Gerhard Schwanzer
89a606c108
pnpm_10_latest: init at 10.34.5
...
Keep pnpm_10 at 10.34.0 for out-of-tree compatibility and mark it
insecure. Add pnpm_10_latest at 10.34.5 and make variant generation
and updater targets attribute-specific.
Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 19:59:55 +02:00
Nick Cao
265f53ffc8
[release-26.05] openbao: 2.6.3 -> 2.6.4 ( #569506 )
2026-10-02 17:40:20 +00:00
whispers
371e6b9ef9
[Backport release-26.05] arti: 2.6.0 -> 2.7.0 ( #569451 )
2026-10-02 17:09:34 +00:00
emilylange
2a3e3a7b01
openbao: 2.6.3 -> 2.6.4
...
https://github.com/openbao/openbao/releases/tag/v2.6.4
Not-cherry-picked-because: openbao 2.7.x on master is a breaking change
2026-10-02 18:47:16 +02:00
Vladimír Čunát
ed9756736f
[Backport release-26.05] apacheHttpd: 2.4.68 -> 2.4.69 ( #569434 )
2026-10-02 14:52:28 +00:00
nixpkgs-ci[bot]
29249cf731
[Backport release-26.05] bark-server: 2.3.5 -> 2.3.7 ( #569466 )
2026-10-02 14:29:18 +00:00
R. Ryantm
f3a34ea3c0
bark-server: 2.3.5 -> 2.3.7
...
(cherry picked from commit e9a5f00a12 )
2026-10-02 14:23:07 +00:00
Matt Sturgeon
c03ddb1441
[Backport release-26.05] .github: Bump actions/checkout from 6.0.3 to 7.0.1 ( #569452 )
2026-10-02 13:42:21 +00:00
Matt Sturgeon
b9f0f29d38
[backport release-26.05] nixpkgs-update: update links after move to NixOS org ( #569448 )
2026-10-02 13:31:31 +00:00
Philip Taron
da8d99bb46
workflows/eval: allow fork PR checkout of ci/pinned.json
...
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The versions job checks out ci/pinned.json at the PR's merge commit,
which matches pull_request.merge_commit_sha (or head.sha) in the event
payload and would be rejected.
Only ci/pinned.json is checked out, without persisted credentials, and
it is read as data by trusted/ci/supportedVersions.nix, so opting in is
safe.
Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 9d1a3338ee )
2026-10-02 13:30:49 +00:00
Philip Taron
4945a1321e
workflows/backport: allow fork PR checkout with actions/checkout v7
...
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The backport job checks out the merged PR's head to cherry-pick it,
which broke after #545205 and led to the revert in #546423 .
The PR is already merged and its commits are only handled by git,
never executed, so opting in is safe.
Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 6f71237561 )
2026-10-02 13:30:49 +00:00
dependabot[bot]
499e2657cb
.github: Bump actions/checkout in /.github/actions/checkout
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
(cherry picked from commit 03b746c7ad )
2026-10-02 13:30:48 +00:00
dependabot[bot]
b81b7f4500
.github: Bump actions/checkout from 6.0.3 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
(cherry picked from commit 8c09b93f27 )
2026-10-02 13:30:47 +00:00
dependabot[bot]
9bd51d2c76
.github: Bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...9c091bb21b )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
(cherry picked from commit 754c76eccc )
2026-10-02 13:30:46 +00:00
whispers
06f9f3d5ad
arti: 2.6.0 -> 2.7.0
...
blog: https://blog.torproject.org/arti_2_7_0_released/
changelog: https://gitlab.torproject.org/tpo/core/arti/-/blob/arti-v2.7.0/CHANGELOG.md
diff: https://gitlab.torproject.org/tpo/core/arti/-/compare/arti-v2.6.0...arti-v2.7.0
trove: https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE/2026
this release fixes 1 high, 5 medium, and 6 low severity security vulnerabilities.
(cherry picked from commit dcc96468d8 )
2026-10-02 13:30:44 +00:00
Martin Fischer
a1efd4705e
nixpkgs-update: update links after move to NixOS org
...
(cherry picked from commit bf338732f2 )
2026-10-02 14:20:28 +01:00
nixpkgs-ci[bot]
d921b655ce
[Backport release-26.05] ledger-live-desktop: 4.19.1 -> 4.21.1 ( #569443 )
2026-10-02 13:12:09 +00:00
Marc Jakobi
de060e4765
[Backport release-26.05] lua5_5: 5.5.0 -> 5.5.1 ( #569423 )
2026-10-02 13:07:47 +00:00
R. Ryantm
a1a30b67cc
ledger-live-desktop: 4.19.1 -> 4.21.1
...
(cherry picked from commit bd2598e454 )
2026-10-02 13:06:14 +00:00
Adam C. Stephens
63cc189521
[Backport release-26.05] kanidm_1_9: mark as unsupported; kanidm_1_10: mark as unsupported ( #569432 )
2026-10-02 12:48:44 +00:00
arcayr
69ef984a2b
apacheHttpd: 2.4.68 -> 2.4.69
...
(cherry picked from commit 9a7bacd455 )
2026-10-02 12:41:47 +00:00
Tom Herbers
497d4b27cf
kanidm_1_10: mark as unsupported
...
(cherry picked from commit e87f344c7d )
2026-10-02 14:37:33 +02:00
Tom Herbers
44cc47b04b
kanidm_1_9: mark as unsupported
...
(cherry picked from commit 88ba7772cb )
2026-10-02 14:37:31 +02:00
Skye Soss
161d92f41d
lua5_5: 5.5.0 -> 5.5.1
...
(cherry picked from commit cf4c2cf92a )
2026-10-02 12:20:07 +00:00
nixpkgs-ci[bot]
9d18fec866
[Backport release-26.05] ejabberd: 26.07 → 26.09 ( #569414 )
2026-10-02 12:01:10 +00:00
·𐑑𐑴𐑕𐑑𐑩𐑤
a3b1a8fe2c
ejabberd: 26.07 → 26.09
...
(cherry picked from commit 57ddd2f55a )
2026-10-02 11:40:03 +00:00
·𐑑𐑴𐑕𐑑𐑩𐑤
d875acc2d3
ejabberd: fix nix-shell shebangs
...
(cherry picked from commit 3a278bac9e )
2026-10-02 11:40:03 +00:00
Sandro
467c4a0a11
[Backport release=26.05] nextcloud-client: 4.0.8 -> 34.0.3 ( #564933 )
2026-10-02 11:11:52 +00:00
teutat3s
817bf21a3d
[Backport release-26.05] signal-desktop: 8.25.0 -> 8.26.0 ( #569086 )
2026-10-02 10:05:18 +00:00
Bobby Rong
b6c40bcec0
[Backport release-26.05] xapp: 3.2.2 -> 3.2.3 ( #569257 )
2026-10-02 09:40:44 +00:00
Sandro
a43ff4e344
[Backport release-26.05] libvlc: 3.0.23-2 -> 3.0.24 ( #568709 )
2026-10-02 08:42:03 +00:00
Sandro
4f3fa28aff
[release-26.05] redmine: 6.1.4 -> 6.1.5 ( #568887 )
2026-10-02 08:40:51 +00:00
Kerstin Humm
7194869e2c
[release-26.05] mastodon: 4.6.8 -> 4.6.9 ( #569053 )
2026-10-02 08:23:34 +00:00
Martin Weinelt
ed4288bdbb
[Backport release-26.05] zigbee2mqtt: 2.14.1 -> 2.14.2 ( #569328 )
2026-10-02 07:45:03 +00:00
Martin Weinelt
816f7e4024
zigbee2mqtt: 2.14.1 -> 2.14.2
...
https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.14.2
(cherry picked from commit 4094ccec48 )
2026-10-02 07:22:13 +00:00
Jan Tojnar
774debe7a0
[26.05] gnome: 50.4 -> 50.5 ( #567877 )
2026-10-02 05:55:29 +00:00
R. Ryantm
7e860623f6
xapp: 3.2.2 -> 3.2.3
...
(cherry picked from commit 60acd9bcdc )
2026-10-02 01:35:38 +00:00
Matt Sturgeon
1532cf179c
[Backport release-26.05] teams/gaming: init ( #569236 )
2026-10-02 00:07:58 +00:00
yvnth
5b63e20e87
maintainers: add yvnth as maintainer
...
(cherry picked from commit eb933d07dd )
2026-10-02 01:00:53 +01:00
Rafael Ieda
49c193d94b
teams/gaming: init
...
(cherry picked from commit 8c653bfa42 )
2026-10-01 23:51:03 +00:00
Angel J
c324372b62
signal-desktop: fix missing endian headers in Darwin NASM build
...
Assisted-by: GPT-6 Astra
2026-10-01 16:27:14 -07:00
Matt Sturgeon
3f37da4c2a
[Backport release-26.05] maintainers/github-teams.json: Automated sync ( #569209 )
2026-10-01 22:36:38 +00:00
nixpkgs-ci[bot]
28af0433a3
maintainers/github-teams.json: Automated sync
...
(cherry picked from commit 43f8c5e5ec )
2026-10-01 22:23:41 +00:00
Ryan Hendrickson
dc5ab38d0b
[Backport release-26.05] firefox-devedition-unwrapped: 156.0b4 -> 158.0b1 ( #569100 )
2026-10-01 22:17:37 +00:00
Martin Weinelt
2e7ec8d08d
[Backport release-26.05] zigbee2mqtt: 2.14.0 -> 2.14.1 ( #569181 )
2026-10-01 21:18:08 +00:00
Bjørn Forsman
1cdc2bfca8
zigbee2mqtt: 2.14.0 -> 2.14.1
...
Release notes: https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.14.1
(cherry picked from commit 1cde1c190c )
2026-10-01 21:11:57 +00:00
Marie Ramlow
98dabab287
[release-26.05] victorialogs: 1.52.0 -> 1.52.1 ( #569175 )
2026-10-01 21:07:25 +00:00
Adam C. Stephens
1226ab55c0
victorialogs: 1.52.0 -> 1.52.1
...
Changelog: https://github.com/VictoriaMetrics/VictoriaLogs/releases/tag/v1.52.1
2026-10-01 16:48:58 -04:00
Sefa Eyeoglu
1de06c9151
[Backport release-26.05] vencord: 1.15.7 -> 1.15.9 ( #569131 )
2026-10-01 20:21:10 +00:00
Sandro
23bc176d7b
[Backport release-26.05] oauth2-proxy: 7.15.4 -> 7.15.5 ( #569108 )
2026-10-01 19:25:14 +00:00