Commit Graph

35270 Commits

Author SHA1 Message Date
Luiz Angelo Daros de Luca
82c3465e66 ruby: update to 3.4.7
This release includes some general fixes and a uri gem security fix:

- CVE-2025-61594: URI Credential Leakage Bypass previous fixes

Changelog: https://github.com/ruby/ruby/releases/tag/v3_4_7
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-12-17 11:11:32 +01:00
Jonas Jelonek
cf39ccc1b7 eza: update to 0.23.4
Changelogs:
0.23.1: https://github.com/eza-community/eza/releases/tag/v0.23.1
0.23.2: https://github.com/eza-community/eza/releases/tag/v0.23.2
0.23.3: https://github.com/eza-community/eza/releases/tag/v0.23.3
0.23.4: https://github.com/eza-community/eza/releases/tag/v0.23.4

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2025-12-17 01:26:26 +02:00
Jonas Jelonek
105d943146 croc: update to 10.3.1
Changelogs:
10.2.3: https://github.com/schollz/croc/releases/tag/v10.2.3
10.2.4: https://github.com/schollz/croc/releases/tag/v10.2.4
10.2.5: https://github.com/schollz/croc/releases/tag/v10.2.5
10.2.6: https://github.com/schollz/croc/releases/tag/v10.2.6
10.2.7: https://github.com/schollz/croc/releases/tag/v10.2.7
10.3.0: https://github.com/schollz/croc/releases/tag/v10.3.0
10.3.1: https://github.com/schollz/croc/releases/tag/v10.3.1

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
2025-12-17 01:23:33 +02:00
Dirk Brenken
afce31650c adblock: update 4.4.5-2
* fixed f_uci function
* fixed f_switch function, reported in the turris forum

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-15 22:58:34 +01:00
Til Kaiser
d2709bd325 mstflint: update to 4.34.1-1
This commit updates the mstflint package
to the latest 4.34.1-1 release.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-12-15 21:17:29 +01:00
Philip Prindeville
6ec4b726f2 strongswan: update to 6.0.4
No significant functional changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-15 12:34:52 -07:00
Yanase Yuki
d29dd8e025 oor: remove package
It seems this software is no longer maintained.
- The latest upstream commit is 5 years ago.
- Official domain name has been suspended.

No packages depend on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-15 12:20:34 +01:00
Yanase Yuki
7eea92b91c python3-speedtest-cli: remove package
It seems this software is no longer maintained.
The last upstream commit is 4 years ago, and
this software only supports obsolete setup.py.

Users should use supported similar softwares, such
as speedtest-go in packages repo.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-15 12:16:26 +01:00
Hirokazu MORIKAWA
ebdb9536a9 c-ares: bump to 1.34.6
This is a security release.

Security:
* CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-12-15 11:00:34 +01:00
Thomas Winkler
68b538b3ed tang: make sure output and errors are logged to system log
Currently, there is no logging at all, causing difficulties with
troubleshooting. Edit originally proposed by @q-b #26076
(comment) and implemented by @rugk #27401

Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>
2025-12-15 08:40:49 +01:00
Daniel F. Dickinson
aa1acc0f21 php8: bump PKG_RELEASE
Bump PKG_RELEASE for previous two commits

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-15 08:04:39 +01:00
Daniel F. Dickinson
f9591b8518 php8: xml modules affect others
As with gettext modules described in #28078 and #28075, xml and dom
related module selection affects the dependencies of other packages.

Therefore, we invert the dependency logic:

PHP8_LIBXML and PHP8_DOM are are enabled by default and packages
which depend on libxml2 and --enable-dom=shared are not shown (and
the related configure args are disabled) if the config options are
not enabled.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-15 08:04:39 +01:00
Daniel F. Dickinson
6d6233b6b7 php8: module selection affects other sub-packages
Fixes: php8: global package dependency changes based on module
selection

Fixes: #28078

As described in #28078 and #28075,

Some binaries gain a dependency on libstdcpp when mod-gettext is included
in the build, however this was not explicitly declared, so packaging
fails with (e.g.):

Package php8-cgi is missing dependencies for the following libraries:
libstdc++.so.6

In contrast to #28075, this commit takes the approach:

* Make use of --with-gettext depend on a configure flag (enabled by
  default, since that matches current full build behaviour)
* Make sub-packages which require --with-gettext depend on the
  configure flag

This means that e.g. php-cgi would not have gettext support if the
configure flag was disabled, and e.g. php-mod-gettext and php-mod-intl
would not be selectable.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-15 08:04:39 +01:00
Mai Thanh Minh
902da8510b zerotier: apply upstream license change to MPL-2.0
Upstream changed license to `MPL-2.0` for all except `nonfree/`. Building with `ZT_NONFREE=1` excludes these non-free code, make the result effectively under `MPL-2.0`. Read more at https://github.com/zerotier/ZeroTierOne/blob/1.16.0/RELEASE-NOTES.md#2025-08-21----version-1160

Signed-off-by: Mai Thanh Minh <thanhminh.mr@gmail.com>
2025-12-15 07:57:41 +01:00
Eric McDonald
93983e5b2a net-snmp: fix literal string test in snmpd_sink_add
The function snmpd_sink_add() has a guard clause that tests the literal
string "section", not the variable value "$section".

The test `[ -n "section" ]` always evaluates to true because the string
literal "section" is non-empty, making the check useless.

This function is only called internally with hardcoded arguments, so the
bug has no actual impact currently. For the same reason, this change
should not break existing configurations. However, I think it should be
fixed so future callers do not have a false sense of security.

Signed-off-by: Eric McDonald <librick-openwrt@proton.me>
2025-12-14 23:52:39 +02:00
Hannu Nyman
65d83de7f8 irqbalance: update to 1.9.5
Update irqbalance to version 1.9.5

* drop the original local meson patch, as meson is now properly adopted
  by upstream. But patch meson.build to keep glib2 library statically
  linked in order to avoid a dependency and indirect size increase.

* disable unnecessary functions via meson features settings
  (capng, numa, systemd, thermal, ui)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-12-14 19:49:55 +02:00
Vladimir Ermakov
4e6c2674af qemu: update to 10.1.3
- Update version
- No patch refresh needed

Changelog: https://www.mail-archive.com/qemu-devel@nongnu.org/msg1156310.html

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2025-12-14 12:58:30 +01:00
Tianling Shen
f7aede8219 yq: Update to 4.50.1
Release note: https://github.com/mikefarah/yq/releases/tag/v4.50.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:30:25 +08:00
Tianling Shen
7b053424ac xray-core: Update to 25.12.8
Release note: https://github.com/XTLS/Xray-core/releases/tag/v25.12.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:30:01 +08:00
Tianling Shen
35d8dfee33 dnsproxy: Update to 0.78.2
Release note: https://github.com/AdguardTeam/dnsproxy/releases/tag/v0.78.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:41 +08:00
Tianling Shen
0d2e10010b rclone: Update to 1.72.1
Release note: https://github.com/rclone/rclone/releases/tag/v1.72.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-12-14 19:29:09 +08:00
George Sapkin
c7ccba0cf2 ci: add more labels
Add 'Add package' label when a new Makefile is added or 'Drop package'
when a Makefile is deleted.

Label PRs to OpenWrt 25.12 branch.

Label CI-related PRs.

Signed-off-by: George Sapkin <george@sapk.in>
2025-12-14 10:44:48 +01:00
Daniel F. Dickinson
0bb3db019a postgresql: fix missing symbols at runtime
Fixes pgsql-server: the setup fails for any folder
Fixes #27228

Sets postgresql-specific configure flags that configure cannot run-test
to determine their value. This fixes improperly linked files that
prevent database initialization (at least) from working on the device.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
2025-12-14 08:50:40 +01:00
Dirk Brenken
b085131830 adblock: release 4.4.5-1
* hardened the uci config parsing
* added a fast, flexible & secure domain validator function, it eliminates > 99 % of garbage inputs
  - Please note: the "rule" in the feed file now only includes parameters for the domain validator,
    see readme for details. Please nuke a custom feed file from former versions - they are no longer
    compatible
* readme update
* LuCI: fixed a minor issue in the logread template
* LuCI: adapted the rule select options in the custom feed editor to use the new domain validator

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-14 07:08:17 +01:00
Nate Robinson
e6130d4233 lf: update to r40
https://github.com/gokcehan/lf/releases/tag/r40

Signed-off-by: Nate Robinson <nrobinson2000@me.com>
2025-12-14 05:00:28 +02:00
Tomáš Macholda
124596c317 mox-pkcs11: add new package
Library for using built-in ECDSA key in devices based on Turris MOX for
PKCS11 authentication

Signed-off-by: Tomáš Macholda <tomas.macholda@nic.cz>
2025-12-13 20:48:22 +01:00
Philip Prindeville
a050b08db2 isc-dhcp: fix startup issues with RFC-1918 PTR RRs
If isc-dhcp gets restarted, it might have to deal with RFC-1918 zones
being previously populated by an earlier instance.  In that case, we
need to know if we're modified versus initially adding the zones.

The special handling of RFC-1918 zones in Bind is quirky, and there
should be a patch soon to make it more friendly, but in the meantime
you might have to use:

disable-empty-zone 168.192.in-addr.arpa;

Or similar depending on which address block you poach.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-13 12:26:38 -07:00
Vladimir Ulrich
19c662ac71 zoneinfo: updated to 2025c release
Updated package version and file hashes.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
2025-12-13 08:47:30 +01:00
Stan Grishin
315ef8adf2 pbr: update to 1.2.1-r41
Remove many obsolete files.

Makefile:
* remove netifd-flavour related code
* remove trailing white spaces

Init-script:
* proper deletion of default network rules for IPv{4,6}
* fix netifd function error when IPv6 is enabled
* remove trailing white spaces

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2025-12-12 17:20:11 -08:00
Philip Prindeville
9d751f30fd bind: manual fix for IPv6 server unreachable noise
Until we have a failsafe way of detecting no IPv6 internet
connectivity automatically, allow the users to set it
manually for now.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2025-12-12 18:06:44 -07:00
Vasileios Anagnostopoulos
3f52746c79 watchcat: passing the interface in the ping_reboot
Although the watchcat_ping function also checked the iface variable, that
variable was never populated. As a result we could not check if there was
connectivity via a specific interface.

Signed-off-by: Vasileios Anagnostopoulos <anagnwstopoulos@hotmail.com>
2025-12-12 16:40:40 +01:00
Paul Donald
90e227e755 cgi-io: update to Git 658b14bda (2025-12-11)
658b14b main: Add `stderr` option for cgi-exec to redirect stderr to stdout

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2025-12-12 16:04:25 +01:00
Martin Schiller
21019d063d xl2tp: add PPP unnumbered support to proto handler
Adds the PPP unnumbered support from openwrt commit 48a95ef ("ppp :
Unnumbered support") to the xl2tp proto handler.

48a95eff38

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2025-12-12 12:50:59 +01:00
Wei-Ting Yang
495e4e9287 python-urllib3: update to 2.6.1
Fix CVE-2025-66418 and CVE-2025-66471.

Full release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.0
https://github.com/urllib3/urllib3/releases/tag/2.6.1

Drop 001-setuptools-scm-upper-limit.patch as upstream now supports
setuptools-scm v9.x.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-12-12 07:20:31 +01:00
David Woodhouse
4b5b41e356 domoticz: improve config, don't require telldus
Add support for configuring the -vhostname, as it helps to get the right
issuer into OAuth2 tokens. Also disable the mdns responder by default;
when we're running on OpenWrt we have better options that that. Clean
up the logging options, and also make it export $TZ to work around our
musl hack which otherwise opens and reads /etc/TZ thousands of times
a minute.

Also drop the telldus dependency. Domoticz will dlopen that at runtime
without having to have it present at build time at all, so it should
still work for users who install it.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2025-12-12 12:03:15 +09:00
David Woodhouse
b8430de538 openzwave: update to 1.6.1965, disable downloads
The project is abandoned but until we get the ZWave-JS-UI node.js
montrosity running in OpenWrt, we need to keep using it. Update to
the last available version.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2025-12-12 12:03:15 +09:00
Eric Fahlgren
76953dba6b owut: update to 2025.12.01
Bug fixes:
    efahl/owut@4482dd097f owut: handle changes in a package's version number format

Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
2025-12-12 10:58:02 +08:00
Dirk Brenken
990bf69fd7 travelmate: release 2.3.0-1
* split travelmate.s in a new central travelmate function library (usr/lib/travelmate-functions.sh) plus
  a smal service script (/usr/bin/travelmate-service.sh)
* the vpn-, mail- and login scripts are now using the central function library
* rework the ntp hotplug script
* harden the config parsing
* support the curl interface option to specify which network pathway is used for outgoing requests
* the travelmate status now includes the backend- and frontend version information
* LuCI: use a special travelmate interface, e.g. trm_wwan or use an existing wwan interface
* LuCI: no longer call the logread binary, use rpc / the ubus log object instead
* LuCI: various code cleanups
* LuCI: various small usability improvements
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-11 22:43:55 +01:00
George Sapkin
5369c5cbbc adguardhome: bump to 0.107.71
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.71
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-11 17:07:16 +02:00
Niklas Thorild
4bcc482ab9 dnscrypt-proxy2: update to version 2.1.15
- update dnscrypt-proxy2 to version 2.1.15

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-12-11 15:55:07 +01:00
George Sapkin
1f2d66502b multi-arch-test-build: disable comments and labels
Disable posting formality check status comments and adding related
labels while the security token is being figured out.

Link: https://github.com/openwrt/packages/pull/28011
Fixes: 2c558a8 ("ci: label formality failures")
Fixes: 7658669 ("multi-arch-test-build: post formal summaries to PR")
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-11 15:02:41 +02:00
Goetz Goerisch
0ca33e71e9 unbound: update to 1.24.2
Fixes: Possible Domain Hijacking via promiscuous NS Records (CVE-2025-11411)
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2
Upstream commit f6269baa605d31859f28770e01a24e3677e5f82c
f6269baa60

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
2025-12-10 18:38:27 +01:00
Dirk Brenken
4a72200214 unbound: minimal fix for odhcpd lease file parsing
Current odhcpd in master writes MAC addresses with colons in his lease file,
this new odhcpd format leads to a crash loop in unbound (if DHCPv4 to SLAAC is selected).

Just remove the colons, before the processing in slaac_eui64 begins, fixes #28032

Signed-off-by: Dirk Brenken <dev@brenken.org>
2025-12-10 18:06:06 +01:00
Til Kaiser
0b6d2a2859 treewide: remove python3-distutils dependency
As the python3-distutils was dropped while bumping the version
to 3.13.9 via 97a92f2e7a, remove the
python3-distutils from all packages that are currently using it.

OpenWrt already uses recent enough releases of these packages
that have adapted to work without distutils, so the dependency
can be safely removed.

Signed-off-by: Til Kaiser <mail@tk154.de>
2025-12-10 10:49:08 +01:00
Yanase Yuki
7403bb5bef ptunnel-ng: remove package
It seems upstream author does not have
time to maintain this software anymore.
Please see v1.43 release note.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2025-12-10 10:44:35 +01:00
Jon Henrik Bjørnstad
d83488b077 qbee-agent: bump version to 2025.49
Bump version to 2025.49

Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>
2025-12-09 19:56:14 +01:00
Jon Henrik Bjørnstad
afd2ef4f3a qbee-agent: bump version to 2025.49
Bump version to 2025.49

Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>
2025-12-09 19:56:14 +01:00
Niklas Thorild
aecb53a8f7 telegraf: set home variable in uci-defaults script
avoid a non-critical error caused by getent not being installed

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-12-09 19:55:06 +01:00
Niklas Thorild
10febdb24a telegraf: update to 1.37.0
- Update Telegraf to v1.37.0

Signed-off-by: Niklas Thorild <niklas@thorild.se>
2025-12-09 19:55:06 +01:00
Simonas Tamošaitis
83f3e116b1 modemmanager: allow empty initial EPS bearer APN
This commit removes the non-empty APN requirement for initial EPS
bearer. An empty APN value is valid and means that the modem will use a
network provided APN offered by the operator.

Signed-off-by: Simonas Tamošaitis <simsasss@gmail.com>
2025-12-09 15:45:10 +01:00