aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | gost_engine: switch to local tarballsRosen Penev2024-04-20
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Avoids PKG_UNPACK hacks. Added PKG_LICENSE_FILES. Reordered variables for consistency between packages. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | python-lxml: bump to version 5.2.1Alexandru Ardelean2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | Also added python-cython/host as a build dependency. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | | usbmuxd: fix tethering not working after iPhone restartGeorgi Valkov2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the iPhone restarts while the USB cable is still connected, tethering does not work. This can be fixed by reconnecting. Fix: if the hotplug.d script detects that carrier is disabled (no communication), the USB link is reset, and then the usbmuxd service is restarted. Tethering starts even before the iPhone is unlocked. As a side effect, if tethering is not enabled, the iPhone will ding a second time after 5 seconds. Add dependency on usbutils for usbreset, remove dependency on librt. [1] https://github.com/libimobiledevice/usbmuxd/issues/218 [2] https://github.com/openwrt/openwrt/issues/12566#issuecomment-2066305622 Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
* | | | mtd-rw: update version to latest masterRosen Penev2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove local patch as upstream has a different solution applied. Use PKG_SOURCE_DATE to get rid of weird apk version. Remove various variables that are default anyway. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | banip: update 0.9.5-2Dirk Brenken2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixed possible Set search race condition (initiated from LuCI frontend) * fixed the "no result" Set search problem in LuCI * removed abandoned feeds: spamhaus edrop (was merged with spamhaus drop) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | nginx: bump to 1.25.5 releaseChristian Marangi2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump nginx to 1.25.5 release. Patch automatically refreshed with make package/nginx/refresh. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | uwsgi: update Maintainer nameChristian Marangi2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | Update maintainer name with real name for Christian Marangi. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | uwsgi: bump to latest 2.0.25.1 releaseChristian Marangi2024-04-21
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | Bump to latest 2.0.25.1 release Drop upstream PCRE2 patch and alarm memory leak fix. Rework and refresh patch due to release bump. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | eza: update to 0.18.11Jonas Jelonek2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | changelogs: 0.18.10: https://github.com/eza-community/eza/releases/tag/v0.18.10 0.18.11: https://github.com/eza-community/eza/releases/tag/v0.18.11 Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
* | | libmraa: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. This backports a patch from upstream git. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | xxhash: build with cmakeRosen Penev2024-04-20
| | | | | | | | | | | | | | | | | | Faster. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | xxhash: switch to local git tarballsRosen Penev2024-04-20
| | | | | | | | | | | | | | | | | | Smaller and avoids having to use PKG_UNPACK. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | tini: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. This fixes compilation with musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | Merge pull request #23969 from dibdot/curlJosef Schlehofer2024-04-20
|\ \ \ | | | | | | | | curl: fix/bump PKG_RELEASE, remove maintainer
| * | | curl: fix/bump PKG_RELEASE, remove maintainerDirk Brenken2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * make PKG_RELEASE numeric again * made a release bump due to a newly added patch (see https://github.com/openwrt/packages/commit/de4ef9d169a182350796afca778742bf68052af4 for details) * remove maintainer (as requested in #23890 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | Merge pull request #23963 from dibdot/banIPDirk Brenken2024-04-20
|\ \ \ \ | | | | | | | | | | banip: release 0.9.5-1
| * | | | banip: release 0.9.5-1Dirk Brenken2024-04-20
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * added a DDoS protection rules in a new pre-routing chain to prevent common ICMP, UDP and SYN flood attacks and drop spoofed tcp flags & invalid conntrack packets, flood tresholds are configured via 'ban_icmplimit' (default 10/s), 'ban_synlimit' (default 10/s) and 'ban_udplimit' (default 100/s) * the new pre-routing rules are tracked via named nft counters and are part of the standard reporting, set 'ban_logprerouting' accordingly * block countries dynamically by Regional Internet Registry (RIR)/regions, e.g. all countries related to ARIN. Supported service regions are: AFRINIC, ARIN, APNIC, LACNIC and RIPE, set 'ban_region' accordingly * it's now possible to always allow certain protocols/destination ports in wan-input and wan-forward chains, set 'ban_allowflag' accordingly - e.g. ' tcp 80 443-445' * filter/convert possible windows line endings of external feeds during processing * the cpu core autodetection is now limited to max. 16 cores in parallel, set 'ban_cores' manually to overrule this limitation * set the default nft priority to -100 for banIP input/forward chains (pre-routing is set to -150) * update readme * a couple of bugfixes & performance improvements * removed abandoned feeds: darklist, ipblackhole * added new feeds: becyber, ipsum, pallebone, debl (changed URL) * requires a LuCI frontend update as well (separate PR/commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | geoip-shell: remove extra r from PKG_RELEASEHannu Nyman2024-04-20
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | Remove the unnecessary 'r' from PKG_RELEASE as it is added automatically by the build system to the final versioning. (Current version leads into 'geoip-shell_0.5-rr2_all.ipk') Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | ntpd: update to version 4.2.8p17Paul Donald2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also some spell fixes for README.md Drop patch-0001 - ntpd >= 4.2.8p16 patched this behaviour. See: https://bugs.ntp.org/show_bug.cgi?id=3741 (and the linked diff there) https://git.nwtime.org/websites/ntpwww/commit/d2a7faef2fea5f10b28cc2ee1d842e4b241f414f Signed-off-by: Paul Donald <newtwen@gmail.com>
* | | udpspeeder: use local tarballsRosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | Simpler, smaller, and avoids PKG_UNPACK. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | lua-eco: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-19
| | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | rtty: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-19
| | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | yara: update to 4.5.0Rosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | Move away from codeload for smaller and better tarballs. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | tailscale: Update to 1.64.1Zephyr Lykos2024-04-19
| | | | | | | | | | | | | | | | | | <https://github.com/tailscale/tailscale/releases/v1.64.1> Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | socat: fix compile error when ccache is enabledkrant2024-04-19
| | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | ibrcommon: remove basenameRosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | Can be replaced with regular C++. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | rsync: support xxhash and lz4Maxim Storchak2024-04-19
| | | | | | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | | Merge pull request #23943 from rsalvaterra/tor-bumpRui Salvaterra2024-04-19
|\ \ \ | | | | | | | | tor: update to 0.4.8.11 stable
| * | | tor: update to 0.4.8.11 stableRui Salvaterra2024-04-16
| | |/ | |/| | | | | | | | | | | | | | | | | | | Minor release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | Merge pull request #23821 from friendly-bits/add_geoip-shellJo-Philipp Wich2024-04-19
|\ \ \ | | | | | | | | geoip-shell: add package
| * | | geoip-shell: add packageAnton Khazan2024-04-16
| |/ / | | | | | | | | | | | | | | | | | | Adds the geoip-shell package to OpenWrt. geoip-shell is a flexible geoip blocker for Linux with a user-friendly command-line interface. Signed-off-by: Anton Khazan <antonk.d3v@gmail.com>
* | | Merge pull request #23939 from commodo/python-updates1Alexandru Ardelean2024-04-19
|\ \ \ | | | | | | | | django,django-restframework: bump versions
| * | | django-restframework: bump to version 3.15.1Alexandru Ardelean2024-04-16
| | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
| * | | django: bump to version 5.0.4Alexandru Ardelean2024-04-16
| |/ / | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | Merge pull request #23955 from mhei/php8-update-to-8.3.6Michael Heimpold2024-04-19
|\ \ \ | | | | | | | | php8: update to 8.3.6
| * | | php8: update to 8.3.6Michael Heimpold2024-04-17
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2024-1874 - CVE-2024-2756 - CVE-2024-2757 - CVE-2024-3096 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | v2ray-geodata: Update to latest versionTianling Shen2024-04-19
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | v2ray-geodata: make PKG_RELEASE numeric againTianling Shen2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the documentation[1] 'PKG_RELEASE' should be a number, so polulate the APK-style 'r' via 'VERSION' instead. 1. https://openwrt.org/docs/guide-developer/packages#buildpackage_variables Fixes: 30796c59485b ("v2ray-geodata: use APK compatible version schema") Reported-by: Sean Khan <datapronix@protonmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | curl: fix SSL init with mbedtls 3.6Felix Fietkau2024-04-18
| | | | | | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* | | libssh: update to version 0.10.6, fix build with mbedtls 3.6Felix Fietkau2024-04-18
| | | | | | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* | | Merge pull request #23953 from commodo/cython-update1Josef Schlehofer2024-04-18
|\ \ \ | | | | | | | | python-cython: bump to version 3.0.10
| * | | python-cython: bump to version 3.0.10Alexandru Ardelean2024-04-17
| |/ / | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | python-jinja2: create /host targetMarcus Folkesson2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | Make the python-jinja2/host target available for the build environment to be used with e.g. the PKG_BUILD_DEPENDS list. This is needed for an upcoming package (libcamera). Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
* | | python-yaml: create /host targetMarcus Folkesson2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | Make the python-yaml/host target available for the build environment to be used with e.g. the PKG_BUILD_DEPENDS list. This is needed for an upcoming package (libcamera). Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
* | | nginx: Use zst + APK style packaging for modulesSean Khan2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Generates git tarballs in the new APK style format: Note that `SOURCE_DATE` was added and need to be updated as the commit date of the commit hash Before: ``` nginx-mod-geoip2-1cabd8a1f68ea3998f94e9f3504431970f848fbf.tar.xz nginx-mod-headers-more-bea1be3bbf6af28f6aa8cf0c01c07ee1637e2bd0.tar.xz nginx-mod-brotli-25f86f0bac1101b6512135eac5f93c49c63609e3.tar.xz nginx-mod-rtmp-f0ea62342a4eca504b311cd5df910d026c3ea4cf.tar.xz nginx-mod-ts-ef2f874d95cc75747eb625a292524a702aefb0fd.tar.xz nginx-mod-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.xz nginx-mod-lua-c89469e920713d17d703a5f3736c9335edac22bf.tar.xz nginx-mod-lua-resty-core-2e2b2adaa61719972fe4275fa4c3585daa0dcd84.tar.xz nginx-mod-lua-resty-lrucache-52f5d00403c8b7aa8a4d4f3779681976b10a18c1.tar.xz nginx-mod-dav-ext-f5e30888a256136d9c550bf1ada77d6ea78a48af.tar.xz nginx-mod-ubus-b2d7260dcb428b2fb65540edb28d7538602b4a26.tar.xz ``` After: ``` nginx-mod-geoip2-2020.01.22~1cabd8a1.tar.zst nginx-mod-headers-more-2022.07.17~bea1be3b.tar.zst nginx-mod-brotli-2020.04.23~25f86f0b.tar.zst nginx-mod-rtmp-2018.12.07~f0ea6234.tar.zst nginx-mod-ts-2017.12.04~ef2f874d.tar.zst nginx-mod-naxsi-2022.09.14~d714f163.tar.zst nginx-mod-lua-2023.08.19~c89469e9.tar.zst nginx-mod-lua-resty-core-2023.09.09~2e2b2ada.tar.zst nginx-mod-lua-resty-lrucache-2023.08.06~52f5d004.tar.zst nginx-mod-dav-ext-2018.12.17~f5e30888.tar.zst nginx-mod-ubus-2020.09.06~b2d7260d.tar.zst ``` Run tested: aarch64, Dynalink DL-WRX36, Master Branch Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | | nginx: autoload dynamic modulesSean Khan2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In current setup, dynamic modules are not autoloaded, requiring users to create and load additional config files. We should assume that if a user installs additional modules, they want them 'on' by default. This commit does the following: 1.) generates a module load config in '/etc/nginx/modules.d' with the format '${module_name}'.module (i.e. /etc/nginx/modules.d/ngx_http_geoip2.module) 2.) deletes previous module conf for 'luci' /etc/nginx/modules.d/luci.module if it exists, this will prevent 'module already loaded' errors. The following is a portion of the final output when using the default uci template `/etc/nginx/uci.conf.template` (via nginx-util): ``` nginx -T -c '/etc/nginx/uci.conf' load_module /usr/lib/nginx/modules/ngx_http_brotli_filter_module.so; load_module /usr/lib/nginx/modules/ngx_http_brotli_static_module.so; load_module /usr/lib/nginx/modules/ngx_http_dav_ext_module.so; load_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so; load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so; load_module /usr/lib/nginx/modules/ngx_http_lua_module.so; load_module /usr/lib/nginx/modules/ngx_http_naxsi_module.so; load_module /usr/lib/nginx/modules/ngx_http_ts_module.so; load_module /usr/lib/nginx/modules/ngx_http_ubus_module.so; load_module /usr/lib/nginx/modules/ngx_rtmp_module.so; load_module /usr/lib/nginx/modules/ngx_stream_module.so; load_module /usr/lib/nginx/modules/ngx_stream_geoip2_module.so; ``` Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | | nginx: fix geoip2 dependency on mod ngx_streamSean Khan2024-04-18
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since the geoip2 package contains both `http` and `stream` versions. It requires the module `ngx_stream` be installed and loaded and produces the error: ``` 2024/04/12 18:38:18 [emerg] 4402#0: dlopen() "/usr/lib/nginx/modules/ngx_stream_geoip2_module.so" failed (Error relocating /usr/lib/nginx/modules/ngx_stream_geoip2_module.so: ngx_stream_complex_value: symbol not found) in /etc/nginx/module.d/ngx_stream_geoip2.module:1 nginx: configuration file /etc/nginx/uci.conf test failed ``` Add dependency so it's built at build time and installed automatically by `opkg` Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | Merge pull request #23879 from TDT-AG/pr/20240411-ucitrackFlorian Eckert2024-04-16
|\ \ | | | | | | keepalived: remove file sync handling for ucitrack
| * | keepalived: remove file sync handling for ucitrackFlorian Eckert2024-04-16
|/ / | | | | | | | | | | | | The ucitrack file hanlding was converted to json. Therefore this is not needed anymore. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | Merge pull request #23925 from stangri/master-pbrStan Grishin2024-04-15
|\ \ | | | | | | pbr: bugfix: fix IPv6 interface errors