libhsts: update preload list
This commit is contained in:
@@ -9,11 +9,11 @@
|
||||
python3,
|
||||
}:
|
||||
let
|
||||
chromium_version = "90.0.4417.1";
|
||||
chromium_version = "140.0.7324.1";
|
||||
|
||||
hsts_list = fetchurl {
|
||||
url = "https://raw.github.com/chromium/chromium/${chromium_version}/net/http/transport_security_state_static.json";
|
||||
sha256 = "09f24n30x5dmqk8zk7k2glcilgr27832a3304wj1yp97158sqsfx";
|
||||
hash = "sha256-XV3yZA3Ai4It7S/y4V0h+UtKm8SXm6x1hlITD7jGY9I=";
|
||||
};
|
||||
|
||||
in
|
||||
|
||||
@@ -5,9 +5,10 @@ set -euo pipefail -x
|
||||
|
||||
cd "$(dirname "$0")"
|
||||
|
||||
chromium_version=$(curl -s "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
|
||||
chromium_version=$(curl -s ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
|
||||
sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json")
|
||||
hash=$(nix hash convert --to sri "$sha256")
|
||||
|
||||
sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \
|
||||
-e "0,/sha256/s/sha256 = \".*\"/sha256 = \"$sha256\"/" \
|
||||
-e "0,/hash/s/hash = \".*\"/sha256 = \"$hash\"/" \
|
||||
--in-place ./default.nix
|
||||
|
||||
Reference in New Issue
Block a user