Added gnome 3.10 to the release notes

(cherry picked from commit ea1a9445bbb18a01e2f7e801a5133452c7faec57)
debian: Update to 7.5

(cherry picked from commit 1ab9f0a1c1f66a6d92b1a244192bae96c7afc0f0)
Update thunderbird-bin to version 24.5.0
s/config.allowUnfree = true/allowUnfree = true/
jdk7: update patchversion 51 -> 55.

(cherry picked from commit a2de61e2b6fa0045363dbfd593cd92faadcd7343)
Fix whitespace

(cherry picked from commit 9d15c568d8a169489579d3f169f60eb49c03d0ec)
btsync: Default to no login/password for the Web UI

Signed-off-by: Austin Seipp <aseipp@pobox.com>
(cherry picked from commit b553d116161dd9fa461d2b70328504095666c496)
clang-analyzer: respect $NIX_CFLAGS_COMPILE

When using scan-build, you're often going to want to use it in the
context of a Nix expression with buildInputs, and the default wrapper
scripts will put things like include locations for those inputs
$NIX_CFLAGS_COMPILE. Thus, scan-build also needs to pass them to the
analyzer - while the link flags aren't relevant, the include flags are.

This is because the analyzer executable that gets run by scan-build is
*not* clang-wrapper, but the actual clang executable, so it doesn't
implicitly add such arguments. The build is two-stage - it runs the real
clang wrapper once, and then the analyzer once.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
(cherry picked from commit 59528d9f0e7bef27acafe7cb6eaf5273aef2dcfa)
darktable: update from 1.4.1 to 1.4.2

(cherry picked from commit 849f6788acd5abc5cde63e02f1129ad8aa16bd05)
aubio: update from 0.4.0 to 0.4.1

(cherry picked from commit f3e0a293387975014c9a71ef370743cea27ff18d)
qwt: add version 6.x (we already have 5.x)

'qgis', one of the few 'qwt' dependees in nixpkgs, fails to build with
qwt 6. So I'm not moving the default version away from 5.x. Also, not
changing the default allows easy/safe cherry-picking to the stable
branch.

(cherry picked from commit 70b39119c34fe73f4c0e46dfc8eeed8570ec847d)
systemd: Look for fsck.* in the right place

Fixes #2464.

(cherry picked from commit cb45ecad3455e2d420b0117624187ce3ecd4810f)
buildLocalCabal: include cabalInstall to buildDepends to preserve developer experience

(cherry picked from commit 9aa231abfafed902b7a04f28275af6e04460715f)
Fix users.*.extraGroups for users.mutableUsers = true.
switch-to-configuration: Honour RefuseManualStop

This prevents spurious errors about systemd-tmpfiles-setup.service.

Backport: 14.04
(cherry picked from commit bac68f974721f07faebe749df8162f641e5d4528)
sysinit.target: Don't depend on systemd-tmpfiles-setup.service

systemd-tmpfiles-setup.service pulls in local-fs.target, which
interferes with NixOps' send-keys feature (since sshd.service depends
indirectly on sysinit.target). Since in NixOS we don't use
systemd-tmpfiles for creating files (that's done by activation scripts
and preStart scripts), it's not a problem to start it a bit later.

Backport: 14.04
(cherry picked from commit 014fe1a3c3877360b1e43540ccb9242a845bba10)
Don't start getty@tty1 on headless machines (like EC2)

Backport: 14.04
(cherry picked from commit 4a08f3720635b7bb3b46dea80bba491302b16f68)
systemd-journal-flush: Require /var/log/journal rather than all filesystems

Backport: 14.04
(cherry picked from commit 24cbe874d6b97a6471b51bcbca956910d92fea9b)
Don't run hwclock if /dev/rtc doesn't exist

E.g. on EC2 instances.

Backport: 14.04
(cherry picked from commit 5bfe944907b0afcc979e4db7058cbfd884fd029b)
chromium: Link against pulse instead of dlopen().

This fixes the issue of Chromium not being able to load the pulseaudio
librarp

We could also propagate the build inputs, but it would end up being the
same as just directoly linking against the library.

Thanks to @aristidb for noticing this in #2421:

https://github.com/NixOS/nixpkgs/pull/2421#issuecomment-42113656

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
(cherry picked from commit 17807c8b6cb7fd9f50bce98bb4557e202c571325)