Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8f6bf937ca)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74d7af61fe)

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)

Signed-off-by: Mister Benjamin <144dbspl@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)

which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1d)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20)

Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e2f8ac23f6)

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)

Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f5401ff6dc)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

(cherry picked from commit 5f6dcc013d)
(cherry picked from commit cbcc4c08df)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0aaea23c07)
(cherry picked from commit da524a4d08)

Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)

Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be43)

Upstream sent patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e35467459b)

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b45d39c142)

f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6ba0ab1aad8a6c816354486067e5e521)

Remove Go 1.18 patch as upstream source has updated go dependencies

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73e)

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 4165f7c7dd)

Fixed typo error: `AUTORELESE` > `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6a86a2b63)

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74bf9cc71c)

* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec6069)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 51208c9514)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit eed4277d5c)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 209bcc649a)

The forecast plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6e132e74fd)

The connmark plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6cb15df69a)

Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 93fbbcbfee)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1f86641d2)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f3a1d2ed1f)

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f8c8348f32)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit cf1e146858)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

This reverts commit 3ffd540b04.

This does not work with the kmod currently in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99dfcbd2fb)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed260f3b98)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87c611abf8)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2bf3d9a777)

Make sure /etc/gnunet and all its files and sub-directories are owned
by gnunet:gnunet. This is somehow necessary as file ownership otherwise
doesn't survive sysupgrade.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65f5f850f3)

Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d59731ba61)

This is a bugfix release for gnunet 0.16.1.

Noteworthy changes in 0.16.2 (since 0.16.1)

    DHT: Fix path signature handling.
    GNS: Fix BOX handling in zone apex.
    NAMESTORE: Prevent storing under invalid labels.
    Buildsystem: Fix build on *BSD and Guix.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 033744ac59)

* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b)

Added missing call for rclone-config.

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

f4e120c band-steering: add band-steering component
439acc5 policy: add steer-reject-timeout
648c6f3 policy: make roam-steers client-rejectable
1fa3210 policy: update roam-state after hard-kicks
c19c885 policy: move load-kick out of kick meta-function
96ef3a6 ubus: skip neighbors which exceed their assoc limit
86e7297 policy: export below_max_assoc
33a5acd policy: make policy helpers more generic
32fed79 add local_mode config option

Signed-off-by: David Bauer <mail@david-bauer.net>

Fixes #18082

Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>