Commit Graph
921127 Commits
Author SHA1 Message Date
Ethan Carter Edwards 93d0f90099 zvm: 0.8.10 -> 0.8.11
Arbitrary Code Execution/File Deletion Vulnerabilities Fixes!
Changelog: https://github.com/tristanisham/zvm/releases/tag/v0.8.11

Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
2025-12-31 18:56:49 -05:00
Michael Daniels 60d8441ac0 gnupatch: adopt 2025-12-31 18:55:42 -05:00
Ethan Carter Edwards 94d3b15a01 dep-scan: 6.0.0b5 -> 6.0.0
Changelog: https://github.com/owasp-dep-scan/dep-scan/releases/tag/v6.0.0

Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
2025-12-31 18:47:02 -05:00
Petr Hodina a54d13897b pmbootstrap: 3.7.0 -> 3.8.0
Signed-off-by: Petr Hodina <phodina@protonmail.com>
2026-01-01 00:46:03 +01:00
Pol DellaieraandGitHub 6f4c418248 phpPackages.composer-local-repo-plugin: fix vendor hash (#475380) 2025-12-31 23:26:02 +00:00
Pol DellaieraandGitHub cc9f2ca40d netbird,netbird-*: 0.60.8 -> 0.61.0 (#475382) 2025-12-31 23:25:54 +00:00
Pol DellaieraandGitHub 2842529a7b roadrunner: 2025.1.5 -> 2025.1.6 (#475395) 2025-12-31 23:25:24 +00:00
Pol DellaieraandGitHub d958d34504 php84Packages.box: fix composerVendor hash (#475449) 2025-12-31 23:24:42 +00:00
Pol DellaieraandGitHub d327cf77aa php83Packages.phing: fix composerVendor hash (#475459) 2025-12-31 23:24:30 +00:00
Pol DellaieraandGitHub 7e6f6ecb04 n98-magerun2: fix composerVendor hash (#475463) 2025-12-31 23:24:02 +00:00
Pol DellaieraandGitHub 0b9accbe75 robo: fix composerVendor hash (#475637) 2025-12-31 23:21:15 +00:00
Ethan Carter Edwards 61a6cf9667 python3Packages.appthreat-vulnerability-db: 6.4.4 -> 6.5.1
Changelog: https://github.com/AppThreat/vulnerability-db/releases/tag/v6.5.1

Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
2025-12-31 18:02:39 -05:00
nixpkgs-ci[bot]andGitHub dbd9d29ad1 bit-logo: 0.1.0 -> 0.3.0 (#465830) 2025-12-31 22:47:07 +00:00
Martin Weinelt 70766aac14 esphome: 2025.12.3 -> 2025.12.4
https://github.com/esphome/esphome/releases/tag/2025.12.4
2025-12-31 23:46:07 +01:00
Thiago Kenji OkadaandGitHub 5bac2934a8 libretro.fbneo: 0-unstable-2025-12-25 -> 0-unstable-2025-12-29 (#475712) 2025-12-31 22:44:21 +00:00
Bjørn ForsmanandGitHub 68fdd5f383 gpsd: 3.27.2 -> 3.27.3 (#475688) 2025-12-31 22:20:05 +00:00
Yiyu Zhou 77cb5c3a5f usb-modeswitch: cleanup 2025-12-31 14:14:51 -08:00
Yiyu Zhou 2baedf6dc6 usb-modeswitch: 2.6.0 -> 2.6.2 2025-12-31 14:14:50 -08:00
Grimmauld 4525c1a464 librewolf{,-unwrapped}: Remove grimmauld from maintainers
Librewolf is in a bad shape. Not just in nixpkgs, but upstream as well.

In nixpkgs, browsers have been a constant painful argument.
I have written up #405187 to clarify some security requirements for packages.
While Librewolf doesn't immediately violate the requirements outlined there,
we should strive for better than just the absolute minimum.
Personally, I no longer feel confident in my ability to adequately contribute,
test, and backport Librewolf updates. The past few months have been stressful IRL,
and maintaining a browser in nixpkgs is no longer sustainable for me.
In the time I intended to take a break, #471511 was opened to update to 146.0.1.
This was not merged in a timely manner, despite me not being the only committer among LW maintainers.

librewolf-bin isn't looking much better. #464467 is open since Nov 24th,
entirely unacceptable for a browser. The single remaining maintainer, @DominicWrege,
already proposed dropping the package entirely, LeSuisse marked it vulnerable in the meantime.

The situation upstream does not look much better. Checking the [commit history](https://codeberg.org/librewolf/source/commits/branch/main),
they are barely keeping up with upstream firefox. The maintainers have
repeatedly communicated (on matrix) they were close to burning out.
The code changes being done are mostly bumps with patch rebases,
removals of patches which no longer apply, and a lot of somewhat trivial changes.
Very few substantial changes to librewolf itself are made.

I originally switched to Librewolf when firefox expanded their enshitification efforts,
at a time where search engine policies were not possible to define with mainline firefox.
Mainline started supporting search engine policies since. While enshitification
did not slow down, librewolf does not keep up sufficiently to combat that effectively.
I appreciate the project for what it does and tries to do.
But i no longer believe the project is sustainable.
Not in nixpkgs, and probably not upstream either.

Well, what now? I am not the last maintainer of librewolf source package.
I am hoping someone else will step up, and maybe start actually committing open PRs too.
Personally, i will be moving back to mainline firefox, and apply [Phoenix](https://github.com/celenityy/Phoenix).
Phoenix has a nice flake, and does not require a browser recompile for the changes it does.
Phoenix does many of the things librewolf does, while imposing less of a maintainance burden.

I wish the best of luck to all remaining librewolf maintainers.
2025-12-31 23:14:12 +01:00
Justin ! 511bf56650 treewide: fix or-as-identifier
Lix will soon warn, and in the future, error when `or` is used as an
identifier. This commit fix those cases.
2025-12-31 17:02:13 -05:00
Philip TaronandGitHub b9d211fe7c dnslookup: 1.11.1 -> 1.11.2 (#475682) 2025-12-31 21:51:26 +00:00
Heitor AugustoandGitHub b79dc868df ghatm: 0.3.7 -> 1.0.0 (#475709) 2025-12-31 21:50:49 +00:00
R. Ryantm eefe75e9bf framework-tool-tui: 0.6.0 -> 0.7.2 2025-12-31 21:06:58 +00:00
kirillrdyandGitHub e631a2afba python3Packages.pylance: 1.0.0 -> 1.0.1 (#475433) 2025-12-31 20:51:48 +00:00
Raito BezariusandRaito Bezarius 9bb47cfb5e nixVersions.nix_2_28: unbreak builds on linux
Nix 2.28 seems to have been unbuildable for a long time due to
https://github.com/NixOS/nix/issues/11295.

This particularly surfaces in advanced CI setups where the store
locations are non standard and build user separation disappears as the
build system seems to be hiding bugs using these features.

Reproducing the issue that this commit fixes can be achieved by running:

$ nix-build '<nixpkgs>' -A nixVersions.nix_2_28 --store /tmp/alt --check

This only fixes Linux builds as they are the only "truly" affected by
this.

This commit can be reverted once upstream fixes this issue.

Change-Id: I55d7adee2dee7c735490f33395ba061c27cf4319
Signed-off-by: Raito Bezarius <raito@lix.systems>
2025-12-31 21:12:47 +01:00
R. Ryantm b76f1ab4ee ghatm: 0.3.7 -> 1.0.0 2025-12-31 20:01:32 +00:00
R. Ryantm 4ab4c14382 libretro.fbneo: 0-unstable-2025-12-25 -> 0-unstable-2025-12-29 2025-12-31 19:53:28 +00:00
Michael DanielsandGitHub fe575ad78f coreutils: add mdaniels5757 as co-maintainer (#475701) 2025-12-31 19:51:29 +00:00
R. Ryantm 09abafeaf7 jreleaser-cli: 1.21.0 -> 1.22.0 2025-12-31 19:48:09 +00:00
nixpkgs-ci[bot]andGitHub cffe0f5e76 kubexporter: 0.7.1 -> 0.8.3 (#475450) 2025-12-31 19:41:07 +00:00
nixpkgs-ci[bot]andGitHub eaef08cbc8 dnsproxy: 0.78.1 -> 0.78.2 (#475696) 2025-12-31 19:41:05 +00:00
R. Ryantm 42df446f25 reqable: 3.0.30 -> 3.0.31 2025-12-31 19:40:10 +00:00
Sigmanificient 7bf69020c2 nettee: fix build with cmake4 2025-12-31 20:29:32 +01:00
R. Ryantm fbf9c43853 nuclei: 3.6.1 -> 3.6.2 2025-12-31 19:26:35 +00:00
Michael Daniels a115c65777 coreutils: add mdaniels5757 as co-maintainer 2025-12-31 14:24:13 -05:00
Sigmanificient 4c7cc38380 microdnf: with build with cmake4 2025-12-31 20:16:39 +01:00
R. Ryantm 9f60060730 dnsproxy: 0.78.1 -> 0.78.2 2025-12-31 19:01:30 +00:00
Sigmanificient 0025f16b55 jwm-settings-manager: fix build with cmake4 2025-12-31 19:54:40 +01:00
Ryan HendricksonandGitHub 86122fa2bb openjfx: 17.0.11+3 -> 21.0.3+2 (#475113) 2025-12-31 18:51:51 +00:00
nixpkgs-ci[bot]andGitHub 3f36ffa238 re-isearch: 2.20220925.4.0a-unstable-2025-12-10 -> 2.20220925.4.0a-unstable-2025-12-30 (#475663) 2025-12-31 18:28:01 +00:00
nixpkgs-ci[bot]andGitHub 960c7167f8 age-plugin-sss: 0.3.0 -> 0.3.1 (#475415) 2025-12-31 18:28:01 +00:00
Sigmanificient af93978187 iodash: fix build with cmake4 2025-12-31 19:27:58 +01:00
nixpkgs-ci[bot]andGitHub b4782c7c8e go-judge: 1.11.1 -> 1.11.2 (#475502) 2025-12-31 18:27:58 +00:00
R. Ryantm a0fc1d3288 sftool: 0.1.17 -> 0.1.18 2025-12-31 18:14:02 +00:00
Sigmanificient efb37ae85a igprof: fix build with cmake4 2025-12-31 19:04:05 +01:00
nixpkgs-ci[bot]andGitHub e1405b568f edmarketconnector: 6.0.0 -> 6.0.2 (#475678) 2025-12-31 17:44:53 +00:00
AleksanaandGitHub a9f427d430 hidrd: fix build with gcc15 (#475642) 2025-12-31 17:42:16 +00:00
Arne KellerandGitHub 6e7e9da8e8 wxedid: init at 0.0.33 (#345711) 2025-12-31 17:39:59 +00:00
R. Ryantm ed04f62b37 dnslookup: 1.11.1 -> 1.11.2 2025-12-31 17:35:30 +00:00
AleksanaandGitHub 5a10d401bd nixos/test/nominatim: replace activation script by ExecStartPre (#475396) 2025-12-31 17:35:18 +00:00