| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | process-compose: 0.24.1 -> 0.28.0•••https://github.com/F1bonacc1/process-compose/releases/tag/v0.28.0
(cherry picked from commit 79017c764dcfdc634ef494e60df5ed7e13a73d1f)
origin/backport-202314-to-release-22.11 | Krisztian Szabo | 2022-12-01 | 1 | -4/+3 |
| * | Merge pull request #203832 from NixOS/backport-203729-to-release-22.11•••[Backport release-22.11] chromium: 107.0.5304.121 -> 108.0.5359.71 | Mario Rodas | 2022-11-30 | 1 | -10/+10 |
| |\ |
|
| | * | chromium: 107.0.5304.121 -> 108.0.5359.71•••https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html
This update includes 28 security fixes.
CVEs:
CVE-2022-4174 CVE-2022-4175 CVE-2022-4176 CVE-2022-4177 CVE-2022-4178
CVE-2022-4179 CVE-2022-4180 CVE-2022-4181 CVE-2022-4182 CVE-2022-4183
CVE-2022-4184 CVE-2022-4185 CVE-2022-4186 CVE-2022-4187 CVE-2022-4188
CVE-2022-4189 CVE-2022-4190 CVE-2022-4191 CVE-2022-4192 CVE-2022-4193
CVE-2022-4194 CVE-2022-4195
(cherry picked from commit 3609aedb1ef16db438ddd3e73febc4805a03314d)
| Michael Weiss | 2022-12-01 | 1 | -10/+10 |
| * | | Merge pull request #203842 from NixOS/backport-203799-to-release-22.11•••[Backport release-22.11] racket: mark as unbroken on darwin | Mario Rodas | 2022-11-30 | 1 | -1/+0 |
| |\ \ |
|
| | * | | racket: mark as unbroken on darwin•••#203587 fixed failures on darwin, so the package now builds fine
(cherry picked from commit 3b1c417a3f493850b0a6d08cdf87aa0d205050f0)
| Shadaj Laddad | 2022-12-01 | 1 | -1/+0 |
| |/ / |
|
| * | | Merge pull request #203820 from NixOS/backport-203787-to-release-22.11•••[Backport release-22.11] emacs: change `substituteInPlace` invocation to an aligning patch | Mario Rodas | 2022-11-30 | 3 | -21/+55 |
| |\ \ |
|
| | * | | emacs: change substituteInPlace invocation to an aligning patch•••Commit 97b928ce09d6034ebcb541fb548e5d4862302add in Emacs
messed up the substituteInPlace. Use a patch instead to prevent silent failures.
https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=97b928ce09d6034ebcb541fb548e5d4862302add
(cherry picked from commit 8ede52a7c16645c5299ae0349bb770c437050d26)
| Brian Leung | 2022-11-30 | 3 | -21/+55 |
| * | | | Merge pull request #203834 from NixOS/backport-203595-to-release-22.11•••[Backport release-22.11] nixos/nix-daemon: allow registry paths to be... paths | figsoda | 2022-11-30 | 1 | -0/+1 |
| |\ \ \
| |_|/
|/| | |
|
| | * | | nixos/nix-daemon: allow registry paths to be... paths•••Currently paths are handled by `types.package`, whose semantics are a
bit of a mess. In particular, it converts path values to derivations
using `toDerivation`, which will lead to problems when flake `outPath`s
become paths in https://github.com/NixOS/nix/pull/6530.
This change makes the "incompatible changes" section in the above PR
obsolete: `nix.registry.nixpkgs.flake = nixpkgs;` works as expected (the
flake is copied to the store).
(cherry picked from commit bcb5f0decca13c2bd666ee0a2b306b162117bd71)
| Naïm Favier | 2022-12-01 | 1 | -0/+1 |
| |/ / |
|
| * | | Merge pull request #203819 from primeos/chromium-backport•••[22.11] Prepare for backporting Chromium M108 | Michael Weiss | 2022-12-01 | 2 | -9/+17 |
| |\ \
| |/
|/| |
|
| | * | chromiumBeta: 108.0.5359.48 -> 108.0.5359.71 (#203681)•••* chromiumBeta: 108.0.5359.48 -> 108.0.5359.62
* chromiumBeta: 108.0.5359.62 -> 108.0.5359.71
(cherry picked from commit ed4a7faf43c35d35f144baede6644c1ae382729c)
| Michael Weiss | 2022-11-30 | 1 | -3/+3 |
| | * | chromiumBeta: Fix the build•••We do already set `system_wayland_scanner_path` to
`"${wayland}/bin/wayland-scanner"` but apparently wayland-scanner wasn't
required (anymore?) as wayland-scanner is only in the `bin` output (I have a
few ideas what could've changed but didn't bother to check as it isn't worth
the time as long as it works now).
This fixes the following build error:
```
ninja: error: '../../../../../../../../nix/store/l3y9k2x7cqzcjj9s18z7la9xqsjq6r52-wayland-1.21.0/bin/wayland-scanner', needed by 'gen/components/exo/wayland/protocol/aura-shell-protocol.c', missing and no known rule to make it
```
(cherry picked from commit 4024dedc4dc9980fc731d48be3ec67b642a9a838)
| Michael Weiss | 2022-11-30 | 1 | -0/+1 |
| | * | chromiumBeta: Fix the configuration phase•••Upstream switched use_system_libwayland to false [0] and
system_wayland_scanner_path will now only be declared if
use_system_wayland_scanner is set to true (it defaults to
use_system_libwayland) [1].
In Nixpkgs, we usually try to set use_system_* to true (i.e., we favor
system libraries over bundled/vendored ones) but in the case of Chromium
this can become difficult to maintain so we might eventually drop
`use_system_libwayland = true` again (IIRC this only caused one
incompatibility in the past though: b6b51374fc7; and f9d9864cb62 will
become relevant again when we build with the bundled libwayland).
[0]: https://source.chromium.org/chromium/chromium/src/+/b33bdfe2654df61dee900e7b85cc3fcaea6b65a3
[1]: https://source.chromium.org/chromium/chromium/src/+/272220cefa2cff8cf9273a02155454650e79e024
(cherry picked from commit 9d05d42f4d61f28207eef3492115168739cdc442)
| Michael Weiss | 2022-11-30 | 1 | -0/+7 |
| | * | chromiumDev: 109.0.5410.0 -> 109.0.5414.10•••(cherry picked from commit 6492d64628390ea421829b15e6f19626657df01d)
| Michael Weiss | 2022-11-30 | 1 | -6/+6 |
| * | | Merge pull request #203645 from NixOS/backport-203398-to-release-22.11•••[Backport release-22.11] python310Packages.snowflake-connector-python: 2.8.0 -> 2.8.2 | Robert Scott | 2022-11-30 | 2 | -5/+6 |
| |\ \ |
|
| | * | | python310Packages.snowflake-sqlalchemy: 1.4.3 -> 1.4.4•••https://github.com/snowflakedb/snowflake-sqlalchemy/blob/v1.4.4/DESCRIPTION.md
(cherry picked from commit c3a00241700de8c4c7bee20614a6f918346be66e)
| Robert Schütz | 2022-11-29 | 1 | -2/+3 |
| | * | | python310Packages.snowflake-connector-python: 2.8.0 -> 2.8.2•••fixes CVE-2022-42965
https://github.com/snowflakedb/snowflake-connector-python/blob/v2.8.2/DESCRIPTION.md
(cherry picked from commit 5aaa6f33d600b6d7b0087c0b14f837dade96f474)
| Robert Schütz | 2022-11-29 | 1 | -3/+3 |
| * | | | Merge pull request #203760 from NixOS/backport-203634-to-release-22.11•••[Backport release-22.11] php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking | Elis Hirwing | 2022-11-30 | 2 | -6/+16 |
| |\ \ \
| |_|/
|/| | |
|
| | * | | php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking•••This is a follow up to #200815 and #184634.
The PCRE2 JIT SEAlloc does not support the `fork()` as announced in
their README [0]:
> If you are enabling JIT under SELinux environment you may also want to add
> --enable-jit-sealloc, which enables the use of an executable memory allocator
> that is compatible with SELinux. Warning: this allocator is experimental!
> It does not support fork() operation and may crash when no disk space is
> available. This option has no effect if JIT is disabled.
As a result using it in PHP can break apps and tools, it can only be
enabled under very specific context where you have a full picture of
what the PHP code is doing.
This contribution disables again the PCRE2 JIT SEAlloc and extends the
existing PHP/PCRE2 tests to make sure we do not enable it again by
mistake.
[0] https://www.pcre.org/readme.txt
(cherry picked from commit 622f4ee35426c6933b8a36ce5266f03884d1ed05)
| Thomas Gerbet | 2022-11-30 | 2 | -6/+16 |
| * | | | Merge pull request #203786 from NixOS/backport-203764-to-release-22.11•••[Backport release-22.11] vimpc: Support more platforms | figsoda | 2022-11-30 | 1 | -1/+1 |
| |\ \ \ |
|
| | * | | | vimpc: Support more platforms•••(cherry picked from commit b0f767da93e4f813fe25c4b876d013a3decda744)
| David Morgan | 2022-11-30 | 1 | -1/+1 |
| * | | | | Release NixOS 22.11•••(cherry picked from commit f1b9cc23aa8b1549dd7cb53dbe9fc950efc97646)
22.11 | Martin Weinelt | 2022-11-30 | 7 | -29/+29 |
| |/ / / |
|
| * | | | Merge pull request #203785 from NixOS/backport-203781-to-release-22.11•••[Backport release-22.11] nixos/release-notes: fix link formatting | Martin Weinelt | 2022-11-30 | 2 | -6/+6 |
| |\ \ \ |
|
| | * | | | nixos/release-notes: fix link formatting•••(cherry picked from commit 29450f5d80c775d7f8b7a41b8f3e5edda5c97c18)
| Sandro Jäckel | 2022-11-30 | 2 | -6/+6 |
| |/ / / |
|
| * | | | Merge pull request #203777 from mweinelt/22.11/release-notes•••[22.11] Release note backports | Martin Weinelt | 2022-11-30 | 3 | -711/+850 |
| |\ \ \ |
|
| | * | | | nixos/doc/rl-2211: more cleanup•••(cherry picked from commit 068f7348db86a08b108bcce5cb8320685534de17)
| Martin Weinelt | 2022-11-30 | 2 | -198/+197 |
| | * | | | nixos/doc/rl-2211: cleanup•••(cherry picked from commit 07fe1b987bb6c47dd43fb03c61cc0dea648145b7)
| Jörg Thalheim | 2022-11-30 | 2 | -185/+178 |
| | * | | | nixos/doc/rl-2211: add entry for aarch64-linux jobset inclusion/images on hom...•••(cherry picked from commit 881f22670ee42c5e22135f21822447d8d8b486b1)
| Winter | 2022-11-30 | 2 | -0/+21 |
| | * | | | nixos/doc/rl-2211: add entry for libxcrypt migration•••(cherry picked from commit b937bf637f14efa210afc83f30736cb3487d3ad9)
| Winter | 2022-11-30 | 2 | -0/+63 |
| | * | | | nixos/doc/rl-2211: cleanup•••(cherry picked from commit e81b0cec91c35a427ed4d0fe2df3c74344a14c72)
| Winter | 2022-11-30 | 2 | -696/+680 |
| | * | | | nixos/proxmox-image: allow building UEFI images•••Allow building other than Legacy-BIOS-only Proxmox images.
Default is unchanged.
To build UEFI proxmox image use:
proxmox.qemuConf.bios = "ovmf";
(default is "seabios")
To build image bootable using both "seabios" and "ovmf" use:
partitionTableType = "hybrid";
BIOS can be switched in Proxmox between "seabios" and "ovmf" and VM still boots.
(GRUB2-only, systemd-boot does not boot under "seabios")
To build systemd-boot UEFI image:
proxmox.qemuConf.bios = "ovmf";
boot.loader.systemd-boot.enable = true;
(cherry picked from commit 4729d5d7f62a989c1518cac96a3a971da00a7d12)
| Oto Petřík | 2022-11-30 | 3 | -1/+80 |
| | * | | | nixos/openrgb: fix linking in release notes•••(cherry picked from commit bb4cc151b6dfee792e98f53a30895b66cf7b4a48)
| KFears | 2022-11-30 | 2 | -2/+2 |
| * | | | | nixos/doc: Fix typo in 22.11 release manual•••(cherry picked from commit 6184f635b3c3d2794821bb31c04a4e7a99ee0fdb)
| maralorn | 2022-11-30 | 1 | -1/+1 |
| |/ / / |
|
| * | | | Merge pull request #203762 from NixOS/backport-202729-to-release-22.11•••[Backport release-22.11] git-credential-keepassxc: 0.10.1 -> 0.11.0 | Francesco Gazzetta | 2022-11-30 | 1 | -3/+3 |
| |\ \ \
| |/ /
|/| | |
|
| | * | | git-credential-keepassxc: 0.10.1 -> 0.11.0•••(cherry picked from commit 782c75a8f30eb5fe082f78b3f0e0f648fcddc461)
| Francesco Gazzetta | 2022-11-30 | 1 | -3/+3 |
| |/ / |
|
| * | | Merge pull request #203753 from NixOS/backport-203680-to-release-22.11•••[Backport release-22.11] licensee: 9.15.1 -> 9.15.3 | figsoda | 2022-11-30 | 3 | -70/+58 |
| |\ \ |
|
| | * | | bundlerUpdateScript: use Nix 2.3•••The script assumes that nix(1) can be used without any flags which
is no longer the case. We can easily use Nix 2.3 as a workaround
until someone else musters the willpower to adjust this script for
Nix 2.11.
(cherry picked from commit 38ffd641e0da8f37b82858ebd7cd679fa4716b66)
| sternenseemann | 2022-11-30 | 1 | -2/+2 |
| | * | | licensee: 9.15.1 -> 9.15.3•••https://github.com/licensee/licensee/releases/tag/v9.15.2
https://github.com/licensee/licensee/releases/tag/v9.15.3
(cherry picked from commit 8db42896f1f22639d819188d7fa8184279f8f363)
| sternenseemann | 2022-11-30 | 2 | -68/+56 |
| |/ / |
|
| * | | Merge pull request #203737 from NixOS/backport-203587-to-release-22.11•••[Backport release-22.11] racket-minimal: fix build on aarch64-darwin | Mario Rodas | 2022-11-30 | 1 | -1/+1 |
| |\ \ |
|
| | * | | racket-minimal: fix build on aarch64-darwin•••This commit fixed a previous patch so that signatures are effectively removed and then added.
(cherry picked from commit 8b868b5616c3406c8737c4dba50f394528475732)
| Weijia Wang | 2022-11-30 | 1 | -1/+1 |
| |/ / |
|
| * | | Merge pull request #203699 from NixOS/backport-202342-to-release-22.11•••[Backport release-22.11] yuzu-mainline: 1162 -> 1245 | Mario Rodas | 2022-11-30 | 1 | -2/+2 |
| |\ \ |
|
| | * | | yuzu-mainline: 1162 -> 1245•••Signed-off-by: Amneesh Singh <natto@weirdnatto.in>
(cherry picked from commit 98cd1161b0ac02cb490904315470d4036c51f914)
| Amneesh Singh | 2022-11-30 | 1 | -2/+2 |
| * | | | Merge pull request #203711 from NixOS/backport-203430-to-release-22.11•••[Backport release-22.11] electron-mail: 5.0.1 -> 5.1.2 | Mario Rodas | 2022-11-30 | 1 | -2/+2 |
| |\ \ \ |
|
| | * | | | electron-mail: 5.0.1 -> 5.1.2•••(cherry picked from commit 1a25877c44aa664ebba7c58a9d91c8873ef4f9d3)
| R. Ryantm | 2022-11-30 | 1 | -2/+2 |
| * | | | | Merge pull request #203728 from NixOS/backport-202555-to-release-22.11•••[Backport release-22.11] brave: fix commandLineArgs option also requiring vulkanSupport | Mario Rodas | 2022-11-30 | 1 | -1/+1 |
| |\ \ \ \ |
|
| | * | | | | brave: fix commandLineArgs option also requiring vulkanSupport•••(cherry picked from commit 25551116a472c95aab5e01c120557f188383f69c)
| 06kellyjac | 2022-11-30 | 1 | -1/+1 |
| * | | | | | smartmontools: remove unneeded inetutils•••It was only needed for 'hostname', which is now provided by the
'hostname' package, which has smaller storage footprint.
(cherry picked from commit e01e2d3978046735926ba41088f038d7b7ad6552)
| Bjørn Forsman | 2022-11-30 | 1 | -2/+1 |
| * | | | | | smartmontools: add hostname to runtime closure•••This makes smartd notifications contain the hostname instead of
"unknown".
Total runtime closure size:
Before: 46.1 MiB
After: 46.7 MiB
(cherry picked from commit c1e51d4b28e91eb74b62fa3a0386fde0b69a6683)
| Bjørn Forsman | 2022-11-30 | 1 | -1/+2 |
| * | | | | | Merge #203315: patchelf_0_14: rename to patchelfStable•••...into release-22.11
| Vladimír Čunát | 2022-11-30 | 1 | -3/+3 |
| |\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | * | | | | patchelf_0_14: rename to patchelfStable•••It was 0.15.x already, and r-ryantm keeps suggesting updates.
(cherry picked from commit ec045d118ac4997d537892155d48ceaefe690d01)
origin/backport-203295-to-release-22.11 | Vladimír Čunát | 2022-11-27 | 1 | -3/+3 |
