From cdc2be189fb966988a6a250c6815d6373eb7ea82 Mon Sep 17 00:00:00 2001 From: Michael Daniels Date: Tue, 2 Dec 2025 19:25:01 -0500 Subject: [PATCH] github-linguist: use dependency nokogiri with patched libxml2 Fixes GHSA-353f-x4gh-cqq8. Tested on x86_64-linux, works well. --- pkgs/by-name/gi/github-linguist/Gemfile.lock | 2 +- pkgs/by-name/gi/github-linguist/gemset.nix | 9 +++------ 2 files changed, 4 insertions(+), 7 deletions(-) diff --git a/pkgs/by-name/gi/github-linguist/Gemfile.lock b/pkgs/by-name/gi/github-linguist/Gemfile.lock index d7bc2ce11774..106752132fd0 100644 --- a/pkgs/by-name/gi/github-linguist/Gemfile.lock +++ b/pkgs/by-name/gi/github-linguist/Gemfile.lock @@ -48,7 +48,7 @@ GEM ruby2_keywords (>= 0.0.5) net-http (0.6.0) uri - nokogiri (1.18.8) + nokogiri (1.18.10) mini_portile2 (~> 2.8.2) racc (~> 1.4) octokit (9.2.0) diff --git a/pkgs/by-name/gi/github-linguist/gemset.nix b/pkgs/by-name/gi/github-linguist/gemset.nix index e309d511c036..eb768588c0c6 100644 --- a/pkgs/by-name/gi/github-linguist/gemset.nix +++ b/pkgs/by-name/gi/github-linguist/gemset.nix @@ -255,17 +255,14 @@ "mini_portile2" "racc" ]; - groups = [ - "default" - "development" - ]; + groups = [ "default" ]; platforms = [ ]; source = { remotes = [ "https://rubygems.org" ]; - sha256 = "0rb306hbky6cxfyc8vrwpvl40fdapjvhsk62h08gg9wwbn3n8x4c"; + sha256 = "1hcwwr2h8jnqqxmf8mfb52b0dchr7pm064ingflb78wa00qhgk6m"; type = "gem"; }; - version = "1.18.8"; + version = "1.18.10"; }; octokit = { dependencies = [