nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-19 22:30:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
558,982 Commits 468 Branches 81 Tags
f960fbfeac1be5b4befbdcd032b40434262f98ae
Commit Graph

558982 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
John Titor
f960fbfeac google-chrome: 125.0.6422.141 -> 126.0.6478.61 
(cherry picked from commit e9a2d6b9c8)
 2024-06-15 08:08:47 +00:00
Martin Weinelt
4dd49330fd Merge pull request #319819 from NixOS/backport-319813-to-release-23.11 
[Backport release-23.11] prometheus-knot-exporter: 3.3.5 -> 3.3.6
 2024-06-14 22:09:30 +02:00
R. Ryantm
e98cfb23a5 prometheus-knot-exporter: 3.3.5 -> 3.3.6 
(cherry picked from commit 9de38ffd8e)
 2024-06-14 12:50:17 +00:00
Thomas Gerbet
0fc70ac44a Merge pull request #318686 from buckley310/2024-06-10-brave 
[23.11] brave: 1.66.115 -> 1.66.118
 2024-06-13 21:49:57 +02:00
github-actions[bot]
7f8666b1af professor: 2.3.3 -> 2.4.2 (#319402) 
(cherry picked from commit 827fad6fce)

Co-authored-by: Dmitry Kalinkin <dmitry.kalinkin@gmail.com>
 2024-06-13 15:30:04 -04:00
Emily
302b68d279 Merge pull request #319399 from emilylange/backport-319193-to-release-23.11 
[Backport release-23.11] chromedriver,chromium: 125.0.6422.141 -> 126.0.6478.55, rebase patches, extend tarball exclude
 2024-06-13 12:11:02 +02:00
emilylange
1d216c35dd chromium: 125.0.6422.141 -> 126.0.6478.55 
https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop.html

This update includes 21 security fixes.

CVEs:
CVE-2024-5830 CVE-2024-5831 CVE-2024-5832 CVE-2024-5833 CVE-2024-5834
CVE-2024-5835 CVE-2024-5836 CVE-2024-5837 CVE-2024-5838 CVE-2024-5839
CVE-2024-5840 CVE-2024-5841 CVE-2024-5842 CVE-2024-5843 CVE-2024-5844
CVE-2024-5845 CVE-2024-5846 CVE-2024-5847

(cherry picked from commit 4942c64484)
 2024-06-13 00:14:46 +02:00
emilylange
0bd6a7af60 chromium: rebase patches for M126 
Note that we can't just update previous patches in place, as that would
prevent electron-source and ungoogled-chrome (< M126) from building.

(cherry picked from commit 7f36179f17)
 2024-06-13 00:14:44 +02:00
emilylange
6ea93b6484 chromium: extend release tarball excludes to keep size below 3 GB 
Starting with M126, the upstream release tarball includes two full
Debian sysroots to compile chromium with:

~~~shell
$ du -sh build/linux/debian_bullseye_*
835M	build/linux/debian_bullseye_amd64-sysroot
739M	build/linux/debian_bullseye_i386-sysroot
~~~

But they are huge and we don't need them.

In order to stay below the current 3 GB tarball size limit that is
dictated by hydra.nixos.org's max-output-limit, we add them to our
exclude patterns.

This is a no-op for < M126.

(cherry picked from commit bda04d27a0)
 2024-06-12 23:52:22 +02:00
emilylange
895aceeafa chromedriver: 125.0.6422.141 -> 126.0.6478.55 
(cherry picked from commit 7daf0986f2)
 2024-06-12 23:52:10 +02:00
Doron Behar
5c2ec3a5c2 Merge pull request #319372 from NixOS/backport-279864-to-release-23.11 
[Backport release-23.11] vimPlugins/copilot-vim: specify license (unfree)
 2024-06-13 00:51:04 +03:00
Martin Weinelt
d7408d718b Merge pull request #319376 from NixOS/backport-306801-to-release-23.11 
[Backport release-23.11] matrix-conduit: 0.6.0 -> 0.7.0
 2024-06-12 22:57:29 +02:00
Martin Weinelt
d442bc1361 matrix-conduit: mark vulnerable 2024-06-12 22:56:32 +02:00
Andrew Marshall
e0e0c67c10 vimPlugins/copilot-vim: specify license (unfree) 
From [the license][1]:

> GitHub Copilot is offered under the GitHub Terms of Service.
> Copyright (C) 2023 GitHub, Inc. - All Rights Reserved.

[1]: 5b19fb001d/LICENSE.md

(cherry picked from commit 58ff8a126c)
 2024-06-12 20:15:12 +00:00
K900
91e4009948 Merge pull request #319346 from NixOS/backport-319306-to-release-23.11 
[Backport release-23.11] Linux kernel updates 2024-06-12
 2024-06-12 19:21:01 +03:00
Maximilian Bosch
d3ed4108e6 linux-rt_5_10: 5.10.217-rt109 -> 5.10.218-rt110 
(cherry picked from commit 51c2144ca7)
 2024-06-12 16:20:45 +00:00
Maximilian Bosch
d2dae75a0d linux_6_1: 6.1.92 -> 6.1.93 
(cherry picked from commit de7df0d3eb)
 2024-06-12 16:20:45 +00:00
Maximilian Bosch
1f8512fa7c linux_6_6: 6.6.32 -> 6.6.33 
(cherry picked from commit d1d7003000)
 2024-06-12 16:20:45 +00:00
Maximilian Bosch
ed5553d9e6 linux_6_9: 6.9.3 -> 6.9.4 
(cherry picked from commit ee6d6317b4)
 2024-06-12 16:20:45 +00:00
K900
05b6ad83ff Merge pull request #319345 from K900/backport-315121-to-release-23.11 
Backport (the rest of) #315121 to release-23.11
 2024-06-12 19:19:58 +03:00
Alyssa Ross
ecaab279a1 linux_latest-libre: 19569 -> 19575 
(cherry picked from commit a21294b60b)
 2024-06-12 19:15:04 +03:00
Alyssa Ross
c1a75a9c3e linux-rt_6_6: 6.6.31-rt31 -> 6.6.32-rt32 
(cherry picked from commit e192371fb0)
 2024-06-12 19:15:04 +03:00
Alyssa Ross
41265b9d41 linux-rt_5_10: 5.10.216-rt108 -> 5.10.217-rt109 
(cherry picked from commit 979e6398aa)
 2024-06-12 19:15:04 +03:00
Alyssa Ross
1feb317cd0 linux_testing: 6.9-rc6 -> 6.10-rc1 
(cherry picked from commit 3fb6880a99)
 2024-06-12 19:15:04 +03:00
Alyssa Ross
0aaefb7916 linux/common-config: update for 6.10 
We assume RISC-V uses an uncompressed kernel in
lib/systems/platforms.nix.  Since this is the first Linux version to
support either xz or zstd compressed kernels on RISC-V, we can't
change platforms.nix to match the other platforms without breaking
builds of older kernel versions, so let's just preserve the old
behaviour.

We could in future decide to use gzip-compressed kernels on RISC-V,
which is supported going back further.

(cherry picked from commit 9f18414c6b)
 2024-06-12 19:14:52 +03:00
Peder Bergebakken Sundt
e6aff28cc1 Merge pull request #297850 from vojta001/pyinfra 
[Backport release-23.11] python3Packages.pyinfra: 2.8 -> 2.9.2
 2024-06-12 14:02:56 +02:00
Vladimír Čunát
47d606d6eb Merge #313691: tailscale: 1.58.2 -> 1.66.4 
...into release-23.11
 2024-06-12 12:03:10 +02:00
Vladimír Čunát
0f89ad1364 Merge #316231: Linux Hardened Kernels 2024-05-20 
...into release-23.11
 2024-06-12 11:59:44 +02:00
Vladimír Čunát
4af9d54cf8 Merge #319244: knot-resolver: 5.7.2 -> 5.7.3 
...into release-23.11
 2024-06-12 11:57:55 +02:00
Vladimír Čunát
27b14b3592 Pick #315880: knot-resolver: 5.7.2 -> 5.7.3 
https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.3
(cherry picked from commit 2dc0bf5786)
 2024-06-12 08:42:57 +02:00
Vladimír Čunát
96b3dae4f8 Merge #319116: knot-resolver: 5.7.1 -> 5.7.2 
...into release-23.11
 2024-06-11 21:04:46 +02:00
Sandro Jäckel
487a1f43ea knot-resolver: 5.7.1 -> 5.7.2 
(cherry picked from commit 1385946a93)
 2024-06-11 19:04:06 +00:00
Pol Dellaiera
a17d432f81 Merge pull request #319010 from LeSuisse/composer-2.7.7-23.11 
[23.11] phpPackages.composer: 2.7.6 -> 2.7.7
 2024-06-11 10:02:45 +02:00
Thomas Gerbet
316dd70bd2 phpPackages.composer: 2.7.6 -> 2.7.7 
Fixes CVE-2024-35241 and CVE-2024-35242.

Changes:
https://github.com/composer/composer/releases/tag/2.7.7
 2024-06-11 09:20:39 +02:00
Pol Dellaiera
43edb07716 Merge pull request #318992 from NixOS/backport-318536-to-release-23.11 
[Backport release-23.11] php81: restore patch for libxml2 on darwin
 2024-06-11 08:10:13 +02:00
Pol Dellaiera
995b78ca81 php81: restore patch for libxml2 on darwin 
(cherry picked from commit b09b1844d3)
 2024-06-11 06:09:52 +00:00
K900
52bcc3f3ca Merge pull request #318979 from NixOS/backport-318828-to-release-23.11 
[Backport release-23.11] linux-firmware: 20240513 -> 20240610
 2024-06-11 07:48:54 +03:00
K900
9899c68d7e linux-firmware: 20240513 -> 20240610 
(cherry picked from commit 34e518edbc)
 2024-06-11 04:48:44 +00:00
Martin Weinelt
a3c8d64ba8 Merge pull request #318900 from NixOS/backport-318876-to-release-23.11 
[Backport release-23.11] Firefox: 126.0.1 -> 127.0; 115.11.0esr -> 115.12.0esr
 2024-06-11 00:54:19 +02:00
Martin Weinelt
bc86ea0a5e firefox-esr-115-unwrapped: 115.11.0esr -> 115.12.0esr 
https://www.mozilla.org/en-US/firefox/115.12.0/releasenotes/
(cherry picked from commit d2f9ffa027)
 2024-06-10 20:17:17 +00:00
Martin Weinelt
b5b800576d firefox-bin-unwrapped: 126.0.1 -> 127.0 
https://www.mozilla.org/en-US/firefox/127.0/releasenotes/
(cherry picked from commit fa42b9a12a)
 2024-06-10 20:17:17 +00:00
Martin Weinelt
ab10e6bfe8 firefox-unwrapped: 126.0.1 -> 127.0 
https://www.mozilla.org/en-US/firefox/127.0/releasenotes/
(cherry picked from commit 9763258b5e)
 2024-06-10 20:17:17 +00:00
Martin Weinelt
9cdf81533a Merge pull request #318804 from NixOS/backport-318218-to-release-23.11 
[Backport release-23.11] nss_latest: 3.100 -> 3.101
 2024-06-10 21:39:45 +02:00
Martin Weinelt
47b7f59a32 nss_latest: 3.100 -> 3.101 
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_101.rst
(cherry picked from commit a69f5dad54)
 2024-06-10 13:46:04 +00:00
Martin Weinelt
feb0142429 Merge pull request #318758 from thillux/mtheil/23.11-frr-update-9.0.3 
frr: 9.0.2 -> 9.0.3
 2024-06-10 14:04:21 +02:00
Markus Theil
c2fd6d9350 frr: 9.0.2 -> 9.0.3 
Currently no published release notes available.

CVEs fixed:
- CVE-2024-31948
- CVE-2024-31949
- CVE-2024-31950
- CVE-2024-31951

Some notable fixes:
- isisd: fix heap-after-free with prefix sid
- ospfd: Solved crash in RI parsing with OSPF TE
- ospfd: Correct Opaque LSA Extended parser
- ospf6d: Prevent heap-buffer-overflow with unknown type
- pimd: fix crash when mixing ssm/any-source joins

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2024-06-10 12:20:27 +02:00
Sean Buckley
761a4678ee brave: 1.66.115 -> 1.66.118 
https://community.brave.com/t/release-channel-1-66-118/551342
 2024-06-10 00:02:01 -04:00
Thomas Gerbet
d7a9684369 Merge pull request #318502 from NixOS/backport-318437-to-release-23.11 
[Backport release-23.11] xmedcon: 0.23.0 -> 0.24.0
 2024-06-09 16:29:01 +02:00
R. Ryantm
c8adc4bc24 xmedcon: 0.23.0 -> 0.24.0 
(cherry picked from commit e10b8c551f)
 2024-06-09 11:02:40 +00:00
Maximilian Bosch
4e194b46c1 Merge pull request #318113 from NixOS/backport-317797-to-release-23.11 
[Backport release-23.11] nextcloud29: 29.0.1 -> 29.0.2
 2024-06-09 10:51:57 +00:00