mullvad-vpn: 2025.7 -> 2025.13, fix update.sh (#459265)

pkgs/by-name/mu/mullvad-vpn/package.nix

@@ -67,7 +67,7 @@ let
     systemd
   ];
 
-  version = "2025.7";
+  version = "2025.13";
 
   selectSystem =
     attrs:
@@ -79,8 +79,8 @@ let
   };
 
   hash = selectSystem {
-    x86_64-linux = "sha256-wKmwCLF+H/ByZFYGQMEJT6gmAt2Aa0vZalqaMptPjhU=";
-    aarch64-linux = "sha256-lsHpbxVxThxi+eKY+9c7VcXlDdxBTds6NQKrS0rxt34=";
+    x86_64-linux = "sha256-zgU6pBujCXBhDO9XAqpUSDNuQt5daQ1gVwopXwc0nGo=";
+    aarch64-linux = "sha256-BDrH99li0GWJ+/9QUrHfKxC1JExG3jvd0ujXPKhGM1c=";
   };
 in
 
@@ -158,6 +158,7 @@ stdenv.mkDerivation {
     changelog = "https://github.com/mullvad/mullvadvpn-app/blob/${version}/CHANGELOG.md";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.gpl3Only;
+    mainProgram = "mullvad-vpn";
     platforms = lib.platforms.unix;
     badPlatforms = [ lib.systems.inspect.patterns.isDarwin ];
     maintainers = with lib.maintainers; [

pkgs/by-name/mu/mullvad-vpn/update.sh

@@ -1,24 +1,19 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p curl gnused gawk jq nix-prefetch
+#!nix-shell -i bash -p curl gnused gawk jq nix-prefetch-scripts
 
 set -euo pipefail
 
 ROOT="$(dirname "$(readlink -f "$0")")"
-NIX_DRV="$ROOT/default.nix"
+NIX_DRV="$ROOT/package.nix"
 if [ ! -f "$NIX_DRV" ]; then
-  echo "ERROR: cannot find default.nix in $ROOT"
+  echo "ERROR: cannot find package.nix in $ROOT"
   exit 1
 fi
 
 fetch_arch() {
   VER="$1"; ARCH="$2"
   URL="https://github.com/mullvad/mullvadvpn-app/releases/download/${VER}/MullvadVPN-${VER}_${ARCH}.deb"
-  nix-prefetch "{ stdenv, fetchzip }:
-stdenv.mkDerivation rec {
-  pname = \"mullvad-vpn\"; version = \"${VER}\";
-  src = fetchurl { url = \"$URL\"; };
-}
-"
+  nix-prefetch-url --type sha256 "$URL" | xargs nix-hash --type sha256 --to-sri
 }
 
 replace_sha() {