Rewrite the gluon-wan-dnsmasq initfile to use procd. This allows for
configuring restart handling by procd in case of a crash.

While at it, disable the caching feature optionally used for the regular
dnsmasq on the wan dnsmasq. This daemon is only for redirecting DNS
requests to use local network resolvers, not introducing caching.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 64a9478ab8f625ca73e94eb6450712b1cdef007f)

Co-authored-by: David Bauer <mail@david-bauer.net>

[Backport v2023.1.x] gluon-mesh-vpn-tunneldigger: tunneldigger-watchdog: remove broken restart check

[Backport v2023.1.x] docs: releases/v2023.1: add warning and known issue for v2021.1.x x86 upgrade

The tunneldigger init script has been migrated to procd, so there is no
PID file anymore. Remove the obsolete check altogether - it shouldn't
be needed anymore, as procd will take care of crashes of tunneldigger by
itself. This fixes the watchdog resetting tunneldigger every time it runs.

Closes #2977

(cherry picked from commit 7a43dabc)

(cherry picked from commit 60457be7)

Add a custom CSS class to support strike-through text without depending on
a specific theme.

(cherry picked from commit 7193ed0b)

Revert "x86: switch to EFI-compatible images"

This reverts commit 41b8ecd6.

Unbreak upgrades from OpenWrt 19.07 (Gluon 2021.1.x) by undoing the
partition table change.

It should be noted that the EFI images generated by OpenWrt are slightly
smaller than the non-EFI images for some reason (due to a smaller gap
between the boot and root partitions), so upgrading a VM created using a
Gluon 2023.1 (EFI) image to a newer non-EFI image will truncate the root
partition.

Linux will warn about the truncation on boot ("sda: p2 size 212992 extends
beyond EOD, truncated"), but it doesn't cause any other issues, as the
root partitions of x86 squashfs images are mostly empty, and the overlay
is created in the actual available space after the upgrade. The cosmetic
issue will go away as soon as we switch to EFI again (likely with Gluon
2023.2).

Closes #2967

[v2023.1.x]: modules: update to latest HEAD

7b3fd63 batman-adv: Fix lock assert after fragmentation change
12577be batman-adv: Merge bugfixes from 2023.2
3e10d07 mesh11sd: update to version 2.0.0
78ca8d3 nodogsplash: remove opennds from conflicts
1381661 nodogsplash: update to 5.0.1
5b34377 opennds: Release v10.1.2
6fbf3b0 opennds: Release v10.1.1

7b6f573fe strongswan: fix compilation against updated WolfSSL 5.6.3
201a7c81d net/mosquitto: bump to 2.0.17
fc4d143cf tunneldigger-broker: update to v0.4.0
be07e79e6 tunneldigger-broker: add rate-limit hook
930223cf4 tunneldigger-broker: add option to isolate bridge ports
855f7f0e0 tunneldigger-broker: update lib functions
e4224e3f7 tunneldigger-broker: update config file and init for v0.4.0
65f4d3a0b simple-adblock: bugfixes for uci_load_validate
addaa5e0b php8: update to 8.1.22
9ddc94bbe node: August 2023 Security Releases
af7b0f9ef simple-adblock: force_dns_port validation bugfix
af603bd12 v2fly-geodata: Update to latest version
9f8a40765 v2raya: Update to 2.1.0
9ebf145a1 cloudreve: Update to 3.8.1
bf65da62e i2pd: update to version 2.48.0
113a9fc19 golang: Update to 1.19.12
d321bf348 curl: update to 8.2.1

76b1e564d2 mt76: update to the latest version from the 22.03 branch
866badc361 kernel: bump 5.10 to 5.10.191
de29f15af1 openssl: bump to 1.1.1v
8c7b03a2e1 firmware: intel-microcode: update to 20230808
08a78203a8 linux-firmware: update to 20230804
68c6608c2d linux-firmware: update to 20230625
b62dacea14 mbedtls: Update to version 2.28.4
df994cce96 mbedtls: Update to version 2.28.3
c29390b0f3 lua: fix integer overflow in LNUM patch
503aa7f9fb dropbear: add ed25519 for failsafe key
681baab5a7 wolfssl: update to 5.6.3
1dbbd0fcf2 uhttpd: update to latest git HEAD
c1181a54b0 uhttpd: update to latest Git HEAD
419218af13 kernel: bump 5.10 to 5.10.190
59dce3b595 kernel: bump 5.10 to 5.10.189
f6b6d4b2f0 kernel: bump 5.10 to 5.10.188
77f7f69739 kernel: bump 5.10 to 5.10.187

[Backport v2023.1.x] docs: avoid DNS request loop

Fix the example config for the dns upstreams.

(cherry picked from commit ffeaf4451e7c79738dad66fb850fc0345578b050)

docs: add v2023.1 release notes

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

Dockerfile: update base to debian:bookworm-slim

Merge pull request #2923 from freifunk-gluon/dependabot/github_actions/korthout/backport-action-1.3.1

build(deps): bump korthout/backport-action from 1.2.0 to 1.3.1

Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 1.2.0 to 1.3.1.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](https://github.com/korthout/backport-action/compare/v1.2.0...v1.3.1

)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

modules: update to latest HEAD

ath79-nand: (re)add ZyXEL NBG6716

ath79-generic: add support for Ubiquiti NanoBeam 5AC 19 (XC)

docs: ath79-nand: small adjustments

gluon-wan-dnsmasq: use cellular DNS servers

Use DNS servers received from the cellular provider for the WAN dnsmasq
instance.

This fixes resolving VPN endpoint DNS requests when using only cellular
uplink.

Signed-off-by: David Bauer <mail@david-bauer.net>

1a40d7c opennds: Release v10.1.0
faf2c32 bird2: bump to version 2.13.1

545165018 mg: bump to 7.3
29ef4d2e3 curl: update to 8.2.0
bc891685b https-dns-proxy: improve CLI messaging
8b97c69f4 simple-adblock: dnsmasq access bugfix & misc improvements
a04283af1 rclone: Update to 1.63.1
42ad39429 dnsproxy: Update to 0.52.0
0bba5b7ad cloudflared: Update to 2023.7.1
2631e0280 snowflake: update to 2.6.0
4e911ee6b golang: Update to 1.19.11
c59b975f2 banip: release 0.9.0-1
d31c3263c yq: Update to 4.34.2
3264af5e5 cloudflared: Update to 2023.7.0
0ed6605f6 php8: update to 8.1.21
ca2469882 rclone: Update to 1.63.0
b00b4518e rclone: Update to 1.62.2
5d8cb4785 dnsproxy: Update to 0.51.0
069b3a182 banip: update 0.8.9-4
92edb3e8b banip: update 0.8.9-3
5b806c5c7 banip: update 0.8.9-2
1691664f8 banip: release 0.8.9-1
f0ef3925d dnslookup: Update to 1.9.1
999c5b47a adblock: update to 4.1.5-8
b660c6e65 bind: bump to 9.18.16
1c066e61f banip: update 0.8.8-2
6e8e34b95 banip: release 0.8.8-1
fac9edfe4 banip: release 0.8.7-1

1ec274a204 bcm53xx: backport more DT changes queued for v6.6
c39a3f1b16 bcm53xx: add BCM53573 Ethernet fix sent upstream for v6.6
056742885e octeon: ubnt-edgerouter-4/6p: devicetree cleanup
4959dcd698 octeon: ubnt-edgerouter-e300: fix missing MTD partition
3c895dde79 octeon: ubnt-edgerouter-e300: fix LED settings
1c79f93819 ib: split out processing user provided packages
8a1ba96e2d sdk: rename README + update Makefile
cc54e19b20 build: fix generation of large .vdi images
a7867e0cb7 bcm53xx: backport DT changes queued for v6.6
e3d0c7097e bcm53xx: backport DT changes from v6.5
04b4d79b60 kernel: bgmac: fix regressed support for BCM53573 SoCs
cf256cf544 bcm47xx: fix bgmac MTU patch filename
e17f9fd0e8 bcm47xx: revert bgmac back to the old limited max frame size
80a6b0a917 ipq-wifi: fix upstream board-2.bin ZTE M289F snafu
fbc23f664d kernel: bump 5.10 to 5.10.186
0344144e77 kernel: bump 5.10 to 5.10.185

Don't use the DNS server received from the cellular provider. The
provider DNS server shall only be used for the WAN dnsmasq resolver
instance.

Signed-off-by: David Bauer <mail@david-bauer.net>

gluon-mesh-olsrd: support clientap

Add ethernet module, add get_switch_type, make info shared, display switch type in info

ramips-mt7621: Add support for TP-Link EAP615-Wall

docs: support only for Xiaomi Mi Router 4A Gigabit v1

ramips-mt76x8: add support for TP-Link TL-MR6400 v5

openwrt: mask nested A-MSDU support for mesh