Commit Graph

5935 Commits

Author SHA1 Message Date
Martin Weinelt
b948496d97
dtv-scan-tables: 2020-05-18 -> 2022-10-27
Extracted from tvheadend and exposed as top-level attribute.
2022-12-21 16:58:17 +01:00
Bobby Rong
b980da8ad0
Merge pull request #206794 from montchr/update-iosevka-bin
iosevka-bin: 16.7.0 -> 16.8.2
2022-12-21 20:32:06 +08:00
Sandro
708d255245
Merge pull request #205899 from drupol/font/add-garamond-libre
garamond-libre: init at 1.4
2022-12-20 15:56:47 +01:00
Pol Dellaiera
c690067fec
garamond-libre: init at 1.4 2022-12-20 08:35:00 +01:00
Anderson Torres
d9b94edb54
Merge pull request #206936 from Math-42/master
gruvbox-gtk-theme: init at unstable-2022-12-09
2022-12-19 22:30:56 -03:00
José Romildo Malaquias
d20ef044eb
Merge pull request #206874 from SebTM/update/arc-theme_20221218
arc-theme: 20220405 -> 20221218
2022-12-19 21:47:47 -03:00
Matheus Vieira
19ae60662f gruvbox-gtk-theme: init at unstable-2022-12-09 2022-12-19 21:40:43 -03:00
Sebastian Sellmeier
9f7f6fdcb9
arc-theme: 20220405 -> 20221218 2022-12-19 17:55:09 +01:00
Chris Montgomery
799eba97dd
iosevka-bin: 16.7.0 -> 16.8.2 2022-12-18 20:51:09 -05:00
R. Ryantm
143ca825d9 sil-abyssinica: 2.100 -> 2.200 2022-12-19 09:41:18 +08:00
Valentin Gagarin
f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
Jörg Thalheim
7b046f255c
Merge pull request #205275 from candyc1oud/clash-geoip
clash-geoip: 20220912 -> 20221212
2022-12-18 08:45:10 +00:00
figsoda
f1a4461499
Merge pull request #205307 from candyc1oud/smiley-sans
smiley-sans: init at 1.0.0
2022-12-17 19:52:10 -05:00
figsoda
ec8cb34358 treewide: fix typos 2022-12-17 19:39:44 -05:00
Candy Cloud
558544c1b4
smiley-sans: improve code 2022-12-18 08:14:22 +08:00
Candy Cloud
c8c93b4d62
clash-geoip: remove old update script 2022-12-17 17:24:35 +08:00
Candy Cloud
62fa8fe959
clash-geoip: use new update script 2022-12-17 17:23:52 +08:00
Candy Cloud
e7592807fb smiley-sans: init at 1.0.0 2022-12-16 13:01:52 +00:00
Vladimír Čunát
e6cd929c5e
Merge branch 'master' into staging-next 2022-12-16 11:09:31 +01:00
R. Ryantm
c737ee25f3 iosevka-bin: 16.4.0 -> 16.7.0 2022-12-16 17:27:40 +08:00
Candy Cloud
231da669c3 clash-geoip: 20221112 -> 20221212 2022-12-16 09:17:01 +00:00
github-actions[bot]
823d14246a
Merge master into staging-next 2022-12-15 06:01:03 +00:00
R. Ryantm
a715b7b909 v2ray-geoip: 202212080044 -> 202212150047 2022-12-15 10:22:49 +08:00
github-actions[bot]
eb81abe9c0
Merge master into staging-next 2022-12-14 18:01:37 +00:00
Ulrik Strid
85ef2ebb5c material-kwin-decorations: disable -Werror
The code is incompatible with latest kde-frameworks
2022-12-14 11:30:01 +01:00
Vladimír Čunát
07494a6395
Merge #205221: cacert: 3.83 -> 3.86, nss_latest: 3.85 -> 3.86
...into staging-next.  This is a topologically earlier re-merge.
2022-12-12 13:58:05 +01:00
github-actions[bot]
63c2909cc1
Merge master into staging-next 2022-12-12 06:01:08 +00:00
R. Ryantm
632eb14381 v2ray-geoip: 202212010055 -> 202212080044 2022-12-11 19:29:20 +00:00
Candy Cloud
b32d7053fa clash-geoip: add update script 2022-12-09 10:18:18 +00:00
Candy Cloud
f4ef149e9c clash-geoip: 20220912 -> 20221112 2022-12-09 10:09:06 +00:00
Vladimír Čunát
9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
ajs124
e5212aaa67 cacert: 3.83 -> 3.86
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/NqCkaX216zY/m/QAUPTaBWCgAJ
2022-12-09 00:22:17 +01:00
Linus Heckemann
36cec7c971
Merge pull request #204795 from mweinelt/cacert-distrust-trustcore
cacert: Distrust TrustCor root certificates
2022-12-07 11:37:47 +01:00
Artturi
433e236aca
Merge pull request #204734 from endgame/carlito-mkderivation
carlito: Use stdenv.mkDerivation
2022-12-07 11:17:54 +02:00
Artturi
fe37b0d84f
Merge pull request #195031 from PlayerNameHere/material-design-icons
material-design-icons: 6.6.96 -> 7.0.96
2022-12-07 11:13:52 +02:00
R. Ryantm
875d397433 v2ray-geoip: 202211240054 -> 202212010055 2022-12-07 15:53:17 +08:00
Jack Kelly
ad8edb6259 carlito: Use stdenvNoCC.mkDerivation
carlito used to call `fetchzip` directly, and the fact that it was a
fixed-output derivation meant nobody noticed that:

1. the derivation no longer built from source (due to changes in
   `fetchzip`), and

2. the updated fontconfig xml never got used.
2022-12-07 10:00:43 +10:00
Sandro
3451a0cb2c
Merge pull request #204728 from anna328p/lexend-update 2022-12-06 22:37:03 +01:00
Martin Weinelt
2e7853293d
cacert: Distrust TrustCor root certificates
Mozilla set "Distrust After" for the three TrustCor Root CAs¹, so new
certificates issued would not be trusted after 2022/11/30, while older
enduser certificates would continue working until they expire. This is a
fine-grained policy option available to consumers of the NSS library,
such as Firefox or Thunderbird.

For Linux systems we generally export the Mozilla trust store into our
own CA bundle that ultimately lacks that metadata, because there is no
standardized way to parse it in the first place.

That means that as long as Mozilla keeps the certificate in their CA
program, even with time-based "Distrust" configured, we would keep
trusting it fully². That is completely unreasonable and that is why we
reject these CAs here for all users of nixpkgs.

The TrustCor CAs were primarily used to sign certificates for dynamic
hosts for domains provided through no-ip.com, so we expect the fallout
from this to be minimal.

[1] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
[2] https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem
2022-12-06 19:12:53 +01:00
Jan Tojnar
f2d78a4d52
Merge pull request #204383 from jtojnar/gnome-staging
GNOME staging updates
2022-12-06 16:25:14 +01:00
Vladimír Čunát
089fb18420
Merge #203426: staging-next 2022-11-28 2022-12-06 12:36:58 +01:00
R. RyanTM
7c8f8c5563
amiri: 0.900 -> 1.000 (#204614) 2022-12-06 08:19:07 +01:00
github-actions[bot]
a440592932
Merge master into staging-next 2022-12-06 06:01:16 +00:00
Anna Kudriavtsev
5cbf110123 lexend: bump version, install variable fonts 2022-12-05 21:36:46 -06:00
Sandro
297936df21
Merge pull request #202620 from natto1784/simp1e 2022-12-06 01:52:20 +01:00
Jan Tojnar
26c6895e10 mobile-broadband-provider-info: 20220725 → 20221107
20220725...20221107

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:00:19 +01:00
Martin Weinelt
9256404e6b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-05 13:22:34 +01:00
github-actions[bot]
d267d26578
Merge master into staging-next 2022-12-05 06:01:36 +00:00
Amneesh Singh
cff76b9e7c
simp1e-cursors: init at 20221103.2
Signed-off-by: Amneesh Singh <natto@weirdnatto.in>
2022-12-05 10:19:33 +05:30
R. Ryantm
47a9f2f8f8 spdx-license-list-data: 3.18 -> 3.19 2022-12-05 03:06:03 +00:00