Long-term support for Determinate Secure Packages 25.11
Determinate Systems has announced long-term support for its Determinate Secure Packages (DSP) version 25.11, based on the nixos-25.11 branch of Nixpkgs. The offering includes enhanced security features such as a 7-day SLA for critical CVEs, automated scanning, and cryptographic signing, with support extending until May 2028. Organizations using Nixpkgs 25.11 can transition to DSP 25.11 with a one-line change in their flake configuration.
Opening excerpt (first ~120 words) tap to expand
Today, we’re excited to announce long-term support for Determinate Secure Packagesclass i extends HTMLElement{connectedCallback(){try{const e=this.querySelector("a");if(!e)return;const t=new URL(e.href),n=t.searchParams;e.addEventListener("click",()=>{if(!window.posthog)return;const s=e.href;setTimeout(()=>{e.href=s},500),n.set("phid",window.posthog.get_distinct_id()),e.href=t.toString()})}catch{}}}customElements.define("ph-id",i); (DSP) version 25.11. This variant is based on the nixos-25.11 branch of Nixpkgs but comes with industry-leading support, including: A 7-day SLA for critical CVEs Access to a tool called FlakeBOM that generates Software Bills of Materials (SBOMs) for Nix flakes (more on this new tool soon) Cryptographic signing Automated security scanning All covered packages…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Determinate.