Merge pull request #337296 from emilazy/push-ontozkvqqsxs

turbogit: drop

pkgs/development/tools/turbogit/default.nix

@@ -1,44 +0,0 @@
-{ fetchFromGitHub, buildGoModule, lib, installShellFiles, libgit2, pkg-config }:
-buildGoModule rec {
-  pname = "turbogit";
-  version = "3.1.1";
-
-  src = fetchFromGitHub {
-    owner = "b4nst";
-    repo = pname;
-    rev = "v${version}";
-    sha256 = "sha256-BHgVJlitRUX/9zYPoK5XfRpzzTZRbLhQVZJcx8KVshk=";
-  };
-
-  vendorHash = "sha256-280OcGXZQJD4G6z0b2WnWAS+v7XVptyf2WnlPjG99/0=";
-
-  subPackages = [ "." ];
-
-  buildInputs = [ libgit2 ];
-  nativeBuildInputs = [ installShellFiles pkg-config ];
-  postInstall = ''
-    # Move turbogit binary to tug
-    ln -s $out/bin/turbogit $out/bin/tug
-
-    # Generate completion files
-    mkdir -p share/completions
-    $out/bin/tug completion bash > share/completions/tug.bash
-    $out/bin/tug completion fish > share/completions/tug.fish
-    $out/bin/tug completion zsh > share/completions/tug.zsh
-
-    installShellCompletion share/completions/tug.{bash,fish,zsh}
-  '';
-
-  meta = with lib; {
-    description = "Keep your git workflow clean without headache";
-    longDescription = ''
-      turbogit (tug) is a cli tool built to help you deal with your day-to-day git work.
-      turbogit enforces convention (e.g. The Conventional Commits) but tries to keep things simple and invisible for you.
-      turbogit is your friend.
-    '';
-    homepage = "https://b4nst.github.io/turbogit";
-    license = licenses.mit;
-    platforms = platforms.linux ++ platforms.darwin;
-    maintainers = [ maintainers.yusdacra ];
-  };
-}

pkgs/top-level/aliases.nix

@@ -1510,6 +1510,7 @@ mapAliases ({
   trustedGrub = throw "trustedGrub has been removed, because it is not maintained upstream anymore"; # Added 2023-05-10
   trustedGrub-for-HP = throw "trustedGrub-for-HP has been removed, because it is not maintained upstream anymore"; # Added 2023-05-10
   tumpa = throw "tumpa has been removed, as it is broken"; # Added 2024-07-15
+  turbogit = throw "turbogit has been removed as it is unmaintained upstream and depends on an insecure version of libgit2"; # Added 2024-08-25
   tvbrowser-bin = tvbrowser; # Added 2023-03-02
   typst-fmt = typstfmt; # Added 2023-07-15
   typst-preview = throw "The features of 'typst-preview' have been consolidated to 'tinymist', an all-in-one language server for typst"; # Added 2024-07-07

pkgs/top-level/all-packages.nix

@@ -19129,25 +19129,6 @@ with pkgs;
 
   ttyd = callPackage ../servers/ttyd { };
 
-  turbogit = callPackage ../development/tools/turbogit {
-    libgit2 = libgit2.overrideAttrs rec {
-      version = "1.3.0";
-      src = pkgs.fetchFromGitHub {
-        owner = "libgit2";
-        repo = "libgit2";
-        rev = "v${version}";
-        hash = "sha256-7atNkOBzX+nU1gtFQEaE+EF1L+eex+Ajhq2ocoJY920=";
-      };
-      patches = [];
-      # tests fail on old version
-      doCheck = false;
-      meta = libgit2.meta // {
-        maintainers = [ ];
-        knownVulnerabilities = [ "CVE-2024-24575" "CVE-2024-24577" "CVE-2022-29187" "CVE 2022-24765" ];
-      };
-    };
-  };
-
   tweak = callPackage ../applications/editors/tweak { };
 
   typical = callPackage ../development/tools/misc/typical { };