From 65291eac4dadb222544b9e0626ada8be4ed29903 Mon Sep 17 00:00:00 2001 From: Jonathan Davies Date: Sun, 5 Jul 2026 11:06:43 +0000 Subject: [PATCH 1/4] temporal: Restrict updateScript to stable versions with the releases API --- pkgs/by-name/te/temporal/package.nix | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/te/temporal/package.nix b/pkgs/by-name/te/temporal/package.nix index 5f7be6862021..5e16837ddee7 100644 --- a/pkgs/by-name/te/temporal/package.nix +++ b/pkgs/by-name/te/temporal/package.nix @@ -6,6 +6,7 @@ testers, temporal, versionCheckHook, + nix-update-script, }: buildGoModule (finalAttrs: { @@ -62,10 +63,18 @@ buildGoModule (finalAttrs: { versionCheckProgramArg = "--version"; doInstallCheck = true; - passthru.tests = { - inherit (nixosTests) temporal; - version = testers.testVersion { - package = temporal; + passthru = { + tests = { + inherit (nixosTests) temporal; + version = testers.testVersion { + package = temporal; + }; + }; + + updateScript = nix-update-script { + extraArgs = [ + "--use-github-releases" + ]; }; }; From 77b9825730fcea5af0a2ee5bec5f52838ca18382 Mon Sep 17 00:00:00 2001 From: Jonathan Davies Date: Sun, 5 Jul 2026 12:00:39 +0000 Subject: [PATCH 2/4] =?UTF-8?q?temporal:=201.30.5=20=E2=86=92=201.31.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../te/temporal/darwin-sandbox-fix.patch | 20 ------------------- pkgs/by-name/te/temporal/package.nix | 13 +++--------- 2 files changed, 3 insertions(+), 30 deletions(-) delete mode 100644 pkgs/by-name/te/temporal/darwin-sandbox-fix.patch diff --git a/pkgs/by-name/te/temporal/darwin-sandbox-fix.patch b/pkgs/by-name/te/temporal/darwin-sandbox-fix.patch deleted file mode 100644 index b390d492467c..000000000000 --- a/pkgs/by-name/te/temporal/darwin-sandbox-fix.patch +++ /dev/null @@ -1,20 +0,0 @@ ---- vendor/modernc.org/libc/honnef.co/go/netdb/netdb.go -+++ vendor/modernc.org/libc/honnef.co/go/netdb/netdb.go -@@ -696,7 +696,7 @@ func init() { - // Load protocols - data, err := ioutil.ReadFile("/etc/protocols") - if err != nil { -- if !os.IsNotExist(err) { -+ if !os.IsNotExist(err) && !os.IsPermission(err) { - panic(err) - } - -@@ -732,7 +732,7 @@ func init() { - // Load services - data, err = ioutil.ReadFile("/etc/services") - if err != nil { -- if !os.IsNotExist(err) { -+ if !os.IsNotExist(err) && !os.IsPermission(err) { - panic(err) - } - diff --git a/pkgs/by-name/te/temporal/package.nix b/pkgs/by-name/te/temporal/package.nix index 5e16837ddee7..59ef588c3c82 100644 --- a/pkgs/by-name/te/temporal/package.nix +++ b/pkgs/by-name/te/temporal/package.nix @@ -11,23 +11,16 @@ buildGoModule (finalAttrs: { pname = "temporal"; - version = "1.30.5"; + version = "1.31.1"; src = fetchFromGitHub { owner = "temporalio"; repo = "temporal"; tag = "v${finalAttrs.version}"; - hash = "sha256-Uw1E1GcLtIo1XZea/tb1TnbIk9O4Mf2NaCpDwUIfSak="; + hash = "sha256-NOmIEVBWA91oU7+yp1ySF7dyGlnQHgor1gKvvGg80BE="; }; - vendorHash = "sha256-5++ETJgWDVveUxb2QZL5AUQG8/8QNVx5iS/NBjoacCY="; - - overrideModAttrs = old: { - # netdb.go allows /etc/protocols and /etc/services to not exist and happily proceeds, but it panic()s if they exist but return permission denied. - postBuild = '' - patch -p0 < ${./darwin-sandbox-fix.patch} - ''; - }; + vendorHash = "sha256-KZKlARki/AXGhfsQsOixHjx+t1H9htd9oBx3wsiebY0="; excludedPackages = [ "./build" ]; From a9b24e2e041a1cb63d72855ddf873754897db646 Mon Sep 17 00:00:00 2001 From: Jonathan Davies Date: Thu, 9 Jul 2026 10:33:13 +0100 Subject: [PATCH 3/4] =?UTF-8?q?temporal:=201.31.1=20=E2=86=92=201.32.2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pkgs/by-name/te/temporal/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/te/temporal/package.nix b/pkgs/by-name/te/temporal/package.nix index 59ef588c3c82..6d0080663122 100644 --- a/pkgs/by-name/te/temporal/package.nix +++ b/pkgs/by-name/te/temporal/package.nix @@ -11,13 +11,13 @@ buildGoModule (finalAttrs: { pname = "temporal"; - version = "1.31.1"; + version = "1.31.2"; src = fetchFromGitHub { owner = "temporalio"; repo = "temporal"; tag = "v${finalAttrs.version}"; - hash = "sha256-NOmIEVBWA91oU7+yp1ySF7dyGlnQHgor1gKvvGg80BE="; + hash = "sha256-NuvgeG1a7octJ2HD0EGQIdU8CtZsNRf4KX/F17S/uOQ="; }; vendorHash = "sha256-KZKlARki/AXGhfsQsOixHjx+t1H9htd9oBx3wsiebY0="; From f0c33ef3a6505211e7a6b9f167797010f3f35ae3 Mon Sep 17 00:00:00 2001 From: Jonathan Davies Date: Fri, 10 Jul 2026 11:21:50 +0100 Subject: [PATCH 4/4] nixos/temporal: Add release note with link to upstream docs on upgrading --- nixos/doc/manual/release-notes/rl-2611.section.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md index b53a82215604..ba4015401212 100644 --- a/nixos/doc/manual/release-notes/rl-2611.section.md +++ b/nixos/doc/manual/release-notes/rl-2611.section.md @@ -99,6 +99,9 @@ - `komodo` has been updated to the v2 release line (2.x). See the [upstream v1 → v2 upgrade guide](https://github.com/moghtech/komodo/releases/tag/v2.0.0). +- `temporal` has been updated to the 1.31 release line. Always consult the [upstream upgrade + notes](https://docs.temporal.io/self-hosted-guide/upgrade-server) before upgrading between versions. + - The `shell_interact()` function on interactive runs of NixOS VM tests has been deprecated. Use the SSH backdoor instead. - [services.netbox](#opt-services.netbox.enable) has received a number of updates: