cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

python310Packages.automat: don't depend on m2r

Browse source 
The latter depends on an outdated, vulnerable version of mistune.
This commit is contained in:
Robert Schütz 2022-08-11 13:35:18 +00:00
parent db8c23037a
commit d3462c92f9
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
pkgs/development/python-modules/automat/default.nix
View file

@ -1,8 +1,8 @@
{ lib
, buildPythonPackage
, fetchPypi
, fetchpatch
, attrs
, m2r
, pytest-benchmark
, pytestCheckHook
, setuptools-scm
@ -19,8 +19,17 @@ let automat = buildPythonPackage rec {
sha256 = "7979803c74610e11ef0c0d68a2942b152df52da55336e0c9d58daf1831cbdf33";
};
patches = [
# don't depend on m2r
(fetchpatch {
name = "dont-depend-on-m2r.patch";
url = "https://github.com/glyph/automat/compare/v20.2.0..2562fa4ddeba5b5945d9482baa4c26a414f5e831.patch";
includes = [ "setup.py" ];
hash = "sha256-jlPLJMu1QbBpiVYHDiqPydrXjEoZgYZTVVGNxSA0NxY=";
})
];
nativeBuildInputs = [
m2r
setuptools-scm
];