Skip to content

staging-next 2025-10-07#449539

Merged
vcunat merged 612 commits intomasterfrom
staging-next
Oct 21, 2025
Merged

staging-next 2025-10-07#449539
vcunat merged 612 commits intomasterfrom
staging-next

Conversation

nixpkgs-ci bot and others added 30 commits October 5, 2025 06:05
That way we'll notice if the code changes to examine if this either
needs to be updated or removed.
After a recent update of libxml2 the build fails with

    /nix/store/casz7al9kpkg52sn156h6slqijwkybqj-libxml2-2.15.0-bin/bin/xmllint --nonet --path . --path . --output postgres-full.xml --noent --valid postgres.sgml
    ref/pg_combinebackup.sgml:287: validity error : standalone: normalization of attribute linkend on xref by external subset declaration
   state of the cluster using <xref linkend="app-pgchecksums "/> is

Reported in #448752 (not closing on purpose since the issue is actually
about another problem).
The patch was conditional to x86_64-darwin to fix staging-next without
rebuilding too much. Now that the cycle is done, make it unconditional.
There's no particular reason to have a special builder. Fold all the
changes it made into the derivation.
This was originally turned off in #245360 because the approach was
non-reproducible, i.e. all N concurrent jobs were racing to update
`locale-archive`.

glibc's localedef allows to separate the build from the install, i.e.
`localedef --no-archive` allows to only perform the build of the locale
which can be parallelized again. After that, a single process adds all
newly built locales into the archive.

This isn't supported by the Makefiles in upstream glibc yet[1], hence
the additional patches.

For me, this reduces the build-time of `pkgs.glibcLocales` from ~7min to
slightly under 1min.

[1] https://sourceware.org/pipermail/libc-alpha/2025-October/170803.html
nixpkgs-ci bot and others added 5 commits October 19, 2025 18:05
This PR systemd/systemd#36444 caused this bug
systemd/systemd#39043, which is fixed in
this PR systemd/systemd#39071. In short,
`uaccess` doesn't work with `OPTIONS+="static_node=..."` udev rules,
and `/dev/snd/timer` is a static node. 258.1 needs to wait for the
next staging cycle, so for now let's just use a non-static node.
@leonklingele
Copy link
Contributor

For some additional context to @06kellyjac's comment regarding bumping to Go 1.25.3 (instead of Go 1.25.2) in here:

Hey all,

This release addresses breakage caused by a security patch included in Go 1.25.2
and 1.24.8, which enforced overly restrictive validation on the parsing of X.509
certificates. We've removed those restrictions while maintaining the security
fix that the initial release addressed.

We apologize for any issues this may have caused.

Roland Shoemaker, for the Go Security team

https://groups.google.com/g/golang-nuts/c/NqkcrM10lhs/m/AYIpQK3SBQAJ

@vcunat vcunat added this pull request to the merge queue Oct 21, 2025
Merged via the queue into master with commit a91dd31 Oct 21, 2025
26 checks passed
@06kellyjac 06kellyjac mentioned this pull request Oct 22, 2025
13 tasks
@vcunat
Copy link
Member Author

vcunat commented Oct 23, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 4.workflow: staging A staging-next or staging-next-XX.YY branch 9.needs: reviewer This PR currently has no reviewers requested and needs attention. 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 5001+ This PR causes many rebuilds on Darwin and must target the staging branches. 10.rebuild-darwin-stdenv This PR causes stdenv to rebuild on Darwin and must target a staging branch. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 5001+ This PR causes many rebuilds on Linux and must target the staging branches. 10.rebuild-linux-stdenv This PR causes stdenv to rebuild on Linux and must target a staging branch.

Projects

None yet

Development

Successfully merging this pull request may close these issues.