Commit Graph
960614 Commits
Author SHA1 Message Date
Robert Sliwinski ef8e8232e9 bbot: Add robsliwi as maintainer 2026-03-08 20:56:53 +01:00
Robert Sliwinski c665740dbb bbot: add websockets to pythonRelaxDeps 2026-03-08 20:55:46 +01:00
nixpkgs-ci[bot]andGitHub fcc709bc9e tinyauth: 5.0.1 -> 5.0.2 (#497986) 2026-03-08 19:19:40 +00:00
Marcus RambergandGitHub 283bb24fce pocket-id: 2.3.0 -> 2.4.0 (#497928) 2026-03-08 19:19:14 +00:00
Maximilian BoschandGitHub b8893e2c6b nixos/grafana: update instructions on secret rotation (#497976) 2026-03-08 19:10:14 +00:00
Luna NovaandGitHub a1a5d8812b twemoji-color-font-src: svgo from main package set instead of nodePackages alias (#497988) 2026-03-08 19:09:30 +00:00
Luna Nova 8ba3e73c4c twemoji-color-font-src: svgo from main package set instead of nodePackages alias
Fixes: 1f47317b58 ("twemoji-color-font-src: init at 15.1.0")
2026-03-08 11:51:34 -07:00
Cosima NeidahlandGitHub c583bccdf5 vgmtools: 0.1-unstable-2026-02-23 -> 0.1-unstable-2026-02-26 (#496785) 2026-03-08 18:47:56 +00:00
R. Ryantm ffc8f9a345 tinyauth: 5.0.1 -> 5.0.2 2026-03-08 18:47:08 +00:00
Doron BeharandGitHub 9507db197b imapfilter: 2.8.3 -> 2.8.4 (#497890) 2026-03-08 18:37:54 +00:00
Cosima NeidahlandGitHub 4c086ad81f lomiri.biometryd: 0.3.3 -> 0.4.0 (#495196) 2026-03-08 18:33:46 +00:00
nixpkgs-ci[bot]andGitHub e9b5a97133 firecracker: 1.14.1 -> 1.14.2 (#496788) 2026-03-08 18:28:14 +00:00
nixpkgs-ci[bot]andGitHub d009985cb6 vault: 1.21.2 -> 1.21.4 (#491550) 2026-03-08 18:28:12 +00:00
Doron BeharandGitHub d68c78c388 python3Packages.plotpy: 2.8.3 -> 2.8.4 (#496944) 2026-03-08 18:27:49 +00:00
Doron BeharandGitHub 29975dd468 mnxdom: init at 3.0 (#492826) 2026-03-08 18:26:12 +00:00
Doron BeharandGitHub a9732f7487 nixos/taskchampion-sync-server: use DynamicUser after 26.05 (#494338) 2026-03-08 18:25:26 +00:00
Doron BeharandGitHub b48f52a2d9 octavePackages: Run autoreconf hook on compiled sources (#496611) 2026-03-08 18:18:10 +00:00
nixpkgs-ci[bot]andGitHub f3f83f3659 kine: 0.14.12 -> 0.14.13 (#497418) 2026-03-08 18:06:28 +00:00
nixpkgs-ci[bot]andGitHub 80f5fa4ac6 infrastructure-agent: 1.72.6 -> 1.72.7 (#497343) 2026-03-08 18:06:27 +00:00
Gaétan LepageandGitHub 657c3f4b98 python3Packages.moyopy: 0.7.7 -> 0.7.9 (#497971) 2026-03-08 18:04:21 +00:00
Maximilian Bosch ec7dc46bfc nixos/grafana: update instructions on secret rotation
Closes #495278

Turns out that the documentation about secrets[1] is actually a little
misleading and I let myself fool by it: the rotation is about moving
to envelope-based encryption, i.e. a way where a key is generated and
stored in the DB that is encrypted with `secret_key` and used to
decrypt actual secrets.

In fact, there's no official way to rotate this on a running instance.
The reason this wasn't noticed so far is because I'd expect most people
to

* use provisioning to set up their datasources (or)
* talk to a local Prometheus (or else) API that is exposed on the
  machine only and thus no authentication is needed if you trust that
  machine enough.

On top, the encryption is unauthenticated so only changing secret_key
appears to work, but uses gibberish as password for authentication
against data-sources.

So effectively there are two ways to migrate (short of a fresh setup):

* keep the old secret and call it a day. IMHO this is fine if the setup
  is e.g. a single-node machine where both the secret and the DB are on
  the same file-system, in the same data-dir and protected by the same
  permissions.

* use a 3rd-party rotation tool[2]. I ensured by hand on a test-instance
  that following the instructions works and you end up with a freshly
  generated secret_key that you need to deploy. With that key deployed,
  the credentials still decrypt to the same plaintext.

[1] https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-database-encryption/#envelope-encryption
[2] https://github.com/erooke/grafana-secretkey-rotation-tool/tree/d9dc788902fa5185e15cb15ce6129f7237ab6138
2026-03-08 19:00:21 +01:00
Gaétan LepageandGitHub df6c2ecdae presenterm: Drop Sixel dependency (#491385) 2026-03-08 17:53:02 +00:00
R. Ryantm d7e66ca8c2 python3Packages.moyopy: 0.7.7 -> 0.7.9 2026-03-08 17:48:01 +00:00
YurekaandGitHub 8102001e99 arm-trusted-firmware: 2.13.0 -> 2.14.0 (#490009) 2026-03-08 17:45:47 +00:00
dotlambdaandGitHub ce6582e170 python3Packages.protoletariat: mark broken (#496795) 2026-03-08 17:42:58 +00:00
dotlambdaandGitHub d8e78b04db bitwarden-cli: 2026.1.0 -> 2026.2.0 (#496989) 2026-03-08 17:42:54 +00:00
Doron BeharandGitHub a1082302d1 kdePackages.qtutilities: 6.19.1 -> 6.20.0 (#497510) 2026-03-08 17:42:12 +00:00
Doron BeharandGitHub 6009532428 cpp-utilities: 5.32.1 -> 5.33.0 (#497601) 2026-03-08 17:40:48 +00:00
Gaétan LepageandGitHub 189f51a413 faiss: fix hash (#497905) 2026-03-08 17:39:09 +00:00
Pol DellaieraandGitHub 15d7ec4d5b open-webui: 0.8.8-> 0.8.9 (#497902) 2026-03-08 17:35:20 +00:00
Alexandre EstevesandGitHub f8f1650fce wasmtime: 41.0.3 -> 42.0.1 (#495470) 2026-03-08 17:17:33 +00:00
Michael DanielsandGitHub 22e2bf7717 python3Packages.python-gitlab: 7.1.0 -> 8.1.0 (#449872) 2026-03-08 16:57:40 +00:00
SandroandGitHub fc3965fd8b home-assistant-custom-components.alphaess: ini at 0.7.3 (#476619) 2026-03-08 16:51:15 +00:00
SandroandGitHub 25a3452d36 tuxbox: init at 3.0.1 (#490382) 2026-03-08 16:46:40 +00:00
dotlambdaandGitHub 0ea2bfd9c0 python3Packages.onedrive-personal-sdk: 0.1.4 -> 0.1.5 (#497941) 2026-03-08 16:39:16 +00:00
SandroandGitHub 05a2da8089 golangci-lint: 2.11.0 -> 2.11.2 (#497834) 2026-03-08 16:34:19 +00:00
SandroandGitHub ae7ce6df5f python3Packages.python-troveclient: 8.9.0 -> 8.10.0 (#497172) 2026-03-08 16:32:09 +00:00
dishandGitHub 5de717d1f4 goresym: 3.2 -> 3.3 (#497874) 2026-03-08 16:29:20 +00:00
SandroandGitHub a1db1ee6d5 qemu: move to pkgs/by-name (#456129) 2026-03-08 16:22:00 +00:00
Philipp Fruck 4ae915c901 presenterm: Remove sixel feature
Sixel is now enabled by default and implemented using `icy_sixel` crate
2026-03-08 17:21:01 +01:00
RamsesandGitHub 8ccb3c0e47 iroh-ssh: init at 0.2.9 (#488529) 2026-03-08 16:20:18 +00:00
nixpkgs-ci[bot]andGitHub 0f2394592b efm-langserver: 0.0.55 -> 0.0.56 (#497773) 2026-03-08 16:10:02 +00:00
Robert Schütz 39449a8df7 python3Packages.onedrive-personal-sdk: 0.1.4 -> 0.1.5
Diff: https://github.com/zweckj/onedrive-personal-sdk/compare/v0.1.4...v0.1.5

Changelog: https://github.com/zweckj/onedrive-personal-sdk/releases/tag/v0.1.5
2026-03-08 09:09:52 -07:00
dotlambdaandGitHub b35631d33e python3Packages.evdev: 1.9.2 -> 1.9.3 (#488222) 2026-03-08 16:08:54 +00:00
r-vdp 2e894335cd iroh-ssh: add rvdp to maintainers 2026-03-08 17:02:39 +01:00
AnthonyandGitHub 82e8821a0b protonvpn-gui: 4.14.1 -> 4.14.2 (#496941) 2026-03-08 15:58:31 +00:00
r-vdp b54068a447 iroh-ssh: 0.2.8 -> 0.2.9
Adds --relay-url and --extra-relay-url flags.
https://github.com/rustonbsd/iroh-ssh/releases/tag/0.2.9
2026-03-08 16:57:28 +01:00
r-vdp cb7f0597e7 iroh-ssh: fix eval 2026-03-08 16:57:28 +01:00
Donovan GloverandGitHub 01ed1d505e hyprlandPlugins.hypr-dynamic-cursors: 0-unstable-2025-12-28 -> 0-unstable-2026-02-23 (#495983) 2026-03-08 15:54:06 +00:00
Donovan GloverandGitHub f421b50ae7 all-the-package-names: 2.0.2363 -> 2.0.2379 (#495065) 2026-03-08 15:53:00 +00:00