4b2b6b3 naywatch: add log when naywatch activates

3aaf33242 mosh-full: Add perlbase-text dependency
7caba084e mosh-full: Sort dependencies alphabetically
afea2bcaf beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
a7c3a883d node: bump to v16.15.0
b38fedc4d xray-core: increase nofile limitation
927464150 xray-core: Update to 1.5.7
486508e25 dnsproxy: Update to 0.43.1
e9bab297a golang: Update to 1.18.3
83516e303 gg: Update to 0.2.6
fb773a5fe htop: update to 3.2.1
bc417a955 libcoap: make sure `libcoap-3-notls.so` is installed
b1fa0b81c ksmbd-tools: update to 3.4.5
b86d48ee2 ksmbd-tools: update to 3.4.4
0060d7663 irqbalance: remove local patch for socket directory
cd35bee8b irqbalance: update to 1.9.0
dbec8e910 yggdrasil: stop properly

3cfe050c4a kernel: crypto: add kmod-crypto-chacha20poly1305
23f0fea742 sunxi/cortexa53: enable armv8-CE crypto algorithms
83dfa4156e rockchip/armv8: enable armv8-CE crypto algorithms
7f4467784f octeontx: add armv8-CE version of CRC T10
9ff2e7d3e7 mvebu/cortexa72: enable armv8-CE crypto algos
75ffc994ba mvebu/cortexa72: refresh kernel 5.10 config
cd25cc0558 mvebu/cortexa53: enable armv8-CE crypto algos
23bc97c281 mvebu/cortexa53: refresh kernel 5.10 config
33dd466422 layerscape/armv8_64b: enable armv8-CE crypto algos
51f1480e48 bcm4908: enable armv8-CE crypto algorithms
4101c8191e bcm27xx/bcm2711: enable asm crypto algorithms
8f393cf2f8 bcm27xx/bcm2710: enable asm crypto algorithms
2b4fba8750 ath79: D-Link DAP-2680: select QCA9984 firmware
d5f911e68f OpenWrt v22.03.0-rc4: revert to branch defaults
677e3c18fe OpenWrt v22.03.0-rc4: adjust config defaults
2b1941e47d bcm53xx: remove BROKEN flag from Asus RT-AC88U
a83dc6b06d kernel: move Toshiba-TC58NVG0S3H patch to ipq40xx
3b90edaff9 wolfssl: make WOLFSSL_HAS_OPENVPN default to y
fe9c4593b5 wolfssl: enable CPU crypto instructions
50b6f5604b wolfssl: add benchmark utility
f4b7541b22 wolfssl: don't change ABI because of hw crypto
ff889898d2 kernel: bump 5.10 to 5.10.120
0ca9367069 kernel: bump 5.10 to 5.10.119
49f8a75031 kernel: bump 5.10 to 5.10.118
3ce3de934c kernel: bump 5.10 to 5.10.117
b24c301709 ksmbd: update to 3.4.5
e8fedf26ab ath79: allow use GPIO17 as regular gpio on GL-AR300M devices
c29641f718 ath79: ZTE MF286[,A,R]: use GPIO19 as ath9k LED
9325aefaf3 ath79: ZTE MF286[,A,R]: fix WLAN LED mapping
720a7db7ea build: fix find warning with SCAN_EXTRA
8e9eaef70a kernel: fix crashes in bridge offload code
33df033b73 mac80211: add a bug fix for a rare crash
d04a947b6b uboot-imx: fix wrong make flags overriding
972160a0f7 kernel: backport flow offload fixes
26958e9724 bmips: dgnd3700v2: fix network config
fe04b41d70 libubox: update to the latest version
9c0f94e955 ltq-vdsl-app: disconnect when service is stopped
8f4b5fdd5f ltq-vdsl/ltq-adsl: fix elapsed time calculation
ea0744fbc6 ltq-atm/ltq-ptm: avoid unnecessary build dependencies
290c13b7d7 ltq-vdsl-mei: add locking to interrupt handler
d0397abd9d ltq-vdsl-app: set MAC address for vectoring error reports
642d6c0c6d ltq-vdsl-mei: enable vectoring error sample callback
e56836dfc1 ltq-vectoring: add driver
de0a9b0eab realtek: add gpio-restart for D-Link DGS-1210-28
e2ca166479 realtek: add reset button for D-Link DGS-1210-28
638220bfee packages: nvram: add NVRAM quirks for bcm53xx target
bee8612d4f bcm53xx: add support for Asus RT-AC88U
ee4a765090 realtek: add support for ZyXEL GS1900-24E
045fe28d4e ramips: use hotplug script for EAP615-Wall MACs
f77d77e726 tools/mkimage: increase tmpfile name length limit
4afa65af8e fstools: update to git HEAD
0a47d52287 ubus: update to git HEAD
76b4b50bbe netifd: update to git HEAD
19f287a7ca procd: update to git HEAD
2ca8bccb00 netifd: update to the latest version
002e05bf9f uqmi: update to git HEAD

gluon-autoupdater: check default branch name, check number of pubkeys, revert invalid branch on update/reconfigure

docs: add docs for gluon-mesh-vpn-wireguard

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Use the candelatech firmware for the QCA Wave-2 firmware.

The Qualcomm firmware used for the IPQ401x chip in OpenWrt in 22.03
is experiencing heavily degraded performance due to excessive
retransmits when using A-MSDU. Disabling VHT modes or switching to the
candelatech firmware circumvents this issue.

Apply the same to other Wave-2 platforms in order to keep consistency
with upstream.

Wave-1 chips do not support mesh modes with the -ct firmware, so keep
using the QCA firmware in their case.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

656ed7aef openwisp-config: update to 1.0.0
29d26d1d0 xray-core: Update to 1.5.6
0647d444b cloudflared: Update to 2022.5.3
62514d596 yq: Update to 4.25.2
a9eed2e80 php8: update to 8.1.6
b42781523 php8: update to 8.1.5
a60cb1fbd libxml2: update to 2.9.14
dbe3820f3 pdns-recursor: update to 4.7.0
1646a22dd strongswan: support child rekey by bytes and packets

f765f2f114 ipq40xx: add Aruba AP-365 specific BDF
59e1b59bb3 malta: use default OpenWrt network configuration
dbd4c345fb firewall4: update to latest Git HEAD
dad1533030 ucode: update to latest Git HEAD

Since sphinx-5.0.0 "None" is not recommended anymore.

The DTS model name has been changed to "TP-Link Archer C6 v2 (EU/RU/JP)"
to distinguish it from the US version.

Closes #2533

Gone due to
commit 071cf7b2 ("Switch to Lua for target definitions")

Has prior been introduced as untested -> broken in
commit d586720c ("ar71xx-generic: add support for Ubiquiti NanoBeam M5")

Was commented out in the former commit.

ath79-generic: migrate D-Link DIR-825 B1 from ar71xx

modules: update to latest HEAD

b7a8391 mesh11sd: Release v1.1.1

70c8dc36c lua-openssl: update to version 0.8.2-1
a5a0c94cc banip: mark as broken
f263b042a dnslookup: Update to 1.7.0
244eb582f dnsproxy: Update to 0.43.0
80675bedb dnsproxy: Update to 0.42.4
ba8efcc27 vpnc: Update to 0.5.3+git20220517
009915f4f haproxy: Update HAProxy to v2.4.17
1efe209f1 tailscale: update to version 1.24.2
4b697c468 node-serialport: Support for npm@8
403eb59cd node-hid: Support for npm@8
52cb98ae9 node-cylon: Support for npm@8
575fbc5b9 node-arduino-firmata: Support for npm@8
83a9458a1 node-serialport-bindings: Support for npm@8
20a92ce23 node-yarn: Support for npm@8
9934d2851 node-homebridge: Support for npm@8
97d325e6d node-javascript-obfuscator: Support for npm@8
7e853be8f node: Major update from v14 to v16

b42511c007 ath79: fix label MAC address for D-Link DIR-825B1
0ed3446bfc OpenWrt v22.03.0-rc3: revert to branch defaults
f0e0bcba5e OpenWrt v22.03.0-rc3: adjust config defaults
9f415792e1 ath79: NanoBeam M5 fix target_devices
d9cb31f944 ath79: add support for Ubiquiti NanoBeam M5
fca0069247 OpenWrt v22.03.0-rc2: revert to branch defaults
4f6f9caf1f OpenWrt v22.03.0-rc2: adjust config defaults

Starting from OpenSSH 9.0p, scp started to use sftp in favor of the
scp protocol by default. As dropbear in OpenWrt currently does not
support sftp by default, we now use the fallback cli switch "-O"
to use the scp protocol for scp.

Signed-off-by: Sebastian Schaper <openwrt@sebastianschaper.net>

Do not fail the new check that good_signatures ≤ #pubkeys.

An invalid branch may be set for various reasons:

- Previous firmware had an invalid default branch
- Branch list has changed and old UCI branch config was removed by a
  site-specific upgrade script
- Manual UCI configuration

Make the code clearer and prepare for invalid branch fixup.

Check the default branch (both from site.conf and GLUON_AUTOUPDATER_BRANCH)
against the list of configured branch names to avoid misconfiguration.

The new "value" helper can be used to turn a Lua value into a path that
can be passed to need_*() etc.

Removed in 45c84a11 ("ar71xx: drop target").

Re-add mikrotik target

Note that previous images were generic ones and as such no migration
path is provided other than manually flashing the image via config-mode.

RFC: gluon-mesh-vpn-*: make MTU of VPN device provider specific

Since freifunk-gluon/packages#250 mesh-vpn-peers
can be empty arrays if they're not connected
and the node is in a WireGuard site.

base: update modules

If a community uses different vpn providers, they typically
assume the same MTU for the wan device underneath the VPN. As
different VPN providers however have different overhead, the MTU
of the VPN device differs for each provider. Therefore this
commit makes the MTU of the VPN device provider specific.

This has two advantages:
1. The same site.conf can used to bake firmwares for different
   VPN providers (only by selecting a diferent vpn feature in the
   site.mk).
2. We are coming closer to the option of integrating multiple VPN
   providers into one firmware.

f6d2b09 babeld: rewrite description
37d2c78 babled: update to 1.12.1
255c859 babeld: update to 1.12
f2bebea alfred: Merge bugfixes from 2022.1
2bebe7e batctl: Merge bugfixes from 2022.1
0ab07cf batman-adv: Merge bugfixes from 2022.1

b708cf5a1 ffmpeg: update to 5.0.1
2d0893afb pigeonhole: update to 2.3.18
2904343fb dovecot: update to 2.3.18
771fc2373 openconnect: bump to version 9.01
6621ab68b miniflux: update to 2.0.36
aaab4075c openldap: drop use of HTTP in favor of HTTPS
2abb60c16 audit: avoid interferece with base libaudit build
964e972af audit: remove host build
0c44bdcea audit: Fix compilation with kernel 5.15
223f6215b poemgr: add package
9f4253df4 shadowsocks-libev: fix compat issue with newer version of ucode
044425dc4 bluez: Update to 5.64, update/refresh patches
30c39ca1d docker: Update to v20.10.16
b23eb24dc dockerd: Update to v20.10.16
6f3e7f879 libnetwork: Updated to 339b97 for docker v20.10.16
c5061b93d containerd: Update to v1.6.4 for docker v20.10.16 * Overrode `PREFIX` to have the old behaviour
33d3642c8 runc: Update to v1.1.1 for docker v20.10.16
001ab241e icu: bump to 71.1
136fb020f usteer: update to latest HEAD
db966f719 telegraf: Update to version 1.22.4
864bc0eac golang: Update to 1.18.2
867ad434f micropython-lib: Update to latest master
0cd609b67 ci: Look for changed packages in the PR branch only
9d2246b28 docker: fix compilation with glibc
5af6f2592 dockerd: fix compilation with glibc
8905f9808 dockerd: Add firewall independent dependencies
79614bb2a dockerd: Sorted dependencies for better diffs
c227c65c6 docker:  Update to 20.10.14
df8b28232 dockerd: Update to 20.10.14, and update version checking mechanism
23547de3c containerd: Update to 1.5.11
c79b4f85b runc: update to 1.0.3
f8892740c privoxy: update to 3.0.33 and fix the init script
6f606107e lxc: export systemd cgroups after install
245c658fa cloudflared: Update to 2022.5.1
61a2e96d2 dnsproxy: Update to 0.42.3
f8e2c5dca dawn: update to 2022-05-09
68c7cb1d3 haproxy: Update HAProxy to v2.4.16
db148cc08 adblock: list maintenance
821fd2499 strongswan: add wolfssl plugin
220c75cef htop: update to 3.2.0
dad9ae19e v2rayA: Update to 1.5.7
2aa2a157b cloudreve: Update to 3.5.3
d51f7c20b cloudreve: Update to 3.5.2
0e639eb47 cloudflared: Update to 2022.5.0
23fc3e63c youtube-dl: update to 2021.12.17
50e306326 usteer: update to latest HEAD
f26d5e546 passh: updated per OpenWrt's common practice
3bd1d510e passh: an sshpass alternative
7fddd201f sexpect: updated per OpenWrt's common practice
40e42950c sexpect: Expect for Shells
b282f5bba https-dns-proxy: 2021-11-22-3: add support for Canary Domains
b93534691 zerotier: fix segfault on ARM platforms

34b6abf5a8 ath79: add support for MikroTik hAP (RB951Ui-2nD)
03cfdf72e2 ath79: add support for MikroTik RouterBOARD hAP ac lite
80baa60259 firewall4: update to latest Git HEAD
4575498276 ucode: update to latest Git HEAD
e90f74feb6 kernel: bump 5.10 to 5.10.116
95c315f200 ath79: fix ar934x spi driver delays
97a2012ecc openssl: bump to 1.1.1o
6f8db8fee3 wolfssl: bump to v5.3.0-stable
3aeb6e975f ipq806x: add support for Arris TR4400 v2 / RAC2V1A
a11c3cde27 realtek: add support for ZyXEL GS1900-16
9b20e2a699 ath79: add Netgear WNDAP360
6729fa2dd2 ath79: add support for TP-Link Deco M4R v1 and v2
3c57430d1c ramips: add led_source for Asus RT-AC1200 devices
e431195abf ramips: add support for Cudy X6
5439efe37d ramips: Add support for SERCOMM NA502S
fe5943a7bd ramips: add support for Wavlink WL-WN533A8
5454735574 ramips: create shared DTSI for Wavlink WN53XAX devices
7152bc84f4 ramips: add support for TP-Link RE650 v2
d627ea510c ramips: add support for YunCore AX820/HWAP-AX820
9c2ed54aa2 firmware-utils: bump to git HEAD
87f9dd665a firmware-utils: bump to git HEAD
3963a90df8 kernel: Add missing devm_regulator_get_exclusive()
7a0af40e37 kernel: bump 5.10 to 5.10.115
e0aaecdbb8 kernel: bump 5.10 to 5.10.114
416e8aefe1 IPQ4019: AVM FRITZ!Box 7530: Remove NAND ECC restrictions from DTS
ec45e1ff68 kernel: add support for Toshiba TC58NVG0S3HTA00 NAND flash
144d9c4a43 uboot-fritz4040: Add support for Toshiba NAND
9ef931f96b ath79: ZTE MF286[A,R]: add "Power button blocker" GPIO switch
54e759d05d ipq40xx: revert Cell-C RTL30VW to legacy caldata extraction
0f8eba4f95 ath79: fix I2C on GL-AR300M devices
308ce46076 ipq40xx: Lyra: update RGB LED-Controller node for 5.10+
19a8c723b6 lantiq: xway: disable unused switch drivers
a374a959b9 realtek: do not reset SerDes on link change
7b4702afef realtek: Trap all frames with switch as destination to CPU-port
1c6a179e1a ramips: fix booting on Samknows SK-WB8
6120a66e6a bcm27xx: include 'rtc' in target's 'FEATURES'
ae64d0624c kernel: fix corrupted padding on small packets with mt753x dsa
53fc6e9ede kernel: fix flow offload issues with pppoe
77e123340f mediatek: add patches for MT7622 WED (wireless ethernet dispatch)