Commit Graph

34589 Commits

Author SHA1 Message Date
Lukas Voegl
d6a08b5ff1 libjcat: update to 0.2.3
- New CLI build option
- Enable ed25519 by default

Release notes: https://github.com/hughsie/libjcat/releases/tag/0.2.3

Signed-off-by: Lukas Voegl <lvoegl@tdt.de>
2025-09-09 22:02:07 +03:00
Tianling Shen
f7df64100d dufs: Update to 0.45.0
Removed upstreamed patches.

Release note: https://github.com/sigoden/dufs/releases/tag/v0.45.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-09 21:14:51 +08:00
Szabolcs Hubai
7dee0d0937 snapcast: fix compilation with boost 1.89.0
Boost upgrade hit Snapcast again: badaix/snapcast#1413

This patch is based on commit badaix/snapcast@d2e1635ebd ("Fix
building with boost v1.89.0").

Refs: 965dc7088e ("boost: Updates package to version 1.89.0")

Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
2025-09-09 12:57:14 +08:00
Szabolcs Hubai
3aef4a36a3 snapcast: fix compilation with boost 1.88.0
Boost upgrade hit Snapcast hard again: the process needs to be updated!

This patch is a patchset from badaix/snapcast@develop.
It is based on the following upstream commits:
badaix/snapcast@901b79a213 ("Build failure with boost 1.88.0 #1367")
badaix/snapcast@ffb086b4b3 ("Define BOOST_PROCESS_VERSION=1 globally")
badaix/snapcast@c37a76a4ab ("Add missing includes")
badaix/snapcast@571f6a8f69 ("Include process v1 headers for Boost version >= v1.88.0")

Refs: 3585ddfc44 ("boost: Updates package to version 1.88.0")

Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
2025-09-09 12:57:14 +08:00
Szabolcs Hubai
a84e684f5e snapcast: fix compilation with boost 1.87.0
After revisiting the PR, it didn't even compile because of commit
c50de920a2 ("boost: Updates package to version 1.87.0").

Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
2025-09-09 12:57:14 +08:00
Szabolcs Hubai
eeb8d131fc snapcast: add package snapserver and snapclient
Snapcast [1] is a multiroom client-server audio player, where all
clients are time synchronized with the server to play perfectly synced
audio.

It's not a standalone player, but an extension that turns your existing
audio player into a Sonos-like multiroom solution.
Audio is captured by the server and routed to the connected clients.
Several players can feed audio to the server in parallel and clients can
be grouped to play the same audio stream.
One of the most generic ways to use Snapcast is in conjunction with the
music player daemon (MPD) [2] or Mopidy [3].

The inclusion starts with version 0.28.0 because of OpenSSL dependency
issues of version 0.29.0. Newer versions (e.g. 0.32.3, see [4])
with optional OpenSSL support, will be incorporated with flavours,
like "-mini" and "-full" in the upcoming PRs.
More about this topic please check the inclusion PR at [5]!

[1]: https://github.com/badaix/snapcast
[2]: http://www.musicpd.org/
[3]: https://www.mopidy.com/
[4]: https://github.com/badaix/snapcast/blob/develop/changelog.md
[5]: https://github.com/openwrt/packages/pull/23956#discussion_r2330463363

Fixes: #23924
Suggested-by: Tianling Shen <cnsztl@immortalwrt.org>
Suggested-by: George Sapkin <george@sapk.in>
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
2025-09-09 12:57:14 +08:00
Szabolcs Hubai
e5a64aadca snapcast: add Snapcast from badaix/snapos as is
Add Snapcast package files as is from
29a5daebb0/openwrt/snapcast

Co-authored-by: badaix <johannes.pohl@badaix.de>
Co-authored-by: David Andreoletti <david@andreoletti.net>
Co-authored-by: luciferin <40036150+hunterzero99@users.noreply.github.com>
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
2025-09-09 12:57:14 +08:00
Rosen Penev
c2c210fd42 sumo: add missing fmt dependency
Apparently it's used by sumo.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-09-08 15:36:13 +03:00
Florian Eckert
f9e7e2db94 unzip: add valid patche headers and missing CVE informations
This commit adds a valid git patch header for each patch, so that
additional information can be stored. This is in this case and 'CVE:' tag.
This can be used by CVE scanner to find out if the patch fixes a CVE.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-08 09:23:42 +02:00
Florian Eckert
5237ebf95e atftp: bump PKG_RELEASE
Bump PKG_RELEASE by one.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-08 09:20:43 +02:00
Florian Eckert
8132457ddd atftp: add patch to fix build error
This patch fixes the following compilation build error for gcc14:

tftpd_pcre.c:109:37: error: passing argument 1 of 'pcre2_substring_list_free_8' from incompatible p
  109 |           pcre2_substring_list_free((const PCRE2_UCHAR **)substrlist);
      |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                                     |
      |                                     const PCRE2_UCHAR8 ** {aka const unsigned char **}
In file included from tftpd_pcre.h:24,
                 from tftpd_pcre.c:35:

I have also submitted the change to the upstream project:
https://github.com/madmartin/atftp/pull/2

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-08 09:20:43 +02:00
Florian Eckert
62dfcf026f atftp: add patch to fix build warning
This patch fixes the following compilation build warning:

logger.c:117:47: warning: format '%li' expects argument of type 'long int', but argument 7 has type
  117 |                fprintf(log_fp, "%s %s %s[%d.%li]: %s\n", time_buf, hostname,
      |                                             ~~^
      |                                               |
      |                                               long int
  118 |                        log_ident, getpid(), pthread_self(), message);
      |                                             ~~~~~~~~~~~~~~
      |                                             |
      |                                             pthread_t {aka struct __pthread *}
logger.c:124:47: warning: format '%li' expects argument of type 'long int', but argument 7 has type
  124 |                fprintf(stderr, "%s %s %s[%d.%li]: %s\n", time_buf, hostname,
      |                                             ~~^
      |                                               |
      |                                               long int
  125 |                        log_ident, getpid(), pthread_self(), message);
      |                                             ~~~~~~~~~~~~~~
      |                                             |
      |                                             pthread_t {aka struct __pthread *}

I have also submitted the change to the upstream project:
https://github.com/madmartin/atftp/pull/2

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-08 09:20:43 +02:00
John Audia
a75e0a6db9 snort3: update to 3.9.5.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.9.5.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-09-07 23:15:29 +03:00
John Audia
257e2fc38a snort3: fix logic in gpertools-runtime depends
The logic in e57cc9898a was flawed causing
gperftools-runtime to fail to get detected when building resulting in:
...
ninja: Entering directory `/scratch/union/build_dir/target-x86_64_glibc/snort3-3.9.1.0'
ninja: error: '/scratch/union/staging_dir/target-x86_64_glibc/usr/lib/libtcmalloc.so', needed by 'src/snort', missing and no known rule to make it
make[2]: *** [Makefile:161: /scratch/union/build_dir/target-x86_64_glibc/snort3-3.9.1.0/.built] Error 1

It was missed due testing in build root that already had gperftools-runtime
built only discovered when building from a clean build root.

This commit fixes this flaw.

Test:
cat <<EOF > .config
CONFIG_TARGET_x86=y
CONFIG_TARGET_x86_64=y
CONFIG_TARGET_x86_64_DEVICE_generic=y
CONFIG_PACKAGE_snort3=y
EOF

make defconfig
grep gperftools-run .config
CONFIG_PACKAGE_gperftools-runtime=y

cat <<EOF > .config
CONFIG_TARGET_qoriq=y
CONFIG_TARGET_qoriq_generic=y
CONFIG_TARGET_qoriq_generic_DEVICE_watchguard_firebox-m300=y
CONFIG_PACKAGE_snort3=y
EOF

make defconfig
grep gperftools-run .config

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-09-07 20:02:06 +03:00
Tianling Shen
23475cb50e openlist: Update to 4.1.2
Release note: https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-07 20:09:10 +08:00
Tianling Shen
526eed02bc xray-core: Update to 25.9.5
Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.9.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-07 20:08:16 +08:00
Tianling Shen
a4e99f964d v2ray-core: Update to 5.38.0
Release note: https://github.com/v2fly/v2ray-core/releases/tag/v5.38.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-07 20:07:56 +08:00
Tianling Shen
3eb22bc1f8 v2raya: Update to 2.2.7.1
Release note: https://github.com/v2rayA/v2rayA/releases/tag/v2.2.7.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-07 20:07:22 +08:00
Tianling Shen
9690cb87d1 v2ray-geodata: Update to latest version
Update all geodata.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-07 20:07:02 +08:00
Rosen Penev
a8d300ad67 libconfig: update to 1.8.1
Fixes compilation with GCC 15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-09-07 14:31:34 +08:00
Michel Promonet
dd436c9f27 v4l2loopback: update to version 0.15.1
update to v4l2loopback 0.15.1

Signed-off-by: Michel Promonet <michel.promonet@free.fr>
2025-09-07 01:49:22 +03:00
Michael Heimpold
69e9d5c560 php8: update to 8.4.12
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.12

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-09-06 20:11:29 +02:00
Carl-Daniel Hailfinger
a80cc41f20 realtek-poe: increase version to 1.3
* Add support for RTL8238B

Signed-off-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
2025-09-06 03:35:17 +08:00
Nuno Gonçalves
50add41033 esp2net: bump to 2025-09-02
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2025-09-05 16:58:29 +08:00
Hannu Nyman
2e2cc335a6 sing-box: Properly set only the full variant as default
Adjust the variant definition so that DEFAULT_VARIANT is only applied
to the full variant.
Set the title of the full variant to 'full' for menuconfig.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-09-04 22:14:27 +03:00
Wesley Gimenes
ae6fd69de5 gihub: fix PR template broken URL
changes the relative URL in the PR template to an absolute URL
to resolve a "Not Found" error.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
2025-09-04 11:16:08 +02:00
Florian Eckert
fd4eafd956 modemmanager: bump PKG_RELEASE
Bump PKG_RELEASE number.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:35:09 +02:00
Florian Eckert
246506690f modemmanager: always reset the init_eps if not configured
The initial EPS is stored on the modem side. When establishing a connection,
it must therefore be deleted if no EPS has been configured. This is because
the system does not know whether one was configured previously.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:35:09 +02:00
Florian Eckert
f49138b564 modemmanager: add missing ppp ifname option value
The pppd supports the option to configure the name of the network interface
at startup using the ifname option.

The pppd can overwrite the name of the network interface at startup using
the 'ifname' configuration option. If this option is not specified, the new
network interface is created according to the following scheme:
ppp<number>, e.g. ppp0, ppp1 and so on. This can therefore change with
every start if the number has been already assigned to another ppp connection.

In order to always get the same interface name with the modemmanger proto via
ppp, it is created according to the new scheme by setting the 'ifname':
ppp-<uci network interface name>, e.g. ppp-wwan.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:35:09 +02:00
Florian Eckert
71dbf1cc0d keepalived: add enabled option
To prevent the keepalived service from starting if there is no valid
configuration yet, the new option enabled is added. This must be set to
true for keepalived to start.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:34:13 +02:00
Florian Eckert
1d79439834 keepalived: only add content to config file if needed
Only add the first two pieces of information to the configuration file if
there is a valid '/etc/config/keepalived'.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:34:13 +02:00
Florian Eckert
9db0eab9c5 keepalived: enable reproducible-build
Before keepalived version '2.3.0' the compilation was not reproducable
because the compile date and other information has been added to the binary.

Starting with version '2.3.0', there is a new compilation option
'--enable-reproducible-build' that makes the binary reproducible.

The data that prevented this has been moved to a separate file,
'/etc/keepalived/keepalived.config-opts'.

This commit enables the reproducable build.

[1] 30d2f75978

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:34:13 +02:00
Florian Eckert
5d8cf24665 stunnel: update version to 5.75
Bugfixes:
* Fixed infinite loop triggered by OCSP URL parsing errors (thx to Richard Könning for reporting).
* Fixed OPENSSL_NO_OCSP build issues (thx to Dmitry Mostovoy for reporting).
* Fixed default curve selection in FIPS mode with OpenSSL 3.4+.
* Fixed tests with modern Python versions.
* Fixed tests with multiple OpenSSL versions installed.

Features:
* Added provider URI support for "cert" and "key" options.
* Added new "CAstore" service-level option (OpenSSL 3.0+).
* Added "provider" (OpenSSL 3.0+), "providerParameter" (OpenSSL 3.5+), and "setEnv" global options.
* Key file/URI path added to passphrase prompt on Unix.
* PKCS#11 provider installed on Windows.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:32:22 +02:00
Florian Eckert
88844e4552 stunnel: update version to 5.74
Bugfixes:
* Fixed a stapling cache deallocation crash.
* Fixed "redirect" with protocol negotiation.

Features:
* "protocolHost" support for "socks" protocol clients.
* More detailed logs in OpenSSL 3.0 or later.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:32:22 +02:00
Florian Eckert
9d640d8da8 stunnel: update version to 5.73
Bugfixes
* Fixed a memory leak while reloading stunnel.conf sections with
  "client=yes" and "delay=no".
* Fixed TIMEOUTocsp with values greater than 4.
* Fix the IPv6 test on a non-IPv6 machine.

Features
* HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation
* OCSP stapling fetches moved away from server threads.
* improved client-side session resumption.
* Added support for the mimalloc allocator.
* Check for protocolHost moved to configuration file processing for the
  client-side CONNECT protocol.
* Clarified some confusing OpenSSL's certificate verification error messages.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-04 08:32:22 +02:00
Satadru Pramanik, DO, MPH, MEng
b3098fe68a acme-common: cleanup acme start crontab migration
The '/etc/init.d/acme start' crontab migration
should also delete the existing
'/etc/init.d/acme start' line.

Otherwise, on every sysupgrade that carries
forward existing configurations, a new
'0 0 * * * /etc/init.d/acme renew' line is
added to the crontab.

Furthermore, do not add an 'acme renew' crontab
line if it already exists.

Signed-off-by: Satadru Pramanik, DO, MPH, MEng <satadru@gmail.com>
2025-09-03 23:25:08 +02:00
Eric Fahlgren
96ab3378d0 owut: update to 2025.09.03
Bug fixes:
    efahl/owut@5743eea3bc owut: suppress all but json output when using dump
    efahl/owut@efe39e2e38 owut: handle sigint (ctrl-c) properly
Enhancements:
    efahl/owut@49e9bce7b8 owut: provide download progress for slow connections

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-09-03 17:22:53 -03:00
Aleksey Vasilenko
dea6fe132c lksctp-tools: update to 1.0.21
update to 1.0.21

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2025-09-03 19:48:34 +03:00
John Audia
465eddb46d gperftools: update to 2.17.2
Bump to latest release and removed upstreamed patch.

Resulting libs give a fully functional snort3 which was built against
this new version.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150 based box)

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-09-03 19:47:26 +03:00
Miroslav Lichvar
26812701e4 chrony: update to 4.8
Update chrony to 4.8 and configure chronyc to drop root privileges by
default.

Release notes: https://chrony-project.org/news.html#_27_aug_2025_chrony_4_8_released

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2025-09-03 19:46:53 +03:00
Fabian Groffen
75a96faba7 mwan3: bump PKG_RELEASE
- fix some problems with GNU sed/grep
- add IPv6-PD src_ip logic

Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
2025-09-03 15:42:20 +02:00
Fabian Groffen
575db9300a mwan3: init.d/mwan3: fix GNU grep warning about stray \
GNU grep complains:
  grep: warning: stray \ before :

Drop the \, confirmed with busybox grep backslash is non-significant
(the output is the same).

Closes: https://github.com/openwrt/packages/issues/25198
Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
2025-09-03 15:42:20 +02:00
Fabian Groffen
47fd548a71 mwan3: common.sh: fix src_ip detection for ipv6-PD
IPv6 via PPPoE often receives a prefix, not an address. In that case
mwan3_get_src_ip would not find an address and fall back to ::.  However
in case of multiple IPv6 upstreams, this no longer means a ping (such as
done by uptime check) succeeds, for there are multiple addresses.

With this, mwan3 can effectively load-balance/fail-over on a PPPoE IPv6
prefix and a secondary (LTE) acquired /64 without immediately disabling
the IPv6 prefix interface as soon as the secondary IPv6 interface comes
up.

I think this change is also a fix to #26690
but I'm not 100% sure of that.

Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
2025-09-03 15:42:20 +02:00
Fabian Groffen
f933e028f5 mwan3: common.sh: fix sed syntax for GNU sed
`pq' yields with GNU sed:
  sed: -e expression #1, char 15: extra characters after command
so, make q a separate command instead.

busybox accepts this too, and still returns only the first match (q
quits processing)

Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
2025-09-03 15:42:20 +02:00
Van Waholtz
16ada8307b sing-box: add variant tiny
The tiny version disables tailscale by default for small package size.
OpenWrt also has the tailscale package as an alternative. We prefer
to keep the base version has the same build tags with the upstream
releases for compatibility.

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
2025-09-02 07:13:44 +03:00
Anton P.
28ac7b8dc1 sing-box: Update to 1.12.4
changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.4

Signed-off-by: Anton P. <dragunap@gmail.com>
2025-09-01 19:48:31 +03:00
Luiz Angelo Daros de Luca
59880e81a6 ruby: update to 3.3.9
3.3.9 release includes the following security fix of default gems:

- CVE-2025-24294: Possible Denial of Service in resolv gem

And the following fixes for build issues:

- GCC 15.1
- Visual Studio 2022 Version 17.14

3.3.7 and 3.3.8 are routine update that includes minor bug fixes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-09-01 19:46:45 +03:00
Tianling Shen
7be94fac37 libtorrent-rasterbar: update boost dependencies
libtorrent only links to boost headers since boost 1.69.
Remove boost-system from the dependencies and add boost as build
dependency.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-31 22:29:35 +08:00
Gregory Gullin
2d05ae0b4e micro: add new package
Modern and intuitive terminal-based text editor

https://micro-editor.github.io

Co-authored-by: Wesley Gimenes <wehagy+github@gmail.com>
Signed-off-by: Gregory Gullin <garuwex@gmail.com>
2025-08-31 14:14:23 +03:00
Aleksey Vasilenko
55404adb91 squid: update to 7.1
- Use GitHub for sources URL
- Remove autoreconf fixup (it works out-of-the-box)
- Remove squid-mod-cachemgr package since cachemgr.cgi was removed upstream
- Rename ac_cv_epoll_works to squid_cv_epoll_works to follow upstream
- Don't customize target CFLAGS and LDFLAGS (they work as is)
- Remove nettle configure patch - upstream handles it correctly now
- Remove dummy comment in config menu

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2025-08-31 15:52:27 +08:00