Branch: refs/heads/master
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 09f87eeb7f48ea15d800d73e2a4229a1d47f26a2
      
https://github.com/NixOS/nixpkgs/commit/09f87eeb7f48ea15d800d73e2a4229a1d47f26a2
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    A pkgs/development/tools/build-managers/gn/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  gn: Init at 0.0.0.20161008

This is the standalone version of GN used currently solely for building
Chromium. An upstream bug report is available at
https://crbug.com/504074 to support a standalone build without needing
various components from the Chromium source tree.

Because there isn't a standalone vrsion available, I'm choosing
0.0.0.${date} as the version scheme here so that we don't conflict with
versioned releases from upstream someday[TM].

Signed-off-by: aszlig <[email protected]>


  Commit: d0e8f3c5034ef90933987ab0ba094c5364b7c8de
      
https://github.com/NixOS/nixpkgs/commit/d0e8f3c5034ef90933987ab0ba094c5364b7c8de
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    A pkgs/applications/networking/browsers/chromium/common-gn.nix
    M pkgs/applications/networking/browsers/chromium/default.nix

  Log Message:
  -----------
  chromium: Add preliminary support for GN

This only uses the most basic GN flags which should represent the GYP
flags we had before. In order to get rid most of the GYP cruft, we now
have common.nix and common-gn.nix which are mostly the same, just that
the latter is only for GN builds.

The GN implementation is far from complete and currently not even
builds, so we need more work to get the beta and dev channels building.

Signed-off-by: aszlig <[email protected]>


  Commit: 7a3a16dd8040e7ba675b50ca47d023ee61f087d3
      
https://github.com/NixOS/nixpkgs/commit/7a3a16dd8040e7ba675b50ca47d023ee61f087d3
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/common-gn.nix
    M pkgs/applications/networking/browsers/chromium/common.nix
    R 
pkgs/applications/networking/browsers/chromium/patches/nix_plugin_paths_50.patch

  Log Message:
  -----------
  chromium: Remove plugin paths patch for version 50

The oldest version we build is version 53, so we no longer need this
patch.

Signed-off-by: aszlig <[email protected]>


  Commit: 872b4782e929c2eda9076bda9b0b53c4a91c9c8a
      
https://github.com/NixOS/nixpkgs/commit/872b4782e929c2eda9076bda9b0b53c4a91c9c8a
  Author: Herwig Hochleitner <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/upstream-info.nix

  Log Message:
  -----------
  chromium: 53 -> 54


  Commit: b43142c958577163ee193401589053141ea2c649
      
https://github.com/NixOS/nixpkgs/commit/b43142c958577163ee193401589053141ea2c649
  Author: Herwig Hochleitner <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/default.nix
    M pkgs/applications/networking/browsers/chromium/plugins.nix

  Log Message:
  -----------
  chromium: remove pepperflash

fixes NixOS#19565


  Commit: 5f18ccb001caf62e9c4908354a1fea44bb11300b
      
https://github.com/NixOS/nixpkgs/commit/5f18ccb001caf62e9c4908354a1fea44bb11300b
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/common-gn.nix
    M pkgs/applications/networking/browsers/chromium/common.nix
    M pkgs/applications/networking/browsers/chromium/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  chromium: Remove flag for hiDPISupport

This should now be the upstream default and there also is no more flag
for GN to set it, so we'll no longer need it on our side as well.

Signed-off-by: aszlig <[email protected]>


  Commit: 8391241e0c90c8e5ee90d86d6cc1c9146e575768
      
https://github.com/NixOS/nixpkgs/commit/8391241e0c90c8e5ee90d86d6cc1c9146e575768
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    R pkgs/applications/networking/browsers/chromium/common-gn.nix
    M pkgs/applications/networking/browsers/chromium/common.nix
    M pkgs/applications/networking/browsers/chromium/default.nix

  Log Message:
  -----------
  chromium: Build with GN unconditionally

Previously I've added the extra file common-gn.nix in addition to
common.nix, so we can possibly have a smooth transition from current
stable to the new version 54.

Unfortunately, version 53 is already EOL and we have to move to version
54 as soon as possible so we can only use GN and thus it doesn't make
sense to provide expressions for GYP anymore.

Signed-off-by: aszlig <[email protected]>


  Commit: 5f53fddf1ef784e2279bd4236c9f7566a038e89c
      
https://github.com/NixOS/nixpkgs/commit/5f53fddf1ef784e2279bd4236c9f7566a038e89c
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/common.nix

  Log Message:
  -----------
  chromium: Remove some libs from system depenencies

Seems that these libraries aren't the ones Chromium is expecting to be,
so let's switch to use the bundled version of these libraries instead.

Signed-off-by: aszlig <[email protected]>


  Commit: b84e3379fed770557a983b4c1f7642b0fc7b11de
      
https://github.com/NixOS/nixpkgs/commit/b84e3379fed770557a983b4c1f7642b0fc7b11de
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/default.nix
    M pkgs/applications/networking/browsers/chromium/plugins.nix

  Log Message:
  -----------
  chromium: Bring back pepper flash from Adobe

So far we had the bundled Flash player plugin that came with Chrome, but
since version 54 the Chrome package doesn't include PPAPI Flash anymore.

Instead we're going to download the PPAPI Flash plugin directly from
Adobe and try to use them for all release channels of Chromium.

Of course it would be nice if we'd have an updater for it but for now
it's important that we don't break things for people who are currently
forced to use Flash.

Signed-off-by: aszlig <[email protected]>


  Commit: 66ce15a3b163753c7d0c2e237bdaa4e515d77500
      
https://github.com/NixOS/nixpkgs/commit/66ce15a3b163753c7d0c2e237bdaa4e515d77500
  Author: aszlig <[email protected]>
  Date:   2016-11-08 (Tue, 08 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/upstream-info.nix

  Log Message:
  -----------
  chromium: Update all channels to latest versions

Overview of updated versions:

stable: 54.0.2840.71 -> 54.0.2840.90
beta:   55.0.2883.21 -> 55.0.2883.35
dev:    56.0.2897.0  -> 56.0.2906.0

This is to get our Chromium versions in par with the latest upstream
ones before merging in the GN migration changes.

Signed-off-by: aszlig <[email protected]>


  Commit: d2e60d1f93c037dd337f32e5d80f1b70915eca57
      
https://github.com/NixOS/nixpkgs/commit/d2e60d1f93c037dd337f32e5d80f1b70915eca57
  Author: aszlig <[email protected]>
  Date:   2016-11-09 (Wed, 09 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/browser.nix
    M pkgs/applications/networking/browsers/chromium/common.nix
    M pkgs/applications/networking/browsers/chromium/default.nix
    M pkgs/applications/networking/browsers/chromium/patches/widevine.patch

  Log Message:
  -----------
  chromium: Fix building with WineVine components

Before version 54, the WideVine CDM plugin was built unconditionally and
it seems since version 54 this now is dependent upon a GYP/GN flag on
whether to include the CDM shared library or not.

Also, we now use a patch from Gentoo which should hopefully get the CDM
plugin to work properly, at least according to their bugtracker:

https://bugs.gentoo.org/show_bug.cgi?id=547630

Signed-off-by: aszlig <[email protected]>


  Commit: 6f8a72bbff0dcdf78df96ad366f52956bcc5c7e7
      
https://github.com/NixOS/nixpkgs/commit/6f8a72bbff0dcdf78df96ad366f52956bcc5c7e7
  Author: aszlig <[email protected]>
  Date:   2016-11-09 (Wed, 09 Nov 2016)

  Changed paths:
    M pkgs/applications/networking/browsers/chromium/common.nix

  Log Message:
  -----------
  chromium: Add Gtk 3 for versions >= 56

Versions before 56 already had experimental support for Gtk 3 and since
version 56, Gtk 3 _seemed_ to become the default. Although it's now
requiring *both* Gtk 2 and Gtk3, so let's supply the dependency for now
to get it to build.

In the future however we might want to add use_gtk3 to the GN flags and
get rid of Gtk 2 completely.

Signed-off-by: aszlig <[email protected]>


  Commit: 4e7eb75a79a48b0d7068f1949f8c7c42553181d7
      
https://github.com/NixOS/nixpkgs/commit/4e7eb75a79a48b0d7068f1949f8c7c42553181d7
  Author: aszlig <[email protected]>
  Date:   2016-11-09 (Wed, 09 Nov 2016)

  Changed paths:
    M nixos/tests/chromium.nix

  Log Message:
  -----------
  nixos/tests/chromium: Fix popup detection

Sometimes it happens that the "Type to search or enter a URL to
navigate" popup doesn't show, but all we need to know at this time is
whether Chromium has finished starting up.

So checking for the "startup done" page is a better option here.

Signed-off-by: aszlig <[email protected]>


  Commit: c67a7ee73156796187894c63386b1a78e5902ea5
      
https://github.com/NixOS/nixpkgs/commit/c67a7ee73156796187894c63386b1a78e5902ea5
  Author: aszlig <[email protected]>
  Date:   2016-11-09 (Wed, 09 Nov 2016)

  Changed paths:
    M nixos/tests/chromium.nix
    M pkgs/applications/networking/browsers/chromium/browser.nix
    M pkgs/applications/networking/browsers/chromium/common.nix
    M pkgs/applications/networking/browsers/chromium/default.nix
    R 
pkgs/applications/networking/browsers/chromium/patches/nix_plugin_paths_50.patch
    M pkgs/applications/networking/browsers/chromium/patches/widevine.patch
    M pkgs/applications/networking/browsers/chromium/plugins.nix
    M pkgs/applications/networking/browsers/chromium/upstream-info.nix
    A pkgs/development/tools/build-managers/gn/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  Merge branch 'chromium-update-with-gn'

This brings in the new stable version 54 which also introduces a lot of
security fixes:

  CVE-2016-5198: Out of bounds memory access in V8
  CVE-2016-5181: Universal XSS in Blink
  CVE-2016-5182: Heap overflow in Blink
  CVE-2016-5183: Use after free in PDFium
  CVE-2016-5184: Use after free in PDFium
  CVE-2016-5185: Use after free in Blink
  CVE-2016-5187: URL spoofing
  CVE-2016-5188: UI spoofing
  CVE-2016-5192: Cross-origin bypass in Blink
  CVE-2016-5189: URL spoofing
  CVE-2016-5186: Out of bounds read in DevTools
  CVE-2016-5191: Universal XSS in Bookmarks
  CVE-2016-5190: Use after free in Internals
  CVE-2016-5193: Scheme bypass

Detailed announcements about these changes can be found here (latest to
oldest):

https://googlechromereleases.blogspot.de/2016/11/stable-channel-update-for-desktop.html
https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop_20.html
https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop.html

The update process of Chromium has been a bit bumpy on our side, because
version 54 also did the switch from GYP to GN so it wasn't just a matter
of updating the upstream-info file.

I've tested the Flash plugin (which runs fine) and WideVine manually,
although I couldn't get WideVine to work (I was running this within a VM
though).

So if people want to use WideVine they need to use Chrome instead until
we got this sorted out.

VM test results along with builds for all platforms can be found here:

https://headcounter.org/hydra/eval/339328

I'm going to backport these changes to stable as soon as the
tests/builds succeed there as well.

Closes: #19565
Closes: #20120


Compare: https://github.com/NixOS/nixpkgs/compare/cef68b475e81...c67a7ee73156
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to