- Option
allowed-uriscan now match whole schemes in URIs without slashes #9547If a scheme, such asgithub:is specified in theallowed-urisoption, all URIs starting withgithub:are allowed. Previously this only worked for schemes whose URIs used the://syntax.
FWIW this is technically a breaking change when using e.g. Hydra or restrict-eval in general since you’ll now have to add github: to your allowed-uris which was accepted without an error before.
Also, this seems to have been backported to Nix 2.19.3, so I think it should be part of the 2.19 release notes? @edolstra @roberth @ericson2314