{"push_id":3032085571,"size":150,"distinct_size":8,"ref":"refs/heads/haskell-updates","head":"2342fb4d880706966db53f35f938f57ca8ba4f8b","before":"1c5faef9f73d4dfc15c97e8d1c2c7c8ac4b6a3b1","commits":[{"sha":"93c7503adb4914a2aaba5f11354ba41bddbbb8ee","author":{"name":"Lancelot SIX","email":"93770740a7d9943767148ee2d3e3719b1b6def97@lancelotsix.com"},"message":"pythonPackages.OWSLib: init at 0.17.0","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/93c7503adb4914a2aaba5f11354ba41bddbbb8ee"},{"sha":"0982b78ddecdb89aedd77d658616d32a4b14dd73","author":{"name":"Raphael Borun Das Gupta","email":"46f1a0bd5592a2f9244ca321b129902a06b53e03@raphael.dasgupta.ch"},"message":"add maintainer das-g","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/0982b78ddecdb89aedd77d658616d32a4b14dd73"},{"sha":"36d695f696e73ff1be79b48e01df663eaac22e3b","author":{"name":"Aaron Andersen","email":"5a7a6a189b47cd31d24667a751e4003cd04eced5@fosslib.net"},"message":"filesystems: escape spaces in fstab with \\040","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/36d695f696e73ff1be79b48e01df663eaac22e3b"},{"sha":"094105efa10dcc35e143ada74edfcf1ea210c786","author":{"name":"Mateusz Wykurz","email":"066979a9d02e346b673d77f98f90e7aa781e24da@gmail.com"},"message":"cpuset: init at 1.5.8","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/094105efa10dcc35e143ada74edfcf1ea210c786"},{"sha":"d593c4d4c9e2e75e329a6341a472910a4ddcdf56","author":{"name":"Ding Xiang Fei","email":"eb6854d4abae0b1d9cf809d6c9d83c5735757e0e@gmail.com"},"message":"linuxPackages.ndiswrapper: 1.59 -> 1.62-pre, fix build","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/d593c4d4c9e2e75e329a6341a472910a4ddcdf56"},{"sha":"02e1f00ffdd0c1a74fbc0be5f314b8921b0c9165","author":{"name":"Léo Gaspard","email":"1f0a51c36efaa0f44e4899c26d2028681997c8ea@gaspard.io"},"message":"dovecot, opensmtpd: add link to test in `meta.tests`\n\nRationale\n---------\n\nCurrently, tests are hard to discover. For instance, someone updating\n`dovecot` might not notice that the interaction of `dovecot` with\n`opensmtpd` is handled in the `opensmtpd.nix` test.\n\nAnd even for someone updating `opensmtpd`, it requires manual work to go\ncheck in `nixos/tests` whether there is actually a test, especially\ngiven not so many packages in `nixpkgs` have tests and this is thus most\nof the time useless.\n\nFinally, for the reviewer, it is much easier to check that the “Tested\nvia one or more NixOS test(s)” has been checked if the file modified\nalready includes the list of relevant tests.\n\nImplementation\n--------------\n\nCurrently, this commit only adds the metadata in the package. Each\nelement of the `meta.tests` attribute is a derivation that, when it\nbuilds successfully, means the test has passed (ie. following the same\nconvention as NixOS tests).\n\nFuture Work\n-----------\n\nIn the future, the tools could be made aware of this `meta.tests`\nattribute, and for instance a `--with-tests` could be added to\n`nix-build` so that it also builds all the tests. Or a `--without-tests`\nto build without all the tests. @Profpatsch described in his NixCon talk\nsuch systems.\n\nAnother thing that would help in the future would be the possibility to\nreasonably easily have cross-derivation nix tests without the whole\nNixOS VM stack. @7c6f434c already proposed such a system.\n\nThis RFC currently handles none of these concerns. Only the addition of\n`meta.tests` as metadata to be used by maintainers to remember to run\nrelevant tests.","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/02e1f00ffdd0c1a74fbc0be5f314b8921b0c9165"},{"sha":"ee09650a4c6a4c40adb0ec0b003634a5a0cfac48","author":{"name":"Renaud","email":"f099758cc17d830b28a002204cb83fc2f10a82b1@users.noreply.github.com"},"message":"flyway: 5.1.4 -> 5.2.1\n\nDistribute only the community edition JARs which are the only ones under Apache 2.0 license\r\nThis also reduce closure size","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/ee09650a4c6a4c40adb0ec0b003634a5a0cfac48"},{"sha":"7f05d6186c22d50fc54f166e0083c0c2cd065cbe","author":{"name":"Daniël de Kok","email":"b1c1d8736f20db3fb6c1c66bb1455ed43909f0d8@danieldk.eu"},"message":"picard: 1.4.2 -> 2.0.4\n\nChanges:\n\nhttps://github.com/metabrainz/picard/releases\nhttps://blog.musicbrainz.org/2018/07/19/picard-2-0-released/\n\nUpgrades to Python 3 and PyQt 5.","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/7f05d6186c22d50fc54f166e0083c0c2cd065cbe"},{"sha":"95a1054a48a26ed4a5de8730d1ccb8c21fd6d3df","author":{"name":"Raphael Borun Das Gupta","email":"46f1a0bd5592a2f9244ca321b129902a06b53e03@raphael.dasgupta.ch"},"message":"protozero: init at 1.6.3","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/95a1054a48a26ed4a5de8730d1ccb8c21fd6d3df"},{"sha":"78dbe695436200b0d6ffd5f85f372411700afb6c","author":{"name":"Raphael Borun Das Gupta","email":"46f1a0bd5592a2f9244ca321b129902a06b53e03@raphael.dasgupta.ch"},"message":"libosmium: init at 2.14.2","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/78dbe695436200b0d6ffd5f85f372411700afb6c"},{"sha":"295cae7f1c8a609116acb0637178b829e116500b","author":{"name":"Raphael Borun Das Gupta","email":"46f1a0bd5592a2f9244ca321b129902a06b53e03@raphael.dasgupta.ch"},"message":"osmium-tool: init at 1.9.1","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/295cae7f1c8a609116acb0637178b829e116500b"},{"sha":"9973a266abf266c40f7f1082a917904ece459d53","author":{"name":"Matthew Harm Bekkema","email":"1f9c3f81692a34ea686cd3f3f66ebcb6633c2f45@gmail.com"},"message":"firefox-esr-60: 60.2.2 -> 60.3.0 [critical security fixes]\n\nThis update bumps the package to the latest stable version containing a\nfew security fixes:\n\n- CVE-2018-12392: Crash with nested event loops\n  When manipulating user events in nested loops while opening a document\n  through script, it is possible to trigger a potentially exploitable\n  crash due to poor event handling.\n\n- CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript\n  A potential vulnerability was found in 32-bit builds where an integer\n  overflow during the conversion of scripts to an internal UTF-16\n  representation could result in allocating a buffer too small for the\n  conversion. This leads to a possible out-of-bounds write.\n  Note: 64-bit builds are not vulnerable to this issue.\n\n- CVE-2018-12395: WebExtension bypass of domain restrictions through header rewriting\n  By rewriting the Host request headers using the webRequest API, a\n  WebExtension can bypass domain restrictions through domain fronting.\n  This would allow access to domains that share a host that are\n  otherwise restricted.\n\n- CVE-2018-12396: WebExtension content scripts can execute in disallowed contexts\n  A vulnerability where a WebExtension can run content scripts in\n  disallowed contexts following navigation or other events. This allows\n  for potential privilege escalation by the WebExtension on sites where\n  content scripts should not be run.\n\n- CVE-2018-12397: Missing warning prompt when WebExtension requests local file access\n  A WebExtension can request access to local files without the warning\n  prompt stating that the extension will \"Access your data for all\n  websites\" being displayed to the user. This allows extensions to run\n  content scripts in local pages without permission warnings when a\n  local file is opened.\n\n- CVE-2018-12389: Memory safety bugs fixed in Firefox ESR 60.3\n  Mozilla developers and community members Daniel Veditz and Philipp\n  reported memory safety bugs present in Firefox ESR 60.2. Some of these\n  bugs showed evidence of memory corruption and we presume that with\n  enough effort that some of these could be exploited to run arbitrary\n  code.\n\n- CVE-2018-12390: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3\n  Mozilla developers and community members Christian Holler, Bob Owen,\n  Boris Zbarsky, Calixte Denizet, Jason Kratzer, Jed Davis, Taegeon Lee,\n  Philipp, Ronald Crane, Raul Gurzau, Gary Kwong, Tyson Smith, Raymond\n  Forbes, and Bogdan Tara reported memory safety bugs present in Firefox\n  62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort that some of these\n  could be exploited to run arbitrary code.\n\nSource: https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/9973a266abf266c40f7f1082a917904ece459d53"},{"sha":"a7b471a31c85218e5e27577e198ea0c1193d984e","author":{"name":"André-Patrick Bubel","email":"e6fb06210fafc02fd7479ddbed2d042cc3a5155e@andre-bubel.de"},"message":"i3: 4.15 -> 4.16","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/a7b471a31c85218e5e27577e198ea0c1193d984e"},{"sha":"f2fadc0e91abc0488fb7127d8513239a5885717c","author":{"name":"Daiderd Jordan","email":"1bde7b404f102c5a20d4f20493f05b0abc6cc2d7@gmail.com"},"message":"darwin: don't include cf-private in framework dependencies\n\nUsing cf-private can cause problems, it's better to include it\nexplicitly in places where it's actually required.","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/f2fadc0e91abc0488fb7127d8513239a5885717c"},{"sha":"fd1ffd0e0d8a701616cd51c33717f6ad4fdbd508","author":{"name":"Daiderd Jordan","email":"1bde7b404f102c5a20d4f20493f05b0abc6cc2d7@gmail.com"},"message":"SDL2: include cf-private on darwin\n\nIt's not included implicitly by the frameworks anymore.\n\n    Undefined symbols for architecture x86_64:\n      \"_NSDefaultRunLoopMode\", referenced from:\n          _Cocoa_PumpEvents in SDL_cocoaevents.o\n      \"_NSURLIsAliasFileKey\", referenced from:\n          -[SDLWindow performDragOperation:] in SDL_cocoawindow.o\n      \"_OBJC_CLASS_$_NSArray\", referenced from:\n          objc-class-ref in SDL_cocoaclipboard.o\n          objc-class-ref in SDL_cocoakeyboard.o\n          objc-class-ref in SDL_cocoawindow.o\n      \"_OBJC_CLASS_$_NSData\", referenced from:\n          objc-class-ref in SDL_cocoamouse.o\n      \"_OBJC_CLASS_$_NSDate\", referenced from:\n          objc-class-ref in SDL_cocoaevents.o\n      \"_OBJC_CLASS_$_NSDictionary\", referenced from:\n          objc-class-ref in SDL_cocoaevents.o\n      \"_OBJC_CLASS_$_NSMutableArray\", referenced from:\n          objc-class-ref in SDL_cocoawindow.o\n      \"_OBJC_CLASS_$_NSURL\", referenced from:\n          objc-class-ref in SDL_cocoawindow.o\n      \"_OBJC_CLASS_$_NSUserDefaults\", referenced from:\n          objc-class-ref in SDL_cocoaevents.o\n      \"_OBJC_EHTYPE_$_NSException\", referenced from:\n          GCC_except_table67 in SDL_cocoawindow.o\n    ld: symbol(s) not found for architecture x86_64","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/fd1ffd0e0d8a701616cd51c33717f6ad4fdbd508"},{"sha":"7edfded9c3936f50fb227aabc6423f2736f07eae","author":{"name":"Daiderd Jordan","email":"1bde7b404f102c5a20d4f20493f05b0abc6cc2d7@gmail.com"},"message":"SDL: include cf-private on darwin\n\nIt's not included implicitly by the frameworks anymore.\n\n    Undefined symbols for architecture x86_64:\n      \"_NSDefaultRunLoopMode\", referenced from:\n          _QZ_PumpEvents in SDL_QuartzEvents.o\n      \"_OBJC_CLASS_$_NSArray\", referenced from:\n          objc-class-ref in SDL_QuartzEvents.o\n      \"_OBJC_CLASS_$_NSDate\", referenced from:\n          objc-class-ref in SDL_QuartzEvents.o\n    ld: symbol(s) not found for architecture x86_64","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/7edfded9c3936f50fb227aabc6423f2736f07eae"},{"sha":"dfbf6213b4d0f7dd8b44899b18efe6bf3b3b8b6d","author":{"name":"Peter Hoeg","email":"4b8373d016f277527198385ba72fda0feb5da015@hoeg.com"},"message":"pythonPackages.snapcast: init at 2.0.9","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/dfbf6213b4d0f7dd8b44899b18efe6bf3b3b8b6d"},{"sha":"3f1957fefe4793eebd4b585b7d2ad18986ffaeb1","author":{"name":"Peter Hoeg","email":"4b8373d016f277527198385ba72fda0feb5da015@hoeg.com"},"message":"hass: support snapcast","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/3f1957fefe4793eebd4b585b7d2ad18986ffaeb1"},{"sha":"8abc1cccfbf5b72f90f71627f8a13ddccf4c3670","author":{"name":"Daiderd Jordan","email":"1bde7b404f102c5a20d4f20493f05b0abc6cc2d7@gmail.com"},"message":"SDL: move overrides out of all-packages.nix\n\nUsing defaults makes it much easier to understand what the values are.","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/8abc1cccfbf5b72f90f71627f8a13ddccf4c3670"},{"sha":"63418d527fc46eb9e2570fdf2b9bd443f0ea9dc8","author":{"name":"Jon Banafato","email":"44f878afe53efc66b76772bd845eb65944ed8232@jonafato.com"},"message":"vocal: 2.2.0 -> 2.3.0","distinct":false,"url":"https://api.github.com/repos/NixOS/nixpkgs/commits/63418d527fc46eb9e2570fdf2b9bd443f0ea9dc8"}]}
{"actor":{"display_login":"peti"}}