Release 2026_039 (2026-09-28)

Impact

26.05

Machines will reboot to activate a changed kernel.

NixOS 26.05 platform

  • Added monitoring for OpenVPN PKI certificate expiry, so an expiring CA or server certificate alerts well before the VPN breaks. (PL-135338)

  • Optimize system updates in maintenance for reduced noise and robustness. (FC-57632)

    1. If no reboot was scheduled for a system updated but switching to the new config online fails for any reason, we immediately schedule a reboot with the new configuration to avoid leaving machines stuck in undefined states.

    2. We try harder to avoid superfluous online unit restarts if system updates have already scheduled.

    3. We ensure to extend the scheduled maintenance period if we initiate a reboot to avoid accidentally causing noisy keepalive alarms even though the system knows what it’s doing right now.

  • Pull upstream NixOS changes, security fixes, and package updates:

    • bind: 9.20.26 -> 9.20.29

    • chromedriver: 153.0.8010.36 -> 153.0.8010.52

    • chromium: 153.0.8010.36 -> 153.0.8010.52

    • curl: 8.21.0 -> 8.22.0

    • docker: 29.7.2 -> 29.8.0

    • firefox: 155.0.1 -> 156.0

    • gcc: 15.2.0 -> 15.3.0

    • gitaly: 19.3.2 -> 19.3.3

    • gitlab: 19.3.2 -> 19.3.3

    • gitlab-ee: 19.3.2 -> 19.3.3

    • gitlab-pages: 19.3.2 -> 19.3.3

    • gitlab-workhorse: 19.3.2 -> 19.3.3

    • grafana: 13.0.7 -> 13.0.9

    • imagemagick: 7.1.2-30 -> 7.1.2-31

    • keycloak: 26.7.3 -> 26.7.4

    • libxml2: 2.15.3 -> 2.15.4

    • linuxKernelStable: 6.12.109 -> 6.12.110

    • linuxKernelVerify: 6.18.51 -> 6.18.52

    • mastodon: 4.6.7 -> 4.6.8

    • matrix-synapse: 1.160.0 -> 1.161.0

    • mongodb: 7.0.40 -> 7.0.43

    • nginx: 1.30.4 -> 1.30.5

    • nginxMainline: 1.31.4 -> 1.31.6

    • nginxStable: 1.30.4 -> 1.30.5

    • nodejs: 24.19.0 -> 24.21.0

    • nodejs_24: 24.19.0 -> 24.21.0

    • openssl: 3.6.3 -> 3.6.4

    • pcre2: 10.46 -> 10.48

    • python3Packages.urllib3: 2.6.3 -> 2.7.0

    • systemd: 260.2 -> 260.4

    • util-linux: 2.42.2 -> 2.42.3

    • xz: 5.8.3 -> 5.8.4

Detailed Changes