Release 2024_030 (2024-10-28)

Impact

• [NixOS 24.05] The following core services will be restarted:

  • mysql

  • grafana

NixOS 24.05 platform

• VMs will now automatically schedule reboots during maintenance when changes in KVM parameters such as CPU flags or VM backing storage (i.e. SSD or HDD) are detected (PL-131857).

• percona84: new role providing percona-8.4.0.1 and the corresponding percona-xtrabackup (PL-132970)

• percona83: The version is end-of-life and won’t receive any updates anymore, we recommend upgrading to the percona84 role (PL-132970)

  • role and package continue to be provided by the Flyingcircus Platform throughout the release

• Pull upstream NixOS changes, security fixes and package updates: (PL-133101)

  • chromium: 129.0.6668.70 -> 129.0.6668.100 (https://github.com/advisories/GHSA-4v8q-vp3v-vvxh, https://github.com/advisories/GHSA-92m3-m5pw-p2x9, CVE-2024-7025, CVE-2024-9369 CVE-2024-9370)

  • element-web: 1.11.79 -> 1.11.81

  • firefox: 130.0.1 -> 131.0.3 (https://github.com/advisories/GHSA-hm3j-qgpw-pj98)

  • github-runner: 2.319.1 -> 2.320.0

  • gitlab: 17.2.8 -> 17.2.9 (https://github.com/advisories/GHSA-xc4q-wvjc-4v56, https://github.com/advisories/GHSA-fh2j-rw8g-c7f3, https://github.com/advisories/GHSA-ccj4-qhw4-4rrm, CVE-2024-9631 https://github.com/advisories/GHSA-m9cp-4p2h-f9p9, https://github.com/advisories/GHSA-m8gr-q643-3q88, https://github.com/advisories/GHSA-58jq-vjfq-8v45, https://github.com/advisories/GHSA-r4v6-vp2q-qh25)

  • gitlab-container-registry: 4.9.0 -> 4.10.0

  • grafana: 10.4.9 -> 10.4.10

  • keycloak: 24.0.5 -> 25.0.6

    • keycloak: enable hostname:v1 feature by default

  • matrix-synapse: 1.116.0 -> 1.117.0

    • Media repository workers handling Media APIs can now handle additional endpoint patterns https://github.com/element-hq/synapse/blob/develop/docs/upgrade.md#new-worker-endpoints-for-authenticated-client-and-federation-media

  • nginxMainline: 1.27.1 -> 1.27.2

  • percona80: 8.0.36-28 -> 8.0.37-29

  • percona-server_innovation: 8.3.0-1 -> 8.4.0-1

  • percona84: init at 8.4.0-1

  • percona-xtrabackup_8_0: 8.0.35-30 -> 8.0.35-31

  • percona-xtrabackup_innovation: 8.3.0-1 -> 8.4.0-1

  • zoneminder: 1.36.33 -> 1.36.34

Detailed Changes

• NixOS 24.05: platform code, nixpkgs/upstream changes