Commit Graph

12952 Commits

Author SHA1 Message Date
George Sapkin de64f871b0 treewide: fix spelling and grammar in Makefiles
Fix spelling and grammar in package definitions, configs, comments and
other strings.

Signed-off-by: George Sapkin <george@sapk.in>
2025-12-31 09:12:36 +02:00
Alexandru Ardelean 529150016e tcpreplay: add libxdp as dependency
If libxdp is built before tcpreplay, it will pick it up.
So, might as well just add it as a dependency (for now).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-12-31 09:08:49 +02:00
Vladimir Ermakov 3554c264f5 coredns: replace wgsd-coredns to full 1.13.2
- Add coredns package 1.13.2
- Make wgsd-coredns package transitional to coredns with wgsd plugin enabled
- Make coredns plugin list configurable, disable heavy plugins by
  default and add wgsd plugin
- Place the service into ujail
- Add netbox plugin

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2025-12-30 16:24:42 +02:00
Glenn Strauss a827c08d38 lighttpd: 1.4.82-2
release 1.4.82-2 with patches

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-12-30 12:13:16 +02:00
Glenn Strauss ff9fe4b101 lighttpd: mbedtls 3.x EC certs require drbg init
EC certs require drbg init with mbedtls >= 3.0.0
in addition to MBEDTLS_USE_PSA_CRYPTO requiring drbg init

x-ref:
  "mbedtls error with ec certificates"
  https://redmine.lighttpd.net/boards/2/topics/12097
  "mod_mbedtls: ECDSA OpenSSL certificates do not work with lighttpd + mbedTLS/PSA (MBEDTLS_USE_PSA_CRYPTO)"
  https://redmine.lighttpd.net/issues/3288

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-12-30 12:13:16 +02:00
Alarcon Laurent ee21a8b227 lighttpd: fix plugin malformed dependencies
Dependencies for plugin authn_gssapi, authn_ldap, authn_pam, authn_dbi
and authn_sasl are not correctly written.

This cause lighttpd package to always compile krb5-libs, libopenldap and
libpam, even if not selected

Before the fix:

grep -e libpam -e krb5-libs -e libopenldap .config
\# CONFIG_PACKAGE_libpam is not set
\# CONFIG_PACKAGE_libopenldap is not set
\# CONFIG_PACKAGE_krb5-libs is not set

make | grep -e libpam -e krb5 -e ldap
make[3] -C feeds/packages/net/krb5 compile
make[3] -C feeds/packages/libs/libpam compile
make[3] -C feeds/packages/libs/openldap compile

With the fix:

make | grep -e libpam -e krb5 -e ldap
"nothing compiled"

Check that fix works when mod-authn tokens are
selected (select lighttpd-mod-authn_xxx):

grep lighttpd-mod-authn .config
CONFIG_PACKAGE_lighttpd-mod-authn_file=y
CONFIG_PACKAGE_lighttpd-mod-authn_gssapi=m
CONFIG_PACKAGE_lighttpd-mod-authn_ldap=m
CONFIG_PACKAGE_lighttpd-mod-authn_pam=y

make | grep -e libpam -e krb5 -e ldap
make[3] -C feeds/packages/net/krb5 compile
make[3] -C feeds/packages/libs/libpam compile
make[3] -C feeds/packages/libs/openldap compile

x-ref:
  "lighttpd: Malformed dependencies cause unselected packages to be compiled"
  https://github.com/openwrt/packages/pull/28157

github: closes #28157

Signed-off-by: Alarcon Laurent <laurent.alarcon@sagemcom.com>
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2025-12-30 12:13:16 +02:00
Josef Schlehofer e9125d9376 uspot: move and format EXTRA_DEPENDS
Sort EXTRA_DEPENDS after DEPENDS and remove whitespace in the version requirement.

Fixes missing version during building:
```
uspot fused dependencies: ucode (>=, libc,..
uspotfilter fused dependencies: ucode (>=, libc,...
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-30 10:01:45 +01:00
Daniel F. Dickinson 73d8b6c6f3 tree-wide: remove obsolete SDK in conditionals
Obsolete use of $(SDK) in configure conditionals can result in
dependency errors when building a subset of packages for packages which
have multiple sub-packages.

The reason it causes dependency issues is that (using libdbi-drivers as
an example) lines like:

ifneq ($(SDK)$(CONFIG_PACKAGE_libdbd-sqlite3),)

always evaluate to true if you are compiling in the SDK. So for a user
compiling from the SDK, the configure arguments are always added to the package build.

In the case of libdbi-drivers:

CONFIGURE_ARGS += \
  --with-sqlite3 \
  --with-sqlite3-incdir=$(STAGING_DIR)/usr/include \
  -with-sqlite3-libdir=$(STAGING_DIR)/usr/lib

is always added even if PACKAGE_libdbd-sqlite3 is deselected. When
libdbd-sqlite3 is deselected, this dependency:

DEPENDS:=libdbi +libsqlite3

is not present, so when configure tries to find sqlite3 it fails.

Closes #28173 "tree-wide: obsolete $(SDK) in conditionals"

See also:

* "include: remove SDK exception from package install targets"
  openwrt/openwrt@28f44a4

Performed tree-wide to ease revert if necessary, per:
https://github.com/openwrt/packages/issues/28173#issuecomment-3694615980

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-30 00:16:16 +01:00
TeleostNaCl Dai 821f3f071c tcpreplay: add libbpf dependency
Since compiling tcpbridge requires linking libbpf.so.1, compiling tcpbridge first may result in compilation failure, like:
Package tcpbridge is missing dependencies for the following libraries: libbpf.so.1

The simplest way to solve it is to add libbpf dependency in Makefile

Signed-off-by: TeleostNaCl Dai <teleostnacl@gmail.com>
2025-12-29 16:30:24 +02:00
Tianling Shen 84f4bb9515 openlist: Update to 4.1.8
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-29 17:14:58 +08:00
xiao bo 6a9fa60eaa sing-box: update to 1.12.14
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.14

Signed-off-by: xiao bo <peterwillcn@gmail.com>
2025-12-29 06:00:18 +01:00
Tianling Shen 447b3cb493 dnslookup: Update to 1.11.2
Release note: https://github.com/ameshkov/dnslookup/releases/tag/v1.11.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-28 19:20:54 +08:00
Konstantin Demin 00e2beec5c softethervpn5: rearrange patches
Provide space for upstream/pending patches.

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2025-12-28 10:09:36 +02:00
Aleksey Vasilenko dfd0245f19 krant: drop maintainership
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2025-12-28 09:58:22 +02:00
Paul Donald 1b1aa825a2 freeradius3: bump to 3.2.8
Closes #28161

Resolves runtime openssl error

Patches refreshed

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-28 09:57:08 +02:00
Daniel F. Dickinson 57e6f89c02 curl: enable wrongly disabled HTTP_AUTH
commit ea66e463cf added a new config
option LIBCURL_HTTP_AUTH to enable or disable HTTP_AUTH support in
cURL. It defaulted the option to n (disabled).

However, prior to this change HTTP_AUTH was enabled for cURL, as the
configure script defaults to HTTP_AUTH enabled when it is not
explicitly disabled.

This impacts any consumer of cURL that uses HTTP_AUTH, including
authentication by username and password in the URL. (Confirmed via
run testing).

So we set the default for the option to y (enabled).

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-26 09:48:17 +01:00
Vladimir Tkachev a13c76304e ddns-scripts: add beget.com api support
The Beget API provider was implemented according to https://beget.com/en/kb/api/dns-administration-functions

Signed-off-by: Vladimir Tkachev <awesome149712@gmail.com>
2025-12-25 18:46:00 +01:00
George Sapkin 8e535fd914 etebase: switch to nginx
All nginx variants provide ssl so switch from nginx-ssl to nginx.

Signed-off-by: George Sapkin <george@sapk.in>
2025-12-24 10:59:46 +01:00
George Sapkin 63a666bd05 nginx: fix provides
nginx modules must not provide nginx which causes them to not be able
to be installed alongside nginx due to the new apk provide fixes.

Remove PROVIDES from modules.

Remove nginx-ssl from PROVIDES as there is no non-ssl variant, i.e. all
version provide ssl.

Set nginx-ssl as the default variant.

Remove non-existent config value.

Signed-off-by: George Sapkin <george@sapk.in>
2025-12-24 10:59:46 +01:00
Self-Hosting-Group 70ce349f1c miniupnpd: update to 2.3.9 to fix issues, refresh building
- Update daemon to 2.3.9 to fix removal of nftables rules in
  `upnp_forward` and return the correct internal port; also resulted in
  the excessive opening of new ports. Accept interface names starting
  with digits
- Build from GitHub releases to get a reliable HTTPS server, as the
  HTTP-only/HTTPS mirror were only available ~85%/77% over 3 months
  https://redirect.github.com/miniupnp/miniupnp/issues/770
  https://stats.uptimerobot.com/DwGDxUB914
- Build daemon with `--disable-pppconn` to remove the old/IGDv1-only
  extra WANPPPConnection SSDP announcements workaround not included in
  other implementations since >15y
- Build daemon with `--vendorcfg` to allow customisation of the
  router/friendly name (+5 potential options) displayed in Windows
  Explorer, 384 bytes extra required on ARMv7 (binary)
- Remove old (iptables variant only) patches, as no longer needed
- Remove `clean_ruleset_interval/threshold` UCI config options as not
  standard/working since OpenWrt 22.03, as nftables not supported

Fixes: https://github.com/openwrt/openwrt/issues/18011
Fixes: https://github.com/openwrt/luci/issues/7759
Fixes: https://github.com/openwrt/packages/issues/26352
Signed-off-by: Self-Hosting-Group <selfhostinggroup-git+openwrt@shost.ing>
[update fixes tag]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-24 10:06:10 +08:00
xiao bo 61debad22d sing-box: update to 1.12.13
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.13

Signed-off-by: xiao bo <peterwillcn@gmail.com>
2025-12-23 21:19:55 +01:00
Martin Schiller 390cdc1419 openvpn: add missing options
Add missing options taken from the OpenVPN 2.6 manual.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2025-12-23 10:47:44 -03:00
Martin Schiller 789cf82890 openvpn: remove vanished options
These options are no longer available in openvpn 2.6.x.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2025-12-23 10:47:44 -03:00
Wesley Gimenes 24dc5175d1 netbird: update to 0.60.8 (breaking change)
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.60.8

This is the first `netbird` release that introduces a breaking change[1].
Therefore, versions after the `0.60.x` will not be backported to
OpenWrt 24.10. They will be backported to OpenWrt 25.12, because that
release has not been officially launched yet.

By default netbird now creates/updates[2]
`/etc/ssh/ssh_config.d/99-netbird.conf` for use with `openssh-client`.
OpenWrt uses `dropbear`, and this behavior may cause storage wear.
This behavior has been disabled with `NB_DISABLE_SSH_CONFIG="1"`[3] in the
init file.

[1]: https://forum.netbird.io/t/netbird-v0-60-0-released/334#p-610-upgrade-compatibility-notes-4
[2]: https://docs.netbird.io/manage/peers/ssh#native-ssh-clients-open-ssh
[3]: https://github.com/netbirdio/netbird/blob/v0.60.8/client/ssh/config/manager.go#L167-L172

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-12-20 21:34:13 +02:00
Wesley Gimenes 2bf64b9701 netbird: update to 0.59.13
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.13

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-12-20 21:34:13 +02:00
John Audia 0746327c62 jool: fix build for 6.18
Add backport to fix build against 6.18 kernel.

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-12-20 18:23:20 +01:00
Sandro Jäckel 7bdb59c917 tailscale: update to 1.92.3
Changelog: https://tailscale.com/changelog#2025-12-16
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-12-20 05:09:59 +02:00
Brian J. Murrell 63308ab213 ddns-scripts: remove minimum 5 minute wait
To check if the update was successful.

Not all DDNS implementations have such huge latencies updating their services.

nsupdate for example, updates immediately and the update is immediately checkable.

Add new check_interval_min value to be able to set a check interval lower than the
previously hard-coded 5 minutes.

Fixes: #20564

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2025-12-17 15:33:59 +01:00
Sandro Jäckel e564f6953d tailscale: update to 1.92.2
Changelog: https://tailscale.com/changelog#2025-12-10

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-12-17 12:34:19 +01:00
Jonas Jelonek 105d943146 croc: update to 10.3.1
Changelogs:
10.2.3: https://github.com/schollz/croc/releases/tag/v10.2.3
10.2.4: https://github.com/schollz/croc/releases/tag/v10.2.4
10.2.5: https://github.com/schollz/croc/releases/tag/v10.2.5
10.2.6: https://github.com/schollz/croc/releases/tag/v10.2.6
10.2.7: https://github.com/schollz/croc/releases/tag/v10.2.7
10.3.0: https://github.com/schollz/croc/releases/tag/v10.3.0
10.3.1: https://github.com/schollz/croc/releases/tag/v10.3.1

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2025-12-17 01:23:33 +02:00
Dirk Brenken afce31650c adblock: update 4.4.5-2
* fixed f_uci function
* fixed f_switch function, reported in the turris forum

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-15 22:58:34 +01:00
Philip Prindeville 6ec4b726f2 strongswan: update to 6.0.4
No significant functional changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-15 12:34:52 -07:00
Yanase Yuki d29dd8e025 oor: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 5 years ago.
- Official domain name has been suspended.

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-15 12:20:34 +01:00
Mai Thanh Minh 902da8510b zerotier: apply upstream license change to MPL-2.0
Upstream changed license to `MPL-2.0` for all except `nonfree/`. Building with `ZT_NONFREE=1` excludes these non-free code, make the result effectively under `MPL-2.0`. Read more at https://github.com/zerotier/ZeroTierOne/blob/1.16.0/RELEASE-NOTES.md#2025-08-21----version-1160

Signed-off-by: Mai Thanh Minh <thanhminh.mr@gmail.com>
2025-12-15 07:57:41 +01:00
Eric McDonald 93983e5b2a net-snmp: fix literal string test in snmpd_sink_add
The function snmpd_sink_add() has a guard clause that tests the literal
string "section", not the variable value "$section".

The test `[ -n "section" ]` always evaluates to true because the string
literal "section" is non-empty, making the check useless.

This function is only called internally with hardcoded arguments, so the
bug has no actual impact currently. For the same reason, this change
should not break existing configurations. However, I think it should be
fixed so future callers do not have a false sense of security.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2025-12-14 23:52:39 +02:00
Tianling Shen 7b053424ac xray-core: Update to 25.12.8
Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.12.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:30:01 +08:00
Tianling Shen 35d8dfee33 dnsproxy: Update to 0.78.2
Release note: https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:41 +08:00
Tianling Shen 0d2e10010b rclone: Update to 1.72.1
Release note: https://github.com/rclone/rclone/releases/tag/v1.72.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:09 +08:00
Dirk Brenken b085131830 adblock: release 4.4.5-1
* hardened the uci config parsing
* added a fast, flexible & secure domain validator function, it eliminates > 99 % of garbage inputs
  - Please note: the "rule" in the feed file now only includes parameters for the domain validator,
    see readme for details. Please nuke a custom feed file from former versions - they are no longer
    compatible
* readme update
* LuCI: fixed a minor issue in the logread template
* LuCI: adapted the rule select options in the custom feed editor to use the new domain validator

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-14 07:08:17 +01:00
Philip Prindeville a050b08db2 isc-dhcp: fix startup issues with RFC-1918 PTR RRs
If isc-dhcp gets restarted, it might have to deal with RFC-1918 zones
being previously populated by an earlier instance.  In that case, we
need to know if we're modified versus initially adding the zones.

The special handling of RFC-1918 zones in Bind is quirky, and there
should be a patch soon to make it more friendly, but in the meantime
you might have to use:

disable-empty-zone 168.192.in-addr.arpa;

Or similar depending on which address block you poach.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-13 12:26:38 -07:00
Stan Grishin 315ef8adf2 pbr: update to 1.2.1-r41
Remove many obsolete files.

Makefile:
* remove netifd-flavour related code
* remove trailing white spaces

Init-script:
* proper deletion of default network rules for IPv{4,6}
* fix netifd function error when IPv6 is enabled
* remove trailing white spaces

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-12 17:20:11 -08:00
Philip Prindeville 9d751f30fd bind: manual fix for IPv6 server unreachable noise
Until we have a failsafe way of detecting no IPv6 internet
connectivity automatically, allow the users to set it
manually for now.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-12 18:06:44 -07:00
Paul Donald 90e227e755 cgi-io: update to Git 658b14bda (2025-12-11)
658b14b main: Add `stderr` option for cgi-exec to redirect stderr to stdout

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-12 16:04:25 +01:00
Martin Schiller 21019d063d xl2tp: add PPP unnumbered support to proto handler
Adds the PPP unnumbered support from openwrt commit 48a95ef ("ppp :
Unnumbered support") to the xl2tp proto handler.

https://github.com/openwrt/openwrt/commit/48a95eff38ceaa13d497617ebd5e2201dd16ee77

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2025-12-12 12:50:59 +01:00
Dirk Brenken 990bf69fd7 travelmate: release 2.3.0-1
* split travelmate.s in a new central travelmate function library (usr/lib/travelmate-functions.sh) plus
  a smal service script (/usr/bin/travelmate-service.sh)
* the vpn-, mail- and login scripts are now using the central function library
* rework the ntp hotplug script
* harden the config parsing
* support the curl interface option to specify which network pathway is used for outgoing requests
* the travelmate status now includes the backend- and frontend version information
* LuCI: use a special travelmate interface, e.g. trm_wwan or use an existing wwan interface
* LuCI: no longer call the logread binary, use rpc / the ubus log object instead
* LuCI: various code cleanups
* LuCI: various small usability improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-11 22:43:55 +01:00
George Sapkin 5369c5cbbc adguardhome: bump to 0.107.71
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.71
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-11 17:07:16 +02:00
Niklas Thorild 4bcc482ab9 dnscrypt-proxy2: update to version 2.1.15
- update dnscrypt-proxy2 to version 2.1.15

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-12-11 15:55:07 +01:00
Goetz Goerisch 0ca33e71e9 unbound: update to 1.24.2
Fixes: Possible Domain Hijacking via promiscuous NS Records (CVE-2025-11411)
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2
Upstream commit f6269baa605d31859f28770e01a24e3677e5f82c
https://github.com/NLnetLabs/unbound/commit/f6269baa605d31859f28770e01a24e3677e5f82c

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
2025-12-10 18:38:27 +01:00
Dirk Brenken 4a72200214 unbound: minimal fix for odhcpd lease file parsing
Current odhcpd in master writes MAC addresses with colons in his lease file,
this new odhcpd format leads to a crash loop in unbound (if DHCPv4 to SLAAC is selected).

Just remove the colons, before the processing in slaac_eui64 begins, fixes #28032

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-10 18:06:06 +01:00
Til Kaiser 0b6d2a2859 treewide: remove python3-distutils dependency
As the python3-distutils was dropped while bumping the version
to 3.13.9 via 97a92f2e7a, remove the
python3-distutils from all packages that are currently using it.

OpenWrt already uses recent enough releases of these packages
that have adapted to work without distutils, so the dependency
can be safely removed.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-12-10 10:49:08 +01:00