From 6327c2998490e1f697df9515a0fc51c6c17966bb Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 26 May 2026 20:17:50 +0200
Subject: [PATCH] thunderbird-unwrapped: 150.0.2 -> 151.0.1

https://www.thunderbird.net/en-US/thunderbird/151.0/releasenotes/
https://www.thunderbird.net/en-US/thunderbird/151.0.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-50/

Fixes:
CVE-2026-8946, CVE-2026-8947, CVE-2026-8948, CVE-2026-8950,
CVE-2026-8952, CVE-2026-8953, CVE-2026-8954, CVE-2026-8955,
CVE-2026-8956, CVE-2026-8957, CVE-2026-8958, CVE-2026-8960,
CVE-2026-8961, CVE-2026-8962, CVE-2026-8963, CVE-2026-8964,
CVE-2026-8965, CVE-2026-8966, CVE-2026-8967, CVE-2026-8968,
CVE-2026-8969, CVE-2026-8970, CVE-2026-8971, CVE-2026-8972,
CVE-2026-8973, CVE-2026-8974, CVE-2026-8975
---
 .../networking/mailreaders/thunderbird/packages.nix   | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
index e8a2b74c4156..8a78d99b79c8 100644
--- a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
@@ -30,11 +30,12 @@ let
         (if lib.versionOlder version "140" then ./no-buildconfig.patch else ./no-buildconfig-tb140.patch)
       ];
       # FIXME: let's hope that upstream will fix this soon and we can drop this hack again.
-      # https://bugzilla.mozilla.org/show_bug.cgi?id=2006630
+      # https://bugzilla.mozilla.org/show_bug.cgi?id=2040877
       extraPostPatch =
-        lib.optionalString (lib.versionAtLeast version "147" && lib.versionOlder version "149")
+        lib.optionalString (lib.versionAtLeast version "151" && lib.versionOlder version "152")
           ''
-            find . -name .cargo-checksum.json | xargs sed 's/"[^"]*\.gitmodules":"[a-z0-9]*",//g' -i
+            echo https://hg.mozilla.org/releases/comm-release/rev/becfb8fb2c70f1603882a2787e2170d5d8013949 >> sourcestamp.txt
+            echo https://hg.mozilla.org/releases/mozilla-release/rev/fc12dc911f904307729760a817deb829cbf8feb4 >> sourcestamp.txt
           '';
 
       meta = {
@@ -73,8 +74,8 @@ rec {
   thunderbird = thunderbird-latest;
 
   thunderbird-latest = common {
-    version = "150.0.2";
-    sha512 = "3e52220ff34aa6cd1bf46a910dba1f30d0abf7d19ed7f501ffeeb8f5901b8d97fdc0adb0cceb434ef8e83c7f7b83f28024b872280237af72ff2da9d89fafe065";
+    version = "151.0.1";
+    sha512 = "a09c1e18faa8d7fdccf39e905542c21e817230e68c7cc6050beec048d0fec0f8eb92e51278d2ccd8d8cfa842762662235517e20238b555a4ad48ee5648dc3589";
 
     updateScript = callPackage ./update.nix {
       attrPath = "thunderbirdPackages.thunderbird-latest";