2cf0156 libplatforminfo: handle armsr target

83ef378 nodogsplash: explicit file copy
eb2a29e nodogsplash: update to version 5.0.2

be1804da8 tor: update to 0.4.8.7 stable
c214bc111 zabbix: move to PCRE2 library
876f3fa5b postfix: move to PCRE2 library
f2fb6c561 postfix: bump to 3.8.2 release
08670d65c knot: patch enabling PKCS11 related code only if PKCS11 is available
89f92abc3 knot: update to version 3.3.2
2cc3f40b6 fdm: update to 2.2 release and switch to PCRE2
69d10e78e tvheadend: drop support for PCRE
8e4d2a7a6 tvheadend: add dependency on gettext (host)
ba3a2c198 tvheadend: update to 2023-06-05
ae7e40514 freeradius3: switch to pcre2
7226eb4fa freeradius3: Update to 3.0.26
f304110d0 travelmate: release 2.1.1-2
6db87db0a travelmate: release 2.1.1
2ff4bbaa5 ngtcp2: update to 1.0.1
235df4a22 dnsproxy: Update to 0.56.2
9af082dbc rclone: Update to 1.64.2
c37c2c5e0 rclone: Update to 1.64.1
f804ce20d https-dns-proxy: bugfix: crashes on logging from upstream
2f40f153b curl: prepare for HTTP/3 support
101ef86ee ngtcp2: add new package
e9bc3a70d nghttp3: add new package
273132baa snowflake: update to 2.7.0
b441feedf sing-box: update to v1.5.4
2dd9b92c1 transmission: update to 4.0.4
30fdc34b9 transmission: fix depends on libmbedtls
e458d26df exim: update to version 4.96.2
f4406635c cryptsetup: update to version 2.6.1
a5aa83ea2 lvm2: update LVM2 to 2.03.22 and DM to 1.02.196
8ef1ea882 https-dns-proxy: bugfix: prevent crashes on IPv6 systems
8ca88fc77 tor: fix daemon reloading
29837902d tor: update to 0.4.8.4 stable
1350b323b stress-ng: backport immintrin.h header detection for GCC 13
6d52a2476 stress-ng: bump to version 0.17.00
2b6d8fff1 stress-ng: bump to version 0.15.10
94be9cc19 shadowsocks-libev: convert to PCRE2
f14a03638 ooniprobe: remove unused package
a566154df micropython-lib: move to PCRE2
9f4329153 conntrack-tools: update to 1.4.8
2d5990822 adblock-fast: bugfix: allow command
985d0af6e rust: fix build with glibc, ARM and hard floats
e9d12e379 shairport-sync: fix init script
fb0c43164 net-snmp: backport patch fixing memory leak for PCRE2
3658011d9 node: Friday October 13 2023 Security Releases
f8753b970 ddns-scripts: add ddns-scripts-utils package
c34885d8b ddns-scripts: desec.io - update url to https
a56540e73 ddns: Prevent clearing of desec.io entries
8a5dd0672 https-dns-proxy: bugfix: logging crashing instances on ath79
156c8ab3b dnsdist: update to 1.8.2
f9b72c115 dnsdist: update to 1.8.1
d2599b8f2 dnsdist: Move the configuration to Config.in
c0ce509c4 dnsdist: Split in two packages `dnsdist` and `dnsdist-full`
bad939906 h2o: ABI-breaking patch for CVE-2023-44487
cadf429a4 h2o: Build libh2o-evloop without yaml support
d1c12e082 nghttp2: fix CVE-2023-44487
e67bba368 lighttpd: update to lighttpd 1.4.72 release hash
c42f1261f zsh: use autoreconf PKG_FIXUP to configure
45498f4b8 zsh: backport PCRE2 patches and move to it
b8fe33cd2 golang: Update to 1.21.3
2fa541608 samba4: Update to version 4.18.8
1465e81a4 dnsproxy: Update to 0.56.1
54c8035cf rust: update to 1.73.0
58ade934e kmod: update to 31
8d06c50d5 snowflake: update to 2.6.1
c09ba4e6e node: bump to v18.18.1
0e6ceb80f cni-protocol: update protocol
7fe0677d0 podman: update to 4.7.1
c01ce827d aardvark-dns: update to 1.8.0
e07515df0 netavark: update to 1.8.0
a38348e64 slirp4netns: update to 1.2.2
35f99480c crun: update to 1.9.2
3fd6e9e05 conmon: update to 2.1.8
6544ab791 python-setuptools-rust: Set cargo profile from environment variable
6bded4a1f rust: Set release profile settings
74b970fbc rust: Add option to use sccache
236da17e6 rust: Use make's jobserver when building packages
185f27789 rust: Consolidate cargo environment variables
9762480e0 rust: Move CARGO_HOME to $(DL_DIR)/cargo
a9e98ed2d rust: Move cargo config options into environment variables
c3247d59e rust: Install to $(STAGING_DIR)/host
b7a65dba3 rust: Improve Host/Install speed
a80300210 rust: Cache bootstrap downloads to $(DL_DIR)/rustc
7a947aa22 rust: Add RUST_HOST_FEATURES for host builds
6f2cba3ef rust: Use build host Python
12be20d0c python-zope-interface: Update to 6.1, refresh patch

16fcad47a4 hostapd: fix OWE association with mbedtls
6bb3c2eba8 ramips: enable wireless LEDs activity blinking for TP-Link EC330-G5u v1
eaf44c5696 hostapd: do not trim trailing whitespace, except for newline
220ab83cd1 ath79: increase the rfkill debounce interval for TP-Link Archer C7 v2
ed6e13649d ramips: fix Gigabit Ethernet port of the HiWiFi HC5861
26164312b4 iptables: opt-out of lto usage
f1ea45f853 lua: opt-out of lto usage
1d5d149330 libsepol: opt-out of lto usage
b5817d14c9 libselinux: opt-out of lto usage
fefa446127 iwinfo: opt-out of lto usage
07e9c27bde build: hide kmod-zram config unless enabled
3d0a78add2 qualcommax: only build initramfs if CONFIG_TARGET_ROOTFS_INITRAMFS is set
620721f642 uboot-mediatek: Sync phy-mode for Xiaomi Redmi Router AX6000
982f859144 sunxi: fixes led for nanopi boards
64ab02aff8 kernel: bump 5.15 to 5.15.137
06efc8027f kernel: bump 5.15 to 5.15.136
8ff9264177 bcm53xx: backport XHCI patch modifying xhci_run_finished()
269896fed0 kernel: bump 5.15 to 5.15.135
aaa1286b89 kernel: fix jffs2 compilation with GCC_PLUGIN_RANDSTRUCT enabled
5368066e9b umdns: update to the latest version
525adac8ee uqmi: update to latest HEAD
c4c9f61331 prereq: merge common cases in SetupHostCommand
9eec4eb268 prereq: make existing binary check work for sdk as well
6150df13a3 bcm53xx: backport 1 more late DT patch accepted for v6.7
7bd682bc58 bcm53xx: disable unused switch ports in downstream patch
cd189cdefe bcm53xx: backport DT changes queued for v6.7
a1e3ec0ff6 bcm53xx: simplify patch adding switch ports
ba300c8a1c bcm53xx: build a single device per profile
97980323ef bcm53xx: add support for ASUS RT-AC3100
07d4455cee bcm53xx: backport DT changes for ASUS RT-AC3100 queued for v6.6
74dbee1ea0 bcm53xx: add Wavlink Quantum DAX/WL-WN538A8 as alt name
cdf7c3a16e openssl: update to 3.0.12
6a1b92b024 bcm53xx: Linksys EA9200 nvram and 02_network fixes
75fe50defe ramips: TP-link archer A6/C6 device tree updates
263ef841d4 CI: provide new required secret for S3 endpoint and bucket name
c53dda11a2 CI: generilize S3 secret keys name and rename to proper name
b63c6e3512 CI: drop unused reusable workflow and dockerfiles
76a9b0e02a CI: migrate each workflow to use reusable workflow from dedicated repo
3826ebbd18 CI: build-tools: build all host tools
b00fcab13c CI: label-kernel: support compile testing kernel version and all target
6cdd9a6de4 ci: build: verify downloaded toolchain tarball
37395ecb32 ci: bump buildworker container to version v6
05331f0ef8 CI: kernel: test each subtarget on push events
f7e4f8cbbf CI: add support for getting ccache cache from S3
5bfa66bcf3 CI: build: limit cache save/delete only on push events
15f4d6b244 CI: coverity: disable ccache usage
51adcb7cd2 CI: build: fix ccache cache usage
d7e2468e13 CI: build: add option to define custom ccache cache type
c8d4694d2c CI: build: add option to disable use of ccache
fad08e8e23 CI: build: add job to remove previous ccache cache if already exist
c5441d24d9 CI: build: split cache ccache in separate restore and save jobs
f666723f6d CI: ignore master branch for push events
e83384b87e CI: build: Add support to use container included external toolchain
e2780cbb2f CI: push-containers: build and push container with external toolchain
6099d083a6 CI: build: add checks to test if toolchain container can be used
6c80c7533b CI: build: add option to configure container to use
b98b3d4296 CI: build: package external toolchain after build
6420851c0c CI: build: drop redundant generate ccache hash job
ee3600a91e image: Fix the CONFIG_EXTERNAL_CPIO logic
023f90fbc8 Revert "lantiq: xrx200: mark subtarget as source-only"
03cb2d63f4 apm821xx: WNDR4700: fix broken sysupgrade, factory images
58d57f7673 ipq40xx: wpj428: switch to zimage to fit kernel partition
4afff7b8b5 ipq40xx: switch to performance governor by default
1304234dd7 netifd: update to latest git HEAD
0da199f60c base-files: fix wrong ucidef_set_network_device_mac network-device entry
c0c4a9bce4 armsr: preserve configuration during sysupgrade
72f7f18d2b mbedtls: Update to version 2.28.5
77061285e4 ramips: fix ZyXEL NR7101 bricking typo
4245adf4e0 realtek: add support for HPE 1920-8g-poe+ (65W)
2ce5521bd2 realtek: rename hpe,1920-8g-poe to match hardware
0bc33a6505 ath79: wpj563: enable 2nd USB controller

Signed-off-by: David Bauer <mail@david-bauer.net>

gluon-radv-filterd: replace malloc with calloc

Rouven Czerwinski authored 1 year ago and Emantor committed 1 year ago

Allocation of the router structure for newly detected router
advertisements was done using malloc and selectively clearing some of
the structure fields. However the redirect boolean was never set to 0,
which means that during update_redirect, we would depend on the random
initialization value of the structure.

This means that sometimes ebtables-tiny wouldn't add the correct rules
for the advertised routes.

build: fix duplicate building of host-tools

ci: update branch-pattern matching

Upstream introduced two different methods for determining the state of a
package within the OpenWrt buildsystem. While both are based around the
md5 hash-function, one taks filename & mtime into account while the
other one uses the actual md5 hash of the file-content.

Ever wondered why Gluon suddenly took considerably longer to build?
The messy part is how the build-system chooses which method to use. This
is based around the AUTOREMOVE configuration. Gluon sets this variable
conditionally when built with GLUON_AUTOREMOVE set to 1.

Enter the Gluon build-system. It first compiles Lua, without the
AUTOREMOVE configuration passed to OpenWrt. This compiles the packages
with the old hash-method based around filename & mtime. Afterwards, it
builds with AUTOREMOVE enabled, changing the hash-function and
rebuilding all host-packages.

Fix this by setting AUTOREMOVE for both build-processes according to the
setting of GLUON_AUTOREMOVE.

Link: https://github.com/openwrt/openwrt/commit/53a08e37437972ba0a8fbf953a93a70a6b784ef4



Signed-off-by: David Bauer <mail@david-bauer.net>

Also known in Germany as Gigacube CAT20

It makes sense to run CI build-tests in case the CI itself is altered.

Signed-off-by: David Bauer <mail@david-bauer.net>

docs: fix typos, change letter case and remove whitespace characters

Add a workflow-dispatch trigger to the build-workflow to enable
triggering build-tests on branches not covered from the match
pattern.

Signed-off-by: David Bauer <mail@david-bauer.net>

In #2997 it was pointed out the current branch-trigger matches more
branches than the release-branches. Retrict the match-pattern to only
cover release-branches

Also only trigger builds on the next-branch and not branches prefixed
with this name.

Link: https://github.com/freifunk-gluon/gluon/pull/2997#issuecomment-1771076385



Signed-off-by: David Bauer <mail@david-bauer.net>

actions: improve docker image build-process

Prefer packages from Gluon feeds to upstream feeds

Also build the docker-container whan creating pull-requests. Keep the
pull-request triggered builds from pushing to the container registry.

Signed-off-by: David Bauer <mail@david-bauer.net>

We don't want OpenWrt packages to replace Gluon packages by accident;
the same logic applies to packages from site feeds.

This gives site feeds a higher precedence than gluon/packages, but that
is unlikely to cause any issues. Gluon base packages still have an even
higher precedence.

To avoid getting surprised again by a (possibly incompatible) OpenWrt
package replacing one of ours, move our own feed to the front, so it has
higher precedence than openwrt/{packages,routing}.

Only push the container to ghcr in case the repository is owned by the
freifunk-gluon organization.

THis avoids failing CI on forks.

Signed-off-by: David Bauer <mail@david-bauer.net>

lantiq-xrx200: mark target as broken

CI: Fix target filters, add CI check

modules: update gluon

Cherry-pick v2023.1.1 release notes to master

ce2e6ac1937a simple-tc: fix kmod dependencies

`make update-ci` is very fast, so we can run it unconditionally.

This reverts commit c418b7bb.

Our CI builds do not use the Docker image, so adding the Dockerfile to
the filter does not make sense. In addition, the entry was missing in
generate-target-filters.py, so it would have been removed when the
filters were regenerated.

modules: update to latest HEAD

lantiq-xrx200 is currently marked as source-only in OpenWrt 23.05, as
the switch driver does not work correctly on Linux 5.15. Mark as broken
in Gluon as well until the issue is fixed.

Upstream PR: https://github.com/openwrt/openwrt/pull/13200

Co-authored-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1e954349fc401d3e7c80dda420eaa22982ee62a6)

(cherry picked from commit b313a63117fcb920a87196a5ea44b5c990a81140)

72efd36 uradvd: remove redundant package

2272106 luci-app-bmx6: drop this because of security vulnerabilities
828e764 bmx6: drop package

0da9f6229 v2ray-geodata: add package v2ray-geosite-ir
277c4cb21 cloudreve: Update to 3.8.3
7eb9fe8a8 dnsproxy: Update to 0.56.0
0525b9b84 dnsproxy: Update to 0.55.0
e3c3b6c09 v2ray-core: Update to 5.8.0
ff0be7c4b curl: Update to version 8.4.0
bec2e7fc8 python3: Update to 3.11.6, refresh patches
0929d16d3 sing-box: update to v1.5.2
9b812d9c0 nextdns: Update to version 1.41.0
292551163 net-snmp: move to PCRE2 library
caf47b755 libvpx: update to 1.13.1
f6ae83622 exim: update to version 4.96.1
da0a243e0 golang: Update to 1.21.2
15cfd52f1 python3: avoid unnecessary rebuilds
0d1b08013 openssh: bump to 9.5p1
2c0657205 tor-fw-helper: remove it
9f6eb89ea python-twisted: Update to 23.8.0, rework patches
4bcfa675f crowdsec-firewall-bouncer: new upstream release version 0.0.28
f611ae00d banip: release 0.9.1-1
40899bca7 yq: Update to 4.35.2
80bc44cb7 adblock-fast: bugfix: properly identify hosts-files
1458dc558 atftp: move to PCRE2
1013bdd5b atftp: bump to release 0.8.0
41e64f8a7 ffmpeg: Add avi muxer
0d95becbc wget: Update to 1.21.4
ba11cad3a syslog-ng: update to version 4.4.0
c5f6b62fd python-cffi: Update to 1.16.0
4c4fa3cd2 python-packaging: Update to 23.2
8620abe6a python-bcrypt: Update to 4.0.1, add myself as maintainer
36a473bf5 python-pyopenssl: Update to 23.2.0
71f226e03 python-charset-normalizer: Update to 3.3.0
35fbb7385 adblock-fast: update to 1.0.0-5
3360cce9f libwebp: bump to version 1.3.2
4c79fddac prometheus-node-exporter-lua: drop bmx6 package
24fdd4ae1 cloudflared: Update to 2023.7.3
cf3390106 adguardhome: update quic-go to v0.37.6
88ef5d0ba python-typing-extensions: Update to 4.8.0
66958cef9 python-trove-classifiers: Update to 2023.9.19
191d367d1 python-setuptools: Update to 68.2.2
4ed41a0cb python-cryptography: Update to 41.0.4
402ebe84f python: Add environment variables to build Rust extensions
f78e60fa8 python-setuptools-rust: Add new host-only package
882ce5ddf python-semantic-version: Add new host-only package
dc38ce57b exim: apply hotfix for some ZDI reported vulnerabilities
e805d653d adblock-fast: update to 1.0.0-5
7d35ac5c1 v2raya: remove go version hack
c38a05741 v2ray-core: backport upstream Go 1.21 updates
0aad4266f frp: update to 0.51.3
70960d4e8 frp: update to 0.51.0
77f62ddb6 kismet: drop the package
55ca07c78 adblock-fast: better error reporting when nothing to do

86e852bcd0 OpenWrt v23.05.0: revert to branch defaults
bd4f415efa OpenWrt v23.05.0: adjust config defaults
6637af95aa bsdiff: Add patches for CVEs
fadbec8857 kernel: bump 5.15 to 5.15.134
6d65f5ea2b kernel: bump 5.15 to 5.15.133
e26947993f toolchain: glibc: Update glibc 2.37 to recent HEAD
4cbfbb2eda realtek: 5.15: rtl93xx: support 2500baseT and 5000baseT on USXGMII links
83e681e69e rtl83xx: fix STP by trapping BPDUs
5b00873f5d uqmi: added timeout to fix hanging qmi.sh
76758a8694 yafut: add missing PKG_MIRROR_HASH
130d5056c1 generic: add patch for GPON-ONU-34-20BI quirk
2a457dcd72 CI: push-containers: refresh containers also on modify cmake options
07e4352d80 CI: push-containers: fix concurrency group
3fff625542 rtl93xx: fix condition intended to only select internal serdes ports
e92cf0c46f ramips: fix Mercusys MR70X LAN port assignments
b742216dc8 OpenWrt v23.05.0-rc4: revert to branch defaults
50690dd5cc OpenWrt v23.05.0-rc4: adjust config defaults
7fe85ce1f2 hostapd: increase PKG_RELEASE to fix builds