From ef4d5eb74b15b763582442f6f4b0d82e2d80c62a Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 9 May 2025 03:14:32 +0000 Subject: [PATCH 01/14] lomiri.suru-icon-theme: 2024.10.13 -> 2025.05.0 --- pkgs/desktops/lomiri/data/suru-icon-theme/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix b/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix index c4e23473b4e7..a50d2652f93c 100644 --- a/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix +++ b/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix @@ -10,13 +10,13 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "suru-icon-theme"; - version = "2024.10.13"; + version = "2025.05.0"; src = fetchFromGitLab { owner = "ubports"; repo = "development/core/suru-icon-theme"; rev = finalAttrs.version; - hash = "sha256-rbhfcjca0vMBa0tJWGpXMRGGygZH1hmdQv/nLJWPS7s="; + hash = "sha256-6MyZTRcfCpiCXzwrwNiBP6J4L4oFbFtoymhke13tLy0="; }; strictDeps = true; From 3509c9149c8b8749d4e1e6dbc1373407e1fde3af Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sat, 4 Oct 2025 15:23:15 +0200 Subject: [PATCH 02/14] gegl: 0.4.62 -> 0.4.64 Fixes CVE-2025-10921. Changes: https://gitlab.gnome.org/GNOME/gegl/-/commits/GEGL_0_4_64?ref_type=tags --- pkgs/development/libraries/gegl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/gegl/default.nix b/pkgs/development/libraries/gegl/default.nix index 9a65b4de99ec..128fb7d94682 100644 --- a/pkgs/development/libraries/gegl/default.nix +++ b/pkgs/development/libraries/gegl/default.nix @@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: { pname = "gegl"; - version = "0.4.62"; + version = "0.4.64"; outputs = [ "out" @@ -48,7 +48,7 @@ stdenv.mkDerivation (finalAttrs: { src = fetchurl { url = "https://download.gimp.org/pub/gegl/${lib.versions.majorMinor finalAttrs.version}/gegl-${finalAttrs.version}.tar.xz"; - hash = "sha256-WIdXY3Hr8dnpB5fRDkuafxZYIo1IJ1g+eeHbPZRQXGw="; + hash = "sha256-DeHJ3SLBYNXkvfw4jSkvA0R8ymJYVBuaEv7Xg9DPfGA="; }; nativeBuildInputs = [ From 3387c90d107703ad0f3931f2055464caba7fe128 Mon Sep 17 00:00:00 2001 From: OPNA2608 Date: Sat, 4 Oct 2025 19:39:39 +0200 Subject: [PATCH 03/14] lomiri.suru-icon-theme: Undo symlinks that break Lomiri startup This is prolly due to an issue on our end, maybe in theme loading. Deleting the new symlinks for now, not great but better than indefinitely blocking theme updates. --- pkgs/desktops/lomiri/data/suru-icon-theme/default.nix | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix b/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix index a50d2652f93c..94357423aee2 100644 --- a/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix +++ b/pkgs/desktops/lomiri/data/suru-icon-theme/default.nix @@ -19,6 +19,16 @@ stdenvNoCC.mkDerivation (finalAttrs: { hash = "sha256-6MyZTRcfCpiCXzwrwNiBP6J4L4oFbFtoymhke13tLy0="; }; + # Commit 79763fa4ff701d1d89d7362c37c65b2a3cbdf543 introduced abunch of symlinks for Lomiri apps' icons to files from this theme. + # This seems to have broken Lomiri, as it now gets stuck during startup (presumably?) trying to resolve the icons of these apps in the sidebar. + # Can't apply a revert of the commit because patch refuses to touch symlinks. + postPatch = '' + for app in dekko2 lomiri-{addressbook,calculator,calendar,camera,clock,dialer,docviewer,gallery,mediaplayer,messaging,music,notes,terminal,weather}-app lomiri-system-settings lomiri-online-accounts-{facebook,flickr,google,owncloud,twitter,ubuntuones,yahoo}; do + find suru/apps -name "$app".png -exec rm -v {} \; + find suru/apps -name "$app"-symbolic.svg -exec rm -v {} \; + done + ''; + strictDeps = true; nativeBuildInputs = [ From 37e40baa36930eb252a2730f2553a397a098bb72 Mon Sep 17 00:00:00 2001 From: Felix Singer Date: Sat, 4 Oct 2025 23:48:24 +0200 Subject: [PATCH 04/14] nixos/gerrit: Set ProtectControlGroups to `strict` For documentation see https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectControlGroups= Signed-off-by: Felix Singer --- nixos/modules/services/web-apps/gerrit.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/web-apps/gerrit.nix b/nixos/modules/services/web-apps/gerrit.nix index 82bce5ae545d..85a3d576583e 100644 --- a/nixos/modules/services/web-apps/gerrit.nix +++ b/nixos/modules/services/web-apps/gerrit.nix @@ -234,7 +234,7 @@ in PrivateDevices = true; PrivateTmp = true; ProtectClock = true; - ProtectControlGroups = true; + ProtectControlGroups = "strict"; ProtectHome = true; ProtectHostname = true; ProtectKernelLogs = true; From d76caee9e9c7ad2eb88d924de95e85998da96395 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Oct 2025 22:51:03 +0000 Subject: [PATCH 05/14] python3Packages.python-engineio: 4.12.2 -> 4.12.3 --- pkgs/development/python-modules/python-engineio/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/python-engineio/default.nix b/pkgs/development/python-modules/python-engineio/default.nix index 3c4ca5cdd764..a252ceeb73c7 100644 --- a/pkgs/development/python-modules/python-engineio/default.nix +++ b/pkgs/development/python-modules/python-engineio/default.nix @@ -20,7 +20,7 @@ buildPythonPackage rec { pname = "python-engineio"; - version = "4.12.2"; + version = "4.12.3"; pyproject = true; disabled = pythonOlder "3.8"; @@ -29,7 +29,7 @@ buildPythonPackage rec { owner = "miguelgrinberg"; repo = "python-engineio"; tag = "v${version}"; - hash = "sha256-VgdqVzO3UToXpD9pMEDqAH2DfdBwaWUfulALAEG2DNs="; + hash = "sha256-VcL8Od1EM/cbbeOVyXlsXYt8Bms636XbtunrTblkGDQ="; }; build-system = [ setuptools ]; From d8302692f483a3cbb6b7cdfd34291b184c477339 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Oct 2025 00:23:27 +0000 Subject: [PATCH 06/14] python3Packages.pvlib: 0.13.0 -> 0.13.1 --- pkgs/development/python-modules/pvlib/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pvlib/default.nix b/pkgs/development/python-modules/pvlib/default.nix index 59ecbce7aba5..2f9726b89beb 100644 --- a/pkgs/development/python-modules/pvlib/default.nix +++ b/pkgs/development/python-modules/pvlib/default.nix @@ -21,14 +21,14 @@ buildPythonPackage rec { pname = "pvlib"; - version = "0.13.0"; + version = "0.13.1"; pyproject = true; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-zvNs3ZMqanvy3XyZKwAEsaCNMV7oBDsnPRkq1XkC6Fo="; + hash = "sha256-qT/RGNBIt4fbZsI0SGwFwMZc8J2zRNggg5YbyCat9G8="; }; build-system = [ From ae67029844fed7a8e55b53c2ecc7a662e58da1c5 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Oct 2025 00:46:29 +0000 Subject: [PATCH 07/14] cdncheck: 1.2.3 -> 1.2.4 --- pkgs/by-name/cd/cdncheck/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/cd/cdncheck/package.nix b/pkgs/by-name/cd/cdncheck/package.nix index 92edc587336d..3c178a55b7cc 100644 --- a/pkgs/by-name/cd/cdncheck/package.nix +++ b/pkgs/by-name/cd/cdncheck/package.nix @@ -6,16 +6,16 @@ buildGoModule rec { pname = "cdncheck"; - version = "1.2.3"; + version = "1.2.4"; src = fetchFromGitHub { owner = "projectdiscovery"; repo = "cdncheck"; tag = "v${version}"; - hash = "sha256-E6LMl0cArzVZ33xaG/2nvSgLy+Owr9br2fU3oFNyvGY="; + hash = "sha256-O4tw/Uc2EuZerAVD8l2n5HejqWZUcCPHuU757r+uRmY="; }; - vendorHash = "sha256-IJk6HTiF2B1paVZ4qa63DwivtpOf5V0OKQEKAs3BpYY="; + vendorHash = "sha256-6GxqDWRnvvj4OM2hqkwWFDvhOm+2VQvoGHivuOtTyCg="; subPackages = [ "cmd/cdncheck/" ]; From 766e12d19fc78de0d314c5bc69a23629f8b8a52c Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Oct 2025 02:30:49 +0000 Subject: [PATCH 08/14] python3Packages.aiohttp-client-cache: 0.14.0 -> 0.14.1 --- .../python-modules/aiohttp-client-cache/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/aiohttp-client-cache/default.nix b/pkgs/development/python-modules/aiohttp-client-cache/default.nix index 62770c1fbebe..7356919847e0 100644 --- a/pkgs/development/python-modules/aiohttp-client-cache/default.nix +++ b/pkgs/development/python-modules/aiohttp-client-cache/default.nix @@ -21,13 +21,13 @@ buildPythonPackage rec { pname = "aiohttp-client-cache"; - version = "0.14.0"; + version = "0.14.1"; pyproject = true; src = fetchPypi { pname = "aiohttp_client_cache"; inherit version; - hash = "sha256-onEcLEhhTLljQ57No49shj5Jv6bqF1t9/7z1yCRfzxk="; + hash = "sha256-r1VW9xmBSsoC22OEJxBpzsame+Maa32UN+CmqZgKSU8="; }; build-system = [ poetry-core ]; From 4bcf8b6f6e2a789a3539f2b5b04a178a1b128235 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Oct 2025 06:04:08 +0000 Subject: [PATCH 09/14] deck: 1.51.1 -> 1.52.0 --- pkgs/by-name/de/deck/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/de/deck/package.nix b/pkgs/by-name/de/deck/package.nix index e0a451765bac..c9049708c5f7 100644 --- a/pkgs/by-name/de/deck/package.nix +++ b/pkgs/by-name/de/deck/package.nix @@ -9,13 +9,13 @@ buildGoModule rec { pname = "deck"; - version = "1.51.1"; + version = "1.52.0"; src = fetchFromGitHub { owner = "Kong"; repo = "deck"; tag = "v${version}"; - hash = "sha256-r7nqPsFXLhTg0gctNc8dYLv5L02J3YWw6AOfqHTsXIw="; + hash = "sha256-fKcI40DqQwVw4YzPXVOXdij4LAwRkCp2U+TpjYmIO8I="; }; nativeBuildInputs = [ installShellFiles ]; @@ -28,7 +28,7 @@ buildGoModule rec { ]; proxyVendor = true; # darwin/linux hash mismatch - vendorHash = "sha256-5JSMw73Vo59OMpkQcakYodd9HySmPPaJIi3x85npd6Y="; + vendorHash = "sha256-h7wtQDw8kixqGK5RE9YQ6a/I3yRO1k/6qcHX/K4M6fc="; postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) '' installShellCompletion --cmd deck \ From 4089148983517436e83d7935c2193236bdf37ac4 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 5 Oct 2025 11:27:59 +0200 Subject: [PATCH 10/14] python313Packages.python-engineio: modernize --- pkgs/development/python-modules/python-engineio/default.nix | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/python-engineio/default.nix b/pkgs/development/python-modules/python-engineio/default.nix index a252ceeb73c7..fb0b279437df 100644 --- a/pkgs/development/python-modules/python-engineio/default.nix +++ b/pkgs/development/python-modules/python-engineio/default.nix @@ -11,7 +11,6 @@ mock, pytest-asyncio, pytestCheckHook, - pythonOlder, requests, simple-websocket, tornado, @@ -23,8 +22,6 @@ buildPythonPackage rec { version = "4.12.3"; pyproject = true; - disabled = pythonOlder "3.8"; - src = fetchFromGitHub { owner = "miguelgrinberg"; repo = "python-engineio"; @@ -80,7 +77,7 @@ buildPythonPackage rec { ''; homepage = "https://github.com/miguelgrinberg/python-engineio/"; changelog = "https://github.com/miguelgrinberg/python-engineio/blob/${src.tag}/CHANGES.md"; - license = with licenses; [ mit ]; + license = licenses.mit; maintainers = with maintainers; [ mic92 ]; }; } From 763b2acc1b911e13eed7c40395459e2c5932ff12 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 5 Oct 2025 11:31:14 +0200 Subject: [PATCH 11/14] python313Packages.aioamazondevices: 6.2.7 -> 6.2.8 Diff: https://github.com/chemelli74/aioamazondevices/compare/v6.2.7...v6.2.8 Changelog: https://github.com/chemelli74/aioamazondevices/blob/v6.2.8/CHANGELOG.md --- pkgs/development/python-modules/aioamazondevices/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/aioamazondevices/default.nix b/pkgs/development/python-modules/aioamazondevices/default.nix index 55541bcefe34..a283f3026451 100644 --- a/pkgs/development/python-modules/aioamazondevices/default.nix +++ b/pkgs/development/python-modules/aioamazondevices/default.nix @@ -15,14 +15,14 @@ buildPythonPackage rec { pname = "aioamazondevices"; - version = "6.2.7"; + version = "6.2.8"; pyproject = true; src = fetchFromGitHub { owner = "chemelli74"; repo = "aioamazondevices"; tag = "v${version}"; - hash = "sha256-gsKqQkJBKu5Of/PFzEt04GEQ9PC7PBqJASYw5ucrrGU="; + hash = "sha256-73z4mWWBfJLewLFQvhSj7hIOfBzcwIVrNlyPPAk7PPM="; }; build-system = [ poetry-core ]; From 65c921b24f7a678fccb1dc73f4696d7d3f14f4e1 Mon Sep 17 00:00:00 2001 From: Pablo Fraile Alonso Date: Sun, 5 Oct 2025 12:03:13 +0200 Subject: [PATCH 12/14] python313Packages.pysilero-vad: disable tests on aarch64 --- pkgs/development/python-modules/pysilero-vad/default.nix | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pysilero-vad/default.nix b/pkgs/development/python-modules/pysilero-vad/default.nix index 63cbc36ca3d0..f2f26e442154 100644 --- a/pkgs/development/python-modules/pysilero-vad/default.nix +++ b/pkgs/development/python-modules/pysilero-vad/default.nix @@ -38,9 +38,12 @@ buildPythonPackage rec { pythonImportsCheck = [ "pysilero_vad" ]; + # aarch64-linux onnxruntime tries to get cpu information from /sys, which isn't available + # inside the nix build sandbox. + doCheck = stdenv.buildPlatform.system != "aarch64-linux"; + dontUsePythonImportsCheck = stdenv.buildPlatform.system == "aarch64-linux"; + meta = with lib; { - # what(): /build/source/include/onnxruntime/core/common/logging/logging.h:294 static const onnxruntime::logging::Logger& onnxruntime::logging::LoggingManager::DefaultLogger() Attempt to use DefaultLogger but none has been registered. - broken = stdenv.hostPlatform.isAarch64 && stdenv.hostPlatform.isLinux; description = "Pre-packaged voice activity detector using silero-vad"; homepage = "https://github.com/rhasspy/pysilero-vad"; changelog = "https://github.com/rhasspy/pysilero-vad/blob/${src.tag}/CHANGELOG.md"; From e84b813d9063825137c75fdf3eb5d4439a455cca Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 5 Oct 2025 12:18:30 +0200 Subject: [PATCH 13/14] python313Packages.pvlib: remove disabled Removed dependency on pythonOlder and disabled condition. --- pkgs/development/python-modules/pvlib/default.nix | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkgs/development/python-modules/pvlib/default.nix b/pkgs/development/python-modules/pvlib/default.nix index 2f9726b89beb..aa4afc0eda36 100644 --- a/pkgs/development/python-modules/pvlib/default.nix +++ b/pkgs/development/python-modules/pvlib/default.nix @@ -10,7 +10,6 @@ pytest-remotedata, pytest-rerunfailures, pytest-timeout, - pythonOlder, pytz, requests, requests-mock, @@ -24,8 +23,6 @@ buildPythonPackage rec { version = "0.13.1"; pyproject = true; - disabled = pythonOlder "3.7"; - src = fetchPypi { inherit pname version; hash = "sha256-qT/RGNBIt4fbZsI0SGwFwMZc8J2zRNggg5YbyCat9G8="; From 333ee272ed874da33a6301bcf57dcedef57ba4f6 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 5 Oct 2025 13:17:25 +0200 Subject: [PATCH 14/14] python313Packages.django-tables2: 2.7.1 -> 2.7.5 Changelog: https://github.com/jieter/django-tables2/blob/v2.7.5/CHANGELOG.md --- .../development/python-modules/django-tables2/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/django-tables2/default.nix b/pkgs/development/python-modules/django-tables2/default.nix index 3ede021e0e82..bbf25cf4020f 100644 --- a/pkgs/development/python-modules/django-tables2/default.nix +++ b/pkgs/development/python-modules/django-tables2/default.nix @@ -4,7 +4,7 @@ fetchFromGitHub, # build-system - setuptools, + hatchling, # dependencies django, @@ -23,17 +23,17 @@ buildPythonPackage rec { pname = "django-tables2"; - version = "2.7.1"; + version = "2.7.5"; pyproject = true; src = fetchFromGitHub { owner = "jieter"; repo = "django-tables2"; tag = "v${version}"; - hash = "sha256-DhPQM/OEd8ViEm7cLbb/KCb6bjyoqKnbGOcqkTPRRxo="; + hash = "sha256-Cb8XhCLqhc2Dx/5uAHnN9zTVL6/1+WekC4qTloBurzM="; }; - build-system = [ setuptools ]; + build-system = [ hatchling ]; dependencies = [ django ];