zowoq
ece9cdbe12
linux_6_12: 6.12.111 -> 6.12.112
...
(cherry picked from commit d97b7c19a4 )
2026-10-03 12:34:19 +00:00
zowoq
e49e9152d6
linux_6_18: 6.18.54 -> 6.18.55
...
(cherry picked from commit 876aae2fbb )
2026-10-03 12:34:19 +00:00
zowoq
6b61934171
linux_7_2: 7.2.8 -> 7.2.9
...
(cherry picked from commit c9bc02b040 )
2026-10-03 12:34:18 +00:00
Jonas Heinrich
c274260167
[Backport release-26.05] invoiceplane: 1.7.2 -> 1.7.2.1 ( #569570 )
2026-10-03 12:04:45 +00:00
Sefa Eyeoglu
c0883d13c2
[Backport release-26.05] prismlauncher: 11.1.0 -> 11.1.1 ( #569584 )
2026-10-03 10:03:47 +00:00
Sefa Eyeoglu
43044d3f4b
[Backport release-26.05] xr-hardware: 1.1.1 -> 1.1.2 ( #569569 )
2026-10-03 10:03:40 +00:00
nixpkgs-ci[bot]
d884c68ac0
[Backport release-26.05] servo: fix darwin ( #569692 )
2026-10-03 09:45:44 +00:00
Yorick
19a09b49e7
[Backport release-26.05] victoriametrics: enable cgo to fix zstd decompression crash ( #569691 )
2026-10-03 07:32:56 +00:00
Pascal Bach
cdd3d358d5
[Backport release-26.05] nextcloud35: 35.0.0 -> 35.0.1 ( #569536 )
2026-10-03 07:30:44 +00:00
Niklas Korz
4681f4ad4e
servo: fix darwin
...
(cherry picked from commit 4a765b8125 )
2026-10-03 07:28:22 +00:00
Adam C. Stephens
26550a1e42
victoriametrics: enable cgo to fix zstd decompression crash
...
(cherry picked from commit f71476e8fa )
2026-10-03 07:25:58 +00:00
Gergő Gutyina
d01b242277
[26.05] pnpm_10_latest: init at 10.34.5, migrate consumers ( #558969 )
2026-10-03 00:32:48 +00:00
Emily
c2d6e79d07
[Backport release-26.05] ungoogled-chromium: 154.0.8037.57-1 -> 154.0.8037.97-1 ( #569587 )
2026-10-02 23:17:13 +00:00
networkException
4473e01a6f
ungoogled-chromium: 154.0.8037.57-1 -> 154.0.8037.97-1
...
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
This update includes 11 security fixes.
CVEs:
CVE-2026-103628 CVE-2026-103626 CVE-2026-103621 CVE-2026-103630
CVE-2026-103625 CVE-2026-103624 CVE-2026-103629 CVE-2026-103622
CVE-2026-103623 CVE-2026-103631 CVE-2026-103627
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html
This update includes 33 security fixes.
CVEs:
CVE-2026-102331 CVE-2026-102317 CVE-2026-102312 CVE-2026-102313
CVE-2026-102299 CVE-2026-102306 CVE-2026-102307 CVE-2026-102323
CVE-2026-102303 CVE-2026-102311 CVE-2026-102300 CVE-2026-102326
CVE-2026-102316 CVE-2026-102304 CVE-2026-102328 CVE-2026-102309
CVE-2026-102325 CVE-2026-102308 CVE-2026-102301 CVE-2026-102319
CVE-2026-102324 CVE-2026-102318 CVE-2026-102329 CVE-2026-102315
CVE-2026-102302 CVE-2026-102321 CVE-2026-102320 CVE-2026-102310
CVE-2026-102327 CVE-2026-102330 CVE-2026-102314 CVE-2026-102305
(cherry picked from commit 194ece7b5c )
2026-10-02 21:19:04 +00:00
Emily
daa225bcc7
[Backport release-26.05] chromium,chromedriver: 154.0.8037.92 -> 154.0.8037.97 ( #569512 )
2026-10-02 21:16:40 +00:00
Philip Taron
98fa71d0bd
[Backport release-26.05] ci/github-script: convert more to TypeScript ( #569585 )
2026-10-02 21:13:31 +00:00
Michael Daniels
3bc3bc350b
ci/github-script: convert more to TypeScript
...
(cherry picked from commit 00954dbca6 )
2026-10-02 21:09:06 +00:00
Sefa Eyeoglu
07905e748f
prismlauncher: 11.1.0 -> 11.1.1
...
https://github.com/PrismLauncher/PrismLauncher/releases/tag/11.1.1
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit b57c1c1236 )
2026-10-02 21:07:31 +00:00
Jonas Heinrich
f231018897
invoiceplane: 1.7.2 -> 1.7.2.1
...
(cherry picked from commit f2762a77f1 )
2026-10-02 20:25:42 +00:00
Sefa Eyeoglu
4d41e2aaca
xr-hardware: 1.1.1 -> 1.1.2
...
https://gitlab.freedesktop.org/monado/utilities/xr-hardware/-/releases/1.1.2
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit c9e07f8084 )
2026-10-02 20:20:18 +00:00
Nick Cao
3743b81afc
[Backport release-26.05] opentofu: 1.11.8 -> 1.11.14 ( #569213 )
2026-10-02 19:47:24 +00:00
nixpkgs-ci[bot]
01bb8d5b0e
[Backport release-26.05] buf: 1.72.0 -> 1.73.0 ( #566981 )
2026-10-02 19:45:59 +00:00
nixpkgs-ci[bot]
0b81ab05fc
[Backport release-26.05] simplex-chat-desktop: 7.0.2 -> 7.0.3 ( #569553 )
2026-10-02 19:42:28 +00:00
R. Ryantm
95c0ede248
simplex-chat-desktop: 7.0.2 -> 7.0.3
...
(cherry picked from commit bf9ad32640 )
2026-10-02 19:36:09 +00:00
Nick Cao
cb742b2c4d
[Backport release-26.05] python3Packages.buildstream-plugins: 2.7.0 -> 2.8.0 ( #560713 )
2026-10-02 19:33:21 +00:00
Nick Cao
217609880b
[Backport release-26.05] genact: 1.5.1 -> 1.6.0 ( #569522 )
2026-10-02 19:19:14 +00:00
Sandro
8f32315105
[Backport 26.05] peazip: 11.1.0 -> 11.3.0 ( #568331 )
2026-10-02 19:18:14 +00:00
Philip Taron
637306b9c8
[Backport release-26.05] .github: Bump korthout/backport-action from 4.6.1 to 4.7.0 ( #569538 )
2026-10-02 19:12:14 +00:00
Peder Bergebakken Sundt
6d24f4ab4b
[Backport release-26.05] firefly-iii: 6.6.6 -> 6.7.6 ( #569136 )
2026-10-02 18:59:18 +00:00
nixpkgs-ci[bot]
334d0d5aee
[Backport release-26.05] microsoft-edge: 154.0.4258.48 -> 154.0.4258.53 ( #569534 )
2026-10-02 18:48:52 +00:00
nixpkgs-ci[bot]
0be55543bb
[Backport release-26.05] google-chrome: 154.0.8037.92 -> 154.0.8037.97 ( #569532 )
2026-10-02 18:48:51 +00:00
dependabot[bot]
905845c9ae
.github: Bump korthout/backport-action from 4.6.1 to 4.7.0
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](6b65649031...8560fb503c )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
(cherry picked from commit 8a0a2750fc )
2026-10-02 18:36:44 +00:00
provokateurin
3aae57b4bd
nextcloudPackages: update
...
(cherry picked from commit b2fa5a9013 )
2026-10-02 18:22:01 +00:00
provokateurin
ea61ffc684
nextcloud35: 35.0.0 -> 35.0.1
...
(cherry picked from commit ec2e8cd1ec )
2026-10-02 18:22:01 +00:00
Nick Cao
1e7a07d550
[Backport release-26.05] talosctl: 1.13.9 -> 1.13.11 ( #569385 )
2026-10-02 18:04:18 +00:00
Rafael Ieda
7e03c2d7fe
microsoft-edge: 154.0.4258.48 -> 154.0.4258.53
...
(cherry picked from commit 4f618ab1ed )
2026-10-02 18:03:19 +00:00
Gerhard Schwanzer
e7bb80d5d1
pnpm_10_latest: migrate consumers
...
Move all possible in-tree pnpm 10 consumers to pnpm_10_latest. Add the
verified lockfile integrities required by pnpm 10.34.5 and update the
package-specific fetch and build wiring.
Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 20:00:51 +02:00
Gerhard Schwanzer
89a606c108
pnpm_10_latest: init at 10.34.5
...
Keep pnpm_10 at 10.34.0 for out-of-tree compatibility and mark it
insecure. Add pnpm_10_latest at 10.34.5 and make variant generation
and updater targets attribute-specific.
Not-cherry-picked-because: release-26.05 has different pnpm variants and lockfiles
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
2026-10-02 19:59:55 +02:00
Rafael Ieda
ce22f15113
google-chrome: 154.0.8037.92 -> 154.0.8037.97
...
(cherry picked from commit 3b1d062e79 )
2026-10-02 17:59:18 +00:00
Nick Cao
265f53ffc8
[release-26.05] openbao: 2.6.3 -> 2.6.4 ( #569506 )
2026-10-02 17:40:20 +00:00
novalkun
e62e76ac43
genact: 1.5.1 -> 1.6.0
...
(cherry picked from commit 2e1b5ffe55 )
2026-10-02 17:35:01 +00:00
whispers
371e6b9ef9
[Backport release-26.05] arti: 2.6.0 -> 2.7.0 ( #569451 )
2026-10-02 17:09:34 +00:00
emilylange
cc03f159fd
chromium,chromedriver: 154.0.8037.92 -> 154.0.8037.97
...
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
This update includes 11 security fixes.
CVEs:
CVE-2026-103628 CVE-2026-103626 CVE-2026-103621 CVE-2026-103630
CVE-2026-103625 CVE-2026-103624 CVE-2026-103629 CVE-2026-103622
CVE-2026-103623 CVE-2026-103631 CVE-2026-103627
(cherry picked from commit 7f4b816584 )
2026-10-02 17:06:38 +00:00
emilylange
2a3e3a7b01
openbao: 2.6.3 -> 2.6.4
...
https://github.com/openbao/openbao/releases/tag/v2.6.4
Not-cherry-picked-because: openbao 2.7.x on master is a breaking change
2026-10-02 18:47:16 +02:00
Vladimír Čunát
ed9756736f
[Backport release-26.05] apacheHttpd: 2.4.68 -> 2.4.69 ( #569434 )
2026-10-02 14:52:28 +00:00
nixpkgs-ci[bot]
29249cf731
[Backport release-26.05] bark-server: 2.3.5 -> 2.3.7 ( #569466 )
2026-10-02 14:29:18 +00:00
R. Ryantm
f3a34ea3c0
bark-server: 2.3.5 -> 2.3.7
...
(cherry picked from commit e9a5f00a12 )
2026-10-02 14:23:07 +00:00
Matt Sturgeon
c03ddb1441
[Backport release-26.05] .github: Bump actions/checkout from 6.0.3 to 7.0.1 ( #569452 )
2026-10-02 13:42:21 +00:00
Matt Sturgeon
b9f0f29d38
[backport release-26.05] nixpkgs-update: update links after move to NixOS org ( #569448 )
2026-10-02 13:31:31 +00:00
Philip Taron
da8d99bb46
workflows/eval: allow fork PR checkout of ci/pinned.json
...
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The versions job checks out ci/pinned.json at the PR's merge commit,
which matches pull_request.merge_commit_sha (or head.sha) in the event
payload and would be rejected.
Only ci/pinned.json is checked out, without persisted credentials, and
it is read as data by trusted/ci/supportedVersions.nix, so opting in is
safe.
Assisted-by: Claude Code (claude-opus-5-5)
(cherry picked from commit 9d1a3338ee )
2026-10-02 13:30:49 +00:00