gnu: libextractor: Enable RPM support.

* gnu/packages/gnunet.scm (libextractor)
[inputs]: Add rpm.

Change-Id: I618330e038d4793bc61cf62320dc33fa16ab9c7f

gnu: libextractor: Enable apparmor support.

* gnu/packages/gnunet.scm (libextractor)
[inputs]: Add libapparmor.

Change-Id: I6ec8b7fce5db0179f2b65d9a4509ab9bcecb12ef

gnu: libextractor: Add autotools inputs.

These are needed when building from git.

* gnu/packages/gnunet.scm (libextractor)
[native-inputs]: Add autoconf-2.71, automake, gettext-minimal, libtool and
texinfo.

Change-Id: Ia35932b56c74354fc7cffc104e4ae5efa9ad8c85

gnu: libextractor: Modernize.

* gnu/packages/gnunet.scm (libextractor): Move inputs, native-inputs after
arguments.
[arguments]: Use gexps.  Remove trailing #t.
[inputs]: Remove labels and sort.

Change-Id: Ia3950630bd0985e106fb92cce3f92732e93970df

gnu: libextractor: Update to 1.13.

* gnu/packages/gnunet.scm (libextractor): Update to 1.13.
[inputs]: Remove ffmpeg-4, no longer supported.
Replace gtk+ with gdk-pixbuf.
[argumens]: Reinstate parallel tests.  Remove fix-exiv2-tests phase.

Change-Id: Ic299c31a2d40512116c9876e0fbb4f9ded0ccc3b

gnu: ruby-stackprof: Update to 0.2.26.

* gnu/packages/ruby.scm (ruby-stackprof): Update to 0.2.26.

Change-Id: I6f15da677e630708c702eb00e83c960de8e3d639

gnu: ruby-stackprof: Skip test known to fail.

* gnu/packages/ruby.scm (ruby-stackprof)[arguments]: Skip another test
which is known to fail.

Change-Id: Ie261864cc19eba881377b88c07b6402c60a22423

gnu: guix: Update to 4c94b9e.

* gnu/packages/package-management.scm (guix): Update to 4c94b9e.

Change-Id: I73678ae87acbc2ef0185daf844486f7394a46fd7

news: Update commit for fixed-output derivation vulnerability.

* etc/news.scm: Update.

Change-Id: Ia34408882f8928a0fd05acc12d4edc66b3dcb3b7

daemon: Address shortcoming in previous security fix for CVE-2024-27297.

This is a followup to 8f4ffb3fae133bb21d7991e97c2f19a7108b1143.

Commit 8f4ffb3fae133bb21d7991e97c2f19a7108b1143 fell short in two
ways: (1) it didn’t have any effet for fixed-output derivations
performed in a chroot, which is the case for all of them except those
using “builtin:download” and “builtin:git-download”, and (2) it did not
preserve ownership when copying, leading to “suspicious ownership or
permission […] rejecting this build output” errors.

* nix/libstore/build.cc (DerivationGoal::buildDone): Account for
‘chrootRootDir’ when copying ‘drv.outputs’.
* nix/libutil/util.cc (copyFileRecursively): Add ‘fchown’ and ‘fchownat’
calls to preserve file ownership; this is necessary for chrooted
fixed-output derivation builds.
* nix/libutil/util.hh: Update comment.

Change-Id: Ib59f040e98fed59d1af81d724b874b592cbef156

gnu: ruby-x25519: Fix build on non x86_64.

* gnu/packages/patches/ruby-x25519-automatic-fallback-non-x86_64.patch:
New patch.
* gnu/packages/ruby.scm (ruby-x25519)[source]: Use it.
* gnu/local.mk (dist_patch_DATA): Register it.

Change-Id: If9c3b8dd8d818094f4cc5392bd5717f1430c369a
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

gnu: ssh-to-age: Update to 1.1.7.

* gnu/packages/password-utils.scm (ssh-to-age): Update to 1.1.7.
[synopsis]: Remove period at the end of the sentence.

Change-Id: Ide1bab2490b52459c31191d578619f9ea1edcbaf
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

gnu: hypre: Honor the #:tests? flag.

* gnu/packages/maths.scm (hypre)[arguments]: Adjust 'check phase to
honor the #:tests? flag.

Change-Id: I475fabd7d9f73ed320b97a4767830d82190c2b15
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

gnu: petsc: Add tunable property.

Tested with some real-world simulations on multpiple HPC systems.

* gnu/packages/maths.scm (petsc)[properties]: Add tunable? flag.

Change-Id: I81588d0556c4176f29d7ab760322cd7aec271f12
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

gnu: syncthing: Mark as tunable.

* gnu/packages/syncthing.scm (syncthing)[properties]: Mark package as
tunable.

Change-Id: Ia885bbd32f043e83b231359cca438ea9caf4e8dc

gnu: rust-bindgen-cli: Add shell completions.

* gnu/packages/rust-apps.scm (rust-bindgen-cli)[arguments]: Add a phase
to install shell completions.

Change-Id: Ia476d02a7c2d75518da2624b09b7091fafb70d8d

gnu: Add rust-bindgen-cli-0.69.

* gnu/packages/rust-apps.scm (rust-bindgen-cli): New variable.
(rust-bindgen): Remove this package.

Change-Id: I0841f34d73acf4e161c9f0ba0c6543d7f0d03092
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

gnu: cagebreak: Update to 2.3.1.

* gnu/packages/wm.scm (cagebreak): Update to 2.3.1.
[inputs]: Replace wlroots-0.16 with wlroots.

Change-Id: I1e14c45790aa633c200f604243bcd61b269bc231

gnu: manaplus: Update to 2.1.3.17.

* gnu/packages/games.scm (manaplus): Update to 2.1.3.17.
[arguments]: Pass "--with-sdl2" as configure-flags.
[inputs]: Replace sdl-union with sdl2, sdl2-image, sdl2-mixer, sdl2-net and
sdl2-ttf.

Change-Id: I223150d559bce21e055b44262c7c97b3ccfa8dc2

gnu: ltris: Update to 1.3.

* gnu/packages/games.scm (ltris): Update to 1.3.

Change-Id: I52e61633449100d945f52160c689d5a9d27da66a