Staging next #84442

FRidh · 2020-04-06T06:55:05Z

Motivation for this change

https://hydra.nixos.org/jobset/nixpkgs/staging-next

Things done

Since we select everything as a module, snd_hda_codec_ca0132 is built as well. DSP loading is not enabled by default, but without it the soundcard produces timeouts within ALSA and does not emit sound. Explicitly enable the firmware loading to ensure Soundblaster Z/Zx/ZxR/Recon devices can be used with NixOS. The patch to enable this by default in the kernel is staged for 5.8.

tree-wide: Switch from gnome3.maintainers to lib.teams.gnome

fetchpatch can't be used here and fetchurl from GitHub like in PR #82928 has the risk of breaking the hash later; fortunately the patches aren't too large. (cherry picked from commit 2071e3b)

pyca/pyopenssl#899 (comment) The tests in python3.pkgs.pyopenssl succeed! Fixing this problem we experienced is listed as the only major change: https://www.openssl.org/news/openssl-1.1.1-notes.html

cmake: 3.16.5 -> 3.17.0

This contains at least golang/go#37807, which currently causes some of our go binaries to just fail when booted with older kernels. See golang/go#37436 for context.

go_1_14: 1.14 -> 1.14.1

linux config: enable Creative Soundblaster DSP loading

Fixes CVE-2020-11501. Changes: https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html

Adding phases to preInstallPhases is not possible in preBuild since by that time, phases is already populated.

apacheHttpd: 2.4.41 -> 2.4.43

... into staging. Fixes CVE-2020-11501.

also: https://www.cmake.org/Wiki/CMake_RPATH_handling has moved

jonringer · 2020-04-09T18:43:33Z

#84660 should probably be included in this.

This version addresses CVE-2020-5260. See https://lore.kernel.org/lkml/xmqqy2qy7xn8.fsf@gitster.c.googlers.com/

Fixes build regression (after alsa update, I assume). Despite the version number change, the diff is trivial: https://git.alsa-project.org/?p=alsa-tools.git;a=log;h=refs/tags/v1.2.2

vcunat · 2020-04-17T11:56:55Z

There are apparently some python regressions that break e.g. nixops. One way might be to migrate anything important away from python2 anyway, but pyopenssl might be too important...

FRidh · 2020-04-17T12:08:07Z

Probably best to drop nixops in Nixpkgs since it's changed quite a bit upstream cc @adisbladis @grahamc

... most notably fix pyopenssl. I can't say I really understand this, but the commit seems safe enough.

Hydra nixpkgs: ?compare=1582510

vcunat · 2020-04-18T05:44:26Z

I fixed it somehow in 312e903; feel free to improve.

vcunat

On Hydra it looks good. About a third of darwin packages still hasn't been finished, but that risk seems acceptable – on the other hand we have security fixes inside.

adisbladis · 2020-04-18T22:08:22Z

@FRidh A new release of NixOps is still pretty far away, in the mean time we need the current release.

If you'd like I can try to repackage the current release using Poetry/poetry2nix so NixOps won't be blocking any progression in pythonPackages?

vcunat · 2020-04-20T06:20:33Z

I fixed the build of pyopenssl which was blocking it, so nixops builds now and I don't expect you need to hurry with anything.

ghost · 2020-04-21T11:52:33Z

I could need some help with #85668. Both parent commits of this merge commit work fine, but waybar built from the merge commit does not (starts up fine but doesn't show the bar). Any idea what could cause this?

roastiek and others added 30 commits March 29, 2020 20:34

alsa-ucm-conf: init at 1.2.2

4acda90

alsa-topology-conf: init at 1.2.2

f0a6dfc

alsaLib: 1.1.9 -> 1.2.2

4fef426

tree-wide: Switch from gnome3.maintainers to lib.teams.gnome

Verified

This commit was signed with the committer’s verified signature.

jtojnar Jan Tojnar

GPG key ID: 7FAB2A15F7A607A4

Verified
Learn about vigilant mode

15002f1

cmake: 3.16.5 -> 3.17.0

Verified

This commit was signed with the committer’s verified signature.

ttuegel Thomas Tuegel

GPG key ID: 22CBF5249D4B4D59

Verified
Learn about vigilant mode

b18e7e5

apacheHttpd: 2.4.41 -> 2.4.43

f26b2af

Merge pull request #83862 from dasj19/cmake_update

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.

GPG key ID: 4AEE18F83AFDEB23
Expired

Verified
Learn about vigilant mode

40239ac

cmake: 3.16.5 -> 3.17.0

go_1_14: 1.14 -> 1.14.1

da2146d

This contains at least golang/go#37807, which currently causes some of our go binaries to just fail when booted with older kernels. See golang/go#37436 for context.

Merge pull request #83689 from flokli/go-1.14.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.

GPG key ID: 4AEE18F83AFDEB23
Expired

Verified
Learn about vigilant mode

d7f86b3

go_1_14: 1.14 -> 1.14.1

Merge pull request #83658 from Emantor/topic/kernel-snd-ca0132

35916a8

linux config: enable Creative Soundblaster DSP loading

Merge staging-next into staging

edaa972

itstool: fix double-shebang issue on macOS

Unverified

This commit is not signed, but one or more authors requires that any commit attributed to them is signed.

Learn about vigilant mode

da7ac56

itstool: use wrapPython to fix double shebang on macOS

2bec129

graphite2: 1.3.13 -> 1.3.14

bcd9b9b

pythonPackages.click: 7.0 -> 7.1.1

4588e6a

maestral: 0.6.1 -> 0.6.3

022ebea

help2man: 1.47.12 -> 1.47.13

88a6078

automake: 1.16.1 -> 1.16.2

a44ac81

Merge branch 'staging-next' into staging

Verified

This commit was signed with the committer’s verified signature.

jtojnar Jan Tojnar

GPG key ID: 7FAB2A15F7A607A4

Verified
Learn about vigilant mode

5d4c6f7

gnutls: 3.6.12 -> 3.6.13

7cb24f9

Fixes CVE-2020-11501. Changes: https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html

Merge staging-next into staging

ce2321f

Merge #84273: gnutls: 3.6.12 -> 3.6.13 [security]

Verified

This commit was signed with the committer’s verified signature.

vcunat Vladimír Čunát

GPG key ID: E747DF1F9575A3AA

Verified
Learn about vigilant mode

f91b34e

... into staging. Fixes CVE-2020-11501.

llvmPackages: change homepages to https:// scheme

Loading
Loading status checks…

e336bdf

also: https://www.cmake.org/Wiki/CMake_RPATH_handling has moved

ghc883: fix structuredAttrs build

fb015f8

ofborg bot added 8.has: documentation 10.rebuild-darwin-stdenv 10.rebuild-linux-stdenv 8.has: package (new) 10.rebuild-darwin: 501+ 10.rebuild-darwin: 5001+ 10.rebuild-linux: 501+ 10.rebuild-linux: 5001+ labels Apr 6, 2020

python2Packages.cryptography: add missing ipaddress dependency

2e6fb22

ofborg bot added the 2.status: merge conflict label Apr 10, 2020

Merge branch 'master' into staging-next

Verified

This commit was signed with the committer’s verified signature.

jtojnar Jan Tojnar

GPG key ID: 7FAB2A15F7A607A4

Verified
Learn about vigilant mode

1ab03c3

ofborg bot removed the 2.status: merge conflict label Apr 10, 2020

jtojnar and others added 4 commits April 13, 2020 18:50

Merge branch 'master' into staging-next

Verified

This commit was signed with the committer’s verified signature.

jtojnar Jan Tojnar

GPG key ID: 7FAB2A15F7A607A4

Verified
Learn about vigilant mode

a046253

git: 2.25.1 -> 2.26.1

fbd29dc

This version addresses CVE-2020-5260. See https://lore.kernel.org/lkml/xmqqy2qy7xn8.fsf@gitster.c.googlers.com/

Merge branch 'master' into staging-next

Verified

This commit was signed with the committer’s verified signature.

jtojnar Jan Tojnar

GPG key ID: 7FAB2A15F7A607A4

Verified
Learn about vigilant mode

3d8e436

Merge #85263: git: 2.25.1 -> 2.26.1 (into staging-next)

Verified

This commit was signed with the committer’s verified signature.

vcunat Vladimír Čunát

GPG key ID: E747DF1F9575A3AA

Verified
Learn about vigilant mode

9d77dc2

vcunat added the 1.severity: security label Apr 16, 2020

vcunat added 2 commits April 18, 2020 07:39

Merge branch 'master' into staging-next

Verified

This commit was signed with the committer’s verified signature.

vcunat Vladimír Čunát

GPG key ID: E747DF1F9575A3AA

Verified
Learn about vigilant mode

d96487b

Hydra nixpkgs: ?compare=1582510

primeos mentioned this pull request Apr 18, 2020

mitmproxy: 4.0.4 -> 5.1.1 #85458

Merged

10 tasks

vcunat approved these changes Apr 18, 2020

View reviewed changes

vcunat merged commit e233a9d into master Apr 18, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Staging next #84442

Staging next #84442

FRidh commented Apr 6, 2020 •

edited by jtojnar

Loading

jonringer commented Apr 9, 2020

vcunat commented Apr 17, 2020 •

edited

Loading

FRidh commented Apr 17, 2020 •

edited

Loading

vcunat commented Apr 18, 2020

vcunat left a comment

adisbladis commented Apr 18, 2020

vcunat commented Apr 20, 2020

ghost commented Apr 21, 2020 •

edited by ghost

Loading

Staging next #84442

Staging next #84442

Conversation

FRidh commented Apr 6, 2020 • edited by jtojnar Loading

Motivation for this change

Things done

jonringer commented Apr 9, 2020

vcunat commented Apr 17, 2020 • edited Loading

FRidh commented Apr 17, 2020 • edited Loading

vcunat commented Apr 18, 2020

vcunat left a comment

Choose a reason for hiding this comment

adisbladis commented Apr 18, 2020

vcunat commented Apr 20, 2020

ghost commented Apr 21, 2020 • edited by ghost Loading

FRidh commented Apr 6, 2020 •

edited by jtojnar

Loading

vcunat commented Apr 17, 2020 •

edited

Loading

FRidh commented Apr 17, 2020 •

edited

Loading

ghost commented Apr 21, 2020 •

edited by ghost

Loading