Commit graph

147 commits

Author SHA1 Message Date
Yueh-Shun Li
4bae1b3222 treewide: use lib.warnIf instead of improvised alternatives 2023-11-23 23:21:07 +08:00
Robin Gloster
e5d552f5b9
treewide: update globin's maintainership 2023-10-24 13:09:45 +02:00
Maximilian Bosch
2ee12a93de treewide: remove myself (ma27) from a few packages
It's time again, I guess :>

Main motivation is to stop being pinged about software that I maintained
for work now that I'm about to switch jobs. There's no point in pinging
me to review/test updates or to debug issues in e.g. the Atlassian stack
or on mailman since I use neither personally.

But there's also a bunch of other stuff that I stopped using personally. While
at it I realized that I'm still maintainer of a few tests & modules related to
packages I stopped maintaining in the past already.
2023-10-18 15:47:20 -03:00
Maximilian Bosch
891a43bab2
atlassian-jira: 9.6.0 -> 9.11.1
No release notes for 9.11.1 so far.
For 9.11.0: https://confluence.atlassian.com/jirasoftware/issues-resolved-in-9-11-0-1282244702.html

However, the 9.6 series hat its last release in January 2023[1], so
going to the latest 9.x release with recent patch-level releases.

[1] https://www.atlassian.com/de/software/jira/update
2023-09-19 22:45:37 +02:00
Maximilian Bosch
26f3d4397b
atlassian-confluence: 7.19.12 -> 7.19.14
Fixes CVE-2023-22512.
ChangeLog: https://confluence.atlassian.com/doc/issues-resolved-in-7-19-14-1289421565.html
2023-09-19 22:45:37 +02:00
Maximilian Bosch
4b2e3bd079
atlassian-confluence: 7.19.5 -> 7.19.12
Upgrade to the latest patchlevel of the 7.19 LTS release. Most notably
it contains fixes for the following security bulletins from Atlassian:

* https://confluence.atlassian.com/security/security-bulletin-august-15-2023-1276870882.html
  (upgrade of bundled Apache Tomcat to fix CVE-2023-24998).

* https://confluence.atlassian.com/security/security-bulletin-july-18-2023-1251417643.html
  (fixes CVE-2023-22508, an RCE in Confluence >=6.1 <8.2)

Additionally, each release contains several additional bugfixes and
security fixes:

* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-12-1272383421.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-11-1255451908.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-10-1252328199.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-9-1236440851.html
  (also fixes CVE-2023-22504 which allows users with read-only access to
  a page to upload attachments)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-8-1229036579.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-7-1224638578.html
  (also fixes CVE-2023-22503 an information disclosure of label &
  attachment names)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-6-1207191110.html
2023-08-15 23:06:55 +02:00
R. Ryantm
a4b46044ba atlassian-jira: 9.4.0 -> 9.6.0 2023-03-19 18:39:41 +00:00
Maximilian Bosch
7e4b538af8
atlassian-confluence: 7.19.1 -> 7.19.5
Changes:
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-5-1189802683.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-4-1189480226.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-3-1182925647.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-2-1168852726.html
2023-02-09 20:44:57 +01:00
R. Ryantm
9240dc4a53 atlassian-jira: 9.2.0 -> 9.4.0 2022-12-02 04:56:34 +00:00
Mario Rodas
6444255ff5
Merge pull request from techknowlogick/confluence-7191
atlassian-confluence: 7.18.1 -> 7.19.1
2022-10-28 22:18:16 -05:00
Mario Rodas
4d3cef9f2d
Merge pull request from techknowlogick/bamboo-825
atlassian-bamboo: 8.1.4 -> 8.2.6
2022-10-28 22:17:07 -05:00
techknowlogick
2ee08ee585 atlassian-bamboo: 8.1.4 -> 8.2.6 2022-09-20 17:07:41 -04:00
techknowlogick
7beaf4c941 atlassian-jira: 8.22.4 -> 9.2.0 2022-09-20 17:04:36 -04:00
techknowlogick
b8ac53c772 atlassian-confluence: 7.18.1 -> 7.19.1 2022-09-20 17:03:28 -04:00
Franz Pletz
c092a502df
treewide: remove myself as maintainer from some pkgs
Only packages I'm not able to maintain anymore as of today. Mostly
because I'm haven't been using them in a while.
2022-08-03 14:17:51 +02:00
Maximilian Bosch
f923f5b9aa
Merge pull request from mayflower/crowd-secrets
nixos/crowd: store openid password securely
2022-07-25 12:02:57 +02:00
Maximilian Bosch
ee2413c326
nixos/crowd: store openid password securely 2022-07-22 13:13:12 +02:00
Maximilian Bosch
258060c37d
nixos/confluence: store crowd SSO password securely
Basically the same as the JIRA change[1], but I figured that we can
actually implement that in a backwards compatible manner.

[1] https://github.com/NixOS/nixpkgs/pull/181715
2022-07-20 23:11:53 +02:00
Robin Gloster
161e4838fd
atlassian-crowd: 4.4.0 -> 5.0.1
CVE-2022-26136, CVE-2022-26137
2022-07-20 20:44:13 +02:00
Maximilian Bosch
765cc35042
nixos/atlassian-jira: allow to store SSO password for crowd outside of the Nix store
The option `services.jira.sso.applicationPassword` has been replaced by
`applicationPasswordFile` that needs to be readable by the `jira`-user
or group.

The new `crowd.properties` is created on startup in `~jira` and the
secret is injected into it using `replace-secret`.
2022-07-16 13:01:29 +02:00
WilliButz
50dff7c678
atlassian-jira: 8.22.2 -> 8.22.4
includes fix for CVE-2022-26135

https://confluence.atlassian.com/jira/jira-server-security-advisory-29nd-june-2022-1142430667.html
https://confluence.atlassian.com/jirasoftware/issues-resolved-in-8-22-4-1141486890.html
2022-07-04 11:53:49 +02:00
Robert Scott
3b6bc4b69c treewide: set sourceProvenance for packages containing downloaded jars
these are the easily identifiable cases and will not be comprehensive
2022-06-04 19:47:57 +01:00
Martin Weinelt
4f250bc45a atlassian-confluence: 7.17.1 -> 7.18.1 2022-06-04 12:20:02 +02:00
Robin Gloster
80c94d2204
Merge pull request from techknowlogick/bump-confluence
atlassian-confluence: 7.14.1 -> 7.17.1
2022-04-24 23:05:15 +02:00
techknowlogick
f202a18f60 atlassian-confluence: 7.14.1 -> 7.17.1 2022-04-20 23:19:32 -04:00
techknowlogick
8fa007242c atlassian-jira: 8.22.0 -> 8.22.2 2022-04-20 23:14:47 -04:00
techknowlogick
a4b33a0047 atlassian-bamboo: 8.1.3 -> 8.1.4 2022-04-07 11:56:02 -04:00
techknowlogick
4bedc8d1c6
atlassian-bamboo: init at 8.1.3 ()
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-03-27 15:15:29 +02:00
R. Ryantm
f309e138eb atlassian-jira: 8.21.0 -> 8.22.0 2022-03-20 02:16:19 +00:00
R. Ryantm
2897904fc5 atlassian-jira: 8.20.1 -> 8.21.0 2022-02-12 22:17:14 -08:00
Robin Gloster
e14e80d145
atlassian-jira: 8.19.0 -> 8.20.1 2021-11-02 11:00:17 +01:00
Robin Gloster
c8218905eb
atlassian-crowd: 4.2.0 -> 4.4.0 2021-11-02 10:59:52 +01:00
Robin Gloster
2aaf958e3f
atlassian-confluence: 7.12.2 -> 7.14.1 2021-11-02 10:59:32 +01:00
Meghea Iulian
dc2002ce44
atlassian-jira: 8.16.1 -> 8.19 2021-09-07 10:20:59 +03:00
Felix Buehler
0bbc4bcdba atlassian-crowd: remove phases 2021-07-24 23:52:56 +02:00
elseym
50839b4498
atlassian-confluence: 7.11.0 -> 7.12.2 2021-06-29 17:47:07 +02:00
R. RyanTM
a8458ce5dd atlassian-jira: 8.14.1 -> 8.16.1 2021-05-13 14:32:53 +00:00
Robin Gloster
d9e8a89085
Merge pull request from r-ryantm/auto-update/atlassian-jira
atlassian-jira: 8.14.0 -> 8.14.1
2021-05-09 14:17:01 -05:00
R. RyanTM
50a562c48c atlassian-confluence: 7.10.1 -> 7.11.0 2021-02-16 13:23:58 +00:00
R. RyanTM
fe32b0136a atlassian-jira: 8.14.0 -> 8.14.1 2021-01-29 10:00:42 +00:00
R. RyanTM
36a0baf044 atlassian-confluence: 7.9.0 -> 7.10.1 2021-01-19 02:41:45 +00:00
Ben Siraphob
872973d7d1 pkgs/servers: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Profpatsch
4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
R. RyanTM
18de1a3813 atlassian-jira: 8.13.0 -> 8.14.0 2020-12-05 08:22:02 +00:00
Janne Heß
9979ec11e3
atlassian-confluence: 7.8.1 -> 7.9.0 2020-11-10 11:53:23 +01:00
Linus Heckemann
6a0a9fbd55
Merge pull request from WilliButz/update/atlassian-crowd/4.2.0
atlassian-crowd: 4.0.2 -> 4.2.0
2020-10-28 16:41:27 +01:00
WilliButz
ce982c26be
atlassian-crowd: 4.0.2 -> 4.2.0
https://confluence.atlassian.com/crowd/crowd-4-1-release-notes-1004960631.html
https://confluence.atlassian.com/crowd/crowd-4-2-release-notes-1019381976.html
2020-10-22 13:08:03 +02:00
WilliButz
db7a7f3282
atlassian-confluence: 7.8.0 -> 7.8.1
https://confluence.atlassian.com/doc/issues-resolved-in-7-8-1-1027114676.html
2020-10-22 13:07:28 +02:00
R. RyanTM
590bedc5ec atlassian-jira: 8.12.0 -> 8.13.0 2020-10-21 23:50:00 +00:00
Janne Heß
28b60c1d06
atlassian-confluence: 7.7.4 -> 7.8.0 2020-10-07 14:59:50 +02:00