12925 Commits

Author SHA1 Message Date
Brian J. Murrell
63308ab213 ddns-scripts: remove minimum 5 minute wait
To check if the update was successful.

Not all DDNS implementations have such huge latencies updating their services.

nsupdate for example, updates immediately and the update is immediately checkable.

Add new check_interval_min value to be able to set a check interval lower than the
previously hard-coded 5 minutes.

Fixes: #20564

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2025-12-17 15:33:59 +01:00
Sandro Jäckel
e564f6953d tailscale: update to 1.92.2
Changelog: https://tailscale.com/changelog#2025-12-10

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-12-17 12:34:19 +01:00
Jonas Jelonek
105d943146 croc: update to 10.3.1
Changelogs:
10.2.3: https://github.com/schollz/croc/releases/tag/v10.2.3
10.2.4: https://github.com/schollz/croc/releases/tag/v10.2.4
10.2.5: https://github.com/schollz/croc/releases/tag/v10.2.5
10.2.6: https://github.com/schollz/croc/releases/tag/v10.2.6
10.2.7: https://github.com/schollz/croc/releases/tag/v10.2.7
10.3.0: https://github.com/schollz/croc/releases/tag/v10.3.0
10.3.1: https://github.com/schollz/croc/releases/tag/v10.3.1

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2025-12-17 01:23:33 +02:00
Dirk Brenken
afce31650c adblock: update 4.4.5-2
* fixed f_uci function
* fixed f_switch function, reported in the turris forum

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-15 22:58:34 +01:00
Philip Prindeville
6ec4b726f2 strongswan: update to 6.0.4
No significant functional changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-15 12:34:52 -07:00
Yanase Yuki
d29dd8e025 oor: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 5 years ago.
- Official domain name has been suspended.

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-15 12:20:34 +01:00
Mai Thanh Minh
902da8510b zerotier: apply upstream license change to MPL-2.0
Upstream changed license to `MPL-2.0` for all except `nonfree/`. Building with `ZT_NONFREE=1` excludes these non-free code, make the result effectively under `MPL-2.0`. Read more at https://github.com/zerotier/ZeroTierOne/blob/1.16.0/RELEASE-NOTES.md#2025-08-21----version-1160

Signed-off-by: Mai Thanh Minh <thanhminh.mr@gmail.com>
2025-12-15 07:57:41 +01:00
Eric McDonald
93983e5b2a net-snmp: fix literal string test in snmpd_sink_add
The function snmpd_sink_add() has a guard clause that tests the literal
string "section", not the variable value "$section".

The test `[ -n "section" ]` always evaluates to true because the string
literal "section" is non-empty, making the check useless.

This function is only called internally with hardcoded arguments, so the
bug has no actual impact currently. For the same reason, this change
should not break existing configurations. However, I think it should be
fixed so future callers do not have a false sense of security.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2025-12-14 23:52:39 +02:00
Tianling Shen
7b053424ac xray-core: Update to 25.12.8
Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.12.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:30:01 +08:00
Tianling Shen
35d8dfee33 dnsproxy: Update to 0.78.2
Release note: https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:41 +08:00
Tianling Shen
0d2e10010b rclone: Update to 1.72.1
Release note: https://github.com/rclone/rclone/releases/tag/v1.72.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:09 +08:00
Dirk Brenken
b085131830 adblock: release 4.4.5-1
* hardened the uci config parsing
* added a fast, flexible & secure domain validator function, it eliminates > 99 % of garbage inputs
  - Please note: the "rule" in the feed file now only includes parameters for the domain validator,
    see readme for details. Please nuke a custom feed file from former versions - they are no longer
    compatible
* readme update
* LuCI: fixed a minor issue in the logread template
* LuCI: adapted the rule select options in the custom feed editor to use the new domain validator

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-14 07:08:17 +01:00
Philip Prindeville
a050b08db2 isc-dhcp: fix startup issues with RFC-1918 PTR RRs
If isc-dhcp gets restarted, it might have to deal with RFC-1918 zones
being previously populated by an earlier instance.  In that case, we
need to know if we're modified versus initially adding the zones.

The special handling of RFC-1918 zones in Bind is quirky, and there
should be a patch soon to make it more friendly, but in the meantime
you might have to use:

disable-empty-zone 168.192.in-addr.arpa;

Or similar depending on which address block you poach.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-13 12:26:38 -07:00
Stan Grishin
315ef8adf2 pbr: update to 1.2.1-r41
Remove many obsolete files.

Makefile:
* remove netifd-flavour related code
* remove trailing white spaces

Init-script:
* proper deletion of default network rules for IPv{4,6}
* fix netifd function error when IPv6 is enabled
* remove trailing white spaces

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-12 17:20:11 -08:00
Philip Prindeville
9d751f30fd bind: manual fix for IPv6 server unreachable noise
Until we have a failsafe way of detecting no IPv6 internet
connectivity automatically, allow the users to set it
manually for now.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-12 18:06:44 -07:00
Paul Donald
90e227e755 cgi-io: update to Git 658b14bda (2025-12-11)
658b14b main: Add `stderr` option for cgi-exec to redirect stderr to stdout

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-12 16:04:25 +01:00
Martin Schiller
21019d063d xl2tp: add PPP unnumbered support to proto handler
Adds the PPP unnumbered support from openwrt commit 48a95ef ("ppp :
Unnumbered support") to the xl2tp proto handler.

48a95eff38

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2025-12-12 12:50:59 +01:00
Dirk Brenken
990bf69fd7 travelmate: release 2.3.0-1
* split travelmate.s in a new central travelmate function library (usr/lib/travelmate-functions.sh) plus
  a smal service script (/usr/bin/travelmate-service.sh)
* the vpn-, mail- and login scripts are now using the central function library
* rework the ntp hotplug script
* harden the config parsing
* support the curl interface option to specify which network pathway is used for outgoing requests
* the travelmate status now includes the backend- and frontend version information
* LuCI: use a special travelmate interface, e.g. trm_wwan or use an existing wwan interface
* LuCI: no longer call the logread binary, use rpc / the ubus log object instead
* LuCI: various code cleanups
* LuCI: various small usability improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-11 22:43:55 +01:00
George Sapkin
5369c5cbbc adguardhome: bump to 0.107.71
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.71
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-11 17:07:16 +02:00
Niklas Thorild
4bcc482ab9 dnscrypt-proxy2: update to version 2.1.15
- update dnscrypt-proxy2 to version 2.1.15

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-12-11 15:55:07 +01:00
Goetz Goerisch
0ca33e71e9 unbound: update to 1.24.2
Fixes: Possible Domain Hijacking via promiscuous NS Records (CVE-2025-11411)
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2
Upstream commit f6269baa605d31859f28770e01a24e3677e5f82c
f6269baa60

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
2025-12-10 18:38:27 +01:00
Dirk Brenken
4a72200214 unbound: minimal fix for odhcpd lease file parsing
Current odhcpd in master writes MAC addresses with colons in his lease file,
this new odhcpd format leads to a crash loop in unbound (if DHCPv4 to SLAAC is selected).

Just remove the colons, before the processing in slaac_eui64 begins, fixes #28032

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-10 18:06:06 +01:00
Til Kaiser
0b6d2a2859 treewide: remove python3-distutils dependency
As the python3-distutils was dropped while bumping the version
to 3.13.9 via 97a92f2e7a, remove the
python3-distutils from all packages that are currently using it.

OpenWrt already uses recent enough releases of these packages
that have adapted to work without distutils, so the dependency
can be safely removed.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-12-10 10:49:08 +01:00
Yanase Yuki
7403bb5bef ptunnel-ng: remove package
It seems upstream author does not have
time to maintain this software anymore.
Please see v1.43 release note.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-10 10:44:35 +01:00
Simonas Tamošaitis
83f3e116b1 modemmanager: allow empty initial EPS bearer APN
This commit removes the non-empty APN requirement for initial EPS
bearer. An empty APN value is valid and means that the modem will use a
network provided APN offered by the operator.

Signed-off-by: Simonas Tamošaitis <simsasss@gmail.com>
2025-12-09 15:45:10 +01:00
Christian Lamparter
e35de9af78 openconnect: fix off-by-one while condition
resolveip returns 0 on success. This means that the while loop
will just run until all tries are exhausted. But this was not
the intended behaviour.

Fixes: 20ea72607b ("openconnect: make host dependency more resilient")
Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2025-12-09 10:02:43 +01:00
Stan Grishin
8bf5f683fe pbr: update to 1.2.1-r35
pbr 1.2.1-r35

Makefile:
* split uci-defaults into different purpose files
* add handling of netifd integration

Config:
* update with default values for all options (thanks @betonmischer86)

Init-script:
* add netifd integration handling
* add ip() function to emulate ip rule replace
* add netbird intrfaces support (thanks @egc112)
* reorganize loading/handling of options in load_package_config()
* improve display of interface triggers in service_triggers()
* remove chains cleanup from stop_service() due to exclusive use of fw4 nft files
* improve status_service() output
* drop input and postrouting as valid options for policy chain

Uci-defaults files:
* 91-pbr-nft: cosmetic improvements

Default nft files:
* drop use of input and postrouting chanins

Custom User files:
* dns-prefetch: functional improvements (thanks @betonmischer86)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-08 17:41:03 -08:00
David Connolly
90ee36fceb udpspeeder: disable color in logging to prevent side effects in syslog
Fixes #26872 by passing --disable-color in init script

Signed-off-by: David Connolly <david@connol.ly>
2025-12-07 20:36:20 +01:00
Josef Schlehofer
560e89e3bf radicale: remove obsolete package
In this repository, we do have radicale2, so OpenWrt
community should switch to use that version.

This version (= 1.x.x) is really old, no longer developed
and there are newer versions, which can be used e.g.
version 2.x.x, in this repo as radicale2 or there is
also version 3.x.x, which is not packaged for OpenWrt so far.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-07 18:12:07 +01:00
George Sapkin
ffa24c10da adguardhome: bump to 0.107.70
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.70
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-07 01:39:28 +02:00
George Sapkin
e0d24e48fd adguardhome: add SPDX license identifiers
Add GPL 2.0 only SPDX license identifiers to Makefile and all scripts.

Signed-off-by: George Sapkin <george@sapk.in>
2025-12-07 01:39:28 +02:00
Philip Prindeville
605a457cac bind: save out served domains on service stop
If named gets stopped, then started again, but isc-dhcpd isn't also
restarted, then we want named to at least have the existing content.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-06 14:05:05 -07:00
Andrea Pesaresi
0875537051 ksmbd-tools: bump to 3.5.6
Major changes are:

- Increase max ip connections(8->32) and max connections(128->256).

- Unset "guest_ok = yes" for ipc share by default.

- add new UCI option "allow_guest_ipc" to section (default disabled)

Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
2025-12-05 22:56:26 +01:00
Dirk Brenken
cd5f13e922 adblock: update 4.4.4-3
* fixed a typo in the allowlist/blocklist regex
* limit the f_switch function to only the suspend/resume actions

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-04 22:20:23 +01:00
Dirk Brenken
c47d8b149c banip: release 1.6.0-1
* split block/logging rules (fixed #27990)
* adapt reload functions to support the new split logic
* the banIP status now includes the backend- and the frontend version information
* fixed a config parsing error with non existing dirs (reported in the forum)
* fixed a small reporting issue (reported in the forum)
* added a new public dns feed (by default restricted to outbound, ports 53 and 853)
* added a new gawk dependency due to significant performance gains
* LuCI: no longer call the logread binary, use rpc / the ubus log object instead
* LuCI: various code cleanups
* LuCI: various small usability improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-04 20:25:46 +01:00
Paul Donald
3a50c4730a chrony: Makefile amendments
Update URL to current distro source
drop provides:=nts since it is unused anywhere

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-04 19:48:00 +08:00
Paul Donald
505f3a0e17 chrony: add provides logic to Makefile
This satisfies other packages which might depend on either chrony variant.

Should another package dependency request 'chrony', the default will be non-NTS
chrony via DEFAULT_VARIANT:=1 (mlichvar comment:  to avoid pulling its large
dependencies).

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-04 19:48:00 +08:00
Tianling Shen
8e0f4b8bdd rclone: Update to 1.72.0
Release note: https://github.com/rclone/rclone/releases/tag/v1.72.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-04 10:25:01 +08:00
Tianling Shen
4a48ac1f93 xray-core: Update to 25.12.2
Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.12.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-04 10:24:08 +08:00
Tianling Shen
d5b533f8a6 dnsproxy: Update to 0.78.1
Release note:
- https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.0
- https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-04 10:21:31 +08:00
Andris PE
96a2fb3ef4 trafficshaper: remove test codes
Remove requirement test code as it is already supplied by package
dependencies
Depend on ip6tables to satisfy description claim

Signed-off-by: Andris PE <neandris@gmail.com>
2025-12-03 11:27:23 +01:00
Yanase Yuki
12342ac3ea netstinky: remove package
It seems this package is no longer maintained.
- The latest upstream commit is 4 years ago.
- Official website and IoC update servers
  are unreachable.
  https://crt.sh/?q=netstinky-api.wand.net.nz

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-03 08:51:41 +01:00
Yanase Yuki
9d6d44487f webui-aria2: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 4 years ago.
- Author didn't respond security issue report. (CVE-2023-39141)

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-03 08:40:07 +01:00
Jan Hák
d4321095cd knot: update to version 3.5.2
Release notes: https://www.knot-dns.cz/2025-11-28-version-352.html

Signed-off-by: Jan Hák <jan.hak@nic.cz>
2025-12-02 21:52:31 +01:00
Philip Prindeville
27f55cdbda isc-dhcp: use modzone not addzone so in-addr.arpa works
Updates to in-addr.arpa are being rejected with:

update failed: REFUSED

because we create an empty zone, and then try to add it again
when it already exists.  So use modzone instead to update it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-02 10:03:24 -07:00
Yanase Yuki
fd191c9b49 freeradius3: drop yubikey support
FreeRADIUS yubikey plugin depends on obsolete libyubikey.
libyubikey has been removed from repo
due to upstream EoL. (9ea17111f0)
This commit will fix libyubikey dependency problem.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-11-30 19:18:07 +01:00
Sandro Jäckel
b3ab1798c5 tailscale: update to 1.90.9
Changelog: https://tailscale.com/changelog#2025-11-19
Changelog: https://tailscale.com/changelog#2025-11-25

Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-11-28 11:02:14 +01:00
John Audia
4008028a99 snort3: update to 3.10.0.0
Changelog: https://github.com/snort3/snort3/releases/tag/3.10.0.0

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150)

Signed-off-by: John Audia <therealgraysky@proton.me>
2025-11-28 09:45:55 +01:00
Rui Salvaterra
ac4f614dfe tor: update to 0.4.8.21 stable
Minor release, see the changelog [1] for what's new.

[1] https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.8.21/ChangeLog

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2025-11-27 02:48:37 +02:00
Yanase Yuki
3cc97c318a esniper: remove package
esniper's development has been stopped in 2020.
https://esniper.sourceforge.net/
No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-11-26 15:56:11 +01:00