Commit Graph
973308 Commits
Author SHA1 Message Date
nixpkgs-ci[bot]andGitHub 887e5eeeba minijinja: 2.18.0 -> 2.19.0 (#505879) 2026-04-02 02:30:51 +00:00
nixpkgs-ci[bot]andGitHub 3b374d320e homepage-dashboard: 1.11.0 -> 1.12.1 (#505261) 2026-04-02 02:30:38 +00:00
Tristan RossandGitHub deeda4729f zig.fetchDeps: add opt-in option for fetching all deps (#505542) 2026-04-02 02:28:07 +00:00
kirillrdyandGitHub 106eb93cbb exo: 1.0.68 -> 1.0.69 (#504824) 2026-04-02 01:59:51 +00:00
R. Ryantm bf136d16be minijinja: 2.18.0 -> 2.19.0 2026-04-02 01:48:00 +00:00
dishandGitHub b44f78afb7 archipelago: 0.6.6 -> 0.6.7 (#505791) 2026-04-02 01:36:50 +00:00
Yohann BonifaceandGitHub 94d7e47164 bodoni-moda: use installFonts hook (#505709) 2026-04-02 01:18:23 +00:00
Yohann BonifaceandGitHub 7130118132 material-icons: use installFonts hook (#505707) 2026-04-02 01:17:29 +00:00
Yohann BonifaceandGitHub 60bc5ae3cb takao: use installFonts hook (#505691) 2026-04-02 01:11:48 +00:00
Yohann BonifaceandGitHub a178108a65 seshat: use installFonts hook (#505686) 2026-04-02 01:10:09 +00:00
Yohann BonifaceandGitHub b7b2125b34 fantasque-sans-mono: use installFonts hook (#500553) 2026-04-02 01:08:57 +00:00
Yohann BonifaceandGitHub 64c5258cc6 biz-ud-gothic: use installFonts (#505683) 2026-04-02 01:08:36 +00:00
Yohann BonifaceandGitHub b4eefbee42 beedii: modernize (#505679) 2026-04-02 01:06:21 +00:00
Gaetan Lepage 9c45817acc exo: 1.0.68 -> 1.0.69
Diff: https://github.com/exo-explore/exo/compare/v1.0.68...v1.0.69

Changelog: https://github.com/exo-explore/exo/releases/tag/v1.0.69
2026-04-02 00:54:16 +00:00
Gaétan LepageandGitHub 14dbf46759 vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 (#505850) 2026-04-02 00:52:37 +00:00
zowoqandGitHub b467c3a639 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 (#505860) 2026-04-02 00:25:42 +00:00
R. Ryantm d3d0d5ed40 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 2026-04-02 00:03:33 +00:00
Philip TaronandGitHub c111fb7e5e pam_u2f: fix usage with polkit 127 (#486044) 2026-04-01 23:56:16 +00:00
YtandGitHub fc56e12985 fishPlugins.forgit: 26.01.0 -> 26.04.0 (#505518) 2026-04-01 23:55:05 +00:00
Philip Taron 098b000a36 nixos/tests: add end-to-end pam_u2f and polkit sandbox tests
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.

pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
2026-04-01 16:50:22 -07:00
Philip TaronandVictor Luft f3648de497 polkit: fix polkit-agent-helper@ sandbox for pam_u2f
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:

- PrivateDevices=yes creates a private /dev without hidraw devices,
  so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
  diagnostic output as protocol errors, resulting in tight
  re-execution loops

Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled

Co-authored-by: Victor Luft <victor@luft.io>
2026-04-01 16:50:18 -07:00
Gaétan LepageandGitHub 5809b092fc python3Packages.qtconsole: 5.7.1 -> 5.7.2 (#505416) 2026-04-01 23:47:59 +00:00
Philip TaronandGitHub 6917611baf python3Packages.llm: 0.29 -> 0.30 (#505514) 2026-04-01 23:45:34 +00:00
R. RyantmandGaetan Lepage bbf0517a9b python3Packages.qtconsole: 5.7.1 -> 5.7.2 2026-04-01 23:35:20 +00:00
kirillrdyandGitHub d7922c9d62 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 (#505847) 2026-04-01 23:22:06 +00:00
R. Ryantm 8ba3d94ecd vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 2026-04-01 23:18:42 +00:00
nixpkgs-ci[bot]andGitHub 3b9f4320b1 asn: 0.80.4 -> 0.80.5 (#505835) 2026-04-01 23:18:09 +00:00
Philip TaronandGitHub f6b8482cba libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support (#505812) 2026-04-01 23:16:50 +00:00
Gergő GutyinaandGitHub 172b7d4e40 webeep-sync: init at 1.0.3-unstable-2024-04-30 (#501366) 2026-04-01 23:06:51 +00:00
Gaetan Lepage 9a080ecec5 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4

Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
2026-04-01 23:05:41 +00:00
dotlambdaandGitHub c6cca75cfd python3Packages.urllib3-future: 2.18.901 -> 2.19.900 (#505843) 2026-04-01 22:57:00 +00:00
Nick CaoandGitHub c3e05a12b5 python3Packages.mlx: 0.30.5 -> 0.31.1 (#504828) 2026-04-01 22:50:42 +00:00
R. Ryantm c6121046db python3Packages.urllib3-future: 2.18.901 -> 2.19.900 2026-04-01 22:36:39 +00:00
Philip TaronandGitHub 49ca49bede Make ec2 tests a channel blocker (#365623) 2026-04-01 22:33:05 +00:00
Marc JakobiandGitHub 08a82c9fdd emmylua-doc-cli: 0.21.0 -> 0.22.0 (#505825) 2026-04-01 22:19:25 +00:00
Arian van PuttenandPhilip Taron c5d4a896c5 nixos/release-combined: add nixos.tests.ec2-userdata
This is to catch issues like https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-253149474
We do not want to push NixOS updates that break SSH access on EC2 instances.
2026-04-01 15:19:20 -07:00
Arian van PuttenandPhilip Taron 7ab9b03f5b nixos/tests/ec2: remove hack
Not needed anymore. no idea why this was here
2026-04-01 15:19:19 -07:00
Arian van PuttenandPhilip Taron 0e37e9beff nixos/tests/ec2: rename ec2-nixops to ec2-userdata
This is more accurate.

People dismissed failures in the past in this test because of the name.
We don't want that. The test is important! It tests that SSH works!

Hopefully this helps with https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-2531494744
2026-04-01 15:19:03 -07:00
Arian van PuttenandPhilip Taron 448b9932df nixos/tests/ec2: remove ec2-config test
It has been broken for as long as I know
2026-04-01 15:18:23 -07:00
Philip TaronandGitHub 64d047a9ce nixos/amazon-image: do not force-load xen-blkfront kernel module (#313933) 2026-04-01 22:14:29 +00:00
Martin WeineltandGitHub c6ea0df341 home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 (#505801) 2026-04-01 22:07:23 +00:00
Nick CaoandGitHub d64b849bf3 glaze: 7.1.0 -> 7.2.2 (#504129) 2026-04-01 22:04:58 +00:00
zowoqandGitHub 5647a31d17 terraform-providers.tencentcloudstack_tencentcloud: 1.82.77 -> 1.82.82 (#505797) 2026-04-01 21:52:02 +00:00
zowoqandGitHub 78b5a8ce37 terraform-providers.cloudamqp_cloudamqp: 1.43.1 -> 1.44.0 (#505775) 2026-04-01 21:51:51 +00:00
YtandGitHub 086333f595 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 (#505823) 2026-04-01 21:51:09 +00:00
R. Ryantm f5f5d7d15b asn: 0.80.4 -> 0.80.5 2026-04-01 21:44:21 +00:00
Philip TaronandGitHub 188aec52a6 Remove Profpatsch from most teams & maintainer fields (#505770) 2026-04-01 21:43:24 +00:00
ProfpatschandPhilip Taron 257f122e3d treewide: remove Profpatsch from most teams & maintainer fields 2026-04-01 14:34:59 -07:00
Thiago Kenji OkadaandGitHub 813ee5fab4 libretro.fbalpha2012: 0-unstable-2025-12-12 -> 0-unstable-2026-03-31 (#505788) 2026-04-01 21:28:24 +00:00
Adam C. Stephens 5ef2f74e55 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.4
2026-04-01 17:20:45 -04:00