ca58b8b4fe ramips: Add Xiaomi Mi Router 4A 100M International
707ec48ab3 zlib: backport null dereference fix
5e0173de51 zlib: bump PKG_RELEASE after CVE fix
7561eab8e8 zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)
1f9d603141 odhcpd: update to git HEAD
39ac29a68a uboot-mvebu: update to v2022.07
ec8b5cf0e6 realtek: Fix typo in Kconfig prompt
247ef07540 ramips: support fw_printenv for Netgear WAX202
62fff4e1e6 umdns: add missing syscall to seccomp filter
ecf0dc7055 ramips: Add support command fw_setsys for Xiaomi routers
bd9bb13012 ltq-vdsl-app: Fix counter overflow resulting in negative values
bd74c11155 kernel: silence refresh warning
dcb782792b x86: add missing Lex 3I380NX network detection
c2c32bdc80 lantiq: fix lan port 3+4 phy-mode settings for Fritzbox 3390
456d05d6d8 ipq40xx: fix RUTX10 Wi-Fi woes
daa73dc681 libmnl: fix build when bash is not located at /bin/bash
596efe1356 OpenWrt v22.03.0-rc6: revert to branch defaults
f1ff3fd95c OpenWrt v22.03.0-rc6: adjust config defaults
042d558536 mac80211: Update to version 5.15.58-1
c9cc3189ed wolfssl: fix math library build
535f4a5bff odhcp6c: update to latest git HEAD
5a7bcd6977 firewall3: update file hash
c5f0eab222 uboot-at91: fix build on buildbots
972b833e91 uboot-at91: update to linux4sam-2022.04
39810995fb at91bootstrap: update at91bootstrap v4 targets to v4.0.3

This new field reflects the TQ to the selected gateway.

Before this commit, if you had connectivity issues in a larger mesh,
it was a tedious task to understand which nodes are affected and which
are not. By providing this new value for each node, it becomes easier
to see which nodes are affected by the connectivity issues and which
are not.

The new field "gateway_tq" is located at the toplevel of the
statistics resource (next to "gateway" and "gateway_nexthop"):

    gluon-neighbour-info -d ::1 -r statistics
    {
        ...
        "gateway": "02:a1:71:04:09:10",
        "gateway_nexthop": "88:e6:40:20:90:10",
        "gateway_tq": 193,
        ...
    }

Move common firewall rules to respective packages

This implements the same behavior as it is used in the autoupdater [1].

This is for example required to allow the manual installation of
firmware upgrades via the config mode on devices which where migrated
from swconfig to DSA. Otherwise the image will always be invalid.

[1] https://github.com/freifunk-gluon/packages/commit/b80428166454d184f356e5a14a144911d9ee11aa

When running "fastd -v" fails, line may be NULL, causing a segfault in
strncmp.

modules: update to latest HEAD

d385ac504 curl: switch default SSL to mbedTLS
910a8a075 telegraf: Update to version 1.23.3
ce619701b knot: update to 3.1.8
93d53a56d dockerd: Update to v20.10.17
17758cf81 docker: Update to v20.10.17
90bbda1b5 libnetwork: Update to f6ccccb for Docker v20.10.17
0f2e46afe containerd: Update to v1.6.6 for Docker v20.10.17
f238e8f7c runc: Update to v1.1.2 for Docker v20.10.17
c85111226 dawn: update to 2022-07-24
944a896e5 dawn: update to 2022-07-22
0902a5fc0 usteer: update to latest HEAD
71db92ef6 usteer: bump to git HEAD
c90aaa1ec dawn: update to 2022-07-21
9552a30bc mutt: add PKG_CONFIG_DEPENDS
ffe306981 opusfile: add autoreconf
10a6452b8 golang: Update to 1.18.4
fb7206356 libextractor: fix iconv handling
7d74fbf37 glib2: disable fortify source
756a3243d wifidog: fix compilation with more recent wolfssl
ef545e031 curl: fix compilation with wolfSSL
fdd16fefa yq: Update to 4.26.1
b0118aab5 xray-core: Update to 1.5.9
d9c09bb40 dawn: update to 2022-07-18
f4eb0c359 mpd: add missing AUDIO_SUPPORT in CONFIG_DEPENDS
ff0dd2d12 mpd-full: remove partial BUILD_PATENTED on ffmpeg
c1732453f postfix: fix download failure
97ebbd014 travelmate: update 2.0.9-2
86408bf66 dawn: update to 2022-07-16
09d9d6093 watchcat: add support to run a script
afd77fd6c watchcat: add IP version selection support; fix bug with unlockbands
8829c4025 libuwsc: fix compiltation with wolfSSL
e1090a022 pdns: update to 4.6.3
a3f25a711 pdns-recursor: update to 4.7.1
71bd1a8a5 telegraf: Update to version 1.23.2
fe38196a7 telegraf: Update to version 1.23.1
859f7319a dnslookup: Update to 1.7.1
e34230521 cloudflared: Update to 2022.7.1
0ac8154bc xr_usb_serial_common: bump to 2022-03-30
cdf76bc38 fio: update to 3.29
298786838 libarchive: fix ext2fs build race error condition
be959ca32 nebula: update to 1.6.0
81cd7959f node: July 7th 2022 Security Releases
d2a2c005d nsutils: Update to latest version, switch to cmake
241a7198a nsutils: bump to new release
953e29f06 python-cryptography: Fix failing build

8b6b73d0e8 wolfssl: make shared again
7ca89e1187 kernel: bump 5.10 to 5.10.134
1db4f5cba3 x86: update defconfig for 5.10.133
762703d397 kernel: bump 5.10 to 5.10.133
aedcbaae37 kernel: bump 5.10 to 5.10.132
a409bd7705 octeon: add SUPPORTED_DEVICES to er/erlite
e0d3dc5de1 uboot-bcm4908: include SoC in output files
066547b974 bcm4908: build bootfs image per-SoC
506432a783 lantiq: fix network port GPIO settings for Fritzbox 3390
ee27a2b706 ipq806x: Archer VR2600: fix switch ports numbering
f2c12b8940 layerscape: update PKG_HASH / PKG_MIRROR_HASH
bddfd3f7ed sdk: add spidev-test to the bundle of userspace sources
396dc89ee7 realtek: correct egress frame port verification
f8a44c22d4 realtek: correct egress frame priority assignment
4da0b5a786 realtek: fix egress L2 learning on rtl839x
8614b8eb5f realtek: fix egress port mask on rtl839x
c240fed242 ramips: add support for Netgear WAX202
d5858c6d97 image: add support for Netgear encrypted image
a1068f77c9 wolfssl: Do not activate HW acceleration on armvirt by default
dbe19b1041 libpcap: fix PKG_CONFIG_DEPENDS for rpcapd
a12eb71c88 wolfssl: WOLFSSL_HAS_WPAS requires WOLFSSL_HAS_DH
41fa086e6f kernel: Refresh kernel patches
aa237757e0 kernel: bump 5.10 to 5.10.131
a51f54b41d kernel: bump 5.10 to 5.10.130
f14122f8e6 kernel: bump 5.10 to 5.10.129
73ef008ea6 kernel: bump 5.10 to 5.10.128
cb9a69807e firewall3: bump to latest git HEAD
8ccd657629 mt7622: remove 300 MHz from dts
606fc4cd81 bcm4908: use upstream-accepted watchdog patches
7eda42a3f3 bcm4908: backport latest DT patches
187f5147d3 kernel: update leds-bcm63138 driver
f1fc90e5a1 kernel: backport LEDs driver for BCMBCA devices
a8001815a6 opkg: update to 2022-02-24
479890083d firmware: intel-microcode: update to 20220510
c5ee4b7863 openssl: bump to 1.1.1q
ade7c6db1e wolfssl: bump to 5.4.0
409534860f ath79: bsap18x0: pad rootfs image
1be4cad669 ath79: ja76pf2: use nvmem cells to specify MAC addresses
94530067ad ath79: move image check for devices with RedBoot
8e09f9ffc3 ath79: switch some RedBoot based devices to OKLI loader
01b8cd3200 rockchip: reliably distribute net interrupts
4fb05e45df wolfssl: re-enable AES-NI by default for x86_64
ec9f82fa18 mac80211: fix AQL issue with multicast traffic
945b13e369 realtek: build sane factory images for DGS-1210 models
3fbf45bd09 realtek: build factory images for all DGS-1210 models
128575d0fd realtek: rename u-boot-env2 to board-name
9081098273 scripts: fix CAMEO tag generator
87e58a43ea realtek: build DGS-1210 images with CAMEO tag
b151362d19 scripts: add CAMEO tag generator
72466aaeb9 realtek: add DGS-1210-28 factory image
b2876e6a3a scripts: add cameo image header generator
8b4169f1c9 bcm53xx: use -falign-functions=32 for kernel compilation
e291e49da3 bcm53xx: enable & setup packet steering
5359a8ca38 bcm53xx: disable GRO by default at kernel level
027f7b18b9 bcm53xx: revert bgmac back to the old limited max frame size
bd826dc9f9 kernel: drop patch adding hardcoded kernel compilation flags
da7c57b086 kernel: support setting extra CFLAGS for kernel compilation
614a420084 kernel: use KCFLAGS for passing EXTRA_OPTIMIZATION flags

ath79-generic: migrate wnr2200 and add similar variant

ath79-generic: (re)add RE450 v1
ath79-generic: (re)add RE355 v1

Note: Buffalo has introduced hardware changes without bumping the
revision number. 19.07 did not support the rb-variant so there's no need
to implement a migration for the rb-variant.
Every g300nh supported by Gluon should either be the s-variant or
been flashed wrongly.

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ath79-nand: migrate wndr3700v4

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ath79-generic: (re)add support for ALFA Network AP121F

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Note that it was wrongly marked as device class tiny in
commit 7fd7116e ("targets: add device-class flags") in the past,
the device has 64MB RAM and not 32MB.

Also, the device has no "led-running" assigned in DTS. The device has
three LEDs: "green:vpn", "green:lan" and "green:wlan". The first LED,
"green:vpn", has a "V" icon and was used to show the VPN connection
status in the vendor firmware. This LED will be used via the newly
added "led-boot" fallback in gluon-setup-mode. But will be unused
during normal operation due to the unassigned "led-running" in DTS.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

for devices in targets that do no implement `get_status_led` in /etc/diag.sh
and do not have an led-running in their dts

Gone due to
commit 45c84a11 ("ar71xx: drop target")

The CN/RU variant of the device has the same hardware
as the EU already supported, but contains a 16M flash chip.

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ar71xx only supported the 8M variant

Specifications:
* SoC: AR7242 (Virian 400MHz)
* RAM: 64 MB DDR (W9751G6JB-25)
* Flash: 16MB SPI flash (S25FL129PIF)
* WiFi: AR9382 (2.4/5GHz) + 2x SE2595L
* LAN: 1x1000M (PEF7071V)

To install via EVA bootloader, a FTP connection need to be
established to 192.168.178.1 within the first seconds after power on:

  ftp> quote USER adam2
  ftp> quote PASS adam2
  ftp> binary
  ftp> debug
  ftp> passive
  ftp> quote MEDIA FLSH
  ftp> put lede-ar71xx-generic-fritz300e-squashfs-sysupgrade.bin mtd1

Depending on the source of the primary MAC address, uppercase digits
would be used on some devices. Convert the address to lowercase for
consistency.

We only change the case for newly configured nodes to avoid changing the
node ID and derives MAC addresses for existing installations.

modules: update to latest HEAD

The Ubiquiti UniFi 6 LR now has a v2 with a different LED setup, thus
the previous model was added a v1 suffix.

Signed-off-by: David Bauer <mail@david-bauer.net>

The ip6tables-legacy metapackage was renamed to ip6ables-zz-legacy.

69afa34 bird2: bump to version 2.0.10

1123b9dae travelmate: update 2.0.9
a686f7975 xtables-addons: update to 3.21
d50620e22 xtables-addons: update to 3.20
9b1569377 xtables-addons: add PKG_LICENSE_FILES and use SPDX
1c4e8a14e xtables-addons: fix various warning in lua patch
4a5633b6b xtables-addons: update to 3.19
736996ecb Revert "gcc: update 11 minor version"
d45c8f4c0 collectd: Fix various issues with lantiq dsl metrics.
6e49bec96 unbound: update to 1.16.0
f93755c93 yt-dlp: add package
e846059b1 youtube-dl: drop package
ed2234c1e glib2: replace intl patch with upstream solution
45f10a3be glib2: update libintl handling
19d957cfc glib2: update to 2.70.5
e1598040f openwisp-monitoring: added 0.1.1
dcc80b42c openwisp-config: update to 1.0.1
95acc51cd yq: Update to 4.25.3
3743870bc acme: switch from iptables to nft
d845c3dc3 travelmate: update 2.0.8-3
5651f6a3e gcc: update 11 minor version
d713c4b4d gcc: depend on libzstd
e32d33a2a gcc: update to allow compiling different versions
90e5bfd4f gcc: change maintainer

f854de6ada OpenWrt v22.03.0-rc5: revert to branch defaults
0345c613ba OpenWrt v22.03.0-rc5: adjust config defaults
bfd070e7fa kernel: Add missing mediatek configuration options
5c7aed8b1e openssl: bump to 1.1.1p
6b78bf1fd8 mediatek: mt7622: fix white dome LED of UniFi 6 LR
5a82803c76 mvebu: cortexa72: fix ImageBuilder for IEI Puzzle devices
fa56db5ccc uboot-mediatek: update UniFi 6 LR board name
d302839b65 mediatek: add Ubiquiti UniFi 6 LR v2 targets
d815e1f67c mediatek: new target ubnt_unifi-6-lr-v1-ubootmod
8f0d8869d5 mediatek: new target mt7622-ubnt-unifi-6-lr-v1
1d96f6863e mediatek: build ubnt-ledbar as a module
2bea35cb55 mediatek: remove crypto-hw-mtk package
5a81e00063 mediatek: mt7622: fix banana pi r64 wps button
e459a87eaf mediatek/mt7629: Activate CONFIG_ARM_ARCH_TIMER_EVTSTREAM
fcd62930f7 mt76: update to the latest version
ee67afeda9 kernel: Refresh patches for all targets
32e9095662 mt76: update to the latest version
a3946a7cd1 mac80211: fix mesh queue selection issue
158a5af801 ramips: improve YunCore AX820 LEDs
6b44a6e731 kernel: bump 5.10 to 5.10.127
66da295f5a kernel: bump 5.10 to 5.10.126
7d6b8f5bdf qoriq: enable Book-E Watchdog Timer
85b5bad5a1 ipq40xx: cut ath10k board file for mikrotik subtarget
973ff0b8e8 ipq40xx: mikrotik: dont include ath10k-board-qca4019 by default
3e38bd1353 ipq-wifi: remove packaged BDF-s for MikroTik devices
80602d472a ipq40xx: mikrotik: provide BDF-s on demand
02cfd1f5a8 mac80211: ath10k: backport bus and device specific API 1 BDF selection
52a64755fc ath10k-ct: update to 2022-05-13
1edf306b31 firewall4: bump to git HEAD
e222660bc8 qoriq: enable HARDENED_USERCOPY
9296d8970a qoriq: disable CONFIG_COMPAT
c9448285f1 qoriq: 02_network fix sweth globbing logic
04091ffd68 qoriq: define reset button for Firebox M300
c7673625d9 qoriq: define leds for Firebox M300
d6a06e1d18 ath79: add support for RouterBOARD mAP
344ecf433a ipq40xx: mikrotik: make RouterBoot partition writeable
fbbc127f42 ath79: mikrotik: add rw soft_config to extra devices
993b70a429 kernel: fix variable erasesize patch
656036a534 x86: 64: Add kmod-igc to default packages
fb3b927643 iptables: default to ip(6)tables-nft
e4caacc887 kernel: add missing symbol to 5.10 config
7c240ee279 qoriq: use FIT uImage for Firebox M300 kernel
88101fa239 qoriq: use KERNEL_SUFFIX in Build/sdcard-img
2b8021d614 kernel: bump 5.10 to 5.10.125
f2f03545d4 kernel: bump 5.10 to 5.10.124
50db012243 kernel: bump 5.10 to 5.10.123
4faf889e7e kernel: bump 5.10 to 5.10.122
81530d69ef kernel: bump 5.10 to 5.10.121
d8d8b82c59 dropbear: cherry-pick upstream commit 544f28a0
f91b0d7a92 wolfssl: disable AES-NI by default for x86_64
2b392383e6 x86: fix damaged config 5.10 refresh
9c609080b0 generic: enable CRYPTO_LIB_BLAKE2S[_X86|_ARM]
63b4881fcb include/prereq-build.mk: macOS cross build improvements
d989124c02 broadcom-wl: Fix compilation with kernel 5.10
d8f8c78d96 464xlat: delete SNATed conntracks on interface teardown
049093b9fd mediatek: UniFi 6 LR: disable RTC
d65ad3efa5 ramips: decrease SPI frequency for Phicomm K2P
267f86a7b2 wireless-regdb: bump to 2022.06.06
7e223a89a1 prereq-build: add additional git detection
08e1812900 mac80211: increase airtime scheduler quantum
aab535d2bb mac80211: add airtime fairness improvements

lantiq-xrx200: allow updates from swconfig to DSA