diff --git a/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml index cebb90bf32c8..d46d5e0f0345 100644 --- a/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml +++ b/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml @@ -131,13 +131,26 @@ kops - defaults to 1.22.4, which will enable + defaults to 1.23.2, which will enable Instance Metadata Service Version 2 and require tokens on new - clusters with Kubernetes 1.22. This will increase security by - default, but may break some types of workloads. See the - release - notes for details. + clusters with Kubernetes >= 1.22. This will increase + security by default, but may break some types of workloads. + The default behaviour for + spec.kubeDNS.nodeLocalDNS.forwardToKubeDNS + has changed from true to + false. Cilium now has + disable-cnp-status-updates: true by + default. Set this to false if you rely on the + CiliumNetworkPolicy status fields. Support for Kubernetes + 1.17, the Lyft CNI, Weave CNI on Kubernetes >= 1.23, CentOS + 7 and 8, Debian 9, RHEL 7, and Ubuntu 16.05 (Xenial) has been + removed. See the + 1.22 + release notes and + 1.23 + release notes for more details, including other + significant changes. diff --git a/nixos/doc/manual/release-notes/rl-2205.section.md b/nixos/doc/manual/release-notes/rl-2205.section.md index 3136a9607b60..edb3758dd2f1 100644 --- a/nixos/doc/manual/release-notes/rl-2205.section.md +++ b/nixos/doc/manual/release-notes/rl-2205.section.md @@ -49,7 +49,7 @@ In addition to numerous new and upgraded packages, this release has the followin - The new [`postgresqlTestHook`](https://nixos.org/manual/nixpkgs/stable/#sec-postgresqlTestHook) runs a PostgreSQL server for the duration of package checks. -- [`kops`](https://kops.sigs.k8s.io) defaults to 1.22.4, which will enable [Instance Metadata Service Version 2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html) and require tokens on new clusters with Kubernetes 1.22. This will increase security by default, but may break some types of workloads. See the [release notes](https://kops.sigs.k8s.io/releases/1.22-notes/) for details. +- [`kops`](https://kops.sigs.k8s.io) defaults to 1.23.2, which will enable [Instance Metadata Service Version 2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html) and require tokens on new clusters with Kubernetes >= 1.22. This will increase security by default, but may break some types of workloads. The default behaviour for `spec.kubeDNS.nodeLocalDNS.forwardToKubeDNS` has changed from `true` to `false`. Cilium now has `disable-cnp-status-updates: true` by default. Set this to false if you rely on the CiliumNetworkPolicy status fields. Support for Kubernetes 1.17, the Lyft CNI, Weave CNI on Kubernetes >= 1.23, CentOS 7 and 8, Debian 9, RHEL 7, and Ubuntu 16.05 (Xenial) has been removed. See the [1.22 release notes](https://kops.sigs.k8s.io/releases/1.22-notes/) and [1.23 release notes](https://kops.sigs.k8s.io/releases/1.23-notes/) for more details, including other significant changes. - Module authors can use `mkRenamedOptionModuleWith` to automate the deprecation cycle without annoying out-of-tree module authors and their users. diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix index db018bfb67ef..ac8ae6885625 100644 --- a/pkgs/applications/editors/vscode/extensions/default.nix +++ b/pkgs/applications/editors/vscode/extensions/default.nix @@ -1147,8 +1147,8 @@ let mktplcRef = { name = "Ionide-fsharp"; publisher = "Ionide"; - version = "6.0.1"; - sha256 = "sha256-1W1qKnjmyK80np+J6S/nku3QJGypxYnuE0BPw8Onzas="; + version = "6.0.4"; + sha256 = "sha256-gdM7mG5ykBiwLHodZ2VyF4uYYuAPhXP2MturNvfQ5iM="; }; meta = with lib; { changelog = "https://marketplace.visualstudio.com/items/Ionide.Ionide-fsharp/changelog"; diff --git a/pkgs/applications/networking/cluster/kops/default.nix b/pkgs/applications/networking/cluster/kops/default.nix index 69eafdddf93f..2da8b7894f2b 100644 --- a/pkgs/applications/networking/cluster/kops/default.nix +++ b/pkgs/applications/networking/cluster/kops/default.nix @@ -65,8 +65,8 @@ rec { }; kops_1_23 = mkKops rec { - version = "1.23.1"; - sha256 = "sha256-SiseHs5cMj8DR1f6z9PTbtF/h3Bn9riiLWW5KMYwVUg="; + version = "1.23.2"; + sha256 = "sha256-9GANjGRS9QaJw+CEeMv/f+rEu37QV2YxMvSRSH6+3PM="; rev = "v${version}"; }; } diff --git a/pkgs/desktops/pantheon/desktop/gala/default.nix b/pkgs/desktops/pantheon/desktop/gala/default.nix index 0cab4d2e08f5..862a52308d9a 100644 --- a/pkgs/desktops/pantheon/desktop/gala/default.nix +++ b/pkgs/desktops/pantheon/desktop/gala/default.nix @@ -1,6 +1,7 @@ { lib , stdenv , fetchFromGitHub +, fetchpatch , nix-update-script , pkg-config , meson @@ -38,6 +39,13 @@ stdenv.mkDerivation rec { # We look for plugins in `/run/current-system/sw/lib/` because # there are multiple plugin providers (e.g. gala and wingpanel). ./plugins-dir.patch + + # WindowManager: save/restore easing on workspace switch + # https://github.com/elementary/gala/pull/1430 + (fetchpatch { + url = "https://github.com/elementary/gala/commit/1f94db16c627f73af5dc69714611815e4691b5e8.patch"; + sha256 = "sha256-PLNbAXyOG0TMn1y2QIBnL6BOQVqBA+DBgPOVJo4nDr8="; + }) ]; nativeBuildInputs = [ diff --git a/pkgs/development/libraries/nix-plugins/default.nix b/pkgs/development/libraries/nix-plugins/default.nix index c17a0e8c7fe7..1d3c32103803 100644 --- a/pkgs/development/libraries/nix-plugins/default.nix +++ b/pkgs/development/libraries/nix-plugins/default.nix @@ -2,13 +2,13 @@ stdenv.mkDerivation rec { pname = "nix-plugins"; - version = "8.0.0"; + version = "9.0.0"; src = fetchFromGitHub { owner = "shlevy"; repo = "nix-plugins"; rev = version; - hash = "sha256-Zz8cPHK4w0qimYu6III6XfiKVQIzEMMV9P6ER5fveZY="; + hash = "sha256-AkHsZpYM4EY8SNuF6LhxF2peOjp69ICGc3kOLkDms64="; }; nativeBuildInputs = [ cmake pkg-config ]; diff --git a/pkgs/development/python-modules/boxx/default.nix b/pkgs/development/python-modules/boxx/default.nix index 10032f0ae58f..3fc8a18c0a45 100644 --- a/pkgs/development/python-modules/boxx/default.nix +++ b/pkgs/development/python-modules/boxx/default.nix @@ -19,14 +19,14 @@ buildPythonPackage rec { pname = "boxx"; - version = "0.10.0"; + version = "0.10.1"; format = "setuptools"; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-1Q6wCloOCfyDmvC8VbK6GgfnxuliJ6Ze7UEvsNFBVa0="; + hash = "sha256-YYR13JS9otoylS3ds0jK7d0jOxbhafaQd8fSxIiREi4="; }; propagatedBuildInputs = [ diff --git a/pkgs/development/python-modules/broadlink/default.nix b/pkgs/development/python-modules/broadlink/default.nix index ba635a39257d..e03fa1c2aef6 100644 --- a/pkgs/development/python-modules/broadlink/default.nix +++ b/pkgs/development/python-modules/broadlink/default.nix @@ -7,14 +7,14 @@ buildPythonPackage rec { pname = "broadlink"; - version = "0.18.1"; + version = "0.18.2"; format = "setuptools"; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-KMfL1mY4th87gjPrdhvzQjdXucgwSChsykOCO3cPAD8="; + hash = "sha256-2ktLSJ1Nsdry8dvWmY/BbhHApTYQMvSjCsNKX3PkocU="; }; propagatedBuildInputs = [ diff --git a/pkgs/development/python-modules/manticore/default.nix b/pkgs/development/python-modules/manticore/default.nix index 2e1bff7e21ef..8b2be2626601 100644 --- a/pkgs/development/python-modules/manticore/default.nix +++ b/pkgs/development/python-modules/manticore/default.nix @@ -32,7 +32,7 @@ buildPythonPackage rec { owner = "trailofbits"; repo = "manticore"; rev = version; - sha256 = "sha256-+17VBfAtkZZIi3SF5Num1Uqg3WjIpgbz3Jx65rD5zkM="; + hash = "sha256-+17VBfAtkZZIi3SF5Num1Uqg3WjIpgbz3Jx65rD5zkM="; }; propagatedBuildInputs = [ @@ -52,9 +52,11 @@ buildPythonPackage rec { unicorn ]; - # Python API is not used in the code, only z3 from PATH postPatch = '' - sed -ie s/z3-solver// setup.py + # Python API is not used in the code, only z3 from PATH + substituteInPlace setup.py \ + --replace "z3-solver" "" \ + --replace "crytic-compile==0.2.2" "crytic-compile>=0.2.2" ''; checkInputs = [ @@ -128,5 +130,7 @@ buildPythonPackage rec { license = licenses.agpl3Only; platforms = platforms.unix; maintainers = with maintainers; [ arturcygan ]; + # m.c.manticore:WARNING: Manticore is only supported on Linux. Proceed at your own risk! + broken = stdenv.isDarwin; }; } diff --git a/pkgs/development/python-modules/mlflow/default.nix b/pkgs/development/python-modules/mlflow/default.nix index 10c69b076112..088318bc2e02 100644 --- a/pkgs/development/python-modules/mlflow/default.nix +++ b/pkgs/development/python-modules/mlflow/default.nix @@ -1,76 +1,86 @@ -{ lib, buildPythonPackage, fetchPypi, isPy27, fetchpatch +{ lib , alembic +, buildPythonPackage , click , cloudpickle -, requests -, six -, flask -, numpy -, scipy -, pandas -, python-dateutil -, protobuf -, GitPython -, pyyaml -, querystring_parser -, simplejson -, docker , databricks-cli +, docker , entrypoints -, sqlparse -, sqlalchemy +, fetchpatch +, fetchPypi +, flask +, GitPython , gorilla , gunicorn -, prometheus-flask-exporter , importlib-metadata +, numpy +, packaging +, pandas +, prometheus-flask-exporter +, protobuf +, python-dateutil +, pythonOlder +, pyyaml +, querystring_parser +, requests +, scipy +, simplejson +, six +, sqlalchemy +, sqlparse }: buildPythonPackage rec { pname = "mlflow"; - version = "1.25.1"; - disabled = isPy27; + version = "1.26.0"; + format = "setuptools"; + + disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - sha256 = "sha256-jDePRRbWNz+VvFe2x8LcpD8mUNSc7lq2ucNFf8RvBgA="; + hash = "sha256-2D1glQkovCY0lN0kfxGeoLigTkkPpij13mTeou7CAw4="; }; - # run into https://stackoverflow.com/questions/51203641/attributeerror-module-alembic-context-has-no-attribute-config - # also, tests use conda so can't run on NixOS without buildFHSUserEnv - doCheck = false; - propagatedBuildInputs = [ alembic click cloudpickle - requests - six - flask - numpy - scipy - pandas - python-dateutil - protobuf - GitPython - pyyaml - querystring_parser - simplejson - docker databricks-cli + docker entrypoints - sqlparse - sqlalchemy + flask + GitPython gorilla gunicorn - prometheus-flask-exporter importlib-metadata + numpy + packaging + pandas + prometheus-flask-exporter + protobuf + python-dateutil + pyyaml + querystring_parser + requests + scipy + simplejson + six + sqlalchemy + sqlparse ]; - pythonImportsCheck = [ "mlflow" ]; + pythonImportsCheck = [ + "mlflow" + ]; + + # run into https://stackoverflow.com/questions/51203641/attributeerror-module-alembic-context-has-no-attribute-config + # also, tests use conda so can't run on NixOS without buildFHSUserEnv + doCheck = false; meta = with lib; { - homepage = "https://github.com/mlflow/mlflow"; description = "Open source platform for the machine learning lifecycle"; + homepage = "https://github.com/mlflow/mlflow"; license = licenses.asl20; maintainers = with maintainers; [ tbenst ]; }; diff --git a/pkgs/development/python-modules/pip-tools/default.nix b/pkgs/development/python-modules/pip-tools/default.nix index 2b079c8f00e3..41e4edbb6ba9 100644 --- a/pkgs/development/python-modules/pip-tools/default.nix +++ b/pkgs/development/python-modules/pip-tools/default.nix @@ -1,37 +1,30 @@ { lib -, fetchPypi -, pythonOlder -, buildPythonPackage -, pip -, pytestCheckHook -, pytest-xdist -, click -, setuptools-scm -, pep517 , stdenv +, buildPythonPackage +, click +, fetchPypi +, pep517 +, pip +, pytest-xdist +, pytestCheckHook +, pythonOlder +, setuptools +, setuptools-scm +, wheel }: buildPythonPackage rec { pname = "pip-tools"; - version = "6.6.1"; + version = "6.6.2"; + format = "setuptools"; - disabled = pythonOlder "3.6"; + disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - sha256 = "sha256-Y04+jUcHJXwAQxPRap1sFMHOlNPA+h+Tw40mRAHy5PI="; + hash = "sha256-9jhQOp932Y2afXJYSxUI0/gu0Bm4+rJPTlrQeMG4yV4="; }; - checkInputs = [ - pytestCheckHook - pytest-xdist - ]; - - preCheck = lib.optionalString (stdenv.isDarwin && stdenv.isAarch64) '' - # https://github.com/python/cpython/issues/74570#issuecomment-1093748531 - export no_proxy='*'; - ''; - nativeBuildInputs = [ setuptools-scm ]; @@ -40,14 +33,30 @@ buildPythonPackage rec { click pep517 pip + setuptools + wheel ]; + checkInputs = [ + pytest-xdist + pytestCheckHook + ]; + + preCheck = lib.optionalString (stdenv.isDarwin && stdenv.isAarch64) '' + # https://github.com/python/cpython/issues/74570#issuecomment-1093748531 + export no_proxy='*'; + ''; + disabledTests = [ - # these want internet access + # Tests require network access "network" "test_direct_reference_with_extras" ]; + pythonImportsCheck = [ + "piptools" + ]; + meta = with lib; { description = "Keeps your pinned dependencies fresh"; homepage = "https://github.com/jazzband/pip-tools/"; diff --git a/pkgs/development/python-modules/policyuniverse/default.nix b/pkgs/development/python-modules/policyuniverse/default.nix index b8e6a790f745..739b586d0360 100644 --- a/pkgs/development/python-modules/policyuniverse/default.nix +++ b/pkgs/development/python-modules/policyuniverse/default.nix @@ -6,18 +6,22 @@ buildPythonPackage rec { pname = "policyuniverse"; - version = "1.5.0.20220426"; + version = "1.5.0.20220523"; + format = "setuptools"; + disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - sha256 = "sha256-lOis0JE0XI43KsuGgpG20iBRPttVJvRS225PInu7EUM="; + hash = "sha256-gmcF8KdwGLMU5g1NYgxLKgBLk1yJrWi/dpVETDaY0Vo="; }; # Tests are not shipped and there are no GitHub tags doCheck = false; - pythonImportsCheck = [ "policyuniverse" ]; + pythonImportsCheck = [ + "policyuniverse" + ]; meta = with lib; { description = "Parse and Process AWS IAM Policies, Statements, ARNs and wildcards"; diff --git a/pkgs/development/python-modules/stripe/default.nix b/pkgs/development/python-modules/stripe/default.nix index 8d6193f8905e..d277bf2970c2 100644 --- a/pkgs/development/python-modules/stripe/default.nix +++ b/pkgs/development/python-modules/stripe/default.nix @@ -7,14 +7,14 @@ buildPythonPackage rec { pname = "stripe"; - version = "3.1.0"; + version = "3.2.0"; format = "setuptools"; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-1/pMGFeNJqfn9onlF33Y67R/KHmxwGAZqguIji3Rrrk="; + hash = "sha256-2aR959ljz2mogPPQSWG3ksQPRWx04Jh4VRVV3jwiYfA="; }; propagatedBuildInputs = [ diff --git a/pkgs/tools/admin/adtool/default.nix b/pkgs/tools/admin/adtool/default.nix index f1bc5851c793..ac009e1b091a 100644 --- a/pkgs/tools/admin/adtool/default.nix +++ b/pkgs/tools/admin/adtool/default.nix @@ -41,5 +41,6 @@ stdenv.mkDerivation rec { homepage = "https://gp2x.org/adtool"; license = licenses.gpl2; maintainers = with maintainers; [ peterhoeg ]; + broken = true; # does not link against recent libldap versions and unmaintained since 2017 }; } diff --git a/pkgs/tools/filesystems/orangefs/default.nix b/pkgs/tools/filesystems/orangefs/default.nix index f6a35437fb92..0b4ec481fc71 100644 --- a/pkgs/tools/filesystems/orangefs/default.nix +++ b/pkgs/tools/filesystems/orangefs/default.nix @@ -1,4 +1,4 @@ -{ lib, stdenv, fetchurl, bison, flex, autoreconfHook +{ lib, stdenv, fetchurl, fetchpatch, bison, flex, autoreconfHook , openssl, db, attr, perl, tcsh } : @@ -11,6 +11,15 @@ stdenv.mkDerivation rec { sha256 = "0c2yla615j04ygclfavh8g5miqhbml2r0zs2c5mvkacf9in7p7sq"; }; + patches = [ + # Pull upstream fix for -fno-common toolchains + (fetchpatch { + name = "fno-common.patch"; + url = "https://github.com/waltligon/orangefs/commit/f472beb50356bea657d1c32f1ca8a73e4718fd57.patch"; + sha256 = "0jaq1ffdxgymjciddsy8h8r87nwbif4v5yv4wd7jxysn25a0hdai"; + }) + ]; + nativeBuildInputs = [ bison flex perl autoreconfHook ]; buildInputs = [ openssl db attr tcsh ]; diff --git a/pkgs/tools/virtualization/cri-tools/default.nix b/pkgs/tools/virtualization/cri-tools/default.nix index 846e2ee27944..62a13499dd85 100644 --- a/pkgs/tools/virtualization/cri-tools/default.nix +++ b/pkgs/tools/virtualization/cri-tools/default.nix @@ -6,13 +6,13 @@ buildGoModule rec { pname = "cri-tools"; - version = "1.23.0"; + version = "1.24.1"; src = fetchFromGitHub { owner = "kubernetes-sigs"; repo = pname; rev = "v${version}"; - sha256 = "sha256-b65GY08vykVp/PUBmBXKIfykyPEJRgGjgu7zBoXx3K0="; + sha256 = "sha256-7WZ7Kb3Rx/hq7LYaDN/B9CpPgr9+aR5+FKDG7G/JydA="; }; vendorSha256 = null; diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index ca4c1550b78b..7bf1b3daa468 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -19737,7 +19737,7 @@ with pkgs; ngtcp2 = callPackage ../development/libraries/ngtcp2 { }; - nix-plugins = callPackage ../development/libraries/nix-plugins { nix = nixVersions.nix_2_5; }; + nix-plugins = callPackage ../development/libraries/nix-plugins { }; nika-fonts = callPackage ../data/fonts/nika-fonts { };