nixpkgs.news

Nix Weekly Recap: 2024-07-07

Sun, 07 Jul 2024 00:00:00 GMT

Welcome back to nixpkgs.news! As many have noticed, the Nix community has been in a difficult position for some time. As tensions have risen and contributors have left we have seen the beginning of a new chapter for Nix. Projects like Lix and Aux seek to provide a space more conducive to collaboration and technical excellence. As a part of this transition, nixpkgs.news will not be issuing new releases. Instead, after initial work, news related to Lix and Aux will be the primary focus of this outlet. It is a difficult decision to make as I've come to hear from many who find these weekly recaps useful, but the current climate of the Nix ecosystem is not something that I am comfortable promoting. To stay up to date throughout this process, you can find myself on Mastodon and Patreon where I still intend to release regular content involving my Nix escapades and other learnings.

@emily has provided a security advisory for OpenSSH CVE-2024-6387 "regreSSHion". This is a particularly nasty vulnerability which should be patched immediately. Fixes are available for 23.11, 24.05, and unstable. If you have not already, please consider this an urgent call to update your systems.

@nicknovitski announced make-shell, a modular replacement for Nixpkgs' mkShell helper. Rather than operating as a wrapper around mkDerivation like mkShell does, this project allows you to make use of the NixOS module system to construct more elaborate shell environments. To give the project a try, see its instructions on GitHub.

@diamondburned has released nix-search, a fast replacement for nix search. The project works by first constructing a package index which takes approximately 20 seconds. After that, packages can be queried nearly instantly. To get started, see the announcement for installation instructions or refer to the project on GitHub.

@Infinisil posted a new update from the Nix Constitutional Assembly about a new interim Nixpkgs committer delegation team. In recent weeks the ability for Nixpkgs contributors to gain commit rights to the repository ground to a halt. To resolve this an interim team comprised of veteran Nixpkgs contributors has been established to manage the responsibility. This team is comprised of @Mic92, @NickCao, and @jtojnar.

@lassulus provided a status report for the constitutional assembly. This post goes into detail describing the work that has been done over the last 7 weeks that the assembly has existed and what work remains to be done. There is still a significant amount of work to be done by the assembly, but it does appear to be making reasonable progress. If you would like to provide feedback for the assembly, you can now do so through official feedback channels.

New packages added this week:

@adamcstephens: added next-ls: Pull Request
@Aleksanaa: added wiliwili: Pull Request
@arthsmn: added hyprls: Pull Request
@D3vil0p3r: added exe2hex: Pull Request
@D3vil0p3r: added fairywren: Pull Request
@D3vil0p3r: added weevely: Pull Request
@doronbehar: added versionCheckHook: Pull Request
@drupol: added typstwriter: Pull Request
@GaetanLepage: added obote: Pull Request
@getchoo: added commit: Pull Request
@getchoo: added decibels: Pull Request
@getchoo: added morphosis: Pull Request
@Guanran928: added dopamine: Pull Request
@heywoodlh: added choose-gui: Pull Request
@jcelerier: added ossia-score: Pull Request
@justinas: added teleport_16: Pull Request
@kilimnik: added gitlab-release-cli: Pull Request
@Nebucatnetzer: added stu: Pull Request
@onny: added eintopf: Pull Request
@OPNA2608: added lomiri.lomiri-polkit-agent: Pull Request
@Pandapip1: added envision: Pull Request
@romildo: added marwaita-mint: Pull Request
@TheBrainScrambler: added trrntzip: Pull Request
@tie: added ansible-cmdb: Pull Request
@Vinetos: added nova-password: Pull Request
@Vonfry: added dracula-qt5: Pull Request

New modules added this week:

@onny: added eintopf: Pull Request

Nix Weekly Recap: 2024-06-30

Sun, 30 Jun 2024 00:00:00 GMT

After our brief hiatus last week to allow for community events to settle down we are now back with the weekly Nix recap!

@fricklerhandwerk posted a notice for an important Nix security fix. This fix resolves CVE-2024-38531 which is a sandbox escape vulnerability in Nix. All Nix users should update immediately to avoid security risks. All Nix versions from 2.18 through 2.23 have received a patch for this vulnerability.

@shivaraj-bh announced github-nix-ci, a project which provides NixOS and nix-darwin modules for self-hosting GitHub runners. This is an excellent addition to every hobbyist's toolkit to allow for taking advantage of GitHub Actions while avoiding free-tier monthly limits. To get started with the project, check out the GitHub repository.

@7c6f434c let the community know that RFC 0146, Meta.Categories, is in its Final Comment Period. This feature has been in the works for over a year and is sorely needed to help expand Nixpkgs' metadata and discoverability. Once merged, packages in Nixpkgs will now be able to specify useful categories in their meta properties similar to desktop items. To read the full proposal, see the issue on GitHub.

@drmikecrowe has created Xonsh xontribs, a collection of packages for the Python-powered Xonsh shell. For Xonsh users or people interested in giving it a try, you can find the package set on GitHub.

@JulienMalka announced general availability for Proxmox-NixOS! This project brings the Proxmox Hypervisor to NixOS, enabling a new host of virtualization options for the platform and ecosystem. If you are currently operating virtual machines or run a home lab, it is worth giving this project a try. The project is available on GitHub.

@Mic92 posted an article on Declarative Backups and Restore using the Clan project. A fully formed backup solution this easy to use is certainly worth a look!

Security fixes this week:

@LeSuisse: patched libndp to fix CVE-2024-5564: Pull Request
@thillux: updated openssl_3 and openssl_3_1 to fix CVE-2024-4741, CVE-2024-4603, and CVE-2024-2511: Pull Request

New packages added this week:

@florian-sanders-cc: added clever-tools, command line tools for deploying to Clever Cloud: Pull Request
@Linbreux: added cyclonedds-cxx, C++ bindings for Eclipse Cyclone DDS : Pull Request
@markuskowa: added saunafs, a distributed POSIX file system: Pull Request
@proux01: added coq_8_20, the Coq proof assistant: Pull Request
@getchoo: added binary, a small and simple app to convert numbers to a different base: Pull Request
@hatch01: added hpp2plantuml, a tool for converting C++ header files to PlantUML: Pull Request

Your sponsorship here! nixpkgs.news is currently accepting sponsorship applications to ensure the project can continue running with financial stability. If you would like to sponsor one or more articles, please get in touch via email.

Nix Weekly Recap: 2024-06-16

Sun, 16 Jun 2024 00:00:00 GMT

@Infinisil has updated the community on the Nix Constitutional Assembly, pertaining to the target date, public repository, office hours, and interviews. The assembly members have been working out the details over the last few weeks and have set a goal for completion of this work by 2024-09-01. In addition to this target date, a place for housing related documents has been created on GitHub. This repository is intended to serve as the central point of information for the assembly. Office hours and interviews are also now running in an effort to gather feedback and answer questions. Open office hours and information on requesting a private interview can be found in the linked announcement.

@hellwolf released mk-cache-key.nix, a tool for helping to improve caching in CI for projects that have not fully adopted Nix yet. For more detailed usage information and examples, see the project on GitHub.

Security fixes this week:

@emilylange: updated chromedriver and chromeium to fix CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, and CVE-2024-5847: Pull Request
@guoard: updated docker_26 to fix CVE-2024-24789 and CVE-2024-24790: Pull Request
@JohnRTitor: updated google-chrome to fix CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, and CVE-2024-5847: Pull Request
@networkException: updated ungoogled-chromium to fix CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, and CVE-2024-5847: Pull Request
@risicle: patched ffmpeg and ffmpeg_5 to fix CVE-2023-49501, CVE-2023-49502, CVE-2023-50007, CVE-2023-50008, CVE-2023-50009, CVE-2023-50010, CVE-2023-51791, CVE-2023-51793, CVE-2023-51795, and CVE-2023-51796: Pull Request

New packages added this week:

@0x61nas: added tabiew: Pull Request
@aaronjheng: added kitex: Pull Request
@fabaff: added subprober: Pull Request
@Guanran928: added hn-text: Pull Request
@heisfer: added code2prompt: Pull Request
@Nydragon: added impala: Pull Request
@pluiedev: added colorgrind: Pull Request
@RossComputerGuy: added zig_0_13: Pull Request
@thecaralice: added srgn: Pull Request

Nix Weekly Recap: 2024-06-09

Sun, 09 Jun 2024 00:00:00 GMT

With the release of NixOS 24.05 complete, @wegank announced the accompanying Retrospective Meeting for Sunday, June 9th. If you participated in the release process this year or have useful feedback for what worked well, poorly, or was average, then please consider joining to help improve future releases.

@avocadoom let the community know that the Marketing team is looking for support in the social media department. The Marketing team maintains regular posts about community news across multiple social media channels. If you feel that you could fill the role, the team can be reached on Matrix at #marketing:nixos.org.

@matklad posted about Brioche, a nix-like package manager written in Rust. While the project is not directly related to Nix, it brings together many learnings from Nix and other tools that the Nix community may find useful to reflect on. The official announcement is available on Brioche's website.

Security fixes this week:

@drupol: updated php to fix CVE-2024-4577, CVE-2024-5458, CVE-2024-2408, CVE-2024-5585, CVE-2024-4577, CVE-2024-5458, CVE-2024-2408, CVE-2024-5585, CVE-2024-4577, CVE-2024-5458, CVE-2024-2408, and CVE-2024-5585: Pull Request
@emilylange: updated grafana-agent to fix CVE-2024-36129: Pull Request
@LeSuisse: updated rabbitmq-c to fix CVE-2023-35789: Pull Request
@malt3: updated envoy to fix CVE-2024-34362, CVE-2024-34363, CVE-2024-24364, CVE-2024-32974, CVE-2024-32975, CVE-2024-32976, and CVE-2024-23326: Pull Request

New packages added this week:

@afh: added ijhttp: Pull Request
@chayleaf: added techmino: Pull Request
@dbalan: added hid-t150: Pull Request
@DontEatOreo: added rewind-ai: Pull Request
@doronbehar: added LPCNet: Pull Request
@doronbehar: added rtl_fm_streamer: Pull Request
@dvn0: added undertime: Pull Request
@fabaff: added sr2t: Pull Request
@flokli: added geesefs: Pull Request
@GeoffreyFrogeye: added massdns: Pull Request
@Golo300: added stash: Pull Request
@IogaMaster: added kalamine: Pull Request
@IogaMaster: added kubefwd: Pull Request
@jfvillablanca: added chatgpt-shell-cli: Pull Request
@jfvillablanca: added xenon: Pull Request
@JoaquinTrinanes: added nu_plugin_polars: Pull Request
@jrobinson-uk: added brickstore: Pull Request
@l0b0: added nexusmods-app: Pull Request
@Laurent2916: added okolors: Pull Request
@lheckemann: added snx-rs: Pull Request
@Ligthiago: added leetgo: Pull Request
@matteo-pacini: added easyaudiosync: Pull Request
@matteo-pacini: added needle: Pull Request
@michaelgrahamevans: added buffer: Pull Request
@misuzu: added nats-kafka: Pull Request
@natsukium: added mactop: Pull Request
@natsukium: added renovate: Pull Request
@NotAShelf: added hexxy: Pull Request
@onemoresuza: added hareHook: Pull Request
@phunehehe: added quinze: Pull Request
@raspher: added dnss: Pull Request
@romildo: added latexminted: Pull Request
@shard77: added payloadsallthethings: Pull Request
@shivaraj-bh: added open-webui: Pull Request
@Sigmanificient: added autotrash: Pull Request
@squarepear: added gdtoolkit_4: Pull Request
@starsep: added gol: Pull Request
@Tochiaha: added xmltoman: Pull Request
@TomaSajt: added comet-gog: Pull Request
@TomaSajt: added desktop-postflop: Pull Request
@TomaSajt: added git-toolbelt: Pull Request
@TomaSajt: added keypunch: Pull Request
@TomaSajt: added mathmod: Pull Request
@vunso: added grafana-alloy: Pull Request
@wegank: added challenger: Pull Request
@yajo: added git-find-repos: Pull Request

New modules added this week:

@jpds: added quickwit: Pull Request

Nix Weekly Recap: 2024-06-02

Sun, 02 Jun 2024 00:00:00 GMT

NixOS 24.05 Release

It's release week for NixOS! The brand new 24.05 release, codename "Uakari", is out officially out. The release managers deserve thanks for their work in making this release happen. Thank you to Weijia Wang, Jörg Thalheim, and everyone else who contributed to this event no matter how small. A full release announcement can be found on the NixOS blog and comprehensive release notes are available in the manual. While this article will not cover all of the highlights and breaking changes found in the release, the following are a set of interesting changes picked out by the author of nixpkgs.news.

24.05 highlights

The default Linux kernel is now version 6.6.
Linux firmware blobs are now compressed with zstd which results in an increase file size, but faster decompression speed.
A new ELF loader is now available to improve the non-nix packaged software user experience.
NIX_PATH and the Flake Registry will now automatically have the system's nixpkgs input pinned when creating systems with nixpkgs.lib.nixosSystem.
Plasma 6 is now available.
Lomiri (formerly Unity8) is now available.
MATE is now updated to version 1.28.
Perl can now be avoided entirely by importing the module ${modulesPath}/profiles/perlless.nix.
A new service for ALVR is available with the option programs.alvr.
Support for running AppImage programs directly is now available via programs.appimage.binfmt.
FCast Receiver is now available as programs.fcast-receiver.
Ory Keto is now packaged.
Sunshine now has a module available to use from services.sunshine.

24.05 breaking changes

akkoma now requires setttings."Pleroma.Upload".base_url to be set.
appimageTools.wrapAppImage now exports binaries as pname instead of ${pname}-${version}.
boot.supportedFilesystems and boot.initrd.supportedFilesystems are now attribute sets instead of lists.
cryptsetup has been upgraded, users should verify that their encryption setup is still working correctly.
inetutils has had its priority lowered to avoid shadowing util-linux.
lua's LUA_PATH and LUA_CPATH are no longer overriden. Instead, LUA_ROOT is modified.
nixVersions.unstable has been replaced by nixVersions.latest and nixVersions.git.
pipewire and wireplumber can not be configured by setting files with environment.etc. Instead, their extraConfig and configPackages options should be used.
security.pam.enableSSHAgentAuth has been modified and users should verify whether their config needs to be updated.

Community Recap

Aside from the release of NixOS 24.05, we saw @tad announce a call for gradle2nix v2 testers. The project has been completely rewritten to be faster and more reliable. Any community members wanting to try out the new version can access it via the v2 branch on GitHub and can find a summary of changes documented here.

Last week also began the migration of Snowfall Lib users to v3. This release includes improved integration with Home-Manager, the ability to define homes for all matching system types instead of a single host, more flexible overlays, first-class namespace support, as well as NixOS and Home-Manager modules which are automatically added to configurations in order to provide additional context such as the current user or to pass through Home-Manager configuration.

Security fixes this week:

@mweinelt: updated python312Packages.requests to fix CVE-2024-35195: Pull Request
@emilylange: updated chromedriver, chromium, and ungoogled-chromium to fix CVE-2024-5493, CVE-2024-5494, CVE-2024-5495, CVE-2024-5497, CVE-2024-5498, and CVE-2024-5499: Pull Request
@LeSuisse: updated nginx and nginxMainline to fix CVE-2024-32760, CVE-2024-31079, CVE-2024-35200, and CVE-2024-34161: Pull Request

New packages added this week:

@donovanglover: added ringracers: Pull Request
@JohnRTitor: added plymouth-vortex-ubuntu-theme: Pull Request
@JohnRTitor: added plymouth-proxzima-theme: Pull Request
@Scrumplex: added oo7: Pull Request
@amyipdev: added pwalarmd: Pull Request
@Atemu: added marked-man: Pull Request
@MarchCraft: added wlinhibit: Pull Request
@ajs124: added marknote: Pull Request
@ali-abrar: added openbsd: Pull Request
@Sigmanificient: added filterpath: Pull Request
@eskytthe: added kube-state-metrics: Pull Request

Nix Weekly Recap: 2024-05-26

Sun, 26 May 2024 00:00:00 GMT

This week saw the last major step in the NixOS 24.05 release process, including creation of the release-24.05 branch, release channels, and redirection of new Zero Hydra Failures fixes to master with the ability to backport fixes to the 24.05 release. The official release will occur on May 31st, 2024. If you would like to start using the new version early, users can update their systems to point to the new nixos-24.05 branch.

The Nix Constitutional Assembly continues to make progress. @7c6f434c announced that an Assembly Q&A stream will be held on Monday, May 20th, 2024 at 19:00 UTC. Interested parties may participate in the question and answer session via Zulip and the Google Meet call. Before participating, please note the rules for the assembly and this event in the announcement post.

@codesupply has released deps_nix, a Nix builder for Elixir. The project aims to be a drop-in replacement for mix2nix while adding support for Git dependencies, environment/package selection, and improved output formatting. deps_nix is available today on GitHub.

@teto let Neovim users know that Neovim's flake.nix moved to nix-community. For users who were previously pulling Neovim Nightly from the upstream repository's flake, the input will need to be modified to point to github:nix-community/neovim-nightly-overlay.

@DavHau introduced a NixOS to JSON Schema Converter, a tool which allows you to extract JSON Schema definitions from NixOS modules. Official documentation for the project can be found at docs.clan.lol.

Security fixes this week:

@clefru: updated google-chrome to fix CVE-2024-5274: Pull Request
@LeSuisse: updated asterisk_18 and asterisk_20 to fix CVE-2024-35190: Pull Request
@networkException: updated ungoogled-chromium to fix CVE-2024-5274: Pull Request
@emilylange: updated chromedriver and chromium to fix CVE-2024-5274: Pull Request

New packages added this week:

@paveloom: added steamrip: Pull Request
@Qyriad: added cppitertools: Pull Request
@tricktron: added sonarlint-ls: Pull Request
@GaetanLepage: added signal-backup-deduplicator: Pull Request
@kiike: added basedpyright: Pull Request
@Misterio77: added hdos: Pull Request
@chiroptical: added erlang_27: Pull Request

Nix Weekly Recap: 2024-05-19

Sun, 19 May 2024 00:00:00 GMT

As we pass the halfway mark of the month, the Zero Hydra Failures initiative for the new NixOS 24.05 release has picked up steam. This important step in the release cycle is focused on resolving package build failures that would otherwise prevent a release or require certain packages to be marked as broken. Interested contributors can look at the Nix Review Tools Reports site to discover failing builds that need fixing. Moving forward, release channels will be created on May 22nd to finalize them before the official release at the end of the month.

@ron released an update on the Constitutional Assembly Appointment. After nominations for the assembly closed last week, 7 members were selected to construct the new governance model for Nix. The chosen assembly members represent highly-skilled and involved members of the community and will require the next few weeks to work out the necessary changes to the Nix ecosystem. For more information about the specific assembly members, including their applications for the process, see the linked announcement.

@fricklerhandwerk posted a call for volunteers to curate official Nix projects. The Nix ecosystem has few official projects, limiting its scope to NixPkgs, NixOS, and Nix mainly. However, third-party Nix projects have become vital underpinnings of the technology's use. With this in mind, the intent of the linked post is to begin curating a set of these projects which can be officially supported. This would be an important step to improving the maintenance story for many projects as well as increasing interoperability and consistency between Nix tools.

@dnr announced Styx, an alternate binary substitution mechanism. Styx breaks up files into chunks and allows substitutors to only download the new chunks that they don't already have. The project is also capable of using differential compression on sequences of chunks, producing a read-only filesystem where files share chunks, fetching and caching chunks on-demand, and reducing the overall disk requirements for binary caches that would otherwise be storing Nix Archives (NARs).

nixpkgs.news is now also accepting sponsorship applications! If you or your business benefit from the publication and would like to support it financially, you can reach out via email. All sponsorships of nixpkgs.news articles will take the form of non-intrusive and relevant text-based advertisement.

Readers interested in supporting the effort can also consider subscribing on Patreon. Doing so provides multiple benefits such as early access to nixpkgs.news articles, early access to upcoming projects, one-on-one Nix support, bi-weekly updates for the in-progress book Nix For Newcomers, and more!

Security fixes this week:

@alyssais: updated util-linux to fix CVE-2024-28085: Pull Request
@edef1c: updated git to fix CVE-2024-32002, CVE-2024-32004, CVE-2024-32465, CVE-2024-32020, and CVE-2024-32021: Pull Request
@emilylange: updated chromedriver, chromium, and ungoogled-chromium to fix CVE-2024-4947, CVE-2024-4948, CVE-2024-4949, and CVE-2024-4950: Pull Request
@MagicRB: updated docker_24 to fix CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653: Pull Request
@mweinelt: updated microcodeIntel to fix CVE-2023-45733, CVE-2024-46103, CVE-2023-45745, and CVE-2023-47855: Pull Request
@SuperSandro2000: updated paperless-ngx to fix CVE-2024-35184: Pull Request

New packages added this week:

@Aleksanaa: added catppuccinifier-cli: Pull Request
@alyssais: added tiny-dfr: Pull Request
@brsvh: added parinfer-rust-emacs: Pull Request
@cameronraysmith: added ratchet: Pull Request
@CherryKitten: added gungnir: Pull Request
@Coca162: added miracode: Pull Request
@fpletz: added tracexec: Pull Request
@fufexan: added hyprwayland-scanner: Pull Request
@GaetanLepage: added eepers: Pull Request
@gepbird: added dbeaver-bin: Pull Request
@getchoo: added modrinth-app: Pull Request
@getchoo: added shellcheck-sarif: Pull Request
@JohnRTitor: added plymouth-matrix-theme: Pull Request
@lorenzleutgeb: added benchexec: Pull Request
@luftmensch-luftmensch: added cargo-features-manager: Pull Request
@luftmensch-luftmensch: added izrss: Pull Request
@ners: added bdf2ttf: Pull Request
@NobbZ: added kx-aspe-cli: Pull Request
@nyabinary: added goofcord: Pull Request
@Nydragon: added rofi-obsidian: Pull Request
@onny: added opencascade-occt_7_6: Pull Request
@peterhoeg: added fooyin: Pull Request
@RaghavSood: added workshop-runner: Pull Request
@SyedAhkam: added bombsquad: Pull Request
@wegank: added sync: Pull Request
@weitzj: added powerpipe: Pull Request
@YvesStraten: added picom-pijulius: Pull Request

New modules added this week:

@PatrickDaG: added your_spotify: Pull Request

Nix Weekly Recap: 2024-05-11

Sat, 11 May 2024 00:00:00 GMT

Last week began with a bang, starting with the announcement of Lix, a Nix fork. The project describes itself as "a modern, delicious implementation of the Nix package manager, focused on correctness, usability, and growth – and committed to doing right by its community" and is run by several subject matter experts. Lix has been worked on for the past two months before beginning its public preview on May 5th. With improvements to stability and user experience, this project is worth following. If you would like to get started using Lix, see the instructions for Installing Lix.

@thufschmitt announced that Nix Constitutional Assembly Applications are now open. For community members interested in participating in the 7-member assembly, see the announcement post for full details on the application requirements and instructions. The process is expected to take roughly two weeks of work spread over the course of two months in order to establish a new governance structure for the Nix ecosystem.

@Mic92 has posted a call for help updating links to point to the new NixOS wiki. With the recent adoption of the official NixOS wiki, existing documentation and community resources need to be modified to point to wiki.nixos.org. Any help is welcome and will improve the onboarding experience of new Nix users by making it easier to find official documentation.

@fricklerhandwerk announced that regular documentation office hours and onboarding for new maintainers will be held each week for the next few months. If you would like to help improve the state of Nix documentation, interested contributors can view available office hours on Google Calendar.

Security fixes this week:

@leona-ya: updated glib to fix CVE-2024-34397: Pull Request
@networkException: updated chromedriver, ungoogled-chromium, and chromium to fix CVE-2024-4671: Pull Request
@qubitnano: modified gdk-pixbuf to avoid CVE-2022-48622: Pull Request

New packages added this week:

@jacg: added bugstalker: Pull Request
@jlesquembre: added openfga-cli: Pull Request
@jlesquembre: added openfpa: Pull Request
@momeemt: added superfile: Pull Request
@pbek: added go-passbolt-cli: Pull Request
@pbek: added wowup-cf: Pull Request
@Sail0rd: added litmusctl: Pull Request
@sodiboo: added caligula: Pull Request
@TomaSajt: added pragtical: Pull Request
@tomfitzhenry: added go-landlock: Pull Request
@wangxiaoerYah: added halo: Pull Request
@wr7: added glsl_analyzer: Pull Request

Nix Weekly Recap: 2024-05-05

Sun, 05 May 2024 00:00:00 GMT

As of last week, Eelco Dolstra has stepped down from the NixOS Foundation Board. The foundation outlined steps for and began organizing a constitutional assembly to restructure governance for the Nix ecosystem. The board intends to delegate authority to the community to during and after this restructuring effort. As such, a discussion space has been created on Zulip with the goals of managing this assembly and receiving input from members of the community. For the full details of these events and for information on how to join the assembly discussion space, see the official post: NixOS Foundation Board: Giving power to the community.

Last week also saw the emergence of a Nix fork, Aux. For insight into what the fork intends to accomplish, see the linked site and for information about Aux's response to changes in the Nix ecosystem see the post The Future of Aux and Nix.

@BatteredBunny has announced Brew-nix, an experimental Nix flake for automatically packaging all Homebrew casks for Nix. If you are currently using Nix on macOS and would like to transition any remaining Homebrew tooling to reproducible Nix configuration then this project is just the one for you. The project can be found on GitHub.

@viperML released Noshell, a user-configurable login shell that allows for switching shells without root privileges. Users can replace their shell by modifying a symlink in their home directory rather interfacing with chsh or system configuration. For more information, see the project's GitHub repository.

@Mic92 let the community know that Buildbot-nix now supports Gitea. Documentation for the feature is still in progress, but users can begin using it today by referencing examples in the project's GitHub repository.

@RaitoBezarius announced a partnership between Framework and the NixOS Community! The partnership intends to seed Framework computers to participants who will be able to contribute fixes and improvements for NixOS support on these machines. For information on how to apply, see the linked announcement.

@binarycat has released Nix-inst, a tool for managing imperative package management more easily. The tool comes with UX, stability, and performance improvements as well as support for systems using Nix Flakes and ones that are not. The project can be found on Codeberg.

@hexa welcomed @endocrimes (Danielle Lancashire) to the moderation team. She has been contributing to NixPkgs since 2019 and co-chairs the CNCF wasm-wg as well as being a member of the Kubernetes Code of Conduct Committee. Her experience and and knowledge should make her a great addition to the team. The full announcement is available on the NixOS Discourse.

@aciceri posted Agenix-shell, a tool that allows for encrypted secrets to be provided to flakes while having them decrypted in the development shell environment. The project's source code is available on GitHub.

@Janik announced this year's Google Summer of Code Participants! These participants include siddhantCodes, Sinan Mohd, Vidhvath J, and Yurii Shymon. Over the next 8-12 weeks pull requests and progress posts will be created as a part of the event. This is the first year that the NixOS Foundation is participating in Google Summer of Code and it is exciting to see some great initiatives and contributors joining.

Security fixes this week:

@LeSuisse: patched python3Packages.aiohttp to fix CVE-2024-30251: Pull Request
@LeSuisse: patched R to fix CVE-2024-27322: Pull Request
@LeSuisse: updated storm to fix CVE-2023-43123: Pull Request
@networkException: updated ungoogled-chromium to fix CVE-2024-4331 and CVE-2024-4368: Pull Request
@yayayayaka: updated electron_29 to fix CVE-2024-4058 and CVE-2024-4060: Pull Request

New packages added this week:

@9glenda: added lc0: Pull Request
@a-camarillo: added broom: Pull Request
@acesyde: added gitversion: Pull Request
@Aleksanaa: added lilipod: Pull Request
@aos: added kubernetes-helm-mapkubeapis: Pull Request
@bddvlpr: added youtube-upnext: Pull Request
@b-rodrigues: added symphony: Pull Request
@evenbrenden: added jotta-cli: Pull Request
@fabaff: added cent: Pull Request
@fabaff: added galah: Pull Request
@fabaff: added trickest-cli: Pull Request
@fabaff: added xnlinkfinder: Pull Request
@GaetanLepage: added cosmic-tasks: Pull Request
@getchoo: added protonplus: Pull Request
@grahamnorris: added flashgbx: Pull Request
@javaes: added slumber: Pull Request
@LeSuisse: added varnish75: Pull Request
@MatthewCroughan: added dps8m: Pull Request
@MatthewCroughan: added jtdx: Pull Request
@MatthewCroughan: added nss-xhosts: Pull Request
@MatthewCroughan: added ucblogo: Pull Request
@RaySlash: added yofi: Pull Request
@rohanssrao: added lumafly: Pull Request
@rollf: added nf-test: Pull Request
@ruby0b: added ups: Pull Request
@sikmir: added redka: Pull Request
@starsep: added kotlin-interactive-shell: Pull Request
@TomaSajt: added hieroglyphic: Pull Request
@TomaSajt: added siyuan: Pull Request
@vinnymeller: added jikken: Pull Request
@yayayayaka: added electron_30: Pull Request

New modules added this week:

@Cryolitia: added xdg-terminal-exec: Pull Request
@evenbrenden: added jotta-cli: Pull Request

Nix Weekly Recap: 2024-04-28

Sun, 28 Apr 2024 00:00:00 GMT

Recent events in the Nix Community have resulted in many unpleasant situations over the last week. Jonathan Ringer will no longer be fulfilling the role of release manager due to multiple code of conduct violations. NixPkgs maintainers are leaving the project. Many of these events have been percolating, but have since reached a breaking point. Vital packages are currently left unmaintained and morale is at an all-time low. Currently, the future of Nix appears unclear and pretending otherwise would be disingenuous. As such, this week's issue of nixpkgs.news is not including announcements or a report of packages, modules, or security changes. Instead, readers are encouraged to reflect on how we got here and the substantial changes that must be made to governance of Nix if it is to continue.

Nix Weekly Recap: 2024-04-21

Sun, 21 Apr 2024 00:00:00 GMT

As we near the end of April, the 24.05 release cycle is quickly approaching! This release, NixOS 24.05 "Uakari", is being managed by Weijia Wang and Jonathan Ringer. NixPkgs branches will be gradually restricted over the next few weeks to support the new stable release. If there are any important changes for critical packages, now is the time to include them! For more information on the release schedule, see the issue on GitHub for the NixOS 24.05 Release Schedule. For information on the Zero Hydra Failures (Nix's CI pipeline) initiative, zh.fail provides an up to date dashboard. To track broken packages that need fixing before the release is cut, see malob.github.io/nix-review-tools-reports.

@starcraft66 has announced the creation of a Nix package for .NET Aspire Dashboard, a local OpenTelemetry UI. OpenTelemetry is an indispensable tool for improving observability and monitoring for services, but is typically deployed in a remote environment. Having access to a local dashboard available via a Nix shell is an excellent addition to every developer's tool set. The package can be found as a Nix Flake on GitHub.

Security fixes this week:

@emilylange: updated chromium to fix CVE-2024-3832, CVE-2024-3833, CVE-2024-3914, CVE-2024-3834, CVE-2024-3837, CVE-2024-3838, CVE-2024-3839, CVE-2024-3840, CVE-2024-3841, CVE-2024-3843, CVE-2024-3844, CVE-2024-3845, CVE-2024-3846, and CVE-2024-3847: Pull Request
@leona-ya: updated libreswan to fix CVE-2024-2357 and CVE-2024-3652: Pull Request
@LeSuisse: updated envoy to fix CVE-2024-30255: Pull Request
@LeSuisse: updated glibc to fix CVE-2024-2961: Pull Request
@LeSuisse: updated kubernetes to fix CVE-2024-3177: Pull Request
@mweinelt: updated matrix-appservice-irc to fix CVE-2024-32000: Pull Request
@mweinelt: updated putty to fix CVE-2023-48795 and CVE-2024-31497: Pull Request
@risicle: patched mbedtls to fix CVE-2024-28755: Pull Request
@risicle: patched python311Packages.blosc2 to fix CVE-2024-3203 and CVE-2024-3204: Pull Request
@risicle: patched qdrant to fix CVE-2024-3078: Pull Request
@yayayayaka: updated electron to fix CVE-2024-1580, CVE-2024-3157, CVE-2024-3515, CVE-2024-3516, and CVE-2024-3517: Pull Request

New packages added this week:

@afh: added boost185: Pull Request
@aktaboot: added dogedns: Pull Request
@bnlrnz: added wlr-layout-ui: Pull Request
@cafkafk: added kafka-cmak: Pull Request
@DontEatOreo: added arc-browser: Pull Request
@eclairevoyant: added converseen: Pull Request
@eclairevoyant: added rippkgs: Pull Request
@eclairevoyant: added sshesame: Pull Request
@fabaff: added gtfocli: Pull Request
@fabaff: added nomore403: Pull Request
@FabianRig: added labelle: Pull Request
@fccapria: added sandbar: Pull Request
@hatch01: added antares: Pull Request
@hexchen: added bundlewrap-keepass, bundlewrap-pass, and bundlewrap-teamvault: Pull Request
@isabelroses: added fork-cleaner: Pull Request
@isabelroses: added kittysay: Pull Request
@jnsgruk: added charmcraft: Pull Request
@jnsgruk: added snapcraft: Pull Request
@justinas: added teleport_15: Pull Request
@kai-tub: added immich-go: Pull Request
@Leixb: added mpris-notifier: Pull Request
@nyadiia: added solitaire-tui: Pull Request
@nyawox: added poppins: Pull Request
@oluceps: added glider: Pull Request
@oluceps: added moproxy: Pull Request
@oluceps: added restls: Pull Request
@oluceps: added shadow-tls: Pull Request
@quantenzitrone: added katawa-shoujo-re-engineered: Pull Request
@RaitoBezarius: added git-pw: Pull Request
@RossComputerGuy: added zig_0_12: Pull Request
@rster2002: added myxer: Pull Request
@savyajha: added firefly-iii: Pull Request
@soywod: added neverest: Pull Request
@sternenseemann: added haskell.compiler.ghc965: Pull Request
@terrorbyte: added voidmap: Pull Request
@TheRealKeto: added castero: Pull Request
@thillux: added cyclonedx-cli and sbom-utility: Pull Request
@TomaSajt: added inochi-creator and inochi-session: Pull Request
@TomaSajt: added sourcery: Pull Request
@vinnymeller: added atac: Pull Request
@viraptor: added ssimulacra2: Pull Request
@YMSTNT: added fcast-receiver: Pull Request

New modules added this week:

@NyCodeGHG: added db-rest: Pull Request
@savyajha: added firefly-iii: Pull Request
@SebastianWendel: added prometheus-dnssec-exporter: Pull Request
@Tom-Hubrecht: added netbird-server: Pull Request
@YMSTNT: added fcast-receiver: Pull Request

Nix Weekly Recap: 2024-04-14

Sun, 14 Apr 2024 00:00:00 GMT

@thufschmitt created a follow-up post discussing the creation of the recent NixOS Foundation Event Sponsorship Policy as well as the widespread effects that both the lack of a policy and the lengthy implementation of this announced one has caused. Readers of nixpkgs.news are encouraged to read the announcement directly. Many important contributors and members of the community were affected by these recent events and the comments of this post reflect the commitment of many to build a positive ecosystem if they are able to.

@blusk has announced Nix-inspect, a TUI for browsing nix configs and other expressions. Providing a more ergonomic and discoverable way to browse Nix expressions than the Nix REPL, this program should be added to your tool belt right away. The project can be found on GitHub.

Security fixes this week:

@fabaff: updated python312Packages.yt-dlp to fix CVE-2024-22423: Pull Request
@LeSuisse: flagged envoy as vulnerable to CVE-2024-30255: Pull Request
@LeSuisse: updated cosign to fix CVE-2024-29903 and CVE-2024-29902: Pull Request
@LeSuisse: updated curl to fix CVE-2024-2466, CVE-2024-2398, CVE-2024-2379, and CVE-2024-2004: Pull Request
@LeSuisse: updated libdwarf to fix CVE-2024-2002: Pull Request
@LeSuisse: updated trafficserver to fix CVE-2024-31309: Pull Request
@Ma27: updated php to fix CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757: Pull Request
@mweinelt: updated python312Packages.idna to fix CVE-2024-3651: Pull Request
@networkException: updated chromedriver, chromium, and ungoogled-chromium to fix CVE-2024-3157, CVE-2024-3516, and CVE-2024-3515: Pull Request
@risicle: patched python311Packages.jwcrypto to fix CVE-2024-28102: Pull Request
@risicle: updated wireshark to fix CVE-2024-2955: Pull Request
@wegank: patched guix to fix CVE-2024-27297: Pull Request
@yayayayaka: updated electron-source to fix CVE-2024-3156 and CVE-2024-3159: Pull Request
@yayayayaka: updated gitlab to fix CVE-2023-6489, CVE-2023-6678, CVE-2024-2279, and CVE-2024-3092: Pull Request

New packages added this week:

@8aed: added passt: Pull Request
@Aleksanaa: added pablodraw: Pull Request
@Aleksanaa: added pomodoro-gtk: Pull Request
@anthonyroussel: added realmd: Pull Request
@ashuramaruzxc: added thcrap-steam-proton-wrapper: Pull Request
@Atemu: added ffmpeg_7: Pull Request
@auroraanna: added colstr: Pull Request
@bddvlpr: added hyprland-monitor-attached: Pull Request
@bluskript: added nix-inspect: Pull Request
@bonsairobo: added ktx-tools: Pull Request
@ByteSudoer: added chess-tui: Pull Request
@ByteSudoer: added koji: Pull Request
@cafkafk: added cargo-unfmt: Pull Request
@chiroptical: added erland_27: Pull Request
@cimm: added francis: Pull Request
@Conni2461: added keydb: Pull Request
@Cryolitia: added shanggu-fonts: Pull Request
@donovanglover: added walker: Pull Request
@dragonginger10: added discover-overlay: Pull Request
@errnoh: added zluda: Pull Request
@fabaff: added radcli: Pull Request
@fgaz: added wayfarer: Pull Request
@flokli: added brainstem: Pull Request
@GaetanLepage: added zed-editor: Pull Request
@getchoo: added garnet: Pull Request
@hellwolf: added insync-nautilus: Pull Request
@hellwolf: added lshw-gui: Pull Request
@imrying: added dstep: Pull Request
@isabelroses: added pace: Pull Request
@link2xt: added deltatouch: Pull Request
@lukaslihotzki: added multiple Asahi packages: Pull Request
@marsam: added piv-agent: Pull Request
@MatthewCroughan: added cc1541: Pull Request
@mattpolzin: added pixel-code: Pull Request
@mksafavi: added livi: Pull Request
@numinit: added klee: Pull Request
@numinit: added pkcs11-provider: Pull Request
@ok-nick: added c2patool: Pull Request
@oo-infty: added ugm: Pull Request
@otavio: added mcumgr-client: Pull Request
@Peefy: added kcl-cli: Pull Request
@PhDyellow: added ryzen_smu: Pull Request
@Rucadi: added devcontainer: Pull Request
@Sigmanificient: added mini-calc: Pull Request
@sikmir: added tootik: Pull Request
@souxd: added zandronum-alpha: Pull Request
@tiredofit: added docker_26: Pull Request
@toastal: added movim: Pull Request
@Tochiaha: added dhcpig: Pull Request
@TomaSajt: added nekoray: Pull Request
@Tom-Hubrecht: added crabfit: Pull Request
@twitchy0: added ngrid: Pull Request
@uncenter: added cargo-shear: Pull Request
@vinnymeller: added _0xpropo: Pull Request
@xrelkd: added anchor: Pull Request
@yu-re-ka: added fernglas: Pull Request
@yu-re-ka: added redict: Pull Request

New modules added this week:

@linsui: added lazygit: Pull Request
@toastal: added movim: Pull Request

Nix Weekly Recap: 2024-04-07

Sun, 07 Apr 2024 00:00:00 GMT

Kicking this week off with a bang, @lassulus has announced the launch of the new official wiki, found at wiki.nixos.org. This effort was a long time coming and is the beginning of a more cohesive developer and user experience for Nix.

@RaitoBezarius has provided an update on the previously mentioned sponsorship policy. A policy has not yet been decided on and the involved parties are continuing to work out the details to ensure that the wishes of community members and contributors are respected. A decision is likely to be made in time for the next board meeting. For more details on what has been discussed, see NixOS/foundation Issue 110 and NixOS/foundation PR 128.

@Mic92 introduced the Clan project, a toolkit to make it easier to manage networks of VPN-connected NixOS machines. The project combines many tools from the Nix ecosystem such as nixos-anywhere and sops-nix with a uniform CLI. To learn more about Clan, take a look at the project's blog post.

@mrcjk announced kickstart-nix.nvim. If you've wanted to bring your Neovim setup into the Nix world, this is a great place to start! The project has been transferred to the nix-community organization on GitHub and more information can be found there for how to get started.

@AdoPi released Shoji-Nix, a NixOS module designed to manage and securely store your SSH keys in your NixOS configuration repository. Shoji-Nix brings together Age, Sops, and Shoji to securely and efficiently store .ssh details. The project is available on GitHub.

@getchoo brought some delight to the Nix ecosystem this week with the announcement of Catpuccin-nix! Having been brought in to the official Catpuccin GitHub organization, it is now the definitive way to make use of the soothing pastel theme for NixOS systems or machines using Home-Manager. The Catpuccin-nix flake is available on GitHub.

@tgrcdev surprised everyone with the announcement of a Garry's Mod Nix flake. It provides everything you need to run a dedicated Garry's mod server, including packages and a NixOS module.

New packages added this week:

@9999years added git-gr: Pull Request
@a-kenji added centerpiece: Pull Request
@ahoneybun added cosmic-store: Pull Request
@aorith added komac: Pull Request
@aorith added silverbullet: Pull Request
@apraga added rtg-tools: Pull Request
@arduano added gpustat: Pull Request
@Assistant added flye: Pull Request
@averagebit added meg: Pull Request
@bhankas added ocis-bin: Pull Request
@ByteSudoer added makima: Pull Request
@cbarrete added buckle: Pull Request
@cideM added inflow: Pull Request
@clot27 added _64gram: Pull Request
@colemickens added sn-pro: Pull Request
@Dan-Theriault added hujsonfmt: Pull Request
@dav-wolff added stylance-cli: Pull Request
@DontEatOreo added hidden-bar: Pull Request
@drupol added daytona-bin: Pull Request
@eclairevoyant added anyrun: Pull Request
@ehmry added ex_doc: Pull Request
@ehmry added min: Pull Request
@emilytrau added pingme: Pull Request
@emilytrau added sloth-app: Pull Request
@eopb added cargo-information: Pull Request
@fabaff added cero: Pull Request
@fabaff added malwoverview: Pull Request
@fabaff added nuclei-templates: Pull Request
@fabaff added offat: Pull Request
@fabaff added witnessme: Pull Request
@fd added rnd-name: Pull Request
@GaetanLepage added lexical: Pull Request
@giodamelio added little_boxes: Pull Request
@hatch01 added kshutdown: Pull Request
@iynaix added scope-tui: Pull Request
@kachick added plemoljp, plemoljp-nf, and plemoljp-hs: Pull Request
@keenanweaver added bstone: Pull Request
@lachrymaLF added hydrapaper: Pull Request
@lelgenio added krita-plugin-gmic: Pull Request
@loicreynier added gh-f: Pull Request
@loicreynier added gh-notify: Pull Request
@LordGrimmauld added rmenu: Pull Request
@marmolak added gordonflashtool: Pull Request
@matthiasbeyer added annextimelog: Pull Request
@matthiasbeyer added cargo-autoinherit: Pull Request
@Melkor333 added ansible-navigator: Pull Request
@mguentner added openapi-changes: Pull Request
@Moraxyc added nezha-agent: Pull Request
@msanft added gossip: Pull Request
@msanft added ida-free: Pull Request
@noaccOS added astartectl: Pull Request
@nokazn added proto: Pull Request
@phip1611 added limine: Pull Request
@phip1611 added rosa: Pull Request
@pinpox added wastebin: Pull Request
@RAVENz46 added coppwr: Pull Request
@Rucadi added flatito: Pull Request
@Rutherther added mautrix-meta: Pull Request
@ShamrockLee added gfal2, gfal2-python, and gfal2-util: Pull Request
@Sigmanificient added cano: Pull Request
@soispha added manim-slides: Pull Request
@soyouzpanda added pvsneslib: Pull Request
@spk added upsun: Pull Request
@terrorbyte added go-bare: Pull Request
@thefossguy added ubootNanoPCT6: Pull Request
@TomaSajt added actiona: Pull Request
@TomaSajt added stirling-pdf: Pull Request
@twitchy0 added randomfiletree: Pull Request
@vpochapuis added ldproxy: Pull Request

New modules added this week:

@FabianRig added technitium-dns-server: Pull Request
@jopejoe1 added appimage: Pull Request

Security fixes this week:

@LeSuisse patched curl to fix CVE-2024-2398 and CVE-2024-2004: Pull Request
@LeSuisse patched expat to fix CVE-2023-52425: Pull Request
@LeSuisse patched gnutls to fix CVE-2024-28834 and CVE-2024-28835: Pull Request
@risicle added python311Packages.onnx to fix CVE-2024-27318 and CVE-2024-27319: Pull Request
@risicle patched podman to fix CVE-2024-1753: Pull Request

Nix Weekly Recap: 2024-03-31

Sun, 31 Mar 2024 00:00:00 GMT

Are you feeling lucky? The NixOS community certainly is after, to the best of our knowledge, avoiding a critical backdoor in xz/liblzma (CVE-2024-3094). The security team will still be downgrading the xz package to 5.4.6 to be safe, but this process will result in a mass rebuild of hundreds of thousands of packages meaning that it will take a little more than a week to complete. Note that users can switch the version of the package early if they are willing to perform the builds on their systems. It is not clear whether other vulnerabilities exist in xz or other projects that the attacker has contributed to. A helpful writeup of the events leading up to this point was posted by Evan Boehs and an official page from the original xz author is available here.

With May quickly approaching, a call for a release manager and editor of the 24.05 NixOS release has been made. @figsoda goes into detail about the release process and requirements for these roles. If you are interested in this position, you can get in touch via the announcement's comments or on Matrix.

The end of this week also saw the creation and move to final comment period of a new, exciting RFC: RFC 0173 FCP; NixOS hotline. The community is urged to read it quickly before it is merged in. What an exciting time to be a NixPkgs contributor!

@cdmistman announced the release of rippkgs, a tool capable of searching NixPkgs in under 30 milliseconds! For more information on how the tool works and what makes it different from other existing programs like nix-index, check out the Replit blog post.

@Mic92 has posted a call for testers for nix-ld-rs, a rewrite of the original nix-ld. If you are currently using nix-ld and/or would like to help make sure the new version is working well, please consider testing out the project and reporting any regressions from the original nix-ld on GitHub.

@reckenrode has started a new thread to share updates on Darwin in NixPkgs, separate from the previous thread cataloguing sponsored work.

@fricklerhandwerk posted a full roadmap for the Nix documentation ecosystem. Documentation has been a pain point for many Nix newcomers as well as veterans and seeing the issues being addressed in a clear outline is great. Thank you to @danielsidhion and everyone else contributing to the improvement of learning and reference materials for Nix.

Last week an important update to the way venv creation in Python environments works was made by @cwp to correct the previous, subtly broken, implementation. This was not mentioned in the previous nixpkgs.news article, but is worth knowing about for anyone using Python with Nix.

New packages added this week:

@9999years: added git-upstream: Pull Request
@aaronjheng: added protobuf_26: Pull Request
@Aleksanaa: added ascii-draw: Pull Request
@Aleksanaa: added pdf4qt: Pull Request
@alexarice: added emacsPackages.texpresso: Pull Request
@Atemu: added memtest_vulkan: Pull Request
@bhankas: added workout-tracker: Pull Request
@ByteSudoer: added gtkhash: Pull Request
@camillemndn: added firefoxpwa: Pull Request
@dotlambda: added mollysocket: Pull Request
@drupol: added lmstudio: Pull Request
@drupol: added rabbit: Pull Request
@drupol: added typstyle: Pull Request
@drupol: added vscode-extensions.jbockle.jbockle-format-files: Pull Request
@drupol: added vscode-extensions.myriad-dreamin.tinymist: Pull Request
@emilioziniades: added dotnet-outdated: Pull Request
@fabaff: added cvemap: Pull Request
@fabaff: added python311Packages.romy: Pull Request
@fabaff: added python312Packages.llama-index-embeddings-ollama: Pull Request
@fabaff: added python312Packages.securityreporter: Pull Request
@fabaff: added vunnel: Pull Request
@fabaff: added world-serpant-search: Pull Request
@fabaff: added wsrepl: Pull Request
@gaelreyrol: added pythonPackages.pulsar: Pull Request
@GaetanLepage: added bunbun: Pull Request
@GaetanLepage: added vimPlugins.improved-search-nvim: Pull Request
@GaetanLepage: added vimPlugins.qmk-nvim: Pull Request
@Guanran928: added mpv-osc-modern, modernx, and modernx-zydezu: Pull Request
@hatch01: added httpy-cli: Pull Request
@hennk: added poetryPlugins.poetry-plugin-poeblix: Pull Request
@jnsgruk: added rockcraft: Pull Request
@jonringer: added autoAddDriverRunpathHook: Pull Request
@katanallama: added vscode-extensions.ms-toolsai.datawrangler: Pull Request
@kintrix007: added vlc-bittorrent: Pull Request
@LamprosPitsillos: added tinymist: Pull Request
@Lilacious: added railway-travel: Pull Request
@MatthewCroughan: added scion-bootstrapper: Pull Request
@mkg20001: added docuum: Pull Request
@mweinelt: added wyoming-satellite: Pull Request
@n8henrie: added single-file-cli: Pull Request
@OPNA2608: added famistudio: Pull Request
@OPNA2608: added rcu: Pull Request
@pinpox: added wastebin: Pull Request
@ri-char: added affine: Pull Request
@RossComputerGuy: added llvmPackages_18: Pull Request
@rsniezek: added protonmail-desktop: Pull Request
@s1ls: added invidious-router: Pull Request
@sarahec: added python311Packages.scalene: Pull Request
@sarcasticadmin: added aprx: Pull Request
@Scrumplex: added wlx-overlay-s: Pull Request
@t4ccer: added buffermanager: Pull Request
@vbgl: added ocamlPackages_6_2.ocaml: Pull Request
@Vinetos: added kmeet: Pull Request
@Vinetos: added quarkus: Pull Request
@wineee: added wayfirePlugins.focus-request, wayfirePlugins.wayfire-shadows, and wayfirePlugins.wwp-switcher: Pull Request
@wolfgangwalther: added python3Packages.sphinx-rtd-dark-mode: Pull Request
@yunfachi: added uni-sync: Pull Request

New modules added this week:

@s1ls: added invidious-router: Pull Request

Security fixes this week:

@adamcstephens: updated consul to fix CVE-2024-24786: Pull Request
@buckley310: updated brave to fix CVE-2024-2883, CVE-2024-2885, CVE-2024-2886, and CVE-2024-2887: Pull Request
@jian-lin: updated emacs to fix CVE-2024-30205, CVE-2024-30204, CVE-2024-30203, and CVE-2024-30202: Pull Request
@LeSuisse: patched expat to fix CVE-2024-28757: Pull Request
@LeSuisse: updated coreutils to fix CVE-2024-0684: Pull Request
@natsukium: updated python310 to fix CVE-2023-52425, CVE-2024-0450, and CVE-2023-6597: Pull Request
@networkException: updated ungoogled-chromium to fix CVE-2024-2883, CVE-2024-2885, CVE-2024-2886, and CVE-2024-2887: Pull Request
@risicle: updated cimg to fix CVE-2024-26540: Pull Request
@stigtsp: updated perlPackages.HTTPBody to fix CVE-2013-4407: Pull Request
@yayayayaka: updated gitlab to fix CVE-2023-6371 and CVE-2024-2818: Pull Request

Nix Weekly Recap: 2024-03-24

Sun, 24 Mar 2024 00:00:00 GMT

This week the Nix Community saw a brand new rewrite of Devenv for its 1.0 release and a series of videos and a blog post about how to manage secrets with NixOS.

@domenkozar stole the show with the announcement of Devenv 1.0. This release has moved Devenv from Python to Rust to take advantage of much of the tooling created for Tvix and a host of other improvements enabled by rebuilding things in Rust. Devenv 1.0 is not entirely backwards compatible so it is advised to read the migration guide if you are using a previous version.

@EmergentMind has created a series of videos and a blog post explaining how to handle NixOS Secrets Management. These materials go into detail, explaining how Sops and nix-sops work and can be integrated into your configuration.

New packages added this week:

@azuwis: added blueutil: Pull Request
@NyCodeGHG: added appium-inspector: Pull Request
@fgaz: added apng2gif, gif2apng, and apngopt: Pull Request
@max-niederman: added photonvision: Pull Request
@lorenz: added tinymembench: Pull Request
@PierreBeucher: added novops: Pull Request
@flokli: added cbtemulator: Pull Request
@imadnyc: added plasticity: Pull Request
@doronbehar: added vim-language-server: Pull Request
@soispha: added redlib: Pull Request
@mkg20001: added cert-viewer: Pull Request
@xokdvium: added ch341eeprom: Pull Request
@jonboh: added opcua-commander: Pull Request
@zebreus: added zebreus: Pull Request
@elpdt852: added nix-snapshotter: Pull Request

New modules added this week:

@diogotcorreia: added dnsproxy: Pull Request
max-niederman: added photonvision: Pull Request
@NyCodeGHG: added prometheus-fritz-exporter Pull Request

Security fixes this week:

@risicle: added patches for wolfssl to fix CVE-2024-0901 and CVE-2024-1545: Pull Request
@xworld21: updated texlive to fix CVE-2024-25262 Pull Request
@LeSuisse: updated smarty3 to fix CVE-2018-25047, CVE-2022-29221 and CVE-2023-28447: Pull Request
@LeSuisse: updated varnish60 to fix CVE-2023-44487: Pull Request
@mweinelt: updated spidermonkey_115 to fix CVE-2024-29943 and CVE-2024-29944: Pull Request
@ifurther: updated teamviewer to fix CVE-2023-38545: Pull Request
@LeSuisse: updated zookeeper to fix CVE-2024-23944: Pull Request
@felschr: updated tor-browser and mullvad-browser to fix CVE-2024-29944: Pull Request

Nix Weekly Recap: 2024-03-17

Sun, 17 Mar 2024 00:00:00 GMT

This week was a tumultuous one for the Nix community. Concerns were raised for a second time about the sponsorship of branded Nix events by weapons manufacturers. Many contributors made their stance clear in an Open Letter. Additional discussion took place on the NixOS forums, but it became clear that the NixOS Foundation Board members and other named members from the Open Letter do not currently believe this sponsorship is an issue despite the explicit requests of community members to not have their work used to advertise weapons services. If you have not already, please consider adding your signature to the letter. Thank you to @samueldr for creating the Open Letter and thank you to all of the community members who have signed it so far.

Now, for the rest of the news...

@edolstra announced the release of Nix 2.21! This release includes improvements for error reporting within nix repl, adds support for --debugger sessions to access let bindings, and includes new options for the nix profile upgrade and nix profile remove commands. All changes in this release are available in the release notes.

@lucperkins shared that FlakeHub Cache is in private beta. FlakeHub Cache brings Flake-level caching to FlakeHub, all private and managed with JSON Web Tokens (JWTs) for authentication. Pushing to the cache is currently available in GitHub Actions and GitLab support is coming soon. Determinate Systems is currently looking for feedback and encourage folks to sign up for the beta and ask any questions in the company's Discord.

@shivaraj-bh has announced services-flake, a new project to provide portable services that work on both Linux and macOS using Nix Flakes. This is an ambitious goal and could use all of the help the community can deliver. If you are interested in contributing, you can find the project on GitHub.

@aanderse announced the release of teraflops, a tool that @aanderse has used to replace NixOps. Teraflops combines colmena, terraform, and nixos-infect to enable system deployment and management using Nix Flakes. The project is available on GitHub.

@Freed-Wu published a port of vscode-ide-nix to Vim. This port provides Vim users with the same set of tools that VS Code users have been using to develop with Nix. For a full set of instructions on how to start using the plugin, see the GitHub Repository.

New packages added this week:

@quantenzitrone added yt-dlg: Pull Request
@Atemu added proton-ge-bin: Pull Request
@Aleksanaa added kana: Pull Request
@gador added jsonformatter: Pull Request
@khaneliman added jankyborders: Pull Request
@mweinelt added pretix: Pull Request
@emilytrau added mkalias: Pull Request
@cbrewster added hermitcli: Pull Request
@savedra1 added clipse: Pull Request
@matthiasbeyer added openapi-tui: Pull Request
@Aleksanaa added gnome-graphs: Pull Request

Fixes and updates this week:

@devusb upgraded chiaki4deck from 1.5.1 to 1.6.4: Pull Request
@moekhall upgraded google-cloud-sdk from 452.0.1 to 467.0.0: Pull Request
@hsjobeki improved the performance of lib.foldl' by removing an extra function call: Pull Request
@paveloom upgraded mold from 2.4.1 to 2.30.0: Pull Request
@evils applied a patch to fix an AMD segfault: Pull Request
@Ma27 upgraded grafana from 10.2.4 to 10.2.5, fixing CVE-2024-1442: Pull Request
@K900 purified some curses: Pull Request
@bobby285271 upgraded the MATE desktop to 1.28: Pull Request
@amarshall fixed an issue with Blender's dependencies that caused incorrect renders: Pull Request

Nix Weekly Recap: 2024-03-10

Sun, 10 Mar 2024 00:00:00 GMT

Welcome back to the weekly recap! This week Nix received an important security fix, NixOS tests can now be executed on macOS systems, and some community tooling additions.

One of the most important announcements this week comes from @thufschmitt which mentions a security fix for a Nix fixed-output derivation sandbox bypass. The bug allowed for the content of a fixed-output derivation (FOD) to be changed after it had been registered by Nix. Any derivations that consumed the corrupted one would then be contaminated. The issue has been patched in Nix 2.20.5, 2.19.4, 2.18.2, and 2.3.18. You can check your current Nix version with the command nix --version. If your version is lower than one of the listed releases then you should update immediately. The announcement provides more information along with links to both the registered CVE (CVE-2024-27297) and GitHub security advisory.

@Gabriel439 announced that NixOS tests can now be run on macOS! This should help NixOS module maintainers to continue supporting modules when switching systems, but can now also extend existing Nix CI support more easily to Darwin systems. To use this feature, macOS users will still need to use something like darwin.linux-builder in order to build and execute NixOS tests.

@thefossguy released nixos-needsreboot, a tool to determine if your NixOS machine needs to be rebooted. It can be difficult to know if your system's Linux or Systemd versions have been upgraded and the machine needs to restart to use them. The option system.autoUpgrade.allowReboot might not always get things right, which is where this new tool comes in. nixos-needsreboot can be found on GitHub.

@kampka has created NixOS modules for running Crowdsec, a crowd-sourced security tool designed to protect servers, services, and applications by analyzing user behavior and network traffic. Feedback and contributions are welcome in the project's GitHub repository.

New packages added this week:

@Aleksanaa added librum: Pull Request
@iynaix added kanagawa-gtk-theme: Pull Request
@elisesouche added makehuman: Pull Request
@motiejus added gamja: Pull Request
@drupol added gawd: Pull Request
@eliandoran added lunacy: Pull Request
@bjornfor added eclipse-embedcpp: Pull Request
@nicolas-goudry added seabird: Pull Request
@Aleksanaa added metronome: Pull Request
@gwg313 added sesh: Pull Request
@erdnaxe added kernel-hardening-checker: Pull Request

Fixes and updates this week:

@skeuchel fixed systemd builds on riscv64 and ppc64: Pull Request
@wegank upgraded unrar from 6.2.12 to 7.0.7: Pull Request
@khaneliman upgraded wttrbar from 0.8.2 to 0.9.0: Pull Request
@aaronjheng upgraded sshs from 3.4.0 to 4.2.1: Pull Request
@adamcstephens upgraded jujutsu from 0.14.0 to 0.15.1: Pull Request
infisical was automatically upgraded from 0.17.1 to 0.18.0: Pull Request
mapproxy was automatically upgraded from 1.15.1 to 2.0.2: Pull Request

Nix Weekly Recap: 2024-03-03

Sun, 03 Mar 2024 00:00:00 GMT

This week the Nix community saw a new deployment tool, the beginning of a rework for the NixOS website, discussion of budgeting for community teams, and several useful updates to NixPkgs.

@thufschmitt posted an announcement following up on last month's team members meeting which raised the question of funding for teams. While it is appreciated that so many members of the community have dedicated time, effort, and finances to running certain projects, moving forward at least some of this work can and should be funded by the NixOS Foundation. To this end, established teams will be allocated an initial budget of 100€/month. This should help alleviate some strain and allow important parts of NixOS infrastructure to be better delegated to responsible individuals.

@avocadoom announced the beginning of a NixOS website rework! The announcement covers some of the current pain points felt from the technology and UI/UX of the current site. Moving forward, there are three distinct phases that the project will follow: migrate to Astro, improve UX and fix accessibility issues, and finally to modernize the look and feel of the site. A beta version is available for testing this first phase of changes and bug reports are welcome on GitHub. If you're interested in contributing to the project, the team is coordinating on the marketing Matrix channel.

@lewo released Comin, a pull-oriented deployment tool intended to bring GitOps to NixOS system management. Configured systems will poll remotes for new configuration and rebuild to reflect the changes. Comin also provides some useful features like testing branches to see if changes work correctly, polling multiple remotes, and machine migrations. The project can be found on GitHub.

In addition to explicit announcements this week, some notable pull requests were merged:

@abysssol upgraded ollama from 0.1.26 to 0.1.27: Pull Request
@GaetanLepage upgraded presenterm from 0.6.1 to 0.7.0: Pull Request, Changelog
@D3vil0p3r added a new package rsmangler: Pull Request
@tobim fixed screen sharing for Slack on Wayland: Pull Request
@fabaff added a new package ready-check: Pull Request
@thefloweringash modified the callPackagesWith to now propagate function arguments: Pull Request
@codifryed added a new package coolercontrol: Pull Request
@K900 added Plasma 6: Pull Request
@ryanccn upgraded nrr from 0.5.2 to 0.8.0: Pull Request
@RobbieBuxton fixed an issue with enabling cudaSupport in dlib: Pull Request
@D3vil0p3r added a new package magicrescue: Pull Request

Nix Weekly Recap: 2024-02-25

Sun, 25 Feb 2024 00:00:00 GMT

Note: This post was part of an early experiment to automatically generate a weekly recap for the Nix community. The following text was generated using OpenAI's GPT-4.

This week in the Nix community, a wide array of announcements and pull requests showcased the vibrant trajectory of NixOS, emphasizing tools for enhanced learning, development, community support, and system updates.

Starting with impactful community announcements, EmergentMind introduced a visualization tool designed to aid users in building NixOS configurations through the post "Anatomy of a NixOS config", marking an innovative move towards visual learning methodologies in the ecosystem. Following this, polygon unveiled "Nix-buildproxy, reproducible HTTP/HTTPS responder in sandboxed Nix builds", addressing the reproducibility challenge in Nix builds by providing predictable HTTP/HTTPS responses. Thufschmitt announced a new financial strategy to support community teams through "Community teams budget", allocating money for minor expenses and outlining future fundraising efforts. Loqusion introduced "Typix: A Nix library for compiling Typst projects", further broadening Nix's application horizon.

The NixOS Foundation's acceptance into the Google Summer of Code 2024, as shared by Janik in "We got accepted for Google Summer of Code 🎉", paves the way for student contributions under seasoned mentorship. Emigs95`s post "Combining Nix with Terraform for better DevOps" illustrates the fusion of Nix with Terraform, enhancing DevOps practices. Infinisil's announcement of the Final Comment Period for RFC 0166 on Nix formatting in "RFC 0166 FCP: Nix formatting", invites community feedback on this crucial topic. Scrumplex's introduction of "Nixpkgs-xr: Nightly packages for XR/AR/VR tools and apps", highlights efforts to embrace emerging XR/AR/VR technologies within NixOS.

In the realm of pull requests, significant contributions were made across various aspects of the Nix ecosystem. Peret initiated squirreldisk: init at 0.3.4, a Rust-built disk usage analyzer, while heijligen worked on enhancing the Python ecosystem with python3Packages.e3-testsuite: init at v26.0 and updating python3Packages.e3-core: v22.3.1 -> v22.4.0. Mjm offered an update to Prometheus-NUT exporter through nixos/prometheus-nut-exporter: use extraFlags, add nutVariables option, and arthsmn introduced apt-mirror: init at 0.5.4, key for those maintaining local apt mirrors. Mweinelt's update in linuxPackages: 6.1 -> 6.6 is crucial for the upcoming NixOS 24.05 release, alongside alyssais ensuring ZFS compatibility with the latest kernels in zfs: update latestCompatibleLinuxPackages. Eclairevoyant's contribution with hyprlock: init at 0.1.0 serves the Hyprland enthusiasts, and further additions like mfrw's bpftop: init at 0.2.1 and viperML's elf-info: init at 0.3.0 enrich the ecosystem. Lolbinarycat introduced emacsclient-commands: init at unstable-2023-09-22, adding to the convenience for Emacs users.

Nix Weekly Recap: 2024-02-18

Sun, 18 Feb 2024 00:00:00 GMT

Note: This post was part of an early experiment to automatically generate a weekly recap for the Nix community. The following text was generated using OpenAI's GPT-4.

In a week full of innovation and significant updates, the Nix community has witnessed contributions that promise to enhance both the usability and the security of the Nix ecosystem. Among the noteworthy announcements, szlend introduced "nix-pkgset," a library aimed at tackling the challenges of cross-compilation. Described in the Nix-pkgset: Cross-compilation aware (flake) package sets announcement, this initiative seeks to integrate cross-compilation awareness seamlessly into nixpkgs, inviting feedback to finesse its approach. Parallelly, zaynetro unveiled "Explainix," a tool designed to simplify learning Nix syntax through visual aids. The project was introduced in the announcement Explainix: Learn Nix syntax visually, showcasing a commitment to making Nix more accessible to a broader audience. Furthermore, lassulus's post Nixpkgs merge bot testing and plan outlines an ambitious plan to automate the Nixpkgs PR merge process, signaling a move towards more efficient package updates.

In the Pull Requests (PR) arena, several key updates were pushed. risicle led a pivotal security update by advancing openobserve to version 0.8.1 in PR #289522, addressing CVE-2024-25106 and broadening compatibility. The progression of cloc to version 2.00, as shown in PR #289667, improved the code counting tool's utility. Kernel updates brought by JerrySM64 in PR #289695 for Zen and Liquorix kernels highlight the ongoing development efforts in the kernel space. The dual enhancement of openvr and gamescope by Scrumplex in PR #275372 marks significant strides in virtual reality and gaming display technologies. The update of atuin to version 18.0.0 by 0x4A6F in PR #287492 indicates robust improvement, though specifics were not disclosed. risicle also enhanced the photo stitching application hugin to version 2023.0.0 in PR #289564, addressing potential vulnerabilities. The security-centric update for Nomad in PR #289588 tackled CVE-2024-1329, stressing the importance of security upkeep. The ZFS Snapshot Replication tool, zfs-replicate, saw an update from 3.2.6 to 3.2.7 in PR #288338, courtesy of r-ryantm. Additionally, new software like roslyn-ls was introduced by konradmalik in PR #285645, and significant security patches, like those in qt5.qtbase by K900 in PR #289706, were implemented, underscoring the continuous effort to maintain and secure the ecosystem.

These updates and contributions reflect the Nix community's commitment to not only fostering innovation and simplifying the learning process for its tools but also maintaining a secure and efficient ecosystem for its widespread user base.

Nix Weekly Recap: 2024-02-11

Sun, 11 Feb 2024 00:00:00 GMT

Note: This post was part of an early experiment to automatically generate a weekly recap for the Nix community. The following text was generated using OpenAI's GPT-4.

In a series of exciting developments within the Nix community, several innovative projects and updates have been announced, showcasing the thriving ecosystem and the continual growth of this versatile toolset. Starting a wave of innovation, the announcement of Typhon: Nix-based continuous integration introduces a prototype developed as an alternative to Hydra. This project, revealed by pnmadelaine, aims to enhance the functionality of continuous integration platforms by leveraging Nix's unique features. Typhon promises a user-friendly webapp interface and a fully declarative nature, encouraging community feedback to refine and develop its capabilities further.

The Nix team shared a comprehensive Nix team report covering the period from 2023-04 to 2024-01, prepared by fricklerhandwerk. This report outlines the achievements and challenges faced by the team, emphasizing the successful merge of over 500 pull requests and closure of more than 300 issues. It sets ambitious goals for the upcoming months, including CLI stabilization and reduction of the backlog to March 2023 levels, highlighting the project's dynamic progress and dedication to improvements.

In an exciting media development, mightyiam announced the launch of Full Time Nix (podcast), a dedicated platform for sharing in-depth discussions on Nix-related topics. The podcast aims to serve as a new channel for the community to connect and share insights, further enriching the Nix ecosystem with multimedia content.

RaitoBezarius has put forth a Call for testing: "This Week in NixOS", an initiative to create a weekly digest summarizing developments, updates, and discussions within the NixOS ecosystem. Delivered through a Matrix channel, this digest promises concise updates and aims to simplify the process of keeping up with the rapidly evolving Nix landscape.

The moderation team warmly welcomes Ryan Hendrickson (@rhendric) as its newest member. Ryan's prior contributions and expertise in automating the Nixpkgs PR pipeline will be invaluable to maintaining a supportive and productive community environment.

yunfachi introduces Umport: Automatic Import of Modules, a convenient Nix library feature designed to simplify the import process for Nix expressions. By automating imports and offering the option to copy files to the /nix/store, Umport addresses common pain points in managing large sets of Nix configurations.

Last but not least, AshleyYakeley's announcement of NixVirt: manage virtual machines presents a tool that seamlessly integrates with NixOS and Home Manager, allowing users to define and manage virtual machines and networks with libvirt. This project signifies a noteworthy advancement in harnessing the power of virtualization directly through Nix configurations.

In the vibrant Nix community this week, several significant contributions have made their way into the NixPkgs repository, reflecting the ongoing efforts to enhance and expand the ecosystem. Here's a recap of some of the noteworthy pull request activities:

patka-123 has addressed a build issue with python311Packages.pytest-mypy: fix build. Although the specific fixes were not detailed, the contribution ensures the package's stability and usability for developers relying on this testing tool.

The SDL2 library saw a major update thanks to the efforts of trofi, moving from version 2.28.5 to 2.30.0. This update, crucial for game developers and multimedia applications, brings new features and improvements as detailed in the release notes linked in the pull request.

adamcstephens has announced significant version jumps for the openvswitch package, updating to 3.1.4 from 3.1.1 and backporting the LTS version to 2.17.9 from 2.17.6. These updates are not only security improvements, including patches for CVE-2023-3966, but also introduce functional enhancements such as parallel testing capabilities.

A new tool, gittuf version 0.3.0, has been introduced by flandweber aiming at ensuring the integrity of git repositories, an essential addition for developers focusing on security (gittuf: init at 0.3.0).

Two promising packages initiated by bcdarwin cater to the Python community; python311Packages.pygltflib: init at 1.16.1 and python311Packages.spatial-image: init at 1.0.0, enhancing the capabilities in handling glTF files and providing a multidimensional image data structure respectively.

The Python ecosystem also sees the introduction of python311Packages.highdicom at version 0.22.0 by bcdarwin, offering improved DICOM abstractions for medical imaging (python311Packages.highdicom: init at 0.22.0).

patka-123's effort sees the initialization of paratest version 7.4.1, a tool that allows running PHPUnit tests in parallel, providing efficiency gains for PHP developers (paratest: init at 7.4.1).

In a critical fix, Hayajiro addressed a hidden dependency issue for Inkcut, ensuring its smooth operation by explicitly including setuptools (inkcut: add hidden setuptools dependency).

Lastly, the VirtualBox build process received a significant enhancement from blitz, optimizing it by reducing dependencies on vendored libraries, thereby promising quicker build times and ease of updates (virtualbox: use fewer vendored libraries).

This week's pulse in the Nix community highlights the ever-evolving nature of software, with contributors tirelessly working to ensure that the Nix ecosystem remains robust, secure, and ahead of the curve.