| Commit message (Expand) | Author | Age | Files | Lines |
| * | viceroy: 0.9.3 -> 0.9.4•••(cherry picked from commit 70756b6b02095c9de6a911afa1a79cc0c6df5292)
origin/backport-290679-to-release-23.11 | Rafael Fernández López | 2024-02-23 | 1 | -3/+3 |
| * | Merge pull request #290699 from NixOS/backport-289832-to-release-23.11•••[Backport release-23.11] floorp: 11.9.0 -> 11.10.2 | Martin Weinelt | 2024-02-23 | 1 | -5/+12 |
| |\ |
|
| | * | floorp: 11.9.0 -> 11.10.2•••Signed-off-by: Christoph Heiss <christoph@c8h4.io>
(cherry picked from commit 66ff6548d0805de1d1de59ff570bf69759abec91)
| Christoph Heiss | 2024-02-22 | 1 | -3/+3 |
| | * | floorp: add meta.mainProgram•••Signed-off-by: Christoph Heiss <christoph@c8h4.io>
(cherry picked from commit edd5e08ac4e13cb9f2fc6e3c055e361601af50f3)
| Christoph Heiss | 2024-02-22 | 1 | -0/+1 |
| | * | floorp: align with upstream build configuration more closely•••Signed-off-by: Christoph Heiss <christoph@c8h4.io>
(cherry picked from commit d79d0ea08be4b0bc1b6f02c987f13f9f48d0fbad)
| Christoph Heiss | 2024-02-22 | 1 | -1/+7 |
| | * | floorp: use `branding` parameter of `buildMozillaMach`•••Signed-off-by: Christoph Heiss <christoph@c8h4.io>
(cherry picked from commit ff516bb178e3c3ba73f1043003979466540e757e)
| Christoph Heiss | 2024-02-22 | 1 | -1/+1 |
| * | | Merge pull request #290690 from etu/fixes-for-myself-backport•••[23.11] Fixes for myself | Elis Hirwing | 2024-02-22 | 3 | -9/+8 |
| |\ \
| |/
|/| |
|
| | * | CODEOWNERS: Remove myself as codeowner from PHP•••(cherry picked from commit d216170770635164e272ff8991be428e17e0a606)
| Elis Hirwing | 2024-02-22 | 1 | -7/+7 |
| | * | maintainers: Remove myself from the PHP team•••(cherry picked from commit 0eac6bf6793576c01cdd3f4156585e9c4a06674d)
| Elis Hirwing | 2024-02-22 | 1 | -1/+0 |
| | * | maintainers: Set the correct matrix handle•••(cherry picked from commit 8d222b4cdca1cd1116612e0d291c4884470f4d8a)
| Elis Hirwing | 2024-02-22 | 1 | -1/+1 |
| * | | Merge pull request #290648 from NixOS/backport-289494-to-release-23.11•••[Backport release-23.11] discord-ptb: 0.0.67 -> 0.0.69 | Artturi | 2024-02-22 | 1 | -2/+2 |
| |\ \ |
|
| | * | | discord-ptb: 0.0.67 -> 0.0.69•••(cherry picked from commit 982f791d34a176c502632922a267f44a1f7fa822)
| R. Ryantm | 2024-02-22 | 1 | -2/+2 |
| * | | | Merge pull request #290646 from NixOS/backport-287348-to-release-23.11•••[Backport release-23.11] nixos/prometheus-fastly-exporter: fix runtime environment, refactor, make things prettier | Martin Weinelt | 2024-02-22 | 2 | -24/+46 |
| |\ \ \ |
|
| | * | | | prometheus-fastly-exporter: refactor•••- Update source repo, it was migrated to fastly
- Hook up the NixOS test
- Add meta.mainProgram
(cherry picked from commit d679c69737ffc14b8d00339fa52ec45ae5fce9cb)
| Martin Weinelt | 2024-02-22 | 1 | -5/+14 |
| | * | | | nixos/prometheus-fastly-exporter: fix runtime environment•••- Make the token a required option
- Drop the proto from the listen parameter
- Use systemd credentials to pass the token file
- Drop debug flag, use extraArgs instead
- Actually hook up extraArgs
- Escape shell arguments
- Drop overly broad `with lib` statement
(cherry picked from commit a43d9cd69a2d02561217b56415edc95a9366a09e)
| Martin Weinelt | 2024-02-22 | 1 | -19/+32 |
| | |/ / |
|
| * | | | Merge pull request #290453 from NixOS/backport-290325-to-release-23.11•••[Backport release-23.11] chromium: 121.0.6167.184 -> 122.0.6261.57, chromedriver: 121.0.6167.85 -> 122.0.6261.57 | Emily | 2024-02-22 | 3 | -11/+17 |
| |\ \ \
| |/ /
|/| | |
|
| | * | | chromium: unbreak overwritten `gn`•••Backport of 6de0b4ce3f0ef1aa8a298a7af0bef36b02e2f8c5 (more of less).
Since this hasn't been backported before branch-off and prevents
building our overwritten gn on 23.11 with gn 2024-01-22 (chromium M122).
| emilylange | 2024-02-21 | 1 | -0/+6 |
| | * | | chromedriver: fix src download link•••Upstream migrated to a new bucket for their chromedriver releases.
See https://github.com/GoogleChromeLabs/chrome-for-testing/commit/dd90f461197402d01208a690b58f8a7776db6e7c
Our chromium/update.py (and by proxy upstream-info.nix) does not need to
by changed in any way, since it already uses the new API endpoint since
65e801cb43a4ec4d9d7445fc42b9c51d3c1cad81 (which already uses the new
bucket URL).
(cherry picked from commit 46c7c8a7774fdc697c32e3ecbdffb3c5014fea91)
| emilylange | 2024-02-21 | 1 | -1/+1 |
| | * | | chromedriver: 121.0.6167.85 -> 122.0.6261.57•••(cherry picked from commit c563706a164839efcd3b0a14e8584cffc6a261e4)
| emilylange | 2024-02-21 | 1 | -4/+4 |
| | * | | chromium: 121.0.6167.184 -> 122.0.6261.57•••https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
This update includes 12 security fixes.
CVEs:
CVE-2024-1669 CVE-2024-1670 CVE-2024-1671 CVE-2024-1672 CVE-2024-1673
CVE-2024-1674 CVE-2024-1675 CVE-2024-1676
(cherry picked from commit 0c3aa7fbd1b9c26eace2e67513d018a81fbc046f)
| emilylange | 2024-02-21 | 1 | -6/+6 |
| * | | | Merge pull request #290635 from NixOS/backport-290521-to-release-23.11•••[Backport release-23.11] cargo-machete: 0.6.0 -> 0.6.1 | Nick Cao | 2024-02-22 | 1 | -3/+3 |
| |\ \ \ |
|
| | * | | | cargo-machete: 0.6.0 -> 0.6.1•••(cherry picked from commit f79b0ec6115e365f4fbbe6297906de5216eae79f)
| R. Ryantm | 2024-02-22 | 1 | -3/+3 |
| |/ / / |
|
| * | | | Merge pull request #290504 from NixOS/backport-290484-to-release-23.11•••[Backport release-23.11] fastly: 10.8.2 -> 10.8.3 | Nick Cao | 2024-02-22 | 1 | -3/+3 |
| |\ \ \ |
|
| | * | | | fastly: 10.8.2 -> 10.8.3•••(cherry picked from commit 900c4d849c698345cfdae06b8ff58fd5f79a24ba)
| R. Ryantm | 2024-02-21 | 1 | -3/+3 |
| * | | | | Merge pull request #290407 from NixOS/backport-275438-to-release-23.11•••[Backport release-23.11] python311Packages.rlax: fix build | Nick Cao | 2024-02-22 | 3 | -43/+75 |
| |\ \ \ \ |
|
| | * | | | | python311Packages.rlax: fix build•••(cherry picked from commit f1166a3501bf2d6ae773b971e82a770878811cc6)
| Gaetan Lepage | 2024-02-21 | 1 | -14/+28 |
| | * | | | | python311Packages.plotnine: 0.12.3 -> 0.12.4•••Changelog: https://github.com/has2k1/plotnine/releases/tag/v0.12.4
(cherry picked from commit 30535095d529b6365cb0c72b7d052338c4e6d3c5)
| Gaetan Lepage | 2024-02-21 | 1 | -25/+43 |
| | * | | | | python311Packages.mizani: 0.10.0 -> 0.9.3•••Downgrade as latest version plotnine (0.12.4) is not compatible with mizani==0.10.0
(cherry picked from commit f3ca2ad4f108f9aed08fae8a4c1c4480f66a43bb)
| Gaetan Lepage | 2024-02-21 | 1 | -4/+4 |
| * | | | | | Merge pull request #290590 from NixOS/backport-290568-to-release-23.11•••[Backport release-23.11] uget: add meta.mainProgram | Pol Dellaiera | 2024-02-22 | 1 | -0/+1 |
| |\ \ \ \ \ |
|
| | * | | | | | uget: add meta.mainProgram•••(cherry picked from commit f1fd17fb89fd515039ee6a27984c9a6968d2dae5)
| Yueh-Shun Li | 2024-02-22 | 1 | -0/+1 |
| |/ / / / / |
|
| * | | | | | Merge pull request #290503 from NixOS/backport-290360-to-release-23.11•••[Backport release-23.11] Linux Hardened Kernels 2024-02-20 | Fabián Heredia Montiel | 2024-02-21 | 1 | -15/+15 |
| |\ \ \ \ \
| |_|/ / /
|/| | | | |
|
| | * | | | | linux/hardened/patches/6.7: 6.7.4-hardened1 -> 6.7.5-hardened1•••(cherry picked from commit 52675a11673de4715f297ae23bd3e4d9f9991b3b)
| Fabián Heredia Montiel | 2024-02-21 | 1 | -5/+5 |
| | * | | | | linux/hardened/patches/6.6: 6.6.16-hardened1 -> 6.6.17-hardened1•••(cherry picked from commit a86d4e5a19d02100f1c8dd5b8e091cba926441d4)
| Fabián Heredia Montiel | 2024-02-21 | 1 | -5/+5 |
| | * | | | | linux/hardened/patches/6.1: 6.1.77-hardened1 -> 6.1.78-hardened1•••(cherry picked from commit 10a1269f815224b27bd04ff49122db2f0e5415cf)
| Fabián Heredia Montiel | 2024-02-21 | 1 | -5/+5 |
| |/ / / / |
|
| * | | | | Merge pull request #286339 from teutat3s/backport-284685-to-release-23.11•••[23.11] nextcloudPackages: update, nextcloud-notify_push: 0.6.7 -> 0.6.9 | Maximilian Bosch | 2024-02-21 | 5 | -91/+70 |
| |\ \ \ \ |
|
| | * | | | | nextcloud-notify_push: 0.6.7 -> 0.6.9•••Diff: https://github.com/nextcloud/notify_push/compare/v0.6.7...v0.6.9
(cherry picked from commit 15dce9735a6140d5a7d59888698a6d3cd6512376)
| Robert Schütz | 2024-02-04 | 1 | -4/+4 |
| | * | | | | nextcloudPackages.apps.keeweb: drop•••According to https://apps.nextcloud.com/apps/keeweb
> KeeWeb itself not actively maintained since 2021 and may contain
> security issues.
(cherry picked from commit bcc7e4cd4ccb4745940a2722093f6e579e1595fe)
| Robert Schütz | 2024-02-04 | 4 | -31/+0 |
| | * | | | | nextcloudPackages: update•••(cherry picked from commit b4c743066d9beb6eab5283a6b36f5348fe27885f)
| Robert Schütz | 2024-02-04 | 3 | -62/+72 |
| * | | | | | Merge pull request #290443 from NixOS/backport-290397-to-release-23.11•••[Backport release-23.11] renode-dts2repl: unstable-2024-02-16 -> unstable-2024-02-19 | Nick Cao | 2024-02-21 | 1 | -3/+3 |
| |\ \ \ \ \
| |_|_|/ /
|/| | | | |
|
| | * | | | | renode-dts2repl: unstable-2024-02-16 -> unstable-2024-02-19•••(cherry picked from commit 3a768f970c8115683b47f22cb77460a6e38baa77)
| R. Ryantm | 2024-02-21 | 1 | -3/+3 |
| | | |/ /
| |/| | |
|
| * | | | | Merge pull request #290429 from NixOS/backport-287819-to-release-23.11•••[Backport release-23.11] nixos/nextcloud: add regression test for not delivering code anymore | Nick Cao | 2024-02-21 | 1 | -1/+3 |
| |\ \ \ \ |
|
| | * | | | | nixos/nextcloud: add regression test for not delivering code anymore•••PR #277382 didn't fix just an issue with .mjs files for the `forms` app,
but an underlying, more problematic issue: for `/nix-apps` &
`/store-apps`, the fcgi config for PHP and the block for assets were
never reached.
That meant that e.g. `/nix-apps/notes/lib/AppInfo/Application.php`
returned the PHP source code as text/plain. Considering that there was
never a fundamental change to how this config's structure, I'm pretty
sure that the issue was pretty much there since the module exists.
After consulting the NixOS security team we agreed that this is most
likely harmless because you'd have to use private apps with secrets in
the raw PHP code of said app. However, this is still problematic because
one important assumption - that PHP code is never sent to the browser -
is broken which is why we decided on not mentioning this impact in the
previous PR from December 2023.
To make sure that we don't regress our nginx config, I decided to add
the reproducer which fails on 8bbbb228b4f6c0ecbd746296a67be7723b0851b9
as testcase to our integration tests.
(cherry picked from commit 37d6961f33897b0c1cfc1872c115b6e3aeb9c5ca)
| Maximilian Bosch | 2024-02-21 | 1 | -1/+3 |
| | |/ / / |
|
| * | | | | Merge pull request #290401 from NixOS/backport-285898-to-release-23.11•••[Backport release-23.11] storeBackup: 3.5 -> 3.5.2, apply patch for CVE-2020-7040 | Nick Cao | 2024-02-21 | 2 | -3/+32 |
| |\ \ \ \ |
|
| | * | | | | storeBackup: 3.5 -> 3.5.2, apply patch for CVE-2020-7040•••Changelog:
```
version 3.5.1
storeBackup.pl
- linkToRecent didn't work when used for the very first time
in a series
- added option suppressInfo with key readCheckSums
- changed the order of execution:
write backup -> sync -> write 'finished' -> write linkToRecent
-> delete old backups -> start postcommand
storeBackupMergeIsolatedBackup.pl
- added option --move
storeBackupSearch.pl
- option 'backupDir' didn't work (normally not needed)
lib/fileDir.pl
- more detailed error messages when copying of a file does
not succeed
lib/checkParam2.pl
- overwriting settings from config file via commandline didn't
work for options with parameters
storeBackup.pl, storeBackupUpdateBackup.pl, linkToDirs.pl
- added option --maxHardLinks
----------------------------
version 3.5.2
storeBackup.pl
- option --maxHardLinks was not configurable in the
configuration file
- pipe buffering was changed to new needs since
about kernel 5.13 (relevant only if you backup devices)
storeBackupRecover.pl
- restoring of devices (eg. sda) didn't work because of
bug in option checkDevicesDir0 in storeBackup.pl when
using more than one directory level like "Devs/Sticks"
storeBackupUpdateBackup.pl
- added log file entry about number of WARNINGs and
ERRORs happend (like at storeBackup.pl)
```
(cherry picked from commit d10d3fe5d6dcaae5099e190f4de1a49355889f19)
| Thomas Gerbet | 2024-02-21 | 2 | -3/+32 |
| | |/ / / |
|
| * | | | | Merge pull request #290395 from NixOS/backport-290314-to-release-23.11•••[Backport release-23.11] wasmtime: 17.0.1 -> 18.0.1 | Nick Cao | 2024-02-21 | 1 | -3/+3 |
| |\ \ \ \ |
|
| | * | | | | wasmtime: 17.0.1 -> 18.0.1•••(cherry picked from commit 1b109bf79a8daaf6e235d6e41f218fe3402bd78f)
| R. Ryantm | 2024-02-21 | 1 | -3/+3 |
| * | | | | | Merge pull request #290324 from NixOS/backport-290013-to-release-23.11•••[Backport release-23.11] element-desktop: 1.11.57 -> 1.11.58 | Nick Cao | 2024-02-21 | 1 | -5/+5 |
| |\ \ \ \ \
| |_|/ / /
|/| | | | |
|
| | * | | | | element-desktop: 1.11.57 -> 1.11.58•••https://github.com/element-hq/element-desktop/releases/tag/v1.11.58
(cherry picked from commit 6048de43353b9d654679686305f24e62e19809a1)
| teutat3s | 2024-02-21 | 1 | -5/+5 |
| * | | | | | pleroma: 2.6.1 -> 2.6.2•••https://pleroma.social/announcements/2024/02/20/pleroma-security-release-2.6.2/
(cherry picked from commit 75ea7a8741a276922e5b9b0ee56e6bea64dbb396)
| Yaya | 2024-02-21 | 1 | -4/+4 |
| | |/ / /
|/| | | |
|
| * | | | | Merge pull request #290256 from NixOS/backport-288124-to-release-23.11•••[Backport release-23.11] dns2tcp: init at 0.5.2 | a-n-n-a-l-e-e | 2024-02-20 | 1 | -0/+40 |
| |\ \ \ \ |
|