From 0804b469356ea66d67aff99f5a96a03fa0a04c6e Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Thu, 14 May 2026 00:39:28 +0000 Subject: [PATCH 01/52] gsasl: 2.2.2 -> 2.2.3 (cherry picked from commit 51fa6640319cf2e3acdac60f21e4e555fd1f2793) --- pkgs/by-name/gs/gsasl/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/gs/gsasl/package.nix b/pkgs/by-name/gs/gsasl/package.nix index eb7fccdd294f..c34d638c5163 100644 --- a/pkgs/by-name/gs/gsasl/package.nix +++ b/pkgs/by-name/gs/gsasl/package.nix @@ -9,11 +9,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "gsasl"; - version = "2.2.2"; + version = "2.2.3"; src = fetchurl { url = "mirror://gnu/gsasl/gsasl-${finalAttrs.version}.tar.gz"; - sha256 = "sha256-QejkQmSOzK9kWdmtk9SxhTC5bI6vUOPzQlMu8nXv87o="; + sha256 = "sha256-/uNsZqwS0y078pp7Na2PREt5lv42m52l02/WrmScaOs="; }; buildInputs = [ From 6d31b174a6bb2d302c951fd91e710c316d9165b7 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 25 May 2026 05:53:45 +0000 Subject: [PATCH 02/52] rmapi: 0.0.32 -> 0.0.34 (cherry picked from commit b020b942abb0a4d655a96dcea2ee7944baf42a4b) --- pkgs/by-name/rm/rmapi/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/rm/rmapi/package.nix b/pkgs/by-name/rm/rmapi/package.nix index 509c11d6ea86..75f5c7e36699 100644 --- a/pkgs/by-name/rm/rmapi/package.nix +++ b/pkgs/by-name/rm/rmapi/package.nix @@ -6,13 +6,13 @@ buildGoModule (finalAttrs: { pname = "rmapi"; - version = "0.0.32"; + version = "0.0.34"; src = fetchFromGitHub { owner = "ddvk"; repo = "rmapi"; rev = "v${finalAttrs.version}"; - sha256 = "sha256-0FrcvOjcVg5lXR6iS/eo7IUQnNvqHVHEj1XSIbdrzms="; + sha256 = "sha256-g7KFLa+VBkubzdrgMFDVvAuscw41nyfHd7DWvh3S+NU="; }; vendorHash = "sha256-Qisfw+lCFZns13jRe9NskCaCKVj5bV1CV8WPpGBhKFc="; From 1baf38c46b4d214c2e436b0e29290caa98373ee6 Mon Sep 17 00:00:00 2001 From: Adrian Pistol Date: Tue, 30 Jun 2026 23:27:34 +0200 Subject: [PATCH 03/52] haproxy: 3.3.9 -> 3.3.11 Not-cherry-picked-because: Fixed maintainance release is available and contains more fixes, master is already on 3.4.X. --- pkgs/by-name/ha/haproxy/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ha/haproxy/package.nix b/pkgs/by-name/ha/haproxy/package.nix index fea01ad0d0b5..338cb9e06897 100644 --- a/pkgs/by-name/ha/haproxy/package.nix +++ b/pkgs/by-name/ha/haproxy/package.nix @@ -33,11 +33,11 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "haproxy"; - version = "3.3.9"; + version = "3.3.11"; src = fetchurl { url = "https://www.haproxy.org/download/${lib.versions.majorMinor finalAttrs.version}/src/haproxy-${finalAttrs.version}.tar.gz"; - hash = "sha256-8x6OaNsHfMCVb07T/3oexjeqXjSMbRxc0hY+ev6xueY="; + hash = "sha256-ywGFCNBymseyaGlEqKk37a3bB0ThDNEFfdZQFQzcKD4="; }; buildInputs = [ From 67c11a1b0c0b16bbfdeef17bbb4b99e9052951d5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Santos=20Reis?= Date: Tue, 23 Jun 2026 15:05:12 +0100 Subject: [PATCH 04/52] busybox: backport tar symlink bug fix (cherry picked from commit 03aae1016e762e4c25bb5b158d3bebbb90a56d7a) --- pkgs/os-specific/linux/busybox/default.nix | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/pkgs/os-specific/linux/busybox/default.nix b/pkgs/os-specific/linux/busybox/default.nix index e3e313e175ef..212953626216 100644 --- a/pkgs/os-specific/linux/busybox/default.nix +++ b/pkgs/os-specific/linux/busybox/default.nix @@ -90,6 +90,13 @@ stdenv.mkDerivation rec { excludes = [ "networking/httpd_ratelimit_cgi.c" ]; # New since release. hash = "sha256-Msm9sDZrVx7ofunnvnTS73SPKUUpR3Tv5xZ/wBd+rts="; }) + # tar: only strip unsafe components from hardlinks, not symlinks + # fix issue introduced by the previous patch (CVE-2026-26157_CVE-2026-26158.patch) + (fetchpatch { + name = "CVE-2026-26157_CVE-2026-26158-2.patch"; + url = "https://github.com/vda-linux/busybox_mirror/commit/599f5dd8fac390c18b79cba4c14c334957605dae.patch"; + hash = "sha256-go/KHSsuMSm21nC0yvKEtAQs8Jnjjqdcs5i8RWBGwT4="; + }) # syslogd: fix writing to local log file # https://lists.busybox.net/pipermail/busybox/2024-October/090969.html (fetchpatch { From b258e214324be01a213ef5040954809aab8d354f Mon Sep 17 00:00:00 2001 From: Tatu Argillander Date: Tue, 27 Jan 2026 22:08:47 +0200 Subject: [PATCH 05/52] vtsls: 0.2.9 -> 0.3.0 (cherry picked from commit 097e117e4addaf98b945d411f5e92354445e38f7) --- pkgs/by-name/vt/vtsls/package.nix | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/pkgs/by-name/vt/vtsls/package.nix b/pkgs/by-name/vt/vtsls/package.nix index 7cd84da104b5..e5e6ad17db52 100644 --- a/pkgs/by-name/vt/vtsls/package.nix +++ b/pkgs/by-name/vt/vtsls/package.nix @@ -5,23 +5,23 @@ nodejs-slim_22, gitMinimal, gitSetupHook, - pnpm_8, + pnpm_11, fetchPnpmDeps, pnpmConfigHook, nix-update-script, }: let - pnpm' = pnpm_8.override { nodejs-slim = nodejs-slim_22; }; + pnpm' = pnpm_11.override { nodejs-slim = nodejs-slim_22; }; in stdenv.mkDerivation (finalAttrs: { pname = "vtsls"; - version = "0.2.9"; + version = "0.3.0"; src = fetchFromGitHub { owner = "yioneko"; repo = "vtsls"; tag = "server-v${finalAttrs.version}"; - hash = "sha256-vlw84nigvQqRB9OQBxOmrR9CClU9M4dNgF/nrvGN+sk="; + hash = "sha256-RuxaT3u9OOUMbDN6A2biIeUC+Z4leELF3OhKXxmCqbM="; fetchSubmodules = true; }; @@ -36,7 +36,11 @@ stdenv.mkDerivation (finalAttrs: { buildInputs = [ nodejs-slim_22 ]; - pnpmWorkspaces = [ "@vtsls/language-server" ]; + pnpmWorkspaces = [ + "@vtsls/language-server" + "@vtsls/language-service" + "@vtsls/vscode-fuzzy" + ]; pnpmDeps = fetchPnpmDeps { inherit (finalAttrs) @@ -46,8 +50,8 @@ stdenv.mkDerivation (finalAttrs: { version ; pnpm = pnpm'; - fetcherVersion = 3; - hash = "sha256-1P2ph8ZX6/KptkLP4wk0dZzuvnYCLOWorM1b9+otKsE="; + fetcherVersion = 4; + hash = "sha256-jYh79MtcfW/p6twuDM1JDwukSnn2/TJQYvHBlut0QnE="; }; # Patches to get submodule sha from file instead of 'git submodule status' From 0b0b9aa32d89628c5ea741e92bbdb7909afb9711 Mon Sep 17 00:00:00 2001 From: Tatu Argillander Date: Tue, 27 Jan 2026 22:18:02 +0200 Subject: [PATCH 06/52] vtsls: add lsp initialization smoke test (cherry picked from commit 389d1a8463a7efefed2a13a7f57678abb164c002) --- pkgs/by-name/vt/vtsls/package.nix | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/pkgs/by-name/vt/vtsls/package.nix b/pkgs/by-name/vt/vtsls/package.nix index e5e6ad17db52..7fac88f81b36 100644 --- a/pkgs/by-name/vt/vtsls/package.nix +++ b/pkgs/by-name/vt/vtsls/package.nix @@ -9,6 +9,8 @@ fetchPnpmDeps, pnpmConfigHook, nix-update-script, + vtsls, + runCommand, }: let pnpm' = pnpm_11.override { nodejs-slim = nodejs-slim_22; }; @@ -94,6 +96,25 @@ stdenv.mkDerivation (finalAttrs: { passthru = { updateScript = nix-update-script { }; + + tests.smoke = + runCommand "vtsls-smoke-test" + { + } + '' + INIT_REQUEST='{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"processId":null,"rootUri":"file:///tmp","workspaceFolders":[{"uri":"file:///tmp","name":"test"}],"capabilities":{}}}' + CONTENT_LENGTH=''${#INIT_REQUEST} + + RESPONSE=$( + { + printf "Content-Length: %d\r\n\r\n%s" "$CONTENT_LENGTH" "$INIT_REQUEST" + sleep 1 + } | timeout 3 ${lib.getExe vtsls} --stdio 2>&1 | head -c 1000 + ) || true + + echo "$RESPONSE" | grep -q '"capabilities"' + touch $out + ''; }; meta = { From c0aa4308ff5a3b02f955b0c4b1f0ab42c3226d99 Mon Sep 17 00:00:00 2001 From: zowoq <59103226+zowoq@users.noreply.github.com> Date: Sun, 28 Jun 2026 09:20:45 +1000 Subject: [PATCH 07/52] linux_7_0: remove EOL (cherry picked from commit 2594192c4c3ca52408c53cf6a04e8188b7b955b5) --- pkgs/os-specific/linux/kernel/kernels-org.json | 5 ----- pkgs/top-level/linux-kernels.nix | 11 ++--------- 2 files changed, 2 insertions(+), 14 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index b1bbd932a1ee..636be371ecef 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -34,11 +34,6 @@ "hash": "sha256:0maj2ap1m09bxl6a3g9wc65h9sdr6y8rwc5qcqlbavb4wq0d4g58", "lts": true }, - "7.0": { - "version": "7.0.14", - "hash": "sha256:160ggaq9rh50a39gz02fpia8maq85bwxhqlwsc03yafjhjvrk6fy", - "lts": false - }, "7.1": { "version": "7.1.2", "hash": "sha256:0gw8nnq6nix9xk2dhb1jwmhnqjayrn3bn2akzg4lgqkvfa9qq69p", diff --git a/pkgs/top-level/linux-kernels.nix b/pkgs/top-level/linux-kernels.nix index 5f56485094a9..84f1d5838539 100644 --- a/pkgs/top-level/linux-kernels.nix +++ b/pkgs/top-level/linux-kernels.nix @@ -92,14 +92,6 @@ in ]; }; - linux_7_0 = callPackage ../os-specific/linux/kernel/mainline.nix { - branch = "7.0"; - kernelPatches = [ - kernelPatches.bridge_stp_helper - kernelPatches.request_key_helper - ]; - }; - linux_7_1 = callPackage ../os-specific/linux/kernel/mainline.nix { branch = "7.1"; kernelPatches = [ @@ -175,6 +167,7 @@ in linux_6_16 = throw "linux 6.16 was removed because it has reached its end of life upstream"; linux_6_17 = throw "linux 6.17 was removed because it has reached its end of life upstream"; linux_6_19 = throw "linux 6.19 was removed because it has reached its end of life upstream"; + linux_7_0 = throw "linux 7.0 was removed because it has reached its end of life upstream"; linux_5_10_hardened = throw "linux_hardened on nixpkgs only contains latest stable and latest LTS"; linux_5_15_hardened = throw "linux_hardened on nixpkgs only contains latest stable and latest LTS"; @@ -674,7 +667,6 @@ in linux_6_6 = recurseIntoAttrs (packagesFor kernels.linux_6_6); linux_6_12 = recurseIntoAttrs (packagesFor kernels.linux_6_12); linux_6_18 = recurseIntoAttrs (packagesFor kernels.linux_6_18); - linux_7_0 = recurseIntoAttrs (packagesFor kernels.linux_7_0); linux_7_1 = recurseIntoAttrs (packagesFor kernels.linux_7_1); } // lib.optionalAttrs config.allowAliases { @@ -689,6 +681,7 @@ in linux_6_16 = throw "linux 6.16 was removed because it reached its end of life upstream"; # Added 2025-10-22 linux_6_17 = throw "linux 6.17 was removed because it reached its end of life upstream"; # Added 2025-12-22 linux_6_19 = throw "linux 6.19 was removed because it reached its end of life upstream"; # Added 2026-04-23 + linux_7_0 = throw "linux 7.0 was removed because it has reached its end of life upstream"; # Added 2026-06-27 }; rpiPackages = { From 25dd1cab88105acba1f9923cdbd74c1ec2f5f341 Mon Sep 17 00:00:00 2001 From: Peder Bergebakken Sundt Date: Tue, 16 Jun 2026 00:15:06 +0200 Subject: [PATCH 08/52] snouty: enable networking on darwin (cherry picked from commit b9fb78fae740e61df5a50ccf8783e67eb4a407c3) --- pkgs/by-name/sn/snouty/package.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/by-name/sn/snouty/package.nix b/pkgs/by-name/sn/snouty/package.nix index 0fa03747f8d9..2f9609b9b534 100644 --- a/pkgs/by-name/sn/snouty/package.nix +++ b/pkgs/by-name/sn/snouty/package.nix @@ -52,6 +52,8 @@ rustPlatform.buildRustPackage (finalAttrs: { versionCheckProgramArg = "version"; doInstallCheck = true; + __darwinAllowLocalNetworking = true; + passthru.updateScript = nix-update-script { }; meta = { From ba4e16daef37903a1c48d7537179113ca7b58cd2 Mon Sep 17 00:00:00 2001 From: qubitnano <146656568+qubitnano@users.noreply.github.com> Date: Fri, 3 Jul 2026 11:13:41 -0400 Subject: [PATCH 09/52] bcachefs-tools: 1.38.6 -> 1.38.8 Changelog: https://evilpiepirate.org/git/bcachefs-tools.git/tree/Changelog.mdwn (cherry picked from commit a8836279a68e1e42b4c55b3eb6ec5d54f09cf4d2) --- pkgs/by-name/bc/bcachefs-tools/package.nix | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/bc/bcachefs-tools/package.nix b/pkgs/by-name/bc/bcachefs-tools/package.nix index e1c2935d906d..887fe38cecdf 100644 --- a/pkgs/by-name/bc/bcachefs-tools/package.nix +++ b/pkgs/by-name/bc/bcachefs-tools/package.nix @@ -19,6 +19,7 @@ cargo, rustc, rustPlatform, + rust-bindgen, makeWrapper, nix-update-script, versionCheckHook, @@ -30,18 +31,18 @@ stdenv.mkDerivation (finalAttrs: { pname = "bcachefs-tools"; - version = "1.38.6"; + version = "1.38.8"; src = fetchFromGitHub { owner = "koverstreet"; repo = "bcachefs-tools"; tag = "v${finalAttrs.version}"; - hash = "sha256-VNY9kURuXky504utCZ0Ye76mDG2TFAdzrgYI2iup/PI="; + hash = "sha256-9sDE7ua3WMCfV9ZbwQdAbpatv2IhvcwHzzPr+/l2au0="; }; cargoDeps = rustPlatform.fetchCargoVendor { inherit (finalAttrs) src; - hash = "sha256-rajYbfE98j/YqniUoV66LHh22PwEc6sWWJ/7bgGgGtA="; + hash = "sha256-F1+FeAlYSqOxeWJI8vHShpXrOZqYXjNGvty/s6f6u8w="; }; postPatch = '' @@ -58,6 +59,7 @@ stdenv.mkDerivation (finalAttrs: { rustc rustPlatform.cargoSetupHook rustPlatform.bindgenHook + rust-bindgen makeWrapper installShellFiles ]; From 81a60f55a7f4b448c388870de0749ffb8cca3ceb Mon Sep 17 00:00:00 2001 From: qubitnano <146656568+qubitnano@users.noreply.github.com> Date: Fri, 3 Jul 2026 11:13:54 -0400 Subject: [PATCH 10/52] linuxPackages.bcachefs: build with rust support (cherry picked from commit b83fae5195ebd6feb1b6d3f7d898cd5678309d39) --- pkgs/by-name/bc/bcachefs-tools/kernel-module.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix b/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix index 614410a039aa..87a7aeda57e7 100644 --- a/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix +++ b/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix @@ -4,6 +4,7 @@ bcachefs-tools: stdenv, kernelModuleMakeFlags, kernel, + rustPlatform, }: stdenv.mkDerivation { @@ -27,6 +28,7 @@ stdenv.mkDerivation { makeFlags = kernelModuleMakeFlags ++ [ "KDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build" "INSTALL_MOD_PATH=${placeholder "out"}" + "RUST_LIB_SRC=${rustPlatform.rustLibSrc}" ]; installPhase = '' From 6bdb6c023f7085627c7e8f03a248f178a078a585 Mon Sep 17 00:00:00 2001 From: qubitnano <146656568+qubitnano@users.noreply.github.com> Date: Fri, 3 Jul 2026 11:14:05 -0400 Subject: [PATCH 11/52] linuxPackages.bcachefs: support kernel 7.2 (cherry picked from commit 1e9013a7fd0b9959bebc6a289d4c26db71892fd9) --- pkgs/by-name/bc/bcachefs-tools/kernel-module.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix b/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix index 87a7aeda57e7..6310280b1dec 100644 --- a/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix +++ b/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix @@ -52,6 +52,6 @@ stdenv.mkDerivation { platforms ; - broken = !(lib.versionAtLeast kernel.version "6.16" && lib.versionOlder kernel.version "7.2"); + broken = !(lib.versionAtLeast kernel.version "6.16" && lib.versionOlder kernel.version "7.3"); }; } From fd8e660555fa6f33bc3b6afdcd876dedfc85290c Mon Sep 17 00:00:00 2001 From: Zain Kergaye Date: Mon, 8 Jun 2026 20:19:30 -0600 Subject: [PATCH 12/52] syncthing: add zainkergaye as maintainer (cherry picked from commit 0c1890a8006f3cd0346112399603eb769b866fcf) --- pkgs/by-name/sy/syncthing/package.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/by-name/sy/syncthing/package.nix b/pkgs/by-name/sy/syncthing/package.nix index de32f29866a9..307b47bdb918 100644 --- a/pkgs/by-name/sy/syncthing/package.nix +++ b/pkgs/by-name/sy/syncthing/package.nix @@ -119,6 +119,7 @@ buildGoModule (finalAttrs: { maintainers = with lib.maintainers; [ joko peterhoeg + zainkergaye ]; mainProgram = target; platforms = lib.platforms.unix; From e3d8cae9178e8323045257d7fab85321aec54f49 Mon Sep 17 00:00:00 2001 From: Zain Kergaye Date: Mon, 8 Jun 2026 20:20:37 -0600 Subject: [PATCH 13/52] syncthing: 2.0.15 -> 2.1.0 (cherry picked from commit a22e20d775005c5d1ad847b8f33f129d7aa963ff) --- pkgs/by-name/sy/syncthing/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/sy/syncthing/package.nix b/pkgs/by-name/sy/syncthing/package.nix index 307b47bdb918..7b963e50ca41 100644 --- a/pkgs/by-name/sy/syncthing/package.nix +++ b/pkgs/by-name/sy/syncthing/package.nix @@ -22,16 +22,16 @@ assert builtins.elem target [ buildGoModule (finalAttrs: { pname = "syncthing"; - version = "2.0.15"; + version = "2.1.0"; src = fetchFromGitHub { owner = "syncthing"; repo = "syncthing"; tag = "v${finalAttrs.version}"; - hash = "sha256-v77ovjV+UoCRA1GteP+HDqC8dsRvtOhFX/IkSgSIf8Y="; + hash = "sha256-sTtFmZBPJIHMksaFFLmA3Abt9EhAC8Nz/ibdzg2LMd4="; }; - vendorHash = "sha256-boYTLgvH+iWlh3y3Z0LPvSVGEget3X94AthtJKphhCw="; + vendorHash = "sha256-rOsdg98WVAKqjV7AxH+m4oSf8Z4FPru4NSbgGFtUMVE="; nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ # Recent versions of macOS seem to require binaries to be signed when From 25fa5d5fc1558d3a5f71e794c52ae578f37dc105 Mon Sep 17 00:00:00 2001 From: Nikita Denissov Date: Sat, 4 Jul 2026 19:21:34 +0500 Subject: [PATCH 14/52] nvidia-x11: 580.142 -> 580.173.02 (backport to release-26.05) (cherry picked from commit ce645f6cc4da997d4676b492a8ef2dd76da04175) --- pkgs/os-specific/linux/nvidia-x11/default.nix | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pkgs/os-specific/linux/nvidia-x11/default.nix b/pkgs/os-specific/linux/nvidia-x11/default.nix index 26f2a6530991..36ba1fca1510 100644 --- a/pkgs/os-specific/linux/nvidia-x11/default.nix +++ b/pkgs/os-specific/linux/nvidia-x11/default.nix @@ -156,12 +156,12 @@ rec { # LTSB supported until Aug 2028 legacy_580 = generic { - version = "580.142"; - sha256_64bit = "sha256-IJFfzz/+icNVDPk7YKBKKFRTFQ2S4kaOGRGkNiBEdWM="; - sha256_aarch64 = "sha256-jntr88SpTYR648P1rizQjB/8KleBoa14Ay12vx8XETM="; - openSha256 = "sha256-v968LbRqy8jB9+yHy9ceP2TDdgyqfDQ6P41NsCoM2AY="; - settingsSha256 = "sha256-BnrIlj5AvXTfqg/qcBt2OS9bTDDZd3uhf5jqOtTMTQM="; - persistencedSha256 = "sha256-il403KPFAnDbB+dITnBGljhpsUPjZwmLjGt8iPKuBqw="; + version = "580.173.02"; + sha256_64bit = "sha256-jY65AB4FqaimY9PV0wT+tk7yhE7hhczf2VJ4aCD0bhs="; + sha256_aarch64 = "sha256-1lvVYIfvTXjwSoCNp4g8NaWQHF/TfpXRUKdgLrqXqoA="; + openSha256 = "sha256-lhloZdf6XbaAFTZBF1DxE0Nv9VC6obY8UPf0VyfVepE="; + settingsSha256 = "sha256-dfdu/3tnwHUfP7WoeQFNOMalMlpmUWjeMDIOnu+yi8E="; + persistencedSha256 = "sha256-j8YM1w231X+JIP3c3TpUNurEBumEu1stVjzFGWu1JXE="; }; # Last one without the bug reported here: From 62f5d5222cd49babc8c90d6f3c1613abc4b0162e Mon Sep 17 00:00:00 2001 From: zi3m5f <113244000+zi3m5f@users.noreply.github.com> Date: Tue, 19 May 2026 21:09:41 +0200 Subject: [PATCH 15/52] sambaFull: fix samba-tool missing cryptography module samba-tool depends on cryptography python module so add it to pythonPath if enableDomainController and also check with versionSambaTool test. (cherry picked from commit a59124a4b0d5c8a4eb07da90f10187768d0091f3) --- pkgs/servers/samba/4.x.nix | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pkgs/servers/samba/4.x.nix b/pkgs/servers/samba/4.x.nix index 22f9cbf3aba3..5ca73ec6c351 100644 --- a/pkgs/servers/samba/4.x.nix +++ b/pkgs/servers/samba/4.x.nix @@ -285,6 +285,9 @@ stdenv.mkDerivation (finalAttrs: { python3Packages.dnspython python3Packages.markdown tdb + ] + ++ lib.optionals enableDomainController [ + python3Packages.cryptography ]; strictDeps = true; @@ -348,6 +351,13 @@ stdenv.mkDerivation (finalAttrs: { command = "${finalAttrs.finalPackage}/bin/smbd -V"; package = finalAttrs.finalPackage; }; + } + // lib.optionalAttrs enableDomainController { + versionSambaTool = testers.testVersion { + command = "${lib.getExe' finalAttrs.finalPackage "samba-tool"} --version"; + package = finalAttrs.finalPackage; + version = finalAttrs.version; + }; }; meta = { From 7065eaf28424569c85fb301d06a906b443f1ff25 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:19:39 +0200 Subject: [PATCH 16/52] linux_7_1: 7.1.2 -> 7.1.3 (cherry picked from commit d1f61e4f485a57f6de1ad5767e672edebd63f0a0) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 636be371ecef..09c58e0552aa 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -35,8 +35,8 @@ "lts": true }, "7.1": { - "version": "7.1.2", - "hash": "sha256:0gw8nnq6nix9xk2dhb1jwmhnqjayrn3bn2akzg4lgqkvfa9qq69p", + "version": "7.1.3", + "hash": "sha256:1p6iknvzmd04alrf49zn8mxw863v0yzgznyckfhl4llgx1lc0hdy", "lts": false } } From 4c1179d95a508a69cd10c2a2916f367b84802616 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:19:52 +0200 Subject: [PATCH 17/52] linux_6_18: 6.18.37 -> 6.18.38 (cherry picked from commit feb9b141d796d15b8295edd9e5c500cd23e3e9a6) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 09c58e0552aa..00c64f343014 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -30,8 +30,8 @@ "lts": true }, "6.18": { - "version": "6.18.37", - "hash": "sha256:0maj2ap1m09bxl6a3g9wc65h9sdr6y8rwc5qcqlbavb4wq0d4g58", + "version": "6.18.38", + "hash": "sha256:0igh9xy1lk2hv2jni00dqyy27j4zqh86waw7i65ryvnmmc4fa9mc", "lts": true }, "7.1": { From 49304e546108dac5878cd21590efed37660732ee Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:20:04 +0200 Subject: [PATCH 18/52] linux_6_12: 6.12.94 -> 6.12.95 (cherry picked from commit c11603a1923ada856cea74cffba085e9f831a27c) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 00c64f343014..db706478d6be 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -25,8 +25,8 @@ "lts": true }, "6.12": { - "version": "6.12.94", - "hash": "sha256:1ln83ljmc7wr1nrjjq1hp1m1vx54j7i6i15m3hqb73a1p4ra5679", + "version": "6.12.95", + "hash": "sha256:1xmrsi0kimirky4cailnkkrbd72pp9n8irfx6lfmss8yrcgwbs59", "lts": true }, "6.18": { From 5190a0248a9e41b6176671f5c25ccf613208aa05 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:20:17 +0200 Subject: [PATCH 19/52] linux_6_6: 6.6.143 -> 6.6.144 (cherry picked from commit 5ec65ba5803e1ec9fd106810a961b071db58f758) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index db706478d6be..69f256e17563 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -20,8 +20,8 @@ "lts": true }, "6.6": { - "version": "6.6.143", - "hash": "sha256:0ci9b6kjp7r2xwqifs2963l9ihk2rllk4zpl2kgzbny0r66izkns", + "version": "6.6.144", + "hash": "sha256:1hzcax2ypzhrjzmq4b0jyqyc4al0ncyfcj9pq36phl29gcqbh6gc", "lts": true }, "6.12": { From 06ad75ee26af6332f672a09844939abad18210b8 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:20:29 +0200 Subject: [PATCH 20/52] linux_6_1: 6.1.176 -> 6.1.177 (cherry picked from commit 072138c75ff9c17f766491828f3232d584dec4c2) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 69f256e17563..a2836cf15976 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -5,8 +5,8 @@ "lts": false }, "6.1": { - "version": "6.1.176", - "hash": "sha256:1xj4ms4gd8ghd0l0dzsyi762dgpdrmqhc3f0arrp7sa0p8npf6da", + "version": "6.1.177", + "hash": "sha256:0c0ayz4nygcmz4865r7mcgmh7hic4fi7zysnj6vdlyj53bz9nlpn", "lts": true }, "5.15": { From 6e8fc16bfc238cfbd38f85bb2dd4af55a09be81d Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:20:41 +0200 Subject: [PATCH 21/52] linux_5_15: 5.15.210 -> 5.15.211 (cherry picked from commit 77c8470b04eb90c4cd31e654f7a06038cab18cf5) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index a2836cf15976..35d6d8ad4e5a 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -10,8 +10,8 @@ "lts": true }, "5.15": { - "version": "5.15.210", - "hash": "sha256:008a55av0x9fa3fspcz43sycik143gqxg2agcalrax2yw5ma82wi", + "version": "5.15.211", + "hash": "sha256:0qfry534wl5sbm6b4hf6fxqrr6mzf1k9pa2435sqp4hp6vjm9fdy", "lts": true }, "5.10": { From 99a01c6d8f27d31b59dacb20d3eaee3d07d112b5 Mon Sep 17 00:00:00 2001 From: Bart Oostveen Date: Sun, 5 Jul 2026 00:20:53 +0200 Subject: [PATCH 22/52] linux_5_10: 5.10.259 -> 5.10.260 (cherry picked from commit f95ba6fbb8ddf0ccc5483b9205e8e29c07d4b5c8) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 35d6d8ad4e5a..5da7c32252b6 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -15,8 +15,8 @@ "lts": true }, "5.10": { - "version": "5.10.259", - "hash": "sha256:02dn8rf9p0afkl8kbdv28ijq974zfnv8zdsqcqbmapjm19c8wpma", + "version": "5.10.260", + "hash": "sha256:113bka32apz5pfqjfnv97k9hf9arkn5asfcd6cw7snsh65qjka27", "lts": true }, "6.6": { From e6eb968bbe34ddc3c0bfb191160babdb9707e118 Mon Sep 17 00:00:00 2001 From: eljamm Date: Sat, 4 Jul 2026 21:28:18 +0000 Subject: [PATCH 23/52] linux_xanmod: 6.18.37 -> 6.18.38 - Changelog: https://dl.xanmod.org/changelog/6.18/ChangeLog-6.18.38-xanmod1.gz - Diff: https://gitlab.com/xanmod/linux/-/compare/6.18.37-xanmod1..6.18.38-xanmod1?from_project_id=51590166 (cherry picked from commit 2976dad409c9b240b720c8ef7b546b262a9a7cf6) --- pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix index 17dadd967c92..5b7d95e663e3 100644 --- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix +++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix @@ -15,8 +15,8 @@ let variants = { # ./update-xanmod.sh lts lts = { - version = "6.18.37"; - hash = "sha256-8H8V9z8fizt/2DCTTCme0DVYOfJ4431SFs0iubUHONE="; + version = "6.18.38"; + hash = "sha256-PJq69EQXiOJKgQnegxsEcJqAaL10G542Joh5dBrZN0I="; isLTS = true; }; # ./update-xanmod.sh main From e3b3ed0d68c2a33b255e0bb8c3b4a3f7f70ac8ff Mon Sep 17 00:00:00 2001 From: eljamm Date: Sat, 4 Jul 2026 21:30:31 +0000 Subject: [PATCH 24/52] linux_xanmod_latest: 7.0.14 -> 7.1.3 - Changelog: https://dl.xanmod.org/changelog/7.1/ChangeLog-7.1.3-xanmod1.gz - Diff: https://gitlab.com/xanmod/linux/-/compare/7.0.14-xanmod1..7.1.3-xanmod1?from_project_id=51590166 (cherry picked from commit f806e3ca4f91480c90fd6734db54750ac18a8616) --- pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix index 5b7d95e663e3..1267c15608e5 100644 --- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix +++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix @@ -21,8 +21,8 @@ let }; # ./update-xanmod.sh main main = { - version = "7.0.14"; - hash = "sha256-9vb4ORzAppq5S/ukEhDHohNQBW+jWwGnjhv21HztWdk="; + version = "7.1.3"; + hash = "sha256-EvxKUWDp0KAKhYO4rZKKx22RCGOimzPm5epchME/pJ8="; }; }; From 9c3bf744244a127aed6bcf56cd86acc15aa711a0 Mon Sep 17 00:00:00 2001 From: faukah Date: Sat, 4 Jul 2026 11:01:39 +0200 Subject: [PATCH 25/52] nh-unwrapped: 4.3.2 -> 4.4.0 (cherry picked from commit 7a4c51d7be00e08ac1dfb7cb4b748ae119cdb0b7) --- pkgs/by-name/nh/nh-unwrapped/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/nh/nh-unwrapped/package.nix b/pkgs/by-name/nh/nh-unwrapped/package.nix index 16210de364d4..351c1797e2b4 100644 --- a/pkgs/by-name/nh/nh-unwrapped/package.nix +++ b/pkgs/by-name/nh/nh-unwrapped/package.nix @@ -11,12 +11,12 @@ }: rustPlatform.buildRustPackage (finalAttrs: { pname = "nh-unwrapped"; - version = "4.3.2"; + version = "4.4.0"; src = fetchFromGitHub { owner = "nix-community"; repo = "nh"; tag = "v${finalAttrs.version}"; - hash = "sha256-TSXa6nL2TpOfDCsZIGCFAMbkQy2Z40gam7JrxBy5FGY="; + hash = "sha256-ebAi5ODaNRfhKISPPchWoI6FZNO2v+lEyvua7e5OOZo="; }; strictDeps = true; @@ -100,7 +100,7 @@ rustPlatform.buildRustPackage (finalAttrs: { rm $out/bin/xtask ''; - cargoHash = "sha256-ZR8vvG2mXrGg6GeyP7C0uWhPW6cp2QPYj2cOJUSyeAs="; + cargoHash = "sha256-dRSueVz0BeWwYpMBO1KUUeRoa/CdCWsKPRw0Zeulfe8="; passthru.updateScript = nix-update-script { }; From 1b2f306209ad858363f9f53f7a462ed3d53b4dc6 Mon Sep 17 00:00:00 2001 From: Leona Maroni Date: Sat, 4 Jul 2026 18:58:28 +0200 Subject: [PATCH 26/52] youtrack: 2026.1.13757 -> 2026.2.17012 https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.2.16593&title=YouTrack+2026.2.16593+Release+Notes https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.2.17012&title=YouTrack%202026.2.17012%20Release%20Notes fixes: - CVE-2026-57926 - CVE-2026-57925 - CVE-2026-57924 - CVE-2026-57923 - CVE-2026-57922 - CVE-2026-57921 (cherry picked from commit 0df1f0ce7ab019da2b29c8d06435f1834a3dc507) --- pkgs/by-name/yo/youtrack/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/yo/youtrack/package.nix b/pkgs/by-name/yo/youtrack/package.nix index 93e2aa0b451a..4d310ebc1ac4 100644 --- a/pkgs/by-name/yo/youtrack/package.nix +++ b/pkgs/by-name/yo/youtrack/package.nix @@ -10,15 +10,15 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "youtrack"; - version = "2026.1.13757"; + version = "2026.2.17012"; src = dockerTools.exportImage { diskSize = 8192; fromImage = dockerTools.pullImage { imageName = "jetbrains/youtrack"; arch = "amd64"; - imageDigest = "sha256:56c4d6b6cb3781e21a369857943a366931b69f22dee76c16b2173de0fd56a0a9"; - hash = "sha256-vWNe/1PTLX1rNR66iOZizubH2YVda8GTfXrQikWTML0="; + imageDigest = "sha256:fa50e2e07435dc91461c00ef05ee064ff76748d4d8feaf8aeaa9f9e4a9bf6606"; + hash = "sha256-8hoMtFqG5T4gnMDorIe6UXs/d3z7epAS352reipPjWI="; }; }; unpackPhase = '' From 4743955714667ee563bd1b5cf86fec0548c0e335 Mon Sep 17 00:00:00 2001 From: Markus Wamser Date: Fri, 26 Jun 2026 09:09:22 +0200 Subject: [PATCH 27/52] rmapi: add wamserma to maintainers (cherry picked from commit fb6701387038bae58d90d02cfb3238413f66f758) --- pkgs/by-name/rm/rmapi/package.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkgs/by-name/rm/rmapi/package.nix b/pkgs/by-name/rm/rmapi/package.nix index 75f5c7e36699..615a5f5f0bdc 100644 --- a/pkgs/by-name/rm/rmapi/package.nix +++ b/pkgs/by-name/rm/rmapi/package.nix @@ -24,7 +24,10 @@ buildGoModule (finalAttrs: { homepage = "https://github.com/ddvk/rmapi"; changelog = "https://github.com/ddvk/rmapi/blob/v${finalAttrs.version}/CHANGELOG.md"; license = lib.licenses.agpl3Only; - maintainers = [ lib.maintainers.nickhu ]; + maintainers = with lib.maintainers; [ + nickhu + wamserma + ]; mainProgram = "rmapi"; }; }) From db8c62b59c35b91fb79555110fc60c38ce255301 Mon Sep 17 00:00:00 2001 From: Viacheslav Lotsmanov Date: Thu, 2 Jul 2026 05:16:03 +0300 Subject: [PATCH 28/52] =?UTF-8?q?nimlsp:=200.4.6=20=E2=86=92=200.4.7?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (cherry picked from commit 0bf1a1df6780eb9b893014ff49c92298a06250a9) --- pkgs/by-name/ni/nimlsp/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ni/nimlsp/package.nix b/pkgs/by-name/ni/nimlsp/package.nix index 1e01f33bb859..a24a0ab7f15f 100644 --- a/pkgs/by-name/ni/nimlsp/package.nix +++ b/pkgs/by-name/ni/nimlsp/package.nix @@ -15,13 +15,13 @@ let in buildNimPackage' (finalAttrs: { pname = "nimlsp"; - version = "0.4.6"; + version = "0.4.7"; src = fetchFromGitHub { owner = "PMunch"; repo = "nimlsp"; rev = "v${finalAttrs.version}"; - hash = "sha256-MCtpCx8jMQp0VXuMowh69d1DQreU5cDftBf0lww7PUM="; + hash = "sha256-jUNW+tukZXv41HTWP2F2BdEn7nesFXVg2TffKPWfSss="; }; lockFile = ./lock.json; From c80a846e56d4c2a0aba861d290d1a6ec2ebab686 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 20:40:10 +0000 Subject: [PATCH 29/52] jetbrains.rust-rover: 2026.1.3 -> 2026.1.4 (cherry picked from commit 2f85997471681aa029ba0ed1c8ac817a2eaa0116) --- .../editors/jetbrains/ides/rust-rover.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/rust-rover.nix b/pkgs/applications/editors/jetbrains/ides/rust-rover.nix index db6201d672b8..3f82ae6aea2e 100644 --- a/pkgs/applications/editors/jetbrains/ides/rust-rover.nix +++ b/pkgs/applications/editors/jetbrains/ides/rust-rover.nix @@ -18,20 +18,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.3.tar.gz"; - hash = "sha256-0+v05zxvFqXV13c8oV9dTTwtO+shgywD75cwUiZAab0="; + url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.4.tar.gz"; + hash = "sha256-8x/AP6uKSVJavwjA9tYT1IM1xVspOZZzwmcwpGloIcw="; }; aarch64-linux = { - url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.3-aarch64.tar.gz"; - hash = "sha256-SZ4OkWgAGeSafFo1ml5dv5tN5su+HgzbEhQ5GzPqGdo="; + url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.4-aarch64.tar.gz"; + hash = "sha256-KpF3jCnLKCEeEXkBdB8ZsPPqP9FOVRTwRV/FQLKyh1Q="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.3.dmg"; - hash = "sha256-JA++mbKvRTvjHEblbgmjBzbWbxcV7ss3+W9M6i6ePu0="; + url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.4.dmg"; + hash = "sha256-2BwgAD0xF9IxRJh+gW4vLzBW13rFQSzQPbEwdmQGvLU="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.3-aarch64.dmg"; - hash = "sha256-ndipMTztrYeUdo4MfOHjJHk3liHutWmMj+J6G8xjtWA="; + url = "https://download.jetbrains.com/rustrover/RustRover-2026.1.4-aarch64.dmg"; + hash = "sha256-Hly4NBv9mg/RMmxCM6m9w5eS/CQ7ycxp7V2VQZwyGQE="; }; }; # update-script-end: urls @@ -45,8 +45,8 @@ in product = "RustRover"; # update-script-start: version - version = "2026.1.3"; - buildNumber = "261.25134.134"; + version = "2026.1.4"; + buildNumber = "261.26222.73"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From e2ee29b2e30dcad64584c512e0c16bc84da84a88 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 20:40:31 +0000 Subject: [PATCH 30/52] jetbrains.ruby-mine: 2026.1.3 -> 2026.1.4 (cherry picked from commit 8ff45729fc349986a8791b388be0ab8dbfedf6d3) --- .../editors/jetbrains/ides/ruby-mine.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix b/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix index 807fe17c4e06..b4ab8c0b34c4 100644 --- a/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix +++ b/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix @@ -12,20 +12,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.3.tar.gz"; - hash = "sha256-0KF/IEVRT8kgHpULEmqMy9gOf06IIDA4vEV3RujjQoE="; + url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.4.tar.gz"; + hash = "sha256-0EhtU4XKWI9i7ij+m5uvxHSYnbQaYJy8Sa6S1OW4CFU="; }; aarch64-linux = { - url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.3-aarch64.tar.gz"; - hash = "sha256-kiuRp9JhdS0aUFPX1brI1T9ik/iWhglIckHvv4bdPWk="; + url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.4-aarch64.tar.gz"; + hash = "sha256-oSu19pkGVWt31vWBdAffSZsu4QzsUznVbUSwDy98nug="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.3.dmg"; - hash = "sha256-UjpwMCXhI+bMOvyyEbRBoNW3GGCDpi7aF6hUxffW/h0="; + url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.4.dmg"; + hash = "sha256-BLo2weIJK8gQAcMtAiETM7FMdhw9aoFIGh5Yqjv3k7s="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.3-aarch64.dmg"; - hash = "sha256-lqa3L+rBiEH/hPmFcevWBumvvyBBzoUR3ttvA8s0uT0="; + url = "https://download.jetbrains.com/ruby/RubyMine-2026.1.4-aarch64.dmg"; + hash = "sha256-4wEnwcPRtwp0wxePUMiLow6sMxirwndRMdmJL8LBh9k="; }; }; # update-script-end: urls @@ -39,8 +39,8 @@ mkJetBrainsProduct { product = "RubyMine"; # update-script-start: version - version = "2026.1.3"; - buildNumber = "261.25134.97"; + version = "2026.1.4"; + buildNumber = "261.26222.67"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From d5c36ad918553de078ad3db804522e6305ea13b5 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 20:51:07 +0000 Subject: [PATCH 31/52] jetbrains.phpstorm: 2026.1.3 -> 2026.1.4 (cherry picked from commit 125a0d91f96202aa60ee5395efca510c776e7932) --- .../editors/jetbrains/ides/phpstorm.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/phpstorm.nix b/pkgs/applications/editors/jetbrains/ides/phpstorm.nix index a034954c8e1e..be56d33d23bc 100644 --- a/pkgs/applications/editors/jetbrains/ides/phpstorm.nix +++ b/pkgs/applications/editors/jetbrains/ides/phpstorm.nix @@ -12,20 +12,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.3.tar.gz"; - hash = "sha256-hXb2KcCaNKIJOGbN0ZUDxMKuX++dO1FRoxvC580VIHQ="; + url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.4.tar.gz"; + hash = "sha256-SF25D7dDn7b6AzcXEDLKwhpjTnCqYz1fEmvND5dl8Is="; }; aarch64-linux = { - url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.3-aarch64.tar.gz"; - hash = "sha256-+As41qcyCvAICIttMEi30b8mBTZoWKK4rjxjkVx4TXs="; + url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.4-aarch64.tar.gz"; + hash = "sha256-T9q3/nxv/AA6y7CHWtOhUibR7bnKN8OZmfN3NWYTsIQ="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.3.dmg"; - hash = "sha256-Q9m/XIgDg4F4yH0P35IaInk/se5CXqewvp248VqA4uc="; + url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.4.dmg"; + hash = "sha256-W7EwYu7S3hs1564tXq8H1Uok/Gwx/8QJO4brUGOfFY4="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.3-aarch64.dmg"; - hash = "sha256-Yo50EhVQDg7c/C3JZ9utZxpsOY0DuZfgYzYtBN9Nmwk="; + url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.4-aarch64.dmg"; + hash = "sha256-XGcfEWHHeLugvkT/WlQDsVRN33F46b1PCNhINQitqSY="; }; }; # update-script-end: urls @@ -39,8 +39,8 @@ mkJetBrainsProduct { product = "PhpStorm"; # update-script-start: version - version = "2026.1.3"; - buildNumber = "261.25134.104"; + version = "2026.1.4"; + buildNumber = "261.26222.71"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From 1b00ee2940c114ec144d7b5238eec95f2b153299 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 20:53:43 +0000 Subject: [PATCH 32/52] jetbrains.goland: 2026.1.2 -> 2026.1.4 (cherry picked from commit 9107cb10c2b47a1437ec6487c5835754ce63c487) --- .../editors/jetbrains/ides/goland.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/goland.nix b/pkgs/applications/editors/jetbrains/ides/goland.nix index fe92428cd2a8..692e2ba49fc8 100644 --- a/pkgs/applications/editors/jetbrains/ides/goland.nix +++ b/pkgs/applications/editors/jetbrains/ides/goland.nix @@ -12,20 +12,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/go/goland-2026.1.2.tar.gz"; - hash = "sha256-1FkDEaapyDbTPe4soOdyCHLkp/UT3rZ6siGyGyjmGJo="; + url = "https://download.jetbrains.com/go/goland-2026.1.4.tar.gz"; + hash = "sha256-pHSbmAZ+tSfa0wdtDp/3Ib/GNMP30OFNQlHWUfMwrW0="; }; aarch64-linux = { - url = "https://download.jetbrains.com/go/goland-2026.1.2-aarch64.tar.gz"; - hash = "sha256-E8WpA4s/ePEDAs47IPC0v10C1VKl9UYU7VNX/5igpm4="; + url = "https://download.jetbrains.com/go/goland-2026.1.4-aarch64.tar.gz"; + hash = "sha256-7s98kY08aKjdRGQLDkffeVhgj1FWurLmTTYmtb5Qx6c="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/go/goland-2026.1.2.dmg"; - hash = "sha256-iWYTMImwzMh9KSJgek8a84o/KlLWBaOj80vKlB8Ftes="; + url = "https://download.jetbrains.com/go/goland-2026.1.4.dmg"; + hash = "sha256-RbvcLpLVyeL4B1DJ2/9Ub/6Cz6fJGXMPCHsJ705GsAo="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/go/goland-2026.1.2-aarch64.dmg"; - hash = "sha256-TFnEMq7u51UvtaOjnxS+abJhsR3aSnaQjNFfF8EQrcQ="; + url = "https://download.jetbrains.com/go/goland-2026.1.4-aarch64.dmg"; + hash = "sha256-y7mEke0z0MvQs+kMtrmrq7EeAtJUbgo6sGZrOB0MraM="; }; }; # update-script-end: urls @@ -39,8 +39,8 @@ in product = "Goland"; # update-script-start: version - version = "2026.1.2"; - buildNumber = "261.24374.154"; + version = "2026.1.4"; + buildNumber = "261.26222.72"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From f1aa894e5573c5bc7f07b7c602374161df2174e6 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 20:50:25 +0000 Subject: [PATCH 33/52] jetbrains.clion: 2026.1.2 -> 2026.1.4 (cherry picked from commit 7404316a8ed0d35f477103ee44ae1b3e01ad6fa0) --- .../editors/jetbrains/ides/clion.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/clion.nix b/pkgs/applications/editors/jetbrains/ides/clion.nix index 5b6885bb4614..063d2c752ad2 100644 --- a/pkgs/applications/editors/jetbrains/ides/clion.nix +++ b/pkgs/applications/editors/jetbrains/ides/clion.nix @@ -21,20 +21,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/cpp/CLion-2026.1.2.tar.gz"; - hash = "sha256-Q3LOhpwpU6vrPWEzA+s2ZnbRxo+EeodBUHUYs3Xikrs="; + url = "https://download.jetbrains.com/cpp/CLion-2026.1.4.tar.gz"; + hash = "sha256-uOhFuDqVw3pxtqBvOQH+FpJTFrneaD/R0VcpJZRYD2o="; }; aarch64-linux = { - url = "https://download.jetbrains.com/cpp/CLion-2026.1.2-aarch64.tar.gz"; - hash = "sha256-YM105ozP78oLDmwKL0t4Z4wGjCDh6xvhf/C1oCD6Qi8="; + url = "https://download.jetbrains.com/cpp/CLion-2026.1.4-aarch64.tar.gz"; + hash = "sha256-I6IKQng4lNtRlQIq08K5bueqgKI/q1awX4EuRnyAnOk="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/cpp/CLion-2026.1.2.dmg"; - hash = "sha256-UEkYDJBjRvvUUB2UFsc37kdp/i+1ctqULSKs62/t9/I="; + url = "https://download.jetbrains.com/cpp/CLion-2026.1.4.dmg"; + hash = "sha256-AJt+K1zv4eyjdzubUeFGwB9mqzvOeb3ffA2k0MajPBs="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/cpp/CLion-2026.1.2-aarch64.dmg"; - hash = "sha256-scMwDF+mIfx/66cBrvdxp+gU3+qA2sUWqoGCEhPItjE="; + url = "https://download.jetbrains.com/cpp/CLion-2026.1.4-aarch64.dmg"; + hash = "sha256-i3stX7dyRgSOJkFTMD9/hkw6e2mGNqn13S7X/vJ66RQ="; }; }; # update-script-end: urls @@ -48,8 +48,8 @@ in product = "CLion"; # update-script-start: version - version = "2026.1.2"; - buildNumber = "261.24374.148"; + version = "2026.1.4"; + buildNumber = "261.26222.59"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From 75c9e046d9c18701aed5e99cc658d34c325491c3 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Jul 2026 03:28:52 +0000 Subject: [PATCH 34/52] jetbrains.rider: 2026.1.2 -> 2026.1.4 (cherry picked from commit d9546ea619dd7afa65a33367b3c064bd3d49c684) --- .../editors/jetbrains/ides/rider.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/rider.nix b/pkgs/applications/editors/jetbrains/ides/rider.nix index df8d35ea2f20..c962306f3389 100644 --- a/pkgs/applications/editors/jetbrains/ides/rider.nix +++ b/pkgs/applications/editors/jetbrains/ides/rider.nix @@ -24,20 +24,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.2.tar.gz"; - hash = "sha256-OmysaGXGMxxAAa2qrHvX8yXIwJLU7tKG8/EBGhr55EA="; + url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.4.tar.gz"; + hash = "sha256-K+X2M4idv+oDqC/dkbzMTX3W3zx0b0e8ZTsxkP7rAfI="; }; aarch64-linux = { - url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.2-aarch64.tar.gz"; - hash = "sha256-xcwd4OgobMXFQ2W+SN6O5I3mud4kedVQ/0rZBWbXIGY="; + url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.4-aarch64.tar.gz"; + hash = "sha256-GXmyBrqxUpwK4djjwllvK+pnfktDrDHpLJKoe4D2xFo="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.2.dmg"; - hash = "sha256-uoOP+EYB11M99MlAFF7efZSKmCk0fwjCImFiasUQPUw="; + url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.4.dmg"; + hash = "sha256-GfQ5WpKunJ+JhE1VcArm3UxZ5udCbfnS1Kw3D4gZorA="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.2-aarch64.dmg"; - hash = "sha256-Mo6gxWatX6wlL3s8Li19F58cnKZtOtFUfNyGPrC6CtA="; + url = "https://download.jetbrains.com/rider/JetBrains.Rider-2026.1.4-aarch64.dmg"; + hash = "sha256-cfwT22BN1jzKZzrZHMQqYFJPGuRwta/sqoOJOp+PfBE="; }; }; # update-script-end: urls @@ -51,8 +51,8 @@ in product = "Rider"; # update-script-start: version - version = "2026.1.2"; - buildNumber = "261.24374.190"; + version = "2026.1.4"; + buildNumber = "261.26222.60"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From 1a9206e05e5c04c42a9434dd7715030364c61379 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 4 Jul 2026 21:02:05 +0000 Subject: [PATCH 35/52] jetbrains.idea: 2026.1.3 -> 2026.1.4 (cherry picked from commit 5c0e5053ef10917093580bdfce7d74835958e5c7) --- .../editors/jetbrains/ides/idea.nix | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/pkgs/applications/editors/jetbrains/ides/idea.nix b/pkgs/applications/editors/jetbrains/ides/idea.nix index bf9dbdae54be..e77c6a800f61 100644 --- a/pkgs/applications/editors/jetbrains/ides/idea.nix +++ b/pkgs/applications/editors/jetbrains/ides/idea.nix @@ -15,20 +15,20 @@ let # update-script-start: urls urls = { x86_64-linux = { - url = "https://download.jetbrains.com/idea/ideaIU-2026.1.3.tar.gz"; - hash = "sha256-pvBJcW2h0J2eDsFQDGC/AaX/ig/iQZF43R/y/bK3dWM="; + url = "https://download.jetbrains.com/idea/ideaIU-2026.1.4.tar.gz"; + hash = "sha256-MQTYXZUH/4ggZeP465UGQCtKgSkJLSaCZiu26cTwY/w="; }; aarch64-linux = { - url = "https://download.jetbrains.com/idea/ideaIU-2026.1.3-aarch64.tar.gz"; - hash = "sha256-dlnnkWCSM8Pmv2fBv8yG9foRdkd8pYFa5hJbDq6EqIs="; + url = "https://download.jetbrains.com/idea/ideaIU-2026.1.4-aarch64.tar.gz"; + hash = "sha256-MDZFuLrUxcCIc0Zhi4QhgKPeU7Pgs9oJ/FxQH1n3gBM="; }; x86_64-darwin = { - url = "https://download.jetbrains.com/idea/ideaIU-2026.1.3.dmg"; - hash = "sha256-Sv6A37Y5yIkaE+qnFEGDBq/q9fSSSZPjJC59NB2Fsns="; + url = "https://download.jetbrains.com/idea/ideaIU-2026.1.4.dmg"; + hash = "sha256-8K+LiewiINP4S9eqV0kGWtfy2Ff/zvBwX89iX7mYZ78="; }; aarch64-darwin = { - url = "https://download.jetbrains.com/idea/ideaIU-2026.1.3-aarch64.dmg"; - hash = "sha256-LRyg2DLmTgChdFKR8NMGGjWDZTAWnjQpoTp3NIBvYrI="; + url = "https://download.jetbrains.com/idea/ideaIU-2026.1.4-aarch64.dmg"; + hash = "sha256-XIBK/+Lxaz9dX+Lxl7HXsl+Z3Z7GBzSuDxNssb/4A2s="; }; }; # update-script-end: urls @@ -43,8 +43,8 @@ mkJetBrainsProduct { productShort = "IDEA"; # update-script-start: version - version = "2026.1.3"; - buildNumber = "261.25134.95"; + version = "2026.1.4"; + buildNumber = "261.26222.65"; # update-script-end: version src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}")); From 156c77537126c2a97e57374922b458b2a34170e8 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 5 Jul 2026 02:51:04 +0000 Subject: [PATCH 36/52] etcd_3_5: 3.5.31 -> 3.5.32 (cherry picked from commit 88ce6ae2b57e54110e0f1f3adf23305c105f101d) --- pkgs/by-name/et/etcd_3_5/package.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/et/etcd_3_5/package.nix b/pkgs/by-name/et/etcd_3_5/package.nix index 376ebcf8a0c3..98b60520ffb7 100644 --- a/pkgs/by-name/et/etcd_3_5/package.nix +++ b/pkgs/by-name/et/etcd_3_5/package.nix @@ -7,11 +7,11 @@ }: let - version = "3.5.31"; - etcdSrcHash = "sha256-X3b1TBimNYo03fW0c5NeiD4uALMqtOQbJwPot11FCk8="; - etcdServerVendorHash = "sha256-1/XJGpyYuTsb+1hReksX5VyD+6xbKaiLA8520cDKc/4="; - etcdUtlVendorHash = "sha256-dUXAoIcOSlEbiSmy1M+oPaHt089gOttQwrB9ZhYc7v0="; - etcdCtlVendorHash = "sha256-l1j00Mzv1z021rfBbFZrIce2pifQyRkST0bkZhVoST0="; + version = "3.5.32"; + etcdSrcHash = "sha256-pqCMgY5veIF5kQDjqTg9B7aSL+V6bdMZpc464wjTLMo="; + etcdServerVendorHash = "sha256-FDzAF2J9wbRmQETvrdJK3gL4cfAhiiihb5EOrimE11M="; + etcdUtlVendorHash = "sha256-0xfq7f7Xr3SWxiU8C1bWQPxdFvEaoIrlK+gX3hkd4ho="; + etcdCtlVendorHash = "sha256-59e/TORi/XX+GXRjMO/45SMumYgrFbOHEXqV7sM72H8="; src = fetchFromGitHub { owner = "etcd-io"; From f9e3bf7e1e7e344cb129108e3e446472047fb546 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 3 Jul 2026 07:08:11 +0000 Subject: [PATCH 37/52] librewolf-bin-unwrapped: 152.0.2-1 -> 152.0.4-1 (cherry picked from commit e91af37d4e094b7af9f06db7ab7f806c899b3ce7) --- pkgs/by-name/li/librewolf-bin-unwrapped/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix index 4ccf3c299e9e..6a545c1b71f1 100644 --- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix +++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix @@ -36,7 +36,7 @@ let pname = "librewolf-bin-unwrapped"; - version = "152.0.2-1"; + version = "152.0.4-1"; in stdenv.mkDerivation { @@ -46,8 +46,8 @@ stdenv.mkDerivation { url = "https://codeberg.org/api/packages/librewolf/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz"; hash = { - x86_64-linux = "sha256-Tq2bj75oZXSH2YHXShjRRs4Aqxo86BuwONXu+IsdCuA="; - aarch64-linux = "sha256-xk3o5FODm5ge2I8JzgwXTpgu/SI6VcROIJ7005ew2PY="; + x86_64-linux = "sha256-4vmsv93ENtteE18uGJF2ZEhaRA3nGJg//WYYdBREIig="; + aarch64-linux = "sha256-Q1vT/9qOs2AiMRsLcofF7F2Y+5QJJloI/QSVZwA9gC8="; } .${stdenv.hostPlatform.system} or throwSystem; }; From 65bbac3e20c82faafdb5e5d919fd8b02a80a2784 Mon Sep 17 00:00:00 2001 From: mksafavi Date: Fri, 3 Jul 2026 01:21:33 +0330 Subject: [PATCH 38/52] ariang: Pin nodejs to version 22 (cherry picked from commit f10c7fb55204355b09027765249b9b816e3f8107) --- pkgs/by-name/ar/ariang/package.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/by-name/ar/ariang/package.nix b/pkgs/by-name/ar/ariang/package.nix index 45ec0b597869..1aeb512c61ce 100644 --- a/pkgs/by-name/ar/ariang/package.nix +++ b/pkgs/by-name/ar/ariang/package.nix @@ -1,6 +1,7 @@ { lib, fetchFromGitHub, + nodejs_22, buildNpmPackage, copyDesktopItems, imagemagick, @@ -19,6 +20,8 @@ buildNpmPackage rec { hash = "sha256-u4MnjGMvnnb9EGHwK2QYpW7cuX1e1+6z2/1X1baR8iA="; }; + nodejs = nodejs_22; + npmDepsHash = "sha256-kxoSEdM8H7M9s6U2dtCdfuvqVROEk35jAkO7MgyVVRg="; makeCacheWritable = true; From 7ff8480fa7edd29b07e7fe18e420927a0643e5bc Mon Sep 17 00:00:00 2001 From: Matt Sturgeon Date: Sun, 5 Jul 2026 14:25:34 +0100 Subject: [PATCH 39/52] ci/update-pinned.sh: import Nixpkgs relative to script Paths within a --expr expression are relative to the script file, while relative paths in NIX_PATH are relative to the caller's CWD. We want the Nixpkgs import to be relative to update-pinned.sh itself, so that it does not matter where it's executed from. See https://github.com/NixOS/nixpkgs/issues/425551 (cherry picked from commit 37aac0fb06e2ca890d463b35af6d45bad44a9f91) --- ci/update-pinned.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/update-pinned.sh b/ci/update-pinned.sh index 69ba7df9131d..51c99b0da98d 100755 --- a/ci/update-pinned.sh +++ b/ci/update-pinned.sh @@ -1,5 +1,5 @@ #!/usr/bin/env nix-shell -#!nix-shell -i bash -p npins -I nixpkgs=../ +#!nix-shell -i bash -E 'with import ../. {}; mkShell { packages = [ npins ]; }' set -euo pipefail From e0d7f9abebb885f4e967b688caa7e91c0d0105a0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= Date: Sat, 25 Apr 2026 12:34:34 +0200 Subject: [PATCH 40/52] =?UTF-8?q?ci:=20nix=5F2=5F28=20=E2=86=92=20stable?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Originally part of commit 07457776ad0ec171d6c728237b7cbe76685b6165 but dropped to avoid backporting #536372 (cherry picked from commit 0ffdd818b55156d6916c8004e04e298db18204c6) --- ci/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/default.nix b/ci/default.nix index 6aa80f977901..06fa75bbc38f 100644 --- a/ci/default.nix +++ b/ci/default.nix @@ -70,7 +70,7 @@ rec { }; parse = pkgs.lib.recurseIntoAttrs { nix_latest = pkgs.callPackage ./parse.nix { nix = pkgs.nixVersions.latest; }; - nix_2_28 = pkgs.callPackage ./parse.nix { nix = pkgs.nixVersions.nix_2_28; }; + stable = pkgs.callPackage ./parse.nix { nix = pkgs.nixVersions.stable; }; lix = pkgs.callPackage ./parse.nix { nix = pkgs.lix; }; lix_latest = pkgs.callPackage ./parse.nix { nix = pkgs.lixPackageSets.latest.lix; }; }; From b40b6d6776c61e97101fd63944992a7b9201e16d Mon Sep 17 00:00:00 2001 From: Matt Sturgeon Date: Sun, 5 Jul 2026 14:36:01 +0100 Subject: [PATCH 41/52] ci: update pinned MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps nixpkgs-vet 0.3.2 → 0.3.4 https://github.com/NixOS/nixpkgs-vet/blob/main/CHANGELOG.md#034-2026-07-01 (cherry picked from commit a6eeac86f7099fbb4a3d41106e385c367009f4b5) --- ci/pinned.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ci/pinned.json b/ci/pinned.json index fc034a85bccf..0b3d817d1b06 100644 --- a/ci/pinned.json +++ b/ci/pinned.json @@ -9,9 +9,9 @@ }, "branch": "nixpkgs-unstable", "submodules": false, - "revision": "8c91a71d13451abc40eb9dae8910f972f979852f", - "url": "https://github.com/NixOS/nixpkgs/archive/8c91a71d13451abc40eb9dae8910f972f979852f.tar.gz", - "hash": "sha256-fnzKKPvS+oieI/pTzotA5tkoM47EB1NpaBcgk4R97hE=" + "revision": "6edbf1a6a03e75886a6609c088801a0856449e88", + "url": "https://github.com/NixOS/nixpkgs/archive/6edbf1a6a03e75886a6609c088801a0856449e88.tar.gz", + "hash": "sha256-0lkauQbtrljJqwtzTCILPAiHAJyMvn6XDo264moDv30=" } }, "version": 8 From 7b56f8b571d76521d5320066b14dd5f82707f02e Mon Sep 17 00:00:00 2001 From: aaravrav <37036762+aaravrav@users.noreply.github.com> Date: Sun, 5 Jul 2026 20:16:17 +0530 Subject: [PATCH 42/52] maintainers: fix wrong githubId and github for aaravrav (cherry picked from commit 1d4564e4347f5ce3bab771176b558f592ef88108) --- maintainers/maintainer-list.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index 46282f3a2953..221e3080e1ae 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -405,8 +405,8 @@ }; aaravrav = { name = "aaravrav"; - github = "Aarav"; - githubId = 3279912; + github = "aaravrav"; + githubId = 37036762; }; aarnphm = { email = "contact@aarnphm.xyz"; From 5861a003fe10dbbd01907cc109b07fb4e43792a6 Mon Sep 17 00:00:00 2001 From: Michael Daniels Date: Sun, 5 Jul 2026 11:23:01 -0400 Subject: [PATCH 43/52] google-chrome: 149.0.7827.201 -> 150.0.7871.47 (Darwin only) Linux was done in 8b266eba3a0771c00461183d9b4ca4a59bdd9be2. Release note: https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html (cherry picked from commit dfec9c87b58fe53e820f7ae518c90cc41270188f) --- pkgs/by-name/go/google-chrome/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/go/google-chrome/package.nix b/pkgs/by-name/go/google-chrome/package.nix index e639b0005187..f0f9d5ba9f5b 100644 --- a/pkgs/by-name/go/google-chrome/package.nix +++ b/pkgs/by-name/go/google-chrome/package.nix @@ -289,11 +289,11 @@ let darwin = stdenvNoCC.mkDerivation (finalAttrs: { inherit pname meta passthru; - version = "149.0.7827.201"; + version = "150.0.7871.47"; src = fetchurl { - url = "http://dl.google.com/release2/chrome/ph3mj7mqtvbfhr67ckmjvjj5a4_149.0.7827.201/GoogleChrome-149.0.7827.201.dmg"; - hash = "sha256-AI5oBE0uB2/YacF9LB4d6rXlAqEuZtlPYNQwLbs1K7E="; + url = "http://dl.google.com/release2/chrome/ad2pojsfcj6hr5telal5kk4t6gua_150.0.7871.47/GoogleChrome-150.0.7871.47.dmg"; + hash = "sha256-1VTMVSBLfSRp9CxPaRkmdgAC0H5KNuZNWywTGLSphUI="; }; dontPatch = true; From 670dd202a7aa6c1c5644c5b2c890defe6661adc6 Mon Sep 17 00:00:00 2001 From: bloominstrong Date: Sat, 4 Jul 2026 21:53:43 +1000 Subject: [PATCH 44/52] openvpn: 2.6.19 -> 2.6.21 (cherry picked from commit f4085e39b364e312210826d302da58d30f48b15b) --- pkgs/tools/networking/openvpn/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/networking/openvpn/default.nix b/pkgs/tools/networking/openvpn/default.nix index bee9e1744aba..a61d981d53f0 100644 --- a/pkgs/tools/networking/openvpn/default.nix +++ b/pkgs/tools/networking/openvpn/default.nix @@ -23,11 +23,11 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "openvpn"; - version = "2.6.19"; + version = "2.6.21"; src = fetchurl { url = "https://swupdate.openvpn.net/community/releases/openvpn-${finalAttrs.version}.tar.gz"; - hash = "sha256-E3AlJvaHwYslQMGj8uGJGHuqplIR7c9/9ncvpp8FNs8="; + hash = "sha256-JMthheVEpHMj1nmLA9OfI2fZbyJ77pzRVD6O1Sgxmxc="; }; nativeBuildInputs = [ From eddcb5f228506f46a0572f9802b4b1ad8d13f9be Mon Sep 17 00:00:00 2001 From: Michael Daniels Date: Sun, 5 Jul 2026 11:55:35 -0400 Subject: [PATCH 45/52] lib/tests/release: stop testing nix_2_28 See 7d940ca0826ccc5df254671d38ba41bf7b64f5c2 and #538699. Not-cherry-picked-because: already done on master --- lib/tests/release.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/lib/tests/release.nix b/lib/tests/release.nix index 54d62f87b3d5..280c88cee66b 100644 --- a/lib/tests/release.nix +++ b/lib/tests/release.nix @@ -9,7 +9,6 @@ pkgsBB ? pkgs.pkgsBuildBuild, nix ? pkgs-nixVersions.stable, nixVersions ? [ - pkgs-nixVersions.nix_2_28 nix pkgs-nixVersions.latest ], From 1551b416e70a65c7f55addf6127215183365685c Mon Sep 17 00:00:00 2001 From: Diogo Correia Date: Sat, 4 Jul 2026 15:31:27 +0100 Subject: [PATCH 46/52] bazarr: 1.5.6 -> 1.6.0 (cherry picked from commit f72d6ad3cd44386e0e66f32797eef3173513122c) --- pkgs/by-name/ba/bazarr/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ba/bazarr/package.nix b/pkgs/by-name/ba/bazarr/package.nix index f029fa8f1453..fcb85a166a8b 100644 --- a/pkgs/by-name/ba/bazarr/package.nix +++ b/pkgs/by-name/ba/bazarr/package.nix @@ -17,11 +17,11 @@ let in stdenv.mkDerivation rec { pname = "bazarr"; - version = "1.5.6"; + version = "1.6.0"; src = fetchzip { url = "https://github.com/morpheus65535/bazarr/releases/download/v${version}/bazarr.zip"; - hash = "sha256-S3idNH9Wm9f6aNj69dERmeks1rLvUeQJYFebXa5cWQo="; + hash = "sha256-LRcc2wg5u260yl3A7rRwBfldl6WOyvF2T9NKGTKabfw="; stripRoot = false; }; From ee902615f4309383047e316650df041f3cdd6124 Mon Sep 17 00:00:00 2001 From: Trolli Schmittlauch Date: Fri, 3 Jul 2026 23:30:27 +0200 Subject: [PATCH 47/52] seafile-client: add update script (cherry picked from commit d953ceaefcb47f30b41e51389259146316cd5b21) --- pkgs/by-name/se/seafile-client/package.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/by-name/se/seafile-client/package.nix b/pkgs/by-name/se/seafile-client/package.nix index 07a6bf03666e..9e7cfd2a124b 100644 --- a/pkgs/by-name/se/seafile-client/package.nix +++ b/pkgs/by-name/se/seafile-client/package.nix @@ -3,6 +3,7 @@ stdenv, fetchpatch, fetchFromGitHub, + nix-update-script, pkg-config, cmake, qt6, @@ -72,4 +73,5 @@ stdenv.mkDerivation (finalAttrs: { ]; mainProgram = "seafile-applet"; }; + passthru.updateScript = nix-update-script { }; }) From 572d809e8a2e58e380b687fd5e31343315592cab Mon Sep 17 00:00:00 2001 From: Trolli Schmittlauch Date: Fri, 3 Jul 2026 23:31:45 +0200 Subject: [PATCH 48/52] seafile-client: 9.0.15 -> 9.0.20 Changelog: https://manual.seafile.com/latest/changelog/client-changelog/#9019-20260625 Contains a fix for an SQL injection vulnerability. (cherry picked from commit f6c80b64e4cbbfdf8f2dfb2ddbfd43c0e788d3b4) --- pkgs/by-name/se/seafile-client/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/se/seafile-client/package.nix b/pkgs/by-name/se/seafile-client/package.nix index 9e7cfd2a124b..b4f1ea6534e7 100644 --- a/pkgs/by-name/se/seafile-client/package.nix +++ b/pkgs/by-name/se/seafile-client/package.nix @@ -16,13 +16,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "seafile-client"; - version = "9.0.15"; + version = "9.0.20"; src = fetchFromGitHub { owner = "haiwen"; repo = "seafile-client"; tag = "v${finalAttrs.version}"; - hash = "sha256-BV1+9/+ryZB1BQyRJ5JaIU6bbOi4h8vt+V+FQIfUJp8="; + hash = "sha256-0idZCoTsuC32DolSLFDknQjvGWHGd4DQPCUyqocuuKA="; }; patches = [ From f8819929758fd5db02a1f3d96ef2378bdb5dcabc Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sun, 21 Jun 2026 18:09:01 +0200 Subject: [PATCH 49/52] mysql84: 8.4.9 -> 8.4.10 https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html Fixes CVE-2026-46863. (cherry picked from commit d528156e993c28b0c24d5079628e2d0ea2d9b5ed) --- pkgs/by-name/my/mysql84/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/my/mysql84/package.nix b/pkgs/by-name/my/mysql84/package.nix index 7f5b682121a5..9d5b78c1e168 100644 --- a/pkgs/by-name/my/mysql84/package.nix +++ b/pkgs/by-name/my/mysql84/package.nix @@ -28,11 +28,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "mysql"; - version = "8.4.9"; + version = "8.4.10"; src = fetchurl { url = "https://dev.mysql.com/get/Downloads/MySQL-${lib.versions.majorMinor finalAttrs.version}/mysql-${finalAttrs.version}.tar.gz"; - hash = "sha256-5KqLOeQtH+B48zu9c2lfrCtU28e7E38L2+Y/e+GgLWs="; + hash = "sha256-1XpnMLrvFK4Rj39KbgKEW1tQkzdY32H7BuEE8nzMj5Y="; }; nativeBuildInputs = [ From 79a3e61dce0b94985670325ec574d13ea84f3aee Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Fri, 3 Jul 2026 06:06:15 +0000 Subject: [PATCH 50/52] seafile-shared: 9.0.15 -> 9.0.20 (cherry picked from commit 1254819b0d54f53394e98c4bfaf58b3039e561ac) --- pkgs/by-name/se/seafile-shared/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/se/seafile-shared/package.nix b/pkgs/by-name/se/seafile-shared/package.nix index 64b3ccfe34f4..d6cc528cab50 100644 --- a/pkgs/by-name/se/seafile-shared/package.nix +++ b/pkgs/by-name/se/seafile-shared/package.nix @@ -17,13 +17,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "seafile-shared"; - version = "9.0.15"; + version = "9.0.20"; src = fetchFromGitHub { owner = "haiwen"; repo = "seafile"; rev = "v${finalAttrs.version}"; - hash = "sha256-mWIOk8O3vlg7Sm/5ZQUB5nOgi8/pEczCGQ94p0km/GI="; + hash = "sha256-PBoZDhY7GN8UuYUSXBCPZyBHBtlNcYK+0yS/rl66v9I="; }; postPatch = '' From 5e0149938f976825fb36b8f02384f3770d7027c2 Mon Sep 17 00:00:00 2001 From: Nivayu Date: Sat, 4 Jul 2026 15:25:41 +0200 Subject: [PATCH 51/52] syncthing: 2.1.0 -> 2.1.1 (cherry picked from commit f2d0b08c73f0fa5d7d46eb87d628bcb97159be98) --- pkgs/by-name/sy/syncthing/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/sy/syncthing/package.nix b/pkgs/by-name/sy/syncthing/package.nix index 7b963e50ca41..d6f857ab86c8 100644 --- a/pkgs/by-name/sy/syncthing/package.nix +++ b/pkgs/by-name/sy/syncthing/package.nix @@ -22,16 +22,16 @@ assert builtins.elem target [ buildGoModule (finalAttrs: { pname = "syncthing"; - version = "2.1.0"; + version = "2.1.1"; src = fetchFromGitHub { owner = "syncthing"; repo = "syncthing"; tag = "v${finalAttrs.version}"; - hash = "sha256-sTtFmZBPJIHMksaFFLmA3Abt9EhAC8Nz/ibdzg2LMd4="; + hash = "sha256-OwR1OiwtlJSRnFXFEyyHcL3q6NdDUQd4JEy0YSQ18fg="; }; - vendorHash = "sha256-rOsdg98WVAKqjV7AxH+m4oSf8Z4FPru4NSbgGFtUMVE="; + vendorHash = "sha256-gfGuXBvGdQr+o8zV4MM1FYnOy2fpytIIEdQ9waGNSW4="; nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ # Recent versions of macOS seem to require binaries to be signed when From 19411a968b5688d957181c04824486516ea8aa9c Mon Sep 17 00:00:00 2001 From: Sizhe Zhao Date: Sat, 13 Jun 2026 13:47:11 +0800 Subject: [PATCH 52/52] doc/javascript.section: recommend fetcherVersion 4 (cherry picked from commit a742a240a73e990caf58c5c3b768c9e53807d6be) --- doc/languages-frameworks/javascript.section.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/languages-frameworks/javascript.section.md b/doc/languages-frameworks/javascript.section.md index 0ecb59dd3bb6..24061021d125 100644 --- a/doc/languages-frameworks/javascript.section.md +++ b/doc/languages-frameworks/javascript.section.md @@ -493,7 +493,7 @@ In this example, `prePnpmInstall` will be run by both `pnpmConfigHook` and by th #### pnpm `fetcherVersion` {#javascript-pnpm-fetcherVersion} -This is the version of the output of `fetchPnpmDeps`. New packages should use `3`: +This is the version of the output of `fetchPnpmDeps`. New packages should use `4`: ```nix {