https://lists.gnu.org/archive/html/info-gnu/2019-02/msg00010.html

Remove special-casing no longer needed.

It is no longer provided

We don’t have android sdk available for aarch64, so this error happens
a lot. Adding some context on what is going on makes this clearer.

mesaPlatforms can be used in the platforms attr.

valgrind-light doesn’t appear to work correctly on aarch32. It’s also
not a required dependency on mesa, so in the future we may be able to
disable it for other platforms

causes on evaluation error on macOS otherwise

https://gitlab.freedesktop.org/dbus/dbus/blob/dbus-1.12.14/NEWS

It's tempting to think patchShebangs supports multiple arguments.
Without this patch it just silently ignores all but the first. Now it
patches the shebangs in all of its arguments.

Fixes: #57695

Commit "patchShebangs: Allow for multiple arguments" 4a1e51f
removed the check. We don't want to break existing usages so this
introduces it again with a successful exit code.

https://mta.openssl.org/pipermail/openssl-announce/2019-May/000151.html

https://mta.openssl.org/pipermail/openssl-announce/2019-May/000153.html

https://lists.netfilter.org/pipermail/netfilter-announce/2019/000230.html

* drop patches included in 1.8.3 (all of them)
  (checked each via `git tag --contains $rev`)

https://lists.netfilter.org/pipermail/netfilter-announce/2019/000231.html

https://github.com/harfbuzz/harfbuzz/releases/tag/2.5.0

https://dev.gnupg.org/T4509

gnupg: 2.2.15 -> 2.2.16

This reverts commit aae4c11.

openssl: 1.1.1c, 1.0.2s

Fixes #62235

harfbuzz: 2.3.1 -> 2.5.0

gnutar: 1.31 -> 1.32

Changelog:
https://cryptography.io/en/latest/changelog/#v2-7

Important changes:
- BACKWARDS INCOMPATIBLE: We no longer distribute 32-bit manylinux1
  wheels. Continuing to produce them was a maintenance burden.
- BACKWARDS INCOMPATIBLE: Removed the
  cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer
  registered as MACContext instances.

mosh: upstream patch to fix w/newer clang/libcxx (c++17)

postgresql: install in $out/share/postgresql

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/glib/versions

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/libuv/versions

glib: 2.60.2 -> 2.60.3

python37Packages.cryptography: 2.6.1 -> 2.7

Fixes #62417

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/vim/versions

vim: 8.1.1234 -> 8.1.1432

…rnel param

The udev rules we are shipping no longer work with systemd v242 and were
remove upstream some time ago. It seems like the entire renaming is now
done in C and not in the udev rules.

With the systemd update to v242 five lines are not longer sufficient to
verify that the storage was verified. In order to reduce future test
failures increasing it to 10 lines sounds like a sane amount.

systemd has deprecated the use of `none` and recommends using `no`
instead.

With systemd v242 using the `Gateway` attribute of the `[Network]`
section will lead to "onlink" routes on all the device that are matched
by the default configuration (typically all devices) causing multiple
default routes (even on localhost).

We can only avoid that - while keeping our default route option - when
we mark the route as explicitly not on link. Only gateways that are
within a subnet of one of the assigned interface addresses will be
installed into the routing table.

This follows upstreams renaming of the option [1].

[1] systemd/systemd@9cb8c55

(cherry picked from commit 92600a9)

Somewhen between systemd v239 and v242 upstream decided to no longer run
a few system services with `DyanmicUser=1` but failed to provide a
migration path for all the state those services left behind.

For the case of systemd-timesync the state has to be moved from
/var/lib/private/systemd/timesync to /var/lib/systemd/timesync if
/var/lib/systemd/timesync is currently a symlink.

We only do this if the stateVersion is still below 19.09 to avoid
starting to have an ever growing activation script for (then) ancient
systemd migrations that are no longer required.

See systemd/systemd#12131 for details about
the missing migration path and related discussion.

We are currently not running any tests but building them takes
signitifcant amounts of time since they account to about 40% of all the
compilation targets.

On aarch64 we "leak" a reference to $out/lib/systemd/catalog in the lib
output. The result of that is a dependency cycle between $out and $lib.
Thus nix (rightfully) marks the build as failed. That reference
originates from an array of strings (catalog_file_dirs) in systemd
(src/src/journal/catalog.{c,h}).  The only consumer (as of v242) of the
symbol is the main function of journalctl.  Still libsystemd.so contains
the VALUE but not the symbol.  Systemd seems to be properly using
function & data sections together with the linker flags to garbage
collect unused sections (-Wl,--gc-sections).  For unknown reasons those
flags do not eliminate the unused string constants, in this case on
aarch64-linux. The hacky way is to just remove the reference after we
finished compiling.  Since it can not be used (there is no symbol to
actually refer to it) there should not be any harm.  It is a bit odd and
I really do not like starting these kind of hacks but there doesn't seem
to be a straight forward way at this point in time.

The reference will be replaced by the same reference the usual nukeRefs
tooling uses.  The standard tooling can not / should not be uesd since
it is a bit too excessive and could potentially do us some (more) harm.

The autoLuks module is not really compatible with the updated systemd
version anymore. We started dropping NixOS specific patches that caused
unwanted side effects that we had to work around otherwise.

This change points users towards the relevant PR and spits out a bit of
information on how to deal with the situation.

…tation

We set stateVersion to `mkDefault 18.03` in
`nixos/modules/testing/test-instrumentation.nix` and in
`modules/installer/cd-dvd/installation-cd-base.nix`.

Accessing the stateVersion in the module system from within the tests
results in the following error:
> The unique option `system.stateVersion' is defined multiple times, in
> `nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-base.nix' and
> `nixpkgs/nixos/modules/testing/test-instrumentation.nix'.

There are other tests that use it as well. Namely the radicale test also
verifies behaviour between state versions is as expected. It switches a
package default value. Others switched on the state directory default.
It seems like having the timesyncd switch as part of every rendered
activationScript might cause this weird error.

Removing this line seems like a reasonable thing to do since we actually
set the default to the very same value in the module system. This line
should have been no-op besides the issue that we've two statements
setting it in this very specific case.

systemd: 239 -> 242

This reverts commit b41ef4c.

This reverts commit 7c15686.

This reverts commit 451be59.

This reverts commit 8809ebe.

…ing-next""

This reverts commit ea01202.

Conflicts (simple):
	nixos/doc/manual/release-notes/rl-1909.xml

ghc: add bash to buildInputs

release-cross.nix changes/fixes

https://pagure.io/newt/blob/134326743ac8063f79b6b34eb9d80ffdd55e6540/f/CHANGES#_1

iptables: 1.8.2 -> 1.8.3, libnftnl: 1.1.2 -> 1.1.3

e2fsprogs: 1.45.1 -> 1.45.2

The pulseaudio alsa module would fail to load due to missing symbols.

https://github.com/harfbuzz/harfbuzz/releases/tag/2.5.1

dbus: 1.12.12 -> 1.12.14

... into staging.  Approximate Hydra comparison looks good to me:
https://hydra.nixos.org/eval/1523212?compare=1523031

patchShebangs: Allow multiple args

harfbuzz: 2.5.0 -> 2.5.1

newt: 0.52.20 -> 0.52.21

librime: 1.4.0 -> 1.5.0

libidn2: 2.1.1a -> 2.2.0

Was not sufficient.

This reverts commit bce1f11.

https://github.com/ronf/asyncssh/blob/master/docs/changes.rst#release-1170-31-may-2019

Brings in Haskell rebuild.
Hydra nixpkgs: ?compare=1525186