Katharina Fey
f9d0500403
libkookie: fix issues from updating nixpkgs
3 years ago
Katharina Fey
9b013c3998
Merge commit '17bbfcccd316c29f20e366f838304011f8866805' into wip/yesman
3 years ago
Katharina Fey
4fe31aca6b
euro-yesman-1u: work in progress board updates
3 years ago
17bbfcccd3
cargo-watch: 7.7.2 -> 7.8.0
3 years ago
dfacb8329b
nym: remove unused inputs
3 years ago
f9104687f6
nym: 0.8.1 -> 0.10.0
3 years ago
28907d3bff
Merge pull request #121677 from fabaff/bump-labelbox
...
python3Packages.labelbox: 2.5.1 -> 2.5.4
3 years ago
59bf1c28dc
kubecfg: 0.18.0 -> 0.19.0 ( #121884 )
3 years ago
6a09bc4405
Merge pull request #121865 from mweinelt/home-assistant
3 years ago
51836ac425
Merge pull request #121705 from mweinelt/esphome
...
esphome: 1.16.0 -> 1.17.1
3 years ago
8e84cafcd9
Merge pull request #121654 from Ericson2314/darwin-cross-prep
...
treewide: Do a number of no-op cleanups for cross and darwin
3 years ago
67c476a5cc
Merge pull request #121682 from dasj19/clementine-translations
...
clementine: added support for translations
3 years ago
3548951109
Merge pull request #121256 from FliegendeWurst/k3b-ffmpeg
...
k3b: ffmpeg_3 -> ffmpeg
3 years ago
470640e7fe
treewide: Do a number of no-op cleanups for cross and darwin
...
I am taking the non-invasive parts of #110914 to hopefully help out with #111988 .
In particular:
- Use `lib.makeScopeWithSplicing` to make the `darwin` package set have
a proper `callPackage`.
- Adjust Darwin `stdenv`'s overlays keeping things from the previous
stage to not stick around too much.
- Expose `binutilsNoLibc` / `darwin.binutilsNoLibc` to hopefully get us
closer to a unified LLVM and GCC bootstrap.
3 years ago
0fbace6296
Merge pull request #119405 from hercules-ci/openapi-generator-cli-jre-headless
...
openapi-generator-cli: Use headless jre
3 years ago
398b0cf6bd
python3Packages.PyRMVtransport: 0.3.1 -> 0.3.2
3 years ago
24adc01e2e
nixos/home-assistant: allow netlink sockets and /proc/net inspection
...
Since v2021.5.0 home-assistant uses the ifaddr library in the zeroconf
component to enumerate network interfaces via netlink. Since discovery
is all over the place lets allow AF_NETLINK unconditionally.
It also relies on pyroute2 now, which additionally tries to access files
in /proc/net, so we relax ProtectProc a bit by default as well.
This leaves us with these options unsecured:
✗ PrivateNetwork= Service has access to the host's network 0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3
✗ DeviceAllow= Service has a device ACL with some special devices 0.1
✗ IPAddressDeny= Service does not define an IP address allow list 0.2
✗ PrivateDevices= Service potentially has access to hardware devices 0.2
✗ PrivateUsers= Service has access to other users 0.2
✗ SystemCallFilter=~@resources System call allow list defined for service, and @resources is included (e.g. ioprio_set is allowed) 0.2
✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1
✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1
✗ SupplementaryGroups= Service runs with supplementary groups 0.1
✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1
✗ ProcSubset= Service has full access to non-process /proc files (/proc subset=) 0.1
→ Overall exposure level for home-assistant.service: 1.6 OK 🙂
3 years ago
eb21311135
Merge pull request #121621 from xwvvvvwx/turbo-geth-2021.04.05
...
turbo-geth 2021.02.01 -> 2021.04.05
3 years ago
9332725620
Merge pull request #121850 from asymmetric/polkadot/0.9.0
...
polkadot: 0.8.30 -> 0.9.0
3 years ago
66fd2ea7ee
openapi-generator-cli: Invoke install hooks
3 years ago
cd855e6746
openapi-generator-cli: Use jre_headless
3 years ago
99d5c97a8c
openapi-generator-cli: Add passthru.tests.example
3 years ago
a4c8569ed5
Merge pull request #121900 from hercules-ci/update-openapi-generator-cli
...
openapi-generator-cli: 5.0.0 -> 5.1.0
3 years ago
93f6089d14
Merge pull request #121914 from primeos/chromiumBeta
...
chromiumBeta: 91.0.4472.27 -> 91.0.4472.38
3 years ago
4e783a4cb7
Merge pull request #121724 from Izorkin/update-netdata
...
netdata: 1.29.3 -> 1.30.1
3 years ago
6f6ec9e6f0
chromiumBeta: 91.0.4472.27 -> 91.0.4472.38
3 years ago
b418e17a4c
Merge pull request #120646 from dotlambda/qtwebengine-ffmpeg
...
libsForQt5.qtwebengine: use ffmpeg instead of ffmpeg_3
3 years ago
bda9e192dd
Merge pull request #120582 from dotlambda/ffmpeg_2-drop
...
ffmpeg_2: mark as insecure
3 years ago
46ecc3e1d3
Merge pull request #121845 from fortuneteller2k/fix-and-update-vieb
...
vieb: 3.4.0 -> 4.5.1
3 years ago
5b69bdf891
Merge pull request #121168 from dotlambda/djvulibre-3.5.28
...
djvulibre: 3.5.27 -> 3.5.28
3 years ago
30c3036793
Merge pull request #121151 from dotlambda/libdeltachat-init
...
libdeltachat: init at 1.54.0
3 years ago
688fee8b8a
pythonPackages.pgpy: 0.5.2 -> 0.5.4 ( #121270 )
...
https://github.com/SecurityInnovation/PGPy/releases/tag/v0.5.3
https://github.com/SecurityInnovation/PGPy/releases/tag/v0.5.4
3 years ago
e32d497623
Merge pull request #121899 from hercules-ci/update-elm-json
...
elmPackages.elm-json: 0.2.7 -> 0.2.10
3 years ago
89fffee73f
openapi-generator-cli: 5.0.0 -> 5.1.0
3 years ago
377f9ca78d
elmPackages.elm-json: 0.2.7 -> 0.2.10
3 years ago
a50b9e6c23
Merge pull request #113716 from Ma27/wpa_multiple
...
wpa_supplicant: allow both imperative and declarative networks
3 years ago
77b82f3535
Merge pull request #121875 from Infinisil/small-module-arg-optimization
...
lib/modules: Small optimization
3 years ago
9802eed170
vieb: 3.4.0 -> 4.5.1
3 years ago
74c58a962b
Merge pull request #121877 from marsam/update-nodejs-16_x
...
nodejs-16_x: 16.0.0 -> 16.1.0
3 years ago
625842b8cf
terraform_0_15: 0.15.1 -> 0.15.2 ( #121859 )
...
https://github.com/hashicorp/terraform/releases/tag/v0.15.2
3 years ago
882dd01186
Merge pull request #121879 from r-ryantm/auto-update/gitleaks
...
gitleaks: 7.4.1 -> 7.5.0
3 years ago
Katharina Fey
8c2ba6c1be
euro-yesman-1u: code dump, doesn't work
3 years ago
123db83348
Merge pull request #121882 from r-ryantm/auto-update/go-ethereum
...
go-ethereum: 1.10.2 -> 1.10.3
3 years ago
21f54d2478
Merge pull request #121876 from centromere/openethereum-3.2.5
...
openethereum: 3.2.4 -> 3.2.5
3 years ago
87a0e85736
Merge pull request #121799 from r-ryantm/auto-update/free42
...
free42: 3.0.2 -> 3.0.3
3 years ago
b334d0dc2b
go-ethereum: 1.10.2 -> 1.10.3
3 years ago
7155c11426
Merge pull request #121871 from otavio/topic/anydesk-6-1-1
...
anydesk: 6.1.0 -> 6.1.1
3 years ago
4f8435de76
gitleaks: 7.4.1 -> 7.5.0
3 years ago
ce0e20df34
Merge pull request #121347 from r-ryantm/auto-update/cargo-watch
...
cargo-watch: 7.6.1 -> 7.7.2
3 years ago
d4d3f29223
Merge pull request #121656 from r-ryantm/auto-update/kbs2
...
kbs2: 0.2.6 -> 0.3.0
3 years ago
Katharina Fey
R. RyanTM