Commit graph

23697 commits

Author SHA1 Message Date
Hauke Mehrtens
c84025dea2 uboot-mediatek: mtd: spinand: esmt: add support for F50L1G41LC
Some checks failed
Build Kernel / Build all affected Kernels (push) Waiting to run
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Add support for esmt F50L1G41LC flash chip. It is used in some recent
Cudy devices.

Link: https://github.com/openwrt/openwrt/pull/20962
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-28 23:42:29 +01:00
George Moussalem
1f879b8839 qualcommax: ipq50xx: split firmware variants and refactor QCN6122 support
Some checks are pending
Build Kernel / Build all affected Kernels (push) Waiting to run
Build all core packages / Build all core packages for selected target (push) Waiting to run
IPQ5018 based boards come in multiple wireless architectures.
The SOC itself provides 2.4G wifi while 5G wifi is added by either an
IPQ5018-specific QCN6122 (2x2) solution or by the more generally
available PCIe-based QCN9074 (4x4) wifi chip.

On IPQ5018/QCN6122-based boards, both QCN6122 and IPQ5018 wifi is
initialized by IPQ5018 firmware which comes in different versions:
- IPQ5018: firmware files to initialize WCSS and the internal wifi chip
- IPQ5018/QCN6122: above + additional firmware segments to initialize
the QCN6122 chip incl. (de-)assertion of resets and clocks enablement

OpenWrt currently packages the combined IPQ5018/QCN6122 firmware for
both architectures. As such, let's switch to using IPQ5018-only firmware
for boards not packed with QCN6122 chip(s) and keep using the shared
firmware for devices that do have QCN6122(s) chips.
This helps us move to using upstreamed IPQ5018 firmware while using the
legacy repo for IPQ5018/QCN6122 firmware and rule out any initialization
conflicts/issues caused by loading QCN6122 on IPQ5018-only boards.

While at it, default to the secure WCSS remoteproc driver sent upstream
for review, move QCN6122 wifi nodes to a separate dtsi, override the Q6
node to load the multi-PD-based architecture remoteproc driver for
needed only by IPQ5018/QCN6122 designs, reference said dtsi in
boards packed with QCN6122 wifi chip(s), and add provision for migrating
the radio path as the wifi nodes now adhere to linux device tree naming
conventions.

Signed-off-by: George Moussalem <george.moussalem@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/20928
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-28 10:27:53 +01:00
Goetz Goerisch
9274e9a733 odhcpd: update to Git HEAD (2025-11-27)
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
4246bbda56d6 dhcpv4: improve pool var naming
407789e5f307 odhcpd: rename union if_addr -> in46_addr
66e7739f7c86 odhcpd: rename prefix -> prefix_len
75dfe0e71050 odhcpd: rename iface->addr4 -> iface->oaddrs4
d619b5ae28a4 dhcpv4: fix no_dynamic_dhcp
e8022eebc8a7 netlink: variable naming cleanup
fca3fee38ea4 netlink: add netmask for IPv4
1c2e8b60809a dhcpv4: simplify pool determination
558fb499c8c2 dhcpv4: rename iface->dhcpv4_local -> iface->dhcpv4_own_ip
ab8b1572247d dhcpv4: remove iface->dhcpv4_mask
af0c94063e66 dhcpv4: remove iface->dhcpv4_bcast
83055f636091 odhcpd: consistent dns naming
0a54ce0d2b57 odhcpd: rename iface->search -> iface->dns_search
a05cc991716c dhcpv4: iface->dhcpv4_router -> iface->dhcpv4_routers
b4ab371c541a config: fix (S)NTP realloc handling
adb2b8a1afff config: fix realloc() handling for the "upstream" option
38b0920e376b config: fix realloc() error handling for "dhcpv6_raw" option
2e1042c6c07f config: handle realloc failure in piofolder parsing
b9db4d7061a0 dhcpv6: handle realloc failure
ae9e22ab3fad netlink: make it clearer that we're handling realloc correctly
d21e504b38ab dhcpv6-ia: fix realloc bug

650a5df88e...d21e504b38

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20958
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2025-11-28 07:55:31 +01:00
Thomas Richard
1cbaed41b5 arm-trusted-firmware-stm32: bump to v2.13
Some checks failed
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
Since version 4.8.0, OPTEE handles correctly RTC clock configuration for
STM32MP15 based boards. So the patch can be dropped.

Signed-off-by: Thomas Richard <thomas.richard@bootlin.com>
Link: https://github.com/openwrt/openwrt/pull/20953
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-27 20:49:32 +01:00
Thomas Richard
9c87b7f85e optee-os-stm32: bump to 4.8.0
Bump optee-os-stm32 to upstream release 4.8.0.

Signed-off-by: Thomas Richard <thomas.richard@bootlin.com>
Link: https://github.com/openwrt/openwrt/pull/20953
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-27 20:49:32 +01:00
Thomas Richard
b617a61908 uboot-stm32: bump to 2025.10
Bump uboot-stm32 to upstream release 2025.10 and remove upstreamed patch.

Signed-off-by: Thomas Richard <thomas.richard@bootlin.com>
Link: https://github.com/openwrt/openwrt/pull/20953
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-27 20:49:32 +01:00
Christian Marangi
cf14eb6c86
bpf-headers: update to version 6.12
Some checks are pending
Build Kernel / Build all affected Kernels (push) Waiting to run
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Waiting to run
Update bpf-headers to version 6.12 now that we target kernel version
6.12.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 14:31:30 +01:00
Christian Marangi
fee916f6b8
bpf-headers: correctly support refreshing the package
Overwrite default Quilt/Refresh/Package and use the Kernel variant to
correctly refresh bpf-headers patches.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 14:31:30 +01:00
Christian Marangi
ed7e01b7b6
libtraceevent: switch to meson and add missing dep for libtraceevent-extra
Switch to Meson build system and add missing dependency for
libtraceevent-extra.

This switch indirectly fix a compilation error on 32bit target that
weren't getting correct target CFlags. Using Meson fix honour our CFlags
and fix the compilation error.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 13:39:57 +01:00
Nick Hainke
cc88cf5b65 selinux-policy: update to 2.8.4
Changelog:
73e77ae odhcpd anticipate per link configuration
c353698 various
8465968 iwinfo: ucode
9d9f12c various
2f41f9b various
70bb8bc various loose ends
6e817d4 netifd odhcpd wifi
69558b8 addresses various surfaced policy issues
9eb2dae README update
0a710e3 README
6fffaf6 pidfs: fsuse task seclabelfs
b051c6d makefile reproducible

Link: https://github.com/openwrt/openwrt/pull/20955
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 13:32:52 +01:00
Christian Marangi
15f2a8c4f2
ethtool: drop dependency on kernel 6.6
Some checks are pending
Build Kernel / Build all affected Kernels (push) Waiting to run
Build all core packages / Build all core packages for selected target (push) Waiting to run
Since now we default to 6.12 and we dropped any support for kernel 6.6,
drop any dependency on it.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 12:47:43 +01:00
Christian Marangi
6c037b6bd0
kselftests-bpf: drop dependency on kernel 6.6
Since now we default to 6.12 and we dropped any support for kernel 6.6,
drop any dependency on it.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 12:47:16 +01:00
Mieczyslaw Nalewaj
43c48d09ec
packages: remove dependencies for kernel 6.6 and 6.12
Once kernel 6.6 support ends, its dependencies will become redundant.
Remove them and keep only those for kernel 6.12.

Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com>
Link: https://github.com/openwrt/openwrt/pull/20943
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-27 12:35:13 +01:00
Nick Hainke
d691e05395 libsemanage: update to 3.9
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Remove upstreamed:
- 0001-libsemanage-create-semanage_basename-to-ensure-posix.patch

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Nick Hainke
e603841c80 libselinux: update to 3.9
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Remove upstreamed:
- 0001-Inject-matchpathcon_filespec_add64-if-defined-__INO_.patch
  -> 5c3fcbd931
- 100-v2-libselinux-be-careful-with-non-portable-LFS-macro.patch
  -> 21dd00713a

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Nick Hainke
0ceb26a8e8 libsepol: update to 3.9
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Nick Hainke
4225b2c237 secilc: update to 3.9
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Nick Hainke
c7fec66897 policycoreutils: update to 3.9
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Remove upstreamed patch:
- 0001-policycoreutils-run_init-define-_GNU_SOURCE.patch

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Nick Hainke
59a1e5b495 checkpolicy: update to 3.9
Release Notes:
https://github.com/SELinuxProject/selinux/wiki/Releases#release-39

Link: https://github.com/openwrt/openwrt/pull/20908
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 00:02:26 +01:00
Goetz Goerisch
2418ff90d9 odhcpd: update to Git HEAD (2025-11-23)
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
8a8bb3c1a673 src: consolidate and improve fallthrough
8ffe79e3f086 src: improve attributes
0a4d4e11c91c odhcpd: simplify signal handling
6af938921628 odhcpd: make ubus optional at runtime
7313ba262b76 odhcpd: update devel-build.sh
038a7bbfc30d dhcpv4: simplify random address selection
8c574bd2fe62 dhcpv6: prevent network loop scenario
76b2d00ee5f0 router: Modify relayed RA PIO L and RA M/O flags according to interface policy
d236b2e0c53e github: ci: add MIPS64, PowerPC64 and RISCV64
d1500bb5d64d all: implement RFC8910 captive portal (CP) option
9830e5e2bf37 all: implement RFC8910 captive portal (CP) option for DHCPv4
9b9ea96ca90e statefiles: fix off-by-one-bug
c10784ece29c dhcpv4: replace ToS precedence
24f013500691 dhcvp4: use tmp fd in dhcpv4_setup_interface()
3c32b27d8bab dhcpv4: simplify error handling in dhcpv4_setup_interface()
5b7cfef774fb dhcpv4: define val where it is used in dhcpv4_setup_interface()
b0739f23c310 dhcpv4: add BPF to dhcpv4_setup_interface()
650a5df88eba ndp: correctness fix for BPF filter

Signed-off-by: Goetz Goerisch <ggoerisch@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20919
[add myself as maintainer]
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2025-11-26 18:56:19 +01:00
John Audia
5a4e65f612 linux-firmware: update to 20251125
% git log --no-merges --pretty=oneline --abbrev-commit 20251125...20251011 > dddd
00c92044d982 Revert "amdgpu: update GC 11.0.1 firmware"
1b629c2ee14d QCA: Add Bluetooth firmware for WCN685x uart interface
338d4f11a152 qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
e5f2034193cd qcom: venus-5.4: update firmware binary for v5.4
beeb1c6d8fd6 qcom: venus-5.4: remove unused firmware file
4b245479aaca iwlwifi: add Sc/Wh FW for core98-181 release
a193f375146b amdgpu: DMCUB updates for various ASICs
8bcc91d13bbe rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
6299022aec47 ASoC: tas2781: Add more symbol links on SPI devices
9aa00eca20c4 amdgpu: update vega20 firmware
42ea1f79b1da amdgpu: update vega12 firmware
a58d54daedbb amdgpu: update vega10 firmware
1e069e319b1d amdgpu: update vangogh firmware
f7e13466f3cb amdgpu: update renoir firmware
96e217e08b13 amdgpu: update yellow carp firmware
4c44a08fa5bc amdgpu: update VCN 3.1.2 firmware
3719d638b955 amdgpu: update PSP 13.0.5 firmware
aaa7079598fa amdgpu: update GC 10.3.6 firmware
69c122001d45 amdgpu: update VCN 5.0.0 firmware
b8ee4087b353 amdgpu: update SMU 14.0.3 firmware
d714bc8d2e61 amdgpu: update PSP 14.0.3 firmware
90e45a48f841 amdgpu: update GC 12.0.1 firmware
4a2eda3fe051 amdgpu: update SMU 14.0.2 firmware
c3c6345875f1 amdgpu: update PSP 14.0.2 firmware
b2fdc1bd241e amdgpu: update GC 12.0.0 firmware
e96100557112 amdgpu: update VCN 4.0.4 firmware
e2ce9e78f0d6 amdgpu: update smu 13.0.7 firmware
65e62c306034 amdgpu: update PSP 13.0.7 firmware
870a03682058 amdgpu: update GC 11.0.2 firmware
5bdf63c32ed9 amdgpu: update SMU 13.0.10 firmware
e54655337b9f amdgpu: update SDMA 6.0.3 firmware
2c961a06a486 amdgpu: update PSP 13.0.10 firmware
e063d1e8fec5 amdgpu: update GC 11.0.3 firmware
51df8d90d0b6 amdgpu: update smu 13.0.0 kicker firmware
de657c55c334 amdgpu: update PSP 13.0.0 kicker firmware
fff12585de36 amdgpu: update VCN 4.0.0 firmware
37e6b3808abf amdgpu: update SMU 13.0.0 firmware
4567a327551f amdgpu: update PSP 13.0.0 firmware
c4f4863f7db0 amdgpu: update GC 11.0.0 firmware
87eae0321d6d amdgpu: update navy flounder firmware
fcc1130d0510 amdgpu: update sienna cichlid firmware
ea80880af0ed amdgpu: update navi14 firmware
649d7fdf1d4e amdgpu: update navi12 firmware
7b7e771fb2f7 amdgpu: update navi10 firmware
8f25606de7cc amdgpu: update VCN 5.0.1 firmware
60456ab4b075 amdgpu: update PSP 13.0.12 firmware
4d69373e4f8d amdgpu: update GC 9.5.0 firmware
e092a40e7f6d amdgpu: update PSP 13.0.14 firmware
7cd8bd09ad5c amdgpu: update GC 9.4.4 firmware
ae59315f6c03 amdgpu: update PSP 14.0.5 firmware
1b6afb6a7efb amdgpu: update GC 11.5.3 firmware
5176cb313398 amdgpu: update PSP 14.0.4 firmware
71857dd04b14 amdgpu: update GC 11.5.2 firmware
2f28317f7e39 amdgpu: update green sardine firmware
522d9e12207b amdgpu: update VCN 4.0.3 firmware
8f041792d723 amdgpu: update SDMA 4.4.2 firmware
e378955cf3ed amdgpu: update PSP 13.0.6 firmware
86faa583fbdb amdgpu: update GC 9.4.3 firmware
d9f867fa205b amdgpu: update VCN 4.0.6 firmware
77e84ba0b2db amdgpu: update PSP 14.0.1 firmware
85173cf441ec amdgpu: update GC 11.5.1 firmware
4f77f6c84776 amdgpu: update PSP 13.0.11 firmware
e281c8286079 amdgpu: update GC 11.0.4 firmware
e6d6584a618a amdgpu: update VCN 4.0.5 firmware
bafad280328c amdgpu: update PSP 14.0.0 firmware
1c5716794ac6 amdgpu: update GC 11.5.0 firmware
cf102ce55053 amdgpu: update VCN 4.0.2 firmware
7f4f67696c51 amdgpu: update PSP 13.0.4 firmware
df7ad95b388b amdgpu: update GC 11.0.1 firmware
2e749805f26b amdgpu: update beige goby firmware
662215782556 amdgpu: update dimgrey cavefish firmware
72eabbcf8945 amdgpu: update aldebaran firmware
59c101ad56d3 amdgpu: add vce1 firmware
ab4f6864c8e8 mediatek MT7922: update bluetooth firmware to 20251118163447
704ba612298f linux-firmware: update firmware for MT7922 WiFi device
f21bf2079594 qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
094f6b619316 qcom: add ADSP, CDSP firmware for sm8750 platform
b7dee782236f rtl_nic: add firmware rtl9151a-1
c710fdbe961e qcom: Update aic100 firmware files
0649fe0f8a0f mt76: add firmware for MT7990
d7d4a94071f0 mt76: update firmware for MT7992
1de8ddcbce20 mt76: update firmware for MT7996
3f3667bb2b0c cirrus: cs35l57: Add firmware for a few Dell products
62b60d741ff7 cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
24bc7c974de2 qcom: Add sdx35 Foxconn vendor firmware image file
6167e5566900 linux-firmware: Update AMD cpu microcode
fcf22f506bf5 rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
c0af6c70df29 linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
a50c068b4977 rtw88: 8822b: Update firmware to v30.20.0
e5606bd7012d rtl_nic: add firmware rtl8125k-1
c5831f31fb58 ASoC: tas2781: Update dsp firmware for HP and ASUS projects
ad907cca1b30 Revert "Merge branch 'robot/patch-0-1762671757' into 'main'"
d665e29c15bd ASoC: tas2781: Update dsp firmware for HP and ASUS projects
213080aee725 amdgpu: DMCUB updates for various ASICs
23cf7dbb64d8 amdgpu: DMCUB updates for various ASICs
95cd295ec628 qcom: add SOCCP firmware for kaanapali platform
9444af1a20eb xe: Update GUC to v70.53.0 for BMG, LNL, PTL
f2a23165093f i915: Update GUC to v70.53.0 for DG2, MTL
4dedd6cbe36f rtw89: 8851b: update fw to v0.29.41.5
84cc37f396bc rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
3ab5b9e563d5 rtw89: 8852b: update fw to v0.29.29.14
1b1c14bbe283 Revert "rtw89: 8852b: update fw to v0.29.128.0"
9a0d0ed60e4f rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
be71e790deb7 rtw89: 8852bt: update fw to v0.29.122.1
b6252a035ca2 Revert "rtw89: 8852bt: update fw to v0.29.127.0"
a976b0aa25c9 linux-firmware: Update firmware file for Intel BlazarU core
5a689a2fb837 linux-firmware: Update firmware file for Intel BlazarI core
7742578435dd linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
e189b618b99d amdgpu: DMCUB updates for various ASICs
646d97f5320d linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
e637542fa8b9 linux-firmware: Update AMD cpu microcode
0fc31ad67f09 linux-firmware: update firmware for MT7925 WiFi device
b63c322f293e mediatek MT7925: update bluetooth firmware to 20251015213201
35e542439e8a rtl_bt: Add firmware and config files for RTL8761CUV
ad9154476766 linux-firmware: Update AMD cpu microcode
7bcedf5c907e qcom: add ADSP firmware for kaanapali platform
728e92438d2f amdgpu: DMCUB updates for various ASICs
05105d2434ec linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
b582532def13 mediatek MT7920: update bluetooth firmware to 20251020151255
33d0511d15d4 linux-firmware: update firmware for MT7922 WiFi device
c2087f880be1 linux-firmware: update firmware for MT7920 WiFi device
3a49a7356a8c amd-ucode: Fix minimum revisions in README
0de0cd7fc74c cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
93c929780994 mediatek MT7922: update bluetooth firmware to 20251020143443
b0b775e5ad10 Revert "linux-firmware: update firmware for MT7922 WiFi device"
d06442f2b6f5 QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
9440754a997a iwlwifi: add Bz/Fm and gl FW for core98-161 release
f2fbfd22d9d1 iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
dda8b9b09a1c iwlwifi: update ty/So/Ma firmwares for core98-161 release
822db3708dbc iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
edc9bbecf0fe intel: qat: Fix missing link
80bca4b3d75e amdgpu: DMCUB updates for various ASICs
7a1a266e22f1 nvidia: add generic bootloader for GSP-enabled systems
2121082a8884 linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
4ba7ff78711b qcom: vpu: rename firmware binaries
15cb201918e5 Intel IPU7: Update product signed firmware binary
10de40e2bb55 i915: Xe2LPD DMC v2.29
4bda88bd3a9f i915: Xe3LPD DMC v2.32
afae3516d1d8 i915: Xe3LPD_3002 DMC v2.27
bcce0efb5c4a WHENCE: nvidia: rearrange GSP-RM firmware lines
a96c15581a53 linux-firmware: Add ISH firmware file for Intel Pather Lake platform
55d8d2fa006b linux-firmware: Update firmware file for Intel Magnetar core
890cad9f8387 linux-firmware: Update firmware file for Intel BlazarU core
7bbab634ede0 linux-firmware: Update firmware file for Intel BlazarI core

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (Intel N150)

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/20936
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-26 09:38:38 +01:00
Nick Hainke
b03c79f382 wolfssl: update to 5.8.4
Release Notes:
https://www.wolfssl.com/wolfssl-5-8-4-now-available/

Fixes CVEs:
- CVE-2025-12889
- CVE-2025-12888
- CVE-2025-11936
- CVE-2025-11935
- CVE-2025-11934
- CVE-2025-11933
- CVE-2025-11932
- CVE-2025-11931

Link: https://github.com/openwrt/openwrt/pull/20922
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-26 09:35:04 +01:00
Andreas Gnau
26ba9b609b base-files: board_detect: make resilient against power-cuts
If board_detect is interrupted by cutting power on first boot,
board.json might only be half-way written and the file will not be
written again correctly on subsequent boots.

Write to a temporary file first, then rename. Since a rename on the same
file system is an atomic operation, it ensures that either
/etc/board.json does not exist or that the complete file exists.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
Link: https://github.com/openwrt/openwrt/pull/20831
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 21:51:25 +01:00
Andreas Gnau
cac609aca8 base-files: board_detect: Address shellcheck warnings
* SC2166 (warning): Prefer [ p ] && [ q ] as [ p -a q ] is not well
   defined.
 * SC2086 (info): Double quote to prevent globbing and word splitting.
 * SC2091 (warning): Remove surrounding $() to avoid executing output
   (or use eval if intentional).

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
Link: https://github.com/openwrt/openwrt/pull/20831
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 21:51:25 +01:00
Konstantin Meshkov
7e829b8209
kirkwood: add support for D-Link DNS-325 A1
The D-Link DNS-325 A1 is NAS with 2x HDD (3.5 inch) bays, 1x 10/100/1000Base-T port and 1x USB 2.0 port

Device specification:

    SoC: Marvell 88F6281-A1 1.2 GHz
    RAM: 256 MB (2xSEC K4T1G084QF-HCF7:128Mx8 @400 CL6)
    Flash: 128 MB (SAMSUNG 946 K9F1G08U0B PCB0)
    SATA: 2x internal SATA II drives
    Ethernet: 1x Gigabit (Marvell 88E1116R-NNC1)
    LED: 7x (white: Power, white/red: Right SATA Activity, USB Activity, Left SATA Activity)
    Key: 3x (Power, Reset, USB Copy/Unmount)
    Serial: 5 pin header (RXD,GAP,3.3V,GND,TXD), (115200,8,N,1), 3.3V TTL
    USB ports: 1x USB 2.0

Flash instruction:

NOTE: this process uses a serial connection. It will upgrade the bootloader and reset the bootloader environment variables

USB flash stick setup

    Format to FAT32 without mbr
    Copy these files to USB flash stick: dlink_dns-325-a1-initramfs-uImage dlink_dns-325-a1-squashfs-factory.bin dlink_dns-325-a1-squashfs-sysupgrade.bin u-boot.kwb (from u-boot-dns325 directory)

NAS setup

    Connect LAN cable between router and NAS device
    Connetc USB flash stick to NAS device
    Connect serial to NAS device

Boot from new u-boot and install it

    $ kwboot -p -b u-boot.kwb -B115200 -t /dev/ttyUSB0
    Power on NAS
    After download copleted and booted NAS device with new u-boot stop in bootloader by pressing any key
    => usb start
    => fatload usb 0 0x1000000 /u-boot.kwb
    => nand erase.part u-boot
    => nand write 0x1000000 u-boot ${filesize}
    => reset

Update MAC address in u-boot env

    Stop in bootloader by pressing any key
    Get your MAC address from label on chassis
    => setenv ethaddr XX:XX:XX:XX:XX:XX
    => saveenv

Install OpenWrt by flashing factory image from u-boot

    => usb start
    => fatload usb 0 0x1000000 /dlink_dns-325-a1-squashfs-factory.bin
    => nand erase.part ubi
    => nand write 0x1000000 ubi ${filesize}
    => reset

Based-on: #9296
Signed-off-by: Konstantin Meshkov <skyline@mail.ru>
[ refresh uboot patches ]
Link: https://github.com/openwrt/openwrt/pull/17924
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-25 15:41:38 +01:00
Scott Mercer
6065edf3b2
mac80211: ath11k: fix rssi for IPQ5018 and QCN6122
Add pending patch to fix RSSI station data on IPQ5018 and QCN6122.

Signed-off-by: Scott Mercer <TheRootEd24@gmail.com>
[ improve commit description, replace patch ]
Link: https://github.com/openwrt/openwrt/pull/20834
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-25 15:30:47 +01:00
Nick Hainke
90a768aea8 libtraceevent: update to 1.8.6
Some checks are pending
Build Kernel / Build all affected Kernels (push) Waiting to run
Build all core packages / Build all core packages for selected target (push) Waiting to run
Update to latest release.

Link: https://github.com/openwrt/openwrt/pull/20921
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-25 14:09:07 +01:00
Nick Hainke
09360ef26a wpan-tools: update to 0.10
Release Notes:
https://github.com/linux-wpan/wpan-tools/releases/tag/wpan-tools-0.10

Link: https://github.com/openwrt/openwrt/pull/20920
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-25 14:08:07 +01:00
Christian Marangi
41541bf30e
libunistring: fix compilation error with MUSL
MUSL doesn't provide PTHREAD_RWLOCK_PREFER_WRITER_NONRECURSIVE_NP as
it's only glibc and as the MACRO say, it's NP (not portable).

Add patch to check for this and disable overwriting the function
accordingly.

Fixes: 9bdf723476 ("libunistring: update to 1.4.1")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-25 13:41:11 +01:00
Rany Hany
c15b85ee04 wifi-scripts: add missing na_mcast_to_ucast default when proxy_arp is disabled
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Adds missing default value for na_mcast_to_ucast when proxy_arp is not enabled
in order to silence the following msg:

   daemon.notice: netifd: radio1 (xxxx): sh: out of range

Fixes: bcdb29f78f ("wifi-scripts: add na_mcast_to_ucast option")
Reported-by: Antony Kolitsos <zeusomighty@hotmail.com>
Signed-off-by: Rany Hany <rany_hany@riseup.net>
Link: https://github.com/openwrt/openwrt/pull/20806
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-25 11:46:55 +01:00
Rany Hany
2d7a6017f1 wifi-scripts: ucode: fix bug moving to empty wifi-station config
When transitioning from a config with one or more wifi-stations, to a configuration
that has no wifi-station; the file would not be empty/reset and the old wifi-station
entries would remain.

This is because iface_wpa_stations and iface_sae_stations return early if there
are no wifi-stations present, which is an incorrect behavior as it causes the
file to actually have old entries.

'sae_password_file' and 'wpa_psk_file' are also set by default inside
of iface_auth_type to same path as the one used by wifi-station, so it
is indeed going to be set in the config and would contain the old
entries.

This happens with reload and wifi restart. So the only solution
would be to manually remove the file.

Signed-off-by: Rany Hany <rany_hany@riseup.net>
Link: https://github.com/openwrt/openwrt/pull/20700
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-25 11:46:12 +01:00
Rany Hany
e740139302 wifi-scripts: iface should be optional in wifi-station definition
Similar to "wifi-scripts: iface should be optional in wifi-vlan definition"
(98435a3), wifi-station iface should also be optional. By default, it is
supposed to match all interfaces if omitted.

Fixes: https://github.com/openwrt/openwrt/issues/20705
Signed-off-by: Rany Hany <rany_hany@riseup.net>
Link: https://github.com/openwrt/openwrt/pull/20694
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-25 11:45:24 +01:00
Rany Hany
63c146a464 wifi-scripts: ucode: fix wifi-vlan "network" option not working
The call to netifd.set_vlan(...) had an incorrect argument
order. It should be (interface, ifname, vlan) not
(interface, vlan, ifname). This prevented wifi-vlan's
"network" option from working as netifd was not able
to find the wifi-vlan section.

Fixes: https://github.com/openwrt/openwrt/issues/20705
Fixes: https://github.com/openwrt/openwrt/issues/20911
Signed-off-by: Rany Hany <rany_hany@riseup.net>
Link: https://github.com/openwrt/openwrt/pull/20918
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-25 11:44:29 +01:00
Paweł Owoc
8d8990a07e mtd: add dump command help
Add missing dump command help.

Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20725
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 00:43:23 +01:00
Paweł Owoc
693db5945b mtd: allow to use dump and verify on read-only devices
Dump and verify commands can be used on read-only devices.

Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20725
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 00:43:23 +01:00
Rany Hany
7ea659503a wifi-scripts: ucode: add missing config.auth_type assignment for psk2
This ends up breaking wifi-station and wifi-vlan as it depends on
config.auth_type being either psk or psk-sae. When set to psk2,
this would be unset causing that feature to not work.

See discussion in https://github.com/openwrt/openwrt/issues/20705#issuecomment-3568446006

Signed-off-by: Rany Hany <rany_hany@riseup.net>
Link: https://github.com/openwrt/openwrt/pull/20914
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 00:37:46 +01:00
Nick Hainke
27d24fb7b0 libxml2: update to 2.15.1
Update to latest release. Location of cmake files changed.

Link: https://github.com/openwrt/openwrt/pull/20880
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-24 09:40:35 +01:00
Nick Hainke
686b7a3ab4 binutils: update to 2.45.1
Patches automatically refreshed.

Release Notes:
- 2.45.1: https://sourceware.org/pipermail/binutils/2025-November/145592.html
- 2.45.0: https://lists.gnu.org/archive/html/info-gnu/2025-07/msg00009.html
- 2.44.0: https://lists.gnu.org/archive/html/info-gnu/2025-02/msg00001.html
- 2.43.0: https://lists.gnu.org/archive/html/info-gnu/2024-08/msg00001.html

Link: https://github.com/openwrt/openwrt/pull/20884
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-24 09:39:48 +01:00
Nick Hainke
6f0fee58e6 libbsd: update to 0.12.2
Update to latest release.

Link: https://github.com/openwrt/openwrt/pull/20899
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-24 09:38:37 +01:00
Nick Hainke
9bdf723476 libunistring: update to 1.4.1
Release Notes:
https://fossies.org/linux/libunistring/ChangeLog

Link: https://github.com/openwrt/openwrt/pull/20902
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-24 00:13:42 +01:00
Nick Hainke
86003e0b79 jansson: update to 2.14.1
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Release Notes:
https://github.com/akheron/jansson/releases/tag/v2.14.1

Link: https://github.com/openwrt/openwrt/pull/20901
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 23:55:25 +01:00
Nick Hainke
d74dce45ef mpfr: update to 4.2.2
Release Notes:
https://www.mpfr.org/mpfr-current/

Link: https://github.com/openwrt/openwrt/pull/20898
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 23:53:50 +01:00
Nick Hainke
b6c274bf0f nettle: update to 3.10.2
Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2025-06/msg00006.html

Link: https://github.com/openwrt/openwrt/pull/20896
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 23:52:11 +01:00
Nick Hainke
c476870174 libusb: update to 1.0.29
Release Notes:
- https://github.com/libusb/libusb/releases/tag/v1.0.29
- https://github.com/libusb/libusb/releases/tag/v1.0.28

Link: https://github.com/openwrt/openwrt/pull/20897
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 23:50:47 +01:00
Nick Hainke
223cc6e1aa gperf: update to 3.3
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Release Notes:
- 3.3: https://savannah.gnu.org/news/?id=10758
- 3.2: https://savannah.gnu.org/news/?id=10747

Link: https://github.com/openwrt/openwrt/pull/20886
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 21:14:29 +01:00
Nick Hainke
04013941ee libbpf: update to 1.6.2
Release Notes:
- 1.6.2: https://github.com/libbpf/libbpf/releases/tag/v1.6.2
- 1.6.1: https://github.com/libbpf/libbpf/releases/tag/v1.6.1
- 1.6.0: https://github.com/libbpf/libbpf/releases/tag/v1.6.0
- 1.5.1: https://github.com/libbpf/libbpf/releases/tag/v1.5.1

Link: https://github.com/openwrt/openwrt/pull/20882
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 21:13:09 +01:00
Nick Hainke
2833a26a5e libtool: update to 2.5.4
Release Notes:
- 2.5.0: https://savannah.gnu.org/news/?id=10631
- 2.5.1: https://savannah.gnu.org/news/?id=10660
- 2.5.2: https://savannah.gnu.org/news/?id=10669
- 2.5.3: https://savannah.gnu.org/news/?id=10676
- 2.5.4: https://savannah.gnu.org/news/?id=10693

Link: https://github.com/openwrt/openwrt/pull/20879
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 21:11:51 +01:00
Álvaro Fernández Rojas
749d54fea8 busybox: backport hexdump fix for Big Endian systems
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
hexdump isn't working properly on some Big Endian systems, producing
incorrect output such as:
  hexdump -vn 5 -e '"fd" 1/1 "%02x:" 2/2 "%x:"' /dev/urandom
  fdff:542c0054:17920017:
Which should be:
  fdff:542c:1792:

This breaks the default ULA prefix generation on some systems. See:
https://github.com/openwrt/openwrt/issues/19844

The issue has already been fixed upstream, so we can backport the fix:
https://git.busybox.net/busybox/commit/libbb/dump.c?id=f5c7cae55fc3e19d074198bc12152486067ea8c7

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2025-11-23 17:10:00 +01:00
Christian Lachner
671898c7d2
libpcre2: Default enable JIT support for aarch64
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
JIT support in pcre2 allows for extra performance for regex operations in
applications that support it. As outlined in
https://pcre.org/current/doc/html/pcre2jit.html#SEC2 64-bit ARM is
supported.

I tested this on an GL.Inet MT6000 which is an aarch64 device and to my
knowledge everything works as expected. The primary application I tested
this on was haproxy, which makes use pcre for several operations.

If there are no known downsides or known breakages I suggest to
default-enable this feature for aarch64.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20891
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-23 13:55:31 +01:00
Nick Hainke
57e8eb6208 refpolicy: update to 2.20250923
Changelog:
  Notable Changes
  - Several updates and fixes for systemd
  - Add new permissions and policy capabilities
  - Drop reiserfs support (it was removed in kernel 6.13)

  New Modules
  - bubblewrap
  - incus
  - kanidm
  - seatd
  - opensnitch

Refresh patch:
- 100-no-docs.patch

Link: https://github.com/openwrt/openwrt/pull/20861
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 09:23:21 +01:00