treewide: Comment out webkitgtk_4_0

`webkitgtk_4_0` was already transitively insecure because of `libsoup_2_4` and it will be removed soon.

Ideally, we would just replace it with `libsoup_3`-based `webkitgtk_4_1`
but it is unclear if they would work with the 4.1 ABI. At best, the programs
would only be looking for 4.0, failing to build or start, at worst there
might be conflicts with libsoup 2 symbols if that is pulled in by anything
or crashes that will only happen after certain action.

Let’s mark the packages as broken to ensure human intervention.
This commit is contained in:
Jan Tojnar
2025-10-10 01:11:17 +02:00
parent 87f93d54c5
commit 899fd8a26c
22 changed files with 82 additions and 45 deletions
@@ -54,7 +54,7 @@
symlinkJoin,
systemd,
tzdata,
webkitgtk_4_0,
# webkitgtk_4_0,
which,
xorg,
zlib,
@@ -173,7 +173,7 @@ stdenv.mkDerivation rec {
speex
stdenv.cc.cc
(lib.getLib systemd)
webkitgtk_4_0
# webkitgtk_4_0
xorg.libXScrnSaver
xorg.libXaw
xorg.libXmu
@@ -313,6 +313,8 @@ stdenv.mkDerivation rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
license = licenses.unfree;
description = "Citrix Workspace";
sourceProvenance = with sourceTypes; [ binaryNativeCode ];
+4 -2
View File
@@ -3,7 +3,7 @@
lib,
fetchFromGitHub,
pkg-config,
webkitgtk_4_0,
# webkitgtk_4_0,
openssl,
nodejs,
npmHooks,
@@ -52,13 +52,15 @@ rustPlatform.buildRustPackage rec {
buildInputs = [
openssl
webkitgtk_4_0
# webkitgtk_4_0
gtk3
librsvg
libappindicator-gtk3
];
meta = {
# webkitgtk_4_0 was removed
broken = true;
homepage = "https://github.com/btpf/Alexandria";
changelog = "https://github.com/btpf/Alexandria/releases/tag/v${version}";
description = "Minimalistic cross-platform eBook reader";
+4 -2
View File
@@ -5,7 +5,7 @@
glibc,
gtk3,
libappindicator,
webkitgtk_4_0,
# webkitgtk_4_0,
e2fsprogs,
libnotify,
libgit2,
@@ -67,7 +67,7 @@ buildDotnetModule {
glibc
gtk3
libappindicator
webkitgtk_4_0
# webkitgtk_4_0
e2fsprogs
libnotify
libgit2
@@ -116,6 +116,8 @@ buildDotnetModule {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
homepage = "https://github.com/AM2R-Community-Developers/AM2RLauncher";
description = "Front-end for dealing with AM2R updates and mods";
longDescription = ''
+4 -2
View File
@@ -19,7 +19,7 @@
ninja,
pkg-config,
sqlite,
webkitgtk_4_0,
# webkitgtk_4_0,
wrapGAppsHook3,
}:
@@ -57,7 +57,7 @@ stdenv.mkDerivation (finalAttrs: {
libsecret
openssl
sqlite
webkitgtk_4_0
# webkitgtk_4_0
];
mesonFlags = [
@@ -78,6 +78,8 @@ stdenv.mkDerivation (finalAttrs: {
enableParallelBuilding = true;
meta = {
# webkitgtk_4_0 was removed
broken = true;
description = "E-mail client for GNOME";
homepage = "https://gitlab.gnome.org/GNOME/balsa";
changelog = "https://gitlab.gnome.org/GNOME/balsa/-/blob/master/ChangeLog";
+4 -2
View File
@@ -6,7 +6,7 @@
fetchurl,
desktop-file-utils,
dpkg,
webkitgtk_4_0,
# webkitgtk_4_0,
runScript ? "BitComet",
}:
@@ -15,6 +15,8 @@ let
version = "2.15.0";
meta = {
# webkitgtk_4_0 was removed
broken = true;
homepage = "https://www.bitcomet.com";
description = "BitTorrent download client";
mainProgram = "BitComet";
@@ -82,7 +84,7 @@ buildFHSEnv {
pkgs:
[
bitcomet
webkitgtk_4_0
# webkitgtk_4_0
]
++ appimageTools.defaultFhsEnvArgs.targetPkgs pkgs;
+4 -2
View File
@@ -24,7 +24,7 @@
unar,
unzip,
vala,
webkitgtk_4_0,
# webkitgtk_4_0,
wrapGAppsHook3,
}:
@@ -60,7 +60,7 @@ stdenv.mkDerivation {
poppler
python3
sqlite
webkitgtk_4_0
# webkitgtk_4_0
];
postPatch = ''
@@ -92,6 +92,8 @@ stdenv.mkDerivation {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Simple, focused eBook reader";
mainProgram = "com.github.babluboy.bookworm";
longDescription = ''
+3 -2
View File
@@ -8,7 +8,6 @@
pkg-config,
gtk3,
libsoup_2_4,
webkitgtk_4_0,
}:
rustPlatform.buildRustPackage rec {
@@ -54,7 +53,7 @@ rustPlatform.buildRustPackage rec {
buildInputs = [
gtk3
libsoup_2_4
webkitgtk_4_0
# webkitgtk_4_0
];
postInstall = ''
@@ -74,6 +73,8 @@ rustPlatform.buildRustPackage rec {
];
meta = {
# webkitgtk_4_0 was removed
broken = true;
changelog = "https://github.com/b-inary/desktop-postflop/releases/tag/${src.rev}";
description = "Free, open-source GTO solver for Texas hold'em poker";
homepage = "https://github.com/b-inary/desktop-postflop";
+4 -2
View File
@@ -13,7 +13,7 @@
openssl,
libsoup_2_4,
webkitgtk_4_0,
# webkitgtk_4_0,
gst_all_1,
}:
@@ -52,7 +52,7 @@ rustPlatform.buildRustPackage rec {
buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
openssl
libsoup_2_4
webkitgtk_4_0
# webkitgtk_4_0
gst_all_1.gstreamer
gst_all_1.gst-plugins-base
gst_all_1.gst-plugins-bad
@@ -66,6 +66,8 @@ rustPlatform.buildRustPackage rec {
'';
meta = {
# webkitgtk_4_0 was removed
broken = true;
description = "Ultimate Chess Toolkit";
homepage = "https://github.com/franciscoBSalgueiro/en-croissant/";
license = lib.licenses.gpl3Only;
+4 -2
View File
@@ -14,7 +14,7 @@
libsoup_2_4,
json-glib,
sqlite,
webkitgtk_4_0,
# webkitgtk_4_0,
libmanette,
libXtst,
wrapGAppsHook3,
@@ -50,10 +50,12 @@ stdenv.mkDerivation rec {
libsoup_2_4
libXtst
sqlite
webkitgtk_4_0
# webkitgtk_4_0
];
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
homepage = "https://tkashkin.github.io/projects/gamehub";
description = "Unified library for all your games";
longDescription = ''
+4 -2
View File
@@ -20,7 +20,7 @@
gobject-introspection,
vala,
gtk-doc,
webkitgtk_4_0,
# webkitgtk_4_0,
gtksourceview3,
gspell,
libxml2,
@@ -124,7 +124,7 @@ stdenv.mkDerivation {
gtk3
gtksourceview3
gspell
webkitgtk_4_0
# webkitgtk_4_0
libxml2
goocanvas2
libplist
@@ -137,6 +137,8 @@ stdenv.mkDerivation {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Inform 7 for the Gnome platform";
longDescription = ''
This version of Inform 7 for the Gnome platform was created by Philip Chimento, based on a design by Graham Nelson and Andrew Hunter.
@@ -5,7 +5,7 @@
autoPatchelfHook,
dpkg,
openssl,
webkitgtk_4_0,
# webkitgtk_4_0,
libappindicator,
wrapGAppsHook3,
shared-mime-info,
@@ -30,7 +30,7 @@ stdenv.mkDerivation rec {
buildInputs = [
openssl
webkitgtk_4_0
# webkitgtk_4_0
libappindicator
glib-networking
@@ -52,6 +52,8 @@ stdenv.mkDerivation rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Cross-platform executable that launches a local Holochain conductor, and installs and opens apps";
homepage = "https://github.com/holochain/launcher";
maintainers = [ maintainers.steveej ];
+3 -2
View File
@@ -20,7 +20,6 @@
freetype,
libsoup_2_4,
openssl,
webkitgtk_4_0,
}:
stdenv.mkDerivation rec {
@@ -82,12 +81,14 @@ stdenv.mkDerivation rec {
freetype
libsoup_2_4
openssl
webkitgtk_4_0
# webkitgtk_4_0
];
env.OPENSSL_NO_VENDOR = 1;
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Client UI to inspect Kafka topics, consume, produce and much more";
homepage = "https://github.com/andrewinci/insulator2";
license = licenses.gpl3Only;
+4 -2
View File
@@ -8,7 +8,7 @@
glib,
gtk3,
libgee,
webkitgtk_4_0,
# webkitgtk_4_0,
clutter-gtk,
clutter-gst,
ninja,
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
glib
gtk3
libgee
webkitgtk_4_0
# webkitgtk_4_0
clutter-gtk
clutter-gst
];
@@ -47,6 +47,8 @@ stdenv.mkDerivation (finalAttrs: {
passthru.tests.version = testers.testVersion { package = finalAttrs.finalPackage; };
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Beautiful and customizable wallpaper manager for Linux";
homepage = "https://github.com/Komorebi-Fork/komorebi";
license = licenses.gpl3Only;
@@ -16,7 +16,6 @@
udevCheckHook,
gtk3,
libsoup_2_4,
webkitgtk_4_0,
}:
rustPlatform.buildRustPackage rec {
@@ -49,7 +48,7 @@ rustPlatform.buildRustPackage rec {
# Tauri deps
gtk3
libsoup_2_4
webkitgtk_4_0
# webkitgtk_4_0
];
npmDeps = fetchNpmDeps {
@@ -69,6 +68,8 @@ rustPlatform.buildRustPackage rec {
'';
meta = {
# webkitgtk_4_0 was removed
broken = true;
changelog = "https://github.com/jersou/mouse-actions/blob/${src.rev}/CHANGELOG.md";
description = "Mouse event based command executor, a mix between Easystroke and Comiz edge commands";
homepage = "https://github.com/jersou/mouse-actions";
+4 -2
View File
@@ -7,7 +7,7 @@
alsa-lib,
curl,
gtk3,
webkitgtk_4_0,
# webkitgtk_4_0,
zenity,
}:
@@ -31,7 +31,7 @@ stdenv.mkDerivation rec {
curl
gtk3
(lib.getLib stdenv.cc.cc)
webkitgtk_4_0
# webkitgtk_4_0
zenity
];
@@ -43,6 +43,8 @@ stdenv.mkDerivation rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Player for Mega Drive/Genesis VGM files";
homepage = "https://www.inphonik.com/products/rymcast-genesis-vgm-player/";
sourceProvenance = with sourceTypes; [ binaryNativeCode ];
@@ -7,7 +7,7 @@
installShellFiles,
xorg,
gtk3,
webkitgtk_4_0,
# webkitgtk_4_0,
snippetexpanderd,
snippetexpanderx,
}:
@@ -33,7 +33,7 @@ buildGoModule rec {
buildInputs = [
xorg.libX11
gtk3
webkitgtk_4_0
# webkitgtk_4_0
snippetexpanderd
snippetexpanderx
];
@@ -68,6 +68,8 @@ buildGoModule rec {
'';
meta = {
# webkitgtk_4_0 was removed
broken = true;
description = "Your little expandable text snippet helper GUI";
homepage = "https://snippetexpander.org";
license = lib.licenses.gpl2Plus;
+3 -3
View File
@@ -17,7 +17,6 @@
libopus,
curl,
gtk3,
webkitgtk_4_0,
}:
stdenv.mkDerivation (finalAttrs: {
@@ -45,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
libopus
curl
gtk3
webkitgtk_4_0
# webkitgtk_4_0
];
runtimeDependencies = [
@@ -76,12 +75,13 @@ stdenv.mkDerivation (finalAttrs: {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "High-quality network audio streaming";
homepage = "https://sonobus.net/";
license = with licenses; [ gpl3Plus ];
maintainers = with maintainers; [ PowerUser64 ];
platforms = platforms.unix;
broken = stdenv.hostPlatform.isDarwin;
mainProgram = "sonobus";
};
})
+3 -2
View File
@@ -19,7 +19,6 @@
libsoup_2_4,
openssl,
parallel-disk-usage,
webkitgtk_4_0,
}:
rustPlatform.buildRustPackage rec {
@@ -82,7 +81,7 @@ rustPlatform.buildRustPackage rec {
gtk3
libsoup_2_4
openssl
webkitgtk_4_0
# webkitgtk_4_0
];
# Disable checkPhase, since the project doesn't contain tests
@@ -102,6 +101,8 @@ rustPlatform.buildRustPackage rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Cross-platform disk usage analysis tool";
homepage = "https://www.squirreldisk.com/";
license = licenses.agpl3Only;
+7 -3
View File
@@ -10,7 +10,8 @@
gsettings-desktop-schemas,
gtk2,
libsoup_2_4,
webkitgtk_4_0,
# webkitgtk_4_0,
webkitgtk_4_1,
xorg,
dmenu,
findutils,
@@ -42,7 +43,7 @@ stdenv.mkDerivation rec {
gsettings-desktop-schemas
gtk2
libsoup_2_4
webkitgtk_4_0
# webkitgtk_4_0
]
++ (with gst_all_1; [
# Audio & video support for webkitgtk WebView
@@ -75,6 +76,9 @@ stdenv.mkDerivation rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed. master is supposed to support 4.1
# but it crashes with BadWindow X Error
broken = true;
description = "Simple web browser based on WebKitGTK";
mainProgram = "surf";
longDescription = ''
@@ -85,7 +89,7 @@ stdenv.mkDerivation rec {
'';
homepage = "https://surf.suckless.org";
license = licenses.mit;
platforms = webkitgtk_4_0.meta.platforms;
platforms = webkitgtk_4_1.meta.platforms;
maintainers = with maintainers; [ joachifm ];
};
}
+3 -2
View File
@@ -13,7 +13,6 @@
libXrandr,
libXrender,
libjack2,
webkitgtk_4_0,
}:
stdenv.mkDerivation rec {
@@ -35,7 +34,7 @@ stdenv.mkDerivation rec {
alsa-lib
freetype
libglvnd
webkitgtk_4_0
# webkitgtk_4_0
]
++ runtimeDependencies;
@@ -56,6 +55,8 @@ stdenv.mkDerivation rec {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "ToneLib Zoom change and save all the settings in your Zoom(r) guitar pedal";
homepage = "https://tonelib.net/";
sourceProvenance = with sourceTypes; [ binaryNativeCode ];
+3 -2
View File
@@ -14,7 +14,6 @@
openssl,
pkg-config,
rustPlatform,
webkitgtk_4_0,
}:
let
@@ -75,7 +74,7 @@ rustPlatform.buildRustPackage {
freetype
libsoup_2_4
gtk3
webkitgtk_4_0
# webkitgtk_4_0
];
checkFlags = [
@@ -88,6 +87,8 @@ rustPlatform.buildRustPackage {
'';
meta = with lib; {
# webkitgtk_4_0 was removed
broken = true;
description = "Customizable, modern file manager";
homepage = "https://xplorer.space";
license = licenses.asl20;
@@ -193,7 +193,6 @@ in
addToNativeBuildInputs pkgs.taglib_1 old
);
uuid-lib = addToBuildInputs pkgs.libuuid;
webview = addToBuildInputsWithPkgConfig pkgs.webkitgtk_4_0;
ws-client = addToBuildInputs pkgs.zlib;
xlib = addToPropagatedBuildInputs pkgs.xorg.libX11;
yaml = addToBuildInputs pkgs.libyaml;
@@ -302,6 +301,8 @@ in
sundials = broken;
svn-client = broken;
tokyocabinet = broken;
# webkitgtk_4_0 was removed
webview = broken;
# mark broken darwin