chore: update flake.lock & sources (2026-04-11) by Reputable2772 · Pull Request #89 · Reputable2772/NixOS

Reputable2772 · 2026-04-11T17:03:20Z

Automated Pull Request for Week 15

Flakes Changelog:

• Updated input 'git-hooks':
    'github:cachix/git-hooks.nix/4e0eb042b67d863b1b34b3f64d52ceb9cd926735' (2026-04-01)
  → 'github:cachix/git-hooks.nix/580633fa3fe5fc0379905986543fd7495481913d' (2026-04-07)
• Updated input 'home-manager':
    'github:nix-community/home-manager/5ee3b3ef63e469c84639c2c9e282726352c86069' (2026-04-04)
  → 'github:nix-community/home-manager/b0569dc6ec1e6e7fefd8f6897184e4c191cd768e' (2026-04-11)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/bc13aeaed568be76eab84df88ff39261bb52ff70' (2026-03-29)
  → 'github:nix-community/nix-index-database/cef5cf82671e749ac87d69aadecbb75967e6f6c3' (2026-04-05)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9' (2026-03-24)
  → 'github:NixOS/nixpkgs/6201e203d09599479a3b3450ed24fa81537ebc4e' (2026-04-01)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/2ff6aa339cff736bbe9db5bf02d4625e6316a382' (2026-04-04)
  → 'github:nix-community/nix4vscode/98c5bbb8b5cd5f3fe1ce1de3dabf744dfa100c49' (2026-04-11)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/6201e203d09599479a3b3450ed24fa81537ebc4e' (2026-04-01)
  → 'github:NixOS/nixpkgs/4c1018dae018162ec878d42fec712642d214fdfa' (2026-04-09)
• Updated input 'nur':
    'github:nix-community/NUR/77f938ed32135f6e833f9de7694dd758dd1a976f' (2026-04-04)
  → 'github:nix-community/NUR/6046e21406c4a6cac05b22c077e0f4ed5f2d7b8e' (2026-04-11)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/6201e203d09599479a3b3450ed24fa81537ebc4e' (2026-04-01)
  → 'github:nixos/nixpkgs/4c1018dae018162ec878d42fec712642d214fdfa' (2026-04-09)
• Updated input 'plasma-manager':
    'github:nix-community/plasma-manager/f3177b3c69fb3f03201098d7fe8ab6422cce7fc1' (2026-03-31)
  → 'github:nix-community/plasma-manager/a524a6160e6df89f7673ba293cf7d78b559eb1a5' (2026-04-10)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/2bfdf55faf76fed12950b17d4af501e5a463607f' (2026-03-29)
  → 'github:Gerg-L/spicetify-nix/ec8d73085fdf807d55765335dc8126e14e7b2096' (2026-04-05)
• Updated input 'stylix':
    'github:danth/stylix/6d0502ef7447090abf8b00362b5cda8ac64595b4' (2026-04-03)
  → 'github:danth/stylix/d27951a6539951d87f75cf0a7cda8a3a24016019' (2026-04-05)

Sources Changelog:

obs_catppuccin: c5357ce7b0fb8c73aab0a80739832474087b1af6 → 94d317949c0f4c3e55b8ccc7f16890ce7ba3fc37
nix-fast-build: bfc06c68a9c7ac7a931487d21aa7cf0fb29a75ae → 1030b0cfaca52f95769d0998ea366946144cd47c

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-04-11T17:21:14Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
aardvark-dns: 1.17.0 → 1.17.1
bind: 9.20.18 → 9.20.22, +14.7 KiB
bitwarden-cli: 2026.2.0 → 2026.3.0, +6720.3 KiB
breeze: 6.6.3 → 6.6.4
brltty: 6.9 → 6.9.1, +23.2 KiB
dart-sass: 1.98.0 → 1.99.0, +18.6 KiB
deno: 2.7.4 → 2.7.9, +3813.8 KiB
dhcpcd: 10.3.0 → 10.3.1, +8.1 KiB
firefox: 149.0 → 149.0.2
firefox-unwrapped: 149.0 → 149.0.2, +105.0 KiB
flatpak: 1.16.3 → 1.16.4, +74.0 KiB
fzf: 0.70.0 → 0.71.0
gtk-layer-shell: 0.10.0 → 0.10.1
hvc5q6wn5igzaa4b2nhxl5hnbvsj7588: ∅ → ε, +379.0 KiB
hyperv-daemons: 6.19.10 → 6.19.11
hyperv-daemons-bin: 6.19.10 → 6.19.11
hyprutils: 0.11.1 → 0.12.0
initrd-linux: 6.19.10 → 6.19.11, +140.3 KiB
kdecoration: 6.6.3 → 6.6.4
libblake3: 1.8.3 → 1.8.4
libcerf: 3.2 → 3.3, +24.0 KiB
libkrun: ∅ → 1.17.4, +4235.9 KiB
libkrunfw: ∅ → 5.3.0, +20802.8 KiB
librewolf: 148.0.2-3 → 149.0-1
librewolf-unwrapped: 148.0.2-3 → 149.0-1, +2710.8 KiB
libtorrent-rasterbar: 2.0.11 → 2.0.12, +21.3 KiB
libvirt: 12.1.0 → 12.2.0, +204.0 KiB
linux: 6.19.10 → 6.19.11, +28.6 KiB
lowdown: 2.0.4 → 3.0.1, +21.7 KiB
ludusavi: 0.30.0 → 0.31.0, +7284.6 KiB
mesa: 26.0.3 → 26.0.4, +62.2 KiB
nfs-utils: 2.8.7 → 2.9.1, +20.2 KiB
ngtcp2: 1.21.0 → 1.22.0
nix: 2.31.3, 2.34.4 → 2.31.4, 2.34.5
nix-cmd: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nix-expr: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nix-fetchers: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nix-flake: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nix-main: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nix-store: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5, +18.8 KiB
nix-util: 2.30.3+1, 2.31.3, 2.34.4 → 2.30.4+1, 2.31.4, 2.34.5
nixos: 26.05.20260401.6201e20 → 26.05.20260409.4c1018d, +370.4 KiB
nixos-system-lenovo-laptop: 26.05.20260401.6201e20 → 26.05.20260409.4c1018d
nixos-system-rescue: 26.05.20260401.6201e20 → 26.05.20260409.4c1018d
obs-studio: 32.1.0 → 32.1.1
proton-vpn: 4.15.0 → 4.15.1, +38.0 KiB
python3.13-proton-vpn-api-core: 4.16.0 → 4.18.0, +58.2 KiB
python3.13-sentry-sdk: 2.53.0 → 2.54.0, +23.0 KiB
q8ggrmmqnjjpchdvszhwq873bhnicbak: ε → ∅, -379.0 KiB
rclone: 1.73.3 → 1.73.4, -150.0 KiB
runc: 1.4.1 → 1.4.2
seatd: 0.9.2 → 0.9.3
turbostat: 6.19.10 → 6.19.11
unit-network.target: ∅ → ε
unit-networking-scripted.target: ∅ → ε
unit-nix-channel-init.service: ∅ → ε
unit-polkit-agent-helper: ∅ → .service
unit-post-resume.service: ε → ∅
unit-post-resume.target: ε → ∅
unit-pre-shutdown.service: ε → ∅
unit-pre-sleep.service: ε → ∅
unit-register-nix-paths.service: ∅ → ε
unit-script-nix-channel-init: ∅ → ε
unit-script-post-boot-pre: ∅ → ε
unit-script-post-resume: ε → ∅
unit-script-pre-shutdown: ε → ∅
unit-script-pre-sleep: ε → ∅
unit-script-register-nix-paths: ∅ → ε
unit-script-sleep-actions: ∅ → ε
unit-script-sleep-actions-pre: ∅ → ε
unit-sleep-actions.service: ∅ → ε
vscode-extension-editorconfig-editorconfig: 0.18.1 → 0.18.2, +31.2 KiB
vscode-extension-github-vscode-github-actions: 0.31.2 → 0.31.3, +14.2 KiB
wrapped-obs-studio: 32.1.0 → 32.1.1
x86_energy_perf_policy: 6.18.20 → 6.18.21
xdg-desktop-portal: 1.20.3 → 1.20.4, +51.1 KiB

Vulnerabilities in closure:
125 derivations with active advisories

Diff-1.0.2

/nix/store/7kwbv6s59ipydz29s086wn73wnnvjrwf-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/b2cnc4mi1dvmcbsx1fnjfpwrc4srsisp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/sr3gvhc6rqjh4f0yy24z50fy49c7xbbs-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.3

/nix/store/47kdy19xlbkw1bs8awhzh0lm74hzw3qv-ada-3.4.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

assimp-6.0.2

/nix/store/dwr0zmiag4k9hiz2jari2w66jv3dlw77-assimp-6.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-11275 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11277 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-15538 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11274 3.3

async-2.2.6

/nix/store/r2wrgxmbqnf9rk065iqfp22mwzmbzric-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/cgjzks17iwh8fxmg1vay388rl6h8iyd2-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5

binutils-2.44

binutils-2.44

bolt-0.9.8

/nix/store/mmqsgmwl45yxd3ibfg541bbi34dqcz05-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/pfrk8bwsw8dybdclnw3cgfmqq5m7qagy-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/0qra2cm8kqzi4xa7qw1k7i8gmjym1b9p-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/8wjim7v8my7h3ha1km7vhjjhcl4z36m4-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

commonmark-0.2.6.1

/nix/store/9bjpsgkbnq38dlgyk9r301ffx6rrbfin-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cpio-0.4.1

/nix/store/fzf5cgrbr5vwrjgbfzsbdia4075v24ia-cpio-0.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38185 7.8

cryptography-46.0.5-vendor

/nix/store/s0v6hs9kb1dkfvgffyyhabgrv6fpwi2d-cryptography-46.0.5-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34073 5.3

cryptography-46.0.5-vendor-staging

/nix/store/a0cr1rvk1j6pc911d0kqvpsibdksgraa-cryptography-46.0.5-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34073 5.3

cups-2.4.16

/nix/store/njsvyl5k6i876904rqs2r7f5kr97wnji-cups-2.4.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

curl-0.4.49

curl-8.18.0

/nix/store/czlgcsw5v6hcxsh33qbk2jf638j8a1vh-curl-8.18.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-3805 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-1965 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3783 5.3

dash-0.5.13.1

/nix/store/hh0bvrnmrlan5f6vfp9j1r9ifp2y9kwj-dash-0.5.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/3y6700cvw4935mhkqi5wxrg2m8i1k0kc-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/24zhabzyzjcdzaaq270dcirwpnsql5pb-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

electron-39.8.2

/nix/store/ncjqdwg1hq5r7gx6wm23kzs7x98if975-electron-39.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34767 5.9

exiv2-0.28.8

/nix/store/qa3adw2vg6pfysmf76npib5ld3kiqzvn-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.8

/nix/store/bsg17fww043hvz79y5pn0ns7lchb73a4-filelock-0.1.1.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

flutter-3.32.8

/nix/store/2ykl32k1lq5liqvqry5s1cl68l9x4904-flutter-3.32.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27704 7.5

fontforge-20251009

/nix/store/ggq4wcydrk0aillx8xb9nmx59j4av0nw-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/4cy865m461cw3bmhnsa6hwjcr0015qy1-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

gcc-4.6.4

/nix/store/z1zdkd4s0d8np7ss9v1ardcsg89dfr46-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/lz0ih8gk18cvfz26waybzl77h4xnj0w9-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/g2bgqjw27vlax90fwfzbv57dg335pqxc-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/vb8rw36wnyvgmnq6mv7vj5iv75a4dfa5-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/4a8n57md2iycsyiddbnfxw4l7kxi39cx-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5

git-2.53.0

/nix/store/j0h35cv7avh30rlzsy4a17a77mgdz9a0-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

/nix/store/jsrrm60pz13dd0h59549p329c8mli9qm-glibc-2.40-66.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-5702 5.6
https://nvd.nist.gov/vuln/detail/CVE-2025-5745 5.6
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42

/nix/store/2a5c0phmyaz0msmd81lfk8lw3pnh9db5-glibc-2.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-51

/nix/store/j96x1lgha869bnfxxgrlqa7r6smvfgir-glibc-2.42-51.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-51-source-unsecvars

/nix/store/7h79siz1sp8b6vyy6w8505yd6lbc1gfa-glibc-2.42-51-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

/nix/store/sjm9jwacjcz1rgkcdn7c0x4ny9k78m5f-go-1.24.13-linux-amd64-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

go-1.24.13-linux-386-bootstrap

/nix/store/mxp7s4yb95nr8r2pafckisf3ilcfrf1v-go-1.24.13-linux-386-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

go-1.26.1

/nix/store/f7rh1lw0shd5471j9y6wpvc2j43czglz-go-1.26.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gstreamer-1.26.5

gzip-1.2.4

/nix/store/njb7mqx3y9izjbg1l7nfmwl4jynv5vbk-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/6xpy6s0pg9r5ii2ya9zzjywcsy5xcmk8-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/2y1li1rch0v8ggdiy5sx40gbzwx4xis1-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

imagemagick-7.1.2-17

/nix/store/3haj9wj9n3ja4gwvr4wgvl4nc9a73y2r-imagemagick-7.1.2-17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33536 5.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33535 4.0

inetutils-2.7

/nix/store/gy2fjj4dhiadhy9zan3dc2h0n4fvjiil-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28372 7.4

jam-2.6.1

/nix/store/9c2f1q5p4dk70rjqks1rnm9x4l7dkk2i-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/llg2rlfh3mziwc3qqwbk98h2w4qr0xaq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/mgj2d25j821c7rp37a28sqs8kw0bwjia-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/zm7hdmbcxkb9dcwgqmypbxqfc9a2hkba-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

lapack-3

/nix/store/a87kmsilipj8isb3pip9yfw9010xw2gw-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libde265-1.0.16

/nix/store/bj1w5k6g6ylf1jl9hr9f74iwzl11kjyf-libde265-1.0.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33164 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-61147 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33165 5.5

libinput-1.29.2

/nix/store/rjj1w55q25m0q0311w76y2sr7l5qs14d-libinput-1.29.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35093 8.8

libmemcached-1.0.18

/nix/store/1wh7pf3xg15mawgzg3s3cklkl8lspqni-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/iyk5y7y5n8v49czls5smps33whgqh8j1-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/wy5gvscxcpifkakw7rlw9kpk20k2cb5x-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/jng1szxyfjfs1j8hv58hz0cknjfi9n32-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1

libpng-1.6.55

/nix/store/ckj9j7nk7klgqipqbbyl95q7aqcygs7y-libpng-1.6.55.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33636 7.6
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5

libsndfile-1.2.2

/nix/store/4pxzi4njbyxrvm8b9p363hadwvg73h8n-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh-0.11.3

/nix/store/wn8ndr9f7irxqjcznfac9b85c1ndnv7i-libssh-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0968 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-0967 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3731 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-0965 3.3

lua-5.2.4

/nix/store/zl44zga2k9ap5q80bz4d5smxhr95nxlh-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/nbwmwazi4pazwjdxnpl0vzavd8l65nbb-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/ybj5gbsnvj6kp8hhvxj0qn08q3av1l17-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.40

/nix/store/1kg3h3mf201p8cch74xf04j2wr2bcnbj-memcached-1.6.40.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/nwlklm7pzz7ffmi4qsvzj1h8c22wsqj0-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/jrfwajflj4lbfw0ic567dq45fa8nxn6r-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/qs4yg15q3xzk7v95c5yb1lcxxfb1gz18-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

musl-1.2.5

/nix/store/gvsgnjc5mvkd27xwvmcysz28agyc1zvv-musl-1.2.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-26519 8.1

nemo-6.6.4

/nix/store/fc8jvvrpfhfc0lkk79nfqfzkx25wjhy7-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

nghttp2-1.67.1

/nix/store/61l6j9ky582qxlyhirx292iv5x2m7bjg-nghttp2-1.67.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27135 7.5

nghttp2-1.67.1

/nix/store/xzl25j7csyrcmk26yrvggwvhhk2iq8qg-nghttp2-1.67.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27135 7.5

ninja-1.13.2

/nix/store/hglz6nmad76xjgddrwfvdpjm6wjzx5v9-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/y6v3d64asfgp445pq6qc2qi0g3fwmkxz-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/biz98mmxr1p6rll4v64mjqq4ffnccqzs-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

onnx-1.20.1

/nix/store/3f613g070dksak5pm4b3js45g77lp336-onnx-1.20.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28500 8.6
https://nvd.nist.gov/vuln/detail/CVE-2026-27489 7.5

openexr-3.3.5

openssh-10.2p1

/nix/store/wvffj7w0m2xhwzpv7vqmq9xyr5qk4bgd-openssh-10.2p1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35414 4.2

openvswitch-3.7.1

/nix/store/25rd784dyx6zr6y70vivksnqkphad0l4-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/k20przak4sz4qppksmjfk3nzcyb4nwwh-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

php-calendar-8.4.19

/nix/store/dhh0637bhcr624fv3cf93y3fx62z7jc9-php-calendar-8.4.19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/cqbms8x1ck6ybfn88q6v6ppjn19vvgq4-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.3.0

pods-2.3.0-vendor

pods-2.3.0-vendor-staging

polkit-1.pam

/nix/store/ivsdw32svfxb5mizvqigpysq3a7adsd0-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/nbcafydzi77wphyy84i0mwhihb1igx7x-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8

rubygems-3.7.2

/nix/store/sds8w87mg368xbpkdr5cav2mmsiimddn-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/fn0dd2ma49nhqy3dxf64vs779mzx5inz-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/x5q24iw1xgf4xkl4h4kfq1pisp6l6hmm-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/rf1yiv12fh2r6b8n46s0fj27rmnar8nv-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/hcydnrs0kr1sdj9mqz772vlp8qhp4cls-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

sqlite3-2.7.6

/nix/store/5s0wac76rhffym1pa0y1ww2mrv8bpg40-sqlite3-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-21227 7.5

stringbuilder-0.5.1

/nix/store/jzng3qcsmd5fpy08gb68ahjkngmhg61k-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/xas086v2wb638wfa6nkl5syczbkjzf1z-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/dn670pjwcpxhgh1abqmv5xa6qhsid7zp-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/4np0c11bmvdfrnh8g4lzmz8s76vqvp39-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/ggiqmlxr7lbrk3jqkl1iw4r8mz1l6fag-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

thunderbird-148.0.1

time-0.3.41

/nix/store/innsgnrv00b4z9y6p2n7whr8gpqh86pi-time-0.3.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25727 6.5

vault-0.3.1.6

vim-9.2.0106

/nix/store/f98s2zz295za02hy3bmvka0263qjywxh-vim-9.2.0106.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34714 9.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33412 5.6

warp-3.4.9

websockets-0.13.0.0

/nix/store/i7yqwmd84a3pwx98b48iy6c9j5pyz7bg-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/skfby3wfasal6a3f0r585npcfgmij849-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/nyig7aby0dqn9qggd37wqk8f5qbl5jqz-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/2vhg3s003304wgd1nznndrsk40hiwl8c-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

yaml-0.11.11.2

/nix/store/d7mhv2mi47bxn2jcizwkqp34kj3a50mx-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/zmp6gyc7l6d9vqh54567mqyjjs7ix7z8-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/v5q8zcdnc68lpp2pw92bwdk6a1h0sahb-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/fmsyys5rlihkcsc45r88vwzh12nff02g-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/j205jwm7g4di5l2vliwc7lb4gh1dg333-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/v7bgrl0gqijmpm9gx71bhzb855bm224x-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/dq64sfg001s4aj0hh95y75czabk771qx-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

chore: update flake.lock & sources (2026-04-11)

4669f03

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Reputable2772 merged commit a6c6225 into master Apr 12, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-15 branch April 12, 2026 15:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-04-11) - #89

chore: update flake.lock & sources (2026-04-11)#89
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-15

Reputable2772 commented Apr 11, 2026

Uh oh!

github-actions Bot commented Apr 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented Apr 11, 2026

Uh oh!

github-actions Bot commented Apr 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant