Commit Graph
973339 Commits
Author SHA1 Message Date
Bruno Bigras 53420d2ad5 jujutsu: 0.39.0 -> 0.40.0 2026-04-02 03:01:52 -04:00
Thiago Kenji OkadaandGitHub fcac81bd6f libretro.mgba: 0-unstable-2025-10-13 -> 0-unstable-2026-03-30 (#505845) 2026-04-02 06:51:00 +00:00
Thomas GerbetandGitHub 33b4adb629 pyload-ng: drop (#502033) 2026-04-02 06:46:40 +00:00
nixpkgs-ci[bot]andGitHub f867ec7905 claude-code: populate meta.sourceProvenance (#505479) 2026-04-02 06:41:39 +00:00
Damien CassouandGitHub 5a6cb88fd7 rauthy: build against rust-jemalloc-sys-unprefixed (#502651) 2026-04-02 06:25:22 +00:00
Pol DellaieraandGitHub d627f37954 claude-code: 2.1.89 -> 2.1.90 (#505911) 2026-04-02 06:24:51 +00:00
Markus Hauck 37aaef7dfa vscode-extensions.anthropic.claude-code: 2.1.89 -> 2.1.90
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:14:06 +02:00
Markus Hauck 26904e5757 claude-code-bin: 2.1.89 -> 2.1.90
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:14:02 +02:00
Markus Hauck 311f0436e0 claude-code: 2.1.89 -> 2.1.90
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:13:58 +02:00
nixpkgs-ci[bot]andGitHub 87ed7ef699 cargo-update: 18.2.0 -> 19.0.1 (#505898) 2026-04-02 06:03:26 +00:00
nixpkgs-ci[bot]andGitHub f14520a6c6 terraform-mcp-server: 0.4.0 -> 0.5.0 (#505888) 2026-04-02 06:03:21 +00:00
nixpkgs-ci[bot]andGitHub 1783e764bd cargo-generate: 0.23.7 -> 0.23.8 (#505832) 2026-04-02 06:02:49 +00:00
nixpkgs-ci[bot]andGitHub 4b8e0d54e2 gojq: 0.12.18 -> 0.12.19 (#505813) 2026-04-02 06:02:34 +00:00
Pol DellaieraandGitHub 1ed11caa8b python3Packages.ddgs: 9.11.4 -> 9.12.0, python3Packages.primp: 1.1.2 -> 1.2.0 (#505839) 2026-04-02 05:56:13 +00:00
nixpkgs-ci[bot]andGitHub 58b0066db5 wavelog: 2.3.1 -> 2.4 (#505205) 2026-04-02 05:18:10 +00:00
dotlambdaandGitHub dcebff32ca deltachat-desktop: 2.43.0 -> 2.48.0 (#505480) 2026-04-02 04:29:20 +00:00
R. Ryantm b98733570b cargo-update: 18.2.0 -> 19.0.1 2026-04-02 03:54:26 +00:00
nixpkgs-ci[bot]andGitHub 887e5eeeba minijinja: 2.18.0 -> 2.19.0 (#505879) 2026-04-02 02:30:51 +00:00
nixpkgs-ci[bot]andGitHub 3b374d320e homepage-dashboard: 1.11.0 -> 1.12.1 (#505261) 2026-04-02 02:30:38 +00:00
R. Ryantm e76e852fa9 terraform-mcp-server: 0.4.0 -> 0.5.0 2026-04-02 02:29:29 +00:00
Tristan RossandGitHub deeda4729f zig.fetchDeps: add opt-in option for fetching all deps (#505542) 2026-04-02 02:28:07 +00:00
kirillrdyandGitHub 106eb93cbb exo: 1.0.68 -> 1.0.69 (#504824) 2026-04-02 01:59:51 +00:00
R. Ryantm bf136d16be minijinja: 2.18.0 -> 2.19.0 2026-04-02 01:48:00 +00:00
dishandGitHub b44f78afb7 archipelago: 0.6.6 -> 0.6.7 (#505791) 2026-04-02 01:36:50 +00:00
Yohann BonifaceandGitHub 94d7e47164 bodoni-moda: use installFonts hook (#505709) 2026-04-02 01:18:23 +00:00
Yohann BonifaceandGitHub 7130118132 material-icons: use installFonts hook (#505707) 2026-04-02 01:17:29 +00:00
Yohann BonifaceandGitHub 60bc5ae3cb takao: use installFonts hook (#505691) 2026-04-02 01:11:48 +00:00
Yohann BonifaceandGitHub a178108a65 seshat: use installFonts hook (#505686) 2026-04-02 01:10:09 +00:00
Yohann BonifaceandGitHub b7b2125b34 fantasque-sans-mono: use installFonts hook (#500553) 2026-04-02 01:08:57 +00:00
Yohann BonifaceandGitHub 64c5258cc6 biz-ud-gothic: use installFonts (#505683) 2026-04-02 01:08:36 +00:00
Yohann BonifaceandGitHub b4eefbee42 beedii: modernize (#505679) 2026-04-02 01:06:21 +00:00
Gaetan Lepage 9c45817acc exo: 1.0.68 -> 1.0.69
Diff: https://github.com/exo-explore/exo/compare/v1.0.68...v1.0.69

Changelog: https://github.com/exo-explore/exo/releases/tag/v1.0.69
2026-04-02 00:54:16 +00:00
Gaétan LepageandGitHub 14dbf46759 vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 (#505850) 2026-04-02 00:52:37 +00:00
zowoqandGitHub b467c3a639 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 (#505860) 2026-04-02 00:25:42 +00:00
R. Ryantm d3d0d5ed40 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 2026-04-02 00:03:33 +00:00
Philip TaronandGitHub c111fb7e5e pam_u2f: fix usage with polkit 127 (#486044) 2026-04-01 23:56:16 +00:00
YtandGitHub fc56e12985 fishPlugins.forgit: 26.01.0 -> 26.04.0 (#505518) 2026-04-01 23:55:05 +00:00
Philip Taron 098b000a36 nixos/tests: add end-to-end pam_u2f and polkit sandbox tests
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.

pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
2026-04-01 16:50:22 -07:00
Philip TaronandVictor Luft f3648de497 polkit: fix polkit-agent-helper@ sandbox for pam_u2f
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:

- PrivateDevices=yes creates a private /dev without hidraw devices,
  so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
  diagnostic output as protocol errors, resulting in tight
  re-execution loops

Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled

Co-authored-by: Victor Luft <victor@luft.io>
2026-04-01 16:50:18 -07:00
Gaétan LepageandGitHub 5809b092fc python3Packages.qtconsole: 5.7.1 -> 5.7.2 (#505416) 2026-04-01 23:47:59 +00:00
Philip TaronandGitHub 6917611baf python3Packages.llm: 0.29 -> 0.30 (#505514) 2026-04-01 23:45:34 +00:00
R. RyantmandGaetan Lepage bbf0517a9b python3Packages.qtconsole: 5.7.1 -> 5.7.2 2026-04-01 23:35:20 +00:00
Clément a0d7191efd python3Packages.ddgs: 9.11.4 -> 9.12.0
https://github.com/deedy5/ddgs/compare/v9.11.4...v9.12.0
2026-04-01 16:26:38 -07:00
Clément b72432ba96 python3Packages.primp: 1.1.2 -> 1.2.0 2026-04-01 16:26:38 -07:00
kirillrdyandGitHub d7922c9d62 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 (#505847) 2026-04-01 23:22:06 +00:00
R. Ryantm 8ba3d94ecd vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 2026-04-01 23:18:42 +00:00
nixpkgs-ci[bot]andGitHub 3b9f4320b1 asn: 0.80.4 -> 0.80.5 (#505835) 2026-04-01 23:18:09 +00:00
Philip TaronandGitHub f6b8482cba libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support (#505812) 2026-04-01 23:16:50 +00:00
Gergő GutyinaandGitHub 172b7d4e40 webeep-sync: init at 1.0.3-unstable-2024-04-30 (#501366) 2026-04-01 23:06:51 +00:00
Gaetan Lepage 9a080ecec5 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4

Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
2026-04-01 23:05:41 +00:00