staging/stintel/tools, branch master

firmware-utils: update to Git HEAD (2026-05-04)

2026-05-05T12:10:39Z

d21804addba6 add XikeStor SKS7300 image generation utility 7806c09361d2 mkzynfw: add board definitions for Zyxel XMG1915 switches 1a4153f4c701 mkzynfw: add board definitions for XGS1930 series Signed-off-by: Jonas Jelonek Link: https://github.com/openwrt/openwrt/pull/23221 Signed-off-by: Robert Marko

mold: Update to 2.41.0

2026-04-28T07:35:53Z

Update mold to 2.41.0 Release notes: https://github.com/rui314/mold/releases/tag/v2.41.0 Signed-off-by: Carsten Schuette Link: https://github.com/openwrt/openwrt/pull/23129 Signed-off-by: Robert Marko

tools: util-linux: update to 2.42

2026-04-22T23:05:05Z

Release notes: https://www.kernel.org/pub/linux/utils/util-linux/v2.42/v2.42-ReleaseNotes Remove upstreamed: 010-meson-curses.patch New: 0001-pidutils-gracefully-handle-systems-without-sys-vfs.h.patch Signed-off-by: Thomas Weißschuh Link: https://github.com/openwrt/openwrt/pull/22878 Signed-off-by: Hauke Mehrtens

tools/ccache: update to 4.13.3

2026-04-20T06:51:04Z

Release Notes: - https://ccache.dev/releasenotes.html#_ccache_4_12_2 - https://ccache.dev/releasenotes.html#_ccache_4_13_3 - https://ccache.dev/releasenotes.html#_ccache_4_13 - https://ccache.dev/releasenotes.html#_ccache_4_13_1 - https://ccache.dev/releasenotes.html#_ccache_4_13_2 - https://ccache.dev/releasenotes.html#_ccache_4_13_3 Link: https://github.com/openwrt/openwrt/pull/23005 Signed-off-by: Nick Hainke

tools/expat: update to 2.7.5

2026-04-20T06:50:19Z

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes Fixes: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 Link: https://github.com/openwrt/openwrt/pull/23007 Signed-off-by: Nick Hainke

treewide: use HTTPS for PKG_SOURCE_URL where possible

2026-04-20T03:58:37Z

Switch http:// (and redundant ftp://) PKG_SOURCE_URL entries to https:// across tools/ and package/. PKG_HASH alone does not protect against an attacker tampering with insecure downloads when a maintainer regenerates the hash via `make ... FIXUP=1`: HTTPS authenticates the upstream so the captured hash reflects real upstream content. In-place http -> https (HTTPS reachability verified per host): - tools/elftosb, tools/lzop, tools/liblzo, tools/mpfr, tools/dosfstools, tools/libressl, tools/xz - package/libs/mpfr, package/libs/libmnl, package/libs/libnfnetlink Replaced with @OPENWRT (HTTPS-only mirror) where the upstream HTTPS host is dead or has a broken certificate: - package/libs/popt (ftp.rpm.org cert mismatch) - package/firmware/ixp4xx-microcode (was http://downloads.openwrt.org) - package/boot/imx-bootlets (trabant.uid0.hu cert mismatch) - package/boot/kobs-ng (freescale.com URL is dead, redirects to nxp.com root) Dropped redundant ftp://ftp.denx.de fallback (https://ftp.denx.de is already listed): - package/boot/uboot-tools, tools/mkimage Signed-off-by: Paul Spooren

tools/llvm-bpf: update to 22.1.3

2026-04-18T07:19:29Z

Release Notes: - https://discourse.llvm.org/t/llvm-21-1-7-released - https://discourse.llvm.org/t/llvm-21-1-8-released - https://discourse.llvm.org/t/llvm-22-1-0-released - https://discourse.llvm.org/t/llvm-22-1-1-released - https://discourse.llvm.org/t/llvm-22-1-2-released - https://discourse.llvm.org/t/llvm-22-1-3-released Link: https://github.com/openwrt/openwrt/pull/22972 Signed-off-by: Nick Hainke

tools/mtd-utils: update to v2.3.1

2026-04-16T18:45:40Z

Fixes: - ubifs-utils: link libmissing.a in case execinfo.h isn't present - ubifs-utils: common: fix memory leak in devtable.c - Broken check for GCC compiler versions - ubifs-utils: missing header file includes - ubifs-utils: tests: missing files in release tarball - mtd-tests: flash_speed: really skip destructive tests - mtd-tests: flash_speed: wrong error message in read_eraseblock() - serve_image: fix _POSIX_C_SOURCE define - ubiattach: fix wording in usage example - fsck.ubifs: don't use pointers that reference out-of-scope variables - fsck.ubifs: fix platform dependant `ino_t` and `loff_t` formatting - docfdisk.c: fix potential arithmetic overflows in partition size - jittertest: reject overlong file names Changes: - ubirsvol: resize using all available free space if size is specified as 0 Upstreamed patches: - 001-ubifs-utils-link-libmissing.a-in-case-execinfo.h-isn.patch[1] - 002-ubifs-utils-common-fix-memory-leak-in-devtable.c.patch[2] - 004-Improve-check-for-GCC-compiler-version.patch[3] - 005-ubifs-utils-ubifs.h-Include-fcntl.h.patch[4] - 006-ubifs-utils-journal-Include-sys-stat.h.patch[5] - 007-ubifs-utils-extract_files-Include-linux-limits.h.patch[6] [1] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=8a83b306db64d6f60186d4396b0b770163b85b6e [2] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=2669111e3c60b8e146c174db5d2e7e9991f3dd87 [3] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=ac0ab65ebcd7b11739986b81343457469fbb43b0 [4] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=12bc9ad824bd8f18a5ec9c7154ad2374cf8c7ae3 [5] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=173f9714c8da1d685bfa951d43b9310d16bbab3c [6] https://git.infraroot.at/mtd-utils.git/commit/?h=v2.3.1&id=77981a2888c711268b0e7f32af6af159c2288e23 Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/22946 Signed-off-by: Hauke Mehrtens

firmware-utils: update to Git HEAD (2026-04-09)

2026-04-12T16:23:08Z

7350dc7766f6 tplink-safeloader: add support for Festa F61 f3b02a2f2e39 mkzynfw: add board definitions for Zyxel XS1930 switches Signed-off-by: Jonas Jelonek Link: https://github.com/openwrt/openwrt/pull/22827 Signed-off-by: Hauke Mehrtens

tools/mkimage: use full defconfig name

2026-04-12T08:28:25Z

The defconfig file used to build tools is "tools-only_defconfig". Though u-boot scripts can still automatically handle the old style name for compatibility reason, it's better to use the correct name. Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/22844 Signed-off-by: Nick Hainke