aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* simple-adblock: allow domains bugfix & canary domains supportStan Grishin2022-10-01
| | | | | | | | | | * fix bug in download_lists and adb_allow to prevent unintended exclisions from the block-lists of domains containing allowed domain. Fixes issue: https://github.com/stangri/source.openwrt.melmac.net/issues/160 * add support for returning NXDOMAIN/blocking iCloud & Mozilla canary domains, disabled by default Signed-off-by: Stan Grishin <stangri@melmac.ca>
* Merge pull request #19489 from stangri/master-https-dns-proxyStan Grishin2022-10-01
|\ | | | | https-dns-proxy: uci wrappers & iCloud canary domains
| * https-dns-proxy: uci wrappers & iCloud canary domainsStan Grishin2022-09-30
|/ | | | | | | | * switch to using uci wrappers instead of direct uci calls * add support for iCloud canary domains https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay Signed-off-by: Stan Grishin <stangri@melmac.ca>
* bandwidthd: fix format warningsRosen Penev2022-09-29
| | | | | | Should fix crashing errors under musl 1.2 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* docker-compose: Update to version 2.11.2Javier Marcet2022-09-29
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* Merge pull request #19447 from turris-cz/unboundJosef Schlehofer2022-09-29
|\ | | | | unbound: update to version 1.16.3
| * unbound: update to version 1.16.3Josef Schlehofer2022-09-25
| | | | | | | | | | | | | | | | | | Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3 - Fixes: CVE-2022-3204 Refreshed one patch Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | python3: use tools/expat for host buildRosen Penev2022-09-28
| | | | | | | | | | | | Oversight from when the expat host build was removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #19470 from rmilecki/ddns-scripts-code-cleanupRafał Miłecki2022-09-28
|\ \ | | | | | | ddns-scripts: clean up code a bit to make it easier to understand
| * | ddns-scripts: add explicit "-d" switch for Dry RunRafał Miłecki2022-09-28
| | | | | | | | | | | | | | | | | | | | | | | | It was a bit confusing to use *verbosity* level for Dry Run mode. Add explicity switch for it and designed DRY_RUN variable to make code easier to understand. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
| * | ddns-scripts: rename variable: s/ERR_UPDATE/RETRY_COUNT/Rafał Miłecki2022-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename variable to make code easier to understand. This variable specifies how many times in row ddns script tried to update IP without a success. Previous name ("ERR_UPDATE") didn't suggest it was for counting anything. It also didn't specify was error was it related to. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
| * | ddns-scripts: replace IP type (name) "local" with "current"Rafał Miłecki2022-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | Local suggests something related to the local network or available locally only. All that code related to the "local" IP was actually dealing with *current* device external IP address. Using name "current" should make code a bit easier to understand. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
| * | ddns-scripts: rename variable: s/retry_count/retry_max_count/Rafał Miłecki2022-09-27
|/ / | | | | | | | | | | | | | | | | Rename variable to make code easier to understand. This variable specifies how many times ddns script should try to send a request. Previous name ("retry_count") suggested it was for *counting* attempts. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | Merge pull request #19448 from stangri/master-simple-adblockStan Grishin2022-09-27
|\ \ | | | | | | simple-adblock: update to 1.9.1-1
| * | simple-adblock: update to 1.9.1-1Stan Grishin2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove obsolete block-lists from config * add removal of obsolete lists to config-update * add AdGuard team's block-list to config * improve allow command * improve nftset support * move config load to uci_load_validate, which required some code refactoring which looks dramatic, but isn't * always use dnsmasq_restart instead of dnsmasq_hup for all dns resolution options for dnsmasq Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | Merge pull request #19465 from TELUS-BBA/zabbix6.2Etienne Champetier2022-09-26
|\ \ \ | | | | | | | | zabbix: update to 6.2.3
| * | | zabbix: update to 6.2.3Scott Roberts2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | Refreshed patches. Signed-off-by: Scott Roberts <ttocsr@gmail.com>
* | | | Merge pull request #19460 from stangri/master-curlStan Grishin2022-09-26
|\ \ \ \ | | | | | | | | | | curl: bugfix: github source url
| * | | | curl: bugfix: github source urlStan Grishin2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes https://github.com/openwrt/packages/issues/19456 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | lua-eco: adapt SSL choice to libwolfsslcpu-cryptoEneas U de Queiroz2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libwolfsslcpu-crypto has to be taken into consideration when selecting the default SSL backend. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | | | Merge pull request #19446 from jamesmacwhite/mwan3-config-replace-google-dnsFlorian Eckert2022-09-26
|\ \ \ \ \ | | | | | | | | | | | | mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNS
| * | | | | mwan3: Switch default track_ip targets from Google DNS to Cloudflare DNSJames White2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
* | | | | | libs/libwebsockets: Update to 4.3.xKarl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes since 4.2 are extensive, as always. https://libwebsockets.org/git/libwebsockets/tree/changelog?h=v4.3-stable#n4 Eg, Adds CBOR, support for reduced memory CA verification, cookie jars, mqtt client gains qos2, mbedtls v3, fault injection apis, better support for event loops. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | lang: lua-penlight: update to 1.13.1Karl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These are bugfix and feature releases. Changes from 1.11->1.12: https://github.com/lunarmodules/Penlight/blob/master/CHANGELOG.md#1120-2022-jan-10 Changes from 1.12->1.13: https://github.com/lunarmodules/Penlight/blob/master/CHANGELOG.md#1130-2022-jul-22 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | libs/cjson: bump to 1.7.15Karl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix release. Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | pagekite: add patchs for 64bit timeKarl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Source: https://github.com/pagekite/libpagekite/pull/78 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | mosquitto: bump to 2.0.15Karl Palsson2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/ Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/ 2.0.15 is bigger security and bugfix release. 2.0.14 had a couple of minor changes and was skipped for OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | mosquitto: add missing 'persistence' section in configPtilopsis Leucotis2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence' section in config file. Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
* | | | | | tor: update to 0.4.7.9Nick Hainke2022-09-26
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | docker-compose: Update to version 2.11.1Javier Marcet2022-09-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | haproxy: Update HAProxy to v2.6.6Christian Lachner2022-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | Merge pull request #19455 from mhei/mmc-utils-updateMichael Heimpold2022-09-26
|\ \ \ \ \ | | | | | | | | | | | | mmc-utils: update to latest upstream revision
| * | | | | mmc-utils: update to latest upstream revisionMichael Heimpold2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | adblock: update 4.1.4-5Dirk Brenken2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * auto-whitelist ext. dns lookup domain * add public doh server blocklist source * whitespace fixes in adblock.sources Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | ffmpeg: update to 5.1.2John Audia2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump to latest upstream version Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | | | openblas: bump to version 0.3.21Alexandru Ardelean2022-09-25
| |_|_|_|/ |/| | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | tang: update directoryRosen Penev2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's no more cache. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Revert "jose: remove libjose"Rosen Penev2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 02d6c8346cfae7c2de456800a862a7dd90782858. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Revert "jose: fix static library usage"Rosen Penev2022-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit c61b70918b6c10f6fd726b098474736a7e0ae9cd. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #19439 from mhei/php8-more-extensions-19424Michael Heimpold2022-09-25
|\ \ \ \ \ | |_|/ / / |/| | | | php8-pecl-xdebug: add package (refs #19424)
| * | | | php8-pecl-xdebug: add package (refs 19424)Michael Heimpold2022-09-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | Merge pull request #19419 from james-mcguire/masterDirk Brenken2022-09-25
|\ \ \ \ \ | | | | | | | | | | | | adblock: add lightswitch05 source
| * | | | | adblock: add lightswitch05 blocklist sourceJames McGuire2022-09-24
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: James McGuire <jamesm51@gmail.com>
* | | | | | snowflake: run snowflake-proxy with procd-ujailDaniel Golle2022-09-25
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | snowflake-proxy doesn't write any files => run in read-only rootfs environment the process needs to read SSL certs but no other files => only exposed path is /etc/ssl/certificates (read-only) running as unpriviledged user with no additional capabilities => set no-new-privs bit By default procd-ujail also isolates the process by executing it in a separate new IPC and PID namespace. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | snowflake: add packageDaniel Golle2022-09-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package Tor's Snowflake system components so users can offer e.g. a standalone Snowflake proxy on their routers or other devices. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | poemgr: update to latest HEADDavid Bauer2022-09-24
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 8988247 Makefile: Enable warnings as errors (-Werror) aea39ca Makefile: Respect the CFLAGS and LDFLAGS that have been passed in 189594f poemgr: Fix compiler warnings in poemgr.c 0e1a8cf pd69104: Avoid self-induced pointer casts 2d53298 uswflex: Remove unused variables and declarations d345441 poemgr: Reorganize poemgr.h to remove forward declarations df1a7bc contrib: remove unneccessary functions.sh loading 056a6a9 poemgr: Fix name based profile selection b8f8f23 poemgr: prolong the power budget detection delay 9e8344a poemgr: configure power_budget to override detected limit Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | gatling: add package gatlingMartin Hübner2022-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Gatling is a high-performance webserver from fefe. It gives a fairly decent feature-set at really small size. And its fast. Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com> Signed-off-by: Martin Hübner <martin.hubner@web.de>
* | | | dnsproxy: Update to 0.45.0Tianling Shen2022-09-23
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | dnslookup: Update to 1.8.0Tianling Shen2022-09-23
| |/ / |/| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | glib2: backport locale fixRosen Penev2022-09-22
| | | | | | | | | | | | | | | | | | Fixes compilation with non English locale. Signed-off-by: Rosen Penev <rosenp@gmail.com>