+1
-1
ci/OWNERS
+1
-1
ci/OWNERS
···
+2
nixos/doc/manual/release-notes/rl-2411.section.md
+2
nixos/doc/manual/release-notes/rl-2411.section.md
···- `grafana` has been updated to version 11.1. This version doesn't support setting `http_addr` to a hostname anymore, an IP address is expected.+- `deno` has been updated to v2 which has breaking changes. Upstream will be abandoning v1 soon but for now you can use `deno_1` if you are yet to migrate (will be removed prior to cutting a final 24.11 release).- `knot-dns` has been updated to version 3.4.x. Check the [migration guide](https://www.knot-dns.cz/docs/latest/html/migration.html#upgrade-3-3-x-to-3-4-x) for breaking changes.
+80
-3
nixos/modules/security/pam.nix
+80
-3
nixos/modules/security/pam.nix
······{ name = "ssh_agent_auth"; enable = config.security.pam.sshAgentAuth.enable && cfg.sshAgentAuth; control = "sufficient"; modulePath = "${pkgs.pam_ssh_agent_auth}/libexec/pam_ssh_agent_auth.so"; settings = {+(let inherit (config.security.pam) rssh; in { name = "rssh"; enable = rssh.enable && cfg.rssh; control = "sufficient"; modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so"; inherit (rssh) settings; })(let p11 = config.security.pam.p11; in { name = "p11"; enable = cfg.p11Auth; control = p11.control; modulePath = "${pkgs.pam_p11}/lib/security/pam_p11.so"; args = [···-optionalSudoConfigForSSHAgentAuth = lib.optionalString config.security.pam.sshAgentAuth.enable ''···+Specifying user-writeable files here results in an insecure configuration: a malicious process+This option is ignored if {option}`security.pam.rssh.settings.authorized_keys_command` is set.+If both this option and {option}`security.pam.rssh.settings.authorized_keys_command` are unset,···+enable -> (settings.auth_key_file or null != null || settings.authorized_keys_command or null != null);''config.security.pam.sshAgentAuth.authorizedKeysFiles contains files in the user's home directory.a malicious process can then edit such an authorized_keys file and bypass the ssh-agent-based authentication.+enable && settings.auth_key_file or null != null && settings.authorized_keys_command or null != null) ''
+4
-3
pkgs/applications/editors/emacs/elisp-packages/manual-packages/lsp-bridge/default.nix
+4
-3
pkgs/applications/editors/emacs/elisp-packages/manual-packages/lsp-bridge/default.nix
···
+5
-5
pkgs/applications/version-management/glab/default.nix
pkgs/by-name/gl/glab/package.nix
+5
-5
pkgs/applications/version-management/glab/default.nix
pkgs/by-name/gl/glab/package.nix
···
+2
-2
pkgs/applications/version-management/subversion/default.nix
+2
-2
pkgs/applications/version-management/subversion/default.nix
+2
-2
pkgs/by-name/bi/biglybt/package.nix
+2
-2
pkgs/by-name/bi/biglybt/package.nix
···url = "https://github.com/BiglySoftware/BiglyBT/releases/download/v${version}/GitHub_BiglyBT_unix.tar.gz";
+116
pkgs/by-name/ch/chrony/package.nix
+116
pkgs/by-name/ch/chrony/package.nix
···
+12
pkgs/by-name/de/deno/1/librusty_v8.nix
+12
pkgs/by-name/de/deno/1/librusty_v8.nix
···
+118
pkgs/by-name/de/deno/1/package.nix
+118
pkgs/by-name/de/deno/1/package.nix
···+# The v8 package will try to download a `librusty_v8.a` release at build time to our read-only filesystem+Given a URL to a Deno program, it is runnable with nothing more than the ~15 megabyte zipped executable.+Among other things, Deno is a great replacement for utility scripts that may have been historically written with+# NOTE: `aligned_alloc` error on darwin SDK < 10.15. Can't do usual overrideSDK with rust toolchain in current implementation.
+1
pkgs/by-name/de/deno/1/tests/basic.ts
+1
pkgs/by-name/de/deno/1/tests/basic.ts
···
+79
pkgs/by-name/de/deno/1/tests/default.nix
+79
pkgs/by-name/de/deno/1/tests/default.nix
···
+1
pkgs/by-name/de/deno/1/tests/import-json/data.json
+1
pkgs/by-name/de/deno/1/tests/import-json/data.json
···
+2
pkgs/by-name/de/deno/1/tests/import-json/index.ts
+2
pkgs/by-name/de/deno/1/tests/import-json/index.ts
+3
pkgs/by-name/de/deno/1/tests/import-ts/index.ts
+3
pkgs/by-name/de/deno/1/tests/import-ts/index.ts
+3
pkgs/by-name/de/deno/1/tests/import-ts/lib.ts
+3
pkgs/by-name/de/deno/1/tests/import-ts/lib.ts
+1
pkgs/by-name/de/deno/1/tests/read-file/data.txt
+1
pkgs/by-name/de/deno/1/tests/read-file/data.txt
···
+5
pkgs/by-name/de/deno/1/tests/read-file/index.ts
+5
pkgs/by-name/de/deno/1/tests/read-file/index.ts
+21
pkgs/by-name/de/deno/fetchers.nix
+21
pkgs/by-name/de/deno/fetchers.nix
···+url = "https://github.com/denoland/rusty_v8/releases/download/v${args.version}/librusty_v8_release_${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
+7
-18
pkgs/by-name/de/deno/librusty_v8.nix
+7
-18
pkgs/by-name/de/deno/librusty_v8.nix
···-url = "https://github.com/denoland/rusty_v8/releases/download/v${args.version}/librusty_v8_release_${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
+16
-11
pkgs/by-name/de/deno/package.nix
+16
-11
pkgs/by-name/de/deno/package.nix
······# The v8 package will try to download a `librusty_v8.a` release at build time to our read-only filesystem···
+41
-30
pkgs/by-name/de/deno/tests/default.nix
+41
-30
pkgs/by-name/de/deno/tests/default.nix
······
+1
-1
pkgs/by-name/de/deno/tests/import-json/index.ts
+1
-1
pkgs/by-name/de/deno/tests/import-json/index.ts
+5
-9
pkgs/by-name/de/deno/update/common.ts
+5
-9
pkgs/by-name/de/deno/update/common.ts
······
+7
-14
pkgs/by-name/de/deno/update/librusty_v8.ts
+7
-14
pkgs/by-name/de/deno/update/librusty_v8.ts
······-url = "https://github.com/denoland/rusty_v8/releases/download/v\${args.version}/librusty_v8_release_\${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
+3
-3
pkgs/by-name/ex/exo/package.nix
+3
-3
pkgs/by-name/ex/exo/package.nix
···
+2
-5
pkgs/by-name/li/librewolf-bin/package.nix
+2
-5
pkgs/by-name/li/librewolf-bin/package.nix
···url = "https://gitlab.com/api/v4/projects/24386000/packages/generic/librewolf/${upstreamVersion}/LibreWolf.x86_64.AppImage";···
+2
-2
pkgs/by-name/mo/mold/package.nix
+2
-2
pkgs/by-name/mo/mold/package.nix
···
+2
-2
pkgs/by-name/mu/music-assistant/package.nix
+2
-2
pkgs/by-name/mu/music-assistant/package.nix
···
+13
pkgs/by-name/te/terraform-docs/package.nix
+13
pkgs/by-name/te/terraform-docs/package.nix
······
+11
-11
pkgs/by-name/tt/ttop/lock.json
+11
-11
pkgs/by-name/tt/ttop/lock.json
···-"url": "https://github.com/Yardanico/asciigraph/archive/9f51fc4e94d0960ab63fa6ea274518159720aa69.tar.gz"+"url": "https://github.com/nimbackup/asciigraph/archive/9f51fc4e94d0960ab63fa6ea274518159720aa69.tar.gz"-"url": "https://github.com/johnnovak/illwill/archive/1d12cb36ab7b76c31d2d25fa421013ecb382e625.tar.gz"+"url": "https://github.com/johnnovak/illwill/archive/99a120f7f69868b94f5d35ce7e21dd12535de70c.tar.gz"···-"url": "https://github.com/guzba/zippy/archive/9560f3d20479fb390c97f731ef8d100f1ed54e6c.tar.gz"+"url": "https://github.com/guzba/zippy/archive/a99f6a7d8a8e3e0213b3cad0daf0ea974bf58e3f.tar.gz"
+2
-2
pkgs/by-name/tt/ttop/package.nix
+2
-2
pkgs/by-name/tt/ttop/package.nix
···
+1
-1
pkgs/by-name/ze/zed-editor/Cargo.lock
+1
-1
pkgs/by-name/ze/zed-editor/Cargo.lock
+2
-2
pkgs/by-name/ze/zed-editor/package.nix
+2
-2
pkgs/by-name/ze/zed-editor/package.nix
···
+31
pkgs/development/compilers/llvm/19/libclc/use-default-paths.patch
+31
pkgs/development/compilers/llvm/19/libclc/use-default-paths.patch
···+@@ -55,7 +55,7 @@ if( LIBCLC_STANDALONE_BUILD OR CMAKE_SOURCE_DIR STREQUAL CMAKE_CURRENT_SOURCE_DI
+6
pkgs/development/compilers/llvm/common/default.nix
+6
pkgs/development/compilers/llvm/common/default.nix
+63
-24
pkgs/development/compilers/llvm/common/libclc.nix
+63
-24
pkgs/development/compilers/llvm/common/libclc.nix
···-{ lib, stdenv, version, runCommand, monorepoSrc, llvm, buildPackages, buildLlvmTools, ninja, cmake, python3 }:···# cmake expects all required binaries to be in the same place, so it will not be able to find clang without the patch---replace 'find_program( LLVM_CLANG clang PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \---replace 'find_program( LLVM_LINK llvm-link PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \---replace 'find_program( LLVM_SPIRV llvm-spirv PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \-'find_program( LLVM_SPIRV llvm-spirv PATHS "${buildPackages.spirv-llvm-translator.override { inherit (buildLlvmTools) llvm; }}/bin" NO_DEFAULT_PATH )'---replace 'COMMAND prepare_builtins' 'COMMAND ${buildLlvmTools.libclc.dev}/bin/prepare_builtins'+--replace 'find_program( LLVM_CLANG clang PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \+--replace 'find_program( LLVM_LINK llvm-link PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \+--replace 'find_program( LLVM_SPIRV llvm-spirv PATHS ''${LLVM_TOOLS_BINARY_DIR} NO_DEFAULT_PATH )' \+--replace 'COMMAND prepare_builtins' 'COMMAND ${buildLlvmTools.libclc.dev}/bin/prepare_builtins'
+122
-85
pkgs/development/compilers/spirv-llvm-translator/default.nix
+122
-85
pkgs/development/compilers/spirv-llvm-translator/default.nix
·········-url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/d970c9126c033ebcbb7187bc705eae2e54726b74.patch";-url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/0166a0fb86dc6c0e8903436bbc3a89bc3273ebc0.patch";-url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/f3b9b604d7eda18d0d1029d94a6eebd33aa3a3fe.patch";-url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/cce9a2f130070d799000cac42fe24789d2b777ab.patch";+url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/d970c9126c033ebcbb7187bc705eae2e54726b74.patch";+url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/0166a0fb86dc6c0e8903436bbc3a89bc3273ebc0.patch";+url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/f3b9b604d7eda18d0d1029d94a6eebd33aa3a3fe.patch";+url = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator/commit/cce9a2f130070d799000cac42fe24789d2b777ab.patch";-] ++ lib.optional (llvmMajor != "11") "-DLLVM_EXTERNAL_SPIRV_HEADERS_SOURCE_DIR=${spirv-headers.src}";+++ lib.optional (llvmMajor != "11") "-DLLVM_EXTERNAL_SPIRV_HEADERS_SOURCE_DIR=${spirv-headers.src}"+++ lib.optional (llvmMajor == "19") "-DBASE_LLVM_VERSION=${lib.versions.majorMinor llvm.version}.0";description = "Tool and a library for bi-directional translation between SPIR-V and LLVM IR";
+2
-2
pkgs/development/libraries/level-zero/default.nix
+2
-2
pkgs/development/libraries/level-zero/default.nix
···
+2
-2
pkgs/development/python-modules/beancount-black/default.nix
+2
-2
pkgs/development/python-modules/beancount-black/default.nix
······
+3
-3
pkgs/development/python-modules/cgal/default.nix
+3
-3
pkgs/development/python-modules/cgal/default.nix
···
+55
pkgs/development/python-modules/drf-extra-fields/default.nix
+55
pkgs/development/python-modules/drf-extra-fields/default.nix
···
+2
-2
pkgs/development/python-modules/labelbox/default.nix
+2
-2
pkgs/development/python-modules/labelbox/default.nix
······
+43
pkgs/development/python-modules/netbox-documents/default.nix
+43
pkgs/development/python-modules/netbox-documents/default.nix
···+description = "Plugin designed to faciliate the storage of site, circuit, device type and device specific documents within NetBox";
+46
pkgs/development/python-modules/opentelemetry-instrumentation-celery/default.nix
+46
pkgs/development/python-modules/opentelemetry-instrumentation-celery/default.nix
···+sourceRoot = "${opentelemetry-instrumentation.src.name}/instrumentation/opentelemetry-instrumentation-celery";+homepage = "https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/instrumentation/opentelemetry-instrumentation-celery";
+7
pkgs/development/python-modules/plotly/default.nix
+7
pkgs/development/python-modules/plotly/default.nix
······# FAILED plotly/matplotlylib/mplexporter/tests/test_basic.py::test_legend_dots - AssertionError: assert '3' == '2'···# FAILED test_init/test_lazy_imports.py::test_lazy_imports - AssertionError: assert 'plotly' not in {'IPython': <module 'IPython' from '...
+66
-54
pkgs/development/python-modules/tokenizers/Cargo.lock
+66
-54
pkgs/development/python-modules/tokenizers/Cargo.lock
··································································
+4
-3
pkgs/development/python-modules/tokenizers/default.nix
+4
-3
pkgs/development/python-modules/tokenizers/default.nix
···url = "https://s3.amazonaws.com/models.huggingface.co/bert/anthony/doc-pipeline/tokenizer.json";······
+8
-8
pkgs/os-specific/linux/kernel/kernels-org.json
+8
-8
pkgs/os-specific/linux/kernel/kernels-org.json
······
+2
-2
pkgs/os-specific/linux/kernel/linux-libre.nix
+2
-2
pkgs/os-specific/linux/kernel/linux-libre.nix
···
+2
pkgs/servers/home-assistant/custom-components/default.nix
+2
pkgs/servers/home-assistant/custom-components/default.nix
+2
-2
pkgs/servers/home-assistant/custom-components/miele/default.nix
+2
-2
pkgs/servers/home-assistant/custom-components/miele/default.nix
···
+30
pkgs/servers/home-assistant/custom-components/nest_protect/default.nix
+30
pkgs/servers/home-assistant/custom-components/nest_protect/default.nix
···
-64
pkgs/tools/networking/chrony/default.nix
-64
pkgs/tools/networking/chrony/default.nix
···
pkgs/tools/networking/chrony/makefile.patch
pkgs/by-name/ch/chrony/makefile.patch
pkgs/tools/networking/chrony/makefile.patch
pkgs/by-name/ch/chrony/makefile.patch
+3
-3
pkgs/tools/system/netdata/default.nix
+3
-3
pkgs/tools/system/netdata/default.nix
······
+5
-2
pkgs/tools/video/rtmpdump/default.nix
+5
-2
pkgs/tools/video/rtmpdump/default.nix
···
+2
-1
pkgs/top-level/aliases.nix
+2
-1
pkgs/top-level/aliases.nix
······cq-editor = throw "cq-editor has been removed, as it use a dependency that was disabled since python 3.8 and was last updated in 2021"; # Added 2024-05-13···libcap_pam = throw "'libcap_pam' has been replaced with 'libcap'"; # Converted to throw 2023-09-10libdwarf_20210528 = throw "'libdwarf_20210528' has been removed because it is not used in nixpkgs, move to libdwarf"; # Added 2024-03-23
+3
-4
pkgs/top-level/all-packages.nix
+3
-4
pkgs/top-level/all-packages.nix
············
+6
pkgs/top-level/python-packages.nix
+6
pkgs/top-level/python-packages.nix
·········opentelemetry-instrumentation-aiohttp-client = callPackage ../development/python-modules/opentelemetry-instrumentation-aiohttp-client { };opentelemetry-instrumentation-asgi = callPackage ../development/python-modules/opentelemetry-instrumentation-asgi { };+opentelemetry-instrumentation-celery = callPackage ../development/python-modules/opentelemetry-instrumentation-celery { };opentelemetry-instrumentation-dbapi = callPackage ../development/python-modules/opentelemetry-instrumentation-dbapi { };