text:
python311Packages.favicon: remove pytest-runner

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 236547 run on x86_64-linux 1

4 packages built:

python310Packages.favicon
python310Packages.favicon.dist
python311Packages.favicon
python311Packages.favicon.dist


text:
nix-update: 0.18.0 -> 0.19.0

Diff: https://github.com/Mic92/nix-update/compare/0.18.0...0.19.0
Changelog: https://github.com/Mic92/nix-update/releases/tag/0.19.0
Description of changes

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

I think we maybe also should backport this because it also affect people on stable who want to update packages in nixpkgs git.

#243279

source: gharchive/pull-request

repo: NixOS/nixpkgs

license: MIT

license_type: permissive

license_source: github-api


text:
rss2email: init at 3.9

Things done

[x] Tested using sandboxing
(nix.useSandbox on NixOS,
or option build-use-sandbox in nix.conf
on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] Linux

[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

Profpatsch notifications@github.com writes:

This won’t work with non-nixos. It should be patched to either /usr/bin/env sendmail or to a package directly.

ah right. maybe I should just leave it unpatched and let the user
configure it themselves? My idea here was to have something working out
of the box for nixos users...

ah right. maybe I should just leave it unpatched and let the user
configure it themselves? My idea here was to have something working out
of the box for nixos users...

Right, yes. But then just sendmail would be best I think. Maybe check if the program uses a call that resolves PATH.
Best of class would be
sendmail ? null, … }:

and use that or "sendmail" if null. Then the module can just add an option for that.

apparently I f'd this up bad so I'll take another pass at this later when I have time

@jb55 it's not bad, it's just that adding a package to Nixpkgs can be tricky :)

authors: FRidh Profpatsch jb55


text:
swi-prolog: update dependency pcre -> pcre2

Description of changes
SWI-Prolog 9 depends on newer version of the PCRE
https://github.com/SWI-Prolog/swipl-devel/blob/0ec564164a6af1d045f30a46d6931eebcf523015/CMAKE.md?plain=1#L400
Things done
Package dependency changed from pcre to pcre2

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 250791 run on x86_64-linux 1

5 packages built:

ape
apeClex
pakcs
swiProlog
swiPrologWithGui

Thank you!

authors: bohushvitali onny


text:
python3.pkgs.aioflo: clean up build dependency constraints

Description of changes
After https://github.com/NixOS/nixpkgs/pull/248866, we need to clean up the build dependencies in this project. (It asks for setuptools, wheel, and poetry but only needs poetry-core.)
Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[x] aarch64-darwin

[x] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

@ofborg build python310Packages.aioflo

authors: natsukium tjni


text:
python311Packages.datasets: 2.12.0 -> 2.14.4

Diff: https://github.com/huggingface/datasets/compare/refs/tags/2.12.0...2.14.4
Changelog: https://github.com/huggingface/datasets/releases/tag/2.14.4
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 252434 run on x86_64-linux 1

6 packages failed to build:

python311Packages.accelerate
python311Packages.accelerate.dist
python311Packages.manifest-ml
python311Packages.manifest-ml.dist
python311Packages.peft
python311Packages.peft.dist

54 packages built:

khoj
khoj.dist
openai-whisper (python310Packages.openai-whisper)
openai-whisper.dist (python310Packages.openai-whisper.dist)
python310Packages.accelerate
python310Packages.accelerate.dist
python310Packages.anthropic
python310Packages.anthropic.dist
python310Packages.datasets
python310Packages.datasets.dist
python310Packages.evaluate
python310Packages.evaluate.dist
python310Packages.manifest-ml
python310Packages.manifest-ml.dist
python310Packages.minichain
python310Packages.minichain.dist
python310Packages.optimum
python310Packages.optimum.dist
python310Packages.peft
python310Packages.peft.dist
python310Packages.sentence-transformers
python310Packages.sentence-transformers.dist
python310Packages.shap
python310Packages.shap.dist
python310Packages.stanza
python310Packages.stanza.dist
python310Packages.tokenizers
python310Packages.tokenizers.dist
python310Packages.transformers
python310Packages.transformers.dist
python310Packages.txtai
python310Packages.txtai.dist
python310Packages.unstructured-inference
python310Packages.unstructured-inference.dist
python311Packages.anthropic
python311Packages.anthropic.dist
python311Packages.datasets
python311Packages.datasets.dist
python311Packages.evaluate
python311Packages.evaluate.dist
python311Packages.optimum
python311Packages.optimum.dist
python311Packages.sentence-transformers
python311Packages.sentence-transformers.dist
python311Packages.stanza
python311Packages.stanza.dist
python311Packages.tokenizers
python311Packages.tokenizers.dist
python311Packages.transformers
python311Packages.transformers.dist
python311Packages.txtai
python311Packages.txtai.dist
python311Packages.unstructured-inference
python311Packages.unstructured-inference.dist

Result of nixpkgs-review pr 252434 run on x86_64-linux 1

64 packages marked as broken and skipped:

libretranslate
libretranslate.dist
pentestgpt
pentestgpt.dist
python310Packages.argos-translate-files
python310Packages.argos-translate-files.dist
python310Packages.argostranslate
python310Packages.argostranslate.dist
python310Packages.cleanlab
python310Packages.cleanlab.dist
python310Packages.ctranslate2
python310Packages.ctranslate2.dist
python310Packages.dalle-mini
python310Packages.dalle-mini.dist
python310Packages.dm-sonnet
python310Packages.dm-sonnet.dist
python310Packages.faster-whisper
python310Packages.faster-whisper.dist
python310Packages.gradio
python310Packages.gradio.dist
python310Packages.k-diffusion
python310Packages.k-diffusion.dist
python310Packages.langchain
python310Packages.langchain.dist
python310Packages.libretranslate
python310Packages.libretranslate.dist
python310Packages.spacy-transformers
python310Packages.spacy-transformers.dist
python310Packages.tensorflow-datasets
python310Packages.tensorflow-datasets.dist
python310Packages.translatehtml
python310Packages.translatehtml.dist
python310Packages.vqgan-jax
python310Packages.vqgan-jax.dist
python311Packages.argos-translate-files
python311Packages.argos-translate-files.dist
python311Packages.argostranslate
python311Packages.argostranslate.dist
python311Packages.cleanlab
python311Packages.cleanlab.dist
python311Packages.ctranslate2
python311Packages.ctranslate2.dist
python311Packages.dalle-mini
python311Packages.dalle-mini.dist
python311Packages.faster-whisper
python311Packages.faster-whisper.dist
python311Packages.gradio
python311Packages.gradio.dist
python311Packages.k-diffusion
python311Packages.k-diffusion.dist
python311Packages.libretranslate
python311Packages.libretranslate.dist
python311Packages.spacy-transformers
python311Packages.spacy-transformers.dist
python311Packages.translatehtml
python311Packages.translatehtml.dist
python311Packages.vqgan-jax
python311Packages.vqgan-jax.dist
tts
tts.dist
whisper-ctranslate2
whisper-ctranslate2.dist
wyoming-faster-whisper
wyoming-faster-whisper.dist

2 packages failed to build:

python311Packages.manifest-ml
python311Packages.manifest-ml.dist

58 packages built:

khoj
khoj.dist
openai-whisper (python310Packages.openai-whisper)
openai-whisper.dist (python310Packages.openai-whisper.dist)
python310Packages.accelerate
python310Packages.accelerate.dist
python310Packages.anthropic
python310Packages.anthropic.dist
python310Packages.datasets
python310Packages.datasets.dist
python310Packages.evaluate
python310Packages.evaluate.dist
python310Packages.manifest-ml
python310Packages.manifest-ml.dist
python310Packages.minichain
python310Packages.minichain.dist
python310Packages.optimum
python310Packages.optimum.dist
python310Packages.peft
python310Packages.peft.dist
python310Packages.sentence-transformers
python310Packages.sentence-transformers.dist
python310Packages.shap
python310Packages.shap.dist
python310Packages.stanza
python310Packages.stanza.dist
python310Packages.tokenizers
python310Packages.tokenizers.dist
python310Packages.transformers
python310Packages.transformers.dist
python310Packages.txtai
python310Packages.txtai.dist
python310Packages.unstructured-inference
python310Packages.unstructured-inference.dist
python311Packages.accelerate
python311Packages.accelerate.dist
python311Packages.anthropic
python311Packages.anthropic.dist
python311Packages.datasets
python311Packages.datasets.dist
python311Packages.evaluate
python311Packages.evaluate.dist
python311Packages.optimum
python311Packages.optimum.dist
python311Packages.peft
python311Packages.peft.dist
python311Packages.sentence-transformers
python311Packages.sentence-transformers.dist
python311Packages.stanza
python311Packages.stanza.dist
python311Packages.tokenizers
python311Packages.tokenizers.dist
python311Packages.transformers
python311Packages.transformers.dist
python311Packages.txtai
python311Packages.txtai.dist
python311Packages.unstructured-inference
python311Packages.unstructured-inference.dist

Result of nixpkgs-review pr 252434 run on x86_64-linux 1

61 packages built:

khoj
khoj.dist
openai-whisper (python310Packages.openai-whisper)
openai-whisper.dist (python310Packages.openai-whisper.dist)
python310Packages.accelerate
python310Packages.accelerate.dist
python310Packages.anthropic
python310Packages.anthropic.dist
python310Packages.datasets
python310Packages.datasets.dist
python310Packages.evaluate
python310Packages.evaluate.dist
python310Packages.manifest-ml
python310Packages.manifest-ml.dist
python310Packages.minichain
python310Packages.minichain.dist
python310Packages.optimum
python310Packages.optimum.dist
python310Packages.peft
python310Packages.peft.dist
python310Packages.sentence-transformers
python310Packages.sentence-transformers.dist
python310Packages.shap
python310Packages.shap.dist
python310Packages.stanza
python310Packages.stanza.dist
python310Packages.tokenizers
python310Packages.tokenizers.dist
python310Packages.transformers
python310Packages.transformers.dist
python310Packages.txtai
python310Packages.txtai.dist
python310Packages.unstructured-inference
python310Packages.unstructured-inference.dist
python311Packages.accelerate
python311Packages.accelerate.dist
python311Packages.anthropic
python311Packages.anthropic.dist
python311Packages.datasets
python311Packages.datasets.dist
python311Packages.evaluate
python311Packages.evaluate.dist
python311Packages.manifest-ml
python311Packages.manifest-ml.dist
python311Packages.optimum
python311Packages.optimum.dist
python311Packages.peft
python311Packages.peft.dist
python311Packages.sentence-transformers
python311Packages.sentence-transformers.dist
python311Packages.stanza
python311Packages.stanza.dist
python311Packages.tokenizers
python311Packages.tokenizers.dist
python311Packages.transformers
python311Packages.transformers.dist
python311Packages.txtai
python311Packages.txtai.dist
python311Packages.unstructured-inference
python311Packages.unstructured-inference.dist
unstructured-api

authors: fabaff natsukium


text:
mautrix-whatsapp: 0.10.0 -> 0.10.1

Description of changes
https://github.com/mautrix/whatsapp/releases/tag/v0.10.1

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Deployed on my server, basic functionality works.

Result of nixpkgs-review pr 255504 run on x86_64-linux 1

1 package built:

mautrix-whatsapp

authors: Janik-Haag chvp


text:
peertube: 5.1.0 -> 5.2.1

Description of changes
Update Teertube to 5.2.1 version and update nginx configuration.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[x] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[x] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-ready-for-review/3032/2851

:heavy_check_mark: by maintainer
:heavy_check_mark: tests pass
Thank you!

authors: Izorkin nixos-discourse roberth


text:
guile: enable crypt on linux

Description of changes
The crypt procedure is absent on Linux, but not on Darwin. Adding libxcrypt fixes the issue.
Before:
scheme@(guile-user)> (crypt "alice" "$6$abc")
;;; <stdin>:1:1: warning: possibly unbound variable `crypt'
ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Unbound variable: crypt

Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.

After:
scheme@(guile-user)> (crypt "alice" "$6$abc")
$1 = "$6$abc$PSCnDzJvX3TdJuKnLrLVtypBN0E60eEcik2dkLQZWWdcfyjubLYcKSSreSsluNsg1ecLSPpdnCS/jNWMorrf2."

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

4 packages failed to build:
emacsPackages.ada-mode gnat11 gnat11.info gnat11.man

109 packages built:
akku alire ao coreboot-toolchain.aarch64 coreboot-toolchain.arm coreboot-toolchain.i386 coreboot-toolchain.nds32le coreboot-toolchain.ppc64 coreboot-toolchain.riscv coreboot-toolchain.x64 dico fetch
-scm freetalk gash gash-utils ghdl ghdl-llvm gnat gnat-bootstrap gnat-bootstrap11 gnat.info gnat.man gnat13 gnat13.info gnat13.man gnatcoll-core gnatcoll-db2ada gnatcoll-gmp gnatcoll-iconv gnatcoll-
lzma gnatcoll-omp gnatcoll-postgres gnatcoll-python3 gnatcoll-readline gnatcoll-sql gnatcoll-sqlite gnatcoll-syslog gnatcoll-xref gnatcoll-zlib gnatinspect gnome.aisleriot gnu-shepherd gnucash gprbu
ild gprbuild-boot guile guile-avahi guile-cairo guile-commonmark guile-config guile-fibers guile-gcrypt guile-git guile-gnutls guile-goblins guile-hall guile-json guile-lib guile-lzma guile-ncurses
guile-opengl guile-reader guile-sdl2 guile-semver guile-sqlite3 guile-ssh guile-zlib guile.dev guile.info gwrap haunt kakounePlugins.kakoune-rainbow lepton-eda libchop libctl libmatheval lsh mcron o
cserv pinentry-rofi python310Packages.cocotb python310Packages.cocotb.dist python310Packages.meep python310Packages.myhdl python310Packages.myhdl.dist python311Packages.cocotb python311Packages.coco
tb.dist python311Packages.meep python311Packages.myhdl python311Packages.myhdl.dist scheme-bytestructures skribilo slibGuile spark2014 trackballs weechat weechat-unwrapped weechat-unwrapped.guile we
echat-unwrapped.lua weechat-unwrapped.man weechat-unwrapped.perl weechat-unwrapped.php weechat-unwrapped.python weechat-unwrapped.ruby weechat-unwrapped.tcl xbindkeys xmlada yosys-ghdl zrythm

@ofborg build skribilo skribilo.passthru.tests


text:
cacert:3.95 -> 3.96.1

Description of changes

New version available in-
https://github.com/nss-dev/nss/tags
Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[x] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@RealHarshThakur I guess this should target staging instead of master?
https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md#rebasing-between-branches-ie-from-master-to-staging

Thanks for the explaination @r-vdp  :)
I think I have retargeted it to staging now

Since cacert is a mass rebuild, we only update it when the contents actually change, which they didn't for nss 3.96 or 3.96.1 AFAICT.

The 3.96 release was botched, and 3.96.1 contained no cacert changes. Closing.
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_96.rst
https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_96_1.rst

authors: RealHarshThakur ajs124 mweinelt r-vdp


text:
mpvScripts.memo: init at 0-unstable-2023-10-31

Description of changes

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg eval

@dotlambda, could you please review this PR if it's ready for merging?

Please squash and update the PR title.

Please squash and update the PR title.

wdym about the PR title? Should I append a 0- to the start?

It would be nicer if your commit message didn't contain that gibberish.
I'm going to wait a bit to see if someone familiar with mpc scripts in nixpkgs reacts. If not I'll merge.

It would be nicer if your commit message didn't contain that gibberish. I'm going to wait a bit to see if someone familiar with mpc scripts in nixpkgs reacts. If not I'll merge.

Doesn't seem like

It would be nicer if your commit message didn't contain that gibberish. I'm going to wait a bit to see if someone familiar with mpc scripts in nixpkgs reacts. If not I'll merge.

Nobody reviewed after 3 weeks, can this PR get merged? (Sorry, I will do better in the future when PRing)

@dotlambda Can you review this again?

I hope you are recovering or recovered from your health complications!
@nbraud.

authors: dotlambda purrpurrn


text:
pgmodeler: 1.0.6 -> 1.1.0

Description of changes
Today, pgmodeler v1.1.0 has been released.

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Superseded by #296079.

authors: esclear wegank


text:
qt6.qtbase: search PATH for plugins after search QT_PLUGIN_PATH

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

To be merged together with https://github.com/NixOS/nixpkgs/pull/287077. (And possible fixes for the closure size bloat due to qt plugins in dev outputs of kf6 packages)

The change seems OK, but I still don't know if we should even be doing this in the first place...

I also hate this, but what else can we do with qt plugins....


text:
python311Packages.aioairzone-cloud: 0.3.8 -> 0.4.5

Diff: https://github.com/Noltari/aioairzone-cloud/compare/refs/tags/0.3.8...0.4.5
Changelog: https://github.com/Noltari/aioairzone-cloud/releases/tag/0.4.5
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 292548 run on x86_64-linux 1

5 packages built:

home-assistant-component-tests.airzone_cloud
python311Packages.aioairzone-cloud
python311Packages.aioairzone-cloud.dist
python312Packages.aioairzone-cloud
python312Packages.aioairzone-cloud.dist


text:
python311Packages.asyncstdlib: 3.12.0 -> 3.12.1

Diff: https://github.com/maxfischer2781/asyncstdlib/compare/refs/tags/v3.12.0...v3.12.1
Changelog: https://github.com/maxfischer2781/asyncstdlib/releases/tag/v3.12.1
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 292982 run on x86_64-linux 1

4 packages marked as broken and skipped:

python312Packages.icontract
python312Packages.icontract.dist
python312Packages.pylddwrap
python312Packages.pylddwrap.dist

13 packages built:

home-assistant-component-tests.denonavr
python311Packages.asyncstdlib
python311Packages.asyncstdlib.dist
python311Packages.denonavr
python311Packages.denonavr.dist
python311Packages.icontract
python311Packages.icontract.dist
python311Packages.pylddwrap
python311Packages.pylddwrap.dist
python312Packages.asyncstdlib
python312Packages.asyncstdlib.dist
python312Packages.denonavr
python312Packages.denonavr.dist


text:
Supabase py

Description of changes
added supabase-py python client for supabase and it's dependencies
https://github.com/supabase-community/supabase-py
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[x] sandbox = true

[x] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[x] (Package updates) Added a release notes entry if the change is major or breaking
[x] (Module updates) Added a release notes entry if the change is significant
[x] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

This should be one commit per added package, with the commit message as specified in CONTRIBUTING.md.
If the tests aren't in the pypi packages, have you tried pulling the source straight from github? Otherwise, what with these packages also not having pythonImportsCheck, they will get broken without anyone noticing.

This should be one commit per added package, with the commit message as specified in CONTRIBUTING.md.
If the tests aren't in the pypi packages, have you tried pulling the source straight from github? Otherwise, what with these packages also not having pythonImportsCheck, they will get broken without anyone noticing.

Thanks, I'll revise that per your feedback.

authors: risicle samrose


text:
nixos/systemd-boot: avoid expensive mypy builds on configuration changes

Mypy dependencies pull in quite a few packages, which makes it harder to create offline installers.

Description of changes

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[x] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg test systemd-boot

@Mic92
Hi! I have something strange with package name, maybe after this commit:
[A.]  #8  x95gq7vjlzrp2k67n95mgs37by7v1aa8-systemd-boot  <none>
Removed packages:
[R.]  #1  systemd-boot  <none>

@Mic92 Hi! I have something strange with package name, maybe after this commit:
[A.]  #8  x95gq7vjlzrp2k67n95mgs37by7v1aa8-systemd-boot  <none>
Removed packages:
[R.]  #1  systemd-boot  <none>

@spiage what is this the output of ?

@JulienMalka output of nvd diff /run/booted-system /run/current-system
nix profile diff-closures --profile /nix/var/nix/profiles/system
output is:
Version 8929 -> 8930:
  nixos-system-nixos: 24.05.20240429.bb54a0c → 24.05.20240429.3d7b4b7
  systemd: -15.5 KiB
  x95gq7vjlzrp2k67n95mgs37by7v1aa8-systemd: ∅ → ε, +15.2 KiB

It's this source: https://github.com/NixOS/nixpkgs/pull/306339/files#diff-6c7419829c336dc7d2e0be0c7ab29dcc159b84151835735276aba0a85374038bR13

Thank you!

authors: JulienMalka Mic92 spiage


text:
udiskie: build for python 3 by default

Motivation for this change
Use Python3 for udiskie, on one hand for using the "better" python version :p, on the other hand, python 2 support will be phased out soon(tm).
https://github.com/coldfix/udiskie/blob/a6946743a0eb1f627fb67bab31e745d2d7a22843/README.rst
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[x] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

What is the process to remove a package permanently?  The python2Packages.udiskie will not work anymore soon.

Use Python3 for udiskie, on one hand for using the "better" python version :p,

If a package works with both 2 and 3, then it should depend on python. If it needs a more specific version, e.g. 3.x, then it should depend on python3.

on the other hand, python 2 support will be phased out soon(tm).

We can change to python3 explicitly as soon as the package is really broken with Python 2.x.

What is the process to remove a package permanently? The python2Packages.udiskie will not work anymore soon.

As soon as it won't work anymore, we mark the Python module as disabled = !isPy3k;.
I am closing this PR because these changes should be done when a new version is introduced that actually requires them.

Thanks for the explanation. :)

authors: FRidh Moredread


text:
Revert "syslinux: Use Nixpkgs' gnu-efi"

Reverts NixOS/nixpkgs#317030
Somehow, this breaks ISO boot, and Samuel is probably asleep by now, so let's just revert and fix later.

Please include reasons for reverts in the commit message!


text:
ollama: remove dependency onlinuxPackages.nvidia_x11, use autoAddDriverRunpath instead

Description of changes
linuxPackages.nvidia_x11 is a driver, and isn't intended to be directly linked like a library. autoAddDriverRunpath should be able to make ollama work without it.
Due to my pc being broken at the moment, I'm borrowing a weak laptop that isn't capable of building/testing ollama. I therefore require help in testing that ollama-rocm and ollama-cuda actually detect and use the gpu, and don't fall back to cpu. I really appreciate any help with this!

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

I try you PR on my OS after update it

Strange in  my side
disabledModules = [ "services/misc/ollama.nix" ];

  imports = let
    nixpkgsPr = builtins.fetchTarball {
      url = "https://github.com/abysssol/nixpkgs/archive/ollama-driver-runpath.tar.gz";
      sha256 = "1ixfvdpi2v4r9yrkvqnfk9whs8lyjhrkdph47bcznh8ak9aipr8p";
    };
  in
  [
    (import "${nixpkgsPr}/nixos/modules/services/misc/ollama.nix")
  ];

Seems to use default nvidia pacakge and from my OS. 550 instead of 555.
I think, i misconfigured the patches

I think you need to update services.ollama.package perhaps?

@mrdev023 Maybe add something like this to the imports?
({ ... }: {
  services.ollama.package = (import nixpkgsPr { }).ollama;
})

package = (import nixpkgsPr { }).ollama;

I'm using a flake so i get following errors
 … while evaluating the attribute 'value'

         at /nix/store/bi5zxc0v5g6ylygdwyqzh280sccg3ykb-source/lib/modules.nix:809:9:

          808|     in warnDeprecation opt //
          809|       { value = builtins.addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          810|         inherit (res.defsFinal') highestPrio;

       (stack trace truncated; use '--show-trace' to show the full trace)

       error: attribute 'currentSystem' missing

       at /nix/store/gnnnpxkb36m3cphyjv5hw0is8ki52567-source/pkgs/top-level/impure.nix:17:43:

           16|   # (build, in GNU Autotools parlance) platform.
           17|   localSystem ? { system = args.system or builtins.currentSystem; }

({ pkgs, ... }: {
  services.ollama.package = (import nixpkgsPr { import (pkgs) system; config.allowUnfree = true; }).ollama;
})

package = (import nixpkgsPr { import (pkgs) system; config.allowUnfree = true; }).ollama;

or if you have system in scope:
package = (import nixpkgsPr { import system; config.allowUnfree = true; }).ollama;

Thx, i searching how to configure allowUnfree ^^
This > package = (import nixpkgsPr { import (pkgs) system; config.allowUnfree = true; }).ollama; works (For building)

It seems to work in my side
ollama version is 0.1.47
NAME         	ID          	SIZE  	PROCESSOR	UNTIL
llama3:latest	365c0bd3c000	5.4 GB	100% GPU 	4 minutes from now

good to hear, thank you for testing it. hopefully rocm still works too

good to hear, thank you for testing it. hopefully rocm still works too

Thx for you help ^^

Thank you @abysssol!

I don't think rocm was tested. I might have to add something like  "--suffix LD_LIBRARY_PATH : '${rocmPath}'" to wrapperOptions if it doesn't work.

authors: SomeoneSerge abysssol drupol mrdev023


text:
python312Packages.boto3-stubs: 1.34.138 -> 1.34.139, python312Packages.botocore-stubs: 1.34.138 -> 1.34.139

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 324639 run on x86_64-linux 1

14 packages built:

aws-sam-cli
aws-sam-cli.dist
python311Packages.boto3-stubs
python311Packages.boto3-stubs.dist
python311Packages.botocore-stubs
python311Packages.botocore-stubs.dist
python311Packages.types-aiobotocore
python311Packages.types-aiobotocore.dist
python312Packages.boto3-stubs
python312Packages.boto3-stubs.dist
python312Packages.botocore-stubs
python312Packages.botocore-stubs.dist
python312Packages.types-aiobotocore
python312Packages.types-aiobotocore.dist


text:
treewide: avoid dashes in specialisation names

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg test switchTest activation-etc-overlay-mutable activation-etc-overlay-mutable caddy initrd-luks-empty-passphrase systemd-initrd-luks-fido2 systemd-initrd-btrfs-raid systemd-initrd-luks-keyfile systemd-initrd-luks-password systemd-initrd-swraid systemd-sysusers-immutable systemd-systusers-mutable taskserver thanos

@ofborg test systemd-sysusers-mutable

The swraid test seems to be broken on master as well, I think it hangs while looking for the root device.

There are users with dashes in their specialisation names. Just making it so our tests don't use dashes doesn't help them. Those users will have older generations that they don't want to GC that will trigger the errors because those live outside of the new assertion.
We need to fix the actual problem and support dashes in specialisation names. This seems like entirely the wrong appraoch to me.

Ok, it's just a lot less clear what's a good way to do that, and I've seen several people in matrix now with broken configs because of this.

My main point is that simply asserting that no specialisation has a dash in its name doesn't actually fix problems for users. Their old generations will still generate errors during nixos-rebuild as the systemd-boot-builder.py processes the old generations' specialisations.
@JulienMalka @Mic92 If we can't fix this problem, then I think we have to revert boot counting again until we think of something that works.
My extremely crude solution is to base64 encode specialisation names in the file name to make it easy to match correctly. This would work correctly but is really ugly because the file names become incomprehensible. I think we need something of similar nature, but preferably less ugly; i.e. just something that removes the dashes in a reversible way.

We could replace the dashes by \x2d like systemd does for paths.

Yea, the only issue with that is that technically it would break on names including \x2d, unless we implemented an entire escaper (or find a pre-existing one). That's, of course, a very esoteric use case though.

For complete reference, there is also https://github.com/NixOS/nixpkgs/pull/333857 that might be fixing the issue. Unfortunately, I am in holidays and cannot be in the proper conditions to give the necessary attention to the problem and produce a fix that is not going to blow up on us again. If the short term solution is a revert of boot counting, then let's revert. I agree that we should not break the generations of everyone that uses a dash in their specialisations names.

Ah, I was not aware of the other PR. I'll take a look.

Yea, the only issue with that is that technically it would break on names including \x2d, unless we implemented an entire escaper (or find a pre-existing one). That's, of course, a very esoteric use case though.

If dashes are the only problematic character then it's as simple as \ → \x5c then - → \x2d.

For complete reference, there is also https://github.com/NixOS/nixpkgs/pull/333857 that might be fixing the issue. Unfortunately, I am in holidays and cannot be in the proper conditions to give the necessary attention to the problem and produce a fix that is not going to blow up on us again. If the short term solution is a revert of boot counting, then let's revert. I agree that we should not break the generations of everyone that uses a dash in their specialisations names.

If we merge that one, then we should probably revert the earlier PR that added an assertion to disallow dashes.

authors: ElvishJerricco JulienMalka emilazy r-vdp


text:
disko: 1.6.1 -> 1.7.0

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/nix-community/disko/releases.
meta.description for disko is: Declarative disk partitioning and formatting using nix
meta.homepage for disko is: https://github.com/nix-community/disko
Updates performed

Version update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.7.0 in filename of file in /nix/store/vxli3pl4w74m48wig8sys4k2nhd392s7-disko-1.7.0

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

disko

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/vxli3pl4w74m48wig8sys4k2nhd392s7-disko-1.7.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A disko https://github.com/r-ryantm/nixpkgs/archive/54aa628cf671b3e3276b21efa59a0206f1b0c196.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/54aa628cf671b3e3276b21efa59a0206f1b0c196#disko

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/vxli3pl4w74m48wig8sys4k2nhd392s7-disko-1.7.0
ls -la /nix/store/vxli3pl4w74m48wig8sys4k2nhd392s7-disko-1.7.0/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

disko

Maintainer pings
cc @Mic92 @Lassulus for testing.

[!TIP]
As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

Add a :+1: reaction to pull requests you find important.

@NixOS/nixpkgs-merge-bot merge


text:
do not pass VFILES if version >= 1.1.0

Description of changes
Since 1.1.0 there is no need to pass VFILES=structures.v to the makefile, since all tests are separate.
Passing this option makes it impossible to move structures.v to another place in the upstream repo, see https://github.com/math-comp/hierarchy-builder/pull/444
I don't know nix, I hope what I wrote makes sense.
@CohenCyril @proux01
Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Launched CI on https://github.com/coq-community/coq-nix-toolbox/pull/261

@vbgl CI green both here and on https://github.com/coq-community/coq-nix-toolbox/pull/261 so looks like we are all set (modulo the PR name)

Thank you Enrico!

great thanks

authors: gares proux01 vbgl


text:
libastyle: 3.5.2 -> 3.6.3

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/astyle/versions.
meta.description for libastyle is: Source code indenter, formatter, and beautifier for C, C++, C# and Java
meta.homepage for libastyle is: https://astyle.sourceforge.net/
Updates performed

Version update

To inspect upstream changes
Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 3.6.3 with grep in /nix/store/pf9magnhj0dis4zp4k928ksxd5nd4xfg-astyle-3.6.3
found 3.6.3 in filename of file in /nix/store/pf9magnhj0dis4zp4k928ksxd5nd4xfg-astyle-3.6.3

Rebuild report (if merged into master) (click to expand)

7 total rebuild path(s)

7 package rebuild(s)

First fifty rebuilds by attrpath

astyle
kdePackages.kdev-php
kdePackages.kdev-python
kdePackages.kdevelop
kdePackages.umbrello
libastyle

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/pf9magnhj0dis4zp4k928ksxd5nd4xfg-astyle-3.6.3 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A libastyle https://github.com/r-ryantm/nixpkgs/archive/242e97e92522cce2a8779216f9f735d653d2c40f.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/242e97e92522cce2a8779216f9f735d653d2c40f#libastyle

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/pf9magnhj0dis4zp4k928ksxd5nd4xfg-astyle-3.6.3
ls -la /nix/store/pf9magnhj0dis4zp4k928ksxd5nd4xfg-astyle-3.6.3/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review

x86_64-linux

:fast_forward: 4 packages marked as broken and skipped:

kdePackages.umbrello
kdePackages.umbrello.debug
kdePackages.umbrello.dev
kdePackages.umbrello.devtools

:white_check_mark: 14 packages built:

astyle
kdePackages.kdev-php
kdePackages.kdev-php.debug
kdePackages.kdev-php.dev
kdePackages.kdev-php.devtools
kdePackages.kdev-python
kdePackages.kdev-python.debug
kdePackages.kdev-python.dev
kdePackages.kdev-python.devtools
kdePackages.kdevelop
kdePackages.kdevelop.debug
kdePackages.kdevelop.dev
kdePackages.kdevelop.devtools
libastyle

Maintainer pings
cc @carlossless for testing.

[!TIP]
As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

Add a :+1: reaction to pull requests you find important.

The test didn't pass - cli binary was not built, only libastyle.

Title is a bit misleading, would be nice if it would prefer to use the name of CLI instead of the lib, but both the lib and the CLI work correctly ✅

authors: carlossless r-ryantm


text:
cataclysm-bn-git: init at 551c7279dafe1d283c3ef2779cb335b855e6bc59

Add Cataclysm: Bright Nights, a fork/variant of Cataclysm: Dark Days Ahead. This adds git version, stable to be added later
As per discussion in #330693 , this is implemented as "sub-package" of C:DDA because of virtually the same build procedure. A notable difference is introduction of desktopFilePath because C:BN seems to lack one
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

pinging people who showed interest from previous PR: @DeeUnderscore @cizra @rardiol

Works fine, both the tiles and console versions.

authors: caryoscelus cizra


text:
python312Packages.tinygrad: add optional-dependencies

update nativeCheckInputs

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 351006

x86_64-linux

:white_check_mark: 6 packages built:

exo
exo.dist
python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 351006

x86_64-linux

:white_check_mark: 6 packages built:

exo
exo.dist
python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

aarch64-linux

:white_check_mark: 6 packages built:

exo
exo.dist
python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

x86_64-darwin

:fast_forward: 4 packages marked as broken and skipped:

python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

aarch64-darwin

:fast_forward: 6 packages marked as broken and skipped:

exo
exo.dist
python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 351006

x86_64-linux

:white_check_mark: 6 packages built:

exo
exo.dist
python311Packages.tinygrad
python311Packages.tinygrad.dist
python312Packages.tinygrad
python312Packages.tinygrad.dist

authors: GaetanLepage fabaff


text:
jazz2: 2.9.1 -> 3.0.0

Diff: https://github.com/deathkiller/jazz2-native/compare/2.9.1...3.0.0

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 360909

x86_64-linux

:white_check_mark: 2 packages built:

jazz2
jazz2-content

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-already-reviewed/2617/2139

@ofborg build jazz2

authors: getchoo keenanweaver nixos-discourse surfaceflinger


text:
testssl: 2.9.5-4 -> 2.9.5-5

Motivation for this change
Changelog:
https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-5
Also improved expression.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
Built on platform(s)

[X] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[X] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[X] Tested execution of all binary files (usually in ./result/bin/)
[X] Fits CONTRIBUTING.md.

@GrahamcOfBorg build testssl

Success on x86_64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5
strip is /nix/store/j75dgadrff2d1fyc4fczmcgqkid2imdx-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5
/nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/xn5gv3lpfy91yvfy9b0i7klfcxh9xskz-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5...
/nix/store/0f57nqv6zgx3j60fk4pdyz98ry3hs5w1-testssl.sh-2.9.5-5

Success on aarch64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5
strip is /nix/store/j7d4mr0ikv974ig7yzhknpsq288js4bs-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5
/nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/adw9jx59wnrh5659wz43nbjya3m4b3gl-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5...
/nix/store/5n2hq0a4kdg2xwgnw5dh29jv9m9wq4kd-testssl.sh-2.9.5-5

Success on x86_64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5
strip is /nix/store/j75dgadrff2d1fyc4fczmcgqkid2imdx-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5
/nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/xn5gv3lpfy91yvfy9b0i7klfcxh9xskz-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5...
/nix/store/zad7pxgc3v84yc8n0vqf63x7brw8ixmd-testssl.sh-2.9.5-5

Success on aarch64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5
strip is /nix/store/j7d4mr0ikv974ig7yzhknpsq288js4bs-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5
/nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/adw9jx59wnrh5659wz43nbjya3m4b3gl-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5...
/nix/store/hk8rlxk9frsl3fv9hszdw5d18hkqqgsa-testssl.sh-2.9.5-5

Success on x86_64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5
strip is /nix/store/j75dgadrff2d1fyc4fczmcgqkid2imdx-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5
/nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/xn5gv3lpfy91yvfy9b0i7klfcxh9xskz-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5...
/nix/store/vsdg1f6cqc97wx3y1n5vwbikyzi84b45-testssl.sh-2.9.5-5

Success on aarch64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5
strip is /nix/store/j7d4mr0ikv974ig7yzhknpsq288js4bs-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5
/nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5/bin/testssl.sh: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/adw9jx59wnrh5659wz43nbjya3m4b3gl-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5...
/nix/store/igsx4z4vrd450hws066nr92r18m44cdz-testssl.sh-2.9.5-5

@dotlambda Now it works in a pure shell, and got rid of some patching by using a wrapper.

Success on aarch64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5
strip is /nix/store/j7d4mr0ikv974ig7yzhknpsq288js4bs-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5
/nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5/bin/.testssl.sh-wrapped: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/adw9jx59wnrh5659wz43nbjya3m4b3gl-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5...
/nix/store/vhdfaxnrwpjl351si1i1hnbyadfddqff-testssl.sh-2.9.5-5

Success on x86_64-linux (full log)
Attempted: testssl
Partial log (click to expand)
no Makefile, doing nothing
installing
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5
strip is /nix/store/j75dgadrff2d1fyc4fczmcgqkid2imdx-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5/bin
patching script interpreter paths in /nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5
/nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5/bin/.testssl.sh-wrapped: interpreter directive changed from "/usr/bin/env bash" to "/nix/store/xn5gv3lpfy91yvfy9b0i7klfcxh9xskz-bash-4.4-p19/bin/bash"
checking for references to /build in /nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5...
/nix/store/p1vlw5bh5hpgrrpqhk1vcd5pamgkpzk1-testssl.sh-2.9.5-5

authors: GrahamcOfBorg etu


text:
home-assistant: 0.68.0 -> 0.68.1

Motivation for this change
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[x] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

cc @peterhoeg

Nice! If I were you, I would probably just merge these point releases directly as long as the tests pass.

@peterhoeg I will do that in the future.

Success on x86_64-linux (full log)
Attempted: home-assistant
Partial log (click to expand)

=============================== warnings summary ===============================
tests/components/test_init.py::TestComponentsCore::test_turn_on_to_not_block_for_domains_without_service
  /nix/store/96wn2gz3mwi71gwcrvpfg39bsymd7gqx-python3-3.6.5/lib/python3.6/unittest/case.py:605: RuntimeWarning: coroutine 'test_turn_on_to_not_block_for_domains_without_serv' was never awaited
    testMethod()

-- Docs: http://doc.pytest.org/en/latest/warnings.html
============================== 1 tests deselected ==============================
============= 165 passed, 1 deselected, 1 warnings in 5.33 seconds =============
/nix/store/16nnr35h94d3f23hlnd2jj1ryl54mrnh-homeassistant-0.68.1

Success on aarch64-linux (full log)
Attempted: home-assistant
Partial log (click to expand)

=============================== warnings summary ===============================
tests/components/test_init.py::TestComponentsCore::test_turn_on_to_not_block_for_domains_without_service
  /nix/store/wsqdmbvnl02jfl2897nfwx407plj79dp-python3-3.6.5/lib/python3.6/unittest/case.py:605: RuntimeWarning: coroutine 'test_turn_on_to_not_block_for_domains_without_serv' was never awaited
    testMethod()

-- Docs: http://doc.pytest.org/en/latest/warnings.html
============================== 1 tests deselected ==============================
============ 165 passed, 1 deselected, 1 warnings in 27.86 seconds =============
/nix/store/s99ws5xywpfwf4npm5ap9x25pcicn0jq-homeassistant-0.68.1

authors: GrahamcOfBorg dotlambda peterhoeg


text:
[18.09] net_snmp: fix CVE-2018-18065

Motivation for this change
This addresses a remote DoS attack (CVE-2018-18065).
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[X] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Fits CONTRIBUTING.md.

Success on aarch64-linux (full log)
Attempted: net_snmp, nixos-container, tinc, vdirsyncer
The following builds were skipped because they don't evaluate on aarch64-linux: sbt
Partial log (click to expand)
=========================== slowest 3 test durations ===========================
0.09s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VCARD]
0.06s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VTODO]
0.06s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VEVENT]
=================== 193 passed, 102 skipped in 2.58 seconds ====================
bash codecov.sh -c -F storage
/nix/store/gzvpmg53pc4flzbf0dkfwa5s7lb9xgl9-net-snmp-5.7.3
/nix/store/db9jg788mw9z111vvkcza9b6nvj5ph2n-nixos-container
/nix/store/grqc6jyg2zvvmhrqqb32xmcb69ybp5yk-tinc-1.0.35
/nix/store/dfabh0w3lkxfzpshj7c12aj25xlp9v72-vdirsyncer-0.17.0a3

Success on aarch64-linux (full log)
Attempted: net_snmp
Partial log (click to expand)
/nix/store/gzvpmg53pc4flzbf0dkfwa5s7lb9xgl9-net-snmp-5.7.3

No attempt on x86_64-darwin (full log)
The following builds were skipped because they don't evaluate on x86_64-darwin: net_snmp
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

Success on aarch64-linux (full log)
Attempted: net_snmp, nixos-container, tinc, vdirsyncer
The following builds were skipped because they don't evaluate on aarch64-linux: sbt
Partial log (click to expand)

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnfree = true; }
to ~/.config/nixpkgs/config.nix.

/nix/store/gzvpmg53pc4flzbf0dkfwa5s7lb9xgl9-net-snmp-5.7.3
/nix/store/db9jg788mw9z111vvkcza9b6nvj5ph2n-nixos-container
/nix/store/grqc6jyg2zvvmhrqqb32xmcb69ybp5yk-tinc-1.0.35
/nix/store/dfabh0w3lkxfzpshj7c12aj25xlp9v72-vdirsyncer-0.17.0a3

Success on x86_64-linux (full log)
Attempted: net_snmp
Partial log (click to expand)
gzipping man pages under /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/share/man/
strip is /nix/store/h0lbngpv6ln56hjj59i6l77vxq25flbz-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/lib  /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/bin  /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/sbin
patching script interpreter paths in /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/bin/net-snmp-config: interpreter directive changed from "/bin/sh" to "/nix/store/czx8vkrb9jdgjyz8qfksh10vrnqa723l-bash-4.4-p23/bin/sh"
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/bin/net-snmp-create-v3-user: interpreter directive changed from "/bin/sh" to "/nix/store/czx8vkrb9jdgjyz8qfksh10vrnqa723l-bash-4.4-p23/bin/sh"
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/bin/mib2c-update: interpreter directive changed from "/bin/sh" to "/nix/store/czx8vkrb9jdgjyz8qfksh10vrnqa723l-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3...
moving /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/sbin/* to /nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3/bin
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3

Failure on x86_64-darwin (full log)
Attempted: sbt, tinc, vdirsyncer
The following builds were skipped because they don't evaluate on x86_64-darwin: net_snmp, nixos-container
Partial log (click to expand)

error: aborting due to previous error

error: Could not compile `vdirsyncer-rustext`.

To learn more, run the command again with --verbose.
builder for '/nix/store/dwgkxizf17kmyl22abi0v5l1b4nldld1-vdirsyncer-0.17.0a3-native.drv' failed with exit code 101
cannot build derivation '/nix/store/bnhkihld6czaq1faw3d69sad06x5xi8z-vdirsyncer-0.17.0a3.drv': 1 dependencies couldn't be built
error: build of '/nix/store/bnhkihld6czaq1faw3d69sad06x5xi8z-vdirsyncer-0.17.0a3.drv' failed

Success on x86_64-linux (full log)
Attempted: net_snmp, nixos-container, sbt, tinc, vdirsyncer
Partial log (click to expand)
0.24s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VCARD]
0.19s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VTODO]
0.18s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VEVENT]
=================== 193 passed, 102 skipped in 3.69 seconds ====================
bash codecov.sh -c -F storage
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3
/nix/store/5ir05xp7nf25ajh68y4gsbnbsagy3y50-nixos-container
/nix/store/j3dzpr82l8j46s7s9cqhm61nrkrfnzhd-sbt-1.2.4
/nix/store/pj15a47s2wdza9appbh1hldn7jhas1j2-tinc-1.0.35
/nix/store/g5n04crz82f5a38g22wb3z6f82srf0rb-vdirsyncer-0.17.0a3

Success on x86_64-linux (full log)
Attempted: net_snmp, nixos-container, sbt, tinc, vdirsyncer
Partial log (click to expand)
0.22s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VCARD]
0.16s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VTODO]
0.15s call     tests/storage/test_singlefile.py::TestSingleFileStorage::test_generic[VEVENT]
=================== 193 passed, 102 skipped in 3.35 seconds ====================
bash codecov.sh -c -F storage
/nix/store/csb4yrcpwsbvw58kzp3d9qxrlxym7c9z-net-snmp-5.7.3
/nix/store/5ir05xp7nf25ajh68y4gsbnbsagy3y50-nixos-container
/nix/store/j3dzpr82l8j46s7s9cqhm61nrkrfnzhd-sbt-1.2.4
/nix/store/pj15a47s2wdza9appbh1hldn7jhas1j2-tinc-1.0.35
/nix/store/g5n04crz82f5a38g22wb3z6f82srf0rb-vdirsyncer-0.17.0a3

authors: GrahamcOfBorg andir


text:
ffmpeg: enable subtitles filter

FFmpeg does not autodetect libass, it has to be enabled manually. Doing so enables for example the subtitles filter. Interestingly, libass is already a build dependency.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[x] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

The change in closure size on macOS is from 101200424 to 114630048.

@GrahamcOfBorg build ffmpeg

Success on aarch64-linux (full log)
Attempted: ffmpeg
Partial log (click to expand)
gzipping man pages under /nix/store/5l2c7jf2b873xynv4dfc87wkgn9xwdmf-ffmpeg-3.4.4-man/share/man/
strip is /nix/store/6dpnd5aniypn8124mmy8f88s4mq2zl07-binutils-2.30/bin/strip
patching script interpreter paths in /nix/store/5l2c7jf2b873xynv4dfc87wkgn9xwdmf-ffmpeg-3.4.4-man
checking for references to /build in /nix/store/5l2c7jf2b873xynv4dfc87wkgn9xwdmf-ffmpeg-3.4.4-man...
strip is /nix/store/6dpnd5aniypn8124mmy8f88s4mq2zl07-binutils-2.30/bin/strip
Moving /nix/store/9baan39nn6ky17l922irhcgdx48ivq8s-ffmpeg-3.4.4/bin to /nix/store/1zkrlc58l2i6csvv30ilmakaw8fn50dw-ffmpeg-3.4.4-bin/bin
rmdir: failed to remove '/nix/store/9baan39nn6ky17l922irhcgdx48ivq8s-ffmpeg-3.4.4': Directory not empty
Moving /nix/store/9baan39nn6ky17l922irhcgdx48ivq8s-ffmpeg-3.4.4/share/ffmpeg/examples to /nix/store/cq3xa5agrm3h3362y7fq706dz3rk13if-ffmpeg-3.4.4-doc/share/ffmpeg/examples
rmdir: failed to remove '/nix/store/9baan39nn6ky17l922irhcgdx48ivq8s-ffmpeg-3.4.4/share/ffmpeg': Directory not empty
/nix/store/1zkrlc58l2i6csvv30ilmakaw8fn50dw-ffmpeg-3.4.4-bin

Success on x86_64-darwin (full log)
Attempted: ffmpeg
Partial log (click to expand)
find: '/nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc': No such file or directory
find: '/nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc': No such file or directory
find: '/nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc': No such file or directory
find: '/nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc': No such file or directory
find: '/nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc': No such file or directory
Moving /nix/store/2liy6mwcmj2r2w0f27xvgmrvij5f81g4-ffmpeg-3.4.4/bin to /nix/store/ascahv59ah3zxxgzslznw5s6wgjhz527-ffmpeg-3.4.4-bin/bin
rmdir: failed to remove '/nix/store/2liy6mwcmj2r2w0f27xvgmrvij5f81g4-ffmpeg-3.4.4': Directory not empty
Moving /nix/store/2liy6mwcmj2r2w0f27xvgmrvij5f81g4-ffmpeg-3.4.4/share/ffmpeg/examples to /nix/store/m5bwkqpb5h8r8aql1xivfak88q2ifwnr-ffmpeg-3.4.4-doc/share/ffmpeg/examples
rmdir: failed to remove '/nix/store/2liy6mwcmj2r2w0f27xvgmrvij5f81g4-ffmpeg-3.4.4/share/ffmpeg': Directory not empty
/nix/store/ascahv59ah3zxxgzslznw5s6wgjhz527-ffmpeg-3.4.4-bin

Success on x86_64-linux (full log)
Attempted: ffmpeg
Partial log (click to expand)
gzipping man pages under /nix/store/1g71pfmbx06vfh1d0m0mpncxfqnaj8jd-ffmpeg-3.4.4-man/share/man/
strip is /nix/store/rpbg8gmqxhz8g61p1plz5d2srs84pvmv-binutils-2.30/bin/strip
patching script interpreter paths in /nix/store/1g71pfmbx06vfh1d0m0mpncxfqnaj8jd-ffmpeg-3.4.4-man
checking for references to /build in /nix/store/1g71pfmbx06vfh1d0m0mpncxfqnaj8jd-ffmpeg-3.4.4-man...
strip is /nix/store/rpbg8gmqxhz8g61p1plz5d2srs84pvmv-binutils-2.30/bin/strip
Moving /nix/store/h92d2y8mx65ihnq7c9zv6gqv0kvmhfai-ffmpeg-3.4.4/bin to /nix/store/mn6y0wjn8s5srfn22mfnwkldf26qis3c-ffmpeg-3.4.4-bin/bin
rmdir: failed to remove '/nix/store/h92d2y8mx65ihnq7c9zv6gqv0kvmhfai-ffmpeg-3.4.4': Directory not empty
Moving /nix/store/h92d2y8mx65ihnq7c9zv6gqv0kvmhfai-ffmpeg-3.4.4/share/ffmpeg/examples to /nix/store/qaynzwmxzs4ncq28v4sknbidirm4i0wh-ffmpeg-3.4.4-doc/share/ffmpeg/examples
rmdir: failed to remove '/nix/store/h92d2y8mx65ihnq7c9zv6gqv0kvmhfai-ffmpeg-3.4.4/share/ffmpeg': Directory not empty
/nix/store/mn6y0wjn8s5srfn22mfnwkldf26qis3c-ffmpeg-3.4.4-bin

I just realised that I probably got the ffmpeg packaging philosophy wrong. The ffmpeg-full package already supports the subtitles filter, so maybe the correct fix here would be to remove libass from the build dependencies of the minimal ffmpeg packages instead of enabling its use.
I just tried this and ffmpeg als builds correctly when removing libass. So this is now more of a design decision.

Since this pull request mostly stems from my personal misunderstanding of the ffmpeg packaging, I am going to close this. The ffmpeg-full package suits my needs.

authors: GrahamcOfBorg Infinisil mroi


text:
python.pkgs.cysignals: 1.8.0 -> 1.8.1

Motivation for this change
Latest version.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

@GrahamcOfBorg build python.pkgs.cysignals python3.pkgs.cysignals


text:
plantuml: downgrade graphviz to 2.32

Motivation for this change
PlantUML discourages Graphviz 2.39+ due to rendering bugs: see http://plantuml.com/faq (heading: "Which version of Graphviz should I use ?")
Things done

[X] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[X] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[X] Tested execution of all binary files (usually in ./result/bin/)
[X] Determined the impact on package closure size (by running nix path-info -S before and after)
[X] Assured whether relevant documentation is up to date
[X] Fits CONTRIBUTING.md.

@oxij is doing an effort atm to move package configurations from all-packages.nix into the package definitions itself (see e.g. https://github.com/NixOS/nixpkgs/pull/56088). Maybe it would be a better suited to put your change into pkgs/tools/misc/plantuml/defaul.nix?

There's no consensus on moving package defaults (as opposed to option defaults) to the expressions themselves. I think we should, but changes like these are in progress ATM, so I think this PR is okay as is for now.

authors: erictapen oxij teozkr


text:
ffsend: 0.2.36 -> 0.2.38

Motivation for this change
Also add support for xclip on Linux.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[X] macOS
[X] other Linux distributions (Docker using nixos/nix image)

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[X] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[X] Assured whether relevant documentation is up to date
[X] Fits CONTRIBUTING.md.

Tested both Darwin and (using Docker) Linux. The Linux version was tested without an X11 server, but I got the expected "Error: Can't open display: (null)" output from xclip when running ./result/bin/ffsend u -c foo so it seems to have invoked xclip correctly.

Thanks!

authors: dywedir lilyball


text:
vulnix: 1.8.0 -> 1.8.1

Motivation for this change
Minor change to ensure compatibility with PyYAML 5.x. See also #57688
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[ ] macOS
[x] other Linux distributions (Ubuntu)

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Determined the impact on package closure size -> negligible
[ ] Assured whether relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

@GrahamcOfBorg build vulnix

darwin failureis unrelated to this bump: https://hydra.nixos.org/job/nixpkgs/trunk/vulnix.x86_64-darwin

authors: ckauhaus xeji


text:
nixos-19.03: fix hardened kernels

On NixOS 19.03 I get:
Error: modDirVersion 4.19.34 specified in the Nix expression is wrong, it should be: 4.19.34-hardened

Cherry-pick 922c07d2d2a857a5cf1685a2178dd3fd122f8b46 from master to fix it.

Motivation for this change
I was using the 19.03 beta (or so I thought, apparently I was actually using the unstable channel) and tried to switch to the 19.03 release version yesterday, which failed.
After cherry-picking the above commit I was able to successfully switch.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[x] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

there was a PR to automatically set this. If you are interested https://github.com/NixOS/nixpkgs/pull/31610

@GrahamcOfBorg build linux_hardened

Thank you. As an aside, cherry-pick commits should be created with cherry-pick -x to retain a pointer to the original in the commit message.

authors: edwintorok joachifm teto


text:
stop using hardeningDisable = [ "fortify" ]; for Go packages

Motivation for this change
it seems that the issue #25959 is not present anymore. Let's get rid of the workarounds.
The following got built just fine:
$ nix-shell -I nixpkgs=. -p go-ethereum containerd docker podman livepeer trezord flannel

Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Notify maintainers
go-ethereum: @adisbladis @asymmetric @lionello @xrelkd
containerd: @offline @vdemeester
docker: @nequissimus @offline @tailhook @vdemeester @periklis
podman: @vdemeester @saschagrunert
livepeer: @elitak
flannel: @johanot @offline

@grahamcofborg test docker

LGTM 👍🏼

Only one package fails in nox-review (python3Packages.jupyter-repo2docker). This one is already broken on master.
cc maintainer @costrouc

authors: NeQuissimus adisbladis prusnak vdemeester


text:
platformio: 4.0.3 -> 4.1.0

Motivation for this change
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Notify maintainers
cc @

Fixed

I rebased this PR onto nixpkgs-unstable (62ef779f2a5), and I run into a version conflict error with importlib-metadata
$ nix-env -f . -iA platformio
installing 'platformio'
these derivations will be built:
  /nix/store/1i2l5fjysj964c79d6cj5ijl7idis267-source.drv
  /nix/store/83zlg5mx6dm80d2hlx6zh1b3gihcdlaj-python3.7-tox-3.14.2.drv
  /nix/store/c7ngf2rim1wl5lszlyr7r14payzhxsdj-source.drv
  /nix/store/2p4wlsqp2gzz1nwkv0rbfrcc5k80081z-platformio-4.1.0.drv
  /nix/store/72gv5mcfxc07cm5ygav14z549486rlha-platformio-usr-target.drv
  /nix/store/g6js0kwc5m6bjw8f7hv8ypqxiwy2zzwg-python3.7-tox-3.14.2.drv
  /nix/store/b6m6z2kd0jl345ll40qwhza8zqikks6x-platformio-4.1.0.drv
  /nix/store/h7jmnxvmbw7agv4xlr0jh489jpw6ah3x-platformio-usr-multi.drv
  /nix/store/la4z7xawcz31d7hpm4pxxhvnjvfi5vcz-platformio-fhs.drv
  /nix/store/dqjnlvlwqsh0wyrp39r003wham4j18ar-platformio-init.drv
  /nix/store/kiscf14aingrhrc6s4lkbpnvyy0va2s9-platformio.drv
... trimmed output
Finished executing setuptoolsBuildPhase
installing
Executing pipInstallPhase
/build/tox-3.14.2/dist /build/tox-3.14.2
Processing ./tox-3.14.2-py2.py3-none-any.whl
ERROR: Could not find a version that satisfies the requirement importlib-metadata<2,>=1.1.0; python_version < "3.8" (from tox==3.14.2) (from versions: none)
ERROR: No matching distribution found for importlib-metadata<2,>=1.1.0; python_version < "3.8" (from tox==3.14.2)

I found on pypi [1], that importlib-metadata v1.3 is available, and nixpkgs remains on v0.23.  I'm not sure what changed in nixpkgs-unstable to enable the requirement for importlib-metadata<2,>=1.1.0
I ran into this same error with PR #75913 after syncing nixpkgs-unstable to commit 62ef779f2a5.  @Mic92 Do you run into this error also?
[1]: https://pypi.org/project/importlib-metadata/#history

Found it.  python-tox v3.14.2 upgraded its dependency on importlib-metadata to v1.1.0 [1].
I'm new to nixpkgs development.  Do we update the python{27,37}Packages.importlib-metadata from v0.23 to v1.1.0?
[1]: https://github.com/tox-dev/tox/commit/b4c4625ff3d7474c409f0e756b479dcd1c30d4f0


text:
haskellPackages.persistent-postgresql: don't check

Disable tests for haskellPackages.persistent-postgresql

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Seems I forgot to use haskell-updates as a base.


text:
vscode, vscodium: 1.44.0 -> 1.44.1

Motivation for this change
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

Please merge as I don't have write access

@eadwu please merge as I don't have write access

@worldofpeace @Synthetica9

@kuznero Could you open a backport to stable https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md#backporting-changes. The branch would be release-20.03

authors: eadwu kuznero worldofpeace


text:
terraform: 0.12.24 -> 0.12.25

Motivation for this change
Changelog: https://github.com/hashicorp/terraform/releases/tag/v0.12.25
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[X] NixOS
[X] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[X] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[X] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 87781 1

3 packages built:
- terraform (terraform_0_12)
- terraform-full
- terragrunt

authors: bhipple marsam


text:
gitlab: 13.0.6 -> 13.0.8

Motivation for this change
https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release
This bumps less further than https://github.com/NixOS/nixpkgs/pull/92057, but actually builds :-)
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[x] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

@GrahamcOfBorg test gitlab

We need another bump to 13.0.9: https://about.gitlab.com/releases/2020/07/06/critical-security-release-gitlab-13-1-3-released

authors: flokli jonringer