Commit Graph

33784 Commits

Author SHA1 Message Date
Luiz Angelo Daros de Luca
953b6d47b4 ruby: update to 3.3.10
This release includes some general fixes and a uri gem security fix:

- CVE-2025-61594: URI Credential Leakage Bypass previous fixes

Changelog: https://github.com/ruby/ruby/releases/tag/v3_3_10
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-12-18 13:48:52 +02:00
Hannu Nyman
224c581a02 irqbalance: Revert "irqbalance: update to 1.9.5"
This reverts commit 21b46d41aa.
Seems to cause trouble at least in ipq806x/R7800, so let's revert
for cautionary reasons.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-12-17 21:31:20 +02:00
Dirk Brenken
72d6156c5d adblock: update 4.4.2-4
* fixed f_uci function
* fixed f_switch function, reported in the turris forum

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-15 22:44:01 +01:00
Hirokazu MORIKAWA
6b197bd62a c-ares: bump to 1.34.6
This is a security release.

Security:
* CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit ebdb9536a9)
2025-12-15 15:46:38 +01:00
Hannu Nyman
21b46d41aa irqbalance: update to 1.9.5
Update irqbalance to version 1.9.5

* drop the original local meson patch, as meson is now properly adopted
  by upstream. But patch meson.build to keep glib2 library statically
  linked in order to avoid a dependency and indirect size increase.

* disable unnecessary functions via meson features settings
  (capng, numa, systemd, thermal, ui)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 65d83de7f8)
2025-12-14 19:53:19 +02:00
George Sapkin
4c51a11a6b sqlite3: bump to 3.51.1
Changelog: https://sqlite.org/releaselog/3_51_1.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 944166fa47)
2025-12-14 19:44:35 +08:00
George Sapkin
64dc71e717 sqlite3: set correct SPDX license identifiers
Replace boilerplate license header with a SPDX license identifier.

Set correct package license to blessing.

Fixes: 9236e4f ("sqlite3: import 3.7.12.1 (2012-05-22) from packages")
Link: https://spdx.org/licenses/blessing.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 7ff8ef148f)
2025-12-14 19:44:35 +08:00
Vladimir Ulrich
1cf346436e zoneinfo: updated to 2025c release
Updated package version and file hashes.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 19c662ac71)
[solved the https change conflict]
2025-12-13 10:43:04 +02:00
Eric Fahlgren
74f7312c69 owut: update to 2025.12.01
Bug fixes:
    efahl/owut@4482dd097f owut: handle changes in a package's version number format

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 76953dba6b)
2025-12-13 08:48:41 +01:00
Goetz Goerisch
eb16faa946 unbound: update to 1.24.2
Fixes: Possible Domain Hijacking via promiscuous NS Records (CVE-2025-11411)
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2
Upstream commit f6269baa605d31859f28770e01a24e3677e5f82c
f6269baa60

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
(cherry picked from commit 0ca33e71e9)
Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
2025-12-11 06:02:10 +01:00
Stan Grishin
275052d5fa update to 1.2.0-r6
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-09 02:02:44 +00:00
Josef Schlehofer
07cedfe325 python-ruamel-yaml: update to version 0.18.16
Release notes can be found here:
https://yaml.dev/doc/ruamel-yaml/

Wheel is compiled as ruamel_yaml (underscore), but on pypi it is ruamel.yaml (dot),
it failed on buildbot, so add slight tweak.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 974e8404c6)
2025-12-06 14:15:33 +01:00
Alexandru Ardelean
2ab7c24e28 python-automat: bump to version 25.4.16
Patches can be dropped.
They don't seem to be needed anymore.
The 'visualize' parts seem to be optional.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 974dc9753c)
2025-12-04 22:07:35 +01:00
Josef Schlehofer
ca47b6ce11 python-unidecode: drop unmaintained package
It looks like based on opened PRs [1],
there is no official support for Python 3.12+.

Unfortunately, this project is still using setup.py,
which is deprecated and no longer supported.
These days project metadata are stored in pyproject.toml
according to PEP 621.

Also, this project does not follow PEP625 as their
wheel name is in uppercase and it should be in lowercase.

[1] https://github.com/avian2/unidecode/pulls
[2] https://peps.python.org/pep-0621/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 09951a9cfd)
2025-12-04 22:04:58 +01:00
Josef Schlehofer
8ab520eef7 python-yaml: update to version 6.0.3
Release notes:
https://github.com/yaml/pyyaml/releases/tag/6.0.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 63aa7856bf)
2025-12-03 20:32:58 +01:00
Josef Schlehofer
cac957166a python-flask-login: update to version 0.6.3
Release notes:
https://github.com/maxcountryman/flask-login/releases/tag/0.6.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0655f4ed3b)
2025-12-03 20:21:10 +01:00
Josef Schlehofer
c4b3cfae10 python-flask-seasurf: update to 2.0.0
Changes can be found here:
https://github.com/maxcountryman/flask-seasurf/tree/2.0.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f02c368344)
2025-12-03 20:21:05 +01:00
Josef Schlehofer
14f766efff python-flask-socketio: update to version 5.5.1
Release notes:
https://github.com/miguelgrinberg/Flask-SocketIO/releases/tag/v5.5.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ff9c11a9d7)
2025-12-03 20:20:58 +01:00
Josef Schlehofer
a9891c2877 python-flask-session: update to version 0.8.0
Release notes:
https://flask-session.readthedocs.io/en/latest/changes.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 03303c362d)
2025-12-03 20:20:47 +01:00
Josef Schlehofer
75ba28479e python-pysocks: remove outdated and not maintained package
The latest commit in https://github.com/Anorov/PySocks
is from 2019, it looks outdated and not maintained.

It does not follow PEP 625.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 95fe4bf332)
2025-12-03 20:19:33 +01:00
Josef Schlehofer
b03875c738 python-parsley: drop package
This looks like it is not maintained anymore.
The last commit in the repository [1] is from 2017,
and the last tarball uploaded on PyPI is from 2015.

That tarball does not follow PEP625, because the
wheel and tarball begins with uppercase, it should be
in lowercase and as well it is still using setup.py.

Python these days is using pyproject.toml.

[1] https://github.com/washort/parsley

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 598dc276f7)
2025-12-03 20:19:25 +01:00
Josef Schlehofer
8b1ea353d5 python-zope-interface: update to 8.0.1
Release notes:
https://github.com/zopefoundation/zope.interface/blob/8.0.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c4bcff285b)
2025-12-03 10:48:00 +01:00
Josef Schlehofer
cec82e394e python-zope-event: update to version 6.1
Release notes:
https://github.com/zopefoundation/zope.event/blob/6.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9218d6ee4f)
2025-12-03 10:47:46 +01:00
Rui Salvaterra
94fbc8eebd tor: update to 0.4.8.21 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.21/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit ac4f614dfe)
2025-12-03 08:41:35 +01:00
Rui Salvaterra
124a7a7c0c tor: add myself as package maintainer
Also remove Peter Wagner (inactive) and Hauke Mehrtens (asked to be removed, in
private conversation).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a863fe3d7a)
2025-12-03 08:41:34 +01:00
Rui Salvaterra
b2c88cd6c2 tor: update to 0.4.8.20 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.20/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 87ed4d7d19)
2025-12-03 08:41:33 +01:00
Yanase Yuki
1eb7e0e4a5 webui-aria2: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 9d6d44487f)
2025-12-03 08:41:31 +01:00
Christian Lachner
0f1e74bb4c haproxy: update to v3.0.12
- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.0.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2025-12-03 07:25:09 +02:00
Josef Schlehofer
07ed6152fe django: update to version 5.1.14
Includes many CVEs fixes e.g.
- CVE-2025-64458
- CVE-2025-64459
- CVE-2025-59681
- CVE-2025-59682
and others while bumping this from version 5.1.7

Release notes:
https://docs.djangoproject.com/en/5.2/releases/5.1.14/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-02 15:53:26 +02:00
Daniel Golle
960dfa2df8 exim: update to version 4.99
See https://code.exim.org/exim/exim/releases/tag/exim-4.99

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit aed8ca7bd9)
2025-12-01 22:40:02 +00:00
Konstantin Demin
80c90e9049 exim: adjust with glibc and libcrypt-compat
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit 14aed6a41b)
2025-12-01 22:40:02 +00:00
Noah Meyerhans
2dcc84370c kea: bump to 2.6.4
Create kea state directories with mode 0750 per restrictions added in 2.6.3

Refresh patches

Fixes the following CVEs:

* CVE-2025-32803: Change the umask to no group write and no other access
  at the entry of Kea server/agent binaries
* CVE-2025-32801: kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and kea-ctrl-agent will
  now only load hook libraries from the default installation directory

Full upstream changelogs are available at:

https://downloads.isc.org/isc/kea/2.6.1/Kea-2.6.1-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.2/Kea-2.6.2-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt
https://downloads.isc.org/isc/kea/2.6.4/Kea-2.6.4-ReleaseNotes.txt

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2025-12-01 15:46:05 -05:00
Rosen Penev
0f24c4daf8 httping: fix compilation with full NLS
-lintl is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 824b2c09a0)
2025-11-29 17:19:59 +01:00
Eric Fahlgren
ea7cdeb0b6 owut: update to 2025.11.16
Enhancements:
    efahl/owut@af42b8afe3 owut: minor improvement on logging API
    efahl/owut@223d6e64b7 owut: add 'clean slate' option to reset to default packages
    efahl/owut@3a35acb7a0 owut: typos and wording fixes
    efahl/owut@eba5101ba7 owut: report counts of failed package builds
    efahl/owut@365eed1f26 owut: use library glob

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
(cherry picked from commit 1545e6510f)
2025-11-18 13:47:24 +08:00
Dirk Brenken
e61d672e76 travelmate: update 2.2.1-6
- rework the iw device detection in the scan function
- remove any limits from the radio selection
- control the reverse radio processing order with a separate option 'trm_revradio'
- tweak a few (debug) log statements
- LuCI updates (separate commit)
- readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1a1c0d07a9)
2025-11-14 22:01:39 +01:00
Hannu Nyman
89c5d7ac77 nano: update to version 8.7
Update to version 8.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d543522dbe)
2025-11-13 18:02:43 +02:00
Wesley Gimenes
07ffd2963d netbird: update to 0.59.12
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.12

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 5dccbddf10)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
c124a7b3e6 netbird: update to 0.58.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.58.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 48b26e4463)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
6da91701c3 netbird: update to 0.57.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.57.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 60ee485816)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
ec5eaa46e9 netbird: update to 0.55.1
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.55.1

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 0bb7df85b855e35c8388122afc962054117d1c70)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
391931477d netbird: update to 0.53.0 with config fix
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.53.0

Update init file to include `NB_CONFIG="/etc/netbird/config.json"`
variable, ensuring configuration compatibility as before (fixes issue
introduced by profiles feature in 0.52.2). Existing configurations remain
compatible.

Note: license for some components (`management`, `relay`, `signal`) changed
to **AGPLv3**. These components aren't packaged for OpenWrt, so there's no
immediate effect, but record the change for future reference.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 7c3e0c1e5b804989b8e4d4310fec240cd43c9776)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
7f9af2c24f netbird: update to 0.52.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.52.2

`netbird` now supports profiles [1]. The configuration file has been
moved from `/etc/netbird/config.json` to `/var/lib/netbird/`. The
migration is handled by `netbird` itself.

However, in OpenWrt, the `/var` directory is a symbolic link to
`/tmp`, which is a temporary directory. This can result in
configuration loss after rebooting or flashing a new image. This
issue will be fixed in the next release, 0.53.0.
**I reported this behavior upstream [2].**

[1]: https://docs.netbird.io/how-to/profiles
[2]: https://github.com/netbirdio/netbird/issues/4322

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit f06a83c461810296615433a4ad31743d68c162a1)
2025-11-11 18:31:27 +02:00
Wesley Gimenes
8abcf5b207 netbird: update to 0.51.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.51.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit eb3165b80c)
2025-11-11 18:31:27 +02:00
John Audia
17114bb326 tree: bump to 2.2.1
Changelog: https://github.com/Old-Man-Programmer/tree/blob/master/CHANGES

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit b939b3e793)
2025-11-09 12:16:57 +02:00
Hannu Nyman
b087edcd72 nano: set nano as default EDITOR for nano-plus/full
Set nano as the default EDITOR via /etc/profile.d for those apps
that respect the variable. Only for nano-plus and nano-full variants.

Suggested-by: Anthony Sepa <protectivedad@gmail.com>
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d4f6c9c322)
2025-11-09 12:15:32 +02:00
Russell Senior
48f1c95d9f patch: update to v2.8
Delete patches already upstream.

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry picked from commit f17c283cda)
2025-11-09 12:09:11 +02:00
George Sapkin
1f50c3f9a6 check-autorelease-deprecation: drop workflow
Drop the workflow since the setting has been deprecated over three years
ago.

Link: https://github.com/openwrt/packages/pull/27799#issuecomment-3506689211
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f08c7993bd)
2025-11-08 20:09:35 +02:00
Ray Wang
6e96733db5 hev-socks5-server: update to 2.11.0
Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.11.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit ea11a81f6b)
2025-11-08 11:35:52 +02:00
Ray Wang
eac8996956 hev-socks5-tproxy: update to 2.10.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.10.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit a3acb2f4c3)
2025-11-08 11:35:34 +02:00
Ray Wang
84f89d13d8 hev-socks5-tunnel: update to 2.14.0
Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.14.0

Signed-off-by: Ray Wang <git@hev.cc>
(cherry picked from commit 4f84f78b4d)
2025-11-08 11:35:17 +02:00