gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
973,280 Commits 9 Branches 0 Tags
aec8a8e653c59e3ebfa4793bf0a9ab9f953bf807
Commit Graph
973280 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
R. Ryantm aec8a8e653 python3Packages.docling-core: 2.70.2 -> 2.71.0 2026-04-02 06:52:31 +00:00
Philip TaronandGitHub c111fb7e5e pam_u2f: fix usage with polkit 127 (#486044) 2026-04-01 23:56:16 +00:00
YtandGitHub fc56e12985 fishPlugins.forgit: 26.01.0 -> 26.04.0 (#505518) 2026-04-01 23:55:05 +00:00
Philip Taron 098b000a36 nixos/tests: add end-to-end pam_u2f and polkit sandbox tests 
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.

pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
 2026-04-01 16:50:22 -07:00
Philip TaronandVictor Luft f3648de497 polkit: fix polkit-agent-helper@ sandbox for pam_u2f 
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:

- PrivateDevices=yes creates a private /dev without hidraw devices,
  so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
  diagnostic output as protocol errors, resulting in tight
  re-execution loops

Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled

Co-authored-by: Victor Luft <victor@luft.io>
 2026-04-01 16:50:18 -07:00
Gaétan LepageandGitHub 5809b092fc python3Packages.qtconsole: 5.7.1 -> 5.7.2 (#505416) 2026-04-01 23:47:59 +00:00
Philip TaronandGitHub 6917611baf python3Packages.llm: 0.29 -> 0.30 (#505514) 2026-04-01 23:45:34 +00:00
R. RyantmandGaetan Lepage bbf0517a9b python3Packages.qtconsole: 5.7.1 -> 5.7.2 2026-04-01 23:35:20 +00:00
kirillrdyandGitHub d7922c9d62 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 (#505847) 2026-04-01 23:22:06 +00:00
nixpkgs-ci[bot]andGitHub 3b9f4320b1 asn: 0.80.4 -> 0.80.5 (#505835) 2026-04-01 23:18:09 +00:00
Philip TaronandGitHub f6b8482cba libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support (#505812) 2026-04-01 23:16:50 +00:00
Gergő GutyinaandGitHub 172b7d4e40 webeep-sync: init at 1.0.3-unstable-2024-04-30 (#501366) 2026-04-01 23:06:51 +00:00
Gaetan Lepage 9a080ecec5 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4

Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
 2026-04-01 23:05:41 +00:00
dotlambdaandGitHub c6cca75cfd python3Packages.urllib3-future: 2.18.901 -> 2.19.900 (#505843) 2026-04-01 22:57:00 +00:00
Nick CaoandGitHub c3e05a12b5 python3Packages.mlx: 0.30.5 -> 0.31.1 (#504828) 2026-04-01 22:50:42 +00:00
R. Ryantm c6121046db python3Packages.urllib3-future: 2.18.901 -> 2.19.900 2026-04-01 22:36:39 +00:00
Philip TaronandGitHub 49ca49bede Make ec2 tests a channel blocker (#365623) 2026-04-01 22:33:05 +00:00
Marc JakobiandGitHub 08a82c9fdd emmylua-doc-cli: 0.21.0 -> 0.22.0 (#505825) 2026-04-01 22:19:25 +00:00
Arian van PuttenandPhilip Taron c5d4a896c5 nixos/release-combined: add nixos.tests.ec2-userdata 
This is to catch issues like https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-253149474
We do not want to push NixOS updates that break SSH access on EC2 instances.
 2026-04-01 15:19:20 -07:00
Arian van PuttenandPhilip Taron 7ab9b03f5b nixos/tests/ec2: remove hack 
Not needed anymore. no idea why this was here
 2026-04-01 15:19:19 -07:00
Arian van PuttenandPhilip Taron 0e37e9beff nixos/tests/ec2: rename ec2-nixops to ec2-userdata 
This is more accurate.

People dismissed failures in the past in this test because of the name.
We don't want that. The test is important! It tests that SSH works!

Hopefully this helps with https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-2531494744
 2026-04-01 15:19:03 -07:00
Arian van PuttenandPhilip Taron 448b9932df nixos/tests/ec2: remove ec2-config test 
It has been broken for as long as I know
 2026-04-01 15:18:23 -07:00
Philip TaronandGitHub 64d047a9ce nixos/amazon-image: do not force-load xen-blkfront kernel module (#313933) 2026-04-01 22:14:29 +00:00
Martin WeineltandGitHub c6ea0df341 home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 (#505801) 2026-04-01 22:07:23 +00:00
Nick CaoandGitHub d64b849bf3 glaze: 7.1.0 -> 7.2.2 (#504129) 2026-04-01 22:04:58 +00:00
zowoqandGitHub 5647a31d17 terraform-providers.tencentcloudstack_tencentcloud: 1.82.77 -> 1.82.82 (#505797) 2026-04-01 21:52:02 +00:00
zowoqandGitHub 78b5a8ce37 terraform-providers.cloudamqp_cloudamqp: 1.43.1 -> 1.44.0 (#505775) 2026-04-01 21:51:51 +00:00
YtandGitHub 086333f595 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 (#505823) 2026-04-01 21:51:09 +00:00
R. Ryantm f5f5d7d15b asn: 0.80.4 -> 0.80.5 2026-04-01 21:44:21 +00:00
Philip TaronandGitHub 188aec52a6 Remove Profpatsch from most teams & maintainer fields (#505770) 2026-04-01 21:43:24 +00:00
ProfpatschandPhilip Taron 257f122e3d treewide: remove Profpatsch from most teams & maintainer fields 2026-04-01 14:34:59 -07:00
Thiago Kenji OkadaandGitHub 813ee5fab4 libretro.fbalpha2012: 0-unstable-2025-12-12 -> 0-unstable-2026-03-31 (#505788) 2026-04-01 21:28:24 +00:00
Adam C. Stephens 5ef2f74e55 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.4
 2026-04-01 17:20:45 -04:00
R. Ryantm db369e0ad7 emmylua-doc-cli: 0.21.0 -> 0.22.0 2026-04-01 21:18:18 +00:00
Philip TaronandGitHub 8001332b4e prevail: rename from ebpf-verifier; unstable-2023-07-15 -> 0.2.0 (#505643) 2026-04-01 21:15:43 +00:00
Philip TaronandGitHub 01e9170240 colobot: fix build with boost 1.89 (#504833) 2026-04-01 21:13:51 +00:00
Philip TaronandGitHub 376606ee83 ciftilib: fix build with boost 1.89 (#504819) 2026-04-01 21:13:28 +00:00
Philip TaronandGitHub aa79a5067b apngasm: fix build with Boost 1.89+ (#500859) 2026-04-01 21:12:54 +00:00
kirillrdyandGitHub ddf1590481 antigravity: 1.20.6 -> 1.21.9 (#503687) 2026-04-01 21:06:19 +00:00
StepBroBDandGitHub 9beb29fd84 zotero: 8.0.3 -> 8.0.5 (#504115) 2026-04-01 21:02:14 +00:00
Nick CaoandGitHub 6a33a3c10c python3Packages.modal: 1.3.5 -> 1.4.1 (#505776) 2026-04-01 20:59:00 +00:00
nixpkgs-ci[bot]andGitHub 9b678e5f85 shelfmark{,-frontend}: 1.2.0 -> 1.2.1, add myself to maintainers (#505803) 2026-04-01 20:46:50 +00:00
Maximilian BoschandGitHub c68caabadf nixos/nextcloud: use --pipe for nextcloud-occ systemd-run (#504474) 2026-04-01 20:44:55 +00:00
Pol DellaieraandGitHub 45749f89ef winbox: set winbox4 as default (#502504) 2026-04-01 20:29:30 +00:00
installer fe690f3e3c antigravity: 1.21.6 -> 1.21.9 2026-04-01 22:26:51 +02:00
Fabian AffolterandGitHub 5e71d8634c python3Packages.llama-index-llms-ollama: 0.10.0 -> 0.10.1 (#505763) 2026-04-01 20:21:48 +00:00
dish b5270da2a9 shelfmark{,-frontend}: 1.2.0 -> 1.2.1, add myself to maintainers 2026-04-01 16:17:45 -04:00
Martin WeineltandGitHub 717b057ab3 zigbee2mqtt: 2.9.1 -> 2.9.2 (#505798) 2026-04-01 20:15:53 +00:00
R. Ryantm c64874cc0b home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 2026-04-01 20:10:30 +00:00
Martin Weinelt 4066343b47 zigbee2mqtt: 2.9.1 -> 2.9.2 
https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.9.2
 2026-04-01 22:08:39 +02:00