aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | banip: release 0.9.4-1Dirk Brenken2024-03-02
|/ | | | | | | | | * add support for destination port & protocol limitations for external feeds (see readme for details), useful for lan-forward ad- or DoH-blocking, e.g. only tcp ports 80 and 443 * add turris sentinel blocklist feed * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* acme-common: simplify config exampleSergey Ponomarev2024-03-01
| | | | | | Make it more practical to easier get an idea Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* acme-acmesh: use validation_method option instead of guessingSergey Ponomarev2024-03-01
| | | | | | | | | | | | The new validation_method option can be: dns, webroot or standalone. Previously we guessed the challenge type: 1. if the DNS provider is specified then it's dns 2. if standalone=1 3. fallback to webroot The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* acme-common: use validation_method option instead of guessingSergey Ponomarev2024-03-01
| | | | | | | | | | | | The new validation_method option can be: dns, webroot or standalone. Previously we guessed the challenge type: 1. if the DNS provider is specified then it's dns 2. if standalone=1 3. fallback to webroot The logic is preserved and if the validation_method wasn't set explicitly we'll guess it in old manner. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* libpqxx: update to version 7.9.0Igor Bezzubchenko2024-02-29
| | | | Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>
* travelmate: update 2.1.2-5Dirk Brenken2024-02-29
| | | | | | * final vpn tweaks Signed-off-by: Dirk Brenken <dev@brenken.org>
* sing-box: update to 1.8.7brvphoenix2024-02-29
| | | | Signed-off-by: brvphoenix <brvphoenix@gmail.com>
* adblock: update 4.1.5-9Dirk Brenken2024-02-28
| | | | | | * minimal fix with reporting interface 'any' Signed-off-by: Dirk Brenken <dev@brenken.org>
* Merge pull request #23549 from krant/inotifyFlorian Eckert2024-02-28
|\ | | | | inotify-tools: fix link error on x86
| * inotify-tools: fix link error on x86krant2024-02-28
| | | | | | | | | | | | | | | | | | | | | | Previous commit removed unnecessary linking with libstdc++ but introduced another error on x86 platforms: undefined reference to `__stack_chk_fail_local' Fix it by explicitly linking libssp_nonshared.a Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | Merge pull request #23543 from krant/openthread-brStijn Tintel2024-02-27
|\ \ | | | | | | openthread-br: fix build and modernize
| * | openthread-br: modernize CMake optionskrant2024-02-27
| | | | | | | | | | | | | | | | | | | | | | | | - ':BOOL' suffix is not needed - Don't set options which are matching the defaults - Rename non-existing OT_BORDER_ROUTING_NAT64 to OTBR_NAT64 Signed-off-by: krant <aleksey.vasilenko@gmail.com>
| * | openthread-br: remove superseded patchkrant2024-02-27
| | | | | | | | | | | | | | | | | | | | | | | | The patch is not needed since it is implemented in https://github.com/openthread/ot-br-posix/pull/1908 and included into the current version. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
| * | openthread-br: fix build error on some platformskrant2024-02-27
|/ / | | | | | | | | | | | | | | | | | | | | | | On some builders the package was failing to build: ``` cp: cannot overwrite non-directory '[..]/var' with directory '[..]/var ``` Here we're moving the creation of /var/lib/thread into runtime script, which eliminates the error. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* / rclone: add fuse3-utils as dependencyTianling Shen2024-02-28
|/ | | | | | | rclone has switched to use fuse3 since v1.62.0. Reported-by: qiuzi <gxfclql@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* logrotate: update to 3.21.0krant2024-02-27
| | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* dnsdist: disable XSK to fix the buildkrant2024-02-27
| | | | | | | | | | | | | | | | | XSK support is set to auto by default and on some hosts it is detected as on and leads to: ``` In file included from dnsdist-backend.cc:32: xsk.hh:28:10: fatal error: bits/types/struct_timespec.h: No such file or directory 28 | #include <bits/types/struct_timespec.h> ``` Here we disable XSK so configure will behave more deterministically and hopefully fix the builders. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* mc: depend on libe2pOskari Rauta2024-02-27
| | | | | | | Now that libe2p is separated from e2fsprogs; midnight commander needs it added to depends. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* Merge pull request #23542 from mhei/use-https-for-php-and-peclMichael Heimpold2024-02-27
|\ | | | | php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLs
| * php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLsMichael Heimpold2024-02-26
| | | | | | | | | | | | | | Most packages already use https URLs and for PHP and PECL package downloads https is working properly. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | httping: update to 3.5krant2024-02-26
| | | | | | | | | | | | | | | | | | | | - Update package URLs - Use local tarball for sources - Switch to CMake - Drop obsolete patches including 'minimize' (ipk size +3KB only) - Add 3 new patches to fix musl, openssl and cmake issues Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* | dump1090: fix soft float ARM buildkrant2024-02-26
|/ | | | | | | Package CPU features detection is not supporting soft float ARM. So we disable it altogether. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* yq: Update to 4.42.1Tianling Shen2024-02-26
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* v2fly-geodata: Update to latest versionTianling Shen2024-02-26
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* alist: Update to 3.31.0Tianling Shen2024-02-26
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* cloudflared: Update to 2024.2.1Tianling Shen2024-02-26
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uvol: add support for detecting fitblk boot deviceDaniel Golle2024-02-26
| | | | | | | Auto-detect LVM2 volume on boot device used with fitblk uImage.FIT sub-image driver. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* inotify-tools: update to 4.23.9.0krant2024-02-25
| | | | | | - Workaround superfluous linking with libstdccp Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* rust: update to 1.76.0krant2024-02-25
| | | | | | | - Use .xz for source archive - Refresh patches Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* snort3: build against gperftools-runtimeJohn Audia2024-02-24
| | | | | | | | | | | | | | | | Should provide increases in snort3 performance thanks to thread- caching malloc provided by gperftools. Avg CPU usage is down. Another user reported higher throughput achieved with snort3 compiled with this on samba transfers on system with CPU-limited snort3 performance.[1] 1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22 Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* rtpmidi: update to 23.12Rosen Penev2024-02-24
| | | | | | | | | | Get rid of codeload and use local tarballs. Fixes compilation with newer fmt. Minor cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* tmux: update to 3.4Maxim Storchak2024-02-24
| | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* travelmate: update 2.1.2-4Dirk Brenken2024-02-24
| | | | | | | * more re-connections tweaks * made travelmate generated emails responsive Signed-off-by: Dirk Brenken <dev@brenken.org>
* python-yaml: fix build with Cython 3krant2024-02-24
| | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* snort3: update to 3.1.81.0John Audia2024-02-24
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/snort3/snort3/releases/tag/3.1.81.0 ,,_ -*> Snort++ <*- o" )~ Version 3.1.81.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2024 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.14 Using LuaJIT version 2.1.0-beta3 Using OpenSSL 3.0.13 30 Jan 2024 Using libpcap version 1.10.4 (with TPACKET_V3) Using PCRE version 8.45 2021-06-15 Using ZLIB version 1.3.1 Using Hyperscan version 5.4.2 2024-02-16 Using LZMA version 5.4.6 Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* conserver: free correct addrinfo to prevent crash.Darren Tucker2024-02-24
| | | | | | | | | | | When looping through addrinfo lists in AddrsMatch, keep a copy of the original addrinfo pointers to free instead of ending up at the terminating NULLs and trying to free those. OpenWRT uses musl in which freeaddrinfo(NULL) is not safe (which is fine, it's not required by the spec) so this fixes a segfault. Signed-off-by: Darren Tucker <dtucker@dtucker.net>
* htpdate: update to 1.3.7krant2024-02-24
| | | | | | | | - Switch package URLs to HTTPS - Use .gz for source archive since .xz is no longer available - Remove upstreamed patches Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* fwknop: update to 2.6.11Oldřich Jedlička2024-02-24
| | | | Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
* dump1090: update to 9.0krant2024-02-24
| | | | | | - Fix version to be properly configured Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* c-ares: update to 1.27.0krant2024-02-24
| | | | | | | - Update package URL - Don't set default CMake options Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* avrdude: fix dependencieskrant2024-02-24
| | | | | | | | - libftdi, libhidapi, libusb-0.1 was incorrectly leaking into the build. - libgpiod was incorrectly missing out despite LINUXGPIO feature was explicitly requested. Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* gperftools: add new packageJohn Audia2024-02-24
| | | | | | | | | | | | | | | | Thread-caching malloc provided by this package improves snort3 performance. I have been running with this for over seven months without issues. Avg CPU usage is down. Another user reported higher throughput achieved with snort3 compiled with this on samba transfers on system with CPU-limited snort performance.[1] 1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22 Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia <therealgraysky@proton.me>
* travelmate: update 2.1.2-3Dirk Brenken2024-02-24
| | | | | | | | | | | * various vpn optimizations * remove obsololete trm_maxscan option * small fixes for net status and captive portal handling * add an additional login variant to the h-hotels login script * fix the wifibahn login script work again with wifionice hotspots again * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* lighttpd: update to lighttpd 1.4.74 release hashGlenn Strauss2024-02-23
| | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* sysstat: add missing xz-utils dependencykrant2024-02-22
| | | | | | Depending only on 'xz' hides the package when 'xz-utils' is not selected Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* imagemagick: add missing libzip dependencyAlexander Egorenkov2024-02-22
| | | | | | | | Package imagemagick is missing dependencies for the following libraries: libzip.so.5. Fixes: 7b697342e9fc ("imagemagick: update to 7.1.1-28") Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
* tesseract: update to 5.3.4krant2024-02-22
| | | | | | - Fix NEON mis-detection which was breaking builds on some platforms Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* micropython: disable moldOskari Rauta2024-02-22
| | | | | | package fails to build with mold linker due to unregocnized flag. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* openvpn: update to 2.6.9Ivan Pavlov2024-02-22
| | | | | | | | | | | | | | | | | | | | | | | | | | - license change is now complete, and all code has been re-licensed under the new license (still GPLv2, but with new linking exception for Apache2 licensed code). Code that could not be re-licensed has been removed or rewritten. - add support for building with mbedTLS 3.x.x - new option "--force-tls-key-material-export" to only accept clients that can do TLS keying material export to generate session keys (mostly an internal option to better deal with TLS 1.0 PRF failures). - Windows: bump vcpkg-ports/pkcs11-helper to 1.30 - Log incoming SSL alerts in easier to understand form and move logging from "--verb 8" to "--verb 3". - protocol_dump(): add support for printing "--tls-crypt" packets and other fixes For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
* hyperscan: symlinks redundant ABI shared objectsJohn Audia2024-02-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use $(CP) macro rather than $(INSTALL_DATA) to preserve symlinks on shared objects which saves approx 11.8 M of space. From hyperscan-runtime_5.4.2-1: % ls -lh /usr/lib/libhs* -rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so -rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5 -rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5.4.2 -rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so -rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5 -rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5.4.2 % grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control Installed-Size: 18370560 From hyperscan-runetime_5.4.2-2 (created by this PR): % ls -lh /usr/lib/libhs* lrwxr-xr-x 1 root root 10 Feb 22 15:56 /usr/lib/libhs.so -> libhs.so.5 lrwxr-xr-x 1 root root 14 Feb 22 15:56 /usr/lib/libhs.so.5 -> libhs.so.5.4.2 -rwxr-xr-x 1 root root 4.6M Feb 22 15:27 /usr/lib/libhs.so.5.4.2 lrwxr-xr-x 1 root root 18 Feb 22 15:56 /usr/lib/libhs_runtime.so -> libhs_runtime.so.5 lrwxr-xr-x 1 root root 22 Feb 22 15:56 /usr/lib/libhs_runtime.so.5 -> libhs_runtime.so.5.4.2 -rwxr-xr-x 1 root root 1.2M Feb 22 15:27 /usr/lib/libhs_runtime.so.5.4.2 % grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control Installed-Size: 5918720 Credit to @efahl for pointing this out. Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>