Thomas Gerbet and Vladimír Čunát
bd2d251cdc
libcaca: apply patch for CVE-2026-42046
...
Fixes https://github.com/NixOS/nixpkgs/issues/519387
(cherry picked from commit 00cd8e646c )
(cherry picked from commit 8513d19d4f92c99ec7403755360bbb225d681aa7)
2026-06-22 08:15:15 +02:00
Hythera and Vladimír Čunát
9756eaf1f8
assimp: 6.0.4 -> 6.0.5
...
changelog: https://github.com/assimp/assimp/blob/master/CHANGES.md
diff: https://github.com/assimp/assimp/compare/v6.0.4...v6.0.5
(cherry picked from commit b0af552236 )
(cherry picked from commit cfdafe68e00b10563e924aaf36d03363cb7ff6e3)
2026-06-22 08:15:15 +02:00
Eman Resu and Vladimír Čunát
8b34d586be
libass: remove libiconv dependency on darwin
...
This is already in stdenv.
(cherry picked from commit f6172a101f )
(cherry picked from commit dd411ee50591dd1784732c29082a384bac99a166)
2026-06-22 08:15:14 +02:00
Sergei Trofimovich and Vladimír Čunát
ba90fa78f8
simdjson: 4.6.0 -> 4.6.4
...
Changes:
- https://github.com/simdjson/simdjson/releases/tag/v4.6.1
- https://github.com/simdjson/simdjson/releases/tag/v4.6.2
- https://github.com/simdjson/simdjson/releases/tag/v4.6.3
- https://github.com/simdjson/simdjson/releases/tag/v4.6.4
(cherry picked from commit 3803be5263 )
(cherry picked from commit c0e4b6b891525ce5bb2ace1fb2f277277e8edaba)
2026-06-22 08:15:14 +02:00
znaniye and Vladimír Čunát
5eaef15328
duplicity: remove invoke from dependencies
...
invoke is not a required dependency of duplicity.
It does not appear in upstream's requirements.txt nor pyproject.toml:
- https://gitlab.com/duplicity/duplicity/-/blob/dev/requirements.txt
- https://gitlab.com/duplicity/duplicity/-/blob/dev/pyproject.toml
(cherry picked from commit b6254c48df )
(cherry picked from commit 747ba2d3768790a11db05c5fd33706e238f6f4e1)
2026-06-22 08:15:14 +02:00
znaniye and Vladimír Čunát
8806b112de
python3Packages.paramiko: invoke is a required dependency
...
(cherry picked from commit 9088b3d167 )
(cherry picked from commit f5ae9c36bfc691af8af70232640a43b0a703e067)
2026-06-22 08:15:14 +02:00
Guilhem Saurel and Vladimír Čunát
790c6832f2
doctest: 2.5.0 -> 2.5.2
...
Diff: https://github.com/doctest/doctest/compare/v2.5.0...v2.5.2
Changelog: https://github.com/doctest/doctest/releases/tag/v2.5.2
(cherry picked from commit 7bd3d8daf2 )
(cherry picked from commit be6ec59922761c1318c13a9721e1dcd8ef9655ec)
2026-06-22 08:15:14 +02:00
zowoq and Vladimír Čunát
bbacb13154
glibc: 2.42-61 -> 2.42-67
...
(cherry picked from commit 4a8e8392a4 )
(cherry picked from commit e0c442323becde6dc2d34c92f932bb1dd0470856)
2026-06-22 08:15:14 +02:00
K900 and Vladimír Čunát
6e26421199
qt6: 6.11.0 -> 6.11.1
...
(cherry picked from commit 1b3320b2d9 )
(cherry picked from commit abe60ca22f7620d763522c84b796e98d1ba5a9e0)
2026-06-22 08:15:14 +02:00
K900 and Vladimír Čunát
c5cd03ad0d
kdePackages.plasma-workspace: backport patch for Qt 6.11.1 regression
...
(cherry picked from commit 66adfb9dab )
(cherry picked from commit 7a4e6649b6583df4d70a99c27c50e06ae5a12f6f)
2026-06-22 08:15:13 +02:00
Robert Schütz and Vladimír Čunát
8e3eb65c3c
python3Packages.aiodns: 4.0.3 -> 4.0.4
...
Diff: https://github.com/saghul/aiodns/compare/v4.0.3...v4.0.4
Changelog: https://github.com/saghul/aiodns/releases/tag/v4.0.4
(cherry picked from commit a53c6a3897 )
(cherry picked from commit 10cf133bbf1f994932c9544c80c0efd62be8203e)
2026-06-22 08:15:10 +02:00
Vladimír Čunát
8accd65376
gtk4: make patch unconditional
...
The condition was just to avoid rebuilds at that moment.
(cherry picked from commit ace84983c4 )
(cherry picked from commit 25498003f382192bd8446d9029918dc794be9875)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
5c3ae22a1b
python3Packages.frictionless: exclude datasette from nativeCheckInputs
...
Datasette depends on asgi-csrf which was broken by updating
python-multipart past version 0.0.26.
(cherry picked from commit ba2df560b6 )
(cherry picked from commit 4316ed9b28fad64bd73607646972215dc975c7c7)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
44573c77ca
python3Packages.asgi-csrf: mark broken
...
(cherry picked from commit 1355d225b6 )
(cherry picked from commit b928e51eac5a88edf9dca5f35e4dfeb341a21ecf)
2026-06-22 08:01:02 +02:00
Robert Schütz and Vladimír Čunát
dcbc584e55
python3Packages.python-multipart: 0.0.22 -> 0.0.29
...
Diff: https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.29
Changelog: https://github.com/Kludex/python-multipart/blob/0.0.29/CHANGELOG.md
(cherry picked from commit 83594b9031 )
(cherry picked from commit 5010b8e892a3e3d0a514051904f89e330c7252f9)
2026-06-22 08:01:02 +02:00
Sefa Eyeoglu and Vladimír Čunát
8861a6b466
unbound: 1.25.0 -> 1.25.1
...
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net >
(cherry picked from commit 0c98395be2 )
(cherry picked from commit 71959781635822ba5e52066008b014781350fb5a)
2026-06-22 08:01:02 +02:00
Antoine du Hamel and Vladimír Čunát
988d5e4c9f
nodejs_24: 24.15.0 -> 24.16.0
...
(cherry picked from commit e9b7cf2133 )
(cherry picked from commit 252225814ab5f11143a02e8aad9459c2d9f498cd)
2026-06-22 08:01:01 +02:00
ElXreno and Vladimír Čunát
e717fb6c8f
openldap: skip flaky syncreplication tests
...
(cherry picked from commit 63147b12a5 )
(cherry picked from commit ab31c6a2289e966d48b61035e6fb03e683244bcd)
2026-06-22 08:01:01 +02:00
K900 and Vladimír Čunát
344a6379c3
qt5: 5.15.18 -> 5.15.19
...
(cherry picked from commit 52afc5fa58 )
(cherry picked from commit 0b9b29e4218a3fa46d0fe9c9866b6fba675f4828)
2026-06-22 08:01:01 +02:00
Martin Weinelt and Vladimír Čunát
ebd0392d1b
python3Packages.xmltodict: 1.0.2 -> 1.0.4
...
https://github.com/martinblech/xmltodict/blob/v1.0.4/CHANGELOG.md
(cherry picked from commit 70d339f357 )
(cherry picked from commit 3a7535469af279b4c0b5a0a2b0268c120d0fe510)
2026-06-22 08:01:01 +02:00
Martin Weinelt and Vladimír Čunát
49d2ce082a
python3Packages.aiodns: 4.0.0 -> 4.0.3
...
https://github.com/saghul/aiodns/releases/tag/v4.0.1
https://github.com/saghul/aiodns/releases/tag/v4.0.2
https://github.com/saghul/aiodns/releases/tag/v4.0.3
(cherry picked from commit 78f51bc5bc )
(cherry picked from commit aea1edbd625ce6297297b665a8d3a645dbceeb26)
2026-06-22 08:01:01 +02:00
Hythera and Vladimír Čunát
ab6adf5c82
openapv: 0.2.1.2 -> 0.2.1.3
...
changelog: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v0.2.1.3-fix
diff: https://github.com/AcademySoftwareFoundation/openapv/compare/v0.2.1.2...v0.2.1.3-fix
(cherry picked from commit 02d2fdd686 )
(cherry picked from commit ce58349f07ce81aa3d1562ace68ad03a6d841438)
2026-06-22 08:01:01 +02:00
Hythera and Vladimír Čunát
f479a5dca2
openexr: 3.4.10 -> 3.4.11
...
changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11
diff: https://github.com/AcademySoftwareFoundation/openexr/compare/v3.4.10...v3.4.11
(cherry picked from commit 32f67f000b )
(cherry picked from commit 34b3da5050e8e4c26efe67418533e587063230fd)
2026-06-22 08:01:01 +02:00
Ruud van Asseldonk and Vladimír Čunát
c0a53e6950
libressl_4_3: backport executable stack fix
...
And also add an additional check to preCheck that will enable us to
catch executable stack issues earlier next time.
(cherry picked from commit 5198c49a5a )
(cherry picked from commit 4248c5fd7a9c28e2fd27a865686fe864fcded34d)
2026-06-22 08:01:01 +02:00
Ruud van Asseldonk and Vladimír Čunát
7c6518130d
libressl: enable strictDeps and __structuredAttrs
...
(cherry picked from commit c74cade494 )
(cherry picked from commit 6fbc1e2a1d6115826542176da8629c43638c4ae4)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk and Vladimír Čunát
d5937f2bc8
libressl: add ruuda as maintainer
...
I've been keeping this package up to date over the past few years, since
I run a webserver that depends on it. I'd be happy to be co-maintainer
for it, and hopefully reduce the load on others.
(cherry picked from commit 1665623390 )
(cherry picked from commit 6fd22ccf4c3bea1f931d26a48425eb01e0c07414)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk and Vladimír Čunát
fdf4fbeb3d
libressl_4_1: delete unsupported package
...
LibreSSL branches are supported for one year after the OpenBSD release
in which they are included. LibreSSL 4.1 was part of OpenBSD 7.7, which
was released on April 28, 2025, so it's end of life now.
(cherry picked from commit 0bfe3de9ed )
(cherry picked from commit 8953025b909e821bfa97037abac04271b8554f9b)
2026-06-22 08:01:00 +02:00
Ruud van Asseldonk and Vladimír Čunát
85e30362dd
libressl_4_3: init at 4.3.1
...
I also added expiration date comments on all of them, because I always
spend some time chasing what the support dates are, and it would save
maintainer time to be able to see what to do with these branches.
(cherry picked from commit feb7c9ff78 )
(cherry picked from commit c6eddcf80ad012ce92537c3191f65ccf52b66495)
2026-06-22 08:01:00 +02:00
Grimmauld and Vladimír Čunát
2102ac377d
audit: 4.1.2-unstable-2025-09-06 -> 4.1.4
...
Upstream diff: https://github.com/linux-audit/audit-userspace/compare/cb13fe75ee2c36d5c525ed9de22aae10dbc8caf4...v4.1.4
Adds support for io_uring and syscalls of Linux 7.0 kernels.
(cherry picked from commit 2b8ed1fe21 )
(cherry picked from commit 5aece021f4b248331fa6813c13255bab33dfa220)
2026-06-22 08:01:00 +02:00
Vladimír Čunát
412b051db6
Revert "groff: only apply the latest patch on linux for now"
...
This reverts commit 37a9427fd3 .
(cherry picked from commit b2e8b0c602 )
(cherry picked from commit e682a0e50ac6a972e00b2347abfdc0d907e5e433)
2026-06-22 08:01:00 +02:00
whispers and Vladimír Čunát
e866333c7b
expat: 2.8.0 -> 2.8.1
...
Changelog: https://github.com/libexpat/libexpat/blob/R_2_8_1/expat/Changes
Diff: https://github.com/libexpat/libexpat/compare/R_2_8_0...R_2_8_1
Fixes: CVE-2026-45186
(cherry picked from commit fe1ca2c575 )
(cherry picked from commit d7c0b19df27ef7951010f5d16df235638e98af83)
2026-06-22 07:59:32 +02:00
nixpkgs-ci[bot] and GitHub
9e5fbcf68a
Merge master into staging-next
2026-06-22 00:50:42 +00:00
taku0 and GitHub
4831080ceb
thunderbird-latest-bin-unwrapped: 151.0.1 -> 152.0 ( #533724 )
2026-06-22 00:42:41 +00:00
7c6f434c and GitHub
8eddb67b98
libre: 4.8.1 -> 4.9.0 ( #532579 )
2026-06-22 00:39:58 +00:00
dotlambda and GitHub
a9f0e7a8aa
python3Packages.python-xlib: rename from xlib ( #534038 )
2026-06-22 00:22:28 +00:00
7c6f434c and GitHub
e8f2f5af6c
ripmime: 1.4.0.10 -> 1.4.1.0 ( #533575 )
2026-06-21 23:58:12 +00:00
nixpkgs-ci[bot] and GitHub
212aae6fa8
openmeters: 1.4.1 -> 1.7.0 ( #534070 )
2026-06-21 23:44:54 +00:00
Martin Weinelt and GitHub
e9bef3ff82
home-assistant-custom-lovelace-modules.custom-brand-icons: init at 2026.06.2 ( #533982 )
2026-06-21 23:29:39 +00:00
zowoq and GitHub
ddc150cf4f
buildLinux: Forward buildDTBs and target arguments ( #533947 )
2026-06-21 23:19:20 +00:00
7c6f434c and GitHub
741bcd6b25
squid: 7.5 -> 7.6 ( #533090 )
2026-06-21 23:09:58 +00:00
Peder Bergebakken Sundt and GitHub
7663baf2c4
d2: use lib.meta.availableOn instead of meta.available ( #532455 )
2026-06-21 23:08:06 +00:00
Peder Bergebakken Sundt and GitHub
ea539f6e29
python3Packages.avro3k: drop ( #533085 )
2026-06-21 23:00:57 +00:00
Peder Bergebakken Sundt and GitHub
a96ac7a5a8
wox: 2.0.2 -> 2.2.0; refactor derivation & adopt ( #533204 )
2026-06-21 22:57:34 +00:00
Peder Bergebakken Sundt and GitHub
5a3fabdf31
nocturne: 1.2.2 -> 1.3.0 ( #533164 )
2026-06-21 22:56:52 +00:00
dotlambda and GitHub
329f22bbfc
python3Packages.ament-package: 8 -> 0.19.0 ( #533044 )
2026-06-21 22:56:15 +00:00
Gergő Gutyina and GitHub
d97d2eee6e
lua-language-server: 3.18.1 -> 3.18.2 ( #533726 )
2026-06-21 22:54:10 +00:00
Gaétan Lepage and GitHub
d31059554b
python3Packages.mcp: 1.26.0 -> 1.27.0; python3Packages.fastmcp: 3.2.3 -> 3.2.4 ( #532679 )
2026-06-21 22:42:57 +00:00
R. Ryantm
75325e50bb
openmeters: 1.4.1 -> 1.7.0
2026-06-21 22:41:12 +00:00
nixpkgs-ci[bot] and GitHub
3c99bb8181
files-cli: 2.15.335 -> 2.15.354 ( #534015 )
2026-06-21 22:37:38 +00:00
zowoq and GitHub
be7690238c
opentofu: 1.12.1 -> 1.12.3 ( #534033 )
2026-06-21 22:36:27 +00:00