kirillrdy
16edf01b6f
[Backport staging-26.05] ruby_3_3: 3.3.10 -> 3.3.12, ruby_3_4: 3.4.9 -> 3.4.11 ( #568546 )
2026-09-30 10:21:55 +00:00
Robbe Van Petegem
841c647cf7
ruby_3_4: 3.4.9 -> 3.4.11
...
https://github.com/ruby/ruby/releases/tag/v3_4_11
(cherry picked from commit 1fba02bd8c )
2026-09-30 09:18:21 +00:00
Robbe Van Petegem
9dfcfbbe13
ruby_3_3: 3.3.10 -> 3.3.12
...
https://github.com/ruby/ruby/releases/tag/v3_3_12
(cherry picked from commit c2a1695481 )
2026-09-30 09:18:21 +00:00
ajs124
269b2355ed
[Backport staging-26.05] tzdata: 2026c -> 2026d ( #562922 )
2026-09-30 08:35:38 +00:00
nixpkgs-ci[bot]
112250b6a5
Merge staging-next-26.05 into staging-26.05
2026-09-30 00:32:19 +00:00
nixpkgs-ci[bot]
ddacd3139a
Merge release-26.05 into staging-next-26.05
2026-09-30 00:31:47 +00:00
nixpkgs-ci[bot]
dd0272b45d
[Backport release-26.05] {tor,mullvad}-browser: 15.0.23 -> 15.0.24 ( #568414 )
2026-09-29 23:01:35 +00:00
whispers
209bad6c97
tor-browser: 15.0.23 -> 15.0.24
...
changelog: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/tbb-15.0.24-build1/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
firefox esr: https://www.firefox.com/en-US/firefox/140.17.0/releasenotes/
firefox security advisories: https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/
(cherry picked from commit 4c1fa38136 )
2026-09-29 22:50:09 +00:00
whispers
e8861a61e7
mullvad-browser: 15.0.23 -> 15.0.24
...
changelog: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/mb-15.0.24-build1/projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
firefox esr: https://www.firefox.com/en-US/firefox/140.17.0/releasenotes/
firefox security advisories: https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/
(cherry picked from commit 9e44ed4dfb )
2026-09-29 22:50:08 +00:00
nixpkgs-ci[bot]
5171192663
[Backport release-26.05] google-chrome: 154.0.8037.57 -> 154.0.8037.92 ( #568391 )
2026-09-29 21:45:12 +00:00
Michael Daniels
d327b618a4
google-chrome: 154.0.8037.57 -> 154.0.8037.92
...
Release note: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html
(cherry picked from commit db4bc3a636 )
2026-09-29 21:26:51 +00:00
Michael Daniels
fc3d01c12e
[Backport release-26.05] maintainers/github-teams.json: Automated sync ( #568051 )
2026-09-29 21:04:52 +00:00
Martin Weinelt
09df951d24
[Backport release-26.05] Firefox: 156.0.1 -> 157.0; 153.3.0esr -> 153.4.0esr; 140.16.0esr -> 140.17.0esr; nss_latest: 3.128 -> 3.130 ( #568319 )
2026-09-29 20:58:27 +00:00
Martin Weinelt
66d78b128d
[release-26.05] pretix: backport security fixes up until 2026.5.6 ( #568365 )
2026-09-29 20:16:13 +00:00
Martin Weinelt
5f1af8ce63
pretix: backport security fixes up until 2026.5.6
...
https://pretix.eu/about/en/blog/20260929-release-2026-7-1/
Fixes:
CVE-2026-101266, CVE-2026-101267, CVE-2026-101268, CVE-2026-101269,
CVE-2026-101270, CVE-2026-10127
2026-09-29 21:57:53 +02:00
Martin Weinelt
c032133272
firefox-esr-140-unwrapped: 140.16.0esr -> 140.17.0esr
...
https://www.firefox.com/en-US/firefox/140.16.0/releasenotes/
2026-09-29 18:43:07 +02:00
Martin Weinelt
578fe87a79
firefox-esr-153-unwrapped: 153.3.0esr -> 153.4.0esr
...
https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/
(cherry picked from commit 64ad630fb1 )
2026-09-29 18:42:21 +02:00
Martin Weinelt
2faecb04de
firefox-bin-unwrapped: 156.0.1 -> 157.0
...
https://www.firefox.com/en-US/firefox/157.0/releasenotes/
(cherry picked from commit b63cad0a55 )
2026-09-29 18:42:17 +02:00
Martin Weinelt
a98fa78e0d
firefox-unwrapped: 156.0.1 -> 157.0
...
https://www.firefox.com/en-US/firefox/157.0/releasenotes/
(cherry picked from commit a0a88763be )
2026-09-29 18:42:03 +02:00
Martin Weinelt
a4927da26c
nss_latest: 3.129 -> 3.130
...
https://github.com/mozilla/nss/blob/master/doc/src/releases/nss_3_130.md
(cherry picked from commit 36f5f9b26a )
2026-09-29 18:40:49 +02:00
ajs124
83ef9597fa
nss: 3.128 -> 3.129
...
https://github.com/mozilla/nss/blob/master/doc/src/releases/nss_3_129.md
(cherry picked from commit 2ad7222239 )
2026-09-29 18:40:44 +02:00
nixpkgs-ci[bot]
399a3f30cd
[Backport release-26.05] matrix-conduit: 0.10.13 -> 0.10.14 ( #568290 )
2026-09-29 15:30:39 +00:00
Vladimír Čunát
5b5d1dc3dd
Merge branch 'staging-26.05' into staging-next-26.05
...
to pull the openssl security update
2026-09-29 17:12:58 +02:00
whispers
257cd5b258
openssl_3_6: 3.6.4 -> 3.6.5
...
https://github.com/openssl/openssl/releases/tag/openssl-3.6.5
Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872,
CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804,
CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782,
CVE-2026-84784
(cherry picked from commit 550e4789f4 )
2026-09-29 17:08:52 +02:00
whispers
6b986c886a
[Backport release-26.05] go_1_25: 1.25.13 -> 1.25.14 ( #557440 )
2026-09-29 15:08:17 +00:00
taku0
68e5b9f7e8
[Backport release-26.05] thunderbird-esr-bin-unwrapped: 153.3.0esr -> 153.3.1esr ( #567853 )
2026-09-29 14:42:59 +00:00
R. Ryantm
1792a18e4c
matrix-conduit: 0.10.13 -> 0.10.14
...
(cherry picked from commit 58dedacf87 )
2026-09-29 14:33:16 +00:00
whispers
d3721b2e88
[Backport staging-26.05] go_1_26: 1.26.7 -> 1.26.8 ( #563591 )
2026-09-29 13:29:38 +00:00
Vladimír Čunát
e9ac2bf29a
Merge branch 'staging-26.05' into staging-next-26.05
2026-09-29 14:55:29 +02:00
Vladimír Čunát
247a32d528
[Backport staging-26.05] groff: 1.24.1 -> 1.24.2 ( #568239 )
2026-09-29 12:41:45 +00:00
Alexis Hildebrandt
3d8fc7e7e7
groff: 1.24.1 -> 1.24.2
...
(cherry picked from commit 2c88b1a651 )
2026-09-29 12:35:49 +00:00
Vladimír Čunát
24e4191e61
Mass backport of Perl security fixes merged to unstable ( #567931 )
2026-09-29 12:29:45 +00:00
Pol Dellaiera
7090899f6b
[Backport 26.05] linuxPackages.evdi: 1.14.15 -> 1.15.1 ( #565617 )
2026-09-29 12:05:43 +00:00
Vladimír Čunát
7d990c52b0
[Backport staging-26.05] imagemagick: 7.1.2-31 -> 7.1.2-32 ( #568060 )
2026-09-29 10:25:23 +00:00
Vladimír Čunát
b901580610
[Backport staging-26.05] python3Packages.gitpython: 3.1.58 -> 3.1.62 ( #568030 )
2026-09-29 10:24:06 +00:00
Marcus Ramberg
8a59520204
[Backport staging-26.05] perlPackages.XMLTwig: 3.52 -> 3.54 ( #567922 )
2026-09-29 09:42:38 +00:00
nixpkgs-ci[bot]
df3269aecf
[Backport release-26.05] tail-tray: 0.2.34 -> 0.2.35 ( #568189 )
2026-09-29 09:22:35 +00:00
R. Ryantm
3d4e18f19a
tail-tray: 0.2.34 -> 0.2.35
...
(cherry picked from commit 74ec0e5b5e )
2026-09-29 09:16:13 +00:00
nixpkgs-ci[bot]
d51c455eef
[Backport release-26.05] blackfire: 2026.9.0 -> 2026.9.1 ( #567854 )
2026-09-29 07:39:21 +00:00
nixpkgs-ci[bot]
d1e40b6809
[Backport release-26.05] phpExtensions.blackfire: 2026.9.0 -> 2026.9.2 ( #567851 )
2026-09-29 07:39:20 +00:00
Ulrik Strid
b04bfda2b2
[Backport release-26.05] microsoft-edge, msedgedriver: refactor, add darwin support ( #568025 )
2026-09-29 07:02:20 +00:00
Yohann Boniface
53cdf9f164
[Backport release-26.05] rustormy: init at 0.5.2 ( #567716 )
2026-09-29 06:17:04 +00:00
Stig Palmquist
49e4c945fa
perl: fix CVE-2026-15534
...
Apply upstream commits 568e6fd238867bb9e99fa3f47cba3169009239e0 and
54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.
Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io >
(cherry picked from commit 709e8699ab )
2026-09-29 08:10:57 +02:00
Stig Palmquist
6a215dec0d
perl: 5.42.0 -> 5.42.3
...
5.42.3 ships the interpreter fixes and the updated dual-life modules, so
the CVE-2026-8376 patch and every vendoredPerlDistributions entry are
dropped.
perl-cross 1.6.4 has no patch set for 5.42.3, so the perl5-5.42.0 set,
which applies unchanged, is vendored under the name perl-cross expects.
- perl: CVE-2026-13221, CVE-2026-57432, CVE-2026-8376
https://metacpan.org/release/SHAY/perl-5.42.3/view/pod/perldelta.pod
- HTTP-Tiny 0.096: CVE-2026-7010, CVE-2026-7017
https://metacpan.org/release/HAARG/HTTP-Tiny-0.096/changes
- Socket 2.041: CVE-2026-12087
https://metacpan.org/release/PEVANS/Socket-2.041/changes
- Storable 3.37_01: CVE-2026-57433
- Archive-Tar 3.12, Compress-Raw-Bzip2 2.218, Compress-Raw-Zlib 2.222,
IO-Compress 2.223
Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io >
(cherry picked from commit 7b1e682245 )
2026-09-29 08:10:54 +02:00
Vladimír Čunát
e7b465b341
[Backport staging-26.05] thrift: 0.22.0 -> 0.24.0 ( #566086 )
2026-09-29 04:48:46 +00:00
Vladimír Čunát
223d398747
[Backport staging-26.05] pcre2: 10.48 -> 10.49 ( #568022 )
2026-09-29 04:41:30 +00:00
Vladimír Čunát
98e5764a7a
thrift: disable tests on darwin for now
...
https://hydra.nixos.org/build/346751725/step/6/log
(cherry picked from commit 9d087851f0 )
I have no better way forward so far, I'm afraid.
2026-09-29 06:39:35 +02:00
nixpkgs-ci[bot]
aaa81848e1
Merge staging-next-26.05 into staging-26.05
2026-09-29 00:30:40 +00:00
nixpkgs-ci[bot]
decb995600
Merge release-26.05 into staging-next-26.05
2026-09-29 00:30:07 +00:00
R. Ryantm
5b7eba2431
imagemagick: 7.1.2-31 -> 7.1.2-32
...
(cherry picked from commit ab6ffe5aa3 )
2026-09-29 00:26:12 +00:00