671e8aefd9
at-spi2-core: 2.60.1 -> 2.60.4
...
(cherry picked from commit eb99a69943
2026-06-22 08:19:27 +02:00
1ed273b4fe
rsync: 3.4.1 -> 3.4.3
...
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702
2026-06-22 08:19:18 +02:00
88fbe351f2
python3Packages.mistune: 3.2.0 -> 3.2.1
...
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1
Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd
2026-06-22 08:16:20 +02:00
46b00f0ee0
rsync: skip chgrp test
...
This test fails when built in a chroot store.
Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com >
(cherry picked from commit 9d229c780e
2026-06-22 08:16:20 +02:00
eac01b3060
fftw: 3.3.10 -> 3.3.11
...
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f
2026-06-22 08:16:17 +02:00
fbaac14681
curl: set structuredAttrs
...
(cherry picked from commit 160ca6558e
2026-06-22 08:16:17 +02:00
664ed12255
imagemagick: 7.1.2-23 -> 7.1.2-24
...
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24
Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8
2026-06-22 08:16:17 +02:00
880289462e
libadwaita: 1.9.0 -> 1.9.1
...
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1
Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca
2026-06-22 08:16:17 +02:00
f4dff6b5f9
e2fsprogs: 1.47.3 -> 1.47.4
...
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f
2026-06-22 08:16:16 +02:00
8b70ffa9d0
libaec: 1.1.6 -> 1.1.7
...
(cherry picked from commit 6a792a71bf
2026-06-22 08:16:16 +02:00
a7e09a45bb
cargo: add patches for CVE-2026-5222 and CVE-2026-5223
...
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031
Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1e36b654119f042b8eaf9f16aff706c)
2026-06-22 08:16:16 +02:00
d0551bc010
openblas: 0.3.32 -> 0.3.33
...
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681 ,
https://hydra.nixos.org/build/327030680 ); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763 .
(cherry picked from commit 2ba029a78e
2026-06-22 08:16:16 +02:00
a7d2d596af
systemd: fix tmpfiles errors when mount is noatime
...
fixes #520485
(cherry picked from commit d28f57cdff
2026-06-22 08:16:16 +02:00
f8562c7283
python3Packages.fastapi: 0.135.3 -> 0.136.3
...
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf
2026-06-22 08:15:15 +02:00
96f63700bc
python3Packages.starlette: 0.52.1 -> 1.1.0
...
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr
Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1
2026-06-22 08:15:15 +02:00
752123aaa9
libde265: 1.0.18 -> 1.0.19
...
(cherry picked from commit 8aa7c75b47
2026-06-22 08:15:15 +02:00
179557247b
freetype: 2.14.2 -> 2.14.3
...
(cherry picked from commit 21622bac70
2026-06-22 08:15:15 +02:00
bd2d251cdc
libcaca: apply patch for CVE-2026-42046
...
Fixes https://github.com/NixOS/nixpkgs/issues/519387
(cherry picked from commit 00cd8e646c
2026-06-22 08:15:15 +02:00
9756eaf1f8
assimp: 6.0.4 -> 6.0.5
...
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md
diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236
2026-06-22 08:15:15 +02:00
8b34d586be
libass: remove libiconv dependency on darwin
...
This is already in stdenv.
(cherry picked from commit f6172a101f
2026-06-22 08:15:14 +02:00
ba90fa78f8
simdjson: 4.6.0 -> 4.6.4
...
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4
(cherry picked from commit 3803be5263
2026-06-22 08:15:14 +02:00
5eaef15328
duplicity: remove invoke from dependencies
...
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml
(cherry picked from commit b6254c48df
2026-06-22 08:15:14 +02:00
8806b112de
python3Packages.paramiko: invoke is a required dependency
...
(cherry picked from commit 9088b3d167
2026-06-22 08:15:14 +02:00
790c6832f2
doctest: 2.5.0 -> 2.5.2
...
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2
Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2
2026-06-22 08:15:14 +02:00
bbacb13154
glibc: 2.42-61 -> 2.42-67
...
(cherry picked from commit 4a8e8392a4
2026-06-22 08:15:14 +02:00
6e26421199
qt6: 6.11.0 -> 6.11.1
...
(cherry picked from commit 1b3320b2d9
2026-06-22 08:15:14 +02:00
c5cd03ad0d
kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression
...
(cherry picked from commit 66adfb9dab
2026-06-22 08:15:13 +02:00
8e3eb65c3c
python3Packages.aiodns: 4.0.3 -> 4.0.4
...
Diff: https://github.com/saghul/aiodns/compare/v4.0.3...v4.0.4
Changelog: https://github.com/saghul/aiodns/releases/tag/v4.0.4
(cherry picked from commit a53c6a3897
2026-06-22 08:15:10 +02:00
8accd65376
gtk4: make patch unconditional
...
The condition was just to avoid rebuilds at that moment.
(cherry picked from commit ace84983c4
2026-06-22 08:01:02 +02:00
5c3ae22a1b
python3Packages.frictionless: exclude datasette from nativeCheckInputs
...
Datasette depends on asgi-csrf which was broken by updating
python-multipart past version 0.0.26.
(cherry picked from commit ba2df560b6
2026-06-22 08:01:02 +02:00
44573c77ca
python3Packages.asgi-csrf: mark broken
...
(cherry picked from commit 1355d225b6
2026-06-22 08:01:02 +02:00
dcbc584e55
python3Packages.python-multipart: 0.0.22 -> 0.0.29
...
Diff: https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.29
Changelog: https://github.com/Kludex/python-multipart/blob/0.0.29/CHANGELOG.md
(cherry picked from commit 83594b9031
2026-06-22 08:01:02 +02:00
8861a6b466
unbound: 1.25.0 -> 1.25.1
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit 0c98395be2
2026-06-22 08:01:02 +02:00
988d5e4c9f
nodejs_24: 24.15.0 -> 24.16.0
...
(cherry picked from commit e9b7cf2133
2026-06-22 08:01:01 +02:00
e717fb6c8f
openldap: skip flaky syncreplication tests
...
(cherry picked from commit 63147b12a5
2026-06-22 08:01:01 +02:00
344a6379c3
qt5: 5.15.18 -> 5.15.19
...
(cherry picked from commit 52afc5fa58
2026-06-22 08:01:01 +02:00
ebd0392d1b
python3Packages.xmltodict: 1.0.2 -> 1.0.4
...
https://github.com/martinblech/xmltodict/blob/v1.0.4/CHANGELOG.md
(cherry picked from commit 70d339f357
2026-06-22 08:01:01 +02:00
49d2ce082a
python3Packages.aiodns: 4.0.0 -> 4.0.3
...
https://github.com/saghul/aiodns/releases/tag/v4.0.1
https://github.com/saghul/aiodns/releases/tag/v4.0.2
https://github.com/saghul/aiodns/releases/tag/v4.0.3
(cherry picked from commit 78f51bc5bc
2026-06-22 08:01:01 +02:00
ab6adf5c82
openapv: 0.2.1.2 -> 0.2.1.3
...
changelog: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v0.2.1.3-fix
diff: https://github.com/AcademySoftwareFoundation/openapv/compare/v0.2.1.2...v0.2.1.3-fix
(cherry picked from commit 02d2fdd686
2026-06-22 08:01:01 +02:00
f479a5dca2
openexr: 3.4.10 -> 3.4.11
...
changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11
diff: https://github.com/AcademySoftwareFoundation/openexr/compare/v3.4.10...v3.4.11
(cherry picked from commit 32f67f000b
2026-06-22 08:01:01 +02:00
c0a53e6950
libressl_4_3: backport executable stack fix
...
And also add an additional check to preCheck that will enable us to
catch executable stack issues earlier next time.
(cherry picked from commit 5198c49a5a
2026-06-22 08:01:01 +02:00
7c6518130d
libressl: enable strictDeps and __structuredAttrs
...
(cherry picked from commit c74cade494
2026-06-22 08:01:00 +02:00
d5937f2bc8
libressl: add ruuda as maintainer
...
I've been keeping this package up to date over the past few years, since
I run a webserver that depends on it. I'd be happy to be co-maintainer
for it, and hopefully reduce the load on others.
(cherry picked from commit 1665623390
2026-06-22 08:01:00 +02:00
fdf4fbeb3d
libressl_4_1: delete unsupported package
...
LibreSSL branches are supported for one year after the OpenBSD release
in which they are included. LibreSSL 4.1 was part of OpenBSD 7.7, which
was released on April 28, 2025, so it's end of life now.
(cherry picked from commit 0bfe3de9ed
2026-06-22 08:01:00 +02:00
85e30362dd
libressl_4_3: init at 4.3.1
...
I also added expiration date comments on all of them, because I always
spend some time chasing what the support dates are, and it would save
maintainer time to be able to see what to do with these branches.
(cherry picked from commit feb7c9ff78
2026-06-22 08:01:00 +02:00
2102ac377d
audit: 4.1.2-unstable-2025-09-06 -> 4.1.4
...
Upstream diff: https://github.com/linux-audit/audit-userspace/compare/cb13fe75ee2c36d5c525ed9de22aae10dbc8caf4...v4.1.4
Adds support for io_uring and syscalls of Linux 7.0 kernels.
(cherry picked from commit 2b8ed1fe21
2026-06-22 08:01:00 +02:00
412b051db6
Revert "groff: only apply the latest patch on linux for now"
...
This reverts commit 37a9427fd3b2e8b0c602
2026-06-22 08:01:00 +02:00
e866333c7b
expat: 2.8.0 -> 2.8.1
...
Changelog: https://github.com/libexpat/libexpat/blob/R_2_8_1/expat/Changes
Diff: https://github.com/libexpat/libexpat/compare/R_2_8_0...R_2_8_1
Fixes: CVE-2026-45186
(cherry picked from commit fe1ca2c575
2026-06-22 07:59:32 +02:00
9e5fbcf68a
Merge master into staging-next
2026-06-22 00:50:42 +00:00
4831080ceb
thunderbird-latest-bin-unwrapped: 151.0.1 -> 152.0 ( #533724 )
2026-06-22 00:42:41 +00:00
Robert Schütz