…-23.05

[Backport release-23.05] coqPackages.aac-tactics: init at 8.17.0

…-23.05

[Backport release-23.05] dlib: 19.24 -> 19.24.2

…-23.05

[Backport release-23.05] wasmtime: 9.0.0 -> 9.0.1

With version 15.8 GitLab deprecates the use of an "external" container
registry (in our case pkgs.docker-distribution). The external registry
will be replaced with this fork that contains extra functionality that
GitLab uses internally. See
https://gitlab.com/gitlab-org/container-registry/-/blob/master/docs-gitlab/README.md

(cherry picked from commit 4afee94)

(cherry picked from commit 007f087)

(cherry picked from commit 7ea816f)

Co-authored-by: Julien Malka <julien@malka.sh>

(cherry picked from commit 2222484)

(cherry picked from commit cf69135)

https://bluej.org/versions.html
(cherry picked from commit ef8929e)

…-23.05

[Backport release-23.05] bluej: 5.0.3 -> 5.1.0

(cherry picked from commit 0d3d953)

…-23.05

[Backport release-23.05] ferretdb: 1.2.0 -> 1.2.1

(cherry picked from commit 602bfd6)

(cherry picked from commit 936351d)

…-23.05

[Backport release-23.05] python3Packages.lightgbm: fix build on darwin

(cherry picked from commit d4651a7)

…-23.05

[Backport release-23.05] owncloud-client: mark darwin broken

hledger version X always depends on hledger-lib version X.

(cherry picked from commit aa047eb)

Also, mark as broken as darwin due to unsupported linker flags

(cherry picked from commit 410aa6f)

Relates to NixOS#229910.

(cherry picked from commit c3346f8)

…-23.05

[Backport release-23.05] gnushogi: fix build

(cherry picked from commit 6f31bdb)

…-23.05

[Backport release-23.05] qogir-theme: 2023-02-27 -> 2023-05-24

…ity (NixOS#234025)

(cherry picked from commit 3d6e242)

https://github.com/esphome/esphome/releases/tag/2023.5.4
(cherry picked from commit b236363)

…-23.05

[Backport release-23.05] esphome: 2023.5.3 -> 2023.5.4

(cherry picked from commit f15d0ec)

And optional -> optionals style for libpulseaudio

(cherry picked from commit 3e2f831)

https://community.brave.com/t/release-channel-1-51-118/487618/1
(cherry picked from commit a20d08b)

(cherry picked from commit c8faada)

…-23.05

[Backport release-23.05] mirakurun: use node 18

…-23.05

[Backport release-23.05] mattermost-desktop: 5.1.0 -> 5.3.1

…-23.05

[Backport release-23.05] mathcomp: 1.16.0 -> 1.17.0

…-23.05

[Backport release-23.05] nixos/synapse: allow omitting `trusted_key_servers[].verify_keys`

…-23.05

[Backport release-23.05] raspberrypi-wireless-firmware: fix broken firmware symlink

…-23.05

[Backport release-23.05] modules/sshd: check for duplicate config keys

https://github.com/Nitrokey/pynitrokey/releases/tag/v0.4.37
(cherry picked from commit 266471a)

a reader with kanji reading

There is an optional manga-ocr dependency that I would like to support
but in a second time see ripose-jp/Memento#159

(cherry picked from commit 1f00859)

…-23.05

[Backport release-23.05] libopenmpt: doCheck only if canExecute

…-23.05

[Backport release-23.05] brave: 1.51.114 -> 1.51.118

(cherry picked from commit 447657c)

https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-crypto-nodejs-v0.1.0-beta.4
https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-crypto-nodejs-v0.1.0-beta.5
https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-crypto-nodejs-v0.1.0-beta.6
(cherry picked from commit f3e1791)

https://github.com/matrix-org/matrix-hookshot/releases/tag/4.0.0
(cherry picked from commit 7c8ebab)

Use in matrix-appservice-slack, matrix-appservice-discord & mjolnir

(cherry picked from commit 8329281)

(cherry picked from commit 6a20c13)

…-23.05

[Backport release-23.05] pynitrokey: 0.4.36 -> 0.4.37

…-23.05

[Backport release-23.05] memento: init at v1.1.0

…-23.05

[Backport release-23.05] cyrus-sasl-xoauth2: init at 0.2

https://gitlab.com/gitlab-org/gitlab-runner/-/blob/v16.0.1/CHANGELOG.md
(cherry picked from commit f31fa51)

Co-authored-by: Yaya <mak@nyantec.com>

(cherry picked from commit 17eec7a)

…-23.05

[Backport release-23.05] nixos/proxmox-image: fix qemu build failure

…-23.05

[Backport release-23.05] hledger_1_29_2: fix dependency toward hledger-lib

Fixes the error image for unreachable cameras, the idle image for the
birdseye view and fix cache path in old clip removal function.

(cherry picked from commit d55cec4)

…-23.05

[Backport release-23.05] frigate: substitute more paths

(cherry picked from commit 3349cfc)

(cherry picked from commit b7efded)

(cherry picked from commit 0aa72aa)

…-23.05

[Backport release-23.05] syncplay: fix `TypeError` on Linux

…-23.05

[Backport release-23.05] vscode-extensions.esbenp.prettier-vscode: 9.12.0 -> 9.13.0

…-23.05

[Backport release-23.05] cpio: add some key reverse dependencies to `passthru.tests`

(cherry picked from commit 153da9a)

(cherry picked from commit 1ebd98f)

…-23.05

[Backport release-23.05] rippled: mark as insecure

…-23.05

[Backport release-23.05] jackett: 0.20.4199 -> 0.21.17

(cherry picked from commit df85fc5)

…-23.05

[Backport release-23.05] jackett: 0.21.17 -> 0.21.34

(cherry picked from commit cc1cd3e)

(cherry picked from commit b1d5878)

(cherry picked from commit 669156c)

(cherry picked from commit fe5ff41)

(cherry picked from commit de66762)

(cherry picked from commit cbc1ca0)

(cherry picked from commit d64a444)

…-23.05

[Backport release-23.05] Kernel updates for 2023-05-25

(cherry picked from commit 85003bf)

(cherry picked from commit 1597d64)

…-23.05

[Backport release-23.05] vscode-extensions.elixir-lsp.vscode-elixir-ls: 0.13.0 -> 0.14.5

(cherry picked from commit 8e0510f)

(cherry picked from commit 028fbeb)

…-23.05

[Backport release-23.05] qt6: 6.5.0 -> 6.5.1

(cherry picked from commit 60849da)

(cherry picked from commit 3a50765)

(cherry picked from commit 840551b)

(cherry picked from commit ae6b1df)

(cherry picked from commit f0c4667)

…-23.05

[Backport release-23.05] qtcreator-qt6: fix build with qt 6.5.1

…-23.05

[Backport release-23.05] gnushogi: refactor, unbreak on darwin

…-23.05

[Backport release-23.05] bento4: 1.6.0-639 -> 1.6.0-640

https://gitlab.com/gitlab-org/gitlab/-/blob/v15.11.6-ee/CHANGELOG.md
(cherry picked from commit ce6aec7)

(cherry picked from commit 9df3d57)

GHSA-gpxc-v2m8-fr3x
(cherry picked from commit bb8168b)

…-23.05

[Backport release-23.05] nc4nix: add patch to fix unstable package updates

(cherry picked from commit 21332b8)

Moved packages requiring x86_64-linux, x86_64-darwin into their proper arrays.

(cherry picked from commit 5e86714)

(cherry picked from commit 4e79d68)

This ensures the proper propagation for `lib.meta.availableOn` to work fine.

(cherry picked from commit 0cde352)

This ensures the proper propagation for `lib.meta.availableOn` to work.

(cherry picked from commit d99434c)

…"plugins"

This makes it easier to add new plugins without having to worry whether they are supported on Darwin, aarch64-*, etc.

As long as they are properly tagged through their `platforms` meta attribute (or `badPlatforms`).

Broken packages needs to be separated to avoid silent breakages which we would not notice.

(cherry picked from commit 43957dc)

ghc and also ghcWithPackages (when taken from a haskell package set) are
a bit weird—in the same way stdenv is: ghc is actually from
buildPackages (pkgsBuildHost) wheras the main package set belongs to
pkgsHostTarget. ghc (and stdenv) is included in the package set due to
its special relation to the set: it is built by that ghc, so constituted
by the compiler in a manner of speaking.

For ghc this works in a straightforward way: It is packaged
independently from the haskell package sets and passed to
make-package-set.nix to create the different sets we expose.
With ghcWithPackages an error crept in, though: Since it needs to
receive the haskellPackages fix point (and thus can't be instantiated
before the package set), it is defined in make-package-set.nix. Here it
was neglected to make sure that it also has the same scope as ghc, i.e.
buildHaskellPackages/buildPackages: Otherwise the shell the wrapper
scripts use to invoke ghc (originally from buildPackages) would be from
pkgsHostTarget—in the cross case, the wrapper scripts would be
executable by neither host nor build platform. We want them to work on
the build platform, though.

Note that this creates a weird mismatch where it is hard to see which of
the alternatives would be more natural: ghcWithPackages and
ghcWithHoogle now use packages from the package set they are a member
of, but have *-ghc and hoogle executables that are executable on the
build platform. This works because ghc originates from buildPackages (as
discussed) and hoogleWithPackages is taken from buildHaskellPackages.
This does imply though that while set.ghcWithHoogle will be executable
on the build platform, set.hoogleWithPackages will be executable on the
host platform—both will use the fix point of set for the package
selector function. This is maybe a confusing asymmetry, but it seems
like a valid use case to cross-compile a hoogle instance. Most
development tools use ghcWithHoogle (or equivalent), so that use case is
covered as well in principle.

(cherry picked from commit 391a961)

EOL

(cherry picked from commit 9fa0644)

…-23.05

[Backport release-23.05] diffoscope: move unfree dependencies behind a enableUnfree flag

(cherry picked from commit dd6d955)

…-23.05

[Backport release-23.05] cups-filters: fix CVE-2023-24805

(cherry picked from commit 532f47f)

…-23.05

[Backport release-23.05] linux_6_2: drop

…-23.05

[Backport release-23.05] fastly: 10.0.1 -> 10.1.0

No longer used.

(cherry picked from commit 1e73fcb)

…-23.05

[Backport release-23.05] tailscale: 1.40.1 -> 1.42.0

…-23.05

[Backport release-23.05] vscode-extensions.elixir-lsp.vscode-elixir-ls: 0.14.5 -> 0.14.7

…-23.05

[Backport release-23.05] vscode-extensions.davidanson.vscode-markdownlint: 0.49.0 -> 0.50.0

…-23.05

[Backport release-23.05] gitlab: 15.11.5 -> 15.11.6

(cherry picked from commit cf5538a)

(cherry picked from commit 83da7af)

…-23.05

[Backport release-23.05] bitcoin: 24.1 -> 25.0

(cherry picked from commit 04f05e3)

…-23.05

[Backport release-23.05] gpac: 2.2.0 -> 2.2.1

Fixes CVE-2023-33199.

Changelog:
https://github.com/sigstore/rekor/releases/tag/v1.2.1
(cherry picked from commit e655d03)

…-23.05

[Backport release-23.05] rekor-cli, rekor-server: 1.1.1 -> 1.2.1

(cherry picked from commit b5de94e)

…-23.05

[Backport release-23.05] nfs-ganesha: 5.1 -> 5.2

(cherry picked from commit 5c04240)

…-23.05

[Backport release-23.05] cups-filters: 1.28.15 -> 1.28.17

(cherry picked from commit cfa11fa)

…-23.05

[Backport release-23.05] dablin: 1.14.0 -> 1.15.0

(cherry picked from commit dff3db7)

…-23.05

[Backport release-23.05] flatcam: fix build

…-23.05

[Backport release-23.05] python3Packages.umap-learn: patch for numpy>=1.24

This feature is enabled in the official build:
https://github.com/vectordotdev/vector/blob/v0.30.0/Cargo.toml#L376

(cherry picked from commit fc9211e)

(cherry picked from commit 28ac9c2)

- packages https://github.com/dimo414/bkt
- release notes for version 0.6.1 can be found at https://github.com/dimo414/bkt/releases/tag/0.6.1

(cherry picked from commit f5c317d)

…-23.05

[Backport release-23.05] bkt: init at version 0.6.1

(cherry picked from commit e29436e)

(cherry picked from commit fa10919)

https://hydra.nixos.org/build/221506062
(cherry picked from commit 0157222)

(cherry picked from commit 3579ce8)

(cherry picked from commit f09bffe)

…-23.05

[Backport release-23.05] python3Packages.fenics: fixed tests for FIAT

…-23.05

[Backport release-23.05] libb64: Fix i686-linux build failure

(cherry picked from commit e1a0a7a)

(cherry picked from commit d5b992a)

Fixes CVE-2023-32680.

Changelogs:
https://github.com/metabase/metabase/releases/tag/v0.46.4
https://github.com/metabase/metabase/releases/tag/v0.46.3
(cherry picked from commit 55a9632)

This warning was added a year and a half ago, but still no test in
NixOS directly instantiates the machine class, presumably because it's
not actually possible for a test to do so without losing
functionality.  For example, there's no way for a NixOS test to access
the output directory that create_machine passes to the Machine
constructor.

This warning is therefore just contributing to alert fatigue for
users, who are unable to follow its advice.  Once it's actually
possible to do what it suggests, the warning can be reintroduced.

(cherry picked from commit 845576a)

…-23.05

[Backport release-23.05] python3Packages.pymanopt: marked as broken

…-23.05

[Backport release-23.05] matrix-hookshot: 3.2.0 -> 4.0.0

…-23.05

[Backport release-23.05] python3Packages.uptime-kuma-api: 0.13.0 -> 1.0.1

(cherry picked from commit 0f7191d)

…-23.05

[Backport release-23.05] libwacom: disable tests on risc-v

(cherry picked from commit 8f73830)

…-23.05

[Backport release-23.05] wasmtime: 9.0.1 -> 9.0.2

…-23.05

[Backport release-23.05] prometheus: skip tests on 32-bit platforms

…-23.05

[Backport release-23.05] linuxPackages.rtl8821cu: unstable-2022-12-07 -> unstable-2023-04-28

In some odd scenarios, `npm prune` either fails, or hangs. I have no idea
what could possibly be wrong at the moment, but let's provide an escape
hatch for packages that can still use the rest of the install hook's
functionality.

(cherry picked from commit 9de8683)

Upstream switched to using TypeScript in v4.4.0, which broke the patch.
This fixes that issue by migrating to building The Lounge from source,
instead of having to patch the minified JavaScript.

(cherry picked from commit 6347aba)

(cherry picked from commit f9c2637)

(cherry picked from commit dfdb06d)

…-23.05

[Backport release-23.05] organicmaps: 2023.04.02-7 -> 2023.05.08-7

…-23.05

[Backport release-23.05] mindustry-server: Fix

…-23.05

[Backport release-23.05] metabase: 0.46.2 -> 0.46.4

(cherry picked from commit 59b3572)

(cherry picked from commit cfbff1f)