themactep/thingino-firmware firmware-2026-06-22

on GitHub

Changes in this release:

• efc921c package/esp-microspeech-features: add into the tree
• 907bfb6 package/zerotier-one: add .hash file
• 7277e9f package/usrsctp: add .hash file, fix license file name
• a4e789a package/nino: switch to a release tarball
• 15372a2 package/llhttp: add .hash file
• e95afb5 package/libsrt: bump version, add .hash file
• 30c39fb package/libschrift: switch to a release tarball
• 3300d5f package/libpeer: add .hash file
• e183d57 package/libjuice: add .hash file
• ba8fd67 package/esp-microspeech-features: add .hash file
• dafd65b package/libhelix-mp3: switch to a release tarball
• cc2fcd8 package/libhelix-aac: switch to a release tarball
• ab06f87 package/libdatachannel: delete unused patch
• fe33517 package/flac: switch to a release tarball
• 3f60a21 package/libpeer: fix outdated cmake, fix mbedtls rng callback
• 88d88eb wire plog package into the tree
• 148bed5 package/usrsctp: configure for modern cmake (fix compilation)
• d53eb95 package/plog: add package (libdatachannel dependency)
• 352ba07 package/libdatachannel: switch to a release tarball
• c37f972 package/ingenic-tflite-micro: add .hash file
• 2d75281 package/go2rtc: add .hash file
• 8105fd7 package/faac: add .hash file
• d9fc68c package/libnl: update patches for 3.12.0
• 15c3f20 package/lightnvr: pin to the latest release tarball
• 93621fb package/lightnvr: gate the package for kernels older than 4.4
• c35a2f9 package/zerotier-one: update to 1.16.2 - switch the package to use a release bundle - versioned patches - update pathes for 1.16.2 codebase
• a123a5f package/faac: switch to a release
• 0f9909c ignore .pyc files
• 4eba404 package/zerotier-one: update to 1.16.2 Update zerotier-one from 1.16.0 to 1.16.2 Hash change: 1.16.0 -> 1.16.2 (No changelog available)
• c606175 package/thingino-wolfssl: update to v5.9.1- Update thingino-wolfssl from v5.7.4- to v5.9.1- Hash change: v5.7.4-stable -> v5.9.1-stable (No changelog available)
• 1faaea0 package/thingino-uhttpd: update to 7b1bec4 Update thingino-uhttpd from 1b624f8 to 7b1bec4 Hash change: 1b624f8f814ed568608d756512892416e0431d77 -> 7b1bec45826bd78c8afc993435bdc0f1df2fe399 Changelog: ae015e0: client: reject unhandled Transfer-Encoding values b78f518: client: close connection on invalid chunk length 7b1bec4: ubus: close connection on POST body parse error
• a3ee743 package/thingino-dfu: update to v1.1.1 Update thingino-dfu from v1.1.0 to v1.1.1 Hash change: v1.1.0 -> v1.1.1 (No changelog available)
• e482838 package/subzeroclaw: update to 43beed7 Update subzeroclaw from d287552 to 43beed7 Hash change: d287552cf4439a9d83609d8702e53baf4bcab032 -> 43beed78056eec48aa995f22292f5e35515fa917 Changelog: c070b73: feat: optional SUBZEROCLAW_REQUEST_EXTRA request-body override (#12) abc36d6: refactor: drop bundled watchdog; supervision is the deployment's job (supersedes #13) (#14) 43beed7: Fix heap overflow in tool_execute output read loop (#16)
• 05d4224 package/llhttp: update to v9.4.2 Update llhttp from v9.2.1 to v9.4.2 Hash change: v9.2.1 -> v9.4.2 (No changelog available)
• ee7cfb6 package/lightnvr: update to fa948ba Update lightnvr from 4a2a245 to fa948ba Hash change: 4a2a245bbb2df116eda8f365aafb0b9ab3790b10 -> fa948ba0e7096ed24421a399b13bb14b007a634b Changelog: 0c5c4de: fix(onvif): recognize env:Body namespace prefix in SOAP responses fa948ba: fix(js): resolve CodeQL quality warnings in frontend JS
• 69c2cd5 package/libsrt: update to v1.5.5- Update libsrt from v1.5.4 to v1.5.5- Hash change: v1.5.4 -> v1.5.5-rc.2 (No changelog available)
• 88ec802 package/libjuice: update to v1.7.2 Update libjuice from v1.7.0 to v1.7.2 Hash change: v1.7.0 -> v1.7.2 (No changelog available)
• 67c5c22 package/libdatachannel: update to v0.24.5 Update libdatachannel from v0.24.0 to v0.24.5 Hash change: v0.24.0 -> v0.24.5 (No changelog available)
• 8d99676 package/go2rtc: update to v1.9.14 Update go2rtc from v1.9.12 to v1.9.14 Hash change: v1.9.12 -> v1.9.14 (No changelog available)
• 6dfa553 package/esp-microspeech-features: update to v1.2.3 Update esp-microspeech-features from v1.1.0 to v1.2.3 Hash change: v1.1.0 -> v1.2.3 (No changelog available)
• df18be5 jooan a6m: toggle wifi gpio to wake up the module
• 52210e8 fix(color): swap imp-control on/off to ispmode 0/1 imp-control color on maps to running_mode=1 (monochrome) and imp-control color off maps to running_mode=0 (color), the opposite of what the command names suggest. Switch to imp-control ispmode 0 and ispmode 1 so the code reads correctly: ispmode 0 = color, ispmode 1 = monochrome. Signed-off-by: Paul Philippov paul@themactep.com
• a85f8c7 container: check for updated image; add a target to clean image/containers
• 263bd69 u-boot: update thingino patch
• b8a5fcc container: mount external THINGINO_USER_DIR into build container Detect when THINGINO_USER_DIR is set to a path outside the workspace and mount it into the container at /user-dir with the corresponding env var override. Handles PRISTINE (/dev/null), default (workspace/user/), and in-workspace custom paths. Signed-off-by: Paul Philippov paul@themactep.com
• 394b98a prudynt: restore passwordless access to the api from localhost
• c8e5b11 thingino-dfu: pin to a release
• 6e096c2 docker: switch to prebuilt GHCR image Use ghcr.io/themactep/thingino-builder-image:latest instead of building the container image locally from the repo Dockerfile. - Pull image from GHCR instead of local build - Remove USERNAME variable (matches prebuilt image) - Add CONTAINER_PREBUILD workaround for uutils install issue: prebuilt image ships coreutils-from-uutils which breaks Buildroot dependency check - Update rebuild-image to pull instead of rebuild Signed-off-by: Paul Philippov paul@themactep.com docker: fix target passthrough to container make The TARGETS variable was set via $(eval) at parse time when $(MAKECMDGOALS) was not yet available, causing it to silently default to 'all' regardless of the requested target (e.g. cleanbuild, dev). Pass $(MAKECMDGOALS) directly to the container make command instead. Signed-off-by: Paul Philippov paul@themactep.com
• 812eae0 Revert "libnl: force automake API version 1.17 for debian:trixie builder" This reverts commit 44b392f.
• 539ee4b Merge branch 'ciao' into q5-ov2735b-16mb
• 0a78737 u-boot: update custom repo
• af12ff6 make: wire flash type selection
• fe9457d make: refactor conditionals
• 2b4eebb docs: update documentation
• b3f7b13 formatting
• 7966e4f ai: add onboarding docuemnt for agents
• 32e6c6d cameras: add .dts files from master
• 7160e85 cameras: simplify gpio notation in json configs
• dfc8275 package/wifi-ssw101b: update to 380838e Update wifi-ssw101b from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 4e48fa4 package/wifi-atbm6132u: update to 380838e Update wifi-atbm6132u from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• c9bfb33 package/wifi-atbm6132s: update to 380838e Update wifi-atbm6132s from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• ee0f327 package/wifi-atbm6032x: update to 380838e Update wifi-atbm6032x from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 169b588 package/wifi-atbm6032: update to 380838e Update wifi-atbm6032 from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 2e0820a package/wifi-atbm6031x: update to 380838e Update wifi-atbm6031x from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 1df8c38 package/wifi-atbm6031: update to 380838e Update wifi-atbm6031 from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 4861875 package/wifi-atbm6012bx: update to 380838e Update wifi-atbm6012bx from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 02f4d23 package/wifi-atbm6012b: update to 380838e Update wifi-atbm6012b from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 38961be package/wifi-atbm-wifi: update to 380838e Update wifi-atbm-wifi from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• af73216 package/thingino-nimble: update to 380838e Update thingino-nimble from 88454ec to 380838e Hash change: 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 -> 380838e871c793ff4feb19bd584d9508b162b835 Changelog: ab40b95: README: document Wi-Fi 6 variants and atbm-606x-c branch 48da75a: README: match Wi-Fi 6 variants table to the vendor-style chip table format 380838e: README: fold Wi-Fi 6 variant build/firmware info into the single ALTOBEAM table
• 7f111a5 package/open-tx-isp: update to 130d9b9 Update open-tx-isp from d2760bf to 130d9b9 Hash change: d2760bfe62a00ee24cd36447d8c9f1b7972b06bd -> 130d9b94b3ddecc0c195913f828f2fee75d562d4 Changelog: f138d68: Add T40 recovered ISP driver workspace 7d85fef: Major t40 milestone -- sensor data displayed and one IRQ active -- day 3 7b89a7d: Check pt 34a8bcb: both interrupt sets active 5fa2739: check pt 70e58c2: Restore T40 RTSP real frame data 2a9e3a7: Document T40 tuning hurdle study 02d049a: Add guarded T40 color path register snapshot afe6070: Document T40 color snapshot read hazard 04b0e5d: Add forced T40 Bayer sweep control 80d3fc4: Add T40 CSC and color-init probes 9203249: Document T40 color probes and fix snapshot windows fa51c09: Add guarded T40 neutral UV diagnostic b131b1f: Add T40 raw qbuf dump probes 01a72ad: Add T40 safe qbuf dump smoke script 5799793: Avoid full T40 proc read in qbuf dump smoke d3baff8: Use stable T40 qbuf fallback for raw dump smoke 3f42e78: Build T40 qbuf dump helper static 1a2e752: Document T40 raw qbuf chroma finding 1604b92: Track T40 dual qbuf neutral UV probe b2fc36e: Promote T40 minimal BCSH top baseline 5a3022e: Probe T40 CSI settle timing cd31296: Correct T40 VIC snapshot base f98ece4: Use stock T40 Bayer phase in qbuf probe 3b915e7: Pin T40 VIC MDMA stride/fmt as dominant defect; add forensics + knobs 38e0cc7: Correct T40 root cause: OEM uses ISP MSCA channel FIFO, not VIC MDMA 53b885c: T40 MSCA-FIFO path works: banding gone via ring-off param, AE is next 8f47603: T40 AE: confirm AE never drives GC4653 over I2C; map the bridge gap ef48e50: T40 AE: decode GC4653 sensor ioctl ABI + in-driver wiring plan a71cd89: T40 AE: confirm EXPO cmd=0x2000006 + payload format from jump table 417a334: T40 AE: lock in verified GC4653 EXPO bridge, drop reboot-prone AE tick f831fce: T40 shear: capture MSCA core geometry; localize defect to scaler output 1cfa315: T40 3A: diagnose dead ISP stats loop as the ADR banding root cause c797dec: T40 3A: add stats fanout; confirm recovered bring-up runs no ISP sw init 8709a73: T40 3A: attempt block-init call (option 3) - blocked by missing param infra 94376a6: T40 3A: option-3 A - fix block-init arg; init fns need reconstruction repair db54848: T40 diamond: localize defect to UV path; add inspection workaround 967dcbe: T40 diamond: set top40 LCE bit21 for clean luma bd81096: T40 AWB init scaffolding and protect active stream reload 7f83583: T40 probe: force local streamoff for recovered reload safety b2f29e5: T40 AWB: repair param tables, hw-write chain, and init path against OEM binary 0d1ada7: T40: live WB gains + self-sustaining gray-world AWB loop b89d766: T40: software AE controller (ae-soft), AE init blob + width/height args 68b032f: T40: fix GC4653 EXPO cmd (0x2000016), userspace 3A agent for night AE/AWB b1e72f4: T40: soft gamma (grain fix), smooth proportional 3A, probe auto-start ccaca89: T40: faithful YDNS denoise chain repair, enabled by default 17dcfd5: T40: OEM gamma curve from tuning blob + GIB black level — fog eliminated ee8d3a9: T40: YSP sharpening chain scoped + symbolic reg_cfg extractor c1d1b28: T40: sharpening online — YSP chain via literal MIPS->C translation 657ce43: T40: CCM online via literal translation — full color pipeline complete d7fa544: T40: anti-flicker AE rungs, smooth exposure, DNS strength tracks gain 062c0c5: T40: MDNS chain installed (default off, recon), AE/DNS retune 950dce1: T40 3A: two-level AE (IT micro-trim + coarse gain) — kills breathing c65c6e9: T40 MDNS temporal denoise ONLINE — gate is top40 bit13 5ca976e: T40 daylight AWB: brightest-2 near-gray candidates; color-block gap mapped 0403519: T40 color parity: add gated BCSH and staged CLM literal chains d61d4e1: T40 LSC online via faithful lit chain; radial color cast root-caused 130d9b9: Check pt t40/t41 work
• e9e4ea5 package/nino: update to eec2203 Update nino from adf76f9 to eec2203 Hash change: adf76f94d30857e85e423635d502d6e5c43aed87 -> eec220383404129b4ca089d182fbdcfb73dac5cb Changelog: ac9b0a3: Replace ctype.h functions with ours 42fc381: Add deselect language of a file 2c2c5c0: Improve cursor and row offset on reload 9d15d3a: Strengthen HLDB JSON validation 33a2d04: Add DevMsg 5e475e2: Add incremental find 9534e39: Improve find cache validation on case 3f0be06: Fix find cache on exact match but wrong case e74773d: Fix action list not init after reload eec2203: Remove scroll release event workaround
• 34ddd84 package/faac: update to 02fee83 Update faac from 167b5eb to 02fee83 Hash change: 167b5eb656c7f529faf565ead10ba0c67f5eb384 -> 02fee83d97e5db0644c0622a2b15ed6e6db461fe Changelog: 600f237: quantize: floor masking targets in quiet bands; fix qlevel safety (#107) 02fee83: quantize: keep global_gain a valid regular scalefactor (fix decoder OOR) (#109)
• 44b392f libnl: force automake API version 1.17 for debian:trixie builder The libnl-3.12.0 release tarball is generated with automake 1.18.1, which hardcodes am__api_version='1.18' (and thus aclocal-1.18 / automake-1.18 via the missing wrapper) into configure and Makefile.in. Our patches (to support disabling unused netlink libraries via conditionals) touch configure.ac / Makefile.am, which triggers the regeneration rules during make. debian:trixie only provides aclocal-1.17, so builds in the official thingino-builder-image container fail with: .../missing: line 85: aclocal-1.18: command not found Add 0006-downgrade-am-api-version-to-1.17.patch (and small supporting updates to the 0002/0004 generated-file patches) to force the 1.17 API version. This lets CAMERA=... ./docker-build.sh dev (and normal builds) successfully pass the libnl step inside the trixie-based container.
• 0948a73 create a directory for local overrides
• dab0c69 massive update: sync changes from master - new partitioning with unified overlay - uboot from bundle plus a patch - kernel led system
• db813d0 Add new Q5 variant (T21N, OV2735B, MT7601U, 16MB)
• 14f7115 libnl: versioned patches
• d2e1295 busybox: versioned patches for different busybox versions
• 6e27ebc add vcm gpio config to motors.json, and use it in focus script dw9714-ctrl
• 62f451f buildroot update: stash changes before updating
• 17d3481 Update buildroot to latest stable release 2026.05
• f401a1a uhttpd: update patch to match the codebase
• 14e86a8 package/thingino-uhttpd: update to 1b624f8 Update thingino-uhttpd from e619cb0 to 1b624f8 Hash change: e619cb04cddba8316d6928ff99f55a49e6ddc561 -> 1b624f8f814ed568608d756512892416e0431d77 Changelog: d255187: client: prevent transfer_chunked counter overflow 07f0afb: client: match Host and URL attributes exactly in tls_redirect_check 05406f7: file: scan all entries when matching If-Match / If-None-Match 81527e1: proc: restore default SIGPIPE disposition in spawned child 0df6257: ucode: initialize module search path only once 05317bf: proc: store CGI Status message per-client instead of in a shared buffer 1781b6d: utils, client: cast char to unsigned before passing to ctype functions 4221eb8: file: respond 500 on uh_handle_alias OOM 8e5b26f: file: distinguish parse failure from epoch in date precondition checks ced7b15: utils: fix one-byte overflow in uh_urldecode 53e7150: file: bail out of file_write_cb on read error 9343214: utils: remove unreachable return statement in uh_addr_rfc1918 add5389: utils: fix off-by-one out-of-bounds read in uh_b64decode 778ccbb: main: fix daemonization stdio redirection and fd leak 2c869c0: client: parse Content-Length safely 9404e6c: client: parse chunked transfer chunk size safely b33ca5d: auth: do not accept stored crypt hash as plaintext password 6fadf0d: auth: replace strcmp with constant-time password comparison 6ab9abb: cgi, file: fix crash due to field_len type mismatch with libubox 1b624f8: auth: classify $p$ lookups by account state
• 231badc package/thingino-ubus: update to 795b32b Update thingino-ubus from 3cc98db to 795b32b Hash change: 3cc98db1a422dcf560f2d6347fd410f17565a89d -> 795b32bb96b611493f423666236e9c1e49e0736c Changelog: 4b27405: libubus: fix NULL dereference on OOM in ubus_queue_msg 8b5be57: libubus-acl: fix dangling pointers on blob_memdup failure in acl_recv_cb 9105ea2: ubusd_acl: fix NULL dereference on OOM in ubusd_acl_alloc_obj 07d7f34: ubusd_acl: handle allocation failures in ubusd_acl_init_client 497321a: ubusd_acl: fix NULL dereference on OOM in ubusd_acl_init f66d52b: ubusd_event: fix OOM handling in ubusd_send_event_msg 11ea1b3: ubusd_main: fix async-signal-unsafe SIGHUP handler 0c09559: ubusd_proto: fix resource leaks and ID tree corruption in ubusd_proto_new_client f61695e: ubusd_proto: fix NULL dereference for user/group in ubusd_handle_add_watch 7ecacfa: ubusd_proto: fix NULL dereference on OOM in ubusd_proto_init_retmsg 3ab9d77: lua: fix inverted argument check in ubus_lua_add 43051ca: lua: fix unchecked calloc and memory leak in ubus_lua_load_object 4ca0b14: ubusd_id: use getrandom(2) unconditionally on Linux 7e4356d: ubusd_monitor: fix NULL dereference on OOM in ubusd_monitor_message 5849870: libubus-req: fix file descriptor leaks in ubus_process_req_msg f29767f: libubus: fix file descriptor leaks in ubus_process_msg b099d05: libubus: make ubus_shutdown idempotent a564b8d: ubusd_main: check strdup return value in mkdir_sockdir 239edcb: ubusd_id: fix continue in do-while skipping random ID retry 09d2df4: ubusd: fix NULL dereference on OOM in ubus_msg_enqueue bcc45ca: libubus: actually set FD_CLOEXEC on the ubus socket 8188f5c: libubus-io: close recv_fd captured before get_next_msg failure 7a068ba: libubus-io: byte-swap peer in HELLO when storing as local_id 747013f: libubus-io: reset sock.fd to -1 after close on ubus_reconnect error path 020a64b: ubusd_acl: use size_t for strlen result in ubusd_acl_alloc_obj f92ffd2: ubusd: use size_t for string and blob length variables 795b32b: ubusd: use fixed-width types for sequence counters
• c4826b8 package/thingino-raptor-ipc: update to 537bfcf Update thingino-raptor-ipc from 8c68f61 to 537bfcf Hash change: 8c68f61f94fb88885b03c1fec9e14a9db89ac7a4 -> 537bfcf9159d8a270a0ad8cc96b5b3cf8d31d9bb Changelog: 64bf347: ipc: move shm_open fallback log to TRACE level 537bfcf: ipc: add TRACE level to default logger, filter trace messages by default
• c4d58f0 package/thingino-raptor-hal: update to 1798e4e Update thingino-raptor-hal from 9efbea5 to 1798e4e Hash change: 9efbea55544ef6a0d77a1b5c244ff245b44d43ff -> 1798e4e30750c7904bd88c096b449fc914fa310c Changelog: d287851: fix C++ build: filter -std=c11 from CXXFLAGS, suppress missing-field-initializers 9780eb1: fix persondet: use ifdef PERSONDET instead of weak symbols 1798e4e: raptor-hal: add T10 platform support (aliases T20 SDK)
• c616afd package/thingino-raptor-common: update to 2f29631 Update thingino-raptor-common from fe61fb7 to 2f29631 Hash change: fe61fb70b8750bf474fad379aa212767223aeef8 -> 2f296318891c61e131ef36c4296822d951b94698 Changelog: 2f29631: common: add rss_json_get_nested_int for nested JSON key lookup
• 841a6f2 package/thingino-raptor: update to 19804ef Update thingino-raptor from 46dec1c to 19804ef Hash change: 46dec1cf0f1875ace895f6668f83cde602ab0173 -> 19804ef2ac8c0b7a1c0f0a3ddc72853046688ac0 Changelog: 52fa84c: rhd: remove blocking JPEG ring wait at startup ac90ecb: rac, rad: fix ring read throughput loss from wait-before-read 16ba95a: rod: add frame counter to OSD timestamp via %f format token d2b9297: ric: fix IR LED GPIO discovery, add dual LED support 96785c9: ric: fix strtol parse failure handling in thingino.json parser 130cc90: ric: rewrite thingino.json parser to use cJSON, add GPIO range check 36d3112: rsd-555: use LINK_STDCXX variable, fix live555 patch context 2d5009e: build: add --release, --static-stdcxx, shared lib support 435860e: readme: update RSR description, reorder repo list aae67eb: build: allow --clean-all without platform argument b98c0ab: readme: expand RMD description with IVS/JZDL/YOLO capabilities 684665b: readme: emphasize modularity 9baec27: readme: add T10 to supported platforms e256a44: build: add --ivs flag for IVS detection (persondet + JZDL + MXU libs) 6f52fb1: build: add IVS, STATIC_STDCXX, RELEASE to features display 2d0af71: fix persondet: link MXU libs with --no-as-needed, fix jzdl.m.so install path 203c4f9: rwd: apply webrtc connection fixes to share.html (max-bundle, connection state, beforeunload) 1d9edaa: ric: add photo thresholds to set-threshold and get-thresholds 16c4b6d: tests: fix mock stubs for daemon restart/shutdown (weak symbols) af6ca1d: rwd: add 5s timeout to ICE gathering in share.html 9827459: rod: fix format-truncation warning in template frame number 0e31ea1: build: fix exit code 1 when --static (no lib/ dir to list) 6dcddfa: rwd: support all 6 multi-sensor streams in WHIP endpoint a2052d6: rsd: fix H.265 SDP missing sprop params + refmode zerocopy send race 19804ef: tests: mock HAL frame production, slow client tests, SDP validation
• 1a8a581 package/thingino-onvif: update to 37fa1ac Update thingino-onvif from 66602f3 to 37fa1ac Hash change: 66602f31f747023f1a89a376beff9a123077da43 -> 37fa1ac2f75b20859a8bcdd3b1b79725e0ad4ede Changelog: be3fb34: Fix ONVIF media profile selection and encoder responses bce89aa: onvif: ignore non-RTSP profiles 37fa1ac: fix profiles enumeration
• 8677899 package/thingino-odhcp6c: update to daf4ec3 Update thingino-odhcp6c from 24485bb to daf4ec3 Hash change: 24485bb4b35ab84c17c2e87bd561d026d4c15c00 -> daf4ec3054e753c99fdcc3ac5464926548b38351 Changelog: 08bd058: ra: skip malformed options instead of aborting RA processing 2550a1d: dhcpv6: fix inverted Authentication option validation in Reply 496e55d: dhcpv6: use host-order option length in Authentication validation b6f0c70: dhcpv6: fix out-of-bounds end pointer when parsing IA in Advertise 92fd11c: dhcpv6: fix OOB read and 1-byte heap overflow on captive-portal option 0dab8fe: ra: fix OOB read on captive-portal option comparison a4d6a32: script: fix string_to_env writing garbage and reading past input 2521bf7: script: avoid kill(0) when SIGCHLD races script_call 56cec7a: odhcp6c: drop stale hash_ifname() declaration 49d9c01: odhcp6c: propagate allocation failure from insert_state 4bd976f: dhcpv6: ensure hostname buffer is NUL-terminated for dn_comp 6d12865: ubus: validate element type when parsing reconfigure_dhcp opt_send 01130f8: script: handle allocation failures in env helpers 0a19052: odhcp6c: refuse to follow symlinks when writing pidfile d6c2fbd: odhcp6c: skip malformed /proc/net/if_inet6 entries b6add6c: dhcpv6: avoid signed-shift undefined behaviour in IAID derivation ce52fe1: ubus: clear cached object type id on disconnect 91f88c6: config: stop mutating caller-supplied buffers in send-options parser c938c16: script: handle fork() failure when launching state script 1546a48: ubus: avoid out-of-bounds read when serializing captive-portal URI 3270f08: all: fix inverted captive-portal URI equality check (RFC 8910 §3) e9a9e9d: odhcp6c: bound the address length when parsing the -P argument 5ad94c8: script: walk entries with odhcp6c_next_entry in entry_to_env df4f199: ubus: walk entries correctly and don't leak an open table in entry_to_blob 6c1c4c4: ubus: don't leak an open table on malformed S46 rule/bind in s46_to_blob 1797d2b: odhcp6c: remove pidfile on exit 86a6665: ra: clear captive-portal state when router signals unrestricted URI 0a4e51d: dhcpv6: require known SERVERID when validating Reconfigure afc3c85: dhcpv6: reject Reconfigure with malformed or duplicate Message option df27a49: dhcpv6: enforce monotonic replay counter on Reconfigure RKAP 9177f23: odhcp6c: do not treat DHCPv6 option type 0 as end-of-list daf4ec3: example: write all DNS servers to resolv.conf
• 4c55de4 package/thingino-nimble: update to 88454ec Update thingino-nimble from 13953b6 to 88454ec Hash change: 13953b6e9090e620640edf4c6ea8ffc2e46da6b4 -> 88454ec7f78fdf8ce69b1cfb7f2288251eb0bf82 Changelog: 10ed0ba: Fix kbuild Makefile parsing and translate garbled comments d0de306: Fixed compilation for 4.9.37 88454ec: Fixed compilation for 4.9.37
• 9b767dd package/thingino-libubox: update to 1fe93d2 Update thingino-libubox from 1501e60 to 1fe93d2 Hash change: 1501e60e5554bd206c9b13532b7352e668508420 -> 1fe93d2fefb213ec987763e7e94ce5eaa757bfc3 Changelog: 19e88cc: json_script: use size_t for calloc_a() length argument 9afc710: udebug-remote: pass size_t to calloc_a() 73a2197: treewide: use size_t for length variables to avoid implicit narrowing 1fe93d2: blob, udebug-remote: silence -Wconversion warnings in trivial cases
• a9a562a package/subzeroclaw: update to 35ed5e7 Update subzeroclaw from 1d203dd to 35ed5e7 Hash change: 1d203dd4a896b02d521b300431c9127f2917d10a -> 35ed5e704bbbb429de20b32d6daa735d57b1940e Changelog: 32bd476: shell: exit codes + heredoc fix + safer buffers c6cb13b: extract llm_chat as weak symbol 35ed5e7: license change
• c02a164 package/strero: update to ca1e10e Update strero from a91cd52 to ca1e10e Hash change: a91cd5251ce300e7c6cb1106b5c5a9d8ea021350 -> ca1e10e03b17dfa0899116f975006edfdd2f7b5c Changelog: ca1e10e: update build script
• 1e5002b package/nino: update to adf76f9 Update nino from 5959aa8 to adf76f9 Hash change: 5959aa8663e57b0e0c4bebf44136d4ad24144390 -> adf76f94d30857e85e423635d502d6e5c43aed87 Changelog: 3262446: Remove recursion in syntax highlighting aa7b9fd: Add intro message 8326ded: Add -u option 8d24991: Print usage to stdout 7551ba6: Don't draw intro during loading state 4c9a02e: Refactor ConVar system 862667c: Add timestamp to EditorInput 67fa955: Refactor console input handling 6e2af0c: Rewrite base64 encoding 51ef8c5: Fix autoindent incorrectly increases indent 352d6a1: Fix buffer overflow in parseLine eb79d67: Fix echo/alias off-by-one buffer overflow ad40cd7: Add null checks for getEnv e7a6ca6: Add quit command ef1ad87: Add ANSI/256/default color support ab19998: Refactor color config to use enum index 53e96df: Add vector_free macro 26b7c8d: Refactor Highlighting 7f8e072: Fix vector_shrink 9bfceb0: Add 0 size check malloc functions c61dfb5: Add back syntax command callback 0858e7e: Fix os_unix warnings 43535a5: Fix vector stuck at capacity 1 3ca4b63: Refactor trailing highlight 7192116: Add lazy syntax highlighting cf523ff: Fix top status not drawing when loading adf76f9: CI: Update versions
• 6d2e4b1 package/ingenic-sdk: update to ff16c63 Update ingenic-sdk from 0a402bf to ff16c63 Hash change: 0a402bf2524263ca227eba4ed7af049e7ff21c47 -> ff16c633c3fb81b24e8b0d7549773ec5232be469 Changelog: 5eb47a2: added new T23 sensors 6cab8b9: sinfo: add missing T23 sensor entries 053e871: sinfo: add probe quirks for sc2336p, sc2337p, sc3336p 6809758: t41: link ISP firmware 1.2.6 to resolve missing tx_isp_core_ioctl_mask b67e169: t41: update mpsys firmware blobs from SDK 1.2.6 2d343cd: t41: add 33 new sensor drivers from SDK 1.2.6 0178227: t41: add and update IQ bin files from SDK 1.2.6 36f9245: t23: add and update IQ bin files from SDK 1.3.0 ad87be7: os04d10: select page 0 before chip ID detect 8f91f97: add 116 new sensors to sinfo c7678e4: add sc3338 sensor to t40 from t41 ff16c63: t40: sync ISP sources with vendor SDK 1.3.1
• 75ea44c package/ingenic-lib: update to 99ed33f Update ingenic-lib from 9bfe42f to 99ed33f Hash change: 9bfe42f4a20c65eefd33c509abfa38e383b4119f -> 99ed33fd55fdf4fdfaa378a0924c5c6a7a31943b Changelog: eb21d4c: Add T32 libs 99ed33f: T32: fix paths
• 3ba3f58 package/faac: update to 167b5eb Update faac from 6858080 to 167b5eb Hash change: 6858080dd1abf528d5a946066b9f71cc3d8e0b21 -> 167b5eb656c7f529faf565ead10ba0c67f5eb384 Changelog: 82dfc42: quantize: restore short-window masking penalty to fix energy drops (#103) 9051425: fix: V-001 security vulnerability (#104) 167b5eb: Fix TNS Decoder Rejection Bugs & Remove Obsolete Profiles (#106)
• 7e5cfe6 add a script to read supported flash chip entries from u-boot
• 58cda12 u-boot: add vendored spl files
• 2e8087f webui: add delete button to media files
• 9066c9c make: add flash size to bootlader env
• 6b1ce80 make: require explicitly defined tftp directory
• cffc035 rename cloner to dfu, update plumbing Move thingino-dfu Config.in to Config.in.host Per Buildroot convention, host-only packages should use Config.in.host sourced from Config.in.host, not Config.in. - Renamed package/thingino-dfu/Config.in -> Config.in.host - Removed source from top-level Config.in (target menu) - Added source to Config.in.host (host utilities menu)
• f394eb5 make: copy to tftp directory only if it is set
• 6bc6d3b docker: add overrides, expand symlink
• 3b8d495 docker: add overrides, expand symlink
• f7453e3 docker: add missing packages
• 7b9a45f docker: add missing packages
• 5912857 webui: add -m sha512 to mkpasswd calls for busybox compatibility
• 12445a6 replace S99heartbeat daemon with agent runtime endpoint - Add heartbeat runtime resource to prudynt and null adapters - Add media runtime resource to both adapters (fixes 'unsupported runtime resource: media') - Rewrite json-heartbeat.cgi and json-heartbeat-slow.cgi to proxy from agent endpoint instead of reading daemon cache files - Remove agent heartbeat-disable logic from S95thingino-agent - S99heartbeat daemon no longer needed; kept .mk line commented
• df64351 webui(file-manager): add column sorting and file deletion - Make table columns sortable (name, size, permissions, date) with direction indicators; directories always stay on top - Add delete action to file actions modal for files on mounted partitions (/mnt, /media) using global confirm() dialog - Backend CGI enforces deletion restricted to mounted partitions and requires POST method
• d9beaf7 add patch to prerequisites, consolidate common packages.
• 0e66409 wifi-rtl8189fs: drop wext
• 89a2e72 wifi-atmb6031: drop wext
• 5f8c327 makefile: remove bootloader ota upgrade
• 019f2b3 Force thingino-mosquitto-20x and mosquitto to C-only builds Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 0edd38f wifi-atbm6012bx: drop wext
• be1c3f8 wifi-atbm: bump all atbm-wifi packages master (88454ec): 6031, 6031x, 6032, 6032x, 6012b, 6012bx, 6132s, 6132u, atbm-wifi atbm-606x (11ca4da): 6062s, 6062u
• fac7b3a libcurl: remove telnet support, no longer needed
• 3df520f webui: switch diagnostic upload from curl to nc
• 9750354 send2termbin: switch from curl to nc to fix upload truncation
• 6022e6e update GPIO definitions, add button support
• 2ac7e59 make: remove duplicate update unpatch step Run Buildroot override unpatch only once in update and guard when buildroot submodule is not initialized yet. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 426c281 webui: fix WireGuard toggle error handling
• 1cb585d webui: disable flash operations page for non-development builds
• 3df56c1 webui: make send2 page aware of services without media payloads
• b76b425 webui: refactor file manager
• 619da5e agent: include into default configuration
• 6b068bd raptop: clean up
• ad4cb59 webui: fix typo
• f55875e webui: do not install heartbeat service
• 3255efa package/prudynt-t: update to f4b3228 Update prudynt-t from 3cb1621 to f4b3228 Hash change: 3cb1621fa7625b4d47b6de644d82bccc8f7f31b4 -> f4b32289359d176fb0795d9f3735af0bd9d6d2fd Changelog: 51bec07: Guard T20 advanced ISP tuning init e5da7af: reformat sources with default clang width ea3a2f0: ignore local toolchain 093fa78: upgrade to gcc15 toolchain in docker f4b3228: update build.sh (incomplete)
• 6f4e594 ingenic-lib: use sdk 1.3.0 libs for t23 soc
• 47a7c15 sysupgrade: parse content-length case-insensitively Use a simple grep-based parser for Content-Length so lowercase HTTP headers from GitHub are handled correctly. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 959bc13 wifi: move wlan module unload to wired-gateway Stop unloading the Wi-Fi driver from S38wpa_supplicant, and perform wired-priority teardown in S40wired-gateway instead. Also render S40wired-gateway as a template so WLAN_MODULE_NAME is injected at build time. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 8c57ee9 cameras: move failing xburst2 configs to experimental
• ae881cc wireguard-tools: bump to 1.0.20260203 in override
• f5fe4ba wireguard: add hash for 1.0.20250521 bundle
• e53a9f3 move kernel patches for 4.4.94
• 89a357f thingino-live555: use release mirror for bundle downloads Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 9fe9ca7 buildroot: add busybox kconfig toolchain dependency patch Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 6c39437 make: remove OTA update from the guided compilation
• 9105091 ha: disable firmware updates by default
• ba1b53f webui: add reusable password reveal toggle Add a shared password-reveal helper and styles, then load it on web UI pages so password fields get a click-to-reveal eye icon. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com webui: fold password reveal into common script Move password reveal toggle behavior into /a/main.js, remove per-page /a/password-reveal.js includes, and delete the standalone script file. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 2aa975b make: skip dep check for update target Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• fc4b4bd docker-build: no dependencies checking on the host system when compialtion is in a container
• 19081b8 restore kernel selection logic defaulting to xburst1 branch
• bab12bc webui: lock GPIO and ircut hardware fields Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 69e9a38 webui: make GPIO pin state fields read-only Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 5d9661d telegrambot: add allowed user ID filter Support filtering incoming messages by Telegram sender ID via a new allowed_user_ids config list, while keeping username filtering.

Also expose allowed_user_ids in telegrambot defaults and WebUI config page.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

• 6f125b0 Add 'lzop' to build dependencies installation
• 88635f7 package/prudynt-t: update to 3cb1621 Update prudynt-t from d6c6742 to 3cb1621 Hash change: d6c6742ce65583c7b35c387b275d122244904794 -> 3cb1621fa7625b4d47b6de644d82bccc8f7f31b4 Changelog: 3cb1621: update submodule
• 8902684 package/prudynt-t: update to d6c6742 Update prudynt-t from f89af0c to d6c6742 Hash change: f89af0c6e5024954c378f50feeebc16410d812d9 -> d6c6742ce65583c7b35c387b275d122244904794 Changelog: d6c6742: update submodule
• ab8c106 package/ingenic-sdk: update to 0a402bf Update ingenic-sdk from 3efc0a1 to 0a402bf Hash change: 3efc0a108bc4c52b4c8bce219d6ae32e20558328 -> 0a402bf2524263ca227eba4ed7af049e7ff21c47 Changelog: 0a402bf: t41: update ISP module headers and source to SDK 1.2.6
• ae181b6 package/ingenic-lib: update to 9bfe42f Update ingenic-lib from 47bf9e5 to 9bfe42f Hash change: 47bf9e5d857a34bf9d5c86b6b53028980bffbf31 -> 9bfe42f4a20c65eefd33c509abfa38e383b4119f Changelog: 9bfe42f: T41: add 1.2.6 libs
• 010c927 package/ingenic-lib: update to 47bf9e5 Update ingenic-lib from 8f54b5a to 47bf9e5 Hash change: 8f54b5af3176997d49ff41eb75934e312a44bacb -> 47bf9e5d857a34bf9d5c86b6b53028980bffbf31 Changelog: 47bf9e5: T41: add 1.2.6 libs
• a1efb00 add T31 kernel defconfig for 7.1-rc1
• 7ad3842 skip BSP-only packages on kernel 7.1, update version refs to 7.1-rc1
• 1050f44 organize linux patches into per-version dirs, add 7.1-rc1 FIT image fix
• c911be4 package/ingenic-lib: skip libsysutils on a1 Hide BR2_PACKAGE_INGENIC_LIB_LIBSYSUTILS on SOC_FAMILY=a1 and gate target install logic so a1 builds don't try to install a missing libsysutils.so. Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• 8f9df97 ingenic-lib: bump sdk libs for a1 soc to 1.7.0
• caef58e dhcpv6: fix typo
• 95f2d8d retire /usr/share/common
• 9221c72 rcS init: remove dependency on common; stop blinking boot inddicator
• 4ea08a9 ledd init: start blinking at boot with the first found LED
• 99e34dc ledd init: remove dependency on common; refactor to stay resident
• 2773fc8 sysupgrade init: remove dependency on common; remove partial update
• 69aab4d rcK: formatting
• 98345f6 rc.local init: remove dependency on common
• 142db0f ircut init: remove dependency on common
• a4b79f1 mdnsd init: remove dependency on common
• 0d5c95f dropbear init: remove dependency on common
• c3873d5 crond init: remove dependency on common
• 50af3df ntpd init: remove dependency on common
• 2d6af4a mounts init: remove dependency on common
• bac8a0d wireguard init: remove dependency on common
• 7bdd5cd network init: remove dependency on common
• d68e341 mdev init: remove dependency on common
• 04291e8 modules init: remove dependency on common
• c1aafae usb init: remove dependency on common
• 8ba6a1f led init: remove dependency on common
• d52969b dns init: remove dependency on common
• f4bf9ae hostname init: remove dependency on common
• 77c1961 timezone init: remove dependency on common
• 38acdbb syslog init: remove dependency on common
• a4a2bde seedrng init: remove dependency on common
• 0712789 sysctl init: remove dependency on common
• d4e15e1 watchdog init: remove dependency on common
• fe7ae66 failsafe init: remove dependency on common
• 361aa18 datetime init: remove dependency on common
• 2a4f496 formatsd: remove dependency on common
• 572f357 led: remove dependency on common; formatting
• 83b31ae Fix hardcoded /sbin/wpa_supplicant path in stop functions, use DAEMON_FULL
• 56ba0d9 Rename S40wpa_supplicant→S40wired-gateway to avoid service script name collision
• b43e3f4 udhcpc: remove dependency on common
• 829b0ed ircut: remove dependency on common; formatting
• 15959e9 light: remove dependency on common
• 9ec6042 wireguard watchdog: remove dependency on common; formatting
• c119be1 tzselect: remove dependency on common; formatting
• 9cca661 service: remove dependency on common
• 10712e1 send2termbin: remove dependency on common
• 913ac1e blink: remove dependency on common
• b4f3284 dhcpv6: remove dependency on common, refactor returning two values from a function
• 7524b26 mdev: remove dependency on common
• cf51bb4 init: formatting
• 3875a62 network scripts: remove dependency on common
• 1d353d5 stop_client: unload wireless module to free memory on wired preempt
• 74e222d stop_client: release DHCP lease and flush IP on wired preempt
• 6e6e258 Split wpa_supplicant init: S38 starts WiFi before network, S40 preempts if wired S38wpa_supplicant: starts wpa_supplicant/auth before S40network so DHCP runs on an already-authenticated interface. Portal mode defers DHCP/DNS/sound until S40 confirms no wired gateway is available. S40wpa_supplicant: runs after S40network, checks for wired gateway via is_gateway_reachable. If wired is up, stops WiFi. If not wired and portal was prepared, triggers portal_confirmed to start DHCP, DNS, and play the portal-up sound. Fixes: DHCP-on-unauthenticated-wlan0 race when wpa_supplicant runs after network, and premature portal announcement on dual-interface cameras with active Ethernet.
• d0c1ba2 Refine S40wpa_supplicant: proper argument passing for is_gateway_reachable, apply also to usb0
• f01ddde Fix wpa_supplicant not up when the camera have both wired ethernet and wireless.
• 9115bc7 thingino-ha: exit ha-daemon on INT/TERM Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com
• ed79264 wolfssl: add missing Config.in
• 4c3915c prudynt: colorize errors
• c76b0c2 formatting
• 40fb367 raptor: refactor onvif discovery to remove dependency on common. formatting
• b4ab629 webui: do not reply on common
• ef81570 formatting
• 1c69ee2 prudynt: add photosensing schedule defaults
• 3fd74db busybox: add cksum applet (for ha-daemon)
• fb53597 webui: fix firmware reset file name
• ad0f09d package/thingino-libubox: update to 1501e60 Update thingino-libubox from f9b1f3f to 1501e60 Hash change: f9b1f3ff17baeb490cc896a037f176c0240ae776 -> 1501e60e5554bd206c9b13532b7352e668508420 Changelog: 2982bfb: blob: fix wrong type for realloc result in blob_buffer_grow() 78c20f6: json_script: convert recursive __json_script_file_free() to iterative e7c13bf: usock: fix off-by-one in nanosecond normalization in poll_restart() 68b3f15: uloop: usock: add error checking for fcntl and remove duplicate include 03821f9: uloop: fix undefined behavior in signal bit operations for signals > 32 e6e6fd8: blobmsg: fix policy name length overflow and add bounds check in blobmsg_parse() d30b9cc: usock: fix integer overflow in timeout calculations 406e342: udebug: fix double off-by-one in udebug_entry_vprintf() 700eca0: blobmsg_json: fix integer overflow in blobmsg_puts() 6351fe5: blobmsg_json: floor strbuf size and tighten the post-format guard 58b6543: blobmsg: fix unsigned integer overflow in blobmsg_alloc_string_buffer() d7a3ae6: blobmsg: use correct byte-order macro when setting BLOB_ATTR_EXTENDED 23c6618: blobmsg_json: fix double format string to avoid truncation and data loss 1edf1d7: jshn: fix integer overflow and type confusion in jshn_parse_file 9b48801: utils: fix integer overflow in __calloc_a() 40a87f7: blob: fix integer overflow in buffer growth functions 02fccb4: blob: use size_t for blob_memdup() length 0fa612c: json_script: avoid alloca() on attacker-controlled pattern length 8c9862b: blobmsg: fix integer overflow in blobmsg_realloc_string_buffer() 5fbef5b: ustream: avoid INT_MAX overflow on malloc in ustream_vprintf() 1501e60: md5: detect read errors in md5sum() instead of returning a bogus hash
• bce001b package/thingino-raptor-hal: update to 9efbea5 Update thingino-raptor-hal from a44f607 to 9efbea5 Hash change: a44f6078cbfe255c3687d5cd8e28af0c5d0933f1 -> 9efbea55544ef6a0d77a1b5c244ff245b44d43ff Changelog: 9efbea5: hal: add defog_strength setter, fix defog getter stub
• 11270f2 package/thingino-raptor-common: update to fe61fb7 Update thingino-raptor-common from cceb7ab to fe61fb7 Hash change: cceb7ab0fdfa5b1f1681e8fa84d303a214ef1703 -> fe61fb70b8750bf474fad379aa212767223aeef8 Changelog: 49b011c: ctrl: add set-log-level and get-log-level commands 5a886e4: ctrl: add daemon restart via self-exec fe61fb7: ctrl: add shutdown command for clean daemon stop
• 6f00583 package/thingino-raptor: update to 46dec1c Update thingino-raptor from d363d00 to 46dec1c Hash change: d363d006bb84dd865f00818482558c98cebeea78 -> 46dec1cf0f1875ace895f6668f83cde602ab0173 Changelog: 1955af7: rad: add ai-disable/ai-enable and ao-disable/ao-enable commands 5cc7a95: rac: record AAC as ADTS and Opus as OGG from audio ring a6f54a5: rvd: mute audio on privacy mode, unmute on privacy off 70e9362: rhd: add stream selection to MJPEG endpoint 89cd44a: rvd: add set-backlight-comp, set-defog-strength, expand get-isp fb64e10: raptorctl: add set-log-level and get-log-level help and dispatch 916dbaf: ric: add set-threshold and get-thresholds commands 6df4061: rod: add enable/disable and set-time-format commands 23d830a: rod: keep heartbeat alive when paused 8be160d: rsp: add set-url command for live RTMP target change f502ee1: rmr: add enable/disable commands, wire common handler, fix status 0d0a96b: raptorctl: restart is a normal socket command, not SIGTERM ace6f98: raptorctl: add start and stop commands 2b68596: raptorctl: fix start arg passthrough and stop timeout+SIGTERM 6ef744e: ric: add range validation to set-threshold, fix cJSON NULL checks c2ab823: rac: deadline-pace playback to stop producer outrunning realtime 46dec1c: rad: fix uninitialized ctrl_ctx reads in cleanup
• a81a1e6 Add new SoC signatures for QEMU variants
• af76ffc container: add missing packages
• d492a85 Add support for qemu-t31 SoC signature
• b0baf8a build system: add experimental kernel 7.0 support
• 5c68abd sdk: revert t23 to 1.1.0
• c6e9e57 Merge branch 'master' into stable-rebased-on-master
• efd2299 agent: add localhost fallback, fix authentication
• b732e2c formatting
• c0164b4 agent: drop dependency on common
• 01e04c8 webui: fix path to ntp configs
• d649c30 webui: rewrite send2gotify plugin
• 1c08d46 package/thingino-raptor: update to d363d00 Update thingino-raptor from b26c9b3 to d363d00 Hash change: b26c9b327efa54eb71f5ac3222efdfadd96cf054 -> d363d006bb84dd865f00818482558c98cebeea78 Changelog: 77f5dd1: tests: disable rod/ric/rmr in leak test (no x86 HAL support) c2aebc6: tests: re-enable rod/ric/rmr with DejaVu font (available on all distros) 4f8eb72: build: bump libsrt to 1.5.5 0f71ffb: build: revert libsrt to 1.5.4 (1.5.5 crashes under ASAN) b730019: rvd,rsd: fix TSAN data races exposed by leak test 2d106d4: rsd: add MJPEG over RTSP via RFC 2435 f7b08cc: rsd: add jpeg sub-stream, make jpeg configurable 1a15444: config: add [rtsp] jpeg options to stock config 850d88a: rsd: reject /jpeg endpoints when jpeg is disabled 785423c: rsr: validate passphrase length and check setsockflag return 8869e05: config: move [srt] section between [push] and [filesource] d363d00: rsr: use FATAL for passphrase errors that exit the daemon
• f36ac41 package/compy: update to 0c53f0f Update compy from f5c0391 to 0c53f0f Hash change: f5c0391d286c180365f863097c4f575d2f24a535 -> 0c53f0f48042e96781c74cf0359020dc5312857f Changelog: 2581602: add RFC 2435 JPEG RTP transport 0057dcb: reject JPEG scan data exceeding 24-bit fragment offset 64a571b: fix RFC 2435 type field: type 0 is 4:2:2, type 1 is 4:2:0 bf04bb7: fix restart header: F=1 L=1 on all packets per RFC 2435 e27f69b: readme: add JPEG/RFC 2435 to features and architecture 0c53f0f: fix include order for clang-format-19
• 1d6c223 formatting
• df28a74 xburst2 frag: switch abi to nan2008
• 7201b9c fix xburst2 nan2008 toolchain build in CI Revert buildroot patch to the simple original (no BR2_MIPS_CPU_MIPS32R2, no default swap) and move the override patch step before make source so Kconfig sees BR2_mips_xburst2 before defconfig runs.