go1.25.8 (released 2026-03-05) includes security fixes to the
html/template, net/url, and os packages, as well as bug fixes to the go
command, the compiler, and the os package.
See: <https://github.com/golang/go/compare/go1.25.7...go1.25.8>,
<https://www.openwall.com/lists/oss-security/2026/03/06/1>
Containes fixes for:
CVE-2026-27142: URLs in meta content attribute actions are not escaped
in html/template.
CVE-2026-25679: Incorrect parsing of IPv6 host literals in net/url.
CVE-2026-27139: FileInfo can escape from a Root in os.
* gnu/packages/golang.scm (go-1.25): Update to 1.25.8.
Change-Id: I01a80a78f20075fe6c05c46f97dfe35f770a99a0
go1.26.1 (released 2026-03-05) includes security fixes to the
crypto/x509, html/template, net/url, and os packages, as well as bug
fixes to the go command, the go fix command, the compiler, and the os
and reflect packages.
See: <https://github.com/golang/go/compare/go1.26.0...go1.26.1>,
<https://www.openwall.com/lists/oss-security/2026/03/06/1>
Containes fixes for:
CVE-2026-27137: Incorrect enforcement of email constraints in
crypto/x509.
CVE-2026-27138: Panic in name constraint checking for malformed
certificates in crypto/x509.
CVE-2026-27142: URLs in meta content attribute actions are not escaped
in html/template.
CVE-2026-25679: Incorrect parsing of IPv6 host literals in net/url.
CVE-2026-27139: FileInfo can escape from a Root in os.
* gnu/packages/golang.scm (go-1.26): Update to 1.26.1.
Change-Id: I1c014a334407d9ca927d9e403c8c7e92cad8fe1d
* gnu/packages/version-control.scm (git-cliff)[arguments]: Add a phase
to generate and install the manpage and the shell completions.
Change-Id: Ib548fed6cd03f21c0dade2d773fcf8146638dc5b
gnu/packages/dlang.scm (d-demangler) [synopsis, description]: Remove mention
of a non-existent command. Refer to the package as a library. Note that this
only wraps D's ‘std.demangle’.
Change-Id: I8fe98d4bb031f8f50468a4c1a5b907d3ff24de0c
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/dlang.scm (dmd-bootstrap)
[#:make-flags]: Remove unneeded “DFLAGS=-L--allow-multiple-definition”.
[#:modules]: Move here from dmd. Add (srfi srfi-26).
[#:phases]: Add ‘patch-git-ls-tree’, ‘patch-paths-in-phobos‘.
Remove ‘copy-phobos-source-and-chdir’ in favor of custom ‘unpack’.
Remove ‘adjust-phobos-install-dirs’, ‘install-druntime’, ‘install-includes’,
‘install-dmd’, ‘refine-install-layout’, ‘patch-dmd.conf’ in favor of custom
‘install’.
<unpack>: Replace with a copy of the gnu phase, but unpack the 2 sources to
“source/dmd” and “source/phobos”.
<build>: Replace. Run gnu ‘build’ in dmd subdir.
<build-phobos>: New phase. Run gnu ‘build’ in phobos subdir.
<check>: Replace. Run gnu ‘check’ in dmd subdir.
<check-phobos>: New phase. Run gnu ‘check’ in phobos subdir.
<install>: Replace with custom install script, that gets everything right the
first time. Shared libraries get installed to “lib/lib“, static libraries to
“out/lib”. Include files are installed to “out/include/d/dmd” to avoid
conflicts with other compilers.
<install-license-files>: Replace. Run gnu ‘install-license-files’ in the dmd
subdir.
[inputs]: Add bash-minimal (for std.process).
* gnu/packages/dlang.scm (dmd)
[#:modules]: Move to dmd-bootstrap.
[#:make-flags]: Don't delete “DFLAGS=-L--allow-multiple-definition” as it no
longer exists.
[#:phases]<rewrite-references-to-bootstrap>: Rebase the ‘add-after’ on the
‘install’ phase. Simplify discovery of the executable.
[native-inputs]: Substitute replacing gdmd with dmd-bootstrap for remove and
append.
[outputs]: Add “lib” (for “.so” files) and “debug”.
Change-Id: If0d5e1a2e4a45a26252b886aaa0ac91d9814e4fe
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdmd): Redefine as an alias to gdmd-14. Avoids
ambiguous package specification warnings and executing make-gdmd twice.
Change-Id: I45455d4b3f547d8d77bc46a553102eebf727b45e
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (make-gdmd): New private procedure.
(gdmd): Implement in terms of make-gdmd.
Change-Id: I3fc2ce8af7ca3489a8f3bf4d607b530083a900b1
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdmd): Update to 0.25.0.
[source]: Prefix git tag with “script-”.
Change-Id: Icab7bb068d87e3813b15d1c360fb593ee5eac716
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/dlang.scm (gdmd): Move from here ...
* gnu/packages/gcc.scm: ... to here.
Change-Id: I43fa2f66f812edc6c74442c7d911fe902265f5e0
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-15): New public variable.
Change-Id: Ib8e2d6ca8bab3c0412b7d59b7acd40e075f61d74
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-13): New public variable.
Change-Id: If7ac081ece1185da1004adf90027e412ae471ae8
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-12): New public variable.
Change-Id: Ic5711bc318aeb766763e3dfc6f1da81a340b8c7b
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-10): New public variable.
Change-Id: I74e8ed8c635e2f80af5b5504e4d2de97aed188a5
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-9): New public variable.
Change-Id: I059397ce7ee398c1ed8b6cfcc1d294916c64203a
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (gdc-14): New variable, renamed from gdc.
(gdc): Redefine as an alias for gdc-14.
Change-Id: Ic2f4252fb75da703c9048b74c66026eda249023b
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/gcc.scm (make-gdc): New variable. This procedure returns a
package based on the previous gdc-11 and gdc definitions.
[#:modules]: Add (ice-9 ftw).
[#:configure-flags]: Add “--disable-c++tools” and “--disable-plugin”.
Add “--disable-libcc1”, “--disable-libatomic” (since version 11),
“--disable-libcc1”, “--disable-libgomp”, “--disable-libitm”,
“--disable-libquadmath”, “--disable-libsanitizer”, “--disable-libssp”, and
“--disable-libstdcxx” (until version 15).
[#:phases]: Add ‘gdc-cleanup-install’.
[inputs]: Add gcc:lib.
[synopsis]: Override the one inherited from gcc.
[description]: Override the one inherited from gcc. Append a frontend version
note if such version was provided as argument.
[home-page]: Override the one inherited from gcc.
(gdc-11): Implement in terms of make-gdc. Make public.
(gdc): Implement in terms of make-gdc, with gdc-11 as bootstrap-gdc
argument. Make public.
Change-Id: I44d351f8c97427a6bbd1821f9547ae680a154b06
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/music.scm (lilypond): Downgrade to 2.24.4.
This package should track the stable release of LilyPond.
Change-Id: I3a4ae814a719961039a8b7180e8dbd4d8ecc5012
