Commit Graph

488852 Commits

Author SHA1 Message Date
Sandro Jäckel
00000271a0
dbus-broker: remove prefix from dependency's version attribute 2023-05-26 20:05:15 +02:00
Sander
f3a4973aeb meilisearch: allow builds on aarch64-linux 2023-05-26 14:04:33 -04:00
Weijia Wang
d8a74c29c9
Merge pull request #234244 from LeSuisse/drop-sget
sget: remove package
2023-05-26 20:49:55 +03:00
Raito Bezarius
69bb0f94de nixos/nginx: first-class PROXY protocol support
PROXY protocol is a convenient way to carry information about the
originating address/port of a TCP connection across multiple layers of
proxies/NAT, etc.

Currently, it is possible to make use of it in NGINX's NixOS module, but
is painful when we want to enable it "globally".
Technically, this is achieved by reworking the defaultListen options and
the objective is to have a coherent way to specify default listeners in
the current API design.
See `mkDefaultListenVhost` and `defaultListen` for the details.

It adds a safeguard against running a NGINX with no HTTP listeners (e.g.
only PROXY listeners) while asking for ACME certificates over HTTP-01.

An interesting usecase of PROXY protocol is to enable seamless IPv4 to
IPv6 proxy with origin IPv4 address for IPv6-only NGINX servers, it is
demonstrated how to achieve this in the tests, using sniproxy.

Finally, the tests covers:

- NGINX `defaultListen` mechanisms are not broken by these changes;
- NGINX PROXY protocol listeners are working in a final usecase
  (sniproxy);
- uses snakeoil TLS certs from ACME setup with wildcard certificates;

In the future, it is desirable to spoof-attack NGINX in this scenario to
ascertain that `set_real_ip_from` and all the layers are working as
intended and preventing any user from setting their origin IP address to
any arbitrary, opening up the NixOS module to bad™ vulnerabilities.

For now, it is quite hard to achieve while being minimalistic about the
tests dependencies.
2023-05-26 19:48:26 +02:00
Samuel Ainsworth
bbdb8416a0
Merge pull request #233851 from ConnorBaker/feat/cudnn_8_9_1
cudaPackages.cudnn: version bumps; remove patch from name
2023-05-26 10:26:30 -07:00
Nikolay Korotkiy
6a2828e3ec
libhv: 1.3.0 → 1.3.1 2023-05-26 21:23:45 +04:00
Samuel Ainsworth
80c63c04c2
Merge pull request #234085 from ConnorBaker/fix/pytorch_2_0_1-supported-cuda-targets
python3Packages.torch: update CUDA capabilities for v2.0.1 release
2023-05-26 10:23:45 -07:00
Samuel Ainsworth
ef24799942
Merge pull request #234053 from ConnorBaker/fix/cudatoolkit_11_8-broken-symlink
cudaPackages_11_8.cudatoolkit: remove broken include/include symlink
2023-05-26 10:18:19 -07:00
Damien Cassou
3df253a9b9
woob: 3.5 -> 3.6 2023-05-26 19:08:04 +02:00
Fabian Affolter
b447d9bb53 python311Packages.pysigma-backend-insightidr: 0.1.8 -> 0.1.9
Diff: https://github.com/SigmaHQ/pySigma-backend-insightidr/compare/refs/tags/v0.1.8...v0.1.9
2023-05-26 18:57:05 +02:00
Fabian Affolter
8b25d4ef4e checkov: 2.3.257 -> 2.3.259
Diff: https://github.com/bridgecrewio/checkov/compare/refs/tags/2.3.257...2.3.259

Changelog: https://github.com/bridgecrewio/checkov/releases/tag/2.3.259
2023-05-26 18:54:38 +02:00
figsoda
b2abc0e2e5
Merge pull request #234233 from cameronfyfe/protoc-gen-rust-3-2-0
protoc-gen-rust: 3.1.0 -> 3.2.0
2023-05-26 12:54:31 -04:00
Fabian Affolter
651e776772 qovery-cli: 0.58.12 -> 0.58.15
Diff: https://github.com/Qovery/qovery-cli/compare/v0.58.12...v0.58.15

Changelog: https://github.com/Qovery/qovery-cli/releases/tag/v0.58.15
2023-05-26 18:52:54 +02:00
figsoda
e512455cb2
Merge pull request #234241 from r-ryantm/auto-update/angle-grinder
angle-grinder: 0.19.0 -> 0.19.2
2023-05-26 12:49:03 -04:00
Fabian Affolter
48bfaeb87c python311Packages.pydeps: 1.12.7 -> 1.12.8
Diff: https://github.com/thebjorn/pydeps/compare/refs/tags/v1.12.7...v1.12.8

Changelog: https://github.com/thebjorn/pydeps/releases/tag/v1.12.8
2023-05-26 18:46:04 +02:00
figsoda
7cf56760d0
Merge pull request #234240 from r-ryantm/auto-update/cirrus-cli
cirrus-cli: 0.98.0 -> 0.99.0
2023-05-26 12:45:21 -04:00
Fabian Affolter
7aa999a721 python311Packages.python-otbr-api: 1.1.0 -> 1.2.0
Diff: https://github.com/home-assistant-libs/python-otbr-api/compare/refs/tags/1.1.0...1.2.0

Changelog: https://github.com/home-assistant-libs/python-otbr-api/releases/tag/1.2.0
2023-05-26 18:43:57 +02:00
Fabian Affolter
bd54c72512 python311Packages.reolink-aio: 0.5.15 -> 0.5.16
Diff: https://github.com/starkillerOG/reolink_aio/compare/refs/tags/0.5.15...0.5.16

Changelog: https://github.com/starkillerOG/reolink_aio/releases/tag/0.5.16
2023-05-26 18:43:05 +02:00
Fabian Affolter
32bce83e40 python311Packages.onvif-zeep-async: 3.1.7 -> 3.1.8 2023-05-26 18:40:12 +02:00
Kevin Cox
5242aea64f
nixos.mautrix-facebook: Fix appservice name
It appears that newer mautrix-facebook versions default to the appservice name `facebook`. This was breaking our registration and causing mautrix-facebook to fail to start. This changes the name back and makes the registration generated match whatever the setting in the app is.
2023-05-26 12:39:37 -04:00
Fabian Affolter
2d000936a4 python311Packages.aliyun-python-sdk-config: 2.2.8 -> 2.2.9
Changelog: https://github.com/aliyun/aliyun-openapi-python-sdk/blob/master/aliyun-python-sdk-config/ChangeLog.txt
2023-05-26 18:26:52 +02:00
Thomas Gerbet
09a8c1d741 sget: remove package
Upstream does not support it anymore.
See https://github.com/sigstore/sget/issues/145
2023-05-26 18:08:55 +02:00
R. Ryantm
02b2355964 angle-grinder: 0.19.0 -> 0.19.2 2023-05-26 15:46:49 +00:00
Thomas Gerbet
e655d0318c rekor-cli, rekor-server: 1.1.1 -> 1.2.1
Fixes CVE-2023-33199.

Changelog:
https://github.com/sigstore/rekor/releases/tag/v1.2.1
2023-05-26 17:45:25 +02:00
Ellie Hermaszewska
757a0d107c
Merge pull request #234060 from bddvlpr/submit/lighthouse-steamvr-1.0.0
lighthouse-steamvr: unstable-2021-03-28 -> 1.0.0
2023-05-26 23:28:08 +08:00
Victor Freire
c4433d4ae0 vscode-extensions.ionide.ionide-fsharp: 7.5.2 -> 7.5.4 2023-05-26 12:25:54 -03:00
R. Ryantm
192871cfc5 cirrus-cli: 0.98.0 -> 0.99.0 2023-05-26 15:25:30 +00:00
Alyssa Ross
c9bcecf0ab kernelPatches.make-maple-state-reusable-after-mas_empty_area: drop
No longer used.
2023-05-26 15:19:03 +00:00
R. Ryantm
517e2be611 s3fs: 1.91 -> 1.92 2023-05-26 15:16:03 +00:00
Weijia Wang
bb37145bf7
Merge pull request #233741 from hzeller/20230523-update-doctest
doctest: 2.4.9 -> 2.4.11
2023-05-26 18:13:48 +03:00
Weijia Wang
294f443aa3
Merge pull request #234211 from MaxHearnden/mkl
pkgsStatic.mkl: change tools dir to lib
2023-05-26 17:59:17 +03:00
Weijia Wang
0d497d9380
Merge pull request #233286 from wegank/ueberzugpp-bump
ueberzugpp: 2.8.3 -> 2.8.5
2023-05-26 17:40:41 +03:00
figsoda
4cca6cf888
Merge pull request #234194 from r-ryantm/auto-update/kyverno
kyverno: 1.9.3 -> 1.9.4
2023-05-26 10:30:29 -04:00
Weijia Wang
0ddb02dc78
Merge pull request #234215 from earldouglas/scala-cli
scala-cli: 1.0.0-RC2 -> 1.0.0
2023-05-26 17:12:23 +03:00
Sandro
36b457fa36
Merge pull request #223271 from wineee/qt6fix 2023-05-26 16:11:16 +02:00
Ilan Joselevich
67a0cb5051
Merge pull request #232889 from AndrewKvalheim/yubikey-touch-detector/icon
yubikey-touch-detector: add icon
2023-05-26 17:08:07 +03:00
Ilan Joselevich
2b54d69007
Merge pull request #234072 from ShamrockLee/write-script-bin-mainprogram
writeScriptBin, writeShellScriptBin: add meta.mainProgram automatically
2023-05-26 17:07:42 +03:00
Ryan Lahfa
435237d641
Merge pull request #233350 from GrahamDennis/grahamdennis/testing-networks
nixos/qemu-vm: add option for named network interfaces
2023-05-26 15:57:01 +02:00
Weijia Wang
1aca05b5e3
Merge pull request #234209 from yayayayaka/maintainers-update-yayayayaka
maintainers: update yayayayaka
2023-05-26 16:42:29 +03:00
eyJhb
dd6d95536c
python3Packages.stopit: added setuptools dependency (#234153) 2023-05-26 09:32:47 -04:00
Martin Weinelt
c9ff452fd2
Merge pull request #234208 from imincik/owslib-0.29.2
python3Packages.owslib: 0.28.1 -> 0.29.2
2023-05-26 15:15:51 +02:00
figsoda
0bc2c39688
Merge pull request #234035 from figsoda/vim
vimPlugins: update
2023-05-26 09:10:46 -04:00
Alyssa Ross
101d8b7ba8 linux_6_2: drop
EOL
2023-05-26 13:03:57 +00:00
markuskowa
b1dae64b54
Merge pull request #233834 from sheepforce/taco
taco: init at 02-08-2022_unstable
2023-05-26 14:49:42 +02:00
Sandro
80264b939d
Merge pull request #221861 from NixOS/diffoscope-unfree 2023-05-26 14:23:15 +02:00
Weijia Wang
a84996a76b
Merge pull request #234195 from wegank/389-bump
_389-ds-base: 2.3.1 -> 2.4.1
2023-05-26 15:21:06 +03:00
Weijia Wang
455157f2fe
Merge pull request #233687 from yayayayaka/cups-filters-fix-cve-2023-24805
cups-filters: fix CVE-2023-24805
2023-05-26 15:20:23 +03:00
Sandro
2a03135ef8
Merge pull request #232012 from gador/pgadmin-7.1 2023-05-26 14:14:35 +02:00
James Earl Douglas
224a8d3d7e
scala-cli: 1.0.0-RC2 -> 1.0.0 2023-05-26 05:14:26 -07:00
Weijia Wang
a4bc320e67
Merge pull request #234193 from r-ryantm/auto-update/gotrue-supabase
gotrue-supabase: 2.67.1 -> 2.69.1
2023-05-26 15:09:32 +03:00