Commit graph

348 commits

Author SHA1 Message Date
Thiago Kenji Okada
d00a5dad2a
Merge pull request #210761 from abathur/resholve_track_missed_fix
resholve: track missed upstream Nix fix
2023-01-15 18:17:08 +00:00
Thiago Kenji Okada
1d77a86904 resholve: fix CLI tests 2023-01-15 12:29:42 +00:00
Thiago Kenji Okada
03ab899a45 resholve-utils: set disallowedReferences for resholve.mkDerivation 2023-01-15 12:29:42 +00:00
Thiago Kenji Okada
66093a4120 python27: remove stripLibs argument
Since we are now guarantee that the `resholve` is not exposing `python27`,
let's remove the `stripLibs` hack that tried to reduce its size.
2023-01-15 12:29:42 +00:00
Thiago Kenji Okada
c44e0571fc resholve: mark it as knownVulnerabilities, allow resholve-utils usage
We are marking `resholve` itself with `meta.knownVulnerabilities`, and
overriding `resholve-utils` functions's `resholve` with
`meta.knownVulnerabilities = [ ]`.

This way, we can still use `resholve` at build-time without triggering
security warnings, however we can't instantiate `resholve` itself. See:

```
$ nix-build -A resholve
error: Package ‘resholve-0.8.4’ in /.../nixpkgs/pkgs/development/misc/resholve/resholve.nix:48 is marked as insecure, refusing to evaluate.

$ nix-build -A ix
/nix/store/k8cvj1bfxkjj8zdg6kgm7r8942bbj7w7-ix-20190815
```

For debugging purposes, you can still bypass the security checks and
instantiate `resholve` by:

```
$ NIXPKGS_ALLOW_INSECURE=1 nix-build -A resholve
/nix/store/77s87hhqymc6x9wpclb04zg5jwm6fsij-resholve-0.8.4
```
2023-01-15 12:29:42 +00:00
Travis A. Everett
ba5e8f2835 resholve: track missed upstream Nix fix
Forgot to port this resholve Nix API fix in the course of #184292.

Same change as:
github.com/abathur/resholve/commit/b743d2eb12d82e35c567733a7a884174e3606641
2023-01-14 14:38:32 -06:00
Thiago Kenji Okada
e13660c50c resholve: remove openssl from python27 2023-01-10 18:06:09 +00:00
Dennis Gosnell
fb337aedd8
haskellPackages.ldgallery-compiler: mark broken with ghc-9.2 2022-12-24 11:58:07 +09:00
Dennis Gosnell
a6b7e0d0b1
haskellPackages.kriti-lang: mark broken 2022-12-24 11:56:42 +09:00
github-actions[bot]
f7723173d1
Merge master into haskell-updates 2022-12-22 00:12:46 +00:00
R. Ryantm
7be4467e14 brev-cli: 0.6.186 -> 0.6.197 2022-12-21 17:35:52 +08:00
github-actions[bot]
741b781910
Merge master into haskell-updates 2022-12-20 00:12:47 +00:00
Travis A. Everett
6f1729326a resholve: 0.8.3 -> 0.8.4 2022-12-19 14:17:26 -06:00
github-actions[bot]
259fe227c8
Merge master into haskell-updates 2022-12-19 00:12:05 +00:00
figsoda
da56c13198 resholve: fix build on aarch64-darwin 2022-12-18 12:32:53 -05:00
Dennis Gosnell
7a8c0c6dd5
Merge remote-tracking branch 'origin/master' into haskell-updates 2022-12-18 21:09:16 +09:00
figsoda
3a12844afa datafusion-cli: unstable-2022-04-08 -> 15.0.0 2022-12-17 20:42:15 -05:00
github-actions[bot]
efd127818e
Merge master into haskell-updates 2022-12-17 00:12:05 +00:00
Thiago Kenji Okada
283ecac082 resholve: strip unused libraries from python27
Strip unused libraries from resholve's own python27 derivation, further
reducing its size and reducing its attack surface.
2022-12-15 00:07:02 +00:00
github-actions[bot]
a8b61d6609
Merge master into haskell-updates 2022-12-14 00:13:49 +00:00
Thiago Kenji Okada
2e943fc060 resholve: use stripped-down python27
This PR strips down the modified `python27` derivation used by `resholve`. The
idea is to reduce the possible security issues, and also to make it easier to
bootstrap.
2022-12-13 14:37:00 +00:00
github-actions[bot]
2117c50988
Merge master into haskell-updates 2022-12-11 00:14:38 +00:00
Naïm Favier
76e0c4b816
Merge pull request #205387 from abathur/resholve_fold_in_py_deps 2022-12-10 18:14:31 +01:00
R. Ryantm
f82f0ec1b7 brev-cli: 0.6.185 -> 0.6.186 2022-12-10 22:18:15 +08:00
Travis A. Everett
4fabafb699 resholve: fold in python package deps
Protects resholve and dependents from breakages as py27 support is
removed (or rots).
2022-12-09 17:11:59 -06:00
github-actions[bot]
d7af8ae032
Merge master into haskell-updates 2022-12-06 00:12:34 +00:00
Thiago Kenji Okada
c6059ff8b6 resholve: use system from stdenv.hostPlatform instead of alias 2022-12-05 14:12:38 +00:00
github-actions[bot]
e0990771a6
Merge master into haskell-updates 2022-12-04 00:13:21 +00:00
Thiago Kenji Okada
176ed1927d
Merge pull request #204023 from abathur/resholve_enable_python27
resholve: add usable (overridden) python27
2022-12-03 21:12:09 +00:00
Travis A. Everett
02b7967806 resholve: selectively enable python27 2022-12-03 13:51:48 -06:00
R. Ryantm
9f6a874b0c brev-cli: 0.6.184 -> 0.6.185 2022-12-02 20:00:43 +00:00
Robert Hensing
10384aaf6f haskellPackages.hercules-ci-optparse-applicative: bump 2022-12-02 16:48:39 +00:00
R. Ryantm
f04260b00d brev-cli: 0.6.181 -> 0.6.184 2022-11-30 21:20:06 +00:00
Travis A. Everett
362b223255 resholve: 0.8.1 -> 0.8.3 2022-11-27 23:53:25 -06:00
R. Ryantm
476ffc0880 brev-cli: 0.6.179 -> 0.6.181 2022-11-23 17:53:09 +00:00
R. Ryantm
f423b34570 brev-cli: 0.6.176 -> 0.6.179 2022-11-17 21:21:23 +00:00
R. Ryantm
e26059fb71 brev-cli: 0.6.170 -> 0.6.176 2022-11-17 10:05:00 +08:00
R. Ryantm
19fcf50295 brev-cli: 0.6.160 -> 0.6.170 2022-11-13 12:05:19 +00:00
R. Ryantm
a3600d163a brev-cli: 0.6.153 -> 0.6.160 2022-11-11 18:09:31 +08:00
Fabián Heredia Montiel
e4db490117 yelp-tools: 42.0 → 42.1
https://gitlab.gnome.org/GNOME/yelp-tools/-/compare/42.0...42.1
2022-11-08 21:55:59 -06:00
R. Ryantm
41a801bfb1 brev-cli: 0.6.148 -> 0.6.153 2022-11-03 09:46:16 +00:00
R. Ryantm
e99b23f562 brev-cli: 0.6.146 -> 0.6.148 2022-10-29 12:32:07 +00:00
R. Ryantm
b29d19d1ad brev-cli: 0.6.139 -> 0.6.146 2022-10-29 09:49:23 +08:00
R. Ryantm
fe657ff892 brev-cli: 0.6.138 -> 0.6.139 2022-10-27 20:55:08 +08:00
Mario Rodas
bf3f082add
Merge pull request #197875 from r-ryantm/auto-update/brev-cli
brev-cli: 0.6.130 -> 0.6.138
2022-10-26 06:15:03 -05:00
R. Ryantm
571b91f00a brev-cli: 0.6.130 -> 0.6.138 2022-10-26 09:50:19 +00:00
Emily Trau
f42a622155 avrlibc: 2.0.0 -> 2.1.0 2022-10-26 18:27:51 +11:00
R. Ryantm
5136fd8720 brev-cli: 0.6.128 -> 0.6.130 2022-10-25 08:47:19 -07:00
R. Ryantm
b6b3d3c13b brev-cli: 0.6.119 -> 0.6.128 2022-10-22 16:28:26 +08:00
Artturi
56cbdc3b83
Merge pull request #195874 from Artturin/removeinheritxorg 2022-10-15 04:27:23 +03:00