Commit Graph
100 Commits
Author SHA1 Message Date
Michael Weiss fde8783f82 wayland-utils: init at 1.0.0 (#94471)
Announcement: https://lists.freedesktop.org/archives/wayland-devel/2020-July/041565.html
2020-08-01 23:05:01 +02:00
Michael Weiss e9c36545a7 tig: Don't install the broken ZSH completion
There are some Nixpkgs specific issues that we could fix but due to
changes in Git it currently isn't possible to source git-completion.bash
from ZSH (at least not how tig-completion.bash expects it).
Upstream issue: https://github.com/jonas/tig/issues/940

For the meantime it seems best to simply not install it anymore so that
the fallback implementation from ZSH can be used (more inaccurate as the
git-log completion is reused but it is helpful to complete remotes,
branches, tags, etc. and doesn't emit an error to the console).
2020-07-31 20:57:35 +02:00
Michael Weiss b739e02e12 inxi: 3.1.05-1 -> 3.1.05-2 2020-07-29 17:22:58 +02:00
Michael Weiss a4082cca75 Merge pull request #94076 from primeos/wayvnc
wayvnc: 0.1.2 -> 0.2.0, neatvnc: 0.1.0 -> 0.2.0, aml: init at 0.1.0
2020-07-28 15:50:52 +02:00
Michael Weiss 2f641ec844 wayvnc: 0.1.2 -> 0.2.0 2020-07-28 15:01:16 +02:00
Michael Weiss 715cd6cc1d neatvnc: 0.1.0 -> 0.2.0 2020-07-28 15:01:16 +02:00
Michael Weiss 2f56b88d5f aml: init at 0.1.0 2020-07-28 15:01:16 +02:00
Michael Weiss bf02beb099 chromium: 84.0.4147.89 -> 84.0.4147.105
https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html

This update includes 8 security fixes.

CVEs:
CVE-2020-6537 CVE-2020-6538 CVE-2020-6532 CVE-2020-6539 CVE-2020-6540
CVE-2020-6541
2020-07-28 12:18:09 +02:00
Michael Weiss 2c7646b1f3 inxi: 3.1.04-1 -> 3.1.05-1 2020-07-27 22:52:44 +02:00
Michael Weiss 11fbe97810 chromium{Beta,Dev}: M84 -> M85 -> M86 (broken)
Mark chromiumDev as broken since the build requires LLVM 11 which is not
yet in Nixpkgs (due to the lack of an RC, see #93324). Build error:
clang (LLVM option parsing): Unknown command line argument '-basic-aa-recphi=0'.  Try: 'clang (LLVM option parsing) --help'
clang (LLVM option parsing): Did you mean '--basicaa-recphi=0'?
ninja: build stopped: subcommand failed.
2020-07-24 13:40:24 +02:00
Michael Weiss fadfde220f mesa: 2.1.3 -> 2.1.4 (#93708) 2020-07-23 22:24:17 +02:00
Michael Weiss 2d6ab6e2f1 Merge pull request #93666 from squalus/ungoogled-20200722
ungoogled-chromium: 81.0.4044.138-1 -> 84.0.4147.89-1
2020-07-23 15:53:47 +02:00
Michael Weiss 434a0111f6 python3Packages.cryptography: 2.9.2 -> 3.0
Backwards incompatible changes:
- Removed support for passing an Extension instance to
  from_issuer_subject_key_identifier(), as per our deprecation policy.
- Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed (2.9.1+
  is still supported).
- Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or
  newer.
- RSA generate_private_key() no longer accepts public_exponent values
  except 65537 and 3 (the latter for legacy purposes).
- X.509 certificate parsing now enforces that the version field contains
  a valid value, rather than deferring this check until version is
  accessed.

Deprecations:
- Deprecated support for Python 2. At the time there is no time table
  for actually dropping support, however we strongly encourage all users
  to upgrade their Python, as Python 2 no longer receives support from
  the Python core team.
2020-07-22 16:54:20 +02:00
Michael Weiss 9a47c3b504 Merge pull request #93558 from galagora/update-android-studio
androidStudioPackages.beta: 4.0.0.16 -> 4.1.0.14
2020-07-21 20:08:44 +02:00
Michael Weiss 6f519134da intel-media-driver: 20.1.1 -> 20.2.0 (#92935) 2020-07-19 19:39:36 +02:00
Michael Weiss 0c50808975 gpgme: 1.13.1 -> 1.14.0 (#93353) 2020-07-19 11:44:08 +02:00
Michael Weiss b9de39c2a1 scons: 4.0.0 -> 4.0.1 (#93415) 2020-07-19 11:41:41 +02:00
Michael Weiss 5b14758d31 Merge pull request #92920 from primeos/scons
scons: 3.1.2 -> 4.0.0
2020-07-18 13:36:29 +02:00
Michael Weiss a838caa33a tdm: Fix the build
Was failing in the desktop-file validation stage [0]:
/nix/store/XXX-tdm.desktop/share/applications/tdm.desktop: error: value
"False" for boolean key "Terminal" in group "Desktop Entry" contains
invalid characters, boolean values must be "false" or "true"

[0]: https://hydra.nixos.org/build/123852137
2020-07-18 11:41:47 +02:00
Michael Weiss 595a36d846 scons.py2: Replace with sconsPackages.scons_3_1_2
Required since SCons 4.0.0 doesn't support Python 2.7 anymore.
2020-07-18 10:48:20 +02:00
Michael Weiss d41cd156d0 scons: 3.1.2 -> 4.0.0 2020-07-18 10:48:13 +02:00
Michael Weiss f7e148151e Merge pull request #93352 from primeos/python-google-api-client
python3Packages.google_api_python_client: 1.9.3 -> 1.10.0
2020-07-17 22:33:23 +02:00
Michael Weiss 5525938847 python3Packages.google_api_python_client: 1.9.3 -> 1.10.0 2020-07-17 17:33:19 +02:00
Michael Weiss 1857b270f7 cage: 2020-01-18 -> 0.1.2.1 (#93340) 2020-07-17 15:21:44 +02:00
Michael Weiss 03db2c67ac androidStudioPackages.{beta,dev,canary}: Remove myself as maintainer
See #88071.
I'll try to maintain at least the stable channel for now and will mark
the other channels as broken after the next major stable release.
2020-07-17 15:15:09 +02:00
Michael Weiss 9cd338e858 android-studio: 4.0.0.16 -> 4.0.1.0 2020-07-17 15:11:39 +02:00
Michael Weiss e0b6b0a6d1 Merge pull request #91433 from primeos/sway-1.5
Sway 1.5
2020-07-16 23:05:28 +02:00
Michael Weiss 81a214e62c sway-contrib.grimshot: Reuse sway-unwrapped.src 2020-07-16 22:47:15 +02:00
Michael Weiss f1dd43404a sway: 1.4 -> 1.5 2020-07-16 22:46:53 +02:00
Michael Weiss 369dcb9202 wlroots: 0.10.1 -> 0.11.0 2020-07-16 22:46:26 +02:00
Michael Weiss e285da460d libplacebo: 1.29.1 -> 2.72.0 (#93198) 2020-07-16 11:20:57 +02:00
Michael Weiss f05b67ec83 google-chrome: Fix the EGL backend 2020-07-15 15:31:02 +02:00
Michael Weiss 2ec04dc22a Merge pull request #93149 from primeos/chromium
chromium: 83.0.4103.116 -> 84.0.4147.89
2020-07-15 15:04:26 +02:00
Michael Weiss 5d1064a212 signal-desktop: 1.34.3 -> 1.34.4 2020-07-15 12:49:59 +02:00
Michael Weiss 8427eb7044 chromium: 83.0.4103.116 -> 84.0.4147.89
https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

This update includes 38 security fixes.

CVEs:
CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514
CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519
CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524
CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529
CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535
CVE-2020-6536
2020-07-14 23:10:31 +02:00
Michael Weiss aa166e7703 python3Packages.mysql-connector: 8.0.20 -> 8.0.21 2020-07-13 22:41:10 +02:00
Michael Weiss 99ab9545b2 gns3-{gui,server}: 2.2.9 -> 2.2.11 2020-07-12 19:17:43 +02:00
Michael Weiss bab982e5ec gns3-{gui,server}: 2.2.8 -> 2.2.9
Note: This update is pretty delayed as it was initially blocked by
sentry-sdk being too old and breaking Python changes from staging.
2020-07-12 18:50:01 +02:00
Michael Weiss fc2a4610a1 vaapiIntel: Refactor and improve the build expression (#92996)
This doesn't cause any changes to the contents of the output path (apart
from the $out reference changing due to the modified expression).
2020-07-12 14:29:18 +02:00
Michael Weiss 483dbe9237 systemd: Allow setting the transient hostname via DHCP
This permits using method_set_hostname but still denies
method_set_static_hostname. As a result DHCP clients can now always set
the transient hostname via the SetHostname method of the D-Bus interface
of systemd-hostnamed (org.freedesktop.hostname1.set-hostname).
If the NixOS option networking.hostName is set to an empty string (or
"localhost") the static hostname (kernel.hostname but NOT /etc/hostname)
will additionally be updated (this is intended).

From "man hostnamectl": The transient hostname is a fallback value
received from network configuration. If a static hostname is set, and is
valid (something other than localhost), then the transient hostname is
not used.

Fix #74847.

Note: It's possible to restrict access to the org.freedesktop.hostname1
interface using Polkit rules.
2020-07-11 00:05:41 +02:00
Michael Weiss 813c691c21 signing-party: 2.10 -> 2.11
Note: The only change is a new gpgparticipants-filter command.
2020-07-09 20:48:30 +02:00
Michael Weiss 6aefd19fc8 isync: 1.3.1 -> 1.3.2 2020-07-08 22:50:40 +02:00
Michael Weiss 6560b60886 waypipe: 0.6.1 -> 0.7.0 2020-07-07 20:08:56 +02:00
Michael Weiss 55668eb671 inxi: 3.1.03-1 -> 3.1.04-1 2020-07-01 20:07:51 +02:00
Michael Weiss 8f423d094d Merge pull request #91605 from primeos/libva
libva: 2.7.1 -> 2.8.0
2020-06-28 17:44:31 +02:00
Michael Weiss 5efbf76d61 libva: 2.7.1 -> 2.8.0 2020-06-26 15:11:22 +02:00
Michael Weiss fdfa609ae9 signal-desktop: 1.34.2 -> 1.34.3 2020-06-26 12:51:45 +02:00
Michael Weiss 4dd1dd5623 jekyll: 4.1.0 -> 4.1.1 2020-06-25 16:48:52 +02:00
Michael Weiss 10b11fe5c8 tdesktop: 2.1.12 -> 2.1.13 2020-06-24 20:46:51 +02:00
Michael Weiss a7fa6f60c4 Merge pull request #91392 from thefloweringash/chromium
chromium: 83.0.4103.106 -> 83.0.4103.116
2020-06-24 19:48:02 +02:00
Michael Weiss 7daa00707d dav1d: 0.7.0 -> 0.7.1 2020-06-21 17:10:55 +02:00
Michael Weiss ae3d755af4 Merge pull request #91156 from primeos/cross-compilation-fixes
efibootmgr,openldap: Cross compilation fixes
2020-06-20 13:28:00 +02:00
Michael Weiss bf965338df openldap: Fix the cross compilation 2020-06-20 13:00:49 +02:00
Michael Weiss 5afd967d70 efibootmgr: Fix the cross compilation 2020-06-20 13:00:49 +02:00
Michael Weiss 58302584d9 bcache-tools: Fix the cross compilation
Fix #90726.
2020-06-19 23:13:37 +02:00
Michael Weiss 605d7e1fe0 gollum: Update the dependencies (security, CVE-2020-8184)
This updates rack to 2.2.3 for CVE-2020-8184 [0].

[0]: https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak
2020-06-19 18:23:51 +02:00
Michael Weiss b713e97c30 tdesktop: 2.1.11 -> 2.1.12 2020-06-18 18:09:45 +02:00
Michael Weiss 4e5b9f8b2e nvme-cli: 1.11.2 -> 1.12 2020-06-17 17:10:10 +02:00
Michael Weiss 5e8b626898 Merge pull request #90538 from primeos/chromium
chromium: 83.0.4103.97 -> 83.0.4103.106
2020-06-16 13:59:12 +02:00
Michael Weiss 1a5df8f680 chromium: 83.0.4103.97 -> 83.0.4103.106
https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_15.html

This update includes 4 security fixes.

CVEs: CVE-2020-6505 CVE-2020-6506 CVE-2020-6507
2020-06-16 00:01:51 +02:00
Michael Weiss 77bf0246b7 wayvnc: Add the missing dependency on librt
See #90452. For some reason the build was working initially but stated
failing after some other changes. The problem is a missing dependency to
link with librt for shm_open and shm_unlink [0].

Fix #90452.

[0]: https://www.man7.org/linux/man-pages/man3/shm_open.3.html
2020-06-15 12:24:25 +02:00
Michael Weiss 7961573d72 scdoc: 1.10.1 -> 1.11.0 2020-06-14 20:13:44 +02:00
Michael Weiss 29f3a2fd1a fscrypt-experimental: 0.2.8 -> 0.2.9 2020-06-14 12:01:36 +02:00
Michael Weiss a209c46bc2 inxi: 3.1.01-1 -> 3.1.03-1 2020-06-13 15:28:08 +02:00
Michael Weiss e3fa38ec16 rav1e: 0.3.2 -> 0.3.3
The Cargo.lock file is not included in the master branch but it is
currently added for the releases (e.g. [0]). Since the GitHub deploy
action currently fails for other reasons [1] we should use the
Cargo.lock from the repository instead.

[0]: https://github.com/xiph/rav1e/commit/80573d2bf733494b69c27cc3fd87f4b31e71d1d1
[1]: https://github.com/xiph/rav1e/issues/2373
2020-06-13 15:22:42 +02:00
Michael Weiss dde87455ed bundler-audit: 0.6.1 -> 0.7.0.1 2020-06-13 15:17:58 +02:00
Michael Weiss 6653a35faa intel-media-driver: 19.4.0r -> 20.1.1 (#90094) 2020-06-13 12:26:45 +02:00
Michael Weiss 82a0240bb0 fuse3: 3.9.1 -> 3.9.2 (#90232) 2020-06-13 12:23:42 +02:00
Michael Weiss 1b6e357424 kmod: 26 -> 27 2020-06-13 10:57:19 +02:00
Michael Weiss 8ee8a22e35 signal-desktop: 1.34.1 -> 1.34.2 2020-06-12 00:57:56 +02:00
Michael Weiss 043fb60293 intel-media-driver: 19.4.0r -> 20.1.1 2020-06-10 23:18:57 +02:00
Michael Weiss e466ea721c chromium{Beta,Dev}: Fix the builds
Fix #89615.
2020-06-10 11:23:14 +02:00
Michael Weiss a1aecffc97 tdesktop: 2.1.10 -> 2.1.11 2020-06-09 18:34:08 +02:00
Michael Weiss e0c970c0e2 Merge pull request #89820 from primeos/linux_5_7
linux_5_7: init at 5.7.1
2020-06-09 15:56:50 +02:00
Michael Weiss 551a9887e2 hardenedLinuxPackagesFor: Make it possible to delay major updates
This adds an abstraction/hack to update the latest hardened kernel
independent of linux_latest, which is required as the hardened patches
aren't immediately available ([0] currently doesn't exist).
Currently the Linux hardened patches aren't even available for 5.7 which
was released on 2020-05-31 (already 9 days ago!).
Therefore it is required to keep both linuxPackages_latest_hardened and
linuxPackages_latest_xen_dom0_hardened at 5.6 until the patches for 5.7
are released.

This abstraction makes that task more manageable but we should aim for a
better solution to resolve this or at least a cleaner and more robust
implementation (in the sense of better error messages).

[0]: https://github.com/anthraxx/linux-hardened/releases/tag/5.7.1.a
2020-06-09 15:39:32 +02:00
Michael Weiss 1d38f6bcb2 chromiumBeta: Fix the configuration phase
The changes from chromiumDev (see 029a5de083) are required for
chromiumBeta as well.
2020-06-09 13:53:47 +02:00
Michael Weiss 19b2efbc39 linux_5_7: init at 5.7.1
Changes:
- Copied linux-5.7.nix from linux-5.6.nix
- Add linux_5_7 and linuxPackages_5_7
- Update linux_latest to 5.7

Note:
The kernel patch 'kernelPatches.export_kernel_fpu_functions."5.3"' is
still applied as I copied the list from linux_5_7 (vs. linux_testing).
This patch is probably still required for the ZFS performance.
2020-06-08 17:44:36 +02:00
Michael Weiss 029a5de083 chromiumDev: Fix the configuration phase
Relevant changes in M85:
- Upstream switched from YASM to NASM [0].
- third_party/binutils was removed [1].

Note: The gn and dev channel updates are optional.
cc #89615.

[0]: https://bugs.chromium.org/p/chromium/issues/detail?id=766721
[1]: https://github.com/chromium/chromium/commit/9869e86fd9079a6ab4ea23aa03d724580678b356
2020-06-06 19:38:53 +02:00
Michael Weiss 98c44f5657 git: 2.26.2 -> 2.27.0 (#89355)
disable_test: Use \s instead of ' ' as tabs are used for indentation in
t5324-split-commit-graph.sh. It's also necessary to insert : (no op) in
front of # to prevent Bash syntax errors due to empty loops.

Two newly added tests fail due the usage of shared permissions (outside
of the build sandbox they succeed, actually even with breakpointHook
(cntr attach + cntr exec bash)):
```
t5324-split-commit-graph.sh                      (Wstat: 256 Tests: 29
Failed: 2)
  Failed tests:  28-29
  Non-zero exit status: 1
```

I'm also adding myself as maintainer since there currently doesn't seem
to be a fixed one for regular updates.

Announcement:
https://lkml.kernel.org/lkml/xmqqzh9mu4my.fsf@gitster.c.googlers.com/
2020-06-06 19:21:54 +02:00
Michael Weiss 19e939d98e chromiumBeta: Fix the source hash
For some reason the hash from 9ec139b672 became invalid, see #89615.
The update script does now produce the correct hash.
2020-06-06 13:36:09 +02:00
Michael Weiss 7ef22b9ff1 tdesktop: 2.1.7 -> 2.1.10 2020-06-05 21:55:05 +02:00
Michael Weiss 5e60482a1a Merge pull request #89411 from primeos/python-google-api-client
python: Google API updates (google_{auth,api_core,api_python_client})
2020-06-05 21:03:19 +02:00
Michael Weiss aaa69a98df Merge pull request #89495 from primeos/chromium
chromium: 83.0.4103.61 -> 83.0.4103.97
2020-06-05 20:40:03 +02:00
Michael Weiss 9ec139b672 chromium: 83.0.4103.61 -> 83.0.4103.97
https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html

This update includes 5 security fixes.

CVEs: CVE-2020-6493 CVE-2020-6494 CVE-2020-6495 CVE-2020-6496
2020-06-04 20:26:31 +02:00
Michael Weiss ac0716aa61 iproute: 5.6.0 -> 5.7.0
"As usual lots of small fixes, across many utilities. Several qdisc now
have more parameters available. Devlink get most of the fixes." [0]

File changes (additions/removals):
+share/bash-completion/completions/devlink
+share/man/man8/devlink-dpipe.8.gz
+share/man/man8/tc-ct.8.gz

[0]: https://marc.info/?l=linux-netdev&m=159115579900638
2020-06-04 18:13:07 +02:00
Michael Weiss a448d9156b Merge pull request #89407 from primeos/empty-hostname-fix
nixos: Allow empty hostnames again
2020-06-03 16:18:28 +02:00
Michael Weiss 8a9cbdb549 tev: 1.15 -> 1.16 2020-06-03 16:13:07 +02:00
Michael Weiss 52c6501e6e python3Packages.google_auth: 1.11.3 -> 1.16.0 2020-06-03 15:58:51 +02:00
Michael Weiss 86ae3d03ab python3Packages.google_api_core: 1.16.0 -> 1.17.0 2020-06-03 15:58:51 +02:00
Michael Weiss c8a8906467 python3Packages.google_api_python_client: 1.8.3 -> 1.9.1 2020-06-03 15:58:51 +02:00
Michael Weiss a6afdbb70b nixos: Allow empty hostnames again
This fixes a regression from 993baa587c which requires
networking.hostName to be a valid DNS label [0].
Unfortunately we missed the fact that the hostnames may also be empty,
if the user wants to obtain it from a DHCP server. This is even required
by a few modules/images (e.g. Amazon EC2, Azure, and Google Compute).

[0]: https://github.com/NixOS/nixpkgs/pull/76542#issuecomment-638138666
2020-06-03 15:23:37 +02:00
Michael Weiss 84342d7b83 inxi: 3.1.00-1 -> 3.1.01-1 2020-06-02 18:16:32 +02:00
Michael Weiss 4d0d0b8dd1 rav1e: 0.3.1 -> 0.3.2 2020-05-29 21:34:51 +02:00
Michael Weiss 401df90cfa Merge pull request #89153 from alapshin/android-studio
androidStudioPackages.stable: 3.6.3.0 -> 4.0.0.16
2020-05-29 21:11:45 +02:00
Michael Weiss a668f6a58a libva: Switch from GNU Autotools to Meson 2020-05-29 20:48:15 +02:00
Michael Weiss 9ab24ec76b libva-utils: refactor
Note: This doesn't affect the result.
2020-05-29 20:48:15 +02:00
Michael Weiss 2bde87923e mesa: 20.0.2 -> 20.0.7 2020-05-28 13:57:31 +02:00
Michael Weiss 023e11ae34 swaylock: Add a short note about the required PAM module
See #89019, hopefully this helps a bit.
2020-05-28 00:27:19 +02:00
Michael Weiss 816e06ce20 python3Packages.google_api_python_client: 1.8.3 -> 1.8.4 2020-05-27 22:27:52 +02:00
Michael Weiss d30e63405f jekyll: 4.0.1 -> 4.1.0 2020-05-27 21:02:03 +02:00