Commit graph

883 commits

Author SHA1 Message Date
Dillen Meijboom c4f5f95d8d
Updated and fixed libstdc++ issue 2020-03-06 10:05:27 +01:00
Matthew Bauer 8c3160b619 bubblewrap: use buildInputs instead of nativeBuildInputs
these are all libraries.
2020-03-05 20:41:46 -05:00
Benjamin Hipple c882a90bc6 procs: 0.9.11 -> 0.9.18 2020-03-05 01:30:08 -05:00
R. RyanTM 543c864f23
aws-google-auth: 0.0.33 -> 0.0.34 2020-03-01 09:16:22 +00:00
Mario Rodas ef97505059
certigo: 1.11.0 -> 1.12.1 2020-02-28 19:20:00 -05:00
Maciej Krüger 5214b7244c
ssh-import-id: init at 5.8 2020-02-26 13:15:33 +01:00
Leigh Perry 7c8351de97
google-cloud-sdk: 268.0.0 -> 281.0.0 (#80944) 2020-02-24 17:12:25 +00:00
Suraj Barkale 4aaab192a7
aws-vault: 4.5.1 to 5.3.2 (#80949)
The aws-vault development has switched to using go modules.
Therefore this package has also been updated to use `buildGoModule`
helper.
2020-02-24 12:08:05 +00:00
Aaron Olson 9b8a14bb7e
google-cloud-sdk: fix Darwin build by only stripping local symbols (#80554)
Darwin won't strip relocatable symbols, so strip only local symbols
from cygrpc.so

See also 6ceebc441c (commitcomment-37355193)
2020-02-21 17:28:54 +00:00
Jonathan Ringer 4dd173560d azure-cli: 2.0.81 -> 2.1.0 2020-02-20 20:22:33 -08:00
Frederik Rietdijk 9fede4c38e
Merge pull request #76279 from PsyanticY/s3bro
s3bro: init at 2.8
2020-02-18 18:37:24 +01:00
edef 5bda7e7fb2 google-cloud-sdk: remove gsutil test
The command module references the tests, and since all command modules
get imported at startup, dbaafbbf73
turned it into a startup crash.

Unless you're actively hacking on gsutil, this command isn't much use,
so we're better off without it.
2020-02-18 13:31:42 +00:00
edef 0c403efde9 google-cloud-sdk: disable checking for gsutil updates
The update checking mechanism references the tests, and thus
dbaafbbf73 turned it into a crash at
startup.

It isn't much use in nixpkgs, so we're better off without it.
2020-02-18 13:31:42 +00:00
Oleksii Filonenko f00f60ffbb procs: add filalex77 as a maintainer 2020-02-18 03:25:35 +02:00
Oleksii Filonenko 1e1ad96cf6 procs: 0.9.9 -> 0.9.11 2020-02-18 03:23:19 +02:00
Benjamin Hipple eb11feaa0b treewide: change fetchCargoTarball default to opt-out
Changes the default fetcher in the Rust Platform to be the newer
`fetchCargoTarball`, and changes every application using the current default to
instead opt out.

This commit does not change any hashes or cause any rebuilds. Once integrated,
we will start deleting the opt-outs and recomputing hashes.

See #79975 for details.
2020-02-13 22:41:37 -08:00
Mario Rodas d799e35079
procs: 0.9.6 -> 0.9.9 2020-02-13 04:20:00 -05:00
ahiaao f216b03d5b tigervnc: fix compatibility with xorgserver 1.20.7 2020-02-11 09:46:24 +01:00
Jonathan Ringer 3f7f043dea azure-cli: force PEP420 for azure-mgmt packages 2020-02-10 16:45:11 -08:00
Frederik Rietdijk ec3edaf7b5 Merge master into staging-next 2020-02-10 12:55:47 +01:00
Jonathan Ringer 259d76d541 azure-cli: 2.0.80 -> 2.0.81 2020-02-09 19:25:37 -08:00
Jonathan Ringer d26288a514 azure-cli: freeze azure-mgmt-policyinsights 2020-02-09 19:25:37 -08:00
Florian 50ad81d76b lexicon: init at 3.3.17 2020-02-09 16:57:57 +01:00
Frederik Rietdijk 65dcb3f08f python: awscli: 1.16.266 -> 1.17.13
We force the use of docutils 0.16. If this does not work out, we
can still override the version as this is an application.
2020-02-09 09:17:31 +01:00
Oleg Pykhalov 9405324531 mycli: Add paramiko as a propagated build input
Fixes error:

    Cannot use SSH transport because paramiko isn't installed, please
    install paramiko or don't use --ssh-host=
2020-02-06 20:03:01 +01:00
Ryan Mulligan ed762106d0
Merge pull request #79346 from r-ryantm/auto-update/procs
procs: 0.9.5 -> 0.9.6
2020-02-06 09:37:21 -08:00
R. RyanTM 1c0a1e2862 procs: 0.9.5 -> 0.9.6 2020-02-06 13:50:30 +00:00
Danylo Hlynskyi 437e1f69be
bash-my-aws: init at 20200111 (#76793)
* bash-my-aws: init at 20191231

Create bma-init

* Update
2020-02-05 22:37:52 +02:00
edef 6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Jonathan Ringer 727abb55c7 azure-cli: freeze azure-mgmt-deploymentmanager 2020-02-02 09:43:05 -08:00
Frederik Rietdijk c195ef6aab
Merge pull request #78928 from NixOS/staging-next
Staging next
2020-02-02 15:35:18 +01:00
Mario Rodas 77f2d9bf1c
procs: 0.9.2 -> 0.9.5 2020-01-31 04:20:00 -05:00
Frederik Rietdijk 5cc0468a20 Merge staging into staging-next 2020-01-31 00:16:31 +01:00
Bruno Bigras 3922c927ab lego: 3.2.0 -> 3.3.0 2020-01-29 20:51:25 -05:00
xrelkd 5648d92acc eksctl: 0.12.0 -> 0.13.0 2020-01-29 03:24:07 +08:00
Frederik Rietdijk cdff57e1fc Merge staging-next into staging 2020-01-28 10:48:36 +01:00
Mario Rodas e39afd4095
procs: 0.9.0 -> 0.9.2 2020-01-26 04:20:00 -05:00
Mario Rodas 476a4fa40d
Merge pull request #78149 from talyz/nomachine-6.9.2
nomachine-client: 6.8.1 -> 6.9.2
2020-01-25 03:25:53 -05:00
Mario Rodas 4dbba7a143
procs: 0.8.16 -> 0.9.0 2020-01-23 09:00:00 -05:00
Jonathan Ringer 1474940ea4 ansible_2_8: 2.8.6 -> 2.8.7 2020-01-22 01:12:28 -08:00
Jonathan Ringer 3444d76c1b ansible_2_*: overridePythonAttrs -> overrideAttrs 2020-01-22 01:12:28 -08:00
Jonathan Ringer 99eb9231d4 ansible_2_9: init at 2.9.2 2020-01-22 01:12:28 -08:00
zimbatm f8df74be4b
vncdo: fix build 2020-01-21 13:16:01 +01:00
talyz 62af7804ef nomachine-client: 6.8.1 -> 6.9.2 2020-01-21 10:29:39 +01:00
Mario Rodas 949c5f8451
Merge pull request #78068 from r-ryantm/auto-update/acme.sh
acme-sh: 2.8.3 -> 2.8.5
2020-01-20 07:36:58 -05:00
R. RyanTM 02fad0d598 acme-sh: 2.8.3 -> 2.8.5 2020-01-20 03:00:35 +00:00
Mario Rodas 30a7902609
sewer: enable on darwin 2020-01-19 04:20:00 -05:00
Mario Rodas fc408d55e6 sewer: 0.7.3 -> 0.7.9 2020-01-19 04:20:00 -05:00
R. RyanTM d97a34cfcf sewer: 0.7.0 -> 0.7.3 2020-01-17 10:44:46 +00:00
Robin Gloster aa489adfd8
Merge pull request #77686 from alyssais/urllib3
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
2020-01-17 00:38:52 +01:00
Mario Rodas 5f586605df
Merge pull request #77670 from amarrella/update/eksctl
eksctl: 0.11.1 -> 0.12.0
2020-01-14 21:49:58 -05:00
Alyssa Ross 76af9e8438
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
This reverts commit a1eacb900e.

Adding dev outputs to python packages means they can't be included in
a Python environment created with python3.withPackages, because
makePythonPath will include the dev output, which is empty apart from
nix-support, rather than the out output, which contains all the Python
code.
2020-01-14 16:00:00 +00:00
Alessandro Marrella 730371336b
eksctl: 0.11.1 -> 0.12.0 2020-01-14 11:55:10 +00:00
Jonathan Ringer 32b5c579b0 azure-cli: 2.0.79 -> 2.0.80 2020-01-13 14:27:30 -08:00
Tom Bereknyei 621bb74bd8 Update 2020-01-11 19:54:23 -05:00
edef 178ac3cb99 google-cloud-sdk: include openssl(1) in PATH (#77277)
Otherwise, it might fail with a mysterious error:

    ERROR: (gcloud.beta.compute.reset-windows-password) Your platform does not support OpenSSL.
2020-01-10 09:42:37 +00:00
Jonathan Ringer 26aa690447 azure-cli: 2.0.78 -> 2.0.79 2020-01-09 10:09:02 -08:00
Jonathan Ringer 94dea31ea2 azure-cli: freeze azure-mgmt-iotcentral 2020-01-09 10:09:02 -08:00
worldofpeace dfd115a116 swiftclient: add setuptools
Traceback (most recent call last):
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/bin/.swift-wrapped", line 7, in <module>
    from swiftclient.shell import main
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/__init__.py", line 20, in <module>
    from .client import *  # noqa
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/client.py", line 33, in <module>
    from swiftclient import version as swiftclient_version
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/version.py", line 15, in <module>
    import pkg_resources
ModuleNotFoundError: No module named 'pkg_resources'
2020-01-08 11:06:47 -05:00
Simonas Kazlauskas 0320725e86 berglas: 0.2.1 -> 0.5.0 2020-01-07 14:20:10 +02:00
Tom Bereknyei e5208af780 bash-my-aws: init at 20191231
Create bma-init
2020-01-01 14:53:15 -05:00
Maximilian Bosch 839c0ea7a5
treewide: *Inputs are flat lists 2019-12-31 01:10:02 +01:00
Robin Gloster 760e23136a
treewide: *inputs are lists 2019-12-31 01:09:25 +01:00
Jonathan Ringer 8043df949b aws_shell: fix dep issues 2019-12-30 16:46:51 +01:00
Jonathan Ringer fe058ee1ed awscli: fix build 2019-12-30 16:46:51 +01:00
Jonathan Ringer e1bb62f9bc azure-cli: 2.0.77 -> 2.0.78 2019-12-30 16:46:50 +01:00
Jan Tojnar a69e309794
Merge branch 'staging-next' into staging 2019-12-30 05:24:03 +01:00
Florian Klink 0aa09d3c75 simpl_le: 0.16.0 -> 0.17.0 2019-12-29 19:30:31 +01:00
Florian Klink d07796b871 certbot: 0.39.0 -> 1.0.0 2019-12-29 19:30:31 +01:00
Frederik Rietdijk 5aed91512d Merge staging-next into staging 2019-12-29 10:20:05 +01:00
Maximilian Bosch fa28c7750a
Merge pull request #76442 from r-ryantm/auto-update/tigervnc
tigervnc: 1.10.0 -> 1.10.1
2019-12-26 20:31:01 +01:00
Jan Tojnar 4bbc6cc66f
Merge branch 'staging-next' into staging 2019-12-25 05:18:52 +01:00
R. RyanTM e91f467811 tigervnc: 1.10.0 -> 1.10.1 2019-12-24 12:01:35 -08:00
PsyanticY c82658ac4a s3bro: init at 2.8 2019-12-23 17:18:23 +01:00
Mario Rodas 2f2047c378
Merge pull request #75196 from r-ryantm/auto-update/bubblewrap
bubblewrap: 0.3.3 -> 0.4.0
2019-12-22 18:11:52 -05:00
Mario Rodas 932f5f6b88
clair: 2.0.9 -> 2.1.2 2019-12-22 00:00:00 -05:00
Terje Larsen 7a99d1e392
awscli: pin colorama to 0.4.1
This is pinned to 0.4.1 in the upstream awscli package.
2019-12-20 14:23:12 +01:00
Mario Rodas b066646e04
docker-credential-helpers: init at 0.6.3 2019-12-15 18:18:18 -05:00
Andreas Rammhold b21b92947e ansible_2_6: 2.6.17 -> 2.6.20
This addresses the following security issues:

  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when
    invalid parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 9bdb89f740/changelogs/CHANGELOG-v2.6.rst
2019-12-15 21:25:07 +01:00
Andreas Rammhold 64e2791092 ansible_2_7: 2.7.11 -> 2.7.15
This fixes the following security issues:
  * Ansible: Splunk and Sumologic callback plugins leak sensitive data
    in logs (CVE-2019-14864)
  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when invalid
    parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 0623dedf2d/changelogs/CHANGELOG-v2.7.rst (v2-7-15)
2019-12-15 21:24:59 +01:00
itsHMR a46e3ebae5 tigervnc: add perl to buildInputs (#75367)
tigervnc ships vncserver, quote from the documentation:
vncserver - a wrapper script which makes starting Xvnc more convenient vncserver requires Perl.
2019-12-14 18:06:01 +01:00
Jonathan Ringer 8f8d977f2a azure-cli: freeze azure-mgmt-recoveryservicesbackup 2019-12-10 18:28:21 -08:00
Sarah Brofeldt b6a61da54e
Merge pull request #75290 from marsam/update-awsweeper
awsweeper: init at 0.4.1
2019-12-09 17:02:02 +01:00
Mario Rodas 5419097ccd
procs: 0.8.13 -> 0.8.16 2019-12-09 04:20:00 -05:00
Mario Rodas cf79e2bdba
awsweeper: init at 0.4.1 2019-12-08 04:20:00 -05:00
R. RyanTM 910feb39aa bubblewrap: 0.3.3 -> 0.4.0 2019-12-07 18:26:55 -08:00
Benjamin Hipple d52cfb7661 awscli: remove unnecessary override on python prompt_toolkit
This override to the old 1.x version of `prompt_toolkit` appears to be
unnecessary; removing it does not change the hash of `awscli`.

In a follow-up, we could likely remove the RSA override as well, if we're OK
with patching out the `setup.cfg` requirements. This dropped support for some
old modules, but appears to not break API compatibility otherwise:
https://github.com/sybrenstuvel/python-rsa/blob/master/CHANGELOG.md#version-40---released-2018-09-16
2019-12-07 19:17:55 +01:00
xrelkd 9a4f4691ae eksctl: 0.11.0 -> 0.11.1 2019-12-06 21:03:24 +08:00
Timo Kaufmann cc6cf0a96a
Merge pull request #74371 from bbigras/lego
lego: 3.0.2 -> 3.2.0
2019-12-05 09:39:52 +01:00
xrelkd 76480b60b8 eksctl: 0.10.2 -> 0.11.0 2019-12-05 10:51:54 +08:00
Jonathan Ringer 313deeeb52 azure-cli: freeze azure-mgmt-imagebuilder 2019-12-03 00:17:58 -08:00
Jonathan Ringer 519558a9e7 azure-cli: freeze azure-mgmt-sqlvirtualmachine at 0.4.0 2019-12-02 23:46:15 -08:00
Jonathan Ringer b59adfc731 azure-cli: 2.0.76 -> 2.0.77 2019-12-01 19:47:46 -08:00
R. RyanTM 0321a2aa12 tigervnc: 1.9.0 -> 1.10.0
* tigervnc: 1.9.0 -> 1.10.0 (#74679)
+ refresh meta.homepage
2019-11-30 15:42:50 +01:00
Jonathan Ringer d24d36b20c azure-cli: freeze cosmosdb 2019-11-29 13:51:34 -08:00
Bruno Bigras bedc67f760 lego: 3.0.2 -> 3.2.0 2019-11-28 00:28:19 -05:00
Mario Rodas 0f3cf4234d
Merge pull request #74108 from r-ryantm/auto-update/aws-google-auth
aws-google-auth: 0.0.32 -> 0.0.33
2019-11-25 05:32:25 -05:00