summary refs log tree commit diff
AgeCommit message (Collapse)Author
2021-03-19build-self: Silent Guile warnings while computing the derivation.Ludovic Courtès
In particular, silence the Guile-Git autoload warnings introduced by c1940fde43c7aca37d67589cc5cb248086d17d56. * build-aux/build-self.scm (build-program): Wrap 'guix-derivation' call in 'parameterize'.
2021-03-19doc: Add 'shepherd-service' example.Ludovic Courtès
* doc/guix.texi (Shepherd Services): Add example.
2021-03-19download: 'tls-wrap' treats premature TLS termination as EOF.Ludovic Courtès
This is a backport of Guile commit 076276c4f580368b4106316a77752d69c8f1494a. * guix/build/download.scm (tls-wrap)[read!]: Wrap 'get-bytevector-n!' call in 'catch' and handle 'error/premature-termination' GnuTLS errors.
2021-03-19gnu: srt2vtt: Update to 0.2.David Thompson
* gnu/packages/video.scm (srt2vtt): Update to 0.2. Wrap executable.
2021-03-19gnu: Add psi.Raghav Gururajan
* gnu/packages/messaging.scm (psi): New variable. Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2021-03-19gnu: Add dragon-drop.Yoav Marco
* gnu/packages/gtk.scm (dragon-drop): New variable. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-19gnu: vis: Update to 0.7.jgart
* gnu/packages/text-editors.scm (vis): Update to 0.7. [home-page, source]: Use sourcehut upstream URIs instead of github. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-19gnu: swi-prolog: Update to 8.3.20.Boris A. Dekshteyn
* gnu/packages/prolog.scm (swi-prolog): Update to 8.3.20. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-19build-system/node: Remove unnecessary imports.Ludovic Courtès
* guix/build-system/node.scm: Remove unnecessary imports.
2021-03-19download: Autoload (guix build download).Ludovic Courtès
* guix/download.scm: Autoload (guix build download). (url-fetch): Rename to... (url-fetch*): ... this, locally, to allow for #:autoload. * guix/status.scm: Autoload (guix build download).
2021-03-19git-download: Autoload Guile-Git.Ludovic Courtès
* guix/git-download.scm: Autoload (git ...) modules.
2021-03-19guix package: Autoload Guile-JSON and (guix describe).Ludovic Courtès
* guix/scripts/build.scm: Autoload (guix import json). * guix/scripts/package.scm: Autoload (guix import json) and (guix describe).
2021-03-19guix describe: Autoload Guile-JSON.Ludovic Courtès
* guix/scripts/describe.scm: Autoload (json).
2021-03-19gnu: openmpi: Update to 4.1.0.Ludovic Courtès
* gnu/packages/mpi.scm (openmpi): Update to 4.1.0.
2021-03-19gnu: openmpi: Add 'release-monitoring-url' property.Ludovic Courtès
* gnu/packages/mpi.scm (openmpi)[properties]: New field.
2021-03-19gnu-maintenance: Better handle empty #:directory for 'latest-html-release'.Ludovic Courtès
In particular, this makes sure we don't add a trailing slash when the user specified a 'release-monitoring-url' property for the 'generic-html' updater. * guix/gnu-maintenance.scm (latest-html-release): When DIRECTORY is empty, do not append it.
2021-03-19gnu: busybox: Update to 1.33.0.Léo Le Bouter
* gnu/packages/busybox.scm (busybox): Update to 1.33.0.
2021-03-19gnu: busybox: Fix CVE-2021-28831.Léo Le Bouter
* gnu/packages/patches/busybox-CVE-2021-28831.patch: New patch. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/busybox.scm (busybox): Apply it.
2021-03-19gnu: ruby-kramdown: Update to 2.3.1 [fixes CVE-2021-28834].Léo Le Bouter
* gnu/packages/ruby.scm (ruby-kramdown): Update to 2.3.1.
2021-03-19gnu: ungoogled-chromium: Update to 89.0.4389.90-1.Marius Bakke
* gnu/packages/patches/ungoogled-chromium-system-opus.patch: New file. * gnu/local.mk (dist_patch_DATA): Adjust accordingly. * gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 89. (%chromium-version): Remove variable. (%ungoogled-revision): Set to 89.0.4389.90-1. (%ungoogled-origin): Conditionally set file name based on commit/tag. (%guix-patches): Add the new file. (libvpx/chromium): Update to 1.9.0-104-gb5d77a48d. (ungoogled-chromium)[version]: Use %UNGOOGLED-REVISION. [source]: Update hash. [arguments]: Adjust #:configure-flags for build system changes. Don't build with external WebRTC SSL library. Remove obsolete substitution. [inputs]: Remove OPENSSL. Change from PIPEWIRE to PIPEWIRE-0.3.
2021-03-18news: Add ‘de’ translation.Florian Pelz
* etc/news.scm (channel-news): Add German translation.
2021-03-18news: Add ‘nl’ translation.Tobias Geerinckx-Rice
* etc/news.scm (channel-news): Add a Dutch translation.
2021-03-18news: Update erratum for '--keep-failed' vulnerability.Tobias Geerinckx-Rice
* etc/news.scm: Change commit to behave in a (hopefully) more expected manner. Change http:// to https:// URL whilst here.
2021-03-18news: Add erratum for '--keep-failed' vulnerability.Tobias Geerinckx-Rice
* etc/news.scm: Add entry.
2021-03-18doc: Document the guidelines for removing inactive committers.Leo Famulari
For more context, see the discussion in <https://bugs.gnu.org/47111>. * doc/contributing.texi (Commit Access): Add paragraph about removing inactive committers.
2021-03-18gnu: emacsy-minimal: Fix build.Tobias Geerinckx-Rice
* gnu/packages/guile-xyz.scm (emacsy-minimal)[native-inputs]: Add autoconf, automake, gettext-minimal, libtool, pkg-config, and texinfo.
2021-03-18tests: Make the STORE test more robust in a "pure" environment.Leo Famulari
Otherwise, the test crashes (not fails) when run in `guix environment --pure guix`. Fixes <https://bugs.gnu.org/46445>. * tests/store.scm (%shell): Fallback to "/bin/sh".
2021-03-18gnu: Add countdown.Ryan Prior via Guix-patches via
* gnu/packages/time.scm (countdown): New variable. Also adds copyright, adds necessary module dependencies, and sorts them alphabetically. Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2021-03-18gnu: emacs-flymake-shellcheck: Update to 0.1-1.ac534e9Morgan Smith
* gnu/packages/emacs-xyz.scm (emacs-flymake-shellcheck): Update to 0.1-1.ac534e9 Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2021-03-18news: Fix ‘nl’ typo.Tobias Geerinckx-Rice
* etc/news.scm (channel-news): This locale's ‘locale’'s ‘lokale’.
2021-03-18gnu: emacs-leaf: Update to 4.4.4.Nicolas Goaziou
* gnu/packages/emacs-xyz.scm (emacs-leaf): Update to 4.4.4.
2021-03-18news: Add ‘nl’ translation.Tobias Geerinckx-Rice
* etc/news.scm (channel-news): Add a Dutch translation.
2021-03-18gnu: dhewm3: Update to 1.5.1.Tobias Geerinckx-Rice
* gnu/packages/game-development.scm (dhewm3): Update to 1.5.1.
2021-03-18gnu: elixir: Update to 1.11.4.Tobias Geerinckx-Rice
* gnu/packages/elixir.scm (elixir): Update to 1.11.4.
2021-03-18gnu: goffice: Update to 0.10.49.Tobias Geerinckx-Rice
* gnu/packages/gnome.scm (goffice): Update to 0.10.49.
2021-03-18gnu: di: Update to 4.49.Tobias Geerinckx-Rice
* gnu/packages/admin.scm (di): Update to 4.49. [source]: Update URL.
2021-03-18gnu: isc-dhcp: Update bundled bind to 9.11.29.Tobias Geerinckx-Rice
* gnu/packages/admin.scm (isc-dhcp)[inputs]: Update bundled bind to 9.11.29.
2021-03-18gnu: bind: Update to 9.16.13.Tobias Geerinckx-Rice
* gnu/packages/dns.scm (isc-bind): Update to 9.16.13.
2021-03-18news: Add ‘de’ translation.Florian Pelz
2021-03-18news: Add entry for '--keep-failed' vulnerability.Ludovic Courtès
* etc/news.scm: Add entry.
2021-03-18gnu: guix: Update to ec7fb66 [security].Ludovic Courtès
This updates the 'guix' package so that it provides the fix for <https://bugs.gnu.org/47229>. * gnu/packages/package-management.scm (guix): Update to ec7fb66.
2021-03-18daemon: Prevent privilege escalation with '--keep-failed' [security].Ludovic Courtès
Fixes <https://bugs.gnu.org/47229>. Reported by Nathan Nye of WhiteBeam Security. * nix/libstore/build.cc (DerivationGoal::startBuilder): When 'useChroot' is true, add "/top" to 'tmpDir'. (DerivationGoal::deleteTmpDir): Adjust accordingly. When 'settings.keepFailed' is true, chown in two steps: first the "/top" sub-directory, and then rename "/top" to its parent.
2021-03-18services: Enable "protected hardlinks" and "protected symlinks" by default.Leo Famulari
References: https://sysctl-explorer.net/fs/protected_hardlinks/ https://sysctl-explorer.net/fs/protected_symlinks/ * gnu/services/sysctl.scm (%default-sysctl-settings): New public variable. (<sysctl-configuration>): Use %default-sysctl-settings as the default value. * gnu/services/base.scm (%base-services): Add sysctl-service-type. * doc/guix.texi (Miscellaneous Services): Document the new defaults. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-18Revert "gnu: python2-urllib3: Update to 1.26.4 [fixes CVE-2021-28363]."Léo Le Bouter
In response to commit 1a265842e634656411bc7304c4648273f174f65e we should no longer need this. Also see <https://bugs.gnu.org/47186>. This reverts commit db87d6ddafd26c5ad657178cf7fdab524d05c522.
2021-03-18gnu: imagemagick/fixed: Redirect old sonames to new sonames.Léo Le Bouter
* gnu/packages/imagemagick.scm (imagemagick/fixed)[arguments]: Add 'fix-compat-cheat-rename-so phase to redirect old soname paths (expected without grafting) to new sonames introduced by ImageMagick 6.9.12-0 and later. These sonames are probably not forward compatible but most probably backwards compatible so it should suffice until we remove the graft.
2021-03-18gnu: linux-libre 4.4: Update to 4.4.262.Leo Famulari
* gnu/packages/linux.scm (linux-libre-4.4-version): Update to 4.4.262. (linux-libre-4.4-pristine-source): Update hash.
2021-03-18gnu: linux-libre 4.9: Update to 4.9.262.Leo Famulari
* gnu/packages/linux.scm (linux-libre-4.9-version): Update to 4.9.262. (linux-libre-4.9-pristine-source): Update hash.
2021-03-18gnu: linux-libre 4.14: Update to 4.14.226.Leo Famulari
* gnu/packages/linux.scm (linux-libre-4.14-version): Update to 4.14.226. (linux-libre-4.14-pristine-source): Update hash.
2021-03-18gnu: linux-libre 4.19: Update to 4.19.181.Leo Famulari
* gnu/packages/linux.scm (linux-libre-4.19-version): Update to 4.19.181. (linux-libre-4.19-pristine-source): Update hash.
2021-03-18gnu: linux-libre 5.4: Update to 5.4.106.Leo Famulari
* gnu/packages/linux.scm (linux-libre-5.4-version): Update to 5.4.106. (linux-libre-5.4-pristine-source): Update hash.