Skip to content

chore(deps): Bump nixpkgs from nixos-25.11 to nixos-26.05#44

Merged
hyperpolymath merged 2 commits into
mainfrom
dependabot/nix/nixpkgs-nixos-26.05
May 29, 2026
Merged

chore(deps): Bump nixpkgs from nixos-25.11 to nixos-26.05#44
hyperpolymath merged 2 commits into
mainfrom
dependabot/nix/nixpkgs-nixos-26.05

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 28, 2026

Copy link
Copy Markdown
Contributor

Bumps nixpkgs from nixos-25.11 to nixos-26.05.

Commits
  • 705e992 26.05 beta release
  • e6d53f7 pihole-ftl: 6.6.1 -> 6.6.2 (#523335)
  • 987b916 otfcc: fix build (#523361)
  • a0fc422 python31{3,4}Packages.ecdsa: fix build failure (#523363)
  • 14f0a59 python3Packages.salmon-mail: fix test_main exit code on click 8.2+ (#523372)
  • aa91ecf doc/release-notes: move enteries to correct release (#523459)
  • e397801 treewide: replace lib.trivial.release with hardcode version (hack) (#517985)
  • b3bb8a9 python3Packages.solidpython2: skip example 18 with missing reference fixture ...
  • b1a57b9 home-assistant-custom-components.waste_collection_schedule: 2.24.0 -> 2.25.0 ...
  • 56a234d teams-for-linux: 2.9.0 -> 2.10.0 (#523399)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nixpkgs](https://github.com/NixOS/nixpkgs) from nixos-25.11 to nixos-26.05.
- [Commits](NixOS/nixpkgs@687f05a...705e992)

---
updated-dependencies:
- dependency-name: nixpkgs
  dependency-version: 705e9929918b43bd7b715dc0a878ac870449bb03
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file nix Pull requests that update nix code labels May 28, 2026
@github-actions

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 67 issues detected

Severity Count
🔴 Critical 4
🟠 High 9
🟡 Medium 54

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Required file missing",
    "type": "missing",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "create",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/project-wharf/project-wharf",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Issue in scorecard.yml",
    "type": "missing_workflow",
    "file": "scorecard.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "missing_workflow",
    "file": "mirror.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action actions/setup-example@v1 needs attention",
    "type": "unpinned_action",
    "file": "codeql.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action github/codeql-action/init@v4 needs attention",
    "type": "unpinned_action",
    "file": "codeql.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action github/codeql-action/analyze@v4 needs attention",
    "type": "unpinned_action",
    "file": "codeql.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/configure-pages@v6 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/jekyll-build-pages@v1 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/upload-pages-artifact@v5 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath
hyperpolymath merged commit 9d168c3 into main May 29, 2026
6 of 18 checks passed
@hyperpolymath
hyperpolymath deleted the dependabot/nix/nixpkgs-nixos-26.05 branch May 29, 2026 01:16
@github-actions

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 67 issues detected

Severity Count
🔴 Critical 4
🟠 High 9
🟡 Medium 54

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Required file missing",
    "type": "missing",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "create",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/project-wharf/project-wharf",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Issue in scorecard.yml",
    "type": "missing_workflow",
    "file": "scorecard.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in mirror.yml",
    "type": "missing_workflow",
    "file": "mirror.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action github/codeql-action/init@v4 needs attention",
    "type": "unpinned_action",
    "file": "codeql.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action odeql-action/analyze@v4\n      w needs attention",
    "type": "unpinned_action",
    "file": "codeql.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/configure-pages@v6 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/jekyll-build-pages@v1 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/upload-pages-artifact@v5 needs attention",
    "type": "unpinned_action",
    "file": "jekyll-gh-pages.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file nix Pull requests that update nix code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant