aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* python-packaging: Update to 23.0, add host buildJeffery To2023-03-31
| | | | | | | | This also adds myself as maintainer, and marks the target package as BROKEN (for now) as the update requires proper support for pyproject.toml-based builds. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-installer: Add host-only packageJeffery To2023-03-31
| | | | | | | | | | From the README: This is a low-level library for installing a Python package from a wheel distribution. It provides basic functionality and abstractions for handling wheels and installing packages from wheels. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-flit-core: Add host-only packageJeffery To2023-03-30
| | | | | | | | | From the README: This provides a PEP 517 build backend for packages using Flit. The only public interface is the API specified by PEP 517, at flit_core.buildapi. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python: Add pyproject.toml-based builds for host Python packagesJeffery To2023-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using pip to install host packages with pyproject.toml-based (PEP 517) builds is problematic: * If build isolation is used, pip will create an isolated build environment, install any build dependencies for the requested package, then build the requested package. It does not appear currently possible to have pip install the build dependencies with hash-checking mode enabled[1]. * If build isolation is not used, any build dependencies must be installed in the build environment before invoking pip to build the requested package[2]. This would require creating a package dependency resolution system to install build dependencies, and any dependencies of dependencies, in the correct order. * It is very difficult to patch the packages installed by pip. This adds a new include file (python3-host-build.mk) with recipes to install host Python packages with pyproject.toml-based builds. This is backwards-compatible with packages that require running setup.py. Besides addressing the above issues (the OpenWrt build system already resolves dependencies between packages, checks all source downloads against known hashes, and supports patching packages), host packages also: * Capture package licensing and maintainer information * Enable uscan checking for package updates/CVEs * Are a known concept for OpenWrt packagers/developers The existing functionality of using host pip to install packages will remain for now, but should be considered deprecated and expected to be removed in the future. This also updates Py3Build/CheckHostPipVersionMatch for the case where the host-pip-requirements directory does not exist or is empty. [1]: https://pip.pypa.io/en/stable/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020 [2]: https://pip.pypa.io/en/stable/cli/pip_install/#cmdoption-no-build-isolation Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python: Unset Python environment variablesJeffery To2023-03-30
| | | | | | | | | | | This will prevent the user's environment variables from affecting host Python, removing the need to manually override these variables. It is also not necessary to set PYTHONPATH (when not working on target Python packages) because the given directories are already included in Python's search path by default. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #20700 from jefferyto/ci-autoremoveJeffery To2023-03-30
|\ | | | | CI: Add --autoremove, ignore removal errors
| * CI: Add --autoremove, ignore removal errorsJeffery To2023-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 836b4e1c734f9705bfd8db0da0c04214c2647932 added --force-removal-of-dependent-packages but it does not do what the commit message says it does. When package A depends on package B (package B is a dependency of package A; package A is a dependent of package B), trying to remove package B while package A is installed will result in an error. Adding --force-removal-of-dependent-packages in this case will cause the removal of package B and package A (package B's dependent). But in the case of the CI testing step, it is package A that is being installed and removed. Removing package A with --force-removal-of-dependent-packages will not cause package B (package A's dependency) to be removed. This adds --autoremove to actually remove the package's dependencies. This also ignores any errors returned by opkg remove as --autoremove can sometimes falsely return an error[1]. [1]: https://github.com/openwrt/openwrt/issues/12241 Fixes: 836b4e1c734f ("github-ci: add --force-removal-of-dependent-packages") Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | Merge pull request #20693 from jefferyto/golang-1.20.2Jeffery To2023-03-30
|\ \ | | | | | | golang: Update to 1.20.2, refresh patch
| * | golang: Update to 1.20.2, refresh patchJeffery To2023-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fixes for: * 1.20.1: * CVE-2022-41722: path/filepath: path traversal in filepath.Clean on Windows * CVE-2022-41723: net/http: avoid quadratic complexity in HPACK decoding * CVE-2022-41724: crypto/tls: large handshake records may cause panics * CVE-2022-41725: net/http, mime/multipart: denial of service from excessive resource consumption * 1.20.2: * CVE-2023-24532: crypto/elliptic: specific unreduced P-256 scalars produce incorrect results Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | haproxy: update to v2.6.12Christian Lachner2023-03-29
| | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | Merge pull request #20729 from pprindeville/beanstalkd-update-1.13Philip Prindeville2023-03-29
|\ \ \ | | | | | | | | beanstalkd: Update to 1.13
| * | | beanstalkd: Update to 1.13Philip Prindeville2023-03-26
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #20733 from pprindeville/perl-text-csv_xs-update-1.50Philip Prindeville2023-03-29
|\ \ \ \ | | | | | | | | | | perl-text-csv_xs: Update to 1.50
| * | | | perl-text-csv_xs: Update to 1.50Philip Prindeville2023-03-26
| |/ / / | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #20732 from pprindeville/perl-cgi-update-4.56Philip Prindeville2023-03-29
|\ \ \ \ | | | | | | | | | | perl-cgi: Update to 4.56
| * | | | perl-cgi: Update to 4.56Philip Prindeville2023-03-26
| |/ / / | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | transmission-web-control: fix web interface files pathMikhail Zhilkin2023-03-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Transmission 4.0 web interface files changed from /web to /public_html This fixes https://github.com/openwrt/packages/issues/20737 Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com>
* | | | Merge pull request #20725 from pprindeville/fix-indent-strongswanPhilip Prindeville2023-03-28
|\ \ \ \ | | | | | | | | | | strongswan: Fix indent for hw_offload, interface, priority
| * | | | strongswan: simplify indentationPhilip Prindeville2023-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow passing multiple config lines with the same indent level. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
| * | | | strongswan: Fix indent for hw_offload, interface, priorityPhilip Prindeville2023-03-26
| |/ / / | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | cni-plugins-nft: update to 1.0.12Oskari Rauta2023-03-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - docs: update install instructions - upgrade to go1.19 Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | gummiboot: update to 48.1Oskari Rauta2023-03-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - disable man pages generation Mostly bug fixes. Full list of changes: https://cgit.freedesktop.org/gummiboot/log/ Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | Merge pull request #20600 from oskarirauta/curlEtienne Champetier2023-03-27
|\ \ \ \ | | | | | | | | | | curl: enable unix sockets by default
| * | | | curl: enable unix sockets by defaultOskari Rauta2023-03-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - changed Config.in to enable unix sockets support by default - release number bumped Description: socket support is very handy when communicating with various REST APIs. Size increases are very small, nearly unnoticiable. Tested-by: Stan Grishin <stangri@melmac.ca> Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | natmap: update to 20230322Ray Wang2023-03-27
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ray Wang <r@hev.cc>
* | | | | sing-box: update to 1.2.1Van Waholtz2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | Changelogs: https://github.com/SagerNet/sing-box/releases/tag/v1.2.1 Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | | yq: Update to 4.33.1Tianling Shen2023-03-27
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | netbird: update to 0.14.5Oskari Rauta2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes Management - Introduce a new ACL engine based on Rego (Open Policy Agent) for firewall control - Personal access tokens generation as a first iteration toward public API release - Add Keycloak support as an IDP manager Agent - Introduce a Firewall interface to apply granular access control (e.g., connection direction, port, or protocol level) - Make the agent run on Android (mobile support) Changelog - Feat rego default policy - Don't drop Rules from file storage after migration to Policies - Add version info command to signal server - Feat firewall controller interface - Adding Personal Access Token generation - Exchange proxy mode via signal - Fix connstate indication - Mobile - PAT persistence - Add Keycloak Idp Manager - Adjustments for the change server flow - Disable peer expiration of peers added with setup keys - Add JWT middleware validation failure log Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | | docker-compose: Update to version 2.17.2Javier Marcet2023-03-27
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | Merge pull request #20708 from commodo/sudoAlexandru Ardelean2023-03-27
|\ \ \ \ \ | | | | | | | | | | | | sudo: bump to verison 1.9.13p3
| * | | | | sudo: bump to verison 1.9.13p3Alexandru Ardelean2023-03-23
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | | | | borgbackup: bump to 1.2.4Julien Malik2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
* | | | | | borgbackup: add missing dependenciesJulien Malik2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The initial package submission was missing some required and optional dependencies due to lack of testing on a system without any python related packages pre-installed. Some optional but highly recommended dependencies were discovered with the stdlib module as described in: https://github.com/openwrt/packages/blob/392a68e24774294590abf9c08ea1832f2cee190d/lang/python/README.md Fixes #20441 Signed-off-by: Julien Malik <julien.malik@paraiso.me>
* | | | | | banip: update to 0.8.2-4Dirk Brenken2023-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixed a race condition if the service is in a disabled state Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | samba4: update to 4.18.0Andrew Sim2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samba release history: https://www.samba.org/samba/history/samba-4.18.0.html Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
* | | | | | dnsproxy: Update to 0.48.2Tianling Shen2023-03-27
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | xz: update to version 5.4.2Hannu Nyman2023-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to 5.4.2 (keep in sync with xz in tools/) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | haproxy: update to v2.6.11Christian Lachner2023-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - This release includes a fix for an OOB write. The official notes do not list a CVE entry but I guess there is a chance for security implications - See changes: http://git.haproxy.org/?p=haproxy-2.6.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | syncthing: Update to 1.23.2Tianling Shen2023-03-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixed build with go 1.20 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | Merge pull request #20709 from akosiaris/collectd_fix_ltq-dsl_compilationHannu Nyman2023-03-24
|\ \ \ \ \ \ | | | | | | | | | | | | | | collectd: Fix ltq-dsl compilation errors
| * | | | | | collectd: Fix ltq-dsl compilation errorsAlexandros Kosiaris2023-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Per https://github.com/openwrt/packages/pull/19396#issuecomment-1480780893 prefix ltq-dsl-app with a @ character to fix the compilation issues witnessed in PR #19396 and #20662 Signed-off-by: Alexandros Kosiaris <akosiaris@gmail.com>
* | | | | | | sing-box: update to 1.2.0Van Waholtz2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelogs: https://github.com/SagerNet/sing-box/releases/tag/v1.2.0 Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | | | | rust: fix build with glibcTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Don't set musl-specific options/ldflags when using glibc. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | rust: enable use of prebuilt llvm toolchainTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | llvm-bpf is not ready for generic usage, so use prebuilt llvm toolchain provided by the rust project to speedup build (~1hour faster). Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | ripgrep: adapt new rust build standardTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | maturin: Update to 0.14.15Tianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixed a build error: > unresolved import `time::macros` Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | maturin: adapt new rust build standardTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While at it, move maturin out of rust directory. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | rust: refactor build helperTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added new RustBinPackage, RustBinHostBuild wrapper. Added new RUST_PKG_FEATURES flag. Moved CARGO_HOME to STAGING_DIR_HOSTPKG. Overrode default Build/Compile and Host/Compile to Cargo build. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | rust: remove useless target dependencies and configurationTianling Shen2023-03-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | They are for the target build which is not supported yet, drop them. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | rust: remove useless tarball packageTianling Shen2023-03-24
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These tarball cannot be reused, so simply drop them. Also move cargo config to a file instead of using echo command. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>