3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

1162 commits

Author SHA1 Message Date
Michael Weiss af9ea49430
chromiumBeta: Temporarily build on Hydra
The stable channel update in #130877 is currently blocked due to
regressions but a cached build on Hydra might be useful for the meantime
(and that build would even be reusable if the PR is merged without any
changes).
2021-07-21 00:52:35 +02:00
Sandro ab5f5fb163
Merge pull request #129359 from Stunkymonkey/app-networking 2021-07-20 18:27:12 +02:00
Michael Weiss 5c6608144f
chromiumBeta: 92.0.4515.101 -> 92.0.4515.107 2021-07-20 10:09:49 +02:00
Felix Buehler e4e631ebb8 applications/networking: /s/name/pname&version/ 2021-07-19 14:55:48 +02:00
Michael Weiss c5e29c786f
ungoogled-chromium: 91.0.4472.114 -> 91.0.4472.164 2021-07-17 11:11:06 +02:00
Michael Weiss 3e93811d93
chromium: get-commit-message.py: Improve the parsing
The current stable release announcement [0] uses more HTML tags which
broke the detection of "fixes" and "zero_days". Proper HTML parsing
could be done using html.parser [1] but for our purposes the naive regex
trick works well enough.

[0]: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
[1]: https://docs.python.org/3/library/html.parser.html
2021-07-16 12:24:26 +02:00
Michael Weiss 27523cad1e
chromium: 91.0.4472.114 -> 91.0.4472.164
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html

This update includes 8 security fixes. Google is aware of reports that
an exploit for CVE-2021-30563 exists in the wild.

CVEs:
CVE-2021-30559 CVE-2021-30541 CVE-2021-30560 CVE-2021-30561
CVE-2021-30562 CVE-2021-30563 CVE-2021-30564
2021-07-16 11:58:47 +02:00
Michael Weiss b22b804e67
chromiumBeta: 92.0.4515.93 -> 92.0.4515.101 2021-07-15 10:59:22 +02:00
Michael Weiss 96a3799050
chromiumDev: 93.0.4557.4 -> 93.0.4573.0 2021-07-14 13:51:47 +02:00
Michael Weiss a571f3a945
chromiumBeta: 92.0.4515.80 -> 92.0.4515.93 2021-07-09 10:17:31 +02:00
sternenseemann 524aa1c87c chromium: move ed and makeWrapper into nativeBuildInputs
This most notably fixes cross _evaluation_ of chromium which previously
would fail because makeWrapper relies on runtimeShell which is not
available in the HostTarget package set.

I tested that the native chromium build still works, but haven't tried
cross compiling it yet. There very well may be additional errors, but at
least they will be build errors, not hard to understand evaluation
errors.
2021-07-05 14:58:52 +02:00
Michael Weiss ef7f020ec8
chromiumBeta: Install crashpad_handler
This executable is required to fix a startup error.
TODO: Refactor the Nix expressions to allow chromiumVersionAtLeast, etc.
"everywhere" and investigate the VM test failure.
2021-07-03 11:11:16 +02:00
Michael Weiss 11237c7d83
chromiumBeta: 92.0.4515.70 -> 92.0.4515.80 2021-07-01 10:33:06 +02:00
Michael Weiss 5cae434566
chromiumDev: 93.0.4549.3 -> 93.0.4557.4
Would need to temporarily remove "ffmpeg" from gnSystemLibraries and
disable use_thin_lto to fix the build (theoretically).
2021-06-30 20:18:24 +02:00
Michael Weiss fcdcb81936
chromiumDev: Fix build errors due to the older system FFmpeg
The final linking still fails though, even with llvm-git.
We might have to diable use_thin_lto for now:
ld.lld: error: undefined symbol: snappy::Compress(char const*, unsigned long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)
>>> referenced by compression_module.cc
>>>               thinlto-cache/Thin-ed5ed5.tmp.o:(reporting::CompressionModule::CompressRecord(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::OnceCallback<void (std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, absl::optional<reporting::CompressionInformation>)>) const)
clang-13: error: linker command failed with exit code 1 (use -v to see invocation)
2021-06-29 11:37:05 +02:00
Michael Weiss e829ab8d65
chromiumBeta: 92.0.4515.59 -> 92.0.4515.70 2021-06-24 15:16:57 +02:00
Michael Weiss c8fe353d8b
chromiumDev: 93.0.4542.2 -> 93.0.4549.3 2021-06-23 00:05:32 +02:00
Michael Weiss 4e201c1c3c
ungoogled-chromium: 91.0.4472.101 -> 91.0.4472.114 2021-06-20 13:02:45 +02:00
Michael Weiss ef6fa37bae
Merge pull request #127426 from TredwellGit/chromium
chromium: fix APNG support
2021-06-19 13:14:32 +02:00
TredwellGit 52651ca62a chromium: fix APNG support
https://bugs.chromium.org/p/chromium/issues/detail?id=752403
2021-06-18 22:46:49 +00:00
Michael Weiss 8af443906d
chromiumDev: Fix building from the release tarball
See https://bugs.chromium.org/p/chromium/issues/detail?id=1215229.
Before this the build failed with this error:
[101/47617] ACTION //build/util:chromium_git_revision(//build/toolchain/linux/unbundle:default)oaded_data.pbchain/linux/unbundle:default)
FAILED: gen/build/util/chromium_git_revision.h
python3 ../../build/util/lastchange.py --header gen/build/util/chromium_git_revision.h --revision-id-only --revision-id-prefix @ -m\ CHROMIUM_GIT_REVISION
ERROR:root:Failed to get git top directory from '/build/chromium-93.0.4542.2/build/util': Git command 'git git rev-parse --show-toplevel' in /build/chromium-93.0.4542.2/build/util failed: [Errno 2] No such file or directory: 'git'
2021-06-18 17:36:48 +02:00
Michael Weiss 0505ed81bc
chromium: 91.0.4472.106 -> 91.0.4472.114
https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html

This update includes 4 security fixes. Google is aware that an exploit
for CVE-2021-30554 exists in the wild.

CVEs:
CVE-2021-30554 CVE-2021-30555 CVE-2021-30556 CVE-2021-30557
2021-06-18 12:00:32 +02:00
Michael Weiss 28b48376b9
chromiumBeta: 92.0.4515.51 -> 92.0.4515.59 2021-06-17 12:29:49 +02:00
Michael Weiss 0876f689d7
chromiumDev: 93.0.4535.3 -> 93.0.4542.2 2021-06-16 12:55:01 +02:00
Michael Weiss 8540133fb7
chromium: 91.0.4472.101 -> 91.0.4472.106
https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_14.html
2021-06-15 11:59:05 +02:00
Michael Weiss 3952d19175
ungoogled-chromium: 91.0.4472.77 -> 91.0.4472.101 2021-06-12 13:28:15 +02:00
Michael Weiss 558cb984de
chromiumBeta: 92.0.4515.40 -> 92.0.4515.51 2021-06-11 11:45:01 +02:00
Michael Weiss e44ba930b9
Merge pull request #126452 from primeos/chromium
chromium: 91.0.4472.77 -> 91.0.4472.101
2021-06-10 19:22:59 +02:00
Michael Weiss 1d6a0d3cf2
chromiumDev: Install crashpad_handler
This executable is required to fix a startup error:
[990:990:0609/092114.482805:FATAL:double_fork_and_exec.cc(131)] execv /nix/store/k02xhxzn6sn2cihaal68wwsyk8cg9pkg-chromium-unwrapped-93.0.4535.3/libexec/chromium/crashpad_handler: No such file or directory (2)

Unfortunately Chromium M93 still segfaults in the VM test:
machine # [0610/100626.225850:ERROR:process_memory_range.cc(75)] read out of range
machine # [0610/100626.227312:ERROR:file_io_posix.cc(144)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2)
machine # [0610/100626.240410:ERROR:file_io_posix.cc(144)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2)
machine # [   19.810981] systemd-coredump[1015]: Process 987 (chromium) of user 1000 dumped core.
2021-06-10 12:11:20 +02:00
Michael Weiss c02ac479ba
chromium: get-commit-message.py: Support a new 0-day sentence
The current stable release announcement [0] uses a slightly different
message/structure.

[0]: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html
2021-06-10 12:11:16 +02:00
Michael Weiss 053f1dc490
chromium: 91.0.4472.77 -> 91.0.4472.101
https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html

This update includes 14 security fixes. Google is aware that an exploit
for CVE-2021-30551 exists in the wild.

CVEs:
CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547
CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551
CVE-2021-30552 CVE-2021-30553
2021-06-10 08:45:38 +02:00
AndersonTorres e9e5f5f84d Change all alsaLib references to alsa-lib 2021-06-10 01:12:49 -03:00
Michael Weiss 950b321244
chromiumDev: Revert a patch to fix the build with LLVM 12
The build was failing with:
clang++: error: unknown argument: '-fsanitize-ignorelist=../../tools/cfi/ignores.txt'
2021-06-09 11:19:39 +02:00
Michael Weiss 5915f689b4
chromiumDev: 93.0.4530.5 -> 93.0.4535.3 2021-06-08 20:32:41 +02:00
Michael Weiss 3df02b20f7
Merge pull request #125641 from primeos/chromiumDev
chromiumDev: 92.0.4515.40 -> 93.0.4530.5
2021-06-04 12:19:30 +02:00
Michael Weiss 2c9e2b6875
chromiumDev: 92.0.4515.40 -> 93.0.4530.5 2021-06-04 11:54:51 +02:00
Michael Weiss c6890330f5
chromiumBeta: 91.0.4472.77 -> 92.0.4515.40 2021-06-04 11:52:14 +02:00
Michael Weiss cf6496e72b
chromiumDev: 92.0.4515.20 -> 92.0.4515.40 2021-06-02 12:11:06 +02:00
Michael Weiss 6c638ee6b1
ungoogled-chromium: 90.0.4430.212 -> 91.0.4472.77 2021-05-30 15:15:04 +02:00
Michael Weiss 136addaa6e
chromiumDev: 92.0.4512.4 -> 92.0.4515.20 2021-05-27 11:45:27 +02:00
Michael Weiss e522464f9a
chromium: 90.0.4430.212 -> 91.0.4472.77
https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html

This update includes 32 security fixes.

CVEs:
CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524
CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528
CVE-2021-30529 CVE-2021-30530 CVE-2021-30531 CVE-2021-30532
CVE-2021-30533 CVE-2021-30534 CVE-2021-30535 CVE-2021-21212
CVE-2021-30536 CVE-2021-30537 CVE-2021-30538 CVE-2021-30539
CVE-2021-30540
2021-05-25 22:00:08 +02:00
Michael Weiss b6f54db787
chromiumBeta: 91.0.4472.69 -> 91.0.4472.77 2021-05-25 11:22:26 +02:00
github-actions[bot] 929b12e7b5
Merge master into staging-next 2021-05-21 12:28:43 +00:00
Michael Weiss 6581cd7f5c
chromiumDev: 92.0.4503.0 -> 92.0.4512.4 2021-05-21 12:22:37 +02:00
github-actions[bot] 34a05e29f1
Merge master into staging-next 2021-05-20 18:36:00 +00:00
Michael Weiss 57983646b1
chromiumBeta: 91.0.4472.57 -> 91.0.4472.69 2021-05-20 12:00:04 +02:00
John Ericson 18c38f8aee treewide: All the linker to be chosen independently
This will begin the process of breaking up the `useLLVM` monolith. That
is good in general, but I hope will be good for NetBSD and Darwin in
particular.

Co-authored-by: sterni <sternenseemann@systemli.org>
2021-05-14 21:29:51 +00:00
Michael Weiss 1cdf5f4436
Merge pull request #122816 from primeos/ungoogled-chromium
ungoogled-chromium: 90.0.4430.93 -> 90.0.4430.212
2021-05-14 02:06:30 +02:00
Michael Weiss c31eda265a
ungoogled-chromium: 90.0.4430.93 -> 90.0.4430.212 2021-05-13 13:04:58 +02:00
Michael Weiss 63ff7e430b
chromiumBeta: 91.0.4472.38 -> 91.0.4472.57 2021-05-13 13:04:34 +02:00
Michael Weiss e2adee6827
chromiumDev: Fix the build
python.withPackages avoids the problem with mixed Python 2 and Python 3
dependencies.
2021-05-12 22:54:12 +02:00
Michael Weiss ee727dfdb7
chromiumDev: 92.0.4496.0 -> 92.0.4503.0 2021-05-11 23:58:02 +02:00
Michael Weiss 2213e058fc
chromium: 90.0.4430.93 -> 90.0.4430.212
https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html

This update includes 19 security fixes.

CVEs:
CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509
CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513
CVE-2021-30514 CVE-2021-30515 CVE-2021-30516 CVE-2021-30517
CVE-2021-30518 CVE-2021-30519 CVE-2021-30520
2021-05-10 22:52:32 +02:00
Jan Tojnar 468cb5980b gnome: rename from gnome3
Since GNOME version is now 40, it no longer makes sense to use the old attribute name.
2021-05-08 09:47:42 +02:00
Michael Weiss c0ead3d0c4
chromiumBeta: Add curl as dependency to fix the build
This fixes the following build error:
[14969/46739] CXX obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o[KK[K.o[KKy_reader.or.od.ooor_linux.mojom-shared.o
FAILED: obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o
clang++ [...]
../../third_party/crashpad/crashpad/util/net/http_transport_libcurl.cc:17:10: fatal error: 'curl/curl.h' file not found
#include <curl/curl.h>
         ^~~~~~~~~~~~~
1 error generated.
2021-05-07 16:13:28 +02:00
Michael Weiss 6f6ec9e6f0
chromiumBeta: 91.0.4472.27 -> 91.0.4472.38 2021-05-06 14:26:32 +02:00
Michael Weiss ac681c966a
chromiumDev: 92.0.4491.6 -> 92.0.4496.0 2021-05-04 21:57:16 +02:00
Samuel Gräfenstein c1150bd065
ungoogled-chromium: add meta.mainProgram (#121610) 2021-05-03 21:15:27 +02:00
Michael Weiss 7fff32f51b
Merge pull request #121150 from primeos/ungoogled-chromium
ungoogled-chromium: 90.0.4430.85 -> 90.0.4430.93
2021-04-30 13:37:24 +02:00
Michael Weiss 0d7f9f8ac3
chromiumDev: 92.0.4484.7 -> 92.0.4491.6 2021-04-29 21:53:31 +02:00
Michael Weiss dbfd9c4942
ungoogled-chromium: 90.0.4430.85 -> 90.0.4430.93 2021-04-29 14:07:39 +02:00
Michael Weiss 3b6d416960
Merge pull request #121084 from primeos/chromiumBeta
chromiumBeta: 91.0.4472.19 -> 91.0.4472.27
2021-04-29 12:15:12 +02:00
Alyssa Ross a8afbb45c1 treewide: use lib.warnIf where appropriate 2021-04-28 21:44:21 +00:00
Michael Weiss 716d176974
chromiumBeta: 91.0.4472.19 -> 91.0.4472.27 2021-04-28 23:19:29 +02:00
Michael Weiss d6bd816370
chromium: 90.0.4430.85 -> 90.0.4430.93
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html

This update includes 9 security fixes.

CVEs:
CVE-2021-21227 CVE-2021-21232 CVE-2021-21233 CVE-2021-21228
CVE-2021-21229 CVE-2021-21230 CVE-2021-21231
2021-04-27 15:45:25 +02:00
Jan Tojnar 0f1c4558d3
Merge branch 'master' into staging-next
Choose binwalk 2.3.1, 27 is legacy version for Python 2.
2021-04-25 02:50:48 +02:00
Michael Weiss eb335f697e
chromium: Warn about and cleanup old chromiumVersionAtLeast conditionals 2021-04-24 12:47:12 +02:00
Michael Weiss a82f2a0146
ungoogled-chromium: 89.0.4389.114 -> 90.0.4430.85 2021-04-24 12:21:28 +02:00
github-actions[bot] 6e7c70d02d
Merge master into staging-next 2021-04-24 00:16:17 +00:00
Michael Weiss 0dee033ce7
chromiumDev: Fix the configuration phase (#120464)
The Python 3 support still isn't ready...
2021-04-23 23:24:13 +02:00
Alyssa Ross 4f4d95bbc2
Merge remote-tracking branch 'nixpkgs/master' into staging-next
Conflicts:
	pkgs/development/python-modules/pyvex/default.nix
	pkgs/top-level/python-packages.nix
2021-04-23 13:49:12 +00:00
Michael Weiss a75b5add13
chromiumDev: 91.0.4472.19 -> 92.0.4484.7 2021-04-23 12:03:56 +02:00
github-actions[bot] 481a9bc47c
Merge master into staging-next 2021-04-23 00:15:39 +00:00
Michael Weiss 6664b74af1
chromiumBeta: 90.0.4430.85 -> 91.0.4472.19 2021-04-22 21:18:26 +02:00
github-actions[bot] 120744d620
Merge master into staging-next 2021-04-22 12:06:24 +00:00
Michael Weiss 7495ee4f5f
chromiumDev: 91.0.4472.10 -> 91.0.4472.19 2021-04-22 12:04:15 +02:00
Martin Weinelt 6292be499b
Merge branch 'master' into staging-next 2021-04-22 00:54:14 +02:00
Michael Weiss 3b1b544b8f
Merge pull request #120056 from primeos/chromium
chromium: 90.0.4430.72 -> 90.0.4430.85
2021-04-21 22:31:44 +02:00
github-actions[bot] 799ebbc91d
Merge master into staging-next 2021-04-21 18:13:29 +00:00
Michael Weiss a2dd59e0ff
chromium: 90.0.4430.72 -> 90.0.4430.85
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html

This update includes 7 security fixes. Google is aware of reports that
exploits for CVE-2021-21224 exist in the wild.

CVEs:
CVE-2021-21222 CVE-2021-21223 CVE-2021-21224 CVE-2021-21225
CVE-2021-21226
2021-04-21 15:03:11 +02:00
Michael Weiss 951e888cbd
chromiumBeta: 90.0.4430.72 -> 90.0.4430.85 2021-04-21 15:01:05 +02:00
Michael Weiss 80f4cce6fa
chromiumDev: Fix the patch phase 2021-04-21 15:00:14 +02:00
github-actions[bot] d4f421cad9
Merge master into staging-next 2021-04-16 12:06:14 +00:00
Michael Weiss 37f8212780
chromiumDev: 91.0.4469.4 -> 91.0.4472.10 2021-04-16 11:45:58 +02:00
github-actions[bot] 9c190d28df
Merge master into staging-next 2021-04-15 12:06:13 +00:00
Martin Weinelt 7cf67850c0
Merge branch 'master' into staging-next 2021-04-15 01:01:26 +02:00
Michael Weiss 6720b034aa
chromium: 89.0.4389.128 -> 90.0.4430.72
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html

This update includes 37 security fixes.

CVEs:
CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204
CVE-2021-21205 CVE-2021-21221 CVE-2021-21207 CVE-2021-21208
CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212
CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216
CVE-2021-21217 CVE-2021-21218 CVE-2021-21219
2021-04-15 00:53:31 +02:00
Michael Weiss 14ec94a2fe
chromiumBeta: 90.0.4430.70 -> 90.0.4430.72 2021-04-15 00:53:04 +02:00
Michael Weiss 96e4c599de
Merge pull request #119401 from primeos/chromium
chromium: 89.0.4389.114 -> 89.0.4389.128
2021-04-15 00:40:44 +02:00
github-actions[bot] eb8e023674
Merge master into staging-next 2021-04-14 18:11:01 +00:00
Michael Weiss de2edb81da
chromium: get-commit-message.py: Deduplicate the CVE list 2021-04-14 14:33:34 +02:00
Michael Weiss a8937cc97b
chromium: 89.0.4389.114 -> 89.0.4389.128
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html

This update includes 2 security fixes. Google is aware of reports that
exploits for CVE-2021-21206 and CVE-2021-21220 exist in the wild.

CVEs:
CVE-2021-21206 CVE-2021-21220
2021-04-14 10:49:34 +02:00
Vladimír Čunát d2eb7a7887
Merge branch 'staging' into staging-next
A few conflicts but relatively clear ones (I think).
2021-04-14 10:08:25 +02:00
Michael Weiss acf402b0c0
chromiumDev: Fix the build
Mixing Python 2 and Python 3 causes issues with the Python dependencies.
2021-04-13 13:30:54 +02:00
Michael Weiss fc586861ee
chromiumBeta: 90.0.4430.61 -> 90.0.4430.70 2021-04-13 10:19:51 +02:00
Michael Weiss 8c60448e26
chromiumDev: Fix two build errors
Python 3 is now required (hard-coded in some scripts, but other scripts
still require Python 2) and a patch is required for [0].

[0]: https://bugs.chromium.org/p/chromium/issues/detail?id=1192875
2021-04-13 10:19:51 +02:00
Luke Granger-Brown 08b22e605b Merge remote-tracking branch 'upstream/staging-next' into down-integrate-staging 2021-04-12 18:49:01 +00:00
Michael Weiss 5d775bb2b0
chromiumBeta: Fix the build (#119087) 2021-04-11 10:43:29 +02:00
Michael Weiss 227efbd318
chromium: Fix the build (libva redefinition)
The recent libva 2.11.0 update (780fa55) broke the chromium and
ungoogled-chromium builds. Fix #118931.
2021-04-10 12:06:42 +02:00
Michael Weiss 5768ccf6fe
chromium{Beta,Dev}: Fix the linking
Linking with ThinLTO (required for CFI) was failing as I forgot use
stdenv from llvmPackages_12 in 166520812e (need to refactor that part).
2021-04-09 12:09:59 +02:00
Michael Weiss d5fcfcb3de
chromiumDev: 91.0.4464.5 -> 91.0.4469.4 2021-04-09 12:09:58 +02:00
Gabriel Ebner aa0b68b26a chromium: add explicit mesa dependency 2021-04-09 09:26:12 +02:00
Michael Weiss 705e5ae6fb
chromiumBeta: 90.0.4430.51 -> 90.0.4430.61 2021-04-08 16:13:28 +02:00
Sandro Jäckel dcb501f993
kerberos: deprecate alias 2021-04-04 03:18:56 +02:00
Michael Weiss d832cb56dd
Merge pull request #118166 from primeos/ungoogled-chromium
ungoogled-chromium: 89.0.4389.90 -> 89.0.4389.114
2021-04-02 23:05:08 +02:00
Michael Weiss 166520812e
chromium{Beta,Dev}: Use LLVM 12
LLVM 12 is required but the build still fails due to other changes that
where introduced in the meantime (and Chromium 90.0.4430.51 introduced
another LLVM failure).
2021-04-02 13:32:17 +02:00
Michael Weiss 985e98f4c4
chromiumDev: 91.0.4455.2 -> 91.0.4464.5 2021-04-01 20:17:45 +02:00
Michael Weiss e8c1d93f49
chromiumBeta: 90.0.4430.40 -> 90.0.4430.51 2021-04-01 13:48:45 +02:00
Michael Weiss d40c8f6279
ungoogled-chromium: 89.0.4389.90 -> 89.0.4389.114 2021-03-31 21:11:22 +02:00
Michael Weiss 9495de73dd
chromium: 89.0.4389.90 -> 89.0.4389.114
https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html

This update includes 8 security fixes.

CVEs:
CVE-2021-21194 CVE-2021-21195 CVE-2021-21196 CVE-2021-21197
CVE-2021-21198 CVE-2021-21199
2021-03-31 12:54:36 +02:00
Michael Weiss dbdab5b83b
chromiumBeta: 90.0.4430.30 -> 90.0.4430.40 2021-03-25 14:55:51 +01:00
Michael Weiss 14efa32fa5
chromiumDev: 91.0.4449.6 -> 91.0.4455.2 2021-03-24 13:40:40 +01:00
Michael Weiss 33bd43d2ea
chromiumDev: 91.0.4442.4 -> 91.0.4449.6 2021-03-19 11:26:49 +01:00
Michael Weiss 622a4a2dd5
chromiumBeta: 90.0.4430.19 -> 90.0.4430.30 2021-03-18 13:11:08 +01:00
Michael Weiss 5e42fea124
chromiumBeta,chromiumDev: Mark as broken
The builds currently fail with (should work with LLVM 12 [0]):
../../base/check.h:88:3: error: 'nomerge' attribute cannot be applied to a declaration
  NOMERGE ~CheckError();
  ^       ~
../../base/compiler_specific.h:344:19: note: expanded from macro 'NOMERGE'
#define NOMERGE [[clang::nomerge]]
                  ^
1 error generated.

[0]: fb0f728805
2021-03-17 15:04:53 +01:00
Michael Weiss 2926759b15
Merge pull request #116309 from primeos/ungoogled-chromium
ungoogled-chromium: 89.0.4389.82 -> 89.0.4389.90
2021-03-15 22:06:10 +01:00
Michael Weiss fe3c3a2641
Merge pull request #116218 from primeos/chromium-drop-enableVaapi
chromium: Remove the enableVaapi flag/option
2021-03-15 12:14:23 +01:00
Michael Weiss bb52ac0cb0
ungoogled-chromium: 89.0.4389.82 -> 89.0.4389.90 2021-03-14 13:35:12 +01:00
Michael Weiss 14e11862ea
chromium: Remove the enableVaapi flag/option
Chromium is still compiled with use_vaapi=true but since M89 the
--enable-accelerated-video-decode was replaced with
--enable-features=VaapiVideoDecoder.

Instead of updating our wrapper it seems like a better idea to drop
enableVaapi entirely and let users use commandLineArgs or
chrome://flags/ to enable hardware accelerated video decoding.
2021-03-13 16:38:42 +01:00
Michael Weiss 5f8b951139
chromium: 89.0.4389.82 -> 89.0.4389.90
https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html

This update includes 5 security fixes. Google is aware of reports that
an exploit for CVE-2021-21193 exists in the wild.

CVEs:
CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 CVE-2021-21193
2021-03-13 12:14:37 +01:00
Michael Weiss 9fe8be6685
chromiumDev: 90.0.4430.19 -> 91.0.4442.4 2021-03-13 12:14:16 +01:00
Michael Weiss 381af7aa3f
chromiumBeta: 89.0.4389.72 -> 90.0.4430.19 2021-03-11 22:48:17 +01:00
Michael Weiss dc8eacfba0
Merge pull request #114979 from primeos/chromium-pipewire-0.3
chromium: Switch from PipeWire 0.2 to the current 0.3.x releases
2021-03-11 11:30:13 +01:00
Michael Weiss 746de7f70e
ungoogled-chromium: 88.0.4324.182 -> 89.0.4389.82 2021-03-10 16:01:40 +01:00
Michael Weiss 1868ac1d21
chromiumDev: 90.0.4430.11 -> 90.0.4430.19 2021-03-09 21:36:12 +01:00
Michael Weiss 17c4f6fa36
chromium: Make get-commit-message.py more robust
Not all updates contain security fixes.
2021-03-07 12:05:21 +01:00
Michael Weiss b1c5aa5ef1
chromium: 89.0.4389.72 -> 89.0.4389.82 2021-03-06 11:59:38 +01:00
Michael Weiss 6abbdecf62
Merge pull request #114977 from primeos/chromium-remove-client-credentials
chromium: Remove google_default_client_{id,secret}
2021-03-05 13:08:09 +01:00
Michael Weiss 36e5fe006a
chromium: Switch from PipeWire 0.2 to the current 0.3.x releases
This should make it work more reliable and support additional features
like window sharing. See [0] for more details.

[0]: https://jgrulich.cz/2020/12/18/webrtc-chromium-updates-in-2020/
2021-03-04 17:53:06 +01:00
Michael Weiss 8671fe7c90
chromiumDev: 90.0.4427.5 -> 90.0.4430.11 2021-03-04 11:50:46 +01:00
Michael Weiss 9004162c26
chromium: Add my script to generate the commit messages
Might not be that readable and reliable but it should get the job done.
2021-03-03 16:55:03 +01:00
Michael Weiss dc9f2c5e70
chromium: Remove google_default_client_{id,secret}
Reason: Google is limiting access to their private Chrome APIs starting
on March 15, 2021 [0]. Closes #110245.

From the mailing list thread [1]:
"The changes we announced affect the OAuth 2.0 client id and secret
which are used for signing into Chrome, not the API key."
"To avoid using that API, it's sufficient to either not set the OAuth
2.0 credentials, or disabling the Google signin integration" (e.g. by
passing the flag --allow-browser-signin=false)

[0]: https://blog.chromium.org/2021/01/limiting-private-api-availability-in.html
[1]: https://groups.google.com/a/chromium.org/g/chromium-packagers/c/SG6jnsP4pWM/
2021-03-03 13:13:17 +01:00
Michael Weiss 9f38162b30
chromium: 88.0.4324.182 -> 89.0.4389.72
https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html

This update includes 47 security fixes. Google is aware of reports that
an exploit for CVE-2021-21166 exists in the wild.

CVEs:
CVE-2021-21159 CVE-2021-21160 CVE-2021-21161 CVE-2021-21162
CVE-2021-21163 CVE-2021-21164 CVE-2021-21165 CVE-2021-21166
CVE-2021-21167 CVE-2021-21168 CVE-2021-21169 CVE-2021-21170
CVE-2021-21171 CVE-2021-21172 CVE-2021-21173 CVE-2021-21174
CVE-2021-21175 CVE-2021-21176 CVE-2021-21177 CVE-2021-21178
CVE-2021-21179 CVE-2021-21180 CVE-2020-27844 CVE-2021-21181
CVE-2021-21182 CVE-2021-21183 CVE-2021-21184 CVE-2021-21185
CVE-2021-21186 CVE-2021-21187 CVE-2021-21188 CVE-2021-21189
CVE-2021-21190
2021-03-03 12:23:11 +01:00
Michael Weiss f4c885a79a
chromiumBeta: 89.0.4389.69 -> 89.0.4389.72 2021-03-02 20:28:11 +01:00
Michael Weiss 5240639ab6
chromiumDev: 90.0.4421.5 -> 90.0.4427.5 2021-02-27 16:35:48 +01:00
Michael Weiss adccc8b65b
chromiumBeta: 89.0.4389.58 -> 89.0.4389.69 2021-02-27 16:35:48 +01:00
Michael Weiss 62df868822
ungoogled-chromium: 88.0.4324.150 -> 88.0.4324.182 2021-02-19 19:47:38 +01:00
Michael Weiss 8df4ea8d28
chromiumDev: 90.0.4412.3 -> 90.0.4421.5 2021-02-19 19:45:39 +01:00
Michael Weiss 849bd20271
chromiumBeta: 89.0.4389.47 -> 89.0.4389.58 2021-02-18 12:13:16 +01:00
TredwellGit c3181699cd chromium: 88.0.4324.150 -> 88.0.4324.182
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html

This update includes 10 security fixes.

CVEs:
CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152
CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156
CVE-2021-21157
2021-02-17 05:43:11 +00:00
Michael Weiss d35eb344f8
chromiumBeta: 89.0.4389.40 -> 89.0.4389.47 2021-02-11 12:37:06 +01:00
Michael Weiss ed6ccd4b27
chromiumDev: 90.0.4408.0 -> 90.0.4412.3 2021-02-09 22:35:08 +01:00
Michael Weiss 43161bc2b7
ungoogled-chromium: 88.0.4324.146 -> 88.0.4324.150 2021-02-09 15:24:38 +01:00
Michael Weiss 89db67e734
chromium: Update the documentation
And close #78450 because I'm maintaining Chromium for approximately one
year now and it looks like I can keep maintaining it (at least as long
as I have enough time for it). I'm also working on the documentation,
automation, and cleanups so finding a new maintainer in the future
should hopefully be easier.
2021-02-07 19:26:14 +01:00
Michael Weiss d55603f11d
chromium: Remove the Adobe Flash Player plugin support
The Flash support was completely removed in Chromium M88:
- https://www.chromium.org/flash-roadmap#TOC-Flash-Support-Removed-from-Chromium-Target:-Chrome-88---Jan-2021-
- https://chromestatus.com/feature/5643527180517376

See #110314.
2021-02-07 12:27:36 +01:00
Michael Weiss 576464c74d
chromium: Remove our old overrides for VA-API and Ozone
These gn arguments aren't required anymore as they're now equal to the
current defaults.
2021-02-06 12:28:50 +01:00
Michael Weiss 06d0d8ecfa
chromiumDev: 90.0.4400.8 -> 90.0.4408.0 2021-02-06 00:55:35 +01:00
Michael Weiss ad588f04d4
chromium: 88.0.4324.146 -> 88.0.4324.150
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html

This update includes 1 security fix. Google is aware of reports that an
exploit for CVE-2021-21148 exists in the wild.

CVEs: CVE-2021-21148
2021-02-05 21:03:36 +01:00
Michael Weiss 6f0de2b041
chromiumBeta: 89.0.4389.23 -> 89.0.4389.40 2021-02-04 11:42:14 +01:00
Michael Weiss bdf7d732d3
ungoogled-chromium: 88.0.4324.104 -> 88.0.4324.146 (security) 2021-02-03 12:38:21 +01:00
Michael Weiss 4fe69d33ae
chromium: 88.0.4324.96 -> 88.0.4324.146
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html

This update includes 6 security fixes.

CVEs:
CVE-2021-21142 CVE-2021-21143 CVE-2021-21144 CVE-2021-21145
CVE-2021-21146 CVE-2021-21147
2021-02-03 12:38:09 +01:00
Jan Tojnar 54f4529aec
Merge pull request #111519 from siraben/xdg-utils-naming 2021-02-01 17:18:57 +01:00
Michael Weiss 3151fd59e7
Merge pull request #111340 from primeos/ungoogled-chromium
ungoogled-chromium: 87.0.4280.141 -> 88.0.4324.104
2021-02-01 14:14:03 +01:00
Ben Siraphob a6ac3eedbd treewide: xdg_utils -> xdg-utils 2021-02-01 15:05:09 +07:00
Michael Weiss d1c040f8c6
chromiumDev: Build without TFLite and apply a fix
During d6d4228b39 I failed to notice that the current chromiumDev
version is older than the first one that contained the commit to fix the
dependency on opus in webcodecs.
This should hopefully fix build of chromiumDev (if there are no
additional issues).
2021-02-01 01:43:30 +01:00
Michael Weiss 268600e6b7
ungoogled-chromium: 87.0.4280.141 -> 88.0.4324.104
Unfortunately this requires a crazy hack to support building with
Google's proprietary Widevine DRM technology as that requires fetching
the Google Chrome sources (see also 86ff1e45ce).
The hack is required because ungoogled-chromium doesn't always use tags
that correspond to a Google Chrome release.
2021-01-30 19:22:22 +01:00
Michael Weiss d6d4228b39
chromiumBeta: Backport a patch to fix the build
The build was failing with:
In file included from ../../third_party/blink/renderer/modules/webcodecs/audio_encoder.cc:7:
In file included from ../../media/audio/audio_opus_encoder.h:16:
gen/shim_headers/opus_shim/third_party/opus/src/include/opus.h:5:10: error: 'opus.h' file not found with <angled> include; use "quotes" instead
#include <opus.h>
         ^~~~~~~~
         "opus.h"
[...]
fatal error: too many errors emitted, stopping now [-ferror-limit=]
20 errors generated.
[42272/44233] CXX obj/third_party/blink/renderer/modules/webcodecs/webcodecs/decoder_template.oo[K

Note: This also fixes the ungoogled-chromium channel name in versionRange.
2021-01-30 12:08:17 +01:00
Michael Weiss 241db3bb01
chromium{Beta,Dev}: Disable PGO to "fix" a build error
This also fixes/improves versionRange because the ungoogled-chromium
version will lag behind the Chromium version.
2021-01-28 22:32:32 +01:00
Michael Weiss 11ec29dd70
chromiumDev: 89.0.4389.23 -> 90.0.4400.8 2021-01-28 21:30:26 +01:00
Michael Weiss a7339c3a24
chromiumBeta: 88.0.4324.96 -> 89.0.4389.23 2021-01-28 21:30:25 +01:00
Michael Weiss bfc1cee4bf
chromiumDev: 89.0.4389.9 -> 89.0.4389.23 2021-01-28 15:45:00 +01:00
Michael Weiss 863982d272
chromium: Fix the version comparison in print_updates()
I forgot that string comparison isn't enough because e.g.:
>>> "89.0.4389.9" < "89.0.4389.23"
False

distutils.version.LooseVersion is undocumented but it works and is
already available so why not use it:
>>> LooseVersion("89.0.4389.9") < LooseVersion("89.0.4389.23")
True
2021-01-28 15:45:00 +01:00
Pavol Rusnak a6ce00c50c
treewide: remove stdenv where not needed 2021-01-25 18:31:47 +01:00
Michael Weiss fac05ac695
chromium: Don't set "channel" in the environment
The "channel" variable shouldn't be part of the final derivation. This
also makes it possible to avoid unnecessary rebuilds for identical
channels (e.g. major updates are tested via the "beta" channel first and
usually neither the source-code archive nor the dependencies change when
the update makes it into the "stable" channel - this means we could
better use chromiumBeta to test major updates in advance).
2021-01-23 11:54:11 +01:00
Michael Weiss f5de4608de
chromiumDev: 89.0.4385.0 -> 89.0.4389.9 2021-01-21 11:53:53 +01:00
Michael Weiss 70206c3be4
chromium/doc: Explain how to run the VM tests 2021-01-20 19:23:59 +01:00
Michael Weiss 5b6d3c4b13
chromium: 87.0.4280.141 -> 88.0.4324.96
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html

This update includes 36 security fixes.

CVEs:
CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120
CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124
CVE-2021-21125 CVE-2020-16044 CVE-2021-21126 CVE-2021-21127
CVE-2021-21128 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131
CVE-2021-21132 CVE-2021-21133 CVE-2021-21134 CVE-2021-21135
CVE-2021-21136 CVE-2021-21137 CVE-2021-21138 CVE-2021-21139
CVE-2021-21140 CVE-2021-21141
2021-01-19 20:56:29 +01:00
Michael Weiss 101d42849d
chromiumBeta: 88.0.4324.87 -> 88.0.4324.96 2021-01-19 13:25:47 +01:00
Jonathan Ringer 9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Michael Weiss aee78d463e
ungoogled-chromium: 87.0.4280.88 -> 87.0.4280.141 (security)
I did a quick, automated test by reusing the VM test for Chromium.
2021-01-18 14:56:32 +01:00
Ben Siraphob badf51221d treewide: stdenv.lib -> lib 2021-01-16 17:58:11 +07:00
Michael Weiss 76fe724675
chromium: Extend update.py to print a summary of the updates
As a first step to automate the commit messages as well.
2021-01-14 21:02:16 +01:00
Michael Weiss c0e177d09f
chromiumBeta: 88.0.4324.79 -> 88.0.4324.87 2021-01-14 20:36:28 +01:00
Michael Weiss 79150e0573
chromiumDev: 89.0.4381.6 -> 89.0.4385.0 2021-01-13 17:43:12 +01:00
Michael Weiss 84840c81e3
chromiumDev: 89.0.4356.6 -> 89.0.4381.6 2021-01-09 14:53:20 +01:00
Michael Weiss f274df0cda
chromiumBeta: 88.0.4324.50 -> 88.0.4324.79 2021-01-08 12:48:31 +01:00
TredwellGit ba0068cf9e chromium: 87.0.4280.88 -> 87.0.4280.141
https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html

This update includes 16 security fixes.

CVEs:
CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109
CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113
CVE-2020-16043 CVE-2021-21114 CVE-2020-15995 CVE-2021-21115
CVE-2021-21116
2021-01-07 01:59:35 +00:00
Michael Weiss a90d0cd34c
Revert "chromium/doc: mention chromedriver when updating"
This reverts commit 7e26b5456d.

With 6aea53c3ce this is now handled automatically.
2021-01-02 16:15:00 +01:00
Michael Weiss 351f3c043d
chromiumDev: Fix the build (libxshmfence is now required)
Error:
../../components/viz/service/display_embedder/output_presenter_x11.cc:8:10:
fatal error: 'X11/xshmfence.h' file not found
         ^~~~~~~~~~~~~~~~~
1 error generated.
2020-12-25 10:22:06 +01:00
Michael Weiss 86ff1e45ce
ungoogled-chromium: Support enableWideVine=true
Building with Google's proprietary Widevine DRM technology requires
fetching the Google Chrome sources.
2020-12-22 13:35:40 +01:00
Michael Weiss 94bee10904
ungoogled-chromium: Support automatic updates via update.py 2020-12-18 19:10:45 +01:00
Michael Weiss 9b846b9600
chromium: Improve update.py (documentation + linting fixes) 2020-12-18 19:10:44 +01:00
Michael Weiss be94a4cf23
ungoogled-chromium: Try to fix an evaluation error on Hydra
This should fix a regression from #106475 (hopefully this is the only
issue, my current implementation with channel+ungoogled isn't ideal):
https://github.com/NixOS/nixpkgs/pull/106475#issuecomment-748131224
2020-12-18 16:21:37 +01:00
Michael Weiss 40199cd3d8
chromiumDev: 89.0.4350.4 -> 89.0.4356.6 2020-12-18 13:02:51 +01:00
Michael Weiss 39c5d116a2
chromiumBeta: 88.0.4324.41 -> 88.0.4324.50 2020-12-17 21:02:14 +01:00
Michael Weiss f5944b74e6
Merge pull request #106475 from primeos/ungoogled-chromium-merge
Merge ungoogled-chromium back into the chromium expressions
2020-12-17 19:02:21 +01:00
Michael Weiss 397a5ee2ee
chromiumDev: 89.0.4343.0 -> 89.0.4350.4 2020-12-11 10:54:19 +01:00
Michael Weiss 4ea2b2129e
chromiumBeta: 88.0.4324.27 -> 88.0.4324.41 2020-12-10 17:43:52 +01:00
Michael Weiss 240a8f746e
ungoogled-chromium: Move ungoogled-src.nix into upstream-info.json
This also adds a dedicated channel for ungoogled-chromium that enables
us to update ungoogled-chromium independently of chromium.
TODO: Automate ungoogled-chromium updates via update.py (currently it
needs to be updated manually).

Note: Unfortunately this changes the ungoogled-chromium derivation
because common.nix passes the channel as an argument to
stdenv.mkDerivation (this makes it more difficult to verify this commit
but the result should remain the same).
2020-12-10 17:41:22 +01:00
Michael Weiss 2b6b434477
ungoogled-chromium: Merge back into chromium
I used nix-instantiate to verify that the derivations for chromium and
ungoogled-chromium remain unchanged (only the meta attributes change
slightly as I added myself as ungoogled-chromium to receive
notifications for PRs/issues).
2020-12-10 17:41:11 +01:00
Sandro da95c4d5b9
Merge pull request #106442 from taku0/flashplayer-32.0.0.465
flashplayer: 32.0.0.453 -> 32.0.0.465
2020-12-09 22:58:07 +01:00
Michael Weiss d35b635628
chromedriver.src: Update the hash
I just regenerated upstream-info.json using update.py again and got a
different hash this time (but the same hash as in #106272). Therefore,
the only possible explanation I have is that upstream changed the file
that is hosted at [0]. I'll try to contact upstream regarding this.

Fix #106272.

[0]: https://chromedriver.storage.googleapis.com/87.0.4280.88/chromedriver_linux64.zip
2020-12-08 13:46:47 +01:00
taku0 052ea75f03 flashplayer: 32.0.0.453 -> 32.0.0.465 2020-12-08 21:12:29 +09:00
taku0 5101b357ec
flashplayer: 32.0.0.445 -> 32.0.0.453 (#103441) 2020-12-08 00:54:43 +00:00
github-actions[bot] 4763e8b8fd
Merge master into staging-next 2020-12-05 00:38:01 +00:00
Michael Weiss f4419dd970
chromiumDev: 88.0.4324.27 -> 89.0.4343.0 2020-12-04 19:21:57 +01:00
Michael Weiss beb83591fb
chromiumBeta: 87.0.4280.66 -> 88.0.4324.27 2020-12-04 19:21:57 +01:00
github-actions[bot] 884a0b091b
Merge master into staging-next 2020-12-04 00:37:25 +00:00
Michael Weiss 36d40f77a9
chromium: 87.0.4280.66 -> 87.0.4280.88
https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html

This update includes 0 security fixes.
2020-12-03 10:36:48 +01:00
github-actions[bot] 89e8bf0f2a
Merge master into staging-next 2020-12-02 12:30:55 +00:00