Skip to content

Conversation

@nixpkgs-ci
Copy link
Contributor

@nixpkgs-ci nixpkgs-ci bot commented Dec 6, 2025

Bot-based backport to release-25.11, triggered by a label in #467820.

Before merging, ensure that this backport is acceptable for the release.

Even as a non-committer, if you find that it is not acceptable, leave a comment.

Addresses CVE-2025-66478.

(cherry picked from commit 8ddf3ae)
@nixpkgs-ci nixpkgs-ci bot added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Dec 6, 2025
@nixpkgs-ci nixpkgs-ci bot mentioned this pull request Dec 6, 2025
13 tasks
@nixpkgs-ci nixpkgs-ci bot added the 2.status: merge-bot eligible This PR can be merged by commenting "@NixOS/nixpkgs-merge-bot merge". label Dec 6, 2025
@nixpkgs-ci nixpkgs-ci bot requested a review from diogotcorreia December 6, 2025 03:16
@nixpkgs-ci nixpkgs-ci bot added 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux. 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 1 This PR causes 1 package to rebuild on Linux. 4.workflow: backport This targets a stable branch labels Dec 6, 2025
Copy link
Member

@diogotcorreia diogotcorreia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nixpkgs-review result

Generated using nixpkgs-review-gha

Command: nixpkgs-review pr 468314
Commit: 689f6a99ccf9c18966f7c079257ed869e7e5ddd7 (subsequent changes)
Merge: 72d0b4b1263208adafbea4ac12ff5745aac6a460

Logs: https://github.com/diogotcorreia/nixpkgs-review-gha/actions/runs/19987427598


x86_64-linux

✅ 1 package built:
  • umami

aarch64-linux

✅ 1 package built:
  • umami

x86_64-darwin

No rebuilds


aarch64-darwin

No rebuilds

@diogotcorreia
Copy link
Member

@NixOS/nixpkgs-merge-bot merge

@nixpkgs-ci nixpkgs-ci bot added this pull request to the merge queue Dec 6, 2025
@nixpkgs-ci
Copy link
Contributor Author

nixpkgs-ci bot commented Dec 6, 2025

@diogotcorreia wants to merge this PR.

Requirements to merge this PR with @NixOS/nixpkgs-merge-bot merge:

  • ✅ PR targets a development branch.
  • ✅ PR touches only files of packages in pkgs/by-name/.
  • ✅ PR is at least one of:
    • ⬜ Approved by a committer.
    • ✅ Backported via label.
    • ⬜ Opened by a committer.
    • ⬜ Opened by r-ryantm.
  • ✅ diogotcorreia is a member of @NixOS/nixpkgs-maintainers.
  • ✅ diogotcorreia is a maintainer of all touched packages.

✔️ Queued for merge (#306934)

@nixpkgs-ci nixpkgs-ci bot added 12.approvals: 1 This PR was reviewed and approved by one person. 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in any of the changed packages. labels Dec 6, 2025
Merged via the queue into release-25.11 with commit 6dcf291 Dec 6, 2025
35 of 38 checks passed
@nixpkgs-ci nixpkgs-ci bot deleted the backport-467820-to-release-25.11 branch December 6, 2025 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 2.status: merge-bot eligible This PR can be merged by commenting "@NixOS/nixpkgs-merge-bot merge". 4.workflow: backport This targets a stable branch 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux. 10.rebuild-linux: 1 This PR causes 1 package to rebuild on Linux. 12.approvals: 1 This PR was reviewed and approved by one person. 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in any of the changed packages.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant