Commit Graph

39535 Commits

Author SHA1 Message Date
Maximilian Bosch
97a911e8fb
Merge: nixos/postgresql: extension based hardening relaxation (#355010) 2024-11-16 22:29:36 +01:00
Leona Maroni
651e727c68
openafs: 1.8.12 → 1.8.13 (#354660) 2024-11-16 22:24:03 +01:00
Martin Weinelt
d370af0785
nixos/postgresql: create infrastructure for relaxing systemd hardening
By matching on the package names of the plugins passed into the package
we can relax the systemd unit hardening as needed.
2024-11-16 17:29:34 +01:00
Austin Horstman
61684555ec
outline: 0.80.2 -> 0.81.0 (#355245) 2024-11-15 12:06:53 -06:00
Nick Cao
abc21bfe72
prometheus-gitlab-ci-pipelines-exporter: 0.5.8 -> 0.5.9 (#355916) 2024-11-15 08:59:39 -05:00
R. RyanTM
f281060cd4
icingaweb2: 2.12.1 -> 2.12.2 (#355693) 2024-11-15 14:12:08 +01:00
Yt
212dcb403e
meilisearch: 1.11.1 → 1.11.3 (#356001) 2024-11-15 07:59:18 -05:00
Maximilian Bosch
0b3eef7441
postgresql_12: remove
This will be EOL at the end of November, so there's little reason to
keep it in 24.11[1]. As discussed, we'd like to keep it for as long as
possible to make sure there's a state in nixpkgs that has the latest
minor of postgresql_12 available with the most recent CVEs fixed for
people who cannot upgrade[2].

This aspect has been made explicit in the manual now for the next .11
release.

During the discussions it has been brought up that if people just do
`services.postgresql.enable = true;` and let the code decide the
postgresql version based on `system.stateVersion`, there's a chance that
such EOL dates will be missed. To make this harder, a warning will now
be raised when using the stateVersion-condition and the oldest still
available major is selected.

Additionally regrouped the postgresql things in the release notes to
make sure these are all shown consecutively. Otherwise it's a little
hard to keep track of all the changes made to postgresql in 24.11.

[1] https://endoflife.date/postgresql
[2] https://github.com/NixOS/nixpkgs/pull/353158#issuecomment-2453056692
2024-11-15 09:17:06 +01:00
Maximilian Bosch
4a8b1cc958
Merge: postgresql: update to new minor versions (#355965) 2024-11-14 22:51:30 +01:00
Benno Bielmeier
48698458b6 meilisearch: 1.11.1 → 1.11.3 2024-11-14 22:06:22 +01:00
Austin Horstman
57533f358a
pingvin-share: 1.1.3 -> 1.2.4 (#354105) 2024-11-14 13:40:09 -06:00
Anders Kaseorg
0eb18249a5 openafs: 1.8.12 → 1.8.13
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2024-11-14 11:23:39 -08:00
Wolfgang Walther
8e48064d55
postgresql_17: 17.0 -> 17.1
Release Notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
2024-11-14 20:04:11 +01:00
Wolfgang Walther
9dc6733018
postgresql_15: 15.8 -> 15.9
Release Notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
2024-11-14 19:26:41 +01:00
Wolfgang Walther
cf1f7e7201
postgresql_14: 14.13 -> 14.14
Release Notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
2024-11-14 19:23:47 +01:00
Wolfgang Walther
b1a05d9399
postgresql_13: 13.16 -> 13.17
Release Notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
2024-11-14 19:20:16 +01:00
Wolfgang Walther
fbae27508f
postgresql_12: 12.20 -> 12.21
Release Notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
2024-11-14 19:10:04 +01:00
R. Ryantm
88203eeef0 prometheus-gitlab-ci-pipelines-exporter: 0.5.8 -> 0.5.9 2024-11-14 13:52:16 +00:00
Nick Cao
57ffa0833c
postgresqlPackages.lantern: update license (#355841) 2024-11-14 08:44:04 -05:00
Vladimír Čunát
7f2d3d2feb
staging-next 2024-11-07 - the last one for 24.11 (#354201) 2024-11-14 08:32:49 +01:00
zowoq
dfedbb6088 postgresqlPackages.lantern: update license
license was changed to agpl3 in the 0.4.0 release

7ed99eb2b8
2024-11-14 17:29:45 +10:00
Maximilian Bosch
c90513d3ec
Merge: matrix-synapse: 1.118.0 -> 1.119.0 (#355692) 2024-11-14 07:39:20 +01:00
github-actions[bot]
c79fde307d
Merge master into staging-next 2024-11-14 06:05:02 +00:00
Yt
84053c3e53
rustus: 0.7.6 -> 0.7.6-unstable-2024-05-10 (#355593) 2024-11-13 19:25:04 -05:00
github-actions[bot]
b3a71c7e0d
Merge master into staging-next 2024-11-13 18:04:17 +00:00
R. RyanTM
2fd7958f0b
home-assistant-custom-lovelace-modules.mushroom: 4.1.0 -> 4.1.1 (#355676)
https://github.com/piitaya/lovelace-mushroom/releases/tag/v4.1.1
2024-11-13 18:14:07 +01:00
Maximilian Bosch
5b52e9d7e2
matrix-synapse: 1.118.0 -> 1.119.0
ChangeLog: https://github.com/element-hq/synapse/releases/tag/v1.119.0
2024-11-13 16:47:52 +01:00
Nick Cao
189f5dcfb3
python312Packages.pybind11-stubgen: init at 2.5.1 (#355442) 2024-11-13 09:05:47 -05:00
github-actions[bot]
d6721ede31
Merge master into staging-next 2024-11-13 12:05:52 +00:00
Gaétan Lepage
17767a5a05
invidious: move to by-name (#355086) 2024-11-13 12:46:06 +01:00
Franz Pletz
e248daeebc
grafana: 11.3.0 -> 11.3.0+security-01, fix CVE-2024-9476 (#355481) 2024-11-13 09:32:10 +01:00
github-actions[bot]
50eb4d03f7
Merge master into staging-next 2024-11-13 06:04:52 +00:00
Theodore Ni
539826a5bf
treewide: use new Darwin SDK pattern on some packages (#355156) 2024-11-12 20:55:45 -08:00
wxt
f507397ee5
rustus: move to by-name 2024-11-13 12:43:31 +08:00
github-actions[bot]
80fdc8b778
Merge master into staging-next 2024-11-13 00:14:23 +00:00
Gaetan Lepage
3a5902323e invidious: move to by-name 2024-11-12 22:34:21 +01:00
Nikita Uvarov
a1fc14ab31 home-assistant-custom-components.systemair: init at 0.2.0 2024-11-12 21:34:58 +01:00
Maximilian Bosch
dbd8326b7f
Merge: wordpress: drop unmaintained release (#355291) 2024-11-12 19:20:25 +01:00
K900
9c85c8a22a Merge remote-tracking branch 'origin/master' into staging-next 2024-11-12 21:14:32 +03:00
Maximilian Bosch
33811d45da
grafana: 11.3.0 -> 11.3.0+security-01, fix CVE-2024-9476
ChangeLog: https://github.com/grafana/grafana/releases/tag/v11.3.0%2Bsecurity-01
2024-11-12 18:54:39 +01:00
qbisi
8487e692fd lib/licenses: add bsd3Lbnl 2024-11-13 01:16:30 +08:00
Nick Cao
9f1f4969a8
prometheus-junos-czerwonk-exporter: 0.12.4 -> 0.12.5 (#355237) 2024-11-12 11:33:20 -05:00
alvar
df8b26b3f7
icinga2: 2.14.2 -> 2.14.3 (#355443)
Fixes critical CVE-2024-49369 by updating Icinga 2 to 2.14.3.

- https://github.com/Icinga/icinga2/releases/tag/v2.14.3
- https://github.com/Icinga/icinga2/security/advisories/GHSA-j7wq-r9mg-9wpv
- https://icinga.com/blog/2024/11/12/critical-icinga-2-security-releases-2-14-3/
- https://icinga.com/blog/2024/11/04/icinga2-security-pre-announcement/
2024-11-12 15:42:16 +01:00
github-actions[bot]
b4d4509dd5
Merge master into staging-next 2024-11-12 12:06:14 +00:00
Franz Pletz
436183649d
invidious: 2.20240825.2 -> 2.20241110.0 (#355279) 2024-11-12 12:13:49 +01:00
R. RyanTM
787264df64
home-assistant-custom-lovelace-modules.universal-remote-card: 4.1.3 -> 4.2.0 (#355374)
https://github.com/Nerwyn/android-tv-card/releases/tag/4.2.0
2024-11-12 09:22:30 +01:00
github-actions[bot]
31a78bf861
Merge master into staging-next 2024-11-12 00:14:10 +00:00
Yt
2c76692a71
meilisearch: 1.10.3 -> 1.11.1 (#352416) 2024-11-11 19:08:49 -05:00
Weijia Wang
40d6aaaeb1 wordpress: drop unmaintained release 2024-11-11 23:26:22 +01:00
László Kupcsik
772cc1be0b invidious: 2.20240825.2 -> 2.20241110.0 2024-11-11 22:06:46 +01:00