Commit Graph

1020290 Commits

Author SHA1 Message Date
Robert Schütz
671e8aefd9 at-spi2-core: 2.60.1 -> 2.60.4
(cherry picked from commit eb99a69943)
(cherry picked from commit 97dc0a920b)
2026-06-22 08:19:27 +02:00
dish
1ed273b4fe rsync: 3.4.1 -> 3.4.3
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702)
(cherry picked from commit b63badda22)
2026-06-22 08:19:18 +02:00
Robert Schütz
88fbe351f2 python3Packages.mistune: 3.2.0 -> 3.2.1
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1

Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd)
(cherry picked from commit 70c873b549)
2026-06-22 08:16:20 +02:00
Lisanna Dettwyler
46b00f0ee0 rsync: skip chgrp test
This test fails when built in a chroot store.

Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com>
(cherry picked from commit 9d229c780e)
(cherry picked from commit 87aae16c78)
2026-06-22 08:16:20 +02:00
Robert Schütz
eac01b3060 fftw: 3.3.10 -> 3.3.11
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f)
(cherry picked from commit 546ea47450)
2026-06-22 08:16:17 +02:00
Doron Behar
fbaac14681 curl: set structuredAttrs
(cherry picked from commit 160ca6558e)
(cherry picked from commit 9ea380a822)
2026-06-22 08:16:17 +02:00
Robert Schütz
664ed12255 imagemagick: 7.1.2-23 -> 7.1.2-24
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24

Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8)
(cherry picked from commit 99cd697f9f)
2026-06-22 08:16:17 +02:00
Robert Schütz
880289462e libadwaita: 1.9.0 -> 1.9.1
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1

Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca)
(cherry picked from commit 27504c8f0d)
2026-06-22 08:16:17 +02:00
Robert Schütz
f4dff6b5f9 e2fsprogs: 1.47.3 -> 1.47.4
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f)
(cherry picked from commit 4940e8201b)
2026-06-22 08:16:16 +02:00
R. Ryantm
8b70ffa9d0 libaec: 1.1.6 -> 1.1.7
(cherry picked from commit 6a792a71bf)
(cherry picked from commit 8d7f1c326f)
2026-06-22 08:16:16 +02:00
whispers
a7e09a45bb cargo: add patches for CVE-2026-5222 and CVE-2026-5223
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031

Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1)
2026-06-22 08:16:16 +02:00
Liam Murphy
d0551bc010 openblas: 0.3.32 -> 0.3.33
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681,
https://hydra.nixos.org/build/327030680); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763.

(cherry picked from commit 2ba029a78e)
(cherry picked from commit af26b2500d)
2026-06-22 08:16:16 +02:00
Paul Grandperrin
a7d2d596af systemd: fix tmpfiles errors when mount is noatime
fixes #520485

(cherry picked from commit d28f57cdff)
(cherry picked from commit 6c3ff74032)
2026-06-22 08:16:16 +02:00
Martin Weinelt
f8562c7283 python3Packages.fastapi: 0.135.3 -> 0.136.3
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf)
(cherry picked from commit bab01dc06d)
2026-06-22 08:15:15 +02:00
Martin Weinelt
96f63700bc python3Packages.starlette: 0.52.1 -> 1.1.0
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr

Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1)
(cherry picked from commit a416d0dc4f)
2026-06-22 08:15:15 +02:00
R. Ryantm
752123aaa9 libde265: 1.0.18 -> 1.0.19
(cherry picked from commit 8aa7c75b47)
(cherry picked from commit a14161da71)
2026-06-22 08:15:15 +02:00
R. Ryantm
179557247b freetype: 2.14.2 -> 2.14.3
(cherry picked from commit 21622bac70)
(cherry picked from commit 3a60965e17)
2026-06-22 08:15:15 +02:00
Thomas Gerbet
bd2d251cdc libcaca: apply patch for CVE-2026-42046
Fixes https://github.com/NixOS/nixpkgs/issues/519387

(cherry picked from commit 00cd8e646c)
(cherry picked from commit 8513d19d4f)
2026-06-22 08:15:15 +02:00
Hythera
9756eaf1f8 assimp: 6.0.4 -> 6.0.5
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md

diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236)
(cherry picked from commit cfdafe68e0)
2026-06-22 08:15:15 +02:00
Eman Resu
8b34d586be libass: remove libiconv dependency on darwin
This is already in stdenv.

(cherry picked from commit f6172a101f)
(cherry picked from commit dd411ee505)
2026-06-22 08:15:14 +02:00
Sergei Trofimovich
ba90fa78f8 simdjson: 4.6.0 -> 4.6.4
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4

(cherry picked from commit 3803be5263)
(cherry picked from commit c0e4b6b891)
2026-06-22 08:15:14 +02:00
znaniye
5eaef15328 duplicity: remove invoke from dependencies
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml

(cherry picked from commit b6254c48df)
(cherry picked from commit 747ba2d376)
2026-06-22 08:15:14 +02:00
znaniye
8806b112de python3Packages.paramiko: invoke is a required dependency
(cherry picked from commit 9088b3d167)
(cherry picked from commit f5ae9c36bf)
2026-06-22 08:15:14 +02:00
Guilhem Saurel
790c6832f2 doctest: 2.5.0 -> 2.5.2
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2

Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2)
(cherry picked from commit be6ec59922)
2026-06-22 08:15:14 +02:00
zowoq
bbacb13154 glibc: 2.42-61 -> 2.42-67
(cherry picked from commit 4a8e8392a4)
(cherry picked from commit e0c442323b)
2026-06-22 08:15:14 +02:00
K900
6e26421199 qt6: 6.11.0 -> 6.11.1
(cherry picked from commit 1b3320b2d9)
(cherry picked from commit abe60ca22f)
2026-06-22 08:15:14 +02:00
K900
c5cd03ad0d kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression
(cherry picked from commit 66adfb9dab)
(cherry picked from commit 7a4e6649b6)
2026-06-22 08:15:13 +02:00
Robert Schütz
8e3eb65c3c python3Packages.aiodns: 4.0.3 -> 4.0.4
Diff: https://github.com/saghul/aiodns/compare/v4.0.3...v4.0.4

Changelog: https://github.com/saghul/aiodns/releases/tag/v4.0.4
(cherry picked from commit a53c6a3897)
(cherry picked from commit 10cf133bbf)
2026-06-22 08:15:10 +02:00
Vladimír Čunát
8accd65376 gtk4: make patch unconditional
The condition was just to avoid rebuilds at that moment.

(cherry picked from commit ace84983c4)
(cherry picked from commit 25498003f3)
2026-06-22 08:01:02 +02:00
Robert Schütz
5c3ae22a1b python3Packages.frictionless: exclude datasette from nativeCheckInputs
Datasette depends on asgi-csrf which was broken by updating
python-multipart past version 0.0.26.

(cherry picked from commit ba2df560b6)
(cherry picked from commit 4316ed9b28)
2026-06-22 08:01:02 +02:00
Robert Schütz
44573c77ca python3Packages.asgi-csrf: mark broken
(cherry picked from commit 1355d225b6)
(cherry picked from commit b928e51eac)
2026-06-22 08:01:02 +02:00
Robert Schütz
dcbc584e55 python3Packages.python-multipart: 0.0.22 -> 0.0.29
Diff: https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.29

Changelog: https://github.com/Kludex/python-multipart/blob/0.0.29/CHANGELOG.md
(cherry picked from commit 83594b9031)
(cherry picked from commit 5010b8e892)
2026-06-22 08:01:02 +02:00
Sefa Eyeoglu
8861a6b466 unbound: 1.25.0 -> 1.25.1
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit 0c98395be2)
(cherry picked from commit 7195978163)
2026-06-22 08:01:02 +02:00
Antoine du Hamel
988d5e4c9f nodejs_24: 24.15.0 -> 24.16.0
(cherry picked from commit e9b7cf2133)
(cherry picked from commit 252225814a)
2026-06-22 08:01:01 +02:00
ElXreno
e717fb6c8f openldap: skip flaky syncreplication tests
(cherry picked from commit 63147b12a5)
(cherry picked from commit ab31c6a228)
2026-06-22 08:01:01 +02:00
K900
344a6379c3 qt5: 5.15.18 -> 5.15.19
(cherry picked from commit 52afc5fa58)
(cherry picked from commit 0b9b29e421)
2026-06-22 08:01:01 +02:00
Martin Weinelt
ebd0392d1b python3Packages.xmltodict: 1.0.2 -> 1.0.4
https://github.com/martinblech/xmltodict/blob/v1.0.4/CHANGELOG.md
(cherry picked from commit 70d339f357)
(cherry picked from commit 3a7535469a)
2026-06-22 08:01:01 +02:00
Martin Weinelt
49d2ce082a python3Packages.aiodns: 4.0.0 -> 4.0.3
https://github.com/saghul/aiodns/releases/tag/v4.0.1
https://github.com/saghul/aiodns/releases/tag/v4.0.2
https://github.com/saghul/aiodns/releases/tag/v4.0.3
(cherry picked from commit 78f51bc5bc)
(cherry picked from commit aea1edbd62)
2026-06-22 08:01:01 +02:00
Hythera
ab6adf5c82 openapv: 0.2.1.2 -> 0.2.1.3
changelog: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v0.2.1.3-fix

diff: https://github.com/AcademySoftwareFoundation/openapv/compare/v0.2.1.2...v0.2.1.3-fix
(cherry picked from commit 02d2fdd686)
(cherry picked from commit ce58349f07)
2026-06-22 08:01:01 +02:00
Hythera
f479a5dca2 openexr: 3.4.10 -> 3.4.11
changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11

diff: https://github.com/AcademySoftwareFoundation/openexr/compare/v3.4.10...v3.4.11
(cherry picked from commit 32f67f000b)
(cherry picked from commit 34b3da5050)
2026-06-22 08:01:01 +02:00
Ruud van Asseldonk
c0a53e6950 libressl_4_3: backport executable stack fix
And also add an additional check to preCheck that will enable us to
catch executable stack issues earlier next time.

(cherry picked from commit 5198c49a5a)
(cherry picked from commit 4248c5fd7a)
2026-06-22 08:01:01 +02:00
Ruud van Asseldonk
7c6518130d libressl: enable strictDeps and __structuredAttrs
(cherry picked from commit c74cade494)
(cherry picked from commit 6fbc1e2a1d)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk
d5937f2bc8 libressl: add ruuda as maintainer
I've been keeping this package up to date over the past few years, since
I run a webserver that depends on it. I'd be happy to be co-maintainer
for it, and hopefully reduce the load on others.

(cherry picked from commit 1665623390)
(cherry picked from commit 6fd22ccf4c)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk
fdf4fbeb3d libressl_4_1: delete unsupported package
LibreSSL branches are supported for one year after the OpenBSD release
in which they are included. LibreSSL 4.1 was part of OpenBSD 7.7, which
was released on April 28, 2025, so it's end of life now.

(cherry picked from commit 0bfe3de9ed)
(cherry picked from commit 8953025b90)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk
85e30362dd libressl_4_3: init at 4.3.1
I also added expiration date comments on all of them, because I always
spend some time chasing what the support dates are, and it would save
maintainer time to be able to see what to do with these branches.

(cherry picked from commit feb7c9ff78)
(cherry picked from commit c6eddcf80a)
2026-06-22 08:01:00 +02:00
Grimmauld
2102ac377d audit: 4.1.2-unstable-2025-09-06 -> 4.1.4
Upstream diff: cb13fe75ee...v4.1.4

Adds support for io_uring and syscalls of Linux 7.0 kernels.

(cherry picked from commit 2b8ed1fe21)
(cherry picked from commit 5aece021f4)
2026-06-22 08:01:00 +02:00
Vladimír Čunát
412b051db6 Revert "groff: only apply the latest patch on linux for now"
This reverts commit 37a9427fd3.

(cherry picked from commit b2e8b0c602)
(cherry picked from commit e682a0e50a)
2026-06-22 08:01:00 +02:00
whispers
e866333c7b expat: 2.8.0 -> 2.8.1
Changelog: https://github.com/libexpat/libexpat/blob/R_2_8_1/expat/Changes
Diff: https://github.com/libexpat/libexpat/compare/R_2_8_0...R_2_8_1

Fixes: CVE-2026-45186
(cherry picked from commit fe1ca2c575)
(cherry picked from commit d7c0b19df2)
2026-06-22 07:59:32 +02:00
nixpkgs-ci[bot]
9e5fbcf68a Merge master into staging-next 2026-06-22 00:50:42 +00:00
taku0
4831080ceb thunderbird-latest-bin-unwrapped: 151.0.1 -> 152.0 (#533724) 2026-06-22 00:42:41 +00:00