Michael Daniels and Vladimír Čunát
83c65a6c34
gnupatch: disable flaky test
...
Fixes #525260
(cherry picked from commit 64ae7d0e37 )
(cherry picked from commit cebcbaab7a6e5fc72132855f96f3f81ebd567df5)
2026-06-22 08:19:28 +02:00
Sefa Eyeoglu and Vladimír Čunát
3fcd08afd1
curl: backport performance patch
...
https://github.com/curl/curl/commit/2a2104f3cff44bb28bb570a093be52bbeeed8f23
See https://curl.se/mail/distros-2026-05/0000.html
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit 06028a8aa5 )
(cherry picked from commit 99edca13d244d3020cf906c5bf0a1cf5ff7e53a6)
2026-06-22 08:19:28 +02:00
kuflierl and Vladimír Čunát
96a47e2cd8
python3Packages.pillow-heif: disable tests that abuse spec and break in libheif 1.22.0, disable version check for libheif
...
(cherry picked from commit 37ff020c2f )
(cherry picked from commit 37bd922bf9ef88c748c37e1080bf458d861d110c)
2026-06-22 08:19:28 +02:00
kuflierl and Vladimír Čunát
dc108799c2
libheif: 1.21.2 -> 1.22.2
...
(cherry picked from commit fd4f373715 )
(cherry picked from commit bd4354a482ba98e5912e25686242d4c99736bcc3)
2026-06-22 08:19:27 +02:00
R. Ryantm and Vladimír Čunát
1526af39b9
publicsuffix-list: 0-unstable-2026-03-26 -> 0-unstable-2026-05-13
...
(cherry picked from commit 963f597bc3 )
(cherry picked from commit 379e54dd196bfd9aa89c5566cbc0878aa6e9cdca)
2026-06-22 08:19:27 +02:00
Martin Weinelt and Vladimír Čunát
b7a103e1c9
rust-cbindgen: 0.29.2 -> 0.29.3
...
https://github.com/mozilla/cbindgen/blob/v0.29.3/CHANGES
(cherry picked from commit a2e41bb76c )
(cherry picked from commit b8a547de99897e9ca171f207cfe9da97dadd5f87)
2026-06-22 08:19:27 +02:00
Hythera and Vladimír Čunát
29e701ec56
valkey: 9.0.4 -> 9.1.0
...
changelog: https://github.com/valkey-io/valkey/releases/tag/9.1.0
diff: https://github.com/valkey-io/valkey/compare/9.0.4...9.1.0
(cherry picked from commit 51f6d0a44c )
(cherry picked from commit 09c98d00a43ad8ed5420af2885ecc846fe71c9b1)
2026-06-22 08:19:27 +02:00
Marcin Serwin and Vladimír Čunát
dcc6f5d962
nodejs: pin icu to newer version
...
Not-cherry-picked-because: icu will be advanced globally on the unstable branch by https://github.com/NixOS/nixpkgs/pull/520553
Signed-off-by: Marcin Serwin <marcin@serwin.dev >
(cherry picked from commit 4b965d7e22e3f82c9e9c77dd51bdd70679f0a904)
2026-06-22 08:19:27 +02:00
Robert Schütz and Vladimír Čunát
9ad85fe44d
ffmpeg_8: 8.1 -> 8.1.1
...
Changelog: https://github.com/FFmpeg/FFmpeg/blob/n8.1.1/Changelog
(cherry picked from commit 91518f18f5 )
(cherry picked from commit e5b3e52db386c03161a45b145328eb84dc5eb2bf)
2026-06-22 08:19:27 +02:00
Robert Schütz and Vladimír Čunát
671e8aefd9
at-spi2-core: 2.60.1 -> 2.60.4
...
(cherry picked from commit eb99a69943 )
(cherry picked from commit 97dc0a920b756d88ce0d3d37ed8376eb8bdd2e25)
2026-06-22 08:19:27 +02:00
dish and Vladimír Čunát
1ed273b4fe
rsync: 3.4.1 -> 3.4.3
...
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702 )
(cherry picked from commit b63badda2293d801ec9e59867c4db91458b90a61)
2026-06-22 08:19:18 +02:00
Robert Schütz and Vladimír Čunát
88fbe351f2
python3Packages.mistune: 3.2.0 -> 3.2.1
...
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1
Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd )
(cherry picked from commit 70c873b54906f9d82f329a6f6e5679ca180e0933)
2026-06-22 08:16:20 +02:00
Lisanna Dettwyler and Vladimír Čunát
46b00f0ee0
rsync: skip chgrp test
...
This test fails when built in a chroot store.
Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com >
(cherry picked from commit 9d229c780e )
(cherry picked from commit 87aae16c78154ea23b8021d3c38538b8288de95b)
2026-06-22 08:16:20 +02:00
Robert Schütz and Vladimír Čunát
eac01b3060
fftw: 3.3.10 -> 3.3.11
...
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f )
(cherry picked from commit 546ea47450680b3f5aa4947632d7937d6997d873)
2026-06-22 08:16:17 +02:00
Doron Behar and Vladimír Čunát
fbaac14681
curl: set structuredAttrs
...
(cherry picked from commit 160ca6558e )
(cherry picked from commit 9ea380a822df127898e92ebe6c5af1b8c8cff4e0)
2026-06-22 08:16:17 +02:00
Robert Schütz and Vladimír Čunát
664ed12255
imagemagick: 7.1.2-23 -> 7.1.2-24
...
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24
Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8 )
(cherry picked from commit 99cd697f9ff2c21f137236bf26955f510bd93b10)
2026-06-22 08:16:17 +02:00
Robert Schütz and Vladimír Čunát
880289462e
libadwaita: 1.9.0 -> 1.9.1
...
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1
Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca )
(cherry picked from commit 27504c8f0df600820cc88797834ab8c8a1011309)
2026-06-22 08:16:17 +02:00
Robert Schütz and Vladimír Čunát
f4dff6b5f9
e2fsprogs: 1.47.3 -> 1.47.4
...
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f )
(cherry picked from commit 4940e8201b0b1a632f629256a28637d89764f39f)
2026-06-22 08:16:16 +02:00
R. Ryantm and Vladimír Čunát
8b70ffa9d0
libaec: 1.1.6 -> 1.1.7
...
(cherry picked from commit 6a792a71bf )
(cherry picked from commit 8d7f1c326fedc792e8e3cb12345f1cba1625537f)
2026-06-22 08:16:16 +02:00
whispers and Vladimír Čunát
a7e09a45bb
cargo: add patches for CVE-2026-5222 and CVE-2026-5223
...
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031
Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1e36b654119f042b8eaf9f16aff706c)
2026-06-22 08:16:16 +02:00
Liam Murphy and Vladimír Čunát
d0551bc010
openblas: 0.3.32 -> 0.3.33
...
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681 ,
https://hydra.nixos.org/build/327030680 ); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763 .
(cherry picked from commit 2ba029a78e )
(cherry picked from commit af26b2500da6c199b3eaebfbafe25d7227b430d8)
2026-06-22 08:16:16 +02:00
Paul Grandperrin and Vladimír Čunát
a7d2d596af
systemd: fix tmpfiles errors when mount is noatime
...
fixes #520485
(cherry picked from commit d28f57cdff )
(cherry picked from commit 6c3ff740324716f92fba901032bd2511dd9af7f5)
2026-06-22 08:16:16 +02:00
Martin Weinelt and Vladimír Čunát
f8562c7283
python3Packages.fastapi: 0.135.3 -> 0.136.3
...
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf )
(cherry picked from commit bab01dc06d12e17407068fc3ebba0ac81947592b)
2026-06-22 08:15:15 +02:00
Martin Weinelt and Vladimír Čunát
96f63700bc
python3Packages.starlette: 0.52.1 -> 1.1.0
...
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr
Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1 )
(cherry picked from commit a416d0dc4ff922c0ba1f72c0d5ed53bef01f4ed7)
2026-06-22 08:15:15 +02:00
R. Ryantm and Vladimír Čunát
752123aaa9
libde265: 1.0.18 -> 1.0.19
...
(cherry picked from commit 8aa7c75b47 )
(cherry picked from commit a14161da713e1511cdffa409d62ee71adc34c509)
2026-06-22 08:15:15 +02:00
R. Ryantm and Vladimír Čunát
179557247b
freetype: 2.14.2 -> 2.14.3
...
(cherry picked from commit 21622bac70 )
(cherry picked from commit 3a60965e1736cb336b6e1b9d0405b13409153fd0)
2026-06-22 08:15:15 +02:00
Thomas Gerbet and Vladimír Čunát
bd2d251cdc
libcaca: apply patch for CVE-2026-42046
...
Fixes https://github.com/NixOS/nixpkgs/issues/519387
(cherry picked from commit 00cd8e646c )
(cherry picked from commit 8513d19d4f92c99ec7403755360bbb225d681aa7)
2026-06-22 08:15:15 +02:00
Hythera and Vladimír Čunát
9756eaf1f8
assimp: 6.0.4 -> 6.0.5
...
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md
diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236 )
(cherry picked from commit cfdafe68e00b10563e924aaf36d03363cb7ff6e3)
2026-06-22 08:15:15 +02:00
Eman Resu and Vladimír Čunát
8b34d586be
libass: remove libiconv dependency on darwin
...
This is already in stdenv.
(cherry picked from commit f6172a101f )
(cherry picked from commit dd411ee50591dd1784732c29082a384bac99a166)
2026-06-22 08:15:14 +02:00
Sergei Trofimovich and Vladimír Čunát
ba90fa78f8
simdjson: 4.6.0 -> 4.6.4
...
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4
(cherry picked from commit 3803be5263 )
(cherry picked from commit c0e4b6b891525ce5bb2ace1fb2f277277e8edaba)
2026-06-22 08:15:14 +02:00
znaniye and Vladimír Čunát
5eaef15328
duplicity: remove invoke from dependencies
...
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml
(cherry picked from commit b6254c48df )
(cherry picked from commit 747ba2d3768790a11db05c5fd33706e238f6f4e1)
2026-06-22 08:15:14 +02:00
znaniye and Vladimír Čunát
8806b112de
python3Packages.paramiko: invoke is a required dependency
...
(cherry picked from commit 9088b3d167 )
(cherry picked from commit f5ae9c36bfc691af8af70232640a43b0a703e067)
2026-06-22 08:15:14 +02:00
Guilhem Saurel and Vladimír Čunát
790c6832f2
doctest: 2.5.0 -> 2.5.2
...
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2
Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2 )
(cherry picked from commit be6ec59922761c1318c13a9721e1dcd8ef9655ec)
2026-06-22 08:15:14 +02:00
zowoq and Vladimír Čunát
bbacb13154
glibc: 2.42-61 -> 2.42-67
...
(cherry picked from commit 4a8e8392a4 )
(cherry picked from commit e0c442323becde6dc2d34c92f932bb1dd0470856)
2026-06-22 08:15:14 +02:00
K900 and Vladimír Čunát
6e26421199
qt6: 6.11.0 -> 6.11.1
...
(cherry picked from commit 1b3320b2d9 )
(cherry picked from commit abe60ca22f7620d763522c84b796e98d1ba5a9e0)
2026-06-22 08:15:14 +02:00
K900 and Vladimír Čunát
c5cd03ad0d
kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression
...
(cherry picked from commit 66adfb9dab )
(cherry picked from commit 7a4e6649b6583df4d70a99c27c50e06ae5a12f6f)
2026-06-22 08:15:13 +02:00
Robert Schütz and Vladimír Čunát
8e3eb65c3c
python3Packages.aiodns: 4.0.3 -> 4.0.4
...
Diff: https://github.com/saghul/aiodns/compare/v4.0.3...v4.0.4
Changelog: https://github.com/saghul/aiodns/releases/tag/v4.0.4
(cherry picked from commit a53c6a3897 )
(cherry picked from commit 10cf133bbf1f994932c9544c80c0efd62be8203e)
2026-06-22 08:15:10 +02:00
Vladimír Čunát
8accd65376
gtk4: make patch unconditional
...
The condition was just to avoid rebuilds at that moment.
(cherry picked from commit ace84983c4 )
(cherry picked from commit 25498003f382192bd8446d9029918dc794be9875)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
5c3ae22a1b
python3Packages.frictionless: exclude datasette from nativeCheckInputs
...
Datasette depends on asgi-csrf which was broken by updating
python-multipart past version 0.0.26.
(cherry picked from commit ba2df560b6 )
(cherry picked from commit 4316ed9b28fad64bd73607646972215dc975c7c7)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
44573c77ca
python3Packages.asgi-csrf: mark broken
...
(cherry picked from commit 1355d225b6 )
(cherry picked from commit b928e51eac5a88edf9dca5f35e4dfeb341a21ecf)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
dcbc584e55
python3Packages.python-multipart: 0.0.22 -> 0.0.29
...
Diff: https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.29
Changelog: https://github.com/Kludex/python-multipart/blob/0.0.29/CHANGELOG.md
(cherry picked from commit 83594b9031 )
(cherry picked from commit 5010b8e892a3e3d0a514051904f89e330c7252f9)
2026-06-22 08:01:02 +02:00
Sefa Eyeoglu and Vladimír Čunát
8861a6b466
unbound: 1.25.0 -> 1.25.1
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit 0c98395be2 )
(cherry picked from commit 71959781635822ba5e52066008b014781350fb5a)
2026-06-22 08:01:02 +02:00
Antoine du Hamel and Vladimír Čunát
988d5e4c9f
nodejs_24: 24.15.0 -> 24.16.0
...
(cherry picked from commit e9b7cf2133 )
(cherry picked from commit 252225814ab5f11143a02e8aad9459c2d9f498cd)
2026-06-22 08:01:01 +02:00
ElXreno and Vladimír Čunát
e717fb6c8f
openldap: skip flaky syncreplication tests
...
(cherry picked from commit 63147b12a5 )
(cherry picked from commit ab31c6a2289e966d48b61035e6fb03e683244bcd)
2026-06-22 08:01:01 +02:00
K900 and Vladimír Čunát
344a6379c3
qt5: 5.15.18 -> 5.15.19
...
(cherry picked from commit 52afc5fa58 )
(cherry picked from commit 0b9b29e4218a3fa46d0fe9c9866b6fba675f4828)
2026-06-22 08:01:01 +02:00
Martin Weinelt and Vladimír Čunát
ebd0392d1b
python3Packages.xmltodict: 1.0.2 -> 1.0.4
...
https://github.com/martinblech/xmltodict/blob/v1.0.4/CHANGELOG.md
(cherry picked from commit 70d339f357 )
(cherry picked from commit 3a7535469af279b4c0b5a0a2b0268c120d0fe510)
2026-06-22 08:01:01 +02:00
Martin Weinelt and Vladimír Čunát
49d2ce082a
python3Packages.aiodns: 4.0.0 -> 4.0.3
...
https://github.com/saghul/aiodns/releases/tag/v4.0.1
https://github.com/saghul/aiodns/releases/tag/v4.0.2
https://github.com/saghul/aiodns/releases/tag/v4.0.3
(cherry picked from commit 78f51bc5bc )
(cherry picked from commit aea1edbd625ce6297297b665a8d3a645dbceeb26)
2026-06-22 08:01:01 +02:00
Hythera and Vladimír Čunát
ab6adf5c82
openapv: 0.2.1.2 -> 0.2.1.3
...
changelog: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v0.2.1.3-fix
diff: https://github.com/AcademySoftwareFoundation/openapv/compare/v0.2.1.2...v0.2.1.3-fix
(cherry picked from commit 02d2fdd686 )
(cherry picked from commit ce58349f07ce81aa3d1562ace68ad03a6d841438)
2026-06-22 08:01:01 +02:00
Hythera and Vladimír Čunát
f479a5dca2
openexr: 3.4.10 -> 3.4.11
...
changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11
diff: https://github.com/AcademySoftwareFoundation/openexr/compare/v3.4.10...v3.4.11
(cherry picked from commit 32f67f000b )
(cherry picked from commit 34b3da5050e8e4c26efe67418533e587063230fd)
2026-06-22 08:01:01 +02:00
Ruud van Asseldonk and Vladimír Čunát
c0a53e6950
libressl_4_3: backport executable stack fix
...
And also add an additional check to preCheck that will enable us to
catch executable stack issues earlier next time.
(cherry picked from commit 5198c49a5a )
(cherry picked from commit 4248c5fd7a9c28e2fd27a865686fe864fcded34d)
2026-06-22 08:01:01 +02:00