Skip to content

tools: reenable openssl 1.1.x and 3.0.x on test-shared.yml - #66711

Open
aduh95 wants to merge 4 commits into
nodejs:mainfrom
aduh95:openssl-more-coverage
Open

tools: reenable openssl 1.1.x and 3.0.x on test-shared.yml#66711
aduh95 wants to merge 4 commits into
nodejs:mainfrom
aduh95:openssl-more-coverage

Conversation

@aduh95

@aduh95 aduh95 commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Switching to the 26.05 so we keep some support for OpenSSL 3.0.x which we plan to keep supporting in 27.x

@aduh95
tools: reenable openssl 1.1.x and 3.0.x on test-shared.yml
1f8f719 
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
@nodejs-github-bot

nodejs-github-bot commented Oct 13, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added the tools Issues and PRs related to the tools directory. label Oct 13, 2026
@github-actions

github-actions Bot commented Oct 13, 2026

Copy link
Copy Markdown
Contributor
Platform Number of requisites Proportion of new derivations
x86_64-linux 510 -> 539 => +29 48 / 539 = 8.9%
aarch64-linux 511 -> 540 => +29 48 / 540 = 8.8%
x86_64-darwin 443 -> 453 => +10 10 / 453 = 2.2%
aarch64-darwin 454 -> 464 => +10 26 / 464 = 5.6%
Total 1918 -> 1996 => +78 132 / 1996 = 6.6%
Changelog 
@@ -25,0 +26 @@
+/nix/store/i1fqyal7cwy0347dscjv2rgz6q2fy4zp-acl-2.4.0 (aarch64-linux)
@@ -26,0 +28 @@
+/nix/store/j7gw09i8msa13fvpv20j98hp6id9k2ql-acl-2.4.0 (x86_64-linux)
@@ -43,0 +46 @@
+/nix/store/0vqs8w1xvqcjbifkdrsqhi6xy2b2hxzl-attr-2.6.0 (aarch64-linux)
@@ -45,0 +49 @@
+/nix/store/zfsvnb0vxwck1hq55j4900f7rrpm5y9y-attr-2.6.0 (x86_64-linux)
@@ -70,0 +75 @@
+/nix/store/k56s4lq6d6rljdxg26a34iij3xdvwzz7-bash-5.3p9 (aarch64-linux)
@@ -71,0 +77 @@
+/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9 (x86_64-linux)
@@ -97,0 +104,2 @@
+/nix/store/j28zvxh7z7y3jlm843gcpjmr2a5v4lw1-boringssl-0.20260803.0 (aarch64-darwin)
+/nix/store/ij7waaphm19d6vj6wyr445sfyrls660b-boringssl-0.20260803.0 (aarch64-linux)
@@ -98,0 +107,3 @@
+/nix/store/0dqbhnhcs3i883a1mim5ai8nrb1f182c-boringssl-0.20260803.0 (x86_64-linux)
+/nix/store/7r9v9wqrk4sz0is4k90xa5gsg8lvnxfx-boringssl-0.20260803.0-bin (aarch64-darwin)
+/nix/store/cplhiziaql17dq74s2vcy7nmq5na0m36-boringssl-0.20260803.0-bin (aarch64-linux)
@@ -99,0 +111,3 @@
+/nix/store/80fjm82f77p8ijjp4a6xwdp0a5vvq0cr-boringssl-0.20260803.0-bin (x86_64-linux)
+/nix/store/fs2lxvvsnlvsa2aa10xlh6srcf12swcv-boringssl-0.20260803.0-dev (aarch64-darwin)
+/nix/store/2rmbbrryi4wp3b9s1b309hi6qbadc379-boringssl-0.20260803.0-dev (aarch64-linux)
@@ -101,9 +115 @@
-/nix/store/1kz13kf8hpvib8py2bwk9cz4rww084pj-boringssl-0.20260929.0 (aarch64-darwin)
-/nix/store/2vs0ylgshc4r3wvg9r4mdc1vzvj657a3-boringssl-0.20260929.0 (aarch64-linux)
-/nix/store/ddvwnb04q65yd67zbv2n9983iir5yjwy-boringssl-0.20260929.0 (x86_64-linux)
-/nix/store/ripv3j3z8rq4nwzjp5avrdgr0h98dq4f-boringssl-0.20260929.0-bin (aarch64-darwin)
-/nix/store/8l13y89lh31qh05k4svx36kga52qpahr-boringssl-0.20260929.0-bin (aarch64-linux)
-/nix/store/l7l8zk0fgvcgciy0hdr6f4bxxn5gqhsx-boringssl-0.20260929.0-bin (x86_64-linux)
-/nix/store/vf8mvwr778rk7a8ii5ykjjbybmq8v8xq-boringssl-0.20260929.0-dev (aarch64-darwin)
-/nix/store/lhg2ws49qminj9ib132airsyb27ybl85-boringssl-0.20260929.0-dev (aarch64-linux)
-/nix/store/qfkyfg83vrhrhdlhw68z3rh3qzspva68-boringssl-0.20260929.0-dev (x86_64-linux)
+/nix/store/8v3cq7pv3fgik81zzk0a28ikhjzxf011-boringssl-0.20260803.0-dev (x86_64-linux)
@@ -200,0 +207 @@
+/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11 (aarch64-linux)
@@ -203,0 +211 @@
+/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11 (x86_64-linux)
@@ -322,0 +331,4 @@
+/nix/store/pfs8y9z5d56gzqjyc90vc642lgz5qy58-gcc-15.3.0-lib (aarch64-linux)
+/nix/store/dqj57l1prad38vjrad4bs9d977i4q5zm-gcc-15.3.0-lib (x86_64-linux)
+/nix/store/4ab9sl21fk5nahn8bsawggifk76k9yb7-gcc-15.3.0-libgcc (aarch64-linux)
+/nix/store/0vw7gvcazcjqc762x7vg3l31cpx65l7i-gcc-15.3.0-libgcc (x86_64-linux)
@@ -394,0 +407,2 @@
+/nix/store/y8g2m8zha8fdwd6klf3jngqndf9nv9j2-glibc-2.42-100 (aarch64-linux)
+/nix/store/fsd4vbp9zjd9iaicq2fb9lpc1h5j973y-glibc-2.42-100 (x86_64-linux)
@@ -406,0 +421 @@
+/nix/store/iaqc57fpl6byq00s0gf4f4yg3gmbzxh7-gmp-with-cxx-6.3.0 (aarch64-linux)
@@ -409,0 +425 @@
+/nix/store/xj8g46bl0ps12qw46gi9gacm493m3pff-gmp-with-cxx-6.3.0 (x86_64-linux)
@@ -654,0 +671 @@
+/nix/store/mz7vh12vlha4xc0zxwg0qh9jcbwa37aa-libidn2-2.3.8 (aarch64-linux)
@@ -655,0 +673 @@
+/nix/store/l5y42bimjvvn8h3v5y40w13vv7y2p3k5-libidn2-2.3.8 (x86_64-linux)
@@ -750,0 +769 @@
+/nix/store/r2gvwqbfvxs6yqglinsbhjlazmiaxjd2-libunistring-1.4.2 (aarch64-linux)
@@ -751,0 +771 @@
+/nix/store/g6mvl9ns7k52zfv9pcfw3dbh65z3j7id-libunistring-1.4.2 (x86_64-linux)
@@ -803,0 +824 @@
+/nix/store/f1yg9g0zwksas32c397sgr7rdwraf8nx-libxcrypt-4.5.2 (aarch64-linux)
@@ -805,0 +827 @@
+/nix/store/cb53sk2xsxfwsjbfkrdyz2kbi4p0f49n-libxcrypt-4.5.2 (x86_64-linux)
@@ -1168,0 +1191,48 @@
+/nix/store/2pcwvmq7ncjwh905895yny10ckwcw3r2-openssl-1.1.1w (aarch64-darwin)
+/nix/store/plhjkmxg70rxd2h8kxlq3bxnvwmqc0ip-openssl-1.1.1w (aarch64-linux)
+/nix/store/676zgmak44d996pv7kh3rvqi03f2iwpn-openssl-1.1.1w (x86_64-darwin)
+/nix/store/l9agx145d89zn30rp0rhckdk3w6szc96-openssl-1.1.1w (x86_64-linux)
+/nix/store/086cqn4n4m71rlkv5y3zgzzh13r45r3a-openssl-1.1.1w-bin (aarch64-darwin)
+/nix/store/h5jijr2lrrqyg9zbvl30xc7006ndhbfw-openssl-1.1.1w-bin (aarch64-linux)
+/nix/store/8zm70jczb2mx441k4614k2zaym8z6cdg-openssl-1.1.1w-bin (x86_64-darwin)
+/nix/store/1p882fsy29dpxzw6dxryvci3s71yj3kd-openssl-1.1.1w-bin (x86_64-linux)
+/nix/store/6ak42ni4smvkwqba9gz9kxmk7rd2iz6a-openssl-1.1.1w-debug (aarch64-linux)
+/nix/store/l8j28jaz36rl7p3353bdrwmm0gqs21n7-openssl-1.1.1w-debug (x86_64-linux)
+/nix/store/gplh2jrz3m8b2czakfnzqdv5fyvicrzd-openssl-1.1.1w-dev (aarch64-darwin)
+/nix/store/4s7zhnfv63lz3kizvafg60dx47s8lj7p-openssl-1.1.1w-dev (aarch64-linux)
+/nix/store/rxqb2hml7zsqwhyyhjbjjqbl6f6y2i4q-openssl-1.1.1w-dev (x86_64-darwin)
+/nix/store/w521vxypims9pqar5s56an8l3ab8qnja-openssl-1.1.1w-dev (x86_64-linux)
+/nix/store/rv96dqrq72may8zlqrbqlpdwy4lyin3d-openssl-1.1.1w-doc (aarch64-darwin)
+/nix/store/91890x9hxv4x0a483ricphjj98gqs63a-openssl-1.1.1w-doc (aarch64-linux)
+/nix/store/r6wbq4gkwz5aaylinl9pki442wvpvza4-openssl-1.1.1w-doc (x86_64-darwin)
+/nix/store/d4ylfi8hym60qxd0d0jvj6wx3mvvnbd7-openssl-1.1.1w-doc (x86_64-linux)
+/nix/store/m1fcygfrg2qk1cngqk2khc45rw85xxps-openssl-1.1.1w-man (aarch64-darwin)
+/nix/store/psrycwnqbwwm9sdv5bwjbjgijxiicr6h-openssl-1.1.1w-man (aarch64-linux)
+/nix/store/b20wkyzpyni4j6iyrhxk2rq3mvqx59rp-openssl-1.1.1w-man (x86_64-darwin)
+/nix/store/i2shy3afinygkdn623ai487pal720bpa-openssl-1.1.1w-man (x86_64-linux)
+/nix/store/y3cl2yrgaf3gjp81blxk35nx8srabngv-openssl-1.1.1w.tar.gz (aarch64-linux)
+/nix/store/y3cl2yrgaf3gjp81blxk35nx8srabngv-openssl-1.1.1w.tar.gz (x86_64-linux)
+/nix/store/55di5gmdgk91lwzvghn402b8g01zib1l-openssl-3.0.22 (aarch64-darwin)
+/nix/store/ahs43jjkcj8sj4r41v3vi127kal6sdw2-openssl-3.0.22 (aarch64-linux)
+/nix/store/xkasdn5dcvx2c6rqr9zwsa8a4achprmm-openssl-3.0.22 (x86_64-darwin)
+/nix/store/7mms214njnvw4b9gak7iv6lhc3ccawki-openssl-3.0.22 (x86_64-linux)
+/nix/store/xqjh30g2v3d95p9qjgfacwv9957bp3j3-openssl-3.0.22-bin (aarch64-darwin)
+/nix/store/f44i4zpzl10c9xag8hniia1gpa2l4gpz-openssl-3.0.22-bin (aarch64-linux)
+/nix/store/81yh3axd5j9bd0x06w2sm06hz32ang2h-openssl-3.0.22-bin (x86_64-darwin)
+/nix/store/bwqah2id8iq19cjpyyp99c4l5yys42hc-openssl-3.0.22-bin (x86_64-linux)
+/nix/store/14fq6fr376ykx2pw9i7x61qjr6cj33wl-openssl-3.0.22-debug (aarch64-linux)
+/nix/store/hn8dgv4dh3km3lnlhv9hgxprip02jpyp-openssl-3.0.22-debug (x86_64-linux)
+/nix/store/w2npw7837w3ifhp5lrxg9grgizg27s83-openssl-3.0.22-dev (aarch64-darwin)
+/nix/store/sn05nvxn9ibmwyjck7cb277kw8s6zkv1-openssl-3.0.22-dev (aarch64-linux)
+/nix/store/h7zy45h0sahzhrifh5ayj2lam9vqnqfm-openssl-3.0.22-dev (x86_64-darwin)
+/nix/store/zdmqmm7gpjikkgi8ni8in98d2ik0g0wa-openssl-3.0.22-dev (x86_64-linux)
+/nix/store/44jia98wadqbrbkwrh91x1y5ci4mdq4l-openssl-3.0.22-doc (aarch64-darwin)
+/nix/store/g842ycww18g06jn1mmrj092v30qw17mi-openssl-3.0.22-doc (aarch64-linux)
+/nix/store/ay484ddyk73pjj5b4knrrikr8z2sw1h5-openssl-3.0.22-doc (x86_64-darwin)
+/nix/store/zrzl9vnfbxs1vmg64gqiv61jvgwra0mw-openssl-3.0.22-doc (x86_64-linux)
+/nix/store/7dmhpw2v2dfs5a0hscmzcrml5s3f22yg-openssl-3.0.22-man (aarch64-darwin)
+/nix/store/sj9gl7c9k2dnxwnzvag3p0cscgy8bbgq-openssl-3.0.22-man (aarch64-linux)
+/nix/store/ywm2014pgwa4fz5wr87mvmihy5xfshgy-openssl-3.0.22-man (x86_64-darwin)
+/nix/store/z4h5v80x7ka1b9v2l4c2486i5hxx70w1-openssl-3.0.22-man (x86_64-linux)
+/nix/store/rp0yi8vlhpy7dinx7bsvlmdd67xw40xs-openssl-3.0.22.tar.gz (aarch64-linux)
+/nix/store/rp0yi8vlhpy7dinx7bsvlmdd67xw40xs-openssl-3.0.22.tar.gz (x86_64-linux)
@@ -1196,2 +1266,4 @@
-/nix/store/xv1gsxxw1srzqhxxnmwfd39c74h0fxn1-openssl-3.6.5 (aarch64-darwin)
-/nix/store/8s4sc2nhkn1zbfyj4rlcdcshn723hmn4-openssl-3.6.5 (aarch64-linux)
+/nix/store/pv5imjz1sglx59fjg1927pbjzavhvxc2-openssl-3.5.9.tar.gz (aarch64-linux)
+/nix/store/pv5imjz1sglx59fjg1927pbjzavhvxc2-openssl-3.5.9.tar.gz (x86_64-linux)
+/nix/store/0bim62qmr43anlbki8gyf6br8sbn1gfz-openssl-3.6.5 (aarch64-darwin)
+/nix/store/ni00zi1wcfkc594bjr008ccfv7584fqd-openssl-3.6.5 (aarch64-linux)
@@ -1200,3 +1272,3 @@
-/nix/store/k6gk21pqwc61xlraavcjcia70vbjbzii-openssl-3.6.5 (x86_64-linux)
-/nix/store/3rs4sz5wbcic1yp7r8531236d92lp66h-openssl-3.6.5-bin (aarch64-darwin)
-/nix/store/ik1zl4j788sff0qly9bdy7ssimczgw3r-openssl-3.6.5-bin (aarch64-linux)
+/nix/store/kysvfcf8d8v26rr32xfqji8ri2lczlqk-openssl-3.6.5 (x86_64-linux)
+/nix/store/77s5ry5xpgap9d7mc6h9ifj1xyfahr35-openssl-3.6.5-bin (aarch64-darwin)
+/nix/store/qk2v3l5vi68wm02154ls56sgkd7g4fq2-openssl-3.6.5-bin (aarch64-linux)
@@ -1205,5 +1277,5 @@
-/nix/store/6241zi03phfcg9xf4wm2knrv28gcrmlg-openssl-3.6.5-bin (x86_64-linux)
-/nix/store/ay6c8nj82sndp3v6bahsiwdv2k9q3n99-openssl-3.6.5-debug (aarch64-linux)
-/nix/store/y0m1d456hq5183rdpvlq8dkbxzr8plfc-openssl-3.6.5-debug (x86_64-linux)
-/nix/store/bcvpg13bd7x15l6hh79c2xd9kyp3fapc-openssl-3.6.5-dev (aarch64-darwin)
-/nix/store/wc8zq7xagskpgp97qiqwngzp25cq2w71-openssl-3.6.5-dev (aarch64-linux)
+/nix/store/ndv550fkbmsfvdxax71d4d5d59x4lq80-openssl-3.6.5-bin (x86_64-linux)
+/nix/store/gfamnj6b2mgwzdvs2m9z1nkll9n1kdgw-openssl-3.6.5-debug (aarch64-linux)
+/nix/store/7ag2iq9v8ab0gf0lw3jx1say4kgnh48h-openssl-3.6.5-debug (x86_64-linux)
+/nix/store/w19iih2dy9a7n3xx9nm7rmkkiszjcdk8-openssl-3.6.5-dev (aarch64-darwin)
+/nix/store/cls45bw68z2b3q03siq9vsnli5c4y8zd-openssl-3.6.5-dev (aarch64-linux)
@@ -1212,3 +1284,3 @@
-/nix/store/5dznw6bb5wfnh7iq3pg1cx80wjyps9wc-openssl-3.6.5-dev (x86_64-linux)
-/nix/store/1a09mkq6ngb46kj76m2rip3lk4ff7ljv-openssl-3.6.5-doc (aarch64-darwin)
-/nix/store/sjw4qswxsm8jji4vhb1gbhgyzdchn6sg-openssl-3.6.5-doc (aarch64-linux)
+/nix/store/7l09089ahshxjx4js3zswqk6azhx6ccq-openssl-3.6.5-dev (x86_64-linux)
+/nix/store/ysdzcb2n8fknsz6rw3fqgvx3b3y4ykdl-openssl-3.6.5-doc (aarch64-darwin)
+/nix/store/njsr83clccn8v0x6y4jvvdp6n5fpzjj8-openssl-3.6.5-doc (aarch64-linux)
@@ -1216,3 +1288,3 @@
-/nix/store/rhjfpji1sdn4c29ql0appv9hznwxa3yj-openssl-3.6.5-doc (x86_64-linux)
-/nix/store/3gggdi87iw61ysj9q39ivyd99g8jgggp-openssl-3.6.5-man (aarch64-darwin)
-/nix/store/cvhlf30ma6l7b4c36h1lm9brjn5dwdvw-openssl-3.6.5-man (aarch64-linux)
+/nix/store/7vhk6c2vg819fl44sj99bp8k3503xy8v-openssl-3.6.5-doc (x86_64-linux)
+/nix/store/885g9dx0ar0vd56hqqlv1mk52v5j7l9j-openssl-3.6.5-man (aarch64-darwin)
+/nix/store/ccxqm78fsx80dviqd203nf6hxpyzllpg-openssl-3.6.5-man (aarch64-linux)
@@ -1220 +1292 @@
-/nix/store/mhiadbypd62vgw4696csp4bpqkb2h1g2-openssl-3.6.5-man (x86_64-linux)
+/nix/store/fnr9mx06brcp7c3dixdn1zr73lf7jgcw-openssl-3.6.5-man (x86_64-linux)
@@ -1223,2 +1295,2 @@
-/nix/store/p4rvlzj10k4djhvsvfy0zzkv29my916y-openssl-4.0.3 (aarch64-darwin)
-/nix/store/j6wwr630s5h4bfvy7856ghqqyay92ds9-openssl-4.0.3 (aarch64-linux)
+/nix/store/j8c118lcz68v2sj0w9qf4ix7gzna0kf0-openssl-4.0.3 (aarch64-darwin)
+/nix/store/jf71axvgd43lhxmx1jrgscjwvcqd1k12-openssl-4.0.3 (aarch64-linux)
@@ -1226,3 +1298,3 @@
-/nix/store/8rfsypg1qj64n6yagj71cbrwxjcig28h-openssl-4.0.3 (x86_64-linux)
-/nix/store/fkyky8gzdykq7sxv5saqppnfq0y7af7r-openssl-4.0.3-bin (aarch64-darwin)
-/nix/store/4lzgip5irdkjwi3bi6x5lvq89x7qbfl5-openssl-4.0.3-bin (aarch64-linux)
+/nix/store/3i5w573pi9i9vjhc33mj35f442f8s0hj-openssl-4.0.3 (x86_64-linux)
+/nix/store/4bx2957hayin9a5jwplh34nfmskws7xh-openssl-4.0.3-bin (aarch64-darwin)
+/nix/store/sgiz3nqb71k17knmins86r37nyndxgbn-openssl-4.0.3-bin (aarch64-linux)
@@ -1230,5 +1302,5 @@
-/nix/store/0421xrq6h7l6kg92a005d6a7vr5lbpzm-openssl-4.0.3-bin (x86_64-linux)
-/nix/store/gwybasv8b9iqviv6ahxvr5137757vpkv-openssl-4.0.3-debug (aarch64-linux)
-/nix/store/lvf31jydm8vgv172s7h4rznychz56m0y-openssl-4.0.3-debug (x86_64-linux)
-/nix/store/jbrmw441ksgar63z8rpr8d5fz46ivrag-openssl-4.0.3-dev (aarch64-darwin)
-/nix/store/hg0aladmxgpyaqi0dx55k4hlswxjm6rj-openssl-4.0.3-dev (aarch64-linux)
+/nix/store/5j2c7412i5hx8d4ikz36kyab1rcyzmlp-openssl-4.0.3-bin (x86_64-linux)
+/nix/store/vxm7nzsb2pgr555g16fny24vq1xklxrr-openssl-4.0.3-debug (aarch64-linux)
+/nix/store/4x7451i6gxlmz55vsx5v3yvk4y161csg-openssl-4.0.3-debug (x86_64-linux)
+/nix/store/qi1ysidl91vihq73i089cm0xb7sz265i-openssl-4.0.3-dev (aarch64-darwin)
+/nix/store/m55p1g1yypyjq68w0ahnpqvf4ab1176n-openssl-4.0.3-dev (aarch64-linux)
@@ -1236,3 +1308,3 @@
-/nix/store/v8pi6xrs81brp2q2cdlkp1wmld4vw7ly-openssl-4.0.3-dev (x86_64-linux)
-/nix/store/5wby529g35pgvg7d5q2kaz4cp9i8ak08-openssl-4.0.3-doc (aarch64-darwin)
-/nix/store/d8a3lkcbi2z88f007symxpdjqgxxvqs9-openssl-4.0.3-doc (aarch64-linux)
+/nix/store/0i35mmy5j9ss2wmii53plmh1wj4xn64j-openssl-4.0.3-dev (x86_64-linux)
+/nix/store/9w2czhqsh070hh15f94qvym91jhql07z-openssl-4.0.3-doc (aarch64-darwin)
+/nix/store/f9kkj5i57gnf6cg46ssfx4cyawh828lq-openssl-4.0.3-doc (aarch64-linux)
@@ -1240,3 +1312,3 @@
-/nix/store/1m2aj7gs4p98d3iq82sd4i9hrch4k8xl-openssl-4.0.3-doc (x86_64-linux)
-/nix/store/pqlgryhfjk728b1by55f1qlrlkamfwcr-openssl-4.0.3-man (aarch64-darwin)
-/nix/store/aziiv64mnyhiljp35hj8rcxm98za85jd-openssl-4.0.3-man (aarch64-linux)
+/nix/store/29vncbclq99kg1j3fig9rz3isznnn76d-openssl-4.0.3-doc (x86_64-linux)
+/nix/store/v9wjv6c6xv4z5a3gi9hrrgqiy26r78fz-openssl-4.0.3-man (aarch64-darwin)
+/nix/store/3pb39scl6p0l6cw42bfiahsi5x9anfpg-openssl-4.0.3-man (aarch64-linux)
@@ -1244 +1316 @@
-/nix/store/kyawb1p12b5j4b3a98qnngjazh1qm3dk-openssl-4.0.3-man (x86_64-linux)
+/nix/store/a8jfxzivccbd3ihzrx2d37mpzclaj14h-openssl-4.0.3-man (x86_64-linux)
@@ -1247,11 +1319,2 @@
-/nix/store/5iifa17xp6b0jnzcra5fwq9zgvjhbgpw-openssl-fips-3.5.8 (aarch64-darwin)
-/nix/store/5ymfgycngqf1icbwvh3yiw1cii7r1cm8-openssl-fips-3.5.8 (aarch64-linux)
-/nix/store/yyb4ar8qj5fi8222bivs9hi0zw1sfmcy-openssl-fips-3.5.8 (x86_64-linux)
-/nix/store/zks1qp4wgxljyh5i5imi8in33l21n8aw-openssl-fips-3.5.8-bin (aarch64-darwin)
-/nix/store/j2qfg30dlls9lml4icxgy596j6hfdg60-openssl-fips-3.5.8-bin (aarch64-linux)
-/nix/store/7n49hws7wy87s78vx2kwsadzsjvcxh3d-openssl-fips-3.5.8-bin (x86_64-linux)
-/nix/store/ppkb4dxdy4456iiap4pqkp585jmmp0md-openssl-fips-3.5.8-debug (aarch64-linux)
-/nix/store/s6msyf7vh6xx8wfyig7rn2acq61lk0bp-openssl-fips-3.5.8-debug (x86_64-linux)
-/nix/store/n9hi12ffk4v2yvyhs7hn033y3rfm4qcf-openssl-fips-3.5.8-dev (aarch64-darwin)
-/nix/store/jqbbndvmfz96cwfzfcpy3vv7309g1fnq-openssl-fips-3.5.8-dev (aarch64-linux)
-/nix/store/sh7dnxlj9qs8mqqhgbkdkbvf5gyrfcg9-openssl-fips-3.5.8-dev (x86_64-linux)
+/nix/store/m5kfm35c1prnmngibp7lgwn7qm2rll1m-openssl-fips-3.5.9 (aarch64-darwin)
+/nix/store/j9f25q0n4iaw9h7ppyw3cpr9bj3ib3lh-openssl-fips-3.5.9 (aarch64-linux)
@@ -1258,0 +1322,3 @@
+/nix/store/k2y4ir7vh705ysqa9dz13zinl2d4iazb-openssl-fips-3.5.9 (x86_64-linux)
+/nix/store/8p5wrvjd4s2bghbmd651hjpzsyyx7f73-openssl-fips-3.5.9-bin (aarch64-darwin)
+/nix/store/w3r6kwn48s9kv8dz4gxyjppb2g7bi3gb-openssl-fips-3.5.9-bin (aarch64-linux)
@@ -1259,0 +1326,5 @@
+/nix/store/jdqjbbmgmgfy6zs0l7qkwlk52fa1b8b2-openssl-fips-3.5.9-bin (x86_64-linux)
+/nix/store/09aadnva8xijrv6ly27vn81hpz5grsb3-openssl-fips-3.5.9-debug (aarch64-linux)
+/nix/store/rj3gidz1dav69jn3xdqsqlj2wv6v1q1n-openssl-fips-3.5.9-debug (x86_64-linux)
+/nix/store/zmxib53q4ffsq3bknilm4x6l9hwbwj6j-openssl-fips-3.5.9-dev (aarch64-darwin)
+/nix/store/qxvcymafc3fld2hp3cv5yccygy9cwxrn-openssl-fips-3.5.9-dev (aarch64-linux)
@@ -1260,0 +1332 @@
+/nix/store/iix0m1ndfcnaxcm8gyjha1g4djh6h4rw-openssl-fips-3.5.9-dev (x86_64-linux)
@@ -1323,0 +1396 @@
+/nix/store/h3rs1hh8cjw87lzdxirvsnyf6v9ckqsf-perl-5.42.3 (aarch64-linux)
@@ -1326,0 +1400 @@
+/nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3 (x86_64-linux)
@@ -1860,0 +1935,2 @@
+/nix/store/8706ximl3mqxvm84mbvnfwrnlkh18lc9-xgcc-15.3.0-libgcc (aarch64-linux)
+/nix/store/l1n6wi2lyzglvgzbwzw9n9w2pzkcj41i-xgcc-15.3.0-libgcc (x86_64-linux)
@@ -1886,0 +1963 @@
+/nix/store/wfc7fszkgqbdp58mc41zzzq3hf0i3p5d-zlib-1.3.2 (aarch64-linux)
@@ -1887,0 +1965 @@
+/nix/store/6s4wm3zl2y0v5g998n2g88k1zh3vf2pr-zlib-1.3.2 (x86_64-linux)

@panva

panva commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

@aduh95 am i reading the diff above right that this rolls back and pins boringssl?

@aduh95

aduh95 commented Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

@aduh95 am i reading the diff above right that this rolls back and pins boringssl?

It’s switching to 26.05 channel which apparently uses an older version. I’m not sure whether it’s pinned or lagging behind. Would it be a deal breaker?

@panva

panva commented Oct 13, 2026

Copy link
Copy Markdown
Member

Can you think of a way to only keep the permittedInsecurePackages on a channel they're available on while keeping the rest as-is?

@github-actions

github-actions Bot commented Oct 14, 2026

Copy link
Copy Markdown
Contributor
Platform Number of requisites Proportion of new derivations
x86_64-linux 510 -> 538 => +28 28 / 538 = 5.2%
aarch64-linux 511 -> 539 => +28 28 / 539 = 5.1%
x86_64-darwin 443 -> 453 => +10 10 / 453 = 2.2%
aarch64-darwin 454 -> 464 => +10 10 / 464 = 2.1%
Total 1918 -> 1994 => +76 76 / 1994 = 3.8%
Changelog 
@@ -25,0 +26 @@
+/nix/store/i1fqyal7cwy0347dscjv2rgz6q2fy4zp-acl-2.4.0 (aarch64-linux)
@@ -26,0 +28 @@
+/nix/store/j7gw09i8msa13fvpv20j98hp6id9k2ql-acl-2.4.0 (x86_64-linux)
@@ -43,0 +46 @@
+/nix/store/0vqs8w1xvqcjbifkdrsqhi6xy2b2hxzl-attr-2.6.0 (aarch64-linux)
@@ -45,0 +49 @@
+/nix/store/zfsvnb0vxwck1hq55j4900f7rrpm5y9y-attr-2.6.0 (x86_64-linux)
@@ -70,0 +75 @@
+/nix/store/k56s4lq6d6rljdxg26a34iij3xdvwzz7-bash-5.3p9 (aarch64-linux)
@@ -71,0 +77 @@
+/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9 (x86_64-linux)
@@ -200,0 +207 @@
+/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11 (aarch64-linux)
@@ -203,0 +211 @@
+/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11 (x86_64-linux)
@@ -322,0 +331,4 @@
+/nix/store/pfs8y9z5d56gzqjyc90vc642lgz5qy58-gcc-15.3.0-lib (aarch64-linux)
+/nix/store/dqj57l1prad38vjrad4bs9d977i4q5zm-gcc-15.3.0-lib (x86_64-linux)
+/nix/store/4ab9sl21fk5nahn8bsawggifk76k9yb7-gcc-15.3.0-libgcc (aarch64-linux)
+/nix/store/0vw7gvcazcjqc762x7vg3l31cpx65l7i-gcc-15.3.0-libgcc (x86_64-linux)
@@ -394,0 +407,2 @@
+/nix/store/y8g2m8zha8fdwd6klf3jngqndf9nv9j2-glibc-2.42-100 (aarch64-linux)
+/nix/store/fsd4vbp9zjd9iaicq2fb9lpc1h5j973y-glibc-2.42-100 (x86_64-linux)
@@ -406,0 +421 @@
+/nix/store/iaqc57fpl6byq00s0gf4f4yg3gmbzxh7-gmp-with-cxx-6.3.0 (aarch64-linux)
@@ -409,0 +425 @@
+/nix/store/xj8g46bl0ps12qw46gi9gacm493m3pff-gmp-with-cxx-6.3.0 (x86_64-linux)
@@ -654,0 +671 @@
+/nix/store/mz7vh12vlha4xc0zxwg0qh9jcbwa37aa-libidn2-2.3.8 (aarch64-linux)
@@ -655,0 +673 @@
+/nix/store/l5y42bimjvvn8h3v5y40w13vv7y2p3k5-libidn2-2.3.8 (x86_64-linux)
@@ -750,0 +769 @@
+/nix/store/r2gvwqbfvxs6yqglinsbhjlazmiaxjd2-libunistring-1.4.2 (aarch64-linux)
@@ -751,0 +771 @@
+/nix/store/g6mvl9ns7k52zfv9pcfw3dbh65z3j7id-libunistring-1.4.2 (x86_64-linux)
@@ -803,0 +824 @@
+/nix/store/f1yg9g0zwksas32c397sgr7rdwraf8nx-libxcrypt-4.5.2 (aarch64-linux)
@@ -805,0 +827 @@
+/nix/store/cb53sk2xsxfwsjbfkrdyz2kbi4p0f49n-libxcrypt-4.5.2 (x86_64-linux)
@@ -1168,0 +1191,48 @@
+/nix/store/2pcwvmq7ncjwh905895yny10ckwcw3r2-openssl-1.1.1w (aarch64-darwin)
+/nix/store/plhjkmxg70rxd2h8kxlq3bxnvwmqc0ip-openssl-1.1.1w (aarch64-linux)
+/nix/store/676zgmak44d996pv7kh3rvqi03f2iwpn-openssl-1.1.1w (x86_64-darwin)
+/nix/store/l9agx145d89zn30rp0rhckdk3w6szc96-openssl-1.1.1w (x86_64-linux)
+/nix/store/086cqn4n4m71rlkv5y3zgzzh13r45r3a-openssl-1.1.1w-bin (aarch64-darwin)
+/nix/store/h5jijr2lrrqyg9zbvl30xc7006ndhbfw-openssl-1.1.1w-bin (aarch64-linux)
+/nix/store/8zm70jczb2mx441k4614k2zaym8z6cdg-openssl-1.1.1w-bin (x86_64-darwin)
+/nix/store/1p882fsy29dpxzw6dxryvci3s71yj3kd-openssl-1.1.1w-bin (x86_64-linux)
+/nix/store/6ak42ni4smvkwqba9gz9kxmk7rd2iz6a-openssl-1.1.1w-debug (aarch64-linux)
+/nix/store/l8j28jaz36rl7p3353bdrwmm0gqs21n7-openssl-1.1.1w-debug (x86_64-linux)
+/nix/store/gplh2jrz3m8b2czakfnzqdv5fyvicrzd-openssl-1.1.1w-dev (aarch64-darwin)
+/nix/store/4s7zhnfv63lz3kizvafg60dx47s8lj7p-openssl-1.1.1w-dev (aarch64-linux)
+/nix/store/rxqb2hml7zsqwhyyhjbjjqbl6f6y2i4q-openssl-1.1.1w-dev (x86_64-darwin)
+/nix/store/w521vxypims9pqar5s56an8l3ab8qnja-openssl-1.1.1w-dev (x86_64-linux)
+/nix/store/rv96dqrq72may8zlqrbqlpdwy4lyin3d-openssl-1.1.1w-doc (aarch64-darwin)
+/nix/store/91890x9hxv4x0a483ricphjj98gqs63a-openssl-1.1.1w-doc (aarch64-linux)
+/nix/store/r6wbq4gkwz5aaylinl9pki442wvpvza4-openssl-1.1.1w-doc (x86_64-darwin)
+/nix/store/d4ylfi8hym60qxd0d0jvj6wx3mvvnbd7-openssl-1.1.1w-doc (x86_64-linux)
+/nix/store/m1fcygfrg2qk1cngqk2khc45rw85xxps-openssl-1.1.1w-man (aarch64-darwin)
+/nix/store/psrycwnqbwwm9sdv5bwjbjgijxiicr6h-openssl-1.1.1w-man (aarch64-linux)
+/nix/store/b20wkyzpyni4j6iyrhxk2rq3mvqx59rp-openssl-1.1.1w-man (x86_64-darwin)
+/nix/store/i2shy3afinygkdn623ai487pal720bpa-openssl-1.1.1w-man (x86_64-linux)
+/nix/store/y3cl2yrgaf3gjp81blxk35nx8srabngv-openssl-1.1.1w.tar.gz (aarch64-linux)
+/nix/store/y3cl2yrgaf3gjp81blxk35nx8srabngv-openssl-1.1.1w.tar.gz (x86_64-linux)
+/nix/store/55di5gmdgk91lwzvghn402b8g01zib1l-openssl-3.0.22 (aarch64-darwin)
+/nix/store/ahs43jjkcj8sj4r41v3vi127kal6sdw2-openssl-3.0.22 (aarch64-linux)
+/nix/store/xkasdn5dcvx2c6rqr9zwsa8a4achprmm-openssl-3.0.22 (x86_64-darwin)
+/nix/store/7mms214njnvw4b9gak7iv6lhc3ccawki-openssl-3.0.22 (x86_64-linux)
+/nix/store/xqjh30g2v3d95p9qjgfacwv9957bp3j3-openssl-3.0.22-bin (aarch64-darwin)
+/nix/store/f44i4zpzl10c9xag8hniia1gpa2l4gpz-openssl-3.0.22-bin (aarch64-linux)
+/nix/store/81yh3axd5j9bd0x06w2sm06hz32ang2h-openssl-3.0.22-bin (x86_64-darwin)
+/nix/store/bwqah2id8iq19cjpyyp99c4l5yys42hc-openssl-3.0.22-bin (x86_64-linux)
+/nix/store/14fq6fr376ykx2pw9i7x61qjr6cj33wl-openssl-3.0.22-debug (aarch64-linux)
+/nix/store/hn8dgv4dh3km3lnlhv9hgxprip02jpyp-openssl-3.0.22-debug (x86_64-linux)
+/nix/store/w2npw7837w3ifhp5lrxg9grgizg27s83-openssl-3.0.22-dev (aarch64-darwin)
+/nix/store/sn05nvxn9ibmwyjck7cb277kw8s6zkv1-openssl-3.0.22-dev (aarch64-linux)
+/nix/store/h7zy45h0sahzhrifh5ayj2lam9vqnqfm-openssl-3.0.22-dev (x86_64-darwin)
+/nix/store/zdmqmm7gpjikkgi8ni8in98d2ik0g0wa-openssl-3.0.22-dev (x86_64-linux)
+/nix/store/44jia98wadqbrbkwrh91x1y5ci4mdq4l-openssl-3.0.22-doc (aarch64-darwin)
+/nix/store/g842ycww18g06jn1mmrj092v30qw17mi-openssl-3.0.22-doc (aarch64-linux)
+/nix/store/ay484ddyk73pjj5b4knrrikr8z2sw1h5-openssl-3.0.22-doc (x86_64-darwin)
+/nix/store/zrzl9vnfbxs1vmg64gqiv61jvgwra0mw-openssl-3.0.22-doc (x86_64-linux)
+/nix/store/7dmhpw2v2dfs5a0hscmzcrml5s3f22yg-openssl-3.0.22-man (aarch64-darwin)
+/nix/store/sj9gl7c9k2dnxwnzvag3p0cscgy8bbgq-openssl-3.0.22-man (aarch64-linux)
+/nix/store/ywm2014pgwa4fz5wr87mvmihy5xfshgy-openssl-3.0.22-man (x86_64-darwin)
+/nix/store/z4h5v80x7ka1b9v2l4c2486i5hxx70w1-openssl-3.0.22-man (x86_64-linux)
+/nix/store/rp0yi8vlhpy7dinx7bsvlmdd67xw40xs-openssl-3.0.22.tar.gz (aarch64-linux)
+/nix/store/rp0yi8vlhpy7dinx7bsvlmdd67xw40xs-openssl-3.0.22.tar.gz (x86_64-linux)
@@ -1323,0 +1394 @@
+/nix/store/h3rs1hh8cjw87lzdxirvsnyf6v9ckqsf-perl-5.42.3 (aarch64-linux)
@@ -1326,0 +1398 @@
+/nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3 (x86_64-linux)
@@ -1860,0 +1933,2 @@
+/nix/store/8706ximl3mqxvm84mbvnfwrnlkh18lc9-xgcc-15.3.0-libgcc (aarch64-linux)
+/nix/store/l1n6wi2lyzglvgzbwzw9n9w2pzkcj41i-xgcc-15.3.0-libgcc (x86_64-linux)
@@ -1886,0 +1961 @@
+/nix/store/wfc7fszkgqbdp58mc41zzzq3hf0i3p5d-zlib-1.3.2 (aarch64-linux)
@@ -1887,0 +1963 @@
+/nix/store/6s4wm3zl2y0v5g998n2g88k1zh3vf2pr-zlib-1.3.2 (x86_64-linux)

@aduh95 aduh95 added author ready PRs with CI started, the required approvals, and no outstanding review comments. commit-queue PRs queued for automated landing through the Commit Queue. commit-queue-squash PRs the Commit Queue should land as one squashed commit. dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. dont-land-on-v26.x PRs that should not land on the v26.x-staging branch and should not be released in v26.x. labels Oct 14, 2026
@panva panva mentioned this pull request Oct 15, 2026
Open
@aduh95
aduh95 requested a review from cjihrig October 15, 2026 09:12
@nodejs-github-bot nodejs-github-bot added the lacks-second-approval Commit Queue PRs awaiting a second collaborator approval or completion of the required wait. label Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@panva panva panva approved these changes
@cjihrig cjihrig Awaiting requested review from cjihrig

Assignees

No one assigned

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. commit-queue PRs queued for automated landing through the Commit Queue. commit-queue-squash PRs the Commit Queue should land as one squashed commit. dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. dont-land-on-v26.x PRs that should not land on the v26.x-staging branch and should not be released in v26.x. lacks-second-approval Commit Queue PRs awaiting a second collaborator approval or completion of the required wait. tools Issues and PRs related to the tools directory.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aduh95 @nodejs-github-bot @panva