haproxy: update to v2.8.9

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

banip: release 0.9.6-1

* refine IPv4 parsing, skip rough feed entries like loopback addresses
* better error logging during banIP nftables initialization and Set loading
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

tailscale: Update to 1.66.3

<https://github.com/tailscale/tailscale/releases/v1.66.3>

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

unixodbc: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

quota: fix compilation with GCC14

Header is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tac_plus: fix compilation with GCC14

Missing declaration and wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nsutils: fix compilation with GCC14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nvme-cli: fix compilation with GCC14

Wrong pointer type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Revert "net-snmp: fix compilation with GCC 14"

This reverts commit 7d398682941d79be1e3c2f83f6a57f163ef43a50.

net-snmp: fix compilation with GCC 14

Refresh 900-musl-compat.patch, add missing headers & fixes incompatible pointer type is now an error.

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>

setserial: fix compilation with GCC14

Need to add explicit int.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

snort3: build against gperftools for more than x86

Other targets should be able to build against gperftools and
realize speed and efficiency gains.

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #24146 from TDT-AG/pr/20240513-rust

rust: fix remote filesystem issue

remserial: fix compilation with GCC14

Missing function declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rust: add patch to fix remote filesystem issue

If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

udptunnel: fix compilation with GCC14

Missing int in main.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpfring: update to 8.6.1

Remove upstreamed patch, backport one, and switch one from downstream to
upstream patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nfdump: update to 1.7.4

Add patch fixing compilation with GCC14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shareport-sync: add support to mbedtls3

updated various function calling as new version needed

Signed-off-by: Seo Suchan <tjtncks@gmail.com>

libcli: fix compilation with GCC14

GCC 14 does not like 1 as the second parameter to calloc.

Clean up definition to avoid using PKG_SOURCE_DATE and to just use
PKG_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libroxml: fix compilation with GCC14

Need casts for integer conversion

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libcgroup: update to 2.0.3

Upstream moved to GitHub.

Backport non GNU strerror_r patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libndp: update to 1.8

Added GCC 14 patch as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Libwebsockets: temp fix for mbedtls 3.6+
3.6 removed mbedtls_x509_get_cert into private header, redefined it in resonable place to temperatly fix it, and make it not depend on mbedtls_version_C. everything is upstreamed so won't need when upstrea release 4.3.4

Signed-off-by: Seo Suchan <tjtncks@gmail.com>

Libwebsockets: update version to 4.3.3

Signed-off-by: Seo Suchan <tjtncks@gmail.com>

uwsgi: fix compilation with GCC14

Wrong pointer type is used.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netbird: update to 0.27.7

Signed-off-by: jiangslee <jiangsili@qq.com>

lpac: add package

lpac is a eUICC eSIM LPA manager written in C. It allows to
manage eSIM profiles on eUICC SIM cards or modules using multiple
backends.

Signed-off-by: David Bauer <mail@david-bauer.net>

Merge pull request #23946 from McGiverGim/fix_ddns_reload

ddns-scripts: fix duplication of processes when reloading

Merge pull request #24113 from TDT-AG/pr/20240510-fix-mirror-hash

treewide: fix mirror hash for faad2, libmbim, libqmi, zlog, atlas-probe and  modemmanager

attr: fix compilation with GCC 14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xinetd: fix compilation with gcc 14

Missing headers. Fix some warnings related to time_t while at it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dcwapd: fix compilation with GCC 14

Old bug in rapidjson.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bluez: fix compilation with GCC14

Remove _GNU_SOURCE to avoid redefinition warning.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

eoip: fix compilation with gcc14

Wrong pointer and missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

screen: fix compilation with GCC 14

Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

schroot: fix compilation with GCC14

GCC now does not allow assigning an std::locale to an std::string. No
idea why it worked originally.

Also fixed compilation with full NLS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

stlink: fix compilation with GCC 14

Switch to local git tarballs. Smaller.

Upstream backport and a local patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

kmod: update to 32

Add patch to fix compilation with GCC 14.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

apinger: fix compilation with GCC 14

Header is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bwm-ng: fix compilation with GCC 14

Header is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

canutils: update to 2023.03

Fixes compilation with GCC 14.

Removed can-calc-bit-timing. No longer present.

Backport time_t patch to prevent crashing under 32-bit systems.

Switched to local git tarballs. Smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rrdtool1: fix compilation with GCC14

gnu standard is needed. Easier to remove the CFLAG.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ddns-scripts: fix duplication of processes when reloading

When a "service ddns reload" is issued, the ddns processes are being
duplicated.
It seems the culprit is the -1 in the 'killall' command, and removing it
fixes the issue.
The -1 means to use SIGHUP, instead of the default SIGTERM.
In this case, the idea is to kill all other processes, so SIGTERM is
appropriate. In case the processes hang, SIGKILL may be another option.

Signed-off-by: Miguel Angel Mulero Martinez <migmul@gmail.com>

vala: fix compilation with GCC14

Needs a cast now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pianod: Update to latest upstream version (174.11)

Signed-off-by: Ted Hess <thess@kitschensync.net>

node: bump to v20.13.1

Update to v20.13.1

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

dump1090: fix compilation with GCC14

Upstream backport.

Switch to local tarballs. Smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dnslookup: Update to 1.10.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #24138 from stangri/master-adblock-fast

adblock-fast: update to 1.1.2-1

Merge pull request #24109 from nmav/tmp-openconnect-cam-fix

openconnect: introduced URI parameter

Merge pull request #24126 from neheb/o

pianod: fix mbedtls 3.6 compilation

Merge pull request #23982 from stangri/master-unbound

unbound: pull in adblock-fast generated adb_list

lua-eco: update to 3.5.1

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

aggregate: fix compilation with GCC 14

Implicit int is now an error.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bottlerocket: fix compilation with GCC 14

implicit int errors now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

adblock-fast: update to 1.1.2-1

* move extra_command and EXTRA_HELP to the top of the init file
* add packageCompat variable for compatibility check with WebUI
* add OutputFilter variables for supported resolvers
* simplify adb_check with the use of OutputFilter variables
* add show_blocklist command to display currently blocked domains

Signed-off-by: Stan Grishin <stangri@melmac.ca>

pianod: fix mbedtls 3.6 compilation

Just a header is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mstflint: add InstallDev target

This commit adds a missing InstallDev target, which
includes header and library files to use the mtcr library.

Signed-off-by: Til Kaiser <mail@tk154.de>

mstflint: make Python dependency optional

This commit adds a configuration symbol for the package
to make Python an optional dependency. If unselected,
Python packages won't be selected, and the Python-dependent
tools msftwreset, mstfwtrace, mstprivhost, mstresourcedump,
and mstresourceparse won't be included in the mstflint package.

Signed-off-by: Til Kaiser <mail@tk154.de>

mstflint: update to 4.28.0

Update mstflint to version 4.28.0.
Additionally, switch to the tagged release of the GitHub page.

Signed-off-by: Til Kaiser <mail@tk154.de>

lighttpd: fix missing dependency for OpenSSL crypto library

This change will provide the necessary dependency resolution, fixing:

  Package lighttpd is missing dependencies for the following libraries:
  libcrypto.so.3

Fixes: #23794
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

lighttpd: add option to use OpenSSL crypto library

Currently, it is not feasible to configure lighttpd to use OpenSSL as
its internal crypto library. Instead, one must rely on alternative
crypto libraries such as Nettle or mbedTLS. This setup is not ideal in
scenarios where a single crypto library is preferred. To address this
issue, lets propose introducing OpenSSL as an additional configuration
option.  Similarly, propose GnuTLS as additional configuration option.

Closes: #24004
Co-developed-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

tailscale: Update to 1.66.1

https://github.com/tailscale/tailscale/releases/v1.66.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

znc: update to 1.9.0

Update ZNC to 1.9.0 with the following changes:

* drop all patches:
  * 101-Reduce_rebuild_time.patch was only applicable for the old
    autoconf build, which was dropped in 1.9 and we didn't use anymore
    anyway
  * 104-disable-empty-modules-check.patch not needed anymore since ZNC
    now requires the new corecaps module on startup
  * 120-openssl-deprecated.patch was applied upstream
* disable libargon2 support explicitly to avoid non-deterministic builds
  if it gets added
* package new module corecaps with znc base, as this is a required
  module
* reorder CMAKE_OPTIONS alphabetically

No new modules were introduced or removed besides the new corecaps
module.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>

transmission: fix compile with MbedTLS 3.X

Backport pending patch, which was submitted to upstream via GitHub
to use renamed function to compile it against MbedTLS 3.x.

Signed-off-by: Seo Suchan <tjtncks@gmail.com>

pcre: drop package

This package is no longer actively maintained as it reached
End-of-Life. [1] All new projects should use PCRE2.

OpenWrt wants to be minimalistic and we migrated many packages
from PCRE to PCRE2 huge thanks belong to @Ansuel (Christian Marangi),
who worked with several open-source projects to migrate it to PCRE2 [2].
This means that on routers, we don't need to have installed two libraries
(pcre and pcre2) side by side.

[1] https://www.pcre.org/
[2] https://github.com/openwrt/packages/issues/22006

Fixes: https://github.com/openwrt/packages/issues/22006
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-jsonschema: Update to 4.22.0

Release notes:
https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst#v4220

Signed-off-by: Javier Marcet <javier@marcet.info>

speedtest-go: update to 1.7.5

Update speedtest-go version to 1.7.5

Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>

eza: update to 0.18.15

Release notes:
0.18.13: https://github.com/eza-community/eza/releases/tag/v0.18.13
0.18.14: https://github.com/eza-community/eza/releases/tag/v0.18.14
0.18.15: https://github.com/eza-community/eza/releases/tag/v0.18.15

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

modemmanager: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 22f8fd5c5b2e ("modemmanager: add missing PKG_VERSION for APK")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

atlas-probe: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 072140981093 ("atlas-probe: fix version for APK")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

zlog: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 5d273f0f5f01 ("zlog: fix version for APK")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

libqmi: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: cb9fcdab8a30 ("libqmi: add missing PKG_VERSION for APK ")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

libmbim: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 6efdaecf5b0b ("libmbim: add missing PKG_VERSION for APK")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

faad2: fix PKG_MIRROR_HASH

Due to the change in the version description, the package must be
downloaded again. In addition, the standard compression method has changed
to zst. The checksum must therefore be recalculated.

Fixes: 0c13c5e3c8de ("faad2: fix version for APK")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

bcm27xx-eeprom: update to v2024.04.20-2712

This update contains multiple BCM2712 improvements and also some minor
improvements for BCM2711.
From now on, only the latest version from default will be copied. There are too
many versions right now and the package can't be installed without expanding
the rootfs if all versions are copied.

Full changelog:
https://github.com/raspberrypi/rpi-eeprom/compare/v.2024.01.05-2712...v2024.04.20-2712

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

Merge pull request #24104 from nxhack/icu_75_1

icu: bump to 75.1

openconnect: introduced URI parameter

This allows specifying a camouflage string in ocserv.

Fixes: #23364
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #24108 from nmav/tmp-openconnect-fixes

openconnect: backport fix for anyconnect compatibility

Merge pull request #24103 from nxhack/php8-intl-icu75

php8: Support for icu 75

openconnect: backport fix for anyconnect compatibility

Fixes: #21135
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

nginx: drop deprecated luci.module in module.d

Since we moved to automatic loading of dynamic modules, we need to drop
the previous include luci.module or we end up with nginx failing to
start for old configurations.

Fixes: caffa410ed70 ("nginx: autoload dynamic modules")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx-util: fix SEGFAULT from regex_search

In converting nginx-util to PCRE2, it was wrongly dropped saving the
results of the regex match causing segmentation fault when used.

Add the missing code to correctly store the vector of the results from
the regex.

Fixes: b738e42c4de8 ("nginx-util: move to pcre2")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

golang: Enable loongarch64 for Go compiler and packages

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

v2ray-core: update to 5.16.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

icu: bump to 75.1

Unicode® ICU 75 updates to CLDR 45 (beta blog) locale data with new locales and various additions and corrections. C++ code now requires C++17 and is being made more robust.
The CLDR MessageFormat 2.0 specification is now in technology preview, together with a corresponding update of the ICU4J (Java) tech preview and a new ICU4C (C++) tech preview.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

php8: Support for icu 75

Preparing to update icu4c to 75.
Created a patch for build errors in php-intl.
```
In file included from /mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/unistr.h:39,
                 from ext/intl/intl_convertcpp.h:22,
                 from ext/intl/intl_convertcpp.cpp:17:
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:29: error: 'enable_if_t' in namespace 'std' does not name a template type
  133 |             typename = std::enable_if_t<
      |                             ^~~~~~~~~~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:24: note: 'std::enable_if_t' is only available from C++14 onwards
  133 |             typename = std::enable_if_t<
      |                        ^~~
/mnt/node/openwrt/staging_dir/target-aarch64_generic_musl/usr/include/unicode/stringpiece.h:133:40: error: expected '>' before '<' token
  133 |             typename = std::enable_if_t<
      |                                        ^
```
The FreeBSD ports patch was used as a reference.
https://github.com/freebsd/freebsd-ports/commit/e680bd98d34a86302db434c5be23d0cf9d23df23

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

v4l2rtspserver: update to v0.3.10

Signed-off-by: Michel Promonet <michel.promonet@free.fr>

keepalived: add patch to remove log message on json output

The 'luci-app-keepalived' uses the status json output to parse this
information for the status page. The problem is that when the LuCI
status page is open in the browser, the query is logged every 3 second into
the syslog. This is not needed and can therefore be removed.

This patch was already merged upstream:
https://github.com/acassen/keepalived/commit/6cce75f4eb65551a61d2e4ba775637b288c1d592

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

net-tools: Revert "net-tools: add netstat utiltiy"

This reverts commit d932a867e9445a54e49ecbff4e07bb2d1d0197be as this
changes has not been reviewed and must be reverted.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

zerotier: update to 1.14.0

Includes refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #24088 from TDT-AG/pr/20240506-net-tools

net-tools: add netstat utiltiy

Merge pull request #24089 from TDT-AG/pr/20240506-stunnel

stunnel: update to version 5.72

strongswan: Add missing declarations in swanctl

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

nginx: QUIC: Fix SSL 3.0 deprecated function

`EVP_CIPHER_CTX_cipher()` function was deprecated in OpenSSL 3.0.
As per OpenSSL's recommendation (https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_get0_cipher.html)
switch to using `EVP_CIPHER_CTX_get0_cipher()` instead.

With this change and recent commit to nginx-util #23935. We should now
be able to build nginx + modules with fully compliant calls to OpenSSL
3.0+ with legacy features disabled.

Signed-off-by: Sean Khan <datapronix@protonmail.com>
Link: https://github.com/openwrt/packages/pull/24005
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #24092 from nmav/tmp-fix-ocserv-ipcalc

ocserv: set ipcalc explicitly

ocserv: set ipcalc explicitly

This is a mandatory tool for the test suite, but we do not run it.
Fixes compilation.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

openssh-keygen: Make ssh-keygen as an alternative to dropbearkey

The DropBear's dropbearkey tool is compatible with OpenSSH
ssh-keygen.
It was set by default as the /usr/bin/ssh-keygen program since
the PR https://github.com/openwrt/openwrt/pull/14174
Now if a user need for a full ssh-keygen the openssh-keygen package
should substitute it gracefully as an alternative.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
Link: https://github.com/openwrt/packages/pull/22861
[ wrap to 80 columns ]
Link: https://github.com/openwrt/packages/pull/22861
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

stunnel: update to version 5.72

Signed-off-by: Florian Eckert <fe@dev.tdt.de>