Maximilian Bosch and GitHub
b8893e2c6b
nixos/grafana: update instructions on secret rotation ( #497976 )
2026-03-08 19:10:14 +00:00
Luna Nova and GitHub
a1a5d8812b
twemoji-color-font-src: svgo from main package set instead of nodePackages alias ( #497988 )
2026-03-08 19:09:30 +00:00
R. Ryantm
275dd3f6d4
rescrobbled: 0.8.0 -> 0.9.0
2026-03-08 19:02:08 +00:00
R. Ryantm
4a1eed1634
terraform-providers.aliyun_alicloud: 1.271.0 -> 1.272.1
2026-03-08 18:57:46 +00:00
Peder Bergebakken Sundt
3e0ce62945
python3Packages.gradio-client: tether version to gradio
2026-03-08 19:51:56 +01:00
Luna Nova
8ba3e73c4c
twemoji-color-font-src: svgo from main package set instead of nodePackages alias
...
Fixes: 1f47317b58 ("twemoji-color-font-src: init at 15.1.0")
2026-03-08 11:51:34 -07:00
Sarah Clark
95e6cb0de5
python3Packages.pymupdf: 1.26.7 -> 1.27.1
...
Required some mypy-running tests to be disabled.
2026-03-08 11:50:00 -07:00
Cosima Neidahl and GitHub
c583bccdf5
vgmtools: 0.1-unstable-2026-02-23 -> 0.1-unstable-2026-02-26 ( #496785 )
2026-03-08 18:47:56 +00:00
R. Ryantm
ffc8f9a345
tinyauth: 5.0.1 -> 5.0.2
2026-03-08 18:47:08 +00:00
R. Ryantm
e43e39491b
fosrl-newt: 1.10.1 -> 1.10.2
2026-03-08 18:42:44 +00:00
Doron Behar and GitHub
9507db197b
imapfilter: 2.8.3 -> 2.8.4 ( #497890 )
2026-03-08 18:37:54 +00:00
mana-byte
cb298f4517
python3Packages.requests-ratelimiter: unbreak
2026-03-08 19:36:47 +01:00
Cosima Neidahl and GitHub
4c086ad81f
lomiri.biometryd: 0.3.3 -> 0.4.0 ( #495196 )
2026-03-08 18:33:46 +00:00
nixpkgs-ci[bot] and GitHub
e9b5a97133
firecracker: 1.14.1 -> 1.14.2 ( #496788 )
2026-03-08 18:28:14 +00:00
nixpkgs-ci[bot] and GitHub
d009985cb6
vault: 1.21.2 -> 1.21.4 ( #491550 )
2026-03-08 18:28:12 +00:00
Doron Behar and GitHub
d68c78c388
python3Packages.plotpy: 2.8.3 -> 2.8.4 ( #496944 )
2026-03-08 18:27:49 +00:00
Kristoffer Plagborg Bak Sørensen
5426b41c3a
cargo-arc: init at 0.2.0
2026-03-08 19:26:27 +01:00
Doron Behar and GitHub
29975dd468
mnxdom: init at 3.0 ( #492826 )
2026-03-08 18:26:12 +00:00
Doron Behar and GitHub
a9732f7487
nixos/taskchampion-sync-server: use DynamicUser after 26.05 ( #494338 )
2026-03-08 18:25:26 +00:00
Doron Behar and GitHub
b48f52a2d9
octavePackages: Run autoreconf hook on compiled sources ( #496611 )
2026-03-08 18:18:10 +00:00
Anton Tetov and Sandro Jäckel
ce751b2e38
karakeep: changing cache dir location away from nix store
2026-03-08 19:13:09 +01:00
Gaetan Lepage
d9276c18df
weblate: 5.15.2 -> 5.16.2
...
Diff: https://github.com/WeblateOrg/weblate/compare/weblate-5.15.2...weblate-5.16.2
Changelog: https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.2
2026-03-08 18:10:43 +00:00
Gaetan Lepage
310d2b3e33
python3Packages.weblate-language-data: 2026.2 -> 2026.3
...
Changelog: https://github.com/WeblateOrg/language-data/releases/tag/2026.3
2026-03-08 18:10:39 +00:00
nixpkgs-ci[bot] and GitHub
18613887ae
Merge master into staging-nixos
2026-03-08 18:08:04 +00:00
nixpkgs-ci[bot] and GitHub
f3f83f3659
kine: 0.14.12 -> 0.14.13 ( #497418 )
2026-03-08 18:06:28 +00:00
nixpkgs-ci[bot] and GitHub
80f5fa4ac6
infrastructure-agent: 1.72.6 -> 1.72.7 ( #497343 )
2026-03-08 18:06:27 +00:00
Gaetan Lepage
df325c5e26
python3Packages.translate-toolkit: 3.18.1 -> 3.19.3
...
Diff: https://github.com/translate/translate/compare/3.18.1...3.19.3
Changelog: https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.19.3.html
2026-03-08 18:04:57 +00:00
Gaetan Lepage
d2ed0d3745
python3Packages.weblate-fonts: init at 2026.1
2026-03-08 18:04:57 +00:00
Gaetan Lepage
671d93e263
python3Packages.tesserocr: 2.9.2 -> 2.10.0
...
Changelog: https://github.com/sirfz/tesserocr/releases/tag/v2.10.0
2026-03-08 18:04:57 +00:00
Gaétan Lepage and GitHub
657c3f4b98
python3Packages.moyopy: 0.7.7 -> 0.7.9 ( #497971 )
2026-03-08 18:04:21 +00:00
Sandro Jäckel
8932d2d9bf
wails: do not overwrite user provided tools
...
For example when building a project with golang 1.26 we want to use the
user provoided compiler and not have to run wailts like:
GOTOOLCHAIN=go1.26.0 wails build -compiler '${go_1_26}/bin/go'
2026-03-08 19:04:01 +01:00
Maximilian Bosch
ec7dc46bfc
nixos/grafana: update instructions on secret rotation
...
Closes #495278
Turns out that the documentation about secrets[1] is actually a little
misleading and I let myself fool by it: the rotation is about moving
to envelope-based encryption, i.e. a way where a key is generated and
stored in the DB that is encrypted with `secret_key` and used to
decrypt actual secrets.
In fact, there's no official way to rotate this on a running instance.
The reason this wasn't noticed so far is because I'd expect most people
to
* use provisioning to set up their datasources (or)
* talk to a local Prometheus (or else) API that is exposed on the
machine only and thus no authentication is needed if you trust that
machine enough.
On top, the encryption is unauthenticated so only changing secret_key
appears to work, but uses gibberish as password for authentication
against data-sources.
So effectively there are two ways to migrate (short of a fresh setup):
* keep the old secret and call it a day. IMHO this is fine if the setup
is e.g. a single-node machine where both the secret and the DB are on
the same file-system, in the same data-dir and protected by the same
permissions.
* use a 3rd-party rotation tool[2]. I ensured by hand on a test-instance
that following the instructions works and you end up with a freshly
generated secret_key that you need to deploy. With that key deployed,
the credentials still decrypt to the same plaintext.
[1] https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-database-encryption/#envelope-encryption
[2] https://github.com/erooke/grafana-secretkey-rotation-tool/tree/d9dc788902fa5185e15cb15ce6129f7237ab6138
2026-03-08 19:00:21 +01:00
Gaétan Lepage and GitHub
df6c2ecdae
presenterm: Drop Sixel dependency ( #491385 )
2026-03-08 17:53:02 +00:00
R. Ryantm
d7e66ca8c2
python3Packages.moyopy: 0.7.7 -> 0.7.9
2026-03-08 17:48:01 +00:00
Yureka and GitHub
8102001e99
arm-trusted-firmware: 2.13.0 -> 2.14.0 ( #490009 )
2026-03-08 17:45:47 +00:00
dotlambda and GitHub
ce6582e170
python3Packages.protoletariat: mark broken ( #496795 )
2026-03-08 17:42:58 +00:00
dotlambda and GitHub
d8e78b04db
bitwarden-cli: 2026.1.0 -> 2026.2.0 ( #496989 )
2026-03-08 17:42:54 +00:00
Doron Behar and GitHub
a1082302d1
kdePackages.qtutilities: 6.19.1 -> 6.20.0 ( #497510 )
2026-03-08 17:42:12 +00:00
Doron Behar and GitHub
6009532428
cpp-utilities: 5.32.1 -> 5.33.0 ( #497601 )
2026-03-08 17:40:48 +00:00
Gaétan Lepage and GitHub
189f51a413
faiss: fix hash ( #497905 )
2026-03-08 17:39:09 +00:00
Pol Dellaiera and GitHub
15d7ec4d5b
open-webui: 0.8.8-> 0.8.9 ( #497902 )
2026-03-08 17:35:20 +00:00
R. Ryantm
366a2a06f5
go-ios: 1.0.202 -> 1.0.204
2026-03-08 17:22:21 +00:00
Alexandre Esteves and GitHub
f8f1650fce
wasmtime: 41.0.3 -> 42.0.1 ( #495470 )
2026-03-08 17:17:33 +00:00
R. Ryantm
b597d2ad12
vscode-extensions.k--kato.intellij-idea-keybindings: 1.7.6 -> 1.7.7
2026-03-08 17:01:45 +00:00
Michael Daniels and GitHub
22e2bf7717
python3Packages.python-gitlab: 7.1.0 -> 8.1.0 ( #449872 )
2026-03-08 16:57:40 +00:00
dish
676f0cc40c
nixos/coredns: update vendorHash
...
Must be updated every time CoreDNS is updated
2026-03-08 12:57:23 -04:00
Phillip
2e659c5359
raygui: fix raygui.pc Cflags
2026-03-08 17:52:37 +01:00
Sandro and GitHub
fc3965fd8b
home-assistant-custom-components.alphaess: ini at 0.7.3 ( #476619 )
2026-03-08 16:51:15 +00:00
dish
a80c6030e4
coredns: 1.14.1 -> 1.14.2
2026-03-08 12:50:46 -04:00
Sandro and GitHub
25a3452d36
tuxbox: init at 3.0.1 ( #490382 )
2026-03-08 16:46:40 +00:00