kirillrdy and GitHub
106eb93cbb
exo: 1.0.68 -> 1.0.69 ( #504824 )
2026-04-02 01:59:51 +00:00
dish and GitHub
b44f78afb7
archipelago: 0.6.6 -> 0.6.7 ( #505791 )
2026-04-02 01:36:50 +00:00
Yohann Boniface and GitHub
94d7e47164
bodoni-moda: use installFonts hook ( #505709 )
2026-04-02 01:18:23 +00:00
Yohann Boniface and GitHub
7130118132
material-icons: use installFonts hook ( #505707 )
2026-04-02 01:17:29 +00:00
Yohann Boniface and GitHub
60bc5ae3cb
takao: use installFonts hook ( #505691 )
2026-04-02 01:11:48 +00:00
Yohann Boniface and GitHub
a178108a65
seshat: use installFonts hook ( #505686 )
2026-04-02 01:10:09 +00:00
Yohann Boniface and GitHub
b7b2125b34
fantasque-sans-mono: use installFonts hook ( #500553 )
2026-04-02 01:08:57 +00:00
Yohann Boniface and GitHub
64c5258cc6
biz-ud-gothic: use installFonts ( #505683 )
2026-04-02 01:08:36 +00:00
Yohann Boniface and GitHub
b4eefbee42
beedii: modernize ( #505679 )
2026-04-02 01:06:21 +00:00
Gaetan Lepage
9c45817acc
exo: 1.0.68 -> 1.0.69
...
Diff: https://github.com/exo-explore/exo/compare/v1.0.68...v1.0.69
Changelog: https://github.com/exo-explore/exo/releases/tag/v1.0.69
2026-04-02 00:54:16 +00:00
Gaétan Lepage and GitHub
14dbf46759
vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 ( #505850 )
2026-04-02 00:52:37 +00:00
zowoq and GitHub
b467c3a639
terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 ( #505860 )
2026-04-02 00:25:42 +00:00
R. Ryantm
d3d0d5ed40
terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0
2026-04-02 00:03:33 +00:00
Philip Taron and GitHub
c111fb7e5e
pam_u2f: fix usage with polkit 127 ( #486044 )
2026-04-01 23:56:16 +00:00
Yt and GitHub
fc56e12985
fishPlugins.forgit: 26.01.0 -> 26.04.0 ( #505518 )
2026-04-01 23:55:05 +00:00
Philip Taron
098b000a36
nixos/tests: add end-to-end pam_u2f and polkit sandbox tests
...
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.
pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
2026-04-01 16:50:22 -07:00
Philip Taron and Victor Luft
f3648de497
polkit: fix polkit-agent-helper@ sandbox for pam_u2f
...
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:
- PrivateDevices=yes creates a private /dev without hidraw devices,
so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
diagnostic output as protocol errors, resulting in tight
re-execution loops
Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled
Co-authored-by: Victor Luft <victor@luft.io >
2026-04-01 16:50:18 -07:00
Gaétan Lepage and GitHub
5809b092fc
python3Packages.qtconsole: 5.7.1 -> 5.7.2 ( #505416 )
2026-04-01 23:47:59 +00:00
Philip Taron and GitHub
6917611baf
python3Packages.llm: 0.29 -> 0.30 ( #505514 )
2026-04-01 23:45:34 +00:00
R. Ryantm and Gaetan Lepage
bbf0517a9b
python3Packages.qtconsole: 5.7.1 -> 5.7.2
2026-04-01 23:35:20 +00:00
kirillrdy and GitHub
d7922c9d62
python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 ( #505847 )
2026-04-01 23:22:06 +00:00
R. Ryantm
8ba3d94ecd
vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01
2026-04-01 23:18:42 +00:00
nixpkgs-ci[bot] and GitHub
3b9f4320b1
asn: 0.80.4 -> 0.80.5 ( #505835 )
2026-04-01 23:18:09 +00:00
Philip Taron and GitHub
f6b8482cba
libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support ( #505812 )
2026-04-01 23:16:50 +00:00
Gergő Gutyina and GitHub
172b7d4e40
webeep-sync: init at 1.0.3-unstable-2024-04-30 ( #501366 )
2026-04-01 23:06:51 +00:00
Gaetan Lepage
9a080ecec5
python3Packages.spyder-kernels: 3.1.3 -> 3.1.4
...
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4
Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
2026-04-01 23:05:41 +00:00
dotlambda and GitHub
c6cca75cfd
python3Packages.urllib3-future: 2.18.901 -> 2.19.900 ( #505843 )
2026-04-01 22:57:00 +00:00
Nick Cao and GitHub
c3e05a12b5
python3Packages.mlx: 0.30.5 -> 0.31.1 ( #504828 )
2026-04-01 22:50:42 +00:00
R. Ryantm
c6121046db
python3Packages.urllib3-future: 2.18.901 -> 2.19.900
2026-04-01 22:36:39 +00:00
Philip Taron and GitHub
49ca49bede
Make ec2 tests a channel blocker ( #365623 )
2026-04-01 22:33:05 +00:00
Marc Jakobi and GitHub
08a82c9fdd
emmylua-doc-cli: 0.21.0 -> 0.22.0 ( #505825 )
2026-04-01 22:19:25 +00:00
Arian van Putten and Philip Taron
c5d4a896c5
nixos/release-combined: add nixos.tests.ec2-userdata
...
This is to catch issues like https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-253149474
We do not want to push NixOS updates that break SSH access on EC2 instances.
2026-04-01 15:19:20 -07:00
Arian van Putten and Philip Taron
7ab9b03f5b
nixos/tests/ec2: remove hack
...
Not needed anymore. no idea why this was here
2026-04-01 15:19:19 -07:00
Arian van Putten and Philip Taron
0e37e9beff
nixos/tests/ec2: rename ec2-nixops to ec2-userdata
...
This is more accurate.
People dismissed failures in the past in this test because of the name.
We don't want that. The test is important! It tests that SSH works!
Hopefully this helps with https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-2531494744
2026-04-01 15:19:03 -07:00
Arian van Putten and Philip Taron
448b9932df
nixos/tests/ec2: remove ec2-config test
...
It has been broken for as long as I know
2026-04-01 15:18:23 -07:00
Philip Taron and GitHub
64d047a9ce
nixos/amazon-image: do not force-load xen-blkfront kernel module ( #313933 )
2026-04-01 22:14:29 +00:00
Martin Weinelt and GitHub
c6ea0df341
home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 ( #505801 )
2026-04-01 22:07:23 +00:00
Nick Cao and GitHub
d64b849bf3
glaze: 7.1.0 -> 7.2.2 ( #504129 )
2026-04-01 22:04:58 +00:00
zowoq and GitHub
5647a31d17
terraform-providers.tencentcloudstack_tencentcloud: 1.82.77 -> 1.82.82 ( #505797 )
2026-04-01 21:52:02 +00:00
zowoq and GitHub
78b5a8ce37
terraform-providers.cloudamqp_cloudamqp: 1.43.1 -> 1.44.0 ( #505775 )
2026-04-01 21:51:51 +00:00
Yt and GitHub
086333f595
beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 ( #505823 )
2026-04-01 21:51:09 +00:00
R. Ryantm
f5f5d7d15b
asn: 0.80.4 -> 0.80.5
2026-04-01 21:44:21 +00:00
Philip Taron and GitHub
188aec52a6
Remove Profpatsch from most teams & maintainer fields ( #505770 )
2026-04-01 21:43:24 +00:00
Profpatsch and Philip Taron
257f122e3d
treewide: remove Profpatsch from most teams & maintainer fields
2026-04-01 14:34:59 -07:00
Thiago Kenji Okada and GitHub
813ee5fab4
libretro.fbalpha2012: 0-unstable-2025-12-12 -> 0-unstable-2026-03-31 ( #505788 )
2026-04-01 21:28:24 +00:00
Adam C. Stephens
5ef2f74e55
beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4
...
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.4
2026-04-01 17:20:45 -04:00
R. Ryantm
db369e0ad7
emmylua-doc-cli: 0.21.0 -> 0.22.0
2026-04-01 21:18:18 +00:00
Philip Taron and GitHub
8001332b4e
prevail: rename from ebpf-verifier; unstable-2023-07-15 -> 0.2.0 ( #505643 )
2026-04-01 21:15:43 +00:00
Philip Taron and GitHub
01e9170240
colobot: fix build with boost 1.89 ( #504833 )
2026-04-01 21:13:51 +00:00
Philip Taron and GitHub
376606ee83
ciftilib: fix build with boost 1.89 ( #504819 )
2026-04-01 21:13:28 +00:00