From 5e68b96e5b678b22ab0d454df9dc173e776a3ec4 Mon Sep 17 00:00:00 2001 From: Elian Doran Date: Sun, 22 Oct 2023 10:54:34 +0300 Subject: [PATCH 01/10] vscode-extensions.svelte.svelte-vscode: 107.4.3 -> 107.12.0 (cherry picked from commit be4027e726fc9a64f69d7eea15272c411dbebc98) --- pkgs/applications/editors/vscode/extensions/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix index cd315435b8d3..7418896e0f21 100644 --- a/pkgs/applications/editors/vscode/extensions/default.nix +++ b/pkgs/applications/editors/vscode/extensions/default.nix @@ -2854,8 +2854,8 @@ let mktplcRef = { name = "svelte-vscode"; publisher = "svelte"; - version = "107.4.3"; - sha256 = "sha256-z1foIJXVKmJ0G4FfO9xsjiQgmq/ZtoB3b6Ch8Nyj1zY="; + version = "107.12.0"; + sha256 = "036ri011fd0cf91iwv59j57m05mxliy27ms4di2y9jlk7jzmr4s2"; }; meta = { changelog = "https://github.com/sveltejs/language-tools/releases"; From c48eda326487292258219887fcbe8e1d48d47f44 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Fri, 1 Sep 2023 12:52:06 +0200 Subject: [PATCH 02/10] python311Packages.pyramid: 2.0.1 -> 2.0.2 Changelog: https://github.com/Pylons/pyramid/blob/2.0.2/CHANGES.rst (cherry picked from commit 9f2dda169e87308b2314e9e91c983c55e3cdf85f) --- pkgs/development/python-modules/pyramid/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pyramid/default.nix b/pkgs/development/python-modules/pyramid/default.nix index 426459a67fb4..42e61ed2c954 100644 --- a/pkgs/development/python-modules/pyramid/default.nix +++ b/pkgs/development/python-modules/pyramid/default.nix @@ -18,14 +18,14 @@ buildPythonPackage rec { pname = "pyramid"; - version = "2.0.1"; + version = "2.0.2"; format = "setuptools"; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-+r/XRQOeJq1bCRX8OW6HJcD4o9F7lB+WEezR7XbP59o="; + hash = "sha256-NyE4pzjkIWU1zHbczm7d1aGqypUTDyNU+4NCZMBvGN4="; }; propagatedBuildInputs = [ From 6c430bc932a0f32bc183f23389fe726bd8c74b6e Mon Sep 17 00:00:00 2001 From: Rhys Davies Date: Fri, 27 Oct 2023 10:50:13 +1300 Subject: [PATCH 03/10] microsoft-edge: 118.0.2088.46 -> 118.0.2088.76 (cherry picked from commit 0404987a9b6998ed167aed9bc48b6c5c6b530ed3) --- .../networking/browsers/microsoft-edge/default.nix | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pkgs/applications/networking/browsers/microsoft-edge/default.nix b/pkgs/applications/networking/browsers/microsoft-edge/default.nix index 47163c0aa8be..1c2ac1f8d5fe 100644 --- a/pkgs/applications/networking/browsers/microsoft-edge/default.nix +++ b/pkgs/applications/networking/browsers/microsoft-edge/default.nix @@ -1,20 +1,20 @@ { stable = import ./browser.nix { channel = "stable"; - version = "118.0.2088.46"; + version = "118.0.2088.76"; revision = "1"; - sha256 = "sha256-/3lo/y/LhAmGqiOhZgDoJVS+c2631NB/Z/lBNFunU30="; + sha256 = "sha256-cd8W/0UZi+NhPSILR8e8aOLxy6ra+0DVwRowo2jG8DA="; }; beta = import ./browser.nix { channel = "beta"; - version = "118.0.2088.46"; + version = "119.0.2151.32"; revision = "1"; - sha256 = "sha256-u0w7COYoAgcpqVEsB0t27iMD2AGVYFCJyE72uWKIY70="; + sha256 = "sha256-tsDFUKZDiusr/fGO5NMRqzTDIF+MTgC/1gJu95wXwAw="; }; dev = import ./browser.nix { channel = "dev"; - version = "119.0.2151.2"; + version = "120.0.2172.1"; revision = "1"; - sha256 = "sha256-42wbnA9i1FdBq14Y+xxstAe9ciWDzEBVMULCSURQzj0="; + sha256 = "sha256-EvTS0AO3/A8Ut9H36mMOnS9PRR062WAoas9/Pd90NBM="; }; } From cfb687fe819b0b68eeccdb9cc2253ef31302fc83 Mon Sep 17 00:00:00 2001 From: Atemu Date: Sat, 28 Oct 2023 19:39:46 +0200 Subject: [PATCH 04/10] linux_xanmod: 6.1.58 -> 6.1.60 (cherry picked from commit c3a57194282506295398036a4abd504bd4d19527) --- pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix index da13a620e340..c84155321cc4 100644 --- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix +++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix @@ -3,8 +3,8 @@ let # These names are how they are designated in https://xanmod.org. ltsVariant = { - version = "6.1.58"; - hash = "sha256-Lnp1CSh1jLbIkEx9hLfxhdIA12iQZmywhOec9uZ7UjI="; + version = "6.1.60"; + hash = "sha256-KYCeONJxyFPee4pvBLRw/MBTzPU7D2oZCrAVr3t/yPM="; variant = "lts"; }; From 7915df4b981e737feab3dd3e765e4aa2d85859cf Mon Sep 17 00:00:00 2001 From: Atemu Date: Sat, 28 Oct 2023 19:55:03 +0200 Subject: [PATCH 05/10] linux_xanmod_latest: 6.5.8 -> 6.5.9 (cherry picked from commit c3bf00cd574e5856a29fae15b1b4eacf1d3e397a) --- pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix index c84155321cc4..68c735115379 100644 --- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix +++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix @@ -9,8 +9,8 @@ let }; mainVariant = { - version = "6.5.8"; - hash = "sha256-lHi+O7RE6YdiqPmuxHajGkc7jS9F5cB89+JbTVKkB/c="; + version = "6.5.9"; + hash = "sha256-5SFPBsDTmq7tA6pyM7rbIjBPAtPbqhUl6VfA2z5baPA="; variant = "main"; }; From beef9d37c8d85615fc70a3aa096e83a7c65edcf0 Mon Sep 17 00:00:00 2001 From: Emery Hemingway Date: Mon, 30 Oct 2023 16:45:11 +0000 Subject: [PATCH 06/10] yggdrasil: 0.4.7 -> 0.5.1 --- .../yg/yggdrasil/package.nix} | 15 ++++++--------- .../networking/yggdrasil/change-runtime-dir.patch | 12 ------------ pkgs/top-level/all-packages.nix | 2 -- 3 files changed, 6 insertions(+), 23 deletions(-) rename pkgs/{tools/networking/yggdrasil/default.nix => by-name/yg/yggdrasil/package.nix} (67%) delete mode 100644 pkgs/tools/networking/yggdrasil/change-runtime-dir.patch diff --git a/pkgs/tools/networking/yggdrasil/default.nix b/pkgs/by-name/yg/yggdrasil/package.nix similarity index 67% rename from pkgs/tools/networking/yggdrasil/default.nix rename to pkgs/by-name/yg/yggdrasil/package.nix index 4837ecff203a..858e8400d004 100644 --- a/pkgs/tools/networking/yggdrasil/default.nix +++ b/pkgs/by-name/yg/yggdrasil/package.nix @@ -2,28 +2,25 @@ buildGoModule rec { pname = "yggdrasil"; - version = "0.4.7"; + version = "0.5.1"; src = fetchFromGitHub { owner = "yggdrasil-network"; repo = "yggdrasil-go"; rev = "v${version}"; - sha256 = "sha256-01ciAutRIn4DmqlvDTXhRiuZHTtF8b6js7SUrLOjtAY="; + sha256 = "sha256-JeeOT3fb+4+eUyWl7rAXa5+Yf1XCT20xJeCdhBC0oeo="; }; - vendorSha256 = "sha256-hwDi59Yp92eMDqA8OD56nxsKSX2ngxs0lYdmEMLX+Oc="; - - # Change the default location of the management socket on Linux - # systems so that the yggdrasil system service unit does not have to - # be granted write permission to /run. - patches = [ ./change-runtime-dir.patch ]; + vendorHash = "sha256-yu725RgKDRmpNFNuffBFKZjZOFyzt00kKGuz696JHk0="; subPackages = [ "cmd/genkeys" "cmd/yggdrasil" "cmd/yggdrasilctl" ]; ldflags = [ "-X github.com/yggdrasil-network/yggdrasil-go/src/version.buildVersion=${version}" "-X github.com/yggdrasil-network/yggdrasil-go/src/version.buildName=${pname}" - "-s" "-w" + "-X github.com/yggdrasil-network/yggdrasil-go/src/config.defaultAdminListen=unix:///var/run/yggdrasil/yggdrasil.sock" + "-s" + "-w" ]; passthru.tests.basic = nixosTests.yggdrasil; diff --git a/pkgs/tools/networking/yggdrasil/change-runtime-dir.patch b/pkgs/tools/networking/yggdrasil/change-runtime-dir.patch deleted file mode 100644 index b4edc6a83871..000000000000 --- a/pkgs/tools/networking/yggdrasil/change-runtime-dir.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -ruN a/src/defaults/defaults_linux.go b/src/defaults/defaults_linux.go ---- a/src/defaults/defaults_linux.go 2019-06-17 10:23:09.495613784 -0700 -+++ b/src/defaults/defaults_linux.go 2019-07-01 10:17:11.295669440 -0700 -@@ -7,7 +7,7 @@ - func GetDefaults() platformDefaultParameters { - return platformDefaultParameters{ - // Admin -- DefaultAdminListen: "unix:///var/run/yggdrasil.sock", -+ DefaultAdminListen: "unix:///var/run/yggdrasil/yggdrasil.sock", - - // Configuration (used for yggdrasilctl) - DefaultConfigFile: "/etc/yggdrasil.conf", diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index d2706fde43ca..ab6ca55372d5 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -29199,8 +29199,6 @@ with pkgs; appvm = callPackage ../applications/virtualization/appvm { }; - yggdrasil = callPackage ../tools/networking/yggdrasil { }; - masterpdfeditor = libsForQt5.callPackage ../applications/misc/masterpdfeditor { }; masterpdfeditor4 = libsForQt5.callPackage ../applications/misc/masterpdfeditor4 { }; From 34bdaaf1f0b7fb6d9091472edc968ff10a8c2857 Mon Sep 17 00:00:00 2001 From: Legion Orsetti Date: Wed, 1 Nov 2023 11:19:27 +0100 Subject: [PATCH 07/10] vencord: 1.6.1 -> 1.6.2 (cherry picked from commit afe0759ba413757fba32a5f638225cb511caa2fa) --- pkgs/misc/vencord/default.nix | 8 ++++---- pkgs/misc/vencord/package-lock.json | 16 ++++++++-------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/pkgs/misc/vencord/default.nix b/pkgs/misc/vencord/default.nix index 34cd82b55292..a44b87795936 100644 --- a/pkgs/misc/vencord/default.nix +++ b/pkgs/misc/vencord/default.nix @@ -5,8 +5,8 @@ , buildWebExtension ? false }: let - version = "1.6.1"; - gitHash = "a9e67e2"; + version = "1.6.2"; + gitHash = "dd61b0c"; in buildNpmPackage rec { pname = "vencord"; @@ -16,7 +16,7 @@ buildNpmPackage rec { owner = "Vendicated"; repo = "Vencord"; rev = "v${version}"; - hash = "sha256-t4+8ybPzqcCtTSukBBgvbD7HiKG4K51WPVnJg0RQbs8="; + hash = "sha256-AqyUnDMIASJ/kUTeICdN94W5U0E52RFs6hM2/E8AjXI="; }; ESBUILD_BINARY_PATH = lib.getExe (esbuild.overrideAttrs (final: _: { @@ -34,7 +34,7 @@ buildNpmPackage rec { npmRebuildFlags = [ "|| true" ]; makeCacheWritable = true; - npmDepsHash = "sha256-PWasfMX75emOwOtHd4FrVA6TDfFcOowXsAxgZqMsgP8="; + npmDepsHash = "sha256-RzOv8LekJqX0C/AjC5ONkfkMK36bAGWFxyM9Akn1CIg="; npmFlags = [ "--legacy-peer-deps" ]; npmBuildScript = if buildWebExtension then "buildWeb" else "build"; npmBuildFlags = [ "--" "--standalone" "--disable-updater" ]; diff --git a/pkgs/misc/vencord/package-lock.json b/pkgs/misc/vencord/package-lock.json index 933bf6d63885..6934811f65e2 100644 --- a/pkgs/misc/vencord/package-lock.json +++ b/pkgs/misc/vencord/package-lock.json @@ -1,12 +1,12 @@ { "name": "vencord", - "version": "1.6.1", + "version": "1.6.2", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "vencord", - "version": "1.6.1", + "version": "1.6.2", "license": "GPL-3.0-or-later", "dependencies": { "@sapphi-red/web-noise-suppressor": "0.3.3", @@ -893,9 +893,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "18.18.7", - "resolved": "https://registry.npmjs.org/@types/node/-/node-18.18.7.tgz", - "integrity": "sha512-bw+lEsxis6eqJYW8Ql6+yTqkE6RuFtsQPSe5JxXbqYRFQEER5aJA9a5UH9igqDWm3X4iLHIKOHlnAXLM4mi7uQ==", + "version": "18.18.8", + "resolved": "https://registry.npmjs.org/@types/node/-/node-18.18.8.tgz", + "integrity": "sha512-OLGBaaK5V3VRBS1bAkMVP2/W9B+H8meUfl866OrMNQqt7wDgdpWPp5o6gmIc9pB+lIQHSq4ZL8ypeH1vPxcPaQ==", "dev": true, "dependencies": { "undici-types": "~5.26.4" @@ -4169,9 +4169,9 @@ } }, "node_modules/punycode": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz", - "integrity": "sha512-rRV+zQD8tVFys26lAGR9WUuS4iUAngJScM+ZRSKtvl5tKeZ2t5bvdNFdNHBW9FWR4guGHlgmsZ1G7BSm2wTbuA==", + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==", "dev": true, "engines": { "node": ">=6" From 01c8900eba0d189c3463b2825b534baa616bec39 Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Tue, 31 Oct 2023 13:51:49 +0100 Subject: [PATCH 08/10] strace: 6.5 -> 6.6 ChangeLog: https://github.com/strace/strace/releases/tag/v6.6 (cherry picked from commit cc42f0e7d8b6612ae05fb3523fa1eb095c100570) --- pkgs/development/tools/misc/strace/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/tools/misc/strace/default.nix b/pkgs/development/tools/misc/strace/default.nix index 258e1e3304b6..3ba104230dd9 100644 --- a/pkgs/development/tools/misc/strace/default.nix +++ b/pkgs/development/tools/misc/strace/default.nix @@ -2,11 +2,11 @@ stdenv.mkDerivation rec { pname = "strace"; - version = "6.5"; + version = "6.6"; src = fetchurl { url = "https://strace.io/files/${version}/${pname}-${version}.tar.xz"; - sha256 = "sha256-37BRcCOJ4ZeaFRiStZAa/J6Tu8HHDYTJBq3jIkypGYA="; + sha256 = "sha256-QhtBhsBrcFFj5k3IXycevc9nZgr4ZnKDFH1ehZ/IqWw="; }; depsBuildBuild = [ buildPackages.stdenv.cc ]; From 851b691b07bc751d3ef6debcbf8cda1f1aebc4c5 Mon Sep 17 00:00:00 2001 From: Silvan Mosberger Date: Wed, 1 Nov 2023 18:56:03 +0100 Subject: [PATCH 09/10] lib.filesystem: Don't test Nix-specific error messages In https://github.com/NixOS/nix/pull/9269 the error messages change which would've broken this test. (cherry picked from commit add254658af2e2904af0ee644a1b44b89f6c973a) --- lib/tests/filesystem.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/lib/tests/filesystem.sh b/lib/tests/filesystem.sh index cfd333d0001b..7e7e03bc667d 100755 --- a/lib/tests/filesystem.sh +++ b/lib/tests/filesystem.sh @@ -64,8 +64,14 @@ expectSuccess "pathType $PWD/directory" '"directory"' expectSuccess "pathType $PWD/regular" '"regular"' expectSuccess "pathType $PWD/symlink" '"symlink"' expectSuccess "pathType $PWD/fifo" '"unknown"' -# Different errors depending on whether the builtins.readFilePath primop is available or not -expectFailure "pathType $PWD/non-existent" "error: (evaluation aborted with the following error message: 'lib.filesystem.pathType: Path $PWD/non-existent does not exist.'|getting status of '$PWD/non-existent': No such file or directory)" + +# Only check error message when a Nixpkgs-specified error is thrown, +# which is only the case when `readFileType` is not available +# and the fallback implementation needs to be used. +if [[ "$(nix-instantiate --eval --expr 'builtins ? readFileType')" == false ]]; then + expectFailure "pathType $PWD/non-existent" \ + "error: evaluation aborted with the following error message: 'lib.filesystem.pathType: Path $PWD/non-existent does not exist.'" +fi expectSuccess "pathIsDirectory /." "true" expectSuccess "pathIsDirectory $PWD/directory" "true" From 9eb24edd6a0027fed010ccfe300a9734d029983c Mon Sep 17 00:00:00 2001 From: Jeremy Kolb Date: Wed, 1 Nov 2023 18:08:15 -0400 Subject: [PATCH 10/10] open-vm-tools: Fix CVE-2023-34059 (#264603) https://github.com/vmware/open-vm-tools/blob/CVE-2023-34059.patch/README.md --- pkgs/applications/virtualization/open-vm-tools/default.nix | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/pkgs/applications/virtualization/open-vm-tools/default.nix b/pkgs/applications/virtualization/open-vm-tools/default.nix index 102d0bffc89c..d1e701247588 100644 --- a/pkgs/applications/virtualization/open-vm-tools/default.nix +++ b/pkgs/applications/virtualization/open-vm-tools/default.nix @@ -98,6 +98,13 @@ stdenv.mkDerivation rec { hash = "sha256-KC99LzGcWTXUhtOLQ6UbqxGJ+0Uj4QLWyuRYeGle3a4="; stripLen = 1; }) + + (fetchpatch { + name = "CVE-2023-34059.patch"; + url = "https://raw.githubusercontent.com/vmware/open-vm-tools/CVE-2023-34059.patch/CVE-2023-34059.patch"; + hash = "sha256-RMQh1DyVdNlHbhUb9oGGUX0a2r6fUWN5urr0HlMlm2c="; + stripLen = 1; + }) ]; postPatch = ''