Commit Graph

808091 Commits

Author SHA1 Message Date
Wolfgang Walther
0262bcddf2 workflows/eval: test all available versions
With this change, we start running Eval on all available Lix and Nix
versions. Because this requires a lot of resources, this complete test
is only run when `ci/pinned.json` is updated.

The resulting outpaths are checked for consistency with the target
branch. A difference will cause the `report` job to fail, thus blocking
the merge, ensuring Eval consistency for Nixpkgs across different
versions.

This implements a kind of "ratchet style" check: Since we originally
confirmed that the versions currently in Nixpkgs at the time of this
commit match Eval behavior of Nix 2.3, we can ensure consistency with
Nix 2.3 down the road, even without testing for it explicitly.

There had been one regression in Eval consistency for Nix between 2.18
and 2.24 - two tests in `tests.devShellTools` produce different results
between Lix 2.91+ (which was forked from Nix 2.18) and Nix 2.24+. I
assume it's unlikely that such a change would be "fixed" by now, thus I
added an exception for these.

As a bonus, we also present the total time in seconds it takes for Eval
to complete for every tested version in a summary table. This allows us
to easily see performance improvements for Eval due to version updates.
At this stage, this time only includes the "outpaths" step of Eval, but
not the generation of attrpaths beforehand.

(cherry picked from commit b523f257ac)
2025-08-12 08:22:54 +00:00
Wolfgang Walther
446ff34e11 ci/eval/compare: reorder step summary
Move "Packages" up, because it's much shorter and easier to scroll past.
This way both Packages and Performance are visible immediately.

(cherry picked from commit f05895fb3c)
2025-08-12 08:22:54 +00:00
Wolfgang Walther
7693833eeb workflows: fix actions/download-artifact hashes
The Dependabot update change the hashes to the latest main branch commit
instead of the v5.0.0 tag - also it didn't adjust the tags in the
comments accordingly. Last but not least, one of the references used a
`@v5` reference instead of the commit hash. The latter is probably what
Dependabot tripped on.

(cherry picked from commit 51e6b0e40b)
2025-08-12 08:22:54 +00:00
xanderio
aa68d16c20 [Backport release-25.05] dependency-track: 4.13.2 -> 4.13.3 (#432813) 2025-08-12 09:18:12 +02:00
Vincent Laporte
4e2fc116be ocamlPackages.mdx: add missing dependency to result
(cherry picked from commit cca779286a)
2025-08-12 08:28:40 +02:00
Weijia Wang
09624d8fc2 julia_111: 1.11.5 -> 1.11.6
(cherry picked from commit aa9abfd720)
2025-08-12 07:35:00 +02:00
Weijia Wang
bfdd7206eb julia_111-bin: 1.11.5 -> 1.11.6
(cherry picked from commit 2cc3ecba01)
2025-08-12 07:35:00 +02:00
R. Ryantm
6c1a96bac0 easycrypt: 2025.03 -> 2025.08
(cherry picked from commit e1e49992a9)
2025-08-12 07:34:03 +02:00
Yohann Boniface
216c131889 [Backport release-25.05] shellhub-agent: 0.19.2 -> 0.20.0 (#432631) 2025-08-12 00:31:03 +02:00
Emily
ddae11e58c [Backport release-25.05] matrix-authentication-service: fix http_listener_assets_path_default() (#432882) 2025-08-11 20:39:36 +02:00
emilylange
f50363b8bc matrix-authentication-service: fix http_listener_assets_path_default()
to point to `$out/share/$pname/assets/` instead of `./share/assets/`.

This allows one to omit `path =` in

~~~nix
{
  http.listeners = [{
    resources = [{
      name = "assets";
      path = "${pkgs.matrix-authentication-service}/share/matrix-authentication-service/assets";
    }];
  }];
}
~~~

so it looks like

~~~nix
{
  http.listeners = [{
    resources = [
      { name = "assets"; }
    ];
  }];
}
~~~

The cause for this was probably just a typo, as we replaced the string
in `#[cfg(not(any(feature = "docker", feature = "dist")))]` despite
building with `#[cfg(feature = "dist")]`.

See https://github.com/element-hq/matrix-authentication-service/blob/v0.20.0/crates/config/src/sections/http.rs#L39-L52

(cherry picked from commit 0387f7cba4)
2025-08-11 17:50:34 +00:00
teutat3s
620be2770c matrix-authentication-service: use substituteInPlace
--replace-fail, substituteInPlace --replace is deprecated

(cherry picked from commit 733428167d)
2025-08-11 17:50:34 +00:00
jade
fab5f6e818 [Backport release-25.05] capnproto: fix fibers on static builds (#432764) 2025-08-11 19:01:26 +02:00
Seth Flynn
38b0b1ebc5 [Backport release-25.05] sydbox: 3.37.2 -> 3.37.6 (#432656) 2025-08-11 12:34:31 -04:00
Franz Pletz
fb0c5a635e [Backport release-25.05] librewolf-unwrapped: 141.0.2-1 -> 141.0.3-1 (#432811) 2025-08-11 18:29:51 +02:00
Wolfgang Walther
e0ff01a8ad [Backport release-25.05] workflows/build: avoid downloading from cachix (#432860) 2025-08-11 16:22:45 +00:00
Wolfgang Walther
52a04aef17 workflows/build: build shells on a single darwin runner only
Because we have Rosetta, we can use a single darwin runner to build both
shells. Most time is spent for downloading Nix and checking out Nixpkgs
anyway and this can be saved if only run once.

Also, this prepares for the deprecation of the old macos-13 runners,
which were based on x86_64 CPUs in September 2025:
https://github.blog/changelog/2025-07-11-upcoming-changes-to-macos-hosted-runners-macos-latest-migration-and-xcode-support-policy-updates/

(cherry picked from commit 56d29bbae1)
2025-08-11 16:15:49 +00:00
Wolfgang Walther
fb86dcb57c workflows/build: avoid downloading from cachix
This avoids downloading results from cachix, when they don't need to be
rebuilt, which just wastes time and resources.

(cherry picked from commit f105ab12f6)
2025-08-11 16:15:49 +00:00
Wolfgang Walther
a240d578c7 [Backport release-25.05] workflows: checkout pinned nixpkgs explicitly (#432858) 2025-08-11 16:09:05 +00:00
Wolfgang Walther
41315a2699 actions/get-merge-commit: bump actions/checkout to v5.0.0
A previous commit from Dependabot did this for all the workflows, but
Dependabot doesn't update the actions folder, apparently.

(cherry picked from commit 46d5594714)
2025-08-11 16:04:17 +00:00
Wolfgang Walther
06c8d5c918 workflows: checkout pinned nixpkgs explicitly
This is slightly faster than downloading and extracting a tarball and
additionally allows a sparse checkout. No need to download docs or nixos
for our purpose.

The data is quite noisy, but suggests improvements from anywhere between
5-15 seconds for each job using the pinned nixpkgs.

(cherry picked from commit 8a9f0b8a47)
2025-08-11 16:04:16 +00:00
Wolfgang Walther
15e17895b5 workflows: remove extra_nix_config.sandbox
This is true by default anyway.

(cherry picked from commit de7aa9f213)
2025-08-11 16:04:16 +00:00
Wolfgang Walther
a9caa34a58 [25.05] workflows: bump various actions (#432854) 2025-08-11 15:52:49 +00:00
dependabot[bot]
8a03e71552 build(deps): bump actions/create-github-app-token from 2.0.6 to 2.1.0
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.0.6 to 2.1.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](df432ceedc...0f859bf9e6)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit d1d2650cba)
2025-08-11 17:45:44 +02:00
dependabot[bot]
c3969b49ee build(deps): bump actions/checkout from 4.2.2 to 5.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 593aee095f)
2025-08-11 17:45:44 +02:00
dependabot[bot]
0962de4c4b build(deps): bump actions/download-artifact from 4 to 5
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit c44f3e4699)
2025-08-11 17:45:43 +02:00
dependabot[bot]
8704c56787 build(deps): bump cachix/install-nix-action from 31.4.1 to 31.5.2
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 31.4.1 to 31.5.2.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](f0fe604f8a...fc6e360bed)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-version: 31.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit b455a0a294)
2025-08-11 17:45:40 +02:00
R. Ryantm
e4570d168e dependency-track: 4.13.2 -> 4.13.3
(cherry picked from commit 3b16f338a2)
2025-08-11 14:12:00 +00:00
Dominic
0c86fe2749 librewolf-unwrapped: 141.0.2-1 -> 141.0.3-1
(cherry picked from commit 2a338b9aa1)
2025-08-11 13:53:16 +00:00
Martin Weinelt
8c0c413552 [Backport release-25.05] draupnir: 2.5.0 -> 2.5.1 (#432801) 2025-08-11 15:42:47 +02:00
teutat3s
1302c08ca7 draupnir: 2.5.0 -> 2.5.1
https://github.com/the-draupnir-project/Draupnir/releases/tag/v2.5.1
(cherry picked from commit 9f3929c1f6)
2025-08-11 13:24:12 +00:00
David McFarland
efee05dc31 [Backport release-25.05] omnisharp-roslyn: 1.39.13 -> 1.39.14 (#432531) 2025-08-11 10:04:03 -03:00
Florian Klink
b63e84c7e1 [Backport release-25.05] wlx-overlay-s: make openvr support optional, disable on aarch64-linux (#432785) 2025-08-11 13:45:03 +02:00
Florian Klink
64813207ad wlx-overlay-s: make openvr support optional, disable on aarch64-linux
wlx-overlay-s uses
https://github.com/galister/ovr_overlay_oyasumi/pull/2, which pulls in a
version of ovr_overlay_sys with a build.rs file that doesn't build on
aarch64-linux.

https://github.com/galister/ovr_overlay_oyasumi is a fork of
https://github.com/Raphiiko/ovr_overlay_oyasumi, which is a fork of
https://github.com/TheButlah/ovr_overlay, with the latter not updated in
two years.

Luckily openvr is kinda discouraged, and openxr is the new kid on the
block, and openvr support can be feature-flagged out.

So let's do this, by adding a withOpenVr option to the derivation, that
defaults to false on aarch64-linux, unbreaking it there.

We still keep openvr support for x86_64-linux enabled, to not regress
experience for people already using openvr on x86_64-linux.

(cherry picked from commit 7e8402ce4e)
2025-08-11 11:44:07 +00:00
Jade Lovelace
eba3d184d0 capnproto: fix fibers on static builds
This was broken (https://git.lix.systems/lix-project/lix/issues/955) and
it's just us not using libucontext (and the libucontext package being
broken).

Fibers should basically be supported on all platforms that matter and
it's mostly just some packaging mishaps that stop them from working, so
we want to turn on the requirement by default so that it works.

(cherry picked from commit 784852621a)
2025-08-11 09:53:56 +00:00
R. Ryantm
dbcd03ecba sydbox: 3.37.2 -> 3.37.6
(cherry picked from commit aa4eb4912e)
2025-08-11 00:19:47 +00:00
Yohann Boniface
a84e756ad6 [Backport release-25.05] ed-odyssey-materials-helper: 2.199 -> 2.223 (#432361) 2025-08-11 00:09:34 +02:00
Anders Kaseorg
b614aa6936 linuxPackages.openafs: Patch for Linux kernel 6.16
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
(cherry picked from commit f273a07dff)
2025-08-11 03:01:10 +05:30
R. Ryantm
0ff8a8e1c9 shellhub-agent: 0.19.2 -> 0.20.0
(cherry picked from commit 4316829d6f)
2025-08-10 21:31:02 +00:00
Sarah Brofeldt
f5c13b1e8f [Backport release-25.05] apacheKafka: 3_9: 3.9.0 → 3.9.1, 3_7: 3.7.1 → 3.7.2 (#432187) 2025-08-10 19:50:53 +02:00
Thomas Gerbet
0fd4f6404c [25.05] vmware-workstation: 17.6.3 -> 17.6.4 (#427802) 2025-08-10 19:39:03 +02:00
Thomas Gerbet
aa90f96847 [Backport release-25.05] apacheHttpd: 2.6.62 -> 2.6.65 (#431944) 2025-08-10 19:28:30 +02:00
R. Ryantm
3871b622bd google-chrome: 138.0.7204.183 -> 139.0.7258.66
(cherry picked from commit 29cf5a6887)
2025-08-10 22:52:27 +05:30
Wolfgang Walther
3fee4f508f [Backport release-25.05] nebula: 1.9.5 -> 1.9.6 (#428960) 2025-08-10 16:38:31 +00:00
David McFarland
28360613f1 Backport 431468 to release 25.05 (#432383) 2025-08-10 12:48:47 -03:00
Wolfgang Walther
7f177d11d9 [Backport release-25.05] postgresqlPackages.pg_net: 0.19.4 -> 0.19.5 (#432545) 2025-08-10 15:16:41 +00:00
Wolfgang Walther
a6194dbd54 [Backport release-25.05] protoc-gen-grpc-java: init at 1.73.0 (#429617) 2025-08-10 15:14:39 +00:00
R. Ryantm
1910b6d313 postgresqlPackages.pg_net: 0.19.4 -> 0.19.5
(cherry picked from commit d23fa320a4)
2025-08-10 15:09:33 +00:00
Wolfgang Walther
90aaaa0aa8 [Backport release-25.05] workflows/pr: run in pull_request context to test actions/get-merge-commit (#432538) 2025-08-10 14:34:36 +00:00
Wolfgang Walther
6275050154 workflows/pr: run in pull_request context to test actions/get-merge-commit
This must run in the pull_request context, otherwise changes to the
actions are not tested.

(cherry picked from commit a2a9984ed9)
2025-08-10 14:29:42 +00:00