BROKEN TARGETS were built when BROKEN was set as a variable regardless of
it's value. Even an empty BROKEN variable caused BROKEN TARGETS to be
built. For DEVICES the number was evaluated and compared to true by Lua.

Make behavior consistent for relevant values UNSET/EMPTY/0 and 1:
UNSET/EMPTY/0: Don't build BROKEN TARGETS and DEVICES
1: Build BROKEN TARGETS and DEVICES

The behavior remains inconsistent for all positive numbers except 1.
(even floating point)

x86: add MediaTek drivers

modules: update to latest HEAD

Add MediaTek driver packages for MT7915 as well as MT7921 WiFi 6 cards.
In addition, fix the mt7615 package name, as the driver was seperated
into kernel and firmware packages.

Signed-off-by: David Bauer <mail@david-bauer.net>

81cdbd3 opennds: update to version 10.2.0

3cc9f0f75 upmpdcli: Update to 1.8.6
7697be576 libupnpp: Update to 0.24.1
c95ff2e26 libnpupnp: Update to 5.1.2
6d5cd9ad1 upmpdcli: update to 1.8.4
24eb6278d libupnpp: update to 0.24.0
10b5d353a libnpupnp: update to 5.1.1
8b1531158 irqbalance: Fix log spam and correct meson version
ac9f4c118 dnsproxy: Update to 0.60.0
c4e2a6919 yq: Update to 4.40.4
711511144 rclone: Update to 1.65.0
7d768e321 v2raya: update to 2.2.4.3
4fa89ac51 python-cryptography: Update to 41.0.7
672a20936 python-cryptography: Update to 41.0.5
af57f8dbf adblock-fast: bugfixes: getsize/resolver
f93e3ce71 iperf3-mt: remove package
48f35252c iperf3: update to 3.16
b6b105abe fail2ban: Fix compatibility with Python 3.11
c1a8eb098 dhtd: udpate to 0.2.6
473b173ff adblock-fast: add smartdns ipset/nftset support
d83ed18f8 uspot: add package
d3ee25861 AriaNg: bump 1.3.2 to 1.3.6
ec8fdad70 netbird: update to version 0.24.3
b4a70180b aardvark-dns: update to version 1.9.0
d5f206830 netavark: update to version 1.9.0
d88bf3d53 podman: update to version 4.8.0
21a5a426a crun: update to version 1.12
ee6796371 CI: Fix CI_HELPER
fc4a85721 node: bump to v18.19.0
78d47e2a5 postfix: Fix enabling PCRE support
2fd96090a dhtd: update to 0.2.5
78305d7bc xray-core: Update to 1.8.6
eee27741d netifyd: Updated to v4.4.7
03d07dc77 external-protocol: rename and update cni-protocol
dba4aa8e0 v2ray-geodata: Update to latest version
133b0774d v2ray-geodata: Update to latest version
5645e1880 v2ray-core: Update to 5.12.1
a53702959 yq: Update to 4.40.3
c2ba6ea6f dnsproxy: Update to 0.59.1
8dffb5132 ngtcp2: update to 1.1.0
dc358fb4e nghttp3: update to 1.1.0

efdafcc974 mediatek: filogic: Fix GPIOs for Zbtlink ZBT-Z8102AX
81b7da1052 lua5.3: fix typo calling lua53 instead of lua5.3 for Package Default
d9246902b0 mediatek: add support for Zbtlink ZBT-Z8102AX
6df6f03396 mediatek: filogic: add JCG Q30 PRO support
4f9c4113c4 uboot-mediatek: add JCG Q30 PRO support
557a32aba0 filogic: add support for ASUS TUF AX6000
982bfd98cb ucode: adjust module dependencies
f8c149dcbd mediatek: fix eeprom loading (Mercusys MR90X v1)
5a0bdab24c mt76: drop default eeprom file for mt7986-firmware
cc285dc2b6 generic: net: phy: realtek: add interrupt support for RTL8221B
6143b730fc uboot-mediatek: fix typo in bootmenu for GL-MT6000
f3a8820959 mediatek: filogic: remove kmod-usb2 for GL-MT6000
b530d492a9 filogic: add support for GL.iNet GL-MT6000
28d15e2040 mediatek: filogic: add support for Ubiquiti UniFi 6 Plus (U6+)
e1d1c26c0f mediatek: add support for Cetron CT3003
3846b6eb49 filogic: support Telenor branded ZyXEL EX5700
7606dac661 base-files: support parse DT LED color and function
6261ae12e1 mpc85xx: allow mapping of cpu1 spin-table page
de37b56cdb mpc85xx: increase available RAM on Extreme Networks WS-AP3825i

Build and release a docker container for the next branch.

Signed-off-by: David Bauer <mail@david-bauer.net>

treewide: replace luabitops with lua-bit32

workflows: build-container: build images for amd64 and arm64

mac80211: avoid crashing on invalid band info

Frequent crashes have been observed on MT7916 based platforms. While the
root of these crashes are currently unknown, they happen when decoding
rate information of connected STAs in AP mode. The rate-information is
associated with a band which is not available on the PHY.

Check for this condition in order to avoid crashing the whole system.
This patch should be removed once the roout cause has been found and
fixed.

Closes: #2980
Link: https://github.com/freifunk-gluon/gluon/issues/2980



Signed-off-by: David Bauer <mail@david-bauer.net>

docs: pin sphinx version

ci: pin runner version to Ubuntu 22.04

ci: build Gluon in own Docker image

gluon-mesh-vpn-fastd: use CAKE as bandwidth-shaper

Pin the docs python dependencies to specific versions in order to
establish a consistent build-result.

Signed-off-by: David Bauer <mail@david-bauer.net>

Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 62339db73c56dd749060f65a6ebb93a6e056b755 to e6428a5c4e294a61438ed7f43155db912025b6b3.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/62339db73c56dd749060f65a6ebb93a6e056b755...e6428a5c4e294a61438ed7f43155db912025b6b3

)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from fdf7f43ecf7c1a5c7afe936410233728a8c2d9c2 to 4a13e500e55cf31b7a5d59a38ab2040ab0f42f56.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/fdf7f43ecf7c1a5c7afe936410233728a8c2d9c2...4a13e500e55cf31b7a5d59a38ab2040ab0f42f56

)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/login-action](https://github.com/docker/login-action) from 1f401f745bf57e30b3a2800ad308a87d2ebdf14b to 3d58c274f17dffee475a5520cbe67f0a882c4dbb.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/1f401f745bf57e30b3a2800ad308a87d2ebdf14b...3d58c274f17dffee475a5520cbe67f0a882c4dbb

)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 2.0.0 to 2.1.1.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](https://github.com/korthout/backport-action/compare/v2.0.0...v2.1.1

)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from 1.3.0 to 2.0.0.
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](https://github.com/readthedocs/sphinx_rtd_theme/compare/1.3.0...2.0.0

)

---
updated-dependencies:
- dependency-name: sphinx-rtd-theme
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Pin the GitHub runner version used to Ubuntu 22.04.

This endures stability in the runner behavior once GitHub switches to
the next Ubuntu release for the latest tag.

Signed-off-by: David Bauer <mail@david-bauer.net>

Build the CI integration test in our own docker container. This way, we
can make sure Gluon builds actually succeed there.

This also has the advantage of becoming independent from the host
version of GitHubs CI runners.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

df580180d irqbalance: update to 1.9.3
023d6831a irqbalance: add banned_cpulist option
61ae8719f adblock-fast: bugfix: call to missing function
4f99ac645 ddns-scripts: Fix Route53 provider
f7d0beb26 ddns-scripts: add new DDNS provider ipnodns.ru
bf76672ac banip: update 0.9.2-4
e010d9d9f banip: update 0.9.2-3
01fca9e8b https-dns-proxy: fix unintentional call of service_stopped in boot()
183f008a4 sing-box: update to 1.6.6
a241e53ac rust: Update to 1.74.0
709456d06 adblock-fast: bufgix: fix boot()
22a1e22b2 https-dns-proxy: bugfix: prevent erros from boot()
c4315fc5e haproxy: update to v2.8.4
4e152bc41 dhtd: update to 0.2.4
f8918644c acme-acmesh: Update to 3.0.7
0bcd6bbc8 dnsproxy: Update to 0.59.0
f8cd88d0d tailscale: Update to 1.54.0
01bfe4f6b tailscale: Update to 1.52.1
906e4703f tailscale: Update to 1.50.1
625efd967 gummiboot: release bump
f9fa735ed netbird: update to version 0.24.2
481902f4e netbird: update to 0.23.9
91238177f netbird: update to 0.23.6
8d5ab4ca0 dhtd: update to 0.2.1
5ec47c5f1 dhtd: new package
cad16d24f crowdsec: new upstream release version 1.5.5
f9b6c2c5d pymysql: add meta-package for sha256 support
5453ca57c freeradius3: Fix build when pcre is present
413260559 golang: Update to 1.21.4
b2e8a5bdd adblock-fast: bugfix: ensure downloaded block-lists end with newline
11252ef64 banip: update 0.9.2-2
4c197c1a2 banip: release 0.9.2-1
8cf81bccd tang: set the right permissions to keys
660c30cc2 v2raya: Update to 2.2.4.1
98c281532 v2ray-core: Update to 5.11.0
4df5572bb adblock-fast: update to 1.0.1-1
6439078a9 php8: update to 8.2.12
b2cdb8f45 php8: fix linking on riscv64 platform (again)
7519f1ff1 crowdsec-firewall-bouncer: add ujail
d42ced507 perl: add support for riscv64

6264d12ed8 firmware-utils: update to Git HEAD (2023-11-21)
ebdaee7194 ramips: add support for Sercomm CPJ routers
fd277ee490 ramips: mt7620: drop unnecessary trailing tabs
a8f31d2aa1 ramips: sercomm.mk: make common recipe to set a bit in pid
dae399196b scripts: sercomm-pid.py: use uppercase hwid in pid
95ebd609ae kernel: bump 5.15 to 5.15.139
d6b62611b8 firmware-utils: package oseama
40bd2bb3d6 firmware-utils: new package replacing otrx
a39dca7ead kernel: bump 5.15 to 5.15.138
c7b6cfac40 scripts/dump-target-info.pl: add new function to DUMP devices
6cb1cb1b13 OpenWrt v23.05.2: revert to branch defaults
1c26bcb108 OpenWrt v23.05.2: adjust config defaults
842932a63d netifd: fix IPv4 route target masking
51bb178824 treewide: fix shell errors during dump stage
4637ba72b7 scan.mk: do not silence output of dump phase
b38b5c4299 ramips: add support for MeiG SLT866 4G CPE
ce62536aca uboot-envtools: add environment config for MeiG SLT866
03e26f856f kernel: support reading hex MAC address from NVMEM
a00fc406b9 kernel: add support MeigLink SLM828 modem
275f7e07ee ramips: cf-ew72-v2: Add support for COMFAST CF-EW72 V2
65bf66f727 ramips: Add support for ComFast CF-E390AX
ce62c25c08 OpenWrt v23.05.1: revert to branch defaults
a58a86693f OpenWrt v23.05.1: adjust config defaults
101988c61a scripts/getver.sh: prevent asking for negative rev-parse
b7e81d210b iptables: backport patch fixing bug with string module
3d006f95f2 wolfssl: update to 5.6.4
46385eb7f8 netifd: update to the latest version
11a41bc4b2 netifd: update to Git HEAD (2023-11-09)
f6a9f0c57b ipq-wifi: update to Git HEAD (2023-11-10)
2285eb732a ucode: update to Git HEAD (2023-11-07)
f5e9fd624d hostapd: refresh patches
85d1b43be4 hostapd: permit 40MHz in 802.1s only also for 2.4GHz g/n with noscan
1cab0d74b3 hostapd: permit also channel 7 for 2.5GHz to be set to HT40PLUS
c9e8453de7 hostapd: fix broke noscan option for mesh
2ef625e769 mac80211: fix not set noscan option for wpa_supplicant
5106f554bb px5g-wolfssl: Fix permission of private key
6fd16b0d27 px5g-mbedtls: Fix permission of private key
6de0e0d01a hostapd: use rtnl to set up interfaces
bbfb920e99 wifi: fix applying mesh parameters when wpa_supplicant is in use
f780cfb92f netifd: update to the latest version
d3c193525e mediatek: add CMCC RAX3000M support
429715a237 uboot-mediatek: add support for CMCC RAX3000M
b209f45640 arm-trusted-firmware-mediatek: add emmc/spim-nand ddr4 build for mt7981
04cde73d56 treewide: fix MERCUSYS brand spelling
3223f31fd3 mbedtls: Activate secp521r1 curve by default
cfadbc090c image: fix image generation within ImageBuilder

OpenWrt now uses the new mbedTLS implementation for hostapd as well as
wpa_supplicant.

In order to keep as close to upstream as possible, use these
derivations.

Signed-off-by: David Bauer <mail@david-bauer.net>

Remove due to ticket #2939

These devices risk being bricked in a way that can not be recovered
without running full TFTP or serial recovery, as the flash ends up in a
read-only state with no way of upgrading to a fixed version.

Thus, remove the support for the time being. Don't just flag them as
BROKEN, as this would deliberately brick these boards when installating
such an image.

Signed-off-by: David Bauer <mail@david-bauer.net>

lantiq-xrx200: remove BROKEN target-flag

The generated CI changed due to the order in targets.mk.

No functional change.

Signed-off-by: David Bauer <mail@david-bauer.net>

This removes the BROKEN flag from the lantiq-xrx200 target.
The issues with the switch-driver have been resolved upstream

Link: https://github.com/openwrt/openwrt/pull/13638



Signed-off-by: David Bauer <mail@david-bauer.net>