staging/nbd/package, branch master

unetd: cli: add helper function for getting path to temp files

2026-02-15T09:45:40Z

Signed-off-by: Felix Fietkau

unetd: cli: split generating network key from signing

2026-02-15T09:45:40Z

Preparation for reusing the key for more operations Signed-off-by: Felix Fietkau

unetd: cli: fix error reporting in the apply command

2026-02-15T09:45:40Z

Pass errors during config signing to the user Signed-off-by: Felix Fietkau

ramips: add support for actiontec web7200

2026-02-15T09:45:40Z

Signed-off-by: John Crispin

wireguard-tools: rewrite proto handler in ucode

2026-02-15T09:45:06Z

This fixes automatic config reload on peer changes Signed-off-by: Felix Fietkau

netifd: update to Git HEAD (2026-02-15)

2026-02-15T08:32:19Z

Adds ucode proto handler support 51fa9ed6d4d6 interface-ip: fix fortify build error ca33316f8552 proto-ext: extract shared protocol handler code from proto-shell.c 2098f29810e8 proto: add config_load callback to proto_handler aaf5b194b15d proto-ucode: add ucode protocol handler infrastructure 3fc8b83c8b62 proto-ucode: add ucode proto handler scripts c6122254eb70 examples: sync wireless scripts with openwrt Signed-off-by: Felix Fietkau

wifi-scripts: netifd: fix null dereference in config_init for missing devices

2026-02-15T08:32:19Z

Add optional chaining when accessing device config in the wifi-iface loop to handle cases where a referenced device doesn't exist. Signed-off-by: Felix Fietkau

wifi-scripts: ucode: allow sae_pwe to be modified for AP mode

2026-02-15T00:18:18Z

Some Android devices have issues with H2E causing downgrades to PSK when using WPA2/3. With WPA3 it doesn't work reliably whatsoever. My Samsung A55/6 for example has the following behavior: daemon.info hostapd: lan5g: STA IEEE 802.11: authenticated daemon.notice hostapd: SAE: indicates support for SAE H2E, but did not use it daemon.info hostapd: lan2g: STA IEEE 802.11: authenticated daemon.info hostapd: lan2g: STA IEEE 802.11: associated (aid 1) daemon.notice hostapd: lan5g: Prune association for daemon.notice hostapd: lan2g: AP-STA-CONNECTED auth_alg=open daemon.info hostapd: lan2g: STA RADIUS: starting accounting session 8234C696AAC1AE7D daemon.info hostapd: lan2g: STA WPA: pairwise key handshake completed (RSN) daemon.notice hostapd: lan2g: EAPOL-4WAY-HS-COMPLETED This is also brought up in the issue: https://github.com/openwrt/openwrt/issues/9963 Ultimately this allows users to have the option to at the very least disable H2E. Unrelated: a minor cleanup was done so that ieee80211w uses set_default instead. There is no functional change on that front. Signed-off-by: Rany Hany Link: https://github.com/openwrt/openwrt/pull/22021 Signed-off-by: Hauke Mehrtens

econet: en7528: add basic ethernet support

2026-02-15T00:12:52Z

EN7528 shares the same clock/reset controller as EN7523. Enable COMMON_CLK_EN7523 and RESET_CONTROLLER for ethernet hardware resets. Update econet-eth driver and add it as default package. Signed-off-by: Ahmed Naseef Link: https://github.com/openwrt/openwrt/pull/21326 Signed-off-by: Hauke Mehrtens

6in4: improve HE tunnel update procedure

2026-02-14T23:01:57Z

- uclient-fetch timeout bumped from 5s to 15s. If we do not do this we get flagged by HE as the update request is expensive and takes more than 5s to execute. Currently 5s timeout causes uclient-fetch to be killed prematurely as can be seen by the following log: 10:34:57 user.notice 6in4-henet: update 1/3: timeout 10:35:07 user.notice 6in4-henet: update 2/3: timeout 10:35:17 user.notice 6in4-henet: update 3/3: timeout 10:35:22 user.notice 6in4-henet: update failed The above is the worst case, what usually happens is: 10:53:59 user.notice 6in4-henet: update 1/3: timeout 10:54:06 user.notice 6in4-henet: update 2/3: abuse 10:54:06 user.notice 6in4-henet: updated - We now use an exponential backoff starting from 5 seconds. - Detect ca-bundle so we don't use --no-check-certificates unnecessarily. - The while loop was changed so we don't retry unnecessarily after the final failure. - Worst-case total time the update operation might take before bailing out is: (sum(15 + (5 × (2^(x − 1))), 1, 2) + 15) seconds = 1 min Signed-off-by: Rany Hany Link: https://github.com/openwrt/openwrt/pull/22016 Signed-off-by: Hauke Mehrtens