Commit Graph

11659 Commits

Author SHA1 Message Date
Bart Oostveen
cab07b0f93 php83: 8.3.31 -> 8.3.32 2026-07-04 17:41:14 +02:00
Bart Oostveen
b4830988e7 php82: 8.2.31 -> 8.2.32 2026-07-04 17:40:14 +02:00
nixpkgs-ci[bot]
65cd8d15e7 Merge master into staging-next 2026-07-03 00:37:07 +00:00
Adam C. Stephens
7416acd0d5 beam29Packages.erlang: 29.0.2 -> 29.0.3
Changelog: https://github.com/erlang/otp/releases/tag/OTP-29.0.3
2026-07-02 14:33:00 -04:00
Adam C. Stephens
71d10c2425 beam28Packages.erlang: 28.5.0.2 -> 28.5.0.3
Changelog: https://github.com/erlang/otp/releases/tag/OTP-28.5.0.3
2026-07-02 14:32:34 -04:00
Adam C. Stephens
31c9973826 beam27Packages.erlang: 27.3.4.13 -> 27.3.4.14
Changelog: https://github.com/erlang/otp/releases/tag/OTP-27.3.4.14
2026-07-02 14:32:08 -04:00
Francesco Gazzetta
1729877a4c tcl-9_0: 9.0.3 -> 9.0.4 2026-07-02 18:10:22 +02:00
nixpkgs-ci[bot]
b6a05ebc0d Merge staging-next into staging 2026-06-24 18:37:36 +00:00
nixpkgs-ci[bot]
80b6742986 Merge master into staging-next 2026-06-24 18:37:00 +00:00
Martin Weinelt
4361d1c65b python315: 3.15.0b2 -> 3.15.0b3
https://docs.python.org/3.15/whatsnew/changelog.html#python-3-15-0-beta-3
2026-06-24 15:00:18 +02:00
nixpkgs-ci[bot]
2d05f94a89 Merge staging-next into staging 2026-06-24 00:41:00 +00:00
nixpkgs-ci[bot]
b724006d5d Merge master into staging-next 2026-06-24 00:40:24 +00:00
Adam C. Stephens
6d9595d031 beamPackages.elixir_1_20: 1.20.1 -> 1.20.2
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.2
2026-06-23 12:25:02 -04:00
Stig Palmquist
c6a6976a2a perl: backport security fixes
Perl ships with some CPAN modules vendored as "dual-life", this commit
inject updated versions certain modules directly from CPAN rather than
applying patches from upstream, as they can be tricky to maintain.

It also includes a patch for CVE-2026-8376 which affects 32-bit
platforms.

- perl: CVE-2026-8376
  5e7f119eb2

- HTTP-Tiny 0.094: CVE-2026-7010
  https://metacpan.org/release/HAARG/HTTP-Tiny-0.094/changes

- Compress-Raw-Zlib 2.222: CVE-2026-3381, CVE-2026-4176
  https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.222/changes

- Compress-Raw-Bzip2 2.218
  https://metacpan.org/release/PMQS/Compress-Raw-Bzip2-2.218/changes

- IO-Compress 2.220: CVE-2026-48959, CVE-2026-48961, CVE-2026-48962
  https://metacpan.org/release/PMQS/IO-Compress-2.220/changes

- Archive-Tar 3.12: CVE-2026-42496, CVE-2026-42497, CVE-2026-9538
  https://metacpan.org/release/BINGOS/Archive-Tar-3.12/changes

Assisted-by: Codex (OpenAI)
Signed-off-by: Stig Palmquist <git@stig.io>
(cherry picked from commit d59aeb80e5)
(cherry picked from commit 5613fd0d41)
2026-06-22 08:21:28 +02:00
nixpkgs-ci[bot]
56d55fe668 Merge staging-next into staging 2026-06-16 19:14:38 +00:00
Grimmauld
ed7e258fc3 supercollider: re-enable QtWebEngine and fix -FFTW3F-INCLUDE-DIR build error (#531489) 2026-06-16 18:50:56 +00:00
Ian Mitchell
9e0033270b sc3-plugins: add pretentiousUsername as maintainer 2026-06-16 14:29:33 -04:00
nixpkgs-ci[bot]
09352943f8 Merge staging-next into staging 2026-06-14 00:49:40 +00:00
Ian Mitchell
cfa8792fac supercolliderPlugins: fix FFTW3F-INCLUDE-DIR build error
sc3-plugins requires the `fftw3F` (or `fftw3Float`) package, due to its
UGens utilizing the library. Without including `fftw3Float` in the
`buildInput` variable, sc3-plugins will not compile.
2026-06-13 20:00:41 -04:00
Ian Mitchell
4f5042c837 supercollider: re-enable QtWebEngine
Qt WebEngine is a major component of the SuperCollider language,
especially because it powers the user documentation system, which
contains all of the helpfiles for the user's local system that may not
be in the online SuperCollider documentation browser (see
<https://docs.supercollider.online/Browse.html>). WebEngine has
potential security vulnerabilities (see below)---which was why WebEngine
was removed in PR #480196---however, the documentation browser in SC is
not used for anything other than browsing local documentation, which
minimizes the potential harms from WebEngine.

Potential security problems with Qt6 WebEngine can be found at the
following:
  * https://doc.qt.io/qt-6//qtwebengine-security.html
  * (for FreeBSD) https://www.vuxml.org/freebsd/pkg-qt6-webengine.html

Security-conscious users may wish to not use QtWebEngine, and so there
is an included option to disable it with the `useQtWebEngine` option.
2026-06-13 20:00:27 -04:00
Arne Keller
9e6dbeec61 pypy3: fix mainProgram attribute for nix run (#530787) 2026-06-13 21:37:34 +00:00
Nicolas Benes
f510bda3df pythonDocs: switch to stable URL, drop pdf-a4
The previous URL did not contain the patch version and therefore there
were hash changes to the fetched files. Switch to a more stable URL.
The pdf-a4 file format seems to be generated only for the .0 patch
release, so it is missing for later releases.
2026-06-13 16:52:56 +02:00
XlNTARO
47e5bac99a pypy3: fix mainProgram attribute for nix run 2026-06-11 19:50:12 +03:00
Martin Weinelt
584d8c9e35 python313: 3.13.13 -> 3.13.14
https://docs.python.org/release/3.13.13/whatsnew/changelog.html

Fixes: CVE-2026-4224, CVE-2026-3644, CVE-2026-2297
2026-06-11 17:53:51 +02:00
Martin Weinelt
2c67d1303c python314: 3.14.5 -> 3.14.6
https://docs.python.org/release/3.14.6/whatsnew/changelog.html
2026-06-11 17:53:22 +02:00
nixpkgs-ci[bot]
e3a2cd0596 Merge staging-next into staging 2026-06-11 13:19:31 +00:00
Emre Sahin
046a0c6211 python3.tests.condaExamplePackage: fix eval warning for buildInputs 2026-06-11 12:07:31 +02:00
nixpkgs-ci[bot]
78e362a433 Merge staging-next into staging 2026-06-11 00:48:37 +00:00
Adam C. Stephens
7e34437240 beam.interpreters.erlang_27: 27.3.4.12 -> 27.3.4.13
Changelog: https://github.com/erlang/otp/releases/tag/OTP-27.3.4.13
2026-06-10 13:50:18 -04:00
Adam C. Stephens
ef90541f94 beam.interpreters.erlang_28: 28.5.0.1 -> 28.5.0.2
Changelog: https://github.com/erlang/otp/releases/tag/OTP-28.5.0.2
2026-06-10 09:41:07 -04:00
Adam C. Stephens
9f43129802 beam.interpreters.erlang_29: 29.0.1 -> 29.0.2
Changelog: https://github.com/erlang/otp/releases/tag/OTP-29.0.2
2026-06-10 09:40:41 -04:00
nixpkgs-ci[bot]
95b6355318 Merge staging-next into staging 2026-06-10 00:49:21 +00:00
Adam C. Stephens
63513b0a34 beamPackages.elixir_1_20: 1.20.0 -> 1.20.1
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.1
2026-06-09 13:19:17 -04:00
nixpkgs-ci[bot]
94f781f42d Merge staging-next into staging 2026-06-09 13:02:07 +00:00
Doron Behar
0d12681d79 octave: 11.2.0 -> 11.3.0 (#529703) 2026-06-09 10:51:19 +00:00
Michael Daniels
8197942b23 Merge branch 'staging-next' into staging 2026-06-08 22:01:24 -04:00
R. Ryantm
656d35fdef octave: 11.2.0 -> 11.3.0 2026-06-08 22:13:08 +00:00
Matthieu Coudron
02a236eb71 supercollider: 3.13.1 -> 3.14.1 (#527684) 2026-06-08 21:28:38 +00:00
nixpkgs-ci[bot]
7fa1388d2b Merge staging-next into staging 2026-06-06 18:29:05 +00:00
Maximilian Bosch
4c0dad36b2 php: 8.5.6 -> 8.5.7, 8.4.21 -> 8.4.22 (#528400) 2026-06-06 14:09:29 +00:00
nixpkgs-ci[bot]
566982b70a Merge staging-next into staging 2026-06-06 12:29:09 +00:00
Maximilian Bosch
fc47b4549b php85: 8.5.6 -> 8.5.7
ChangeLog: https://www.php.net/ChangeLog-8.php#8.5.7
2026-06-05 14:53:28 +02:00
Maximilian Bosch
6eec1807f1 php84: 8.4.21 -> 8.4.22
ChangeLog: https://www.php.net/ChangeLog-8.php#8.4.22
2026-06-05 14:52:17 +02:00
Vladimír Čunát
f60555b694 perl: backport security fixes (#528021) 2026-06-05 11:32:36 +00:00
nixpkgs-ci[bot]
368e7de99b Merge staging-next into staging 2026-06-05 00:47:55 +00:00
Martin Weinelt
2f6fa7d7fb pythonDocs: init at 3.14, drop 3.10 (#526551) 2026-06-04 22:40:13 +00:00
Stig Palmquist
d59aeb80e5 perl: backport security fixes
Perl ships with some CPAN modules vendored as "dual-life", this commit
inject updated versions certain modules directly from CPAN rather than
applying patches from upstream, as they can be tricky to maintain.

It also includes a patch for CVE-2026-8376 which affects 32-bit
platforms.

- perl: CVE-2026-8376
  5e7f119eb2

- HTTP-Tiny 0.094: CVE-2026-7010
  https://metacpan.org/release/HAARG/HTTP-Tiny-0.094/changes

- Compress-Raw-Zlib 2.222: CVE-2026-3381, CVE-2026-4176
  https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.222/changes

- Compress-Raw-Bzip2 2.218
  https://metacpan.org/release/PMQS/Compress-Raw-Bzip2-2.218/changes

- IO-Compress 2.220: CVE-2026-48959, CVE-2026-48961, CVE-2026-48962
  https://metacpan.org/release/PMQS/IO-Compress-2.220/changes

- Archive-Tar 3.12: CVE-2026-42496, CVE-2026-42497, CVE-2026-9538
  https://metacpan.org/release/BINGOS/Archive-Tar-3.12/changes

Assisted-by: Codex (OpenAI)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-04 18:10:38 +02:00
nixpkgs-ci[bot]
2512e8d838 Merge staging-next into staging 2026-06-04 07:40:02 +00:00
Yt
baa9f3664c beamMinimal27Packages.erlang: use upstream doc target patch (#527665) 2026-06-04 04:21:32 +00:00
nixpkgs-ci[bot]
50d9dbad25 Merge staging-next into staging 2026-06-04 00:54:51 +00:00