Commit Graph

1015432 Commits

Author SHA1 Message Date
zowoq
ece9cdbe12 linux_6_12: 6.12.111 -> 6.12.112
(cherry picked from commit d97b7c19a4)
2026-10-03 12:34:19 +00:00
zowoq
e49e9152d6 linux_6_18: 6.18.54 -> 6.18.55
(cherry picked from commit 876aae2fbb)
2026-10-03 12:34:19 +00:00
zowoq
6b61934171 linux_7_2: 7.2.8 -> 7.2.9
(cherry picked from commit c9bc02b040)
2026-10-03 12:34:18 +00:00
Jonas Heinrich
c274260167 [Backport release-26.05] invoiceplane: 1.7.2 -> 1.7.2.1 (#569570) 2026-10-03 12:04:45 +00:00
Sefa Eyeoglu
c0883d13c2 [Backport release-26.05] prismlauncher: 11.1.0 -> 11.1.1 (#569584) 2026-10-03 10:03:47 +00:00
Sefa Eyeoglu
43044d3f4b [Backport release-26.05] xr-hardware: 1.1.1 -> 1.1.2 (#569569) 2026-10-03 10:03:40 +00:00
nixpkgs-ci[bot]
d884c68ac0 [Backport release-26.05] servo: fix darwin (#569692) 2026-10-03 09:45:44 +00:00
Yorick
19a09b49e7 [Backport release-26.05] victoriametrics: enable cgo to fix zstd decompression crash (#569691) 2026-10-03 07:32:56 +00:00
Pascal Bach
cdd3d358d5 [Backport release-26.05] nextcloud35: 35.0.0 -> 35.0.1 (#569536) 2026-10-03 07:30:44 +00:00
Niklas Korz
4681f4ad4e servo: fix darwin
(cherry picked from commit 4a765b8125)
2026-10-03 07:28:22 +00:00
Adam C. Stephens
26550a1e42 victoriametrics: enable cgo to fix zstd decompression crash
(cherry picked from commit f71476e8fa)
2026-10-03 07:25:58 +00:00
Gergő Gutyina
d01b242277 [26.05] pnpm_10_latest: init at 10.34.5, migrate consumers (#558969) 2026-10-03 00:32:48 +00:00
Emily
c2d6e79d07 [Backport release-26.05] ungoogled-chromium: 154.0.8037.57-1 -> 154.0.8037.97-1 (#569587) 2026-10-02 23:17:13 +00:00
networkException
4473e01a6f ungoogled-chromium: 154.0.8037.57-1 -> 154.0.8037.97-1
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html

This update includes 11 security fixes.

CVEs:
CVE-2026-103628 CVE-2026-103626 CVE-2026-103621 CVE-2026-103630
CVE-2026-103625 CVE-2026-103624 CVE-2026-103629 CVE-2026-103622
CVE-2026-103623 CVE-2026-103631 CVE-2026-103627

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html

This update includes 33 security fixes.

CVEs:
CVE-2026-102331 CVE-2026-102317 CVE-2026-102312 CVE-2026-102313
CVE-2026-102299 CVE-2026-102306 CVE-2026-102307 CVE-2026-102323
CVE-2026-102303 CVE-2026-102311 CVE-2026-102300 CVE-2026-102326
CVE-2026-102316 CVE-2026-102304 CVE-2026-102328 CVE-2026-102309
CVE-2026-102325 CVE-2026-102308 CVE-2026-102301 CVE-2026-102319
CVE-2026-102324 CVE-2026-102318 CVE-2026-102329 CVE-2026-102315
CVE-2026-102302 CVE-2026-102321 CVE-2026-102320 CVE-2026-102310
CVE-2026-102327 CVE-2026-102330 CVE-2026-102314 CVE-2026-102305

(cherry picked from commit 194ece7b5c)
2026-10-02 21:19:04 +00:00
Emily
daa225bcc7 [Backport release-26.05] chromium,chromedriver: 154.0.8037.92 -> 154.0.8037.97 (#569512) 2026-10-02 21:16:40 +00:00
Philip Taron
98fa71d0bd [Backport release-26.05] ci/github-script: convert more to TypeScript (#569585) 2026-10-02 21:13:31 +00:00
Michael Daniels
3bc3bc350b ci/github-script: convert more to TypeScript
(cherry picked from commit 00954dbca6)
2026-10-02 21:09:06 +00:00
Sefa Eyeoglu
07905e748f prismlauncher: 11.1.0 -> 11.1.1
https://github.com/PrismLauncher/PrismLauncher/releases/tag/11.1.1

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit b57c1c1236)
2026-10-02 21:07:31 +00:00
Jonas Heinrich
f231018897 invoiceplane: 1.7.2 -> 1.7.2.1
(cherry picked from commit f2762a77f1)
2026-10-02 20:25:42 +00:00
Sefa Eyeoglu
4d41e2aaca xr-hardware: 1.1.1 -> 1.1.2
https://gitlab.freedesktop.org/monado/utilities/xr-hardware/-/releases/1.1.2

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit c9e07f8084)
2026-10-02 20:20:18 +00:00
Nick Cao
3743b81afc [Backport release-26.05] opentofu: 1.11.8 -> 1.11.14 (#569213) 2026-10-02 19:47:24 +00:00
nixpkgs-ci[bot]
01bb8d5b0e [Backport release-26.05] buf: 1.72.0 -> 1.73.0 (#566981) 2026-10-02 19:45:59 +00:00
nixpkgs-ci[bot]
0b81ab05fc [Backport release-26.05] simplex-chat-desktop: 7.0.2 -> 7.0.3 (#569553) 2026-10-02 19:42:28 +00:00
R. Ryantm
95c0ede248 simplex-chat-desktop: 7.0.2 -> 7.0.3
(cherry picked from commit bf9ad32640)
2026-10-02 19:36:09 +00:00
Nick Cao
cb742b2c4d [Backport release-26.05] python3Packages.buildstream-plugins: 2.7.0 -> 2.8.0 (#560713) 2026-10-02 19:33:21 +00:00
Nick Cao
217609880b [Backport release-26.05] genact: 1.5.1 -> 1.6.0 (#569522) 2026-10-02 19:19:14 +00:00
Sandro
8f32315105 [Backport 26.05] peazip: 11.1.0 -> 11.3.0 (#568331) 2026-10-02 19:18:14 +00:00
Philip Taron
637306b9c8 [Backport release-26.05] .github: Bump korthout/backport-action from 4.6.1 to 4.7.0 (#569538) 2026-10-02 19:12:14 +00:00
Peder Bergebakken Sundt
6d24f4ab4b [Backport release-26.05] firefly-iii: 6.6.6 -> 6.7.6 (#569136) 2026-10-02 18:59:18 +00:00
nixpkgs-ci[bot]
334d0d5aee [Backport release-26.05] microsoft-edge: 154.0.4258.48 -> 154.0.4258.53 (#569534) 2026-10-02 18:48:52 +00:00
nixpkgs-ci[bot]
0be55543bb [Backport release-26.05] google-chrome: 154.0.8037.92 -> 154.0.8037.97 (#569532) 2026-10-02 18:48:51 +00:00
dependabot[bot]
905845c9ae .github: Bump korthout/backport-action from 4.6.1 to 4.7.0
Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](6b65649031...8560fb503c)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 8a0a2750fc)
2026-10-02 18:36:44 +00:00
provokateurin
3aae57b4bd nextcloudPackages: update
(cherry picked from commit b2fa5a9013)
2026-10-02 18:22:01 +00:00
provokateurin
ea61ffc684 nextcloud35: 35.0.0 -> 35.0.1
(cherry picked from commit ec2e8cd1ec)
2026-10-02 18:22:01 +00:00
Nick Cao
1e7a07d550 [Backport release-26.05] talosctl: 1.13.9 -> 1.13.11 (#569385) 2026-10-02 18:04:18 +00:00
Rafael Ieda
7e03c2d7fe microsoft-edge: 154.0.4258.48 -> 154.0.4258.53
(cherry picked from commit 4f618ab1ed)
2026-10-02 18:03:19 +00:00
Gerhard Schwanzer
e7bb80d5d1 pnpm_10_latest: migrate consumers
Move all possible in-tree pnpm 10 consumers to pnpm_10_latest. Add the
verified lockfile integrities required by pnpm 10.34.5 and update the
package-specific fetch and build wiring.

Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 20:00:51 +02:00
Gerhard Schwanzer
89a606c108 pnpm_10_latest: init at 10.34.5
Keep pnpm_10 at 10.34.0 for out-of-tree compatibility and mark it
insecure. Add pnpm_10_latest at 10.34.5 and make variant generation
and updater targets attribute-specific.

Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 19:59:55 +02:00
Rafael Ieda
ce22f15113 google-chrome: 154.0.8037.92 -> 154.0.8037.97
(cherry picked from commit 3b1d062e79)
2026-10-02 17:59:18 +00:00
Nick Cao
265f53ffc8 [release-26.05] openbao: 2.6.3 -> 2.6.4 (#569506) 2026-10-02 17:40:20 +00:00
novalkun
e62e76ac43 genact: 1.5.1 -> 1.6.0
(cherry picked from commit 2e1b5ffe55)
2026-10-02 17:35:01 +00:00
whispers
371e6b9ef9 [Backport release-26.05] arti: 2.6.0 -> 2.7.0 (#569451) 2026-10-02 17:09:34 +00:00
emilylange
cc03f159fd chromium,chromedriver: 154.0.8037.92 -> 154.0.8037.97
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html

This update includes 11 security fixes.

CVEs:
CVE-2026-103628 CVE-2026-103626 CVE-2026-103621 CVE-2026-103630
CVE-2026-103625 CVE-2026-103624 CVE-2026-103629 CVE-2026-103622
CVE-2026-103623 CVE-2026-103631 CVE-2026-103627

(cherry picked from commit 7f4b816584)
2026-10-02 17:06:38 +00:00
emilylange
2a3e3a7b01 openbao: 2.6.3 -> 2.6.4
https://github.com/openbao/openbao/releases/tag/v2.6.4

Not-cherry-picked-because: openbao 2.7.x on master is a breaking change
2026-10-02 18:47:16 +02:00
Vladimír Čunát
ed9756736f [Backport release-26.05] apacheHttpd: 2.4.68 -> 2.4.69 (#569434) 2026-10-02 14:52:28 +00:00
nixpkgs-ci[bot]
29249cf731 [Backport release-26.05] bark-server: 2.3.5 -> 2.3.7 (#569466) 2026-10-02 14:29:18 +00:00
R. Ryantm
f3a34ea3c0 bark-server: 2.3.5 -> 2.3.7
(cherry picked from commit e9a5f00a12)
2026-10-02 14:23:07 +00:00
Matt Sturgeon
c03ddb1441 [Backport release-26.05] .github: Bump actions/checkout from 6.0.3 to 7.0.1 (#569452) 2026-10-02 13:42:21 +00:00
Matt Sturgeon
b9f0f29d38 [backport release-26.05] nixpkgs-update: update links after move to NixOS org (#569448) 2026-10-02 13:31:31 +00:00
Philip Taron
da8d99bb46 workflows/eval: allow fork PR checkout of ci/pinned.json
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The versions job checks out ci/pinned.json at the PR's merge commit,
which matches pull_request.merge_commit_sha (or head.sha) in the event
payload and would be rejected.

Only ci/pinned.json is checked out, without persisted credentials, and
it is read as data by trusted/ci/supportedVersions.nix, so opting in is
safe.

Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 9d1a3338ee)
2026-10-02 13:30:49 +00:00