Commit Graph

51 Commits

Author SHA1 Message Date
John Titor
7354b62568
google-chrome: 131.0.6778.85 -> 131.0.6778.108 2024-12-06 15:14:11 +00:00
34j
d637b85e25
treewide: replace --enable-wayland-ime with --enable-wayland-ime=true for the arguments to properly work (#361341) 2024-12-05 00:06:22 +05:30
34j
8ae2932d56 add --enable-wayland-ime flag to all Electron packages that uses NIXOS_OZONE_WL 2024-11-24 13:34:28 +09:00
John Titor
bd6d61f02d
google-chrome: 131.0.6778.69 -> 131.0.6778.85 2024-11-21 05:13:19 +00:00
John Titor
d9e756a595
google-chrome: 130.0.6723.91 -> 131.0.6778.69 2024-11-13 01:36:14 +05:30
John Titor
7d2df19107
google-chrome: 130.0.6723.69 -> 130.0.6723.92 2024-11-04 01:59:27 +05:30
Thomas Gerbet
ed24e9e893 google-chrome: 130.0.6723.{58,59} -> 130.0.6723.{69,70}
Fixes CVE-2024-10229, CVE-2024-10230 and CVE-2024-10231.
https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_22.html
2024-10-28 14:28:01 +01:00
DontEatOreo
ca271dd00b
google-chrome: 129.0.6668.101 -> 130.0.6723.59
Changelog: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html
2024-10-16 16:33:57 +03:00
DontEatOreo
484f4d9ad6
google-chrome: 129.0.6668.100 -> 130.0.6723.58
Changelog: https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_15.html
2024-10-16 16:33:40 +03:00
DontEatOreo
744a8ebe89
google-chrome: add shellcheck 2024-10-16 16:32:12 +03:00
DontEatOreo
77ead85152
google-chrome: fix URL encoding for version filter 2024-10-16 16:31:29 +03:00
John Titor
380478ce02
google-chrome: 129.0.6668.89 -> 129.0.6668.100 2024-10-09 18:56:47 +00:00
John Titor
2b58c0b4b2
google-chrome: add rpath for libGLESv2.so as well
This is needed to make sure that ANGLE's libGLESv2.so can find libGL and libvulkan
Like 27e30d177e/pkgs/development/tools/electron/binary/generic.nix (L136-L139)
and 27e30d177e/pkgs/applications/networking/browsers/chromium/common.nix (L562-564)

Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
2024-10-04 00:30:12 +05:30
John Titor
cd0a0dac68
google-chrome: replace bundled libvulkan.so.1 with vulkan-loader's
When Chrome run by `google-chrome-stable --use-vulkan --enable-features=Vulkan`
without this, it fails to create vk instance giving the below log:

[216457:216457:1003/211719.770352:ERROR:vulkan_instance.cc(112)] Failed to load 'libvulkan.so.1': libvulkan.so.1: cannot open shared object file: No such file or directory
[216457:216457:1003/211719.770434:ERROR:gpu_init.cc(1209)] Failed to create and initialize Vulkan implementation.

Closes https://github.com/NixOS/nixpkgs/issues/346197

Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
2024-10-03 23:40:01 +05:30
John Titor
1f52ea5b8d
google-chrome: 129.0.6668.58 -> 129.0.6668.89 2024-10-03 17:34:06 +00:00
Artturin
e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
John Titor
22d8492295
google-chrome: 128.0.6613.138 -> 129.0.6668.59 (Darwin)
update script works now, yay!
2024-09-22 23:19:54 +05:30
John Titor
bc4914bcf1
google-chrome: fix update script
Chrome uses partial rollout for Darwin and Windows

This is represented by `fractionGroup` and `fraction`.

0.25 means 25% of users, 0.5 means 50% of users and so on.

Partial rollouts aren't done on linux, and so `fraction` and `fractionalGroup` is always 1 for it.

Here we add some additional parameters to chrome version history api endpoint, to get the latest version, sort the versions in descending order.

These parameters are redundant on Linux but kept anyway.

See https://github.com/NixOS/nixpkgs/pull/343552#issuecomment-2366799267
Docs: https://developer.chrome.com/docs/web-platform/versionhistory/reference#filter
2024-09-22 23:19:09 +05:30
John Titor
0c6b57f796
google-chrome: 128.0.6613.137 -> 129.0.6668.58 2024-09-22 00:36:27 +05:30
John Titor
d1ee2bde33
google-chrome: 128.0.6613.113 -> 128.0.6613.137 2024-09-12 16:57:32 +05:30
Jon Seager
827cc913f1
google-chrome: fix makeWrapper invocation 2024-09-05 09:12:29 +01:00
Farid Zakaria
19bd18f235
google-chrome: disable update notification
Add default commandLineArgs that disable update notification.
We can't update through the update mechanism so just disable by default
the notification.
2024-09-05 01:10:24 +05:30
John Titor
b9f1e80814
google-chrome: 128.0.6613.84 -> 128.0.6613.113 2024-09-02 16:05:03 +00:00
Thomas Gerbet
e57b3fa559 google-chrome: 127.0.6533.119 -> 128.0.6613.84/128.0.6613.85
https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html

Fixes:
* CVE-2024-7964
* CVE-2024-7965
* CVE-2024-7966
* CVE-2024-7967
* CVE-2024-7968
* CVE-2024-7969
* CVE-2024-7971
* CVE-2024-7972
* CVE-2024-7973
* CVE-2024-7974
* CVE-2024-7975
* CVE-2024-7976
* CVE-2024-7977
* CVE-2024-7978
* CVE-2024-7979
* CVE-2024-7980
* CVE-2024-7981
* CVE-2024-8033
* CVE-2024-8034
* CVE-2024-8035
2024-08-22 22:40:16 +02:00
John Titor
37e9028254
google-chrome: 127.0.6533.99 -> 127.0.6533.119 2024-08-18 20:53:28 +00:00
Jon Seager
9b47cd16ea
google-chrome: 127.0.6533.89 -> 127.0.6533.100 2024-08-10 02:18:47 +05:30
DontEatOreo
dc77c81ef9
google-chrome: add darwin support, move updateScript out
google-chrome: fix launch error on linux
Co-authored-by: Masum Reza <masumrezarock100@gmail.com>

google-chrome: fix updater script to use /usr/bin/env nix-shell
Co-authored-by: Jon Seager <jon@sgrs.uk>
2024-08-10 02:18:39 +05:30
Jon Seager
3df37db21c
google-chrome: add gtk4 to buildInputs 2024-07-31 20:35:30 +01:00
Jon Seager
fb0dede5f6
google-chrome: sort lists of dependencies somewhat alphabetically 2024-07-31 20:35:28 +01:00
Jon Seager
9eb80226b4
google-chrome: format with nixfmt-rfc-style 2024-07-31 20:05:44 +01:00
Jon Seager
b9d830f420
google-chrome: 127.0.6533.72 -> 127.0.6533.88 2024-07-31 20:01:51 +01:00
John Titor
117a1c494c
google-chrome: add changelog link to make it easier for reviewers
Look for Chrome Desktop Stable update in the posts
to see the changelog
2024-07-28 23:37:37 +05:30
John Titor
98dc7a18aa
google-chrome: 126.0.6478.182 -> 127.0.6533.72
This update includes 22 security fixes.

[$11000][349198731] High CVE-2024-6988: Use after free in Downloads. Reported by lime(@limeSec_) from TIANGONG Team of Legendsec at QI-ANXIN Group on 2024-06-25

[$8000][349342289] High CVE-2024-6989: Use after free in Loader. Reported by Anonymous on 2024-06-25

[TBD][346618785] High CVE-2024-6991: Use after free in Dawn. Reported by wgslfuzz on 2024-06-12

[$8000][339686368] Medium CVE-2024-6994: Heap buffer overflow in Layout. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2024-05-10

[$6000][343938078] Medium CVE-2024-6995: Inappropriate implementation in Fullscreen. Reported by Alesandro Ortiz on 2024-06-01

[$5000][333708039] Medium CVE-2024-6996: Race in Frames. Reported by Louis Jannett (Ruhr University Bochum) on 2024-04-10

[$3000][325293263] Medium CVE-2024-6997: Use after free in Tabs. Reported by Sven Dysthe (@svn-dys) on 2024-02-15

[$2000][340098902] Medium CVE-2024-6998: Use after free in User Education. Reported by Sven Dysthe (@svn-dys) on 2024-05-13

[$2000][340893685] Medium CVE-2024-6999: Inappropriate implementation in FedCM. Reported by Alesandro Ortiz on 2024-05-15

[$500][339877158] Medium CVE-2024-7000: Use after free in CSS. Reported by Anonymous on 2024-05-11

[TBD][347509736] Medium CVE-2024-7001: Inappropriate implementation in HTML. Reported by Jake Archibald on 2024-06-17

[$2000][338233148] Low CVE-2024-7003: Inappropriate implementation in FedCM. Reported by Alesandro Ortiz on 2024-05-01

[TBD][40063014] Low CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing. Reported by Anonymous on 2023-02-10

[TBD][40068800] Low CVE-2024-7005: Insufficient validation of untrusted input in Safe Browsing. Reported by Umar Farooq  on 2023-08-04
2024-07-28 23:36:02 +05:30
K900
8e7a098243 speechd: introduce minimal variant, use it everywhere 2024-07-26 15:48:11 +03:00
github-actions[bot]
a6c20a7387
Merge staging-next into staging 2024-07-19 12:01:49 +00:00
R. Ryantm
6d7e859c8a google-chrome: 126.0.6478.126 -> 126.0.6478.182 2024-07-19 05:58:50 +00:00
github-actions[bot]
5cfda25a07
Merge staging-next into staging 2024-07-02 12:01:51 +00:00
Jan Tojnar
5c5c20919b adwaita-icon-theme: Move from gnome scope to top-level
It is widely used outside gnome – although it probably should not be.
2024-07-01 08:26:46 +02:00
Someone
c5a1cae1f1
Merge pull request #275241 from Scrumplex/treewide/use-addDriverRunpath
addOpenGLRunpath: deprecate
2024-07-01 01:09:05 +00:00
Sefa Eyeoglu
416ba8804b
treewide: use addDriverRunpath
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-06-30 15:01:01 -04:00
R. Ryantm
7dfa379b93 google-chrome: 126.0.6478.114 -> 126.0.6478.126 2024-06-30 04:11:34 +00:00
John Titor
cc7c307b2b
google-chrome: 126.0.6478.61 -> 126.0.6478.114 2024-06-19 22:19:10 +05:30
John Titor
e9a2d6b9c8
google-chrome: 125.0.6422.141 -> 126.0.6478.61 2024-06-15 12:45:57 +05:30
Alexis Hildebrandt
755b915a15 treewide: Remove indefinite article from meta.description
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*"[Aa]n?' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*")[Aa]n? (.)/\1\U\2/'
2024-06-09 23:07:45 +02:00
Clemens Fruhwirth
30b6cd6e1d google-chrome: 125.0.6422.112 -> 125.0.6422.141 2024-06-02 08:35:55 +02:00
Clemens Fruhwirth
57de378343 google-chrome: 125.0.6422.76 -> 125.0.6422.112 2024-05-25 07:39:52 +02:00
Jon Seager
cddbd42767
google-chrome: 125.0.6422.60 -> 125.0.6422.76 2024-05-23 17:29:00 +01:00
Jon Seager
b85faff723
google-chrome: 124.0.6367.201 -> 125.0.6422.60 2024-05-16 07:06:39 +01:00
Jon Seager
751f923d7a
google-chrome: increase safety of update-script 2024-05-15 14:19:48 +01:00
John Titor
d95e9bf3a6
google-chrome: add update-script 2024-05-13 22:42:45 +05:30