libsass: 3.6.5 -> 3.6.6

No real changes outside of the security patch we were already using.

Changes:
https://github.com/sass/libsass/compare/3.6.5...3.6.6
This commit is contained in:
Thomas Gerbet 2024-01-16 21:46:46 +01:00
parent 273d8b2808
commit 9c234ddcef

View file

@ -1,7 +1,6 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, autoreconfHook
, testers
@ -13,13 +12,13 @@
stdenv.mkDerivation (finalAttrs: {
pname = "libsass";
version = "3.6.5"; # also check sassc for updates
version = "3.6.6"; # also check sassc for updates
src = fetchFromGitHub {
owner = "sass";
repo = finalAttrs.pname;
rev = finalAttrs.version;
sha256 = "1cxj6r85d5f3qxdwzxrmkx8z875hig4cr8zsi30w6vj23cyds3l2";
hash = "sha256-FkLL3OAJXDptRQY6ZkYbss2pcc40f/wasIvEIyHRQFo=";
# Remove unicode file names which leads to different checksums on HFS+
# vs. other filesystems because of unicode normalisation.
postFetch = ''
@ -27,14 +26,6 @@ stdenv.mkDerivation (finalAttrs: {
'';
};
patches = [
(fetchpatch {
name = "CVE-2022-26592.CVE-2022-43357.CVE-2022-43358.patch";
url = "https://github.com/sass/libsass/pull/3184/commits/5bb0ea0c4b2ebebe542933f788ffacba459a717a.patch";
hash = "sha256-DR6pKFWL70uJt//drzq34LeTzT8rUqgUTpgfUHpD2s4=";
})
];
preConfigure = ''
export LIBSASS_VERSION=${finalAttrs.version}
'';