From 7c5d9345ad7cc38832cd4007f5cd03daad64d75b Mon Sep 17 00:00:00 2001
From: Benedikt Rips <benedikt.rips@gmail.com>
Date: Sat, 10 Jan 2026 00:18:52 +0100
Subject: [PATCH] news: add 'services.ssh-agent.pkcs11Whitelist' entry

---
 modules/misc/news/2026/01/2026-01-10_00-16-48.nix | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 modules/misc/news/2026/01/2026-01-10_00-16-48.nix

diff --git a/modules/misc/news/2026/01/2026-01-10_00-16-48.nix b/modules/misc/news/2026/01/2026-01-10_00-16-48.nix
new file mode 100644
index 00000000..3c64b931
--- /dev/null
+++ b/modules/misc/news/2026/01/2026-01-10_00-16-48.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+{
+  time = "2026-01-09T23:16:48+00:00";
+  condition = config.services.ssh-agent.enable;
+  message = ''
+    There is a new 'services.ssh-agent.pkcs11Whitelist' option to whitelist
+    PKCS#11 and FIDO authenticators.
+  '';
+}