Commit Graph

73 Commits

Author SHA1 Message Date
github-actions[bot]
d77a3adc09
Merge master into staging-next 2024-07-03 00:02:45 +00:00
Thomas Gerbet
f9c1615cf3 _389-ds-base: apply patches for CVE-2024-2199 and CVE-2024-3657
https://nvd.nist.gov/vuln/detail/CVE-2024-2199
https://nvd.nist.gov/vuln/detail/CVE-2024-3657
2024-07-02 22:46:47 +02:00
Alyssa Ross
b00f262516 Revert "rustc: disable wasm32 if some gcc options are set"
This reverts commits 6d0ba08b97,
723100d83b, and
bf13eca852.

The underlying issue has now been fixed, so we can re-enable
wasm32-unknown-unknown on all platforms.
2024-06-15 08:02:29 +02:00
Alyssa Ross
3df6bb2c85
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/applications/blockchains/polkadot/default.nix
2024-06-09 22:47:12 +01:00
Alexis Hildebrandt
755b915a15 treewide: Remove indefinite article from meta.description
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*"[Aa]n?' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*")[Aa]n? (.)/\1\U\2/'
2024-06-09 23:07:45 +02:00
Alyssa Ross
6d0ba08b97 lldap: fix eval
Fixes: bf13eca852 ("rustc: disable wasm32 if some gcc options are set")
2024-06-09 16:01:06 +01:00
Alyssa Ross
bf13eca852
rustc: disable wasm32 if some gcc options are set
This is a temporary fix to get rustc building again with these
configurations (which notably include the default aarch64-darwin one)
without causing a stdenv rebuild.  The real fix will be to avoid
passing these options through the Clang wrapper when the target is
overridden.

It could be that there are packages that need wasm32-unknown-unknown
beyond those I've marked as broken here — it's impossible to be sure
without a full rebuild.  But this should be most of them.
2024-06-09 07:20:18 +01:00
Alyssa Ross
f27b3096c3
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/os-specific/linux/util-linux/default.nix
2024-06-04 13:31:26 +01:00
Sigmanificient
d48a9bb622 treewide: remove unused fetchpatch arguments 2024-06-04 12:40:25 +02:00
Alyssa Ross
07f40e6892 rustc: don't try to use non-existent rust-lld
This removes the need to manually override Rust's default linker for
every package that builds for wasm32-unknown-unknown.
2024-05-29 23:08:09 +02:00
Benjamin Staffin
17d94493a0 _389-ds-base: remove broken=true 2024-05-28 16:53:06 -04:00
Benjamin Staffin
ac7eb3979d _389-ds-base: add fix-32bit patch
Co-authored-by: Robert Scott <github@humanleg.org.uk>
2024-05-28 16:52:49 -04:00
h7x4
b511f3e2ed _389-ds-base: 2.4.3 -> 2.4.5 2024-05-28 16:52:35 -04:00
Vladimír Čunát
ddc361cfca
Merge #287594: glibc: 2.38-44 -> 2.39-5
...into staging
2024-03-24 06:41:49 +01:00
stuebinm
ff1a94e523 treewide: add meta.mainProgram to packages with a single binary
The nixpkgs-unstable channel's programs.sqlite was used to identify
packages producing exactly one binary, and these automatically added
to their package definitions wherever possible.
2024-03-19 03:14:51 +01:00
emilylange
7501889950 lldap: remove emilylange from maintainers
I find lldap's defaults security-wise and its security-posture in a
broader sense deeply unsettling for something as security-critical an
authentication server.
2024-03-11 17:34:29 +01:00
Maximilian Bosch
1c003da73c
_389ds-base: mark as broken
Doesn't build with glibc 2.39. There's a potential fix documented in
https://github.com/389ds/389-ds-base/issues/5332, but the package is too
old for the patch to apply, so I'll mark it as broken for now and leave
it to the maintainer to update & fix.
2024-03-02 19:01:51 +01:00
Alyssa Ross
989723ecf2 rustc-wasm32: merge into rustc
Since wasm32-unknown-unknown doesn't require any extra
platform-specific dependencies (e.g. libc), we might as well just
always include in with rustc.  We could also include other targets
fitting these criteria, but I wasn't able to find any others that
actually build (not even wasm64-unknown-unknown).

The old rustc-wasm32 package disabled documentation, but we don't
actually need to do that — we just need to allow for some broken links
in the wasm32-unknown-unknown documentation.  Broken links in
documentation are an upstream issue anyway.  There's no need we need
to fail our build for them.
2023-12-05 15:09:28 +01:00
Peder Bergebakken Sundt
187afc5d1b rustc-wasm32: init at 1.70.0 2023-09-18 08:13:58 +00:00
emilylange
bdf8c4b61d
lldap: 0.4.3 -> 0.5.0
https://github.com/lldap/lldap/releases/tag/v0.5.0
https://github.com/lldap/lldap/blob/v0.5.0/CHANGELOG.md
diff: https://github.com/lldap/lldap/compare/v0.4.3...v0.5.0
2023-09-14 23:01:35 +02:00
Weijia Wang
2e987451a9
Merge pull request #247324 from kirillrdy/389
_389-ds-base: 2.4.2 -> 2.4.3
2023-08-05 18:25:45 +02:00
Kirill Radzikhovskyy
f5a3150101 _389-ds-base: 2.4.2 -> 2.4.3 2023-08-05 21:13:12 +10:00
Emily
9f8d4f0d4b
Merge pull request #232070 from jneem/wasm-bindgen-bump
wasm-bindgen-cli: 0.2.84 -> 0.2.87
2023-08-04 13:53:34 +02:00
Jan Malakhovski
5852f26bdc treewide: noop: refer to src.name or similar in sourceRoot where appropriate, part 1: trivial cases 2023-08-03 16:32:03 +00:00
Joe Neeman
b6910512a0 wasm-bindgen-cli: 0.2.84 -> 0.2.87
Also allow overriding the version
2023-08-02 17:47:26 -05:00
Robert Hensing
f8f9f13d57
Merge pull request #246386 from hercules-ci/lib-getExe-dont-make-name-assumption
lib.getExe: Do not make assumptions about the main program
2023-08-02 20:05:52 +02:00
Robert Hensing
4c1d3cee60 treewide: Add meta.mainProgram
This should fix most warnings getExe in based on grepping `nixos/`.
2023-07-31 21:54:43 +02:00
Thomas Gerbet
6760151c49 _389-ds-base: 2.4.1 -> 2.4.2
Fixes CVE-2022-2850.

https://www.port389.org/docs/389ds/releases/release-2-4-2.html
2023-07-14 14:43:55 +02:00
Weijia Wang
dc57610254 _389-ds-base: 2.3.1 -> 2.4.1 2023-05-26 13:31:03 +03:00
emilylange
b0e7f7f5db
maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
figsoda
6c72ee0ffc
Merge pull request #232114 from ipetkov/wasm-pack-0.11.1
wasm-pack: 0.11.0 -> 0.11.1
2023-05-15 22:26:59 -04:00
Ivan Petkov
5c6f7afda1
lldap: use upstream wasm-pack 2023-05-15 15:40:24 -07:00
Herwig Hochleitner
36c70c49d3 lldap: build lldap_set_password and migration-tool 2023-05-13 23:08:56 +02:00
Alyssa Ross
5e06b3cb19 treewide: don't use rustPlatform.rust
This will be deprecated in the next commit.
2023-05-12 15:31:21 +00:00
Herwig Hochleitner
a99852ad18 lldap: build frontend from source
Co-authored-by: Emily Lange <git@indeednotjames.com>
2023-05-11 18:05:21 +02:00
IndeedNotJames
5eb2e64d80
nixosTests.lldap: init 2023-04-29 21:14:25 +02:00
IndeedNotJames
a0f26d0fc9
lldap: init at 0.4.3 2023-04-29 21:14:24 +02:00
Sergei Trofimovich
a3f338ef5f _389-ds-base: disable parallel installing
Without the change parallel installs fail occasionally as:

    ld: cannot find -lslapd: No such file or directory

Full build log example: https://hydra.nixos.org/log/h38bj77gav0r6jbi4bgzy1lfjq22k2wy-389-ds-base-2.3.1.drv
2023-03-20 09:35:20 +00:00
Adam Joseph
42815b4a0c treewide: systemdSupport: use lib.meta.availableOn
Many packages have some kind of flag indicating whether or not to build with
systemd support.  Most of these default to `stdenv.isLinux`, but systemd does
not build on (and is marked `broken` for) `isStatic`.  Only a few packages have
the needed `&& !isStatic` in the default value for their parameter.

This commit moves the logic for the default value of these flags into
`systemd.meta.{platforms,badPlatforms}` and evaluates those conditions using
`lib.meta.availableOn`.

This provides three benefits:

1. The default values are set correctly (i.e. including `&& isStatic`)

2. The default values are set consistently

3. The way is paved for any future non-Linux systemd platforms (FreeBSD is
   reported to have experimental systemd support)
2023-01-22 00:27:19 -08:00
Tomo
2a1a584792 389-ds-base: 2.3.0 -> 2.3.1 2023-01-12 16:34:23 -08:00
Martin Weinelt
f3a543b20e
_389-ds-base: fix build with libxcrypt 2022-11-11 02:23:52 +01:00
ners
53580d9f09 389-ds-base: 2.0.7 -> 2.3.0 2022-10-19 10:50:14 +02:00
Martin Weinelt
b60e4d71d6 python3Packages.python-ldap: rename from ldap 2022-09-19 10:37:49 +02:00
R. RyanTM
b9c9d93e51 _389-ds-base: 2.0.6 -> 2.0.7 2021-07-25 10:24:10 +02:00
Robert Schütz
1ec5651913 treewide: use pythonPackages.python-dateutil instead of pythonPackages.dateutil 2021-07-03 13:45:57 +02:00
R. RyanTM
10647f431d _389-ds-base: 2.0.5 -> 2.0.6 2021-07-01 13:31:07 -07:00
Bernardo Meurer
c97b3d8502
_389-ds-base: 1.3.9.1 -> 2.0.5 2021-06-16 14:40:02 -07:00
Janne Heß
094dcbe0ff 389-base: Add CVE-2021-3514 2021-06-08 11:50:16 +00:00
Sandro Jäckel
dcb501f993
kerberos: deprecate alias 2021-04-04 03:18:56 +02:00
Frederik Rietdijk
c657b02df2 _389-ds-base: use python3 2021-03-25 10:19:41 +01:00