From 00158821782d0259c68ef1a14b4a27e0fe9c81aa Mon Sep 17 00:00:00 2001 From: Trolli Schmittlauch Date: Fri, 19 Sep 2025 23:12:44 +0200 Subject: [PATCH 01/12] python3Packages.nitrokey: 0.3.1 -> 0.3.2 pre-condition for fixing matching nitrokey-app2 version --- pkgs/development/python-modules/nitrokey/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/nitrokey/default.nix b/pkgs/development/python-modules/nitrokey/default.nix index d21635145b01..8258a73e57bd 100644 --- a/pkgs/development/python-modules/nitrokey/default.nix +++ b/pkgs/development/python-modules/nitrokey/default.nix @@ -17,12 +17,12 @@ buildPythonPackage rec { pname = "nitrokey"; - version = "0.3.1"; + version = "0.3.2"; pyproject = true; src = fetchPypi { inherit pname version; - hash = "sha256-Lf20du+DDwMrHrC+wCXxFNG8ThBnbonx4wq7DatH4X4="; + hash = "sha256-JAgorA2V+WHgqtwk8fEPjdwoog7Q3xk93aKSJ0mxHkQ="; }; disabled = pythonOlder "3.9"; From 4d5e75510ead859fe06fc654c49693d5a72ed80c Mon Sep 17 00:00:00 2001 From: Trolli Schmittlauch Date: Fri, 19 Sep 2025 23:18:54 +0200 Subject: [PATCH 02/12] nitrokey-app2: 2.3.3 -> 2.3.5, fix pynitrokey compatibility nitrokey-app2 was using the wrong python3.nitrokey package, resulting in https://github.com/Nitrokey/nitrokey-app2/issues/335 I have decided to raise the nitrokey-app2 version just far enough to get a version compatible to nitrokey-0.3.x to stay at the same minor version (avoid breaking changes in stable) --- pkgs/tools/security/nitrokey-app2/default.nix | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/pkgs/tools/security/nitrokey-app2/default.nix b/pkgs/tools/security/nitrokey-app2/default.nix index a648aab3b7f0..eae613a715ec 100644 --- a/pkgs/tools/security/nitrokey-app2/default.nix +++ b/pkgs/tools/security/nitrokey-app2/default.nix @@ -11,7 +11,7 @@ python3.pkgs.buildPythonApplication rec { pname = "nitrokey-app2"; - version = "2.3.3"; + version = "2.3.5"; pyproject = true; disabled = python3.pythonOlder "3.9"; @@ -20,7 +20,7 @@ python3.pkgs.buildPythonApplication rec { owner = "Nitrokey"; repo = "nitrokey-app2"; tag = "v${version}"; - hash = "sha256-BbgP4V0cIctY/oR4/1r1MprkIn+5oyHeFiOQQQ71mNU="; + hash = "sha256-zhTDr4GyE4jridK3ee8ae3v5behMbuo86q9WdrBVqQg="; }; nativeBuildInputs = with python3.pkgs; [ @@ -42,8 +42,6 @@ python3.pkgs.buildPythonApplication rec { usb-monitor ]; - pythonRelaxDeps = [ "nitrokey" ]; - pythonImportsCheck = [ "nitrokeyapp" ]; From 56a1f9c4ca43a3a62a5f372347b1a9a47939ff12 Mon Sep 17 00:00:00 2001 From: June Stepp Date: Fri, 19 Sep 2025 15:15:55 -0500 Subject: [PATCH 03/12] nixos/virtualbox-host: fix for kernels >= 6.12 A change in Linux 6.12 broke VirtualBox without an added kernel parameter. VirtualBox version 7.2.2 has a fix, but it only works for kernels >= 6.16. (cherry picked from commit b04d39b01c8c84cb435de125f2fecf8952646bbc) --- nixos/modules/virtualisation/virtualbox-host.nix | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/nixos/modules/virtualisation/virtualbox-host.nix b/nixos/modules/virtualisation/virtualbox-host.nix index 1ca612269303..c0c64e722bc0 100644 --- a/nixos/modules/virtualisation/virtualbox-host.nix +++ b/nixos/modules/virtualisation/virtualbox-host.nix @@ -164,6 +164,16 @@ in "vboxnetflt" ]; boot.extraModulePackages = [ kernelModules ]; + # See https://github.com/VirtualBox/virtualbox/issues/188 + boot.kernelParams = + lib.mkIf + ( + lib.versionAtLeast config.boot.kernelPackages.kernel.version "6.12" + && lib.versionOlder config.boot.kernelPackages.kernel.version "6.16" + ) + [ + "kvm.enable_virt_at_load=0" + ]; services.udev.extraRules = '' KERNEL=="vboxdrv", OWNER="root", GROUP="vboxusers", MODE="0660", TAG+="systemd" From c3f9e554624562ddf06c4bd91985767049a371f0 Mon Sep 17 00:00:00 2001 From: Weijia Wang <9713184+wegank@users.noreply.github.com> Date: Sun, 31 Aug 2025 21:02:17 +0200 Subject: [PATCH 04/12] rectangle: 0.89 -> 0.90 (cherry picked from commit 883564f90639796835d722cf0263c08f1cdcbc00) --- pkgs/by-name/re/rectangle/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/re/rectangle/package.nix b/pkgs/by-name/re/rectangle/package.nix index 241cb1f80432..7a887487a706 100644 --- a/pkgs/by-name/re/rectangle/package.nix +++ b/pkgs/by-name/re/rectangle/package.nix @@ -8,11 +8,11 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "rectangle"; - version = "0.89"; + version = "0.90"; src = fetchurl { url = "https://github.com/rxhanson/Rectangle/releases/download/v${finalAttrs.version}/Rectangle${finalAttrs.version}.dmg"; - hash = "sha256-eI3C+nDJhxKwbCLRKepoGmbyWKGCxEuMSK3D0sZbDU0="; + hash = "sha256-SC479DxtFkonvWqYSB47b4Mjb7VSnWoNTHcfThYNxt4="; }; sourceRoot = "."; From 66895152fe38e667048a754d6de0320f2e9fd823 Mon Sep 17 00:00:00 2001 From: FlameFlag <57304299+FlameFlag@users.noreply.github.com> Date: Mon, 29 Sep 2025 21:24:28 +0300 Subject: [PATCH 05/12] rectangle: 0.90 -> 0.91 Changelog: https://github.com/rxhanson/Rectangle/releases/tag/v0.91 Diff: https://github.com/rxhanson/Rectangle/compare/v0.90...v0.91 (cherry picked from commit 7a17bd36c7ac30d2cbff98c655d5ce8550c75f95) --- pkgs/by-name/re/rectangle/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/re/rectangle/package.nix b/pkgs/by-name/re/rectangle/package.nix index 7a887487a706..de29f20ec721 100644 --- a/pkgs/by-name/re/rectangle/package.nix +++ b/pkgs/by-name/re/rectangle/package.nix @@ -8,11 +8,11 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "rectangle"; - version = "0.90"; + version = "0.91"; src = fetchurl { url = "https://github.com/rxhanson/Rectangle/releases/download/v${finalAttrs.version}/Rectangle${finalAttrs.version}.dmg"; - hash = "sha256-SC479DxtFkonvWqYSB47b4Mjb7VSnWoNTHcfThYNxt4="; + hash = "sha256-MOpg8N2mMNB81dmtgQc7KRax+g4d1Xedh9dkC/zYhLw="; }; sourceRoot = "."; From ba3785e8a80d1548876fd10887b7c548b6ce4769 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Chocholat=C3=BD?= Date: Tue, 7 Oct 2025 23:52:29 +0200 Subject: [PATCH 06/12] anytype: 0.50.3 -> 0.50.4 (cherry picked from commit 2b08b36c85ad68864ac77b825c398d32ac196f82) --- pkgs/by-name/an/anytype-heart/package.nix | 5 +++-- pkgs/by-name/an/anytype/package.nix | 10 +++++----- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/pkgs/by-name/an/anytype-heart/package.nix b/pkgs/by-name/an/anytype-heart/package.nix index cf0e7dd49934..94142acdda9a 100644 --- a/pkgs/by-name/an/anytype-heart/package.nix +++ b/pkgs/by-name/an/anytype-heart/package.nix @@ -26,13 +26,13 @@ buildGoModule (finalAttrs: { # Use only versions specified in anytype-ts middleware.version file: # https://github.com/anyproto/anytype-ts/blob/v/middleware.version - version = "0.44.1"; + version = "0.44.3"; src = fetchFromGitHub { owner = "anyproto"; repo = "anytype-heart"; tag = "v${finalAttrs.version}"; - hash = "sha256-Kb5Z484zeKJT8oBmfqbHszcxYPwnx7mvssseNyRDMWE="; + hash = "sha256-seGjGokKZz4oP+jgWF+IVKMLJLQM+aU5CqS7moKpoUs="; }; vendorHash = "sha256-T7CPD6mbxkN1x53oe9jsS2XMqluqWv8VPPd1pnXZvlc="; @@ -95,5 +95,6 @@ buildGoModule (finalAttrs: { "x86_64-darwin" "aarch64-darwin" ]; + broken = stdenv.hostPlatform.isDarwin; }; }) diff --git a/pkgs/by-name/an/anytype/package.nix b/pkgs/by-name/an/anytype/package.nix index adf16060eb35..3694fc66f660 100644 --- a/pkgs/by-name/an/anytype/package.nix +++ b/pkgs/by-name/an/anytype/package.nix @@ -14,23 +14,23 @@ buildNpmPackage (finalAttrs: { pname = "anytype"; - version = "0.50.3"; + version = "0.50.4"; src = fetchFromGitHub { owner = "anyproto"; repo = "anytype-ts"; tag = "v${finalAttrs.version}"; - hash = "sha256-D2B8DY9VogRc0YP/NKEmg0uVT1ZaqQrOA/4AS845phU="; + hash = "sha256-S0zA6/55je/iLkgfPyxkFeyA3zHjI3Y9RlSS76eMWyk="; }; locales = fetchFromGitHub { owner = "anyproto"; repo = "l10n-anytype-ts"; - rev = "27d713f500ed375aabb57b551dbc0561cd1983b3"; - hash = "sha256-1SyCVwicUoxj/xxlYe3dElYYXWtzbw2bHiHZ0FKgYDw="; + rev = "eba098d97b271cb037beb3e3b349b15c0ffe9358"; + hash = "sha256-lTT5n+uT+sw1GXP7wwvUb+JhjmjlCjxXiD9Mr1u4aHc="; }; - npmDepsHash = "sha256-pC1hT85Lk4asGRkQf4ZGlNULtmdlKX/2X1eDHMi6BZ0="; + npmDepsHash = "sha256-RL4f9N0DX+qhxM4x5Vdku3EydRIa9IQUYB3R2wJbY4E="; env = { ELECTRON_SKIP_BINARY_DOWNLOAD = "1"; From 9da0a64cc2e0e5e6f0f7f6b297280c9e10c5ac69 Mon Sep 17 00:00:00 2001 From: Dominic Wrege Date: Wed, 24 Sep 2025 22:14:59 +0200 Subject: [PATCH 07/12] librewolf-bin-unwrapped: 142.0.1-1 -> 143.0-1 (cherry picked from commit 305617c96ddf206db3e7876ba38e9f69b28c6c9a) --- pkgs/by-name/li/librewolf-bin-unwrapped/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix index a429b0fd8adb..10852a04033f 100644 --- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix +++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix @@ -37,7 +37,7 @@ let pname = "librewolf-bin-unwrapped"; - version = "142.0.1-1"; + version = "143.0-1"; in stdenv.mkDerivation { @@ -47,9 +47,9 @@ stdenv.mkDerivation { url = "https://gitlab.com/api/v4/projects/44042130/packages/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz"; hash = { - i686-linux = "sha256-hDB1bo5TCiahFGAOzWLRMxy6hc7whsGbfiJsNxhnXok="; - x86_64-linux = "sha256-ijfsxA9XUZanPUXvOysouJNv7tUoclE1E4PoFOZP/EY="; - aarch64-linux = "sha256-pB+AQropvNw7kCUqeDHPMkDVht4Dl/98tcaszlw3Qj8="; + i686-linux = "sha256-ZDsPexyrK8FgMKAP3TzHnBTvDXLnW50SW6tOTGqWVaI="; + x86_64-linux = "sha256-jP6PBvh+RNDpgv5OGX7HSR1Lo//vDSVjUFUsayMONTM="; + aarch64-linux = "sha256-DuCQMjL7ZsHAtu2ppX/46QRL/Dt3acOJaTzGoYGfQuM="; } .${stdenv.hostPlatform.system} or throwSystem; }; From a23bd4a7a8fee30de4eea65d0405814762ef98c2 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 6 Oct 2025 12:30:29 +0000 Subject: [PATCH 08/12] librewolf-bin-unwrapped: 143.0-1 -> 143.0.4-1 (cherry picked from commit 74c6f03e0e83d0f8ce80daa4047c08943cc35b79) --- pkgs/by-name/li/librewolf-bin-unwrapped/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix index 10852a04033f..1bd8a3242013 100644 --- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix +++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix @@ -37,7 +37,7 @@ let pname = "librewolf-bin-unwrapped"; - version = "143.0-1"; + version = "143.0.4-1"; in stdenv.mkDerivation { @@ -47,9 +47,9 @@ stdenv.mkDerivation { url = "https://gitlab.com/api/v4/projects/44042130/packages/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz"; hash = { - i686-linux = "sha256-ZDsPexyrK8FgMKAP3TzHnBTvDXLnW50SW6tOTGqWVaI="; - x86_64-linux = "sha256-jP6PBvh+RNDpgv5OGX7HSR1Lo//vDSVjUFUsayMONTM="; - aarch64-linux = "sha256-DuCQMjL7ZsHAtu2ppX/46QRL/Dt3acOJaTzGoYGfQuM="; + i686-linux = "sha256-GKdnsh7nkXlZh8QYBUhmB003IqfPI1+KxogZCxmyiUY="; + x86_64-linux = "sha256-1ZwXfE13K8X/fhBs0ibFaM7A/bRDNbU4hpEGdZIjIRk="; + aarch64-linux = "sha256-ICxN/7gqFlqH910DTo+cbrM1AoioY2Jbp2U8AfNxGUg="; } .${stdenv.hostPlatform.system} or throwSystem; }; From 5939bdd14bf3317adae79b324cfcc1ad80664670 Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Wed, 8 Oct 2025 09:52:47 +1000 Subject: [PATCH 09/12] go_1_25: 1.25.1 -> 1.25.2 Changelog: https://go.dev/doc/devel/release#go1.25 (cherry picked from commit c27d4b0b745774e5ee1d7f23201b430726c18d6a) --- pkgs/development/compilers/go/1.25.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/compilers/go/1.25.nix b/pkgs/development/compilers/go/1.25.nix index 62c724f61f6d..9c87abb252c5 100644 --- a/pkgs/development/compilers/go/1.25.nix +++ b/pkgs/development/compilers/go/1.25.nix @@ -28,11 +28,11 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "go"; - version = "1.25.1"; + version = "1.25.2"; src = fetchurl { url = "https://go.dev/dl/go${finalAttrs.version}.src.tar.gz"; - hash = "sha256-0BDBCc7pTYDv5oHqtGvepJGskGv0ZYPDLp8NuwvRpZQ="; + hash = "sha256-NxEUDPuH/Oj3oT982GDfBB5sEvdhD0DKxuxvorZeluQ="; }; strictDeps = true; From 22d55628521dc0226f6464a3e39b9a099b970560 Mon Sep 17 00:00:00 2001 From: transcaffeine Date: Tue, 7 Oct 2025 13:12:36 +0200 Subject: [PATCH 10/12] snipe-it: 8.3.2 -> 8.3.3 Release notes: https://github.com/grokability/snipe-it/releases/tag/v8.3.3 Full changelog: https://github.com/grokability/snipe-it/compare/v8.3.2...v8.3.3 (cherry picked from commit 4315f265bf10ffdb779f1df3050726a259126256) --- pkgs/by-name/sn/snipe-it/package.nix | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/sn/snipe-it/package.nix b/pkgs/by-name/sn/snipe-it/package.nix index 16209a071298..fe875de0d6a9 100644 --- a/pkgs/by-name/sn/snipe-it/package.nix +++ b/pkgs/by-name/sn/snipe-it/package.nix @@ -7,18 +7,21 @@ php84, }: -php84.buildComposerProject2 (finalAttrs: { +let + php = php84; +in +php.buildComposerProject2 (finalAttrs: { pname = "snipe-it"; - version = "8.3.2"; + version = "8.3.3"; src = fetchFromGitHub { owner = "grokability"; repo = "snipe-it"; tag = "v${finalAttrs.version}"; - hash = "sha256-ZmOij8oDaMtLKbNEbzufvXy5fmLrGqwiDXzIpDVQ93o="; + hash = "sha256-Ttvq5KXTLtl3ZCRQACtVj4jC2cVGfDd+hUdRO3CbQjU="; }; - vendorHash = "sha256-13Mw2sjeSk4AmELjuD6Z7SgxLBgIeqzolq+rR992sEs="; + vendorHash = "sha256-Y5Jf9x0YIFHkuRwMR9X2D0b5/ULr6sTjmPHnQRXbF/s="; postInstall = '' snipe_it_out="$out/share/php/snipe-it" @@ -42,7 +45,7 @@ php84.buildComposerProject2 (finalAttrs: { passthru = { tests = nixosTests.snipe-it; - phpPackage = php84; + phpPackage = php; }; meta = { From 853bdfeb6ddb2294e6f84ef1d50073a953bf15d7 Mon Sep 17 00:00:00 2001 From: Mynacol Date: Tue, 7 Oct 2025 17:12:00 +0000 Subject: [PATCH 11/12] matrix-synapse: 1.139.0 -> 1.139.2 ChangeLog: https://github.com/element-hq/synapse/releases/tag/v1.139.2 (cherry picked from commit 28d26e2a3b8fb42f869f20438434486c317da5cf) --- pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix index 312b97b63ffd..ad32bf375df8 100644 --- a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix +++ b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix @@ -17,14 +17,14 @@ let in python3.pkgs.buildPythonApplication rec { pname = "matrix-synapse"; - version = "1.139.0"; + version = "1.139.2"; format = "pyproject"; src = fetchFromGitHub { owner = "element-hq"; repo = "synapse"; rev = "v${version}"; - hash = "sha256-L9oTTdGF//srC3sDrI8aNMjc9lOkof+J2VLFy091HBo="; + hash = "sha256-lPVwJ+BkSQRkGrWlq4B4gbJlIly/hUW1jOMmbsK9R6M="; }; cargoDeps = rustPlatform.fetchCargoVendor { From 5f5d08e76b73e9c649b568b5fee9afa60f90e91d Mon Sep 17 00:00:00 2001 From: emilylange Date: Wed, 8 Oct 2025 14:56:28 +0200 Subject: [PATCH 12/12] chromium,chromedriver: 141.0.7390.54 -> 141.0.7390.65 https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html This update includes 3 security fixes. CVEs: CVE-2025-11458 CVE-2025-11460 CVE-2025-11211 (cherry picked from commit 4724d590698dfd274e32f708d0ca45d1a0e252e6) --- .../networking/browsers/chromium/info.json | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/pkgs/applications/networking/browsers/chromium/info.json b/pkgs/applications/networking/browsers/chromium/info.json index f413c21961e0..1c02848bac03 100644 --- a/pkgs/applications/networking/browsers/chromium/info.json +++ b/pkgs/applications/networking/browsers/chromium/info.json @@ -1,10 +1,10 @@ { "chromium": { - "version": "141.0.7390.54", + "version": "141.0.7390.65", "chromedriver": { - "version": "141.0.7390.55", - "hash_darwin": "sha256-wo68N1aftGGyZR4rYI+96lXKJqPAYro3g4s/OL/CUco=", - "hash_darwin_aarch64": "sha256-5uUklsYRFhpLIAKoPl5EU5dQJcxwXVpJp0lyQ4SkspY=" + "version": "141.0.7390.66", + "hash_darwin": "sha256-0LLARLPwlZ3KB5xCq4Yx5S6vtnhVddJ62IdgEy0vp7o=", + "hash_darwin_aarch64": "sha256-rLW5FOMNyFEn1Du2VN2sGfWri2erjN7SENa01vA2Vp8=" }, "deps": { "depot_tools": { @@ -21,8 +21,8 @@ "DEPS": { "src": { "url": "https://chromium.googlesource.com/chromium/src.git", - "rev": "b95610d5c4a562d9cd834bc0a098d3316e2f533f", - "hash": "sha256-jraDPodJBdyFFHS30BcQTZOEUD+h9SFHQrO0GoMhtk8=", + "rev": "b2ec783d2b51a396804a4e3e33f6586be09a4e2d", + "hash": "sha256-9jZ7411NThelyL0R5yoLXB0lOkydOI3v6K5ORhjqfF4=", "recompress": true }, "src/third_party/clang-format/script": { @@ -252,8 +252,8 @@ }, "src/third_party/devtools-frontend/src": { "url": "https://chromium.googlesource.com/devtools/devtools-frontend", - "rev": "65f160d43dc97a2e8eb5e1c2814179a519313884", - "hash": "sha256-VLMJ/WWCIzk92mmuBdx+P6Gi0ouiXuMGkiR0KVK5GWI=" + "rev": "9c2c4cc7cf6c82ad460e1f3b49f34bb702d5fe11", + "hash": "sha256-qj1vR0FW2jiR2v18Nv8RqYgy/UEw2rgGUsQ68EhdHos=" }, "src/third_party/dom_distiller_js/dist": { "url": "https://chromium.googlesource.com/chromium/dom-distiller/dist.git",