Commit Graph

7613 Commits

Author SHA1 Message Date
Weijia Wang
2214ea47a3
Merge pull request #279047 from r-ryantm/auto-update/vivaldi
vivaldi: 6.5.3206.48 -> 6.5.3206.50
2024-01-20 10:40:04 +01:00
R. Ryantm
f60ac431dc opera: 106.0.4998.19 -> 106.0.4998.52 2024-01-19 09:07:03 +00:00
Sean Buckley
959e8a2428 brave: 1.61.114 -> 1.61.120
https://community.brave.com/t/release-channel-1-61-120/526928
2024-01-19 03:28:46 +01:00
networkException
05f7cd8e0d
ungoogled-chromium: 120.0.6099.216-1 -> 120.0.6099.224-1
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html

This update includes 4 security fixes. Google is aware of reports that
an exploit for CVE-2024-0519 exists in the wild.

CVEs:
CVE-2024-0517 CVE-2024-0518 CVE-2024-0519
2024-01-18 18:44:27 +01:00
David Leung
8a9a8c6104 chromium: 120.0.6099.216 -> 120.0.6099.224
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html

This update includes 4 security fix.

CVEs:
CVE-2024-0517 CVE-2024-0518 CVE-2024-0519
2024-01-18 02:57:17 +01:00
R. Ryantm
cbf15cbb9d lagrange-tui: 1.17.5 -> 1.17.6 2024-01-17 12:36:46 +00:00
squalus
c607932d27 librewolf-unwrapped: 121.0-1 -> 121.0.1-1 2024-01-14 10:37:13 -08:00
Matthew_Cash
35c7a488f8 firefox: set meta.mainProgram to launcherName in wrapper
After #235912 changed the binary name for some Firefox packages, the meta.mainProgram value was no longer accurate and commands such as nix run nixpkgs#firefox-devedition failed because /bin/firefox was executed instead of /bin/firefox-devedition.

This sets meta.mainProgram to launcherName, which contains the nameSuffix set in #235912, instead of inheriting the unwrapped package's mainProgram, which is always firefox with no suffix.
2024-01-12 01:29:00 +01:00
networkException
3dd9134308
ungoogled-chromium: 120.0.6099.199-1 -> 120.0.6099.216-1
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_9.html

This update includes 1 security fix.

CVEs:
CVE-2024-0333
2024-01-11 03:12:53 +01:00
Martin Weinelt
8705f94982
firefox-bin-uwnrapped: 121.0 -> 121.0.1
https://www.mozilla.org/en-US/firefox/121.0.1/releasenotes/
2024-01-10 15:50:38 +01:00
Martin Weinelt
fe5ba7eb1e
firefox-unwrapped: 121.0 -> 121.0.1
https://www.mozilla.org/en-US/firefox/121.0.1/releasenotes/
2024-01-10 15:43:57 +01:00
emilylange
5d239aacd9
chromium: 120.0.6099.199 -> 120.0.6099.216
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_9.html

This update includes 1 security fix.

CVEs:
CVE-2024-0333
2024-01-10 02:27:38 +01:00
R. Ryantm
a4f9304bc1 vivaldi: 6.5.3206.48 -> 6.5.3206.50 2024-01-06 01:02:22 +00:00
OPNA2608
63bdb6b2c2 palemoon-bin: 32.5.1 -> 32.5.2 2024-01-05 19:45:36 +01:00
Emily
e03da1011f
Merge pull request #278603 from emilylange/chromium
{ungoogled-,}chromium: 120.0.6099.129 -> 120.0.6099.199, improve and move `recompressTarball`
2024-01-05 18:42:43 +01:00
networkException
d163ea4133
ungoogled-chromium: 120.0.6099.129-1 -> 120.0.6099.199-1
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html

This update includes 6 security fixes.

CVEs:
CVE-2024-0222 CVE-2024-0223 CVE-2024-0224 CVE-2024-0225
2024-01-05 17:29:51 +01:00
Weijia Wang
34ecb3cdc6
Merge pull request #275459 from emilylange/chromium-drop-inactive-maintainers
chromium: drop inactive maintainers, CODEOWNERS: init chromium
2024-01-05 15:57:50 +01:00
Sean Buckley
4664f806a9 brave: 1.61.109 -> 1.61.114
https://community.brave.com/t/release-channel-1-61-114/524569
2024-01-05 02:53:30 +01:00
emilylange
5c77fff609
chromium: 120.0.6099.129 -> 120.0.6099.199
https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html

This update includes 6 security fixes.

CVEs:
CVE-2024-0222 CVE-2024-0223 CVE-2024-0224 CVE-2024-0225
2024-01-04 01:48:08 +01:00
emilylange
e15783154f
chromium: improve and move recompressTarball
Recap: We need that (arguably stupid) helper function/drv because the
chromium tarball is big -- and is likely to increase even more in the
future. So big, that we eventually exceeded hydra.nixos.org's
max-output-limit (3G).  Instead of raising global hydra's limit, it was
decided that we recompress the tarball after deleting unused vendored
files from it.

I spent a lot of time on a version/prototype that does everything
(downloading, decompression, tar extraction, deleting unused files,
reproducible tar recreation and finally recompression) via stdin but
eventually had to scratch that.

GNU tar does not allow to create a tarball just from stdin, nixpkgs'
stdenv isn't built with stdin/stdout/pipes in mind, and things a lot of
other things I probably already forgot.

Nonetheless, this version improves multiple things:
- No more `mv` (used to be multiple, not just ours, since fetchzip had
  some as well)
- No more `rm` to get rid of the extracted files before recompressing.
  Instead, we simply don't extract them in the first place (thanks to
  tar's --exlude).
- No more "no space left" that happened due to `downloadToTemp = true;`.
- Multithreaded xz decompression, since that commit is still in
  staging-next.

We cannot use stdenv's unpackFile() because that does not allow us to
specify the needed --exclude (and --strip-components=1 if we don't want
to rely on glob matching).

The hash changed because we now have a static base directory ("source")
in the tarball, instead of whatever upstream provided us with (e.g.
"chromium-120.0.6099.129").
2024-01-04 01:34:15 +01:00
Weijia Wang
0e07af2f45
Merge pull request #275079 from r-ryantm/auto-update/polypane
polypane: 16.0.0 -> 17.0.0
2024-01-03 18:11:16 +01:00
Weijia Wang
ac201d8b91
Merge pull request #274967 from r-ryantm/auto-update/opera
opera: 105.0.4970.21 -> 106.0.4998.19
2024-01-03 18:05:22 +01:00
Emily
9c56ece502
Merge pull request #274863 from yu-re-ka/chromium-llvm17
chromium: use llvm 17
2024-01-02 18:42:10 +01:00
Thomas Gerbet
e1a811afe0
Merge pull request #273872 from rhysmdnz/edge-120
microsoft-edge: 119.0.2151.72 -> 120.0.2210.61
2024-01-02 11:56:24 +01:00
Nick Cao
c653984c87
Merge pull request #277805 from r-ryantm/auto-update/vivaldi
vivaldi: 6.5.3206.39 -> 6.5.3206.48
2024-01-01 15:49:24 -05:00
R. Ryantm
e8a4189be0 vivaldi: 6.5.3206.39 -> 6.5.3206.48 2023-12-30 22:36:21 +00:00
R. Ryantm
889213c7cd widevine-cdm: 4.10.2557.0 -> 4.10.2710.0 2023-12-30 08:42:51 +00:00
emilylange
cdf5db87d4
chromium: remove maintainer handles from README.md, mention electron
Specifically the maintainers section is quite outdated and prone to get
out of sync with whatever primary data we have (mostly meta.maintainers)
in each derivation.

In an attempt to lower the risk of ending up out of sync again, we
simply remove the maintainer handles.

Also adds a mention for the newly from source built electron variant, as
almost everything except `upstream-info.nix` bumps will trigger electron
rebuilds as well.

And lastly, removes mentions of `chromium{Beta,Dev}` and the
accompanying `google-chrome-{beta,dev}, that have been removed a few
months ago.

I might look into reworking bigger parts of the README.md in the future,
but this honestly isn't that high of a priority for me for now.
2023-12-30 03:40:11 +01:00
R. Ryantm
0e4794c533 opera: 105.0.4970.21 -> 106.0.4998.19 2023-12-28 13:05:30 +00:00
Felix Schröter
9a4106e62c
mullvad-browser: 13.0.6 -> 13.0.7
https://github.com/mullvad/mullvad-browser/releases/tag/13.0.7
2023-12-26 01:02:38 +01:00
Felix Schröter
3873eb4bcd
tor-browser: 13.0.6 -> 13.0.8
https://blog.torproject.org/new-release-tor-browser-1307/
https://blog.torproject.org/new-release-tor-browser-1308/
2023-12-26 01:02:24 +01:00
squalus
91b445737a librewolf-unwrapped: 120.0.1-1 -> 121.0-1 2023-12-24 12:57:30 -08:00
Emily
6a97873d9c
Merge pull request #275386 from dr460nf1r3/master
floorp: 11.6.1 -> 11.7.1
2023-12-24 00:02:51 +01:00
sg-qwt
063efad0ae
brave: set meta.mainProgram 2023-12-23 19:30:48 +08:00
Thomas Gerbet
0f8b9a3b1b
Merge pull request #275875 from buckley310/2023-12-21-brave
brave: 1.61.101 -> 1.61.109
2023-12-23 12:00:33 +01:00
networkException
8d36d9384e
ungoogled-chromium: 120.0.6099.109-1 -> 120.0.6099.129-1
https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html

This update includes 1 security fix. Google is aware that an exploit
for CVE-2023-7024 exists in the wild.

CVEs:
CVE-2023-7024
2023-12-22 02:51:19 +01:00
networkException
027ec17c01
chromium: 120.0.6099.109 -> 120.0.6099.129
https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html

This update includes 1 security fix. Google is aware that an exploit
for CVE-2023-7024 exists in the wild.

CVEs:
CVE-2023-7024
2023-12-22 02:50:06 +01:00
networkException
f96d36a28d
chromedriver: 120.0.6099.71 -> 120.0.6099.109 2023-12-22 02:45:42 +01:00
Nico Jensch
487d9295ec
floorp: 11.6.1 -> 11.7.1 2023-12-21 19:53:55 +01:00
Sean Buckley
a3af3e7fc7 brave: 1.61.101 -> 1.61.109
https://community.brave.com/t/release-channel-1-61-109/522518
2023-12-21 13:46:50 -05:00
Sean Buckley
5f053b3720 brave: add buckley310 to maintainers 2023-12-21 13:46:11 -05:00
Yureka
bba87c27b5 firefox-esr-unwrapped: 115.5.0esr -> 115.6.0esr
https://www.mozilla.org/en-US/firefox/115.6.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-54/

Fixes CVE-2023-6856
Fixes CVE-2023-6857
Fixes CVE-2023-6858
Fixes CVE-2023-6859
Fixes CVE-2023-6860
Fixes CVE-2023-6861
Fixes CVE-2023-6862
Fixes CVE-2023-6863
Fixes CVE-2023-6864
Fixes CVE-2023-6865
Fixes CVE-2023-6867
2023-12-19 19:20:21 +01:00
Yureka
eb13f97c27 firefox-unwrapped: 120.0.1 -> 121.0
https://www.mozilla.org/en-US/firefox/121.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/

Fixes CVE-2023-6135
Fixes CVE-2023-6856
Fixes CVE-2023-6857
Fixes CVE-2023-6858
Fixes CVE-2023-6859
Fixes CVE-2023-6860
Fixes CVE-2023-6861
Fixes CVE-2023-6863
Fixes CVE-2023-6864
Fixes CVE-2023-6865
Fixes CVE-2023-6866
Fixes CVE-2023-6867
Fixes CVE-2023-6868
Fixes CVE-2023-6869
Fixes CVE-2023-6870
Fixes CVE-2023-6871
Fixes CVE-2023-6872
Fixes CVE-2023-6873
2023-12-19 19:20:19 +01:00
Yureka
ccd0df1904 firefox-bin-unwrapped: 120.0.1 -> 121.0
https://www.mozilla.org/en-US/firefox/121.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/

Fixes CVE-2023-6135
Fixes CVE-2023-6856
Fixes CVE-2023-6857
Fixes CVE-2023-6858
Fixes CVE-2023-6859
Fixes CVE-2023-6860
Fixes CVE-2023-6861
Fixes CVE-2023-6863
Fixes CVE-2023-6864
Fixes CVE-2023-6865
Fixes CVE-2023-6866
Fixes CVE-2023-6867
Fixes CVE-2023-6868
Fixes CVE-2023-6869
Fixes CVE-2023-6870
Fixes CVE-2023-6871
Fixes CVE-2023-6872
Fixes CVE-2023-6873
2023-12-19 19:16:34 +01:00
emilylange
477e7d6b60
chromium: drop inactive maintainers
Our ./maintainers/README.md has a section titled "How to lose maintainer
status", which describes an "inactivity measure":

Maintainers how haven't reacted to "package-related notifications" for
more than 3 months can be removed.

All those 4 maintainers that are getting dropped as part of this commit
haven't responded to any such notifications (mostly review pings) for at
least 3 months.
2023-12-19 18:05:58 +01:00
Emily
a927ae417e
Merge pull request #274386 from reedrw/chromium-disable-libpng-patch
chromium: never use libpng-apng patch
2023-12-18 18:33:10 +01:00
Rhys Davies
c2e9041e80
microsoft-edge: 119.0.2151.72 -> 120.0.2210.77 2023-12-18 16:09:30 +13:00
R. Ryantm
e3b1b686d6 polypane: 16.0.0 -> 17.0.0 2023-12-17 22:00:24 +00:00
Yureka
930e3e5be6 chromium: use llvm 17 2023-12-17 02:09:25 +01:00
Mario Rodas
13b9604210
Merge pull request #260871 from felschr/tor-browser-wrapper
tor-browser: use system install & simplify wrapper
2023-12-16 18:48:27 -05:00