about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
3 daysMerge master into haskell-updates haskell-updatesgithub-actions[bot]201-1839/+4342
3 daysfetchurl: enable TLS verification when credentials are used (#344000)Martin Weinelt1-1/+2
3 dayswget: fix build on sandboxed Darwin (#343815)Franz Pletz1-0/+1
3 dayspixelorama: 1.0.2 -> 1.0.3 (#343791)Felix Schröter1-2/+2
3 daysrailway: 3.14.0 -> 3.14.1 (#344019)lassulus1-3/+3
3 dayspython312Packages.tencentcloud-sdk-python: 3.0.1235 -> 3.0.1236 (#343883)Fabian Affolter1-2/+2
3 dayskoboldcpp: 1.74 -> 1.75.2 (#343962) nixos-unstablePeder Bergebakken Sundt1-2/+2
3 daysHardened Kernel updates for 2024-09-22 (#343751)Fabián Heredia Montiel4-69/+44
3 daysvdrPlugins.softhddevice: 2.3.7 -> 2.3.8 (#344006)Christian Kögler1-2/+2
3 dayspython312Packages.fastcore: 1.7.8 -> 1.7.9 (#344011)Nick Cao1-2/+2
3 dayslefthook: 1.7.15 -> 1.7.16 (#343973)nixpkgs-merge-bot[bot]1-2/+2
3 dayszsh-wd: 0.8.0 -> 0.9.0 (#343869)Jörg Thalheim1-2/+2
3 daysssh-to-age: 1.1.8 -> 1.1.9 (#343987)Jörg Thalheim1-3/+3
4 daysocamlPackages.uucd: 15.1.0 → 16.0.0Vincent Laporte1-2/+2
4 daysCODEOWNERS: add myself to LLVM (#344032)Emily1-1/+1
4 daysarpa2common: 2.2.18 -> 2.6.2 (#341416)Weijia Wang1-24/+37
4 daysCODEOWNERS: add myself to LLVMAlyssa Ross1-1/+1
4 dayspython312Packages.tencentcloud-sdk-python: 3.0.1236 -> 3.0.1237Fabian Affolter1-2/+2
Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/refs/tags/3.0.1236...3.0.1237 Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.0.1237/CHANGELOG.md
4 dayspython312Packages.tencentcloud-sdk-python: 3.0.1235 -> 3.0.1236Fabian Affolter1-2/+2
Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/refs/tags/3.0.1235...3.0.1236 Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.0.1236/CHANGELOG.md
4 dayspython312Packages.aiostreammagic: 2.3.1 -> 2.4.0 (#343955)Nick Cao1-2/+2
4 dayscargo-chef: 0.1.67 -> 0.1.68 (#343958)Nick Cao1-3/+3
4 daysjql: 7.1.13 -> 7.2.0 (#343974)Nick Cao1-3/+3
4 dayspython312Packages.svg-py: 1.4.3 -> 1.5.0 (#343984)Nick Cao1-2/+2
4 dayscargo-shear: 1.1.2 -> 1.1.3 (#343956)nixpkgs-merge-bot[bot]1-3/+3
4 daysshotcut: 24.08.29 -> 24.09.13 (#343562)nixpkgs-merge-bot[bot]1-2/+2
4 daysrailway: 3.14.0 -> 3.14.1R. Ryantm1-3/+3
4 daysdotnet: remove nuget-package-hook from runtime packages (#343978)David McFarland1-2/+2
4 daysmariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 (#334878)Simon Hauser7-450/+304
* mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 * nixos/tests/automysqlbackup: nixfmt * nixos/automysqlbackup: fix tests * nixos/tests/mariadb-galera: nixfmt * nixos/tests/mariadb-galera: fix test failing with new default IPv6 configuration
4 daysbitbucket-cli: init at 1.0.0 (#343292)Aleksana2-0/+37
4 dayspython312Packages.fastcore: 1.7.8 -> 1.7.9R. Ryantm1-2/+2
4 daysimgpkg: init at 0.43.1 (#336558)Aleksana2-0/+38
4 daysvdrPlugins.softhddevice: 2.3.7 -> 2.3.8R. Ryantm1-2/+2
4 dayslinux_5_4_hardened: mark as brokenMaximilian Bosch1-2/+6
Smoketest fails with machine # [ 3.785769] systemd[1]: dev-hugepages.mount: Failed to spawn executor: Argument list too long machine # [ 3.788689] systemd[1]: dev-hugepages.mount: Failed to spawn 'mount' task: Argument list too long machine # [ 3.790100] systemd[1]: dev-hugepages.mount: Failed with result 'resources'. machine # [ 3.791572] systemd[1]: Failed to mount Huge Pages File System.
4 dayslinux/hardened/patches/6.9: removeFabián Heredia Montiel1-10/+0
4 dayslinux/hardened/patches/6.8: removeFabián Heredia Montiel1-10/+0
4 dayslinux/hardened/patches/4.19: removeFabián Heredia Montiel1-10/+0
4 dayslinux: drop EOLed kernels from kernels-org.jsonFabián Heredia Montiel1-12/+0
4 dayslinux/hardened/patches/6.6: 6.6.32-hardened1 -> v6.6.51-hardened1Fabián Heredia Montiel1-5/+5
4 dayslinux/hardened/patches/6.10: init at v6.10.10-hardened1Fabián Heredia Montiel1-0/+10
4 dayslinux/hardened/patches/6.1: 6.1.92-hardened1 -> v6.1.110-hardened1Fabián Heredia Montiel1-5/+5
4 dayslinux/hardened/patches/5.4: 5.4.277-hardened1 -> v5.4.284-hardened1Fabián Heredia Montiel1-5/+5
4 dayslinux/hardened/patches/5.15: 5.15.160-hardened1 -> v5.15.167-hardened1Fabián Heredia Montiel1-5/+5
4 dayslinux/hardened/patches/5.10: 5.10.218-hardened1 -> v5.10.226-hardened1Fabián Heredia Montiel1-5/+5
4 dayslinux/hardened: fix update scriptFabián Heredia Montiel1-3/+6
Due to releases now including a v (and before didn't) hardened hasn't been updated since May 2024 (4 months ago)
4 dayshaskell.compiler.*: use symlinks from bintool wrapper if possiblesternenseemann3-15/+15
Ideally we don't want to use bintools.bintools and also not really encode knowledge of what is wrapped and what not in our GHC derivation. Unfortunately, not all tools are part of the wrapper derivation as well. This should be gradually improved (e.g. in the case of the darwin tools and strip).
4 dayshaskell.compiler.*: let configure know about objdumpsternenseemann3-0/+6
This seems to be a build time only dependency as there is no corresponding settings entry.
4 dayshaskell.compiler.*: don't declare stage0 ghc as dep to stdenvsternenseemann4-32/+25
Some GHC bindists have a normal `$out/lib` directory which contains symlinks to all core libs. Because it is a normal lib directory, the bintools setup hook will pick up on it and cause ld to pass the appropriate -L and -rpath flags. We do not want this to happen, especially in the case of the stage2 compiler. Not only will the final ghc have an unnecessary reference (and thus increased closure size) to the binary ghc, but the extra libraries in the rpath mess with the rts and cause e.g. segfaults in GHCi. Unfortunately, there is no way to prevent this. It is a fundamental flaw in the cc and bintools wrappers that they do not actually distinguish between the roles of dependencies (build, host, target). Instead the mangleVar* function will translate the dependencies split up by roles into platforms. This means that the wrappers can't distinguish between depsBuildBuild and depsHostTarget (== buildInputs) when natively compiling. As long as we are natively compiling the wrappers will put the stage0 ghc (be it in depsBuildBuild, nativeBuildInputs etc.) into the linker flags of the final ghc. The solution is to sidestep the issue. We just had ghc in depsBuildBuild to have it added to PATH. GHC itself will pass the appropriate linker flags if necessary. To avoid the setup hooks picking up on the GHC libraries we just don't put it into depsBuildBuild or any other dependency list. Since the GHC build system accepts the GHC binary via an absolute path, we don't even need to add the stage0 GHC to PATH.
4 dayspreviewqt: adopt and modernize (#342586)Peder Bergebakken Sundt1-36/+70
4 daysfetchurl: enable TLS verification when credentials are usedThomas Gerbet1-1/+2
This make sure the credentials cannot be leaked in a MITM attack. Note that this change might break some existing deployments if the users tries to fetch resources on endpoints with invalid certificates. The impacted users will have the following choices: * fix the endpoint providing the resource * override SSL_CERT_FILE to either disable the verification (not recommended) or to set it to a path including their CA certificate.
4 daysthunderbird: 128.1.1esr -> 128.2.3esr (#343927)Vladimír Čunát1-2/+2
https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.2.1esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.2.2esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.2.3esr/releasenotes/