Commit Graph

634793 Commits

Author SHA1 Message Date
Wölfchen
37177b6182 obsidian: 1.5.12 -> 1.6.3
(cherry picked from commit 1f577fc00a)
2024-08-27 21:32:31 +01:00
R. Ryantm
1bb1e77ae2 amazon-ssm-agent: 3.3.484.0 -> 3.3.551.0
(cherry picked from commit be7b4539ea)
2024-08-27 20:28:30 +00:00
José Ribeiro
f7d1c7b9f2 feishin: 0.7.1 -> 0.7.3
Diff: https://github.com/jeffvli/feishin/compare/v0.7.1...v0.7.3
Changelog:
- https://github.com/jeffvli/feishin/releases/tag/v0.7.2
- https://github.com/jeffvli/feishin/releases/tag/v0.7.3

Feishin now depends on Electron v31
(fd893224b3),
which is not packaged yet: https://github.com/NixOS/nixpkgs/issues/325428

(cherry picked from commit bd6cce9218)
2024-08-27 20:26:23 +00:00
José Ribeiro
1a11e462c1 feishin: move to pkgs/by-name
(cherry picked from commit 2c19ea977c)
2024-08-27 20:26:23 +00:00
TomaSajt
8fbcdbc68d ride: add patch to support later electron versions
(cherry picked from commit 27376c9e1f)
2024-08-27 20:20:55 +00:00
TomaSajt
b2a845d7ee blockbench: remove electron version pin
(cherry picked from commit 44d3de2f17)
2024-08-27 20:16:26 +00:00
Emily
72b6efd6ce
[24.05] hydra_unstable: Fix CVE-2024-45049 (#337766) 2024-08-27 21:14:07 +01:00
emilylange
6d175be58f electron-source.electron_{27,28}: remove instead of marking them as EOL
Follow-up to 7892638379.

We still have the EOLed `electron-{27,28}-bin` builds, that can be used
instead.

`electron-source.electron_{27,28}` do not build anymore due to LLVM
incompatibilities.

This is beneficial to users of software that still depend on those EOLed
electron versions as well.

Instead of wasting potentially hours of compute trying to build known
broken versions from source, the working binary variants will be used.

Furthermore, this allows us to cleanup the underlying chromium and
electron-source derivations from now unused version conditions such
as version specific patches and build flags.

(cherry picked from commit 268ce0e562)
2024-08-27 20:56:33 +01:00
Alyssa Ross
3ed9728d5c electron*: mark older versions as EOL
Link: https://www.electronjs.org/docs/latest/tutorial/electron-timelines#timeline
Link: https://github.com/NixOS/nixpkgs/pull/318857#issuecomment-2161462390
(cherry picked from commit 7892638379)
2024-08-27 20:56:25 +01:00
eymeric
3854dde465 antares: 0.7.24 -> 0.7.28
(cherry picked from commit 5c764c21d8)
2024-08-27 20:39:21 +01:00
Emily
2aee0a7b76
[Backport release-24.05] yarn2nix: remove GPLv3 licence (#337773) 2024-08-27 20:28:31 +01:00
Emily
1a42560e0d yarn2nix: remove GPLv3 licence
All contributors that have made contributions at all
likely to be copyrightable have agreed to relicense this
code under the same MIT licence as the rest of Nixpkgs in
<https://github.com/NixOS/nixpkgs/issues/334374>.

Note that this applies to all previous versions of the code, including
in older Nixpkgs versions where the GPLv3 text is still present and the
original yarn2nix repositories before they were imported into Nixpkgs.

Closes: #334267
Closes: #334374
(cherry picked from commit df1aa3543c)
2024-08-27 19:23:25 +00:00
Christina Sæøåræånsæn
bcb8ab6121
[24.05] simplex-chat-desktop: 5.8.1 -> 6.0.3 (#337536)
Reasoning: While superficially looking like a major version release, this doesn't actually introduce breaking changes according to maintainer, and besides, it's a privacy chat program, where security fixes (even if minor) have been introduced, so it seems reasonable to backport this.
2024-08-27 21:13:13 +02:00
Emery Hemingway
361c1e5c2a eris-go: 20240128 -> 20240826
(cherry picked from commit 780a7d3fe0)
2024-08-27 19:08:30 +00:00
Emery Hemingway
665a1853b5 nixos/eris-server: update comment
(cherry picked from commit f5b732e9bf)
2024-08-27 19:08:30 +00:00
Janne Heß
a4eae08694
hydra_unstable: Fix CVE-2024-45049 2024-08-27 20:51:04 +02:00
Emily
5a494b5d2a
[Backport release-24.05] signal-desktop: replace unlicensed Apple emoji (#337646) 2024-08-27 17:40:02 +01:00
Will Fancher
4797a40769
[Backport release-24.05] nixos/systemd/initrd: Fix emergencyAccess to work with null. (#336418) 2024-08-27 12:12:12 -04:00
Emily
eb8596f3b9
[Backport release-24.05] picosnitch: mark as vulnerable (#337734) 2024-08-27 16:31:12 +01:00
Emily
f44a0b4e11 picosnitch: mark as vulnerable
(cherry picked from commit 98f36e5c98)
2024-08-27 15:30:25 +00:00
Cosima Neidahl
b316d12227
[Backport release-24.05] lomiri.lomiri-gallery-app: init at 3.0.2 (#336579) 2024-08-27 16:20:44 +02:00
Nick Cao
024073c9e9
[Backport release-24.05] netbird: 0.28.8 -> 0.28.9 (#337575) 2024-08-27 07:26:15 -04:00
laalsaas
691e09524a nixos/varnish: change default stateDir to /run
The stateDir, or as varnish calls it, the workdir should always be a
tmpfs. Otherwise, performance issues may occur. See:

- https://varnish-cache.org/docs/trunk/reference/varnishd.html#opt-n

- https://github.com/varnishcache/varnish-cache/issues/4121

(cherry picked from commit 9e5316a1c5)
2024-08-27 10:22:15 +00:00
Vladimír Čunát
ce0763669f knot-dns: 3.3.8 -> 3.3.9
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.9
(cherry picked from commit 9f5005311b)
2024-08-27 08:52:43 +00:00
Mats
676a252460 jellyfin: 10.9.7 -> 10.9.10
(cherry picked from commit b691f9cac2)
2024-08-27 08:48:17 +00:00
Mats
e12c5260f7 jellyfin-web: 10.9.7 -> 10.9.10
(cherry picked from commit 7db697aa32)
2024-08-27 08:48:17 +00:00
R. Ryantm
404584d54d thunderbird-unwrapped: 128.1.0esr -> 128.1.1esr
(cherry picked from commit 36e6203fb7)
2024-08-27 08:33:22 +00:00
Emily
c420563371 signal-desktop: replace unlicensed Apple emoji
Signal ships the Apple emoji set without a licence via an npm package
and upstream does not seem terribly interested in fixing this; see:

* <https://github.com/signalapp/Signal-Android/issues/5862>
* <https://whispersystems.discoursehosting.net/t/signal-is-likely-violating-apple-license-terms-by-using-apple-emoji-in-the-sticker-creator-and-android-and-desktop-apps/52883>

I don’t want to mark Signal as `lib.licenses.unfree`, so this change
instead replaces the bundled Apple emoji PNGs with ones generated
from our freely‐licensed Noto Color Emoji font.

I chose Noto Color Emoji because it is the best‐maintained FOSS
emoji font, and because Signal Android will also use the Noto emoji
if the “Chats → Keyboard → Use system emoji” setting is
turned on. Therefore, Noto Color Emoji is both within the bounds
of the Signal user experience on other platforms, and more likely
to match the emoji font installed on a NixOS system to boot. I have
verified that Noto Color Emoji covers all the standalone emoji that
the bundled Apple set does, and could not find any emoji sequence
that reliably displayed correctly in Signal before these changes but
did not afterwards. (Though I sure did find a good number of emoji
that displayed weirdly in Signal both before and after.)

Signal will also download and cache large versions of the Apple
emoji from their own update server at runtime. This does not pose
a copyright concern for the Nixpkgs cache, but would result in
inconsistent presentation between small and large emoji. Therefore,
we also point these to our Noto Color Emoji PNGs, and gain a little
privacy in the process.

**No invasive patches are made to the Signal code;** the only
changes are to replace the unlicensed Apple emoji files with our own,
and replace the URL that large versions are fetched from to point
to them. There is no functional change to the application other
than showing different images on the client and not requesting the
jumbomoji pack files from the Signal update server. Ideally we’d
build this package from source and simply omit the problematic files
in the first place, but apparently that’s a little tricky and we
should solve the compliance problem now.

The best solution, of course, would be for Signal to replace their
unlicensed copy of Apple’s emoji with a freely‐licensed set
compatible with their AGPLv3 licence. I may try and raise this
situation again with Signal, although given the past response I am
not optimistic, but I wanted to first address the potential copyright
violation in Nixpkgs as swiftly as possible.

Although the Python script used to copy and rename the Noto PNGs
is very simple, I have extensively documented it to help increase
confidence in it and ease further maintenance. To reflect my
willingness to keep this change maintained and take responsibility
for it, I have added myself to the package maintainer list.

These changes actually result in the uncompressed size of the resulting
package decreasing from 450 MiB to 435 MiB; as Signal would ordinarily
download and cache up to 27 MiB of jumbomoji sheets from their servers
during use, the effective disk space savings are likely to be higher.

Thanks to @mjm for helping test this.

(cherry picked from commit 98648422e8)
2024-08-27 06:37:07 +00:00
Emily
2e7721ba4d signal-desktop: add myself to maintainers
(cherry picked from commit 8bd7a3b3b1)
2024-08-27 06:37:07 +00:00
rnhmjoj
a8f54fe6ea bup: move to pkgs/by-name and reformat
(cherry picked from commit 881aca9e20)
2024-08-27 06:13:17 +00:00
rnhmjoj
3eff4070df bup: 0.33.3 -> 0.33.4
(cherry picked from commit e0890103e3)
2024-08-27 06:13:17 +00:00
Martin Weinelt
36bae45077
[release-24.05] pretix: apply patch for CVE-2024-8113 (#337614) 2024-08-27 05:03:44 +02:00
Martin Weinelt
08e5e55c2a
pretix: apply patch for CVE-2024-8113
https://pretix.eu/about/en/blog/20240823-release-2024-7-1/
2024-08-27 04:17:03 +02:00
Emily
901b587393
[24.05] maintainers: remove superherointj (#337585) 2024-08-27 01:08:21 +01:00
superherointj
3e9a1b6caf maintainers: remove superherointj 2024-08-26 20:09:42 -03:00
Emily
787c876db3
[Backport release-24.05] bitwarden-desktop: 2024.6.4 -> 2024.8.0 (#337322) 2024-08-26 23:41:33 +01:00
Vri
528398da64 netbird: 0.28.8 -> 0.28.9
(cherry picked from commit 0b1f19f485)
2024-08-26 22:19:57 +00:00
Vri
29e54dda68 maintainer: add vrifox
(cherry picked from commit 83df8cead3)
2024-08-26 22:19:57 +00:00
K900
f90b6428e5
[Backport release-24.05] Kernel: update testing to 6.11-rc5 (#337574) 2024-08-27 01:07:55 +03:00
Zoom
49cc384174 Kernel: update testing to 6.11-rc5
Update `linuxPackages_testing` from 6.11-rc4 to 6.11-rc5

(cherry picked from commit 48e00dda26)
2024-08-26 22:06:56 +00:00
Robert Scott
c2fb017dd3 starship: add patch for CVE-2024-41815 2024-08-26 22:41:49 +01:00
Emily
3441b7d077
[Backport release-24.05] forgejo-runner: 3.4.1 -> 3.5.1 (#337544) 2024-08-26 23:14:39 +02:00
Artturin
e9576c6b86
[Backport release-24.05] Discord updates (#337539) 2024-08-26 23:45:11 +03:00
emilylange
ed6ca3c6a8
forgejo-runner: 3.5.0 -> 3.5.1
https://code.forgejo.org/forgejo/runner/releases/tag/v3.5.1

https://code.forgejo.org/forgejo/runner/src/tag/v3.5.1/RELEASE-NOTES.md

diff: https://code.forgejo.org/forgejo/runner/compare/v3.5.0...v3.5.1
(cherry picked from commit ecf6bf1ebf)
2024-08-26 22:12:19 +02:00
R. Ryantm
7c7a8c1aee forgejo-runner: 3.4.1 -> 3.5.0
(cherry picked from commit 8cad9950e3)
2024-08-26 20:10:51 +00:00
Artturin
9608b32d81 Discord updates
discord: 0.0.64 -> 0.0.65

discord-ptb: 0.0.98 -> 0.0.101

discord-canary: 0.0.465 -> 0.0.475

pkgsCross.aarch64-darwin.discord: 0.0.313 -> 0.0.316

pkgsCross.aarch64-darwin.discord-ptb: 0.0.127 -> 0.0.130

pkgsCross.aarch64-darwin.discord-canary: 0.0.574 -> 0.0.583

pkgsCross.aarch64-darwin.discord-development: 0.0.45 -> 0.0.46

(cherry picked from commit 9490a5f310)
2024-08-26 19:42:13 +00:00
Artturin
e3f4472453
[Backport release-24.05] discord: 0.0.63 -> 0.0.64 (#337537) 2024-08-26 22:41:32 +03:00
R. Ryantm
3f6b5336eb discord: 0.0.63 -> 0.0.64
(cherry picked from commit 10913b690b)
2024-08-26 19:32:08 +00:00
R. Ryantm
e4066581c7
simplex-chat-desktop: 5.8.1 -> 6.0.3
(cherry picked from commit a852d3de67)
2024-08-26 14:07:16 -05:00
R. Ryantm
b67636a4b1 flyctl: 0.2.114 -> 0.2.120
(cherry picked from commit 1c14741fe2)
2024-08-26 18:14:23 +00:00