Martin Weinelt
2fce48831c
python39: 3.9.15 -> 3.9.16
...
https://docs.python.org/release/3.9.16/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html
Fixes: CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2015-20107
2022-12-07 16:40:42 +01:00
Sandro and GitHub
8db4e2d64a
Merge pull request #204845 from qowoz/go119
2022-12-07 15:31:16 +01:00
Linus Heckemann and GitHub
36cec7c971
Merge pull request #204795 from mweinelt/cacert-distrust-trustcore
...
cacert: Distrust TrustCor root certificates
2022-12-07 11:37:47 +01:00
Fabian Affolter and GitHub
446ce471e0
Merge pull request #204759 from fabaff/exceptiongroup-bump
...
python310Packages.exceptiongroup: 1.0.1 -> 1.0.4
2022-12-07 09:24:44 +01:00
zowoq
5b349b72d5
go_1_19: 1.19.3 -> 1.19.4
...
https://github.com/golang/go/releases/tag/go1.19.4
2022-12-07 06:11:21 +10:00
ajs124 and GitHub
8bc69af9f3
Merge pull request #204546 from r-ryantm/auto-update/re2
...
re2: 2022-06-01 -> 2022-12-01
2022-12-06 19:15:39 +01:00
Martin Weinelt
2e7853293d
cacert: Distrust TrustCor root certificates
...
Mozilla set "Distrust After" for the three TrustCor Root CAs¹, so new
certificates issued would not be trusted after 2022/11/30, while older
enduser certificates would continue working until they expire. This is a
fine-grained policy option available to consumers of the NSS library,
such as Firefox or Thunderbird.
For Linux systems we generally export the Mozilla trust store into our
own CA bundle that ultimately lacks that metadata, because there is no
standardized way to parse it in the first place.
That means that as long as Mozilla keeps the certificate in their CA
program, even with time-based "Distrust" configured, we would keep
trusting it fully². That is completely unreasonable and that is why we
reject these CAs here for all users of nixpkgs.
The TrustCor CAs were primarily used to sign certificates for dynamic
hosts for domains provided through no-ip.com, so we expect the fallout
from this to be minimal.
[1] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
[2] https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem
2022-12-06 19:12:53 +01:00
Jan Tojnar and GitHub
f2d78a4d52
Merge pull request #204383 from jtojnar/gnome-staging
...
GNOME staging updates
2022-12-06 16:25:14 +01:00
Fabian Affolter
9dd5cd8441
python310Packages.exceptiongroup: 1.0.1 -> 1.0.4
...
Changelog: https://github.com/agronholm/exceptiongroup/blob/1.0.4/CHANGES.rst
2022-12-06 11:25:09 +01:00
Fabian Affolter
88c2174353
python310Packages.exceptiongroup: add changelog to meta
2022-12-06 09:09:54 +01:00
Martin Weinelt
60f52f6c83
Merge remote-tracking branch 'origin/staging-next' into staging
2022-12-06 01:27:11 +01:00
Martin Weinelt
7ea3d4395d
Merge remote-tracking branch 'origin/master' into staging-next
2022-12-06 01:26:56 +01:00
Sandro and GitHub
d74e49d8d1
Merge pull request #202078 from 2xsaiko/outgoing/crystal-aarch64-darwin
2022-12-06 01:23:20 +01:00
github-actions[bot] and GitHub
0ac4c6779e
Merge master into staging-next
2022-12-06 00:02:32 +00:00
Martin Weinelt and GitHub
b786c2bf9c
Merge pull request #204709 from r-ryantm/auto-update/python310Packages.aioesphomeapi
...
python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1
2022-12-06 00:35:17 +01:00
figsoda and GitHub
ff93685724
Merge pull request #199371 from figsoda/fetchCrate
...
fetchCrate: rewrite in terms of fetchzip
2022-12-05 18:15:33 -05:00
R. Ryantm
3b03e122ef
python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1
2022-12-05 22:31:39 +00:00
Anderson Torres and GitHub
2987aa0aab
Merge pull request #204617 from r-ryantm/auto-update/freecad
...
freecad: 0.20.1 -> 0.20.2
2022-12-05 19:22:16 -03:00
Robert Scott and GitHub
602ee7a175
Merge pull request #204584 from tjni/rav1e
...
rav1e: 0.5.1 -> 0.6.1
2022-12-05 22:12:18 +00:00
figsoda and GitHub
32df8276ec
Merge pull request #204592 from figsoda/use-nextest
...
treewide: enable cargo parallel tests with nextest
2022-12-05 16:37:32 -05:00
Martin Weinelt and GitHub
121bab7fa7
Merge pull request #204524 from mweinelt/ansible-language-server
2022-12-05 22:33:20 +01:00
Sandro and GitHub
e8d94a5d9e
Merge pull request #201054 from wkral/scryer-prolog-update
2022-12-05 22:26:06 +01:00
Sandro and GitHub
25bdd85ab6
Merge pull request #198644 from Luflosi/update/python3Packages.sphinxext-opengraph
2022-12-05 22:20:57 +01:00
Fabian Affolter and GitHub
966244ff8f
Merge pull request #204662 from fabaff/winacl-bump
...
python310Packages.winacl: 0.1.5 -> 0.1.6
2022-12-05 22:16:00 +01:00
Thiago Kenji Okada and GitHub
387779ef69
Merge pull request #204630 from PedroHLC/zen-kernels-6.0.11
...
zen-kernels: 6.0.10 -> 6.0.11
2022-12-05 21:01:32 +00:00
Sandro and GitHub
4484c12d81
Merge pull request #196449 from natto1784/crate-overrides
2022-12-05 22:00:51 +01:00
Luke Granger-Brown and GitHub
cc6635027a
Merge pull request #204681 from Frostman/unpoller-passthru.tests
...
unpoller: add passthru.tests
2022-12-05 12:44:09 -08:00
Sandro and GitHub
49526acb78
Merge pull request #204676 from figsoda/patsh
2022-12-05 21:40:29 +01:00
Sandro and GitHub
4cebef3cb0
Merge pull request #204547 from aacebedo/aacebedo/mailspring
2022-12-05 21:38:35 +01:00
Sergey Lukjanov
2a8977997a
unpoller: add passthru.tests
2022-12-05 12:21:33 -08:00
Martin Weinelt
3a5e1d626c
nodePackages."@ansible/ansible-language-server": drop
...
in favor of `ansible-language-server` built using buildNpmPackage.
2022-12-05 21:06:47 +01:00
Martin Weinelt
5d723f6ad4
ansible-language-server: init at 1.0.2-next.0
2022-12-05 21:06:47 +01:00
Sandro and GitHub
fc9f1e2b48
Merge pull request #201248 from panicgh/cups-kyodialog
2022-12-05 21:05:11 +01:00
figsoda and GitHub
aaf173db6b
Merge pull request #204670 from figsoda/neovide
...
neovide: drop python2, clean up
2022-12-05 15:04:03 -05:00
figsoda
0284480527
patsh: add comments explaining the patches
2022-12-05 15:02:01 -05:00
c8366d7f3e
python310Packages.ale-py: init at 0.8.0 ( #199118 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com >
2022-12-05 21:00:45 +01:00
Vincent Laporte and Vincent Laporte
929771b9ed
ocaml-ng.ocamlPackages_5_0: 5.0.0-β1 → 5.0.0-β2
2022-12-05 20:46:40 +01:00
figsoda
eeb1fad1bc
neovide: drop python2, clean up
2022-12-05 14:29:57 -05:00
Luke Granger-Brown and GitHub
a5f661b80e
Merge pull request #204668 from Frostman/unpoller-2.3.1
...
unpoller: 2.2.0 -> 2.3.1
2022-12-05 11:15:27 -08:00
Sergey Lukjanov
87849c9009
unpoller: add Frostman to maintainers
2022-12-05 10:47:13 -08:00
Sergey Lukjanov
9577904100
unpoller: 2.2.0 -> 2.3.1
2022-12-05 10:46:34 -08:00
figsoda and GitHub
fe701a6c08
Merge pull request #204657 from r-ryantm/auto-update/jackett
...
jackett: 0.20.2318 -> 0.20.2325
2022-12-05 13:39:18 -05:00
figsoda and GitHub
740d4bde61
Merge pull request #204661 from tjni/hexyl
...
hexyl: 0.10.0 -> 0.11.0
2022-12-05 13:36:22 -05:00
Fabian Affolter and GitHub
3754f95007
Merge pull request #200912 from fabaff/responses-bump
...
python310Packages.responses: 0.21.0 -> 0.22.0
2022-12-05 19:10:10 +01:00
Fabian Affolter and GitHub
f2dc6ffea1
Merge pull request #202668 from fabaff/weconnect-bump
...
python310Packages.oauthlib: 3.2.1 -> 3.2.2, python310Packages.weconnect: 0.48.3 -> 0.50.0, python310Packages.weconnect-mqtt: 0.40.3 -> 0.40.4
2022-12-05 19:09:09 +01:00
Jan Tojnar
2edad4b9c2
glib: 2.74.1 → 2.74.3
...
https://gitlab.gnome.org/GNOME/glib/-/compare/2.74.1...2.74.3
Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com >
2022-12-05 19:02:33 +01:00
Jan Tojnar
423e7b38f5
pango: 1.50.11 → 1.50.12
...
https://gitlab.gnome.org/GNOME/pango/-/compare/1.50.11...1.50.12
Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com >
2022-12-05 19:02:33 +01:00
Jan Tojnar
87e2db4486
tracker: 3.4.1 → 3.4.2
...
https://gitlab.gnome.org/GNOME/tracker/-/compare/3.4.1...3.4.2
Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com >
2022-12-05 19:02:33 +01:00
Fabian Affolter and GitHub
c96b7c6974
Merge pull request #193652 from fabaff/pyhamcrest-bump
...
python310Packages.pyhamcrest: 2.0.3 -> 2.0.4
2022-12-05 19:01:25 +01:00
Jan Tojnar
c4f9092cfe
gtk3: 3.24.34 → 3.24.35
...
https://gitlab.gnome.org/GNOME/gtk/-/compare/3.24.34...3.24.35
Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com >
2022-12-05 19:00:19 +01:00