Commit Graph

7387 Commits

Author SHA1 Message Date
Weijia Wang
9d10b68a85 pypy27: unbreak on aarch64-darwin 2023-01-08 19:00:31 +01:00
Martin Weinelt
4d65509504 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-08 16:34:30 +01:00
Mario Rodas
4d6f451018
Merge pull request #209646 from marsam/update-luau
luau: 0.555 -> 0.558
2023-01-08 07:48:42 -05:00
Thiago Kenji Okada
2a19c135fc
Merge pull request #209597 from wegank/pypy27-darwin
pythonInterpreters.pypy27_prebuilt: fix install check on darwin
2023-01-08 11:05:31 +00:00
Thiago Kenji Okada
dac15fbb93
Merge pull request #209598 from wegank/pypy39-darwin
pythonInterpreters.pypy39_prebuilt: add darwin support
2023-01-08 11:01:17 +00:00
Nick Cao
f742c6d443
python311: fix cross compilation 2023-01-08 12:39:02 +08:00
Mario Rodas
f5476f74bc luau: 0.555 -> 0.558
https://github.com/Roblox/luau/releases/tag/0.556
https://github.com/Roblox/luau/releases/tag/0.557
https://github.com/Roblox/luau/releases/tag/0.558
2023-01-08 04:20:00 +00:00
Weijia Wang
fd6ddd9923 pythonInterpreters.pypy39_prebuilt: add darwin support 2023-01-08 02:04:15 +01:00
Weijia Wang
e380607d07 pythonInterpreters.pypy27_prebuilt: fix install check on darwin 2023-01-08 02:02:45 +01:00
github-actions[bot]
4bf238a8fb
Merge master into staging-next 2023-01-08 00:02:31 +00:00
Fabián Heredia Montiel
d9fbb33f92 python27: mark as vulnerable/insecure due to EOL on 2020-01-01
More information: https://www.activestate.com/products/python/python-2-end-of-life-security-updates/
2023-01-07 16:25:35 -06:00
Thiago Kenji Okada
aa0c474f4b pypy{27,38,39}: mark as broken in aarch64-darwin 2023-01-07 21:14:22 +00:00
Thiago Kenji Okada
997a09e612 pypy39: fix build in darwin 2023-01-07 21:11:49 +00:00
Thiago Kenji Okada
4645ec9de6 pypy{27,38,39}: remove i686-linux, add aarch64-darwin 2023-01-07 21:11:49 +00:00
Thiago Kenji Okada
40db51d563 pythonInterpreters.pypy27_prebuilt: add support to darwin 2023-01-07 21:11:49 +00:00
Thiago Kenji Okada
3d440c1c1e pythonInterpreters.pypy39_prebuilt: use autoPatchelfHook 2023-01-07 21:11:49 +00:00
Thiago Kenji Okada
c89380b0c4 pythonInterpreters.pypy27_prebuilt: use autoPatchelfHook 2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
a49d01ce3f pythonInterpreters.pypy27_prebuilt: add support for aarch64-linux 2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
be456598db pypy38: 7.3.9 -> 7.3.11 2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
797e62d503 pypy39: 7.3.9 -> 7.3.11
Also build it with pypy27 instead of python27.
2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
284d9a1067 pypy27: 7.3.9 -> 7.3.11
Also build it with pythonInterpreters.pypy27_prebuilt instead of
python27, to avoid it being broken after #201859 is merged.

Keep in mind that the above change will make this derivation only work
with x86_64-linux for now (since pypy27_prebuilt is only packaged for
that platform). However support for newer platforms can be added later,
and a working package for one platform is better than a broken package
in 4 platforms.
2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
6339c29710 pypy37: remove 2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
5dbf9ca20c pythonInterpreters.pypy39_prebuilt: 7.3.9 -> 7.3.11 2023-01-07 21:11:48 +00:00
Thiago Kenji Okada
525588440a pythonInterpreters.pypy27_prebuilt: 7.3.9 -> 7.3.11 2023-01-07 21:11:48 +00:00
github-actions[bot]
3b3114f45d
Merge master into staging-next 2023-01-07 18:01:08 +00:00
Artturi
f56de234bb
Merge pull request #207652 from Artturin/splicenixfmt 2023-01-07 17:42:25 +02:00
github-actions[bot]
00aa7f762f
Merge master into staging-next 2023-01-07 06:01:13 +00:00
R. Ryantm
0166341b2c babashka: 1.0.168 -> 1.0.169 2023-01-07 03:59:42 +00:00
Martin Weinelt
5b308cd1df Merge remote-tracking branch 'origin/master' into staging-next 2023-01-06 19:10:05 +01:00
Adam Joseph
c031cc5bf1 luajit: add powerpc64le-linux to badPlatforms 2023-01-06 16:03:23 +01:00
Martin Weinelt
afd962b51c Merge remote-tracking branch 'origin/master' into staging-next 2023-01-05 17:16:26 +01:00
Elis Hirwing
d6f6154cc7
Merge pull request #180827 from drupol/php/update-script
php: Provide an update script.
2023-01-05 14:14:36 +01:00
Thiago Kenji Okada
e3e7a85fbd
Merge pull request #209090 from thiagokokada/bump-python2
python27: 2.7.18.5 -> 2.7.18.6
2023-01-05 13:02:05 +00:00
Pol Dellaiera
142ac0ba91
php: add updateScript 2023-01-05 13:42:31 +01:00
Martin Weinelt
e75f5e8efa python37: drop
The package set hasn't been working for a long time now, due to infinite
recursions, that nobody was going to fix.

The release is going to go EOL in 2023/06 and we don't want to ship it
in NixOS 23.05 anyway.
2023-01-05 13:20:49 +01:00
Arnout Engelen
af0b453724
Merge pull request #208103 from raboof/neovim-reproducible
neovim: make the build reproducible
2023-01-05 13:17:38 +01:00
Thiago Kenji Okada
b0ac530007 python27: 2.7.18.5 -> 2.7.18.6 2023-01-04 21:12:03 +00:00
Pol Dellaiera
041d551384
php81: 8.1.13 -> 8.1.14 2023-01-04 21:42:24 +01:00
github-actions[bot]
789ae2c93d
Merge staging-next into staging 2023-01-04 18:01:36 +00:00
Thiago Kenji Okada
0992faa347
Merge pull request #206642 from thiagokokada/python27-use-system-libs
python27: use ffi/expat as system libraries
2023-01-04 16:34:21 +00:00
Martin Weinelt
e464bde9ba
Merge pull request #208962 from KAction/patch/v1/python3.pkgs.sphinxHook 2023-01-04 02:38:53 +01:00
Dmitry Bogatov
82ae2e8f06 python3.pkgs.sphinxHook: fix co-installability of generated documentation
Include full $name of the derivation into docdir, so documentation for
python package "foo" is installed into $out/share/doc/python3.10-foo-1.2.3
instead of just $out/share/doc/foo, where it may conflict with some
other package named "foo" and not-coinstallable with different
versions of the same python package.

Change from $name to $pname was introduced in [1ee5fca], probably as
unindented side-effect of adding support for formats other than html.
2023-01-03 20:28:48 -05:00
github-actions[bot]
e859576396
Merge staging-next into staging 2023-01-04 00:03:20 +00:00
Sandro
daf4e55ddb
Merge pull request #208194 from wegank/chibi-darwin
Closes https://github.com/NixOS/nixpkgs/issues/190889
2023-01-03 23:22:39 +01:00
Pol Dellaiera
793d5252be
php82: 8.2.0 -> 8.2.1 2023-01-03 21:57:26 +01:00
Pol Dellaiera
19e31cd677
php80: 8.0.26 -> 8.0.27 2023-01-03 21:51:47 +01:00
github-actions[bot]
e076f677a1
Merge staging-next into staging 2023-01-03 18:01:45 +00:00
Mario Rodas
c5a38863e4
Merge pull request #205337 from Radvendii/patch-1
ruby: add `buildGems` to passthru
2023-01-03 09:21:17 -05:00
Weijia Wang
f6fd1b9a53 python312: fix build on darwin 2023-01-02 13:07:46 +01:00
github-actions[bot]
ccef3ab7d8
Merge staging-next into staging 2023-01-02 12:02:01 +00:00
Maximilian Bosch
f0d67d8732
evcxr: 0.14.1 -> 0.14.2
ChangeLog: https://github.com/google/evcxr/releases/tag/v0.14.2
2023-01-02 10:09:35 +01:00
Jan Tojnar
5810109b42 Merge branch 'staging-next' into staging
- readline6 attribute removed from all-packages.nix in d879125d61
- readline attribute was bumped to readline82 in 50adabdd60
2023-01-02 03:04:32 +01:00
Arnout Engelen
90c4a2ebc3
neovim: make the build reproducible
This introduces a patch that improves binary reproducibility since changes in
ordering of the generated code indeed cause changes in the compiled code.

Additionally, since neovim embeds luajit-compiled bytecode into the nvim binary,
we are impacted by https://github.com/LuaJIT/LuaJIT/issues/626 . It is possible
to switch to lua 5.1, but that'd be a regression (luajit has much better
performance and some plugins depend on it, like for example Noice and Lazy).
Disabling `COMPILE_LUA` at build time would cause a runtime penalty each time
neovim starts. Instead, we run luagit with those security settings disabled for
the build-time code generation.

(Note to self: for a minimized testcase this seemed to help at
975ec13f5d5aefcac1dbb15fa867e660e07c93a1 but no longer at
03080b795aa3496ed62d4a0697c9f4767e7ca7e5 of luajit, which is surprising since
that commit doesn't look super relevant. _Also_ surprisingly it does seem to
work in the context of the neovim code generation, though, so that might be
good enough...)

Also, some of the code generation (using mpack and tables) still relies on
stable table ordering. This should eventually be fixed, but as a workaround
we use the luajit-with-stable-string-ids for those generators as well.

Fixes #207841
2023-01-01 15:50:12 +01:00
sternenseemann
c7667f198f cbqn: drop obsolete darwin flags
This was already done in f5c7a97d53, but
reverted later by accident.
2022-12-30 18:49:53 +01:00
sternenseemann
2f3f2c82c8 cbqn: install headers and shared library
This is useful for embedding CBQN and writing libraries that can be used
via the CBQN FFI.
2022-12-30 18:49:53 +01:00
Sandro
726088a964
Merge pull request #206812 from SuperSandro2000/luajit-openresty 2022-12-30 03:11:54 +01:00
Robert Schütz
fa3feb9f65 python3Packages.pythonImportsCheck: set $PYTHONPATH
Don't rely on the installPhase doing so.
2022-12-29 04:11:02 -08:00
Weijia Wang
182e336979 chibi: fix wrapping on darwin 2022-12-29 06:34:22 +01:00
Sergei Trofimovich
092d57c076 Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
    pkgs/development/tools/language-servers/ansible-language-server/default.nix
2022-12-28 09:35:37 +00:00
R. Ryantm
57dbff4228 erlang_odbc: 24.3.4.6 -> 24.3.4.7 2022-12-27 23:48:39 -05:00
K900
fe78d26e80
Merge pull request #207564 from ereslibre/wasmtime-4.0.0
wasmtime: 3.0.1 -> 4.0.0
2022-12-26 12:05:55 +03:00
R. Ryantm
0df348ed0a zef: 0.14.2 -> 0.14.6 2022-12-26 02:10:29 +00:00
Sandro Jäckel
56acc4566e
luajit_openresty: init at 2.1-20220915 2022-12-26 02:57:06 +01:00
Sandro
f4c3e67d80
Merge pull request #206807 from SuperSandro2000/lua-sourceVersion 2022-12-25 21:42:47 +01:00
Artturin
58fa78077c treewide: use splicing convenience functions 2022-12-25 14:05:03 +02:00
Jan Tojnar
72c37eddec Merge branch 'staging-next' into staging 2022-12-25 01:30:47 +01:00
Rafael Fernández López
a8153ecbd8
wasmtime: 3.0.1 -> 4.0.0 2022-12-24 14:06:50 +01:00
R. Ryantm
d9c3fbfcdc erlangR25: 25.1.2 -> 25.2 2022-12-24 07:50:37 -05:00
R. Ryantm
3f6ffe5977 erlangR23: 23.3.4.17 -> 23.3.4.18 2022-12-22 13:16:28 -05:00
R. Ryantm
78317d420d erlangR24: 24.3.4.5 -> 24.3.4.6 2022-12-22 11:22:00 -05:00
Sandro Jäckel
b374880027
interpreters/lua: replace sourceVersion with lib.versions 2022-12-22 05:14:31 +01:00
Narazaki, Shuji
efbce7d4aa cbqn: add enableReplxx option 2022-12-21 14:17:29 +09:00
github-actions[bot]
dc7ebb0163
Merge staging-next into staging 2022-12-18 18:01:41 +00:00
Valentin Gagarin
f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
Thiago Kenji Okada
47f904bad1 python27: use ffi/expat as system libraries
Without `--with-system-{ffi,expat}` flags, Python will use its own
embedded libraries that are out-of-date. Thanks to it, they can be a
security issue. So let's use our own libraries instead.

This is already what Python 3.x does, so should be safe.
2022-12-18 12:32:51 +00:00
github-actions[bot]
ab5c904c51
Merge staging-next into staging 2022-12-18 06:01:44 +00:00
figsoda
ec8cb34358 treewide: fix typos 2022-12-17 19:39:44 -05:00
Anderson Torres
a4807c14ff
Merge pull request #206641 from atorres1985-contrib/nickel
nickel: fill meta.changelog
2022-12-17 21:23:44 -03:00
github-actions[bot]
7984a7dacb
Merge staging-next into staging 2022-12-18 00:05:50 +00:00
Anderson Torres
06db865023
Merge pull request #206605 from r-ryantm/auto-update/nickel
nickel: 0.3.0 -> 0.3.1
2022-12-17 21:04:57 -03:00
AndersonTorres
ed7c556639 nickel: fill meta.changelog 2022-12-17 21:04:11 -03:00
Sandro Jäckel
04a1c0d7ad
treewide: fix quoting of GITHUB_TOKEN in curl 2022-12-17 23:32:43 +01:00
R. Ryantm
44a3bccab9 nickel: 0.3.0 -> 0.3.1 2022-12-17 20:34:27 +00:00
github-actions[bot]
61a0176830
Merge staging-next into staging 2022-12-17 00:02:50 +00:00
github-actions[bot]
30b97b0e83
Merge master into staging-next 2022-12-17 00:02:17 +00:00
Thiago Kenji Okada
bc884bf9e0
Merge pull request #206143 from thiagokokada/strip-down-python2-resholve-further
resholve: strip unused libraries from python27
2022-12-16 22:59:54 +00:00
Vladimír Čunát
59a68f487d
Merge branch 'staging-next' into staging 2022-12-16 11:20:50 +01:00
github-actions[bot]
b9ac6ee4d9
Merge master into staging-next 2022-12-16 00:02:17 +00:00
Artturin
05a2dfd674 lib.replaceChars: warn about being a deprecated alias
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
2022-12-15 22:25:51 +02:00
github-actions[bot]
eaf7260c5b
Merge master into staging-next 2022-12-15 18:01:21 +00:00
R. Ryantm
88b3cc8ecc wasmer: 3.0.2 -> 3.1.0 2022-12-15 05:35:36 +00:00
Thiago Kenji Okada
283ecac082 resholve: strip unused libraries from python27
Strip unused libraries from resholve's own python27 derivation, further
reducing its size and reducing its attack surface.
2022-12-15 00:07:02 +00:00
github-actions[bot]
4db4181d93
Merge staging-next into staging 2022-12-14 00:02:53 +00:00
github-actions[bot]
1e7dd98694
Merge master into staging-next 2022-12-14 00:02:18 +00:00
Rick van Schijndel
9833d56c24 treewide: mark packages broken that never built on PLATFORM
Done with the help of https://github.com/Mindavi/nixpkgs-mark-broken
Tool is still WIP but this is one of the first results.

I manually audited the results and removed some results that were not valid.

Note that some of these packages maybe should have more constrained platforms set
instead of broken set, but I think not being perfectly correct is better than
just keep trying to build all these things and never succeeding.

Some observations:

- Some darwin builds require XCode tools
- aarch64-linux builds sometimes suffer from using gcc9
  - gcc9 is getting older and misses some new libraries/features
- Sometimes tools try to do system detection or expect some explicit settings for
  platforms that are not x86_64-linux
2022-12-13 21:40:12 +01:00
github-actions[bot]
74a066ab3f
Merge staging-next into staging 2022-12-13 18:02:08 +00:00
github-actions[bot]
d07c2d73fd
Merge master into staging-next 2022-12-13 18:01:30 +00:00
figsoda
126bb19304
Merge pull request #205815 from thiagokokada/strip-down-python2-resholve
resholve: use stripped-down python27
2022-12-13 11:02:30 -05:00
Thiago Kenji Okada
2e943fc060 resholve: use stripped-down python27
This PR strips down the modified `python27` derivation used by `resholve`. The
idea is to reduce the possible security issues, and also to make it easier to
bootstrap.
2022-12-13 14:37:00 +00:00
github-actions[bot]
8506553217
Merge staging-next into staging 2022-12-13 00:02:51 +00:00
github-actions[bot]
a680c884cc
Merge master into staging-next 2022-12-13 00:02:19 +00:00
Juuso Haavisto
f5c7a97d53 cbqn: remove unnecessary darwin build flag 2022-12-13 00:28:12 +01:00
github-actions[bot]
cfbecb45cc
Merge staging-next into staging 2022-12-12 18:01:51 +00:00
Vladimír Čunát
1a5af95367
python311: revert asyncio changes done in 3.11.1
Almost same as in the parent commit.
2022-12-12 14:33:17 +01:00
Vladimír Čunát
9ee1d16c36
python310: revert asyncio changes done in 3.10.9
They brought significant regressions.  Upstream is now discussing
what to do, but we still want the security fixes from 3.10.9.
2022-12-12 14:23:49 +01:00
R. Ryantm
ebb5623e04 clojure: 1.11.1.1200 -> 1.11.1.1208 2022-12-12 12:46:49 +00:00
Robert Hensing
16f5747575
Merge pull request #175649 from Artturin/opt-in-structured-attrs
stdenv: support opt-in __structuredAttrs
2022-12-10 21:12:43 +01:00
github-actions[bot]
54cd3a359f
Merge staging-next into staging 2022-12-10 18:01:48 +00:00
github-actions[bot]
fe25c2a8d8
Merge master into staging-next 2022-12-10 18:01:12 +00:00
Robert Scott
3cab5aa3bf
Merge pull request #205504 from r-ryantm/auto-update/nickel
nickel: 0.2.1 -> 0.3.0
2022-12-10 17:43:27 +00:00
Jörg Thalheim
fa3cc9fddd
Merge pull request #202040 from Mic92/luajit
luajit: riscv fixes
2022-12-10 17:23:03 +00:00
Jörg Thalheim
34342e25cf
Merge pull request #202041 from Mic92/ruby
ruby: fix cross compiling extensions
2022-12-10 17:21:25 +00:00
R. Ryantm
745a9856c6 nickel: 0.2.1 -> 0.3.0 2022-12-10 16:57:35 +00:00
Taeer Bar-Yam
f943c3fb89
add buildGems to ruby passthru
This is useful for adding ruby gems that don't come with `nixpkgs`

i.e. `pkgs.ruby.withPackages (_: [ (pkgs.ruby.buildGems ./my-gemset.nix).foo ])`
2022-12-09 12:19:26 -05:00
github-actions[bot]
48b3a17dea
Merge master into staging-next 2022-12-09 12:01:30 +00:00
Vladimír Čunát
9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
Thiago Kenji Okada
49688ce655
Merge pull request #205258 from r-ryantm/auto-update/babashka
babashka: 1.0.167 -> 1.0.168
2022-12-09 09:06:22 +00:00
R. Ryantm
65a8bc63db babashka: 1.0.167 -> 1.0.168 2022-12-09 08:43:23 +00:00
Artturin
adc8900df1 treewide: fix some core package structuredAttrs 2022-12-08 21:05:28 +02:00
Sandro
4cc7973ae6
Merge pull request #204658 from raphaelr/mbedtls-3 2022-12-08 16:38:17 +01:00
superherointj
2787fc7d1e erlang: fix build 2022-12-08 08:59:40 -05:00
Weijia Wang
166db6ef4b erlang: don't relink escript on darwin 2022-12-07 21:13:02 -05:00
Martin Weinelt
b818d8a9b3
Merge pull request #204903 from mweinelt/cpython-changelog 2022-12-08 01:14:19 +01:00
Elis Hirwing
0eddfd8d62
Merge pull request #204989 from etu/php82-stable
php82: 8.2.0-rc7 -> 8.2.0
2022-12-08 00:37:19 +01:00
Raphael Robatsch
985c8dbe14 treewide: use mbedtls 3 where possible
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-12-07 19:58:55 +00:00
figsoda
7ead9d1ea3
Merge pull request #204984 from r-ryantm/auto-update/wasmtime
wasmtime: 3.0.0 -> 3.0.1
2022-12-07 12:18:57 -05:00
Martin Weinelt
bdb82dffc0
Merge pull request #204902 from mweinelt/cpython-39-310-312 2022-12-07 17:55:35 +01:00
Martin Weinelt
e824b21ba7
python310: 3.10.8 -> 3.10.9
https://docs.python.org/release/3.10.9/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2022-42919
2022-12-07 16:41:58 +01:00
Martin Weinelt
2fce48831c
python39: 3.9.15 -> 3.9.16
https://docs.python.org/release/3.9.16/whatsnew/changelog.html
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2015-20107
2022-12-07 16:40:42 +01:00
Martin Weinelt
6dcc133aae
cpython: Update meta and add changelog url 2022-12-07 16:31:39 +01:00
Martin Weinelt
d1678fd28d
Merge pull request #204893 from mweinelt/cpython-37-38-311 2022-12-07 16:15:40 +01:00
Dany Marcoux
0c88d9b773 erlang: Add escript to $PATH
Closes #204781
2022-12-07 09:43:04 -05:00
Elis Hirwing
d7cf24f2fa
php82: 8.2.0-rc7 -> 8.2.0 2022-12-07 14:38:20 +01:00
R. Ryantm
99b0a7d6ea wasmtime: 3.0.0 -> 3.0.1 2022-12-07 12:34:05 +00:00
Martin Weinelt
1328f79d81
python312: 3.12.0a2 -> 3.12.0a3
https://docs.python.org/3.12/whatsnew/changelog.html#python-3-12-0-alpha3
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-45061
2022-12-07 02:37:58 +01:00
Martin Weinelt
f1433e66f9
python38: 3.11.0 -> 3.11.1
https://www.python.org/downloads/release/python-3111/
https://docs.python.org/release/3.11.1/whatsnew/changelog.html#python-3-11-1
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-45061
2022-12-07 01:26:55 +01:00
Martin Weinelt
71c4a3a0b1
python38: 3.8.15 -> 3.8.16
https://www.python.org/downloads/release/python-3816/
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2015-20107
2022-12-07 01:25:30 +01:00
Martin Weinelt
10bab2150c
python37: 3.7.15 -> 3.7.16
https://www.python.org/downloads/release/python-3716/
https://pythoninsider.blogspot.com/2022/12/python-3111-3109-3916-3816-3716-and.html

Fixes: CVE-2022-37454, CVE-2022-45061, CVE-2015-20107
2022-12-07 01:23:29 +01:00
Martin Weinelt
9256404e6b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-05 13:22:34 +01:00
github-actions[bot]
d267d26578
Merge master into staging-next 2022-12-05 06:01:36 +00:00
Mario Rodas
be18e7928b luau: 0.554 -> 0.555
https://github.com/Roblox/luau/releases/tag/0.555
2022-12-03 04:20:00 +00:00
Martin Weinelt
e3da5a807b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-03 01:28:01 +01:00
github-actions[bot]
a83c4dd193
Merge master into staging-next 2022-12-03 00:02:19 +00:00
Sandro
94e2931980
Merge pull request #204155 from trofi/pypy-without-xlibsWrapper 2022-12-03 00:50:27 +01:00
Martin Weinelt
72231c9177 cpython: Restore libxcrypt CFLAGS and LIBS in configureFlags 2022-12-02 22:50:55 +01:00
Sergei Trofimovich
d968c6eded pypy2, pypy3: drop unused xlibsWrapper 2022-12-02 18:18:05 +00:00
github-actions[bot]
bfdca1ca4a
Merge master into staging-next 2022-12-02 12:01:20 +00:00
7c6f434c
b72b8b94cf
Merge pull request #202797 from dotlambda/z3-python3
z3: use python3
2022-12-02 08:20:57 +00:00
github-actions[bot]
1de884edb3
Merge master into staging-next 2022-12-02 06:01:28 +00:00
R. Ryantm
6242ca0d36 babashka: 1.0.166 -> 1.0.167 2022-12-02 04:40:07 +00:00
Sandro Jäckel
7163503e90
acl2: remove python2 usage 2022-12-02 02:22:40 +01:00
Martin Weinelt
a5ab2a3fe1
Merge pull request #203468 from mweinelt/python312 2022-12-02 00:27:07 +01:00
github-actions[bot]
5dcaefe5c4
Merge staging-next into staging 2022-12-01 18:02:04 +00:00
github-actions[bot]
237453e7f7
Merge master into staging-next 2022-12-01 18:01:25 +00:00
Martin Weinelt
bcb6dbbe30 manylinux: use libxcrypt for libcrypt.so.1 2022-12-01 14:09:42 +01:00
github-actions[bot]
d7555c9ff2
Merge staging-next into staging 2022-12-01 06:01:59 +00:00
github-actions[bot]
7ea4004879
Merge master into staging-next 2022-12-01 06:01:22 +00:00
Mario Rodas
121e14dc89
Merge pull request #203799 from shadaj/patch-4
racket: mark as unbroken on darwin
2022-11-30 19:51:26 -05:00
Robert Scott
d6274e957a
Merge pull request #203664 from LeSuisse/mujs-1.3.2
mujs: 1.2.0 -> 1.3.2
2022-12-01 00:16:08 +00:00
Thomas Gerbet
47aefa51cc mujs: 1.2.0 -> 1.3.2
Fixes CVE-2022-44789.

https://git.ghostscript.com/?p=mujs.git;a=shortlog;h=refs/tags/1.3.2
2022-11-30 22:09:23 +01:00
Shadaj Laddad
3b1c417a3f
racket: mark as unbroken on darwin
#203587 fixed failures on darwin, so the package now builds fine
2022-11-30 12:58:02 -08:00
github-actions[bot]
c14692be87
Merge staging-next into staging 2022-11-30 18:01:46 +00:00
github-actions[bot]
cb51cfe745
Merge master into staging-next 2022-11-30 18:01:11 +00:00
R. Ryantm
fbcdadcb92 wasmer: 3.0.1 -> 3.0.2 2022-11-30 13:13:08 +00:00
github-actions[bot]
097d0c1dea
Merge staging-next into staging 2022-11-30 12:01:57 +00:00
github-actions[bot]
b910b25976
Merge master into staging-next 2022-11-30 12:01:13 +00:00
Mario Rodas
b78d50187d
Merge pull request #203587 from wegank/racket-minimal-darwin
racket-minimal: fix build on aarch64-darwin
2022-11-30 06:30:53 -05:00
Vladimír Čunát
21716f16b7
Merge #203428: python27: switch to ActiveState's fork
...into staging-next.  This is a topologically earlier re-merge
(than 8bfb5daca7) as the rebuild amount isn't large.
2022-11-30 10:05:19 +01:00
Jörg Thalheim
f5b5432450 ruby: fix cross compiling extensions
Update pkgs/development/interpreters/ruby/default.nix

Co-authored-by: Artturi <Artturin@artturin.com>
2022-11-30 08:04:26 +01:00
github-actions[bot]
215f22b053
Merge staging-next into staging 2022-11-30 06:02:04 +00:00
github-actions[bot]
aff62e907a
Merge master into staging-next 2022-11-30 06:01:30 +00:00
Mario Rodas
97f71c0311
Merge pull request #202653 from marsam/init-nelua
nelua: init at 2022-11-20
2022-11-29 20:22:45 -05:00
github-actions[bot]
01e997df07
Merge staging-next into staging 2022-11-29 18:02:38 +00:00
github-actions[bot]
843fc7a4a5
Merge master into staging-next 2022-11-29 18:01:54 +00:00
Weijia Wang
8b868b5616 racket-minimal: fix build on aarch64-darwin
This commit fixed a previous patch so that signatures are effectively removed and then added.
2022-11-29 16:28:06 +01:00
sternenseemann
5c3e0a2899 ngn-k: allow cross compilation to FreeBSD 13
For this we just need to advance by one additional commit on master
which fixes the compilation of libk.so on *BSD with -Werror.
Additionally we need to reflect the change that the system double
for x86_64 FreeBSD now also includes the FreeBSD version.
2022-11-29 15:57:09 +01:00
sternenseemann
f68fdcfc4e ngn-k: build k-libc flavor by default
Can be disabled by passing { withLibc = false; } via overriding
2022-11-29 15:57:09 +01:00
sternenseemann
5822bee639 ngn-k: unstable-2021-12-17 -> 2022-11-27 2022-11-29 15:57:09 +01:00
github-actions[bot]
3f79042e89
Merge staging-next into staging 2022-11-29 12:02:06 +00:00
github-actions[bot]
a6c80cc1ae
Merge master into staging-next 2022-11-29 12:01:28 +00:00
Mario Rodas
e24d38776f
Merge pull request #203375 from wegank/yex-lang-aarch64-linux
yex-lang: unbreak on aarch64-linux
2022-11-29 02:06:51 -05:00
Martin Weinelt
adae7334e4 python312: init at 3.12.0a2
https://blog.python.org/2022/10/python-3120-alpha-1-released.html
https://blog.python.org/2022/11/python-3120-alpha-2-released.html
2022-11-29 01:55:35 +01:00
Martin Weinelt
b5a4d7760d cpython: drop leftover 3.5/3.6 logic and patches 2022-11-29 01:34:59 +01:00
github-actions[bot]
777e21e080
Merge staging-next into staging 2022-11-29 00:03:13 +00:00
github-actions[bot]
e6be0713d4
Merge master into staging-next 2022-11-29 00:02:37 +00:00
sternenseemann
957408ced4 cbqn: 0.pre+date=2022-10-04 -> 0.pre+date=2022-11-27
How the bytecode is generated, was changed again slightly.
2022-11-28 15:24:45 +01:00
sternenseemann
848ef66feb mbqn: 0.pre+date=2022-10-03 -> 0.pre+date=2022-11-24 2022-11-28 15:22:48 +01:00
Thiago Kenji Okada
d345fb2500 python27: fix CVE-2021-3733 2022-11-28 11:45:40 +00:00
Thiago Kenji Okada
b3d02fb8b5 python27: add thiagokokada as maintainer 2022-11-28 09:41:57 +00:00
Thiago Kenji Okada
14334cb683 python27: switch to ActiveState's fork for Python 2
ActiveState is a company that is maintaining a fork of Python 2 to fixes
its security issues. Their support is paid, however the code is
open-source. See the details here:
https://www.activestate.com/products/python/python-2-end-of-life-security-updates/

This enable us to drop a bunch of CVE's patches for Python 2.7 and also
it should be easier to maintain, since we can just bump the version once
ActiveState tags a new version.
2022-11-28 09:41:57 +00:00
Martin Weinelt
acb119aeac
Merge pull request #203362 from thiagokokada/add-patches-to-python27-cves 2022-11-28 01:56:07 +01:00
Weijia Wang
db4c1fb5ce yex-lang: unbreak on aarch64-linux 2022-11-28 01:13:37 +01:00
github-actions[bot]
23dcd1620e
Merge staging-next into staging 2022-11-28 00:03:09 +00:00
Thiago Kenji Okada
e7d9b0b19d python27: add patches for known security issues
Add patches from Arch Linux package (that itself source its patches from
Gentoo) to the following known security issues in Python 2.7:

- CVE-2020-26116
- CVE-2020-27619
- CVE-2020-8492

This should cover all security issues currently listed in
https://www.activestate.com/products/python/python-2-end-of-life-security-updates/.
2022-11-27 22:46:20 +00:00
Elis Hirwing
9222c47479
Merge pull request #202799 from drupol/php/november-2022-bumps
{php80,php81,php82}: November bumps
2022-11-27 20:23:42 +01:00
Pol Dellaiera
5a736d1ee2
php80: 8.0.25 -> 8.0.26
Changelog: https://www.php.net/ChangeLog-8.php#8.0.26
2022-11-27 09:29:02 +01:00
Martin Weinelt
53d777c56f
Merge pull request #202126 from helsinki-systems/init/openssl_legacy 2022-11-26 23:47:31 +01:00
github-actions[bot]
627e652b73
Merge staging-next into staging 2022-11-26 00:02:47 +00:00
Anderson Torres
32802abcfd
Merge pull request #202870 from jthulhu/fix-j-profile
J: fixing init script
2022-11-25 20:44:26 -03:00
BlackBeans
ef7e852590 J: fixing init script
The startup script used by jconsole (/bin/profile.ijs) doesn't try very hard to understand the file hierarchy it lives in, and just did not work with NixOS. For reasons unknown, it Just Worked for some time, but finally broke with an actual error message every time you launch jconsole in recent versions of nixpkgs.
This commit just overwrites all the heuristics J uses to find out where its installation files are, to point where they actually are put by the installer.
2022-11-25 21:22:21 +01:00
Sandro
debfa6127d
Merge pull request #202340 from NickCao/wasmer 2022-11-25 20:26:35 +01:00
github-actions[bot]
e5a45ed6d9
Merge staging-next into staging 2022-11-25 18:02:16 +00:00
Weijia Wang
62b8fc7725 erlangR24: fix build on x86_64-darwin 2022-11-25 11:04:00 -05:00
github-actions[bot]
f8c61f361e
Merge staging-next into staging 2022-11-25 12:02:07 +00:00
Pol Dellaiera
aa634993cd php82: 8.2.0rc6 -> 8.2.0rc7
News: https://github.com/php/php-src/blob/php-8.2.0RC7/NEWS
2022-11-25 09:32:07 +01:00
Pol Dellaiera
a8b76c097a php81: 8.1.12 -> 8.1.13
Changelog: https://www.php.net/ChangeLog-8.php#8.1.13
2022-11-25 09:31:53 +01:00
R. Ryantm
6df0b07e41 babashka: 1.0.165 -> 1.0.166 2022-11-25 06:37:08 +00:00
Nick Cao
b79697e89b
wasmer: 2.3.0 -> 3.0.1 2022-11-24 22:04:20 +08:00
github-actions[bot]
83b5fc631c
Merge staging-next into staging 2022-11-23 18:01:46 +00:00
Mario Rodas
ca9f905b44 nelua: init at 2022-11-20 2022-11-23 04:20:00 +00:00
Mario Rodas
eed26dd105 zuo: 2022-11-12 -> 2022-11-15 2022-11-23 04:20:00 +00:00
R. Ryantm
de50b1dc24 wasmtime: 2.0.2 -> 3.0.0 2022-11-23 12:08:11 +00:00
github-actions[bot]
9c6223b5f6
Merge staging-next into staging 2022-11-21 18:01:33 +00:00
Artturi
6b5019a48f
Merge pull request #202156 from NickCao/guile-cross
guile_*: use correct version of guile for cross compilation
2022-11-21 17:52:25 +02:00
ajs124
2b3c729654 python3: use openssl_legacy 2022-11-21 13:46:00 +01:00
ajs124
f06f950183 Revert "Revert "python3: pin to openssl_1_1""
This reverts commit 017fd89527.
2022-11-21 13:46:00 +01:00
Nick Cao
aec0480b20
guile_2_2: use correct version of guile for cross compilation 2022-11-21 15:56:57 +08:00
Nick Cao
801b38a29c
guile_3_0: use correct version of guile for cross compilation 2022-11-21 15:56:55 +08:00
Mario Rodas
ceccee458f
Merge pull request #200422 from amarshall/ruby-r13y
ruby: Make reproducible
2022-11-20 13:02:13 -05:00
github-actions[bot]
1fde037c41
Merge master into staging-next 2022-11-20 18:01:14 +00:00
Maximilian Bosch
2580440389
Merge pull request #198470 from RaitoBezarius/nc25-openssl
nextcloud25: use openssl 1.1 as a PHP extension to fix RC4 encryption
2022-11-20 18:32:41 +01:00
Elis Hirwing
14cc62d7e6
Merge pull request #201000 from drupol/php/8.2.0
php82: init at 8.2.0rc6
2022-11-20 16:01:00 +01:00
Jörg Thalheim
2a694d7ba2 luajit: mark as broken on riscv64 2022-11-20 13:51:41 +01:00
github-actions[bot]
9dd80cf7a7
Merge master into staging-next 2022-11-20 06:01:12 +00:00
github-actions[bot]
d73198b179
Merge master into staging-next 2022-11-18 18:01:19 +00:00
Mario Rodas
b007fb3031 luau: 0.552 -> 0.554
https://github.com/Roblox/luau/releases/tag/0.553
https://github.com/Roblox/luau/releases/tag/0.554
2022-11-18 04:20:00 +00:00
Mario Rodas
d2226ea6e0 racket,racket-minimal: 8.6 -> 8.7
https://download.racket-lang.org/v8.7.html
2022-11-18 04:20:00 +00:00
github-actions[bot]
034cfc0b96
Merge master into staging-next 2022-11-17 00:02:23 +00:00
figsoda
ce691bb462
Merge pull request #201353 from figsoda/lunatic
lunatic: 0.10.1 -> 0.12.0
2022-11-16 14:17:07 -05:00
github-actions[bot]
9b8d89f305
Merge master into staging-next 2022-11-16 18:01:17 +00:00
Pol Dellaiera
1812d1540e
php82: init at 8.2.0rc6 2022-11-16 18:57:26 +01:00
R. Ryantm
b60a96d063 clojure: 1.11.1.1189 -> 1.11.1.1200 2022-11-16 16:23:19 +00:00
figsoda
4a599be775 lunatic: 0.10.1 -> 0.12.0 2022-11-15 13:21:30 -05:00
Jan Tojnar
69782b499b Merge branch 'master' into staging-next
; Conflicts:
;	pkgs/development/lisp-modules-new/ql.nix
2022-11-15 13:02:43 +01:00
Weijia Wang
d72bcc2bc9 erlang: wxmac -> wxGTK 2022-11-14 18:24:54 -05:00
Silvan Mosberger
711cffac1e
Merge pull request #199800 from abathur/bats_shrink_libraries
bats.libraries: reduce output size
2022-11-14 22:49:07 +01:00
github-actions[bot]
b619a02d1a
Merge master into staging-next 2022-11-14 00:02:34 +00:00
Mario Rodas
8ed9d99b10
Merge pull request #200341 from r-ryantm/auto-update/oak
oak: 0.2 -> 0.3
2022-11-13 17:40:37 -05:00
github-actions[bot]
39ffc1cb70
Merge master into staging-next 2022-11-13 18:01:19 +00:00
Pol Dellaiera
364a7d2920
php: switch to nts by default 2022-11-13 11:47:27 +01:00
github-actions[bot]
a49b971934
Merge master into staging-next 2022-11-13 06:01:14 +00:00
github-actions[bot]
06720b0dd1
Merge master into staging-next 2022-11-12 18:01:13 +00:00
R. Ryantm
7785d30d07 elixir_1_14: 1.14.1 -> 1.14.2 2022-11-12 08:24:09 -05:00
github-actions[bot]
d3c8e3965d
Merge staging-next into staging 2022-11-11 18:01:49 +00:00
Maximilian Bosch
35b146ca31
nixos/nextcloud: fixup openssl compat change
Upon testing the change itself I realized that it doesn't build properly
because

* the `pname` of a php extension is `php-<name>`, not `<name>`.
* calling the extension `openssl-legacy` resulted in PHP trying to compile
  `ext/openssl-legacy` which broke since it doesn't exist:

      source root is php-8.1.12
      setting SOURCE_DATE_EPOCH to timestamp 1666719000 of file php-8.1.12/win32/wsyslog.c
      patching sources
      cdToExtensionRootPhase
      /nix/store/48mnkga4kh84xyiqwzx8v7iv090i7z66-stdenv-linux/setup: line 1399: cd: ext/openssl-legacy: No such file or directory

I didn't encounter that one before because I was mostly interested in
having a sane behavior for everyone not using this "feature" and the
documentation around this. My findings about the behavior with turning
openssl1.1 on/off are still valid because I tested this on `master` with
manually replacing `openssl` by `openssl_1_1` in `php-packages.nix`.

To work around the issue I had to slightly modify the extension
build-system for PHP:

* The attribute `extensionName` is now relevant to determine the output
  paths (e.g. `lib/openssl.so`). This is not a behavioral change for
  existing extensions because then `extensionName==name`.

  However when specifying `extName` in `php-packages.nix` this value is
  overridden and it is made sure that the extension called `extName` NOT
  `name` (i.e. `openssl` vs `openssl-legacy`) is built and installed.

  The `name` still has to be kept to keep the legacy openssl available
  as `php.extensions.openssl-legacy`.

Additionally I implemented a small VM test to check the behavior with
server-side encryption:

* For `stateVersion` below 22.11, OpenSSL 1.1 is used (in `basic.nix`
  it's checked that OpenSSL 3 is used). With that the "default"
  behavior of the module is checked.

* It is ensured that the PHP interpreter for Nextcloud's php-fpm
  actually loads the correct openssl extension.

* It is tested that (encrypted) files remain usable when (temporarily)
  installing OpenSSL3 (of course then they're not decryptable, but on a
  rollback that should still be possible).

Finally, a few more documentation changes:

* I also mentioned the issue in `nextcloud.xml` to make sure the issue
  is at least mentioned in the manual section about Nextcloud. Not too
  much detail here, but the relevant option `enableBrokenCiphersForSSE`
  is referenced.

* I fixed a few minor wording issues to also give the full context
  (we're talking about Nextcloud; we're talking about the PHP extension
  **only**; please check if you really need this even though it's
  enabled by default).

  This is because I felt that sometimes it might be hard to understand
  what's going on when e.g. an eval-warning appears without telling where
  exactly it comes from.
2022-11-11 14:45:46 +01:00
Rafael Fernández López
2abb7efadb
wasmtime: 2.0.1 -> 2.0.2 2022-11-11 10:53:04 +01:00
Mario Rodas
76097e8077 zuo: 2022-07-25 -> 2022-11-12 2022-11-11 04:20:00 +00:00
Lassulus
15a42961b6
Merge pull request #196906 from helsinki-systems/feat/less-openssl_1_1 2022-11-11 00:21:52 +01:00
github-actions[bot]
746c0e5fbc
Merge staging-next into staging 2022-11-10 12:02:00 +00:00
github-actions[bot]
f3a93620b1
Merge master into staging-next 2022-11-10 12:01:27 +00:00