From d4647907119cd1147a9651a24a1b7a6d4fc3b198 Mon Sep 17 00:00:00 2001 From: WilliButz Date: Tue, 29 Aug 2023 20:17:50 +0200 Subject: [PATCH] update: 2023.6.1 -> 2023.6.2 (security update) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit contains fix for CVE-2023-39522 https://github.com/goauthentik/authentik/security/advisories/GHSA-vmf9-6pcv-xr87 Flake lock file updates: • Updated input 'authentik-src': 'github:goauthentik/authentik/d6af506a78caaf9e6ef394dffa1f931bcc2cd656' (2023-07-10) → 'github:goauthentik/authentik/aba857753bcf785a2023d3ac80f9a6f7f15979fe' (2023-08-29) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/8e8d955c22df93dbe24f19ea04f47a74adbdc5ec' (2023-07-04) → 'github:hercules-ci/flake-parts/59cf3f1447cfc75087e7273b04b31e689a8599fb' (2023-08-01) • Updated input 'flake-parts/nixpkgs-lib': 'github:NixOS/nixpkgs/4bc72cae107788bf3f24f30db2e2f685c9298dc9?dir=lib' (2023-06-29) → 'github:NixOS/nixpkgs/9e1960bc196baf6881340d53dccb203a951745a2?dir=lib' (2023-08-01) • Updated input 'flake-utils': 'github:numtide/flake-utils/dbabf0ca0c0c4bce6ea5eaf65af5cb694d2082c7' (2023-06-25) → 'github:numtide/flake-utils/f9e7cf818399d17d347f847525c5a5a8032e4e44' (2023-08-23) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/e11142026e2cef35ea52c9205703823df225c947' (2023-07-05) → 'github:NixOS/nixpkgs/c540061ac8d72d6e6d99345bd2d590c82b2f58c1' (2023-08-28) • Updated input 'poetry2nix': 'github:nix-community/poetry2nix/f9c886e188503db79b59f15c014d86aa680d9141' (2023-07-07) → 'github:nix-community/poetry2nix/5b3a5151cf212021ff8d424f215fb030e4ff2837' (2023-08-26) • Added input 'poetry2nix/nix-github-actions': 'github:nix-community/nix-github-actions/165b1650b753316aa7f1787f3005a8d2da0f5301' (2023-07-09) • Added input 'poetry2nix/nix-github-actions/nixpkgs': follows 'poetry2nix/nixpkgs' --- flake.lock | 60 +++++++++++++++++++++++++++++++++++++----------------- flake.nix | 4 ++-- 2 files changed, 43 insertions(+), 21 deletions(-) diff --git a/flake.lock b/flake.lock index c357370..f2272ed 100644 --- a/flake.lock +++ b/flake.lock @@ -3,16 +3,16 @@ "authentik-src": { "flake": false, "locked": { - "lastModified": 1688988022, - "narHash": "sha256-5N1pmFtCuiv3C1243TiOWGO8vaG4RNtuGwnS2JWWIbU=", + "lastModified": 1693328978, + "narHash": "sha256-gJqExOCNq94DMfOOkUTFlur+USXUIYdi/TwENgXkPKo=", "owner": "goauthentik", "repo": "authentik", - "rev": "d6af506a78caaf9e6ef394dffa1f931bcc2cd656", + "rev": "aba857753bcf785a2023d3ac80f9a6f7f15979fe", "type": "github" }, "original": { "owner": "goauthentik", - "ref": "version/2023.6.1", + "ref": "version/2023.6.2", "repo": "authentik", "type": "github" } @@ -22,11 +22,11 @@ "nixpkgs-lib": "nixpkgs-lib" }, "locked": { - "lastModified": 1688466019, - "narHash": "sha256-VeM2akYrBYMsb4W/MmBo1zmaMfgbL4cH3Pu8PGyIwJ0=", + "lastModified": 1690933134, + "narHash": "sha256-ab989mN63fQZBFrkk4Q8bYxQCktuHmBIBqUG1jl6/FQ=", "owner": "hercules-ci", "repo": "flake-parts", - "rev": "8e8d955c22df93dbe24f19ea04f47a74adbdc5ec", + "rev": "59cf3f1447cfc75087e7273b04b31e689a8599fb", "type": "github" }, "original": { @@ -40,11 +40,11 @@ "systems": "systems" }, "locked": { - "lastModified": 1687709756, - "narHash": "sha256-Y5wKlQSkgEK2weWdOu4J3riRd+kV/VCgHsqLNTTWQ/0=", + "lastModified": 1692799911, + "narHash": "sha256-3eihraek4qL744EvQXsK1Ha6C3CR7nnT8X2qWap4RNk=", "owner": "numtide", "repo": "flake-utils", - "rev": "dbabf0ca0c0c4bce6ea5eaf65af5cb694d2082c7", + "rev": "f9e7cf818399d17d347f847525c5a5a8032e4e44", "type": "github" }, "original": { @@ -76,13 +76,34 @@ "type": "github" } }, + "nix-github-actions": { + "inputs": { + "nixpkgs": [ + "poetry2nix", + "nixpkgs" + ] + }, + "locked": { + "lastModified": 1688870561, + "narHash": "sha256-4UYkifnPEw1nAzqqPOTL2MvWtm3sNGw1UTYTalkTcGY=", + "owner": "nix-community", + "repo": "nix-github-actions", + "rev": "165b1650b753316aa7f1787f3005a8d2da0f5301", + "type": "github" + }, + "original": { + "owner": "nix-community", + "repo": "nix-github-actions", + "type": "github" + } + }, "nixpkgs": { "locked": { - "lastModified": 1688594934, - "narHash": "sha256-3dUo20PsmUd57jVZRx5vgKyIN1tv+v/JQweZsve5q/A=", + "lastModified": 1693231525, + "narHash": "sha256-Zmh8m0HHcgGBDth6jdJPmc4UAAP0L4jQmqIztywF1Iw=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "e11142026e2cef35ea52c9205703823df225c947", + "rev": "c540061ac8d72d6e6d99345bd2d590c82b2f58c1", "type": "github" }, "original": { @@ -95,11 +116,11 @@ "nixpkgs-lib": { "locked": { "dir": "lib", - "lastModified": 1688049487, - "narHash": "sha256-100g4iaKC9MalDjUW9iN6Jl/OocTDtXdeAj7pEGIRh4=", + "lastModified": 1690881714, + "narHash": "sha256-h/nXluEqdiQHs1oSgkOOWF+j8gcJMWhwnZ9PFabN6q0=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "4bc72cae107788bf3f24f30db2e2f685c9298dc9", + "rev": "9e1960bc196baf6881340d53dccb203a951745a2", "type": "github" }, "original": { @@ -115,16 +136,17 @@ "flake-utils": [ "flake-utils" ], + "nix-github-actions": "nix-github-actions", "nixpkgs": [ "nixpkgs" ] }, "locked": { - "lastModified": 1688730769, - "narHash": "sha256-xKvTeYPetd5FDheBl0vdtBus54NC7BQ4RxIq2uIPqxQ=", + "lastModified": 1693051011, + "narHash": "sha256-HNbuVCS/Fnl1YZOjBk9/MlIem+wM8fvIzTH0CVQrLSQ=", "owner": "nix-community", "repo": "poetry2nix", - "rev": "f9c886e188503db79b59f15c014d86aa680d9141", + "rev": "5b3a5151cf212021ff8d424f215fb030e4ff2837", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index 7966809..814ab57 100644 --- a/flake.nix +++ b/flake.nix @@ -20,7 +20,7 @@ }; }; authentik-src = { # change version string in outputs as well when updating - url = "github:goauthentik/authentik/version/2023.6.1"; + url = "github:goauthentik/authentik/version/2023.6.2"; flake = false; }; }; @@ -39,7 +39,7 @@ { inherit inputs; } ({ inputs, lib, withSystem, ... }: let - authentik-version = "2023.6.1"; # to pass to the drvs of some components + authentik-version = "2023.6.2"; # to pass to the drvs of some components in { systems = [ "x86_64-linux"