Commit Graph
36951 Commits
Author SHA1 Message Date
Daniel F. Dickinson 33fa804bdd zabbix: do not error in postinst when no ubusd
Now that post install is running properly, when CI executes the
tests the zabbix-extra-* packages that have a posinst exit the
post install with an error if ubusd is not running.

Drop the error code from killall with no usbd running to fix this.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-16 08:48:33 +02:00
Alexandru Ardelean f51b9af6f0 python-websocket-client: drop package
There are currently no more users for this.
Drop it.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-16 08:46:54 +02:00
Alexandru Ardelean 7db4f7bb69 python-paramiko: drop package
There are no longer packages that need this.
This offers advanced SSH functions in Python.
But for OpenWrt's context it may work with just using ssh commands
with the subprocess package.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-16 08:46:54 +02:00
Alexandru Ardelean b47d9caf8e python-docker: drop package
This has migrated in favor of the Go version of docker tools.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-16 08:46:54 +02:00
Alexandru Ardelean 30b34ef130 python-dockerpty: drop package
It's ~12 yrs old.
Probably not even used anymore.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-16 08:46:54 +02:00
Foster Snowhill 96c6fdb26a mdns-repeater: pass through CFLAGS/LDFLAGS and package version
Before the change, the feed Makefile would not rely on the predefined
logic of building Makefile-based packages, rather it defined its own
`Build/Compile` step that explicitly called `make`. This didn't play
along well with the upstream Makefile, which doesn't respect the CFLAGS
that come from the environment.

The effect of that was that, for example, `CONFIG_PKG_ASLR_PIE_ALL=y`
was not respected: a non-PIE binary was generated regardless. Other
compiler flags were ignored too in the same manner.

Also it would try to determine the mdns-repeater version by calling to
git, which wouldn't work, since the build system downloaded a pre-made
source tarball without a bundled `.git` directory. The result is an
empty version string when calling `mdns-repeater -h`.

To address all of the above, switch to the built-in logic for
Makefile-type projects. Append to MAKE_FLAGS to completely override
upstream CFLAGS/LDFLAGS and pass through the package version. Set a
dummy HGVERSION variable value to prevent the upstream Makefile from
calling `git` unnecessarily.

Signed-off-by: Foster Snowhill <gh@pen.gy>
2026-07-16 08:46:19 +02:00
Christian Korber ebb7c18a5d modemmanager: bump PKG_RELEASE
Bump PKG_RELEASE number. This is due because of earlier changes.

Signed-off-by: Christian Korber <ckorber@tdt.de>
2026-07-15 10:16:54 +02:00
Christian Korber 753e6d8c54 modemmanager: add configurable plugins
This adds the feature to choose which plugins to include or not.
Additionally, the needed shared plugins are added automatically.

Signed-off-by: Christian Korber <ckorber@tdt.de>
2026-07-15 10:16:54 +02:00
Christian Korber b71338b5a7 modemmanager: make building builtin options optional
This commit enables to choose whether to compile the plugins into the
binary or not. If not included, it moves the plugins to
`/usr/lib/ModemManager/`.

Signed-off-by: Christian Korber <ckorber@tdt.de>
2026-07-15 10:16:54 +02:00
Daniel F. Dickinson 4638c42055 nut: split interface_triggers function
Using add_interface_triggers and check_interface_up is a
better separation of concerns and the code has little in
common (no duplication of code concerns).

While we are at it make both nut-monitor and nut-server failure of
add_interface_triggers non-fatal with a logged error message.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson e3f051cefc nut: add more common validators and add more validation
Factor out some common validation code into some validator functions,
and add more UCI config validation.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson 0ebfb5b3e0 nut: simplify/improve consistency for RUNAS and STATEPATH
We claimed we only supported a single upsd section named 'upsd' and a
single uspmon section named 'upsmon', but when determining RUNAS
and STATEPATH we were using overly-complex functions as we were
attempting to support multiple upsd and upsmon sections.

Simplify the logic by adhering to our stated support.

While were are at it we make RUNAS handling more consistent between
nut-server (upsd) and nut-monitor (upsmon).

We no longer try to limp along if RUNAS is not set by find_runas; to do
this properly would require over-complicated logic when setting file
and directory permissions and ownership.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson bb320e47d7 nut: minor fixes found via automated code review
* Fixes a missing word in a comment
* Fixes inconsistent indentation in sample configurations
* Drops redundant default assignment in find_statepath()

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson 35012ec062 nut: bump PKG_RELEASE for fixes
Script executables have changed, therefore bump PKG_RELEASE

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson 0bd44d9b9d nut: do not trigger on interface activity by default
The defaults were triggiering on any activity on the network, which
caused excessive restarts. So default to no interface trigger, with
'all' (or specific interfaces) as an option.

See https://github.com/openwrt/packages/pull/29607#discussion_r3463553192

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson ce009de85f nut: fix hard-coded trigger scripts for interface triggers
The trigger script and instance to reload should depend on which
initscript is calling interface_triggers. It wasn't, so we fix that.

See https://github.com/openwrt/packages/pull/29607#discussion_r3463544231

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson 6498ed4a93 nut: remove driverpath configuration
While driverpath is could in theory be configurable, this was not implemented
in the OpenWrt NUT package, and there is not need for it. Therefore remove the
sample configuration for it, and setting that configuration in the upsd.conf file.

See https://github.com/openwrt/packages/pull/29607#discussion_r3463526037

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson c9cb2cfaa8 nut: fix erroneous validation of STATEPATH
We should fallback to the default if one is not specified. In addition
find_statepath is the wrong place to check for its existence - it should
be created by the initscript if it does not exist.

See https://github.com/openwrt/packages/pull/29607#discussion_r3462976647

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Daniel F. Dickinson 6579a08603 nut: use better usbhid-ups config example
The previous configuration did not make clear the
need for productid and vendorid options.

See https://github.com/openwrt/packages/pull/29607#discussion_r3462906851

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-15 09:34:39 +02:00
Wei-Ting Yang bdab2f1f59 python-asgiref: improve version check in test.sh
Verify that asgiref.__version__ strictly equals the expected version
argument ($2), instead of just checking that it is non-empty.

Also remove single quotes from EOF to enable variable expansion.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-07-15 10:22:17 +03:00
Xuzhen LI 88d19c5ceb gpgme: fix double -sf flag passed to ln
LN is already defined as 'ln -sf' in rules.mk, so passing -sf again
results in 'ln -sf -sf ...', which fails with stricter ln implementations.

Fixes #29243.

Signed-off-by: Xuzhen LI <xuzhen.li@outlook.com>
2026-07-15 08:32:08 +02:00
John Audia 1e2dc0917c zsh: update to 5.9.2
Changelog:
- Only minor changes.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-07-15 08:30:36 +02:00
Roc Lai 8deb2ac9ca frp: bump to 0.70.0
Changes: https://github.com/fatedier/frp/releases/tag/v0.70.0

Signed-off-by: Roc Lai <laipeng668@qq.com>
2026-07-14 21:50:55 +03:00
Dirk Brenken 4f4b404b8e adblock: update 4.5.6-4
- fixed/restored the "google" branch of f_list "safesearch" ,
  reported in the forum

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-07-14 18:38:15 +02:00
Dharmik Parmar a01cb8a3f9 arp-scan: fix maintainer script interpreters
Add missing shell interpreter lines to the arp-scan maintainer scripts.

This lets apk execute the generated install and removal hooks directly.

Use IPKG_INSTROOT in the database postrm cleanup and bump PKG_RELEASE.

Signed-off-by: Dharmik Parmar <dharmikparmar2004@yahoo.com>
2026-07-14 15:51:16 +02:00
Fabrice Fontaine 48e49aca11 utils/hplip: fix CPE ID
hp:linux_imaging_and_printing is a better CPE ID than
hp:linux_imaging_and_printing_project as this CPE ID has the latest CVE
(whereas hp:linux_imaging_and_printing_project only has CVEs up to
2013):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:hp:linux_imaging_and_printing

Fixes: 5afe5c9031 (treewide: assign PKG_CPE_ID)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-07-14 15:48:20 +02:00
Michael Heimpold c0d279e175 php8: update to 8.4.23
This fixes:
    - CVE-2025-14179
    - CVE-2026-6104
    - CVE-2026-6722
    - CVE-2026-6735
    - CVE-2026-7258
    - CVE-2026-7262
    - CVE-2026-7568
    - CVE-2026-12184
    - CVE-2026-14355

Full upstream changelogs:
https://www.php.net/ChangeLog-8.php#8.4.17
https://www.php.net/ChangeLog-8.php#8.4.18
https://www.php.net/ChangeLog-8.php#8.4.19
https://www.php.net/ChangeLog-8.php#8.4.20
https://www.php.net/ChangeLog-8.php#8.4.21
https://www.php.net/ChangeLog-8.php#8.4.22
https://www.php.net/ChangeLog-8.php#8.4.23

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2026-07-13 21:54:20 +02:00
Daniel Golle 627044ab21 fwupd: allow enabling the devlink plugin
The devlink plugin allows updating firmware of network devices
implementing the kernel devlink interface. It is gated on libmnl,
which was hard-disabled so far. Wire the libmnl meson option to a
new FWUPD_PLUGIN_DEVLINK config symbol, enabled by default, and add
the corresponding libmnl runtime dependency to fwupd-libs.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-07-13 15:12:20 +02:00
Alexandru Ardelean 15af025b7f stress-ng: add config menu to select external libraries
Backport upstream e0c4d324a, which lets a LIB_* variable be emptied to skip
that library's check. Drop 001-disable-extra-stressors.patch, which hardcoded
the same choice, and drive it from a Config.in menu instead. Defaults keep the
previously built set of stressors: only crypt, aio, bsd, jpeg, kmod, sctp and
zlib are probed. apparmor, EGL, GBM, GLES2, IPSec_MB and Judy have no OpenWrt
package, so they are never probed. Drop the backport once it is in a release.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-13 14:24:42 +03:00
Alexandru Ardelean 199435708a stress-ng: link libatomic instead of disabling atomics
Drop 002-disable-atomics-mips-and-ppc.patch. It papered over link errors for
64-bit atomics on MIPS and PPC, which happen because stress-ng strips -latomic
whenever $(CC) matches "musl-gcc" -- as our cross toolchains do. Pass
LIB_ATOMIC=-latomic instead; libatomic is already in DEPENDS. Its stress-fractal
hunk was in any case dead since upstream 24c30b7fa narrowed the row counter back
to int32_t, which MIPS32 and PPC32 increment atomically inline.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-13 14:24:42 +03:00
Daniel F. Dickinson 6f30dc2b4a radicale3: bump version to 3.7.6
Bump to latest upstream (3.7.6)

https://github.com/Kozea/Radicale/releases/tag/v3.7.6
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-13 12:24:33 +02:00
Daniel F. Dickinson 370659af19 apache: add version overrides
Many of the binaries in the apache source package do not have a
version output, so we need to add a version override so that CI
can pass.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-13 09:46:55 +02:00
Lukas Voegl 4c6d85bce6 libjcat: remove package
libjcat is now part of fwupd.
https://github.com/fwupd/fwupd/commit/ce55a6b616b7af8937cd97faa84752eb33e26203

Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2026-07-13 08:40:23 +02:00
Lukas Voegl 84bdd709ef fwupd: update to 2.1.6
Release notes: https://github.com/fwupd/fwupd/releases/tag/2.1.6

Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2026-07-13 08:40:23 +02:00
Philip A. Prindeville 5544edf33a python-pexpect: add package
Useful for provisioning devices like modems that present themselves
via a serial device.

Signed-off-by: Philip A. Prindeville <philipp@redfish-solutions.com>
2026-07-12 19:03:48 -06:00
Philip A. Prindeville 592a4ac758 python-ptyprocess: add package
Requirement for python-pexpect.

Signed-off-by: Philip A. Prindeville <philipp@redfish-solutions.com>
2026-07-12 19:03:48 -06:00
Andy Chiang 66febba4e1 golang: bump 1.26 to 1.26.5
Fixes: CVE-2026-39822
Fixes: CVE-2026-42505
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.5+label%3ACherryPickApproved

Signed-off-by: Andy Chiang <AndyChiang_git@outlook.com>
2026-07-12 20:58:26 +02:00
Vladimir Ulrich c7eaa8c93f zoneinfo: updated to 2026c release
Updated package version and file hashes.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
2026-07-11 18:54:23 +02:00
Jianhui Zhao e1ec189d45 lua-eco: add CONFIG_ prefix to PKG_CONFIG_DEPENDS options
Options listed in PKG_CONFIG_DEPENDS must start with
CONFIG_ prefix.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2026-07-11 23:07:44 +08:00
Eric Fahlgren 918fd9285b owut: update to 2026.07.08
Bug fixes:
    efahl/owut@3979710893 owut: handle mid-release errors more gracefully
Enhancements:
    efahl/owut@db17536ec5 treewide: remove stray spaces and tabs
    efahl/owut@a0bb39262d owut: allow removal of non-installed packages

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2026-07-11 23:04:15 +08:00
Dharmik Parmar 527c1f1183 libreswan: fix default subnet matching
Match only explicit default-route subnet tokens when normalizing leftsubnets and rightsubnets.

The previous regex treated dots as wildcards.

Values such as 10.250.0.0/16 and 10.0.0.0/8 were rewritten to 0.0.0.0/0.

Fixes: https://github.com/openwrt/openwrt/issues/23795
Signed-off-by: Dharmik Parmar <dharmikparmar2004@yahoo.com>
2026-07-10 20:59:58 +02:00
nantayo dev e698f817af podman: update to 5.8.4
- fix PKG_SOURCE_URL
Podman repository has been transferred from containers to podman-container-tools
- update package version
changelog see: https://github.com/podman-container-tools/podman/releases/tag/v5.8.4

Signed-off-by: nantayo dev <sora1924@outlook.com>
2026-07-10 20:57:53 +02:00
Daniel F. Dickinson 9ec085718d zabbix: add version check override
Allow CI to pass the version check for packages with executables
with not version output.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-10 20:56:10 +02:00
Daniel F. Dickinson d5eb49a42d zabbix: remove dependency on symbol ZABBIX_ENABLE_ZABBIX
It results a failure to build due to
https://github.com/openwrt/gh-action-sdk/issues/70. This means there will be some
ZABBIX symbols in .config eveen when ZABBIX is not selected, but this is a
necessary tradeoff. See
https://github.com/openwrt/packages/pull/29803#issuecomment-4882201182.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-10 20:56:10 +02:00
Daniel F. Dickinson 13ee37072d zabbix: bump to 7.0.27 and fix Makefile
* Update version to latest upstream LTS version.

* The Makefile was using an overly clever means to be compact that the
  CI webhook, and possibly the CI test container, didn't understand. We
  unroll that logic, and have more usual install and conffiles sections.
  In the process we fix a missing conffile install for zbbix-proxy*
	packages.

* Whitespace fixups

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-07-10 20:56:10 +02:00
Aditya Nugraha c3cc59102c libucontext: bump to 1.5.1 & glibc support
Changelog:
Changes from 1.5 to 1.5.1
-------------------------
* Rename public register definitions on x86 and x86_64 to avoid clashing
  with glibc definitions when built in freestanding mode.
  Patch contributed by Daan De Meyer.

Changes from 1.4 to 1.5
-----------------------

* Workaround various header compatibility issues in glibc and bionic.

* Allow ppc64 target to be built in freestanding mode.

Changes from 1.3.3 to 1.4
-------------------------

* Add hard-float support to most architectures where relevant.
  Some patches contributed by Richard Campbell.

Changes from 1.3.2 to 1.3.3
---------------------------

* Use `bl` instruction instead of explicit GOT lookup for `exit`
  in 64-bit PowerPC assembly.

* Fix installation path for standalone libucontext headers.
  Patch contributed by Marian Buschsieweke.

* Fix missing includes for freestanding builds.
  Patch contributed by David Leeds.

Makefile:
  Disabled documents.
  Added glibc supports, and remove hardcoded musl dependency.
  Put test_libucontext_posix only available in musl runtime.

Build system: x86/64
Build-tested: x86/64-glibc
Build-tested: x86/64-musl
Run-tested: x86/64-glibc

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>
2026-07-10 20:52:18 +02:00
Glenn Strauss 143195230b lighttpd: update to lighttpd 1.4.85 release hash
Ref: https://www.lighttpd.net/2026/07/08/1.4.85/
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2026-07-10 16:35:02 +02:00
John Audia bc78197403 openssh: update to 10.4_p1
Changelog: https://www.openssh.com/txt/release-10.4

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-07-10 13:13:46 +02:00
Joshua Covington 30b18d15cb bcm27xx-eeprom: update to Git HEAD (2026-05-27)
Update to the latest Git HEAD (2026-05-27)

Signed-off-by: Joshua Covington <joshuacov@gmail.com>
2026-07-10 12:50:25 +02:00
David Andreoletti a3a5d87229 qemu: enable qemu package support in .config for Rockchip devices
OpenWrt's .config support declaring qemu-* packages as part of the
Rockchip devices OpenWrt images.

Maintainer: @yousong
Compile tested: snapshot
Run tested: NanoPi R4S

Signed-off-by: David Andreoletti <david.andreoletti.dev@gmail.com>
2026-07-10 10:36:02 +02:00