import: nuget: use json-fetch.
* guix/import/nuget.scm (nuget-find-best-version-for-range):
(nuget-fetch-catalog-entry): Use json-fetch.
Change-Id: I5223d264d363004aacfb0cf4a522813ffa485893
Reviewed-by: Danny Milosavljevic <dannym@friendly-machines.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
import: nuget: use snake-case.
* guix/import/nuget.scm (nuget-name->guix-name): use snake-case.
Change-Id: I8371d2fd6b33170c61c86302117f7952123e05b5
Reviewed-by: Danny Milosavljevic <dannym@friendly-machines.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: packages/hexedit: Sort used module alphabetically.
* gnu/packages/hexedit.scm: Sort used module alphabetically.
Change-Id: I1c56eabb95f8ef14a6109be01ff34057f86516c2
gnu: Add fq.
* gnu/packages/hexedit.scm (fq): New variable.
Change-Id: I2c5f6c3c148c5bc7bf7f531dcd4c8576ce063fd8
gnu: Add go-github-com-wader-gojq.
* gnu/packages/golang-xyz.scm (go-github-com-wader-gojq): New variable.
Change-Id: If701d1e0d124a0f01a6d659e668994049204feda
gnu: Add go-github-com-gopacket-gopacket.
* gnu/packages/golang-web.scm (go-github-com-gopacket-gopacket): New variable.
Change-Id: I43c7a5532700b4ff029562e24f901535c9f0302e
gnu: Add go-github-com-ergochat-readline.
* gnu/packages/golang-xyz.scm (go-github-com-ergochat-readline): New variable.
Change-Id: I0c2852c64043b35f1d917eff914eda45ed53f2ec
gnu: Add go-github-com-gomarkdown-markdown.
* gnu/packages/golang-xyz.scm (go-github-com-gomarkdown-markdown): New variable.
Change-Id: Ib41e5498131c73f568d26396fb021b061f59962b
gnu: Add go-github-com-itchyny-go-flags.
* gnu/packages/golang-xyz.scm (go-github-com-itchyny-go-flags): New variable.
Change-Id: I96ead9b19b765aef8576f7530d7fb02509b387a1
gnu: Add go-github-com-itchyny-astgen-go.
* gnu/packages/golang-xyz.scm (go-github-com-itchyny-astgen-go): New variable.
Change-Id: Id34908091b9d19850186aefc8efdca035fdb6032
gnu: linux-libre-6.6: Update to 6.6.94.
* gnu/packages/linux.scm (linux-libre-6.6-version): Update to 6.6.94.
(linux-libre-6.6-pristine-source): Update hash.
Change-Id: I8cda142e67700f3cdbd0b9ddbcf83435efe5805b
Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: linux-libre-6.12: Update to 6.12.34.
* gnu/packages/linux.scm (linux-libre-6.12-version): Update to 6.12.34.
(linux-libre-6.12-pristine-source): Update hash.
Change-Id: I44f1fc080e8625ecc7a74c141909bfdfecec4cfd
Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: python-lightning-utilities: Update to 0.14.3.
* gnu/packages/machine-learning.scm (python-lightning-utilities): Update to 0.14.3.
Signed-off-by: Ayan Das <bvits@riseup.net>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: python-pytorch-lightning: Update to 2.5.2.
* gnu/packages/machine-learning.scm (python-pytorch-lightning): Update to 2.5.2.
Signed-off-by: Ayan Das <bvits@riseup.net>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
doc: Update CVE documentation.
* doc/guix.texi (Invoking guix lint): Document ‘cpe-vendor’ and
‘lint-hidden-cpe-vendors’.
Change-Id: I5f3054c9f6e2d1e85a1ccb293a2471439f5e5f44
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: git-annex: Update to 10.20250630.
* gnu/packages/haskell-apps.scm (git-annex): Update to 10.20250630.
Change-Id: I7a6bf5d8828ff832e4793787fb7bc39587e425b4
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
daemon: Conditionally disable seccomp filter on ‘socketcall’ systems.
glibc currently will insist on using 'socketcall' on i686-linux unless built
with '--enable-kernel=4.3.0' or above, even on systems that have dedicated
system calls available for all the socket-related functionality. This
behavior breaks the assumption that socketcall can be safely blocked without
impacting functionality in slirp4netns, rendering the seccomp filter unusable
with those glibcs.
This change makes the slirp4netns seccomp filter opt-in on systems with a
'socketcall' system call. It can either be opted-into at compile-time or at
runtime using the NO_SOCKETCALL_LIBC preprocessor define or the
GUIX_FORCE_SECCOMP environment variable, respectively.
The seccomp filter being disabled on these systems means that it is possible
for a compromised slirp4netns to access abstract unix domain sockets in the
root network namespace. It does not affect any of the other mechanisms used
to isolate slirp4netns (e.g. chroot, namespaces, etc).
Fixes guix/guix#808.
* nix/libstore/build.cc (spawnSlirp4netns) [__NR_socketcall]: Do not add
seccomp filter, unless ‘GUIX_FORCE_SECCOMP’ is set.
Change-Id: Ibfe8becc9431f5aff11a21f06858b20496f9cb4a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: trealla: Update to 2.77.23.
* gnu/packages/prolog.scm (trealla): Update to 2.77.23.
Change-Id: Ia231b26b686e1e029f61286449ad410bed971ba0
gnu: vips: Update to 8.17.0.
* gnu/packages/image-processing.scm (vips): Update to 8.17.0.
Change-Id: I8ffdca949cb19735928dcbdb7d43e2c626aea7a4
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>