Florian Klink and GitHub
9ec1837f59
gerrit: 3.13.6 -> 3.14.2 ( #542749 )
2026-07-19 21:49:17 +00:00
Florian Klink
f7ebebed87
casync: drop fuse support
...
Upstream does not seem to support fuse3 any time soon:
https://github.com/systemd/casync/issues/269
Drop fuse support for now to get rid of our FUSE dependency.
Closes #534923 .
2026-07-19 23:35:40 +02:00
Florian Klink and GitHub
b7be7c9f10
glasgow: print error message in case of firmware mismatch ( #542691 )
2026-07-16 21:50:14 +00:00
Florian Klink
3a707e29d6
glasgow: print error message in case of firmware mismatch
...
If the firmware doesn't reproduce, this currently fails without any
error message.
Instead, print a proper error, and a diff with the desired firmware
image.
2026-07-16 23:43:37 +02:00
Florian Klink and GitHub
327df7d066
yosys: 0.62 -> 0.67 ( #542197 )
2026-07-16 21:10:19 +00:00
Florian Klink and GitHub
6a146e7407
afew: 3.0.1 -> 4.0.1 ( #541691 )
2026-07-16 15:46:10 +00:00
Florian Klink
45d3f8a556
afew: use build-system, dependencies
...
Also drop the propagated dependency on setuptools, it's not needed
anymore since 4.0.0.
2026-07-16 17:38:37 +02:00
Florian Klink
f6a8557194
afew: 4.0.0 -> 4.0.1
2026-07-16 17:38:37 +02:00
Florian Klink and GitHub
1109536483
nixos/limine: fix location for boot.loader.limine.additionalFiles ( #539368 )
2026-07-07 22:55:07 +00:00
Florian Klink
ea89265347
nixosTests.limine.additionalFiles: init
...
This adds a test to check the file actually exists, and that changes
update them, serving as a regression test for #537466 .
2026-07-07 23:14:45 +03:00
Florian Klink
22ef2ba154
nixos/limine: fix location for boot.loader.limine.additionalFiles
...
The documentation describes this as a set of files copied to /boot, with
the attribute name denoting the destination file name in /boot.
This uses essentially the same description as refind, systemd-boot and
grub. However limine put it into limine_install_dir (/boot/limine by
default) by accident, which broke downstream users.
For example, nixos-apple-silicon uses boot.loader.limine.additionalFiles
(and similar directives for other bootloaders) to update its m1n1
bootloader (which chainloads into u-boot, which chainloads into the
bootloader selected in NixOS), and due to this bug, put new versions of
it in the wrong location, effectively never updating m1n1.
Fix this, by updating the location. The next commit adds a regression VM
test for it.
2026-07-07 23:14:45 +03:00
Florian Klink and GitHub
8bb61a40df
nixos/yggdrasil: Fix stray 0-byte /private-key file ( #538065 )
2026-07-06 12:19:39 +00:00
Florian Klink and GitHub
eaf9c05ffb
idevicerestore: 1.0.0-unstable-2025-10-02 -> 1.0.0-unstable-2026-07-26 ( #538357 )
2026-07-04 13:38:22 +00:00
Florian Klink
e18b99e430
idevicerestore: add flokli to maintainers
2026-07-04 15:19:43 +03:00
Florian Klink
108b0263ca
idevicerestore: 1.0.0-unstable-2025-10-02 -> 1.0.0-unstable-2026-07-26
...
Changelog:
- 45145e9 restore: Add support for restoring macOS 27 IPSWs via DFU
- 405fcd1 asr: Increase timeouts for slow devices
- 6163635 logger: fix crash and undefined behavior in logger_dump_hex with zero-length buffers
- 74e3bd9 endianness.h: Default to little endian
- a499b62 configure: Bump libimobiledevice and libirecovery version requirements
2026-07-04 15:19:43 +03:00
Florian Klink and GitHub
b690c8b0e6
jwx: 4.0.2 -> 4.1.0 ( #537337 )
2026-07-01 11:43:29 +00:00
Florian Klink
c0baf70601
sleuthkit: use finalAttrs.src.name instead of hardcoding source
2026-06-30 16:23:44 +03:00
Florian Klink
5b08236250
dumpifs: use finalAttrs.src.name instead of hardcoding source
2026-06-30 16:20:59 +03:00
Florian Klink and GitHub
9654659cd1
[staging-next] systemd: fix build on musl ( #536118 )
2026-06-29 18:14:32 +00:00
Florian Klink and GitHub
917a5db343
tflint-plugins.tflint-ruleset-aws: 0.47.0 -> 0.48.0 ( #536589 )
2026-06-29 12:08:40 +00:00
Florian Klink and GitHub
4493739a20
openresty: 1.27.1.2 -> 1.31.1.1; add update script ( #536168 )
2026-06-28 22:13:04 +00:00
Florian Klink and GitHub
c68fccff48
python3Packages.itables: 2.8.0 -> 2.8.1 ( #530889 )
2026-06-26 20:14:58 +00:00
Florian Klink and GitHub
4d799e2be7
python3Packages.geotorch: 0.3.0 -> 0.4.0 ( #531861 )
2026-06-26 20:11:16 +00:00
Florian Klink and GitHub
5699094b6a
nixos/nginx: add lua option for Lua scripting support ( #535081 )
2026-06-26 10:49:44 +00:00
Florian Klink and GitHub
d2bde3cf5a
Allow to pass extra initrd archives to the bootloader ( #534265 )
2026-06-26 10:46:37 +00:00
Florian Klink and GitHub
d406556640
nixos/journald-{gateway,remote}: remove TLS support ( #535263 )
2026-06-25 16:12:50 +00:00
Florian Klink and GitHub
44080b1412
nixos/zigbee2mqtt: add RestartSec ( #534020 )
2026-06-25 15:01:37 +00:00
Florian Klink and GitHub
68439b2129
nixos/etc: inline small regular files into the etc-overlay metadata image ( #510323 )
2026-06-25 13:20:50 +00:00
Florian Klink
03495efb8b
nixos/pocket-id: clarify 'secrets' option
...
It's not immediately obvious that this takes the keys without the `_KEY`
suffix, so better document it.
2026-06-22 15:48:12 +03:00
Florian Klink
633f52c08e
nixos/acme: remove unused symbols
2026-06-21 23:47:29 +03:00
Florian Klink
78d07871f5
nixos/acme: also allow _PATH-suffixed credential files
...
The acmedns backend consumes a ACME_DNS_STORAGE_PATH environment
variable.
Upstream does treat this file as mutable (if you create or delete
accounts through the CLI, it would update it. We don't do this in our
module).
But the possibility for edits is probably why they didn't go with
`ACME_DNS_CONFIG` env var for the contents (as they'd be read-only), or
a `ACME_DNS_CONFIG_FILE`. (And the fact that a
`ACME_DNS_STORAGE_PATH_FILE` env var with questionable usability exists
is due to this logic being generic for most env vars).
So instead of fighting upstream over this, let's simply make our module
assertion also accept `_PATH` suffixes for `credentialFiles`.
Fixes #344684 .
2026-06-21 23:47:29 +03:00
Florian Klink
39e3856dd8
nixos/zigbee2mqtt: add RestartSec
...
After a cold reboot, zigbee2mqtt didn't properly come up.
The logs showed it crashed too often too quickly, and then systemd
stopped trying to restart it due to rate-limiting.
It might be due to the network not being up yet, or the Zigbee
coordinator still booting.
Either way, with a RestartSec=10, it did come up.
2026-06-21 23:03:43 +03:00
Florian Klink
93c9f9cde4
nixos/zigbee2mqtt: add AF_UNIX to RestrictAddressFamilies
...
zigbee2mqtt supports listening on unix domain sockets, if a path is
specified in the `frontend.host` config key.
This currently fails with the following log message:
> zigbee2mqtt[4551]: Error: listen EAFNOSUPPORT: address family not supported /path/to/zigbee2mqtt.sock
Listening on unix domain sockets is a reasonable thing to have enabled,
so let's add it to the list.
2026-06-20 21:40:59 +03:00
Florian Klink and GitHub
50338ea4bc
yarn-berry-fetcher: 1.3.0 -> 1.3.1 ( #530830 )
2026-06-13 08:18:11 +00:00
Florian Klink and GitHub
1eee1a273e
vzeroc-ice: 2.7.3 -> 2.7.2.20 ( #530824 )
2026-06-12 23:29:23 +00:00
Florian Klink and GitHub
ed1ce88e87
nixos/networkmanager: create the correct configured keyfile.path ( #530008 )
2026-06-11 22:51:12 +00:00
Florian Klink and GitHub
ee1573e79c
nixos/lib/utils: fix escapeSystemdPath for paths with "." segments ( #529688 )
2026-06-11 22:49:35 +00:00
Florian Klink and GitHub
69ec94f186
prometheus-xray-exporter: init at 1.0.0 ( #530701 )
2026-06-11 22:07:35 +00:00
Florian Klink
136070bde1
yarn-berry-fetcher: 1.3.0 -> 1.3.1
...
Changes since 1.3.0:
- Cargo.toml: drop request blocking feature flag
https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/20
- Replace fallible SourceWith[out]Integrity conversion with helper
https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/22
- Inline write_zip_and_check into fetch_tgz_and_write_zip,
add error handling to zip writing
https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/23
2026-06-11 22:20:34 +03:00
Florian Klink
e49bc27926
zeroc-ice: 2.7.3 -> 2.7.2.20
...
As reported in
https://github.com/NixOS/nixpkgs/pull/475929#issuecomment-4671420403 ,
2.7.3 is nowhere to be found / has been scrubbed upstream.
We're only still able to build this because the FOD is in
cache.nixos.org.
Meanwhile 2.7.2.20 has been tagged however, and it has the patches from
https://github.com/zeroc-ice/mcpp/pull/12 merged, so let's update our
derivation to that.
We still keep an empty `patches = []` around, as we still don't want to
use the patches from the non-forked mcpp.
2026-06-11 21:54:26 +03:00
Florian Klink and GitHub
cbcd9bbfd9
nixos/users-groups: drop the weak-hash activation warning ( #529154 )
2026-06-08 21:19:54 +00:00
Florian Klink and GitHub
b8d2631686
nixos/cde: replace activation script with tmpfiles ( #527625 )
2026-06-08 21:17:51 +00:00
Florian Klink and GitHub
75a5d4c2c1
yarn-berry-fetchers: Allow impure env vars ( #522626 )
2026-06-07 17:16:43 +00:00
Florian Klink and GitHub
cc6f15dd8a
yarn-berry-fetcher: 1.2.3 -> 1.3.0 ( #529185 )
2026-06-07 17:16:10 +00:00
Florian Klink
cd7818254b
yarn-berry-fetcher: 1.2.3 -> 1.3.0
...
This now uses reqwest, so HTTP_PROXY works.
It also now has a --fetch-concurrency flag to make the amount of
download threads configurable.
2026-06-07 19:13:05 +03:00
Florian Klink and GitHub
2c143253c7
mycelium: 0.7.9 -> 0.7.10 ( #529067 )
2026-06-07 10:21:07 +00:00
Florian Klink and GitHub
8a81bb8bd1
umockdev: fix musl build ( #528848 )
2026-06-06 20:44:28 +00:00
Florian Klink and GitHub
a3fc1d9feb
gocryptfs: stop depending on fuse ( #527732 )
2026-06-05 21:41:34 +00:00
Florian Klink and GitHub
64fff67d3d
gnomeExtensions.pop-shell: 1.2.0-unstable-2025-10-01 -> 1.2.0-unstable-2026-03-31 ( #506387 )
2026-06-04 10:48:36 +00:00
Florian Klink
063b1b777b
nixosTests.gocryptfs: make test less flaky
...
Sometimes files take a bit to appear.
Wait for the file to be present to not run into this.
2026-06-03 23:00:08 +02:00
Florian Klink
d31f1369fb
gocryptfs: add passthru.tests
2026-06-02 21:00:11 +02:00
Florian Klink
14e17b46e4
nixosTests.gocryptfs: fix test
...
This actually didn't work due to multiple issues:
- Some statements used machine.execute, swallowing nonzero exit codes.
In this particular case, it caused the mountpoint to stick around.
- using `fileSytems."/plain"` has no effect in VM tests,
virtualisation.fileSystems."/plain" needs to be used instead
- `switch-to-configuration test` was invoked, so not actually switching
at all.
- Checking for `data.txt` to be present is a bit brittle. /tmp can be
cleaned up. We can just add a known text and grep for that.
2026-06-02 20:57:16 +02:00
Florian Klink and GitHub
9408d6bb7e
nixosTests.gocryptfs: init ( #526791 )
2026-06-01 19:53:16 +00:00
Florian Klink and GitHub
39a1309432
python3Packages.itables: 2.7.3 -> 2.8.0 ( #523737 )
2026-05-29 21:38:09 +00:00
Florian Klink and GitHub
0f69ec1866
buildRustCrate: parallelize build_bin via Makefile jobserver ( #503809 )
2026-05-29 16:45:33 +00:00
Florian Klink and GitHub
3bc10caca5
mycelium: 0.7.8 -> 0.7.9 ( #525445 )
2026-05-29 12:21:50 +00:00
Florian Klink
f07e336c3f
nsncd: add --version-regex to updateScript
...
Upstream tagged a .1.5.2 version (with a trailing dot), and r-ryantm
keeps sending PRs to bump to that.
Set --version-regex of nix-update-script to hopefully prevent it from
doing this.
See https://github.com/twosigma/nsncd/issues/202
See https://github.com/NixOS/nixpkgs/pull/518824
Closes https://github.com/NixOS/nixpkgs/pull/524808
2026-05-29 12:17:34 +02:00
Florian Klink and GitHub
addc5d2b85
python3Packages.authlib: 1.7.0 -> 1.7.2 ( #523956 )
2026-05-28 14:00:04 +00:00
Florian Klink and GitHub
b62d8df99d
nixos/systemd-lib: use structuredAttrs instead of passAsFile for makeUnit ( #498934 )
2026-05-28 13:55:04 +00:00
Florian Klink and GitHub
16664e055b
nixos/pam: Refactor for performance & readability ( #525090 )
2026-05-28 10:59:19 +00:00
Florian Klink and GitHub
2fcba1bf8b
lensfun: update lens database ( #523491 )
2026-05-25 17:28:27 +00:00
Florian Klink and GitHub
7b300c668c
netron: 9.0.8 -> 9.0.9 ( #523991 )
2026-05-25 13:54:27 +00:00
Florian Klink and GitHub
fcdcdc34dc
netron: 8.8.2 -> 9.0.8 ( #522149 )
2026-05-23 11:32:53 +00:00
Florian Klink and GitHub
1082c66e84
fcp: init @ 0.2.2 ( #522620 )
2026-05-21 14:01:13 +00:00
Florian Klink and GitHub
56abc29872
mycelium: 0.7.7 -> 0.7.8 ( #522285 )
2026-05-21 11:18:45 +00:00
Florian Klink and GitHub
ed0aa30ccc
python3Packages.pcodec: 1.0.1 -> 1.0.2 ( #520382 )
2026-05-20 06:39:19 +00:00
Florian Klink and GitHub
798a77fbb2
tmux: fix NULL deref in control_write on uninitialized control client ( #521870 )
2026-05-20 06:26:47 +00:00
Florian Klink
f8bd1063a3
netron: 8.8.2 -> 9.0.8
...
Includes a bump to Electon 42.
See #521305 .
2026-05-20 08:50:33 +03:00
Florian Klink and GitHub
ec879e646e
notmuch: fix darwin build ( #519887 )
2026-05-14 16:03:31 +00:00
Florian Klink and GitHub
27198194e5
Add podocarp/speedtest_exporter package and module ( #514624 )
2026-05-14 12:36:40 +00:00
Florian Klink and GitHub
fa5e1fea60
libdigidocpp: 4.3.0 -> 4.4.0 ( #519803 )
2026-05-14 12:32:55 +00:00
Florian Klink and GitHub
7b633a2bd3
web-eid-app: 2.8.0 -> 2.9.0 ( #520056 )
2026-05-14 12:32:49 +00:00
Florian Klink
613439273e
otel-tui: 0.7.2 -> 0.7.3
...
Fixes a crash when receiving lots of traces.
Other release notes:
https://github.com/ymtdzzz/otel-tui/releases/tag/v0.7.3
2026-05-14 15:03:26 +03:00
Florian Klink and GitHub
1bebb4390c
grafana-alloy: fix cross-compile ( #519136 )
2026-05-11 20:09:52 +00:00
Florian Klink and GitHub
e8c7f3a3e9
swgp-go: 1.9.0 -> 1.10.0 ( #519120 )
2026-05-11 19:34:51 +00:00
Florian Klink and GitHub
ff4630523d
python3Packages.schedula: skip form-extras test that lacks proper guard ( #518458 )
2026-05-09 20:35:55 +00:00
Florian Klink and GitHub
a2449ae281
buildRustCrate: support propagatedBuildInputs in crate overrides ( #503956 )
2026-05-09 11:50:38 +00:00
Florian Klink and GitHub
195fce926c
Add siebenmann/zfs_exporter package and related module ( #514423 )
2026-05-07 12:32:10 +00:00
Florian Klink and GitHub
85a3681a84
gerrit: 3.13.5 -> 3.13.6 ( #515501 )
2026-05-07 10:04:29 +00:00
Florian Klink and GitHub
45c452a695
gummi: fix build with gcc15 ( #517393 )
2026-05-07 10:00:20 +00:00
Florian Klink and GitHub
a41f8a50ec
jwx: 4.0.1 -> 4.0.2 ( #517509 )
2026-05-07 09:57:45 +00:00
Florian Klink and GitHub
28774125af
python3Packages.bpython: fix build ( #516519 )
2026-05-04 16:22:32 +02:00
Florian Klink and GitHub
fa72287967
grafana-alloy: 1.15.1 -> 1.16.0 ( #516010 )
2026-05-04 09:39:40 +00:00
Florian Klink and GitHub
f08b3d1fe3
nixos/lib/systemd-lib: make unitNameType work with e.g. Rust regex ( #515527 )
2026-05-03 13:30:39 +00:00
Florian Klink and GitHub
7b70cce3d6
nixos/profiles/base: add explicit support for ext filesystems ( #516107 )
2026-05-03 13:25:56 +00:00
Florian Klink and GitHub
94df3a60ed
nixos: unset vm.mmap_rnd_compat_bits on loongarch64 ( #515236 )
2026-05-01 03:10:11 +00:00
Florian Klink and GitHub
2f78b6d723
nixos: Set mmap ASLR entropy dynamically ( #513771 )
2026-04-28 20:44:36 +00:00
Florian Klink
1359fafb73
notmuch: drop unused argument
2026-04-27 22:08:22 +03:00
Florian Klink
a945658951
notmuch: update changelog URL
...
See #514132 for context.
2026-04-27 22:08:22 +03:00
Florian Klink and GitHub
3666a67db3
python3Packages.authlib: add missing input joserfc ( #514038 )
2026-04-27 18:40:02 +00:00
Florian Klink and GitHub
86b83eeaea
authlib: 1.6.9 -> 1.7.0 ( #513635 )
2026-04-27 11:40:34 +00:00
Florian Klink and GitHub
f6770b8b9f
lpac, easylpac: fix Darwin build ( #513669 )
2026-04-27 11:38:14 +00:00
Florian Klink
f2fcde71fc
easylpac: lookup lpac in $PATH on darwin, too
2026-04-27 14:25:34 +03:00
Florian Klink
38edd9a367
easylpac: remove linux restriction
...
lpac now builds for darwin too!
2026-04-27 14:25:34 +03:00
Florian Klink
f13c7066dc
lpac: fix darwin build
...
Build with libmbim and libqmi only on linux, as these fail to evaluate.
pcsclite is provided by apple framework, similar to #459045 .
We also need to set CMAKE_OSX_ARCHITECTURES to avoid trying to build for
both architectures, which fails. This requires pulling in a patch that's
already accepted upstream, but not yet in a release.
2026-04-27 14:25:34 +03:00
Florian Klink and GitHub
af59f21843
nixos/systemd-networkd: add new options for v260 ( #513521 )
2026-04-26 12:26:37 +00:00
Florian Klink and GitHub
074d5dc7ea
nixos: Set mmap ASLR entropy to a safe default on AArch64 ( #513672 )
2026-04-26 12:15:29 +00:00
Florian Klink and GitHub
414b0bf43c
mycelium: 0.7.5 -> 0.7.6 ( #513295 )
2026-04-26 12:14:34 +00:00
Florian Klink and GitHub
fbebe4cdf5
nixos/systemd-networkd: Allow three value variant in ipv6AcceptRAConfig.RouteMetric option ( #507540 )
2026-04-26 11:55:37 +00:00
Florian Klink and GitHub
6d1dcde37e
sequoia-git: avoid rec keyword ( #513676 )
2026-04-26 11:34:39 +00:00