libhsts: update preload list

This commit is contained in:
Sandro Jäckel
2025-08-04 00:09:09 +02:00
parent c347717f6a
commit 04cc8be59e
2 changed files with 5 additions and 4 deletions
+2 -2
View File
@@ -9,11 +9,11 @@
python3,
}:
let
chromium_version = "90.0.4417.1";
chromium_version = "140.0.7324.1";
hsts_list = fetchurl {
url = "https://raw.github.com/chromium/chromium/${chromium_version}/net/http/transport_security_state_static.json";
sha256 = "09f24n30x5dmqk8zk7k2glcilgr27832a3304wj1yp97158sqsfx";
hash = "sha256-XV3yZA3Ai4It7S/y4V0h+UtKm8SXm6x1hlITD7jGY9I=";
};
in
+3 -2
View File
@@ -5,9 +5,10 @@ set -euo pipefail -x
cd "$(dirname "$0")"
chromium_version=$(curl -s "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
chromium_version=$(curl -s ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json")
hash=$(nix hash convert --to sri "$sha256")
sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \
-e "0,/sha256/s/sha256 = \".*\"/sha256 = \"$sha256\"/" \
-e "0,/hash/s/hash = \".*\"/sha256 = \"$hash\"/" \
--in-place ./default.nix