libaio: update to 0.3.113

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libcap-ng: update to 0.8.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgee: update to 0.20.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgpg-error: update to 1.46

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libvpx: update to 1.12.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19822 from neheb/8

libseccomp: update to 2.5.4

libseccomp: update to 2.5.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.22.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19707 from stangri/master-https-dns-proxy

https-dns-proxy: rename options

lxc-auto: made init script compatible with image builder

Signed-off-by: Marc Benoit <marcb62185@gmail.com>

syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

dos2unix: add new package

dos2unix - text file format converters

includes:
dos2unix - DOS/Mac to Unix text file format converter (dos2unix/mac2unix)
unix2dos - Unix to DOS/Mac text file format converter (unix2dos/unix2mac)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

sms-tool: SMS Tool for 3G/4G modem

Co-authored-by: Cezary Jackiewicz <cezary@eko.one.pl>
Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Andrey Butirsky <butirsky@gmail.com>

zoneinfo: updated to the latest release

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

nload: add new package

Signed-off-by: Jacky Guo <leickwell@hotmail.com>

mini_snmpd: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

lynx: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

librespeed-cli: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

squid: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

owntone: Update to 28.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libunistring: Update to 1.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libtins: update to 4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn: update to 1.41

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn2: update to 2.3.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liblz4: update to 1.9.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: update to 3.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmad: update to 0.16.3

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 5.0.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpng: update to 1.6.38

Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19797 from neheb/12

libtasn1: update to 4.19.0

zerotier: update to 1.10.2

Signed-off-by: Moritz Warning <moritzwarning@web.de>

xray-core: Update to 1.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsdist: update to 1.7.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

libjpeg-turbo: update to 2.1.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtasn1: update to 4.19.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pdns: update to 4.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #19773 from stintel/announce

announce: trim trailing spaces

Merge pull request #19779 from stintel/hub-ctrl

hub-ctrl: trim trailing spaces

luaexpat: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19783 from turris-cz/pulseaudio-fix-conffiles

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Merge pull request #19756 from TDT-AG/pr/20221031-ovpn-compress

openvpn: add possibility to set param "compress" without algorithm

mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon

The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc5914 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Fixes: 60ac7dd751240fa096a85794023b18f26a8317da ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #19769 from mhei/php8-update-8.1.12

php8: update to 8.1.12

hub-ctrl: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

announce: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19770 from stangri/master-curl

curl: bugfix: building as selected package doesn't break build

curl: bugfix: building as selected package doesn't break build

* Reported-by: Chen Minqiang <ptpt52@gmail.com>
* details [here](https://github.com/openwrt/packages/commit/88009b2d5e394c1822ec55734b63b434981a2a9d#commitcomment-88604318)

Signed-off-by: Stan Grishin <stangri@melmac.ca>

php8: update to 8.1.12

This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

knot: update to version 3.2.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>

pulseaudio: change homepage URLs to freedesktop.org

The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: use AUTORELEASE variable

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: daemons should conflict to each other

It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: simplify and rework Makefile

There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libedit: update to version 20221030-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

sudo: bump to version 1.9.12

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

kadnode: fix newlines in config file

Signed-off-by: Moritz Warning <moritzwarning@web.de>

rclone: Update to 1.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ibrdtnd: run through dos2unix

This patch uses CRLF line endings for some reason...

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cloudflared: Update to 2022.10.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.29.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openobex: remove CXX patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

knxd: bump to new upstream version 0.14.54

Signed-off-by: Othmar Truniger <github@truniger.ch>

apcupsd: remove header file patch

Seems to be from a time when pkgconfig returned the wrong path.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19747 from stangri/master-curl

curl: include nls.mk

openvpn: add possibility to set param "compress" without algorithm

In some situations you need to set the compress param without an
algorithm. Compression will be turned off, but the packet framing for
compression will still be enabled, allowing a different setting to be
pushed later.

As it is not possible to have options with optional values at the
moment, I've introduced a pseudo value "frames_only" which will be
removed in the init script.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

curl: include nls.mk

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #19745 from stangri/master-curl

curl: update to 7.86.0

python3-pytz: bump to version 2022.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 9.3.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

curl: update to 7.86.0

* update to 7.86.0: https://curl.se/changes.html#7_86_0
* remove 300-curl-wolfssl.m4-error-out-if-wolfSSL-is-not-usable.patch as
  it was fixed upstream: https://github.com/curl/curl/pull/9682
* update configure options for OpenSSL as --without-ssl is breaking build
* remove --without-libidn configure arg as it's no longer recognized

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #19736 from champtar/phantap-lacp

phantap: update to latest commit

phantap: update to latest commit

815c312 Forward 01:80:C2:00:00:0{1,2} using nftables

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

attendedsysupgrade-common: update ASU CA pubkey

The old key was overwritten during a machine migration and the current
worker key is no longer valid. To create new valid worker certificates
this commit adds a new CA pubkey.

To update running OpenWrt devices via a client one needs to force
install it or upgrade to the latest version of
`attendedsysupgrade-common` - I'm sorry for the inconvenience.

This change is only related to the `usign` pubkey and `ucert`
certificate which is used to sign all created images on the server.

While at it, use INSTALL_DATA instead of INSTALL_BIN.

Signed-off-by: Paul Spooren <mail@aparcar.org>

rsync: update to 3.2.7

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #19693 from turris-cz/ffmpeg-conflicts-provides

ffmpeg: add conflicts and provides

gdbm: configure with `--without-readline`

By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>

Merge pull request #19704 from Ansuel/fix-atlas

atlas-probe: fix SIGSEGV error on 32bit system

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.6.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: remove orphan xray-geodata definition

Fixes: 975153f93da132 ("v2ray-geodata: split from xray-geodata")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.46.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

samplicator: update to latest master commit 2021-10-11

The newest master branch has important fixes. However, no new release is
published [0]. Switch to git and update to latest master commit.
This introduces new version scheme by using YYYY-MM-DD of the commit.

In addition, add necessary "PKG_FIXUP" and "PKG_REMOVE_FILES" to allow
compile the new version. Also add enable "PKG_BUILD_PARALLEL".

Further, use a pidfile and remove outdated patches.

https://github.com/sleinen/samplicator/issues/73

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #19714 from turris-cz/libwebsockets-dependency

libwebsockets: fix recursive dependency

libwebsockets: fix recursive dependency

While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138: symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122: symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5eeb583da2603e399fac085fa442c59 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

bandwidthd: fix time_t problem
Fixes issu #19510 with the change in time_t with musl 1.2

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>

squeezelite: add opus codec support

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

frr: update to latest 8.3.1 branch

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

mariadb: Update to the latest version 10.9.3

Update to the latest upstream version. For more details, see:

https://mariadb.com/kb/en/changes-improvements-in-mariadb-109/

Added new dependency on libfmt.

Following two patches dropped as the issues were fixed in upstream.

 * 130-c11_atomics.patch
 * 140-mips-connect-unaligned.patch

The rest of the patches were refreshed.

Don't need to disable cassandra and tokudb anymore as they were dropped
from upstream tarball.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>

https-dns-proxy: rename options

* rename wan6_trigger to procd_trigger_wan6
* rename update_dnsmasq_config to dnsmasq_config_update
* add the uci-defaults file to run sed on config file
* update Makefile to include uci-defaults file

Signed-off-by: Stan Grishin <stangri@melmac.ca>

ci: update github actions to v3

Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

openfortivpn: update to 1.19.0

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Merge pull request #19701 from turris-cz/libwebsockets-conflicts-provides

libwebsockets: full variant provides OpenSSL

Merge pull request #19702 from turris-cz/lighttpd-fix-dummy-websocket

lighttpd: backport patch to fix dummy Sec-WebSocket-Key

libwebsockets: OpenSSL and mbedTLS variants should conflict

They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

atlas-probe: fix SIGSEGV error on 32bit system

Changes to time_t cause SIGSEGV error on 32bit system and cause ripe
atlas malfunction. (registration successful but no traffic)
Also introduce minor patch to fix some compilation warning.

While at it move PKG_RELEASE to AUTORELEASE macro.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

lighttpd: backport patch to fix dummy Sec-WebSocket-Key

It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #19699 from stangri/master-https-dns-proxy

https-dns-proxy: add version information to binary

Merge pull request #19696 from stangri/master-simple-adblock

simple-adblock: service_triggers improvements