850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f785f4b0a8fae2b97feb6df0753c96ee7)

* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e545)

Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e7)

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d)

This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd52865)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b7e1077a60)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 576032a0e4)

* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726)

Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Previously it was using killall with procd respand enabled

This was causing yggdrasil to restart after being killed

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
Terminated
143
 6701 root      653m S    /usr/sbin/yggdrasil -useconffile /tmp/yggdrasil.conf
 6748 root      1308 S    grep yggdrasil

Now it's just using whatever procd is using and see there, it actually stops

root@r3test-hap:/# service yggdrasil stop ; echo $? ; sleep 10s ; ps | grep yggdrasil
0
 6802 root      1308 S    grep yggdrasil

I assume there was some procd bug that kept it from being used properly

Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
(cherry picked from commit 17bb2d2519)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce63c3fd8)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b624721435)

banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a2f0257272)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 202f0007d6)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 20a51c2efd)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 35961ec90d)

The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb)

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d1)

Now with basic support for the Array Networks SSL VPN protocol.

Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs,
for the time being, so select them if compiling against OpenSSL.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a85a057b14)

Reported-by: Huangbin Zhan <zhanhb88@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 93162b35c8)

7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a0578d0759e5a03309e5be38cf746db)

1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b9578)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 95a0d04046)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcb0495ca1)

7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 5c8af06c94)

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)

Signed-off-by: Derek Yerger <derek@altdevs.net>
Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 51203cae24)

- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fc090f1eeb)
[Removed wrong cherry-pick info]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8f6bf937ca)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74d7af61fe)

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)

Signed-off-by: Mister Benjamin <144dbspl@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)

which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1d)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20)

Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e2f8ac23f6)

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)

Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f5401ff6dc)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

(cherry picked from commit 5f6dcc013d)
(cherry picked from commit cbcc4c08df)