2b7fc29323
systemd: drop upstreamed tmpfiles noatime patch
...
(cherry picked from commit 3dbcb86c1f
2026-06-22 08:21:28 +02:00
8336ce2319
systemd: 260.1 -> 260.2
...
(cherry picked from commit d08a97a026
2026-06-22 08:21:28 +02:00
e4f8aa8b23
ghostscript: 10.07.0 -> 10.07.1
...
Changelog: https://ghostscript.readthedocs.io/en/gs10.07.1/News.html
(cherry picked from commit 6f5cb5357c
2026-06-22 08:21:28 +02:00
1cf8084a61
xvfb: 21.1.22 -> 21.1.23, drop rebuild avoidance
...
xorg announcement: https://lists.x.org/archives/xorg-announce/2026-June/003703.html
xorg advisory: https://lists.x.org/archives/xorg-announce/2026-June/003702.html
(cherry picked from commit 8310c133b7
2026-06-22 08:21:27 +02:00
360c80e281
python3Packages.django_5: 5.2.14 -> 5.2.15
...
https://docs.djangoproject.com/en/5.2/releases/5.2.15/
https://www.djangoproject.com/weblog/2026/jun/03/security-releases/
Fixes:
CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193,
CVE-2026-48587
(cherry picked from commit 3b5d44bff5
2026-06-22 08:21:27 +02:00
608382cc0c
python3Packages.pyjwt: 2.12.1 -> 2.13.0
...
Diff: https://github.com/jpadilla/pyjwt/compare/2.12.1...2.13.0
Changelog: https://github.com/jpadilla/pyjwt/blob/2.13.0/CHANGELOG.rst
(cherry picked from commit 3b6cda4e40
2026-06-22 08:21:27 +02:00
9b9b7a4d93
go_1_26: 1.26.3 -> 1.26.4
...
(cherry picked from commit b359a44a03
2026-06-22 08:21:27 +02:00
15c74e4f1e
libgcrypt: 1.11.2 -> 1.12.2
...
1.12.0: https://dev.gnupg.org/T7643 , https://lists.gnupg.org/pipermail/gnupg-announce/2026q1/000502.html
1.12.1: https://dev.gnupg.org/T8067
1.12.2: https://dev.gnupg.org/T8114 , https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html
(cherry picked from commit 5131deab4e
2026-06-22 08:21:27 +02:00
e40d42cbb7
bzip2: patch CVE-2026-42250
...
(cherry picked from commit a7b6fa34c1
2026-06-22 08:19:29 +02:00
b3bdc19f55
libheif: 1.22.2 -> 1.23.0
...
changelog: https://github.com/strukturag/libheif/releases/tag/v1.23.0
(cherry picked from commit 536f85e8fc
2026-06-22 08:19:28 +02:00
2a0e0baec1
rustPlatform.fetchCargoVendor: remove duplicate fetcher
...
(cherry picked from commit ddda3ed831
2026-06-22 08:19:28 +02:00
68be3d0beb
sdl3: increase test timeout for testrwlock
...
(cherry picked from commit 07bc340747
2026-06-22 08:19:28 +02:00
1b76c29160
sdl3: 3.4.8 -> 3.4.10
...
Changes: https://github.com/libsdl-org/SDL/releases/tag/release-3.4.10
(cherry picked from commit 29533d61c2
2026-06-22 08:19:28 +02:00
f75e2f0964
perlPackages.HTTPDaemon: 6.16 -> 6.17
...
(cherry picked from commit 6faf866564
2026-06-22 08:19:28 +02:00
83c65a6c34
gnupatch: disable flaky test
...
Fixes #525260
(cherry picked from commit 64ae7d0e37
2026-06-22 08:19:28 +02:00
3fcd08afd1
curl: backport performance patch
...
https://github.com/curl/curl/commit/2a2104f3cff44bb28bb570a093be52bbeeed8f23
See https://curl.se/mail/distros-2026-05/0000.html
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit 06028a8aa5
2026-06-22 08:19:28 +02:00
96a47e2cd8
python3Packages.pillow-heif: disable tests that abuse spec and break in libheif 1.22.0, disable version check for libheif
...
(cherry picked from commit 37ff020c2f
2026-06-22 08:19:28 +02:00
dc108799c2
libheif: 1.21.2 -> 1.22.2
...
(cherry picked from commit fd4f373715
2026-06-22 08:19:27 +02:00
1526af39b9
publicsuffix-list: 0-unstable-2026-03-26 -> 0-unstable-2026-05-13
...
(cherry picked from commit 963f597bc3
2026-06-22 08:19:27 +02:00
b7a103e1c9
rust-cbindgen: 0.29.2 -> 0.29.3
...
https://github.com/mozilla/cbindgen/blob/v0.29.3/CHANGES
(cherry picked from commit a2e41bb76c
2026-06-22 08:19:27 +02:00
29e701ec56
valkey: 9.0.4 -> 9.1.0
...
changelog: https://github.com/valkey-io/valkey/releases/tag/9.1.0
diff: https://github.com/valkey-io/valkey/compare/9.0.4...9.1.0
(cherry picked from commit 51f6d0a44c
2026-06-22 08:19:27 +02:00
dcc6f5d962
nodejs: pin icu to newer version
...
Not-cherry-picked-because: icu will be advanced globally on the unstable branch by https://github.com/NixOS/nixpkgs/pull/520553
Signed-off-by: Marcin Serwin <marcin@serwin.dev >
(cherry picked from commit 4b965d7e22e3f82c9e9c77dd51bdd70679f0a904)
2026-06-22 08:19:27 +02:00
9ad85fe44d
ffmpeg_8: 8.1 -> 8.1.1
...
Changelog: https://github.com/FFmpeg/FFmpeg/blob/n8.1.1/Changelog
(cherry picked from commit 91518f18f5
2026-06-22 08:19:27 +02:00
671e8aefd9
at-spi2-core: 2.60.1 -> 2.60.4
...
(cherry picked from commit eb99a69943
2026-06-22 08:19:27 +02:00
1ed273b4fe
rsync: 3.4.1 -> 3.4.3
...
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702
2026-06-22 08:19:18 +02:00
88fbe351f2
python3Packages.mistune: 3.2.0 -> 3.2.1
...
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1
Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd
2026-06-22 08:16:20 +02:00
46b00f0ee0
rsync: skip chgrp test
...
This test fails when built in a chroot store.
Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com >
(cherry picked from commit 9d229c780e
2026-06-22 08:16:20 +02:00
eac01b3060
fftw: 3.3.10 -> 3.3.11
...
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f
2026-06-22 08:16:17 +02:00
fbaac14681
curl: set structuredAttrs
...
(cherry picked from commit 160ca6558e
2026-06-22 08:16:17 +02:00
664ed12255
imagemagick: 7.1.2-23 -> 7.1.2-24
...
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24
Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8
2026-06-22 08:16:17 +02:00
880289462e
libadwaita: 1.9.0 -> 1.9.1
...
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1
Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca
2026-06-22 08:16:17 +02:00
f4dff6b5f9
e2fsprogs: 1.47.3 -> 1.47.4
...
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f
2026-06-22 08:16:16 +02:00
8b70ffa9d0
libaec: 1.1.6 -> 1.1.7
...
(cherry picked from commit 6a792a71bf
2026-06-22 08:16:16 +02:00
a7e09a45bb
cargo: add patches for CVE-2026-5222 and CVE-2026-5223
...
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031
Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1e36b654119f042b8eaf9f16aff706c)
2026-06-22 08:16:16 +02:00
d0551bc010
openblas: 0.3.32 -> 0.3.33
...
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681 ,
https://hydra.nixos.org/build/327030680 ); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763 .
(cherry picked from commit 2ba029a78e
2026-06-22 08:16:16 +02:00
a7d2d596af
systemd: fix tmpfiles errors when mount is noatime
...
fixes #520485
(cherry picked from commit d28f57cdff
2026-06-22 08:16:16 +02:00
f8562c7283
python3Packages.fastapi: 0.135.3 -> 0.136.3
...
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf
2026-06-22 08:15:15 +02:00
96f63700bc
python3Packages.starlette: 0.52.1 -> 1.1.0
...
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr
Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1
2026-06-22 08:15:15 +02:00
752123aaa9
libde265: 1.0.18 -> 1.0.19
...
(cherry picked from commit 8aa7c75b47
2026-06-22 08:15:15 +02:00
179557247b
freetype: 2.14.2 -> 2.14.3
...
(cherry picked from commit 21622bac70
2026-06-22 08:15:15 +02:00
bd2d251cdc
libcaca: apply patch for CVE-2026-42046
...
Fixes https://github.com/NixOS/nixpkgs/issues/519387
(cherry picked from commit 00cd8e646c
2026-06-22 08:15:15 +02:00
9756eaf1f8
assimp: 6.0.4 -> 6.0.5
...
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md
diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236
2026-06-22 08:15:15 +02:00
8b34d586be
libass: remove libiconv dependency on darwin
...
This is already in stdenv.
(cherry picked from commit f6172a101f
2026-06-22 08:15:14 +02:00
ba90fa78f8
simdjson: 4.6.0 -> 4.6.4
...
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4
(cherry picked from commit 3803be5263
2026-06-22 08:15:14 +02:00
5eaef15328
duplicity: remove invoke from dependencies
...
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml
(cherry picked from commit b6254c48df
2026-06-22 08:15:14 +02:00
8806b112de
python3Packages.paramiko: invoke is a required dependency
...
(cherry picked from commit 9088b3d167
2026-06-22 08:15:14 +02:00
790c6832f2
doctest: 2.5.0 -> 2.5.2
...
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2
Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2
2026-06-22 08:15:14 +02:00
bbacb13154
glibc: 2.42-61 -> 2.42-67
...
(cherry picked from commit 4a8e8392a4
2026-06-22 08:15:14 +02:00
6e26421199
qt6: 6.11.0 -> 6.11.1
...
(cherry picked from commit 1b3320b2d9
2026-06-22 08:15:14 +02:00
c5cd03ad0d
kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression
...
(cherry picked from commit 66adfb9dab
2026-06-22 08:15:13 +02:00
r-vdp