summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* chromium: 122.0.6261.69 -> 122.0.6261.94•••https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_27.html This update includes 4 security fixes. (cherry picked from commit fdf83ea2badb17cb9a198e971a09c34d9638c6f7) origin/backport-291931-to-release-23.11emilylange2024-02-281-3/+3
* chromedriver: 122.0.6261.69 -> 122.0.6261.94•••(cherry picked from commit e7a302b9aab79bfc75df08558fd0b0ce70358a59) emilylange2024-02-281-4/+4
* Merge pull request #292048 from NixOS/backport-291756-to-release-23.11•••[Backport release-23.11] floorp: 11.10.2 -> 11.10.5Martin Weinelt2024-02-281-2/+2
|\
| * floorp: 11.10.2 -> 11.10.5•••Signed-off-by: Christoph Heiss <christoph@c8h4.io> (cherry picked from commit 5d7e7bfc9d3f647ab768e76ff31dc7d447e187fd) Christoph Heiss2024-02-281-2/+2
* | Merge pull request #287489 from NixOS/backport-276332-to-release-23.11•••[Backport release-23.11] _1password: 2.23.0 -> 2.24.0Mario Rodas2024-02-281-5/+5
|\ \ | |/ |/|
| * _1password: 2.23.0 -> 2.24.0•••Changelog: https://app-updates.agilebits.com/product_history/CLI2#v2240001 (cherry picked from commit 5d73f1b783744b6396d44a087b461f54a6188b00) origin/backport-276332-to-release-23.11Mario Rodas2024-02-091-5/+5
* | Merge pull request #291948 from NixOS/backport-289780-to-release-23.11•••[Backport release-23.11] dc3dd: remove darwin supporta-n-n-a-l-e-e2024-02-281-4/+2
|\ \
| * | dc3dd: remove darwin support•••(cherry picked from commit 81f4ba14c530aab952780ccd399068d460c42ec3) D3vil0p3r2024-02-281-4/+2
* | | Merge pull request #289922 from NixOS/backport-281520-to-release-23.11•••[Backport release-23.11] dockerTools: Fix chown in fakeRootCommandsRobert Hensing2024-02-281-0/+18
|\ \ \
| * | | dockerTools: Add chown test•••proot's --root-id "allows" chown only in the sense that it makes it succeed vacuously, i.e. a no-op. This is undesired if the goal is to actually create a layer with some files owned by different users. Fortunately, fakeroot does allow persistence of emulated file owners, and it is possible to combine fakeroot with proot, so replace proot --root-id with fakeroot to do so. This was fixed recently in d538fefb62a2dc0e40235606bb02615b47d02583, so this commit just adds a test. (cherry picked from commit 84b5bcae2667942984b5e8ee3ae9b14f48f7d0a6) origin/backport-281520-to-release-23.11WxNzEMof2024-02-191-0/+18
* | | | Merge pull request #288893 from NixOS/backport-271976-to-release-23.11•••[Backport release-23.11] nixos/dockerTools: fix includeStorePaths when enableFakechrootRobert Hensing2024-02-283-0/+30
|\ \ \ \
| * | | | nixosTests.docker-tools: Use both code paths in includeStorePath test•••(cherry picked from commit 1f9e86f31462b395d77151469a53543a94e46c36) origin/backport-271976-to-release-23.11Robert Hensing2024-02-142-0/+26
| * | | | nixos/dockerTools: fix includeStorePaths when enableFakechroot•••After #268458, when setting `enableFakechroot = true` and `includeStorePaths = false`, some of the store paths were getting included into the image anyway, thru `bind-paths`. This resulted in unexpectedly large images. Now, the images will not contain any store paths under those circumstances. (cherry picked from commit 8353fad13da8983b95c47426a355e044099cee91) Robert K. Bell2024-02-143-0/+4
* | | | | Merge pull request #290724 from rafameou/wayland-pipewire-idle-inhibit/backport•••[23.11] wayland-pipewire-idle-inhibit: init at 0.4.5Nick Cao2024-02-272-0/+48
|\ \ \ \ \
| * | | | | wayland-pipewire-idle-inhibit: use rustPlatform.bindgenHook, fix cross compil...•••(cherry picked from commit dfa08b768c23fe5fa21383fa190f05714cc72d7b) Nick Cao2024-02-271-6/+2
| * | | | | wayland-pipewire-idle-inhibit: init at 0.4.5•••(cherry picked from commit b79fd410c38349c8761d832761bb1e4d1af1b358) Rafael Mazzutti2024-02-221-0/+46
| * | | | | maintainers: add rafameou•••(cherry picked from commit e3f9c0a0b8ff96364ffa927a21dc52ab29cc10d2) Rafael Mazzutti2024-02-221-0/+6
* | | | | | Merge pull request #291957 from adamcstephens/ovmf/23.11-csm•••[Release-23.11] OVMF/OVMFFull: drop CSM supportAdam C. Stephens2024-02-272-4/+1
|\ \ \ \ \ \
| * | | | | | OVMF/OVMFFull: drop CSM support•••Upstream dropped CSM from the previous release. Unfortunately, this release (edk2 202402) includes a number of critical security fixes and it was backported to protect our users. This may break some users, but I think the benefits of better security outweigh some earlier inconvenience for them. They will have to find an alternative in few months anyway. Adam Stephens2024-02-272-4/+1
* | | | | | | Merge pull request #291954 from NixOS/backport-291933-to-release-23.11•••[Backport release-23.11] lib.fileset: Fix tests on Darwin, more POSIXRobert Hensing2024-02-281-48/+52
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | |
| * | | | | | lib.fileset: Fix tests on Darwin, more POSIX•••This was found when trying to run the fileset tests on Darwin (https://github.com/NixOS/nix/pull/9546#issuecomment-1967409445), which mysteriously fail on Darwin: test case at lib/fileset/tests.sh:342 failed: toSource { root = "/nix/store/foobar"; fileset = ./.; } should have errored with this regex pattern: lib.fileset.toSource: `root` \(/nix/store/foobar\) is a string-like value, but it should be a path instead. \s*Paths in strings are not supported by `lib.fileset`, use `lib.sources` or derivations instead. but this was the actual error: error: lib.fileset.toSource: `root` (/nix/store/foobar) is a string-like value, but it should be a path instead. Paths in strings are not supported by `lib.fileset`, use `lib.sources` or derivations instead. After dissecting this, I find out that apparently \s works on Linux, but not on Darwin for some reason! From the bash source code, it looks like <regex.h> with `REG_EXTENDED` is used for all platforms the same, so there's nothing odd there. It's almost impossible to know where <regex.h> comes from, but it looks to be a POSIX thing. So after digging through the almost impossible to find POSIX specifications (https://pubs.opengroup.org/onlinepubs/007908799/xbd/re.html#tag_007_003_005), I can indeed confirm that there's no mention of \s or the like! _However_, there is a mention of `[[:blank:]]`, so we'll use that instead. (cherry picked from commit 34295941145b2df1b6c3a9b36c50ad2982227b2f) Silvan Mosberger2024-02-281-48/+52
|/ / / / / /
* | | | | | Merge pull request #291841 from NixOS/backport-291795-to-release-23.11•••[Backport release-23.11] snagboot: 1.2 -> 1.3OTABI Tomoya2024-02-281-3/+2
|\ \ \ \ \ \ | |_|_|_|/ / |/| | | | |
| * | | | | snagboot: 1.2 -> 1.3•••Dropped hid[1] from nativeBuildInputs. Thanks for @natsukium reporting this required change. 1. https://github.com/bootlin/snagboot/commit/bb767fee227030bcd7a1a6bd901e4329d01121a1 Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> (cherry picked from commit a2f4aa4073bc37e1654d60829eef824b3962daa0) Otavio Salvador2024-02-271-3/+2
* | | | | | apt-mirror: init at 0.5.4•••(cherry picked from commit c6e364758ca42ba22f56cd183f2d82321ac2b014) arthsmn2024-02-271-0/+46
* | | | | | libtiff: drop maintainership•••When I added myself as a maintainer here, I thought it would be way less work than it turns out to be, because I didn't realise how vulnerability-prone libtiff is. I basically haven't been maintaining it at all, so let's reflect reality. (cherry picked from commit 411fd474e120d9d6f7640c1f3894cfd665866320) Alyssa Ross2024-02-271-1/+0
* | | | | | git-remote-hg.meta.maintainers: drop myself•••I use git-cinnabar now. (cherry picked from commit 873a4ad363df2dca599cec5838e35c01c0419b8c) Alyssa Ross2024-02-271-1/+1
* | | | | | slack-cli.meta.maintainers: drop myself•••(cherry picked from commit 3162ba9f28814574068a7175ac1eb8358906b54d) Alyssa Ross2024-02-271-1/+1
* | | | | | Merge pull request #291779 from NixOS/backport-291643-to-release-23.11•••[Backport release-23.11] github-runner: 2.313.0 -> 2.314.0Nick Cao2024-02-271-2/+2
|\ \ \ \ \ \ | |/ / / / / |/| | | | |
| * | | | | github-runner: 2.313.0 -> 2.314.0•••(cherry picked from commit 45f5bccce547aec88a43acba6344bf96df7bba26) Shea Levy2024-02-271-2/+2
* | | | | | linux_latest-libre: 19489 -> 19491•••(cherry picked from commit 1596dc1b7ac26b9efceefedc57dcc38c4d4de2df) Alyssa Ross2024-02-271-2/+2
* | | | | | linux_testing: 6.8-rc5 -> 6.8-rc6•••(cherry picked from commit c63ac9d4335bc253e0b0fa79b2ed6ad6f41ec808) Alyssa Ross2024-02-271-2/+2
|/ / / / /
* | | | | Merge #291607: aspellDicts: extend cp1252 workaround to all platforms•••...into release-23.11 Hydra still affected on 23.11: https://hydra.nixos.org/eval/1804567?filter=aspellDicts#tabs-aborted Vladimír Čunát2024-02-271-2/+3
|\ \ \ \ \
| * | | | | aspellDicts: extend cp1252 workaround to all platforms•••(cherry picked from commit 2c93b5fb8b61a0ab1a1806a12da1bf794eb2856a) K9002024-02-261-2/+3
* | | | | | Merge pull request #291636 from flyingcircusio/23.11-matomo-4.16.1•••[23.11] matomo: 4.15.1 -> 4.16.1Leona Maroni2024-02-271-2/+2
|\ \ \ \ \ \
| * | | | | | matomo: 4.16.0 -> 4.16.1•••- https://matomo.org/changelog/matomo-4-16-1/ (cherry picked from commit 744013228595ac1174a1fae196428ec9deb656c1) Tobias Stenzel2024-02-261-2/+2
| * | | | | | matomo: 4.15.1 -> 4.16.0•••https://matomo.org/changelog/matomo-4-16-0/ (cherry picked from commit 01eba3bcbaa9a60f4b9ed4a325ccd809dda668c6) Tobias Stenzel2024-02-261-2/+2
| |/ / / / /
* | | | | | Merge pull request #291658 from NixOS/backport-288677-to-release-23.11•••[Backport release-23.11] lib.fileset.toList: initSilvan Mosberger2024-02-263-2/+82
|\ \ \ \ \ \
| * | | | | | lib.fileset.toList: init•••(cherry picked from commit e3a6e380337820d17c154c54eaf50ab95bba5c0d) Silvan Mosberger2024-02-263-2/+82
|/ / / / / /
* | | | | | Merge pull request #291054 from NixOS/backport-291000-to-release-23.11•••[Backport release-23.11] edk2: 202311 -> 202402Adam C. Stephens2024-02-261-2/+2
|\ \ \ \ \ \ | |/ / / / / |/| | | | |
| * | | | | edk2: 202311 -> 202402•••Fixes CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2022-36763, CVE-2022-36764 and CVE-2022-36765. GHSA-hc6x-cw6p-gj7h https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html GHSA-4hcq-p8q8-hj8j Changelog: https://github.com/tianocore/edk2/releases/tag/edk2-stable202402 (cherry picked from commit 60731f2750a2251cbfe9a1259eb3275a03020a3b) origin/backport-291000-to-release-23.11Thomas Gerbet2024-02-241-2/+2
* | | | | | Merge pull request #291576 from NixOS/backport-291463-to-release-23.11•••[Backport release-23.11] packet-sd: fix chmod application orderMartin Weinelt2024-02-261-0/+5
|\ \ \ \ \ \
| * | | | | | packet-sd: fix chmod application order•••(cherry picked from commit 5e721403ec713b20a3e7e4c17d7adeadb6f4cb95) Martin Weinelt2024-02-261-0/+5
* | | | | | | Merge pull request #291474 from NixOS/backport-291449-to-release-23.11Franz Pletz2024-02-261-2/+2
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | |
| * | | | | | whois: 5.5.20 -> 5.5.21•••Changes: https://github.com/rfc1036/whois/compare/v5.5.20...v5.5.21 (cherry picked from commit 26c37fca28c97d0431b403f4d6ba2bbdc39c0b3c) Sergei Trofimovich2024-02-261-2/+2
* | | | | | | yara: make patch unconditional•••(cherry picked from commit 5e84b19d911434d206bee21259afc60ce3527b00) Alyssa Ross2024-02-261-2/+1
* | | | | | | resholve: oildev: disable libc tests unconditionally•••There's no point testing the behaviour of libc on some platforms and not others if we intend to run on all of them. (cherry picked from commit a79f4e520e36174a6616ad92b99771c14732d065) Alyssa Ross2024-02-261-1/+0
* | | | | | | linux/hardened/patches/6.7: 6.7.5-hardened1 -> 6.7.6-hardened1•••(cherry picked from commit e67a2aaf19f432d0b7c7ac2129f47385a89b3011) Fabián Heredia Montiel2024-02-261-5/+5
* | | | | | | linux/hardened/patches/6.6: 6.6.17-hardened1 -> 6.6.18-hardened1•••(cherry picked from commit 990fbf3bce9b5d8c621e7e43c3fff65286cdf3e0) Fabián Heredia Montiel2024-02-261-5/+5
* | | | | | | linux/hardened/patches/6.1: 6.1.78-hardened1 -> 6.1.79-hardened1•••(cherry picked from commit 6183eb804d8cba59e4c9bf24aeb12ab28d8359f8) Fabián Heredia Montiel2024-02-261-5/+5
* | | | | | | linux/hardened/patches/5.4: 5.4.268-hardened1 -> 5.4.269-hardened1•••(cherry picked from commit 58be35f5c3503152880d6dae3c46708c40394208) Fabián Heredia Montiel2024-02-261-5/+5