From 04cc8be59e3622c825b5255f00319e795d887ea9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= Date: Mon, 28 Jul 2025 20:56:20 +0200 Subject: [PATCH] libhsts: update preload list --- pkgs/by-name/li/libhsts/package.nix | 4 ++-- pkgs/by-name/li/libhsts/update.sh | 5 +++-- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/li/libhsts/package.nix b/pkgs/by-name/li/libhsts/package.nix index 7bf3f36b5773..f5fbbb164385 100644 --- a/pkgs/by-name/li/libhsts/package.nix +++ b/pkgs/by-name/li/libhsts/package.nix @@ -9,11 +9,11 @@ python3, }: let - chromium_version = "90.0.4417.1"; + chromium_version = "140.0.7324.1"; hsts_list = fetchurl { url = "https://raw.github.com/chromium/chromium/${chromium_version}/net/http/transport_security_state_static.json"; - sha256 = "09f24n30x5dmqk8zk7k2glcilgr27832a3304wj1yp97158sqsfx"; + hash = "sha256-XV3yZA3Ai4It7S/y4V0h+UtKm8SXm6x1hlITD7jGY9I="; }; in diff --git a/pkgs/by-name/li/libhsts/update.sh b/pkgs/by-name/li/libhsts/update.sh index f80966e08c9a..911f91918332 100755 --- a/pkgs/by-name/li/libhsts/update.sh +++ b/pkgs/by-name/li/libhsts/update.sh @@ -5,9 +5,10 @@ set -euo pipefail -x cd "$(dirname "$0")" -chromium_version=$(curl -s "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name') +chromium_version=$(curl -s ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name') sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json") +hash=$(nix hash convert --to sri "$sha256") sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \ - -e "0,/sha256/s/sha256 = \".*\"/sha256 = \"$sha256\"/" \ + -e "0,/hash/s/hash = \".*\"/sha256 = \"$hash\"/" \ --in-place ./default.nix