Commit Graph
975144 Commits
Author SHA1 Message Date
sternenseemannandGitHub 8b41ee911c haskellPackages.pandoc: build with -f+embed_data_files (#505790) 2026-04-04 12:01:44 +00:00
Franz PletzandGitHub 9370999c0f libcap_ng: 0.9 -> 0.9.2 (#494235) 2026-04-04 10:28:53 +00:00
Franz PletzandGitHub bf0b1b8770 iptables: 1.8.12 -> 1.8.13 (#502935) 2026-04-04 10:27:35 +00:00
Florian KlinkandGitHub f8fe84ce59 [staging] systemd: fix /etc/localtime symlink (#506481) 2026-04-04 09:01:38 +00:00
Vladimír ČunátandGitHub c3df126dbe python3Packages.cryptography{,.vectors}: 46.0.5 -> 46.0.6 (#504281) 2026-04-04 08:25:26 +00:00
Vladimír ČunátandGitHub a8de264e97 glibc: 2.42-58 -> 2.42-61, fixes CVE-2026-4438 (#506517) 2026-04-04 08:24:33 +00:00
Franz PletzandGitHub 2a6791bd24 libnl: optionally actually build docs (#503901) 2026-04-04 06:51:24 +00:00
Maximilian Bosch c66e479167 glibc: 2.42-58 -> 2.42-61, fixes CVE-2026-4438
Wasn't backported to the 2.42 branch when I bumped for CVE-2026-4437 (#503779).
2026-04-04 08:25:52 +02:00
nixpkgs-ci[bot]andGitHub fd1bf26f2d Merge staging-next into staging 2026-04-04 06:23:34 +00:00
nixpkgs-ci[bot]andGitHub 42ace64cb9 Merge master into staging-next 2026-04-04 06:23:03 +00:00
Franz PletzandGitHub e7d780829d mediamtx: 1.17.0 -> 1.17.1 (#505524) 2026-04-04 06:15:41 +00:00
Franz PletzandGitHub 043fb6cff5 ntfy-alertmanager: 0.5.0 -> 1.0.0 (#505443) 2026-04-04 06:15:18 +00:00
Franz PletzandGitHub f5c9fba9a9 obs-studio: 32.1.0 -> 32.1.1 (#506141) 2026-04-04 06:12:50 +00:00
Franz PletzandGitHub 4ce6401f78 ntpd-rs: 1.7.1 -> 1.7.2 (#506400) 2026-04-04 06:10:42 +00:00
nixpkgs-ci[bot]andGitHub 27ed84ea7d sparkle: 1.26.2 -> 1.26.3 (#506423) 2026-04-04 06:09:35 +00:00
zowoqandGitHub 2734385932 terraform-providers.hashicorp_azurerm: 4.65.0 -> 4.67.0 (#506507) 2026-04-04 05:59:24 +00:00
Pol DellaieraandGitHub 697d4701ff gemini-cli-bin: 0.34.0 -> 0.36.0 (#506338) 2026-04-04 05:55:13 +00:00
nixpkgs-ci[bot]andGitHub f27940eda0 tideways-daemon: 1.15.0 -> 1.15.2 (#506371) 2026-04-04 05:41:48 +00:00
R. Ryantm 2b858a61ef terraform-providers.hashicorp_azurerm: 4.65.0 -> 4.67.0 2026-04-04 05:32:58 +00:00
0x4A6FandGitHub 719d25d6d2 stayrtr: 0.6.2 -> 0.6.4 (#501309) 2026-04-04 05:21:04 +00:00
Franz PletzandGitHub f7317ff87d nixos/networkd: fix typo (#506421) 2026-04-04 04:41:02 +00:00
Austin HorstmanandGitHub df81b788ca saunafs: 5.3.0 -> 5.8.0 (#505985) 2026-04-04 04:36:23 +00:00
Austin HorstmanandGitHub 5da847ad10 ente-desktop: 1.7.21 -> 1.7.22 (#505972) 2026-04-04 04:36:15 +00:00
Austin HorstmanandGitHub b67bdc8b62 eflite: fix build with gcc15 (#505876) 2026-04-04 04:16:19 +00:00
Austin HorstmanandGitHub 821e0dad0a samrewritten: 20251229.1 -> 1.2.3 (#506021) 2026-04-04 04:15:25 +00:00
Austin HorstmanandGitHub 71546f503a qidi-studio: fix 2.05.01.52 hash (#506024) 2026-04-04 04:08:12 +00:00
Austin HorstmanandGitHub 72093f6f94 gromacs: 2026.0 -> 2026.1 (#506043) 2026-04-04 04:07:59 +00:00
Austin HorstmanandGitHub f79b9f2103 museeks: 0.23.1 -> 0.23.4 (#506035) 2026-04-04 04:07:53 +00:00
zowoqandGitHub 1c6dde0d3b linux_hardened: remove (#502342) 2026-04-04 04:00:05 +00:00
zowoq 2879caafcf linux_hardened: remove
isn't maintained to the standards people expect of kernels in nixpkgs
2026-04-04 13:51:50 +10:00
Austin HorstmanandGitHub 274409ab92 jetbrains.datagrip: 2026.1 -> 2026.1.1 (#506070) 2026-04-04 03:46:12 +00:00
zowoqandGitHub 3436785976 linux-rt: remove (#502889) 2026-04-04 03:44:53 +00:00
nixpkgs-ci[bot]andGitHub d5146e8b1c wit-bindgen: 0.54.0 -> 0.55.0 (#506480) 2026-04-04 03:29:57 +00:00
nixpkgs-ci[bot]andGitHub 21ed98b10a beekeeper-studio: 5.6.3 -> 5.6.4 (#506469) 2026-04-04 03:29:47 +00:00
nixpkgs-ci[bot]andGitHub ba5718fc56 fosrl-gerbil: 1.3.0 -> 1.3.1 (#506458) 2026-04-04 03:29:45 +00:00
nixpkgs-ci[bot]andGitHub a5357a2d42 s7: 11.7-unstable-2026-03-24 -> 11.8-unstable-2026-04-02 (#506207) 2026-04-04 03:29:39 +00:00
nixpkgs-ci[bot]andGitHub 1ec0978e4e aws-vault: 7.9.10 -> 7.9.13 (#502238) 2026-04-04 03:29:28 +00:00
Michael DanielsandGitHub 7aa9fd6fe8 uutils-procps: 0.0.1-unstable-2026-03-24 -> 0.0.1-unstable-2026-03-28 (#504331) 2026-04-04 03:25:17 +00:00
Michael DanielsandGitHub 6255179d84 jadx: 1.5.3 -> 1.5.5 (#499518) 2026-04-04 03:17:57 +00:00
Michael DanielsandGitHub c69bb03096 python3Packages.gguf: 8292 -> 8545 (#503904) 2026-04-04 03:17:52 +00:00
Michael DanielsandGitHub be9b6d90a4 libbass{,_fx,midi,mix}: support darwin; add ulysseszhan to maintainers (#501122) 2026-04-04 03:14:21 +00:00
Bobby RongandGitHub 9576c24a0c mate-wayland-session: 1.28.4 -> 1.28.5 (#506042) 2026-04-04 03:09:14 +00:00
emilylange 4268e25679 nixos/tests/timezone: extend to test systemd /etc/timezone regression
This should help to catch the regression described in 2fb95a568c
if it ever does end up resurfacing.

Please see that commit for more details on this.

The tl;dr is: At the very least systemd and icu::TimeZone both make
assumptions about how the /etc/localtime symlink they read should look
like. In one of our systemd patches, we broke this for both itself and
icu::TimeZone. And while we could extend our systemd patch, we cannot as
easily patch icu and we don't know who else makes similar assumptions.
2026-04-04 05:08:07 +02:00
Michael DanielsandGitHub d464f5253c anytone-emu: unstable-2023-06-15 -> 0.4.0 (#499453) 2026-04-04 03:07:29 +00:00
Michael DanielsandGitHub 75c7d0a031 insulator2: 2.13.2 -> 2.14.0; modernize (#499616) 2026-04-04 03:06:49 +00:00
emilylange 2fb95a568c systemd: fix /etc/localtime symlink
This is essentially a revert of e8a805af10
in favor of a proper fix because unlike first assumed, this affects
not just systemd internally, but virtually any program that uses
icu::TimeZone to read the system's time zone.

And while we could patch icu, I believe this will take far too long and
we arguably don't know who else depends on the same assumption icu made.

All I know is every chromium-based browser[^0], including electron,
calls icu::TimeZone::detectHostTimeZone(), which returns the special
time zone Etc/Unknown instead of the configured one when using
timedated, either directly via timedatectl set-timezone or via D-Bus.

The reason for this is icu::TimeZone assumes[^1] every valid
/etc/localtime symlink includes /zoneinfo/ before the zoneinfo (olson)
timezone id.

This is a pretty decent guess and also applied to NixOS since ever, up
until we bumped systemd to v258 in 1c5d47dd78,
which included an upstream change that made the symlink relative.

The issue is, a relative /etc/localtime symlink in other distros results
in e.g. ../usr/share/zoneinfo/UTC, not zoneinfo/UTC. For NixOS, however,
we patch systemd to use /etc/zoneinfo instead of /usr/share/zoneinfo.

zoneinfo/UTC breaks the assumption icu::TimeZone makes, because
zoneinfo/ is not /zoneinfo/. We could try to trick it by needlessly
making the relative symlink ./zoneinfo/ instead, but this is both more
fragile and makes the patch significantly larger. And as stated above
already, we simply don't know who else makes similar assumptions.

So to fix this for good, we force the symlink to be absolute, just like
we had it prior to systemd v258.

Note that we could also simply unconditionally set

~~~nix
{
  systemd.services."systemd-timedated".environment.SYSTEMD_ETC_LOCALTIME = "/etc/localtime";
}
~~~

to make the symlink absolute. But I'd argue this would cause this
edge-case to slowly slide into obscurity, almost asking for it to
resurface in the future eventually.

[0]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/146.0.7680.177:services/device/time_zone_monitor/time_zone_monitor.cc;l=57-59;bpv=0
[1]: https://github.com/unicode-org/icu/blob/release-78.3/icu4c/source/common/putil.cpp#L686-L695
2026-04-04 05:06:47 +02:00
Michael DanielsandGitHub 2f357124c1 python3Packages.boiboite-opener-framework: drop (#502659) 2026-04-04 03:04:05 +00:00
Michael DanielsandGitHub a8ef812c6b python3Packages.async-dns: drop (#502668) 2026-04-04 03:04:01 +00:00
Michael DanielsandGitHub 9695db2aa4 python3Packages.flake8-future-import: drop (#502165) 2026-04-04 03:03:57 +00:00
Michael DanielsandGitHub c085499d88 python3Packages.hologram: drop (#502161) 2026-04-04 03:03:53 +00:00