From 64274e3429a380ed40d984556ec33db0534a9db0 Mon Sep 17 00:00:00 2001
From: whispers <whispersofthedawn@duck.com>
Date: Thu, 25 Jun 2026 13:41:03 -0400
Subject: [PATCH] expat: 2.8.1 -> 2.8.2

blog: https://blog.hartwork.org/posts/expat-2-8-2-released/
changelog: https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes
diff: https://github.com/libexpat/libexpat/compare/R_2_8_1...R_2_8_2

Fixes: CVE-2026-50219, CVE-2026-56131, CVE-2026-56132, CVE-2026-56403,
       CVE-2026-56404, CVE-2026-56405, CVE-2026-56406, CVE-2026-56407,
       CVE-2026-56408, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411,
       CVE-2026-56412
---
 pkgs/by-name/ex/expat/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ex/expat/package.nix b/pkgs/by-name/ex/expat/package.nix
index 78ff9e9253b0..72459e1c2ac6 100644
--- a/pkgs/by-name/ex/expat/package.nix
+++ b/pkgs/by-name/ex/expat/package.nix
@@ -18,7 +18,7 @@
 # files.
 
 let
-  version = "2.8.1";
+  version = "2.8.2";
   tag = "R_${lib.replaceStrings [ "." ] [ "_" ] version}";
 in
 stdenv.mkDerivation (finalAttrs: {
@@ -29,7 +29,7 @@ stdenv.mkDerivation (finalAttrs: {
     url =
       with finalAttrs;
       "https://github.com/libexpat/libexpat/releases/download/${tag}/${pname}-${version}.tar.xz";
-    hash = "sha256-ELGV7ngWCpCDiBgKj+NgPU6aEvR1X79fOBayOp11DaA=";
+    hash = "sha256-OtibhYjmZEvU5JmBSA1IshKJ7rvNTwoaSvscKfmbarQ=";
   };
 
   strictDeps = true;