yq: Update to 4.13.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

apparmor: update to 3.0.3

Fix compilation under Fedora. There's some weird systemd target. Just
remove it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

protobuf-c: don't build shared host library

No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

poco: switch to building with cmake

Faster and works with mips64 targets.

Removed all options as the defaults are updated. Added new dependencies.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

miniflux: new package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

dawn: respawn dawn in case of crash

Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>

wsdd2: update to 2021-10-14

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cloudreve: add new package

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

statik: add new packages

This is required by cloudreve.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

telegraf: Upgrade package telegraf to version 1.20.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

telegraf: Add package for telegraf

Telegraf is a plugin-driven agent for collecting and sending metrics
and events. It supports various inputs (including prometheus
endpoints) and is able to send data into InfluxDB.
https://www.influxdata.com/time-series-platform/telegraf/

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

tvheadend: add patch to update hdhomerun

Tarball with libhdhomerun_20171221 [1] was removed from upstream repository
and as it can not be found.

[1] http://download.silicondust.com/hdhomerun/libhdhomerun_20171221.tgz

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

django: bump to version 3.2.8

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-cffi: bump to version 1.15.0

And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-idna: bump to version 3.3

And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 8.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

expat: don't build host libs

tools/expat is actually what's used by the various packages that
supposedly depend on expat/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.54.2

Remove shared libraries. Allows removing rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #16929 from stangri/master-vpn-policy-routing

vpn-policy-routing: bugfixes: killall and tmpfs params

vpn-policy-routing: bugfixes: killall and tmpfs params

* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>

dfu-util: Upgrade to version 0.11

Tested on RAMIPS with STM32 L1 and STM32 L4

Signed-off-by: Bruno Randolf <br1@einfach.org>

checksec: update to version 2.5.0

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

Merge pull request #16911 from stangri/master-vpn-policy-routing

vpn-policy-routing: revert to 0.3.4-8

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

dnscrypt-proxy2: update to version 2.1.1

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ksmbd-tools: update to 3.4.2

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>

ksmbd: update to 3.4.2

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>

msmtp: update to version 1.8.17

- Use AUTORELEASE fce
It helps when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

syslog-ng: update to version 3.34.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

vpn-policy-routing: revert to 0.3.4-8

* there are reports that 0.3.5-x versions do not work on some configs
* the development of the new features moved to the new package (pbr)
* revert to the last known good version of vpn-policy-routing

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #16908 from turris-cz/git

git: update to version 2.33.1

git: update to version 2.33.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #16890 from paper42/knot-resolver-5.4.2

knot-resolver: update to 5.4.2

rclone: add test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: fix logic err in service file

- Corrected `enable` detection.
- Granted config/log write permission for `rclone` user.

Fixes: d51823988847fc ("rclone: initial package")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lua-wsapi: build each variant in its own dir

This avoids unnecessary package rebuilds, when running make back to
back.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16898 from stangri/master-simple-adblock

simple-adblock: update to 1.8.8-1

simple-adblock: update to 1.8.8-1

* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>

lua-openssl: update to 0.8.0-6

Remove upstreamed patches and backport cmake fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #16628 from mwarning/uradvd

uradvd: add new package

gl-puli-mcu: add GL.iNet GL-XE300 (Puli) power monitoring daemon

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

rclone-ng: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone-webui-react: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

rclone: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

wsdd2: fix usage with musl 1.2.0

This package uses a wrong format string for time_t. Cast to long long to
fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

at: bump to version 3.2.2

Signed-off-by: Phil Eichinger <phil@zankapfel.net>

node: bump to 14.18.1 / October 12th 2021 Security Releases

October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

msgpack-c: Update to 4.0.0

- Fixed typo error in PKG_LICENSE_FILES.
- Updated CMAKE_OPTIONS.
- Refreshed the patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

knot-resolver: update to 5.4.2

* refresh patches
* disabling kres_gen_test is not required anymore for cross compilation, it was fixed upstream with the 5.4.1 release

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

uradvd: add new package

Send IPv6 router advertisments.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
Co-authored-by: Matthias Schiffer <mschiffer@universe-factory.net>

hs20: switch dependencies to php8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

transmission: build with wolfSSL again

The problem was discovered and is now patched with an upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openvpn: update to 2.5.4
Include a number of small improvements and bug fixes.
Improve compatibility on Windows systems

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

git-lfs: update to version 3.0.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

atlas-probe: allow parallel build

Set PKG_BUILD_PARALLEL:=1

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

atlas-probe: Fix compilation with gcc11

This uses some definitions from <sys/cdefs.h> in gcc 8.4.0, not present
in musl or gcc11.

Also use clock_gettime() instead of syscall(__NR_clock_gettime,...),
which is not currently defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

python-qrcode: bump to 7.3.1

This is a major update, which drops support for python < 3.6, among
other changes, better seen at:
https://github.com/lincolnloop/python-qrcode/blob/v7.3.1/CHANGES.rst

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

django-formtools: bump to 2.2.0

This is the highest version supported by seafile-seahub, because of
the django1 requirement.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

django-webpack-loader: bump to 0.7.0

This is the highest version that works with seafile-seahub 7.1.5.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

python-oauthlib: bump to 3.1.1

This is a minor update, which officially supports Python 3.8, and
removes Python 2 code, among several bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

pyjwt: update to 2.2.0

This is a major update to the latest version.

There are many changes, better seen at
https://github.com/jpadilla/pyjwt/blob/2.2.0/CHANGELOG.rst

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

defusedxml: bump to v. 0.7.0

This release adds support for Python 3.9.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16776 from stangri/master-https-dns-proxy

https-dns-proxy: update to 2021-09-27

https-dns-proxy: update to 2021-09-27

* update to [2021-09-27](https://github.com/aarond10/https_dns_proxy/commit/da2501f542a732167a78f1851a511d9c0abc2fd8)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>

python-docker: Update to 5.0.3

Features:
 - Add cap_add and cap_drop parameters to service create and
 ContainerSpec
 - Add templating parameter to config create

Bugfixes:
 - Fix getting a read timeout for logs/attach with a tty and slow
 output

Miscellaneous:
 - Fix documentation examples

Signed-off-by: Javier Marcet <javier@marcet.info>

python-dotenv: update to v0.19.1

What's Changed

 - CHANGELOG.md: Fix typos discovered by codespell by @cclauss in #350
 - Add Python 3.10 support by @theskumar in #359

Signed-off-by: Javier Marcet <javier@marcet.info>

python3-paramiko: update to version 2.8.0

Signed-off-by: Javier Marcet <javier@marcet.info>

ooniprobe: update to version 3.10.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

python-certifi: bump to 2021.11.8

Latest bundle form mozilla.org.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16808 from mhei/zabbix-upgrade-to-php8

zabbix: switch dependencies to php8

yq: Update to 4.13.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dawn: update to 2021-10-13

d222d12bcb58 ubus: use local blub_buffer definitions and free

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #16856 from jefferyto/python-pyopenssl-21.0.0

python-pyopenssl: Update to 21.0.0

oniguruma: bump to 6.9.7.1

Changelog:

*  NEW API: ONIG_OPTION_CALLBACK_EACH_MATCH
*  NEW API: ONIG_OPTION_IGNORECASE_IS_ASCII
*  NEW API: ONIG_SYNTAX_PYTHON
*  Fixed some problems found by OSS-Fuzz
*  fix: replace UChar to OnigUChar in oniguruma.h

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #16844 from erdoukki/crowdsec-firewall-bouncer

crowdsec-firewall-bouncer: initial package v0.0.15

Merge pull request #16244 from erdoukki/crowdsec

crowdsec: initial package v1.2.0

golang: Update to 1.17.2

Includes fix for CVE-2021-38297 (passing very large arguments to WASM
module functions can cause portions of the module to be overwritten).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

pynacl: fix build with updated sodium-minimal patch

Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

python-pyopenssl: Update to 21.0.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

gitlab-runner: update to version 14.3.2

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

rrdtool: Keep time as 'long' despite 64bit time_t in musl

Adjust to the 64 bit time_t in musl 1.2.2 by keeping time
internally in RRD still as 'long', so that old databases
created during musl 1.1.x still work in 32 bit targets.

That also helps with several interal functions that use 'long'
for calculations and printf formatting.

* Define internal type TIME_INT as 'long', and use that
  internally in calculations
* Use time_t vs. TIME_INT casting when necessary
* Provide time_t variable pointers for functions expecting
  a time_t pointer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

acme: update to 3.0.1

Default to letsencrypt because the upstream default may change.
Passing --staging is no longer needed, since --serever will
select a staging server if needed.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
Tested-by: Georgi Valkov <gvalkov@abv.bg>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>

github-ci: also build mipsel_24kc / mt7621

Signed-off-by: Kevin David <kevin.p.david@gmail.com>
This seems like a fairly popular configuration and is at least handy for me for temporary testing.

CI: update SDK action to v3

No also check mirror hashes and badly formated init files

Signed-off-by: Paul Spooren <mail@aparcar.org>

cni-plugins: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cni: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

opentracker: update to git HEAD of 2021-08-23

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cryptsetup: update to version 2.4.1

Package new experimental SSH token authenticator plugin as new package
'cryptsetup-ssh'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ccid: update to version 1.4.36

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pcsc-lite: update to version 1.9.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libinput: update to version 1.19.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libudev-zero: update to version 1.0.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

exim: update to version 4.95

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pyodbc: update to version 4.0.32

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

postgresql: update to version 14.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

debootstrap: update to version 1.0.124

Update package and use @DEBIAN mirror.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libsodium: update maintainer email address

Signed-off-by: Damiano Renfer <x9w2n7xnu@relay.firefox.com>

crowdsec-firewall-bouncer: initial package v0.0.15

/net/crowdsec-firewall-bouncer/

crowdsec-firewall-bouncer will fetch new and old decisions from
 a CrowdSec API to add them in a blocklist used by supported firewalls.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>

crowdsec: initial package v1.2.0

/net/crowdsec/

Crowdsec - An open-source, lightweight agent to detect
 and respond to bad behaviours.
 It also automatically benefits from a global community-wide
 IP reputation database.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>

dawn: update to 2021-08-05

* c70773a - datastorage: use signal strength as a metric
* 14e0f83 - Don't display debugging output with DAWN_NO_OUTPUT
* 97e5de1 - uci: add neighbor list priority options
* 2b1a53c - dawn_uci: set default values
* 6eb747b - Use separate configs for 802.11g & 802.11a bands
* 1e34357 - Verify compatibility before parsing config message
* a7a8309 - List all neighbors with same score when kicking
* 3ba0fa4 - Change beacon request fields to appropriate values
* 009aab9 - Change mode config parameter from int to string

Signed-off-by: Nick Hainke <vincent@systemli.org>