Bumps [docker/login-action](https://github.com/docker/login-action) from 65b78e6e13532edd9afa3aa52ac7964289d1a9c1 to b4bedf8053341df3b5a9f9e0f2cf4e79e27360c6.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/65b78e6e13532edd9afa3aa52ac7964289d1a9c1...b4bedf8053341df3b5a9f9e0f2cf4e79e27360c6

)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump actions/checkout from 3 to 4

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4

)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Enterasys WS-AP3715i is a dualband wireless-N access point.
It comes in a similar casing as the WS-AP3825i, however the hardware is
fundamentally different from its bigger cousin.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

1542103dd adguardhome: update to v0.107.36
13bd46428 syncthing: update to 1.24.0
5f79076fb syncthing: disable quic to support GO 1.21
133bddb2a syncthing: update to 1.23.7
131a04320 tailscale: Update to 1.50.0
a75e1150f tailscale: update to version 1.48.2
eced946bd tailscale: enable autodect of fw type
e7ca549d6 tailscale: Update to 1.48.1
42e796f8a tailscale: Update to 1.48.0
8d1cf768a dnscrypt-proxy2: update to version 2.1.5
45b2d3ecd apache: move to PCRE2
5abeef2c3 apache: bump to release 2.4.57
032b5506c python3-networkx: Update to 3.1, rename source package
76e87af99 python-bidict: Update to 0.22.1
6d3ff6df7 adblock-fast: bugfix: better detect ABP lists

02ed2b0271 hostapd: fix wpa_supplicant mac address allocation on ap+sta
186747a169 mpc85xx: add Enterasys WS-AP3715i reset button
679f89ab65 treewide: Add extra CPE identifier
ba9b93d913 toolchain: musl: add PKG_CPE_ID
0ba56ae446 toolchain: assign PKG_CPE_ID
1b7d48dc5f tools: assign PKG_CPE_ID
388d213392 packages: assign PKG_CPE_ID for all missing packages

Update modules

Remove a workaround for a CSS issue in older Firefox versions, which was
recently fixed (at some point between Firefox 102 and 108). Firefox 108+
now displays the bullet points at the right vertical position even without
the hack in [1].

[1] https://gluon.readthedocs.io/en/latest/releases/v2018.1.html#site-conf

8329130a7c2c tunneldigger: remove redundant package

41c5a695dddb golang: Update to 1.21.1
29ae219a23ef golang: Update to 1.21.0, remove patch
c6656a6289d1 btrfs-progs: update to version 6.5.1
a7e0076acdf5 openvswitch: disable groff manpage check
d5fb69c0244e tunneldigger: set PKG_SOURCE_DATE
3ceb8b36603d tunneldigger: add group option to UCI config
5f8895386e28 django: bump to version 4.2.5

782341458c25 hostapd: fix mac address of interfaces created via wdev.uc
849f0ea65c8f hostapd: fix rare crash with AP+STA and ACS enabled

modules: bump to latest HEAD

6526d607d iperf3: update to 3.15
ce194e20d zerotier: update to 1.12.2
862e2fa22 crowdsec: new upstream release version 1.5.4
5760c525a apfree-wifidog: Update to v6.08.1950
634e8f127 libmariadb: Fix async api by linking to libucontext
7972badcf xfrpc: update to version 2.9.644
8a940b9a5 samba4: update to 4.18.6
e55b41847 czmq: drop libpcre dependency
244bc7e8a mg: switch pcre to pcre2
e731fe980 msmtp: update to version 1.8.24
598e079a2 setools: Update to 4.4.3
edc323ba6 rust: Set rustflags by environment variable

f4e4943d1a mpc85xx: drop WS-AP3715i label-mac
34d8a7f63f ipq806x: 5.15: revert upstream commit to fix #11676
dee4e7b40c kernel: bump 5.15 to 5.15.132
442f7406a9 kernel: bump 5.15 to 5.15.131
39320d4b58 ipq40xx: ZTE MF287 fix sysupgrade
9349302bca ccache: add missing \
912eded06c openssl: update to 3.0.11
2d812f0b72 procd: create /dev/fd symlink
4c2f44c859 wireless-regdb: update to 2023.09.01
06ff4dd562 mvebu: cortexa72: enable USB PHY
457a12a834 ipq40xx: ZTE MF287 series: move to gpio-export for modem-reset GPIO
a684b512e5 ipq40xx: refactor ZTE MF287 series
2f30dec3cb hostapd: fix patch rebase after a crash fix
fe1028e89c hostapd: fix wpa_supplicant bringup with non-nl80211 drivers

e32e59baf node: bump to v18.18.0
67ddab34a rust: Update to 1.72.0
9e7f093db fastd: update repository URL
22f22601d libuecc: update repository URL
596d983e0 nextdns: Update to version 1.40.1
d2ede154d rclone: Update to 1.64.0
a7769bf31 alpine: disable parallel build
332e5eaa4 sudo: bump to verison 1.9.14p3
e22448e18 sudo: bump to verison 1.9.14p1
065d953ad knot: update to version 3.3.1
d2f2d7f55 libreswan: update to 4.12 fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
b507c937d collectd: remove target dependency from cpufreq plugin
7ed0b22bb transmission: add copy_file_range syscall to seccomp
4a94edb06 transmission: add ftruncate syscall to seccomp
29bf6ffe3 transmission: Fix env variables passing
3202834c2 ffmpeg: update to version 5.1.3
7512e421d python-build: Update to 1.0.3
f0bb5ce09 python-build: Update to 1.0.0
f33c8977a python-setuptools: Update to 68.2.0
93ebbfed0 https-dns-proxy: improve boot up startup
0d6f18a7d adblock-fast: bugfix: remove domains on allow
a49722f43 unbound: update to 1.18.0
78434151e Unbound: Silence SSL unexpected eof messages
853109dd6 curl: update to version 8.3.0
51acc2633 treewide: change my no longer used email
02159e6a5 bandwidthd: drop this package
d8776fd36 libucontext: Add package
016424fc1 openssh: update to 9.4p1
bb3247d1b openssh: add server config subdirectory
45b07c0b4 openssh: update to 9.3p2
07b04f9d9 syslog-ng: update to version 4.3.1
c5a254c8d rust: Move RUST_ARCH_DEPENDS into rust-values.mk
e05cf558f python3: Update to 3.11.5, refresh patches
f22b83f67 python-crcmod: Fix package section
f2a59c916 python-pyserial: Update to 3.5, update list of dependencies
1d3737dfc python-cryptodomex: Update to 3.18.0, refresh patches
1e5785e16 python-cryptodome: Update to 3.18.0, refresh patches
1c0e4fc27 ruamel-yaml: Update to 0.17.32, rename source package
cedbb68a0 python-zipp: Update to 3.16.2, update list of dependencies
eb4ab356c python-yaml: Update to 6.0.1
09f044f98 mwan3: fix mwan3_connected ubus output
b4aaffc0e python-zeroconf: Update to 0.97.0, update list of dependencies
c876fc96b xmltodict: Update to 0.13.0, rename source package
ff68c364d slang2: Remove pcre module
7758a2da4 slang2: Avoid building dependencies unless necessary
359a6d511 python-websockets: Update to 11.0.3, update list of dependencies
e47c399cb python-wcwidth: Update to 0.2.6
ef04b76dc python-voluptuous-serialize: Update to 2.6.0
9da8115e8 python-ble2mqtt: update to 0.2.0
fe702c9f1 python-dbus-fast: update to 1.94.1
6bb9bdd5d python-voluptuous: Update to 0.13.1, update list of dependencies
646800830 python-urllib3: Update to 2.0.4
08b5fe210 python-ubus: Update to 0.1.2
0daa65093 haproxy: update to v2.8.3
ec9d61450 python3: Restore platform triplet to paths
2438d49f1 python3: Fix/expand platform triplet detection
b8d9ad62e python3: Centralize config file adjustments in Build/Install
ae845a260 python: Rework filespec install script
147920079 python3: Fix package descriptions
dc08776ef python3: Use regular package recipes for python3 package

43e9cded06 mpc85xx: correct WS-AP3715i eth LED assignment
eda1545e6e hostapd: add missing NULL pointer check in uc_hostapd_iface_stop
6019945e96 hostapd: fix a crash when disabling an interface during channel list update
83bf45ea5c package: base-files: turn error into warning
829196e1b1 netifd: update to the latest version
09b9d732ec hostapd: use phy name for hostapd interfaces instead of first-bss ifname
8b385a45a6 mac80211: fix AP reconfiguration on DFS channels in non-ETSI regdomain
0d1859c258 netifd: update to the latest version
5e3f86a101 hostapd: select libopenssl-legacy for openssl variants
90d5961751 hostapd: remove eap-eap192 auth type value
6e09f88d29 netifd: update to the latest version
6798f156f9 hostapd: support eap-eap2 and eap2 auth_type values
98d0ee9dbf hostapd: fix FILS key mgmt type for WPA3 Enterprise 192 bit
a701e6e1c2 netifd: update to the latest version
9720b094ae hostapd: backport from master, including ucode based reload support
263583dc1e ubus: update to the latest version
9af2ad5111 ucode: update to the latest version
7e55f20c1f kernel: backport support for renaming netdevs while up
385a50f02d ipq40xx: fix image building for ZTE MF287 series
2dc284a79a ramips: RT1800: fix invalid octal number error
c3be832427 ath79: fix packetloss on some WLR-7100
d536f398eb kernel: ensure VFIO related suboptions are disabled
3c8825e5f8 kernel: enable vfio and vfio-pci for armsr-armv8
c79854e9fc kernel: vfio: remove unneeded enable_unsafe_noiommu_mode parameter
c90005c58a x86: remove built-in vhost-net driver
5edeb1ee0c kernel: add vhost-net module
6897270491 mvebu: add reset delays of PHYs for Fortinet FortiGate 50E
10aee60361 ipq806x: Correct OnHub sysupgrade config logic
6c60bbbc94 x86: geode: fix hwrng register accesses
6577b550df base-files: sysupgrade: Add 2 sec sleep into process KILL loop
0165daf569 uboot-envtools: ramips: add support for ALFA Network AX1800RM
3cc223243b ramips: add support for ALFA Network AX1800RM
a7449e5e95 arm-trusted-firmware-mediatek: fix hang on reboot on MT7622
0cb2ff5d08 uboot-mediatek: sync mtk-snand driver with SDK

Rewrite the gluon-wan-dnsmasq initfile to use procd. This allows for
configuring restart handling by procd in case of a crash.

While at it, disable the caching feature optionally used for the regular
dnsmasq on the wan dnsmasq. This daemon is only for redirecting DNS
requests to use local network resolvers, not introducing caching.

Signed-off-by: David Bauer <mail@david-bauer.net>

docs: releases/v2023.1: add warning and known issue for v2021.1.x x86 upgrade

gluon-mesh-vpn-tunneldigger: tunneldigger-watchdog: remove broken restart check

Add a custom CSS class to support strike-through text without depending on
a specific theme.

The docker container on PR action is broken in case the PR is not opened
within the Gluon project.

Remove the build on PR so the pipeline does not fail for third party
PRs.

Signed-off-by: David Bauer <mail@david-bauer.net>

Add ssh-client to enable deployment of the build output from CI.

The tunneldigger init script has been migrated to procd, so there is no
PID file anymore. Remove the obsolete check altogether - it shouldn't
be needed anymore, as procd will take care of crashes of tunneldigger by
itself. This fixes the watchdog resetting tunneldigger every time it runs.

Closes #2977

Fix Dockerfile / container.sh for UID/GID other than 1000

While Podman automatically populates /etc/passwd and /etc/group with
matching entries for the mapped host user, such a feature is missing
from Docker. Install libnss-unknown, which will return passwd entries of
the form "uid-1000" for all unknown UIDs, to avoid warnings and other
weird behaviour that may occur when running as an unnamed user.

`-o` must be passed to useradd now to allow non-unique user entries, as
with libnss-unknown, every UID is considered occupied.

To make the container behave the same regardless of the UIDs used
outside of the container, choose a UID that is unlikely to be used by
the user mounting their build directory the container. 100 should not
conflict with common defaults on Linux (min UID 1000) or MacOS X
(min UID 500). Conveniently, there is already a group "users" at GID
100, so creating a new group can be avoided.

Initialize the /gluon volume with the contents of /etc/skel.

[Matthias Schiffer: extend commit message]

The command was more complicated than necessary, and somehow contained
two redirects of stdout.

Fixes access to the build directory mounted into the container when UIDs
don't match.

For Docker, HOME is set in addition to get a more useful value than /
and for consistency with Podman.

contrib: depdot: use processed package info

Instead of poorly parsing Makefiles using grep, use OpenWrt's processed
package info files. This fixes handling of DEPENDS fields spanning
multiple lines and adds support for source packages building multiple
binary packages.

Closes #2814

gluon-status-page: disallow crawler/robots to index

This adds a workflow to push the build-container described in Gluons
Dockerfile to the freifunk-gluon organizations container registry.

This will create a image

 - For every push to master
 - For every tagged version
 - For every PR against master

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

ad787a9 opennds: update to version 10.1.3

c92b5ece1 v2ray-geodata: Update to latest version
c088a6451 v2raya: Update to 2.2.4
19a2d9abd xray-core: Update to 1.8.4
3edbf6c28 lua-eco: update to 2.5.1
1ed72c911 vnstat2: update to version 2.11
dc5f8276e zerotier: update to 1.12.1
8111eaaac lua-eco: update to 2.5.0
7a670e180 adblock-fast: initial commit
c30599f55 https-dns-proxy: fix dns resolution not working on boot
ae8a98055 qemu: enable host support for armsr/armv8
8067a8e38 python-wheel: Update to 0.41.2
e7cbf1218 python-pluggy: Update to 1.3.0
8b7cb3b30 mpfr: Update to 4.2.1
ad909595a python-trio: Update to 0.22.2, update list of dependencies
e298edaa8 python-tornado: Update to 6.3.3, update list of dependencies
ec47038bc python-sqlalchemy: Update to 2.0.20, update list of dependencies
0df111450 python-slugify: Update to 8.0.1, update list of dependencies
09ac1b403 python-sentry-sdk: Update to 1.29.2, update list of dependencies
765c405d9 python-schema: Update to 0.7.5
c36b0b77b python-schedule: Update to 1.2.0
ce0c8573e python-rsa: Update to 4.9, update list of dependencies
18b774218 v2raya: Update to 2.2.2
8f0f2c9ba mpd: Update to 0.23.13
f99d72891 nvme-cli: Fix categorization
a412d3577 mhz: respect CC and CFLAGS passed by buildsystem
2c3ba010c knot-resolver: update to version 5.7.0
f724ad534 collectd-mod-ipstatistics: fix handling of long `/proc` lines
4c7a6d751 bottom: New package
369511a29 CI: Fix finding test script
97f29998c gl-mifi-mcu: remove package as it is device specific and I can't test it anymore
5d8780bf1 gl-mifi-mcu: make compatible with newer kernel (fix #21198)
0ae68980d nvme-cli: Add new package
0a32a6129 prometheus: drop package
4c4ee8b8f tree: bump to 2.1.1
c80493e32 knot: enable QUIC support
67ec91ab2 knot: update to version 3.3.0
dd283a56f knot: update to version 3.2.9
999668ac6 knot: update to version 3.2.8
a6bac4e4a knot: update to version 3.2.7
87cad3fa0 modemmanager: copy dbus interfaces file to staging
fe9f52589 modemmanager: add setting for allowed and preferred mode
6e7775511 modemmanager: remove unneeded teardown error reporting
e2761035b modemmanager: fix white spaces
43022cda7 nginx: bump to 1.25.0-4
9f3e67a52 nginx: fix erroneous new line escape in Makefile
dab745d8a tang: tang-show-keys defaults on the default 9090 port
eb822fe28 tang: tang-show-keys uses wget instead of curl
ae7743ed1 v2raya: Update to 2.2.1
123d1c4ea python-ble2mqtt: update to 0.1.9
5148922d8 python-dbus-fast: update to 1.93.0
786347806 sing-box: update to 1.4.0
ef466651d sing-box: update to 1.4.0-beta.5
b7df2d1ce sing-box: update to 1.3.0
2ab4f7992 tang: do not require bash
8b7ab56e2 tang: corrected hash for v14
5b6d6aa66 tang: updated to v14
2cba6cd07 file: Fix FTBFS due to missing dependency
d99e9f66c File: Fix segfault
69764b855 File: Update to version 5.44
1ad56abc8 python-setuptools: Update to 68.1.2
88f47ac9f python-poetry-core: Update to 1.7.0
9e48c6332 python-click: Update to 8.1.7
543cdd3c4 python-pytest-xdist: Update to 3.3.1, update list of dependencies
9b6dfcd0b python-pytest: Update to 7.4.0, update list of dependencies
e96885432 python-pyrsistent: Update to 0.19.3, update list of dependencies
1ee689cd4 python-pyparsing: Update to 3.1.1
da088866a python-pyotp: Update to 2.9.0, update list of dependencies
ca82d56d7 python-pyfuse3: Update to 3.3.0, update list of dependencies
7be0bbd54 python-py: Update to 1.11.0, update list of dependencies
7f3764293 Nlohmannjson: Update to version 3.11.2
ef526b1df miniupnpd: remove uci-defaults and fw4-include files for nftables variant
05bbbb6b5 easyloggingpp: Update version to 9.97.1
c74e72580 easyloggingpp: Add package Maintainer: me@vchrist.at Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2
a56b7d46f lua-lsqlite3: add build VARIANT for Lua5.3

cdc8470aec mac80211: fix MT7620 Wi-Fi channel scanning function
9df9126320 ramips: pinctrl: support requesting different functions for same group
4f1a7e8897 mac80211: rework MT7620 PA/LNA RF calibration
b2d264dc68 mediatek: mt7622: set DEVICE_DTC_ADDR for BPi-R64
a2ffbc8d16 arm-trusted-firmware-mediatek: enable built-in 2.5G PHY on MT7988
d052d409a0 uboot-mediatek: fix dependency on TF-A for MT7988 RFB (sdmmc)
3967c26974 mediatek: filogic: remove stray quote
625d19c1e2 generic: sync MediaTek Ethernet driver with upstream
230c09d203 mediatek: add support for Ubiquiti UniFi 6 LR v3
c8c1805100 uboot-mediatek: add builds for UniFi 6 LR v2 and v3
ed370ec424 mediatek: generate bootloader artifacts for mt7988_rfb
35d123adfe uboot-mediatek: build fully-featured U-Boot for MT7988 RFB
87ef305984 mediatek: improve mt7981.dtsi
ffede121f8 mediatek: filogic: improve pinctrl drivers
5a9720945f mediatek: i2c: mt65xx: allow optional pmic clock
88c12d6632 mediatek: re-add dropped properties on BPi-R3
cf08db988b generic: backport initial LEDs hw control support
e685162a78 kernel: bump 5.15 to 5.15.130
8bf25dba77 kernel: bump 5.15 to 5.15.129
3c1721ae03 kernel: bump 5.15 to 5.15.128
56827dac01 kernel: allow adding devices without hw offload to a hw flowtable
736e3b81aa urngd: update to the latest master
f493987d13 nettle: update to 3.9.1
b9c94686f7 Revert "ath11k-firmware: update to stable WLAN.HK.2.9.0.1-01837"
104178a990 mt76: update to the latest version

docs: GH use `requirements.txt`