Commit Graph
432976 Commits
Author SHA1 Message Date
Martin Weinelt 2fce48831c python39: 3.9.15 -> 3.9.16
https://docs.python.org/release/3.9.16/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2015-20107
2022-12-07 16:40:42 +01:00
SandroandGitHub 8db4e2d64a Merge pull request #204845 from qowoz/go119 2022-12-07 15:31:16 +01:00
Linus HeckemannandGitHub 36cec7c971 Merge pull request #204795 from mweinelt/cacert-distrust-trustcore
cacert: Distrust TrustCor root certificates
2022-12-07 11:37:47 +01:00
Fabian AffolterandGitHub 446ce471e0 Merge pull request #204759 from fabaff/exceptiongroup-bump
python310Packages.exceptiongroup: 1.0.1 -> 1.0.4
2022-12-07 09:24:44 +01:00
zowoq 5b349b72d5 go_1_19: 1.19.3 -> 1.19.4
https://github.com/golang/go/releases/tag/go1.19.4
2022-12-07 06:11:21 +10:00
ajs124andGitHub 8bc69af9f3 Merge pull request #204546 from r-ryantm/auto-update/re2
re2: 2022-06-01 -> 2022-12-01
2022-12-06 19:15:39 +01:00
Martin Weinelt 2e7853293d cacert: Distrust TrustCor root certificates
Mozilla set "Distrust After" for the three TrustCor Root CAs¹, so new
certificates issued would not be trusted after 2022/11/30, while older
enduser certificates would continue working until they expire. This is a
fine-grained policy option available to consumers of the NSS library,
such as Firefox or Thunderbird.

For Linux systems we generally export the Mozilla trust store into our
own CA bundle that ultimately lacks that metadata, because there is no
standardized way to parse it in the first place.

That means that as long as Mozilla keeps the certificate in their CA
program, even with time-based "Distrust" configured, we would keep
trusting it fully². That is completely unreasonable and that is why we
reject these CAs here for all users of nixpkgs.

The TrustCor CAs were primarily used to sign certificates for dynamic
hosts for domains provided through no-ip.com, so we expect the fallout
from this to be minimal.

[1] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
[2] https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem
2022-12-06 19:12:53 +01:00
Jan TojnarandGitHub f2d78a4d52 Merge pull request #204383 from jtojnar/gnome-staging
GNOME staging updates
2022-12-06 16:25:14 +01:00
Fabian Affolter 9dd5cd8441 python310Packages.exceptiongroup: 1.0.1 -> 1.0.4
Changelog: https://github.com/agronholm/exceptiongroup/blob/1.0.4/CHANGES.rst
2022-12-06 11:25:09 +01:00
Fabian Affolter 88c2174353 python310Packages.exceptiongroup: add changelog to meta 2022-12-06 09:09:54 +01:00
Martin Weinelt 60f52f6c83 Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-06 01:27:11 +01:00
Martin Weinelt 7ea3d4395d Merge remote-tracking branch 'origin/master' into staging-next 2022-12-06 01:26:56 +01:00
SandroandGitHub d74e49d8d1 Merge pull request #202078 from 2xsaiko/outgoing/crystal-aarch64-darwin 2022-12-06 01:23:20 +01:00
github-actions[bot]andGitHub 0ac4c6779e Merge master into staging-next 2022-12-06 00:02:32 +00:00
Martin WeineltandGitHub b786c2bf9c Merge pull request #204709 from r-ryantm/auto-update/python310Packages.aioesphomeapi
python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1
2022-12-06 00:35:17 +01:00
figsodaandGitHub ff93685724 Merge pull request #199371 from figsoda/fetchCrate
fetchCrate: rewrite in terms of fetchzip
2022-12-05 18:15:33 -05:00
R. Ryantm 3b03e122ef python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1 2022-12-05 22:31:39 +00:00
Anderson TorresandGitHub 2987aa0aab Merge pull request #204617 from r-ryantm/auto-update/freecad
freecad: 0.20.1 -> 0.20.2
2022-12-05 19:22:16 -03:00
Robert ScottandGitHub 602ee7a175 Merge pull request #204584 from tjni/rav1e
rav1e: 0.5.1 -> 0.6.1
2022-12-05 22:12:18 +00:00
figsodaandGitHub 32df8276ec Merge pull request #204592 from figsoda/use-nextest
treewide: enable cargo parallel tests with nextest
2022-12-05 16:37:32 -05:00
Martin WeineltandGitHub 121bab7fa7 Merge pull request #204524 from mweinelt/ansible-language-server 2022-12-05 22:33:20 +01:00
SandroandGitHub e8d94a5d9e Merge pull request #201054 from wkral/scryer-prolog-update 2022-12-05 22:26:06 +01:00
SandroandGitHub 25bdd85ab6 Merge pull request #198644 from Luflosi/update/python3Packages.sphinxext-opengraph 2022-12-05 22:20:57 +01:00
Fabian AffolterandGitHub 966244ff8f Merge pull request #204662 from fabaff/winacl-bump
python310Packages.winacl: 0.1.5 -> 0.1.6
2022-12-05 22:16:00 +01:00
Thiago Kenji OkadaandGitHub 387779ef69 Merge pull request #204630 from PedroHLC/zen-kernels-6.0.11
zen-kernels: 6.0.10 -> 6.0.11
2022-12-05 21:01:32 +00:00
SandroandGitHub 4484c12d81 Merge pull request #196449 from natto1784/crate-overrides 2022-12-05 22:00:51 +01:00
Luke Granger-BrownandGitHub cc6635027a Merge pull request #204681 from Frostman/unpoller-passthru.tests
unpoller: add passthru.tests
2022-12-05 12:44:09 -08:00
SandroandGitHub 49526acb78 Merge pull request #204676 from figsoda/patsh 2022-12-05 21:40:29 +01:00
SandroandGitHub 4cebef3cb0 Merge pull request #204547 from aacebedo/aacebedo/mailspring 2022-12-05 21:38:35 +01:00
Sergey Lukjanov 2a8977997a unpoller: add passthru.tests 2022-12-05 12:21:33 -08:00
Martin Weinelt 3a5e1d626c nodePackages."@ansible/ansible-language-server": drop
in favor of `ansible-language-server` built using buildNpmPackage.
2022-12-05 21:06:47 +01:00
Martin Weinelt 5d723f6ad4 ansible-language-server: init at 1.0.2-next.0 2022-12-05 21:06:47 +01:00
SandroandGitHub fc9f1e2b48 Merge pull request #201248 from panicgh/cups-kyodialog 2022-12-05 21:05:11 +01:00
figsodaandGitHub aaf173db6b Merge pull request #204670 from figsoda/neovide
neovide: drop python2, clean up
2022-12-05 15:04:03 -05:00
figsoda 0284480527 patsh: add comments explaining the patches 2022-12-05 15:02:01 -05:00
c8366d7f3e python310Packages.ale-py: init at 0.8.0 (#199118)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-12-05 21:00:45 +01:00
Vincent LaporteandVincent Laporte 929771b9ed ocaml-ng.ocamlPackages_5_0: 5.0.0-β1 → 5.0.0-β2 2022-12-05 20:46:40 +01:00
figsoda eeb1fad1bc neovide: drop python2, clean up 2022-12-05 14:29:57 -05:00
Luke Granger-BrownandGitHub a5f661b80e Merge pull request #204668 from Frostman/unpoller-2.3.1
unpoller: 2.2.0 -> 2.3.1
2022-12-05 11:15:27 -08:00
Sergey Lukjanov 87849c9009 unpoller: add Frostman to maintainers 2022-12-05 10:47:13 -08:00
Sergey Lukjanov 9577904100 unpoller: 2.2.0 -> 2.3.1 2022-12-05 10:46:34 -08:00
figsodaandGitHub fe701a6c08 Merge pull request #204657 from r-ryantm/auto-update/jackett
jackett: 0.20.2318 -> 0.20.2325
2022-12-05 13:39:18 -05:00
figsodaandGitHub 740d4bde61 Merge pull request #204661 from tjni/hexyl
hexyl: 0.10.0 -> 0.11.0
2022-12-05 13:36:22 -05:00
Fabian AffolterandGitHub 3754f95007 Merge pull request #200912 from fabaff/responses-bump
python310Packages.responses: 0.21.0 -> 0.22.0
2022-12-05 19:10:10 +01:00
Fabian AffolterandGitHub f2dc6ffea1 Merge pull request #202668 from fabaff/weconnect-bump
python310Packages.oauthlib: 3.2.1 -> 3.2.2, python310Packages.weconnect: 0.48.3 -> 0.50.0, python310Packages.weconnect-mqtt: 0.40.3 -> 0.40.4
2022-12-05 19:09:09 +01:00
Jan Tojnar 2edad4b9c2 glib: 2.74.1 → 2.74.3
https://gitlab.gnome.org/GNOME/glib/-/compare/2.74.1...2.74.3

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:02:33 +01:00
Jan Tojnar 423e7b38f5 pango: 1.50.11 → 1.50.12
https://gitlab.gnome.org/GNOME/pango/-/compare/1.50.11...1.50.12

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:02:33 +01:00
Jan Tojnar 87e2db4486 tracker: 3.4.1 → 3.4.2
https://gitlab.gnome.org/GNOME/tracker/-/compare/3.4.1...3.4.2

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:02:33 +01:00
Fabian AffolterandGitHub c96b7c6974 Merge pull request #193652 from fabaff/pyhamcrest-bump
python310Packages.pyhamcrest: 2.0.3 -> 2.0.4
2022-12-05 19:01:25 +01:00
Jan Tojnar c4f9092cfe gtk3: 3.24.34 → 3.24.35
https://gitlab.gnome.org/GNOME/gtk/-/compare/3.24.34...3.24.35

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:00:19 +01:00