Commit Graph

63 Commits

Author SHA1 Message Date
Doron Behar
135034ac71 curl: allow runtimeShellPackage to be referenced by curl.dev
Fixes https://github.com/NixOS/nixpkgs/pull/535878#issuecomment-4815172957

`patchShebangsAuto` uses `--build` by default for dev outputs, which
includes `$dev/bin/curl-config` in this package.
2026-06-29 11:00:14 +03:00
Sefa Eyeoglu
321652d161 curl{,Minimal}: patch shebang of wcurl script with host runtimeShell (#493004) 2026-06-27 01:27:00 +00:00
Sefa Eyeoglu
940ca9b84b curlMinimal: 8.20.0 -> 8.21.0
https://github.com/curl/curl/releases/tag/curl-8_21_0

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2026-06-25 11:25:23 -04:00
Sefa Eyeoglu
bcc9d88ab9 curl: backport performance patch (#522574) 2026-05-30 12:48:53 +00:00
Sefa Eyeoglu
06028a8aa5 curl: backport performance patch
2a2104f3cf

See https://curl.se/mail/distros-2026-05/0000.html

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2026-05-30 13:12:24 +02:00
Doron Behar
341ec4198d curl{,Minimal}: patch shebang of wcurl script with host runtimeShell 2026-05-29 14:37:06 +03:00
nixpkgs-ci[bot]
f50dc660d4 Merge staging-next into staging 2026-05-28 18:54:19 +00:00
Ethan Carter Edwards
4c24e02aea curlMinimal: set meta.donationPage
Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
2026-05-27 15:38:47 -07:00
Doron Behar
160ca6558e curl: set structuredAttrs 2026-05-26 20:58:30 +03:00
Sefa Eyeoglu
d67855994d curlMinimal: 8.19.0 -> 8.20.0
https://github.com/curl/curl/releases/curl-8_20_0

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2026-04-29 12:39:46 +02:00
Emily
59169a1511 curl: clean up rebuild avoidance 2026-04-26 20:21:42 +01:00
Emily
e337b3ae4f curl: drop wolfSSL support 2026-04-26 20:21:42 +01:00
Sefa Eyeoglu
c4b52f0004 curl: 8.18.0 -> 8.19.0 (#499006) 2026-03-18 23:06:54 +00:00
Sefa Eyeoglu
df6cab7c12 curl: 8.18.0 -> 8.19.0
https://curl.se/ch/8.19.0.html

Fixes CVE-2026-3805
Fixes CVE-2026-3784
Fixes CVE-2026-3783
Fixes CVE-2026-1965

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2026-03-11 20:33:21 +01:00
Alexander Bantyev
2839911e81 various: add security-review team as a maintainer
Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033
2026-03-05 15:19:44 +01:00
Sergei Zimmerman
1f6c54c20f curl: remove outdated meta.broken check for pkgsStatic and brotliSupport
No longer accurate. pkgsStatic.curl does build when linked against brotli
and `curl --compressed -v "https://httpbin.org/brotli"` succeeds. Advertised
headers include:

* [HTTP/2] [1] [accept-encoding: deflate, gzip, br, zstd]
2026-02-25 21:37:40 +03:00
Marcin Serwin
99e6d1bfbb maintainers: drop lovek323
Signed-off-by: Marcin Serwin <marcin@serwin.dev>
2026-02-24 23:43:50 +01:00
nixpkgs-ci[bot]
e88108f433 Merge master into staging-next 2026-02-19 18:18:44 +00:00
Stefan Frijters
7a5c5b109a curl*: move CXX and CXXCPP into env for structuredAttrs 2026-02-15 20:17:08 +01:00
nixpkgs-ci[bot]
e217c74eac Merge staging-next into staging 2026-02-06 18:16:24 +00:00
Markus Sütter
196b385317 various: add meta.identifier.cpeParts to a batch of packages 2026-02-02 09:22:55 +01:00
Sefa Eyeoglu
c81d7b2acd curl: 8.17.0 -> 8.18.0
https://curl.se/ch/8.18.0.html

https://github.com/curl/curl/releases/tag/curl-8_18_0

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2026-01-07 20:26:42 +01:00
David McFarland
79536e3ee1 curlMinimal: fix cygwin build 2025-12-19 10:01:32 -04:00
Lee Bousfield
804bca8429 curlMinimal: fix build by removing duplicate patch
This reverts commit 5aadca9efb.
2025-11-09 20:07:03 -05:00
Sefa Eyeoglu
77d71bdbf6 curl: 8.16.0 -> 8.17.0 (#458808) 2025-11-09 22:16:48 +00:00
R. Ryantm
d668192324 curl: 8.16.0 -> 8.17.0 2025-11-05 12:57:23 +00:00
Raito Bezarius
5aadca9efb curlMinimal: apply paused HTTP/2 transfer fix
This is done before the final release due to how critical this bug is on
any application that relies on paused HTTP/2 transfers (e.g. Lix at high
concurrency during substitutions).

This can be removed as soon as 8.17.0 is landed.

Change-Id: I5bf8d7423447fff8e9a16e2c1ce67e432f769885
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2025-11-03 17:31:10 +01:00
Sefa Eyeoglu
6e7a215c81 curlMinimal: disable ca-fallback for gnutls (#444638) 2025-09-21 08:28:48 +02:00
Emily
6607ec3c6f curl: enable HTTP/3 support by default (#435914) 2025-09-21 05:49:07 +01:00
Marie Ramlow
ff94a4d433 {ngtcp2, curl, nghttp2}: use openssl instead of quictls 2025-09-20 19:07:24 +02:00
Sefa Eyeoglu
1253c15ea8 curlMinimal: disable ca-fallback for gnutls
Seems like support for this was dropped as it was replaced by a runtime
option. See
2f6524ce3c

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-09-20 16:10:24 +02:00
Sefa Eyeoglu
fc43376598 curlMinimal: 8.14.1 -> 8.16.0
https://daniel.haxx.se/blog/2025/07/16/curl-8-15-0/
https://curl.se/ch/8.15.0.html
https://github.com/curl/curl/releases/tag/curl-8_15_0

https://daniel.haxx.se/blog/2025/07/16/curl-8-16-0/
https://curl.se/ch/8.16.0.html
https://github.com/curl/curl/releases/tag/curl-8_16_0

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-09-10 17:49:49 +02:00
Wolfgang Walther
5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Sefa Eyeoglu
97d8e6bde3 curlMinimal: 8.14.0 -> 8.14.1
Fixes CVE-2025-5399

https://github.com/curl/curl/releases/tag/curl-8_14_1
https://curl.se/ch/8.14.1.html
https://daniel.haxx.se/blog/2025/06/04/curl-8-14-1/

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-06-08 13:48:35 +02:00
Sefa Eyeoglu
a6bd2d6bcb curlMinimal: 8.13.0 -> 8.14.0
https://github.com/curl/curl/releases/tag/curl-8_14_0
https://curl.se/ch/8.14.0.html
https://daniel.haxx.se/blog/2025/05/28/curl-8-14-0/

`openssl` is executed during checkPhase to generate certificate in
`genserv.pl`. Seems like it was required since 8.13.0, but it started
failing tests since 8.14.0 with commit
3d4e4a1874

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-05-29 21:37:29 +02:00
Morgan Jones
21db980e6f curl: patch CVE-2025-4947 and CVE-2025-5025 for WolfSSL backend
- https://curl.se/docs/CVE-2025-4947.html
- https://www.openwall.com/lists/oss-security/2025/05/28/4
- https://curl.se/docs/CVE-2025-5025.html
- https://www.openwall.com/lists/oss-security/2025/05/28/5

Co-authored-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-05-28 20:01:03 +02:00
Sefa Eyeoglu
262d9972ef curl: 8.12.1 -> 8.13.0 (#396200) 2025-04-27 20:32:39 +02:00
Ihar Hrachyshka
dd0f03a56c treewide: remove usage of deprecated apple_sdk framework stubs
They are not doing anything right now. This is in preparation for their
complete removal from the tree.

Note: several changes that affect the derivation inputs (e.g. removal of
references to stub paths in build instructions) were left out. They will
be cleaned up the next iteration and will require special care.

Note: this PR is a result of a mix of ugly regex (not AST) based
automation and some manual labor. For reference, the regex automation
part was hacked in: https://github.com/booxter/nix-clean-apple_sdk

Signed-off-by: Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
2025-04-19 20:28:20 -04:00
misilelab
980d71039d curl: 8.12.1 -> 8.13.0
https://github.com/curl/curl/releases/tag/curl-8_13_0
https://daniel.haxx.se/blog/2025/04/02/curl-8-13-0
https://curl.se/ch/8.13.0.html

Signed-off-by: misilelab <misileminecord@gmail.com>
2025-04-12 01:55:43 +09:00
Silvan Mosberger
374e6bcc40 treewide: Format all Nix files
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:

  nix-build ci -A fmt.check

This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).

This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).

Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).

If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
2025-04-01 20:10:43 +02:00
nixpkgs-ci[bot]
72f0884b1d Merge staging-next into staging 2025-02-22 00:14:27 +00:00
John Ericson
60138282dc curl: autoreconfHook on OpenBSD (#384009) 2025-02-21 17:46:40 -05:00
Audrey Dutcher
cc8c1a573d curl: autoreconfHook on OpenBSD
It uses an old version of libtool that messes up shared libaries on this
platform.
2025-02-21 11:57:52 -07:00
Sefa Eyeoglu
b58db91905 curl: 8.12.0 -> 8.12.1
https://github.com/curl/curl/releases/tag/curl-8_12_1
https://curl.se/ch/8.12.1.html

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-02-13 09:12:57 +01:00
K900
508e19e1c3 curl: 8.11.1 -> 8.12.0 (#379541) 2025-02-09 09:38:32 +03:00
K900
bb92d2bed2 curlMinimal: allow local networking on Darwin
Makes tests pass on 8.12.0

Co-authored-by: Martin Weinelt <hexa@darmstadt.ccc.de>
2025-02-09 09:35:20 +03:00
Alyssa Ross
9040833b3f libpsl: backport pkg-config static fix
This was merged 9 months ago, and still no release, so let's backport
it, because the alternative is adding the same hack as curl in other
packages, like libsoup.
2025-02-08 12:30:14 +01:00
Sefa Eyeoglu
4608f17aa6 curl: add Scrumplex to maintainers
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-02-07 09:12:17 +01:00
Sefa Eyeoglu
b158812f3b curl: 8.11.1 -> 8.12.0
https://github.com/curl/curl/releases/tag/curl-8_12_0
https://curl.se/ch/8.12.0.html

Fixes three low severity vulnerabilities:
- CVE-2025-0725: https://curl.se/docs/CVE-2025-0725.html
- CVE-2025-0665: https://curl.se/docs/CVE-2025-0665.html
- CVE-2025-0167: https://curl.se/docs/CVE-2025-0167.html

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2025-02-07 09:12:04 +01:00
Sander
7d06938916 curl: fix line endings in patched test 2005 2025-01-24 13:07:15 +00:00