Reepca Russelstein
b39f914b3e
scripts: perform-download: explicitly disallow local file downloads.
...
In the case of the rootless daemon, perform-download runs as the daemon user.
There are files - such as /etc/guix/signing-key.sec - that guix-daemon can
read but that it is essential that ordinary users cannot.
Currently url-fetch can't access raw filenames, and it doesn't include a case
for "file://" urls. 'git-fetch-with-fallback' can fetch from "file://" urls,
but it requires that the specified url is a valid git repository.
To be on the safe side, and to insulate against any changes to what url-fetch
and git support, explicitly disallow raw filenames and "file://" urls.
* guix/scripts/perform-download.scm (assert-non-local-urls): new procedure.
(perform-download, perform-git-download): use it.
Change-Id: Ibf2a91e696246eccb89c2423fcbcabb2131d3be5
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2025-10-12 22:22:01 +02:00
Reepca Russelstein
4f5dd898c9
build: git: prevent commit from being treated as a flag.
...
Git's option parsing is more flexible than its command synopses would lead one
to believe: they can apparently be passed even after positional arguments.
Some of these options can be quite nasty if an attacker is able to choose
them.
Additionally, some commands offer no way of disambiguating the meaning of an
argument. For example, "git checkout" has no way of specifying that an
argument should be unconditionally treated as a commit specifier instead of,
say, an option or a filespec.
* guix/build/git.scm (git-fetch): pass "--" to every git invocation that
includes non-constant strings. Explicitly reject commits that start with
"-".
Change-Id: I3b1707ff8f8544925d1549472f0bda7954249f89
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2025-10-12 22:22:00 +02:00
Ludovic Courtès
00f186a6bf
teams: Remove inactive members of the ‘core’ team.
...
* etc/teams.scm (nckx, mothacehe, Josselin Poiret): Remove.
Change-Id: I669dc9247ebd88a60babce1f128aa38c8f4f78ce
2025-10-12 22:22:00 +02:00
Nicolas Graves
41f478a900
guix: Fix guix-minimal tests.
...
* Makefile.am (SCM_TESTS): Add tests/machine/hetzner.scm and
tests/machine/hetzner/http.scm conditionally.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2025-10-12 22:22:00 +02:00
Cayetano Santos
9089393255
gnu: emacs-popwin: Update to 1.0.2-0.213e462.
...
* gnu/packages/emacs-xyz.scm (emacs-popwin): Update to 1.0.2-0.213e462.
[arguments]<#:phases>: Add skip-tests.
<#:test-command>: Set.
<#:tests?>: Remove.
Change-Id: Ia2f1dd2cdb01c82b9c3e373897733a4b611c2b6c
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
2025-10-12 20:04:57 +02:00
Maxim Cournoyer
2838231f2f
gnu: luanti-voxelibre: Update to 0.90.1.
...
* gnu/packages/luanti.scm (luanti-voxelibre): Update to 0.90.1.
[synopsis]: Do not start with article.
[description]: Use double spaces between sentences.
Change-Id: I135a8e0eb9e1af44d5a9feeba6827579be968baa
2025-10-12 22:15:05 +09:00
Isidor Zeuner
7818f1d3d9
gnu: Add maskprocessor.
...
* gnu/packages/password-utils.scm (maskprocessor): New variable.
Signed-off-by: Ekaitz Zarraga <ekaitz@elenq.tech>
2025-10-12 11:45:10 +02:00
Sharlatan Hellseher
ea2bde60ed
gnu: python-fastapi-pagination: Fix tests.
...
* gnu/packages/python-web.scm (python-fastapi-pagination)[arguments]
<test-flags>: Skip some tests requiring network access and provide
"--asyncio-mode=auto".
Change-Id: I788b0656cba44729984a6c1f8dcbd8a276967b7a
2025-10-11 21:29:51 +01:00
Charles Roelli
6b02b5a806
gnu: python-mathics-django: Fix tests.
...
* gnu/packages/maths.scm (python-mathics-django)[propagated-inputs]:
Add python-matplotlib, required for tests.
Change-Id: I8db918772d6507505970e6a3c1e8c66db0ad18cd
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:51 +01:00
Charles Roelli
239f1a0c17
gnu: python-hyperkitty: Update to 1.3.12-0.9a00847.
...
* gnu/packages/mail.scm (python-hyperkitty): Update to
9a008473fadb95370cd54b0782df9fb956e323c0 commit.
Change-Id: Ib292a5131729889c83fa2fa782d4e450cf533589
Modified-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:51 +01:00
Charles Roelli
e0a350ba27
gnu: python-django-compressor: Patch for Django 5.2 compatibility.
...
* gnu/packages/patches/django-compressor-build-with-beautifulsoup-4.14+.patch:
New patch.
* gnu/packages/django.scm (python-django-compressor)[source]: Patch
with https://github.com/django-compressor/django-compressor/pull/1296 ,
minus conflicting changes to requirements/tests.txt.
Change-Id: Ic22268f6870b30c3ace689a4cadb63a77f69ca9e
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:51 +01:00
Charles Roelli
f5d972eb3a
gnu: python-django-allauth: Update to 65.7.0.
...
* gnu/packages/django.scm (python-django-allauth): Update to 65.7.0,
the first version that officially supports Django 5.2.
[native-inputs]: Add python-pytest-asyncio.
Change-Id: I088abf44da232ade8e7ac5ba8ac3dd9098dd2628
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:51 +01:00
Charles Roelli
85df6faf4a
gnu: python-easy-thumbnails: Update to 2.10.1.
...
* gnu/packages/django.scm (python-easy-thumbnails): Update to 2.10.1.
[native-inputs]: Remove python-wheel; add tzdata-for-tests.
Change-Id: I71918634c6df88f91cd2a8af01cc8b146f4620ba
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:51 +01:00
Charles Roelli
772ffdc5c6
gnu: python-django-rest-framework: Update to 3.16.1.
...
* gnu/packages/django.scm (python-django-rest-framework): Update to
3.16.1.
Change-Id: If55b201bea5a9b9a01f83ccba6de3033f836172c
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
53030b61eb
gnu: python-django-haystack: Fix tests.
...
* gnu/packages/django.scm (python-django-haystack)[native-inputs]:
Remove python-wheel; add tzdata-for-tests.
Change-Id: Ida6a94b419387aaa9e8e9c3c6f754383bad23f7d
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
f657986788
gnu: python-django-extensions: Fix tests.
...
* gnu/packages/django.scm (python-django-extensions)[native-inputs]:
Remove python-wheel; add tzdata-for-tests.
Change-Id: I3251b2d4cdb5d72415863a18f7437e6c6ada567e
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
8c619f2140
gnu: python-django-debug-toolbar: Update to 6.0.0.
...
* gnu/packages/django.scm (python-django-debug-toolbar): Update to 6.0.0.
[native-inputs]: Remove python-django-ninja, and python-wheel; add
python-django-csp, python-django-template-partials, and
python-hatchling.
Change-Id: I6e33470953d82931cc498e197df78aac3bca8985
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
612607e632
gnu: Add python-django-template-partials.
...
* gnu/packages/django.scm (python-django-template-partials): New variable.
Change-Id: I48daf4aacd5db9a2b7205ef87699b98e600f2494
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
899296bfa2
gnu: Add python-django-csp.
...
* gnu/packages/django.scm (python-django-csp): New variable.
Change-Id: I8b93daa9ca3a0840f736145d374d8275f1a6ae37
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:50 +01:00
Charles Roelli
4719edfff7
gnu: python-django-pipeline: Update to 4.1.0.
...
* gnu/packages/django.scm (python-django-pipeline): Update to 4.1.0.
Change-Id: If702b32e3246bb41e962d4a3def8d13f06286d6d
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:29:46 +01:00
Charles Roelli
a456f58637
gnu: python-django: Update to 5.2.6.
...
* gnu/packages/django.scm (python-django): Update to 5.2.6.
[arguments] <phases>: Add 'delete-sitecustomize.
(python-django-4): New variable.
(python-django-contrib-comments, python-django-jinja,
python-django-simple-math-captcha, python-django-configurations,
python-crispy-bootstrap3, python-crispy-bootstrap4,
python-django-crispy-forms)[propagated-inputs]: Remove python-django;
add python-django-4.
Change-Id: I363ae119961fba19b22751d4ef30d1a1b146cf7e
Modified-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 21:24:16 +01:00
charje
fc7a747947
gnu: Add sbcl-common-macros.
...
* gnu/packages/lisp-xyz.scm (sbcl-common-macros, cl-common-macros,
ecl-common-macros, clasp-common-macros): New Variables.
Change-Id: I01cee761f4ac59705431e138c87c125553261099
Signed-off-by: jgart <jgart@dismail.de>
2025-10-11 15:14:01 -05:00
Maxim Cournoyer
26729b9cf0
tests: guix-system: Add test for 'guix system container'.
...
* tests/guix-system.sh: Add test.
Change-Id: I26c90741f17257dc50757b7cb5210ea4e645ecce
2025-10-11 21:57:59 +09:00
Maxim Cournoyer
1d77413c56
services/base: Only remount read-write if needed in run-with-writable-store.
...
* gnu/services/base.scm (run-with-writable-store): Make it a no-op when
the store is already writable (useful for testing).
Change-Id: If598638e9d3eeac242c265cba77f27e4a15f8d9b
2025-10-11 21:57:59 +09:00
Nicolas Goaziou
8cdc7108c1
gnu: emacs-xyz: Remove unnecessary emacs-cond-let propagation.
...
This is a followup to 25de210793
2025-10-11 11:30:30 +02:00
Nicolas Goaziou
25de210793
gnu: emacs-magit: Fix propagated inputs.
...
* gnu/packages/emacs-xyz.scm (emacs-magit)[native-inputs]: Move
emacs-cond-let...
[propagated-inputs]: ... to here.
Change-Id: Ife56cf7218e5b68474dbe2d0adddeaaa63a56945
2025-10-11 11:13:44 +02:00
Nicolas Goaziou
65babe5160
gnu: emacs-evil-collection: Fix build.
...
* gnu/packages/emacs-xyz.scm (emacs-evil-collection)[arguments]: Skip a failing test.
Change-Id: I1930cfd5e9189e1ff59a4c9bc56183dea6afb8b1
2025-10-11 11:13:27 +02:00
Sharlatan Hellseher
10b1d28371
gnu: packages/cybersecurity: Remove (gnu packages bioinformatics) module.
...
* gnu/packages/cybersecurity.scm: Remove (gnu packages bioinformatics)
from used modules.
Change-Id: If0c20cb7152970bb34b4742f733eda0a639b8f4d
2025-10-11 08:39:21 +01:00
Sharlatan Hellseher
ed21c87a71
gnu: python-intervaltree: Move to python-xyz.
...
* gnu/packages/bioinformatics.scm (python-intervaltree): Move from here ...
* gnu/packages/python-xyz.scm: ... to here.
Change-Id: I49d3e4959f2aff99fc3faf42b3f5dae60622ef47
2025-10-11 08:37:55 +01:00
Sharlatan Hellseher
35c283fdf3
gnu: ropgadget: Update to 7.6.
...
* gnu/packages/cybersecurity.scm (ropgadget): Update to 7.6.
[build-system]: Switch to pyproject-build-system.
[arguments] <tests?>: No test data in PyPI archive.
<phases>: Use custom 'check.
[native-inputs]: Add python-setuptools.
Change-Id: Iaa2cb856c35df4e263f1b72d048b705325f4c411
2025-10-11 08:35:11 +01:00
Sharlatan Hellseher
a8b3754377
gnu: Add gallia.
...
* gnu/packages/cybersecurity.scm (gallia): New variable.
Change-Id: I927c7d43bad89052c689390a42a268c2de597a8d
2025-10-11 08:19:52 +01:00
Sharlatan Hellseher
8aeb675dca
gnu: Add python-exitcode.
...
* gnu/packages/python-xyz.scm (python-exitcode): New variable.
Change-Id: Id1bf46af21ac5f5dc148b8b9682a552b053a578b
2025-10-11 08:18:46 +01:00
Hugo Buddelmeijer
33869065ea
gnu: syncthing-gtk: Switch to pyproject-build-system.
...
* gnu/packages/syncthing.scm: Remove (guix build-system python) module,
use (guix build-system pyproject), and (gnu packages python-build)
modules.
(syncthing-gtk)[build-system]: Switch to pyproject-build-system.
[arguments] <#:tests?>: Disable non-exisiting tests.
<#:phases>: Let setup.py return correct-ish version number to placate pip.
[home-page]: Update to https://github.com/kozec/syncthing-gtk .
Change-Id: I88b2921d3d899903938a74137e29d403de8f9617
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-11 07:54:27 +01:00
Antoine Côté
20ad79c923
gnu: libogg: Update to 1.3.6.
...
* gnu/packages/xiph.scm (libogg): Update to 1.3.6.
Change-Id: I946cbe655c0fb70b28b923f2fc248dd7bfe9c80f
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
2025-10-11 08:51:46 +02:00
Antoine Côté
e4f4875d4f
gnu: opus: Update to 1.5.2.
...
The Mozilla archive is no longer actively mirroring the source for this package.
* gnu/packages/xiph.scm (opus): Update to 1.5.2.
[source]: Update origin URI.
Change-Id: Iaea105fec92593ce8c62e7874e8362921fef779b
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
2025-10-11 08:51:46 +02:00
Antoine Côté
290ba3b788
gnu: flac: Update to 1.5.0.
...
* gnu/packages/xiph.scm (flac): Update to 1.5.0.
Change-Id: Ia336ddbb74952873f5886ed88da9aba2c9cf3fee
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
2025-10-11 08:51:43 +02:00
Hugo Buddelmeijer
117d17c4e4
gnu: python-plingo: Fix build.
...
* gnu/packages/potassco.scm (python-plingo): Fix build.
[arguments] <#tests?>: Set to #f as there are no tests.
[native-inputs]: Remove python-wheel.
Change-Id: I0ca048796397489ed04a7c697f52e7658eaba9cb
Reviewed-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-10 23:55:53 +01:00
Andy Tai
fc6223a598
gnu: octave-cli: Update to 10.3.0.
...
* gnu/packages/maths.scm (octave-cli): Update to 10.3.0.
Change-Id: Ifc58fb06aba5899838536ac903b4150518d0384e
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-10 23:24:10 +01:00
Sören Tempel
394a2accac
gnu: kissat: Make build reproducible.
...
* gnu/packages/maths.scm (kissat)[#:phases] <patch-source>: Don't
include current date in build-header.
Change-Id: Iae8dde38de8badb2f5975f69b2221faebd043371
Reviewed-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-10 23:17:40 +01:00
Hugo Buddelmeijer
6eb7198ab6
gnu: python-mechanicalsoup: Skip one test.
...
* gnu/packages/python-web.scm (python-mechanicalsoup): Fix build.
[arguments] <#:test-flags>: Skip one test.
Change-Id: I91c37fe4a6994e7b660416c663d9e23497c9e7ea
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2025-10-10 23:11:10 +01:00
Ian Eure
108f3f001a
gnu: librewolf: Update to 143.0.4-1.
...
* gnu/packages/librewolf.scm (librewolf): Update to 143.0.4-1.
Change-Id: I6d8a9e312782c83f06669786dfa8671c674a8d79
2025-10-10 11:52:12 -07:00
Ian Eure
9cd34858f0
gnu: firefox-l10n: Update to 8d3860a58e56e59d9db46aa68c9b7e10d2d1249b.
...
* gnu/packages/librewolf.scm (firefox-l10n): Update to 8d3860a58e56e59d9db46aa68c9b7e10d2d1249b.
Change-Id: Iba877c5c026e5c393bc9bc45f2ebdc5ec31e4a74
2025-10-10 11:52:08 -07:00
Nicolas Goaziou
7d3c5facab
gnu: emacs-volatile-highlights: Update to 1.20.
...
* gnu/packages/emacs-xyz.scm (emacs-volatile-highlights): Update to 1.20.
Change-Id: I65f718875058978800e07a2cfb7755108cba3606
2025-10-10 20:44:08 +02:00
Nicolas Goaziou
4ec799e580
gnu: emacs-vertico: Update to 2.5.
...
* gnu/packages/emacs-xyz.scm (emacs-vertico): Update to 2.5.
Change-Id: Ib145a593c5efdc5d92e8a213575df4f39913801b
2025-10-10 20:44:08 +02:00
Nicolas Goaziou
c8e33e543b
gnu: emacs-url-http-ntlm: Update to 2.0.6.
...
* gnu/packages/emacs-xyz.scm (emacs-url-http-ntlm): Update to 2.0.6.
Change-Id: Ia2ca5353cb63c99390aa379139300e41cffd7f9e
2025-10-10 20:44:08 +02:00
Nicolas Goaziou
f11a5de538
gnu: emacs-url-http-oauth: Update to 0.8.4.
...
* gnu/packages/emacs-xyz.scm (emacs-url-http-oauth): Update to 0.8.4.
Change-Id: I5a46ce99a760ba09e4ed6499fa9e9f3fe60be696
2025-10-10 20:44:07 +02:00
Nicolas Goaziou
426a72790d
gnu: emacs-tramp: Update to 2.8.0.3.
...
* gnu/packages/emacs-xyz.scm (emacs-tramp): Update to 2.8.0.3.
Change-Id: Id376a8381501bfc823cf2da280cf6c0a7a9b54d8
2025-10-10 20:44:07 +02:00
Nicolas Goaziou
734015244c
gnu: emacs-tokei: Update to 0.2.1.
...
* gnu/packages/emacs-xyz.scm (emacs-tokei): Update to 0.2.1.
[propagated-inputs]: Add emacs-cond-let.
Change-Id: I71a5ec1342717259826c4dc9f0727f6de51728af
2025-10-10 20:44:07 +02:00
Nicolas Goaziou
3e383e77b8
gnu: emacs-tempel: Update to 1.6.
...
* gnu/packages/emacs-xyz.scm (emacs-tempel): Update to 1.6.
Change-Id: I2592de778b1557e67fa5cd34e5e6e98973113134
2025-10-10 20:44:06 +02:00
Nicolas Goaziou
f4193d26e2
gnu: emacs-tmr: Update to 1.2.0.
...
* gnu/packages/emacs-xyz.scm (emacs-tmr): Update to 1.2.0.
Change-Id: I7b5ae55c22182c412b505dd7d2fcfac9f764817c
2025-10-10 20:44:06 +02:00
