d09ecbdc5c
The pinned nixpkgs cannot evaluate prettier: its closure carries pnpm-9.15.9, which is marked insecure for seven CVEs, and the refusal happens at evaluation. That breaks nix fmt and the formatting flake check for every language at once, not just prettier's, which is what blocks wiring prettier into treefmt. Measured against both pins, prettier.outPath only: 569d5785 refused, suggesting permittedInsecurePackages 5dfba623 /nix/store/7ryzvaaks7m71lilhzalcbay57nqqm78-prettier-3.8.3 Prettier is 3.8.3 on both. What moved is the pnpm in its closure, not the version. Landed on its own so a two-month pin bump gets its own CI run and its own bisect point, separate from the treefmt change that needs it.
64 lines
1.5 KiB
JSON
64 lines
1.5 KiB
JSON
{
|
|
"nodes": {
|
|
"crane": {
|
|
"locked": {
|
|
"lastModified": 1783203018,
|
|
"narHash": "sha256-G6R9IT/xwFuu+CYBWDUAok6AdC4ERC4ZfPPFtEpxnZE=",
|
|
"owner": "ipetkov",
|
|
"repo": "crane",
|
|
"rev": "80db5bdc391be8a1794f6d8a2d56e3a84ebcede2",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "ipetkov",
|
|
"repo": "crane",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1788187754,
|
|
"narHash": "sha256-bu1QxmXKmPuvBLN7bHP355OV9Qo13x9WCiRDH62CqRM=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "5dfba6236110080a54247d6460bc2ff5dda939cc",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-26.05",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"crane": "crane",
|
|
"nixpkgs": "nixpkgs",
|
|
"treefmt-nix": "treefmt-nix"
|
|
}
|
|
},
|
|
"treefmt-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1780220602,
|
|
"narHash": "sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM=",
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"rev": "db947814a175b7ca6ded66e21383d938df01c227",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|