Commit Graph

35521 Commits

Author SHA1 Message Date
Alexandru Ardelean 01bbb91faa python-incremental: bump to 24.11.0
Changelog since 24.7.2:
- Switch build system from wheel to hatchling
- Switch runtime dependency from setuptools/pkg-resources to packaging
- Add CLI script (pipx run incremental)
- Add Python 3.13 and 3.14 support; drop Python 3.8 support
- Drop Click dependency from CLI

Update HOST_BUILD_DEPENDS to use python-hatchling/host instead of
python-wheel/host, and replace +python3-pkg-resources dependency with
+python3-packaging in DEPENDS.

Add test.sh.

Full changelog:
https://github.com/twisted/incremental/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 6fc55f8b74)
2026-03-29 18:54:38 +03:00
Alexandru Ardelean ea62ec3366 pillow: bump to 12.1.1
Pillow 12.x introduces pybind11-based C extension bindings and a
custom build backend (wrapping setuptools.build_meta). This requires:
- Replacing python-setuptools-scm with python-setuptools as build dep
- Adding python-pybind11 as a new build dependency (host)
- Updating build config settings from --build-option flags to the new
  key=value format (e.g. zlib=enable, imagequant=disable)
- Removing the separate webpmux flag (merged into webp feature)

Full release notes:
https://pillow.readthedocs.io/en/stable/releasenotes/index.html

Remove 001-remove-setuptools-version-limit.patch
That's an old relic since when setuptools was packaged inside Python3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit df78cf6b01)
2026-03-29 18:34:36 +03:00
Alexandru Ardelean 0c1d6b9d7c python-pybind11: add new package (version 2.13.6)
pybind11 is a header-only library that exposes C++ types in Python,
used as a build-time dependency by packages like Pillow 12.x.

Uses setuptools as its build backend.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 432fa809dd)
2026-03-29 18:34:36 +03:00
Jean Thomas 1b8dcc6ea2 python-frozenlist: bump to version 1.8
And disable custom build-backend in order to use setuptools.

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
(cherry picked from commit ef77e07976)
2026-03-29 17:58:29 +03:00
Jean Thomas a4a35d2599 python-expandvars: add new package
Necessary to build python-frozenlist

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
(cherry picked from commit 3213df23b1)
2026-03-29 17:58:29 +03:00
Josef Schlehofer fc7091ebae treewide: remove Home Assistant dependencies
I previously attempted to package Home Assistant for OpenWrt.
 However, given the announcement that Home Assistant will
primarily be supported via containers (e.g., Docker) or HA OS [1],
these specific Python package dependencies [2] are no longer needed.

I no longer maintain these packages, I don't use them, and there
 are no other internal dependencies on them. Removing them will
result in slightly faster build times since they no longer require compilation.

[1] https://www.home-assistant.io/blog/2025/05/22/deprecating-core-and-supervised-installation-methods-and-32-bit-systems/
[2] https://github.com/home-assistant/core/blob/dev/pyproject.toml

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6b370bd511)
2026-03-29 16:53:10 +03:00
Stan Grishin bb980b18fc adblock-fast: update to 1.2.2-r16
* add: ucode-mod-uloop dependency
* add: parallel downloads using uloop
* fix: explicit allow for domains from allow-lists
* fix: get environment information for getInitStatus RPCD call
* add: update tests

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 65ed2877ef)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-29 15:21:01 +03:00
Alexandru Ardelean 63b6438260 python-pyopenssl: fix build with wheel naming
This got broken at some point with some of the package updates.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-29 15:11:44 +03:00
Dirk Brenken 0525984e96 adblock: update 4.5.3-4
* harden adblock backend: removed  all needless eval calls
* more fixes & optimizations
* LuCI: Allow dns instance selection for smartdns (not only for dnsmasq)
* LuCI: more fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 00e9d73468)
2026-03-27 10:22:12 +01:00
Stan Grishin fd2f7c07fa adblock-fast: update to 1.2.2-r14
* fix: ensure output in CLI in status and quick start commands
* fix: ensure relevant directories exist when using a (gzip) cache file on
  first boot
* add: update functional tests

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f4e6ada26d)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-27 01:41:55 -07:00
dwardor 62613f30ed fail2ban: add host build deps to fix #28520
Adds the misssing build dependencies to remove the
"Cannot import 'setuptools.build_meta'" build error with 25.12.0-rc1 to 25.12.0-rc5

Signed-off-by: dwardor <benjamin.reveille@gmail.com>
(cherry picked from commit 6b3c95cbd8)
2026-03-27 06:42:55 +02:00
Chester A. Unal 268d92d3d4 bsbf-rate-limiting: add
Update bsbf-resources to the GIT HEAD of 2026-03-24. Add bsbf-rate-limiting
and make bsbf-bonding depend on bsbf-rate-limiting.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit 80d95db425)
2026-03-25 12:18:26 +02:00
Chester A. Unal 7828d7c01e plp-mtu-discovery: update to GIT HEAD of 2026-03-16
Update plp-mtu-discovery to the GIT HEAD of 2026-03-16.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit 9cf3d7b5a1)
2026-03-25 12:18:26 +02:00
Dirk Brenken 3168c885b0 adblock: update 4.5.3-3
* renamed f_query to f_search (Query => Search)
* add better input validation to the  f_search function,
   to compensate for the very limited Wildcard ACL mechanisms in LuCI, see
   https://github.com/openwrt/luci/issues/8435 for reference
* LuCI: add a proper poll mechanism to mitigate Reporting timeouts
  on "Search" and "Refresh", even with big  pcap files
* LuCI: Refine some ACLs
* LuCI: more fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2947457420)
2026-03-22 19:59:37 +01:00
Rosen Penev 6c40de0ff0 dante: fix usaage with musl
Need to disable this function as it's unusable on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5fc21a109b)
2026-03-22 19:15:58 +02:00
Dirk Brenken c27b1d95cf banip: update 1.8.1-3
* add better input validation to the f_content and f_search functions,
   to compensate for the very limited Wildcard ACL mechanisms in LuCI, see
   https://github.com/openwrt/luci/issues/8435 for reference
* LuCI: add a proper poll mechanism to mitigate Reporting timeouts
  on "Search" and "Refresh", even with big  Sets
* LuCI: Refine some ACLs
* LuCI: more fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ef91c84fe6)
2026-03-22 16:18:03 +01:00
Olivier Poitrey 6fe86fc9d3 nextdns: update to version 1.47.1
Update nextdns package to upstream version 1.47.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
(cherry picked from commit 7f3badc94b)
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2026-03-22 08:31:37 +02:00
Christian Lachner 8d9f2874df haproxy: update to v3.2.15
- Fixes multiple security critical bugs with H3 handling. CVE submission is
  pending.
- Updated haproxy PKG_VERSION and PKG_HASH
- Removed get-latest-patches.sh as it is not used anymore.
- See changes: http://git.haproxy.org/?p=haproxy-3.2.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2026-03-21 22:27:17 +02:00
Niklas Thorild 3ced52b736 telegraf: add disk plugin to small variant
Added inputs.disk to TELEGRAF_SMALL_PLUGINS

Signed-off-by: Niklas Thorild <niklas@thorild.se>
(cherry picked from commit b0656c7e24)
2026-03-21 19:28:42 +02:00
Stan Grishin edac1ddbe8 adblock-fast: update to 1.2.2-r12
Config:
* update pause_timeout default value to 60
* add config option rpcd_token

Init script:
* add validation for rpcd_token

Ucode script:
* fix: always reload config options on RPCD calls to prevent stale values
* fix: shell_quote curl params
* fix: do not reload is_tty on each call

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 139d73b583)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-20 10:23:27 -07:00
Niklas Thorild f1da100441 telegraf: update to 1.38.1
- Update Telegraf to v1.38.1

Signed-off-by: Niklas Thorild <niklas@thorild.se>
(cherry picked from commit db477b0b38)
2026-03-20 18:17:09 +02:00
George Sapkin d38b91001b sqlite3: bump to 3.52.0
Changes: https://sqlite.org/releaselog/3_52_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 04f5991451)
2026-03-20 04:34:52 +02:00
George Sapkin ee3fb6f5a2 adguardhome: validate config
Validate UCI config.

Switch instance name to adguardhome.

Link: https://github.com/openwrt/packages/pull/28781
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit e192c5983e)
2026-03-20 01:04:20 +02:00
Stan Grishin cc5f6c6cdc pbr: update to 1.2.2-r12
* fix: detect/support point-to-point interfaces in dynamic routing mode
* fix: avoid IPv4/IPv6 address collisions on Tor policies
* fix: do not set triggers on boot when service is disabled in config
* fix: more robust forward stop/enable

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ba216150c0)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-19 11:43:02 -07:00
Sander van Deijck 442a869c30 openvpn: update to 2.6.19
Update the openvpn package to the latest version in
the 2.6.x branch while development of the 2.7.x branch
become stable enough to merge.

Signed-off-by: Sander van Deijck <sander@vandeijck.com>
(cherry picked from commit e0ab7d0dfa)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
2026-03-19 18:55:53 +02:00
Sander van Deijck 12e5db04e4 ovpn-dco: update to version 0.2.20251017
Update the ovpn-dco package to the latest version

Signed-off-by: Sander van Deijck <sander@vandeijck.com>
(cherry picked from commit a5f69cdc41)
Signed-off-by: Sander van Deijck <sander@vandeijck.com>
2026-03-19 18:55:53 +02:00
Daniel F. Dickinson a79db5d81c mailsend: fix ssl variant to use opensssl
As described in #28261 Not compiled with OpenSSL, the SSL variant of
the mailsend package is not actually being compiled with OpenSSL.

This is due to an upstream configure check borrowed from an ancient
version of BIND, which no longer works.

As a workaround we add `-DHAVE_OPENSSL=1` to the `TARGET_CFLAGS` when
building the SSL variant.

This results in a complaint about COPTS not being honoured correctly,
but results in `mailsend` compiled with OpenSSL (i.e. works).

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 444b62cbcc)
2026-03-19 13:55:47 +02:00
Dirk Brenken 83b7ce07d5 adblock: release 4.5.3-1
* refine the domain validator regarding prefix handling, esp.
  relevant for ABP-syntax
* adapted the adguard feed to make use of the new prefix handling
* LuCI: various fixes & optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 27c44bf735)
2026-03-15 19:18:51 +01:00
Dirk Brenken ecf901a6ba banip: release 1.8.1-1
* the debug mode now captures internal error output in a dedicated log file,
  located by default in the banIP base directory as /tmp/ban_error.log
* replaced the non-functional recursive PID tree walk in f_rmpid with
  a correct iterative implementation
* added several IP validator improvements
* fixed a copy-paste error in f_report
* fixed a uninitialized variable in f_actual
* fixed missing token validation in banip.cgi
* various other minor improvement & fixes
* removed abandoned nixspam feed
* LuCI: various fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e724274907)
2026-03-15 18:19:08 +01:00
Ivan Pavlov f3717b606c curl: update to 8.19.0
changelog: https://curl.se/ch/8.19.0.html

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 2834b40af6)
2026-03-15 12:25:34 +02:00
Aleksey Vasilenko a57d4eb786 krant: drop maintainership
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit dfd0245f19)
2026-03-15 12:25:21 +02:00
Hannu Nyman 6bf6e7e88d nano: improve uci coloring of unterminated strings
Improve the uci file coloring with nano-full.
Show unterminated strings more clearly (lightmagenta vs. white)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a268b500d9)
2026-03-14 09:53:12 +02:00
Maxim Storchak c37cf848d0 linenoise: update to 2026-01-08 (dc83cc3)
Add UTF-8 and grapheme cluster support

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 8f0c236a92)
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2026-03-14 05:32:36 +02:00
Chester A. Unal 8bed37abc3 bsbf-openwrt-resources: add BSBF URL to packages
Add the BondingShouldBeFree URL to the bsbf-openwrt-resources packages.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit 6b23febb15)
2026-03-14 01:17:26 +02:00
Chester A. Unal bd9defb9da bsbf-resources: add BSBF URL to packages
Add the BondingShouldBeFree URL to the bsbf-resources packages.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit e3c7df1383)
2026-03-14 01:17:26 +02:00
Chester A. Unal 1d41eae694 bsbf-plpmtu: add
Update bsbf-resources to the GIT HEAD of 2026-03-12. Add bsbf-plpmtu and
make bsbf-bonding depend on bsbf-plpmtu.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit 709b2c629c)
2026-03-14 01:17:26 +02:00
Chester A. Unal d77cfe56e3 plp-mtu-discovery: add
Perform Path MTU Discovery without relying on ICMP errors, which are often
not delivered.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
(cherry picked from commit bc1e10d8cc)
2026-03-14 01:17:26 +02:00
Ivan Belokobylskiy 43d631e2b5 python-evdev: bump version to 1.9.3
Fix several memory leaks in input.c

Signed-off-by: Ivan Belokobylskiy <belokobylskij@gmail.com>
2026-03-13 21:30:47 +02:00
Ivan Belokobylskiy 5269b64870 python-evdev: add mandatory uinput.h header to builder
Starting from 1.9.2 python-evdev requires
include/uapi/linux/uinput.h headers for proper building.
Otherwise, it compiles but cannot be imported causing
KeyError: 'UI_FF'

Add uinput.h to LINUX_EVDEV_HEADERS

Signed-off-by: Ivan Belokobylskiy <belokobylskij@gmail.com>
2026-03-13 21:30:47 +02:00
Georgi Valkov 16056efe4b ustreamer: update to 6.52
fix a build error when compiled with WITH_SETPROCTITLE=1
undefined reference to setproctitle_init

[1] https://github.com/openwrt/packages/pull/28472#issuecomment-3863583824

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
(cherry picked from commit c913af4cfa)
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2026-03-13 09:34:05 +02:00
Georgi Valkov a06b2ac851 ustreamer: add package 6.51
With mjpg-streamer pending removal [1], it would be nice if we add
a compatible replacement which is under active development.

ustreamer offers a better performance, especially when the
camera supports MJPEG encoding in hardware.

The package already includes OpenWRT support files ./pkg/openwrt
but they needed heavy editing, so it is more efficient to copy
the scripts and configuration, instead of using patches.

Notable changes:
While the init.d script can run in the background when no camera is
connected, it is more efficient to indicate no active instances.
A hotplug script is introduced to start and stop the service when
cameras are added or removed.

If the configured format or encoding are unsupported, a compatible
alternative is automatically selected, so I changed the default
configuration to use MJPEG encoding in hardware for better performance.

HACKS:
MAKE_FLAGS += WITH_SETPROCTITLE=0
is added to workaround the following linker error:
undefined reference to setproctitle_init

This symbol is defined in libbsd, however adding the build dependency
does not resolve the error, because -lbsd is added conditionally, only
when uname -s contains linux. This is unreliable and fails when
cross-compiling on a macOS host. An upstream fix is needed.

An alternative is to use
PKG_UNPACK=$(HOST_TAR) -C $(PKG_BUILD_DIR) --strip=2 -xf $(DL_DIR)/$(PKG_SOURCE)
however this modifies the directory structure, so patches would need
path editing to maintain upstream compatibility.

TODO:
luci-app-mjpg-streamer which is also pending removal [2] is able to
open the HTTP stream from ustreamer. It would be nice to create
luci-app-ustreamer based on that.

[1] https://github.com/openwrt/packages/pull/28344
[2] https://github.com/openwrt/luci/pull/8221

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
(cherry picked from commit ab7fbfd12a)
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2026-03-13 09:34:05 +02:00
George Sapkin 77792e9b17 adguardhome: add config reload trigger
Restart the service when config is changed from the app.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit cc7814f191)
2026-03-13 04:35:42 +02:00
George Sapkin a80994f9c6 adguardhome: bump to 0.107.73
Changes: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.73
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit c59d9b2476)
2026-03-13 04:35:42 +02:00
Afiq Nazrie 351979cc99 adguardhome: add jail_mount_rw config option
Add jail_mount_rw config option to add directories with read-write
access.

Fixes: https://forum.openwrt.org/t/247253
Signed-off-by: Afiq Nazrie <afnazrie@gmail.com>
(cherry picked from commit 704319e27b)
Signed-off-by: George Sapkin <george@sapk.in>
2026-03-13 04:35:42 +02:00
George Sapkin 89125be70c adguardhome: add GC and thread control variables
Add Go GC and threading control variables - GOGC, GOMEMLIMIT, and
GOMAXPROCS - to allow more granular control of the memory management on
lower memory devices.

Fixes: https://github.com/openwrt/packages/issues/28676
Link: https://go.dev/doc/gc-guide#GOGC
Link: https://pkg.go.dev/runtime#pkg-overview
Link: https://go.dev/blog/container-aware-gomaxprocs
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit b9148c1494)
2026-03-13 04:35:42 +02:00
Dirk Brenken 0f60e89e99 adblock: update 4.5.2‑4
* optimized the awk for the Top10 statistics in the DNS Report,
  removed the faulty caching (reported in the forum)
* minor improvement in the f_switch function
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2657120d5f)
2026-03-12 20:40:35 +01:00
Niklas Thorild 1ab7c4e491 telegraf: update to 1.38.0
- Update Telegraf to v1.38.0

Signed-off-by: Niklas Thorild <niklas@thorild.se>
(cherry picked from commit fb71da41da)
2026-03-12 17:20:47 +02:00
George Sapkin ab3b874a7d golang: bump 1.26 to 1.26.1
Fixes: CVE-2026-25679
Fixes: CVE-2026-27137
Fixes: CVE-2026-27138
Fixes: CVE-2026-27139
Fixes: CVE-2026-27142
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.1+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit ddb2995ef0)
2026-03-11 20:35:42 +02:00
George Sapkin 39f1b06739 golang: remove broken mirror
Remove dl.google.com mirror because it's not responding.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit b284c4de94)
2026-03-11 20:35:42 +02:00
George Sapkin c06659097c syncthing: bump to 2.0.15
Changes: https://github.com/syncthing/syncthing/releases/tag/v2.0.15
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit c5dd05c5bd)
2026-03-11 20:34:52 +02:00