chrony: fix uci NTP access configuration

tiff: update to 4.2.3

The chrony interface hotplug script reuses the handle_allow function
from the init script to allow NTP access on interfaces specified in uci.
The function requires /lib/functions/network.sh. Include the file in the
hotplug script to make the function work as expected.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

node: bump to 14.17.1

haproxy: Update HAProxy to v2.4.1

yq: Update to 4.9.6

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Fix a possible security issue with OpenSSL config autoloading on Windows (CVE-2021-3606).
Include a number of small improvements and bug fixes.

remove upstreamed: 115-fix-mbedtls-without-renegotiation.patch

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Notable Changes:
deps: update ICU to 69.1 (Michaël Zasso)
errors: align source-map stacks with spec (Benjamin Coe)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

yggdrasil: allow HTTPS connections

strongswan: fix PSK config generation

There were closing curly braces missing and it was checking for empty
strings while it should have been checking for non-empty strings.

Signed-off-by: Vincent Wiemann <vincent.wiemann@ironai.com>

strongswan: use correct directory for CA's

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

* fix issue with nginx search pattern reported in forum support thread

Signed-off-by: Dirk Brenken <dev@brenken.org>

apparmor: fix packaging

strongswan: fix sharing of ipsec section variables

knot-resolver: change scheduling priority

samba4: update to 4.13.9

* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Variables set in config_ipsec() need to be shared with do_postamble()
function, so change scoping to parent (prepare_env()).

Also, remove unused settings like "remote_sourceip", "reqid", and
"packet_marker".

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

less: update to 590

This should prevent some resolving issues by other router app.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

libogg: update to 1.3.5

Removes the BUILDONLY flag as otherwise no packages will be created.

Signed-off-by: Vincent Wiemann <vincent.wiemann@ironai.com>

linknx: adopt new libesmtp version

libesmtp: update to 1.1.0

New upstream. Uses meson now. Removed outdated patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

hdparm: update to 9.62

Signed-off-by: Othmar Truniger <github@truniger.ch>

Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>

Override places that call uname to detect target features

Signed-off-by: Felix Fietkau <nbd@nbd.name>

libcap-ng: update to 0.8.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tmux: update to 3.2a

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

netatalk: drop package

dockerd: refactoring uciadd and ucidel handling

Link to abandoned packages PR: https://github.com/openwrt/packages-abandoned/pull/18

AppleShare products have been unused for a while now (since Mac OS 9.2.2)
around 2002.
So, there should be fewer users requiring this package.

Last update of netatalk was in December 2018. Not sure if newer updates
will be created.

It's time to cut the cord on our end and move it to the abandoned packages.

Info: https://en.wikipedia.org/wiki/AppleShare

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

protobuf: update to 3.17.2

alsa stuff: update to 1.2.5

autossh: fix compilation without ssh installed

This change makes the handling of adding and deleting interface, device
bridge and firewall more robust.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>