···269270- `tauon` 7.9.0+ when launched for the first time, migrates its database to a new schema that is not backwards compatible. Older versions will refuse to start at all with that database afterwards. If you need to still use older tauon versions, make sure to back up `~/.local/share/TauonMusicBox`.
27100272- The `earlyoom` service is now using upstream systemd service, which enables
273 hardening and filesystem isolation by default. If you need filesystem write
274 access or want to access home directory via `killHook`, hardening setting can
···269270- `tauon` 7.9.0+ when launched for the first time, migrates its database to a new schema that is not backwards compatible. Older versions will refuse to start at all with that database afterwards. If you need to still use older tauon versions, make sure to back up `~/.local/share/TauonMusicBox`.
271272+- `aws-workspaces` has dropped support for PCoiP networking.
273+274- The `earlyoom` service is now using upstream systemd service, which enables
275 hardening and filesystem isolation by default. If you need filesystem write
276 access or want to access home directory via `killHook`, hardening setting can
···563 default = null;
564 };
5650000000000566 enableLocalhostRedirects = mkOption {
567 description = "Allow localhost redirects. Only for public clients.";
568 type = types.bool;
···563 default = null;
564 };
565566+ imageFile = mkOption {
567+ description = ''
568+ Application image to display in the WebUI.
569+ Kanidm supports "image/jpeg", "image/png", "image/gif", "image/svg+xml", and "image/webp".
570+ The image will be uploaded each time kanidm-provision is run.
571+ '';
572+ type = types.nullOr types.path;
573+ default = null;
574+ };
575+576 enableLocalhostRedirects = mkOption {
577 description = "Allow localhost redirects. Only for public clients.";
578 type = types.bool;
···45 "-X 'github.com/hashicorp/terraform/version.dev=no'"
46 ];
4748+ postPatch = ''
49+ # Between go 1.23 and 1.24 the following GODEBUG setting was removed, and a new
50+ # similar one was added.
51+ # https://github.com/golang/go/issues/72111
52+ # The setting is configured upstream due to the following timeouts caused by
53+ # the TLS handshake using post-quantum crypto with servers that don't support it
54+ # https://tldr.fail/
55+ substituteInPlace go.mod \
56+ --replace-quiet 'godebug tlskyber=0' 'godebug tlsmlkem=0'
57+ '';
58 postConfigure = ''
59 # speakeasy hardcodes /bin/stty https://github.com/bgentry/speakeasy/issues/22
60 substituteInPlace vendor/github.com/bgentry/speakeasy/speakeasy_unix.go \
···194 mkTerraform = attrs: pluggable (generic attrs);
195196 terraform_1 = mkTerraform {
197+ version = "1.11.4";
198+ hash = "sha256-VGptJz+MbJ8nJRGUW9LzX6IDLYbjI5tK40ZhkZCGVf0=";
199+ vendorHash = "sha256-pDtWGDKEnYq4wJYG+Rr5C1pWN/X92P+wvHrNm0Ldh+8=";
200 patches = [ ./provider-path-0_15.patch ];
201 passthru = {
202 inherit plugins;
···13 # as ssdfs-utils, not ssdfs-tools.
14 pname = "ssdfs-utils";
15 # The version is taken from `configure.ac`, there are no tags.
16- version = "4.50";
1718 src = fetchFromGitHub {
19 owner = "dubeyko";
20 repo = "ssdfs-tools";
21- rev = "f816382a3cc45e2eca711b0cc0d24afb8af5c195";
22- hash = "sha256-QN32h+ICwUUVd6Zs+hflRHb4QW0QWBkqyyEI/jZYRtc=";
23 };
2425 strictDeps = true;
···13 # as ssdfs-utils, not ssdfs-tools.
14 pname = "ssdfs-utils";
15 # The version is taken from `configure.ac`, there are no tags.
16+ version = "4.53";
1718 src = fetchFromGitHub {
19 owner = "dubeyko";
20 repo = "ssdfs-tools";
21+ rev = "5cf623d11b41f2581923494142dcd5277af39093";
22+ hash = "sha256-Mud9KAd2nGY4A8l8EhJvmrK93oV2wO5RCsQIjmEAaeg=";
23 };
2425 strictDeps = true;