guix-1.5.0 released [stable]

--s6SIOUtfakK1SBJU
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

This is to announce guix-1.5.0, a stable release.

GNU Guix is a package manager for GNU/Linux systems. It is designed to give
users more control over their general-purpose and specialized computing
environments, and make these easier to reproduce over time and deploy to on=
e or
many devices.

For more information see the release blog post: https://guix.gnu.org/blog/2=
026/gnu-guix-1.5.0-released/

Sources:
  https://ftp.gnu.org/gnu/guix/guix-1.5.0.tar.gz

Foreign distribution installer:
  https://guix.gnu.org/guix-install.sh

Binary tarballs:
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.aarch64-linux.tar.xz
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.armhf-linux.tar.xz
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.powerpc64le-linux.tar.xz
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.riscv64-linux.tar.xz
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.x86_64-linux.tar.xz
  https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.i686-linux.tar.xz

Guix System Installer:
  https://ftp.gnu.org/gnu/guix/guix-system-install-1.5.0.aarch64-linux.iso
  https://ftp.gnu.org/gnu/guix/guix-system-install-1.5.0.x86_64-linux.iso
  https://ftp.gnu.org/gnu/guix/guix-system-install-1.5.0.i686-linux.iso

Virtual machine:
  https://ftp.gnu.org/gnu/guix/guix-system-vm-image-1.5.0.aarch64-linux.qco=
w2
  https://ftp.gnu.org/gnu/guix/guix-system-vm-image-1.5.0.x86_64-linux.qcow2

SHA256
------
df2102eed00aff0b17275654a42f094c8a1117ec065884eb1ff76005e47415c5  guix-1.5.=
0.tar.gz
a5d58b1d0294cad6adb1f2aff627d37feb5db763fdffbceb8551f2b12123cf39  guix-bina=
ry-1.5.0.aarch64-linux.tar.xz
e92ddecf4476ce1e41b85e4eb1c8fd9a4756d77c817c1fd986ab24253612b0fa  guix-bina=
ry-1.5.0.armhf-linux.tar.xz
e2aae143a826e218b9724a3e416b3688ff753b11fb63283164010b9802b4b1a4  guix-bina=
ry-1.5.0.i686-linux.tar.xz
105a395eeffab32e9e0edb46765b1a2728138c729227bd53f05019097a3e837d  guix-bina=
ry-1.5.0.powerpc64le-linux.tar.xz
3112abc99c9b0fcd122a6a0f4daa076dd4daf2db366b3f0a675cbe396fa1ae0d  guix-bina=
ry-1.5.0.riscv64-linux.tar.xz
aa41025489c5061543e9c48873eaa829b900b2da75d40f9648913622f5f47817  guix-bina=
ry-1.5.0.x86_64-linux.tar.xz
350970f7e65547f4420e0e594055219a420cf17d1aba1c572616f825ff983acc  guix-syst=
em-install-1.5.0.aarch64-linux.iso
54b15ecacdcba79eae4d1b60636fe247dbcc45988ef1e2caed6e1e6687b38867  guix-syst=
em-install-1.5.0.i686-linux.iso
107e0a8082f03a10b15c1fb9383d2d752c1cdeda41b8db575a15550e1c2d8b4a  guix-syst=
em-install-1.5.0.x86_64-linux.iso
5af764b7f5e60ab3c51d760c91ae981e08613b33b59697725ba9284b446c9bf4  guix-syst=
em-vm-image-1.5.0.aarch64-linux.qcow2
3f4ee9039d0c72a360d2fa3e936cb0230155cfb8ed30b3656782d18aebeb7fea  guix-syst=
em-vm-image-1.5.0.x86_64-linux.qcow2

SHA3-256 (base64)
----------------
kWViYu4wxK4GFaTemIgjhKwWURzCnZDkXgRvDHjzi9M=3D  guix-1.5.0.tar.gz
X6KN1zdpTLUPXNhQt0F/IjSB0dzHiZeVhW5jzY9osGs=3D  guix-binary-1.5.0.aarch64-l=
inux.tar.xz
DlmcBb5HGgaUVI0VZgvHMfHvSDZqhy/4ldZqBBJTjyc=3D  guix-binary-1.5.0.armhf-lin=
ux.tar.xz
Y1Dkgf3iIyP9dy0cZeluVIkZtzVlsLSy4+T64irBwLw=3D  guix-binary-1.5.0.i686-linu=
x.tar.xz
1Xhu+8wlOCO1c/555QPKPDrlapeR9kPRgFW5blpTrfc=3D  guix-binary-1.5.0.powerpc64=
le-linux.tar.xz
QoiVUkMUfl17UDApavXGeuiY6STZCI99k70OtE6mQ/k=3D  guix-binary-1.5.0.riscv64-l=
inux.tar.xz
pJQyPNkOdnQyLJZSRlkAtXzz5KyDp5EItVqmyPPoyYA=3D  guix-binary-1.5.0.x86_64-li=
nux.tar.xz
M5qH1BVMML1CJfx7VtWm8TpO65VZ0ZIibNG4FLbFcz0=3D  guix-system-install-1.5.0.a=
arch64-linux.iso
CthQ5L1PKblHpP0Ht1n+sUKJwDnd65SCRnNjXzQRx+w=3D  guix-system-install-1.5.0.i=
686-linux.iso
bB1Y4e1k0Tn6i39QP9Sz/U2B3Gr1OV3l9nDBeV8l9sc=3D  guix-system-install-1.5.0.x=
86_64-linux.iso
OmPVc9mg/W2Ycze8JY5IlstYDeuvekXE28HfcNhv2N4=3D  guix-system-vm-image-1.5.0.=
aarch64-linux.qcow2
b6E6cRVTAfyfofxF9q0PGC/IkP/1+x9SFpm4YxrN2ho=3D  guix-system-vm-image-1.5.0.=
x86_64-linux.qcow2

All of these files have are signed at <link>.sig. They are all signed by
Efraim, you can get his public key from [1], then import it using
=E2=80=9Cgpg --import=E2=80=9D.

For more information, visit our website at https://guix.gnu.org, on IRC at
libera.chat #guix, or see the mailing lists guix-devel[2] or help-guix[3].

Efraim Flashner, on behalf of the Release Team, the GNU Guix Maintainers, a=
nd
the many contributors over the years.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
There have been 71413 commits by 740 people in the 161 weeks since 1.4.0.

This is the output of the NEWS section:

* Changes in 1.5.0 (since 1.4.0)
** Package management
*** New =E2=80=98rpm=E2=80=99 format for the =E2=80=98guix pack=E2=80=99 co=
mmand
*** New =E2=80=98appimage=E2=80=99 format for the =E2=80=98guix pack=E2=80=
=99 command
*** New =E2=80=98--max-layers=E2=80=99 and =E2=80=98--file=E2=80=99 options=
 for the =E2=80=98guix pack=E2=80=99 command
*** New =E2=80=98--roll-back=E2=80=99 and =E2=80=98--expression=E2=80=99 op=
tions for the =E2=80=98guix deploy=E2=80=99 command
*** New =E2=80=98--with-version=E2=80=99 package transformation option
*** New =E2=80=98--with-configure-flag=E2=80=99 package transformation opti=
on
*** New =E2=80=98--nesting=E2=80=99 option to use Guix within =E2=80=98guix=
 shell=E2=80=99 containers
*** New =E2=80=98--emulate-fhs=E2=80=99 option for =E2=80=98guix shell=E2=
=80=99 containers
*** New =E2=80=98--dependents=E2=80=99 and =E2=80=98--development=E2=80=99 =
options for =E2=80=98guix build=E2=80=99
*** New =E2=80=98--interactive=E2=80=99 and =E2=80=98--list-types=E2=80=99 =
flags for =E2=80=98guix repl=E2=80=99
*** The root file-system of =E2=80=98guix shell=E2=80=99 containers is now =
read-only
*** New =E2=80=98--writable-root=E2=80=99 option for the =E2=80=98guix shel=
l=E2=80=99 command
*** Improved style rules for =E2=80=98guix style=E2=80=99
*** New =E2=80=98guix locate=E2=80=99 command
*** =E2=80=98guix refresh=E2=80=99 now honours the =E2=80=98--key-server=E2=
=80=99 option
*** =E2=80=98guix git authenticate=E2=80=98 now remembers introduction comm=
it and signer
*** =E2=80=98guix git authenticate=E2=80=99 now installs pre-push and post-=
merge git hooks
*** System reconfiguration now supports kexec for fast reboot
*** Hetzner Cloud is now supported by the =E2=80=98guix deploy=E2=80=99 com=
mand
*** The Guix Daemon can now be run without root privileges
*** =E2=80=98guix refresh=E2=80=99 can now target partial version
*** New =E2=80=98guix import composer=E2=80=99 command
*** New =E2=80=98guix import binary-npm=E2=80=99 command
*** New =E2=80=98guix import nuget=E2=80=99 command
*** New =E2=80=98graphml=E2=80=99 backend for guix graph
*** New =E2=80=98cyclonedx-json=E2=80=99 backend for guix graph
*** AppArmor profiles are now available for guix and guix-daemon
** Distribution
*** =E2=80=98nss-certs=E2=80=99 is now included in =E2=80=98%base-packages=
=E2=80=99
*** =E2=80=98udev-service-type=E2=80=99 now supports hardware configuration=
 files
*** =E2=80=98gdm-service-type=E2=80=99 now uses Wayland by default
*** KDE Plasma 6.5 is now available with the new =E2=80=98plasma-desktop-se=
rvice-type=E2=80=99
*** GNOME was updated to version 44 with a more modular desktop service
*** Declarative offloading with new =E2=80=98build-machines=E2=80=99 field =
of operating-system
*** =E2=80=98containerd-service-type=E2=80=99 is no longer included with th=
e Docker service
*** =E2=80=98privileged-programs=E2=80=99 replaces =E2=80=98setuid-programs=
=E2=80=99 in =E2=80=98operating-system=E2=80=99
*** The =E2=80=98postgresql=E2=80=99 field of =E2=80=98postgresql-configura=
tion=E2=80=98 is now mandatory
*** The Rottlog service was replaced by new =E2=80=98log-rotation-service-t=
ype=E2=80=99
*** The default system log has been changed to Shepherd=E2=80=99s =E2=80=98=
system-log=E2=80=99 service
*** New recommended =E2=80=98%base-home-services=E2=80=99 variable for Guix=
 Home
*** UDisks now mounts removable devices in /run/media/$USER instead of /med=
ia
*** Syncthing service received incompatible changes
*** =E2=80=98node-build-system=E2=80=99 received incompatible changes
*** New services for /etc/profile.d and /etc/bashrc.d
*** New build system for clasp-cl
*** New Rust packaging model
*** C.utf8 locale is now supported by glibc
*** Fully bootstrapped mono and zig are now available
*** 64bit Hurd (x86_64-gnu) now has experimental support
*** 12525 new packages
*** 8911 package updates

Noteworthy updates:
bash=C2=A05.2.37, binutils=C2=A02.44, clojure=C2=A01.12.0, cups=C2=A02.4.14=
, emacs=C2=A030.2,
gcc-toolchain=C2=A015.2.0, gdb=C2=A016.3, ghc=C2=A09.2.8, gimp=C2=A03.0.4, =
glibc=C2=A02.41,
gnome=C2=A046.10, gnupg=C2=A02.4.7, go=C2=A01.25.3, guile=C2=A03.0.9, iceca=
t=C2=A0140.6.0-gnu1,
icedtea=C2=A03.19.0, inkscape=C2=A01.3.2, julia=C2=A01.8.5, libreoffice=C2=
=A025.2.5.2,
linux-libre=C2=A06.17.12, lxde=C2=A00.99.3, mate=C2=A01.28.2, ocaml=C2=A05.=
3.0, octave=C2=A010.3.0,
openjdk=C2=A025, perl=C2=A05.36.0, python=C2=A03.11.14, racket=C2=A08.18, r=
ust=C2=A01.85.1, r=C2=A04.5.2,
sbcl=C2=A02.5.8, shepherd=C2=A01.0.9, xfce=C2=A04.20.0, xorg-server=C2=A021=
=2E1.21

** Programming interfaces
*** =E2=80=98(gnu system setuid)=E2=80=99 has been renamed to =E2=80=98(gnu=
 system privilege)=E2=80=99
*** Moved to a new Rust packaging model and repackaged all Rust applications
*** Rust library packages have been moved to the guix-rust-past-crates chan=
nel
*** Most Python packages now use the =E2=80=98pyproject-build-system=E2=80=
=99
** Noteworthy bug fixes
*** Daemon vulnerability allowing store corruption has been fixed
*** Daemon vulnerability allowing takeover of build users has been fixed
*** Daemon privilege escalation vulnerabilities fixed
*** Daemon CVEs have been fixed
CVE-2024-27297, CVE-2024-52867, CVE-2025-46415, CVE-2025-46416, CVE-2025-59=
378


[1] https://codeberg.org/efraim.gpg
[2] https://lists.gnu.org/mailman/listinfo/guix-devel
[3] https://lists.gnu.org/mailman/listinfo/help-guix


--s6SIOUtfakK1SBJU
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=ysQ5
-----END PGP SIGNATURE-----

--s6SIOUtfakK1SBJU--