Home • Explore • Blog • Models • CI
☰



nixpkgs
7th chunk of `doc/release-notes/rl-2511.section.md`
a7ae9f8be33f29e1cb86c3abd9fe26ae233f984359741f060000000100000980
- `forgejo-runner`: The upgrade to version 11 brings a license change from MIT to GPLv3-or-later.

- `lisp-modules` were brought in sync with the [June 2025 Quicklisp release](http://blog.quicklisp.org/2025/07/june-2025-quicklisp-dist-now-available.html).

- `ffmpeg_8`, `ffmpeg_8-headless`, and `ffmpeg_8-full` have been added. The default version of FFmpeg remains ffmpeg_7 for now, though this may change before release.

- `searx` was updated to use `envsubst` instead of `sed` for parsing secrets from environment variables.
  If your previous configuration included a secret reference like `server.secret_key = "@SEARX_SECRET_KEY@"`, you must migrate to the new envsubst syntax: `server.secret_key = "$SEARX_SECRET_KEY"`.

- A new hardening flag, `glibcxxassertions` was made available, corresponding to the glibc `_GLIBCXX_ASSERTIONS` option.

- `versionCheckHook`: Packages that previously relied solely on `pname` to locate the program used to version check, but have a differing `meta.mainProgram` entry, might now fail.


- The debug outputs produced by `separateDebugInfo = true;` now contain symlinks mapping build-ids to the original source and ELF file.
  Specifically, if `$out/bin/ninja` has build-id `483bd7f7229bdb06462222e1e353e4f37e15c293`, then
  * `$debug/lib/debug/.build-id/48/3bd7f7229bdb06462222e1e353e4f37e15c293.executable` is a symlink to `$out/bin/ninja`
  * `$debug/lib/debug/.build-id/48/3bd7f7229bdb06462222e1e353e4f37e15c293.source` is a symlink to the value of `$src` during build
  * `$debug/lib/debug/.build-id/48/3bd7f7229bdb06462222e1e353e4f37e15c293.sourceoverlay` is a symlink to a directory with the same structure as the expanded `$sourceRoot` but containing only a copy of files which were patched during the build
  * `$debug/lib/debug/.build-id/48/3bd7f7229bdb06462222e1e353e4f37e15c293.debug` is the file containing debug symbols (like before).

- `fetchgit`: Add `rootDir` argument to limit the resulting source to one subdirectory of the whole Git repository. Corresponding `--root-dir` option added to `nix-prefetch-git`.

- `sftpman` has been updated to version 2, a rewrite in Rust which is mostly backward compatible but does include some changes to the CLI.
  For more information, [check the project's README](https://github.com/spantaleev/sftpman-rs#is-sftpman-v2-compatible-with-sftpman-v1).

- The `clickhouse` package now track the stable upstream version per [upstream's
Title: Nixpkgs Package Updates, Configuration Changes, and Debugging Enhancements
Summary
This chunk details several updates and changes within Nixpkgs. Key package updates include `forgejo-runner` v11's license change (MIT to GPLv3), `lisp-modules` syncing with June 2025 Quicklisp, and the addition of `ffmpeg_8` versions. `searx` users must migrate their secret configuration due to a change from `sed` to `envsubst` parsing. `sftpman` has been rewritten in Rust for version 2, introducing minor CLI changes. `clickhouse` now tracks stable upstream releases. Additionally, new hardening flag `glibcxxassertions` is available, and `versionCheckHook` may fail for packages with differing `pname` and `meta.mainProgram`. Debug outputs (`separateDebugInfo = true;`) now include symlinks mapping build-ids to original source and ELF files, while `fetchgit` gained a `rootDir` argument to limit source fetching.