Commit Graph
610399 Commits
Author SHA1 Message Date
Thomas Gerbet bc4dc452fa envoy: flag as vulnerable to CVE-2024-30255
Envoy 1.27.4 [0] contains the fix but upgrading it is
not straightforward as the build of the current version
is already broken and only thanks to the caching of the deps
(seems to be the case since the removal of Go 1.20).

Fixing the build seems to require more Bazel knownledge than I have
and the the usual maintainer is currently not available.

[0] https://github.com/envoyproxy/envoy/releases/tag/v1.27.4
2024-04-10 22:43:57 +02:00
Fabian AffolterandGitHub ddcd5f2762 Merge pull request #303036 from r-ryantm/auto-update/python311Packages.boto3-stubs
python311Packages.boto3-stubs: 1.34.79 -> 1.34.81
2024-04-10 22:01:28 +02:00
SandroandGitHub ca729afa8c Merge pull request #302812 from gador/pgadmin-darwin
pgadmin4: add darwin build
2024-04-10 21:54:48 +02:00
Cole Helbling dbc967d14d Revert "NixOS Integration Tests: Enable again for darwin" 2024-04-10 12:52:12 -07:00
K900andGitHub 85d3f97277 Merge pull request #303114 from K900/sddm-no-x11
nixos/sddm: allow disabling the rest of X11
2024-04-10 22:22:20 +03:00
K900 ab0b45a3a0 nixos/sddm: allow disabling the rest of X11 2024-04-10 22:22:05 +03:00
Martin WeineltandGitHub 4093715863 Merge pull request #303100 from r-ryantm/auto-update/ctranslate2
ctranslate2: 4.1.1 -> 4.2.0
2024-04-10 21:05:48 +02:00
Connor BakerandGitHub c46343615d Merge pull request #282170 from jmbaur/rm-nsight-cuda-10
cudaPackages: remove nsight-systems from cuda 10
2024-04-10 14:24:41 -04:00
Pascal WittmannandGitHub 0a57592720 Merge pull request #303024 from wegank/guix-cve
guix: add patch for CVE-2024-27297
2024-04-10 20:07:46 +02:00
Pascal WittmannandGitHub a4fa45de2b Merge pull request #303064 from r-ryantm/auto-update/vtm
vtm: 0.9.76 -> 0.9.77
2024-04-10 20:05:22 +02:00
0x4A6FandGitHub 07581bb39a Merge pull request #302465 from r-ryantm/auto-update/bpftop
bpftop: 0.4.0 -> 0.4.1
2024-04-10 20:01:26 +02:00
Pascal WittmannandGitHub 388f9799d7 Merge pull request #302894 from NikolaiSch/updating-juce
juce: 7.0.10 -> 7.0.11
2024-04-10 19:57:24 +02:00
Pascal WittmannandGitHub cad38af16b Merge pull request #302946 from Kupac/fix_seqbias
rPackages.seqbias: fix build
2024-04-10 19:54:41 +02:00
Pascal WittmannandGitHub 7e0d0b2c15 Merge pull request #302968 from teutat3s/element-desktop-1.11.64
element-desktop: 1.11.63 -> 1.11.64
2024-04-10 19:54:06 +02:00
Pascal WittmannandGitHub 2da1af77d4 Merge pull request #302984 from numinit/klee-update
klee: 3.0 -> 3.1
2024-04-10 19:52:37 +02:00
Pascal WittmannandGitHub 513f8e4cc4 Merge pull request #303018 from r-ryantm/auto-update/subxt
subxt: 0.35.1 -> 0.35.2
2024-04-10 19:50:21 +02:00
Pascal WittmannandGitHub 2373a21e8b Merge pull request #303033 from r-ryantm/auto-update/netbird-ui
netbird-ui: 0.27.1 -> 0.27.2
2024-04-10 19:48:40 +02:00
Adam C. StephensandGitHub e8ff41fa85 Merge pull request #285041 from r-vdp/nix-optimise-fix-timer
nix-optimise: only create timer unit if needed
2024-04-10 13:48:22 -04:00
Adam C. StephensandGitHub 877d8a1383 Merge pull request #250009 from gepbird/update-zsh-syntax-highlighting
zsh-syntax-highlighting: 0.7.1 -> 0.8.0
2024-04-10 13:41:50 -04:00
Pascal WittmannandGitHub a62dd3ea78 Merge pull request #303079 from r-ryantm/auto-update/homepage-dashboard
homepage-dashboard: 0.8.10 -> 0.8.11
2024-04-10 19:41:27 +02:00
Bernardo MeurerandGitHub aca48416ff Merge pull request #303131 from DontEatOreo/update-raycast
raycast: 1.70.3 -> 1.71.1
2024-04-10 13:35:15 -04:00
Bjørn Forsman 74c1547424 nixos/doc: suggest mounting the ESP on /boot with umask=077
This prevents world-readable access to /boot, which is a security issue
that systemd-boot warns about.

Fixes https://github.com/NixOS/nixpkgs/issues/279362.
2024-04-10 19:34:07 +02:00
Bjørn Forsman e17e60b273 nixos-generate-config: preserve vfat filesystem mount permissions
The default is to mount these world-readable, but that's a security risk
for the EFI System Partition.

Ref https://github.com/NixOS/nixpkgs/issues/279362.
2024-04-10 19:34:07 +02:00
Pascal WittmannandGitHub 7a8dac5cdf Merge pull request #303097 from r-ryantm/auto-update/ausweisapp
ausweisapp: 2.1.0 -> 2.1.1
2024-04-10 19:32:58 +02:00
Pascal WittmannandGitHub 0137095b51 Merge pull request #303140 from infinixbot/update/nixpkgs-check-by-name
nixpkgs-check-by-name: 0.1.0 -> 0.1.1
2024-04-10 19:29:53 +02:00
Thomas WatsonandBjørn Forsman 0355aaa7d2 quartus-prime-lite: add option to disable Questa simulator
Saves ~5GB of closure size and eliminates dependency on 32 bit
libraries.
2024-04-10 19:27:03 +02:00
Thomas WatsonandBjørn Forsman 4d46279ad9 quartus-prime-lite: make usable under emulation 2024-04-10 19:27:03 +02:00
Thomas WatsonandBjørn Forsman a4f75867ee quartus-prime-lite: add more qsys requirements
Needed on certain systems and for certain SoC designs.
2024-04-10 19:27:03 +02:00
nixpkgs-merge-bot[bot]andGitHub 512e017782 Merge pull request #302967 from r-ryantm/auto-update/steampipe
steampipe: 0.22.1 -> 0.22.2
2024-04-10 17:17:24 +00:00
Nikolay KorotkiyandGitHub 62bce888d9 Merge pull request #302538 from r-ryantm/auto-update/gmid
gmid: 1.8.6 -> 2.0.2
2024-04-10 21:06:04 +04:00
AleksanaandGitHub 5ffac98654 Merge pull request #273792 from ctron/update-trunk
trunk: add ctron as maintainer
2024-04-11 00:58:59 +08:00
Connor BakerandGitHub 546930ab97 Merge pull request #300321 from jonringer/deprecate-cuda-autoAddDriver
cudaPackages.autoAddX: Deprecate
2024-04-10 12:45:48 -04:00
K900andGitHub a90b106c96 Merge pull request #303150 from tfc/nixos-integration-tests-macos-platforms
NixOS Integration Tests: Enable again for darwin
2024-04-10 19:36:53 +03:00
K900andGitHub 39a8316074 Merge pull request #303132 from K900/linux-firmware-20240410
linux-firmware: 20240312 -> 20240410
2024-04-10 19:33:03 +03:00
K900andGitHub 40705aba04 Merge pull request #303136 from K900/kernels-20240410
Kernel updates for 2024-04-10
2024-04-10 19:23:16 +03:00
StigandGitHub ebdc52f921 Merge pull request #302072 from r-ryantm/auto-update/yamlscript
yamlscript: 0.1.46 -> 0.1.52
2024-04-10 17:59:26 +02:00
Jacek Galowicz e4bf075cff NixOS Integration Tests: Enable again for darwin 2024-04-10 17:59:11 +02:00
AleksanaandGitHub 4fb6fe0206 Merge pull request #302468 from gnubufferoverflows/master
googleearth-pro: more specific vulnerability description
2024-04-10 23:55:11 +08:00
K900 a74181815c linux/common-config: remove old NFSD options from 5.15 too 2024-04-10 18:49:41 +03:00
Nikolay Korotkiy eaf5fc1813 gmid: migrate to by-name 2024-04-10 19:47:15 +04:00
EmilyandGitHub d477ca36fe Merge pull request #301383 from emilylange/forgejo-runner
forgejo-runner: rename from forgejo-actions-runner, fix `meta.changelog`, 3.3.0 -> 3.4.1
2024-04-10 17:43:41 +02:00
lassulusandGitHub e329e2ed05 Merge pull request #302921 from r-ryantm/auto-update/bitcoind-abc
bitcoind-abc: 0.29.0 -> 0.29.1
2024-04-10 17:32:37 +02:00
Jonathan Ringer dadbcf9367 nixos/rl-24.05: Add deprecation entry for cudaPackages.autoAdd{DriverRunpath,OpenGLRunpathHook} 2024-04-10 08:31:19 -07:00
Jonathan Ringer 52eb8850b8 cudaPackages.autoAdd{Driver,OpengGL}Runpath: deprecate 2024-04-10 08:31:19 -07:00
Silvan MosbergerandGitHub c09c154a34 Merge pull request #303141 from tweag/check-by-name-codeowner
CODEOWNERS: Fix check-by-name path
2024-04-10 17:30:29 +02:00
Silvan Mosberger 658206a8f7 CODEOWNERS: Fix check-by-name path
Was moved in https://github.com/NixOS/nixpkgs/pull/297901
2024-04-10 17:18:08 +02:00
K900 c044ba368c linux-rt_6_6: 6.6.23-rt28 -> 6.6.25-rt29 2024-04-10 18:11:29 +03:00
infinixbot af887c78d2 nixpkgs-check-by-name: 0.1.0 -> 0.1.1
https://github.com/NixOS/nixpkgs-check-by-name/releases/tag/0.1.1
2024-04-10 15:11:05 +00:00
K900 550bbd4090 linux_5_15: 5.15.153 -> 5.15.154 2024-04-10 18:10:54 +03:00
K900 fa12da8a56 linux_6_1: 6.1.84 -> 6.1.85 2024-04-10 18:10:51 +03:00