aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | uwsgi: update Maintainer nameChristian Marangi2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update maintainer name with real name for Christian Marangi. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | | uwsgi: bump to latest 2.0.25.1 releaseChristian Marangi2024-04-21
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump to latest 2.0.25.1 release Drop upstream PCRE2 patch and alarm memory leak fix. Rework and refresh patch due to release bump. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | eza: update to 0.18.11Jonas Jelonek2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changelogs: 0.18.10: https://github.com/eza-community/eza/releases/tag/v0.18.10 0.18.11: https://github.com/eza-community/eza/releases/tag/v0.18.11 Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
* | | | libmraa: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. This backports a patch from upstream git. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | xxhash: build with cmakeRosen Penev2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | Faster. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | xxhash: switch to local git tarballsRosen Penev2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | Smaller and avoids having to use PKG_UNPACK. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | tini: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. This fixes compilation with musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | Merge pull request #23969 from dibdot/curlJosef Schlehofer2024-04-20
|\ \ \ \ | | | | | | | | | | curl: fix/bump PKG_RELEASE, remove maintainer
| * | | | curl: fix/bump PKG_RELEASE, remove maintainerDirk Brenken2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * make PKG_RELEASE numeric again * made a release bump due to a newly added patch (see https://github.com/openwrt/packages/commit/de4ef9d169a182350796afca778742bf68052af4 for details) * remove maintainer (as requested in #23890 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #23963 from dibdot/banIPDirk Brenken2024-04-20
|\ \ \ \ \ | | | | | | | | | | | | banip: release 0.9.5-1
| * | | | | banip: release 0.9.5-1Dirk Brenken2024-04-20
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * added a DDoS protection rules in a new pre-routing chain to prevent common ICMP, UDP and SYN flood attacks and drop spoofed tcp flags & invalid conntrack packets, flood tresholds are configured via 'ban_icmplimit' (default 10/s), 'ban_synlimit' (default 10/s) and 'ban_udplimit' (default 100/s) * the new pre-routing rules are tracked via named nft counters and are part of the standard reporting, set 'ban_logprerouting' accordingly * block countries dynamically by Regional Internet Registry (RIR)/regions, e.g. all countries related to ARIN. Supported service regions are: AFRINIC, ARIN, APNIC, LACNIC and RIPE, set 'ban_region' accordingly * it's now possible to always allow certain protocols/destination ports in wan-input and wan-forward chains, set 'ban_allowflag' accordingly - e.g. ' tcp 80 443-445' * filter/convert possible windows line endings of external feeds during processing * the cpu core autodetection is now limited to max. 16 cores in parallel, set 'ban_cores' manually to overrule this limitation * set the default nft priority to -100 for banIP input/forward chains (pre-routing is set to -150) * update readme * a couple of bugfixes & performance improvements * removed abandoned feeds: darklist, ipblackhole * added new feeds: becyber, ipsum, pallebone, debl (changed URL) * requires a LuCI frontend update as well (separate PR/commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | geoip-shell: remove extra r from PKG_RELEASEHannu Nyman2024-04-20
| |/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove the unnecessary 'r' from PKG_RELEASE as it is added automatically by the build system to the final versioning. (Current version leads into 'geoip-shell_0.5-rr2_all.ipk') Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | ntpd: update to version 4.2.8p17Paul Donald2024-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also some spell fixes for README.md Drop patch-0001 - ntpd >= 4.2.8p16 patched this behaviour. See: https://bugs.ntp.org/show_bug.cgi?id=3741 (and the linked diff there) https://git.nwtime.org/websites/ntpwww/commit/d2a7faef2fea5f10b28cc2ee1d842e4b241f414f Signed-off-by: Paul Donald <newtwen@gmail.com>
* | | | udpspeeder: use local tarballsRosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | Simpler, smaller, and avoids PKG_UNPACK. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | lua-eco: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | rtty: Fix compilation with musl libc 1.2.5Hauke Mehrtens2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | Support POSIX basename used in musl libc 1.2.5. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | yara: update to 4.5.0Rosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | Move away from codeload for smaller and better tarballs. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | tailscale: Update to 1.64.1Zephyr Lykos2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | <https://github.com/tailscale/tailscale/releases/v1.64.1> Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | | socat: fix compile error when ccache is enabledkrant2024-04-19
| | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | ibrcommon: remove basenameRosen Penev2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | Can be replaced with regular C++. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | rsync: support xxhash and lz4Maxim Storchak2024-04-19
| | | | | | | | | | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | | | Merge pull request #23943 from rsalvaterra/tor-bumpRui Salvaterra2024-04-19
|\ \ \ \ | | | | | | | | | | tor: update to 0.4.8.11 stable
| * | | | tor: update to 0.4.8.11 stableRui Salvaterra2024-04-16
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | Minor release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | | Merge pull request #23821 from friendly-bits/add_geoip-shellJo-Philipp Wich2024-04-19
|\ \ \ \ | | | | | | | | | | geoip-shell: add package
| * | | | geoip-shell: add packageAnton Khazan2024-04-16
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | Adds the geoip-shell package to OpenWrt. geoip-shell is a flexible geoip blocker for Linux with a user-friendly command-line interface. Signed-off-by: Anton Khazan <antonk.d3v@gmail.com>
* | | | Merge pull request #23939 from commodo/python-updates1Alexandru Ardelean2024-04-19
|\ \ \ \ | | | | | | | | | | django,django-restframework: bump versions
| * | | | django-restframework: bump to version 3.15.1Alexandru Ardelean2024-04-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
| * | | | django: bump to version 5.0.4Alexandru Ardelean2024-04-16
| |/ / / | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | | Merge pull request #23955 from mhei/php8-update-to-8.3.6Michael Heimpold2024-04-19
|\ \ \ \ | | | | | | | | | | php8: update to 8.3.6
| * | | | php8: update to 8.3.6Michael Heimpold2024-04-17
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2024-1874 - CVE-2024-2756 - CVE-2024-2757 - CVE-2024-3096 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | v2ray-geodata: Update to latest versionTianling Shen2024-04-19
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | v2ray-geodata: make PKG_RELEASE numeric againTianling Shen2024-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the documentation[1] 'PKG_RELEASE' should be a number, so polulate the APK-style 'r' via 'VERSION' instead. 1. https://openwrt.org/docs/guide-developer/packages#buildpackage_variables Fixes: 30796c59485b ("v2ray-geodata: use APK compatible version schema") Reported-by: Sean Khan <datapronix@protonmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | curl: fix SSL init with mbedtls 3.6Felix Fietkau2024-04-18
| | | | | | | | | | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* | | | libssh: update to version 0.10.6, fix build with mbedtls 3.6Felix Fietkau2024-04-18
| | | | | | | | | | | | | | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* | | | Merge pull request #23953 from commodo/cython-update1Josef Schlehofer2024-04-18
|\ \ \ \ | | | | | | | | | | python-cython: bump to version 3.0.10
| * | | | python-cython: bump to version 3.0.10Alexandru Ardelean2024-04-17
| |/ / / | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | | python-jinja2: create /host targetMarcus Folkesson2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the python-jinja2/host target available for the build environment to be used with e.g. the PKG_BUILD_DEPENDS list. This is needed for an upcoming package (libcamera). Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
* | | | python-yaml: create /host targetMarcus Folkesson2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the python-yaml/host target available for the build environment to be used with e.g. the PKG_BUILD_DEPENDS list. This is needed for an upcoming package (libcamera). Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
* | | | nginx: Use zst + APK style packaging for modulesSean Khan2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Generates git tarballs in the new APK style format: Note that `SOURCE_DATE` was added and need to be updated as the commit date of the commit hash Before: ``` nginx-mod-geoip2-1cabd8a1f68ea3998f94e9f3504431970f848fbf.tar.xz nginx-mod-headers-more-bea1be3bbf6af28f6aa8cf0c01c07ee1637e2bd0.tar.xz nginx-mod-brotli-25f86f0bac1101b6512135eac5f93c49c63609e3.tar.xz nginx-mod-rtmp-f0ea62342a4eca504b311cd5df910d026c3ea4cf.tar.xz nginx-mod-ts-ef2f874d95cc75747eb625a292524a702aefb0fd.tar.xz nginx-mod-naxsi-d714f1636ea49a9a9f4f06dba14aee003e970834.tar.xz nginx-mod-lua-c89469e920713d17d703a5f3736c9335edac22bf.tar.xz nginx-mod-lua-resty-core-2e2b2adaa61719972fe4275fa4c3585daa0dcd84.tar.xz nginx-mod-lua-resty-lrucache-52f5d00403c8b7aa8a4d4f3779681976b10a18c1.tar.xz nginx-mod-dav-ext-f5e30888a256136d9c550bf1ada77d6ea78a48af.tar.xz nginx-mod-ubus-b2d7260dcb428b2fb65540edb28d7538602b4a26.tar.xz ``` After: ``` nginx-mod-geoip2-2020.01.22~1cabd8a1.tar.zst nginx-mod-headers-more-2022.07.17~bea1be3b.tar.zst nginx-mod-brotli-2020.04.23~25f86f0b.tar.zst nginx-mod-rtmp-2018.12.07~f0ea6234.tar.zst nginx-mod-ts-2017.12.04~ef2f874d.tar.zst nginx-mod-naxsi-2022.09.14~d714f163.tar.zst nginx-mod-lua-2023.08.19~c89469e9.tar.zst nginx-mod-lua-resty-core-2023.09.09~2e2b2ada.tar.zst nginx-mod-lua-resty-lrucache-2023.08.06~52f5d004.tar.zst nginx-mod-dav-ext-2018.12.17~f5e30888.tar.zst nginx-mod-ubus-2020.09.06~b2d7260d.tar.zst ``` Run tested: aarch64, Dynalink DL-WRX36, Master Branch Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | | | nginx: autoload dynamic modulesSean Khan2024-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In current setup, dynamic modules are not autoloaded, requiring users to create and load additional config files. We should assume that if a user installs additional modules, they want them 'on' by default. This commit does the following: 1.) generates a module load config in '/etc/nginx/modules.d' with the format '${module_name}'.module (i.e. /etc/nginx/modules.d/ngx_http_geoip2.module) 2.) deletes previous module conf for 'luci' /etc/nginx/modules.d/luci.module if it exists, this will prevent 'module already loaded' errors. The following is a portion of the final output when using the default uci template `/etc/nginx/uci.conf.template` (via nginx-util): ``` nginx -T -c '/etc/nginx/uci.conf' load_module /usr/lib/nginx/modules/ngx_http_brotli_filter_module.so; load_module /usr/lib/nginx/modules/ngx_http_brotli_static_module.so; load_module /usr/lib/nginx/modules/ngx_http_dav_ext_module.so; load_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so; load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so; load_module /usr/lib/nginx/modules/ngx_http_lua_module.so; load_module /usr/lib/nginx/modules/ngx_http_naxsi_module.so; load_module /usr/lib/nginx/modules/ngx_http_ts_module.so; load_module /usr/lib/nginx/modules/ngx_http_ubus_module.so; load_module /usr/lib/nginx/modules/ngx_rtmp_module.so; load_module /usr/lib/nginx/modules/ngx_stream_module.so; load_module /usr/lib/nginx/modules/ngx_stream_geoip2_module.so; ``` Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | | | nginx: fix geoip2 dependency on mod ngx_streamSean Khan2024-04-18
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since the geoip2 package contains both `http` and `stream` versions. It requires the module `ngx_stream` be installed and loaded and produces the error: ``` 2024/04/12 18:38:18 [emerg] 4402#0: dlopen() "/usr/lib/nginx/modules/ngx_stream_geoip2_module.so" failed (Error relocating /usr/lib/nginx/modules/ngx_stream_geoip2_module.so: ngx_stream_complex_value: symbol not found) in /etc/nginx/module.d/ngx_stream_geoip2.module:1 nginx: configuration file /etc/nginx/uci.conf test failed ``` Add dependency so it's built at build time and installed automatically by `opkg` Signed-off-by: Sean Khan <datapronix@protonmail.com>
* | | Merge pull request #23879 from TDT-AG/pr/20240411-ucitrackFlorian Eckert2024-04-16
|\ \ \ | | | | | | | | keepalived: remove file sync handling for ucitrack
| * | | keepalived: remove file sync handling for ucitrackFlorian Eckert2024-04-16
|/ / / | | | | | | | | | | | | | | | | | | The ucitrack file hanlding was converted to json. Therefore this is not needed anymore. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | Merge pull request #23925 from stangri/master-pbrStan Grishin2024-04-15
|\ \ \ | | | | | | | | pbr: bugfix: fix IPv6 interface errors
| * | | pbr: bugfix: fix IPv6 interface errorsStan Grishin2024-04-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update license to AGPL-3.0-or-later * rename pbr_get_gateway to pbr_get_gateway4 for better readability * improve IPv6 "gateway" detection/display on start * prevent IPv6 interface errors on start * revert release format Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | squid: update to 6.9krant2024-04-14
| | | | | | | | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | | cloudflared: Update to 2024.4.0Tianling Shen2024-04-15
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | dnsproxy: Update to 0.69.2Tianling Shen2024-04-15
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | erlang: update to 26.2.4krant2024-04-14
|/ / / | | | | | | | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | | hcxdumptool: Update to 6.3.4dracode2024-04-13
| | | | | | | | | | | | | | | | | | | | | Version 6.3.4 has some important fixes for the OpenWrt community. This version properly supports Big-Endian systems (which are many); the previous OpenWrt packaged version crashed on such systems. Signed-off-by: dracode <github@dragonbyte.org>