chore: update flake.lock & sources (2026-07-04) by Reputable2772 · Pull Request #101 · Reputable2772/NixOS

Reputable2772 · 2026-07-04T17:33:32Z

Automated Pull Request for Week 27

Flakes Changelog:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb' (2026-05-13)
  → 'github:hercules-ci/flake-parts/17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e' (2026-07-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'github:nix-community/nixpkgs.lib/f5901329dade4a6ea039af1433fb087bd9c1fe14' (2026-04-26)
  → 'github:nix-community/nixpkgs.lib/db3f255737b94216eb71cce308e2912cf6bc2d7c' (2026-06-28)
• Updated input 'git-hooks':
    'github:cachix/git-hooks.nix/3bbec39bc90eadfa031e6f3b77272f3f60803e39' (2026-06-17)
  → 'github:cachix/git-hooks.nix/bca82caa46d5ec0f5d422c61fb1e30bc51313cbe' (2026-07-02)
• Updated input 'home-manager':
    'github:nix-community/home-manager/8d8a6cc50ddc60748791a14ee1163c865ec57635' (2026-06-27)
  → 'github:nix-community/home-manager/b885baad531fa3d3beae2ba9a0712d22974d8016' (2026-07-04)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/3017088b49efd404f78e3b104f553b97e4af786b' (2026-06-21)
  → 'github:nix-community/nix-index-database/f8ed6cdcb1fd28a6ab7b61f4467a4f67fe2d9074' (2026-07-02)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/567a49d1913ce81ac6e9582e3553dd90a955875f' (2026-06-16)
  → 'github:NixOS/nixpkgs/b5aa0fbd538984f6e3d201be0005b4463d8b09f8' (2026-06-29)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/2a10a2edad74b9eae5048231726f0b22bccdaffa' (2026-06-27)
  → 'github:nix-community/nix4vscode/520498e2dbf8e1a13fd1df84ffcbdc54dc1acf17' (2026-07-04)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/e73de5be04e0eff4190a1432b946d469c794e7b4' (2026-06-26)
  → 'github:NixOS/nixpkgs/65179426c83bb3f6bc14898b42ea1c6f01d374b0' (2026-07-02)
• Updated input 'nur':
    'github:nix-community/NUR/2a8a5f7e6366c532790fdcbe761ae2bdee8b1ca4' (2026-06-27)
  → 'github:nix-community/NUR/08f0f43cf7510f3de5ab3a164a77a1587ce9be3a' (2026-07-04)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/e73de5be04e0eff4190a1432b946d469c794e7b4' (2026-06-26)
  → 'github:nixos/nixpkgs/65179426c83bb3f6bc14898b42ea1c6f01d374b0' (2026-07-02)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/9cb27462cfd20edac174353f1e95bc03aa888863' (2026-06-21)
  → 'github:Gerg-L/spicetify-nix/9cabea6f5973ec01f60080ea50f54f8f6d74dc95' (2026-07-01)
• Updated input 'stylix':
    'github:danth/stylix/e084d011e7ee9302aceaaf6c1fc28a9ace09e16a' (2026-06-24)
  → 'github:danth/stylix/718c14e8ecba215a65ff955c187fadb9732ddd01' (2026-07-03)

Sources Changelog:

nix-fast-build: c632a8b5acec04c929d521cf1d0af5707e11b9e3 → 03b5e3d352f1c1439f5f4f50ae62b6c32c87a625

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-07-04T17:53:44Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
7i6v0lsdzzask00f69vzc4hvgs49dh6c: ε → ∅, -393.8 KiB
bottom: 0.13.0 → 0.14.2, +24.0 KiB
breeze: 6.7.1 → 6.7.2
dp3j9pz974y18krpxrrvzda30bxbs753: ∅ → ε, +393.3 KiB
easyeffects: 8.2.4 → 8.2.5, +162.6 KiB
fastfetch: 2.64.2 → 2.65.1
fastfetch-unwrapped: 2.64.2 → 2.65.1, +342.1 KiB
file-roller: 44.6 → 44.7, +90.0 KiB
firefox: 152.0.2 → 152.0.4
firefox-unwrapped: 152.0.2 → 152.0.4, +426.2 KiB
gnome-control-center: 50.2 → 50.3
gnome-maps: 50.1 → 50.2, +12.1 KiB
gnome-music: 49.1 → 50.0, +58.3 KiB
gpu-screen-recorder: 5.13.8 → 5.13.9
grimblast: 0.1-unstable-2026-05-29 → 0.1-unstable-2026-06-30
gspell: 1.14.3 → 1.14.4
gvfs: 1.60.0 → 1.60.1, +136.0 KiB
hyperv-daemons: 7.1.1 → 7.1.2
hyperv-daemons-bin: 7.1.1 → 7.1.2
initrd-linux: 7.1.1 → 7.1.2, -71.9 KiB
kdecoration: 6.7.1 → 6.7.2
libnfs: 5.0.3 → 6.0.2, -53.4 KiB
libshumate: 1.6.1 → 1.6.2
libsystemtap: ∅ → 5.3, +25.1 KiB
linux: 7.1.1 → 7.1.2, +9.5 KiB
lix: 2.94.2 → 2.95.2, +1271.8 KiB
matugen: 4.0.0 → 4.1.0, +3495.5 KiB
nano: 9.0 → 9.1, +24.0 KiB
netavark: 2.0.0 → 1.17.2, +162.1 KiB
ngtcp2: 1.23.0 → 1.24.0
nixos: 26.11.20260626.e73de5b → 26.11.20260702.6517942, +486.3 KiB
nixos-system-lenovo-laptop: 26.11.20260626.e73de5b → 26.11.20260702.6517942
nixos-system-rescue: 26.11.20260626.e73de5b → 26.11.20260702.6517942
nlohmann_json: ∅ → 3.12.0, +970.9 KiB
openvino: ∅ → 2026.2.1, +134707.6 KiB
pegtl: ∅ → 3.2.8, +498.5 KiB
podman: 5.8.3 → 5.8.4, +53.3 KiB
podman-docker-compat: 5.8.3 → 5.8.4
rapidcheck: ∅ → 0-unstable-2023-12-14, +663.1 KiB
snappy: ∅ → 1.2.2, +67.8 KiB
starship: 1.25.1 → 1.26.0, +340.8 KiB
tmux: 3.6a → 3.7, +101.1 KiB
toml11: ∅ → 4.4.0, +607.1 KiB
turbostat: 7.1.1 → 7.1.2
vscode-extension-github-vscode-github-actions: 0.32.0 → 0.32.1, +113.6 KiB
vscode-extension-rust-lang-rust-analyzer: 0.3.2946 → 0.3.2955, -1378.0 KiB
x86_energy_perf_policy: 6.18.36 → 6.18.37

Vulnerabilities in closure:
135 derivations with active advisories

Diff-1.0.2

/nix/store/sfv7cs9pkcwp3bs4p3nq4j0wbxbqzbrw-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/l3y6kphj5y6sy7nihv9scv5j8naf6n2n-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

ada-3.4.4

/nix/store/918i98605fy9jhdqjm5w82w8y6iacx1i-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

async-2.2.6

/nix/store/d0if5g0rijljh9a2zwa53895wh3az84s-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/ca074rjmhnx2mlf2jqfixn8rgpjyh0mw-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5

binutils-2.44

binutils-2.46

/nix/store/xazjjn2vcvd9cg4ij7kmnwv5l5wb98iy-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-6846 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5

bolt-0.9.8

/nix/store/5r8yf9r69klp8cw1hwsd2z0z1h1mh5zz-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/vgxxwa45wb9cxkrybj8mpq051vmvyjsn-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/98cw4dbgksb4ara9ck24crvmlmnwvhpg-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.9

/nix/store/spf7q9nx716c61bl491b8v1wr8d9g5xn-capstone-5.0.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

cargo-1.95.0

/nix/store/gjj5vza0rc5j7kddqj88yhd9h4n94pxc-cargo-1.95.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

cargo-1.96.0-x86_64-unknown-linux-gnu

/nix/store/vvxmlv7rb913fhkclvlncz4dy0w578hh-cargo-1.96.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

commonmark-0.2.6.1

/nix/store/x5lqp184dyf0lyvmrmicfrfdi36cwz0m-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cups-2.4.19

/nix/store/nkw0pi4bi6mvd0xlffgxyv6kjad8lqqq-cups-2.4.19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

curl-0.4.49

dash-0.5.13.3

/nix/store/wi0il8ijbrf18k2hbp9mafq86cw6nqyh-dash-0.5.13.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/3n6qlm1j6l1jhz0pm7nz6zclwaczd7kf-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/avg99h3f89h1rzj2fywcnj0d5359qy73-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dhcpcd-10.3.2

/nix/store/mal994m7f558plxd4czkizkrcwd1pc1y-dhcpcd-10.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-56116 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-56113 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-56114 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-56117 4.7

diff-0.1.13

/nix/store/1j6aad3dn1xg9nfzmj8g7jzbnqbqi4b9-diff-0.1.13.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

exiv2-0.28.8

/nix/store/lm5dn4pqarqm2xwkd5xkbak841ipl7f9-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.5

/nix/store/vq3q45fjp2ihp630788wnj0y6yq8nbhj-ffmpeg-7.1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30997 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30998 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30999 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-10256 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-40962 4.9
https://nvd.nist.gov/vuln/detail/CVE-2025-12343 3.3

ffmpeg-8.1.1

/nix/store/ag98pa4lp7psyr32bax3f8h95fy52mf4-ffmpeg-8.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5

filelock-0.1.1.9

/nix/store/jlwk95rzrnsjmnqsh077brv8aa95pri8-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

fontforge-20251009

/nix/store/1lyhbwcyfgnjyj2g5dq3irksspjcczd2-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/l7dhwyrv5fpzyk3i6pg6jnb8bmaq3ihk-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

gcc-4.6.4

/nix/store/18d4rgqv4dfdd3qq09r312hpzjjxwrky-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/va81nfrd7p4n32xi0y3q9x8clsclsix8-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/h545qb92mx5i9q4amb44d2phh9by0zrq-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/v7a9sc4sc76wbp5mvpxdwm6qppxl3ab1-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-23868 5.1

git-2.54.0

/nix/store/214n5nb1k4qzynzgw7xpsp4fp19vni8i-git-2.54.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

glibc-2.42

glibc-2.42-67

/nix/store/8ky82wqb2hrwww20kbq2v3vlwvn0bddi-glibc-2.42-67.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-67-source-unsecvars

/nix/store/iw8yjjhv5qnbj90n4lkmr2dj3wk8rfz2-glibc-2.42-67-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

go-1.24.13-linux-386-bootstrap

go-1.26.4

/nix/store/cfn60262xayy84zyifwva10lapiil3m2-go-1.26.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gst-plugins-good-1.26.11

/nix/store/3bn49wj8l01a1hrl2nqg7wnkjkz8dx3f-gst-plugins-good-1.26.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-46469 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-46470 4.0

gstreamer-1.26.11

gzip-1.2.4

/nix/store/bv4a5fw05q4ysq24wy0z06bd5jysq1p2-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41992 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41991 4.7

gzip-1.14

/nix/store/c8d7w91ijiiybnd1vjf5sjz7cjh0ys44-gzip-1.14.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41992 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41991 4.7

hedgehog-1.5

/nix/store/yadws051nghznspd00lrnbqx8xgxq05d-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/qbhdx5xyf5b1y4v9if1ypdmja0rfcg2c-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

imagemagick-7.1.2-24

inetutils-2.7

/nix/store/vq5b4qx4zrpxlwh8ljxk1vyajh1j6255-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32772 3.4

jam-2.6.1

/nix/store/rysw8agj08s1yl139l67cdv9l12pva7q-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/cj2z9kbaias4624v2sbxwqr061ljr1xd-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/fgzz7jimcb2zwdrknj1khp13myzqyr6p-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/rv7sl5fhxi0sipid770ggzpcn19ln6c0-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

jq-1.8.1

jq-1.8.1

jq-1.8.1-binlore

/nix/store/6a3fnrgwpx9d8410ayilc9j39sc8fic8-jq-1.8.1-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-49839 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44777 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-47770 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-54679 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

kcoreaddons-5.116.0

/nix/store/a5f1mih5rs8nsyzl3mckldxgmm62a2jn-kcoreaddons-5.116.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41526 6.5

lapack-3

/nix/store/45ffy1w1yg2ldh9yarkmfgxdm7ngf1d1-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

ldns-1.9.0

/nix/store/05zcb0xb585xx07992jgkwa419br5lgp-ldns-1.9.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-10846 7.5

libidn-1.43

/nix/store/n4jla6hfxapk915xg3s824mlpbjmiggm-libidn-1.43.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-57053 4.0

libmemcached-1.0.18

/nix/store/bpkvmcy9bkmp8hzhs5ffh0g11vif0ydb-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/8ji1dbz1gd9r83k1q5wp4r8vdcz6cqqb-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/a33bpfdpxqyvsy9mv46rnvr1f5876rcx-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/z7vlcn3hv3mrc8dkzdcad0qalw600w4l-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-34757 5.1

libraw-0.22.1

/nix/store/zwn30dwdh3lcf0imlaf0njvach08yhlg-libraw-0.22.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20884 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-24450 8.1

libsndfile-1.2.2

/nix/store/kiss2p4ri0ixrxjrn352pzw8a4g0jibl-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh2-1.11.1

/nix/store/vpdhcvacirvn053yh420xwh13rj67a23-libssh2-1.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-55200 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-58050 7.0
https://nvd.nist.gov/vuln/detail/CVE-2025-15661 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-58051 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-55199 5.9

libusb-1.0.29

/nix/store/ji09v6xmi4xplqqbaimb1066rpgjndri-libusb-1.0.29.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-23679 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-47104 4.0

libxml2-2.15.3

/nix/store/pl273yyx1kv6ylikbh639snq59j8h96g-libxml2-2.15.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-11979 7.8

lua-5.2.4

/nix/store/si36ipzdlpzmilpsmmk2w547xclc7pb8-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/vp5hrr89gq5ffg7ygg7vv8xzh26j2wpn-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/lxvjlxprnr7921aq6sg611cfma7nfb62-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.42

/nix/store/bwkk58giwmw3sskak6dsrzsp0nf714jn-memcached-1.6.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/ii91g8qf7iw0z7lx8q5pzxsq29392l5f-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/5fpmrqi9l5s4gj2md4wdq8ca8pqczadf-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/z95jh3x11czl4zvw61wv3jdn0i1ajsj5-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

miniaudio-0.11.25

/nix/store/jg33a3ca6yj157j92ng1nzj156qhfvs2-miniaudio-0.11.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32837 4.0

nemo-6.6.4

/nix/store/pi72npp93vlzvican48nnq935pj45psz-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

nghttp2-1.69.0

/nix/store/6rpqkvlgkq37pj7x933rrb6pgy5w319k-nghttp2-1.69.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-58055 5.4

ninja-1.13.2

/nix/store/03ajmy97mrmvcm6fb8xkri0pnxwhlk06-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/1r7p78gdl6n32vvsi2kq4ww246az635h-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/fi9m93mj5lbsgd01l96zs9f4z2rrhap0-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

openexr-3.4.11

/nix/store/3j8vi8q5nzh8507nx5rijr4pcgnl564f-openexr-3.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-45696 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44663 6.1

openssl-3.6.2

openvswitch-3.7.1

/nix/store/0qpgx9w6m81lmskm7mrav1gckpwlblm5-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/fgimw353ypldj6h9w7phgm86za9zvpn5-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

perl-5.40.0

/nix/store/vif7qliqzlzmccf90d0412dkgnq523c5-perl-5.40.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-8376 9.8

perl-5.42.0

/nix/store/awx8fr4p5rf8ln7516qgvy4kb4glc2l4-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-binlore

/nix/store/gis23d4p918wkvqqz48hmzj1r3rwz45l-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-8376 9.8

perl-5.42.0-env

/nix/store/hi8njkvjay85xhnzhpmcrgsyy1gbn9qn-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-8376 9.8

php-calendar-8.4.22

/nix/store/6l0bbmw1wlmq5brh5sr3qnv2y5wgj3kh-php-calendar-8.4.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/8kkbmidnmd9jady3pq9w3sllirgllrxw-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-8643 5.5

pods-3.0.0

/nix/store/cdhk5gjcdc7dfxrw0a9zxccxki39dw5j-pods-3.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3

pods-3.0.0-vendor

/nix/store/1f483nj7a14rz66dsyyvpw77pb6vc8z3-pods-3.0.0-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3

pods-3.0.0-vendor-staging

/nix/store/3xsk0912ckdf0aljdzwcaiy0fsz8rmbd-pods-3.0.0-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3

polkit-1.pam

/nix/store/hf8rdnx3x92y74227scbi7mc41gws077-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.4

/nix/store/yakk49j0k9yrnfskv63r6iz8qb0qymh2-python-3.14.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3087 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-7210 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-6019 6.1

rubygems-3.7.2

/nix/store/wbfqv0xnj6jjydcmb1g5xr1ln1v58qcp-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.23.8

/nix/store/sky37ab4g4lqm7s6bjr03gicqcp2hw3g-samba-4.23.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-2340 6.5

sassc-3.6.2

/nix/store/18w3hf0fyslb3kh751783rrysi18f6k2-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/gln50m2afbyf2p3xxw54ac9vjf4lnncs-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/fjnaf97vql7h3d6mzymqabz7lmbljj0x-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/c4wsm65wppfbib43rsgg5ng1ag2zaizx-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

socat-1.8.1.1

/nix/store/xh1p6ssiq7s2cbp950783d71kapqrcly-socat-1.8.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-56123 8.1

sqlite-3.51.2

/nix/store/f4ag8l0r9axndi7qfx99a6nfrcjwv6sx-sqlite-3.51.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-11822 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-11824 7.8

stringbuilder-0.5.1

/nix/store/k9j1083pdqv33z34wb5xhm6l7avdj4f1-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/sqkzmjz0lymrz3q9dv765xba1wl37bxb-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/qxps1qlhd5yflqwnjyvbq50j4fh2sr3z-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/6lrj0z5dl9arp4hlys85mdpdlb3v084j-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/xjag9rjz4skz7zmz21nc18c1rwlaawmg-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

thunderbird-152.0

uuid-1.3.16.1

/nix/store/cm6hfarhkbxmj7c7sh4h337f9v967hmm-uuid-1.3.16.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

uuid-1.20.0

/nix/store/x47f9db27aj6x1l6q6qnqsd35nxj1lgn-uuid-1.20.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

vault-0.3.1.6

vim-9.2.0389

warp-3.4.9

websockets-0.13.0.0

/nix/store/vs8hjywa42wmfkjr9c3p78z68xzvzwb4-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r6.cabal

/nix/store/40c8gsc2zsb8w3a943ngak2fssfphyd1-websockets-0.13.0.0-r6.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/1pl2mjgi183rib2gxrjm4hf0jvvl6y68-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/v1iab53ja8sspck7384ah4m0ccn8yypm-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

xz-5.8.1

/nix/store/c93ng76ibm84gip7ivblv7fm17yav91f-xz-5.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

yaml-0.11.11.2

/nix/store/a88k33cgpyq2n69qb2zflyljspn5jm9f-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/s2nqcnsq1qinc9ch84gjsk3kziiqssqn-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/21cmz71vbfqxyk8y10i60qaqgh7lgdai-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/qb36qmdjspj7iiip5kf0h0vlm6f4ff0y-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/7xdmpah4221xrmla9152c1m0y5y9ndk0-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/n4kir45wagapzcaqhmvpm9v6bjzsql8h-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/6khyn9406a1k9b1wi5cbw4wysffrnav1-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.2

/nix/store/70dvs5gmw3dafy22kfxy4k4pjprcfck7-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

chore: update flake.lock & sources (2026-07-04)

6bcd08e

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Reputable2772 merged commit e99572d into master Jul 4, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-27 branch July 4, 2026 17:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-07-04)#101

chore: update flake.lock & sources (2026-07-04)#101
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-27

Reputable2772 commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant