From 893201e8a7d4b63fd1c9e5a050a9de288524b2c0 Mon Sep 17 00:00:00 2001 From: Sapphire Date: Sun, 9 Aug 2026 03:02:05 -0500 Subject: [PATCH 01/25] wivrn: enable building debug information (cherry picked from commit 9d84278364f097eb170070e5a5fca98cccfaa287) --- pkgs/by-name/wi/wivrn/package.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/by-name/wi/wivrn/package.nix b/pkgs/by-name/wi/wivrn/package.nix index 6f6171c1834b..afe0bd5fb98d 100644 --- a/pkgs/by-name/wi/wivrn/package.nix +++ b/pkgs/by-name/wi/wivrn/package.nix @@ -177,6 +177,7 @@ stdenv.mkDerivation (finalAttrs: { ]; dontWrapQtApps = true; + separateDebugInfo = true; preFixup = lib.optional (!clientLibOnly) '' wrapProgram "$out/bin/wivrn-server" \ From fbc243e68b31ee095c22128c8cb4ae7d5319a5b9 Mon Sep 17 00:00:00 2001 From: Sapphire Date: Sun, 9 Aug 2026 19:52:57 -0500 Subject: [PATCH 02/25] nixos/wivrn: remove unnecessary default service environment variables XRT_COMPOSITOR_LOG=debug is particularly annoying, since it causes a lot of log spam every frame. (cherry picked from commit 13a8f1e55a334a01a6a3d09eeb045d625f1b5059) --- nixos/modules/services/video/wivrn.nix | 5 ----- 1 file changed, 5 deletions(-) diff --git a/nixos/modules/services/video/wivrn.nix b/nixos/modules/services/video/wivrn.nix index 82e356d419d4..a47829280346 100644 --- a/nixos/modules/services/video/wivrn.nix +++ b/nixos/modules/services/video/wivrn.nix @@ -189,11 +189,6 @@ in wivrn = { description = "WiVRn XR runtime service"; environment = recursiveUpdate { - # Default options - # https://gitlab.freedesktop.org/monado/monado/-/blob/598080453545c6bf313829e5780ffb7dde9b79dc/src/xrt/targets/service/monado.in.service#L12 - XRT_COMPOSITOR_LOG = "debug"; - XRT_PRINT_OPTIONS = "on"; - IPC_EXIT_ON_DISCONNECT = "off"; PRESSURE_VESSEL_IMPORT_OPENXR_1_RUNTIMES = mkIf cfg.steam.importOXRRuntimes "1"; } cfg.monadoEnvironment; # WiVRn scans for .desktop files in $XDG_DATA_DIRS for the application launcher, From 599cbfe8ccdc7029962c8f4ab613fed8774b4481 Mon Sep 17 00:00:00 2001 From: Ihar Hrachyshka Date: Sat, 12 Sep 2026 16:30:17 -0400 Subject: [PATCH 03/25] jellyfin: miscellaneous security fixes from 12.0 These go directly to 26.05 because master is on 12.0 which has all the fixes. Jellyfin team is not going to release another 10.11.x version. Hence these backports. Only one patch is marked with a GHSA marker, and none are currently listed in their official roster. Which doesn't mean much since the project practices a 14-day delay for disclosures. https://github.com/jellyfin/jellyfin/security#post-disclosure-process Two fixed scenarios require an authenticated user (one bug allows to SSRF or DoS with a SVG file; another allows a user to read others' private playlists). Another patch fixes max limit for login attempts, which was broken in 10.11.11. Not-cherry-picked-because: master is on 12.0 and has the fixes. --- .../je/jellyfin/fix-playlist-visibility.patch | 26 +++++++++++++++++ pkgs/by-name/je/jellyfin/package.nix | 29 +++++++++++++++++++ 2 files changed, 55 insertions(+) create mode 100644 pkgs/by-name/je/jellyfin/fix-playlist-visibility.patch diff --git a/pkgs/by-name/je/jellyfin/fix-playlist-visibility.patch b/pkgs/by-name/je/jellyfin/fix-playlist-visibility.patch new file mode 100644 index 000000000000..86dd4f629243 --- /dev/null +++ b/pkgs/by-name/je/jellyfin/fix-playlist-visibility.patch @@ -0,0 +1,26 @@ +From 5f13afa1cecfae398ff7d84ed89fc45b14b71c61 Mon Sep 17 00:00:00 2001 +From: Shadowghost +Date: Thu, 4 Jun 2026 19:00:03 +0200 +Subject: [PATCH] Fix playlist visibility + +--- + MediaBrowser.Controller/Entities/Folder.cs | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) + +diff --git a/MediaBrowser.Controller/Entities/Folder.cs b/MediaBrowser.Controller/Entities/Folder.cs +--- a/MediaBrowser.Controller/Entities/Folder.cs ++++ b/MediaBrowser.Controller/Entities/Folder.cs +@@ -811,7 +811,10 @@ namespace MediaBrowser.Controller.Entities + + private bool RequiresPostFiltering2(InternalItemsQuery query) + { +- if (query.IncludeItemTypes.Length == 1 && query.IncludeItemTypes[0] == BaseItemKind.BoxSet) ++ // BoxSets and Playlists can have per-user visibility (shares/open access) that is stored in the ++ // serialized item data and cannot be evaluated by the database query, so filter them in memory. ++ if (query.IncludeItemTypes.Length > 0 ++ && query.IncludeItemTypes.All(t => t == BaseItemKind.BoxSet || t == BaseItemKind.Playlist)) + { + Logger.LogDebug("Query requires post-filtering due to BoxSet query"); + return true; +-- +2.51.0 diff --git a/pkgs/by-name/je/jellyfin/package.nix b/pkgs/by-name/je/jellyfin/package.nix index 15505b3a49a6..d0dabbd88fc7 100644 --- a/pkgs/by-name/je/jellyfin/package.nix +++ b/pkgs/by-name/je/jellyfin/package.nix @@ -1,6 +1,7 @@ { lib, fetchFromGitHub, + fetchpatch, nixosTests, dotnetCorePackages, buildDotnetModule, @@ -23,6 +24,34 @@ buildDotnetModule (finalAttrs: { hash = "sha256-HCs4ZsutVoVH+bBZANjpPeMyV8e63Yemjg9DSr0R9zg="; }; + patches = [ + # Prevent SSRF, local file disclosure and DoS via external references in SVG rendering. + # (No public PR.) + (fetchpatch { + url = "https://github.com/jellyfin/jellyfin/commit/cefa78fc1de2410e5c5c6da5062c98fe98b22d17.patch"; + hash = "sha256-TxGo+sLLG+C9omxrwvO6byzw+iRqONVLXrQKwkrY22s="; + }) + + # Fix MaxLoginAttempts not honored. + # https://github.com/jellyfin/jellyfin/pull/17274 + (fetchpatch { + url = "https://github.com/jellyfin/jellyfin/commit/8b826d981bcfec22063d6008e38016f4b77790d0.patch"; + hash = "sha256-Nav05TcpjBJABybU0BVyJ0UyxKi+6nDNBQ6tjY0DPT8="; + }) + + # GHSA-9x85-gx46-6522 + # Reject user impersonation when retrieving private playlist items. + # (No public PR.) + (fetchpatch { + url = "https://github.com/jellyfin/jellyfin/commit/911ac3769cdcce50a8f6e0b3c0739d509bd9a23f.patch"; + hash = "sha256-MwaTwqhuBc7yWW3cL6htlyDQ9O1wt5iFCOM/oVTi6P0="; + }) + + # Don't let unauthorized users to list other's private playlists. + # https://github.com/jellyfin/jellyfin/pull/17025 + ./fix-playlist-visibility.patch + ]; + propagatedBuildInputs = [ sqlite ]; projectFile = "Jellyfin.Server/Jellyfin.Server.csproj"; From 46312db93f0740f11dd0d0543c82658fec09b69b Mon Sep 17 00:00:00 2001 From: Morgan Jones Date: Thu, 17 Sep 2026 20:12:37 -0700 Subject: [PATCH 04/25] mattermost: 11.7.8 -> 11.7.11 (cherry picked from commit 266f1f55c2d7299537bb72e476fe05c223dd65b6) --- pkgs/by-name/ma/mattermost/package.nix | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/ma/mattermost/package.nix b/pkgs/by-name/ma/mattermost/package.nix index 5bc84ef7a38c..6484879c2cfa 100644 --- a/pkgs/by-name/ma/mattermost/package.nix +++ b/pkgs/by-name/ma/mattermost/package.nix @@ -27,10 +27,13 @@ # # Ensure you also check ../mattermostLatest/package.nix. regex = "^v(11\\.7\\.[0-9]+)$"; - version = "11.7.8"; - srcHash = "sha256-HH+LioMTxu0+VLr6+fpa/O9YduChIF0ieSgMBaS91uc="; - vendorHash = "sha256-FytvnZcPStztvUJLEnC3DUeyhmYWKP+/8xqv4suDZNE="; - npmDepsHash = "sha256-d1X33SV0c1l0e9fCIWEx7opeWByyovj0zNs+aGddRJc="; + version = "11.7.11"; + srcHash = "sha256-C0t/PITQ1R4VRHQk+bQE8GPfdy5GjxLsHtRgYq6qgSw="; + vendorHash = "sha256-V63mY8za59WOI7dk8wMuHxWs2cs2rfZ9Ubpm5O+KMYU="; + npmDepsHash = "sha256-mK5wrX9dWDC+8dn/J7E1EOiwHekAzt5yQCJ8xqfKa3g="; + lockfileOverlay = '' + .packages["node_modules/rollup"] |= (del(.resolved, .integrity) | .version = "2.80.0") + ''; }, ... }: @@ -257,7 +260,7 @@ buildMattermost rec { # See: https://github.com/tcoopman/image-webpack-loader#deprecated postPatch = '' substituteInPlace channels/webpack.config.js \ - --replace-fail 'options: {}' 'options: { disable: true }' + --replace-quiet 'options: {}' 'options: { disable: true }' ''; inherit nodejs; From 029283aa5fb0c6e6de3950d7b3a4bfe993c483b5 Mon Sep 17 00:00:00 2001 From: Morgan Jones Date: Thu, 17 Sep 2026 20:13:12 -0700 Subject: [PATCH 05/25] mattermostLatest: 11.8.3 -> 11.10.2 (cherry picked from commit 1d3811f7650d5e0708d0a34241ef572c4eaca75a) --- pkgs/by-name/ma/mattermostLatest/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/ma/mattermostLatest/package.nix b/pkgs/by-name/ma/mattermostLatest/package.nix index 81bb48d30b17..f2fe65c4dd78 100644 --- a/pkgs/by-name/ma/mattermostLatest/package.nix +++ b/pkgs/by-name/ma/mattermostLatest/package.nix @@ -15,10 +15,10 @@ mattermost.override ( # and make sure the version regex is up to date here. # Ensure you also check ../mattermost/package.nix for ESR releases. regex = "^v(11\\.[0-9]+\\.[0-9]+)$"; - version = "11.8.3"; - srcHash = "sha256-OWHW6UifUljL+yyWtc5XD/spbn7Yu1FqZ8gQAs073gY="; - vendorHash = "sha256-F2QMrLbio7812ZTGQZZPTqHWtIXbwbDmjUhtvv0DJ9s="; - npmDepsHash = "sha256-C8L5g+HY5aArLJzPbw3fESvA+U4JK1OQFWA4wwaan1M="; + version = "11.10.2"; + srcHash = "sha256-d4sOH9L2vawyiRLXIhZLzEqExiYbrdy/h0v4GZW7DNc="; + vendorHash = "sha256-k3JPDzrZzLeKb20o2aLZR/TX7dN7nhpQs6UZ5olvV94="; + npmDepsHash = "sha256-jDGUbBwxjZ50bbbnUJVMCzKJMlHYhUKy7Be9zsWjMqg="; autoUpdate = ./package.nix; }; } From 959885609024cc3b3511d74d0bf63bd05b013ab9 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 15 Sep 2026 03:55:32 +0000 Subject: [PATCH 06/25] nsncd: 1.5.2 -> 1.5.3 (cherry picked from commit c3f5869af0ac24cf93821b80ce2ef7cde017d60b) --- pkgs/by-name/ns/nsncd/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ns/nsncd/package.nix b/pkgs/by-name/ns/nsncd/package.nix index 76a044ea6c39..69ec6084f378 100644 --- a/pkgs/by-name/ns/nsncd/package.nix +++ b/pkgs/by-name/ns/nsncd/package.nix @@ -8,7 +8,7 @@ }: let - version = "1.5.2"; + version = "1.5.3"; in rustPlatform.buildRustPackage { @@ -19,10 +19,10 @@ rustPlatform.buildRustPackage { owner = "twosigma"; repo = "nsncd"; tag = "v${version}"; - hash = "sha256-HNg2pf6dUQW95B8x/xWa53+GZVWzpTMRVeqWT3dp/M8="; + hash = "sha256-CyZlvyD8PDPxnIGoQrOvx++GLNBatqfM9c+Ekt0PXHs="; }; - cargoHash = "sha256-kjxRhrgKPLCKWc3/gOvdcmQX7IdxFLuwcV7DRZIte78="; + cargoHash = "sha256-MC/WMnBrUr16tOhtP9ueHNLb2cLT8o3A6kwWOWLvFPk="; checkFlags = [ # Relies on the test environment to be able to resolve "localhost" From 87d5020edbecf81911c2b4ac17c2b1438e711ac5 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 18 Sep 2026 12:46:53 +0000 Subject: [PATCH 07/25] ripdrag: 0.4.12 -> 0.4.13 (cherry picked from commit bde791912cc8c2a4a974c9ef3c0e8aa3ad35162d) --- pkgs/by-name/ri/ripdrag/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ri/ripdrag/package.nix b/pkgs/by-name/ri/ripdrag/package.nix index 486887ccc03d..84f1330183cb 100644 --- a/pkgs/by-name/ri/ripdrag/package.nix +++ b/pkgs/by-name/ri/ripdrag/package.nix @@ -11,16 +11,16 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "ripdrag"; - version = "0.4.12"; + version = "0.4.13"; src = fetchFromGitHub { owner = "nik012003"; repo = "ripdrag"; tag = "v${finalAttrs.version}"; - hash = "sha256-syirR3t3AxThwIPMviGaSeXpDz2ApDGZOozPJ5bGEt4="; + hash = "sha256-zpfT/nMy+sndDg3RWjbJ3ZxyBWoCst+cA+GKUBCTd1g="; }; - cargoHash = "sha256-/OczChiDDK6Y2CxpjfgWkTwweKe4FVpOMlsB+qMp/r8="; + cargoHash = "sha256-JitYn3SDCG/1UG2FZyGbhvXqTUJ/g977IBK84pgDcNw="; nativeBuildInputs = [ pkg-config From fa0ba36c06d1c7cec60a3e997e1867c269f2354d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Forsman?= Date: Fri, 18 Sep 2026 09:06:53 +0200 Subject: [PATCH 08/25] Revert "jellyfin-desktop: fix video playback" This reverts commit 52d502602a07a4d5fe3201733dbf99ef35396cef. The workaround is not needed anymore, since commit 42cfbb8ab7cf8bf2a446395125328393067addb4 ("qt6: 6.11.1 -> 6.11.2"). (cherry picked from commit 52140733ff402b12cbb4c6308bba26c973d5ed5c) --- pkgs/by-name/je/jellyfin-desktop/package.nix | 2 -- 1 file changed, 2 deletions(-) diff --git a/pkgs/by-name/je/jellyfin-desktop/package.nix b/pkgs/by-name/je/jellyfin-desktop/package.nix index 4a2c0f1251aa..0c62dc24ed2d 100644 --- a/pkgs/by-name/je/jellyfin-desktop/package.nix +++ b/pkgs/by-name/je/jellyfin-desktop/package.nix @@ -63,8 +63,6 @@ stdenv.mkDerivation (finalAttrs: { qtWrapperArgs = [ "--set QT_STYLE_OVERRIDE Fusion" "--set NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt" - # Disable hardware acceleration to fix severe flickering in video playback. - "--set-default QTWEBENGINE_FORCE_USE_GBM 0" ]; postInstall = lib.optionalString stdenv.hostPlatform.isDarwin '' From 3604ae52e362c12dee15c88bef02f29e18d635dd Mon Sep 17 00:00:00 2001 From: phanirithvij Date: Wed, 9 Sep 2026 16:44:13 +0530 Subject: [PATCH 09/25] python3Packages.django-cacheops: fix and modernize Signed-off-by: phanirithvij (cherry picked from commit 47b475d33a8ce99f041c692b111ce72f4555b514) --- .../Support-Python-3.14-pickle-changes.patch | 33 +++++++++++++++++++ .../django-cacheops/default.nix | 24 +++++++++----- 2 files changed, 49 insertions(+), 8 deletions(-) create mode 100644 pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch diff --git a/pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch b/pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch new file mode 100644 index 000000000000..6dbd3584cd94 --- /dev/null +++ b/pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch @@ -0,0 +1,33 @@ +From 938f8ba11c0676a1b9090c1cf788321ec24979e6 Mon Sep 17 00:00:00 2001 +From: Steve Kowalik +Date: Fri, 29 May 2026 12:00:23 +1000 +Subject: [PATCH] Support Python 3.14 pickle changes + +pickle.dump() and friends in Python 3.14 will now raise PicklingError +rather than AttributeError when they encounter something that can not be +pickled, extend test_385 to handle both exceptions. +--- + tests/tests.py | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/tests/tests.py b/tests/tests.py +index f99f8e26..5ad67a55 100644 +--- a/tests/tests.py ++++ b/tests/tests.py +@@ -2,6 +2,7 @@ + from functools import reduce + import operator + import re ++from pickle import PicklingError + import platform + import unittest + from unittest import mock +@@ -659,7 +660,7 @@ def test_366(self): + def test_385(self): + Client.objects.create(name='Client Name') + +- with self.assertRaisesRegex(AttributeError, "local object"): ++ with self.assertRaisesRegex((AttributeError, PicklingError), "local object"): + Client.objects.filter(name='Client Name').cache().first() + + invalidate_model(Client) diff --git a/pkgs/development/python-modules/django-cacheops/default.nix b/pkgs/development/python-modules/django-cacheops/default.nix index f0c7d41d02a5..e79a028654f5 100644 --- a/pkgs/development/python-modules/django-cacheops/default.nix +++ b/pkgs/development/python-modules/django-cacheops/default.nix @@ -1,7 +1,8 @@ { lib, buildPythonPackage, - fetchPypi, + fetchFromGitHub, + fetchpatch, django, funcy, redis, @@ -18,17 +19,24 @@ setuptools, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "django-cacheops"; version = "7.2"; pyproject = true; - src = fetchPypi { - pname = "django_cacheops"; - inherit version; - hash = "sha256-y8EcwDISlaNkTie8smlA8Iy5wucdPuUGy8/wvdoanzM="; + src = fetchFromGitHub { + owner = "Suor"; + repo = "django-cacheops"; + tag = finalAttrs.version; + hash = "sha256-o0QPBfoYZzBPMjDQt8ck2Tkx3qInyfnN88buire0yc4="; }; + patches = [ + # Fixes failure with python3.14 pickle changes + # https://github.com/Suor/django-cacheops/pull/511 + ./Support-Python-3.14-pickle-changes.patch + ]; + pythonRelaxDeps = [ "funcy" ]; build-system = [ setuptools ]; @@ -59,8 +67,8 @@ buildPythonPackage rec { meta = { description = "Slick ORM cache with automatic granular event-driven invalidation for Django"; homepage = "https://github.com/Suor/django-cacheops"; - changelog = "https://github.com/Suor/django-cacheops/blob/${version}/CHANGELOG"; + changelog = "https://github.com/Suor/django-cacheops/blob/${finalAttrs.version}/CHANGELOG"; license = lib.licenses.bsd3; maintainers = with lib.maintainers; [ onny ]; }; -} +}) From 05b18141b08c0a62862f063359e69906df2e0cc2 Mon Sep 17 00:00:00 2001 From: OPNA2608 Date: Sun, 20 Sep 2026 23:15:52 +0200 Subject: [PATCH 10/25] miracle-wm,nixosTests.miracle-wm: Remove OPNA2608 from meta.maintainers Multiple PRs have commits co-authored by Claude, but co-authorship gets squashed away on merge. No thanks! (cherry picked from commit ac82dac1babe91276986b6dc90fd78cab7094c42) --- nixos/tests/miracle-wm.nix | 2 +- pkgs/by-name/mi/miracle-wm/package.nix | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nixos/tests/miracle-wm.nix b/nixos/tests/miracle-wm.nix index 1ee8f42e69e5..cb51baba5d2a 100644 --- a/nixos/tests/miracle-wm.nix +++ b/nixos/tests/miracle-wm.nix @@ -3,7 +3,7 @@ name = "miracle-wm"; meta = { - maintainers = with lib.maintainers; [ OPNA2608 ]; + maintainers = [ ]; }; nodes.machine = diff --git a/pkgs/by-name/mi/miracle-wm/package.nix b/pkgs/by-name/mi/miracle-wm/package.nix index 60c081829495..a02c9d63c2f7 100644 --- a/pkgs/by-name/mi/miracle-wm/package.nix +++ b/pkgs/by-name/mi/miracle-wm/package.nix @@ -136,7 +136,7 @@ stdenv.mkDerivation (finalAttrs: { changelog = "https://github.com/miracle-wm-org/miracle-wm/releases/tag/v${finalAttrs.version}"; license = lib.licenses.gpl3Only; mainProgram = "miracle-wm"; - maintainers = with lib.maintainers; [ OPNA2608 ]; + maintainers = [ ]; platforms = lib.platforms.linux; }; }) From c15ba2553eb924b8260b4b26244f433eefbde94d Mon Sep 17 00:00:00 2001 From: davidodenwald Date: Sun, 16 Aug 2026 23:36:23 +0200 Subject: [PATCH 11/25] shotwell: Fix missing SVG icons Shotwell relies on gdk-pixbuf to render SVG icons, but was missing the librsvg loader at runtime. Adding librsvg to the extraLoaders fixes this issue. (cherry picked from commit eb55aa40b7106ce0bbfdbb2daf2acfd5c372a4f7) --- pkgs/by-name/sh/shotwell/package.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/by-name/sh/shotwell/package.nix b/pkgs/by-name/sh/shotwell/package.nix index 491773b9b6f5..60c5e761cb40 100644 --- a/pkgs/by-name/sh/shotwell/package.nix +++ b/pkgs/by-name/sh/shotwell/package.nix @@ -93,6 +93,7 @@ stdenv.mkDerivation (finalAttrs: { gnome._gdkPixbufCacheBuilder_DO_NOT_USE { extraLoaders = [ libheif.lib + librsvg ]; } }" From 5e463920c87db9893ba9ca20bf2f4fa77604c072 Mon Sep 17 00:00:00 2001 From: Jack Boykin Date: Mon, 21 Sep 2026 01:18:34 -0500 Subject: [PATCH 12/25] linux_testing: 7.3-rc3 -> 7.3-rc4 (cherry picked from commit e9603fce1733ea5f9e6737186216d80315448835) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 66976d48fd8d..7d772f29e59b 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -1,7 +1,7 @@ { "testing": { - "version": "7.3-rc3", - "hash": "sha256:0zrdl82lfs3jxbx9gfi9klaq5078r18277bhikxyibx0mq78ykax", + "version": "7.3-rc4", + "hash": "sha256:0bsd7w8xsd06g1kf5ildf6jnsryk5s2w5838ihp3237fh2sz8agr", "lts": false }, "6.1": { From 11d80c310922bfc035bf935b291c3adfd9636486 Mon Sep 17 00:00:00 2001 From: ILoveScratch Date: Mon, 21 Sep 2026 19:23:04 +0800 Subject: [PATCH 13/25] openlist: fix GitAuthor email (cherry picked from commit 94bd8dbcec9675afc1c4a603db5bfc53fa3696d9) --- pkgs/by-name/op/openlist/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/op/openlist/package.nix b/pkgs/by-name/op/openlist/package.nix index 29dd2c9d029a..9d7d074d9279 100644 --- a/pkgs/by-name/op/openlist/package.nix +++ b/pkgs/by-name/op/openlist/package.nix @@ -50,7 +50,7 @@ buildGoModule (finalAttrs: { ldflags = [ "-s" - "-X \"github.com/OpenListTeam/OpenList/v4/internal/conf.GitAuthor=The OpenList Projects Contributors \"" + "-X \"github.com/OpenListTeam/OpenList/v4/internal/conf.GitAuthor=The OpenList Projects Contributors \"" "-X github.com/OpenListTeam/OpenList/v4/internal/conf.Version=${finalAttrs.version}" "-X github.com/OpenListTeam/OpenList/v4/internal/conf.WebVersion=${finalAttrs.frontend.version}" ]; From 95419a96602d2c0c291ced5049763a517e0111ce Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 30 Aug 2026 23:58:39 +0000 Subject: [PATCH 14/25] teams-for-linux: 2.17.1 -> 2.18.1 (cherry picked from commit 91dfdd770249d6452a5957cbe7d43bd44fb42004) --- pkgs/by-name/te/teams-for-linux/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/te/teams-for-linux/package.nix b/pkgs/by-name/te/teams-for-linux/package.nix index 2d31d5a5d09e..5d206a493679 100644 --- a/pkgs/by-name/te/teams-for-linux/package.nix +++ b/pkgs/by-name/te/teams-for-linux/package.nix @@ -19,16 +19,16 @@ let in buildNpmPackage rec { pname = "teams-for-linux"; - version = "2.17.1"; + version = "2.18.1"; src = fetchFromGitHub { owner = "IsmaelMartinez"; repo = "teams-for-linux"; tag = "v${version}"; - hash = "sha256-qI8+QqnrkGmQGweMcfyaXQnjNMf4htJAF9Gk97zL9jg="; + hash = "sha256-dKTsilBu57Z8XcoyiviuOW/jfIqnbfiBZFl2hpvaiIc="; }; - npmDepsHash = "sha256-wPHap85tS3JrN4ei/HRYyzwFfVFcPkBdbY5ViEk4bwE="; + npmDepsHash = "sha256-/1CPHy+gBVc79GYLAlfzSEOckM7UxyFblBQO9lZoMTw="; nativeBuildInputs = [ makeWrapper From 9df878d13e69df1b0b65bdf35b2f8ddf173153d1 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Thu, 10 Sep 2026 22:39:25 +0000 Subject: [PATCH 15/25] teams-for-linux: 2.18.1 -> 2.20.0 (cherry picked from commit b67fe803f97214ac6bc21949ce750da12bd11831) --- pkgs/by-name/te/teams-for-linux/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/te/teams-for-linux/package.nix b/pkgs/by-name/te/teams-for-linux/package.nix index 5d206a493679..e80eee9833f0 100644 --- a/pkgs/by-name/te/teams-for-linux/package.nix +++ b/pkgs/by-name/te/teams-for-linux/package.nix @@ -19,16 +19,16 @@ let in buildNpmPackage rec { pname = "teams-for-linux"; - version = "2.18.1"; + version = "2.20.0"; src = fetchFromGitHub { owner = "IsmaelMartinez"; repo = "teams-for-linux"; tag = "v${version}"; - hash = "sha256-dKTsilBu57Z8XcoyiviuOW/jfIqnbfiBZFl2hpvaiIc="; + hash = "sha256-KWvoms7O5rvfbeI13YvGIyIUZ8FAwN8XznUMYlHVA8E="; }; - npmDepsHash = "sha256-/1CPHy+gBVc79GYLAlfzSEOckM7UxyFblBQO9lZoMTw="; + npmDepsHash = "sha256-1wFoapw/bQ/+9QbT/ky+bKj/hwYh4dSiWvKCTBisgrQ="; nativeBuildInputs = [ makeWrapper From 438050ae05c1262ea48dd6bc3334b01756a5ec03 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 21 Sep 2026 01:35:28 +0000 Subject: [PATCH 16/25] teams-for-linux: 2.20.0 -> 2.22.0 (cherry picked from commit 35240b8197f9072804e3f96ffc1d4f500d3a1cf3) --- pkgs/by-name/te/teams-for-linux/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/te/teams-for-linux/package.nix b/pkgs/by-name/te/teams-for-linux/package.nix index e80eee9833f0..6a5818904bb9 100644 --- a/pkgs/by-name/te/teams-for-linux/package.nix +++ b/pkgs/by-name/te/teams-for-linux/package.nix @@ -19,16 +19,16 @@ let in buildNpmPackage rec { pname = "teams-for-linux"; - version = "2.20.0"; + version = "2.22.0"; src = fetchFromGitHub { owner = "IsmaelMartinez"; repo = "teams-for-linux"; tag = "v${version}"; - hash = "sha256-KWvoms7O5rvfbeI13YvGIyIUZ8FAwN8XznUMYlHVA8E="; + hash = "sha256-FcAYtEX6SjXeJfxwCq9uSD2dOJt+WkBTQnP+SmSy5bY="; }; - npmDepsHash = "sha256-1wFoapw/bQ/+9QbT/ky+bKj/hwYh4dSiWvKCTBisgrQ="; + npmDepsHash = "sha256-t5Mz3X/VnMmEuy/dGJC17/Wk8WwLdmF0rVQ445T5YP4="; nativeBuildInputs = [ makeWrapper From ed8ef9dc258eafd5555b986f0b43c65da6f65ce1 Mon Sep 17 00:00:00 2001 From: Charlotte Van Petegem Date: Mon, 21 Sep 2026 14:13:08 +0200 Subject: [PATCH 17/25] teams-for-linux: change electron used to 43 (cherry picked from commit 42d02f06e4e15f5ceffb1cde3f88d612b2cf1f1d) --- pkgs/by-name/te/teams-for-linux/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/te/teams-for-linux/package.nix b/pkgs/by-name/te/teams-for-linux/package.nix index 6a5818904bb9..99d77cfef518 100644 --- a/pkgs/by-name/te/teams-for-linux/package.nix +++ b/pkgs/by-name/te/teams-for-linux/package.nix @@ -5,7 +5,7 @@ fetchFromGitHub, alsa-utils, copyDesktopItems, - electron_42, + electron_43, libicns, makeDesktopItem, makeWrapper, @@ -15,7 +15,7 @@ }: let - electron = electron_42; + electron = electron_43; in buildNpmPackage rec { pname = "teams-for-linux"; From c6c9fc7a1005f31cd8ed8bc0d6ab72d802f5e88c Mon Sep 17 00:00:00 2001 From: Sigmanificient Date: Sun, 20 Sep 2026 19:37:04 +0200 Subject: [PATCH 18/25] python3Packages.qtile-extras: 0.37.0 -> 0.37.1 (cherry picked from commit ce2c0b681ad4c55deeedddd2d91a5d229b9b196c) --- pkgs/development/python-modules/qtile-extras/default.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/qtile-extras/default.nix b/pkgs/development/python-modules/qtile-extras/default.nix index af7da608945f..3eb1042bd82b 100644 --- a/pkgs/development/python-modules/qtile-extras/default.nix +++ b/pkgs/development/python-modules/qtile-extras/default.nix @@ -23,7 +23,8 @@ }: buildPythonPackage (finalAttrs: { pname = "qtile-extras"; - version = "0.36.0"; + version = "0.37.1"; + # nixpkgs-update: no auto update # should be updated alongside with `qtile` pyproject = true; @@ -32,7 +33,7 @@ buildPythonPackage (finalAttrs: { owner = "elParaguayo"; repo = "qtile-extras"; tag = "v${finalAttrs.version}"; - hash = "sha256-H2A5Y+ukTkUqjQB5eQVuOMYpf7T8RgQlNlQ25wlWwr8="; + hash = "sha256-sR/+Nmd/reMSi2Cu3WBKgsBsTmNiNWsFsEhap2YHqF4="; }; build-system = [ setuptools-scm ]; From 586712108986d4d73759e1b8223c4c0876adc4cc Mon Sep 17 00:00:00 2001 From: lavecat Date: Sun, 20 Sep 2026 14:55:54 +0200 Subject: [PATCH 19/25] python3Packages.qtile: 0.37.0 -> 0.37.1 (cherry picked from commit cddbaca6374bdfb38843f34f01946e175e1ecf17) --- pkgs/development/python-modules/qtile/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/qtile/default.nix b/pkgs/development/python-modules/qtile/default.nix index 810d15edb074..5e9b88b8b5fb 100644 --- a/pkgs/development/python-modules/qtile/default.nix +++ b/pkgs/development/python-modules/qtile/default.nix @@ -71,7 +71,7 @@ buildPythonPackage (finalAttrs: { pname = "qtile"; - version = "0.36.0"; + version = "0.37.1"; # nixpkgs-update: no auto update # should be updated alongside with `qtile-extras` @@ -81,7 +81,7 @@ buildPythonPackage (finalAttrs: { owner = "qtile"; repo = "qtile"; tag = "v${finalAttrs.version}"; - hash = "sha256-yFh9h3djV52zdZjPYwOWaMzN9ZNhFdZYyxFJreoJBCk="; + hash = "sha256-n45e5/XvzKjH/ehatDPA+UWIlaiwSUhYnoPQOb5cLnA="; }; build-system = [ From 5057d2c47e6f040739621ec093d43a7055bed07b Mon Sep 17 00:00:00 2001 From: Sigmanificient Date: Sun, 20 Sep 2026 19:34:24 +0200 Subject: [PATCH 20/25] python3Packages.qtile: rename desktop file to match session (cherry picked from commit 8ebc2966aefc7e102cd6f87bd6ec2f5a7ba93de3) --- pkgs/development/python-modules/qtile/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/qtile/default.nix b/pkgs/development/python-modules/qtile/default.nix index 5e9b88b8b5fb..c51c2c0f5559 100644 --- a/pkgs/development/python-modules/qtile/default.nix +++ b/pkgs/development/python-modules/qtile/default.nix @@ -209,8 +209,8 @@ buildPythonPackage (finalAttrs: { }; postInstall = '' - install resources/qtile.desktop -Dt $out/share/xsessions - install resources/qtile-wayland.desktop -Dt $out/share/wayland-sessions + install -Dm644 resources/qtile-generic.desktop $out/share/xsessions/qtile.desktop + install -Dm644 resources/qtile-generic.desktop $out/share/wayland-sessions/qtile.desktop ''; meta = { From 62ad9749d35adc835daa7a672967390dd21fc35a Mon Sep 17 00:00:00 2001 From: "Adam C. Stephens" Date: Mon, 21 Sep 2026 15:21:19 -0400 Subject: [PATCH 21/25] forgejo-runner: 13.1.0 -> 13.2.0 Changelog: https://code.forgejo.org/forgejo/runner/releases/tag/v13.2.0 (cherry picked from commit fdf122d0013471a65c9cc77e7c00bf6f73d2b220) --- pkgs/by-name/fo/forgejo-runner/package.nix | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/fo/forgejo-runner/package.nix b/pkgs/by-name/fo/forgejo-runner/package.nix index 3c0d5bf337ff..817ef4addd53 100644 --- a/pkgs/by-name/fo/forgejo-runner/package.nix +++ b/pkgs/by-name/fo/forgejo-runner/package.nix @@ -17,6 +17,8 @@ let "TestHandler" "TestClone" "TestRunner_ReusableWorkflowGitHubInstance" + "TestInitRepoIfRequired/clone" + "TestInitRepoIfRequired/clone_different_remote" ] ++ lib.optionals stdenv.hostPlatform.isDarwin [ # listen tcp 127.0.0.1:0: bind: operation not permitted @@ -27,17 +29,17 @@ let in buildGoModule (finalAttrs: { pname = "forgejo-runner"; - version = "13.1.0"; + version = "13.2.0"; src = fetchFromGitea { domain = "code.forgejo.org"; owner = "forgejo"; repo = "runner"; rev = "v${finalAttrs.version}"; - hash = "sha256-0LVia4B9n2zuuHDGFnBVM1mrbI7XBhMfy25kRSN5/WQ="; + hash = "sha256-2P3lWzC3yxcyiBltFDC1dwwv8Xx2XxEGSa16MdjnV38="; }; - vendorHash = "sha256-2QwltVOR6MJO8rLNgktN1ulvP0YrnqQorNnfJXzRmJs="; + vendorHash = "sha256-iyXO3LYTr4v1OoD9PS5ksEDIkCIq8hgwgtkLR0bzUZg="; nativeBuildInputs = [ makeWrapper ]; From 207dce04b60c7cf0ef1968ae227519adbb8246a0 Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Mon, 21 Sep 2026 21:03:06 +0000 Subject: [PATCH 22/25] linux_7_2: 7.2.6 -> 7.2.7 (cherry picked from commit bd1812ec2254e85a880f059a6377e534678fb5bc) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 66976d48fd8d..955993ee2a42 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -35,8 +35,8 @@ "lts": true }, "7.2": { - "version": "7.2.6", - "hash": "sha256:01pnc344dx239hkfl84hpfdpm7gc08yzrz7llgnlm6dhya2fz6h3", + "version": "7.2.7", + "hash": "sha256:0nhl8fniqz9v95d54d39pbh045zzj7cghhrrf6rgyh15vd3lrhsa", "lts": false } } From df628e7afc72293ec4ae0e6d6bb8cbdb27a59f0b Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Mon, 21 Sep 2026 21:03:09 +0000 Subject: [PATCH 23/25] linux_6_18: 6.18.52 -> 6.18.53 (cherry picked from commit 6824a2f1903443d08bd5c18f58339798bc91207e) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 955993ee2a42..3b36f68dbab6 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -30,8 +30,8 @@ "lts": true }, "6.18": { - "version": "6.18.52", - "hash": "sha256:1f11had1amrvhl5f606ikc9ykrlyf0rvln8rkf2hrsjggm7mcs9b", + "version": "6.18.53", + "hash": "sha256:1q6gfh9v2p5v82p84xjypcdb6kxyp4w4sjhlnjkhhjr4qaavlvsd", "lts": true }, "7.2": { From 781dd2e5d731d84d5d16428ed865929392f4e840 Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Mon, 21 Sep 2026 21:03:11 +0000 Subject: [PATCH 24/25] linux_6_12: 6.12.110 -> 6.12.111 (cherry picked from commit 140834816d088ca622e77e901173f52f3558a07f) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 3b36f68dbab6..c2db8d4f7756 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -25,8 +25,8 @@ "lts": true }, "6.12": { - "version": "6.12.110", - "hash": "sha256:0k2w1lr3h1d814707vfmj826gaz67a9n3msla96zzdlvhghikvlc", + "version": "6.12.111", + "hash": "sha256:044qhkby6dgrb4mmggk6j0m6dmlw96c9a7v0lq9gm221c9kxqncy", "lts": true }, "6.18": { From b07ea88d19f6956d3a31207c4e76aefcede2f56b Mon Sep 17 00:00:00 2001 From: Anthony Wang Date: Mon, 21 Sep 2026 10:32:20 -0400 Subject: [PATCH 25/25] podman: 5.8.6 -> 5.8.7 Fixes CVE-2025-11395/GHSA-3gcv-x57j-xqxv (cherry picked from commit ff1ca372cd2408f946a54151a43d85487e712de3) --- pkgs/by-name/po/podman/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/po/podman/package.nix b/pkgs/by-name/po/podman/package.nix index daaf786b9e0c..33df438449d5 100644 --- a/pkgs/by-name/po/podman/package.nix +++ b/pkgs/by-name/po/podman/package.nix @@ -42,13 +42,13 @@ }: buildGoModule (finalAttrs: { pname = "podman"; - version = "5.8.6"; + version = "5.8.7"; src = fetchFromGitHub { owner = "containers"; repo = "podman"; tag = "v${finalAttrs.version}"; - hash = "sha256-a0m6y4Cwm395qYsDO0CFInUkm1AbGHCfBg3/RNMEoQs="; + hash = "sha256-E13EjBqCK/ABVxWJSZKn6vqpYXjTqqoBR5N7YnOqURI="; }; patches = [