From 16561d96e92406d1e5d11de6c51afc7970d17a00 Mon Sep 17 00:00:00 2001 From: Jan-Niklas Burfeind Date: Wed, 10 Jun 2026 18:39:10 +0200 Subject: [PATCH 01/42] bobby: init at 50.0.2 (cherry picked from commit 08cae25447efe017c10797550af7894de9ffd7bb) --- pkgs/by-name/bo/bobby/package.nix | 84 +++++++++++++++++++++++++++++++ 1 file changed, 84 insertions(+) create mode 100644 pkgs/by-name/bo/bobby/package.nix diff --git a/pkgs/by-name/bo/bobby/package.nix b/pkgs/by-name/bo/bobby/package.nix new file mode 100644 index 000000000000..5b61c8e5ffb9 --- /dev/null +++ b/pkgs/by-name/bo/bobby/package.nix @@ -0,0 +1,84 @@ +{ + cargo, + desktop-file-utils, + fetchFromGitHub, + glib, + gtk4, + lib, + libadwaita, + meson, + ninja, + nix-update-script, + pkg-config, + rustc, + rustPlatform, + sqlite, + stdenv, + wrapGAppsHook4, +}: + +stdenv.mkDerivation (finalAttrs: { + pname = "bobby"; + version = "50.0.2"; + + src = fetchFromGitHub { + owner = "hbons"; + repo = "bobby"; + tag = "v${finalAttrs.version}"; + hash = "sha256-/N7CmzPwUdGkHIZujCGW3LvsGM6DdXrcm2kH6XlVGDA="; + }; + + cargoDeps = rustPlatform.fetchCargoVendor { + inherit (finalAttrs) pname version src; + hash = "sha256-TT3ceAy44sfyKZ7wmH3C4nj5TyfiJlu4vBWAaGs+pGg="; + }; + + buildInputs = [ + glib + gtk4 + libadwaita + sqlite + ]; + + # favor sqlite from nixpkgs instead of a vendored variant in rusqlite + postPatch = '' + substituteInPlace Cargo.toml \ + --replace-fail ', features = ["bundled"]' "" + ''; + + nativeBuildInputs = [ + cargo + desktop-file-utils # for `update-desktop-database` + gtk4 # for `gtk-update-icon-cache` + meson + ninja + pkg-config + rustc + rustPlatform.cargoSetupHook + wrapGAppsHook4 # fix error: GLib-GIO-ERROR **: No GSettings schemas are installed on the system + ]; + + mesonCheckFlags = [ + "--print-errorlogs" + ]; + + doCheck = true; + + passthru.updateScript = nix-update-script { }; + + __structuredAttrs = true; + strictDeps = true; + + meta = { + changelog = "https://github.com/hbons/Bobby/blob/${finalAttrs.src.tag}/data/studio.planetpeanut.Bobby.metainfo.xml"; + description = "Browse SQLite files"; + donationPage = "https://planetpeanut.studio/sponsors"; + homepage = "https://apps.gnome.org/Bobby/"; + license = lib.licenses.gpl3Plus; + maintainers = with lib.maintainers; [ + aiyion + ]; + teams = [ lib.teams.gnome-circle ]; + mainProgram = "bobby"; + }; +}) From 68c500ba13c39f0659730387d47cf65cb73f0c64 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A9ment?= Date: Wed, 13 May 2026 22:42:50 -0700 Subject: [PATCH 02/42] vcv-rack: fix missing translations the tranlations were missing from the build, which resulted in the UI not showing any text at all (cherry picked from commit 01c12cc0443dd411f430baf76aebb8594094f6ea) --- pkgs/by-name/vc/vcv-rack/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/vc/vcv-rack/package.nix b/pkgs/by-name/vc/vcv-rack/package.nix index d7dcbe4c22ca..a30c5ddb7968 100644 --- a/pkgs/by-name/vc/vcv-rack/package.nix +++ b/pkgs/by-name/vc/vcv-rack/package.nix @@ -306,7 +306,7 @@ stdenv.mkDerivation (finalAttrs: { install -D -m755 -t $out/lib libRack.so mkdir -p $out/share/vcv-rack - cp -r res cacert.pem Core.json template.vcv LICENSE-GPLv3.txt $out/share/vcv-rack + cp -r res translations cacert.pem Core.json template.vcv LICENSE-GPLv3.txt $out/share/vcv-rack cp -r plugins/Fundamental/dist/Fundamental-*.vcvplugin $out/share/vcv-rack/Fundamental.vcvplugin # Extract pngs from the Apple icon image and create From 8ce4baa91567ea1c5870b155f56ba3e475edc58e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A9ment?= Date: Wed, 13 May 2026 22:30:02 -0700 Subject: [PATCH 03/42] vcv-rack: fix version (cherry picked from commit c6a76137b96a25c8823f4ad6a88fda1b83b6d94e) --- pkgs/by-name/vc/vcv-rack/package.nix | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/vc/vcv-rack/package.nix b/pkgs/by-name/vc/vcv-rack/package.nix index a30c5ddb7968..97f4e51cab15 100644 --- a/pkgs/by-name/vc/vcv-rack/package.nix +++ b/pkgs/by-name/vc/vcv-rack/package.nix @@ -31,6 +31,7 @@ stdenv, wrapGAppsHook3, zstd, + versionCheckHook, }: let @@ -208,6 +209,10 @@ stdenv.mkDerivation (finalAttrs: { --replace-fail \ "LightButton>" \ "struct rack::componentlibrary::LightButton>" + + # Set RACK_VERSION to avoid git describe, which fails in the Nix build sandbox. + substituteInPlace Makefile \ + --replace-fail 'RACK_VERSION ?= $' 'RACK_VERSION ?= ${finalAttrs.version}#$' '' + lib.optionalString stdenv.hostPlatform.isLinux '' # Fix reference to zenity @@ -218,7 +223,6 @@ stdenv.mkDerivation (finalAttrs: { --replace-fail '__yield();' 'asm volatile("yield");' '' + lib.optionalString stdenv.hostPlatform.isDarwin '' - # * Set VERSION from finalAttrs to avoid build using git to determine version # * Darwin needs to build the dist target, which builds the .app container, # yet we want to exclude the documentation from dist target. # * Skip stripping the binary to avoid "unsupported load command" error, which @@ -226,7 +230,6 @@ stdenv.mkDerivation (finalAttrs: { # * Replace path to Fundamental module with path to produced build artifact # to avoid downloading a pre-compiled version substituteInPlace Makefile \ - --replace-fail 'VERSION ?= $' 'VERSION ?= ${finalAttrs.version}#$' \ --replace-fail 'DIST_HTML :=' '#DIST_HTML :=' \ --replace-fail '$(STRIP)' '#$(STRIP)' \ --replace-fail 'FUNDAMENTAL_FILENAME := Fundamental' 'FUNDAMENTAL_FILENAME := plugins/Fundamental/dist/Fundamental' @@ -348,6 +351,9 @@ stdenv.mkDerivation (finalAttrs: { --add-flags "-s $out/Applications/'VCV Rack ${lib.versions.major finalAttrs.version} Free.app'/Contents/Resources" ''; + nativeInstallCheckInputs = [ versionCheckHook ]; + doInstallCheck = true; + meta = { description = "Open-source virtual modular synthesizer"; homepage = "https://vcvrack.com/"; From 598968eba5d4ece8053661b06e1e549811e25eb6 Mon Sep 17 00:00:00 2001 From: axunes Date: Mon, 1 Jun 2026 01:03:56 -0400 Subject: [PATCH 04/42] vcv-rack: vendor 404'd fix-segfault-on-linux.patch Co-Authored-By: Peder Bergebakken Sundt (cherry picked from commit 59d20a630d7448400f150342edcca8afd58c1257) --- .../by-name/vc/vcv-rack/fix-segfault-on-linux.patch | 13 +++++++++++++ pkgs/by-name/vc/vcv-rack/package.nix | 8 +++----- 2 files changed, 16 insertions(+), 5 deletions(-) create mode 100644 pkgs/by-name/vc/vcv-rack/fix-segfault-on-linux.patch diff --git a/pkgs/by-name/vc/vcv-rack/fix-segfault-on-linux.patch b/pkgs/by-name/vc/vcv-rack/fix-segfault-on-linux.patch new file mode 100644 index 000000000000..09dbe3b94ff4 --- /dev/null +++ b/pkgs/by-name/vc/vcv-rack/fix-segfault-on-linux.patch @@ -0,0 +1,13 @@ +--- a/src/window/Window.cpp ++++ b/src/window/Window.cpp +@@ -819,6 +819,10 @@ + glfwInitHint(GLFW_COCOA_MENUBAR, GLFW_FALSE); + #endif + ++#if defined ARCH_LIN ++ glfwInitHint(GLFW_PLATFORM, GLFW_PLATFORM_X11); ++#endif ++ + glfwSetErrorCallback(errorCallback); + err = glfwInit(); + if (err != GLFW_TRUE) { diff --git a/pkgs/by-name/vc/vcv-rack/package.nix b/pkgs/by-name/vc/vcv-rack/package.nix index 97f4e51cab15..3d0b35ea1b16 100644 --- a/pkgs/by-name/vc/vcv-rack/package.nix +++ b/pkgs/by-name/vc/vcv-rack/package.nix @@ -170,11 +170,9 @@ stdenv.mkDerivation (finalAttrs: { ./rack-minimize-vendoring.patch ] ++ lib.optionals stdenv.hostPlatform.isLinux [ - (fetchpatch { - name = "fix-segfault-on-linux.patch"; - url = "https://github.com/VCVRack/Rack/pull/1944.patch"; - hash = "sha256-dlndyCfCznGDzlWNWrQTgh+FtmsrrL2DVuRE0xCxUck="; - }) + # https://github.com/VCVRack/Rack/pull/1944 + # https://github.com/VCVRack/Rack/commit/9f0eb9a0da8e9d6f1729f823555fdac2135214f0 + ./fix-segfault-on-linux.patch ]; prePatch = '' From c7ffc64567865278bd2a4c4dd54b76a1f2093719 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= Date: Mon, 29 Jun 2026 11:44:30 +0000 Subject: [PATCH 05/42] undocker: fix upstream URLs I have moved from `gitea` to `stagit`, paths have changed. Converting `fetchFromGitea` to `fetchgit`. (cherry picked from commit 6dd056ed34c247abadabae5369d42b0ae8411f70) --- pkgs/by-name/un/undocker/package.nix | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/pkgs/by-name/un/undocker/package.nix b/pkgs/by-name/un/undocker/package.nix index 133a969d21c8..f89745d4410a 100644 --- a/pkgs/by-name/un/undocker/package.nix +++ b/pkgs/by-name/un/undocker/package.nix @@ -1,18 +1,15 @@ { lib, buildGoModule, - fetchFromGitea, + fetchgit, gnumake, }: let version = "1.2.3"; - hash = "sha256-hyP85pYtXxucAliilUt9Y2qnrfPeSjeGsYEFJndJWyA="; - src = fetchFromGitea { - domain = "git.jakstys.lt"; - owner = "motiejus"; - repo = "undocker"; + src = fetchgit { + url = "https://git.jakstys.lt/motiejus/undocker.git"; rev = "v${version}"; - hash = hash; + hash = "sha256-hyP85pYtXxucAliilUt9Y2qnrfPeSjeGsYEFJndJWyA="; }; in buildGoModule { @@ -21,7 +18,7 @@ buildGoModule { nativeBuildInputs = [ gnumake ]; - buildPhase = "make VSN=v${version} VSNHASH=${hash} undocker"; + buildPhase = "make VSN=v${version} VSNHASH=${src.rev} undocker"; installPhase = "install -D undocker $out/bin/undocker"; From c6ef05be1fc77d030581e9ab172ceec53213fa50 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 6 Jul 2026 21:34:43 +0000 Subject: [PATCH 06/42] ddev: 1.25.2 -> 1.25.3 (cherry picked from commit b61995f4ff170fa6d8773ee3feed87fab316d2b2) --- pkgs/by-name/dd/ddev/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/dd/ddev/package.nix b/pkgs/by-name/dd/ddev/package.nix index 36ffba5f1a09..9afe4d5c8d6f 100644 --- a/pkgs/by-name/dd/ddev/package.nix +++ b/pkgs/by-name/dd/ddev/package.nix @@ -20,13 +20,13 @@ let in buildGoModule (finalAttrs: { pname = "ddev"; - version = "1.25.2"; + version = "1.25.3"; src = fetchFromGitHub { owner = "ddev"; repo = "ddev"; rev = "v${finalAttrs.version}"; - hash = "sha256-JcZTKGjYTvrUT6IAKfVJsJj3e4Q60uiIdK3Y9GzeIVw="; + hash = "sha256-IsFay9UqvRdllLzyQLg3YUPFlg6MugYVWRXxUpBV9n0="; }; postPatch = '' From 4a19667063680e21636730f4e46a507a293c8b54 Mon Sep 17 00:00:00 2001 From: Bobby Rong Date: Thu, 9 Jul 2026 22:35:44 +0800 Subject: [PATCH 07/42] =?UTF-8?q?webkitgtk=5F6=5F0:=202.52.4=20=E2=86=92?= =?UTF-8?q?=202.52.5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://webkitgtk.org/2026/07/09/webkitgtk2.52.5-released.html https://github.com/WebKit/WebKit/compare/webkitgtk-2.52.4...webkitgtk-2.52.5 (cherry picked from commit 58eb0e3d00f8559f0b590e72456b9bc2220bb6ad) --- pkgs/development/libraries/webkitgtk/default.nix | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/pkgs/development/libraries/webkitgtk/default.nix b/pkgs/development/libraries/webkitgtk/default.nix index e042326ba5ff..eab3b229eda7 100644 --- a/pkgs/development/libraries/webkitgtk/default.nix +++ b/pkgs/development/libraries/webkitgtk/default.nix @@ -85,7 +85,7 @@ in # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang. clangStdenv.mkDerivation (finalAttrs: { pname = "webkitgtk"; - version = "2.52.4"; + version = "2.52.5"; name = "webkitgtk-${finalAttrs.version}+abi=${abiVersion}"; outputs = [ @@ -100,19 +100,10 @@ clangStdenv.mkDerivation (finalAttrs: { src = fetchurl { url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz"; - hash = "sha256-z0B2ocoqZHiO3KjEUtjrto1eKWXliP5Go4igFlE+3OQ="; + hash = "sha256-ilMamr0iFZNuioqRTAd7WGwCKLMdZS8gUoao7JDzNks="; }; - patches = [ - # Fix build with system malloc - # See: https://bugs.webkit.org/show_bug.cgi?id=316083 - (fetchpatch { - url = "https://github.com/WebKit/WebKit/commit/a6bc685a685c8f16c919dc6310a62a26971d396e.patch"; - hash = "sha256-X3E9SYykYomoBeAL4vS1Iuw2fPdO8fI7MvAW/kEhTMc="; - name = "fix-build-with-system-malloc.patch"; - }) - ] - ++ lib.optionals clangStdenv.hostPlatform.isLinux [ + patches = lib.optionals clangStdenv.hostPlatform.isLinux [ (replaceVars ./fix-bubblewrap-paths.patch { inherit (builtins) storeDir; inherit (addDriverRunpath) driverLink; From 1c848485fb57553c993c7a2b8f041bd81b55ae82 Mon Sep 17 00:00:00 2001 From: Patrick Date: Sun, 5 Jul 2026 13:39:54 +0200 Subject: [PATCH 08/42] firezone-gui-client: 1.5.1 -> 1.5.2 (cherry picked from commit de714bfc99046d99b99b7b70455ca3cabd298cdf) --- pkgs/by-name/fi/firezone-gui-client/package.nix | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/pkgs/by-name/fi/firezone-gui-client/package.nix b/pkgs/by-name/fi/firezone-gui-client/package.nix index 4a5530b6878a..bbc69b367a77 100644 --- a/pkgs/by-name/fi/firezone-gui-client/package.nix +++ b/pkgs/by-name/fi/firezone-gui-client/package.nix @@ -19,7 +19,7 @@ libayatana-appindicator, webkitgtk_4_1, wrapGAppsHook3, - pnpm_9, + pnpm_10, fetchPnpmDeps, pnpmConfigHook, nodejs, @@ -27,12 +27,12 @@ copyDesktopItems, }: let - version = "1.5.1"; + version = "1.5.2"; src = fetchFromGitHub { owner = "firezone"; repo = "firezone"; tag = "gui-client-${version}"; - hash = "sha256-KozSy44Opx6cukA0QTXeMpI3fP49iyabFzPLIJckOZ4="; + hash = "sha256-Ew6oLVL7u9RtidHNsz29lzH9WPxKNneEoVACuLdP7yo="; }; frontend = stdenvNoCC.mkDerivation rec { @@ -41,10 +41,10 @@ let pnpmDeps = fetchPnpmDeps { inherit pname version; - pnpm = pnpm_9; + pnpm = pnpm_10; src = "${src}/rust/gui-client"; - fetcherVersion = 3; - hash = "sha256-akanXiWehhQRx6WHN75PjYvFxFiSsJ5dJaguJBTM9J0="; + fetcherVersion = 4; + hash = "sha256-770+06rpf/P9hOFLgEWc0/BKjIxHyCWB2E3tqdEskAA="; }; pnpmRoot = "rust/gui-client"; @@ -52,7 +52,7 @@ let nativeBuildInputs = [ pnpmConfigHook - pnpm_9 + pnpm_10 nodejs ]; @@ -79,7 +79,7 @@ rustPlatform.buildRustPackage rec { pname = "firezone-gui-client"; inherit version src; - cargoHash = "sha256-TDP1Z4MeQaSER8MGnCEQfIhRsakaSCeJ7boUMBYkkI0="; + cargoHash = "sha256-LHHaklGIMuDuZwikXiQzLPbmkUbPyYR04UBQTBxq2ps="; sourceRoot = "${src.name}/rust"; buildAndTestSubdir = "gui-client"; env.RUSTFLAGS = "--cfg system_certs"; From 25eed016bd7cf0ecb2add01409d9f8da8548113f Mon Sep 17 00:00:00 2001 From: kilianar Date: Mon, 8 Jun 2026 08:51:15 +0200 Subject: [PATCH 09/42] wealthfolio: 3.4.0 -> 3.5.2 https://github.com/wealthfolio/wealthfolio/releases/tag/v3.5.2 (cherry picked from commit 0059b0de354144370a1c27f1bd346668d4af164e) --- pkgs/by-name/we/wealthfolio/package.nix | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/pkgs/by-name/we/wealthfolio/package.nix b/pkgs/by-name/we/wealthfolio/package.nix index f1a058129fb1..e56f5a9bfe32 100644 --- a/pkgs/by-name/we/wealthfolio/package.nix +++ b/pkgs/by-name/we/wealthfolio/package.nix @@ -9,7 +9,7 @@ nodejs, openssl, pkg-config, - pnpm_9, + pnpm_10, fetchPnpmDeps, pnpmConfigHook, rustPlatform, @@ -19,20 +19,20 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "wealthfolio"; - version = "3.4.0"; + version = "3.5.2"; src = fetchFromGitHub { owner = "afadil"; repo = "wealthfolio"; rev = "v${finalAttrs.version}"; - hash = "sha256-SYI0LosdR82rUubxl0pNi1huEDcR6bxcaHbjCVT/T/0="; + hash = "sha256-WU87VmnbzUno1CmIVwBLYjmTZybM4qSuRmBH/2n/Tfo="; }; pnpmDeps = fetchPnpmDeps { inherit (finalAttrs) src pname version; - pnpm = pnpm_9; - fetcherVersion = 3; - hash = "sha256-LXPQpQFXwPEHxktLoRiWTi8NbtzrS5ItUmoKJki3zcs"; + pnpm = pnpm_10; + fetcherVersion = 4; + hash = "sha256-EDnHlaW3Ad32N8wl38ryo6pYvKU2T1OH6IkOuTLI7Vs="; }; cargoRoot = "."; @@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: { src cargoRoot ; - hash = "sha256-cCaZ5X57WAaO9F2lP2/wdilXc0Al0Vr3ntyV1/Q5sj8="; + hash = "sha256-KoS2EouZ0Uf3cijUUOpwYBYEjEB5VxIArU1CuCji2+I="; }; nativeBuildInputs = [ @@ -55,7 +55,7 @@ stdenv.mkDerivation (finalAttrs: { nodejs pkg-config pnpmConfigHook - pnpm_9 + pnpm_10 rustPlatform.cargoSetupHook wrapGAppsHook3 ]; From 4ce2e6224a681a49ee2fcb12fb3bdd78a2339acb Mon Sep 17 00:00:00 2001 From: Bobby Rong Date: Sat, 11 Jul 2026 19:03:16 +0800 Subject: [PATCH 10/42] mate-power-manager: Fix backlight-helper polkit popup Same as 4d9714d7c9e07f5f. (cherry picked from commit b27618bc1e638e418d19317111a54a2bef0fbbc8) --- pkgs/by-name/ma/mate-power-manager/package.nix | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/pkgs/by-name/ma/mate-power-manager/package.nix b/pkgs/by-name/ma/mate-power-manager/package.nix index 9f67b36f661b..a46e9e41daee 100644 --- a/pkgs/by-name/ma/mate-power-manager/package.nix +++ b/pkgs/by-name/ma/mate-power-manager/package.nix @@ -56,7 +56,16 @@ stdenv.mkDerivation (finalAttrs: { mate-panel ]; - configureFlags = [ "--enable-applets" ]; + configureFlags = [ + "--enable-applets" + "--sbindir=$(out)/bin" + ]; + + postPatch = '' + # Fixes polkit popup after `nixos-rebuild switch`. + substituteInPlace src/gpm-brightness.c \ + --replace-fail 'SBINDIR "/mate-power-backlight-helper' '"/run/current-system/sw/bin/mate-power-backlight-helper' + ''; enableParallelBuilding = true; From f30599e817e4f2251e7e3b0d61c7a86610020ce6 Mon Sep 17 00:00:00 2001 From: Leon Hubrich Date: Sun, 5 Jul 2026 23:07:40 +0200 Subject: [PATCH 11/42] technitium-dns-server: 15.2.0 -> 15.3.0 (cherry picked from commit 005ae92e4f71bef6f60e906b2098bc8df05ae5d6) --- .../services/networking/technitium-dns-server.nix | 6 +++++- .../technitium-dns-server-library/nuget-deps.json | 2 +- .../te/technitium-dns-server-library/package.nix | 4 ++-- .../technitium-dns-server/dnssec-do-bit-fix.patch | 13 ------------- .../te/technitium-dns-server/nuget-deps.json | 6 +++--- pkgs/by-name/te/technitium-dns-server/package.nix | 10 ++-------- 6 files changed, 13 insertions(+), 28 deletions(-) delete mode 100644 pkgs/by-name/te/technitium-dns-server/dnssec-do-bit-fix.patch diff --git a/nixos/modules/services/networking/technitium-dns-server.nix b/nixos/modules/services/networking/technitium-dns-server.nix index 143b0c43cfdc..32aa247989aa 100644 --- a/nixos/modules/services/networking/technitium-dns-server.nix +++ b/nixos/modules/services/networking/technitium-dns-server.nix @@ -65,6 +65,7 @@ in DynamicUser = true; StateDirectory = "technitium-dns-server"; + LogsDirectory = "technitium"; Restart = "always"; RestartSec = 10; @@ -102,5 +103,8 @@ in }; }; - meta.maintainers = with lib.maintainers; [ fabianrig ]; + meta.maintainers = with lib.maintainers; [ + fabianrig + awildleon + ]; } diff --git a/pkgs/by-name/te/technitium-dns-server-library/nuget-deps.json b/pkgs/by-name/te/technitium-dns-server-library/nuget-deps.json index 55abcf33388d..ca48dcf1154e 100644 --- a/pkgs/by-name/te/technitium-dns-server-library/nuget-deps.json +++ b/pkgs/by-name/te/technitium-dns-server-library/nuget-deps.json @@ -19,4 +19,4 @@ "version": "6.0.0", "hash": "sha256-/9EaAbEeOjELRSMZaImS1O8FmUe8j4WuFUw1VOrPyAo=" } -] \ No newline at end of file +] diff --git a/pkgs/by-name/te/technitium-dns-server-library/package.nix b/pkgs/by-name/te/technitium-dns-server-library/package.nix index 1a7f086d303c..c5db4bfb27f8 100644 --- a/pkgs/by-name/te/technitium-dns-server-library/package.nix +++ b/pkgs/by-name/te/technitium-dns-server-library/package.nix @@ -7,13 +7,13 @@ }: buildDotnetModule rec { pname = "technitium-dns-server-library"; - version = "15.2.0"; + version = "15.3.0"; src = fetchFromGitHub { owner = "TechnitiumSoftware"; repo = "TechnitiumLibrary"; tag = "dns-server-v${version}"; - hash = "sha256-PC8j7JT4JiisGGfHORke63boLC4W1gLoaQQ3jPz5Qtc="; + hash = "sha256-BQWDzMEiChY8uX1wUUZNWFDomGqUyDrZ6+UEncC5G5U="; name = "${pname}-${version}"; }; diff --git a/pkgs/by-name/te/technitium-dns-server/dnssec-do-bit-fix.patch b/pkgs/by-name/te/technitium-dns-server/dnssec-do-bit-fix.patch deleted file mode 100644 index aaafec50add1..000000000000 --- a/pkgs/by-name/te/technitium-dns-server/dnssec-do-bit-fix.patch +++ /dev/null @@ -1,13 +0,0 @@ -diff --git a/DnsServerCore/Dns/ZoneManagers/AuthZoneManager.cs b/DnsServerCore/Dns/ZoneManagers/AuthZoneManager.cs -index 352ea6c0..41a9a1c7 100644 ---- a/DnsServerCore/Dns/ZoneManagers/AuthZoneManager.cs -+++ b/DnsServerCore/Dns/ZoneManagers/AuthZoneManager.cs -@@ -3536,7 +3536,7 @@ namespace DnsServerCore.Dns.ZoneManagers - } - } - -- return new DnsDatagram(request.Identifier, true, DnsOpcode.StandardQuery, true, false, request.RecursionDesired, isRecursionAllowed, false, false, rCode, request.Question, answer, authority, additional, udpPayloadSize: _dnsServer.UdpPayloadSize, options: eDnsOptions); -+ return new DnsDatagram(request.Identifier, true, DnsOpcode.StandardQuery, true, false, request.RecursionDesired, isRecursionAllowed, false, false, rCode, request.Question, answer, authority, additional, _dnsServer.UdpPayloadSize, request.DnssecOk ? EDnsHeaderFlags.DNSSEC_OK : EDnsHeaderFlags.None, eDnsOptions); - } - } - diff --git a/pkgs/by-name/te/technitium-dns-server/nuget-deps.json b/pkgs/by-name/te/technitium-dns-server/nuget-deps.json index 3c5b4c6e4f0a..dfb73aa03e2b 100644 --- a/pkgs/by-name/te/technitium-dns-server/nuget-deps.json +++ b/pkgs/by-name/te/technitium-dns-server/nuget-deps.json @@ -6,8 +6,8 @@ }, { "pname": "Microsoft.AspNetCore.Authentication.OpenIdConnect", - "version": "10.0.7", - "hash": "sha256-hr1QgB9miQO2rXj5heibTX/fa3Tj/Nci8G/pDcrq11c=" + "version": "10.0.9", + "hash": "sha256-+fRq6oetJlK32C2R/nRBThcO+S6HTX6AIcfg12keAxU=" }, { "pname": "Microsoft.IdentityModel.Abstractions", @@ -59,4 +59,4 @@ "version": "8.0.1", "hash": "sha256-hW4f9zWs0afxPbcMqCA/FAGvBZbBFSkugIOurswomHg=" } -] \ No newline at end of file +] diff --git a/pkgs/by-name/te/technitium-dns-server/package.nix b/pkgs/by-name/te/technitium-dns-server/package.nix index f143be229523..6ddd88f61f89 100644 --- a/pkgs/by-name/te/technitium-dns-server/package.nix +++ b/pkgs/by-name/te/technitium-dns-server/package.nix @@ -10,13 +10,13 @@ }: buildDotnetModule rec { pname = "technitium-dns-server"; - version = "15.2.0"; + version = "15.3.0"; src = fetchFromGitHub { owner = "TechnitiumSoftware"; repo = "DnsServer"; tag = "v${version}"; - hash = "sha256-464jhswTOJnQnxetl9hH5U3aDP0RXzJTicot9nWzpAo="; + hash = "sha256-nopmnQpozvN0p/SyUCH3Yej/oAhDvNdfJssUA1JyGsk="; name = "${pname}-${version}"; }; @@ -41,12 +41,6 @@ buildDotnetModule rec { libmsquic ]; - # Confirmed correct by upstream, remove when fixed in a release: - # https://github.com/TechnitiumSoftware/DnsServer/issues/1967 - patches = [ - ./dnssec-do-bit-fix.patch - ]; - passthru.tests = { inherit (nixosTests) technitium-dns-server; }; From 745fe474da3be4f8eff25c2bd5d2ceff77b874b8 Mon Sep 17 00:00:00 2001 From: mcuste Date: Fri, 8 Aug 2025 17:23:40 +0200 Subject: [PATCH 12/42] maintainers: add mcuste (cherry picked from commit 48fbfc7974917e455c54a83c6ec62b9a031780a5) --- maintainers/maintainer-list.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index 95bb80a939d1..2b20e2630124 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -17500,6 +17500,12 @@ { fingerprint = "838A FE0D 55DC 074E 360F 943A 84B6 9CE6 F3F6 B767"; } ]; }; + mcuste = { + email = "github@muratcanuste.com"; + github = "mcuste"; + githubId = 10829864; + name = "Murat Can Üste"; + }; mcwitt = { email = "mcwitt@gmail.com"; github = "mcwitt"; From 2da9dbf95924b4f056161f5f41c56c99a67b7dd2 Mon Sep 17 00:00:00 2001 From: mcuste Date: Fri, 8 Aug 2025 17:30:22 +0200 Subject: [PATCH 13/42] flytectl: init at 0.9.8 Co-authored-by: Arne Keller (cherry picked from commit 6e82548f5255562ebfa99c98eef0035601fc2559) --- pkgs/by-name/fl/flytectl/package.nix | 65 ++++++++++++++++++++++++++++ 1 file changed, 65 insertions(+) create mode 100644 pkgs/by-name/fl/flytectl/package.nix diff --git a/pkgs/by-name/fl/flytectl/package.nix b/pkgs/by-name/fl/flytectl/package.nix new file mode 100644 index 000000000000..fcd4c6abbf41 --- /dev/null +++ b/pkgs/by-name/fl/flytectl/package.nix @@ -0,0 +1,65 @@ +{ + lib, + buildGoModule, + fetchFromGitHub, + installShellFiles, + stdenv, + testers, + flytectl, +}: +buildGoModule (finalAttrs: { + pname = "flytectl"; + version = "0.9.8"; + + __structuredAttrs = true; + + src = fetchFromGitHub { + owner = "flyteorg"; + repo = "flyte"; + tag = "flytectl/v${finalAttrs.version}"; + hash = "sha256-p6fU+BLvhwK+4zDNBy4jwtvIll+s4jXmpYIF1mfeoB4="; + }; + + vendorHash = "sha256-h4L8BFzRiph4SBffVRH9TU5j7k+CZGshOV160mENAL0="; + + sourceRoot = "${finalAttrs.src.name}/flytectl"; + + subPackages = [ "." ]; + + ldflags = [ + "-s" + "-w" + "-X github.com/flyteorg/flyte/flytestdlib/version.Version=v${finalAttrs.version}" + "-X github.com/flyteorg/flyte/flytestdlib/version.Build=${finalAttrs.src.tag}" + "-X github.com/flyteorg/flyte/flytestdlib/version.BuildTime=1970-01-01" + ]; + + nativeBuildInputs = [ installShellFiles ]; + + # Tests require network and file system access + doCheck = false; + + postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) '' + installShellCompletion --cmd flytectl \ + --bash <($out/bin/flytectl completion bash) \ + --fish <($out/bin/flytectl completion fish) \ + --zsh <($out/bin/flytectl completion zsh) + ''; + + passthru.tests.version = testers.testVersion { + package = finalAttrs.finalPackage; + command = "flytectl version"; + version = "v${finalAttrs.src.version}"; + }; + + meta = { + description = "Command-line interface for Flyte, a cloud-native workflow orchestration platform"; + downloadPage = "https://github.com/flyteorg/flyte"; + homepage = "https://flyte.org/"; + changelog = "https://github.com/flyteorg/flyte/releases/tag/flytectl%2Fv${finalAttrs.version}"; + license = lib.licenses.asl20; + maintainers = [ lib.maintainers.mcuste ]; + mainProgram = "flytectl"; + platforms = lib.platforms.unix; + }; +}) From c4a6a8897c9b138e224198b3246a57e1fcb86c31 Mon Sep 17 00:00:00 2001 From: jaredmontoya <49511278+jaredmontoya@users.noreply.github.com> Date: Sun, 12 Jul 2026 16:25:43 +0200 Subject: [PATCH 14/42] llama-cpp: do not overwrite the actual llama cli (cherry picked from commit 92b2793f8b3aafe0f2f157095828ba33c668b07f) --- pkgs/by-name/ll/llama-cpp/package.nix | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkgs/by-name/ll/llama-cpp/package.nix b/pkgs/by-name/ll/llama-cpp/package.nix index ce1ae9e3c291..1a6b09e464b2 100644 --- a/pkgs/by-name/ll/llama-cpp/package.nix +++ b/pkgs/by-name/ll/llama-cpp/package.nix @@ -177,9 +177,6 @@ effectiveStdenv.mkDerivation (finalAttrs: { # upstream plans on adding targets at the cmakelevel, remove those # additional steps after that postInstall = '' - # Match previous binary name for this package - ln -sf $out/bin/llama-cli $out/bin/llama - mkdir -p $out/include cp $src/include/llama.h $out/include/ From fefecf5577f239a4bebe81bc53d089430cb8ea60 Mon Sep 17 00:00:00 2001 From: "Adam C. Stephens" Date: Tue, 14 Jul 2026 10:22:47 -0400 Subject: [PATCH 15/42] rage: 0.11.2 -> 0.11.4 Changelog: https://github.com/str4d/rage/releases/tag/v0.11.4 --- pkgs/by-name/ra/rage/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ra/rage/package.nix b/pkgs/by-name/ra/rage/package.nix index 4dd1e7472c63..d8bcaf5cd37a 100644 --- a/pkgs/by-name/ra/rage/package.nix +++ b/pkgs/by-name/ra/rage/package.nix @@ -8,16 +8,16 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "rage"; - version = "0.11.2"; + version = "0.11.4"; src = fetchFromGitHub { owner = "str4d"; repo = "rage"; rev = "v${finalAttrs.version}"; - hash = "sha256-uBRXdDdfKTlw006LfCrIvbng7b/fhJDHrmHDLLxdmAU="; + hash = "sha256-ZfP/vVp/Cl6oelZvxz7B9vNYvXtPH92lnqq3pseHLYo="; }; - cargoHash = "sha256-b5x6ESGsF0Mn5dNVagBSopuawbrNcJuMK1//Ns+xuJs="; + cargoHash = "sha256-dMzybfNJYrN8aa+Q5RRDRE9f0hKRs+ZmQ7B2YRUtZ/s="; nativeBuildInputs = [ installShellFiles From d774ac19255e8a1192acb123634d6a3558389b6d Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 13 Jul 2026 02:18:03 +0000 Subject: [PATCH 16/42] eww: 0.6.0-unstable-2026-03-05 -> 0.6.0-unstable-2026-07-05 (cherry picked from commit 6a71d414905966426d13011d68fb1358158cc214) --- pkgs/by-name/ew/eww/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ew/eww/package.nix b/pkgs/by-name/ew/eww/package.nix index b079226da18d..53fc9eea0f50 100644 --- a/pkgs/by-name/ew/eww/package.nix +++ b/pkgs/by-name/ew/eww/package.nix @@ -15,13 +15,13 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "eww"; - version = "0.6.0-unstable-2026-03-05"; + version = "0.6.0-unstable-2026-07-05"; src = fetchFromGitHub { owner = "elkowar"; repo = "eww"; - rev = "865cf631d5bbb5f9fccc99b3f4cc80b9eeada18c"; - hash = "sha256-fL12XFMsf/efSlbzQc7cCI366CwETkM6sWpEfcF9s6A="; + rev = "4ded06345553e4c2bcf8179fc7438e53c5e54d89"; + hash = "sha256-fnI8XgBowMxs/j9FGf+pQI2U8YjN8pTRqkVmFm8PBHE="; }; cargoHash = "sha256-Kf99eojqXvdbZ3eRS8GBgyLYNpZKJGIJtsOsvhhSVDk="; From d0f26909927ad3070bab6e3ce13f1f53402581e0 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 6 Jul 2026 09:46:15 +0000 Subject: [PATCH 17/42] bookstack: 26.05.1 -> 26.05.2 (cherry picked from commit 4ce1caf2f21cd02dd6524f343e6a64650b900836) --- pkgs/by-name/bo/bookstack/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/bo/bookstack/package.nix b/pkgs/by-name/bo/bookstack/package.nix index e039d2c5f30d..dc23a741a899 100644 --- a/pkgs/by-name/bo/bookstack/package.nix +++ b/pkgs/by-name/bo/bookstack/package.nix @@ -8,16 +8,16 @@ php83.buildComposerProject2 (finalAttrs: { pname = "bookstack"; - version = "26.05.1"; + version = "26.05.2"; src = fetchFromGitHub { owner = "bookstackapp"; repo = "bookstack"; tag = "v${finalAttrs.version}"; - hash = "sha256-g68wTZ5jRwXEKvAF9nLfKfWGf1FDD15msSkXzzJkVDQ="; + hash = "sha256-AYOl84DY13A5HnyUVY97kelYgoTJyq8nzeaHoksWXtI="; }; - vendorHash = "sha256-YJwJp+OtrCDgGFsZAjdlSx0LoxQFbylqCNW90MF8Kzo="; + vendorHash = "sha256-m98QXFqvdomVEVs2P8gnoKaYEBNYe/CchSvBEc448ko="; passthru = { phpPackage = php83; From 4fbb919a47d1e18ff9aba9ada62c4535ef3ddc5d Mon Sep 17 00:00:00 2001 From: Franta Bartik Date: Fri, 22 May 2026 10:31:20 -0400 Subject: [PATCH 18/42] rura: init at 1.3.0 Updated to 1.2.0 Upgrade to 1.3.0 (cherry picked from commit 0480c371b2a545ab55b92ac337471a14d721ec50) --- pkgs/by-name/ru/rura/package.nix | 38 ++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 pkgs/by-name/ru/rura/package.nix diff --git a/pkgs/by-name/ru/rura/package.nix b/pkgs/by-name/ru/rura/package.nix new file mode 100644 index 000000000000..793aef7442a1 --- /dev/null +++ b/pkgs/by-name/ru/rura/package.nix @@ -0,0 +1,38 @@ +{ + lib, + rustPlatform, + fetchFromGitHub, + nix-update-script, + testers, +}: + +rustPlatform.buildRustPackage (finalAttrs: { + pname = "rura"; + version = "1.3.0"; + __structuredAttrs = true; + + src = fetchFromGitHub { + owner = "tlipinski"; + repo = "rura"; + tag = "v${finalAttrs.version}"; + hash = "sha256-cwL3Dw1qPYcKFzy0CV/XI7jZWHZZoZumdbB2kK+9jdc="; + }; + + cargoHash = "sha256-T/7v1WxTfsilw5i592EoRWxpkaL4bnluXmCModO1WQg="; + + passthru = { + updateScript = nix-update-script { }; + tests.version = testers.testVersion { + package = finalAttrs.finalPackage; + }; + }; + + meta = { + description = "Interactive TUI scratchpad for building shell pipelines"; + homepage = "https://github.com/tlipinski/rura"; + changelog = "https://github.com/tlipinski/rura/blob/${finalAttrs.src.rev}/CHANGELOG.md"; + license = lib.licenses.mit; + maintainers = with lib.maintainers; [ frantathefranta ]; + mainProgram = "rura"; + }; +}) From 076003e33b24598c1ac356d01df3f979a09ea891 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Tue, 14 Jul 2026 09:16:00 -0700 Subject: [PATCH 19/42] python3Packages.paho-mqtt: regenerate certificates for tests The certificate tests/ssl/server.crt expired on July 6, 2026, leading to ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_EXPIRED] ssl/tls alert certificate expired (_ssl.c:1032) in the tests. (cherry picked from commit 78e3a0877691fac433ce626641597f14de0d06af) --- pkgs/development/python-modules/paho-mqtt/default.nix | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/pkgs/development/python-modules/paho-mqtt/default.nix b/pkgs/development/python-modules/paho-mqtt/default.nix index ac25b8275f16..b0ea0015bb42 100644 --- a/pkgs/development/python-modules/paho-mqtt/default.nix +++ b/pkgs/development/python-modules/paho-mqtt/default.nix @@ -4,6 +4,7 @@ buildPythonPackage, fetchFromGitHub, hatchling, + openssl, pytestCheckHook, }: @@ -27,11 +28,17 @@ buildPythonPackage rec { hash = "sha256-VMq+WTW+njK34QUUTE6fR2j2OmHxVzR0wrC92zYb1rY="; }; + postPatch = '' + substituteInPlace tests/ssl/gen.sh \ + --replace-fail "c_rehash certs" "#c_rehash certs" + ''; + build-system = [ hatchling ]; nativeCheckInputs = [ + openssl pytestCheckHook ]; @@ -44,6 +51,10 @@ buildPythonPackage rec { # paho.mqtt not in top-level dir to get caught by this export PYTHONPATH=".:$PYTHONPATH" + + pushd tests/ssl + HOME="$(mktemp -d)" ./gen.sh + popd ''; disabledTests = [ From 86ba3a75189ff6aad926cc57dddbb5c9a13e5bba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Tue, 14 Jul 2026 10:14:35 -0700 Subject: [PATCH 20/42] python3Packages.paho-mqtt_1: init at 1.6.1 (cherry picked from commit fe64ea753d8b22a7a440ba102f91d97bdff0ebbc) --- .../python-modules/paho-mqtt/1.nix | 62 +++++++++++++++++++ pkgs/top-level/python-packages.nix | 2 + 2 files changed, 64 insertions(+) create mode 100644 pkgs/development/python-modules/paho-mqtt/1.nix diff --git a/pkgs/development/python-modules/paho-mqtt/1.nix b/pkgs/development/python-modules/paho-mqtt/1.nix new file mode 100644 index 000000000000..6932b26dff79 --- /dev/null +++ b/pkgs/development/python-modules/paho-mqtt/1.nix @@ -0,0 +1,62 @@ +{ + buildPythonPackage, + esphome, + fetchFromGitHub, + lib, + pytestCheckHook, + setuptools, +}: + +let + testing = fetchFromGitHub { + owner = "eclipse"; + repo = "paho.mqtt.testing"; + rev = "a4dc694010217b291ee78ee13a6d1db812f9babd"; + hash = "sha256-SQoNdkWMjnasPjpXQF2yV97MUra8gb27pc3rNoA8Rjw="; + }; +in +buildPythonPackage (finalAttrs: { + pname = "paho-mqtt"; + version = "1.6.1"; + pyproject = true; + + src = fetchFromGitHub { + owner = "eclipse"; + repo = "paho.mqtt.python"; + tag = "v${finalAttrs.version}"; + hash = "sha256-9nH6xROVpmI+iTKXfwv2Ar1PAmWbEunI3HO0pZyK6Rg="; + }; + + build-system = [ setuptools ]; + + pythonImportsCheck = [ "paho.mqtt" ]; + + doCheck = false; + + nativeCheckInputs = [ + pytestCheckHook + ]; + + preCheck = '' + ln -s ${testing} paho.mqtt.testing + + # paho.mqtt not in top-level dir to get caught by this + export PYTHONPATH=".:$PYTHONPATH" + ''; + + disabledTests = [ + # Fails during teardown + # RuntimeError: Client 01-zero-length-clientid.py exited with code None, expected 0 + "test_01_zero_length_clientid" + ]; + + __darwinAllowLocalNetworking = true; + + meta = { + changelog = "https://github.com/eclipse/paho.mqtt.python/blob/${finalAttrs.src.tag}/ChangeLog.txt"; + description = "MQTT version 5.0/3.1.1 client class"; + homepage = "https://eclipse.org/paho"; + license = lib.licenses.epl20; + inherit (esphome.meta) maintainers; + }; +}) diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix index 7d5837504aa1..df0fd218e28e 100644 --- a/pkgs/top-level/python-packages.nix +++ b/pkgs/top-level/python-packages.nix @@ -12188,6 +12188,8 @@ self: super: with self; { paho-mqtt = callPackage ../development/python-modules/paho-mqtt/default.nix { }; + paho-mqtt_1 = callPackage ../development/python-modules/paho-mqtt/1.nix { }; + paintcompiler = callPackage ../development/python-modules/paintcompiler { }; palace = callPackage ../development/python-modules/palace { }; From f7351ca8a5e14ffc53c2803e880f00d973a4925e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Tue, 14 Jul 2026 10:15:07 -0700 Subject: [PATCH 21/42] esphome: use paho-mqtt_1 (cherry picked from commit fd52742f71d9b4f1cb56f95aa4be38fed8b62e00) --- pkgs/by-name/es/esphome/package.nix | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) diff --git a/pkgs/by-name/es/esphome/package.nix b/pkgs/by-name/es/esphome/package.nix index 13ac763dd27b..d6435e15ccd7 100644 --- a/pkgs/by-name/es/esphome/package.nix +++ b/pkgs/by-name/es/esphome/package.nix @@ -18,16 +18,7 @@ let packageOverrides = self: super: { esphome-dashboard = self.callPackage ./dashboard.nix { }; - paho-mqtt = super.paho-mqtt.overridePythonAttrs (oldAttrs: rec { - version = "1.6.1"; - src = fetchFromGitHub { - inherit (oldAttrs.src) owner repo; - tag = "v${version}"; - hash = "sha256-9nH6xROVpmI+iTKXfwv2Ar1PAmWbEunI3HO0pZyK6Rg="; - }; - build-system = with self; [ setuptools ]; - doCheck = false; - }); + paho-mqtt = self.paho-mqtt_1; }; }; in From 034023ca7f0c158b6bdd02434d00064b97209981 Mon Sep 17 00:00:00 2001 From: emilylange Date: Tue, 14 Jul 2026 19:47:56 +0200 Subject: [PATCH 22/42] chromium,chromedriver: 150.0.7871.114 -> 150.0.7871.124 https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html This update includes 15 security fixes. CVEs: CVE-2026-15764 CVE-2026-15765 CVE-2026-15766 CVE-2026-15767 CVE-2026-15768 CVE-2026-15769 CVE-2026-15770 CVE-2026-15771 CVE-2026-15772 CVE-2026-15773 CVE-2026-15774 CVE-2026-15775 CVE-2026-15776 CVE-2026-15777 CVE-2026-15778 (cherry picked from commit c22f438f9d604a3e6c62af601c4a9330bd953341) --- .../networking/browsers/chromium/info.json | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/pkgs/applications/networking/browsers/chromium/info.json b/pkgs/applications/networking/browsers/chromium/info.json index a3bc7a312ec7..c4ef999b274b 100644 --- a/pkgs/applications/networking/browsers/chromium/info.json +++ b/pkgs/applications/networking/browsers/chromium/info.json @@ -1,10 +1,10 @@ { "chromium": { - "version": "150.0.7871.114", + "version": "150.0.7871.124", "chromedriver": { - "version": "150.0.7871.115", - "hash_darwin": "sha256-3QytnwfqPqpYL2TMTMykvT+yAfZqWiRHMbMEK+whe0Q=", - "hash_darwin_aarch64": "sha256-jJ1URVS4led/1rTODm3t8wewJ8oIOzKIrq1utn5JJ3s=" + "version": "150.0.7871.125", + "hash_darwin": "sha256-HJTBS6eRmAsxrn7WW4hCxMCXdzn+1PYz1W0uZHJ38yk=", + "hash_darwin_aarch64": "sha256-VCgkc6MeMPbt0F2ZVTJNn9yJbSYNhy1zr8KzPVaVi0I=" }, "deps": { "depot_tools": { @@ -21,8 +21,8 @@ "DEPS": { "src": { "url": "https://chromium.googlesource.com/chromium/src.git", - "rev": "f405107495a07cb1bfcf687d4af8d91117098db6", - "hash": "sha256-VdDnFbE+/leFzR/PqR3ColKKqwkvuY/LsFje0nrwiXU=", + "rev": "9261fd0a595ac4964ea84e6bd4a025c1173a2ffa", + "hash": "sha256-YKkZfxFZ7mitD6YqJZW+NQByq71UVb0jCFIBXj0SyzU=", "recompress": true }, "src/third_party/clang-format/script": { @@ -92,8 +92,8 @@ }, "src/third_party/angle": { "url": "https://chromium.googlesource.com/angle/angle.git", - "rev": "8d3c5a8caebd836b99fa32062951a401910eba33", - "hash": "sha256-7X8FSWCA+BpAXbUPvjPyiGagmVXsadRGAY5haAEzRL8=" + "rev": "13e691adf3d4d3ebee2f7239731a07d3b9704956", + "hash": "sha256-fbjREn3D+quRRADGwR7V65BZt5b+1DgnsG4ZMhwGq6o=" }, "src/third_party/angle/third_party/glmark2/src": { "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2", @@ -552,8 +552,8 @@ }, "src/third_party/libyuv": { "url": "https://chromium.googlesource.com/libyuv/libyuv.git", - "rev": "3c5fa6ef272f6077d76816ee3d6a697ef1d6d272", - "hash": "sha256-FXFSC9dRb/KhSQdhJUqKEUpZbzU8ZpVnoSXtF/HPiJI=" + "rev": "8aeb3a9ca36341a640528e59b34b5d641080dca8", + "hash": "sha256-FGl0xK7ooaRFzFBxuV6oOu3h1x2b/myLLO2En3xgVCk=" }, "src/third_party/lss": { "url": "https://chromium.googlesource.com/linux-syscall-support.git", @@ -657,8 +657,8 @@ }, "src/third_party/skia": { "url": "https://skia.googlesource.com/skia.git", - "rev": "14d05ec761901b6e9e9193af8b347ab3a7f6fed0", - "hash": "sha256-KZGrztOKaT368KSCxiJAqnsgINpNODUlaXnH/maQNIA=" + "rev": "bee4c917220040e147f14964635ff92ce6c5a3f6", + "hash": "sha256-SWmoX+sNaw4KnlTBPt63uBSYfQavJejB3+Vlw/gtWX8=" }, "src/third_party/smhasher/src": { "url": "https://chromium.googlesource.com/external/smhasher.git", @@ -827,8 +827,8 @@ }, "src/v8": { "url": "https://chromium.googlesource.com/v8/v8.git", - "rev": "ce0af5c0d181678bcda077c68d4beaec2854ad16", - "hash": "sha256-gjuH2HQAC0poQileS8JLusocBDoShuaQ9pbaAXmFj4g=" + "rev": "209c9cea0db17d8caf23e9d2c7de08c351609744", + "hash": "sha256-3jUyRERu1r+Fl2uSAaRchV2L99XLp8XO9DHctk0lMjY=" }, "src/agents/shared": { "url": "https://chromium.googlesource.com/chromium/agents.git", From dc1b74336895c362b47eacbdea8813f6e6fa9983 Mon Sep 17 00:00:00 2001 From: Ihar Hrachyshka Date: Mon, 13 Jul 2026 20:56:25 -0400 Subject: [PATCH 23/42] vikunja: Set version metadata at build time Otherwise About modal shows the frontend version as "dev". Assisted-by: Codex gpt-5.6-sol high (cherry picked from commit 962708f17c4aef6598e0651c534d3e9d05849461) --- pkgs/by-name/vi/vikunja/package.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/by-name/vi/vikunja/package.nix b/pkgs/by-name/vi/vikunja/package.nix index 0f1bbf22d5f6..5d0aa4dcef05 100644 --- a/pkgs/by-name/vi/vikunja/package.nix +++ b/pkgs/by-name/vi/vikunja/package.nix @@ -47,6 +47,11 @@ let pnpm_10 ]; + postPatch = '' + substituteInPlace src/version.json \ + --replace-fail '"dev"' '"${finalAttrs.version}"' + ''; + doCheck = true; postBuild = '' From ec09cf3cb3f06d05eba207f5691ef29024326922 Mon Sep 17 00:00:00 2001 From: Vincent Laporte Date: Mon, 22 Jun 2026 06:48:30 +0200 Subject: [PATCH 24/42] =?UTF-8?q?gajim:=202.4.6=20=E2=86=92=202.4.7?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (cherry picked from commit 514096e32ac21e0aeabac652beffadce796a1b79) --- .../networking/instant-messengers/gajim/default.nix | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/pkgs/applications/networking/instant-messengers/gajim/default.nix b/pkgs/applications/networking/instant-messengers/gajim/default.nix index d5fe7bb3f3c5..25aed76f8a18 100644 --- a/pkgs/applications/networking/instant-messengers/gajim/default.nix +++ b/pkgs/applications/networking/instant-messengers/gajim/default.nix @@ -25,7 +25,6 @@ gst-libav, gst-plugins-good, libnice, - enableE2E ? true, enableSecrets ? true, libsecret, enableRST ? true, @@ -43,14 +42,14 @@ python3.pkgs.buildPythonApplication rec { pname = "gajim"; - version = "2.4.6"; + version = "2.4.7"; src = fetchFromGitLab { domain = "dev.gajim.org"; owner = "gajim"; repo = "gajim"; tag = version; - hash = "sha256-QHfJ52uMDlE/rqqy7y2JIQLMOPaTp7eh4DEsPLBx6p8="; + hash = "sha256-tZ1+DRVCzwaWeur9mwc/zE34H2xdqk96upqWfqNTl3g="; }; pyproject = true; @@ -115,12 +114,9 @@ python3.pkgs.buildPythonApplication rec { httpx h2 truststore + pysequoia ] ++ httpx.optional-dependencies.socks - ++ lib.optionals enableE2E [ - pycrypto - python-gnupg - ] ++ lib.optional enableRST docutils ++ extraPythonPackages python3.pkgs; From 51159f3fda8a3672af61fe4a327c8141af24ef95 Mon Sep 17 00:00:00 2001 From: transcaffeine Date: Wed, 15 Jul 2026 09:47:31 +0200 Subject: [PATCH 25/42] keycloak: 26.6.4 -> 26.7.0 Release notes: https://github.com/keycloak/keycloak/releases/tag/26.7.0 Full changelog: https://github.com/keycloak/keycloak/compare/26.6.4...26.7.0 Breaking changes: https://www.keycloak.org/docs/latest/upgrading/#migrating-to-26-7-0 https://www.keycloak.org/docs/latest/upgrading/#migration-changes (cherry picked from commit 2feb8804f34eab8e0647d860d8f442794826b723) --- pkgs/by-name/ke/keycloak/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ke/keycloak/package.nix b/pkgs/by-name/ke/keycloak/package.nix index 921923d1c323..bd7675168fe5 100644 --- a/pkgs/by-name/ke/keycloak/package.nix +++ b/pkgs/by-name/ke/keycloak/package.nix @@ -24,11 +24,11 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "keycloak"; - version = "26.6.4"; + version = "26.7.0"; src = fetchzip { url = "https://github.com/keycloak/keycloak/releases/download/${finalAttrs.version}/keycloak-${finalAttrs.version}.zip"; - hash = "sha256-rb3Wdzc3g8jMvUffOfMfJ4Uw9HJomznXzLtPOrHoWU8="; + hash = "sha256-QfPCgwUZYwiCWZgL8DVlVAYE3AoZnDHn99j+f/oo0Hs="; }; nativeBuildInputs = [ From de79f2d1aee15168c155d63273b4a89e070908de Mon Sep 17 00:00:00 2001 From: Stefan Haan Date: Mon, 29 Jun 2026 04:36:20 +0200 Subject: [PATCH 26/42] gajim: add changelog (cherry picked from commit 50f695ba05182a58347845f7b4447785aa9b7e43) Co-authored-by: haansn08 --- .../networking/instant-messengers/gajim/default.nix | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pkgs/applications/networking/instant-messengers/gajim/default.nix b/pkgs/applications/networking/instant-messengers/gajim/default.nix index 25aed76f8a18..3f9a2842948e 100644 --- a/pkgs/applications/networking/instant-messengers/gajim/default.nix +++ b/pkgs/applications/networking/instant-messengers/gajim/default.nix @@ -40,7 +40,7 @@ extraPythonPackages ? ps: [ ], }: -python3.pkgs.buildPythonApplication rec { +python3.pkgs.buildPythonApplication (finalAttrs: { pname = "gajim"; version = "2.4.7"; @@ -48,7 +48,7 @@ python3.pkgs.buildPythonApplication rec { domain = "dev.gajim.org"; owner = "gajim"; repo = "gajim"; - tag = version; + tag = finalAttrs.version; hash = "sha256-tZ1+DRVCzwaWeur9mwc/zE34H2xdqk96upqWfqNTl3g="; }; @@ -141,6 +141,7 @@ python3.pkgs.buildPythonApplication rec { meta = { homepage = "http://gajim.org/"; description = "Jabber client written in PyGTK"; + changelog = "https://dev.gajim.org/gajim/gajim/-/blob/${finalAttrs.src.tag}/ChangeLog"; license = lib.licenses.gpl3Plus; maintainers = with lib.maintainers; [ raskin @@ -151,4 +152,4 @@ python3.pkgs.buildPythonApplication rec { platforms = lib.platforms.linux; mainProgram = "gajim"; }; -} +}) From 63a469176c7a75d6c6025ac87a224f62ecfbb2c9 Mon Sep 17 00:00:00 2001 From: Stefan Haan Date: Tue, 14 Jul 2026 05:50:57 +0200 Subject: [PATCH 27/42] gajim: 2.4.7 -> 2.4.7.1 (cherry picked from commit e7725b83f898a4bcc7cfe1c61f1d6b49ff1e63f6) --- .../networking/instant-messengers/gajim/default.nix | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pkgs/applications/networking/instant-messengers/gajim/default.nix b/pkgs/applications/networking/instant-messengers/gajim/default.nix index 3f9a2842948e..528010186535 100644 --- a/pkgs/applications/networking/instant-messengers/gajim/default.nix +++ b/pkgs/applications/networking/instant-messengers/gajim/default.nix @@ -42,14 +42,14 @@ python3.pkgs.buildPythonApplication (finalAttrs: { pname = "gajim"; - version = "2.4.7"; + version = "2.4.7.1"; src = fetchFromGitLab { domain = "dev.gajim.org"; owner = "gajim"; repo = "gajim"; - tag = finalAttrs.version; - hash = "sha256-tZ1+DRVCzwaWeur9mwc/zE34H2xdqk96upqWfqNTl3g="; + tag = "${finalAttrs.version}+win"; + hash = "sha256-/X2Xp1ZnPLTZc1Hf4Kp6R/+mezU6qoUhaT9OskYlnOY="; }; pyproject = true; @@ -148,8 +148,10 @@ python3.pkgs.buildPythonApplication (finalAttrs: { hlad vbgl ]; + donationPage = "https://liberapay.com/Gajim"; downloadPage = "http://gajim.org/download/"; platforms = lib.platforms.linux; mainProgram = "gajim"; + identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "gajim" finalAttrs.version; }; }) From 93393a1701c327cd32a403d6b042dc918ce318d1 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 31 May 2026 01:28:55 +0000 Subject: [PATCH 28/42] gotenberg: 8.32.0 -> 8.33.0 (cherry picked from commit 434503630c87444ec340360759d9ea6e7fc1cedd) --- pkgs/by-name/go/gotenberg/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/go/gotenberg/package.nix b/pkgs/by-name/go/gotenberg/package.nix index 18c8991f7cf8..45dd66b54510 100644 --- a/pkgs/by-name/go/gotenberg/package.nix +++ b/pkgs/by-name/go/gotenberg/package.nix @@ -24,7 +24,7 @@ let in buildGo126Module (finalAttrs: { pname = "gotenberg"; - version = "8.32.0"; + version = "8.33.0"; outputs = [ "out" @@ -35,10 +35,10 @@ buildGo126Module (finalAttrs: { owner = "gotenberg"; repo = "gotenberg"; tag = "v${finalAttrs.version}"; - hash = "sha256-o29kpKVAlKu6ER7b6ni9DMN3kGzEUnoqvHETXBNhJVs="; + hash = "sha256-hTG2O8F/0FdKVKHQsFf027OJU60moey4qkMHUwIQ8xM="; }; - vendorHash = "sha256-kHNjWq53uCVOP3JGc57MK2FKjtlqZpJz7Za+wTb/F1U="; + vendorHash = "sha256-E0PVPuSxXtacxaFLrrIVFEre5C/woj3VUckLIdrQWoI="; postPatch = '' find ./pkg -name '*_test.go' -exec sed -i -e 's#/tests#${finalAttrs.src}#g' {} \; From ece016172bff5783450c34470c5176a3e2340f2f Mon Sep 17 00:00:00 2001 From: lavecat Date: Tue, 14 Jul 2026 16:00:06 +0200 Subject: [PATCH 29/42] element-desktop: 1.12.22 -> 1.12.23 (cherry picked from commit 105d54a0469e0c9eedf87f845acc21479d74a19f) --- pkgs/by-name/el/element-desktop/package.nix | 8 ++++---- pkgs/by-name/el/element-web-unwrapped/package.nix | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/pkgs/by-name/el/element-desktop/package.nix b/pkgs/by-name/el/element-desktop/package.nix index 1ca0250cacc6..344d7db401f6 100644 --- a/pkgs/by-name/el/element-desktop/package.nix +++ b/pkgs/by-name/el/element-desktop/package.nix @@ -30,13 +30,13 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "element-desktop"; - version = "1.12.22"; + version = "1.12.23"; src = fetchFromGitHub { owner = "element-hq"; repo = "element-web"; tag = "v${finalAttrs.version}"; - hash = "sha256-TtC4KUnaKy/gmh5CbkPTWKCFjdeKvt8esFt3awdkA/g="; + hash = "sha256-IdQZqwGk05APb38hEoin74/5FeRgjCLrdli+R6iaoUA="; }; pnpmDeps = fetchPnpmDeps { @@ -46,8 +46,8 @@ stdenv.mkDerivation (finalAttrs: { src ; inherit pnpm; - fetcherVersion = 3; - hash = "sha256-Cxc2/NpOpkXavDvBgaU6Douud7AO06jt1KjuaLnZh8M="; + fetcherVersion = 4; + hash = "sha256-WVQaq7kqlEdKodOkErUCeYLh0xnH1NTHzgNyjn1+1y0="; }; env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1"; diff --git a/pkgs/by-name/el/element-web-unwrapped/package.nix b/pkgs/by-name/el/element-web-unwrapped/package.nix index 3cb26541f8c4..45dd152435f0 100644 --- a/pkgs/by-name/el/element-web-unwrapped/package.nix +++ b/pkgs/by-name/el/element-web-unwrapped/package.nix @@ -25,21 +25,21 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "element-web"; - version = "1.12.22"; + version = "1.12.23"; src = fetchFromGitHub { owner = "element-hq"; repo = "element-web"; tag = "v${finalAttrs.version}"; - hash = "sha256-TtC4KUnaKy/gmh5CbkPTWKCFjdeKvt8esFt3awdkA/g="; + hash = "sha256-IdQZqwGk05APb38hEoin74/5FeRgjCLrdli+R6iaoUA="; }; pnpmDeps = fetchPnpmDeps { pname = "element"; inherit (finalAttrs) version src; inherit pnpm; - fetcherVersion = 3; - hash = "sha256-Cxc2/NpOpkXavDvBgaU6Douud7AO06jt1KjuaLnZh8M="; + fetcherVersion = 4; + hash = "sha256-WVQaq7kqlEdKodOkErUCeYLh0xnH1NTHzgNyjn1+1y0="; }; nativeBuildInputs = [ From 9fa65ff4c1dda6bd5fb6eadc0174f34d76fe2b18 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 26 Jun 2026 22:44:59 +0000 Subject: [PATCH 30/42] gotenberg: 8.33.0 -> 8.34.0 (cherry picked from commit a8796ec2a0ef09d85772fd859377b43b412fe90a) --- pkgs/by-name/go/gotenberg/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/go/gotenberg/package.nix b/pkgs/by-name/go/gotenberg/package.nix index 45dd66b54510..1f1ebbe5b267 100644 --- a/pkgs/by-name/go/gotenberg/package.nix +++ b/pkgs/by-name/go/gotenberg/package.nix @@ -24,7 +24,7 @@ let in buildGo126Module (finalAttrs: { pname = "gotenberg"; - version = "8.33.0"; + version = "8.34.0"; outputs = [ "out" @@ -35,10 +35,10 @@ buildGo126Module (finalAttrs: { owner = "gotenberg"; repo = "gotenberg"; tag = "v${finalAttrs.version}"; - hash = "sha256-hTG2O8F/0FdKVKHQsFf027OJU60moey4qkMHUwIQ8xM="; + hash = "sha256-HFRymNfhQOBzXBWZhiujr8sn4m/hpfjcBGg/3/C67DU="; }; - vendorHash = "sha256-E0PVPuSxXtacxaFLrrIVFEre5C/woj3VUckLIdrQWoI="; + vendorHash = "sha256-njyxP+1S1ebaF9xJ1kBL9HrTWMTdEhu8MwUF6FYKHvs="; postPatch = '' find ./pkg -name '*_test.go' -exec sed -i -e 's#/tests#${finalAttrs.src}#g' {} \; From 4514f9030c2b3b6d6208b5ab385f3857ee4982d2 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 15 Jul 2026 06:30:24 +0000 Subject: [PATCH 31/42] radarr: 6.2.1.10461 -> 6.3.0.10514 (cherry picked from commit 62f69a8c388dfff331ec963636fc20e83e0421b8) --- pkgs/by-name/ra/radarr/deps.json | 6 +++--- pkgs/by-name/ra/radarr/package.nix | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/ra/radarr/deps.json b/pkgs/by-name/ra/radarr/deps.json index 85245045429c..993445ebd52e 100644 --- a/pkgs/by-name/ra/radarr/deps.json +++ b/pkgs/by-name/ra/radarr/deps.json @@ -808,9 +808,9 @@ }, { "pname": "Servarr.FFprobe", - "version": "5.1.4.112", - "hash": "sha256-OdPIvZcrGj0XaqFJQCnrPt0zgPPvB5nd7WpYFF9Bnh0=", - "url": "https://pkgs.dev.azure.com/Servarr/7ab38f4e-5a57-4d70-84f4-94dd9bc5d6df/_packaging/783c2dce-dbc3-4218-8816-4a5e12af4d84/nuget/v3/flat2/servarr.ffprobe/5.1.4.112/servarr.ffprobe.5.1.4.112.nupkg" + "version": "5.1.10.124", + "hash": "sha256-7/xXsQNQGIAF+KtVln2x5QnLs0L1zyDmusyJESOsNP8=", + "url": "https://pkgs.dev.azure.com/Servarr/7ab38f4e-5a57-4d70-84f4-94dd9bc5d6df/_packaging/783c2dce-dbc3-4218-8816-4a5e12af4d84/nuget/v3/flat2/servarr.ffprobe/5.1.10.124/servarr.ffprobe.5.1.10.124.nupkg" }, { "pname": "SharpZipLib", diff --git a/pkgs/by-name/ra/radarr/package.nix b/pkgs/by-name/ra/radarr/package.nix index 15c4af170792..571bd6e1abe2 100644 --- a/pkgs/by-name/ra/radarr/package.nix +++ b/pkgs/by-name/ra/radarr/package.nix @@ -21,7 +21,7 @@ applyPatches, }: let - version = "6.2.1.10461"; + version = "6.3.0.10514"; # The dotnet8 compatibility patches also change `yarn.lock`, so we must pass # the already patched lockfile to `fetchYarnDeps`. src = applyPatches { @@ -29,7 +29,7 @@ let owner = "Radarr"; repo = "Radarr"; tag = "v${version}"; - hash = "sha256-gDEMahF0uhwlOisD0gWzY3M17mXftKBm9gN5Uaatqsk="; + hash = "sha256-1CAcsqhdAH2dOcOMVyIlaqEmCKDwXNUJf3SuVuJEZ7E="; }; postPatch = '' mv src/NuGet.config NuGet.Config From 61d5ebc7c430b02e83f39a5e01ac2a7c1611b2f3 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Jul 2026 11:13:18 +0000 Subject: [PATCH 32/42] firefly-iii-data-importer: 2.3.2 -> 2.3.4 (cherry picked from commit b39b1295f48a93e2d903347cf4642250af5e1cef) --- pkgs/by-name/fi/firefly-iii-data-importer/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/fi/firefly-iii-data-importer/package.nix b/pkgs/by-name/fi/firefly-iii-data-importer/package.nix index d9afbec8e06e..6b6bd3e8eaf4 100644 --- a/pkgs/by-name/fi/firefly-iii-data-importer/package.nix +++ b/pkgs/by-name/fi/firefly-iii-data-importer/package.nix @@ -16,13 +16,13 @@ let in stdenvNoCC.mkDerivation (finalAttrs: { pname = "firefly-iii-data-importer"; - version = "2.3.2"; + version = "2.3.4"; src = fetchFromGitHub { owner = "firefly-iii"; repo = "data-importer"; tag = "v${finalAttrs.version}"; - hash = "sha256-JLN13SCpMXByu3rWSclcsLBGCLFMzHGHOM+bWLJ2MPw="; + hash = "sha256-869oPalwVdc7Ge8zcG6OniTZ6zhLOknlvFQkEHzLg0M="; }; buildInputs = [ php ]; @@ -42,12 +42,12 @@ stdenvNoCC.mkDerivation (finalAttrs: { composerStrictValidation = true; strictDeps = true; - vendorHash = "sha256-QobjMMPEhLvsTwlJJvf4nUi1PcZEDOaU8EzexluOI90="; + vendorHash = "sha256-GEioAwqo9BHzoP4/uetqiQgv+O9Qzqyo/AcW9VP23n0="; npmDeps = fetchNpmDeps { inherit (finalAttrs) src; name = "${finalAttrs.pname}-npm-deps"; - hash = "sha256-NkxCvC0EPMLi7GV5GG1+5niL3KIaqBsleo11/gzaX/s="; + hash = "sha256-FEEC89/7cEuKU4mY27Pm5nr5EkOoL7BWZRAOpCZK61I="; }; composerRepository = php.mkComposerRepository { From d3b3cf523e000a55f8be048d987a49c155efd320 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Janne=20He=C3=9F?= Date: Mon, 13 Jul 2026 14:13:56 +0200 Subject: [PATCH 33/42] switch-to-configuration-ng: Die less This is horrible when logind fails (for any reason) and the services that were stopped already do not get started anymore because stc-ng died. This replaces the die() with the exit code so regular tooling should pick up that something failed without the catastrophic events of services like sshd not running. (cherry picked from commit 309086ac7cb1b574c2fa54cc7ab2b622fced6a37) --- pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs b/pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs index 6dd05161628f..2d582a7d479c 100644 --- a/pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs +++ b/pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs @@ -2381,7 +2381,7 @@ won't take effect until you reboot the system. match logind.list_users() { Err(err) => { eprintln!("Unable to list users with logind: {err}"); - die(); + exit_code = 4; } Ok(users) => { for (uid, name, user_dbus_path) in users { From b77af21c318e29d6af25218894a9b58d2f186676 Mon Sep 17 00:00:00 2001 From: Sergei Trofimovich Date: Sun, 12 Jul 2026 17:43:22 +0100 Subject: [PATCH 34/42] flytectl.tests: fix the eval MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Without the change the eval fails on` master` as: $ nix build --no-link -f. flytectl.tests error: … while calling the 'derivationStrict' builtin at «nix-internal»/derivation-internal.nix:37:12: 36| 37| strict = derivationStrict drvAttrs; | ^ 38| … while evaluating derivation 'flytectl-0.9.8-test-version' whose name attribute is located at pkgs/stdenv/generic/make-derivation.nix:651:11 … while evaluating attribute 'buildCommand' of derivation 'flytectl-0.9.8-test-version' at pkgs/build-support/trivial-builders/default.nix:81:17: 80| enableParallelBuilding = true; 81| inherit buildCommand name; | ^ 82| passAsFile = [ "buildCommand" ] ++ (derivationArgs.passAsFile or [ ]); (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: attribute 'version' missing at pkgs/by-name/fl/flytectl/package.nix:52:19: 51| command = "flytectl version"; 52| version = "v${finalAttrs.src.version}"; | ^ 53| }; (cherry picked from commit fd141a2647a7d0e8506c15b45b61a4af6f96a1ec) --- pkgs/by-name/fl/flytectl/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/fl/flytectl/package.nix b/pkgs/by-name/fl/flytectl/package.nix index fcd4c6abbf41..4a284a00ad29 100644 --- a/pkgs/by-name/fl/flytectl/package.nix +++ b/pkgs/by-name/fl/flytectl/package.nix @@ -49,7 +49,7 @@ buildGoModule (finalAttrs: { passthru.tests.version = testers.testVersion { package = finalAttrs.finalPackage; command = "flytectl version"; - version = "v${finalAttrs.src.version}"; + version = "v${finalAttrs.version}"; }; meta = { From f1ba17f34db384f000d8f21ecf013748f246b184 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Wed, 15 Jul 2026 14:38:28 +0200 Subject: [PATCH 35/42] forgejo: 15.0.4 -> 15.0.5 Release notes: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.5.md Security announcement: https://codeberg.org/forgejo/security-announcements/issues/56 Diff: https://codeberg.org/forgejo/forgejo/compare/v15.0.4...v15.0.5 See also: https://codeberg.org/forgejo/forgejo/releases/tag/v15.0.5 (cherry picked from commit 31833bb654f2778f8de6b78ebce5c25aed5e4c63) --- pkgs/by-name/fo/forgejo/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/fo/forgejo/package.nix b/pkgs/by-name/fo/forgejo/package.nix index 29c9b2a22a96..474e72baff85 100644 --- a/pkgs/by-name/fo/forgejo/package.nix +++ b/pkgs/by-name/fo/forgejo/package.nix @@ -1,6 +1,6 @@ import ./generic.nix { - version = "15.0.4"; - hash = "sha256-8AMq5CT4q7aaF5gj9d5+JINp5rrI5U98juI9BA0wVVo="; + version = "15.0.5"; + hash = "sha256-S+x/YEfQrYIzHLnZ7LDLnkMYVN3TajwS7SHydM8uMPQ="; npmDepsHash = "sha256-BZSYjEsjUqMYWu3EUP+K35hqSOniv8Y6ek5bEC2vTPg="; vendorHash = "sha256-00QiJ8W76FdG96fmsIRLkaYlMQTZoIRmRd/qYGyPuig="; lts = true; From 907ca17fcdc0310164922cd16c7dceda03b38fec Mon Sep 17 00:00:00 2001 From: Sapphire Date: Tue, 14 Jul 2026 12:22:04 -0500 Subject: [PATCH 36/42] wivrn: 26.6.1 -> 26.6.2 (cherry picked from commit 3e897f9978f3e29d5265020f64e90f89ce995391) --- pkgs/by-name/wi/wivrn/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/wi/wivrn/package.nix b/pkgs/by-name/wi/wivrn/package.nix index dc157a42d4ff..6f6171c1834b 100644 --- a/pkgs/by-name/wi/wivrn/package.nix +++ b/pkgs/by-name/wi/wivrn/package.nix @@ -56,13 +56,13 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "wivrn"; - version = "26.6.1"; + version = "26.6.2"; src = fetchFromGitHub { owner = "wivrn"; repo = "wivrn"; rev = "v${finalAttrs.version}"; - hash = "sha256-eXU7hYLYchAb6AbCyINfTmOp0NdxK35Kg9tcid2ucg4="; + hash = "sha256-5e0XeP5DCdVrSQeDgNuCZP5McRbwybnpKuJw9cxHNPI="; }; monado = applyPatches { From 241c0a7e6a1ec7d2084d99105bdc3e7fa89842e4 Mon Sep 17 00:00:00 2001 From: Gerhard Schwanzer Date: Wed, 15 Jul 2026 17:13:15 +0200 Subject: [PATCH 37/42] perlPackages.CryptOpenSSLX509: 1.915 -> 2.1.3 https://github.com/dsully/perl-crypt-openssl-x509/blob/2.1.3/Changes.md Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol) (cherry picked from commit b519e653e2b331fba9cf17ac89ae3675a518792a) --- pkgs/top-level/perl-packages.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/top-level/perl-packages.nix b/pkgs/top-level/perl-packages.nix index e2846976d6c4..dfc6aad91108 100644 --- a/pkgs/top-level/perl-packages.nix +++ b/pkgs/top-level/perl-packages.nix @@ -7723,10 +7723,10 @@ with self; CryptOpenSSLX509 = buildPerlPackage { pname = "Crypt-OpenSSL-X509"; - version = "1.915"; + version = "2.1.3"; src = fetchurl { - url = "mirror://cpan/authors/id/J/JO/JONASBN/Crypt-OpenSSL-X509-1.915.tar.gz"; - hash = "sha256-xNvBbE/CloV4I3v8MkWH/9eSSacQFQJlLbnjjUSJUX8="; + url = "mirror://cpan/authors/id/J/JO/JONASBN/Crypt-OpenSSL-X509-2.1.3.tar.gz"; + hash = "sha256-CtllF1dGroRrBRCwOKofltLduMhg/pfOpvvcegVfn54="; }; env.NIX_CFLAGS_COMPILE = "-I${pkgs.openssl.dev}/include"; env.NIX_CFLAGS_LINK = "-L${lib.getLib pkgs.openssl}/lib -lcrypto"; From 4fd15d695a7fdd81589fc2d5398c8b506c82902e Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 15 Jul 2026 15:56:12 +0000 Subject: [PATCH 38/42] linuxKernel.kernels.linux_zen: 7.1.2 -> 7.1.3 (cherry picked from commit 67c199eae839c0a8bb0f45377337e5bb140922e3) --- pkgs/os-specific/linux/kernel/zen-kernels.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/zen-kernels.nix b/pkgs/os-specific/linux/kernel/zen-kernels.nix index 147503fe1c30..6cbfffe22095 100644 --- a/pkgs/os-specific/linux/kernel/zen-kernels.nix +++ b/pkgs/os-specific/linux/kernel/zen-kernels.nix @@ -12,13 +12,13 @@ let # override options if they need using lib.mkForce (that has 50 priority) mkKernelOverride = lib.mkOverride 90; - suffix = "zen1"; + suffix = "zen2"; in buildLinux ( args // rec { - version = "7.1.2"; + version = "7.1.3"; pname = "linux-zen"; modDirVersion = lib.versions.pad 3 "${version}-${suffix}"; isZen = true; @@ -27,7 +27,7 @@ buildLinux ( owner = "zen-kernel"; repo = "zen-kernel"; rev = "v${version}-${suffix}"; - sha256 = "0d02lgwl0x415xrbznsldd7j1krpzlnbd2ciis3shz8zhmbhfg1f"; + sha256 = "0af939wq8gfgwrb4s3jjbkqh2pn3zkgk1w48m0hf5fc0qi8ify8x"; }; # This is based on the following source: From 662378614ee0d2cc92c977fc0b07e55b75bcd71f Mon Sep 17 00:00:00 2001 From: Sarah Clark Date: Wed, 15 Jul 2026 09:40:37 -0700 Subject: [PATCH 39/42] dgraph: 25.3.3 -> 25.3.8 Not-cherry-picked-because: multiple intervening commits --- pkgs/by-name/dg/dgraph/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/dg/dgraph/package.nix b/pkgs/by-name/dg/dgraph/package.nix index 530c08230f09..b2f4a1100b9c 100644 --- a/pkgs/by-name/dg/dgraph/package.nix +++ b/pkgs/by-name/dg/dgraph/package.nix @@ -9,16 +9,16 @@ buildGoModule (finalAttrs: { pname = "dgraph"; - version = "25.3.3"; + version = "25.3.8"; src = fetchFromGitHub { owner = "dgraph-io"; repo = "dgraph"; tag = "v${finalAttrs.version}"; - hash = "sha256-Zkx9dWEWRhUj/hwcgDyH3ikbcvjVHJnALNERunXytag="; + hash = "sha256-RrOlJVkekZ3xWGtjc013YyCycJmlPowVzqrttnZD8BI="; }; - vendorHash = "sha256-I+eLpWdS4Dc3XPbeJ8jlSc/ZIw6yveovcIXnfihke3s="; + vendorHash = "sha256-gD91KGWLqd6a7YkqQSeW1eS2MQI+1/RbI5X1/Xwrz90="; doCheck = false; From 7a097208bd734c9d9b8a48ed6cdd47ccfe76c878 Mon Sep 17 00:00:00 2001 From: networkException Date: Wed, 15 Jul 2026 20:48:01 +0200 Subject: [PATCH 40/42] ungoogled-chromium: 150.0.7871.114-1 -> 150.0.7871.124-1 https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html This update includes 15 security fixes. CVEs: CVE-2026-15764 CVE-2026-15765 CVE-2026-15766 CVE-2026-15767 CVE-2026-15768 CVE-2026-15769 CVE-2026-15770 CVE-2026-15771 CVE-2026-15772 CVE-2026-15773 CVE-2026-15774 CVE-2026-15775 CVE-2026-15776 CVE-2026-15777 CVE-2026-15778 (cherry picked from commit c187e9f688ba32d48a60de75a8f9fbed8b223997) --- .../networking/browsers/chromium/info.json | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/pkgs/applications/networking/browsers/chromium/info.json b/pkgs/applications/networking/browsers/chromium/info.json index c4ef999b274b..33f308b23834 100644 --- a/pkgs/applications/networking/browsers/chromium/info.json +++ b/pkgs/applications/networking/browsers/chromium/info.json @@ -838,7 +838,7 @@ } }, "ungoogled-chromium": { - "version": "150.0.7871.114", + "version": "150.0.7871.124", "deps": { "depot_tools": { "rev": "f4fadaf6a5ba1bced9d3d9021060667b563bf583", @@ -850,16 +850,16 @@ "hash": "sha256-/1A+DkzAQj2zGPe/A/G0Z3VrYJXUxq4Hd/+d/o5p3G8=" }, "ungoogled-patches": { - "rev": "150.0.7871.114-1", - "hash": "sha256-qvAtrj013U44vU+U3JLuItAPbgtHwm9Kq7hU2NLYDaE=" + "rev": "150.0.7871.124-1", + "hash": "sha256-3dwDG3YuX/l5bOLcC3lICM2qmGnwVAPPJraDRaHZSe8=" }, "npmHash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg=" }, "DEPS": { "src": { "url": "https://chromium.googlesource.com/chromium/src.git", - "rev": "f405107495a07cb1bfcf687d4af8d91117098db6", - "hash": "sha256-VdDnFbE+/leFzR/PqR3ColKKqwkvuY/LsFje0nrwiXU=", + "rev": "9261fd0a595ac4964ea84e6bd4a025c1173a2ffa", + "hash": "sha256-YKkZfxFZ7mitD6YqJZW+NQByq71UVb0jCFIBXj0SyzU=", "recompress": true }, "src/third_party/clang-format/script": { @@ -929,8 +929,8 @@ }, "src/third_party/angle": { "url": "https://chromium.googlesource.com/angle/angle.git", - "rev": "8d3c5a8caebd836b99fa32062951a401910eba33", - "hash": "sha256-7X8FSWCA+BpAXbUPvjPyiGagmVXsadRGAY5haAEzRL8=" + "rev": "13e691adf3d4d3ebee2f7239731a07d3b9704956", + "hash": "sha256-fbjREn3D+quRRADGwR7V65BZt5b+1DgnsG4ZMhwGq6o=" }, "src/third_party/angle/third_party/glmark2/src": { "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2", @@ -1389,8 +1389,8 @@ }, "src/third_party/libyuv": { "url": "https://chromium.googlesource.com/libyuv/libyuv.git", - "rev": "3c5fa6ef272f6077d76816ee3d6a697ef1d6d272", - "hash": "sha256-FXFSC9dRb/KhSQdhJUqKEUpZbzU8ZpVnoSXtF/HPiJI=" + "rev": "8aeb3a9ca36341a640528e59b34b5d641080dca8", + "hash": "sha256-FGl0xK7ooaRFzFBxuV6oOu3h1x2b/myLLO2En3xgVCk=" }, "src/third_party/lss": { "url": "https://chromium.googlesource.com/linux-syscall-support.git", @@ -1494,8 +1494,8 @@ }, "src/third_party/skia": { "url": "https://skia.googlesource.com/skia.git", - "rev": "14d05ec761901b6e9e9193af8b347ab3a7f6fed0", - "hash": "sha256-KZGrztOKaT368KSCxiJAqnsgINpNODUlaXnH/maQNIA=" + "rev": "bee4c917220040e147f14964635ff92ce6c5a3f6", + "hash": "sha256-SWmoX+sNaw4KnlTBPt63uBSYfQavJejB3+Vlw/gtWX8=" }, "src/third_party/smhasher/src": { "url": "https://chromium.googlesource.com/external/smhasher.git", @@ -1664,8 +1664,8 @@ }, "src/v8": { "url": "https://chromium.googlesource.com/v8/v8.git", - "rev": "ce0af5c0d181678bcda077c68d4beaec2854ad16", - "hash": "sha256-gjuH2HQAC0poQileS8JLusocBDoShuaQ9pbaAXmFj4g=" + "rev": "209c9cea0db17d8caf23e9d2c7de08c351609744", + "hash": "sha256-3jUyRERu1r+Fl2uSAaRchV2L99XLp8XO9DHctk0lMjY=" }, "src/agents/shared": { "url": "https://chromium.googlesource.com/chromium/agents.git", From 73cd3df9a250d4d15ea130e2180db37473121b6c Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 15 Jul 2026 06:27:00 +0000 Subject: [PATCH 41/42] vicinae: 0.22.3 -> 0.23.1 (cherry picked from commit d7837db4d7ace25bee46c2703f36c656afdbf3c1) --- pkgs/by-name/vi/vicinae/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/vi/vicinae/package.nix b/pkgs/by-name/vi/vicinae/package.nix index 45746fc8744e..c183555b6bff 100644 --- a/pkgs/by-name/vi/vicinae/package.nix +++ b/pkgs/by-name/vi/vicinae/package.nix @@ -21,13 +21,13 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "vicinae"; - version = "0.22.3"; + version = "0.23.1"; src = fetchFromGitHub { owner = "vicinaehq"; repo = "vicinae"; tag = "v${finalAttrs.version}"; - hash = "sha256-1c6rl+PMI61l3H2a8Ks1qbFGW2psHs0FamJd/Vzq6NY="; + hash = "sha256-qFDb6I9w9F/KfRVHmwezykv7y/Tb8BjJQD2v5AxlEfU="; }; apiDeps = fetchNpmDeps { From 9c24429f50a481cc8da0ad996c7b74fa3b849ee0 Mon Sep 17 00:00:00 2001 From: Marc Bornand Date: Wed, 15 Jul 2026 16:45:49 +0000 Subject: [PATCH 42/42] librewolf-unwrapped: 152.0.5-1 -> 152.0.6-1 (cherry picked from commit fff21ef8f43ee1d2e339eaf00dd3f8debf8876f5) --- pkgs/by-name/li/librewolf-unwrapped/src.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json index ee4e908f7de4..bcc4927bcbc6 100644 --- a/pkgs/by-name/li/librewolf-unwrapped/src.json +++ b/pkgs/by-name/li/librewolf-unwrapped/src.json @@ -1,11 +1,11 @@ { - "packageVersion": "152.0.5-1", + "packageVersion": "152.0.6-1", "source": { - "rev": "152.0.5-1", - "hash": "sha256-5f/JkPWOUlfxND9JrPJv9j7UZvfndxi5vLPWZNJwHzk=" + "rev": "152.0.6-1", + "hash": "sha256-O5s1t/ZZVYL/9ik4zyi/kKAQEbSERO6vD1NJzEUmnU4=" }, "firefox": { - "version": "152.0.5", - "hash": "sha512-bPLcfyimo0MPKGbfTKNQY8ut8jTIKjT6ZR4C2QnldB5QzZhv7xvZfUhrUSRMtjmysQNRRog0e/f5T9FtJkzE8g==" + "version": "152.0.6", + "hash": "sha512-xNh3g31wB/thHDjUnZtt07xMXJypALVOci4UDOfs0JJPabXO3H+MH+YC5+/h1xWbAZ3ieZnikjXNYxghuxPmsA==" } }