on the host system, the
rust/host package does include the target matching the configured
OpenWrt target.

If using (for example) ./scripts/env to switch between different
OpenWrt configurations, this will cause issues if the different
configuration is for a different target. In such case there will be a
mismatch between the available Rust target and OpenWrt target and the
following error will be printed:

> error[E0463]: can't find crate for `core`
> note: the `XXX` target may not be installed

This fix will add the RUSTC_TARGET_ARCH as HOST_BUILD_DIR and CARGO_HOME
suffix, such that rust/host will be compiled in case an OpenWrt
configuration change causes the RUSTC_TARGET_ARCH to change.

Fixes: #21530
Signed-off-by: Orne Brocaar <info@brocaar.com>
[Applied Jeffery To's suggestion for build and install path]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-pip: Update to 23.2

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

jq: remove _GNU_SOURCE from Makefile and instead backport patch

Commit 4bb18b04 added _GNU_SOURCE to jq's Makefile to fix a segfault.
This has since been fixed upstream, so this commit backports the upstream
patch instead. This keeps things closer to upstream, and it will prevent
the Makefile from containing a redundant fix once upstream releases the
next version.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #21590 from jefferyto/golang-1.20.6

golang: Update to 1.20.6

CI: Fix finding test script

Currently, the run-test code tries to find the package source directory
based on the directory name only. This fails for the Go compiler package
because there is more than one directory named "golang".

This uses the full path listed in the "Source:" line of the control file
to find the package source directory.

This also:

* Checks for the test script earlier, to avoid installing and removing
  ipk files when there is no test script to be run

* Makes PKG_VERSION parsing more lenient, as the package may not have a
  PKG_RELEASE, e.g. attendedsysupgrade-common

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

golang: Update to 1.20.6

Includes fix for CVE-2023-29406 (net/http: insufficient sanitization of
Host header).

This also updates the copyright information for various Go packaging
files.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-babel: Update to 2.12.1, add host build

Also updated dependencies for the new version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

numpy: bump to version 1.25.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-django: bump to 4.2.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-lxml: bump to 4.9.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

Merge pull request #21566 from jefferyto/python-mako-reimport

python-mako: Re-import host-only package from abandoned packages repo

Merge pull request #21576 from commodo/libwebp

libwebp: bump to version 1.3.1

Merge pull request #21577 from commodo/tcpreplay

tcpreplay: bump to version 4.4.4

Merge pull request #21575 from commodo/sudo

sudo: bump to verison 1.9.14p1

Merge pull request #21568 from commodo/python-updates1

pillow, pymysql, requests: bump versions

banip: release 0.9.0-1

* supports allowing / blocking of certain VLAN forwards in segregated network environments,
   set 'ban_vlanallow', ''ban_vlanblock' accordingly
* simplified the code/JSON to generate/parse the banIP status
* enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1'
* made the new vlan options available to LuCI (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>

tcpreplay: bump to version 4.4.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

libwebp: bump to version 1.3.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

sudo: bump to verison 1.9.14p1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

pillow: bump to version 10.0.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

pymysql: bump to version 1.1.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-requests: bump to version 2.31.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

python-mako: Re-import host-only package from abandoned packages repo

Mako was removed in 60ce07b9a1d5c7a53297f177f10af68f3304be9e; at the
time we were using host pip to install host Python packages and so
having this package was not necessary.

With the move away from host pip and toward proper host packages, it
would be better to have a Mako host-only package here to support the
mesa package in the video feed.

This re-imports the package from the abandoned packages feed, updates
the makefile with current Python package conventions, and updates the
package to the latest version.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

yq: Update to 4.34.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: Update to 2023.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

inih: Update to r57

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

shairport-sync: fix init script

'name' may contains '%h' or '%v', printf will fail on that

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

ooniprobe: Update to 3.18.0

This version includes support for Go 1.20 (specifically 1.20.5).

This also:

* Adds a workaround for musl 1.2.4 compatibility in mattn/go-sqlite3[1]

* Sets GO_PKG_BUILD_PKG to build the main binary (ooniprobe) only

* Updates the package license; the project was relicensed in 3.13.0[2]

[1]: https://github.com/mattn/go-sqlite3/issues/1164
[2]: https://github.com/ooni/probe-cli/pull/446

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-trove-classifiers: Update to 2023.7.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

click: Update to 8.1.4, rename source package

This renames the source package to python-click to match other Python
packages.

This also updates the package dependencies, licence file, package title
and description.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-editables: Update to 0.4

The build backend was changed from setuptools to flit-core.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

docker-compose: Update to version 2.20.0

Signed-off-by: Javier Marcet <javier@marcet.info>

python-cython: Update to 0.29.36

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #21550 from mhei/php8-update-to-8.2.8

php8: update to 8.2.8

adguardhome: bump to 0.107.33

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.30
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.31
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.32
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.33

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

php8: update to 8.2.8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21545 from nmav/tmp-ocserv1.2.0

ocserv: updated to 1.2.0

ocserv: updated to 1.2.0

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

sedutil: fix compilation with GCC13

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtins: fix compilation with GCC13

Patch taken from upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nginx-util: fix compilation with GCC13

Signed-off-by: Rosen Penev <rosenp@gmail.com>

treewide: make all GNOME URLs consistent

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lua-rs232: fix compilation with GCC13

Patch taken from upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libaio: opt out of lto usage

Signed-off-by: Javier Marcet <javier@marcet.info>

Nlohmannjson: Update to version 3.11.2

Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2)

* Update package nlohmannjson to version 3.11.2.
* Version 3.11.2 is source compatible with 3.10.2 so no package should fail to compile
* From version 3.11.2 on forward template declarations are collected in the file
  json_fwd.hpp. The json.hpp still contains all template definitions.
  Because in most compilation units of a software package only the file json_fwd.hpp
  needs to be included, the compilation process is accelerated a lot.

Signed-off-by: Volker Christian <me@vchrist.at>

stress-ng: bump to version 0.15.10

Merged patches into a single one.
Disabling libmpfr (which got added recently).
To avoid potentially new build failures.

And disabling test-compiler check.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

tailscale: update to 1.44.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

snort3: update to 3.1.65.0

Upstream bump

Build system: x86_64
Build-tested: x86_64/AMD 5800U
Run-tested: x86_64/AMD 5800U

Signed-off-by: John Audia <therealgraysky@proton.me>

luaposix: update to 36.2.1

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

iperf3: update to 3.14

Release Notes:
https://github.com/esnet/iperf/blob/master/RELNOTES.md

Signed-off-by: John Audia <therealgraysky@proton.me>

libre2: update to 2023-02-01

Fixes compilation with GCC13

Signed-off-by: Rosen Penev <rosenp@gmail.com>

File: Fix segfault

Executables depending on binary package libmagic segfault in case
package file is not installed. Libmagic needs file
/usr/share/misc/magic to not segfault. Thus, install
/usr/share/misc/magic along with libmagic and not with file.

Signed-off-by: Volker Christian <me@vchrist.at>

File: Update to version 5.44

Signed-off-by: Volker Christian <me@vchrist.at>

btop: opt out of lto usage

Signed-off-by: Javier Marcet <javier@marcet.info>

dfu-programmer: update to 1.1.0

Changes:
 * Add `--erase-first` option

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

banip: update 0.8.9-4

* made the etag id parsing more bulletproof (to catch unverified etags as well)

Signed-off-by: Dirk Brenken <dev@brenken.org>

banip: update 0.8.9-3

* prevent superflous etag function calls during start action (on start backups will be used anyway)
* changed the ipthreat feed download URL (load a compressed file variant to save bandwidth)

Signed-off-by: Dirk Brenken <dev@brenken.org>

pdns: update to 4.8.1

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

frp: update to 0.51.0

XTCP is incompatible with previous versions since 0.49.0.

Changelog:
https://github.com/fatedier/frp/releases/tag/v0.49.0
https://github.com/fatedier/frp/releases/tag/v0.50.0
https://github.com/fatedier/frp/releases/tag/v0.51.0

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

banip: update 0.8.9-2

* fix a corner case backup issue with empty feed downloads

Signed-off-by: Dirk Brenken <dev@brenken.org>

banip: release 0.8.9-1

* added HTTP ETag or entity tag support to download only ressources that have been updated on the server side,
  to save bandwith and speed up banIP reloads
* added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme)
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

pdns-recursor: update to 4.9.0

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #21496 from Ansuel/add-mtools

net-mtools: Add new package to debug multicast setups

nyx: fix python 3.11 compatibility

Signed-off-by: Javier Marcet <javier@marcet.info>

net-mtools: Add new package to debug multicast setups

Add new package to debug multicast setups. This is required to use
kselftests script for network testing.

net-mtools is used instead of mtools as it does conflicts with another
package that is also called mtools.

Some additional patch from Vladimir Oltean are added to make the tool
works on kernel selftests scripts.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx: don't install all module for FULL variant

We currently have a more or less circular dependency with nginx ssl and
full variant.

FULL variant depends on every nginx module. Every nginx module depends
on nginx-ssl.

Since nginx-full depends on an nginx module, nginx-ssl is installed as
module depends on it and then the installation fails as nginx-full
conflicts with nginx-ssl.

nginx-full in it's meaning is nginx built with every config selected and
it should not have module as dependency. In fact an user should always
install them separetly as while other things, local modification to the
nginx config file are required to include the just installed module.

To fix this circular dependency problem, drop the dependency of every
nginx module for FULL variant.

Fixes: #21300
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx: add quic modue

This commit  adds support for http/3. This is an experimental version
and isn't fully supported because nginx is being built with the regular
OpenSSL and the regular one doesn't support quic.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>

nginx: update to 1.25.1

Update nginx to 1.25.1.

    *) Feature: the "http2" directive, which enables HTTP/2 on a per-server
       basis; the "http2" parameter of the "listen" directive is now
       deprecated.

    *) Change: HTTP/2 server push support has been removed.

    *) Change: the deprecated "ssl" directive is not supported anymore.

    *) Bugfix: in HTTP/3 when using OpenSSL.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
[ improve commit title and add nginx changelog ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx: add support for MaxMind GeoIP2 databases

Signed-off-by: Javier Marcet <javier@marcet.info>

liburing: Update to v2.4

- Updated download URL and hash
- Switched to downloading bz2 archives to save bandwidth

Signed-off-by: Christian Lachner <gladiac@gmail.com>

python-docker: Update to 6.1.3

Signed-off-by: Javier Marcet <javier@marcet.info>

python-docker: Update to 6.1.2

Signed-off-by: Javier Marcet <javier@marcet.info>

haproxy: update to v2.8.1

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

rclone: Update to 1.63.0

While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

python-typing-extensions: Update to 4.7.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-dotenv: update to v1.0.0

- 1.0.0:

  - What's Changed:
    - Handle situations where the cwd does not exist.
    - Add python-decouple as a related project
    - Drop support for python 3.7, add python 3.12-dev

- 0.21.1:

  - Added:
    - Use Python 3.11 non-beta in CI
    - Modernize variables code
    - Modernize main.py and parser.py code
    - Improve conciseness of cli.py and init.py
    - Improve error message for get and list commands when env file
    can't be opened
    - Updated Licence to align with BSD OSI template

Signed-off-by: Javier Marcet <javier@marcet.info>

dnsproxy: Update to 0.51.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21483 from pprindeville/acpica-unix-update-20230628

acpica-unix: Update to 20230628

acpica-unix: Update to 20230628

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

docker-compose: Update to version 2.19.1

Signed-off-by: Javier Marcet <javier@marcet.info>