Commit Graph

1015384 Commits

Author SHA1 Message Date
Gerhard Schwanzer
89a606c108 pnpm_10_latest: init at 10.34.5
Keep pnpm_10 at 10.34.0 for out-of-tree compatibility and mark it
insecure. Add pnpm_10_latest at 10.34.5 and make variant generation
and updater targets attribute-specific.

Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 19:59:55 +02:00
Nick Cao
265f53ffc8 [release-26.05] openbao: 2.6.3 -> 2.6.4 (#569506) 2026-10-02 17:40:20 +00:00
whispers
371e6b9ef9 [Backport release-26.05] arti: 2.6.0 -> 2.7.0 (#569451) 2026-10-02 17:09:34 +00:00
emilylange
2a3e3a7b01 openbao: 2.6.3 -> 2.6.4
https://github.com/openbao/openbao/releases/tag/v2.6.4

Not-cherry-picked-because: openbao 2.7.x on master is a breaking change
2026-10-02 18:47:16 +02:00
Vladimír Čunát
ed9756736f [Backport release-26.05] apacheHttpd: 2.4.68 -> 2.4.69 (#569434) 2026-10-02 14:52:28 +00:00
nixpkgs-ci[bot]
29249cf731 [Backport release-26.05] bark-server: 2.3.5 -> 2.3.7 (#569466) 2026-10-02 14:29:18 +00:00
R. Ryantm
f3a34ea3c0 bark-server: 2.3.5 -> 2.3.7
(cherry picked from commit e9a5f00a12)
2026-10-02 14:23:07 +00:00
Matt Sturgeon
c03ddb1441 [Backport release-26.05] .github: Bump actions/checkout from 6.0.3 to 7.0.1 (#569452) 2026-10-02 13:42:21 +00:00
Matt Sturgeon
b9f0f29d38 [backport release-26.05] nixpkgs-update: update links after move to NixOS org (#569448) 2026-10-02 13:31:31 +00:00
Philip Taron
da8d99bb46 workflows/eval: allow fork PR checkout of ci/pinned.json
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The versions job checks out ci/pinned.json at the PR's merge commit,
which matches pull_request.merge_commit_sha (or head.sha) in the event
payload and would be rejected.

Only ci/pinned.json is checked out, without persisted credentials, and
it is read as data by trusted/ci/supportedVersions.nix, so opting in is
safe.

Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 9d1a3338ee)
2026-10-02 13:30:49 +00:00
Philip Taron
4945a1321e workflows/backport: allow fork PR checkout with actions/checkout v7
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The backport job checks out the merged PR's head to cherry-pick it,
which broke after #545205 and led to the revert in #546423.

The PR is already merged and its commits are only handled by git,
never executed, so opting in is safe.

Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 6f71237561)
2026-10-02 13:30:49 +00:00
dependabot[bot]
499e2657cb .github: Bump actions/checkout in /.github/actions/checkout
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](df4cb1c069...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 03b746c7ad)
2026-10-02 13:30:48 +00:00
dependabot[bot]
b81b7f4500 .github: Bump actions/checkout from 6.0.3 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](df4cb1c069...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 8c09b93f27)
2026-10-02 13:30:47 +00:00
dependabot[bot]
9bd51d2c76 .github: Bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](df4cb1c069...9c091bb21b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 754c76eccc)
2026-10-02 13:30:46 +00:00
whispers
06f9f3d5ad arti: 2.6.0 -> 2.7.0
blog: https://blog.torproject.org/arti_2_7_0_released/
changelog: https://gitlab.torproject.org/tpo/core/arti/-/blob/arti-v2.7.0/CHANGELOG.md
diff: https://gitlab.torproject.org/tpo/core/arti/-/compare/arti-v2.6.0...arti-v2.7.0
trove: https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE/2026

this release fixes 1 high, 5 medium, and 6 low severity security vulnerabilities.

(cherry picked from commit dcc96468d8)
2026-10-02 13:30:44 +00:00
Martin Fischer
a1efd4705e nixpkgs-update: update links after move to NixOS org
(cherry picked from commit bf338732f2)
2026-10-02 14:20:28 +01:00
nixpkgs-ci[bot]
d921b655ce [Backport release-26.05] ledger-live-desktop: 4.19.1 -> 4.21.1 (#569443) 2026-10-02 13:12:09 +00:00
Marc Jakobi
de060e4765 [Backport release-26.05] lua5_5: 5.5.0 -> 5.5.1 (#569423) 2026-10-02 13:07:47 +00:00
R. Ryantm
a1a30b67cc ledger-live-desktop: 4.19.1 -> 4.21.1
(cherry picked from commit bd2598e454)
2026-10-02 13:06:14 +00:00
Adam C. Stephens
63cc189521 [Backport release-26.05] kanidm_1_9: mark as unsupported; kanidm_1_10: mark as unsupported (#569432) 2026-10-02 12:48:44 +00:00
arcayr
69ef984a2b apacheHttpd: 2.4.68 -> 2.4.69
(cherry picked from commit 9a7bacd455)
2026-10-02 12:41:47 +00:00
Tom Herbers
497d4b27cf kanidm_1_10: mark as unsupported
(cherry picked from commit e87f344c7d)
2026-10-02 14:37:33 +02:00
Tom Herbers
44cc47b04b kanidm_1_9: mark as unsupported
(cherry picked from commit 88ba7772cb)
2026-10-02 14:37:31 +02:00
Skye Soss
161d92f41d lua5_5: 5.5.0 -> 5.5.1
(cherry picked from commit cf4c2cf92a)
2026-10-02 12:20:07 +00:00
nixpkgs-ci[bot]
9d18fec866 [Backport release-26.05] ejabberd: 26.07 → 26.09 (#569414) 2026-10-02 12:01:10 +00:00
·𐑑𐑴𐑕𐑑𐑩𐑤
a3b1a8fe2c ejabberd: 26.07 → 26.09
(cherry picked from commit 57ddd2f55a)
2026-10-02 11:40:03 +00:00
·𐑑𐑴𐑕𐑑𐑩𐑤
d875acc2d3 ejabberd: fix nix-shell shebangs
(cherry picked from commit 3a278bac9e)
2026-10-02 11:40:03 +00:00
Sandro
467c4a0a11 [Backport release=26.05] nextcloud-client: 4.0.8 -> 34.0.3 (#564933) 2026-10-02 11:11:52 +00:00
teutat3s
817bf21a3d [Backport release-26.05] signal-desktop: 8.25.0 -> 8.26.0 (#569086) 2026-10-02 10:05:18 +00:00
Bobby Rong
b6c40bcec0 [Backport release-26.05] xapp: 3.2.2 -> 3.2.3 (#569257) 2026-10-02 09:40:44 +00:00
Sandro
a43ff4e344 [Backport release-26.05] libvlc: 3.0.23-2 -> 3.0.24 (#568709) 2026-10-02 08:42:03 +00:00
Sandro
4f3fa28aff [release-26.05] redmine: 6.1.4 -> 6.1.5 (#568887) 2026-10-02 08:40:51 +00:00
Kerstin Humm
7194869e2c [release-26.05] mastodon: 4.6.8 -> 4.6.9 (#569053) 2026-10-02 08:23:34 +00:00
Martin Weinelt
ed4288bdbb [Backport release-26.05] zigbee2mqtt: 2.14.1 -> 2.14.2 (#569328) 2026-10-02 07:45:03 +00:00
Martin Weinelt
816f7e4024 zigbee2mqtt: 2.14.1 -> 2.14.2
https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.14.2
(cherry picked from commit 4094ccec48)
2026-10-02 07:22:13 +00:00
Jan Tojnar
774debe7a0 [26.05] gnome: 50.4 -> 50.5 (#567877) 2026-10-02 05:55:29 +00:00
R. Ryantm
7e860623f6 xapp: 3.2.2 -> 3.2.3
(cherry picked from commit 60acd9bcdc)
2026-10-02 01:35:38 +00:00
Matt Sturgeon
1532cf179c [Backport release-26.05] teams/gaming: init (#569236) 2026-10-02 00:07:58 +00:00
yvnth
5b63e20e87 maintainers: add yvnth as maintainer
(cherry picked from commit eb933d07dd)
2026-10-02 01:00:53 +01:00
Rafael Ieda
49c193d94b teams/gaming: init
(cherry picked from commit 8c653bfa42)
2026-10-01 23:51:03 +00:00
Angel J
c324372b62 signal-desktop: fix missing endian headers in Darwin NASM build
Assisted-by: GPT-6 Astra
2026-10-01 16:27:14 -07:00
Matt Sturgeon
3f37da4c2a [Backport release-26.05] maintainers/github-teams.json: Automated sync (#569209) 2026-10-01 22:36:38 +00:00
nixpkgs-ci[bot]
28af0433a3 maintainers/github-teams.json: Automated sync
(cherry picked from commit 43f8c5e5ec)
2026-10-01 22:23:41 +00:00
Ryan Hendrickson
dc5ab38d0b [Backport release-26.05] firefox-devedition-unwrapped: 156.0b4 -> 158.0b1 (#569100) 2026-10-01 22:17:37 +00:00
Martin Weinelt
2e7ec8d08d [Backport release-26.05] zigbee2mqtt: 2.14.0 -> 2.14.1 (#569181) 2026-10-01 21:18:08 +00:00
Bjørn Forsman
1cdc2bfca8 zigbee2mqtt: 2.14.0 -> 2.14.1
Release notes: https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.14.1

(cherry picked from commit 1cde1c190c)
2026-10-01 21:11:57 +00:00
Marie Ramlow
98dabab287 [release-26.05] victorialogs: 1.52.0 -> 1.52.1 (#569175) 2026-10-01 21:07:25 +00:00
Adam C. Stephens
1226ab55c0 victorialogs: 1.52.0 -> 1.52.1
Changelog: https://github.com/VictoriaMetrics/VictoriaLogs/releases/tag/v1.52.1
2026-10-01 16:48:58 -04:00
Sefa Eyeoglu
1de06c9151 [Backport release-26.05] vencord: 1.15.7 -> 1.15.9 (#569131) 2026-10-01 20:21:10 +00:00
Sandro
23bc176d7b [Backport release-26.05] oauth2-proxy: 7.15.4 -> 7.15.5 (#569108) 2026-10-01 19:25:14 +00:00