@thufschmitt created a follow-up post discussing the creation of the recent NixOS Foundation Event Sponsorship Policy as well as the widespread effects that both the lack of a policy and the lengthy implementation of this announced one has caused. Readers of nixpkgs.news are encouraged to read the announcement directly. Many important contributors and members of the community were affected by these recent events and the comments of this post reflect the commitment of many to build a positive ecosystem if they are able to.
@blusk has announced Nix-inspect, a TUI for browsing nix configs and other expressions. Providing a more ergonomic and discoverable way to browse Nix expressions than the Nix REPL, this program should be added to your tool belt right away. The project can be found on GitHub.
Security fixes this week:
- @fabaff: updated
python312Packages.yt-dlp
to fixCVE-2024-22423
: Pull Request - @LeSuisse: flagged
envoy
as vulnerable toCVE-2024-30255
: Pull Request - @LeSuisse: updated
cosign
to fixCVE-2024-29903
andCVE-2024-29902
: Pull Request - @LeSuisse: updated
curl
to fixCVE-2024-2466
,CVE-2024-2398
,CVE-2024-2379
, andCVE-2024-2004
: Pull Request - @LeSuisse: updated
libdwarf
to fixCVE-2024-2002
: Pull Request - @LeSuisse: updated
trafficserver
to fixCVE-2024-31309
: Pull Request - @Ma27: updated
php
to fixCVE-2024-2756
,CVE-2024-3096
, andCVE-2024-2757
: Pull Request - @mweinelt: updated
python312Packages.idna
to fixCVE-2024-3651
: Pull Request - @networkException: updated
chromedriver
,chromium
, andungoogled-chromium
to fixCVE-2024-3157
,CVE-2024-3516
, andCVE-2024-3515
: Pull Request - @risicle: patched
python311Packages.jwcrypto
to fixCVE-2024-28102
: Pull Request - @risicle: updated
wireshark
to fixCVE-2024-2955
: Pull Request - @wegank: patched
guix
to fixCVE-2024-27297
: Pull Request - @yayayayaka: updated
electron-source
to fixCVE-2024-3156
andCVE-2024-3159
: Pull Request - @yayayayaka: updated
gitlab
to fixCVE-2023-6489
,CVE-2023-6678
,CVE-2024-2279
, andCVE-2024-3092
: Pull Request
New packages added this week:
- @8aed: added
passt
: Pull Request - @Aleksanaa: added
pablodraw
: Pull Request - @Aleksanaa: added
pomodoro-gtk
: Pull Request - @anthonyroussel: added
realmd
: Pull Request - @ashuramaruzxc: added
thcrap-steam-proton-wrapper
: Pull Request - @Atemu: added
ffmpeg_7
: Pull Request - @auroraanna: added
colstr
: Pull Request - @bddvlpr: added
hyprland-monitor-attached
: Pull Request - @bluskript: added
nix-inspect
: Pull Request - @bonsairobo: added
ktx-tools
: Pull Request - @ByteSudoer: added
chess-tui
: Pull Request - @ByteSudoer: added
koji
: Pull Request - @cafkafk: added
cargo-unfmt
: Pull Request - @chiroptical: added
erland_27
: Pull Request - @cimm: added
francis
: Pull Request - @Conni2461: added
keydb
: Pull Request - @Cryolitia: added
shanggu-fonts
: Pull Request - @donovanglover: added
walker
: Pull Request - @dragonginger10: added
discover-overlay
: Pull Request - @errnoh: added
zluda
: Pull Request - @fabaff: added
radcli
: Pull Request - @fgaz: added
wayfarer
: Pull Request - @flokli: added
brainstem
: Pull Request - @GaetanLepage: added
zed-editor
: Pull Request - @getchoo: added
garnet
: Pull Request - @hellwolf: added
insync-nautilus
: Pull Request - @hellwolf: added
lshw-gui
: Pull Request - @imrying: added
dstep
: Pull Request - @isabelroses: added
pace
: Pull Request - @link2xt: added
deltatouch
: Pull Request - @lukaslihotzki: added multiple Asahi packages: Pull Request
- @marsam: added
piv-agent
: Pull Request - @MatthewCroughan: added
cc1541
: Pull Request - @mattpolzin: added
pixel-code
: Pull Request - @mksafavi: added
livi
: Pull Request - @numinit: added
klee
: Pull Request - @numinit: added
pkcs11-provider
: Pull Request - @ok-nick: added
c2patool
: Pull Request - @oo-infty: added
ugm
: Pull Request - @otavio: added
mcumgr-client
: Pull Request - @Peefy: added
kcl-cli
: Pull Request - @PhDyellow: added
ryzen_smu
: Pull Request - @Rucadi: added
devcontainer
: Pull Request - @Sigmanificient: added
mini-calc
: Pull Request - @sikmir: added
tootik
: Pull Request - @souxd: added
zandronum-alpha
: Pull Request - @tiredofit: added
docker_26
: Pull Request - @toastal: added
movim
: Pull Request - @Tochiaha: added
dhcpig
: Pull Request - @TomaSajt: added
nekoray
: Pull Request - @Tom-Hubrecht: added
crabfit
: Pull Request - @twitchy0: added
ngrid
: Pull Request - @uncenter: added
cargo-shear
: Pull Request - @vinnymeller: added
_0xpropo
: Pull Request - @xrelkd: added
anchor
: Pull Request - @yu-re-ka: added
fernglas
: Pull Request - @yu-re-ka: added
redict
: Pull Request
New modules added this week:
- @linsui: added
lazygit
: Pull Request - @toastal: added
movim
: Pull Request