Commit Graph

1811 Commits

Author SHA1 Message Date
Thomas Gerbet
2ecf39cb20 moodle: 4.4.3 -> 4.4.4
Fixes CVE-2024-48901, CVE-2024-48900, CVE-2024-48899, CVE-2024-48898, CVE-2024-48897, CVE-2024-48896.

Release notes:
https://moodledev.io/general/releases/4.4/4.4.4
2024-11-30 13:20:51 +01:00
Thomas Gerbet
33f830be76
moodle: 4.4.1 -> 4.4.3 (#334639) 2024-11-30 13:08:19 +01:00
Alexander Sieg
a944e46c81 outline: 0.81.0 -> 0.81.1
Diff: https://github.com/outline/outline/compare/v0.81.0...v0.81.1

Changelog: https://github.com/outline/outline/releases
2024-11-28 12:11:52 +04:00
R. Ryantm
83aba60746 wordpress: 6.7 -> 6.7.1 2024-11-24 11:04:58 +01:00
Alexander Sieg
e8c9fa5bc8 plausible: 2.0.0 -> 2.1.4 2024-11-22 13:52:18 +01:00
Weijia Wang
5bdc0862bf
wordpress: 6.6.2 -> 6.7 (#356449) 2024-11-19 22:44:51 +01:00
Yt
8c87ca1d48
lemmy: 0.19.5 -> 0.19.7 (#356549) 2024-11-17 10:16:57 -05:00
Viorel-Cătălin Răpițeanu
d1da56f629 wordpressPackages: package and theme updates
1. Make twentytwentyfive theme default
2. Update all packages
2024-11-17 15:56:28 +02:00
Viorel-Cătălin Răpițeanu
5705ab5bc5 wordpress: 6.6.2 -> 6.7
Update the package to the latest version.
2024-11-17 15:56:09 +02:00
Masum Reza
e13831335f
treewide: stdenv.is -> stdenv.hostPlatform.is (#356363)
* treewide: stdenv.is -> stdenv.hostPlatform.is

* treewide: nixfmt due to ci error
2024-11-17 16:11:54 +05:30
Arjan Schrijver
802f38ff29 lemmy: 0.19.5 -> 0.19.7 2024-11-16 20:56:16 +01:00
Austin Horstman
61684555ec
outline: 0.80.2 -> 0.81.0 (#355245) 2024-11-15 12:06:53 -06:00
Maximilian Bosch
dbd8326b7f
Merge: wordpress: drop unmaintained release (#355291) 2024-11-12 19:20:25 +01:00
Weijia Wang
40d6aaaeb1 wordpress: drop unmaintained release 2024-11-11 23:26:22 +01:00
jopejoe1
e73bbaf8d0 wordpressPackages.plugins.so-clean-up-wp-seo: init at 4.0.2 2024-11-11 21:36:18 +01:00
Alexander Sieg
9586f07aa4
outline: 0.80.2 -> 0.81.0
Diff: https://github.com/outline/outline/compare/v0.80.2...v0.81.0

Changelog: https://github.com/outline/outline/releases
2024-11-11 18:40:42 +01:00
aleksana
571c71e6f7 treewide: migrate packages to pkgs/by-name, take 1
We are migrating packages that meet below requirements:

1. using `callPackage`
2. called path is a directory
3. overriding set is empty (`{ }`)
4. not containing path expressions other than relative path (to
makenixpkgs-vet happy)
5. not referenced by nix files outside of the directory, other
than`pkgs/top-level/all-packages.nix`
6. not referencing nix files outside of the directory
7. not referencing `default.nix` (since it's changed to `package.nix`)
8. `outPath` doesn't change after migration

The tool is here: https://github.com/Aleksanaa/by-name-migrate.
2024-11-09 20:04:51 +08:00
Weijia Wang
f2ba2710ca
dolibarr: 19.0.3 -> 20.0.0 (#346091) 2024-11-01 03:57:50 +01:00
Thomas Gerbet
9aa6de663b
nifi: 1.27.0 -> 1.28.0 (#351981) 2024-10-30 22:10:57 +01:00
Sandro
43d1b2fe1a
mediawiki: fix displaying previews of SVGs (#296017) 2024-10-29 15:11:10 +01:00
Sefa Eyeoglu
d7bf46fed1
nifi: 1.27.0 -> 1.28.0
Fixes CVE-2024-45477

Relevant commit: 153c87a7da

Announcement: https://www.openwall.com/lists/oss-security/2024/10/28/1

Changes: https://github.com/apache/nifi/compare/rel/nifi-1.27.0...rel/nifi-1.28.0

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-10-28 23:12:48 +01:00
Ramses
568159f459
rss-bridge: Run update checker on it (#347146) 2024-10-28 22:53:39 +01:00
Martin Weinelt
7a3fd873b1
discourse: 3.2.5 -> 3.3.2 (#351096) 2024-10-25 18:52:52 +02:00
Leona Maroni
2b0b37048c
discourse.plugins: update 2024-10-25 10:27:27 +02:00
Leona Maroni
d642a421cb
discourse-mail-receiver: 4.0.7 -> 4.1.0 2024-10-25 10:27:26 +02:00
Leona Maroni
6a5e0f7dac
discourse: 3.2.5 -> 3.3.2
https://meta.discourse.org/t/3-3-0-major-release/316353
https://meta.discourse.org/t/3-3-1-bug-fix-release/322330
https://meta.discourse.org/t/3-3-2-security-and-maintenance-release/329341
2024-10-25 10:27:26 +02:00
Minijackson
d09eb594d3
netbox_3_6: remove 2024-10-23 21:07:34 +02:00
Minijackson
69610ea296
netbox: switch to netbox_4_1, mark netbox_3_7 as EOL
also switch the netbox-upgrade test to check upgrade from 3.7 -> 4.1
2024-10-23 21:07:32 +02:00
Gutyina Gergő
9744efc3b0
treewide: update pnpmDeps hashes 2024-10-19 23:50:41 +02:00
Maximilian Bosch
3dc2d95972
wiki-js: unpack into source
We effectively copy everything into `$out` (but this isn't using
`buildCommand` to allow applying custom patches). However, this had the
effect that `env-vars` was also copied into `$out` retaining a reference
to the source tarball.

Removing that reduces the closure size from 765.5M to 388.8M, i.e. by
about 50.7%.
2024-10-18 22:42:53 +02:00
Maximilian Bosch
e0f63ad971
wiki-js: 2.5.304 -> 2.5.305
ChangeLog: https://github.com/requarks/wiki/releases/tag/v2.5.305
2024-10-18 18:13:17 +02:00
Sandro Jäckel
6da2e6dd3f
mediawiki: fix displaying previews of SVGs 2024-10-18 01:29:07 +02:00
Martin Weinelt
492050c0d3
discourse: mark as known vulnerable
There is no maintenance happening on this package and I can't keep doing
security updates for it, when the build changes on every minor release.
2024-10-17 02:32:11 +02:00
Thomas Gerbet
0b783e76a9 mediawiki: 1.42.1 -> 1.42.3
Fixes CVE-2024-47913 (impacts the AbuseFilter extension).

Changes:
https://www.mediawiki.org/wiki/Release_notes/1.42#MediaWiki_1.42.3
2024-10-08 22:32:05 +02:00
Nick Cao
72140261a0
livebook: 0.14.2 -> 0.14.4 (#347181) 2024-10-08 16:08:48 -04:00
redyf
04b0b3502f livebook: 0.14.2 -> 0.14.4
https://github.com/livebook-dev/livebook/releases/tag/v0.14.4
2024-10-07 18:29:51 -03:00
Mynacol
9328eb7b4b rss-bridge: Run update checker on it
The GitHub Releases of rss-bridge are automatically the right target.
https://github.com/RSS-Bridge/rss-bridge/releases
2024-10-07 20:08:20 +02:00
Sandro
0538ecd092
rss-bridge: Remove pkg patch, adapt nixos service (#331295) 2024-10-07 18:57:22 +02:00
R. Ryantm
f53222b40f shiori: 1.7.0 -> 1.7.1 2024-10-06 02:50:27 +00:00
Mynacol
aa0fc3e8b8 rss-bridge: Remove pkg patch, adapt nixos service
The rss-bridge service changes introduced in f2201789fe
resp. https://github.com/NixOS/nixpkgs/pull/223148 removes the need for
the package patch. This commit removes the patch to ease updating and
maintenance.
Relevant service functionality was also removed (e.g. the setting of
RSSBRIDGE_DATA).

The explicit definition of FileCache.path so users can easily see its
default value and change it, requires to use a freeformType to let users
freely add potentially upcoming config options. This type is restricted
to ini types (although we coerce them to environment variables).
This however makes the list of enabled_bridges impossible. That was
fixed by explicitly introducing this option with a type allowing lists.
The default value however should be unset, which is expressed as `null`,
which further spurred a change in the environment variable generation to
ignore null values (instead of coercing them to an empty string).

A breaking change note was added to highlight this change. A check that
warns users of the not-application of their existing config file is
not easily possible, as people could have only added or changed the
config.ini.php file on the file system without changing a nix variable.
2024-10-04 14:58:15 +02:00
Peder Bergebakken Sundt
d80f110d1e
sogo: 5.10.0 -> 5.11.0 (#344343) 2024-10-03 19:52:19 +02:00
R. Ryantm
2bd2e14690 dolibarr: 19.0.3 -> 20.0.0 2024-10-03 06:29:36 +00:00
lassulus
def08aa2e3
jitsi-meet: Default NAT harvester, Excalidraw Caddy, Prosody lockdown (#280615) 2024-10-02 21:08:06 +01:00
h7x4
da8a5a1f77
healthchecks: 3.4 -> 3.6 (#345283) 2024-10-01 01:26:14 +02:00
Erin Yuki Schlarb
40c1971b82 jitsi-meet: Only run smoke test on Linux
The smoke test requires running Jitsi Videobridge and Jicofo, which are
Linux-only and don’t work on macos.
2024-09-30 18:19:34 +02:00
Cabia Rangris
56703b0df5
outline: 0.79.0 -> 0.80.2 (#344820) 2024-09-30 07:53:51 +04:00
Viorel-Cătălin Răpițeanu
db71929224 wordpressPackages: update packages, add ru_RU lang, make twentytwentyfour default 2024-09-29 23:09:33 +03:00
phaer
d179a5e5ba healthchecks: 3.4 -> 3.6 2024-09-29 13:32:32 +02:00
Sandro
10ae9d0b8f
nixos/rss-bridge: Add simple NixOS test (#331291) 2024-09-27 16:59:57 +02:00
Jan Christoph Ebersbach
6bf2f1589c
sogo: 5.10.0 -> 5.11.0 2024-09-27 16:16:42 +09:00
R. Ryantm
01525c4d97 outline: 0.79.0 -> 0.80.2 2024-09-27 06:11:15 +00:00
Weijia Wang
96c892acd6
livebook: 0.14.0 -> 0.14.2 (#343766) 2024-09-27 02:42:39 +02:00
Artturin
e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
Pol Dellaiera
4209b6157a
kavita: 0.8.2 -> 0.8.3.2 (#343656) 2024-09-22 22:34:14 +02:00
Aos Dabbagh
5f6015bb9c livebook: 0.14.0 -> 0.14.2
Upgrading livebook to the latest release:

Changelog:
- [v0.14.2](https://github.com/livebook-dev/livebook/releases/tag/v0.14.2)
- [v0.14.1](https://github.com/livebook-dev/livebook/releases/tag/v0.14.1)
2024-09-22 13:15:57 -04:00
Yongun Seong
1e857243b8
kavita: 0.8.2 -> 0.8.3.2 2024-09-22 15:50:26 +09:00
Maximilian Bosch
149ed25fc2
wiki-js: 2.5.303 -> 2.5.304, fix CVE-2024-45298
ChangeLog: https://github.com/requarks/wiki/releases/tag/v2.5.304
2024-09-21 13:28:45 +02:00
R. Ryantm
d0cbaf4baf wordpress: 6.6.1 -> 6.6.2 2024-09-19 22:21:19 +02:00
Peder Bergebakken Sundt
8c8c27bb19 treewide: remove unused inputs 2024-09-18 01:00:07 +02:00
Aleksana
f1580efb3b
maintainers/team-list: add cyberus team (#331059) 2024-09-16 18:14:16 +08:00
nicoo
8ae535d44c
livebook: 0.13.3 -> 0.14.0 (#340981) 2024-09-10 12:24:50 +00:00
Alexandru Scvortov
a70eab343b livebook: 0.13.3 -> 0.14.0 2024-09-10 11:24:15 +01:00
Felix Bühler
4f7cf373f7
freshrss: 1.24.2 -> 1.24.3 (#340182) 2024-09-09 18:28:50 +02:00
Mikael Fangel
e5f933ad7a
changedetection-io: 0.45.24 -> 0.46.04 2024-09-08 15:04:21 +02:00
Rémi NICOLE
b2e7a1ffe8
peering-manager: fix runtime with pyixapi 0.2.3 (#340164) 2024-09-08 07:49:53 +00:00
R. Ryantm
faa766f124 freshrss: 1.24.2 -> 1.24.3 2024-09-06 20:11:22 +00:00
ghpzin
8eb293fec4
peering-manager: fix runtime with pyixapi 0.2.3
- add patch from merged upstream commit fixing pyixapi 0.2.3 compatibility:
ee558ff66e
2024-09-06 21:30:16 +03:00
R. Ryantm
fec686e486 outline: 0.78.0 -> 0.79.0 2024-09-05 04:12:34 +00:00
Sandro
f501c97718
bookstack: 24.05.2 -> 24.05.4 (#338990) 2024-09-03 14:07:32 +02:00
Sandro
19352b3cf9
hedgedoc: 1.9.9 -> 1.10.0 (#338893) 2024-09-03 09:01:52 +02:00
Adam C. Stephens
775f60f5a9
changedetection-io: add python dependency elementpath (#337769) 2024-09-02 20:41:09 -04:00
Finn Behrens
c4f70c3c27 moodle: 4.4.1 -> 4.4.3 2024-09-02 20:04:33 +02:00
Hritwik
a8f5ef66e5 bookstack: 24.05.2 -> 24.05.4 2024-09-02 17:32:39 +05:30
Sandro Jäckel
7e7df1ade9
hedgedoc: 1.9.9 -> 1.10.0
Changelog: https://github.com/hedgedoc/hedgedoc/releases/tag/1.10.0
Fixes: https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pjf2-269h-cx7p
2024-09-02 11:08:09 +02:00
Maximilian Bosch
e5a5a40ef6
matomo_5: 5.0.2 -> 5.1.1 (#331030) 2024-08-30 13:07:10 +02:00
Sandro
b5e4bf3745
kasmweb: 1.12.0 -> 1.15.0 (#246777) 2024-08-29 13:03:51 +02:00
Jonas Heinrich
237ef604a9
wordpressPackages.plugins.wp-import-export-lite: init at 3.9.27 (#337301) 2024-08-28 09:29:10 +02:00
h3ndrik
8f082113a8
changedetection-io: add python dependency elementpath
Required for xPath matching
2024-08-27 21:02:08 +02:00
Jonas Heinrich
26e626b910 wordpressPackages.plugins.wp-import-export-lite: init at 3.9.27; wordpressPackages: update 2024-08-25 19:27:01 +02:00
R. Ryantm
935b20686a freshrss: 1.24.1 -> 1.24.2 2024-08-23 15:07:22 +00:00
marius david
efde7f61a7 lemmy-ui: properly replace the vips dependancy 2024-08-21 22:13:35 +02:00
s1341
5c1ed3ad5a kasmweb: 1.12.0 -> 1.15.0 2024-08-21 15:06:02 +03:00
laalsaas
ed48acbc06 matomo_5: 5.1.0 -> 5.1.1 2024-08-20 15:49:51 +02:00
Robert Scott
757247cb45
Merge pull request #335029 from r-ryantm/auto-update/dolibarr
dolibarr: 19.0.2 -> 19.0.3
2024-08-18 21:08:44 +01:00
Peder Bergebakken Sundt
e471916645
treewide: passthru nixos test (#334491) 2024-08-18 00:29:43 +02:00
Emily
eb9dbcd4e1
Merge pull request #334638 from emilazy/push-twxurolyowvm
olm: mark as vulnerable
2024-08-16 20:04:09 +01:00
Emily
bbfd5d1085 {cinny-unwrapped,element-call,fluffychat,jitsi-meet}: inherit vulnerabilities from olm
These vendor the libolm code.
2024-08-16 17:34:49 +01:00
e1mo
e94d59e8e2
dokuwiki: add e1mo as maintainer 2024-08-16 16:10:20 +02:00
e1mo
0d80a75fb3
dokuwiki: 2023-04-04a -> 2023-04-04b
Fixes an XSS Vulnerability reported in
https://github.com/dokuwiki/dokuwiki/issues/4305
2024-08-16 16:10:19 +02:00
R. Ryantm
7a0052be3c dolibarr: 19.0.2 -> 19.0.3 2024-08-16 05:11:37 +00:00
Anna Aurora
6e524f105c
meme-bingo-web: 1.0.1 → 1.1.0 2024-08-12 14:27:36 +02:00
Peder Bergebakken Sundt
c93eee1f5f
Merge pull request #330507 from melvyn2/update-slskd
slskd: 0.21.1 -> 0.21.3
2024-08-11 23:38:08 +02:00
Peder Bergebakken Sundt
ea08d0dede
Merge pull request #331770 from pbsds/fix-sourceRoot-1722602716
treewide: use src.name in sourceRoot
2024-08-09 04:41:06 +02:00
Benno Bielmeier
e619721c9b wordpressPackages.plugins.wp-fail2ban: init at 5.3.2 2024-08-06 21:32:38 +02:00
Anna Aurora
34db15c1fd
meme-bingo-web: 0.2.0 → 1.0.1 2024-08-06 03:12:42 +02:00
Weijia Wang
a91f22f207
Merge pull request #332049 from wegank/wordpress-bump
wordpress: 6.5.5 -> 6.6.1, drop old versions
2024-08-05 14:14:43 +02:00
Aleksana
322ec69494
Merge pull request #331790 from RaitoBezarius/drop-pixelfed-mtn
pixelfed: drop raitobezarius as a maintainer
2024-08-04 19:24:51 +08:00
Weijia Wang
bedb9b2d64 wordpress: drop old versions 2024-08-03 20:34:41 +02:00
Weijia Wang
2673e76492 wordpress: 6.5.5 -> 6.6.1 2024-08-03 20:34:01 +02:00
adisbladis
e0816431a2 treewide: Pass self when overriding Python
Otherwise references to the Python interpreter inside the set are wrong, as demonstrated by:
``` nix
with import <nixpkgs> { };
let
  python' = python3.override {
    packageOverrides = final: prev: { requests = prev.requests.overridePythonAttrs(old: { version = "1337";  }); };
  };
in python'.pkgs.python.pkgs.requests
```
which returns the _non_ overriden requests.

And the same with `self`:
```
with import <nixpkgs> { };
let
  python' = python3.override {
    self = python';
    packageOverrides = final: prev: { requests = prev.requests.overridePythonAttrs(old: { version = "1337";  }); };
  };
in python'.pkgs.python.pkgs.requests
```
which returns the overriden requests.

This can manifest itself as file collisions when constructing environments or as subtly incorrect dependency graphs.
2024-08-03 12:18:56 +12:00