gnu: librewolf: Update to 143.0-1 [security-fixes].
Contains fixes for:
CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics:
Canvas2D component
CVE-2025-10528: Sandbox escape due to undefined behavior, invalid
pointer in the Graphics: Canvas2D component
CVE-2025-10529: Same-origin policy bypass in the Layout component
CVE-2025-10530: Spoofing issue in the WebAuthn component in Firefox
for Android
CVE-2025-10531: Mitigation bypass in the Web Compatibility: Tooling
component
CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC
component
CVE-2025-10533: Integer overflow in the SVG component
CVE-2025-10534: Spoofing issue in the Site Permissions component
CVE-2025-10535: Information disclosure, mitigation bypass in the
Privacy component in Firefox for Android
CVE-2025-10536: Information disclosure in the Networking: Cache
component
CVE-2025-10537: Memory safety bugs fixed in Firefox ESR 140.3,
Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143
* gnu/packages/librewolf.scm (librewolf): Update to 143.0-1.
Change-Id: Idaa54a67f36b10e990363371505437159add938d
gnu: nss-rapid: Update to 3.116.
* gnu/packages/nss.scm (nss-rapid): Update to 3.116.
Change-Id: I62e2c4623e91d436de159978d8a0ca8fb8ca2fa9
gnu: firefox-l10n: Update to 0349e18db25a701938d83c61fa90f6074ae9df01.
* gnu/packages/librewolf.scm (firefox-l10n): Update to 0349e18db25a701938d83c61fa90f6074ae9df01.
Change-Id: I3d9cb058aab931b799e72920ef713b217beefc43
gnu: python-devtools: Disable failing tests.
* gnu/packages/python-xyz.scm (python-devtools): Disable failing tests.
[arguments] <test-flags>: Disable failing tests.
Change-Id: I1c6533a4a912d5dc4bde3610ccce7d38837caac4
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: mpv: Remove redundant phase.
* gnu/packages/video.scm (mpv): [arguments]: Remove phase
`build-reproducibly`.
Change-Id: I60291e4bc9e644d1d846f77e79028b7858d34652
Signed-off-by: Vagrant Cascadian <vagrant@reproducible-builds.org>
gnu: python-iterable-io: Fix tests.
* gnu/packages/python-xyz.scm (python-iterable-io): Fix tests.
[native-inputs]: Remove python-wheel; add python-pytest.
Change-Id: I8c525653b8277c39b3a4b74c82c5eb864f9b032d
Signed-off-by: Vagrant Cascadian <vagrant@debian.org>
gnu: python-noiseprotocol: Fix tests.
* gnu/packages/python-web.scm (python-noiseprotocol): Fix tests.
[native-inputs]: Remove python-wheel; add python-pytest.
[source]: Switch to git-fetch to have tests.
Change-Id: I474ef101c1d645dea06c6a953928793d70c7caf2
Signed-off-by: Vagrant Cascadian <vagrant@debian.org>
gnu: aflplusplus: Update to 4.33c.
* gnu/packages/debug.scm (aflplusplus): Update to 4.33c.
Change-Id: I8b4cd403926ffe9cb39fd340baf341a5b438e39d
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: Add bookmarkfs.
* gnu/packages/web.scm (bookmarkfs): New variable.
Change-Id: I83cfb30e26c58b258a85d085431eeed128995af9
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
build-system: mix: Allow passing test flags.
* guix/build-system/mix.scm (mix-build): Add test-flags keyword
argument and pass it on.
* guix/build/mix-build-system.scm (check): Add test-flags keyword
argument and pass it to Mix.
Change-Id: Ib8243aaaf7a7d02df993cee44f33b36566049e83
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
doc: Clarify depth argument of build -P is non-optional.
* doc/guix.texi (Additional Build Options): Depth in guix build -P is required.
Change-Id: I2cbc149a9fc59a198ceedb06cc1fa5496b4f4c91
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: libsecp256k1: Fix cross-compiling.
* gnu/packages/crypto.scm (libsecp256k1)
[source]: Remove snippet deleting "src/precomputed_ecmult.c" and
"src/precomputed_ecmult_gen.c".
[arguments]: Add conditional phase 'delete-precomputed-files' that
deletes them only when not cross-compiling.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
git: Fix update cached checkout when not a symref.
Follow up of 66463356ce5868d3551ea7014acb34543972a5d8.
* guix/git.scm (update-cached-checkout)[symref?]: New procedure.
[ref->refspecs]: New procedure.
Use them.
Change-Id: Ia2cb7db45222d59d61a2349bec277fd06456844b
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Modified-by: Ludovic Courtès <ludo@gnu.org>
gnu: mash: Update to 2.3 and fix build with gcc-14.
* gnu/packages/bioinformatics.scm (mash): Update to 2.3.
[arguments]<#:phases>{fix-includes}: Add file to substitutions.
* gnu/packages/patches/mash-add-missing-headers.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register new file.
Fixes: guix/guix#2986
Change-Id: I6a37a6b65b0abe9b72663bcafbc034dac0cff0c0
Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: capnproto: Update to 1.2.0.
* gnu/packages/serialization.scm (capnproto): Update to 1.2.0.
* changed: gnu to cmake build system to get a test to pass (unsure why).
* moved: /tmp dir patch to after 'unpack phase.
Change-Id: I6a27587f8126eeb0cfeb7b9f26dc436bd66b5f92
Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: Remove references to (gnu packages fcitx).
This is a follow-up to commit 04a4f8cc9d6db39ca7988b16642f72a54e8ab233 .
* etc/teams.scm (localization): Unregister removed file.
* CODEOWNERS: Regenerate file.
Change-Id: Id7196e36aab79ecdb65f9e4a1f18e81e92fb6994
gnu: Remove use of (gnu packages fcitx) module.
Follow-up to module removal in 04a4f8cc9d6db39ca7988b16642f72a54e8ab233.
* gnu/packages/freedesktop.scm,
* gnu/packages/telegram.scm: Remove use of (gnu packages fcitx) module.
Change-Id: I36208bf8cb7ccb13bb4e55ec8262a8614adc5f16
gnu: direnv: Update to 2.37.1.
* gnu/packages/shellutils.scm (direnv): Update to 2.37.1.
Change-Id: I156b641435b0b0e134e9f4be206daa4275c89d51
Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: Remove (gnu packages fcitx).
* gnu/packages/fcitx.scm: Remove file.
* gnu/local.mk (GNU_SYSTEM_MODULES), po/packages/POTFILES.in: Unregister
file.
Fixes: guix/guix#2260
Change-Id: I70cdffb1dc5f8112afbdf556f457d647d788db9e