aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* lsof: update to 4.99.0Maxim Storchak2023-12-13
| | | | | | | - drop the patches that don't apply anymore - update build commads Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* tgt: update to 1.0.89Maxim Storchak2023-12-13
| | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* snort3: add myself as a co-maintainerJohn Audia2023-12-13
| | | | | | | | Michael invited me to co-maintain[1]. 1. https://github.com/openwrt/packages/pull/22830#issuecomment-1848997029 Signed-off-by: John Audia <therealgraysky@proton.me>
* cyrus-sasl: create libsasl2-utils package for programsW. Michael Petullo2023-12-13
| | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* Merge pull request #22873 from stangri/master-https-dns-proxyStan Grishin2023-12-11
|\ | | | | https-dns-proxy: only restart firewall when needed
| * https-dns-proxy: only restart firewall when neededStan Grishin2023-12-11
| | | | | | | | | | | | * only restart firewall when needed Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | banip: bump to release 0.9.3-1Dirk Brenken2023-12-11
| | | | | | | | | | | | | | * provides an option to transfer log events on remote servers via cgi interface (disabled by default), see readme for details * refine the allowlist check to support IP intervals as well before adding an IP to the blocklist Signed-off-by: Dirk Brenken <dev@brenken.org>
* | golang: Update to 1.21.5Jeffery To2023-12-11
|/ | | | | | Includes fix for CVE-2023-39326 (net/http: limit chunked data overhead). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #22863 from stangri/master-adblock-fastStan Grishin2023-12-11
|\ | | | | adblock-fast: better allow-listing
| * adblock-fast: better allow-listingStan Grishin2023-12-11
|/ | | | | | | | * improve allow-listing reliability by running sed from the script-file instead of the command-line * fix user for smartdns files ownership Signed-off-by: Stan Grishin <stangri@melmac.ca>
* Merge pull request #22858 from stangri/master-nebulaStan Grishin2023-12-10
|\ | | | | nebula: update to 1.8.0
| * nebula: update to 1.8.0Stan Grishin2023-12-10
| | | | | | | | | | | | * https://github.com/slackhq/nebula/releases/tag/v1.8.0 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #22856 from stangri/master-curlStan Grishin2023-12-10
|\ \ | | | | | | curl: update to 8.5.0
| * | curl: update to 8.5.0Stan Grishin2023-12-10
| |/ | | | | | | | | | | * https://curl.se/changes.html#8_5_0 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #22853 from stangri/master-adblock-fastStan Grishin2023-12-10
|\ \ | |/ |/| adblock-fast: bugfix: block domains from config when not using block-lists
| * adblock-fast: bugfix: block domains from config when not using block-listsStan Grishin2023-12-10
|/ | | | | | | * remove empty lines from the combined list to allo optimization code to work properly Signed-off-by: Stan Grishin <stangri@melmac.ca>
* Merge pull request #22767 from efahl/issue-22760Jeffery To2023-12-09
|\ | | | | syncthing: fix duplicate command line parameters on service
| * syncthing: fix duplicate command line parameters on serviceEric Fahlgren2023-12-04
| | | | | | | | | | | | - This patch fixes 9d17ba1 and #22760 Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
* | irqbalance: Fix log spam and correct meson versionHannu Nyman2023-12-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Irqbalance 1.9.3 changed the handling of certain errors. Specifically EINVAL, trying to set an invalid CPU core, was changed to be a temporary error, causing log spam from repeated balancing runs in some devices. See log and strace below. Mark EINVAL as permanent. Also correct the version in our own meson.build patch. Log and strace: Sat Dec 9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000 ioctl(6, TIOCGWINSZ, 0xbeb134e8) = -1 ENOTTY (Not a tty) writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument) close(6) = 0 munmap(0xb6ed9000, 4096) = 0 clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0 sendto(5, "<28>Dec 9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80 writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument ) = 48 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | sing-box: update to 1.7.4Van Waholtz2023-12-09
| | | | | | | | | | | | | | | | | | | | | | New features for v1.7.x: 1. Support excluding custom routes 2. `udp_disable_domain_unmapping` for inbound listen option 3. `HTTPUpgrade` transport 4. Migrate multiplex and UoT server to inbound and multiplexing support is no longer enabled by default and needs to be turned on explicitly in inbound options. 5. TCP Brutal support for multiplex Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | dnsproxy: Update to 0.60.0Tianling Shen2023-12-09
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | adguardhome: Update to 0.107.42Zuev Aleksandr2023-12-08
| | | | | | | | Signed-off-by: Zuev Aleksandr <A.Zuev@stdev.su>
* | python-jsonschema-specifications: Update to 2023.11.2Jeffery To2023-12-08
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | snort3: update to 3.1.76.0John Audia2023-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/snort3/snort3/releases/tag/3.1.76.0 ,,_ -*> Snort++ <*- o" )~ Version 3.1.76.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.13 Using LuaJIT version 2.1.0-beta3 Using OpenSSL 3.0.12 24 Oct 2023 Using libpcap version 1.10.4 (with TPACKET_V3) Using PCRE version 8.45 2021-06-15 Using ZLIB version 1.3 Using Hyperscan version 5.4.2 2023-12-03 Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* | Merge pull request #22838 from PolynomialDivision/libxslt-1-1-39Jiri Slachta2023-12-08
|\ \ | | | | | | libxslt: update to 1.1.39
| * | libxslt: update to 1.1.39Nick Hainke2023-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: - https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.38 - https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.39 Fixes: #22836 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | Merge pull request #22839 from stangri/master-adblock-fastStan Grishin2023-12-07
|\ \ \ | | | | | | | | adblock-fast: bugfixes: getsize/resolver
| * | | adblock-fast: bugfixes: getsize/resolverStan Grishin2023-12-08
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | * do not use standalone grep-package dependent syntax to get the remote file size * various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns are not installed Signed-off-by: Stan Grishin <stangri@melmac.ca>
* / / cligen: Address last minute review commentsPhilip Prindeville2023-12-08
|/ / | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | python-referencing: Update to 0.31.1Jeffery To2023-12-07
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-jsonschema: Update to 4.20.0Jeffery To2023-12-07
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-cryptography: Update to 41.0.7Jeffery To2023-12-07
| | | | | | | | | | | | | | 41.0.6 included a fix for CVE-2023-49083 (loading certificates from a PKCS#7 bundle could lead to a null-pointer-dereference and segfault). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-bcrypt: Update to 4.1.1Jeffery To2023-12-07
| | | | | | | | | | | | This also updates the test.sh script to use an assert. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | pipx: Update to 1.3.2, add new dependenciesJeffery To2023-12-07
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python-platformdirs: Add new packageJeffery To2023-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also includes a test.sh script for the packages feed CI. From the README: When writing desktop application, finding the right location to store user data and configuration varies per platform. Even for single-platform apps, there may by plenty of nuances in figuring out the right location. This kind of thing is what the platformdirs package is for. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | Merge pull request #22826 from mwarning/master_026Tianling Shen2023-12-07
|\ \ | | | | | | dhtd: udpate to 0.2.6
| * | dhtd: udpate to 0.2.6Moritz Warning2023-12-06
| | | | | | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | Merge pull request #22362 from pprindeville/clixon-initialPhilip Prindeville2023-12-06
|\ \ \ | |/ / |/| | clixon: Initial packaging
| * | clixon: Initial packagingPhilip Prindeville2023-12-05
| | | | | | | | | | | | | | | | | | | | | | | | Clixon is a YANG-based configuration manager, with interactive CLI, NETCONF and RESTCONF interfaces, an embedded database and transaction mechanism. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | Merge pull request #22824 from stangri/master-adblock-fastStan Grishin2023-12-06
|\ \ \ | | | | | | | | adblock-fast: add smartdns ipset/nftset support
| * | | adblock-fast: add smartdns ipset/nftset supportStan Grishin2023-12-06
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bugfix: correct URL to config-update file * bugfix: check if uci configs exist before chacking for changes * add support for smartdns ipset-based blocking * add support for smartfns nftset-based blocking * disallow non-ascii symbols for smartdns blocking * add check wherever fw4 restart is needed before calling procd_set_config_changed firewall * improve clean-up code in resolver() * improve case code for different resolver settings * modify load_validate_config to allow smartdns.ipset and smartdns.nftset Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | Merge pull request #22820 from stangri/master-adblock-fastStan Grishin2023-12-06
|\ \ \ | |/ / |/| | adblock-fast: add support for smartdns
| * | adblock-fast: add support for smartdnsStan Grishin2023-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add support for smartdns * switch from using `uci` commands to `uci_` functions * rename `_resolver_config` to `_dnsmasq_instance_config` * introduce `_smartdns_instance_config` * improve resolvers restart code on changes * update load_validate_config to allow for smartdns option Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | Merge pull request #22359 from pprindeville/cligen-initialPhilip Prindeville2023-12-05
|\ \ \ | | | | | | | | cligen: Initial packaging
| * | | cligen: Initial packagingPhilip Prindeville2023-12-05
| | | | | | | | | | | | | | | | | | | | | | | | CLIgen is a Command-Line Interface generator Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | yq: Update to 4.40.4Tianling Shen2023-12-05
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | rclone: Update to 1.65.0Tianling Shen2023-12-05
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | v2raya: update to 2.2.4.3Tianling Shen2023-12-05
| | | | | | | | | | | | | | | | | | | | | | | | Switched back to tar.gz archive to avoid potential permission issue. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | uspot: add packageThibaut VARÈNE2023-12-05
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | uspot is an OpenWrt-native captive portal system. It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4, ucode, without needing any external kernel module. It can achieve the maximum performance allowed by nftables (flow offloading works). Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | sstp-client: add support for custom portVladislav Grigoryev2023-12-04
| | | | | | | | | | | | | | | | | | Add support for connecting to a custom SSTP port. Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
Powered by cgit, Themed by Ted Yin.