From bdccbabafbb3b22dd861ee71cf090af76f079ec1 Mon Sep 17 00:00:00 2001
From: Defelo <mail@defelo.de>
Date: Fri, 13 Mar 2026 17:32:38 +0100
Subject: [PATCH] sigsum: fix updateScript to ignore pre releases

---
 pkgs/by-name/si/sigsum/package.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/si/sigsum/package.nix b/pkgs/by-name/si/sigsum/package.nix
index b1264add0f63..8a0eb178efb6 100644
--- a/pkgs/by-name/si/sigsum/package.nix
+++ b/pkgs/by-name/si/sigsum/package.nix
@@ -37,7 +37,9 @@ buildGoModule (finalAttrs: {
   versionCheckProgram = "${placeholder "out"}/bin/sigsum-key";
   doInstallCheck = true;
 
-  passthru.updateScript = nix-update-script { };
+  passthru.updateScript = nix-update-script {
+    extraArgs = [ "--version-regex=^v(\\d+\\.\\d+\\.\\d+)$" ];
+  };
 
   meta = {
     description = "System for public and transparent logging of signed checksums";