Commit Graph

35573 Commits

Author SHA1 Message Date
Philip Prindeville
6a9f2bcda7 isc-dhcp: don't die when a network restart happens
Our triggering code was using the logical network name and
not the ifname as required.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-02-11 11:02:24 -07:00
George Sapkin
e9e8502f78 golang: replace 1.25 with to 1.26.0
Replace golang1.25 with golang1.26 with version 1.26.0.

Update OS/arch combinations.

Bump bootstrap to 1.24.13.

Link: https://go.dev/doc/go1.26
Link: https://github.com/openwrt/packages/pull/28552
Signed-off-by: George Sapkin <george@sapk.in>
2026-02-11 13:24:21 +02:00
micpf
e1d680d19a modemmanager: fix netifd proto sim path
Use specific SIM path instead of 'any' when unlocking with PIN
code. This fixes PIN unlock issues on devices with multiple modems
where 'any' could select the wrong modem.

Bump modemmanager PKG_RELEASE

Signed-off-by: micpf <micpf@westermo.com>
2026-02-10 13:59:28 +01:00
Lin Fan
8ce03e3065 ddns-script: update namesilo.com
switch xml parser to xmllint because xmlstarlet is not available

Signed-off-by: Lin Fan <im.linfan@gmail.com>
2026-02-10 09:00:22 +01:00
Nate Robinson
a490e8badd lf: update to r41
https://github.com/gokcehan/lf/releases/tag/r41

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
2026-02-10 09:42:01 +02:00
Bjørn Mork
0e11c771a7 conserver: update to version 8.3.0
version 8.3.0 (February 2, 2026):
        - Don't use `true` variable (Stanisław Pitucha <stan.pitucha@envato.com>)
        - Add VPATH to Makefile.in (saproj <saproj@gmail.com>)
        - FileUnopen: always return a valid file descriptor (Jeff Moyer <jmoyer@redhat.com>)
        - fix SEGFAULT on early exit with IPv6 enabled (Bjørn Mork <bjorn@mork.no>)
        - In AddrsMatch, keep copies of addrinfos to free. (Darren Tucker <dtucker@dtucker.net>)
        - Increase buffer size for GSSAPI exchanges (Alexander Bokovoy <abokovoy@redhat.com>)
        - Show "(inactive)" rather than an invalid pty device name for ondemand consoles that
          are closed. Show "(inactive)" rather than "(null)" for ondemand consoles that have
          never been opened. (Greg Becker <becker.greg@att.net>)
        - Prevent spy-mode clients from being promoted to the attached/writable state. (Greg Becker <becker.greg@att.net>)
        - autoconf upgrade (Jörg Sommer <joerg@jo-so.de>)
        - reinitcheck allows time units (Jacek Tomasiak <jtomasiak@arista.com>)
        - reduce level of string alloc management debug messages (Greg A. Woods <woods@robohack.ca>)
        - fix bug with parser and "#" lines, fix debug output in ParseFile()
        - Fix clobbering of breaklist and replstring (Anton Lundin <glance@ac2.se>)
        - Use strcmp() rather than strcasecmp() to compare console names when reading the config
          file and creating the list of consoles. (Greg Becker <becker.greg@att.net>)
        - Added passwordfile config option (Jason Ni <jni@hudson-trading.com>)

Drop upstreamed patches:
  002-addrsmatch-freeaddrinfo.patch
  002-fix-SEGFAULT-on-early-exit-with-IPv6-enabled.patch

Signed-off-by: Bjørn Mork <bjorn@mork.no>
2026-02-09 21:35:19 +02:00
George Sapkin
e058c0dac3 mjpg-streamer: drop package
Based on the discussion in the previous PR, drop the package. Main source
has not been updated in 8 years and the fork in 5.

Link: https://github.com/openwrt/packages/pull/27878
Signed-off-by: George Sapkin <george@sapk.in>
2026-02-09 19:17:35 +02:00
Philip Prindeville
41838cd620 kea: make building with Openssl deprecated APIs off
Some of the X.509 API got retired in 3.0.0 so we should check
against the backward compatibility not being enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-02-09 10:09:39 -07:00
Martin Schiller
ff2027ffa9 rp-pppoe: fix pppoe-server init script
There were 2 missing "$" when options "maxsessions" and "optionsfile"
are checked for some content.

Also the local declaration of "optionsfile" was incorrect.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2026-02-09 14:40:21 +01:00
Florian Eckert
34d0684be1 ddns-scripts: remove postinst and prerm script call
For reasons that have not been investigated in detail, the package blocks
during 'postinst' with the new 'apk' backend when the package is installed
on the target.

After much back and forth, it turned out that the '/etc/init.d/ddns start'
command is responsible for this. The call is blocking.

The command '/etc/init.d/ddns enabled' in the 'postinst' also makes no sense
here, as it only checks whether the ddns service is enabled. The return value
is not checked at all. And the 'prerm' script is also not needed, as the
calls made there are implicitly called during package deinstallation.

Therefore, this commit removes the entire and not needed 'postinst' and
'prerm' script call.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-02-09 14:29:09 +01:00
Philip Prindeville
e885bdab7b wget: use explicit API version levels
Per Doug Freed's review comments.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-02-08 16:21:22 -07:00
Hauke Mehrtens
79d6046668 owut: activate by default in buildbot
This will activate owut in buildbot builds for targets with large flash
by default. This will integrate it into most images by default.

The buildbots already build LuCI with luci-app-attendedsysupgrade. This
adds ucode-mod-uclient and owut to the image.

These are the package sizes for mips_24kc:
29270 bin/packages/mips_24kc/packages/owut-2026.01.13~2526d84b-r1.apk
 5449 bin/packages/mips_24kc/base/ucode-mod-uclient-2026.01.31~931bbfeb-r1.apk

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-02-08 22:42:10 +01:00
Hannu Nyman
75458bf089 nano: update to 8.7.1
Update nano editor to version 8.7.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2026-02-08 20:53:39 +02:00
Philip Prindeville
ea3eb6f24e wget: build against Openssl w/o deprecated API
If you're building against 3.0.0 or later and you've defined
OPENSSL_NO_DEPRECATED, this breaks.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-02-08 11:38:17 -07:00
Philip Prindeville
d43dc6e98d wget: don't build http-ntml as it's deprecated
NTML uses DES and MD4, both of which are retired.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-02-08 11:38:17 -07:00
Dirk Brenken
2921e52cd8 adblock: update 4.5.1-2
* make sure to only return exactly one MAC address in the cgi

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-02-08 12:55:25 +01:00
Dirk Brenken
b39494cf3f adblock: release 4.5.1
* Remote DNS Allow: this additional firewall feature lets selected client devices
   temporarily bypass local DNS blocking and use an external, unfiltered DNS resolver.
* LuCI: new Firewall options for remote Access
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-02-08 10:28:17 +01:00
Tianling Shen
fb11ea7f23 v2raya: Update to 2.2.7.5
Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:26:08 +08:00
Tianling Shen
e664ab4bda openlist: Update to 4.1.10
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.10

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:25:33 +08:00
Tianling Shen
3c59d49b52 cloudflared: Update to 2026.1.2
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2026.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:25:05 +08:00
Tianling Shen
1f97ee00e2 yq: Update to 4.52.2
Release note: https://github.com/mikefarah/yq/releases/tag/v4.52.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:24:45 +08:00
Tianling Shen
be143e2f77 rclone: Update to 1.73.0
Release note: https://github.com/rclone/rclone/releases/tag/v1.73.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:24:02 +08:00
Tianling Shen
c863a4a5a8 xray-core: Update to 26.2.4
Release note: https://github.com/XTLS/Xray-core/releases/tag/v26.2.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:22:45 +08:00
Tianling Shen
44940c3ae7 v2ray-geodata: Update to latest version
Update all geodata.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:21:23 +08:00
Tianling Shen
e0efa48e6e dos2unix: Update to 7.5.4
2026-01-30: Version 7.5.4
  * Don't return an error code if a binary file is skipped.
    Reverting change in 7.5.3.
  * Refactored code.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:20:18 +08:00
Georgi Valkov
c913af4cfa ustreamer: update to 6.52
fix a build error when compiled with WITH_SETPROCTITLE=1
undefined reference to setproctitle_init

[1] https://github.com/openwrt/packages/pull/28472#issuecomment-3863583824

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2026-02-08 10:39:41 +02:00
Daniel Golle
c078d5761f transmission: update to 4.1.0
See release notes for more info on this new major release

https://github.com/transmission/transmission/releases/tag/4.1.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-02-07 19:18:03 +02:00
Daniel Golle
91e85bbbee libutp: update to 2024-11-16
transmission/libutp@490874c Merge pull request #17 from tearfur/malformed-logs
 transmission/libutp@2d29ce9 Merge pull request #18 from tearfur/ftbfs-log
 transmission/libutp@6c7ee3f Merge pull request #16 from brad0/openbsd_monotonic
 transmission/libutp@1e7e6c6 fix: FTBFS when `UTP_DEBUG_LOGGING` is defined
 transmission/libutp@eedd8b9 fix: malformed logs produced by `struct_utp_context::log()`
 transmission/libutp@14d6f57 Use monotonic clock on OpenBSD
 transmission/libutp@52645d6 chore: remove invalid assertion
 transmission/libutp@4ed4d43 refactor: use std::unordered_map instead of bespoke utpHashTable
 transmission/libutp@13545a9 fixup! chore: savepoint
 transmission/libutp@d0f70e6 chore: add code comments for new code that needs it
 transmission/libutp@b109597 chore: remove extra include string.h
 transmission/libutp@13b5cb4 chore: remove unnecessary #include utp_hash.h
 transmission/libutp@958758b copyediting: tab damage, constify
 transmission/libutp@165a316 refactor: replace UTPSocketHT method with one more narrowly-scoped
 transmission/libutp@9bbf6b3 perf: do not rebuild UTPSocketKey in LookupAdjacent
 transmission/libutp@a271636 chore: savepoint
 transmission/libutp@d339167 feat: make UTPSocketKey std::hash-friendly
 transmission/libutp@1354618 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@7480820 chore: remove redundant explicit types when invoking std::min, std::max
 transmission/libutp@3189aba chore: restore undefs
 transmission/libutp@1849bd1 chore: make vsc happy
 transmission/libutp@24c967b refactor: make explicit type for std::min, std::max
 transmission/libutp@1862df0 refactor: make explicit type for std::min, std::max
 transmission/libutp@8080115 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@2589200 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@09ef1be Fix build on *BSD (#10)
 transmission/libutp@4d4a3ce fixup! refactor: use std::vector instead of bespoke Array class
 transmission/libutp@1320d78 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@8bdf5e8 Try to reduce the number of CI builds
 transmission/libutp@4ec3c96 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@5820d8e Bump minimum CMake version to 3.12 to match Transmission (#9)
 transmission/libutp@d9d3754 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@9cb9f9c build: Require C11 (#5)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-02-07 19:18:03 +02:00
Daniel Golle
ea3ec746aa libdht: update to 2023-03-18
jech/dht@0bbb8f4 Full declaration of dht_uninit

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-02-07 19:18:03 +02:00
Daniel Golle
69620ea785 libdeflate: update to 1.25
ebiggers/libdeflate@c8c56a2 (tag: v1.25) v1.25
 ebiggers/libdeflate@095bcab cmake: make installed package relocatable
 ebiggers/libdeflate@7b9232c ci.yml: Use windows-latest for windows-visualstudio-build-and-test
 ebiggers/libdeflate@d65d5db Add link to SwiftDeflate wrapper
 ebiggers/libdeflate@6bb4936 lib/x86: drop any mention of `evex512`
 ebiggers/libdeflate@2a3762c lib/x86/cpu_features.h: drop evex512 on gcc-16

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-02-07 19:18:03 +02:00
John Audia
10b230f217 nfs-kernel-server: update to 2.8.5
Changelog: https://www.kernel.org/pub/linux/utils/nfs-utils/2.8.5/2.8.5-Changelog

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-02-07 19:17:04 +02:00
Nick Hainke
e87bcf506c expat: update to 2.7.4
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Fixes: CVE-2026-24515 CVE-2026-25210
Signed-off-by: Nick Hainke <vincent@systemli.org>
2026-02-07 19:16:38 +02:00
Georgi Valkov
ab7fbfd12a ustreamer: add package 6.51
With mjpg-streamer pending removal [1], it would be nice if we add
a compatible replacement which is under active development.

ustreamer offers a better performance, especially when the
camera supports MJPEG encoding in hardware.

The package already includes OpenWRT support files ./pkg/openwrt
but they needed heavy editing, so it is more efficient to copy
the scripts and configuration, instead of using patches.

Notable changes:
While the init.d script can run in the background when no camera is
connected, it is more efficient to indicate no active instances.
A hotplug script is introduced to start and stop the service when
cameras are added or removed.

If the configured format or encoding are unsupported, a compatible
alternative is automatically selected, so I changed the default
configuration to use MJPEG encoding in hardware for better performance.

HACKS:
MAKE_FLAGS += WITH_SETPROCTITLE=0
is added to workaround the following linker error:
undefined reference to setproctitle_init

This symbol is defined in libbsd, however adding the build dependency
does not resolve the error, because -lbsd is added conditionally, only
when uname -s contains linux. This is unreliable and fails when
cross-compiling on a macOS host. An upstream fix is needed.

An alternative is to use
PKG_UNPACK=$(HOST_TAR) -C $(PKG_BUILD_DIR) --strip=2 -xf $(DL_DIR)/$(PKG_SOURCE)
however this modifies the directory structure, so patches would need
path editing to maintain upstream compatibility.

TODO:
luci-app-mjpg-streamer which is also pending removal [2] is able to
open the HTTP stream from ustreamer. It would be nice to create
luci-app-ustreamer based on that.

[1] https://github.com/openwrt/packages/pull/28344
[2] https://github.com/openwrt/luci/pull/8221

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2026-02-07 12:25:12 +02:00
Michael Heimpold
849db7361d zabbix: fix no-configure build variant
When selecting only a package of "no-configure" build variant, e.g.
CONFIG_PACKAGE_zabbix-frontend-server=y
but not any other zabbix package, then the build fails.
The sources are not extracted and the install fails finally with:

make[4]: Entering directory '/srv/openwrt/openwrt-2.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[4]: *** No rule to make target 'install'.  Stop.
make[4]: Leaving directory '/srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[3]: *** [Makefile:522: /srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22/.built] Error 2

This PR fixes this by always running the standard Prepare stage,
but skip the Install one when nothing needs to be compiled.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2026-02-06 22:45:27 +01:00
Wei-Ting Yang
b54cc9b69e django: bump to version 6.0.2
Release notes:
https://docs.djangoproject.com/en/dev/releases/6.0/
https://docs.djangoproject.com/en/dev/releases/6.0.1/
https://docs.djangoproject.com/en/dev/releases/6.0.2/

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2026-02-06 19:59:56 +02:00
xiao bo
0644f5bd7e sing-box: update to 1.12.20
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.20

Signed-off-by: xiao bo <peterwillcn@gmail.com>
2026-02-06 19:10:52 +02:00
Florian Eckert
2b6adb9ae7 ddns-scripts: Fix hetzner install target file name
This was overlooked. Therefore, the package could not be built.

Fixes: e9fe0249f6 ("ddns-scripts: Fix Hetzner Cloud naming")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2026-02-06 10:57:44 +01:00
Bruce Chen
703a057ed3 aliyun-cli: update to 3.2.9
Changelog:
https://github.com/aliyun/aliyun-cli/releases/tag/v3.2.9

Signed-off-by: Bruce Chen <a805899926@gmail.com>
2026-02-06 11:28:50 +02:00
Stan Grishin
0666df9e69 pbr: update to 1.2.1-r87
Makefile:
* Remove installation of /usr/share/nftables.d/* files as they are no
  longer needed

Init script:
* bugfixes/more mature netifd extensions support
* refactor of the nft_file function and global variables it uses
* the "main" atomic nft file now includes creation of pbr chains and jumps
  from relevant fw4 chains to pbr chains
* more consistent use of "uplink" wording in the output and variable names
* implement resolver 'wait' call and use it before trying to resolve any
  policy entries
* major overhaul of the split uplink case (IPv4-only wan and IPv6-only
  wan6), should now create/use a single pbr_wan table for both legacy and
  IPv6 routing and the same marking chain
* updates to IDs and text of some error messages (needs luci app update)
* major speed improvements for service stop
* unify the cleanup_* functions into a single cleanup function
* reject creating/additions to nft sets for src_address entries as dnsmasq
  doesn't populate sets with local addresses
* minor bugfixes/code cleanups
* refactor processing of WG servers due to split uplink support (thanks
  @egc112!)
* clearer (hopefully) argument names for process_interface calls
* small improvements to status_service

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-02-05 13:06:55 -08:00
George Sapkin
ec04b18514 syncthing: bump to 2.0.14
Changelog: https://github.com/syncthing/syncthing/releases/tag/v2.0.14
Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:56 +02:00
George Sapkin
5065a2ff8f golang: bump 1.25 to 1.25.7
Fixes: CVE-2025-61732
Fixes: CVE-2025-68121
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.25.7+label%3ACherryPickApproved
Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:26 +02:00
George Sapkin
e013778bac golang: add support for release candidates
Support building release candidates by setting GO_VERSION_RC to the
release candidate number, e.g. GO_VERSION_RC:=2, and unsetting
GO_VERSION_PATCH.

Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:26 +02:00
George Sapkin
35303fb1ab golang: add missing 386 and arm64 suffixes
Add missing 386 and arm64 suffixes to -installsuffix so as not to
accidentally mix incompatible binaries.

Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:26 +02:00
George Sapkin
1eaa1f848b golang: use upstream OS/arch format
Use OS/arch format used by Go and reported by go tool dist list.

Update OS/arch combinations.

Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:26 +02:00
George Sapkin
c15e32426f yt-dlp: bump to 2026.02.04
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2026.02.04
Signed-off-by: George Sapkin <george@sapk.in>
2026-02-05 22:04:11 +02:00
Dirk Brenken
025c0c58b3 adblock: update 4.5.0-5
* add 'blocklist-referral' to the hagezi selection
* add minor report/map tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-02-05 16:13:56 +01:00
Stan Grishin
7fd0a6e15c adblock-fast: update to 1.2.1-r7
* switch from nslookup to resolveip and add dependencey
* fix/use new OutputFormatFilter names for all resolvers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-02-04 20:04:15 -08:00
Daniel F. Dickinson
ff7353dbbc zabbix: fix recursive depedency warning on build
The error in the #24828 patch series left Kconfig recursive depedency
error on zabbix-frontend-server. We fix this by update the database
depedencies on zabbix-frontend-server. Now, you must select the PHP8
database module you want _before_ zabbix-frontend-server will be
visible in menuconfig.

This is not a big problem, because zabbix-frontend-server already
depends on having php8 slected before the frontend can be built.

Closes: #28458

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-02-04 20:38:34 +01:00
Daniel F. Dickinson
b032682381 zabbix: fix package rename missed database config
Due to package renaming the selection of database for the server and
proxy was missing from the Kconfig menu. This caused build failures for
proxy and server.

We now fix that.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-02-04 20:38:34 +01:00
Daniel F. Dickinson
8bc0c6c7cf zabbix: fix compile skipped due to line continuation
Using line continuation (\\) in GNU Make \$(foreach ...) and
\$(call ...) resulted in the install section for many of the packages
not being defined. This resulted in 'skipping [package-name] no install
section' messages and no new package being generated.

We remove the line continuation from the parts foreach and call, in
ordeer to restore compilation and creation of packages.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2026-02-04 20:38:34 +01:00