5aa4c4a221
cook-cli: 0.27.0 -> 0.27.1 ( #505904 )
2026-04-02 07:46:32 +00:00
26053f5545
discourse: 2026.1.2 -> 2026.1.3 ( #505377 )
2026-04-02 07:30:44 +00:00
2bbcf34005
jetbrains.idea: 2025.3.4 -> 2026.1 ( #505863 )
2026-04-02 07:28:35 +00:00
9e3a186553
zensical: 0.0.28 -> 0.0.31 ( #505821 )
2026-04-02 07:26:27 +00:00
bc3609d790
temporal-cli: 1.6.1 -> 1.6.2 ( #505901 )
2026-04-02 07:12:59 +00:00
f6ba52fb13
starship-jj: init at 0.7.0 ( #466889 )
2026-04-02 07:08:17 +00:00
fcac81bd6f
libretro.mgba: 0-unstable-2025-10-13 -> 0-unstable-2026-03-30 ( #505845 )
2026-04-02 06:51:00 +00:00
33b4adb629
pyload-ng: drop ( #502033 )
2026-04-02 06:46:40 +00:00
f867ec7905
claude-code: populate meta.sourceProvenance ( #505479 )
2026-04-02 06:41:39 +00:00
5a6cb88fd7
rauthy: build against rust-jemalloc-sys-unprefixed ( #502651 )
2026-04-02 06:25:22 +00:00
d627f37954
claude-code: 2.1.89 -> 2.1.90 ( #505911 )
2026-04-02 06:24:51 +00:00
37aaef7dfa
vscode-extensions.anthropic.claude-code: 2.1.89 -> 2.1.90
...
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:14:06 +02:00
26904e5757
claude-code-bin: 2.1.89 -> 2.1.90
...
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:14:02 +02:00
311f0436e0
claude-code: 2.1.89 -> 2.1.90
...
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
2026-04-02 08:13:58 +02:00
87ed7ef699
cargo-update: 18.2.0 -> 19.0.1 ( #505898 )
2026-04-02 06:03:26 +00:00
f14520a6c6
terraform-mcp-server: 0.4.0 -> 0.5.0 ( #505888 )
2026-04-02 06:03:21 +00:00
1783e764bd
cargo-generate: 0.23.7 -> 0.23.8 ( #505832 )
2026-04-02 06:02:49 +00:00
4b8e0d54e2
gojq: 0.12.18 -> 0.12.19 ( #505813 )
2026-04-02 06:02:34 +00:00
1ed11caa8b
python3Packages.ddgs: 9.11.4 -> 9.12.0, python3Packages.primp: 1.1.2 -> 1.2.0 ( #505839 )
2026-04-02 05:56:13 +00:00
58b0066db5
wavelog: 2.3.1 -> 2.4 ( #505205 )
2026-04-02 05:18:10 +00:00
8bbaeab27d
cook-cli: 0.27.0 -> 0.27.1
2026-04-02 04:51:19 +00:00
a3120afcd9
temporal-cli: 1.6.1 -> 1.6.2
2026-04-02 04:38:54 +00:00
dcebff32ca
deltachat-desktop: 2.43.0 -> 2.48.0 ( #505480 )
2026-04-02 04:29:20 +00:00
b98733570b
cargo-update: 18.2.0 -> 19.0.1
2026-04-02 03:54:26 +00:00
887e5eeeba
minijinja: 2.18.0 -> 2.19.0 ( #505879 )
2026-04-02 02:30:51 +00:00
3b374d320e
homepage-dashboard: 1.11.0 -> 1.12.1 ( #505261 )
2026-04-02 02:30:38 +00:00
e76e852fa9
terraform-mcp-server: 0.4.0 -> 0.5.0
2026-04-02 02:29:29 +00:00
deeda4729f
zig.fetchDeps: add opt-in option for fetching all deps ( #505542 )
2026-04-02 02:28:07 +00:00
106eb93cbb
exo: 1.0.68 -> 1.0.69 ( #504824 )
2026-04-02 01:59:51 +00:00
bf136d16be
minijinja: 2.18.0 -> 2.19.0
2026-04-02 01:48:00 +00:00
b44f78afb7
archipelago: 0.6.6 -> 0.6.7 ( #505791 )
2026-04-02 01:36:50 +00:00
94d7e47164
bodoni-moda: use installFonts hook ( #505709 )
2026-04-02 01:18:23 +00:00
7130118132
material-icons: use installFonts hook ( #505707 )
2026-04-02 01:17:29 +00:00
60bc5ae3cb
takao: use installFonts hook ( #505691 )
2026-04-02 01:11:48 +00:00
a178108a65
seshat: use installFonts hook ( #505686 )
2026-04-02 01:10:09 +00:00
b7b2125b34
fantasque-sans-mono: use installFonts hook ( #500553 )
2026-04-02 01:08:57 +00:00
64c5258cc6
biz-ud-gothic: use installFonts ( #505683 )
2026-04-02 01:08:36 +00:00
b4eefbee42
beedii: modernize ( #505679 )
2026-04-02 01:06:21 +00:00
9c45817acc
exo: 1.0.68 -> 1.0.69
...
Diff: https://github.com/exo-explore/exo/compare/v1.0.68...v1.0.69
Changelog: https://github.com/exo-explore/exo/releases/tag/v1.0.69
2026-04-02 00:54:16 +00:00
14dbf46759
vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 ( #505850 )
2026-04-02 00:52:37 +00:00
b467c3a639
terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 ( #505860 )
2026-04-02 00:25:42 +00:00
9533381b8a
jetbrains.idea: 2025.3.4 -> 2026.1
2026-04-02 00:25:09 +00:00
d3d0d5ed40
terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0
2026-04-02 00:03:33 +00:00
c111fb7e5e
pam_u2f: fix usage with polkit 127 ( #486044 )
2026-04-01 23:56:16 +00:00
fc56e12985
fishPlugins.forgit: 26.01.0 -> 26.04.0 ( #505518 )
2026-04-01 23:55:05 +00:00
098b000a36
nixos/tests: add end-to-end pam_u2f and polkit sandbox tests
...
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.
pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
2026-04-01 16:50:22 -07:00
f3648de497
polkit: fix polkit-agent-helper@ sandbox for pam_u2f
...
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:
- PrivateDevices=yes creates a private /dev without hidraw devices,
so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
diagnostic output as protocol errors, resulting in tight
re-execution loops
Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled
Co-authored-by: Victor Luft <victor@luft.io >
2026-04-01 16:50:18 -07:00
5809b092fc
python3Packages.qtconsole: 5.7.1 -> 5.7.2 ( #505416 )
2026-04-01 23:47:59 +00:00
6917611baf
python3Packages.llm: 0.29 -> 0.30 ( #505514 )
2026-04-01 23:45:34 +00:00
bbf0517a9b
python3Packages.qtconsole: 5.7.1 -> 5.7.2
2026-04-01 23:35:20 +00:00
nixpkgs-ci[bot]