gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
595,699 Commits 9 Branches 0 Tags
48dbdff7aab3fb4a856a9952dde3be3caab1cc68
Commit Graph
595699 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pascal BachandGitHub 48dbdff7aa Merge pull request #294710 from Scrumplex/pkgs/gimp-plugin-gap/fix-build 
gimpPlugins.gap: 2.6.0 -> 2.6.0-unstable-2023-05-20
 2024-03-11 21:43:24 +01:00
Robert HensingandGitHub e8d7a2d11c Merge pull request #295020 from philiptaron/remove-top-level-with-in-lib-part4 
lib/tests: remove top-level `with` in `lib/tests`
 2024-03-11 21:38:07 +01:00
Adam C. StephensandGitHub b9a1cf2f56 Merge pull request #294488 from brprice/remove-rnix-lsp 
rnix-lsp: remove package
 2024-03-11 16:35:44 -04:00
Leona MaroniandGitHub eac1b02ae8 Merge pull request #295095 from robsliwi/chore/bump-paperless-ngx 
paperless-ngx: 2.6.1 -> 2.6.2
 2024-03-11 21:34:08 +01:00
Vincenzo MantovaandGitHub 12ee5fb271 texlive.bin.dvisvgm: 3.0.3 -> 3.1.2 (#294817) 
Build dvisvgm from upstream sources to align with binaries distributed
by TeX Live.
 2024-03-11 16:12:51 -04:00
R. RyantmandBjørn Forsman ef12e2a930 asciidoctorj: 2.5.11 -> 2.5.12 2024-03-11 21:02:48 +01:00
ArtturiandGitHub 643436f412 Merge pull request #292930 from simonhollingshead/musescore-arm 
musescore: Remove 'broken' for aarch64-linux.
 2024-03-11 21:48:06 +02:00
Adam C. StephensandGitHub 09f211116e Merge pull request #294802 from mkg20001/incus-ui-split 
incus.ui: upgrade zabbly patches, split from lxd
 2024-03-11 15:42:04 -04:00
Robert Sliwinski 0897539a66 paperless-ngx: 2.6.1 -> 2.6.2 
https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.6.2
https://github.com/paperless-ngx/paperless-ngx/compare/v2.6.1...v2.6.2
 2024-03-11 20:41:12 +01:00
R. RyantmandBjørn Forsman 93c6b3e129 apk-tools: 2.14.0 -> 2.14.1 2024-03-11 20:39:45 +01:00
R. RyantmandDmitry Kalinkin ee0bc95d48 python312Packages.schema-salad: 8.5.20240102191336.dev7+g8e95468 -> 8.5.20240311110950 2024-03-11 15:32:56 -04:00
Jon SeagerandBjørn Forsman 8ab31764fc homepage-dashboard: remove trailing period from meta.description 2024-03-11 20:30:39 +01:00
Jon SeagerandBjørn Forsman bb27f930c8 homepage-dashboard: add changelog to meta 2024-03-11 20:30:39 +01:00
Jon SeagerandBjørn Forsman 62fddf40a9 homepage-dashboard: 0.8.8 -> 0.8.9 
https://github.com/gethomepage/homepage/releases/tag/v0.8.9

Remove patch which is now included upstream.
 2024-03-11 20:30:39 +01:00
Jon SeagerandBjørn Forsman c58f136b53 homepage-dashboard: enable nix-update-script 2024-03-11 20:30:39 +01:00
Weijia WangandGitHub e16d9a1782 Merge pull request #294870 from Aleksanaa/varia 
varia: init at 2024.2.29-2
 2024-03-11 20:19:15 +01:00
Ivan MincikandGitHub 26ce32abdb Merge pull request #295070 from imincik/gdal-bump-java-source-option 
gdal: bump java source option
 2024-03-11 19:01:50 +00:00
Thomas GerbetandGitHub 98201cd1cc Merge pull request #294954 from NixOS/dependabot/github_actions/cachix/install-nix-action-26 
build(deps): bump cachix/install-nix-action from 25 to 26
 2024-03-11 19:59:57 +01:00
Maciej Krüger b7f3150793 incus.ui: upgrade zabbly patches, split from lxd 2024-03-11 19:58:02 +01:00
Felix BühlerandGitHub f20d97a06b Merge pull request #294794 from Stunkymonkey/python-ipy-normalize 
python312Packages.ipy: normalize pname and folder
 2024-03-11 19:50:00 +01:00
Nikolay KorotkiyandGitHub 587a40f999 Merge pull request #293237 from imincik/shapely-2.0.3 
python3Packages.shapely: 2.0.2 -> 2.0.3
 2024-03-11 22:12:53 +04:00
Cosima NeidahlandGitHub a44e09da5e Merge pull request #294555 from r-ryantm/auto-update/miriway 
miriway: unstable-2024-02-14 -> unstable-2024-03-06
 2024-03-11 19:04:18 +01:00
Adam C. StephensandGitHub 1809887dbe Merge pull request #294443 from evanrichter/init-gitu 
gitu: init at 0.5.4
 2024-03-11 13:47:08 -04:00
Silvan MosbergerandGitHub 7b4ea5d340 Merge pull request #293664 from tweag/by-name-update-pin 
check-by-name: Update pinned tooling
 2024-03-11 18:40:23 +01:00
Ivan Mincik f35a9d2707 gdal: bump java source option 
Bump java source option to fix build with JDK 21.

Closes #294940
 2024-03-11 18:38:21 +01:00
Rick van SchijndelandGitHub 63dc52bdbf Merge pull request #294981 from wegank/nomacs-refactor 
nomacs: refactor
 2024-03-11 18:35:03 +01:00
Yaya 57df47d918 snipe-it: 6.3.1 -> 6.3.3 
https://github.com/snipe/snipe-it/releases/tag/v6.3.3
 2024-03-11 18:16:36 +01:00
Yaya c1fd254beb snipe-it: Move to pkgs/by-name/ 2024-03-11 18:16:36 +01:00
Yaya eb12b77ff0 snipe-it: 6.2.2 -> 6.3.1 
https://github.com/snipe/snipe-it/releases/tag/v6.3.0
https://github.com/snipe/snipe-it/releases/tag/v6.3.1
 2024-03-11 18:16:36 +01:00
Pol DellaieraandGitHub 8deb162d09 Merge pull request #293722 from savedra1/clipse-init/0.0.6 
clipse: init at 0.0.6
 2024-03-11 18:05:22 +01:00
Nick CaoandGitHub dc4a6bcdca Merge pull request #294592 from sinavir/aiohttp_better_packaging 
python311Packages.aiohttp-client-cache: Use standard packaging
 2024-03-11 12:44:26 -04:00
David McFarlandandGitHub c2eb1270d7 Merge pull request #294576 from corngood/dotnet-vmr-size 
dotnet: strip native symbols from runtime
 2024-03-11 13:43:34 -03:00
emilylangeandBjørn Forsman 08c37ba899 nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750 
While `/var/lib/lldap` isn't technically accessible by unprivileged
users thanks to `DynamicUser=true`, a user might prefer and change it to
`DynamicUser=false`.

There is currently also a PR open that intends to make `DynamicUser`
configurable via module option.

As such, `jwt_secret_file`, if bootstrapped by the service start
procedure, might be rendered world-readable due to its permissions
(`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and
`/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`.

This would usually be fixed by using `(umask 027; openssl ...)` instead
of just `openssl ...`.

However, it was found that another file (`users.db`), this time
bootstrapped by `lldap` itself, also had insufficient permissions
(`0644/-rw-r--r--`) inherited by the global umask and would be left
world-readable as well.

Due to this, we instead change the service's to `027`.

And to lower the impact for already bootstrapped files on existing
instances like `users.db`, set `StateDirectoryMode=0750`.
 2024-03-11 17:34:29 +01:00
emilylangeandBjørn Forsman 7501889950 lldap: remove emilylange from maintainers 
I find lldap's defaults security-wise and its security-posture in a
broader sense deeply unsettling for something as security-critical an
authentication server.
 2024-03-11 17:34:29 +01:00
emilylangeandBjørn Forsman 61a651e362 nixos/lldap: bootstrap jwt_secret if not provided 
If not provided, lldap defaults to `secretjwtsecret` as value which is
hardcoded in the code base.

See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77

This is really bad, because it is trivially easy to generate an admin
access token/cookie as attacker, if a `jwt_secret` is known.
 2024-03-11 17:34:29 +01:00
nixpkgs-merge-bot[bot]andGitHub bc3604ee35 Merge pull request #294989 from r-ryantm/auto-update/ast-grep 
ast-grep: 0.19.3 -> 0.19.4
 2024-03-11 16:26:14 +00:00
Paul MeyerandGitHub 08a5ab8937 Merge pull request #287262 from katexochen/dnf4/4-19-0 
dnf4: 4.18.2 -> 4.19.0
 2024-03-11 17:20:10 +01:00
Pol DellaieraandGitHub 54c52cb276 Merge pull request #294334 from ShamrockLee/sourceroot-fix 
treewide: fix hard-coded `sourceRoot` prefix for `fetchgit`-based `src`
 2024-03-11 16:50:57 +01:00
sinavir 06354636e7 python311Packages.aiohttp-client-cache: Use standard packaging 2024-03-11 16:40:42 +01:00
Philip Taron 20abffc0dd Avoid top-level with ...; in lib/tests/modules/extendModules-168767-imports.nix 2024-03-11 08:38:37 -07:00
Philip Taron 0426125c53 Avoid top-level with ...; in lib/tests/modules/alias-with-priority.nix 2024-03-11 08:38:14 -07:00
Pol DellaieraandGitHub 9336998b51 Merge pull request #295011 from drupol/php/extensions/dom/fix-lower-bound 
phpExtensions.dom: fix lowest extensions
 2024-03-11 16:37:58 +01:00
Philip Taron dd46445adc Avoid top-level with ...; in lib/tests/modules/alias-with-priority-can-override.nix 2024-03-11 08:37:31 -07:00
Nick CaoandGitHub 1e88f68d65 Merge pull request #294987 from GaetanLepage/rye 
rye: 0.28.0 -> 0.29.0
 2024-03-11 11:37:20 -04:00
Adam C. StephensandGitHub 9bc6d4892b Merge pull request #294976 from r-ryantm/auto-update/sabnzbd 
sabnzbd: 4.2.2 -> 4.2.3
 2024-03-11 11:34:32 -04:00
Nick CaoandGitHub c3e5053776 Merge pull request #294776 from r-ryantm/auto-update/python311Packages.persim 
python311Packages.persim: 0.3.2 -> 0.3.5
 2024-03-11 11:31:59 -04:00
Nick CaoandGitHub 65a57ea8f1 Merge pull request #294480 from r-ryantm/auto-update/frugal 
frugal: 3.17.8 -> 3.17.9
 2024-03-11 11:29:29 -04:00
Nick CaoandGitHub fa5174047b Merge pull request #294525 from r-ryantm/auto-update/python311Packages.google-cloud-asset 
python311Packages.google-cloud-asset: 3.24.3 -> 3.25.0
 2024-03-11 11:28:17 -04:00
Pol Dellaiera 47195dc3d9 phpExtensions.dom: fix lowest extensions 2024-03-11 16:28:15 +01:00
Nick CaoandGitHub ace81d4760 Merge pull request #294534 from r-ryantm/auto-update/python311Packages.google-cloud-websecurityscanner 
python311Packages.google-cloud-websecurityscanner: 1.14.2 -> 1.14.3
 2024-03-11 11:27:36 -04:00