nixpkgs.news 2024-04-07

Welcome to the Full-time Nix podcast. Today we have a reading of nixpkgs.news for April 7th, 2024. nixpkgs.news is a service curated by Nix contributor Jake Hamilton, and it covers the latest in events related to the nixpkgs GitHub repository. It can be accessed at nixpkgs.news. Our hosts today are Shahar "Dawn" Or and Samyak Sarnayak.

Kicking this week off with a bang, @lassulus has announced the launch of the new official wiki, found at wiki.nixos.org. This effort was a long time coming and is the beginning of a more cohesive developer and user experience for Nix.

@RaitoBezarius has provided an update on the previously mentioned sponsorship policy. A policy has not yet been decided on and the involved parties are continuing to work out the details to ensure that the wishes of community members and contributors are respected. A decision is likely to be made in time for the next board meeting. For more details on what has been discussed, see NixOS/foundation Issue 110 and NixOS/foundation PR 128.

@Mic92 introduced the Clan project, a toolkit to make it easier to manage networks of VPN-connected NixOS machines. The project combines many tools from the Nix ecosystem such as nixos-anywhere and sops-nix with a uniform CLI. To learn more about Clan, take a look at the project’s blog post.

@mrcjk announced kickstart-nix.nvim. If you’ve wanted to bring your Neovim setup into the Nix world, this is a great place to start! The project has been transferred to the nix-community organization on GitHub and more information can be found there for how to get started.

@AdoPi released Shoji-Nix, a NixOS module designed to manage and securely store your SSH keys in your NixOS configuration repository. Shoji-Nix brings together Age, Sops, and Shoji to securely and efficiently store .ssh details. The project is available on GitHub.

@getchoo brought some delight to the Nix ecosystem this week with the announcement of Catpuccin-nix! Having been brought in to the official Catpuccin GitHub organization, it is now the definitive way to make use of the soothing pastel theme for NixOS systems or machines using Home-Manager. The Catpuccin-nix flake is available on GitHub.

@tgrcdev surprised everyone with the announcement of a Garry’s Mod Nix flake. It provides everything you need to run a dedicated Garry’s mod server, including packages and a NixOS module.
New packages added this week:
@9999years added git-gr: Pull Request
@a-kenji added centerpiece: Pull Request
@ahoneybun added cosmic-store: Pull Request
@aorith added komac: Pull Request
@aorith added silverbullet: Pull Request
@apraga added rtg-tools: Pull Request
@arduano added gpustat: Pull Request
@Assistant added flye: Pull Request
@averagebit added meg: Pull Request
@bhankas added ocis-bin: Pull Request
@ByteSudoer added makima: Pull Request
@cbarrete added buckle: Pull Request
@cideM added inflow: Pull Request
@clot27 added _64gram: Pull Request
@colemickens added sn-pro: Pull Request
@Dan-Theriault added hujsonfmt: Pull Request
@dav-wolff added stylance-cli: Pull Request
@DontEatOreo added hidden-bar: Pull Request
@drupol added daytona-bin: Pull Request
@eclairevoyant added anyrun: Pull Request
@ehmry added ex_doc: Pull Request
@ehmry added min: Pull Request
@emilytrau added pingme: Pull Request
@emilytrau added sloth-app: Pull Request
@eopb added cargo-information: Pull Request
@fabaff added cero: Pull Request
@fabaff added malwoverview: Pull Request
@fabaff added nuclei-templates: Pull Request
@fabaff added offat: Pull Request
@fabaff added witnessme: Pull Request
@fd added rnd-name: Pull Request
@GaetanLepage added lexical: Pull Request
@giodamelio added little_boxes: Pull Request
@hatch01 added kshutdown: Pull Request
@iynaix added scope-tui: Pull Request
@kachick added plemoljp, plemoljp-nf, and plemoljp-hs: Pull Request
@keenanweaver added bstone: Pull Request
@lachrymaLF added hydrapaper: Pull Request
@lelgenio added krita-plugin-gmic: Pull Request
@loicreynier added gh-f: Pull Request
@loicreynier added gh-notify: Pull Request
@LordGrimmauld added rmenu: Pull Request
@marmolak added gordonflashtool: Pull Request
@matthiasbeyer added annextimelog: Pull Request
@matthiasbeyer added cargo-autoinherit: Pull Request
@Melkor333 added ansible-navigator: Pull Request
@mguentner added openapi-changes: Pull Request
@Moraxyc added nezha-agent: Pull Request
@msanft added gossip: Pull Request
@msanft added ida-free: Pull Request
@noaccOS added astartectl: Pull Request
@nokazn added proto: Pull Request
@phip1611 added limine: Pull Request
@phip1611 added rosa: Pull Request
@pinpox added wastebin: Pull Request
@RAVENz46 added coppwr: Pull Request
@Rucadi added flatito: Pull Request
@Rutherther added mautrix-meta: Pull Request
@ShamrockLee added gfal2, gfal2-python, and gfal2-util: Pull Request
@Sigmanificient added cano: Pull Request
@soispha added manim-slides: Pull Request
@soyouzpanda added pvsneslib: Pull Request
@spk added upsun: Pull Request
@terrorbyte added go-bare: Pull Request
@thefossguy added ubootNanoPCT6: Pull Request
@TomaSajt added actiona: Pull Request
@TomaSajt added stirling-pdf: Pull Request
@twitchy0 added randomfiletree: Pull Request
@vpochapuis added ldproxy: Pull Request

New modules added this week:
@FabianRig added technitium-dns-server: Pull Request
@jopejoe1 added appimage: Pull Request

Security fixes this week:
@LeSuisse patched curl to fix CVE-2024-2398 and CVE-2024-2004: Pull Request
@LeSuisse patched expat to fix CVE-2023-52425: Pull Request
@LeSuisse patched gnutls to fix CVE-2024-28834 and CVE-2024-28835: Pull Request
@risicle added python311Packages.onnx to fix CVE-2024-27318 and CVE-2024-27319: Pull Request
@risicle patched podman to fix CVE-2024-1753: Pull Request