gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
973,324 Commits 9 Branches 0 Tags
befdc677c0bc695280657d2dbf09b1ef48715447
Commit Graph
973324 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
R. Ryantm befdc677c0 python3Packages.jupyter-docprovider: 2.2.1 -> 2.3.0 2026-04-02 08:20:19 +00:00
nixpkgs-ci[bot]andGitHub 87ed7ef699 cargo-update: 18.2.0 -> 19.0.1 (#505898) 2026-04-02 06:03:26 +00:00
nixpkgs-ci[bot]andGitHub f14520a6c6 terraform-mcp-server: 0.4.0 -> 0.5.0 (#505888) 2026-04-02 06:03:21 +00:00
nixpkgs-ci[bot]andGitHub 1783e764bd cargo-generate: 0.23.7 -> 0.23.8 (#505832) 2026-04-02 06:02:49 +00:00
nixpkgs-ci[bot]andGitHub 4b8e0d54e2 gojq: 0.12.18 -> 0.12.19 (#505813) 2026-04-02 06:02:34 +00:00
Pol DellaieraandGitHub 1ed11caa8b python3Packages.ddgs: 9.11.4 -> 9.12.0, python3Packages.primp: 1.1.2 -> 1.2.0 (#505839) 2026-04-02 05:56:13 +00:00
nixpkgs-ci[bot]andGitHub 58b0066db5 wavelog: 2.3.1 -> 2.4 (#505205) 2026-04-02 05:18:10 +00:00
dotlambdaandGitHub dcebff32ca deltachat-desktop: 2.43.0 -> 2.48.0 (#505480) 2026-04-02 04:29:20 +00:00
R. Ryantm b98733570b cargo-update: 18.2.0 -> 19.0.1 2026-04-02 03:54:26 +00:00
nixpkgs-ci[bot]andGitHub 887e5eeeba minijinja: 2.18.0 -> 2.19.0 (#505879) 2026-04-02 02:30:51 +00:00
nixpkgs-ci[bot]andGitHub 3b374d320e homepage-dashboard: 1.11.0 -> 1.12.1 (#505261) 2026-04-02 02:30:38 +00:00
R. Ryantm e76e852fa9 terraform-mcp-server: 0.4.0 -> 0.5.0 2026-04-02 02:29:29 +00:00
Tristan RossandGitHub deeda4729f zig.fetchDeps: add opt-in option for fetching all deps (#505542) 2026-04-02 02:28:07 +00:00
kirillrdyandGitHub 106eb93cbb exo: 1.0.68 -> 1.0.69 (#504824) 2026-04-02 01:59:51 +00:00
R. Ryantm bf136d16be minijinja: 2.18.0 -> 2.19.0 2026-04-02 01:48:00 +00:00
dishandGitHub b44f78afb7 archipelago: 0.6.6 -> 0.6.7 (#505791) 2026-04-02 01:36:50 +00:00
Yohann BonifaceandGitHub 94d7e47164 bodoni-moda: use installFonts hook (#505709) 2026-04-02 01:18:23 +00:00
Yohann BonifaceandGitHub 7130118132 material-icons: use installFonts hook (#505707) 2026-04-02 01:17:29 +00:00
Yohann BonifaceandGitHub 60bc5ae3cb takao: use installFonts hook (#505691) 2026-04-02 01:11:48 +00:00
Yohann BonifaceandGitHub a178108a65 seshat: use installFonts hook (#505686) 2026-04-02 01:10:09 +00:00
Yohann BonifaceandGitHub b7b2125b34 fantasque-sans-mono: use installFonts hook (#500553) 2026-04-02 01:08:57 +00:00
Yohann BonifaceandGitHub 64c5258cc6 biz-ud-gothic: use installFonts (#505683) 2026-04-02 01:08:36 +00:00
Yohann BonifaceandGitHub b4eefbee42 beedii: modernize (#505679) 2026-04-02 01:06:21 +00:00
Gaetan Lepage 9c45817acc exo: 1.0.68 -> 1.0.69 
Diff: https://github.com/exo-explore/exo/compare/v1.0.68...v1.0.69

Changelog: https://github.com/exo-explore/exo/releases/tag/v1.0.69
 2026-04-02 00:54:16 +00:00
Gaétan LepageandGitHub 14dbf46759 vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 (#505850) 2026-04-02 00:52:37 +00:00
zowoqandGitHub b467c3a639 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 (#505860) 2026-04-02 00:25:42 +00:00
R. Ryantm d3d0d5ed40 terraform-providers.yandex-cloud_yandex: 0.193.0 -> 0.195.0 2026-04-02 00:03:33 +00:00
Philip TaronandGitHub c111fb7e5e pam_u2f: fix usage with polkit 127 (#486044) 2026-04-01 23:56:16 +00:00
YtandGitHub fc56e12985 fishPlugins.forgit: 26.01.0 -> 26.04.0 (#505518) 2026-04-01 23:55:05 +00:00
Philip Taron 098b000a36 nixos/tests: add end-to-end pam_u2f and polkit sandbox tests 
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.

pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
 2026-04-01 16:50:22 -07:00
Philip TaronandVictor Luft f3648de497 polkit: fix polkit-agent-helper@ sandbox for pam_u2f 
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:

- PrivateDevices=yes creates a private /dev without hidraw devices,
  so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
  diagnostic output as protocol errors, resulting in tight
  re-execution loops

Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled

Co-authored-by: Victor Luft <victor@luft.io>
 2026-04-01 16:50:18 -07:00
Gaétan LepageandGitHub 5809b092fc python3Packages.qtconsole: 5.7.1 -> 5.7.2 (#505416) 2026-04-01 23:47:59 +00:00
Philip TaronandGitHub 6917611baf python3Packages.llm: 0.29 -> 0.30 (#505514) 2026-04-01 23:45:34 +00:00
R. RyantmandGaetan Lepage bbf0517a9b python3Packages.qtconsole: 5.7.1 -> 5.7.2 2026-04-01 23:35:20 +00:00
Clément a0d7191efd python3Packages.ddgs: 9.11.4 -> 9.12.0 
https://github.com/deedy5/ddgs/compare/v9.11.4...v9.12.0
 2026-04-01 16:26:38 -07:00
Clément b72432ba96 python3Packages.primp: 1.1.2 -> 1.2.0 2026-04-01 16:26:38 -07:00
kirillrdyandGitHub d7922c9d62 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 (#505847) 2026-04-01 23:22:06 +00:00
R. Ryantm 8ba3d94ecd vimPlugins.fff-nvim: 0.4.3-nightly.0a18692-unstable-2026-03-24 -> 0.5.1-nightly.538c593-unstable-2026-04-01 2026-04-01 23:18:42 +00:00
nixpkgs-ci[bot]andGitHub 3b9f4320b1 asn: 0.80.4 -> 0.80.5 (#505835) 2026-04-01 23:18:09 +00:00
Philip TaronandGitHub f6b8482cba libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support (#505812) 2026-04-01 23:16:50 +00:00
Gergő GutyinaandGitHub 172b7d4e40 webeep-sync: init at 1.0.3-unstable-2024-04-30 (#501366) 2026-04-01 23:06:51 +00:00
Gaetan Lepage 9a080ecec5 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4

Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
 2026-04-01 23:05:41 +00:00
dotlambdaandGitHub c6cca75cfd python3Packages.urllib3-future: 2.18.901 -> 2.19.900 (#505843) 2026-04-01 22:57:00 +00:00
Nick CaoandGitHub c3e05a12b5 python3Packages.mlx: 0.30.5 -> 0.31.1 (#504828) 2026-04-01 22:50:42 +00:00
R. Ryantm c6121046db python3Packages.urllib3-future: 2.18.901 -> 2.19.900 2026-04-01 22:36:39 +00:00
Philip TaronandGitHub 49ca49bede Make ec2 tests a channel blocker (#365623) 2026-04-01 22:33:05 +00:00
Marc JakobiandGitHub 08a82c9fdd emmylua-doc-cli: 0.21.0 -> 0.22.0 (#505825) 2026-04-01 22:19:25 +00:00
Arian van PuttenandPhilip Taron c5d4a896c5 nixos/release-combined: add nixos.tests.ec2-userdata 
This is to catch issues like https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-253149474
We do not want to push NixOS updates that break SSH access on EC2 instances.
 2026-04-01 15:19:20 -07:00
Arian van PuttenandPhilip Taron 7ab9b03f5b nixos/tests/ec2: remove hack 
Not needed anymore. no idea why this was here
 2026-04-01 15:19:19 -07:00
Arian van PuttenandPhilip Taron 0e37e9beff nixos/tests/ec2: rename ec2-nixops to ec2-userdata 
This is more accurate.

People dismissed failures in the past in this test because of the name.
We don't want that. The test is important! It tests that SSH works!

Hopefully this helps with https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-2531494744
 2026-04-01 15:19:03 -07:00