| 7 Oct 2025 |
K900 | I think I merged all the security things at least | 07:36:15 |
K900 | At least all the ones I could find | 07:36:29 |
K900 | Aaand just as I say it, https://github.com/NixOS/nixpkgs/pull/449390 | 07:38:04 |
K900 | There's https://github.com/NixOS/nixpkgs/pull/449349 but I'd rather have @Jan Tojnar or @Artturin sign off on that | 07:38:49 |
Vladimír Čunát | We move this patch into the default gcc now?
https://github.com/NixOS/nixpkgs/pull/448220/files | 07:40:11 |
K900 | Don't think so | 07:41:06 |
K900 | It should only matter for bootstrap | 07:41:23 |
dramforever | ... wait how on earth is this not affecting non-bootstrap then | 07:42:08 |
K900 | Presumably because the earlier stages are already PIE? | 07:43:18 |
dramforever | i don't know exactly why but i agree this should only matter for stdenvBootstrapTools | 07:44:37 |
Vladimír Čunát | Upstream has applied the fix, so I thought there's no harm in using it everywhere. | 07:46:04 |
K900 | I guess there isn't | 07:46:16 |
K900 | But also we should be able to just drop it in the next release | 07:46:25 |
K900 | Probably isn't worth the churn? | 07:46:32 |
Vladimír Čunát | Next release... that's like in half a year? | 07:46:57 |
K900 | I think it's in 15? | 07:47:39 |
Vladimír Čunát | It's in 15.2.0 which we have (the latest release). | 07:55:13 |
Vladimír Čunát | * It's NOT in 15.2.0 which we have (the latest release). | 07:55:35 |
Vladimír Čunát | * It's NOT in 15.2.0 which we have (the latest release). | 07:55:44 |
K900 | Hm | 07:56:08 |
Vladimír Čunát | Not in there. Bad typo. | 07:55:59 |
Vladimír Čunát | But at a glance it might not apply cleanly there, though that's weird. | 07:56:40 |
Vladimír Čunát | (maybe my patch invocation differs somehow) | 07:56:49 |
Vladimír Čunát | But I'm certain that 15.2.0 does need that fix as well. | 07:57:24 |
K900 | I think we should just keep it | 07:57:31 |
K900 | The way it is | 07:57:31 |
K900 | And we can revisit when we bump to 15 | 07:57:31 |
Vladimír Čunát | Yes. I didn't realize that we're bumping very soon. | 07:57:59 |
K900 | Well I assume we'll do it first cycle after 25.11 | 07:58:49 |
K900 | At this point | 07:58:56 |