Unverified Commit 9b6cd892 authored by github-actions[bot]'s avatar github-actions[bot] Committed by GitHub
Browse files

Merge staging-next into staging

parents 59313093 b415f9c2

nixos/doc/manual/release-notes/rl-2411.section.md

+5 −0
Original line number Diff line number Diff line
@@ -584,6 +584,11 @@ 


- The `rustic` package was upgrade to `0.9.0`, which contains [breaking changes to the config file format](https://github.com/rustic-rs/rustic/releases/tag/v0.9.0).



- `pkgs.formats.ini` and `pkgs.formats.iniWithGlobalSection` with

  `listsAsDuplicateKeys` or `listToValue` no longer merge non-list values into

  lists by default. Backwards-compatible behavior can be enabled with

  `atomsCoercedToLists`.



## Other Notable Changes {#sec-release-24.11-notable-changes}



<!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

nixos/modules/services/web-apps/gerrit.nix

+21 −0
Original line number Diff line number Diff line
@@ -222,6 +222,27 @@ in 
        StandardOutput = "journal";

        StateDirectory = "gerrit";

        WorkingDirectory = "%S/gerrit";

        AmbientCapabilities = "";

        CapabilityBoundingSet = "";

        LockPersonality = true;

        NoNewPrivileges = true;

        PrivateDevices = true;

        PrivateTmp = true;

        ProtectClock = true;

        ProtectControlGroups = true;

        ProtectHome = true;

        ProtectHostname = true;

        ProtectKernelLogs = true;

        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectProc = "noaccess";

        ProtectSystem = "full";

        RestrictAddressFamilies = [ "AF_UNIX" "AF_INET" "AF_INET6" ];

        RestrictNamespaces = true;

        RestrictRealtime = true;

        RestrictSUIDSGID = true;

        SystemCallArchitectures = "native";

        UMask = 027;

      };

    };

  };

pkgs/applications/editors/vscode/vscodium.nix

+6 −6
Original line number Diff line number Diff line
@@ -15,11 +15,11 @@ let 
  archive_fmt = if stdenv.hostPlatform.isDarwin then "zip" else "tar.gz";



  sha256 = {

    x86_64-linux = "0hq2w9rc54qy6234njx6xfh3m1p3d206lr22sdxxa3snnrh4vrs8";

    x86_64-darwin = "0knkn4i6vvszxqzsv9564bbassqgszr8bfa4l7hsqy25ki37k5ln";

    aarch64-linux = "1k9qvymc7yfq8ihlbx8676gsjyfhg41acc5p4lrw9ci0a3sqanz9";

    aarch64-darwin = "029sdf0h9fcviv6qdphzlgb1qhy24vj79h465mf559gdih21xlp4";

    armv7l-linux = "16lwgagg2i6mwqm3p2z97di571wgl2hj255pnxqhcz6x9vq26l8p";

    x86_64-linux = "0xbnyi6g5a12bip1vh2b5ap5108gwxa9g9g3ncllllz3ak2jim5r";

    x86_64-darwin = "0linvibppgjr4dwsrjpqd126m8izq757cnwkr0w4bv81k30j1jv6";

    aarch64-linux = "1324p9av9vx8ywz55vdls53b34jp6csnqbm0y94v5azxjvwcr3kj";

    aarch64-darwin = "160mwlz17fb0xq935ih35h8bd7dn7gmvy5szra0jdr754xcgn5z5";

    armv7l-linux = "07dln5mgrhn0569m77rj30443hgk1z7z8xi442lh5y8ib729q10y";

  }.${system} or throwSystem;



  sourceRoot = lib.optionalString (!stdenv.hostPlatform.isDarwin) ".";
@@ -29,7 +29,7 @@ in 


    # Please backport all compatible updates to the stable release.

    # This is important for the extension ecosystem.

    version = "1.94.1.24283";

    version = "1.94.2.24284";

    pname = "vscodium";



    executableName = "codium";

pkgs/applications/misc/p2pool/default.nix

+2 −2
Original line number Diff line number Diff line
@@ -19,13 +19,13 @@ let 
in

stdenv.mkDerivation rec {

  pname = "p2pool";

  version = "4.1";

  version = "4.1.1";



  src = fetchFromGitHub {

    owner = "SChernykh";

    repo = "p2pool";

    rev = "v${version}";

    hash = "sha256-eMg8DXFtVfYhl6vpg/KRUZUgMU/XsCS29Af1CSIbUsY=";

    hash = "sha256-rxsKbrgDdVtGEv63SHi3FbFpqU2j6ESksq0SDm78j+0=";

    fetchSubmodules = true;

  };

pkgs/applications/networking/browsers/palemoon/bin.nix

+3 −3
Original line number Diff line number Diff line
@@ -20,7 +20,7 @@ 


stdenv.mkDerivation (finalAttrs: {

  pname = "palemoon-bin";

  version = "33.3.1";

  version = "33.4.0.1";



  src = finalAttrs.passthru.sources."gtk${if withGTK3 then "3" else "2"}";
@@ -158,11 +158,11 @@ stdenv.mkDerivation (finalAttrs: { 
    in {

      gtk3 = fetchzip {

        urls = urlRegionVariants "gtk3";

        hash = "sha256-auo45tzMY6bKahSEmUrkcYnz7v+GFbsrG+ePAKRC00U=";

        hash = "sha256-34x9L0L42KO7mUDaW41I71ln5xyHGAKBoAJ6HcDC//g=";

      };

      gtk2 = fetchzip {

        urls = urlRegionVariants "gtk2";

        hash = "sha256-7qrT5fSfwcEAkbq8g/HRoUiDv5+qrzpiysjHTdZVgLc=";

        hash = "sha256-TRIgfqKsJxueZ/Oazw7kTLjVyxdh+IUiR+XDaemow9A=";

      };

    };