Yureka
ebbfe83d87
[Backport release-26.05] youtrack: 2026.1.12458 -> 2026.1.13570 ( #529313 )
2026-06-08 09:45:25 +00:00
@mjones
b88a7f0151
[Backport release-26.05] nixos/inventree: add module services and test ( #527887 )
2026-06-08 08:58:06 +00:00
Sizhe Zhao
b1d735948e
[Backport release-26.05] qq: 2026-04-01 -> 2026-05-28 ( #529386 )
2026-06-08 08:23:45 +00:00
Thomas Gerbet
bd0ff2d3ea
[Backport release-26.05] haveged: 1.9.20 -> 1.9.21 ( #529308 )
2026-06-08 07:04:19 +00:00
K900
99faf529b4
[Backport release-26.05] nixos/plasma6: install plasma-keyboard by default ( #529409 )
2026-06-08 07:02:53 +00:00
K900
da29d4f53e
nixos/plasma6: install plasma-keyboard by default
...
Touch devices are real and our UX sucks out of the box on them.
Let's at least suck a little bit less.
(cherry picked from commit bb38195945 )
2026-06-08 06:51:25 +00:00
Felix Bargfeldt
459cd73bc3
[Backport release-26.05] calibre: 9.8.0 -> 9.9.0 ( #529283 )
2026-06-08 05:01:59 +00:00
Ryan Yin
2086f21d3b
qq: 2026-04-01 -> 2026-05-28
...
Stop removing bundled sharp-lib: QQ 3.2.29's sharp native module
requires vips_g_once, a symbol not present in nixpkgs vips 8.18.2.
Ref: https://aur.archlinux.org/cgit/aur.git/commit/?h=linuxqq&id=09687efd16879e1cecc532b06e2f4602722d3c69
(cherry picked from commit 24a269500a )
2026-06-08 04:57:47 +00:00
nixpkgs-ci[bot]
c3deb40a7f
[Backport release-26.05] sub-store-frontend: 2.17.19 -> 2.17.31 ( #529208 )
2026-06-08 02:31:23 +00:00
Peder Bergebakken Sundt
46f8fec8e1
[Backport release-26.05] opensc: fix CVE-2026-10275 ( #527539 )
2026-06-07 23:46:42 +00:00
Peder Bergebakken Sundt
d3d5e104a0
[Backport release-26.05] exiftool: 13.58 -> 13.59 ( #527452 )
2026-06-07 23:29:07 +00:00
Pavol Rusnak
44c7f49253
[Backport release-26.05] ollama: fix darwin build by disabling MLX backends ( #529307 )
2026-06-07 23:14:45 +00:00
Leona Maroni
2abfd1b7e0
youtrack: 2026.1.12458 -> 2026.1.13570
...
https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.1.12848&title=YouTrack+2026.1.12848+Release+Notes
https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.1.13162&title=YouTrack+2026.1.13162+Release+Notes
https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.1.13456&title=YouTrack+2026.1.13456+Release+Notes
https://youtrack.jetbrains.com/releaseNotes?q=%23JT%20%23Resolved%20Released%20in%20build:%202026.1.13570&title=YouTrack%202026.1.13570%20Release%20Notes
Fixes:
- CVE-2026-49368
- CVE-2026-49369
- CVE-2026-49370
- CVE-2026-49385
- CVE-2026-49386
(cherry picked from commit 3408da4984 )
2026-06-07 23:10:02 +00:00
Thomas Gerbet
a240e1e371
haveged: 1.9.20 -> 1.9.21
...
Fixes CVE-2026-41054 (LPE).
https://github.com/jirka-h/haveged/releases/tag/v1.9.21
https://www.openwall.com/lists/oss-security/2026/05/19/3
(cherry picked from commit 184da5f11c )
2026-06-07 23:07:42 +00:00
Aaron Jheng
078137aa20
ollama: fix darwin build by disabling MLX backends
...
MLX backends require xcrun metal/metalib which are unavailable in the
Nix sandbox. Pass -DOLLAMA_MLX_BACKENDS="" to cmake to skip the
Metal toolchain check. Core Metal/llama.cpp backend is unaffected.
(cherry picked from commit b195b40fb0 )
2026-06-07 23:05:08 +00:00
Pavol Rusnak
782cd932c3
[Backport release-26.05] ollama: use tag rev for llama.cpp pin + drop redundant version comment ( #529300 )
2026-06-07 22:59:42 +00:00
phibkro
662ac762a4
ollama: use tag field for llama.cpp pin + drop redundant version comment
...
Addresses two review comments — different reviewers, same direction:
* @SuperSandro2000 on the original PR #528150 (line 118 of
pkgs/by-name/ol/ollama/package.nix): "Why are we not using tag if
there is a tag?". Drop the SHA + `# tag b9509` shape that required
reviewers to cross-check the SHA matched the inline comment.
* @prusnak on this follow-up #528374 : "I think we should use `tag`
instead of `rev`." `fetchFromGitHub`'s dedicated `tag` field is
preferred over `rev = "<tag-string>"` — same git object, same
tarball, same hash, but signals intent at the schema level and
renders into the store path nicely.
* Line 113 prose comment (the other half of SuperSandro's review on
#528150 ): "We should not repeat the version in this comment and
have to update that, too, on every update." Drop `currently b9509`
from the prose; the remaining text explains the mechanism (tracks
upstream's `LLAMA_CPP_VERSION` file, pre-staged because
FetchContent can't network in the sandbox) without naming a
specific version that would drift on every bump.
Pure source-readability change. `nix-build -A ollama --no-out-link`
on x86_64-linux produces the same store path as master, confirming
the tag resolves to the same git object → same tarball → same hash
→ no rebuild impact.
The same lines exist on `release-26.05` via the original backport
#528272 ; happy to mirror this fix there if you apply the
`backport release-26.05` label.
Assisted-by: Claude <noreply@anthropic.com>
(cherry picked from commit 1e9315fd0c )
2026-06-07 22:52:44 +00:00
@mjones
459943547f
[Backport release-26.05] ponyc: 0.60.6 -> 0.64.0 ( #529000 )
2026-06-07 22:24:33 +00:00
Vegard Bieker Matthey
dec607914a
calibre: 9.8.0 -> 9.9.0
...
(cherry picked from commit 60d2d38d85 )
2026-06-07 22:21:32 +00:00
nixpkgs-ci[bot]
68b271c2de
[Backport release-26.05] arti: 2.3.0 -> 2.4.0, add patch for TROVE-2026-024 ( #529206 )
2026-06-07 21:51:48 +00:00
Felix Bargfeldt
4d923cbc34
[Backport release-26.05] pdfding: 1.7.2 -> 1.8.0 ( #528306 )
2026-06-07 21:51:01 +00:00
Felix Bargfeldt
c5eab90e47
[Backport release-26.05] vintagestory: 1.22.2 → 1.22.3 ( #528680 )
2026-06-07 21:48:35 +00:00
Peder Bergebakken Sundt
f7e903cc73
[Backport release-26.05] mumble, murmur: add hax404 as maintainer ( #529163 )
2026-06-07 21:14:26 +00:00
nixpkgs-ci[bot]
d76efb7031
[Backport release-26.05] microsoft-edge: 148.0.3967.83 -> 149.0.4022.52 ( #529106 )
2026-06-07 20:47:20 +00:00
nixpkgs-ci[bot]
29e4a4ec34
[Backport release-26.05] librepods: 0.2.0 -> 0.2.5 ( #529248 )
2026-06-07 20:41:34 +00:00
R. Ryantm
aa1625de35
librepods: 0.2.0 -> 0.2.5
...
(cherry picked from commit 868ea21698 )
2026-06-07 20:36:32 +00:00
Wael Nasreddine
dd09b649b4
[Backport release-26.05] openspec: 1.3.1 -> 1.4.1 ( #529220 )
2026-06-07 19:16:57 +00:00
nixpkgs-ci[bot]
fbe24a504f
[Backport release-26.05] pgdog: 0.1.42 -> 0.1.43 ( #529214 )
2026-06-07 19:03:22 +00:00
Wael Nasreddine
e4a88414a5
openspec: 1.3.1 -> 1.4.1
...
(cherry picked from commit 73b6fc3272 )
2026-06-07 18:40:29 +00:00
Kerstin Humm
9445f4b93d
[Backport release-26.05] python3Packages.hiredis: 3.3.1 -> 3.4.0, adopt ( #529164 )
2026-06-07 18:37:32 +00:00
Eric Rodrigues Pires
2007c375d1
pgdog: 0.1.42 -> 0.1.43
...
(cherry picked from commit 340b7f937a )
2026-06-07 18:08:40 +00:00
Peder Bergebakken Sundt
5ab9f7ef12
[Backport release-26.05] threadcat: init at 0.1.2 ( #528771 )
2026-06-07 17:59:24 +00:00
R. Ryantm
a1fada1723
sub-store-frontend: 2.17.19 -> 2.17.31
...
(cherry picked from commit 8322afea5d )
2026-06-07 17:34:38 +00:00
nixpkgs-ci[bot]
5a84c83b79
[Backport release-26.05] cargo-mutants: 27.0.0 -> 27.1.0 ( #529193 )
2026-06-07 17:27:21 +00:00
whispers
eb8720b009
arti: add patch for TROVE-2026-024
...
TROVE: https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE
an invalid assumption of ASCII in port policies could allow a malicious
directory cache to crash arti clients. this issue was originally
publicly reported at
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/4049
and the final fix was merged as
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/4062 . this
allows for DoSing clients, and has been allocated the the TROVE-2026-024
id with medium severity. we fetch the patch for it here, and may upgrade
to 2.4.1 or similar if upstream releases one.
(cherry picked from commit d355b592b8 )
2026-06-07 17:26:51 +00:00
whispers
ac5764a5e9
arti: 2.3.0 -> 2.4.0
...
announcement: https://blog.torproject.org/arti_2_4_0_released/
changelog: https://gitlab.torproject.org/tpo/core/arti/-/blob/arti-v2.4.0/CHANGELOG.md
diff: https://gitlab.torproject.org/tpo/core/arti/-/compare/arti-v2.3.0...arti-v2.4.0
(cherry picked from commit f9c51806df )
2026-06-07 17:26:51 +00:00
R. Ryantm
cb755e6224
cargo-mutants: 27.0.0 -> 27.1.0
...
(cherry picked from commit 158e2741f2 )
2026-06-07 16:47:18 +00:00
dotlambda
972ef17152
[Backport release-26.05] libgphoto2: 2.5.33 -> 2.5.34 ( #527420 )
2026-06-07 16:20:00 +00:00
Michael Daniels
7bc03a4855
[Backport release-26.05] ci/eval/compare: show performance comparison even when package sets differ ( #529161 )
2026-06-07 15:42:31 +00:00
nixpkgs-ci[bot]
441335e6e8
[Backport release-26.05] delineate: 0.1.1 -> 0.1.2 ( #529170 )
2026-06-07 15:40:03 +00:00
R. Ryantm
cfc2d4c22e
delineate: 0.1.1 -> 0.1.2
...
(cherry picked from commit 3c2f4fef32 )
2026-06-07 15:34:41 +00:00
nixpkgs-ci[bot]
500263cf96
[Backport release-26.05] vacuum-tube: 1.7.1 -> 1.7.2 ( #529136 )
2026-06-07 15:05:08 +00:00
Hythera
e630647319
weblate: relax hiredis dependency
...
(cherry picked from commit 9eea4b07a0 )
2026-06-07 14:56:46 +00:00
Hythera
0b04114a84
python3Packages.hiredis: add hythera as maintainer
...
(cherry picked from commit 7b8e4fa0b1 )
2026-06-07 14:56:46 +00:00
Hythera
d63076bfdc
python3Packages.hiredis: modernize
...
(cherry picked from commit c8fe7b0ad9 )
2026-06-07 14:56:46 +00:00
Hythera
f50a205480
python3Packages.hiredis: 3.3.1 -> 3.4.0
...
changelog: https://github.com/redis/hiredis-py/releases/tag/v3.4.0
diff: https://github.com/redis/hiredis-py/compare/v3.3.1...v3.4.0
(cherry picked from commit d4b9693e0f )
2026-06-07 14:56:46 +00:00
Georg Haas
7d09fe5ff0
mumble, murmur: add hax404 as maintainer
...
(cherry picked from commit acdf6c0206 )
2026-06-07 14:55:26 +00:00
Aliaksandr
c40c306541
ci/eval/compare: show performance comparison even when package sets differ
...
Previously the eval comparison was skipped entirely when packages were
added or removed between revisions, leaving only a "stats were skipped"
message. cmp-stats already joins on the stats chunks present in both
revisions, so a comparison can still be produced. Always run it and add
a GitHub note caveating that the figures are approximate when the
package sets differ.
Assisted-by: claude-code with claude-opus-4-7[1m]-xhigh
(cherry picked from commit 25f9394b8a )
2026-06-07 14:51:22 +00:00
Peder Bergebakken Sundt
67eba9d3fc
[Backport release-26.05] rustdesk: 1.4.6 -> 1.4.7 ( #528914 )
2026-06-07 14:49:06 +00:00
Maximilian Bosch
8be2e93812
[Backport release-26.05] victoriatraces: 0.9.0 -> 0.9.2 ( #528982 )
2026-06-07 14:29:15 +00:00