Excessive broadcast traffic with little competing unicast traffic can easily
flood hardware queues, leading to throughput issues. Additionally, filling
the hardware queues with too many packets breaks FQ for broadcast data.
Fix this by enabling AQL for broadcast packets.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: David Bauer <mail@david-bauer.net>

Stop and start the gluon-arp-limiter service before the network is
brought down when commencing update.

Start the service after the network is brought back up when aborting.

Signed-off-by: David Bauer <mail@david-bauer.net>

Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.4.0 to 5.5.1.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/9dc751fe249ad99385a2583ee0d084c400eee04e...8e5442c4ef9f78752691e2d8f8d19755c6f78e81

)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 2.1.1 to 2.4.1.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](https://github.com/korthout/backport-action/compare/v2.1.1...v2.4.1

)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Get rid of Node deprecation warnings.

Link: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/



Signed-off-by: David Bauer <mail@david-bauer.net>

upstream increased partition size to 7.625 MiB
https://github.com/openwrt/openwrt/commit/aca8bb5cc332f0ffdf4249e76b0a56716f98bef0

scripts/container.sh: fix rootless Podman on systems with SELinux

Bumps [docker/login-action](https://github.com/docker/login-action) from 3d58c274f17dffee475a5520cbe67f0a882c4dbb to 5139682d94efc37792e6b54386b5b470a68a4737.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/3d58c274f17dffee475a5520cbe67f0a882c4dbb...5139682d94efc37792e6b54386b5b470a68a4737

)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Drop vdsl packages

The Fritz!Box 7520/7530 received DSL support in OpenWrt 23.05
remove obsolete dsl packages

ltq-vdsl-app was renamed to ltq-vdsl-vr9-app
https://github.com/openwrt/openwrt/commit/33e2115fe449d1b9e97ce8c5be96f580442fd3d9
ltq-dsl-base is a new package that was added with 23.05

docs: fix AVM Recovery Tool url in v2023.1.1 release notes

modules: update to latest HEAD

cd5f6637f snort3: build against gperftools-runtime
525321667 snort3: update to 3.1.81.0
28aeff87b gperftools: add new package
f589b5880 hyperscan: new package for speeding up regex ops
c9dff69de dockerd: Update to 25.0.3
755e6f783 docker: Update to 25.0.3
984b65bf7 containerd: Update to 1.7.13
a697eea62 runc: Update to 1.1.12
b3270866f tailscale: Update to 1.58.2
bd5a36867 tailscale: Update to 1.58.0
1ff74e644 travelmate: update 2.1.2-4
e5c557be0 travelmate: update 2.1.2-3
3d7193cde php8: update to 8.2.16

78d493af22 generic l2tp: drop flow hash on forward
a2943e3795 generic vxlan: don't learn non-unicast L2 destinations
b30b1d3685 mediatek: filogic: Cudy WR3000 v1 wps button fix
e94052bfee mac80211: ath11k: sync with upstream

We need to pass the `z` option with the volume mount so it gets labeled
correctly and access is possible on SELinux-enabled systems. On systems
without SELinux, the flag is a no-op.

Fixes #3199

moduels: update to latest HEAD

309ee2c26 git: update to 2.43.2
53fa23900 git: update to 2.43.0
f628aaa30 lighttpd: update to lighttpd 1.4.74 release hash
06b0d0cce ovn: bump to 22.03.5
0000f307c openvswitch: bump to 2.17.9
65883df9a squid: fix configure options
57acafa66 unbound: update to latest upstream release version 1.19.1
76aaa3059 libuv: fix CVE-2024-24806
1a4c42d69 haproxy: update to v2.8.6
b23808a54 ocserv: updated config
8e9ad0e3c ocserv: use better separator for sed
a19f8a1f1 openconnect: make host dependency more resilient
22e304ecf openconnect: update to 9.12
679b9cf55 openconnect: add support for option --pfs
9164fa255 lxc: update to 5.0.3
c5ad47372 zabbix: update to version 6.4.7
583af1248 yt-dlp: bump to version 2023.12.30
abba8cff8 yt-dlp: bump to version 2023.11.16
a696cd44b yt-dlp: add missing dependencies
f12547cf1 node: February 14 2024 Security Releases
95f45c24b bind: bump to 9.18.24
1159b8ec3 bind: bump to 9.18.19
74cd5e095 bind: update to version 9.18.18
dc3fec89a bind: bump to 9.18.16
2451d5a69 pdns-recursor: update to 4.8.6 (fixes CVE-2023-50387, CVE-2023-50868)
836047068 squid: update to 6.7
f711c7e24 p910nd: bump release
0f0962ee1 p910nd: hotplug shellcheck fixes
1e8c78fcc p910nd: init: check device (/dev/usb/lpX) existence
111228675 p910nd: init: partial fix for openwrt/packages#10496
238e16f97 p910nd: hotplug+init: include extra ieee1284 properties
00d14e9bb p910nd: hotplug: minor bug fixes
b7a11d611 p910nd: hotplug: small refactor
92d1d4a77 p910nd: init: add txtvers=1 to mDNS properties
c847cac8f p910nd: init: line-break and conditionalize mDNS properties
9ea1d672b p910nd: init: only run mDNS changes if mdns is set to on
7eeb756a2 p910nd: init script
3cac4412d p910nd: hotplug script
abe112566 adblock-fast: add force_dns_interface setting
280b81c7a stlink: add packages
d844df9a4 crowdsec: new upstream release version 1.6.0
91c5ca7ba openssh: fix build failure on powerpc_8548 https://github.com/openssh/openssh-portable/commit/1036d77b34a5fa15e56f516b81b9928006848cbd
89fcc9e27 openssh: bump to 9.6p1
fad7e0ae1 tailscale: create combined tailscale/tailscaled
cf0b1e0ed knot: update to version 3.3.4
de34798be knot: update to version 3.3.3
f83e01a4b dawn: Add PKG_BUILD_FLAGS:=no-lto because lto causes strange SegFaults
a062c2a51 dawn: Update to 2023-05-14
dbb40a890 snowflake: update to 2.8.1

48c81b80b2 wifi-scripts: Support HE Iftypes with multiple entries
60768064ce build: add explicit --no-show-signature for git
79a7195087 realtek: fix Netgear GS110TPP OEM install
31ae9728ff hostapd: fix FILS AKM selection with EAP-192
eda5930d43 generic: 5.15: backport upstream Aquantia PHY firmware loader patches
277d97e0d9 kernel: 5.15: update Aquantia PHY driver to v6.1 code
c90901f088 mediatek: fix failsafe ethernet for NWA50AX Pro
1c28058710 kernel: bump 5.15 to 5.15.148
fbe86d0e91 linux: add dtb makefile target to targets list
183c0d530d kernel-build.mk: add support for compiling only DTS
80c8d65933 toolchain: glibc: Update glibc 2.37 to recent HEAD
633eb115b5 firmware-utils: Fix PKG_MIRROR_HASH
b79583c975 wifi-scripts: fix fullmac phy detection

Omit obsolete manifest-aliases / cleanups

Must be ``GLUON_SITE_PACKAGES`` instead of ``GLUON_PACKAGES``

See Gluon #3191

Link: https://github.com/freifunk-gluon/gluon/issues/3191



Signed-off-by: David Bauer <mail@david-bauer.net>

We don't employ swap using zram anymore with Gluon. Thus, we can disable
SWAP in the kernel.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

add new lines
rename OEMs

Omit manifest aliases for versions whose upgrade path is no longer supported
Add comment to two manifest aliases regarding the version

3d08b0f wgpeerselector: fix undefined variable peer

5a7cac9 batman-adv: Provide teardown hook for batadv_vlan proto
75e1614 batctl: Merge bugfixes from 2024.0

26c24e579 mosquitto: reenable options wrongly turned off
db28d99be python-ble2mqtt: update to 0.2.2
c2ae7b95d python-dbus-fast: upgrade to 2.21.1
63f6af4bc nextdns: Update to version 1.42.0
6d6e398c7 Openvpn: add missing script-security
bce14a016 cloudflared: refine config.yml
892ce0645 dnsproxy: Update to 0.64.1
3ffac159c inih: Update to r58
a3c2cd8fb rclone: Update to 1.65.2
8c8ec8106 cloudflared: Update to 2024.1.5
6cb714722 dos2unix: Update to 7.5.2
8d02881d4 curl: update to 8.6.0
dcff607ba nebula: update to 1.8.2-2
905afb0ed xz: Update to 5.4.6
92a07db7d php8: update to 8.2.15
1167ef72e python-dbus-fast: update version 2.21.0
e6d3a7892 python3-bleak: add missing python3-typing-extensions dependency
0da0a501e natmap: update to 20240126
67dcaa5d7 sing-box: update to 1.8.4
f87af4985  banip: update 0.9.3-5
b61930ad7 v2ray-geodata: Update to latest version
9a26ff67e v2raya: do not allow changing config/log directory
4267c8776 dnsproxy: Update to 0.63.1
63a022a87 rclone: Update to 1.65.1
d07aa2f0f xray-core: Update to 1.8.7
d9d4acfd9 cloudflared: Update to 2024.1.4
ebddc07c1 cloudflared: Update to 2024.1.2
4da835d3e gnutls: updated to 3.8.3
5aabddf75 ocserv: updated to 1.2.4
564e6e08d Openvpn: add missing script event options
0707d98c1 htop: update to 3.3.0
ac2736542 adblock-fast: update to 1.1.1-3
eb7db48b6 yggdrasil: bump to 0.5.4
315f5c41b yggdrasil: bump to 0.5.3
be2b05436 yggdrasil: support public key in config generation
4b5d833e6 yggdrasil: overhaul package with netifd support - package is bumped to 0.5.2 - new protocol changes prevent peering with 0.4.x peers - @turretkeeper revamps package with netifd support - do not use with luci-app-yggdrasil please install luci-proto-yggdrasil

9e41117953 ipq40xx: fix PHY subsystem compilation (phy_interface_num_ports())
c51d49ba39 wireless-regdb: update to 2024.01.23
aa762ada80 openssl: update to 3.0.13
9ee626f945 ucode: add libjson-c/host dependency
3a23eed4dc realtek: fix zyxel-vers usage for XGS1250-12
be7d9da7be bcm27xx: base-files: fix platform_copy_config
9a869950c1 bcm27xx: improve image generation script
c82ca6dc74 bcm27xx: base-files: properly detect boot partition
8a7f667fb5 kernel: 5.15: backport v6.1 PHY changes required for Aquantia
6d962cabba kernel: backport ethtool_puts
5eb578a4fb firmware-utils: bump to latest openwrt-23.05
e302172258 ath79: add Ubiquiti Rocket M XW as alternate name to Bullet M XW
e5af19e955 ath79: ubnt-bullet-m-xw: fix Ethernet PHY traffic
58c9308400 ath79: ubnt,bullet-m-xw: set PHY max-speed to 100Mbps
b5c728948c mbedtls: security bump to version 2.28.7
b0f3fd550b ipq807x: prpl-haze: fix sysupgrade flashing from bootloader
1ca61b7b37 uhttpd: handle reload after uhttpd-mod-ubus installation using postinst
6b7c4739c4 base-files: execute package's "postinst" after executing uci-defaults
1da896f706 bcm27xx-gpu-fw: update to latest version
e05659ef59 bcm27xx-userland: update to latest version
5a4389f6ab bcm27xx: 5.15: turn on cpu erratum for A72 and disable A53
ac97ea1079 bcm27xx: config: update documentation links
c55aaa7c9a ath79: generic: disable SPI-NOR write protect unconditionally
72421d973e realtek: d-link dgs-1210-10p improve sfp support
78beef6aee jsonfilter: update to Git HEAD (2024-01-23)
c1615f3148 kernel: bump 5.15 to 5.15.147
7338733dc9 mediatek: filogic: add support ASUS RT-AX59U

docs, readme: backport v2023.1.2 / v2023.2.1 release notes

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 3c3a6a92)

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit cf970dd8)

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 05dcd8fa)

Sometimes the build of flex fails with erros like these:

./build-aux/config.sub: line 63: opying: command not found

Disable the parallel build of flex in order to avoid these issues from
occuring.

Signed-off-by: David Bauer <mail@david-bauer.net>

Silence warnings for missing rate information.

These warnings do not provide value. Instead, they might rotate more
crucial information out of the kernel message ringbuffer.

Link: https://github.com/freifunk-gluon/gluon/issues/3160



Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD