Implement a nightly LLM review workflow that triggers
a reusable digest workflow from openwrt/actions-shared-workflows.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
libdrm-tests ships DRM tools (modetest, proptest, ...) with no --version flag,
so the generic probe aborts with "No executables in the package provided
version" and fails CI. test-version.sh is shared by every subpackage built from
this directory and a non-zero exit fails it, so it must accept the whole family
(the libraries ship no executables either) -- hence libdrm*, not just libdrm-tests.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
- convert the patch to a make option
- Add -J/-j options for JSON and JSON Lines output format.
- lsof_free_result(): handle result == NULL
- Fix missing parenthesis in lstat error message format
- Fix use-after-free in lsof_select_process_regex
- Fix truncated fd numbers in -F field output
- Display connection state for UDP sockets with -T option
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
Source the 'mwan3' init service does printing the following log message:
/usr/sbin/mwan3: /etc/init.d/mwan3: line 116: extra_command: not found
However, there is no need to source this file, as the required functions are
already loaded in the file '/usr/lib/mwan3.sh'.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Add the missing spaces around the test bracket in the one.com
pre-removal script and escape IPKG_INSTROOT consistently with the other
subpackages.
Signed-off-by: Jiang Tengfei <admin@shaoxia.xyz>
The /usr/bin/ddns frontend did not support a version option, so
generic package tests treated it as an executable that could not report
the package version.
Read the installed version file and support -V/--version, matching the
version output style used by dynamic_dns_updater.sh.
Signed-off-by: Jiang Tengfei <admin@shaoxia.xyz>
Keep the existing cURL bind_network behavior of binding to the
logical device first. This preserves the behavior introduced for
PPPoE and multi-WAN setups where the selected network must also be
used for the DDNS update request.
Some setups can still fail when libcurl binds directly to the logical
PPP device. In that case the transfer may time out even though binding
to the source address of the same network succeeds. This can make DDNS
updates fail repeatedly on affected systems.
Retry cURL transfers once with the network source IP when the
device-bound transfer fails. This leaves the normal path unchanged,
keeps the update request on the same network, and matches the existing
GNU Wget behavior which already binds to the network IP address.
Also document the implicit bind_network default and the cURL fallback
in the sample configuration.
Signed-off-by: Jiang Tengfei <admin@shaoxia.xyz>
Features optimized datastore YANG validation including incremental
validation, a reduced XML config footprint, configurable datastore
cache, many bugfixes and a prototype gRPC/gNMI implementation.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Add the missing shell interpreter line to the postrm script.
This lets apk run the generated post-deinstall hook when fish is removed.
Bump PKG_RELEASE for the package script change.
Fixes: #29348
Signed-off-by: Dharmik Parmar <dharmikparmar2004@yahoo.com>
Fixes buffer overflow vulnerability in ngx_http_proxy_v2_module & ngx_http_grpc_module
(CVE-2026-42055) and buffer overread vulnerability in ngx_http_charset_module (CVE-2026-48142).
Signed-off-by: Jan Klos <jan@klos.xyz>
NSS source package does not build any binaries that emit a version.
Therefore add a version override.
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
The way we use -lfts isn't particularly consistent. There's no reason
it shouldn't be. glibc users shouldn't have to deal with someone else's
lack of rigor.
Signed-off-by: Philip A. Prindeville <philipp@redfish-solutions.com>
test.sh is pretty basic and will not fail if one of the plugin fails,
which is fine as most plugins will fail in CI anyway.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
lua-cjson depends on liblua, so add missing lua dependency.
modemmanager-rpcd has no version, so add a simple test, and skip version check.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
- Add DEFAULT_VARIANT to "avahi-daemon" and "libavahi" virtual packages;
set to "dbus" variant because it is more compatible.
When some package depends on one of these virtual packages an arbitrarily
variant it is selected. This avoids that.
- Add conflicts in order to avoid mixing packages with different variants
(when defining a DEFAULT_VARIANT the conflicts definition should be on
that side of the dependency to avoid recursive dependencies).
- Avoid building unused "dbus" dependency.
Fixes: ASU sysupgrade problem with avahi packages https://forum.openwrt.org/t/luci-attended-sysupgrade-support-thread/230552/137
Fixes: https://github.com/openwrt/packages/commit/9bc03b9d9971c2f1e146f7c2d287d1fc16e776f0
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Bump from the 0.9-rc4 pre-release to 0.9-rc5. Update PKG_VERSION,
PKG_SOURCE, PKG_SOURCE_URL, PKG_BUILD_DIR and PKG_HASH accordingly.
The two carried patches (010-pkgconfig, 020-no-po-subdir) still apply
unchanged, and test-version.sh already normalises the underscore in the
apk version (0.9_rc5) back to the upstream 0.9-rc5 string.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
/etc/logrotate.d/ needs slash in conffiles to indicate it's
a directory and not a flat file.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
The custom options are designed to carry only scalar options to be
added to the connector line.
This fixes a security issue when newlines are included in custom options
which can be used to add yet another, arbitrary connector lines.
See https://github.com/openwrt/packages/security/advisories/GHSA-w6q2-vr4f-49x3
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Generic version checks were introduced in actions-shared-workflows,
making these individual test.sh files obsolete.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The nftables rule in acme-common partially works, but it races against the
acme.sh and uacme client. While the client is performing the renew the rule
is being deleted because the client is run in the background. This change
moves the rule management to the hook instead. While duplicate rules could
be created, the benefits outway the potential costs. It is unknown how many
installations issue/renew multiple certificates.
Signed-off-by: Michael A Cassaniti <michael@cassaniti.id.au>
While at it, we synchronized .github/formalities.json with the current
default settings of the webhook bot.
Since the bot is shared across all OpenWrt repositories, the stale PR
cleanup is disabled by default at the repository level. Because this
repository wants to use stale triage, we explicitly enable it here.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Update the Continuous Integration section to reflect the current state:
- Update the list of runtime-tested architectures (add i386_pentium-mmx
and mips_24kc, remove outdated i386_pentium4)
- Document the generic test suite (executable, version, hardcoded path,
strip, linked library, and SONAME checks)
- Add documentation for test-version.sh (version check override) and
pre-test.sh (pre-test setup) scripts alongside the existing test.sh
- Document available environment variables (PKG_NAME, PKG_VERSION,
CI_HELPERS) for test scripts
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Add a nat_traffic collector for prometheus-node-exporter-ucode,
ported from the equivalent Lua collector in prometheus-node-exporter-lua.
Reads /proc/net/nf_conntrack and exports per-(src, dst) pair byte
totals (both directions summed) as node_nat_traffic gauge metrics.
Also includes a ucode-based unit test with a fixture file that can be
run locally with: ucode test/nat_traffic.uc
Signed-off-by: Ricard Nacher <ricard.nacher@midokura.com>
The scripts were a mess. Attempting even a simple update caused many
Copilot complaints. So we rewrite the scripts to be cleaner and
resolve the issues found by automated code review (such as Copilot).
Made extensive use of Qwen3.6-27B, LATE, and llama.ccp for local AI
code reviews during development.
In the process we deduplicate the nut-server and nut-monitor
initscripts and split them into several files, for easier automatic
and human review.
Incorporates and supersedes: #28308
Should supersede #21014Closes: #28298
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Josef Schlehofer
Alexandru Ardelean
Maxim Storchak
Hauke Mehrtens
Florian Eckert
Jiang Tengfei
Philip Prindeville
Erik Conijn
Angus Young
Etienne Champetier
Dharmik Parmar
Jan Klos
Daniel F. Dickinson
Tianling Shen
Mario Andrés Pérez
dependabot[bot]
Michael Heimpold
Christian Lachner
Michael A Cassaniti
Rui Salvaterra
Ivan Pavlov
Javier Marcet
Dirk Brenken
Hannu Nyman
Ricard Nacher
Mikhail Gusarov
Mieczyslaw Nalewaj