Commit Graph

35733 Commits

Author SHA1 Message Date
Chester A. Unal 6b23febb15 bsbf-openwrt-resources: add BSBF URL to packages
Add the BondingShouldBeFree URL to the bsbf-openwrt-resources packages.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
2026-03-13 07:37:59 +02:00
Chester A. Unal e3c7df1383 bsbf-resources: add BSBF URL to packages
Add the BondingShouldBeFree URL to the bsbf-resources packages.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
2026-03-13 07:37:59 +02:00
Chester A. Unal 709b2c629c bsbf-plpmtu: add
Update bsbf-resources to the GIT HEAD of 2026-03-12. Add bsbf-plpmtu and
make bsbf-bonding depend on bsbf-plpmtu.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
2026-03-13 07:37:59 +02:00
Chester A. Unal bc1e10d8cc plp-mtu-discovery: add
Perform Path MTU Discovery without relying on ICMP errors, which are often
not delivered.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
2026-03-13 07:37:59 +02:00
George Sapkin 04f5991451 sqlite3: bump to 3.52.0
Changes: https://sqlite.org/releaselog/3_52_0.html
Signed-off-by: George Sapkin <george@sapk.in>
2026-03-13 04:37:07 +02:00
Dirk Brenken 2657120d5f adblock: update 4.5.2‑4
* optimized the awk for the Top10 statistics in the DNS Report,
  removed the faulty caching (reported in the forum)
* minor improvement in the f_switch function
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-03-12 20:39:20 +01:00
George Sapkin cc7814f191 adguardhome: add config reload trigger
Restart the service when config is changed from the app.

Signed-off-by: George Sapkin <george@sapk.in>
2026-03-12 16:38:09 +02:00
Ivan Belokobylskiy 1e8de4500c python-evdev: bump version to 1.9.3
Fix several memory leaks in input.c

Signed-off-by: Ivan Belokobylskiy <belokobylskij@gmail.com>
2026-03-12 15:56:00 +02:00
Ivan Belokobylskiy b016aa38c3 python-evdev: add mandatory uinput.h header to builder
Starting from 1.9.2 python-evdev requires
include/uapi/linux/uinput.h headers for proper building.
Otherwise, it compiles but cannot be imported causing
KeyError: 'UI_FF'

Add uinput.h to LINUX_EVDEV_HEADERS

Signed-off-by: Ivan Belokobylskiy <belokobylskij@gmail.com>
2026-03-12 15:56:00 +02:00
Alexandru Ardelean a01d2a9440 squashfs-tools: bump to 4.7.5
Changes since 4.7.2:
- Fix potential corruption in Squashfs filesystems containing sparse files
- Fix pseudo file creation failures with large blocks of contiguous zeros
- Fix duplicate file detection for files exceeding available buffer space
- Add -numeric-owner option to mksquashfs/sqfstar
- Fix segfault when using pseudo file root definitions with only Xattr metadata
- Fix conflict between -offset and -stream options
- Fix directory modification timestamp issues in pseudo file hierarchy
- Fix -max-depth incorrectly marking empty directories as excluded

Full release notes:
https://github.com/plougher/squashfs-tools/releases/tag/4.7.5

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-12 13:09:28 +02:00
George Sapkin c59d9b2476 adguardhome: bump to 0.107.73
Changes: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.73
Signed-off-by: George Sapkin <george@sapk.in>
2026-03-11 20:41:41 +02:00
John Audia 66c1a6dab0 snort3: update to v3.11.1.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.11.1.0

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-03-11 18:55:56 +01:00
John Audia 7f676c5954 libdaq3: update to 3.0.25
Release notes: https://github.com/snort3/libdaq/releases/tag/v3.0.25

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-03-11 18:55:56 +01:00
Rosen Penev 3f727dfd0c python-psycopg2: update to 2.9.11
Newer Python compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2026-03-11 18:54:49 +01:00
Tianling Shen ff826adfa8 rust: Update to 1.94.0
Changelog:
- https://github.com/rust-lang/rust/releases/tag/1.91.1
- https://github.com/rust-lang/rust/releases/tag/1.92.0
- https://github.com/rust-lang/rust/releases/tag/1.93.0
- https://github.com/rust-lang/rust/releases/tag/1.93.1
- https://github.com/rust-lang/rust/releases/tag/1.94.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-03-12 00:52:21 +08:00
John Audia 78ba767e09 nfs-kernel-server: update to 2.8.6
Changelog: https://www.kernel.org/pub/linux/utils/nfs-utils/2.8.6/2.8.6-Changelog

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-03-11 17:46:21 +02:00
Harin Lee ff0e55a2a3 mwan3: bump PKG_VERSION to 2.12.1
Signed-off-by: Harin Lee <me@harin.net>
2026-03-11 14:24:47 +01:00
Harin Lee 1e721190f9 mwan3: fix typos in warning messages
Signed-off-by: Harin Lee <me@harin.net>
2026-03-11 14:24:47 +01:00
Harin Lee 8031e5459c mwan3: fix IPv6 support for httping command
This passes the '-6' option to httping if the address family is IPv6.

Signed-off-by: Harin Lee <me@harin.net>
2026-03-11 14:24:47 +01:00
Harin Lee 91b997bb50 mwan3: warn about unsupported IPv6 in arping track method
ARP and arping do not support IPv6.

Signed-off-by: Harin Lee <me@harin.net>
2026-03-11 14:24:47 +01:00
Florian Eckert 19bf94887b openvpn: increment PKG_RELEASE by one
Increment PKG_RELEASE by one.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert 647b67e18b openvpn: add hotplug handling back in
This commit adds hotplug handling back in.

Fixes: 2607b761 ("openvpn: introduce proto handler")

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert 337a449c03 openvpn: use append for the remaining options
There is already the 'append' command, which assembles all parameters that
are called 'proto_run_command'. Let´s move also the last params to the
top. To ensure that the sequence is correct, the parameters must be added
at the beginning, so that user parameters can overwrite them.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert be20045045 openvpn: use also append for dev_type and ovpnproto options
There is already the 'append' command, which assembles all parameters that
are called 'proto_run_command'. Let´s use that. To ensure that the
sequence is correct, the parameters must be added at the beginning, so that
user parameters can overwrite them.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert f89b656de2 openvpn: use common pattern for global variable
The common pattern for global variable is, to write the variable name in
capital letters. This improves maintainability in shell scripts.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert 9ccb8650fd openvpn: fix auth_user_pass option
The variable 'auth_file' is not used in the following programm sequence.
It therefore only makes sense to add it as a call parameter via 'append'
when calling the the 'proto_run_commmand'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert a5b3ecfbcf openvpn: rename openvpn proto option to ovpnproto option
This was forgotten during renameing of this option.

Fixes: e026ce0f ("openvpn: handle ovpnproto exclusively")

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Florian Eckert 54eae83c95 openvpn: remove net needed blank lines
There is always only one blank line between the sections.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-03-11 14:22:41 +01:00
Wei-Ting Yang d1923a44fd django: bump to version 6.0.3
Fix CVE-2026-25674.

Full release notes:
https://docs.djangoproject.com/en/6.0/releases/6.0.3/

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-03-11 13:52:18 +02:00
Wei-Ting Yang 551fe9b9b6 django: clean up Makefile
- Add AUTHORS into PKG_LICENSE_FILES.
- Drop no longer required python3-pytz dependency.
- Remove obsolete CONFLICTS field.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-03-11 13:52:18 +02:00
Martin Schiller a39a55629b usbutils: use ALTERNATIVES
Use the ALTERNATIVES symlink handling to avoid conflicts with busybox
lsusb tool. Otherwise this package can not be installed if you also have
enabled lsusb from busybox.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2026-03-11 12:11:52 +01:00
Martin Schiller 31b6d1c8c3 pciutils: use ALTERNATIVES
Use the ALTERNATIVES symlink handling to avoid conflicts with busybox
lspci tool. Otherwise this package can not be installed if you also have
enabled lspci from busybox.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2026-03-11 12:11:52 +01:00
Eric McDonald ba27353e34 net-snmp: bump PKG_RELEASE
Bump PKG_RELEASE to reflect fixes to UCI init script config
generation for missing/unset options and RestrictOID handling.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald 136bff9a8e net-snmp: fix newline when RestrictOID is neither yes nor no
snmpd_access_default_add, snmpd_access_HostName_add, and
snmpd_access_HostIP_add check if RestrictOID is `yes` or `no`
but fail to write a newline for other values of RestrictOID
(e.g., `true`, `false`) or if unset, corrupting the generated config.

Fix by using config_get_bool and restructuring to write either
a complete line or nothing. Also require RestrictedOID to be
non-empty when RestrictOID is enabled.

This is a breaking change for configs where RestrictOID is set
to a value that the old code did not match as `yes` (e.g., `true`,
`1`, `on`, `enabled`) but config_get_bool evaluates as true. In
practice, this is unlikely to affect existing installs unless a
user is unknowingly relying on unintended behavior or is deliberately
relying on the old code's non-standard boolean evaluation; this
latter case is considered unlikely by this commit's author. Configs
where RestrictOID is enabled but RestrictedOID is empty are also
affected; previously a directive with a trailing space was written,
now no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald b6ff8c79b1 net-snmp: add early return when IPMask is unset
snmpd_access_HostIP_add would write unintended output to the
config file if the IPMask option is not specified. Add an early
return to prevent writing in that case.

This is a breaking change for configs where IPMask is unset.
Previously, an empty IPMask option would result in a malformed
directive containing a trailing slash with no guaranteed newline,
the exact form of which depended on the values of other options.
Now, no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald 1215e7e87a net-snmp: add early return when HostIP is unset
snmpd_access_HostIP_add would write unintended output to the
config file if the HostIP option is not specified. Add an early
return to prevent writing in that case.

This is a breaking change for configs where HostIP is unset.
Previously, an empty HostIP option would result in a malformed
directive containing a bare /mask with no guaranteed newline, the
exact form of which depended on the values of other options.
Now, no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald 8033cfc287 net-snmp: add early return when HostName is unset
snmpd_access_HostName_add would write unintended output to the
config file if the HostName option is not specified. Add an early
return to prevent writing in that case.

This is a breaking change for configs where HostName is unset.
Previously, an empty HostName option would result in a malformed
directive with a trailing space and no guaranteed newline, the
exact form of which depended on the values of other options.
Now, no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald dbd293d751 net-snmp: add early return when CommunityName is unset
snmpd_access_default_add, snmpd_access_HostName_add, and
snmpd_access_HostIP_add would write unintended output to the
config file if the CommunityName option is not specified. Add an
early return to each function to prevent writing in that case.

This is a breaking change for configs where CommunityName is
unset. Previously, an empty CommunityName option would result in
a malformed directive with a double space and no guaranteed
newline, the exact form of which depended on the values of other
options. Now, no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Eric McDonald c3862ec354 net-snmp: add early return when Mode is unset
snmpd_access_default_add, snmpd_access_HostName_add, and
snmpd_access_HostIP_add would write unintended output to the
config file if the Mode option is not specified. Add an early
return to each function to prevent writing in that case.

This is a breaking change for configs where Mode is unset.
Previously, an empty Mode option would result in a malformed
directive with a leading space and no guaranteed newline, the
exact form of which depended on the values of other options.
Now, no directive is written.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2026-03-11 09:07:04 +01:00
Niklas Thorild fb71da41da telegraf: update to 1.38.0
- Update Telegraf to v1.38.0

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2026-03-10 17:00:16 -03:00
Afiq Nazrie 704319e27b adguardhome: add jail_mount_rw config option
Add jail_mount_rw config option to add directories with read-write
access.

Fixes: https://forum.openwrt.org/t/247253
Signed-off-by: Afiq Nazrie <afnazrie@gmail.com>
2026-03-10 20:45:41 +02:00
Chester A. Unal 98a02be97b bsbf-resources: update to GIT HEAD of 2026-03-09
Update bsbf-resources to the GIT HEAD of 2026-03-09.

Signed-off-by: Chester A. Unal <chester.a.unal@arinc9.com>
2026-03-10 09:50:28 +02:00
Vladimir Ulrich f52f1864a8 zoneinfo: updated to 2026a release
Updated package version and file hashes.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
2026-03-09 22:19:13 +02:00
Oliver Sedlbauer 790495e3d7 lcd4linux: prevent concurrent layout switches
Add patch to prevent concurrent layout switches.

Signed-off-by: Oliver Sedlbauer <os@dev.tdt.de>
2026-03-09 12:03:55 +01:00
Wesley Gimenes df6533b96e netbird: update to 0.66.2, patch for Go 1.26 build
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.66.2

NetBird `v0.66.x` adds support for exposing a local HTTP service
from the CLI with the `netbird expose`[1] command, but only for
self-hosted deployments. Cloud support is coming.

[1]: https://docs.netbird.io/manage/reverse-proxy/expose-from-cli

---

`0.65.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.65.3

NetBird `v0.65.x` now includes a built-in reverse proxy[1], but only for
self-hosted deployments and is currently in beta. Cloud support is
coming soon.

Important: pre-shared keys or Rosenpass are currently incompatible with
the reverse proxy feature.

[1]: https://docs.netbird.io/manage/reverse-proxy

---

`v0.63.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.63.0

NetBird now supports private DNS zones[1].

[1]: https://docs.netbird.io/manage/dns/custom-zones

---

`v0.62.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.62.3

Upstream minimum Go requirement raised from `v1.24.x` to `v1.25.x`,
see the go.mod[1].

[1]: https://github.com/netbirdio/netbird/blob/v0.62.3/go.mod#L3-L5

---

Building `netbird` with Go 1.26.x fails with errors:

```
[...]
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:22:2: WaitReasonSelect redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:22:2: other declaration of WaitReasonSelect
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:23:2: WaitReasonChanReceive redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:23:2: other declaration of WaitReasonChanReceive
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:24:2: WaitReasonSemacquire redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:24:2: other declaration of WaitReasonSemacquire
[...]
```

Upstream Issue: https://github.com/netbirdio/netbird/issues/5290
Upstream PR: https://github.com/netbirdio/netbird/pull/5447

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2026-03-08 20:55:06 -03:00
Wesley Gimenes 291dacc67c netbird: update to 0.61.2 (breaking change)
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.61.2

The second release of `netbird` that introduces a breaking change[1].
A backport will be provided for OpenWrt 25.12 but not for OpenWrt 24.10,
since OpenWrt 25.12 has not been released yet.

NetBird adds **fine-grained SSH access control**[2].

Self-hosters must update both the `management` and `dashboard`[3].

[1]: https://forum.netbird.io/t/upcoming-breaking-changes-to-netbird-ssh/401
[2]: https://docs.netbird.io/manage/peers/ssh#fine-grained-access-control
[3]: https://docs.netbird.io/manage/peers/ssh#v0-61-0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2026-03-08 20:55:06 -03:00
Wesley Gimenes 696c2b6096 netbird: move state file to reduce storage wear
Add `NB_DNS_STATE_FILE="/var/lib/netbird/state.json"` to the init
environment. This moves the state from the directory
`/root/.config/netbird` to the file `/var/lib/netbird/state.json` to
avoid storage wear. Note: the file is not preserved across reboots.

The state file contains information such as locally disabled routes and
other data primarily useful for desktop clients. In OpenWrt setups,
these changes are normally handled by the NetBird `management` server.
This matches the behavior prior to `netbird` v0.52.x, I have not
received any reports that this file caused problems before, so it is
unlikely to cause issues now.

The previous state file `/root/.config/netbird/state.json` can be removed.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2026-03-08 20:55:06 -03:00
Dirk Brenken 5a495b2240 adblock: update 4.5.2‑3
* the suspend/resume function now uses the external
   DNS bridge when this function is used
* refine the f_nftadd function
* more file debug logging
* LuCI: add unfiltered DNS-Server to the DNS bridge selection
* LuCI: minor fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-03-08 18:54:23 +01:00
Stan Grishin 12530d57e1 pbr: update to 1.2.2-r10
* add support for OpenVPN netifd detection (thanks @egc112)
* add support for disable LAN->WAN forwarding when `strict_enforcement` is
  set on start and restart (thanks @egc112)
* fix: always create marking chains for interfaces
* fix: insert DSCP/ICMP-related nft rules after marking chains
* fix: shellcheck-related improvements

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-08 10:29:54 -07:00
Stan Grishin 6799f6bf9b adblock-fast: update to 1.2.2-r10
* bugfix: always print errors/warnings on non-quiet start
* bugfix: return proper enabled status in RPCD
* bugfix: return stupped status in RPCD when procd data is empty
* bugfix: correctly process verbosity=0
* delete LICENSE file and only keep it upstream

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-08 10:29:44 -07:00