From 545c359642424e8778b397dc5e166435b2781f15 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 5 Nov 2025 18:07:59 +0000 Subject: [PATCH 1/9] foxglove-studio: 2.39.0 -> 2.39.1 --- pkgs/by-name/fo/foxglove-studio/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/fo/foxglove-studio/package.nix b/pkgs/by-name/fo/foxglove-studio/package.nix index 187e405004c0..0e724c6b9361 100644 --- a/pkgs/by-name/fo/foxglove-studio/package.nix +++ b/pkgs/by-name/fo/foxglove-studio/package.nix @@ -20,11 +20,11 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "foxglove-studio"; - version = "2.39.0"; + version = "2.39.1"; src = fetchurl { url = "https://get.foxglove.dev/desktop/v${finalAttrs.version}/foxglove-studio-${finalAttrs.version}-linux-amd64.deb"; - hash = "sha256-bEvlgFCDt1b/bZhqJeeMMIDq8qjga5pwRlo/fTa3QKs="; + hash = "sha256-7HVYzKphdpXuKL6e5zD540L5MPFKg0RNZSvW0FCD75k="; }; nativeBuildInputs = [ From fee9bdcd79273d322c178ccb7519cfbb8c745e83 Mon Sep 17 00:00:00 2001 From: leiserfg Date: Wed, 5 Nov 2025 21:24:01 +0100 Subject: [PATCH 2/9] kitty: exclude more tests on darwin to allow building --- pkgs/by-name/ki/kitty/package.nix | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ki/kitty/package.nix b/pkgs/by-name/ki/kitty/package.nix index 62e5b0e9f53d..95dcc43a47c9 100644 --- a/pkgs/by-name/ki/kitty/package.nix +++ b/pkgs/by-name/ki/kitty/package.nix @@ -218,9 +218,13 @@ buildPythonApplication rec { substituteInPlace kitty_tests/ssh.py \ --replace test_ssh_connection_data no_test_ssh_connection_data \ + --replace test_ssh_shell_integration no_test_ssh_shell_integration \ + --replace test_ssh_copy no_test_ssh_copy \ + --replace test_ssh_env_vars no_test_ssh_env_vars substituteInPlace kitty_tests/shell_integration.py \ - --replace test_fish_integration no_test_fish_integration + --replace test_fish_integration no_test_fish_integration \ + --replace test_zsh_integration no_test_zsh_integration substituteInPlace kitty_tests/fonts.py \ --replace test_fallback_font_not_last_resort no_test_fallback_font_not_last_resort @@ -236,7 +240,6 @@ buildPythonApplication rec { # Fontconfig error: Cannot load default config file: No such file: (null) export FONTCONFIG_FILE=${fontconfig.out}/etc/fonts/fonts.conf - # Required for `test_ssh_shell_integration` to pass. export TERM=kitty From c29e218745bd9efa98db192100853fed69046b02 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 5 Nov 2025 21:33:55 +0000 Subject: [PATCH 3/9] dbeaver-bin: 25.2.3 -> 25.2.4 --- pkgs/by-name/db/dbeaver-bin/package.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/db/dbeaver-bin/package.nix b/pkgs/by-name/db/dbeaver-bin/package.nix index 6747d9a99b6a..7d4a5137d335 100644 --- a/pkgs/by-name/db/dbeaver-bin/package.nix +++ b/pkgs/by-name/db/dbeaver-bin/package.nix @@ -18,7 +18,7 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "dbeaver-bin"; - version = "25.2.3"; + version = "25.2.4"; src = let @@ -31,10 +31,10 @@ stdenvNoCC.mkDerivation (finalAttrs: { aarch64-darwin = "macos-aarch64.dmg"; }; hash = selectSystem { - x86_64-linux = "sha256-tOUOZP+A3vB73xvAj+OEvCR+APbwlKLwZN9iJYi/W7c="; - aarch64-linux = "sha256-yQ6+kZP22CtdaKQiRgWoYvUDMLz1mdlV3AWC+nKQVBI="; - x86_64-darwin = "sha256-tIkAkBcnF37sZV2ZHSgqe3PnAqSoU7iYRu8tNZ8fhfE="; - aarch64-darwin = "sha256-imkW4Dz8qWjIKLT6CvdjhIjWpEmfKk1MWVh5+NGujb4="; + x86_64-linux = "sha256-5mBk3HO5BqcydxDhancQ8YzfNjZ0bMAuNM9lf8fm4ks="; + aarch64-linux = "sha256-i9hQJ01G+Jy18bkYD9e6wAhufH87r/9qwxzzVd0K8LU="; + x86_64-darwin = "sha256-zSLLNOP+miG71/LCjNHanDbeRr986wwdb7x5q3gDUZs="; + aarch64-darwin = "sha256-njKjBXxv5tpaStiLHfL3Cs4FwtKBsLOCA4ASPggVhnY="; }; in fetchurl { From b04921293d2d1b5ade239e1aeb1ed618d10f1988 Mon Sep 17 00:00:00 2001 From: iamanaws <78835633+Iamanaws@users.noreply.github.com> Date: Wed, 5 Nov 2025 19:45:58 -0800 Subject: [PATCH 4/9] textcompare: 0.1.6 -> 0.1.7 --- pkgs/by-name/te/textcompare/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/te/textcompare/package.nix b/pkgs/by-name/te/textcompare/package.nix index 6d023297bc15..2a1612a6fb8c 100644 --- a/pkgs/by-name/te/textcompare/package.nix +++ b/pkgs/by-name/te/textcompare/package.nix @@ -16,13 +16,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "textcompare"; - version = "0.1.6"; + version = "0.1.7"; src = fetchFromGitHub { owner = "josephmawa"; repo = "TextCompare"; tag = "v${finalAttrs.version}"; - hash = "sha256-KWW83866dZRpuJzzYwk2X1/6OoD4gPnm2LD6IlP3fps="; + hash = "sha256-d+P5Vf1WQCNCTXUl6yK2dYp8HhwTj1Wjf8puFKHuFtw="; }; strictDeps = true; From d0beb16463f732236e1ba31e134e8c20e7aac25c Mon Sep 17 00:00:00 2001 From: Kenichi Kamiya Date: Thu, 6 Nov 2025 18:22:22 +0900 Subject: [PATCH 5/9] lima: 1.2.1 -> 1.2.2 Diff: https://github.com/lima-vm/lima/compare/v1.2.1...v1.2.2 --- pkgs/by-name/li/lima/source.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/li/lima/source.nix b/pkgs/by-name/li/lima/source.nix index aa1134c22f91..133ad36dd22d 100644 --- a/pkgs/by-name/li/lima/source.nix +++ b/pkgs/by-name/li/lima/source.nix @@ -3,7 +3,7 @@ }: let - version = "1.2.1"; + version = "1.2.2"; in { inherit version; @@ -12,7 +12,7 @@ in owner = "lima-vm"; repo = "lima"; tag = "v${version}"; - hash = "sha256-90fFsS5jidaovE2iqXfe4T2SgZJz6ScOwPPYxCsCk/k="; + hash = "sha256-bIYF/bsOMuWTkjD6fe6by220/WQGL+VWEBXmUzyXU98="; }; vendorHash = "sha256-8S5tAL7GY7dxNdyC+WOrOZ+GfTKTSX84sG8WcSec2Os="; From 602fdcff2574f640ab08394b35392c4e25cb739c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20Silva?= Date: Thu, 6 Nov 2025 10:37:15 +0000 Subject: [PATCH 6/9] claude-code: 2.0.33 -> 2.0.34 --- pkgs/by-name/cl/claude-code/package-lock.json | 4 ++-- pkgs/by-name/cl/claude-code/package.nix | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/cl/claude-code/package-lock.json b/pkgs/by-name/cl/claude-code/package-lock.json index 22e0322b6924..b86d4ca4ada2 100644 --- a/pkgs/by-name/cl/claude-code/package-lock.json +++ b/pkgs/by-name/cl/claude-code/package-lock.json @@ -1,12 +1,12 @@ { "name": "@anthropic-ai/claude-code", - "version": "2.0.33", + "version": "2.0.34", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@anthropic-ai/claude-code", - "version": "2.0.33", + "version": "2.0.34", "license": "SEE LICENSE IN README.md", "bin": { "claude": "cli.js" diff --git a/pkgs/by-name/cl/claude-code/package.nix b/pkgs/by-name/cl/claude-code/package.nix index 8de765ca83d8..da13768205ad 100644 --- a/pkgs/by-name/cl/claude-code/package.nix +++ b/pkgs/by-name/cl/claude-code/package.nix @@ -7,14 +7,14 @@ }: buildNpmPackage (finalAttrs: { pname = "claude-code"; - version = "2.0.33"; + version = "2.0.34"; src = fetchzip { url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz"; - hash = "sha256-Ng9uJj4STRCKk2ndk7zH3fF/OLZ/cvZSGKH2QRyOFcM="; + hash = "sha256-GYykbpvkFTsj7tlsAimDrNbN9kP1+8AtfG+Boch8eSk="; }; - npmDepsHash = "sha256-89+DrE8rG5WPw6J+iw4t1t+1yJKdbaKLDodfP/CsViU="; + npmDepsHash = "sha256-D0sbwZ5eCzIobFGf5LY7u3/RWQ6bYpGFDlU/ClPTA7Y="; postPatch = '' cp ${./package-lock.json} package-lock.json From c58139723adf1499014faf5ceb4e65ac236ee07c Mon Sep 17 00:00:00 2001 From: Wolfgang Walther Date: Thu, 6 Nov 2025 12:11:00 +0100 Subject: [PATCH 7/9] workflows/pull-request-target: remove leftover secret This was used for reviewers.yml, which has been removed. --- .github/workflows/pull-request-target.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/pull-request-target.yml b/.github/workflows/pull-request-target.yml index a3774366bc9b..f74ce93de354 100644 --- a/.github/workflows/pull-request-target.yml +++ b/.github/workflows/pull-request-target.yml @@ -12,9 +12,6 @@ on: required: true NIXPKGS_CI_APP_PRIVATE_KEY: required: true - OWNER_APP_PRIVATE_KEY: - # The Test workflow should not actually request reviews from owners. - required: false concurrency: group: pr-${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.run_id }} From 1742aef1e988b884b81d6b6060be33d1b8dd1a41 Mon Sep 17 00:00:00 2001 From: Wolfgang Walther Date: Thu, 6 Nov 2025 12:11:34 +0100 Subject: [PATCH 8/9] workflows/teams: use single token in team sync The nixpkgs-ci app now has all the privileges needed to see the member lists anyway, so no need for two apps / tokens anymore. --- .github/workflows/teams.yml | 27 +++++++++++---------------- 1 file changed, 11 insertions(+), 16 deletions(-) diff --git a/.github/workflows/teams.yml b/.github/workflows/teams.yml index 1cd54cd527e0..b848983b5aa2 100644 --- a/.github/workflows/teams.yml +++ b/.github/workflows/teams.yml @@ -16,13 +16,17 @@ jobs: sync: runs-on: ubuntu-24.04-arm steps: + # Use a GitHub App to create the PR so that CI gets triggered and to + # request team member lists. - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 - id: team-token + id: app-token with: - app-id: ${{ vars.OWNER_APP_ID }} - private-key: ${{ secrets.OWNER_APP_PRIVATE_KEY }} + app-id: ${{ vars.NIXPKGS_CI_APP_ID }} + private-key: ${{ secrets.NIXPKGS_CI_APP_PRIVATE_KEY }} permission-administration: read + permission-contents: write permission-members: read + permission-pull-requests: write - name: Fetch source uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 @@ -38,7 +42,7 @@ jobs: - name: Synchronise teams uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: - github-token: ${{ steps.team-token.outputs.token }} + github-token: ${{ steps.app-token.outputs.token }} script: | require('./ci/github-script/get-teams.js')({ github, @@ -47,20 +51,11 @@ jobs: outFile: "maintainers/github-teams.json" }) - # Use a GitHub App to create the PR so that CI gets triggered - - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 - id: sync-token - with: - app-id: ${{ vars.NIXPKGS_CI_APP_ID }} - private-key: ${{ secrets.NIXPKGS_CI_APP_PRIVATE_KEY }} - permission-contents: write - permission-pull-requests: write - - name: Get GitHub App User Git String id: user env: - GH_TOKEN: ${{ steps.sync-token.outputs.token }} - APP_SLUG: ${{ steps.sync-token.outputs.app-slug }} + GH_TOKEN: ${{ steps.app-token.outputs.token }} + APP_SLUG: ${{ steps.app-token.outputs.app-slug }} run: | name="${APP_SLUG}[bot]" userId=$(gh api "/users/$name" --jq .id) @@ -70,7 +65,7 @@ jobs: - name: Create Pull Request uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8 with: - token: ${{ steps.sync-token.outputs.token }} + token: ${{ steps.app-token.outputs.token }} add-paths: maintainers/github-teams.json author: ${{ steps.user.outputs.git-string }} committer: ${{ steps.user.outputs.git-string }} From 289ec9eb7bc5e7c927afc6052ddf531f17ee7820 Mon Sep 17 00:00:00 2001 From: "nixpkgs-ci[bot]" <190413589+nixpkgs-ci[bot]@users.noreply.github.com> Date: Thu, 6 Nov 2025 11:37:24 +0000 Subject: [PATCH 9/9] maintainers/github-teams.json: Automated sync --- maintainers/github-teams.json | 1 - 1 file changed, 1 deletion(-) diff --git a/maintainers/github-teams.json b/maintainers/github-teams.json index e67875efe6c5..289edd306687 100644 --- a/maintainers/github-teams.json +++ b/maintainers/github-teams.json @@ -724,7 +724,6 @@ "description": "Provides leadership for and has authority over Nixpkgs.", "id": 14317027, "maintainers": { - "K900": 386765, "alyssais": 2768870, "emilazy": 18535642, "wolfgangwalther": 9132420