Commit graph

5666 commits

Author SHA1 Message Date
Martin Weinelt 9525331e5a
Merge pull request #179322 from mweinelt/mozilla 2022-06-27 20:52:02 +02:00
Michael Weiss 9cbcd62ada
Merge pull request #179256 from primeos/chromiumDev
chromiumDev: 104.0.5112.12 -> 104.0.5112.20
2022-06-27 20:05:27 +02:00
Martin Weinelt 71c17fd17f
firefox-beta-bin-unwrapped: 102.0b5 -> 102.0b9 2022-06-27 14:20:48 +02:00
Martin Weinelt 46f9c89390
firefox-devedition-unwrapped: 102.0b6 -> 102.0b9 2022-06-27 14:20:47 +02:00
Martin Weinelt ddc17118f0
firefox-esr-91-unwrapped: 91.10.0esr -> 91.11.0esr
https://www.mozilla.org/en-US/firefox/91.11.0/releasenotes/
2022-06-27 14:20:47 +02:00
Martin Weinelt 1832364599
firefox-esr-102-unwrapped: init at 102.0esr
https://www.mozilla.org/en-US/firefox/102.0/releasenotes/
2022-06-27 14:20:47 +02:00
Martin Weinelt 32b18b77bd
firefox-bin-unwrapped: 101.0.1 -> 102.0
https://www.mozilla.org/en-US/firefox/102.0/releasenotes/
2022-06-27 14:20:42 +02:00
Martin Weinelt 736555d08f
firefox-unwrapped: 101.0.1 -> 102.0
https://www.mozilla.org/en-US/firefox/102.0/releasenotes/
2022-06-27 14:20:42 +02:00
Michael Weiss 4a4f0cc411
chromiumDev: 104.0.5112.12 -> 104.0.5112.20 2022-06-26 23:39:28 +02:00
Michael Weiss 57a56ee3d5
chromiumBeta: 103.0.5060.53 -> 104.0.5112.20 2022-06-26 23:38:37 +02:00
Steven Kou 09de927889
vivaldi: 5.3.2679.58-1 -> 5.3.2679.61-1 2022-06-26 12:45:53 +08:00
Martin Weinelt b45a1a2e82
Merge pull request #178390 from aszlig/firefox-fix-signing-required-detection 2022-06-25 11:42:47 +02:00
Michael Weiss fb3cb6c12f
Merge pull request #178645 from primeos/ungoogled-chromium
ungoogled-chromium: 102.0.5005.115 -> 103.0.5060.53
2022-06-23 21:45:38 +02:00
Robert Scott 466c2e342a treewide/applications: add sourceType binaryNativeCode for many packages 2022-06-23 18:38:19 +01:00
Michael Weiss dd9c01a9af
ungoogled-chromium: 102.0.5005.115 -> 103.0.5060.53 2022-06-23 00:08:09 +02:00
Michael Weiss de0f40f35b
chromium: 102.0.5005.115 -> 103.0.5060.53
https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html

This update includes 14 security fixes.

CVEs:
CVE-2022-2156 CVE-2022-2157 CVE-2022-2158 CVE-2022-2160 CVE-2022-2161
CVE-2022-2162 CVE-2022-2163 CVE-2022-2164 CVE-2022-2165
2022-06-21 23:13:51 +02:00
aszlig 9744ff74ad
firefox: Improve detecting signing requirements
Firefox 61 started to enforce signatures for add-ons and since
commit d031843a1e, we get an evaluation
error that recommends the user to switch to Firefox ESR.

This isn't an option for everyone and as I also pointed out in the pull
request[1] introducing the above commit, I've been building Firefox like
this:

  let
    firefoxNoSigning = firefox-unwrapped.overrideAttrs (lib.const {
      MOZ_REQUIRE_SIGNING = false;
    });
  in wrapFirefox firefoxNoSigning {
    nixExtensions = ...;
  }

However, this only works after manually modifying nixpkgs (or copy &
paste wrapper.nix elsewhere) every time I want to have a new Firefox
version. Of course, this gets annoying and tedious after a while, so
this motivated me to properly fix this to not only check for an ESR
version but also check the value of MOZ_REQUIRE_SIGNING.

Note that I'm using toString here to check for the value because there
are several ways (false, null, "", ...) to set the environment variable
to an empty string and toString makes sure that it really is the desired
behaviour. I specifically checked the Firefox source and also tested
this with multiple values and only building with MOZ_REQUIRE_SIGNING
set to an empty string seems to work (no "0", "false" or other
variants).

Additionally, there is another method to allow unsigned add-ons, which
is by using the --with-unsigned-addon-scopes configure option[2].
Unfortunately, this does not work with nixExtensions because we don't
have (or want) a central directory where those add-ons reside.

Given that nixExtensions disallows manually installing add-ons, setting
MOZ_REQUIRE_SIGNING to false should be safe in this case.

[1]: https://github.com/NixOS/nixpkgs/pull/133504
[2]: https://bugs.archlinux.org/task/63075

Signed-off-by: aszlig <aszlig@nix.build>
2022-06-21 11:54:08 +02:00
Anderson Torres ffaa3ee784
Merge pull request #178303 from Icy-Thought/master
brave: 1.38.115 -> 1.39.122
2022-06-20 23:05:46 -03:00
Michael Weiss 1938f36f03
Merge pull request #178279 from primeos/chromiumDev
chromiumDev: 104.0.5110.0 -> 104.0.5112.12
2022-06-20 22:57:02 +02:00
Icy-Thought c70cbc077e
brave: 1.38.115 -> 1.39.122 2022-06-20 08:18:18 +02:00
Michael Weiss b14fe90066
chromiumDev: 104.0.5110.0 -> 104.0.5112.12 2022-06-19 23:10:54 +02:00
José Romildo 419fcbb058 vivaldi: 5.3.2679.55-1 -> 5.3.2679.58-1 2022-06-19 09:31:08 -03:00
github-actions[bot] b7aba4fb0f
Merge master into staging-next 2022-06-19 00:02:36 +00:00
Sandro 8dc07f821b
Merge pull request #175158 from kuwii/dev/microsoft-edge
microsoft-edge: 100.0.1185.44 -> 102.0.1245.44
2022-06-19 01:34:05 +02:00
github-actions[bot] 5ee636b083
Merge master into staging-next 2022-06-18 18:01:12 +00:00
kuwii eb6e5a017e microsoft-edge: 100.0.1185.44 -> 102.0.1245.44 2022-06-19 00:06:56 +08:00
Michael Weiss 4cda286925
chromiumBeta: 103.0.5060.42 -> 103.0.5060.53 2022-06-18 11:49:15 +02:00
github-actions[bot] 5917794eda
Merge master into staging-next 2022-06-15 18:01:10 +00:00
Sandro d69adc9382
Merge pull request #176206 from squalus/librewolf
librewolf: 100.0.2-1 -> 101.0.1-1
2022-06-15 16:26:38 +02:00
github-actions[bot] 4e74812c3a
Merge master into staging-next 2022-06-15 00:02:12 +00:00
Sandro 7a2cbef177
Merge pull request #177402 from romildo/upd.vivaldi 2022-06-14 22:31:03 +02:00
github-actions[bot] 452a7d6c43
Merge master into staging-next 2022-06-14 12:01:32 +00:00
Martin Weinelt ea8ca72ec5
Merge pull request #177583 from panicgh/tbb 2022-06-14 11:31:23 +02:00
github-actions[bot] 6a7069b65a
Merge master into staging-next 2022-06-14 06:01:21 +00:00
Nicolas Benes de77c035c4 tor-browser-bundle-bin: 11.0.13 -> 11.0.14 2022-06-14 01:09:53 +02:00
OPNA2608 222fe563b9 palemoon: Limit build cores count
Building with too many cores may be the cause of the build flakiness with OfBorg.
Upstream says <=32 cores should work fine, let's see if this helps.
https://forum.palemoon.org/viewtopic.php?f=5&t=28480
2022-06-13 22:51:17 +02:00
github-actions[bot] 153ddcc04c
Merge master into staging-next 2022-06-13 12:01:23 +00:00
FliegendeWurst 7cb9bf19b9 yandex-browser: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 6a0ed325e3 vivaldi: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 746ecffade microsoft-edge: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 51d4989cdd firefox-bin: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 76b1ca1c35 google-chrome: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 08947f3df6 opera: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
FliegendeWurst 6603e6a8d1 tor-browser-bundle-bin: mark meta.sourceProvenance 2022-06-13 18:55:15 +08:00
github-actions[bot] c02da5611d
Merge master into staging-next 2022-06-13 06:01:25 +00:00
squalus dcd55dbd5b librewolf: 100.0.2-1 -> 101.0.1-1 2022-06-12 20:33:13 -07:00
Anderson Torres 1b2beb2370
Merge pull request #177295 from OPNA2608/fix/palemoon-31.1.0
palemoon: Fix 31.1.0 bump
2022-06-12 21:58:00 -03:00
github-actions[bot] 6eeef3eaa8
Merge master into staging-next 2022-06-13 00:02:20 +00:00
José Romildo eb9f2ac69d vivaldi: 5.3.2679.38-1 -> 5.3.2679.55-1 2022-06-12 10:24:01 -03:00
github-actions[bot] 1f50f0a724
Merge master into staging-next 2022-06-12 12:01:12 +00:00