Master commit: e52396c.  It's bugfixes, basically.

…19.03

treewide: use runtimeShell instead of stdenv.shell whenever possible for 19.03

Changes: elementary/gala@7f1e392...1a96644
(cherry picked from commit f995b91)

(cherry picked from commit d53aefd)

It used to be huge, but current measurements reveal a 48mb NAR

(cherry picked from commit 0ea3b395372cc1e400340c8b04d17c1277bf3f03)

System rebuilds currently fail due to collisions.
See also #56432.

(cherry picked from commit 029adf9)

has been broken by dadc7eb

(cherry picked from commit 1d1c909)

nvidia_x11 and persistenced were modified to provide binaries which can be
mounted inside a docker-container to be executed there.

most ldconfig-based discovery of bundled nvidia libraries is patched out

ldconfig itself is patched to be able to deal with patchelf'ed libraries
See https://sourceware.org/bugzilla/show_bug.cgi?id=23964

(cherry picked from commit 515be3b)

(cherry picked from commit 48f1455)

nvidia-docker 19.03

(cherry picked from commit fce6329)

(cherry picked from commit 1a7c2b3)

(cherry picked from commit ca8fd54)

This reverts commit 0b91fa4, reversing
changes made to 183919a.

(cherry picked from commit 23b2a60)

[19.03] Mark Riak and Riak-cs as insecure

(cherry picked from commit b8285fc)

(cherry picked from commit 6ad4e3e)
It's basically just bugfixes, and 19.03 hasn't even been released yet.

... into release-19.03.  (Cherry-picked from 35cf2c8.)
The branch is affected by the stdenv change differentiating the numbers,
and I believe consistency with master will be good here.

(cherry picked from commit 2e5f64b)

(cherry picked from commit 52ea2f5)

With the openssl upgrade to 1.0.2r / 1.1.1b the tinc pre-release version
stopped working due to a bug in tinc where an encryption function was
used during decryption. I submitted a patch upstream [1] but that wasn't
released yet.

[1] http://git.tinc-vpn.org/git/browse?p=tinc;a=commit;h=2b0aeec02d64bb4724da9ff1dbc19b7d35d7c904

(cherry picked from commit 447c210)

a vlaue between 0 and 4 to help debug problems

(cherry picked from commit 20bbfc3)

The overwriteprotocol option can be used to force Nextcloud to generate
URLs with the given protocol. This is useful for instances behind
reverse proxies that serve Nextcloud with HTTPS.

In this case Nextcloud can't determine the proper protocol and it needs
to be configured manually.

(cherry picked from commit b42c24f)

First release in over a year, not sure of changelog.

Release announcement:
http://lists.litech.org/pipermail/radvd-announce-l/2019-February/000045.html

(cherry picked from commit e8f4e5a)

(cherry picked from commit bc7d45e)

(cherry picked from commit 03bbab8)

(cherry picked from commit d59a40c)

(cherry picked from commit 692a763)

(cherry picked from commit b01302b)

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/ibus-typing-booster/versions

(cherry picked from commit 6766409)
Signed-off-by: Maximilian Bosch <maximilian@mbosch.me>

redmine: 3.4.8 -> 3.4.9 & 4.0.1 -> 4.0.2
(cherry picked from commit 7093aa5)

According to xsecurelock's configure.ac file, each of the add
dependencies are used to:

- libXrandr: XRandR provides information about monitor layouts and is
strongly recommended on systems which can use more than one monitor
(which includes most laptops).
- libXext: The X Synchronization extension is used to get per-device idle
times. Used by until_nonidle only.
- libXScrnSaver: The X11 Screen Saver extension is used to turn off the
screen saver when X11 handles screen blanking (e.g. via timeout) anyway.
Saves CPU power.

Adding libXrandr fixes an issue where locking a screen in a multi
monitor setup results in the prompt information to not be in the middle
of the screen. The other dependencies are not tested if they fixed
something, however since upstream recommends than I think it is fair to
include them also.

(cherry picked from commit d2d7fed)

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/brave/versions

(cherry picked from commit edccde3)

(cherry picked from commit df77847)

(cherry picked from commit 86199e0)

(cherry picked from commit 63bd0d5)

(cherry picked from commit 81b6dd7)

graylog-plugin-aggregates: 2.3.0 -> 2.4.0
graylog-plugin-auth-sso: 2.4.2 -> 3.0.0
(cherry picked from commit 76b3c57)

(cherry picked from commit 9efddfa)

If our old Nix can’t evaluate the Nixpkgs channel, try the fallback
from the new channel /first/. That way we can upgrade Nix to a newer
version and support breaking changes to Nix (like seen in the upgrade
o Nix 2.0).

This change should be backported to older NixOS versions!

(cherry picked from commit 475c8aa)

…l further testing, since it is currently broken (segfaults)