nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-30 16:10:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,020,313 Commits 285 Branches 81 Tags
2b7fc293239017429fad1046292f250d671e4259
Commit Graph

1020313 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
r-vdp
2b7fc29323 systemd: drop upstreamed tmpfiles noatime patch 
(cherry picked from commit 3dbcb86c1f)
(cherry picked from commit 9bcbc7814a)
 2026-06-22 08:21:28 +02:00
R. Ryantm
8336ce2319 systemd: 260.1 -> 260.2 
(cherry picked from commit d08a97a026)
(cherry picked from commit 8981bd36a7)
 2026-06-22 08:21:28 +02:00
Robert Schütz
e4f8aa8b23 ghostscript: 10.07.0 -> 10.07.1 
Changelog: https://ghostscript.readthedocs.io/en/gs10.07.1/News.html
(cherry picked from commit 6f5cb5357c)
(cherry picked from commit cab7cf2acd)
 2026-06-22 08:21:28 +02:00
whispers
1cf8084a61 xvfb: 21.1.22 -> 21.1.23, drop rebuild avoidance 
xorg announcement: https://lists.x.org/archives/xorg-announce/2026-June/003703.html
xorg advisory: https://lists.x.org/archives/xorg-announce/2026-June/003702.html

(cherry picked from commit 8310c133b7)
(cherry picked from commit 128add25cf)
 2026-06-22 08:21:27 +02:00
Martin Weinelt
360c80e281 python3Packages.django_5: 5.2.14 -> 5.2.15 
https://docs.djangoproject.com/en/5.2/releases/5.2.15/
https://www.djangoproject.com/weblog/2026/jun/03/security-releases/

Fixes:
CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193,
CVE-2026-48587

(cherry picked from commit 3b5d44bff5)
(cherry picked from commit 32ff989879)
 2026-06-22 08:21:27 +02:00
Robert Schütz
608382cc0c python3Packages.pyjwt: 2.12.1 -> 2.13.0 
Diff: https://github.com/jpadilla/pyjwt/compare/2.12.1...2.13.0

Changelog: https://github.com/jpadilla/pyjwt/blob/2.13.0/CHANGELOG.rst
(cherry picked from commit 3b6cda4e40)
(cherry picked from commit 35e7bdb1f4)
 2026-06-22 08:21:27 +02:00
Leon Klingele
9b9b7a4d93 go_1_26: 1.26.3 -> 1.26.4 
(cherry picked from commit b359a44a03)
(cherry picked from commit f16209a21e)
 2026-06-22 08:21:27 +02:00
whispers
15c74e4f1e libgcrypt: 1.11.2 -> 1.12.2 
1.12.0: https://dev.gnupg.org/T7643, https://lists.gnupg.org/pipermail/gnupg-announce/2026q1/000502.html
1.12.1: https://dev.gnupg.org/T8067
1.12.2: https://dev.gnupg.org/T8114, https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html

(cherry picked from commit 5131deab4e)
(cherry picked from commit 3cfb42b48e)
 2026-06-22 08:21:27 +02:00
Robert Schütz
e40d42cbb7 bzip2: patch CVE-2026-42250 
(cherry picked from commit a7b6fa34c1)
(cherry picked from commit 2f092df439)
 2026-06-22 08:19:29 +02:00
kuflierl
b3bdc19f55 libheif: 1.22.2 -> 1.23.0 
changelog: https://github.com/strukturag/libheif/releases/tag/v1.23.0
(cherry picked from commit 536f85e8fc)
(cherry picked from commit 96b8fd4e61)
 2026-06-22 08:19:28 +02:00
André Silva
2a0e0baec1 rustPlatform.fetchCargoVendor: remove duplicate fetcher 
(cherry picked from commit ddda3ed831)
(cherry picked from commit 570daf3d1c)
 2026-06-22 08:19:28 +02:00
winston
68be3d0beb sdl3: increase test timeout for testrwlock 
(cherry picked from commit 07bc340747)
(cherry picked from commit 5787be3409)
 2026-06-22 08:19:28 +02:00
Sergei Trofimovich
1b76c29160 sdl3: 3.4.8 -> 3.4.10 
Changes: https://github.com/libsdl-org/SDL/releases/tag/release-3.4.10
(cherry picked from commit 29533d61c2)
(cherry picked from commit 6910e98a97)
 2026-06-22 08:19:28 +02:00
Marcus Ramberg
f75e2f0964 perlPackages.HTTPDaemon: 6.16 -> 6.17 
(cherry picked from commit 6faf866564)
(cherry picked from commit dd4bec621d)
 2026-06-22 08:19:28 +02:00
Michael Daniels
83c65a6c34 gnupatch: disable flaky test 
Fixes #525260

(cherry picked from commit 64ae7d0e37)
(cherry picked from commit cebcbaab7a)
 2026-06-22 08:19:28 +02:00
Sefa Eyeoglu
3fcd08afd1 curl: backport performance patch 
2a2104f3cf

See https://curl.se/mail/distros-2026-05/0000.html

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit 06028a8aa5)
(cherry picked from commit 99edca13d2)
 2026-06-22 08:19:28 +02:00
kuflierl
96a47e2cd8 python3Packages.pillow-heif: disable tests that abuse spec and break in libheif 1.22.0, disable version check for libheif 
(cherry picked from commit 37ff020c2f)
(cherry picked from commit 37bd922bf9)
 2026-06-22 08:19:28 +02:00
kuflierl
dc108799c2 libheif: 1.21.2 -> 1.22.2 
(cherry picked from commit fd4f373715)
(cherry picked from commit bd4354a482)
 2026-06-22 08:19:27 +02:00
R. Ryantm
1526af39b9 publicsuffix-list: 0-unstable-2026-03-26 -> 0-unstable-2026-05-13 
(cherry picked from commit 963f597bc3)
(cherry picked from commit 379e54dd19)
 2026-06-22 08:19:27 +02:00
Martin Weinelt
b7a103e1c9 rust-cbindgen: 0.29.2 -> 0.29.3 
https://github.com/mozilla/cbindgen/blob/v0.29.3/CHANGES
(cherry picked from commit a2e41bb76c)
(cherry picked from commit b8a547de99)
 2026-06-22 08:19:27 +02:00
Hythera
29e701ec56 valkey: 9.0.4 -> 9.1.0 
changelog: https://github.com/valkey-io/valkey/releases/tag/9.1.0

diff: https://github.com/valkey-io/valkey/compare/9.0.4...9.1.0
(cherry picked from commit 51f6d0a44c)
(cherry picked from commit 09c98d00a4)
 2026-06-22 08:19:27 +02:00
Marcin Serwin
dcc6f5d962 nodejs: pin icu to newer version 
Not-cherry-picked-because: icu will be advanced globally on the unstable branch by https://github.com/NixOS/nixpkgs/pull/520553
Signed-off-by: Marcin Serwin <marcin@serwin.dev>
(cherry picked from commit 4b965d7e22)
 2026-06-22 08:19:27 +02:00
Robert Schütz
9ad85fe44d ffmpeg_8: 8.1 -> 8.1.1 
Changelog: https://github.com/FFmpeg/FFmpeg/blob/n8.1.1/Changelog
(cherry picked from commit 91518f18f5)
(cherry picked from commit e5b3e52db3)
 2026-06-22 08:19:27 +02:00
Robert Schütz
671e8aefd9 at-spi2-core: 2.60.1 -> 2.60.4 
(cherry picked from commit eb99a69943)
(cherry picked from commit 97dc0a920b)
 2026-06-22 08:19:27 +02:00
dish
1ed273b4fe rsync: 3.4.1 -> 3.4.3 
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702)
(cherry picked from commit b63badda22)
 2026-06-22 08:19:18 +02:00
Robert Schütz
88fbe351f2 python3Packages.mistune: 3.2.0 -> 3.2.1 
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1

Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd)
(cherry picked from commit 70c873b549)
 2026-06-22 08:16:20 +02:00
Lisanna Dettwyler
46b00f0ee0 rsync: skip chgrp test 
This test fails when built in a chroot store.

Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com>
(cherry picked from commit 9d229c780e)
(cherry picked from commit 87aae16c78)
 2026-06-22 08:16:20 +02:00
Robert Schütz
eac01b3060 fftw: 3.3.10 -> 3.3.11 
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f)
(cherry picked from commit 546ea47450)
 2026-06-22 08:16:17 +02:00
Doron Behar
fbaac14681 curl: set structuredAttrs 
(cherry picked from commit 160ca6558e)
(cherry picked from commit 9ea380a822)
 2026-06-22 08:16:17 +02:00
Robert Schütz
664ed12255 imagemagick: 7.1.2-23 -> 7.1.2-24 
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24

Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8)
(cherry picked from commit 99cd697f9f)
 2026-06-22 08:16:17 +02:00
Robert Schütz
880289462e libadwaita: 1.9.0 -> 1.9.1 
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1

Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca)
(cherry picked from commit 27504c8f0d)
 2026-06-22 08:16:17 +02:00
Robert Schütz
f4dff6b5f9 e2fsprogs: 1.47.3 -> 1.47.4 
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f)
(cherry picked from commit 4940e8201b)
 2026-06-22 08:16:16 +02:00
R. Ryantm
8b70ffa9d0 libaec: 1.1.6 -> 1.1.7 
(cherry picked from commit 6a792a71bf)
(cherry picked from commit 8d7f1c326f)
 2026-06-22 08:16:16 +02:00
whispers
a7e09a45bb cargo: add patches for CVE-2026-5222 and CVE-2026-5223 
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031

Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1)
 2026-06-22 08:16:16 +02:00
Liam Murphy
d0551bc010 openblas: 0.3.32 -> 0.3.33 
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681,
https://hydra.nixos.org/build/327030680); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763.

(cherry picked from commit 2ba029a78e)
(cherry picked from commit af26b2500d)
 2026-06-22 08:16:16 +02:00
Paul Grandperrin
a7d2d596af systemd: fix tmpfiles errors when mount is noatime 
fixes #520485

(cherry picked from commit d28f57cdff)
(cherry picked from commit 6c3ff74032)
 2026-06-22 08:16:16 +02:00
Martin Weinelt
f8562c7283 python3Packages.fastapi: 0.135.3 -> 0.136.3 
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf)
(cherry picked from commit bab01dc06d)
 2026-06-22 08:15:15 +02:00
Martin Weinelt
96f63700bc python3Packages.starlette: 0.52.1 -> 1.1.0 
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr

Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1)
(cherry picked from commit a416d0dc4f)
 2026-06-22 08:15:15 +02:00
R. Ryantm
752123aaa9 libde265: 1.0.18 -> 1.0.19 
(cherry picked from commit 8aa7c75b47)
(cherry picked from commit a14161da71)
 2026-06-22 08:15:15 +02:00
R. Ryantm
179557247b freetype: 2.14.2 -> 2.14.3 
(cherry picked from commit 21622bac70)
(cherry picked from commit 3a60965e17)
 2026-06-22 08:15:15 +02:00
Thomas Gerbet
bd2d251cdc libcaca: apply patch for CVE-2026-42046 
Fixes https://github.com/NixOS/nixpkgs/issues/519387

(cherry picked from commit 00cd8e646c)
(cherry picked from commit 8513d19d4f)
 2026-06-22 08:15:15 +02:00
Hythera
9756eaf1f8 assimp: 6.0.4 -> 6.0.5 
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md

diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236)
(cherry picked from commit cfdafe68e0)
 2026-06-22 08:15:15 +02:00
Eman Resu
8b34d586be libass: remove libiconv dependency on darwin 
This is already in stdenv.

(cherry picked from commit f6172a101f)
(cherry picked from commit dd411ee505)
 2026-06-22 08:15:14 +02:00
Sergei Trofimovich
ba90fa78f8 simdjson: 4.6.0 -> 4.6.4 
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4

(cherry picked from commit 3803be5263)
(cherry picked from commit c0e4b6b891)
 2026-06-22 08:15:14 +02:00
znaniye
5eaef15328 duplicity: remove invoke from dependencies 
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml

(cherry picked from commit b6254c48df)
(cherry picked from commit 747ba2d376)
 2026-06-22 08:15:14 +02:00
znaniye
8806b112de python3Packages.paramiko: invoke is a required dependency 
(cherry picked from commit 9088b3d167)
(cherry picked from commit f5ae9c36bf)
 2026-06-22 08:15:14 +02:00
Guilhem Saurel
790c6832f2 doctest: 2.5.0 -> 2.5.2 
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2

Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2)
(cherry picked from commit be6ec59922)
 2026-06-22 08:15:14 +02:00
zowoq
bbacb13154 glibc: 2.42-61 -> 2.42-67 
(cherry picked from commit 4a8e8392a4)
(cherry picked from commit e0c442323b)
 2026-06-22 08:15:14 +02:00
K900
6e26421199 qt6: 6.11.0 -> 6.11.1 
(cherry picked from commit 1b3320b2d9)
(cherry picked from commit abe60ca22f)
 2026-06-22 08:15:14 +02:00
K900
c5cd03ad0d kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression 
(cherry picked from commit 66adfb9dab)
(cherry picked from commit 7a4e6649b6)
 2026-06-22 08:15:13 +02:00