guix, branch go-team Transactional package manager, declarative GNU/Linux distribution, reproducible deployment tool, and more! https://guix.gnu.org gnu: Remove #:go arguments using go-1.26. 2026-08-26T13:47:51+00:00 Sharlatan Hellseher sharlatanus@gmail.com 2026-08-26T13:47:36+00:00 70a150c4c77a1ff4f19d77af7d64173b9b48af58 We are now building with go-1.26 by default. Automated via: git grep -rl '#:go go-1.26' | xargs sed -i '/.*#:go go-1.26.*/d' * gnu/packages/clojure.scm (let-go)[arguments]: Remove <#:go>. * gnu/packages/engineering.scm (arduino-cli): Likewise. * gnu/packages/golang-apps.scm (gopls): Likewise. * gnu/packages/ipfs.scm (kubo): Likewise. * gnu/packages/terminals.scm (kitty): Likewise. * gnu/packages/web.scm (miniflux): Likewise. 
We are now building with go-1.26 by default.

Automated via:

  git grep -rl '#:go go-1.26' | xargs sed -i '/.*#:go go-1.26.*/d'

* gnu/packages/clojure.scm (let-go)[arguments]: Remove <#:go>.
* gnu/packages/engineering.scm (arduino-cli): Likewise.
* gnu/packages/golang-apps.scm (gopls): Likewise.
* gnu/packages/ipfs.scm (kubo): Likewise.
* gnu/packages/terminals.scm (kitty): Likewise.
* gnu/packages/web.scm (miniflux): Likewise.
gnu: go: Update to 1.26 for building packages. 2026-08-26T13:44:22+00:00 Sharlatan Hellseher sharlatanus@gmail.com 2026-08-26T13:44:22+00:00 0efdaafcc5d4f1aa2fe52b9016d6cce0a48c5e50 * gnu/packages/golang.scm (go): Update to 1.26. 
* gnu/packages/golang.scm (go): Update to 1.26.
gnu: go-1.25: Update to 1.25.13 [security-fixes]. 2026-08-26T13:39:24+00:00 Sharlatan Hellseher sharlatanus@gmail.com 2026-08-17T12:43:51+00:00 4a398db65762211316c54289cf090173777e9343 go1.25.13 (released 2026-08-13) includes security fixes to the go command, and the crypto/tls, encoding/asn1, encoding/xml, html/template, net/http, and net/url packages, as well as bug fixes to the compiler, the runtime, and the crypto/tls and os packages. See: <https://github.com/golang/go/milestone/442>, <https://groups.google.com/g/golang-announce/c/94pEornpRlI> Contains fixes for: CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup CVE-2026-56859: encoding/xml: add recursion depth guard during decode CVE-2026-56853: net/http: apply ReadHeaderTimeout when doing unencrypted HTTP/2 check CVE-2026-56860: net/url: avoid quadratic complexity in resolvePath CVE-2026-46600: golang.org/x/net/dns/dnsmessage: panic when parsing invalid SVCB record CVE-2026-56862: crypto/tls: limit handshake messages we are willing to accept post-handshake CVE-2026-56858: html/template: fix Javascript regexp context tracking CVE-2026-39821: x/net/idna: failure to reject ASCII-only Punycode-encoded labels CVE-2026-33818: encoding/asn1: enforce maximum recursion depth * gnu/packages/golang.scm (go-1.25): Update to 1.25.13. 
go1.25.13 (released 2026-08-13) includes security fixes to the go
command, and the crypto/tls, encoding/asn1, encoding/xml, html/template,
net/http, and net/url packages, as well as bug fixes to the compiler,
the runtime, and the crypto/tls and os packages.

See: <https://github.com/golang/go/milestone/442>,
<https://groups.google.com/g/golang-announce/c/94pEornpRlI>

Contains fixes for:
CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification
                bypass
CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in
                Lookup
CVE-2026-56859: encoding/xml: add recursion depth guard during decode
CVE-2026-56853: net/http: apply ReadHeaderTimeout when doing unencrypted
                HTTP/2 check
CVE-2026-56860: net/url: avoid quadratic complexity in resolvePath
CVE-2026-46600: golang.org/x/net/dns/dnsmessage: panic when parsing
                invalid SVCB record
CVE-2026-56862: crypto/tls: limit handshake messages we are willing to
                accept post-handshake
CVE-2026-56858: html/template: fix Javascript regexp context tracking
CVE-2026-39821: x/net/idna: failure to reject ASCII-only
                Punycode-encoded labels
CVE-2026-33818: encoding/asn1: enforce maximum recursion depth

* gnu/packages/golang.scm (go-1.25): Update to 1.25.13.
gnu: python-sphinx-intl: Update to 2.3.2 fixing build. 2026-08-26T13:36:26+00:00 Sharlatan Hellseher sharlatanus@gmail.com 2026-08-26T13:36:20+00:00 e42227e1c7e7055e27cecada52ec801a75e44909 * gnu/packages/sphinx.scm (python-sphinx-intl): Update to 2.3.2. Fixes: guix/guix#10825 
* gnu/packages/sphinx.scm (python-sphinx-intl): Update to 2.3.2.

Fixes: guix/guix#10825
gnu: Add monocypher. 2026-08-26T13:13:51+00:00 bdunahu bdunahu@operationnull.com 2026-08-22T18:39:57+00:00 6362d3445be4d0d454dd914f87df05280359a3c2 * gnu/packages/crypto.scm (monocypher): New variable. Merges guix/guix!10739. Signed-off-by: Cayetano Santos <csantosb@inventati.org> 
* gnu/packages/crypto.scm (monocypher): New variable.

Merges guix/guix!10739.

Signed-off-by: Cayetano Santos <csantosb@inventati.org>
gnu: emacs-sops: Add tests and set executable path. 2026-08-26T12:16:31+00:00 coopi coopi@noreply.codeberg.org 2026-06-03T10:45:13+00:00 21393e10c8a9948cdac7870dad5d6d464c74da09 * gnu/packages/emacs-xyz.scm (emacs-sops)[arguments]: New field. <#:test-command>: Set it. <#:phases>: Add 'patch-sops-executable' and 'set-sops-age-key-file'. [native-inputs]: Add age. [inputs]: Add sops. [description]: Adjust accordingly. Merges guix/guix!9057 Signed-off-by: Cayetano Santos <csantosb@inventati.org> Modified-by: Cayetano Santos <csantosb@inventati.org> 
* gnu/packages/emacs-xyz.scm (emacs-sops)[arguments]: New field.
<#:test-command>: Set it.
<#:phases>: Add 'patch-sops-executable' and 'set-sops-age-key-file'.
[native-inputs]: Add age.
[inputs]: Add sops.
[description]: Adjust accordingly.

Merges guix/guix!9057

Signed-off-by: Cayetano Santos <csantosb@inventati.org>
Modified-by: Cayetano Santos <csantosb@inventati.org>
gnu: emacs-evil-collection: Update to 3.0.1. 2026-08-26T11:54:12+00:00 Sergey Trofimov sarg@sarg.org.ru 2026-01-09T10:35:10+00:00 9a5a074689d16c3b1bf9de38ade8e9fc4f3d1b15 * gnu/packages/emacs-xyz.scm (emacs-evil-collection): Update to 3.0.1. Merges guix/guix!5492 Signed-off-by: Cayetano Santos <csantosb@inventati.org> Modified-by: Cayetano Santos <csantosb@inventati.org> 
* gnu/packages/emacs-xyz.scm (emacs-evil-collection): Update to 3.0.1.

Merges guix/guix!5492

Signed-off-by: Cayetano Santos <csantosb@inventati.org>
Modified-by: Cayetano Santos <csantosb@inventati.org>
gnu: emacs-mastodon: Update to 2.1.1. 2026-08-26T11:47:56+00:00 Cayetano Santos csantosb@inventati.org 2026-08-26T11:47:56+00:00 6463a419952920af1abccf55d60d002999963266 * gnu/packages/emacs-xyz.scm (emacs-mastodon): Update to 2.1.1. 
* gnu/packages/emacs-xyz.scm (emacs-mastodon): Update to 2.1.1.
gnu: Add emacs-plz-see. 2026-08-26T11:42:22+00:00 Joeke de Graaf joeke@posteo.net 2026-08-19T17:33:09+00:00 08cc4e9852e5a863d294f675b87f498536bca640 * gnu/packages/emacs-xyz.scm (emacs-plz-see): New variable. Merges guix/guix!10667. Signed-off-by: Cayetano Santos <csantosb@inventati.org> 
* gnu/packages/emacs-xyz.scm (emacs-plz-see): New variable.

Merges guix/guix!10667.

Signed-off-by: Cayetano Santos <csantosb@inventati.org>
gnu: Remove bowtie1. 2026-08-26T09:11:57+00:00 Andreas Enge andreas@enge.fr 2026-08-05T09:21:46+00:00 272d526d58e6eeb215dd0232e006846de78ed6e1 * gnu/packages/bioinformatics.scm (bowtie1): Delete variable. 
* gnu/packages/bioinformatics.scm (bowtie1): Delete variable.