Commit Graph

524245 Commits

Author SHA1 Message Date
Robert Schütz
39120a6edb
Merge pull request #249990 from dotlambda/clubhouse-cli-buildNpmPackage
clubhouse-cli: use buildNpmPackage
2023-09-09 22:23:56 +00:00
Robert Schütz
c52f7e84b4
Merge pull request #253954 from dotlambda/nixops_unstable-insecure
nixops_unstable: mark cryptography insecure
2023-09-09 22:22:12 +00:00
Samuel Ainsworth
c9bf6dd5f0
Merge pull request #254198 from r-ryantm/auto-update/python310Packages.yaspin
python310Packages.yaspin: 2.3.0 -> 3.0.1
2023-09-09 17:52:49 -04:00
Mario Rodas
7ae83c4e71
Merge pull request #254234 from lunik1/iosevka_26.3.0->26.3.3
iosevka: 26.3.0 -> 26.3.3
2023-09-09 16:44:52 -05:00
Mario Rodas
db35fd65b2
Merge pull request #254289 from r-ryantm/auto-update/postgresql11JitPackages.pgtap
postgresql11JitPackages.pgtap: 1.2.0 -> 1.3.0
2023-09-09 16:41:59 -05:00
Mario Rodas
523a1875d4
Merge pull request #253035 from IGJoshua/wonderdraft
wonderdraft: init at 1.1.7.3
2023-09-09 16:41:40 -05:00
Robert Schütz
256f0639aa
Merge pull request #253755 from dotlambda/sharedown-fetchYarnDeps
sharedown: use fetchYarnDeps
2023-09-09 21:25:50 +00:00
ajs124
3e7440dc6b
Merge pull request #254266 from yayayayaka/gitlab-16.3.2
gitlab: 16.3.1 -> 16.3.2
2023-09-09 23:13:01 +02:00
Martin Weinelt
8593999542 wallabag: rebase data env patch 2023-09-09 23:07:20 +02:00
Artturi
de63d2e5dd
Merge pull request #249157 from OroraTech/chore/fix-sphinx-hook 2023-09-09 23:57:15 +03:00
Fabian Affolter
1e309d2ee5
Merge pull request #254269 from r-ryantm/auto-update/python310Packages.mypy-boto3-builder
python310Packages.mypy-boto3-builder: 7.18.2 -> 7.19.0
2023-09-09 22:39:51 +02:00
R. Ryantm
6d956e4410 postgresql11JitPackages.pgtap: 1.2.0 -> 1.3.0 2023-09-09 20:34:47 +00:00
Doron Behar
e5941e7f89
Merge pull request #253605 from yu-re-ka/gotify-update-script
gotify: refactor, use nix-update
2023-09-09 20:23:28 +00:00
Nick Cao
adeb7629fc
Merge pull request #242897 from mweinelt/yangson-1.4.17
python310Packages.yangson: 1.4.16 -> 1.4.17
2023-09-09 15:52:03 -04:00
Emily
75b435f663
Merge pull request #254118 from networkException/update-chromium
chromium,ungoogled-chromium: 116.0.5845.140 -> 116.0.5845.179
2023-09-09 21:51:40 +02:00
Weijia Wang
120e9de3a4
Merge pull request #241277 from donovanglover/ironbar
ironbar: init at 0.13.0
2023-09-09 21:40:44 +02:00
happysalada
1ef7374323 python310Packages.qdrant-client: 1.1.0 -> 1.5.0 2023-09-09 19:39:46 +00:00
happysalada
db8fd375a5 python310Packages.fastembed: init at unstable-2023-09-07 2023-09-09 19:39:46 +00:00
Robert Schütz
5e56902294
Merge pull request #254116 from stiglers-eponym/update-beamerpresenter
beamerpresenter: 0.2.3 -> 0.2.4
2023-09-09 19:39:35 +00:00
Leandro Reina
a391639845 python3Packages.sphinxHook: Fix cross compilation
Failed due to using host sphinx instead of build one.
2023-09-09 21:34:33 +02:00
Weijia Wang
e6fccd39a1
Merge pull request #254123 from nbraud/nixpkgs-update/nicoo
Set `passthru.updateScript` for nicoo's packages
2023-09-09 21:34:28 +02:00
Weijia Wang
7548f17e61
Merge pull request #254157 from kashw2/denaro
denaro: 2023.8.1 -> 2023.9.1
2023-09-09 21:27:58 +02:00
R. Ryantm
41c727bd02 go-task: 3.28.0 -> 3.29.1 2023-09-09 21:26:43 +02:00
Francesco Gazzetta
ceff36af31
Merge pull request #253985 from r-ryantm/auto-update/frugal
frugal: 3.16.24 -> 3.16.27
2023-09-09 19:25:52 +00:00
Francesco Gazzetta
88bd4c2622
Merge pull request #254000 from r-ryantm/auto-update/freerdpUnstable
freerdpUnstable: 2.11.0 -> 2.11.1
2023-09-09 19:23:15 +00:00
Joshua Suskalo
503a09114c wonderdraft: init at 1.1.7.3 2023-09-09 21:15:07 +02:00
Joshua Suskalo
094dea8d1f maintainers: add jsusk 2023-09-09 21:15:07 +02:00
Ulrik Strid
0f568acbef
Merge pull request #254003 from vbgl/ocaml-5.1.0
ocaml-ng.ocamlPackages_5_1.ocaml: init at 5.1.0-rc3
2023-09-09 21:04:17 +02:00
Yaya
abe4c2d003 gitlab: 16.3.1 -> 16.3.2
https://gitlab.com/gitlab-org/gitlab/-/blob/v16.3.2-ee/CHANGELOG.md
2023-09-09 20:59:33 +02:00
Martin Weinelt
e07eca253b
Merge pull request #254170 from JamieMagee/anel-pwrctrl-homeassistant
python311Packages.anel-pwrctrl-homeassistant: init at 0.0.1.dev2
2023-09-09 20:53:37 +02:00
Donovan Glover
c8268da6d1 ironbar: init at 0.13.0
Co-authored-by: Yavor Kolev <yavornkolev@gmail.com>
2023-09-09 20:48:37 +02:00
Francesco Gazzetta
e72d1a3ac4
Merge pull request #253801 from fgaz/passes/init
passes: init at 0.8
2023-09-09 18:44:54 +00:00
Martin Weinelt
3eb4b5167b python310Packages.yangson: 1.4.16 -> 1.4.18 2023-09-09 20:37:43 +02:00
Fabian Affolter
a9906d685a
Merge pull request #254254 from fabaff/trueseeing-bump
trueseeing: 2.1.5 -> 2.1.7
2023-09-09 20:37:31 +02:00
Francesco Gazzetta
19aa8c95bd passes: init at 0.8 2023-09-09 20:30:01 +02:00
Brian McGee
848113c24f nats-server: add mainProgram for nats-server
The following warning was being output when using `nats-server`:

```
trace: warning: getExe: Package "nats-server-2.9.21" does not have the meta.mainProgram attribute. We'll assume that the main program has the same name for now, but this behavior is deprecated, because it leads to surprising errors when the assumption does not hold. If the package has a main program, please set `meta.mainProgram` in its definition to make this warning go away. Otherwise, if the package does not have a main program, or if you don't control its definition, use getExe' to specify the name to the program, such as lib.getExe' foo "bar".
```
2023-09-09 20:29:46 +02:00
Janik
27eedb5601
Merge pull request #246201 from n0emis/zigbee2mqtt-groups-file 2023-09-09 20:19:50 +02:00
Martin Weinelt
9ad0b7b6cf
Merge pull request #238828 from mweinelt/wallabag-2.6.0
wallabag: 2.5.4 -> 2.6.6
2023-09-09 20:15:59 +02:00
Oliver Schmidt
e362fe9c6d security/acme: limit concurrent certificate generations
fixes #232505

Implements the new option `security.acme.maxConcurrentRenewals` to limit
the number of certificate generation (or renewal) jobs that can run in
parallel. This avoids overloading the system resources with many
certificates or running into acme registry rate limits and network
timeouts.

Architecture considerations:
- simplicity, lightweight: Concerns have been voiced about making this
  already rather complex module even more convoluted. Additionally,
  locking solutions shall not significantly increase performance and
  footprint of individual job runs.
  To accomodate these concerns, this solution is implemented purely in
  Nix, bash, and using the light-weight `flock` util. To reduce
  complexity, jobs are already assigned their lockfile slot at system
  build time instead of dynamic locking and retrying. This comes at the
  cost of not always maxing out the permitted concurrency at runtime.
- no stale locks: Limiting concurrency via locking mechanism is usually
  approached with semaphores. Unfortunately, both SysV as well as
  POSIX-Semaphores are *not* released when the process currently locking
  them is SIGKILLed. This poses the danger of stale locks staying around
  and certificate renewal being blocked from running altogether.
  `flock` locks though are released when the process holding the file
  descriptor of the lock file is KILLed or terminated.
- lockfile generation: Lock files could either be created at build time
  in the Nix store or at script runtime in a idempotent manner.
  While the latter would be simpler to achieve, we might exceed the number
  of permitted concurrent runs during a system switch: Already running
  jobs are still locked on the existing lock files, while jobs started
  after the system switch will acquire locks on freshly created files,
  not being blocked by the still running services.
  For this reason, locks are generated and managed at runtime in the
  shared state directory `/var/lib/locks/`.

nixos/security/acme: move locks to /run

also, move over permission and directory management to systemd-tmpfiles

nixos/security/acme: fix some linter remarks in my code

there are some remarks left for existing code, not touching that

nixos/security/acme: redesign script locking flow

- get rid of subshell
- provide function for wrapping scripts in a locked environment

nixos/acme: improve visibility of blocking on locks

nixos/acme: add smoke test for concurrency limitation

heavily inspired by m1cr0man

nixos/acme: release notes entry on new concurrency limits

nixos/acme: cleanup, clarifications
2023-09-09 20:13:18 +02:00
hexchen
084dfe801e obs-studio: add flag for decklink support 2023-09-09 19:45:50 +02:00
hexchen
08f93ba684 decklink: update to 12.5 2023-09-09 19:45:50 +02:00
hexchen
59271ebaa5 decklink: update to 12.2 2023-09-09 19:45:50 +02:00
hexchen
15db31b2d9 nixos/decklink: init 2023-09-09 19:45:50 +02:00
hexchen
517cf05cd7 blackmagicDesktopVideo: init at 12.0a14 2023-09-09 19:45:50 +02:00
hexchen
df68d342c9 linuxPackages.decklink: init at 12.0a14 2023-09-09 19:45:50 +02:00
Nick Cao
0b7160e88f
Merge pull request #254249 from figsoda/hack
cargo-hack: 0.6.5 -> 0.6.6
2023-09-09 13:44:46 -04:00
Nick Cao
10f8ec7852
Merge pull request #254237 from r-ryantm/auto-update/kubernetes-polaris
kubernetes-polaris: 8.5.0 -> 8.5.1
2023-09-09 13:43:47 -04:00
Nick Cao
f45cfd190a
Merge pull request #254248 from figsoda/typstfmt
typstfmt: 0.2.1 -> 0.2.2
2023-09-09 13:43:15 -04:00
Nick Cao
42d92bbbcc
Merge pull request #254245 from fabaff/python-roborock-bump
python311Packages.python-roborock: 0.32.4 -> 0.33.2
2023-09-09 13:42:44 -04:00
Weijia Wang
0409112162
Merge pull request #254270 from Mic92/fix-eval
camunda-modeler: fix eval
2023-09-09 19:41:41 +02:00