gnu: Add go-github-com-ergochat-readline.
* gnu/packages/golang-xyz.scm (go-github-com-ergochat-readline): New variable.
Change-Id: I0c2852c64043b35f1d917eff914eda45ed53f2ec
gnu: Add go-github-com-gomarkdown-markdown.
* gnu/packages/golang-xyz.scm (go-github-com-gomarkdown-markdown): New variable.
Change-Id: Ib41e5498131c73f568d26396fb021b061f59962b
gnu: Add go-github-com-itchyny-go-flags.
* gnu/packages/golang-xyz.scm (go-github-com-itchyny-go-flags): New variable.
Change-Id: I96ead9b19b765aef8576f7530d7fb02509b387a1
gnu: Add go-github-com-itchyny-astgen-go.
* gnu/packages/golang-xyz.scm (go-github-com-itchyny-astgen-go): New variable.
Change-Id: Id34908091b9d19850186aefc8efdca035fdb6032
gnu: linux-libre-6.6: Update to 6.6.94.
* gnu/packages/linux.scm (linux-libre-6.6-version): Update to 6.6.94.
(linux-libre-6.6-pristine-source): Update hash.
Change-Id: I8cda142e67700f3cdbd0b9ddbcf83435efe5805b
Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: linux-libre-6.12: Update to 6.12.34.
* gnu/packages/linux.scm (linux-libre-6.12-version): Update to 6.12.34.
(linux-libre-6.12-pristine-source): Update hash.
Change-Id: I44f1fc080e8625ecc7a74c141909bfdfecec4cfd
Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: python-lightning-utilities: Update to 0.14.3.
* gnu/packages/machine-learning.scm (python-lightning-utilities): Update to 0.14.3.
Signed-off-by: Ayan Das <bvits@riseup.net>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: python-pytorch-lightning: Update to 2.5.2.
* gnu/packages/machine-learning.scm (python-pytorch-lightning): Update to 2.5.2.
Signed-off-by: Ayan Das <bvits@riseup.net>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
doc: Update CVE documentation.
* doc/guix.texi (Invoking guix lint): Document ‘cpe-vendor’ and
‘lint-hidden-cpe-vendors’.
Change-Id: I5f3054c9f6e2d1e85a1ccb293a2471439f5e5f44
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: git-annex: Update to 10.20250630.
* gnu/packages/haskell-apps.scm (git-annex): Update to 10.20250630.
Change-Id: I7a6bf5d8828ff832e4793787fb7bc39587e425b4
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
daemon: Conditionally disable seccomp filter on ‘socketcall’ systems.
glibc currently will insist on using 'socketcall' on i686-linux unless built
with '--enable-kernel=4.3.0' or above, even on systems that have dedicated
system calls available for all the socket-related functionality. This
behavior breaks the assumption that socketcall can be safely blocked without
impacting functionality in slirp4netns, rendering the seccomp filter unusable
with those glibcs.
This change makes the slirp4netns seccomp filter opt-in on systems with a
'socketcall' system call. It can either be opted-into at compile-time or at
runtime using the NO_SOCKETCALL_LIBC preprocessor define or the
GUIX_FORCE_SECCOMP environment variable, respectively.
The seccomp filter being disabled on these systems means that it is possible
for a compromised slirp4netns to access abstract unix domain sockets in the
root network namespace. It does not affect any of the other mechanisms used
to isolate slirp4netns (e.g. chroot, namespaces, etc).
Fixes guix/guix#808.
* nix/libstore/build.cc (spawnSlirp4netns) [__NR_socketcall]: Do not add
seccomp filter, unless ‘GUIX_FORCE_SECCOMP’ is set.
Change-Id: Ibfe8becc9431f5aff11a21f06858b20496f9cb4a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: trealla: Update to 2.77.23.
* gnu/packages/prolog.scm (trealla): Update to 2.77.23.
Change-Id: Ia231b26b686e1e029f61286449ad410bed971ba0
gnu: vips: Update to 8.17.0.
* gnu/packages/image-processing.scm (vips): Update to 8.17.0.
Change-Id: I8ffdca949cb19735928dcbdb7d43e2c626aea7a4
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: vips: Stylistic rewrite.
* gnu/packages/image-processing.scm (vips): Stylistic rewrite.
[native-inputs]: Reorder and write in column.
[inputs]: Reorder and write in column.
Change-Id: I04cc93e9d989c3f7fa6f0d07c76f073c615e3f4c
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: python-distributed: Move up.
* gnu/packages/python-science.scm (python-distributed): Sort variable
alphabetically.
Change-Id: I6b0b6ab2932b7cc1edf6097a6387ee633e537d88
gnu: symbiyosys: Update to 0.54.
* gnu/packages/electronics.scm (symbiyosys): Update to 0.54.
Change-Id: Ifb962d577ec1b9909dd35e13ece1ccb51ba41fc7
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: yosys: Update to 0.54.
* gnu/packages/fpga.scm (yosys): Update to 0.54.
Change-Id: Iff161b61efa42a0903976c01fb81a62c745ec2e4
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: abc-yosyshq: Update to 0.54.
* gnu/packages/fpga.scm (abc-yosyshq): Update to 0.54.
Change-Id: I81bdb9f3fd8722b4f198ab34312c5942ce925b5c
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
git authenticate: Create Git hooks directory.
* guix/scripts/git/authenticate.scm (install-hooks): Create Git hooks
directory if necessary.
Change-Id: Icb9b0674d42af78fe03a3c820369f8324db960b4
Signed-off-by: Ludovic Courtès <ludo@gnu.org>