The test is failing with openssl 3.5 in non linux paths.
* gnu/packages/python.scm (python-3.11)[#:make-flags]: Skip test_ssl test
on the Hurd.
Fixes: guix/guix#4062
Change-Id: Ia83b51dfc18cf92c2fee02415fe628ac2675582d
Signed-off-by: Andreas Enge <andreas@enge.fr>
This fixes a build failure on aarch64, see
https://github.com/jedisct1/libsodium/issues/1502 .
* gnu/packages/crypto.scm (libsodium): Update to 1.0.22.
Change-Id: Ibf422b4c8e21dc71f0202bad3199d54bd8e01056
Release notes since 10.2p1 (2025-10-10):
- 10.3p1 (2026-04-02)
<https://www.openssh.org/txt/release-10.3>.
Contains fixes for:
CVE-2026-35385: A file downloaded by scp may be installed setuid or setgid, an
outcome contrary to some users' expectations, if the download is
performed as root with -O (legacy scp protocol) and without -p
(preserve mode).
CVE-2026-35386: Command execution can occur via shell metacharacters in a
username within a command line. This requires a scenario where
the username on the command line is untrusted, and also requires
a non-default configurations of % in ssh_config.
CVE-2026-35387: OpenSSH can use unintended ECDSA algorithms. Listing of any
ECDSA algorithm in PubkeyAcceptedAlgorithms or
HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA
algorithms.
CVE-2026-35388: OpenSSH before omits connection multiplexing confirmation for
proxy-mode multiplexing sessions.
CVE-2026-35414: OpenSSH mishandles the authorized_keys principals option in
uncommon scenarios involving a principals list in conjunction
with a Certificate Authority that makes certain use of comma
characters.
* gnu/packages/ssh.scm (openssh): Update to 10.3p1.
Merges: https://codeberg.org/guix/guix/pulls/7695
Change-Id: I9e90c3ef02f567d0f5b2485c4e0bcfaa1a1f31c8
Reviewed-by: Nguyễn Gia Phong <cnx@loang.net>
Reviewed-by: Jonas Meeuws <jonas.meeuws@gmail.com>
Reviewed-by: Cayetano Santos <csantosb@inventati.org>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
* gnu/packages/games.scm (openttd)[arguments]<#:phases>:
Change the substitute* to match the newer source.
Change-Id: Ib0bf0f4da84290fe99dd4337387636634b50043d
Signed-off-by: Andreas Enge <andreas@enge.fr>
* gnu/packages/elixir-web.scm (elixir-httpoison): Fix test under Erlang 28+.
Change-Id: I61056fccf4346975d30e5f213185b2bebe650f4e
Signed-off-by: Andreas Enge <andreas@enge.fr>
This fixes a bug with imenu integration (at least).
* gnu/packages/emacs-xyz.scm (emacs-eglot): Update to 1.23.
See-also: https://bugs.gnu.org/80367
Change-Id: I0bb72159222735a194d7f7ae9ded2b9fc1e00e99
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
Most other Emacs packages with optional extensions use a custom
move-source-files phase rather than #:include to move the extensions to
the parent directory with the rest of the sources. This ensures the
build system generates autoloads correctly.
* gnu/packages/emacs-xyz.scm (emacs-consult-eglot)[#:phases]: Add
‘move-source-files’.
Change-Id: I9ddc8142a8bf151ce6cf02bb7ebfc3817b515a06
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
* gnu/packages/codex.scm (codex): Update to 0.120.0.
[source]: Adjust patches.
[arguments]: Adjust cargo-install-paths, cargo-test-flags, and
cargo-package-crates.
[arguments]<#:phases>{patch-git-deps-to-vendor,patch-hardcoded-paths,
set-bubblewrap-source,create-node-version-file,set-home}: Adjust for
the new workspace and test environment.
[native-inputs]: Add bubblewrap, bubblewrap-source, lsof,
nss-certs-for-test, and procps.
[inputs]: Add libcap, oniguruma, and zlib.
[description]: Mention that codex-code-mode's V8 Javascript executor is
disabled.
(codex-acp): Update to 0.11.1.
[source]: Adjust patches and source hash.
[arguments]<#:phases>{patch-codex-deps}: Rewrite the codex dependency
for rust-v0.117.0, disable codex-code-mode's V8 runtime, and set
CODEX_BWRAP_SOURCE_DIR.
[arguments]<#:phases>{set-home}: Set HOME and USER.
[arguments]<#:phases>{create-node-version-file}: Create node-version.txt.
[native-inputs]: Add cmake-minimal, clang, and bubblewrap-source.
[inputs]: Add libcap and zlib.
* gnu/packages/rust-sources.scm (rust-deunicode-1.6.2.cfb8552): New
variable.
(rust-codex-0.117.0, rust-codex-0.120.0): New variables.
* gnu/packages/rust-crates.scm (rust-deunicode-1.6.2,
rust-deunicode-1.6.2.cfb8552): Define aliases for the new workspace
package.
(lookup-cargo-inputs): Update entries for codex, codex-acp, and
rust-codex-0.0.0.785c0c43. Add rust-deunicode-1.6.2.cfb8552.
* gnu/packages/patches/codex-acp-0.11.1-disable-code-mode.patch,
gnu/packages/patches/codex-acp-0.11.1-remove-patch-sections.patch,
gnu/packages/patches/rust-codex-0.117.0-core-remove-self-dep.patch,
gnu/packages/patches/rust-codex-0.117.0-remove-patch-sections.patch,
gnu/packages/patches/rust-codex-0.120.0-connectors-cache-test-race.patch,
gnu/packages/patches/rust-codex-0.120.0-core-remove-self-dep.patch,
gnu/packages/patches/rust-codex-0.120.0-remove-libwebrtc.patch,
gnu/packages/patches/rust-codex-0.120.0-test-timeout.patch: New files.
* gnu/packages/patches/codex-acp-0.9.2-remove-patch-sections.patch,
gnu/packages/patches/codex-acp-0.9.2-replace-result-flatten.patch:
Delete files.
* gnu/local.mk (dist_patch_DATA): Register the new patches.
Change-Id: I280a752507f40e525243dcb869c264da96605bd7
Nicolas Graves