aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | python-jsonschema: Add build dependenciesJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These will be required for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-incremental: Update to 22.10.0, redo patch, add host buildJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-exceptiongroup: Update to 1.1.1Jeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a build dependency that will be required for pyproject.toml-based builds. This also removes the run-time dependency on python3-attrs; there is no indication this package is required. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-docker: Add missing build dependencyJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-dns: Update to 2.3.0Jeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a build dependency that will be required for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-dbus-fast: Add build dependenciesJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These will be required for pyproject.toml-based builds. This also includes a patch to unpin the version requirement for setuptools, as the current in-repo version of setuptools does not fulfill this requirement, and there does not appear to be any specific reason why this version requirement is necessary. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-cryptography: Update patch to disable RustJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This extends the patch to also apply for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-bleak: Add build dependencyJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will be required for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-astral: Update to 3.2Jeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a build dependency that will be required for pyproject.toml-based builds. This also marks the package as BROKEN (for now) as it requires proper support for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | borgbackup: Add missing build dependenciesJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | setuptools-scm is a declared build dependency[1], and pkgconfig will allow setup to find the required libraries, replacing the need to set environment variables. [1]: https://github.com/borgbackup/borg/blob/1.2.4/setup.py#L313 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | python-pkgconfig: Add new host-only packageJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: pkgconfig is a Python module to interface with the pkg-config command line tool for Python 3.3+. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * | | | xxhash: Fix pkg-config metadata fileJeffery To2023-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, Build/InstallDev installs libxxhash.pc.in, which is the template for libxxhash.pc and does not contain the correct information. (pkg-config also does not recognize this file name.) This uses PKG_INSTALL:=1 so that libxxhash.pc is generated (by 'make install'). This also removes the need to override Build/Prepare by setting the correct command in PKG_UNPACK. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | coreutils: update to 9.3Georgi Valkov2023-05-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build system: Ubuntu Linux 22.04, macOS 12.6.5 Run-tested: x64, WRT3200ACM, TL-WR1043ND v4 [1] https://github.com/openwrt/packages/issues/20933 [2] https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62404 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* | | | | Merge pull request #20944 from stangri/master-https-dns-proxyStan Grishin2023-05-08
|\ \ \ \ \ | | | | | | | | | | | | https-dns-proxy: fixes/improvements
| * | | | | https-dns-proxy: fixes/improvementsStan Grishin2023-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * use shared memory to store output data * add family option to firewall json objects, due to reports that IPv6 hijacking doesn't work without explicit family declaration Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | Merge pull request #20942 from stangri/master-simple-adblockStan Grishin2023-05-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | simple-adblock: add family to firewall json objects
| * | | | | | simple-adblock: add family to firewall json objectsStan Grishin2023-05-07
| |/ / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | Merge pull request #20930 from stangri/master-pbrStan Grishin2023-05-08
|\ \ \ \ \ \ | |_|_|_|/ / |/| | | | | pbr: ipv6 & migration bugfixes
| * | | | | pbr: ipv6 & migration bugfixesStan Grishin2023-05-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * suppress RTNETLINK errors when inserting ipv6 routes * only display global scope IPv6 gateways in status/WebUI * stop and disable vpn-policy-routing when migrating Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | Merge pull request #20957 from jefferyto/golang-1.20.4Tianling Shen2023-05-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | golang: Update to 1.20.4
| * | | | | | golang: Update to 1.20.4Jeffery To2023-05-08
| | |_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fixes for: * CVE-2023-24539: html/template: improper sanitization of CSS values * CVE-2023-24540: html/template: improper handling of JavaScript whitespace * CVE-2023-29400: html/template: improper handling of empty HTML attributes Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | mwan3: bump PKG_VERSION to 2.11.7Anna Tikhomirova2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | | | mwan3: reset score to up+down on connectedFlorian Eckert2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Set the score value to the maximum value when the connected function is called. The same happens with a disconnected event, the score value is there set to zero. Suggested-by: Anna Tikhomirova <vamp@vampik.ru> Suggested-by: Maxim Mikityanskiy <maxtram95@gmail.com> Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | mwan3: refactoring mwan3track action handlingFlorian Eckert2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactoring the score handling, so that only one action could take place during run. The behaviour should be more comprehensible, since several score actions are not processed at the same time. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | banip: release 0.8.5-2Dirk Brenken2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixed a log parser regression introduced in latest 0.8.4 update Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | Merge pull request #20915 from mhei/open-plc-utils-updateMichael Heimpold2023-05-08
|\ \ \ \ \ \ | |/ / / / / |/| | | | | open-plc-utils: update to latest upstream version
| * | | | | open-plc-utils: update to latest upstream versionMichael Heimpold2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds support for QCA7006AQ chipset identification. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | crowdsec-firewall-bouncer: new upstream release version 0.0.26S. Brusch2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: S. Brusch <ne20002@gmx.ch> Maintainer: Kerma Gérald <gandalf@gk2.net> Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5 Update crowdsec-firewall-bouncer to latest upstream release version 0.0.26
* | | | | | snort3: update to 3.1.61.0John Audia2023-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream bump Removed upstreamed patch: 900-fix_build_for_archs_contain_plus.patch[1] 1. https://github.com/snort3/snort3/commit/4de62ca9b9bfea4049ebe373a07076284b121bfe Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | gnutls: update to v3.8.0Antonio Flores2023-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: https://github.com/openwrt/openwrt/issues/12542 The detailed list of changes follows: * Version 3.8.0 (released 2023-02-09) ** libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] ** libgnutls: C++ library is now header only. All definitions from gnutlsxx.c have been moved into gnutlsxx.h. Users of the C++ interface have two options: 1. include gnutlsxx.h in their application and link against the C library. (default) 2. include gnutlsxx.h in their application, compile with GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link against the C++ library. ** libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST priority modifier have been added to allow disabling of the status_request TLS extension in the client side. ** libgnutls: TLS heartbeat is disabled by default. The heartbeat extension in TLS (RFC 6520) is not widely used given other implementations dropped support for it. To enable back support for it, supply --enable-heartbeat-support to configure script. ** libgnutls: SRP authentication is now disabled by default. It is disabled because the SRP authentication in TLS is not up to date with the latest TLS standards and its ciphersuites are based on the CBC mode and SHA-1. To enable it back, supply --enable-srp-authentication option to configure script. ** libgnutls: All code has been indented using "indent -ppi1 -linux". CI/CD has been adjusted to catch regressions. This is implemented through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.yml’s commit-check. You may run devel/indent-gnutls to fix any indentation issues if you make code modifications. ** guile: Guile-bindings removed. They have been extracted into a separate project to reduce complexity and to simplify maintenance, see <https://gitlab.com/gnutls/guile/>. ** minitasn1: Upgraded to libtasn1 version 4.19. ** API and ABI modifications: GNUTLS_NO_STATUS_REQUEST: New flag GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member Signed-off-by: Antonio Flores <antflores627@gmail.com>
* | | | | | haproxy: update to v2.6.13Christian Lachner2023-05-07
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | cloudflared: Update to 2023.5.0Tianling Shen2023-05-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | smartdns: bump to 1.2023.42Nick Peng2023-05-07
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Nick Peng <pymumu@gmail.com>
* | | | banip: release 0.8.5-1Dirk Brenken2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add support for external allowlist URLs to reference additional IPv4/IPv6 feeds, set 'ban_allowurl' accordingly * make download retries in case of an error configurable, set 'ban_fetchretry' accordingly (default 5) * small fixes * readme update * LuCI update (separate commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | libxml2: remove - moved to OpenWrt main repoHannu Nyman2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove libxml2 that was moved into the main OpenWrt repo. Commit in OpenWrt: 9b0b46985c112c664354dc745d8cfb313166744b Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | gperf: remove - moved to OpenWrt main repoHannu Nyman2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove gperf that was moved into the main OpenWrt repo. Commit in OpenWrt: 2070a2ca27bdb2b1e4e1587274e192e42f247516 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | nginx: fix compilation error for nginx-fullChristian Marangi2023-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix compilation error for stream module not converted to use the PACKAGE config flag and a missing required dependency for the DAV ext module. Drop additional config for STREAM module since they are now included and built by default. Fixes: 65a676ed56fb ("nginx: introduce support for dynamic modules") Fixes: #20906 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | Merge pull request #20925 from jefferyto/python-hatchling-1.14.1Tianling Shen2023-05-06
|\ \ \ \ | | | | | | | | | | python-hatchling: Update to 1.14.1
| * | | | python-hatchling: Update to 1.14.1Jeffery To2023-05-04
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | rtl_433: update to 22.11Robert Högberg2023-05-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
* | | | | uwsgi: make LuCI workGlen Huang2023-05-05
| |_|/ / |/| | | | | | | | | | | | | | | | | | | LuCI is no longer powered by lua, but ucode Signed-off-by: Glen Huang <me@glenhuang.com>
* | | | Merge pull request #20912 from stangri/master-pbrStan Grishin2023-05-04
|\ \ \ \ | | | | | | | | | | pbr: update to 1.1.1-1
| * | | | pbr: update to 1.1.1-1Stan Grishin2023-05-01
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | *** MAKEFILE *** * remove libubus dependency as it was causing issues https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318 * move firewall hotplug directory/file creation out of default section into pbr and pbr-iptables packages sections in preparation for dropping it from pbr * fix no new line after output when uninstalling packages *** UCI-DEFAULTS *** * only add firewall include to firewall config if the include file exists * add shellcheck exception to netifd uci-defaults file *** SCRIPTS *** * more informative logging for firewall and iface hotplug scripts * more informative logging for firewall include script *** SERVICE *** * introduce lock-file to prevent package starting on external events if it hasn't been auto- or manually started before * use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02 * parse firewall WAN zone to append list of interfaces * append error and warning "arrays" with new messages * used shared memory to store the service output/logging messages * improve is_ovpn function to filter out false positives when interface names started with `tun` * introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config matches the device name in network config * introduce opkg_get_version to compare versions of principal and luci packages * better code to obtain AdGuardHome version with betas installed * optimize code and add better logging for errors when inserting policies with iptables * optimize code and add better logging for errors when inserting policies with nft * bugfix: insert policies in all specified protocols * bugfix: support using physical devices in policies in nft mode * bugfix: use iptPrefix, not nftPrefix in iptables commands * implement Tor support in nft mode * bugfix: fix spelling for User File Syntax error * restart service fully (instead of quick reload) for OpenVPN interface events, as the order/number of supported interfaces * more verbose output (showing handles) of status in nft mode * improve `icmp_interface`, `ignored_interface`, `supported_interface` validation regexes * improve `interface`, validation regex Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | banip: update 0.8.4-5Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix remaining small issues * standardize log wording * polished up for branch 23.x Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | banip: update 0.8.4-4Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add housekeeping to the autoallow function, only the current uplink will be held * fix small issues * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | mwan3: bump PKG_VERSION to 2.11.6Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of routes to mwan3_connected ipsetAnna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of routes to mwan3_connected ipset is broken. The ipset name was changed from mwan3_connected_v4/6 to mwan3_connected_ipv4/6, but this change was not reflected in mwan3rtmon. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | mwan3: bump PKG_VERSION to 2.11.5Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of iptables rules for mwan3 sticky rulesAnna Tikhomirova2023-05-04
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of iptables rules for mwan3 sticky rules is broken, resulting in non-working sticky rules. The required parameters for the function 'mwan3_set_sticky_iptables' were passed in the wrong order. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message * Quoting function arguments Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | tailscale: update to 1.40.0Zephyr Lykos2023-05-03
| | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
Powered by cgit, Themed by Ted Yin.