From 43cabfccc5c44d9da794f00ab2aa1578d8a206b1 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Thu, 24 Jul 2025 23:50:50 +0000 Subject: [PATCH 01/21] ipxe: 1.21.1-unstable-2025-07-16 -> 1.21.1-unstable-2025-07-24 --- pkgs/by-name/ip/ipxe/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ip/ipxe/package.nix b/pkgs/by-name/ip/ipxe/package.nix index 58fa43cc291b..a4a8347d6bd7 100644 --- a/pkgs/by-name/ip/ipxe/package.nix +++ b/pkgs/by-name/ip/ipxe/package.nix @@ -48,7 +48,7 @@ in stdenv.mkDerivation (finalAttrs: { pname = "ipxe"; - version = "1.21.1-unstable-2025-07-16"; + version = "1.21.1-unstable-2025-07-24"; nativeBuildInputs = [ mtools @@ -66,8 +66,8 @@ stdenv.mkDerivation (finalAttrs: { src = fetchFromGitHub { owner = "ipxe"; repo = "ipxe"; - rev = "8a8904aaddcc9497b2c3d110785b52e4d1dca336"; - hash = "sha256-q8KD4g2Sx+gnGHWi4Wpf2uJ/6YtUyqiRUXhOWLrGnxI="; + rev = "e3a6e9230c4e513e6a529427d71a714849b6f788"; + hash = "sha256-/09YxHQGbSdiLwhxOIWh2lPPabTL9QQsOUYpo8zp2f0="; }; # Calling syslinux on a FAT image isn't going to work on Aarch64. From a70d47d59b3516341534e59c32ce419bb5118c9f Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 25 Jul 2025 00:43:54 +0000 Subject: [PATCH 02/21] vault: 1.20.0 -> 1.20.1 --- pkgs/by-name/va/vault/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/va/vault/package.nix b/pkgs/by-name/va/vault/package.nix index e2f9ce649615..be78843bb61f 100644 --- a/pkgs/by-name/va/vault/package.nix +++ b/pkgs/by-name/va/vault/package.nix @@ -12,16 +12,16 @@ buildGoModule rec { pname = "vault"; - version = "1.20.0"; + version = "1.20.1"; src = fetchFromGitHub { owner = "hashicorp"; repo = "vault"; rev = "v${version}"; - hash = "sha256-2583vthe9x2WylLOMJFDBswqT3cF7euHyVc05V887B4="; + hash = "sha256-tTlfTd96+WiTk5HmtHws/zU3jrFfBnce6Wrtr7XsENY="; }; - vendorHash = "sha256-re1GZ+B1dKKLrKt8lj0fUuBkcUY/B38Y4o7yJIN7sts="; + vendorHash = "sha256-kdtWmRrzvHXPh/DIYkeGS7oSKB+lKiBdglld13av9FY="; proxyVendor = true; From ef746fa55742daa3ef3974c422e4505b7e7ad07f Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 25 Jul 2025 23:49:01 +0000 Subject: [PATCH 03/21] xtf: 0-unstable-2025-05-19 -> 0-unstable-2025-07-24 --- pkgs/by-name/xt/xtf/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/xt/xtf/package.nix b/pkgs/by-name/xt/xtf/package.nix index 9bcf4cb8c823..e7d1f2c9ac6c 100644 --- a/pkgs/by-name/xt/xtf/package.nix +++ b/pkgs/by-name/xt/xtf/package.nix @@ -10,7 +10,7 @@ stdenv.mkDerivation { pname = "xtf"; - version = "0-unstable-2025-05-19"; + version = "0-unstable-2025-07-24"; outputs = [ "out" # xtf-runner and test suite. @@ -20,8 +20,8 @@ stdenv.mkDerivation { src = fetchgit { url = "https://xenbits.xenproject.org/git-http/xtf.git"; - rev = "419daf21e0685a1c9ca519bb744f4aadf992e007"; - hash = "sha256-yCBEUd+0c6D5InoO67p1Ip1bi8qpwPG9CKQtXN7pDIg="; + rev = "1f7323571e7be793a2f969eaf95273564f323b0d"; + hash = "sha256-cqechUi+UbrvNni9wryxWCtXw2+rDGfqpq0DE4INlPw="; }; nativeBuildInputs = From 5b864cb366aca487126d945429b2f99057aaace9 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 28 Jul 2025 01:55:20 +0000 Subject: [PATCH 04/21] pied: 0.3.0 -> 0.3.1 --- pkgs/by-name/pi/pied/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/pi/pied/package.nix b/pkgs/by-name/pi/pied/package.nix index 7c61cc369b26..adb55f8e4562 100644 --- a/pkgs/by-name/pi/pied/package.nix +++ b/pkgs/by-name/pi/pied/package.nix @@ -7,13 +7,13 @@ flutter327.buildFlutterApplication rec { pname = "pied"; - version = "0.3.0"; + version = "0.3.1"; src = fetchFromGitHub { owner = "Elleo"; repo = "pied"; tag = "v${version}"; - hash = "sha256-I2p3GIb54r9r/phbKJsz/cFw1ECdwZ2RnCYVxjsHzg0="; + hash = "sha256-STeSpto70b4m03ExikUrIwsHCqj1QH2jvVZ8G/ybw28="; }; pubspecLock = lib.importJSON ./pubspec.lock.json; From 7fd37352038c2400a59062e66fbd68a6ec2eedbe Mon Sep 17 00:00:00 2001 From: Michael Hoang Date: Fri, 1 Aug 2025 14:06:13 +1000 Subject: [PATCH 05/21] iso-image: ensure `boot.loader.grub.enable` is disabled by default We use `mkImageMediaOverride` to ensure that GRUB is actually disabled if a user enables it using the default priority but still allows them to enable it using `mkForce`. --- nixos/modules/installer/cd-dvd/iso-image.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/installer/cd-dvd/iso-image.nix b/nixos/modules/installer/cd-dvd/iso-image.nix index 35afdc3a3f76..e49159c5964f 100644 --- a/nixos/modules/installer/cd-dvd/iso-image.nix +++ b/nixos/modules/installer/cd-dvd/iso-image.nix @@ -865,7 +865,7 @@ in # Don't build the GRUB menu builder script, since we don't need it # here and it causes a cyclic dependency. - boot.loader.grub.enable = false; + boot.loader.grub.enable = lib.mkImageMediaOverride false; environment.systemPackages = [ grubPkgs.grub2 From 3ba7379c42f91a8f0107d0f847722df232439038 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 1 Aug 2025 16:06:51 +0000 Subject: [PATCH 06/21] redpanda-client: 25.1.9 -> 25.2.1 --- pkgs/by-name/re/redpanda-client/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/re/redpanda-client/package.nix b/pkgs/by-name/re/redpanda-client/package.nix index eaa2d76a6259..f53dc6069c97 100644 --- a/pkgs/by-name/re/redpanda-client/package.nix +++ b/pkgs/by-name/re/redpanda-client/package.nix @@ -7,12 +7,12 @@ stdenv, }: let - version = "25.1.9"; + version = "25.2.1"; src = fetchFromGitHub { owner = "redpanda-data"; repo = "redpanda"; rev = "v${version}"; - sha256 = "sha256-X7pBbR2XCyHB4V0Z/PjZ10o/heXswyhzVj1yp+jvUEM="; + sha256 = "sha256-zHhWbz2UdsZNMYNhcVBiYE5TD8mSttaD3GltE/9MOTU="; }; in buildGoModule rec { @@ -20,7 +20,7 @@ buildGoModule rec { inherit doCheck src version; modRoot = "./src/go/rpk"; runVend = false; - vendorHash = "sha256-I/jUlOYUXOSmAD2r8lBlnEBYlxf+V6gSICgnMXosP+4="; + vendorHash = "sha256-ECShBCtZcrM+pvUQD3UZ2O6tCcOfI8WiOpDQjqKdh64="; ldflags = [ ''-X "github.com/redpanda-data/redpanda/src/go/rpk/pkg/cli/cmd/version.version=${version}"'' From f7970587fc4793866b07d8b4e2a4f64af1af0def Mon Sep 17 00:00:00 2001 From: Jon Hermansen Date: Fri, 1 Aug 2025 14:18:41 -0400 Subject: [PATCH 07/21] windsurf: 1.11.1 -> 1.11.2 --- pkgs/by-name/wi/windsurf/info.json | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/pkgs/by-name/wi/windsurf/info.json b/pkgs/by-name/wi/windsurf/info.json index 2bd1e2f0c586..fe4fae664deb 100644 --- a/pkgs/by-name/wi/windsurf/info.json +++ b/pkgs/by-name/wi/windsurf/info.json @@ -1,20 +1,20 @@ { "aarch64-darwin": { - "version": "1.11.1", + "version": "1.11.2", "vscodeVersion": "1.99.3", - "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/dbfeb42156b0fd886be70f8e65a180a1ff0ac4f9/Windsurf-darwin-arm64-1.11.1.zip", - "sha256": "1462db0940e850a0ca5ff6980e3e062e20473b92a793fb16e34a4064b64f4b35" + "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/a2714d538be16de1c91a0bc6fa1f52acdb0a07d2/Windsurf-darwin-arm64-1.11.2.zip", + "sha256": "d0deea25454cef4fda962436980dcf9a7d374e30e681933e1b036258179e8cd1" }, "x86_64-darwin": { - "version": "1.11.1", + "version": "1.11.2", "vscodeVersion": "1.99.3", - "url": "https://windsurf-stable.codeiumdata.com/darwin-x64/stable/dbfeb42156b0fd886be70f8e65a180a1ff0ac4f9/Windsurf-darwin-x64-1.11.1.zip", - "sha256": "e365e4e5fe87de1f6d34698cb6bc1a4462d6f849b145b554cf63681fcf3dc839" + "url": "https://windsurf-stable.codeiumdata.com/darwin-x64/stable/a2714d538be16de1c91a0bc6fa1f52acdb0a07d2/Windsurf-darwin-x64-1.11.2.zip", + "sha256": "e874198d263dbbfcc46283151d50a20187460d7c42c1988b6165016b17a33351" }, "x86_64-linux": { - "version": "1.11.1", + "version": "1.11.2", "vscodeVersion": "1.99.3", - "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/dbfeb42156b0fd886be70f8e65a180a1ff0ac4f9/Windsurf-linux-x64-1.11.1.tar.gz", - "sha256": "617558e5ebf51940a92fcb7dbc6ba7f642021465ebb64ee60f374e80b61c7c25" + "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/a2714d538be16de1c91a0bc6fa1f52acdb0a07d2/Windsurf-linux-x64-1.11.2.tar.gz", + "sha256": "b0b5439245ca9c05ac4a600da2835757641820005c219c971a294acb91f3f114" } } From 9fe90d264eb3624a16e63c0db74b4927957d1127 Mon Sep 17 00:00:00 2001 From: Ross Smyth <18294397+RossSmyth@users.noreply.github.com> Date: Fri, 1 Aug 2025 16:55:08 -0400 Subject: [PATCH 08/21] windows.mcfgthreads: 1.9.3 -> 2.1.1 --- .../windows/mcfgthreads/default.nix | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-) diff --git a/pkgs/os-specific/windows/mcfgthreads/default.nix b/pkgs/os-specific/windows/mcfgthreads/default.nix index 11ec8db38797..c407cf5b7e47 100644 --- a/pkgs/os-specific/windows/mcfgthreads/default.nix +++ b/pkgs/os-specific/windows/mcfgthreads/default.nix @@ -1,20 +1,25 @@ { lib, stdenv, + writeScriptBin, fetchFromGitHub, meson, ninja, }: - -stdenv.mkDerivation rec { +let + dllTool = writeScriptBin "dlltool" '' + ${stdenv.cc.targetPrefix}dlltool "$@" + ''; +in +stdenv.mkDerivation (finalAttrs: { pname = "mcfgthread"; - version = "1.9.2"; + version = "2.1.1"; src = fetchFromGitHub { owner = "lhmouse"; repo = "mcfgthread"; - rev = "v${lib.versions.majorMinor version}-ga.${lib.versions.patch version}"; - hash = "sha256-bB7ghhSqAqkyU1PLuVVJfkTYTtEU9f0CR1k+k+u3EgY="; + tag = "v${lib.versions.majorMinor finalAttrs.version}-ga.${lib.versions.patch finalAttrs.version}"; + hash = "sha256-kEqS1+2CB/Ryor2WbI67KALnlTcD9oSFEdC6Av73roE="; }; postPatch = '' @@ -27,6 +32,7 @@ stdenv.mkDerivation rec { ]; nativeBuildInputs = [ + dllTool meson ninja ]; @@ -36,6 +42,7 @@ stdenv.mkDerivation rec { homepage = "https://github.com/lhmouse/mcfgthread/wiki"; license = lib.licenses.gpl3Plus; maintainers = with lib.maintainers; [ wegank ]; + teams = [ lib.teams.windows ]; platforms = lib.platforms.windows; }; -} +}) From d2ac4dfa61fba987a84a0a81555da57ae0b9a2b0 Mon Sep 17 00:00:00 2001 From: Ross Smyth <18294397+RossSmyth@users.noreply.github.com> Date: Fri, 1 Aug 2025 17:33:53 -0400 Subject: [PATCH 09/21] go: isWindows -> isMinGW --- pkgs/development/compilers/go/1.23.nix | 2 +- pkgs/development/compilers/go/1.24.nix | 2 +- pkgs/development/compilers/go/1.25.nix | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/development/compilers/go/1.23.nix b/pkgs/development/compilers/go/1.23.nix index 904b2c29a54c..7777d9da57f1 100644 --- a/pkgs/development/compilers/go/1.23.nix +++ b/pkgs/development/compilers/go/1.23.nix @@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: { depsBuildTarget = lib.optional isCross targetCC; - depsTargetTarget = lib.optional stdenv.targetPlatform.isWindows targetPackages.threads.package; + depsTargetTarget = lib.optional stdenv.targetPlatform.isMinGW targetPackages.threads.package; postPatch = '' patchShebangs . diff --git a/pkgs/development/compilers/go/1.24.nix b/pkgs/development/compilers/go/1.24.nix index 15fa9266bd05..a3fc7aea6e48 100644 --- a/pkgs/development/compilers/go/1.24.nix +++ b/pkgs/development/compilers/go/1.24.nix @@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: { depsBuildTarget = lib.optional isCross targetCC; - depsTargetTarget = lib.optional stdenv.targetPlatform.isWindows targetPackages.threads.package; + depsTargetTarget = lib.optional stdenv.targetPlatform.isMinGW targetPackages.threads.package; postPatch = '' patchShebangs . diff --git a/pkgs/development/compilers/go/1.25.nix b/pkgs/development/compilers/go/1.25.nix index bd118bf135f1..e16420b80e38 100644 --- a/pkgs/development/compilers/go/1.25.nix +++ b/pkgs/development/compilers/go/1.25.nix @@ -47,7 +47,7 @@ stdenv.mkDerivation (finalAttrs: { depsBuildTarget = lib.optional isCross targetCC; - depsTargetTarget = lib.optional stdenv.targetPlatform.isWindows targetPackages.threads.package; + depsTargetTarget = lib.optional stdenv.targetPlatform.isMinGW targetPackages.threads.package; postPatch = '' patchShebangs . From df70c870d24cd02a1c614f5759ef7bc150a0eeaf Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 1 Aug 2025 23:16:22 +0000 Subject: [PATCH 10/21] trufflehog: 3.90.1 -> 3.90.2 --- pkgs/by-name/tr/trufflehog/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/tr/trufflehog/package.nix b/pkgs/by-name/tr/trufflehog/package.nix index 94b5131cc99e..c4a8775c04ff 100644 --- a/pkgs/by-name/tr/trufflehog/package.nix +++ b/pkgs/by-name/tr/trufflehog/package.nix @@ -8,13 +8,13 @@ buildGoModule rec { pname = "trufflehog"; - version = "3.90.1"; + version = "3.90.2"; src = fetchFromGitHub { owner = "trufflesecurity"; repo = "trufflehog"; tag = "v${version}"; - hash = "sha256-SuNsuO7IKtKbAPnYZqJ5OQ8BaWvDN5XtdX8Amgt51fY="; + hash = "sha256-PjZA109+Wf1yOf0BEgyUmSFV1s6G0rZTNMDufdax6kc="; }; vendorHash = "sha256-haJgpR7xJOoiFfyYnaHpL6w9IcJnpODYN6hZxFXOHr0="; From a0713e8668600c2d8eaa352f2f85f1ace64238fe Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Fri, 1 Aug 2025 23:22:22 +0000 Subject: [PATCH 11/21] linux_6_15: 6.15.8 -> 6.15.9 --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 4207dbe6b729..958a9ff81265 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -28,8 +28,8 @@ "hash": "sha256:0cr9hi0m7p9jf0rdblign1ya40rckab9axiwxb62r3gr2w9sy4a8" }, "6.15": { - "version": "6.15.8", - "hash": "sha256:19i87zpq3zhpg09sdirnzys2s2yrv9xn8mpibl1a6qmr2sy94znk" + "version": "6.15.9", + "hash": "sha256:0zcma8ycdwwzd4yci9752acsv85wh27lahclh5x2yc4jakw3lkz9" }, "6.16": { "version": "6.16", From 1bc4192ed0663d45b29a62f360ac5ca42cc36fae Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Fri, 1 Aug 2025 23:22:24 +0000 Subject: [PATCH 12/21] linux_6_12: 6.12.40 -> 6.12.41 --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 958a9ff81265..82c83644d472 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -24,8 +24,8 @@ "hash": "sha256:1flpvypy88rmp2sbz3z4fxlgdylm5lxb5832bgsi8j5iam6yrh6n" }, "6.12": { - "version": "6.12.40", - "hash": "sha256:0cr9hi0m7p9jf0rdblign1ya40rckab9axiwxb62r3gr2w9sy4a8" + "version": "6.12.41", + "hash": "sha256:09qfpxyxi3z8cd64r2r5mxvh54a5sx8p5mk4d50y4ga2k6pa66bb" }, "6.15": { "version": "6.15.9", From 370770e50841fdcdea8cec4eeee09e2c524a90c9 Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Fri, 1 Aug 2025 23:22:26 +0000 Subject: [PATCH 13/21] linux_6_6: 6.6.100 -> 6.6.101 --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 82c83644d472..2679c02e760f 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -20,8 +20,8 @@ "hash": "sha256:0fm73yqzbzclh2achcj8arpg428d412k2wgmlfmyy6xzb1762qrx" }, "6.6": { - "version": "6.6.100", - "hash": "sha256:1flpvypy88rmp2sbz3z4fxlgdylm5lxb5832bgsi8j5iam6yrh6n" + "version": "6.6.101", + "hash": "sha256:1h71zbqlsxcafrk218s0rip9rdrj0fzqvsl81ndqnlrnjy3g4kwc" }, "6.12": { "version": "6.12.41", From 5ca1168b17ef2f14633d1c0db56fe35f0c6d2397 Mon Sep 17 00:00:00 2001 From: "R. RyanTM" Date: Sat, 2 Aug 2025 10:42:33 +1000 Subject: [PATCH 14/21] home-assistant-custom-components.solis-sensor: 3.12.0 -> 3.13.0 (#430249) https://github.com/hultenvp/solis-sensor/releases/tag/v3.13.0 --- .../home-assistant/custom-components/solis-sensor/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix b/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix index 1aae56b79754..bc7b725cba64 100644 --- a/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix +++ b/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix @@ -9,13 +9,13 @@ buildHomeAssistantComponent rec { owner = "hultenvp"; domain = "solis"; - version = "3.12.0"; + version = "3.13.0"; src = fetchFromGitHub { owner = "hultenvp"; repo = "solis-sensor"; rev = "v${version}"; - hash = "sha256-JjEfak1dH+Gox6XKZw1g75q2zogdw01D2QKcUur9Dg8="; + hash = "sha256-LkfuBnX825miTCsYZZf7gkybV8tb7bQvk5IlC0wMmsY="; }; dependencies = [ aiofiles ]; From f1deb8b4ac88efed89ae5027bb5e8c57063268fa Mon Sep 17 00:00:00 2001 From: Bobby Rong Date: Fri, 1 Aug 2025 23:33:40 +0800 Subject: [PATCH 15/21] =?UTF-8?q?webkitgtk=5F6=5F0:=202.48.3=20=E2=86=92?= =?UTF-8?q?=202.48.5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://github.com/WebKit/WebKit/compare/webkitgtk-2.48.3...webkitgtk-2.48.5 https://webkitgtk.org/security/WSA-2025-0005.html https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html CVE-2025-31273 CVE-2025-31278 CVE-2025-43211 CVE-2025-43212 CVE-2025-43216 CVE-2025-43227 CVE-2025-43228 CVE-2025-43240 CVE-2025-43265 CVE-2025-6558 --- pkgs/development/libraries/webkitgtk/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/webkitgtk/default.nix b/pkgs/development/libraries/webkitgtk/default.nix index 5638e03f187c..9cf22fd7544c 100644 --- a/pkgs/development/libraries/webkitgtk/default.nix +++ b/pkgs/development/libraries/webkitgtk/default.nix @@ -80,7 +80,7 @@ # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang. clangStdenv.mkDerivation (finalAttrs: { pname = "webkitgtk"; - version = "2.48.3"; + version = "2.48.5"; name = "${finalAttrs.pname}-${finalAttrs.version}+abi=${ if lib.versionAtLeast gtk3.version "4.0" then "6.0" @@ -100,7 +100,7 @@ clangStdenv.mkDerivation (finalAttrs: { src = fetchurl { url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz"; - hash = "sha256-1NxZcPD8alKf9/1nvL+rK7tekb54my6SeWQLMhengsM="; + hash = "sha256-u2TtnRz9WOi16JzK1x3TGt/tVjNrrXaVAxrQtmjhmHw="; }; patches = lib.optionals clangStdenv.hostPlatform.isLinux [ From fb732681fd8896550faaf5ccfe98855305773e8b Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 02:44:39 +0000 Subject: [PATCH 16/21] olympus-unwrapped: 25.07.23.01 -> 25.07.26.04 --- pkgs/by-name/ol/olympus-unwrapped/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/ol/olympus-unwrapped/package.nix b/pkgs/by-name/ol/olympus-unwrapped/package.nix index b668d78c130a..3c0bc4477e74 100644 --- a/pkgs/by-name/ol/olympus-unwrapped/package.nix +++ b/pkgs/by-name/ol/olympus-unwrapped/package.nix @@ -31,9 +31,9 @@ let phome = "$out/lib/olympus"; # The following variables are to be updated by the update script. - version = "25.07.23.01"; - buildId = "4972"; # IMPORTANT: This line is matched with regex in update.sh. - rev = "2d4876fa93063df39ba8e2d6c97b57223f7b3b4f"; + version = "25.07.26.04"; + buildId = "4981"; # IMPORTANT: This line is matched with regex in update.sh. + rev = "31ee2ad97fd48ec122733c2bdd600913695673b9"; in buildDotnetModule { pname = "olympus-unwrapped"; @@ -44,7 +44,7 @@ buildDotnetModule { owner = "EverestAPI"; repo = "Olympus"; fetchSubmodules = true; # Required. See upstream's README. - hash = "sha256-30Lir9erklCPIEsreIWwjrSkuZtr5mJpqxXAMXawYyk="; + hash = "sha256-bflkZdp7qA0/DM+8UEudgJJ5imfd3QbEBkMbzvv2WGM="; }; nativeBuildInputs = [ From a82ec34b6462ffcd149193c065402253ff726a28 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 02:51:54 +0000 Subject: [PATCH 17/21] bookstack: 25.05.2 -> 25.07 --- pkgs/by-name/bo/bookstack/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/bo/bookstack/package.nix b/pkgs/by-name/bo/bookstack/package.nix index be288487c2a5..c570f4d75a35 100644 --- a/pkgs/by-name/bo/bookstack/package.nix +++ b/pkgs/by-name/bo/bookstack/package.nix @@ -8,16 +8,16 @@ php83.buildComposerProject2 (finalAttrs: { pname = "bookstack"; - version = "25.05.2"; + version = "25.07"; src = fetchFromGitHub { owner = "bookstackapp"; repo = "bookstack"; tag = "v${finalAttrs.version}"; - hash = "sha256-TkqbrzF+WybD8zmVymFXHgzMPDPHlYd71Fg9Z6BVs4M="; + hash = "sha256-NlG5b/uiXplvV4opL6+SMDh4UhHAhN1wuGX7eyEnTew="; }; - vendorHash = "sha256-kpA00pJG7zzmpwUJsLvhCF/Q74iBmGbtTrelSex/9g0="; + vendorHash = "sha256-8wnNHFo+faut7qqHHy9/jvcUfLFD45uapBFGP4xAYFs="; passthru = { phpPackage = php83; From ce825d2854f93dce89ed2d19c8da32c13e21746e Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 03:52:39 +0000 Subject: [PATCH 18/21] bento: 1.9.0 -> 1.9.1 --- pkgs/by-name/be/bento/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/be/bento/package.nix b/pkgs/by-name/be/bento/package.nix index f660f06f2c0b..9a20a5bbc481 100644 --- a/pkgs/by-name/be/bento/package.nix +++ b/pkgs/by-name/be/bento/package.nix @@ -8,13 +8,13 @@ buildGoModule rec { pname = "bento"; - version = "1.9.0"; + version = "1.9.1"; src = fetchFromGitHub { owner = "warpstreamlabs"; repo = "bento"; tag = "v${version}"; - hash = "sha256-rAm9Jn1elux02W0sbMOvQmYyg9ONuSqyStVt1ieTFBk="; + hash = "sha256-EGRM9tt8tycFxfrDBE/kAa0nat+dv1VmiPkIXcvCpA4="; }; proxyVendor = true; From 980fe63e5c9319440655b9b1c8159dca918f03bb Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 04:04:21 +0000 Subject: [PATCH 19/21] igir: 4.1.1 -> 4.1.2 --- pkgs/by-name/ig/igir/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ig/igir/package.nix b/pkgs/by-name/ig/igir/package.nix index 5c8a2ad74767..44ecd284648b 100644 --- a/pkgs/by-name/ig/igir/package.nix +++ b/pkgs/by-name/ig/igir/package.nix @@ -18,16 +18,16 @@ buildNpmPackage rec { pname = "igir"; - version = "4.1.1"; + version = "4.1.2"; src = fetchFromGitHub { owner = "emmercm"; repo = "igir"; rev = "v${version}"; - hash = "sha256-f/3XIBFMxSPwJpfZTBhuznU/psChfnQEwZASOoH4Ij0="; + hash = "sha256-L9bY3ep0HqRimYTqfW1yqbnnas4gjsD2emtJnWxGQaQ="; }; - npmDepsHash = "sha256-qPyS2F5jt1C5SZxvRuyPX4+TkYZKTffcekanWtH82EY="; + npmDepsHash = "sha256-56pTJ1VZcoqDb56qzvfxEZUubu82n55O5R0JFRNy5HE="; # I have no clue why I have to do this postPatch = '' From ec5d6368e35d6e0904f933a33d586eccca9055ee Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 03:47:53 +0000 Subject: [PATCH 20/21] hyprcursor: 0.1.12 -> 0.1.13 --- pkgs/by-name/hy/hyprcursor/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/hy/hyprcursor/package.nix b/pkgs/by-name/hy/hyprcursor/package.nix index 254b9c65901d..ca36cdaef2fe 100644 --- a/pkgs/by-name/hy/hyprcursor/package.nix +++ b/pkgs/by-name/hy/hyprcursor/package.nix @@ -14,13 +14,13 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "hyprcursor"; - version = "0.1.12"; + version = "0.1.13"; src = fetchFromGitHub { owner = "hyprwm"; repo = "hyprcursor"; tag = "v${finalAttrs.version}"; - hash = "sha256-IvneQb4YFlEXWjXaKeA0y6lL7Z6JqTAvSAlcMDWnjK4="; + hash = "sha256-lIqabfBY7z/OANxHoPeIrDJrFyYy9jAM4GQLzZ2feCM="; }; nativeBuildInputs = [ From 00332eb9abcb4136af31daba7924730a42574de7 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 2 Aug 2025 01:10:50 +0000 Subject: [PATCH 21/21] plasma-plugin-blurredwallpaper: 3.3.1 -> 3.4.0 --- pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix b/pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix index 75866f2be064..1d6ee0eb1ce8 100644 --- a/pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix +++ b/pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix @@ -6,13 +6,13 @@ }: stdenvNoCC.mkDerivation (finalAttrs: { pname = "plasma-plugin-blurredwallpaper"; - version = "3.3.1"; + version = "3.4.0"; src = fetchFromGitHub { owner = "bouteillerAlan"; repo = "blurredwallpaper"; rev = "v${finalAttrs.version}"; - hash = "sha256-hXuJhSS5QEgKWn60ctF3N+avfez8Ktrne3re/FY/VMU="; + hash = "sha256-pklqYT8o1AfOAjQTl3rVm+XWXoL+pGChpjx40ywr8Xs="; }; installPhase = ''