Sefa Eyeoglu
4c06da3cb8
https://github.com/pnpm/pnpm/releases/tag/v11.14.0 https://github.com/pnpm/pnpm/releases/tag/v11.15.0 Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
82 lines
2.1 KiB
Nix
82 lines
2.1 KiB
Nix
{
|
|
lib,
|
|
callPackage,
|
|
}:
|
|
let
|
|
inherit (lib) mapAttrs' nameValuePair;
|
|
|
|
variants = {
|
|
"9" = {
|
|
version = "9.15.9";
|
|
hash = "sha256-z4anrXZEBjldQoam0J1zBxFyCsxtk+nc6ax6xNxKKKc=";
|
|
knownVulnerabilities = [
|
|
"CVE-2026-48995"
|
|
"CVE-2026-50014"
|
|
"CVE-2026-50015"
|
|
"CVE-2026-50016"
|
|
"CVE-2026-50017"
|
|
"CVE-2026-50573"
|
|
"CVE-2026-55699"
|
|
"CVE-2026-59194"
|
|
"CVE-2026-59195"
|
|
"CVE-2026-59196"
|
|
];
|
|
};
|
|
# 10.29.3 made a breaking change: https://github.com/pnpm/pnpm/issues/10601.
|
|
# Pnpm packages that depend on electron builder must be upgraded to 26.8.2 or newer
|
|
# otherwise a runtime error will occur when launching the application.
|
|
"10_29_2" = {
|
|
version = "10.29.2";
|
|
hash = "sha256-hAL2daH0zJ1PJ7v6s1wtSi4dfrATHfA9rQlhnoZnTQw=";
|
|
knownVulnerabilities = [
|
|
"CVE-2026-48995"
|
|
"CVE-2026-50014"
|
|
"CVE-2026-50015"
|
|
"CVE-2026-50016"
|
|
"CVE-2026-50017"
|
|
"CVE-2026-50573"
|
|
"CVE-2026-55699"
|
|
"CVE-2026-59194"
|
|
"CVE-2026-59195"
|
|
"CVE-2026-59196"
|
|
];
|
|
};
|
|
# 10.34.1 made a breaking change that causes
|
|
# ERR_PNPM_MISSING_TARBALL_INTEGRITY error for some packages.
|
|
"10_34_0" = {
|
|
version = "10.34.0";
|
|
hash = "sha256-WOFDJYhx31FYm2UcBiBdq+xIdmpdu6PCWZm2m1C+WY4=";
|
|
knownVulnerabilities = [
|
|
"CVE-2026-55487"
|
|
"CVE-2026-55698"
|
|
"CVE-2026-55180"
|
|
"CVE-2026-55697"
|
|
"CVE-2026-59194"
|
|
"CVE-2026-59195"
|
|
"CVE-2026-59196"
|
|
];
|
|
};
|
|
"10" = {
|
|
version = "10.34.5";
|
|
hash = "sha256-zLXEecqxsAYhMlv+fUyaioAx56Ul1ySeJ17L7IGwjbI=";
|
|
};
|
|
"11" = {
|
|
version = "11.15.0";
|
|
hash = "sha256-dy+OAPcZr7viJQJxfPl0V4gEYw0C51frPeu8CKD4+Do=";
|
|
};
|
|
};
|
|
|
|
callPnpm =
|
|
variant:
|
|
callPackage ./generic.nix (
|
|
variant
|
|
// {
|
|
#FIXME: remove this hack in a future version.
|
|
nodejs = null; # Passing null to detect out-of-tree overrides
|
|
}
|
|
);
|
|
|
|
mkPnpm = versionSuffix: variant: nameValuePair "pnpm_${versionSuffix}" (callPnpm variant);
|
|
in
|
|
mapAttrs' mkPnpm variants
|