Nix 2.20 released

  • Option allowed-uris can now match whole schemes in URIs without slashes #9547If a scheme, such as github: is specified in the allowed-uris option, all URIs starting with github: are allowed. Previously this only worked for schemes whose URIs used the :// syntax.

FWIW this is technically a breaking change when using e.g. Hydra or restrict-eval in general since you’ll now have to add github: to your allowed-uris which was accepted without an error before.

Also, this seems to have been backported to Nix 2.19.3, so I think it should be part of the 2.19 release notes? @edolstra @roberth @ericson2314

2 Likes