Commit Graph

34773 Commits

Author SHA1 Message Date
Stan Grishin
e1cf4ac52e https-dns-proxy: update to 2025.10.07-r1
Makefile:
* update to latest upstream: 7b27ecd559
* update version, release
* drop CONFIGURE_ARGS as the build is curl-independent
* update the link to the documentation

README:
* add small README with the link to documentation

Config:
* rename procd_fw_src_interfaces to force_dns_src_interface to better reflect meaning
* add heartbeat_domain, heartbeat_sleep_timeout, heartbeat_wait_timeout options
* add default user, group and listen_addr options to the main config
* drop the user, group and listen_addr options from the instance configs

Init-script:
* start much earlier so that on boot, the procd_add_raw_trigger works on all systems
* create a ubus() helper function so that service delete does not produce "Command not found"
* new options handling where the global config options can be used for instance options
* some renaming of global/instance variables due to abovementioned redesign
* new open port detection, no longer relying on netstat
* new uci_changes() logic where it returns 0 or 1 instead of text
* new append_parm logic for not adding default value options to CLI
* new boolean options handling logic
* move config loading to load_package_config() function
* new logic for calling procd_set_config_changed firewall based solely on "$force_dns"
* source network.sh based on "${IPKG_INSTROOT}" path
* rename procd_fw_src_interfaces to force_dns_src_interface to better reflect meaning
* rename use_http1 to force_http1
* rename use_ipv6_resolvers_only to force_ipv6_resolvers

Uci-defaults:
* migrate to new option names

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-10-08 19:16:08 +00:00
Hannu Nyman
8a87d20fd7 lzo: adjust for cmake 4.x compatibility
Patch CMakeLists.txt to fulfill cmake 4.0 requirements
of cmake_minimum_required being at least 3.5 and in future 3.10.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-10-07 19:07:47 +03:00
Hannu Nyman
983d7181cc nlbwmon: adjust for cmake 4.x compatibility
New cmake versions require at least 3.5 as 'cmake_minimum_required'
in CMakeLists.txt. In future 3.10 will be required.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-10-07 18:51:49 +03:00
David Andreoletti
104aabdd5b ddns-scripts: fixed ovh dns record update
OVH changed its API to update DNS records. It now requires HTTP Basic
Authorization header. As such the default ddns-script method to update
the DNS record is failing. The fix is to move DNS record updates into
its own script/package.

Signed-off-by: David Andreoletti <david@andreoletti.net>
2025-10-07 16:32:37 +02:00
Christian Lachner
a1e500827c haproxy: update to v3.2.6
- Fixes CVE-2025-11230
- Updated haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-3.2.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2025-10-07 15:39:02 +03:00
Maxim Storchak
9ba287e7fd sqlite3: fix line editing in sqlite3-cli
- fix building sqlite3-cli with readline and libedit
- add linenoise line editing option. This adds 12k to the size of the
  bare sqlite3-cli, but doesn't add any extra dependencies
- make linenoise the default choice as the most space conserving but
  still convenient variant
- bump PKG_RELEASE

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2025-10-07 14:22:02 +03:00
Maxim Storchak
485fa40414 linenoise: add package
Add the linenoise line editing package.
It's a compact embedded replacement for readline and libedit.
It will be used in sqlite3-cli initially, but other packages
that support it, may follow.

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2025-10-07 14:22:02 +03:00
Michal Hrusecky
63b4501754 mariadb: update to 11.8.3
Update to the latest version in 11.8 stable branch.

See https://mariadb.org/11-8-lts-released/ for main changes.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2025-10-06 19:18:19 -03:00
Etienne Champetier
57596d9832 phantap: bump minimum cmake version to 3.10
Starting cmake 4.0, anything under 3.5 produces an error, see
https://cmake.org/cmake/help/latest/command/cmake_minimum_required.html#policy-version

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2025-10-06 17:06:23 -04:00
Jianhui Zhao
33ecb64165 lua-eco: update to 3.13.0
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.13.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-10-06 12:07:09 -03:00
Javier Marcet
212213d77e docker-compose: Update to version 2.40.0
Release notes:
https://github.com/docker/compose/releases/tag/v2.40.0

Signed-off-by: Javier Marcet <javier@marcet.info>
2025-10-06 16:30:36 +08:00
Dominic Greenberg
00310cf88b ddns-scripts-cloudflare: document API Token auth in comments
adjust comments documenting the already supported API Token auth
adjust comments with URLs that changed in the meantime
adjust comment regarding CF API documentation URL, points to the scripts relevant DNS section

Signed-off-by: Dominic Greenberg <daroel@riseup.net>
2025-10-06 08:08:38 +02:00
Hauke Mehrtens
209070b5ce cgi-io: update to Git HEAD (2025-10-04)
d4b9fb115c3d build: require CMake >= 3.10 due to dropped legacy support

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-10-05 18:55:03 +03:00
Hauke Mehrtens
2e1269024a usteer: update to Git HEAD (2025-10-04)
e218150979b4 remote: close file on usteer_init_local_id fread fail
1d6524c6e6b5 build: require CMake >= 3.10 due to dropped legacy support

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-10-05 18:54:51 +03:00
Andrea Pesaresi
47f1bfa717 ksmbd-tools: bump to 3.5.4
The major changes are:
 - Add max ip connections parameter. (ready for future upstream fix) at the moment is reverted by: 18bdeda011
 - unlock follow symlinks parameter to support symlink.
 - send bind_interfaces_only parameter to ksmbd.

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2025-10-05 18:54:35 +03:00
Michal Hrusecky
d50b5e583c mariadb: add unconditional dependency on libaio
MariaDB now depends on libaio even when uring is enabled.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2025-10-05 11:21:17 -03:00
Sven Eckelmann
ababcfd7a7 poemgr: update to latest HEAD
17771dd poemgr: Add support for Plasma Cloud PSX28
530433d poemgr: Add support for RTL8239 PSE solution
8821bad poemgr: Add support for Plasma Cloud PSX8/PSX10
ab466a7 poemgr: Add support for IP8008 PSE chip
7863fa8 poemgr: Add support to display POE output type
d81ac54 poemgr: Add support to export port specific device specific metrics
497a9d9 openwrt: Sync with packages feed Makefile
5033450 pd69104: Avoid resource leaks (memory, fds) on init failure

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2025-10-05 11:18:08 -03:00
Josef Schlehofer
4474f539bb multi-arch-test-build: run it only after the Formality check succeeds
Most of the time, when people contribute to the repository for the first time
 (or after a longer break), the multi-arch-test-build passes, but the
formality check fails and requires the contributor to make some changes.

This creates unnecessary load on the CI/CD, since the multi-arch-test-build
runs again even though it already passed, while other PRs are waiting for a runner.
Hopefully, this change will help decrease the waiting time.

Proposed changes:

- Run the formality check first, and only trigger the package tests afterwards.
This can be done using needs: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idneeds

- Merge formal.yml into multi-arch-test-build.yml so that needs can be used.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-05 13:33:33 +02:00
Josef Schlehofer
126364e105 snort3: refactor architecture-specific dependencies and CMake options
1. Enabled hyperscan/vectorscan together with adding dependency only for x86_64 and aarch64.
2. Disabled tmalloc (from gperftools package) for powerpc and mips.

By doing this refactor, snort3 is going to be available for more OpenWrt devices
(as it was in the past) as currently it was compiled only for x86_x64 and aarch64 by mistake.

Fixes: 257e2fc38a ("snort3: fix logic in gpertools-runtime depends")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-05 12:08:59 +02:00
Josef Schlehofer
c7253f97a3 yt-dlp: update to version 2025.9.26
Release notes:
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.23
https://github.com/yt-dlp/yt-dlp/releases/tag/2025.09.26

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-03 20:32:23 +03:00
George Sapkin
d856cb45e3 python-trove-classifiers: bump to 2025.9.11.17
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
2025-10-03 12:11:54 +02:00
Paul Donald
4c35b89332 clamav: all; init; add only non-empty parameters
Gate all parameters behind -n, a not-empty check. Prevents failed starts
where daemons expect a value for a parameter.

Closes #27430
Tested-on: 24.10.3
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-10-02 19:52:52 -03:00
Ben Kibbey
10ac81b9aa openvpn: add peer-fingerprint support
This lets the --peer-fingerprint openvpn option be parsed which requires
a client TLS certificate fingerprint (colon separated SHA256 hash) to
match one specified in the option argument, during authentication.

Signed-off-by: Ben Kibbey <bjk@luxsci.net>
2025-10-02 18:24:09 -03:00
Josef Schlehofer
9bfc5a2a74 tor: update to version 0.4.8.18
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.18/ChangeLog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-02 17:49:15 +03:00
Josef Schlehofer
3bf64e39b2 gzip: update to version 1.14
Add TARGET_CFLAGS += -std=gnu17
to fix following error discovered by CI/CD:
2025-09-30T23:53:47.3168066Z In file included from gzip.c:66:
2025-09-30T23:53:47.3189341Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3190258Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3190760Z       |                                  ^~~~
2025-09-30T23:53:47.3191259Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3191864Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3192411Z       |                                       ^~~~
2025-09-30T23:53:47.3192942Z gzip.c:135:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3193587Z   135 | DECLARE(uch BUFFER_ALIGNED, inbuf,  INBUFSIZ +INBUF_EXTRA);
2025-09-30T23:53:47.3194137Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3194752Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3195442Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3195880Z       |                                  ^~~~
2025-09-30T23:53:47.3196330Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3197297Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3197829Z       |                                       ^~~~
2025-09-30T23:53:47.3198342Z gzip.c:136:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3199113Z   136 | DECLARE(uch BUFFER_ALIGNED, outbuf, OUTBUFSIZ+OUTBUF_EXTRA);
2025-09-30T23:53:47.3199957Z       |             ^~~~~~~~~~~~~~
2025-09-30T23:53:47.3200589Z gzip.c:131:34: error: expected declaration specifiers or '...' before numeric constant
2025-09-30T23:53:47.3201250Z   131 | # define BUFFER_ALIGNED alignas (4096)
2025-09-30T23:53:47.3201688Z       |                                  ^~~~
2025-09-30T23:53:47.3202128Z gzip.h:108:39: note: in definition of macro 'DECLARE'
2025-09-30T23:53:47.3202665Z   108 | #  define DECLARE(type, array, size)  type array[size]
2025-09-30T23:53:47.3203150Z       |                                       ^~~~
2025-09-30T23:53:47.3203642Z gzip.c:138:13: note: in expansion of macro 'BUFFER_ALIGNED'
2025-09-30T23:53:47.3204203Z   138 | DECLARE(uch BUFFER_ALIGNED, window, 2L*WSIZE);
2025-09-30T23:53:47.3204684Z       |             ^~~~~~~~~~~~~~

- Release announcement:
https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00007.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-02 17:07:06 +03:00
Nikita Solianik
5eaf0e6c05 uwsgi: update to version 2.0.30
It fixes GCC15 build errors.

Release notes:
https://uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.27.html
https://uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.28.html
https://uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.29.html
https://uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.30.html

Signed-off-by: Nikita Solianik <gxcreator@gmail.com>
2025-10-02 15:22:20 +02:00
Vladimir Kochnev
6a13be2220 acme-acme.sh: support listen_port option
acme.sh supports --httpport and --tlsport options to be used
together with --standalone and --alpn modes respectively.

This is useful if we're behind a reverse proxy or smth like that
or if we cannot bind to standard 80 or 443 port for some other
reason.

This change makes listen_port from configuration to be passed as
either --httpport or --tlsport

Signed-off-by: Vladimir Kochnev <hashtable@yandex.ru>
2025-10-02 13:14:11 +02:00
Vladimir Kochnev
893576cecd acme-acme.sh: declare staging_moved variable
It's possible that staging_moved variable is undeclared while being
accessed. Lets explicitly declare it.

Signed-off-by: Vladimir Kochnev <hashtable@yandex.ru>
2025-10-02 13:14:11 +02:00
Vladimir Kochnev
9f4e7726ec acme-common: support listen_port option
listen_port option allows to redefine the default 80/443 port
used in standalone/alpn challenges.

It's also useful for other types of challenges which require
accepting a connection on some TCP port so we need to expose
it via nft as well.

Signed-off-by: Vladimir Kochnev <hashtable@yandex.ru>
2025-10-02 13:14:11 +02:00
George Sapkin
acb95630da adguardhome: bump to 0.107.67
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.67
Signed-off-by: George Sapkin <george@sapk.in>
2025-10-02 14:12:06 +03:00
Hannu Nyman
b6535dff7d libcbor: update to 0.13.0
Update to version 0.13.0 that provides compatibility with cmake 4.0.
(new cmake version require at least cmake 3.5 requirement declared
in CMakeLists.txt)

* remove the temporary patch for CMakeLists.txt

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-10-02 13:37:16 +03:00
Wei-Ting Yang
c6ba0ce292 python-urllib3: update to 2.5.0
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-10-02 08:17:48 +02:00
Wei-Ting Yang
7289cb0119 python-packaging: update to 25.0
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-10-02 08:17:48 +02:00
George Sapkin
97e8ac4f66 syncthing: bump to 2.0.10
Changelog: https://github.com/syncthing/syncthing/releases/tag/v2.0.10
Signed-off-by: George Sapkin <george@sapk.in>
2025-10-02 00:50:17 -03:00
Josef Schlehofer
be1bdc2ac1 gitlab-runner: drop unmaintained package here
Unfortunately, this package has not been well maintained since 2021,
when Jan left CZ.NIC. Its usage on OpenWrt devices is limited.

It is a very specific package,
and I believe there will not be enough users
 to maintain it, as no one from the community has stepped up to update it.

Running it on a dedicated server makes sense, but on OpenWrt?
Maybe only on x86_64 and aarch64 devices, as they are significantly more powerful.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 21:17:29 -03:00
Josef Schlehofer
fde2ee4459 elektra: drop package
libelektra [1] was archived on 16th February 2025.
The latest release was in 2023.

In https://github.com/openwrt/packages/pull/24775#issuecomment-2285683663
it was suggested to drop this package. So, lets drop it

[1] https://github.com/ElektraInitiative/libelektra

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 18:09:35 +03:00
Wesley Gimenes
48b26e4463 netbird: update to 0.58.2
changelog: https://github.com/netbirdio/netbird/releases/tag/v0.58.2

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-10-01 18:07:57 +03:00
Niklas Thorild
a5da0e757b telegraf: update to 1.36.2
- Update Telegraf to v1.36.2
- Remove HOME environment variable in service file

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-10-01 18:07:41 +03:00
Josef Schlehofer
2ba11a2da5 syslog-ng: update to version 4.10.1
Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.10.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 15:28:02 +02:00
Josef Schlehofer
28adfd3d1e apache: update to version 2.4.65
Fixes CVEs:
- CVE-2025-54090
- CVE-2025-53020
- CVE-2025-49812
- CVE-2025-49630
- CVE-2025-23048
- CVE-2024-47252
- CVE-2024-43394
- CVE-2024-43204
- CVE-2024-42516

More details can be found in
https://downloads.apache.org/httpd/CHANGES_2.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 15:20:34 +02:00
Josef Schlehofer
c488e1297f msmtp: update to version 1.8.31
Release notes:
https://marlam.de/msmtp/news/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 08:44:15 +02:00
Josef Schlehofer
9d141eb9d5 mariadb: update to version 11.4.8
Release notes:
https://mariadb.com/docs/release-notes/community-server/mariadb-11-4-series/mariadb-11.4.8-release-notes

Refreshed patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 08:39:16 +02:00
Josef Schlehofer
4d521dfbeb python-hatchling: update to version 1.27.0
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 08:35:00 +02:00
Sandro Jäckel
266a8ca493 tailscale: update to 1.88.3
Changelog: https://tailscale.com/changelog#2025-09-25

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-10-01 04:09:06 +03:00
Josef Schlehofer
c4a23ca996 umurmur: update to version 0.3.1
Makefile changes
----------------

1. The location of uMurmur binary was changed to /sbin
in release 0.3.1. See release notes [1]

2. I need to specify location of the library file instead of
the directory.

Fixes:
CMake Warning at src/CMakeLists.txt:44 (target_link_libraries):
  Target "umurmurd" requests linking to directory
  "/build/staging_dir/target-powerpc_8548_musl/usr/lib".
  Targets may link only to libraries.  CMake is dropping the item.

CMake Warning at src/CMakeLists.txt:44 (target_link_libraries):
  Target "umurmurd" requests linking to directory
  "/build/staging_dir/target-powerpc_8548_musl/usr/lib".
  Targets may link only to libraries.  CMake is dropping the item.

Because of these two warnings, the build fails with
undefined references to
protobuf-c symbols (e.g. protobuf_c_message_get_packed_size).

Patches
-------

Removed all of them, because they are included in
the upstream source code.

[1] https://github.com/umurmur/umurmur/releases/tag/v0.3.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-09-30 17:51:38 +02:00
Ted Hess
c48ddeb5a5 xmlrpc-c: [Security] Remove obsolete "-internal" variant
Closes #26263
Remove myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>
2025-09-30 08:02:27 -04:00
Daniel Golle
d6a3943cc4 nfs-kernel-server: fix recursive Kconfig dependencies
Move CONFLICTS definition to the respective v4 packages to avoid
creating a recursive dependency.

Fixes: ee3b06e42 ("nfs-kernel-server: provide a NFSv3 and NFSv4 daemon")
Fixes: #27555
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-09-29 21:06:56 +01:00
Tianling Shen
768d1f40ac v2ray-core: Update to 5.39.0
Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.39.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-29 20:17:35 +08:00
Tianling Shen
894ae1dd03 cloudflared: Update to 2025.9.1
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.9.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-29 19:56:28 +08:00
Tianling Shen
aeb47bc70f rclone: Update to 1.71.1
Release note: https://github.com/rclone/rclone/releases/tag/v1.71.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-29 19:55:58 +08:00