| 28 Sep 2026 |
 whispers, voidfae ❧ [& fae/it] | * the 140esr packages are already broken on staging-next via glibc 2.44, fwiw (though stable probably still works right now) | 17:35:57 |
| whispers, voidfae ❧ [& fae/it] | * the 140esr packages are already broken on staging-next via glibc 2.44, fwiw (though stable probably will be fine) | 17:36:24 |
 vcunat | Ah, I forgot about that. | 17:36:30 |
| vcunat | So it gets marked as broken. On staging-next already, and that's merging to nixpkgs master right now. | 17:39:16 |
 hexa | pr to yank firefox 140 esr is open and will merge later today | 17:40:14 |
| hexa | today would have been update day, but it is eol | 17:40:32 |
| hexa | so last release two weeks ago | 17:40:39 |
| vcunat | thunderbird-140 could get marked as vulnerable in addition to the current state and/or removed, but the practical difference won't be very large. | 17:40:51 |
 seppy | Hello, I've been looking to get into contributing to firefox and I am wondering if you guys might have any information on how to get a working development environment for firefox on nixos? I've taken a look at nixpkgs-mozilla but it seems to no longer be maintained. Do you guys know of any simple solutions that can get me started or would I have to put something together myself? | 17:52:05 |
| hexa | sigh | 21:32:06 |
| hexa | zotero is stuck on 140esr | 21:32:12 |
| hexa | just shoot me | 21:32:14 |
| 29 Sep 2026 |
 nyanbinary 🏳️⚧️ | One day we'll have a auto-updater for firefox and browser packages.. | 03:27:28 |
| nyanbinary 🏳️⚧️ | (I know we technically do but something more robust with tests etc and more consistent would be nice) | 03:27:51 |
| nyanbinary 🏳️⚧️ | Also hexa how did you deal with the npm newtab stuff? | 03:31:48 |
| vcunat | Normal Firefox and Thunderbird do have an auto-updater. | 04:14:43 |
| vcunat | Example:
nix-shell maintainers/scripts/update.nix --argstr package firefox-devedition-unwrapped --arg commit true
gives me everything done in this case (156.0b4 -> 158.0b1), though I didn't try to compile it.
| 04:36:35 |
| vcunat | At the very least, for Thunderbird the r-ryantm bot also opens PRs. | 04:37:14 |
| vcunat | But of course, on some (major) bumps the buildMozillaMach code will need manual changes (or maybe LLMs could cover part of that, not sure) | 04:38:31 |
| hexa | Not. Maybe something I missed. | 06:45:03 |
| hexa | very x86_64-linux brained unfortunately | 15:10:26 |
| vcunat | Like me 😁 | 15:12:09 |
| hexa | libpng update | 16:16:32 |
| hexa | https://github.com/pnggroup/libpng/commit/aa77ef38c17ab2fc1b41bec09fb973c6a386641d | 16:16:59 |
| hexa | Redacted or Malformed Event | 16:17:05 |
| hexa | https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j | 16:17:11 |
| vcunat | If it's bad, we could pick it to staging-next-26.05 right now. | 17:14:54 |
| hexa | nagh | 17:38:31 |
| hexa | Redacted or Malformed Event | 17:38:33 |
| vcunat |
The worst outcome is a crash in the heap variant.
Doesn't seem too bad.
| 17:38:55 |
