Commit Graph

1015398 Commits

Author SHA1 Message Date
kirillrdy
16edf01b6f [Backport staging-26.05] ruby_3_3: 3.3.10 -> 3.3.12, ruby_3_4: 3.4.9 -> 3.4.11 (#568546) 2026-09-30 10:21:55 +00:00
Robbe Van Petegem
841c647cf7 ruby_3_4: 3.4.9 -> 3.4.11
https://github.com/ruby/ruby/releases/tag/v3_4_11
(cherry picked from commit 1fba02bd8c)
2026-09-30 09:18:21 +00:00
Robbe Van Petegem
9dfcfbbe13 ruby_3_3: 3.3.10 -> 3.3.12
https://github.com/ruby/ruby/releases/tag/v3_3_12
(cherry picked from commit c2a1695481)
2026-09-30 09:18:21 +00:00
ajs124
269b2355ed [Backport staging-26.05] tzdata: 2026c -> 2026d (#562922) 2026-09-30 08:35:38 +00:00
nixpkgs-ci[bot]
112250b6a5 Merge staging-next-26.05 into staging-26.05 2026-09-30 00:32:19 +00:00
nixpkgs-ci[bot]
ddacd3139a Merge release-26.05 into staging-next-26.05 2026-09-30 00:31:47 +00:00
nixpkgs-ci[bot]
dd0272b45d [Backport release-26.05] {tor,mullvad}-browser: 15.0.23 -> 15.0.24 (#568414) 2026-09-29 23:01:35 +00:00
whispers
209bad6c97 tor-browser: 15.0.23 -> 15.0.24
changelog: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/tbb-15.0.24-build1/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
firefox esr: https://www.firefox.com/en-US/firefox/140.17.0/releasenotes/
firefox security advisories: https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/

(cherry picked from commit 4c1fa38136)
2026-09-29 22:50:09 +00:00
whispers
e8861a61e7 mullvad-browser: 15.0.23 -> 15.0.24
changelog: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/mb-15.0.24-build1/projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
firefox esr: https://www.firefox.com/en-US/firefox/140.17.0/releasenotes/
firefox security advisories: https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/

(cherry picked from commit 9e44ed4dfb)
2026-09-29 22:50:08 +00:00
nixpkgs-ci[bot]
5171192663 [Backport release-26.05] google-chrome: 154.0.8037.57 -> 154.0.8037.92 (#568391) 2026-09-29 21:45:12 +00:00
Michael Daniels
d327b618a4 google-chrome: 154.0.8037.57 -> 154.0.8037.92
Release note: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html

(cherry picked from commit db4bc3a636)
2026-09-29 21:26:51 +00:00
Michael Daniels
fc3d01c12e [Backport release-26.05] maintainers/github-teams.json: Automated sync (#568051) 2026-09-29 21:04:52 +00:00
Martin Weinelt
09df951d24 [Backport release-26.05] Firefox: 156.0.1 -> 157.0; 153.3.0esr -> 153.4.0esr; 140.16.0esr -> 140.17.0esr; nss_latest: 3.128 -> 3.130 (#568319) 2026-09-29 20:58:27 +00:00
Martin Weinelt
66d78b128d [release-26.05] pretix: backport security fixes up until 2026.5.6 (#568365) 2026-09-29 20:16:13 +00:00
Martin Weinelt
5f1af8ce63 pretix: backport security fixes up until 2026.5.6
https://pretix.eu/about/en/blog/20260929-release-2026-7-1/

Fixes:
CVE-2026-101266, CVE-2026-101267, CVE-2026-101268, CVE-2026-101269,
CVE-2026-101270, CVE-2026-10127
2026-09-29 21:57:53 +02:00
Martin Weinelt
c032133272 firefox-esr-140-unwrapped: 140.16.0esr -> 140.17.0esr
https://www.firefox.com/en-US/firefox/140.16.0/releasenotes/
2026-09-29 18:43:07 +02:00
Martin Weinelt
578fe87a79 firefox-esr-153-unwrapped: 153.3.0esr -> 153.4.0esr
https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/
(cherry picked from commit 64ad630fb1)
2026-09-29 18:42:21 +02:00
Martin Weinelt
2faecb04de firefox-bin-unwrapped: 156.0.1 -> 157.0
https://www.firefox.com/en-US/firefox/157.0/releasenotes/
(cherry picked from commit b63cad0a55)
2026-09-29 18:42:17 +02:00
Martin Weinelt
a98fa78e0d firefox-unwrapped: 156.0.1 -> 157.0
https://www.firefox.com/en-US/firefox/157.0/releasenotes/

(cherry picked from commit a0a88763be)
2026-09-29 18:42:03 +02:00
Martin Weinelt
a4927da26c nss_latest: 3.129 -> 3.130
https://github.com/mozilla/nss/blob/master/doc/src/releases/nss_3_130.md
(cherry picked from commit 36f5f9b26a)
2026-09-29 18:40:49 +02:00
ajs124
83ef9597fa nss: 3.128 -> 3.129
https://github.com/mozilla/nss/blob/master/doc/src/releases/nss_3_129.md
(cherry picked from commit 2ad7222239)
2026-09-29 18:40:44 +02:00
nixpkgs-ci[bot]
399a3f30cd [Backport release-26.05] matrix-conduit: 0.10.13 -> 0.10.14 (#568290) 2026-09-29 15:30:39 +00:00
Vladimír Čunát
5b5d1dc3dd Merge branch 'staging-26.05' into staging-next-26.05
to pull the openssl security update
2026-09-29 17:12:58 +02:00
whispers
257cd5b258 openssl_3_6: 3.6.4 -> 3.6.5
https://github.com/openssl/openssl/releases/tag/openssl-3.6.5

Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872,
CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804,
CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782,
CVE-2026-84784

(cherry picked from commit 550e4789f4)
2026-09-29 17:08:52 +02:00
whispers
6b986c886a [Backport release-26.05] go_1_25: 1.25.13 -> 1.25.14 (#557440) 2026-09-29 15:08:17 +00:00
taku0
68e5b9f7e8 [Backport release-26.05] thunderbird-esr-bin-unwrapped: 153.3.0esr -> 153.3.1esr (#567853) 2026-09-29 14:42:59 +00:00
R. Ryantm
1792a18e4c matrix-conduit: 0.10.13 -> 0.10.14
(cherry picked from commit 58dedacf87)
2026-09-29 14:33:16 +00:00
whispers
d3721b2e88 [Backport staging-26.05] go_1_26: 1.26.7 -> 1.26.8 (#563591) 2026-09-29 13:29:38 +00:00
Vladimír Čunát
e9ac2bf29a Merge branch 'staging-26.05' into staging-next-26.05 2026-09-29 14:55:29 +02:00
Vladimír Čunát
247a32d528 [Backport staging-26.05] groff: 1.24.1 -> 1.24.2 (#568239) 2026-09-29 12:41:45 +00:00
Alexis Hildebrandt
3d8fc7e7e7 groff: 1.24.1 -> 1.24.2
(cherry picked from commit 2c88b1a651)
2026-09-29 12:35:49 +00:00
Vladimír Čunát
24e4191e61 Mass backport of Perl security fixes merged to unstable (#567931) 2026-09-29 12:29:45 +00:00
Pol Dellaiera
7090899f6b [Backport 26.05] linuxPackages.evdi: 1.14.15 -> 1.15.1 (#565617) 2026-09-29 12:05:43 +00:00
Vladimír Čunát
7d990c52b0 [Backport staging-26.05] imagemagick: 7.1.2-31 -> 7.1.2-32 (#568060) 2026-09-29 10:25:23 +00:00
Vladimír Čunát
b901580610 [Backport staging-26.05] python3Packages.gitpython: 3.1.58 -> 3.1.62 (#568030) 2026-09-29 10:24:06 +00:00
Marcus Ramberg
8a59520204 [Backport staging-26.05] perlPackages.XMLTwig: 3.52 -> 3.54 (#567922) 2026-09-29 09:42:38 +00:00
nixpkgs-ci[bot]
df3269aecf [Backport release-26.05] tail-tray: 0.2.34 -> 0.2.35 (#568189) 2026-09-29 09:22:35 +00:00
R. Ryantm
3d4e18f19a tail-tray: 0.2.34 -> 0.2.35
(cherry picked from commit 74ec0e5b5e)
2026-09-29 09:16:13 +00:00
nixpkgs-ci[bot]
d51c455eef [Backport release-26.05] blackfire: 2026.9.0 -> 2026.9.1 (#567854) 2026-09-29 07:39:21 +00:00
nixpkgs-ci[bot]
d1e40b6809 [Backport release-26.05] phpExtensions.blackfire: 2026.9.0 -> 2026.9.2 (#567851) 2026-09-29 07:39:20 +00:00
Ulrik Strid
b04bfda2b2 [Backport release-26.05] microsoft-edge, msedgedriver: refactor, add darwin support (#568025) 2026-09-29 07:02:20 +00:00
Yohann Boniface
53cdf9f164 [Backport release-26.05] rustormy: init at 0.5.2 (#567716) 2026-09-29 06:17:04 +00:00
Stig Palmquist
49e4c945fa perl: fix CVE-2026-15534
Apply upstream commits 568e6fd238867bb9e99fa3f47cba3169009239e0 and
54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.

Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io>
(cherry picked from commit 709e8699ab)
2026-09-29 08:10:57 +02:00
Stig Palmquist
6a215dec0d perl: 5.42.0 -> 5.42.3
5.42.3 ships the interpreter fixes and the updated dual-life modules, so
the CVE-2026-8376 patch and every vendoredPerlDistributions entry are
dropped.

perl-cross 1.6.4 has no patch set for 5.42.3, so the perl5-5.42.0 set,
which applies unchanged, is vendored under the name perl-cross expects.

- perl: CVE-2026-13221, CVE-2026-57432, CVE-2026-8376
  https://metacpan.org/release/SHAY/perl-5.42.3/view/pod/perldelta.pod

- HTTP-Tiny 0.096: CVE-2026-7010, CVE-2026-7017
  https://metacpan.org/release/HAARG/HTTP-Tiny-0.096/changes

- Socket 2.041: CVE-2026-12087
  https://metacpan.org/release/PEVANS/Socket-2.041/changes

- Storable 3.37_01: CVE-2026-57433

- Archive-Tar 3.12, Compress-Raw-Bzip2 2.218, Compress-Raw-Zlib 2.222,
  IO-Compress 2.223

Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io>
(cherry picked from commit 7b1e682245)
2026-09-29 08:10:54 +02:00
Vladimír Čunát
e7b465b341 [Backport staging-26.05] thrift: 0.22.0 -> 0.24.0 (#566086) 2026-09-29 04:48:46 +00:00
Vladimír Čunát
223d398747 [Backport staging-26.05] pcre2: 10.48 -> 10.49 (#568022) 2026-09-29 04:41:30 +00:00
Vladimír Čunát
98e5764a7a thrift: disable tests on darwin for now
https://hydra.nixos.org/build/346751725/step/6/log
(cherry picked from commit 9d087851f0)
I have no better way forward so far, I'm afraid.
2026-09-29 06:39:35 +02:00
nixpkgs-ci[bot]
aaa81848e1 Merge staging-next-26.05 into staging-26.05 2026-09-29 00:30:40 +00:00
nixpkgs-ci[bot]
decb995600 Merge release-26.05 into staging-next-26.05 2026-09-29 00:30:07 +00:00
R. Ryantm
5b7eba2431 imagemagick: 7.1.2-31 -> 7.1.2-32
(cherry picked from commit ab6ffe5aa3)
2026-09-29 00:26:12 +00:00