staging/neocturne/scripts, branch main

scripts/download.pl: fix broken link for KERNEL projects

2024-06-19T12:30:06Z

Fix broken link generation for KERNEL projects. Using $1 in projectsmirrors sub was still referencing the caller $1 instead of the remaining args of projectsmirrors sub. Use shift and put the second arg of projectsmirrors sub in $append to correctly handle the sub args. Fixes: 465cf358881c ("scripts/download.pl: detach mirror URLs from script file") Signed-off-by: Christian Marangi

scripts/download.pl: detach mirror URLs from script file

2024-06-18T17:51:45Z

Detach URL from download script to make it easier to change and update the URLs. The mirror list is moved to a JSON file in the scripts directory called projectsmirrors.json. Link: https://github.com/openwrt/openwrt/pull/15745 Signed-off-by: Christian Marangi

scripts/ext-toolchain: add missing libc library specs

2024-06-17T11:24:03Z

Add missing libc library spec that weren't added to the ext-toolchain script when the library were introduced in the packages libs toolchain Makefile. Signed-off-by: Christian Marangi

build: add explicit timezone in CycloneDX SBOM

2024-06-07T10:05:49Z

The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software. Per the CycloneDX 1.4 spec, the `metadata.timestamp` field contains the date/time when the BOM was created [1]. Before the change, the value generated by the package-metadata.pl script would look like this: 2024-06-03T15:51:10 CycloneDX 1.4 relies on the JSON Schema specification version draft-07, which defines the `date-time` format [2] as derived from RFC 3339, section 5.6 [3]. In this format, the `time-offset` component is required, however in the original version of package-metadata.pl it is omitted. This is causing problems with OWASP Dependency-Track version 4.11.0 or newer, where it now validates submitted SBOMs against the JSON schema by default [4]. SBOMs with incorrect timestamp values are rejected with the following error: { "detail": "Schema validation failed", "errors": [ "$.metadata.timestamp: 2024-06-03T15:51:10 is an invalid date-time" ], "status": 400, "title": "The uploaded BOM is invalid" } Add explicit `Z` (UTC) timezone offset in the `timestamp` field to satisfy the CycloneDX schema. [1]: https://github.com/CycloneDX/specification/blob/1.4/schema/bom-1.4.schema.json#L116-L121 [2]: https://json-schema.org/draft-07/draft-handrews-json-schema-validation-01#rfc.section.7.3.1 [3]: https://datatracker.ietf.org/doc/html/rfc3339#section-5.6 [4]: https://github.com/DependencyTrack/dependency-track/pull/3522 Signed-off-by: Roman Azarenko

scripts: Add GNU ftp mirror redirector for GNU and Savannah

2024-05-29T09:19:08Z

Add GNU's redirector which automatically redirect user to nearby online mirror. Signed-off-by: Sahil Dhiman Link: https://github.com/openwrt/openwrt/pull/15557 Signed-off-by: Robert Marko

build: fix version info in cyclonedx sbom

2024-05-25T17:27:06Z

Prior e8725a932e16eaf6ec51add8c084d959cbe32ff2, version used to be VERSION:=$(PKG_VERSION)-$(PKG_RELEASE) After e8725a932e16eaf6ec51add8c084d959cbe32ff2, the version is: VERSION:=$(PKG_VERSION)-r$(PKG_RELEASE) Hence the gen_*_cyclonedxsbom functions need to be updated to remove the trailing -r prefix in the version in order to generate correct version info in the SBOM. Signed-off-by: Akshay Bhat

scripts: fix revision calculation using new "main" branch

2024-05-21T15:53:33Z

Fix revision calculation when local branch is rebased on new "main" branch instead of "master". Signed-off-by: Marius Dinu Link: https://github.com/openwrt/openwrt/pull/15538 Signed-off-by: Christian Marangi

build: add APK package build capabilities

2024-05-17T20:21:26Z

A new option called `USE_APK` is added which generated APK packages (.apk) instead of OPKG packages (.ipk). Some features like fstools `snapshot` command are not yet ported Signed-off-by: Paul Spooren

scripts/kernel_bump: Fix commit text formatting

2024-04-28T22:24:02Z

Text of a commit message body should wrap at 75 characters. Manual commits are expected to do so, but automated commits *must* do so to avoid adding repeated ugly commits. Signed-off-by: Tony Ambardar

scripts: ubinize-image.sh: fix support for static volume

2024-04-24T01:32:22Z

Apart from being misspelled ('dymamic' vs. 'dynamic') and a mismatch of the number of parameters, there is also simply no need to add the 'dynamic' volume type keyword as 6th parameter as that's the default anyway. Fix and simplify the ubinize-image.sh script to work as intended. Fixes: 6c17d71973 ("scripts: ubinize-image.sh: support static volumes, make size optional") Reported-by: Hannu Nyman Signed-off-by: Daniel Golle