Commit Graph

7093 Commits

Author SHA1 Message Date
Sandro Jäckel
04a1c0d7ad
treewide: fix quoting of GITHUB_TOKEN in curl 2022-12-17 23:32:43 +01:00
github-actions[bot]
30b97b0e83
Merge master into staging-next 2022-12-17 00:02:17 +00:00
Thiago Kenji Okada
bc884bf9e0
Merge pull request #206143 from thiagokokada/strip-down-python2-resholve-further
resholve: strip unused libraries from python27
2022-12-16 22:59:54 +00:00
github-actions[bot]
b9ac6ee4d9
Merge master into staging-next 2022-12-16 00:02:17 +00:00
Artturin
05a2dfd674 lib.replaceChars: warn about being a deprecated alias
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
2022-12-15 22:25:51 +02:00
github-actions[bot]
eaf7260c5b
Merge master into staging-next 2022-12-15 18:01:21 +00:00
R. Ryantm
88b3cc8ecc wasmer: 3.0.2 -> 3.1.0 2022-12-15 05:35:36 +00:00
Thiago Kenji Okada
283ecac082 resholve: strip unused libraries from python27
Strip unused libraries from resholve's own python27 derivation, further
reducing its size and reducing its attack surface.
2022-12-15 00:07:02 +00:00
github-actions[bot]
1e7dd98694
Merge master into staging-next 2022-12-14 00:02:18 +00:00
Rick van Schijndel
9833d56c24 treewide: mark packages broken that never built on PLATFORM
Done with the help of https://github.com/Mindavi/nixpkgs-mark-broken
Tool is still WIP but this is one of the first results.

I manually audited the results and removed some results that were not valid.

Note that some of these packages maybe should have more constrained platforms set
instead of broken set, but I think not being perfectly correct is better than
just keep trying to build all these things and never succeeding.

Some observations:

- Some darwin builds require XCode tools
- aarch64-linux builds sometimes suffer from using gcc9
  - gcc9 is getting older and misses some new libraries/features
- Sometimes tools try to do system detection or expect some explicit settings for
  platforms that are not x86_64-linux
2022-12-13 21:40:12 +01:00
github-actions[bot]
d07c2d73fd
Merge master into staging-next 2022-12-13 18:01:30 +00:00
figsoda
126bb19304
Merge pull request #205815 from thiagokokada/strip-down-python2-resholve
resholve: use stripped-down python27
2022-12-13 11:02:30 -05:00
Thiago Kenji Okada
2e943fc060 resholve: use stripped-down python27
This PR strips down the modified `python27` derivation used by `resholve`. The
idea is to reduce the possible security issues, and also to make it easier to
bootstrap.
2022-12-13 14:37:00 +00:00
github-actions[bot]
a680c884cc
Merge master into staging-next 2022-12-13 00:02:19 +00:00
Juuso Haavisto
f5c7a97d53 cbqn: remove unnecessary darwin build flag 2022-12-13 00:28:12 +01:00
Vladimír Čunát
1a5af95367
python311: revert asyncio changes done in 3.11.1
Almost same as in the parent commit.
2022-12-12 14:33:17 +01:00
Vladimír Čunát
9ee1d16c36
python310: revert asyncio changes done in 3.10.9
They brought significant regressions.  Upstream is now discussing
what to do, but we still want the security fixes from 3.10.9.
2022-12-12 14:23:49 +01:00
R. Ryantm
ebb5623e04 clojure: 1.11.1.1200 -> 1.11.1.1208 2022-12-12 12:46:49 +00:00
github-actions[bot]
fe25c2a8d8
Merge master into staging-next 2022-12-10 18:01:12 +00:00
Robert Scott
3cab5aa3bf
Merge pull request #205504 from r-ryantm/auto-update/nickel
nickel: 0.2.1 -> 0.3.0
2022-12-10 17:43:27 +00:00
Jörg Thalheim
fa3cc9fddd
Merge pull request #202040 from Mic92/luajit
luajit: riscv fixes
2022-12-10 17:23:03 +00:00
R. Ryantm
745a9856c6 nickel: 0.2.1 -> 0.3.0 2022-12-10 16:57:35 +00:00
github-actions[bot]
48b3a17dea
Merge master into staging-next 2022-12-09 12:01:30 +00:00
Vladimír Čunát
9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
Thiago Kenji Okada
49688ce655
Merge pull request #205258 from r-ryantm/auto-update/babashka
babashka: 1.0.167 -> 1.0.168
2022-12-09 09:06:22 +00:00
R. Ryantm
65a8bc63db babashka: 1.0.167 -> 1.0.168 2022-12-09 08:43:23 +00:00
Sandro
4cc7973ae6
Merge pull request #204658 from raphaelr/mbedtls-3 2022-12-08 16:38:17 +01:00
superherointj
2787fc7d1e erlang: fix build 2022-12-08 08:59:40 -05:00
Weijia Wang
166db6ef4b erlang: don't relink escript on darwin 2022-12-07 21:13:02 -05:00
Martin Weinelt
b818d8a9b3
Merge pull request #204903 from mweinelt/cpython-changelog 2022-12-08 01:14:19 +01:00
Elis Hirwing
0eddfd8d62
Merge pull request #204989 from etu/php82-stable
php82: 8.2.0-rc7 -> 8.2.0
2022-12-08 00:37:19 +01:00
Raphael Robatsch
985c8dbe14 treewide: use mbedtls 3 where possible
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-12-07 19:58:55 +00:00
figsoda
7ead9d1ea3
Merge pull request #204984 from r-ryantm/auto-update/wasmtime
wasmtime: 3.0.0 -> 3.0.1
2022-12-07 12:18:57 -05:00
Martin Weinelt
bdb82dffc0
Merge pull request #204902 from mweinelt/cpython-39-310-312 2022-12-07 17:55:35 +01:00
Martin Weinelt
e824b21ba7
python310: 3.10.8 -> 3.10.9
https://docs.python.org/release/3.10.9/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2022-42919
2022-12-07 16:41:58 +01:00
Martin Weinelt
2fce48831c
python39: 3.9.15 -> 3.9.16
https://docs.python.org/release/3.9.16/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2015-20107
2022-12-07 16:40:42 +01:00
Martin Weinelt
6dcc133aae
cpython: Update meta and add changelog url 2022-12-07 16:31:39 +01:00
Martin Weinelt
d1678fd28d
Merge pull request #204893 from mweinelt/cpython-37-38-311 2022-12-07 16:15:40 +01:00
Dany Marcoux
0c88d9b773 erlang: Add escript to $PATH
Closes #204781
2022-12-07 09:43:04 -05:00
Elis Hirwing
d7cf24f2fa
php82: 8.2.0-rc7 -> 8.2.0 2022-12-07 14:38:20 +01:00
R. Ryantm
99b0a7d6ea wasmtime: 3.0.0 -> 3.0.1 2022-12-07 12:34:05 +00:00
Martin Weinelt
1328f79d81
python312: 3.12.0a2 -> 3.12.0a3
https://docs.python.org/3.12/whatsnew/changelog.html#python-3-12-0-alpha3
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-45061
2022-12-07 02:37:58 +01:00
Martin Weinelt
f1433e66f9
python38: 3.11.0 -> 3.11.1
https://www.python.org/downloads/release/python-3111/
https://docs.python.org/release/3.11.1/whatsnew/changelog.html#python-3-11-1
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-45061
2022-12-07 01:26:55 +01:00
Martin Weinelt
71c4a3a0b1
python38: 3.8.15 -> 3.8.16
https://www.python.org/downloads/release/python-3816/
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2015-20107
2022-12-07 01:25:30 +01:00
Martin Weinelt
10bab2150c
python37: 3.7.15 -> 3.7.16
https://www.python.org/downloads/release/python-3716/
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2015-20107
2022-12-07 01:23:29 +01:00
Martin Weinelt
9256404e6b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-05 13:22:34 +01:00
github-actions[bot]
d267d26578
Merge master into staging-next 2022-12-05 06:01:36 +00:00
Mario Rodas
be18e7928b luau: 0.554 -> 0.555
https://github.com/Roblox/luau/releases/tag/0.555
2022-12-03 04:20:00 +00:00
Martin Weinelt
e3da5a807b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-03 01:28:01 +01:00
github-actions[bot]
a83c4dd193
Merge master into staging-next 2022-12-03 00:02:19 +00:00