···18 # Since the lib functions are used to 'massage' the options before producing the manual
19 - "lib/**"
20000021permissions: {}
2223jobs:
···18 # Since the lib functions are used to 'massage' the options before producing the manual
19 - "lib/**"
2021+concurrency:
22+ group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.run_id }}
23+ cancel-in-progress: true
24+25permissions: {}
2627jobs:
···11 - .github/workflows/nixpkgs-vet.yml
12 pull_request_target:
13000014permissions: {}
1516# We don't use a concurrency group here, because the action is triggered quite often (due to the PR edit trigger), and contributors would get notified on any canceled run.
···11 - .github/workflows/nixpkgs-vet.yml
12 pull_request_target:
1314+concurrency:
15+ group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.run_id }}
16+ cancel-in-progress: true
17+18permissions: {}
1920# We don't use a concurrency group here, because the action is triggered quite often (due to the PR edit trigger), and contributors would get notified on any canceled run.
···943- Ensure that the meta field information [fits the guidelines](#meta-attributes) and is correct:
944 - License can change with version updates, so it should be checked to match the upstream license.
945 - If the package has no maintainer, a maintainer must be set. This can be the update submitter or a community member that accepts to take maintainership of the package.
000946- Ensure that the code contains no typos.
947- Build the package locally.
948 - Pull requests are often targeted to the master or staging branch, and building the pull request locally when it is submitted can trigger many source builds.
···973- [ ] package version fits guidelines
974- [ ] package builds on ARCHITECTURE
975- [ ] executables tested on ARCHITECTURE
0976- [ ] all depending packages build
977- [ ] patches have a comment describing either the upstream URL or a reason why the patch wasn't upstreamed
978- [ ] patches that are remotely available are fetched rather than vendored
···992- Ensure that the package name and version [fits the guidelines](#package-naming).
993- Ensure that the package versioning [fits the guidelines](#versioning).
994- Ensure that the commit text [fits the guidelines](../CONTRIBUTING.md#commit-conventions).
0995- Ensure that the meta fields [fits the guidelines](#meta-attributes) and contain the correct information:
996 - License must match the upstream license.
997 - Platforms should be set (or the package will not get binary substitutes).
···1020- [ ] `meta.maintainers` is set
1021- [ ] `meta.mainProgram` is set, if applicable.
1022- [ ] build time only dependencies are declared in `nativeBuildInputs`
01023- [ ] source is fetched using the appropriate function
1024- [ ] the list of `phases` is not overridden
1025- [ ] when a phase (like `installPhase`) is overridden it starts with `runHook preInstall` and ends with `runHook postInstall`.
···943- Ensure that the meta field information [fits the guidelines](#meta-attributes) and is correct:
944 - License can change with version updates, so it should be checked to match the upstream license.
945 - If the package has no maintainer, a maintainer must be set. This can be the update submitter or a community member that accepts to take maintainership of the package.
946+- Verify any change of upstream.
947+ - If switching from e.g. PyPi to GitHub, verify that the repo is the official one.
948+ - If switching to a fork, check with external sources like other package repositories for community consensus.
949- Ensure that the code contains no typos.
950- Build the package locally.
951 - Pull requests are often targeted to the master or staging branch, and building the pull request locally when it is submitted can trigger many source builds.
···976- [ ] package version fits guidelines
977- [ ] package builds on ARCHITECTURE
978- [ ] executables tested on ARCHITECTURE
979+- [ ] any change of upstream are verified
980- [ ] all depending packages build
981- [ ] patches have a comment describing either the upstream URL or a reason why the patch wasn't upstreamed
982- [ ] patches that are remotely available are fetched rather than vendored
···996- Ensure that the package name and version [fits the guidelines](#package-naming).
997- Ensure that the package versioning [fits the guidelines](#versioning).
998- Ensure that the commit text [fits the guidelines](../CONTRIBUTING.md#commit-conventions).
999+- Ensure that the source is fetched from an official location, one of our [trusted mirrors](./build-support/fetchurl/mirrors.nix), or a mirror trusted by the authors.
1000- Ensure that the meta fields [fits the guidelines](#meta-attributes) and contain the correct information:
1001 - License must match the upstream license.
1002 - Platforms should be set (or the package will not get binary substitutes).
···1025- [ ] `meta.maintainers` is set
1026- [ ] `meta.mainProgram` is set, if applicable.
1027- [ ] build time only dependencies are declared in `nativeBuildInputs`
1028+- [ ] source is fetched from an official or trusted location
1029- [ ] source is fetched using the appropriate function
1030- [ ] the list of `phases` is not overridden
1031- [ ] when a phase (like `installPhase`) is overridden it starts with `runHook preInstall` and ends with `runHook postInstall`.
···1+diff --git a/configure b/configure
2+index 53e90a7..4afeb58 100755
3+--- a/configure
4++++ b/configure
5+@@ -411,7 +411,7 @@ if test "$silent" = yes; then
6+ else
7+ exec 6>&1
8+ fi
9+-exec 5>./config.log
10++exec 5>&2
11+12+ echo "\
13+ This file contains any messages produced by compilers while
···20 # the wrapped version of Descent 3. Once there’s a stable version of Descent
21 # 3 that supports the -additionaldir command-line option, we can stop using
22 # an unstable version of Descent 3.
23- version = "1.5.0-beta-unstable-2025-05-08";
24 src = fetchFromGitHub {
25 owner = "DescentDevelopers";
26 repo = "Descent3";
27- rev = "72cca136162ccff6d738693d109e29568de90ebb";
28 leaveDotGit = true;
29 # Descent 3 is supposed to display its Git commit hash in the bottom right
30 # corner of the main menu. That feature only works if either the .git
···50 git rev-parse --verify HEAD | tr --delete '\n' > git-hash.txt
51 rm -r .git
52 '';
53- hash = "sha256-IcOSYIBqkk1e8NlPc4srr9glxWA4p0FY0QDAWb1Hb6I=";
54 };
5556 hardeningDisable = [ "format" ];
···20 # the wrapped version of Descent 3. Once there’s a stable version of Descent
21 # 3 that supports the -additionaldir command-line option, we can stop using
22 # an unstable version of Descent 3.
23+ version = "1.5.0-beta-unstable-2025-05-23";
24 src = fetchFromGitHub {
25 owner = "DescentDevelopers";
26 repo = "Descent3";
27+ rev = "76b527b5afd15fbf6f32d67ec637ea64298c6e68";
28 leaveDotGit = true;
29 # Descent 3 is supposed to display its Git commit hash in the bottom right
30 # corner of the main menu. That feature only works if either the .git
···50 git rev-parse --verify HEAD | tr --delete '\n' > git-hash.txt
51 rm -r .git
52 '';
53+ hash = "sha256-1cXiTWKwVgyVM78+0PpuvyJn8v/8BHp7mkw0DgVPolg=";
54 };
5556 hardeningDisable = [ "format" ];
···30 description = "NetBird Management Service Web UI Panel";
31 homepage = "https://github.com/netbirdio/dashboard";
32 license = licenses.bsd3;
33- maintainers = with maintainers; [ vrifox ];
34 };
35}
···30 description = "NetBird Management Service Web UI Panel";
31 homepage = "https://github.com/netbirdio/dashboard";
32 license = licenses.bsd3;
33+ maintainers = with maintainers; [ ];
34 };
35}
-1
pkgs/by-name/ne/netbird/package.nix
···117 description = "Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls";
118 license = lib.licenses.bsd3;
119 maintainers = with lib.maintainers; [
120- vrifox
121 saturn745
122 loc
123 ];
···117 description = "Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls";
118 license = lib.licenses.bsd3;
119 maintainers = with lib.maintainers; [
0120 saturn745
121 loc
122 ];
···13 # as ssdfs-utils, not ssdfs-tools.
14 pname = "ssdfs-utils";
15 # The version is taken from `configure.ac`, there are no tags.
16- version = "4.54";
1718 src = fetchFromGitHub {
19 owner = "dubeyko";
20 repo = "ssdfs-tools";
21- rev = "c7627ec88515da312570166e7590e1562b32353a";
22- hash = "sha256-uIX+nA9+hpGDCFAlwzLCYkF96Ou0fimeoJxMxgfgmkQ=";
23 };
2425 strictDeps = true;
···13 # as ssdfs-utils, not ssdfs-tools.
14 pname = "ssdfs-utils";
15 # The version is taken from `configure.ac`, there are no tags.
16+ version = "4.56";
1718 src = fetchFromGitHub {
19 owner = "dubeyko";
20 repo = "ssdfs-tools";
21+ rev = "300d57aabcf7d6208ee863463e7947005efa70e9";
22+ hash = "sha256-X2LTt1iVyRX+Zli/KePu5Ryf6Fz2/hcDDWyaL9qp/vI=";
23 };
2425 strictDeps = true;
···185 ];
186 "14" = [
187 (fetchpatch {
000188 name = "gcc-14-darwin-aarch64-support.patch";
189- url = "https://raw.githubusercontent.com/Homebrew/formula-patches/41fdb9d5ec21fc8165cd4bee89bd23d0c90572ee/gcc/gcc-14.2.0-r2.diff";
190- # The patch is based on 14.2.0, but we use a GCC snapshot. We
191- # exclude the files with conflicts and apply our own merged patch
192- # to avoid vendoring the entire huge patch in‐tree.
193- excludes = [
194- "gcc/config/aarch64/aarch64-tune.md"
195- "gcc/config/darwin.h"
196- "libgcc/config.host"
197- "libgcc/config/t-darwin-min-11"
198- ];
199- hash = "sha256-E4zEKm4tMhovOJKc1/FXZCLQvA+Jt5SC0O2C6SEvZjI=";
200 })
201- ./14/fixup-gcc-14-darwin-aarch64-support.patch
202 ];
203 "13" = [
204 (fetchpatch {
···185 ];
186 "14" = [
187 (fetchpatch {
188+ # There are no upstream release tags nor a static branch for 14.3.0 in https://github.com/iains/gcc-14-branch.
189+ # aa4cd614456de65ee3417acb83c6cff0640144e9 is the merge base of https://github.com/iains/gcc-14-branch/tree/gcc-14-3-darwin-pre-0 and https://github.com/gcc-mirror/gcc/releases/tag/releases%2Fgcc-14.3.0
190+ # 3e1d48d240f4aa5223c701b5c231c66f66ab1126 is the newest commit of https://github.com/iains/gcc-14-branch/tree/gcc-14-3-darwin-pre-0
191 name = "gcc-14-darwin-aarch64-support.patch";
192+ url = "https://github.com/iains/gcc-14-branch/compare/aa4cd614456de65ee3417acb83c6cff0640144e9..3e1d48d240f4aa5223c701b5c231c66f66ab1126.diff";
193+ hash = "sha256-BSTSYnkBJBEm++mGerVVyaCUC4dUyXq0N1tqbk25bO4=";
000000000194 })
0195 ];
196 "13" = [
197 (fetchpatch {
···2023 wal_e = throw "wal_e was removed as it is unmaintained upstream and depends on the removed boto package; upstream recommends using wal-g or pgbackrest"; # Added 2024-09-22
2024 wapp = tclPackages.wapp; # Added 2024-10-02
2025 wasm-bindgen-cli = wasm-bindgen-cli_0_2_100;
02026 wayfireApplications-unwrapped = throw ''
2027 'wayfireApplications-unwrapped.wayfire' has been renamed to/replaced by 'wayfire'
2028 'wayfireApplications-unwrapped.wayfirePlugins' has been renamed to/replaced by 'wayfirePlugins'
···2023 wal_e = throw "wal_e was removed as it is unmaintained upstream and depends on the removed boto package; upstream recommends using wal-g or pgbackrest"; # Added 2024-09-22
2024 wapp = tclPackages.wapp; # Added 2024-10-02
2025 wasm-bindgen-cli = wasm-bindgen-cli_0_2_100;
2026+ watershot = throw "'watershot' has been removed as it is unmaintained upstream and no longer works"; # Added 2025-06-01
2027 wayfireApplications-unwrapped = throw ''
2028 'wayfireApplications-unwrapped.wayfire' has been renamed to/replaced by 'wayfire'
2029 'wayfireApplications-unwrapped.wayfirePlugins' has been renamed to/replaced by 'wayfirePlugins'