vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

flake: bump nixpkgs 569d5785 -> 5dfba623

Browse source 
The pinned nixpkgs cannot evaluate prettier: its closure carries
pnpm-9.15.9, which is marked insecure for seven CVEs, and the refusal
happens at evaluation. That breaks nix fmt and the formatting flake check
for every language at once, not just prettier's, which is what blocks
wiring prettier into treefmt.

Measured against both pins, prettier.outPath only:

  569d5785  refused, suggesting permittedInsecurePackages
  5dfba623  /nix/store/7ryzvaaks7m71lilhzalcbay57nqqm78-prettier-3.8.3

Prettier is 3.8.3 on both. What moved is the pnpm in its closure, not the
version.

Landed on its own so a two-month pin bump gets its own CI run and its own
bisect point, separate from the treefmt change that needs it.
This commit is contained in:
atlas 2026-09-02 12:44:29 +02:00 • committed by mara
commit d09ecbdc5c
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
flake.lock generated
View file

@ -17,11 +17,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1783856661, "lastModified": 1788187754,
"narHash": "sha256-ZGP04e+Q6WyQJGA9ZvI5CL6+heGQldbAG9U1T9NGvmU=", "narHash": "sha256-bu1QxmXKmPuvBLN7bHP355OV9Qo13x9WCiRDH62CqRM=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "569d578509928497eddc3fdbf94a799027050be4", "rev": "5dfba6236110080a54247d6460bc2ff5dda939cc",
"type": "github" "type": "github"
}, },
"original": { "original": {