From 388b7a4dd8b39e67d75d85ca1524d98b5c8ae5dc Mon Sep 17 00:00:00 2001 From: Honbra Date: Thu, 23 Jul 2026 23:43:00 +0200 Subject: [PATCH] =?UTF-8?q?invidious:=202.20260626.0=20=E2=86=92=202.20260?= =?UTF-8?q?723.0=20Fixes=20#544966=20Removes=20patch=20for=20CVE-2026-5844?= =?UTF-8?q?7=20(included=20in=20release)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Release notes: https://github.com/iv-org/invidious/releases/tag/v2.20260723.0 --- pkgs/by-name/in/invidious/package.nix | 10 ---------- pkgs/by-name/in/invidious/versions.json | 8 ++++---- 2 files changed, 4 insertions(+), 14 deletions(-) diff --git a/pkgs/by-name/in/invidious/package.nix b/pkgs/by-name/in/invidious/package.nix index 57d6250fee35..589f0e55d209 100644 --- a/pkgs/by-name/in/invidious/package.nix +++ b/pkgs/by-name/in/invidious/package.nix @@ -3,7 +3,6 @@ callPackage, crystal, fetchFromGitHub, - fetchpatch2, librsvg, pkg-config, libxml2, @@ -42,15 +41,6 @@ crystal.buildCrystalPackage rec { inherit (versions.invidious) hash; }; - patches = [ - # Remove with the first release containing this commit. - (fetchpatch2 { - name = "CVE-2026-58447.patch"; - url = "https://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45.patch?full_index=1"; - hash = "sha256-0pf6eu0ckQ2gYHLr2tEDy+1dvAhVjepG26kuxuHbZl8="; - }) - ]; - postPatch = let # Replacing by the value (templates) of the variables ensures that building diff --git a/pkgs/by-name/in/invidious/versions.json b/pkgs/by-name/in/invidious/versions.json index 74b6e3663d93..bb9e89200c4c 100644 --- a/pkgs/by-name/in/invidious/versions.json +++ b/pkgs/by-name/in/invidious/versions.json @@ -1,9 +1,9 @@ { "invidious": { - "hash": "sha256-xJZjEnSeMnDo37ohtSAI2ucaPPv+nBYdrslHUCL/Pd8=", - "version": "2.20260626.0", - "date": "2026.06.27", - "commit": "ad0bd928" + "hash": "sha256-QV3fN0wwbtds5hoQfPu56rlULe2/xu0Kw9wAS9fszKQ=", + "version": "2.20260723.0", + "date": "2026.07.23", + "commit": "5953859e" }, "videojs": { "hash": "sha256-jED3zsDkPN8i6GhBBJwnsHujbuwlHdsVpVqa1/pzSH4="