mirror of
https://relay.ngit.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp.git
synced 2026-10-30 02:57:34 +00:00
DanConwayDev
a5ef140320
The published v3.0.9 static archive embeds OpenSSL 3.6.2, which predates September's security fixes including CVE-2026-35189. Cargo audit cannot find this because OpenSSL comes from Nix rather than openssl-src. Refresh only the nixpkgs pin to the current unstable snapshot, selecting OpenSSL 3.5.9 LTS for dynamic packages and static release archives. Preserve Cargo features and the existing platform trust-store policy. Module consumers still select their deployment's nixpkgs; Docker uses Debian packages. Document those independent operator responsibilities. Validation: input evaluation selects 3.5.9 and the static derivation selects its musl development package. Release scripts, release CLI and crate-toolchain checks pass. Full Rust tests and application release builds are in progress. Published artifacts and deployments are unchanged. The publisher CLI's separate old OpenSSL remains a publication gate. Assisted-by: GPT-6
224 lines
5.8 KiB
JSON
224 lines
5.8 KiB
JSON
{
|
|
"nodes": {
|
|
"buzz": {
|
|
"inputs": {
|
|
"fenix": "fenix",
|
|
"flake-utils": "flake-utils_2",
|
|
"nixpkgs": [
|
|
"release-ngit",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1786638365,
|
|
"narHash": "sha256-khxer2U61lEoSaZjeEks1rZwvELsLALLY+IBGs0mGJ0=",
|
|
"owner": "danconwaydev",
|
|
"repo": "buzz",
|
|
"rev": "b12739b23da92b0f1e99626b02749ab55c51b8ce",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "danconwaydev",
|
|
"repo": "buzz",
|
|
"rev": "b12739b23da92b0f1e99626b02749ab55c51b8ce",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"crane": {
|
|
"locked": {
|
|
"lastModified": 1785782307,
|
|
"narHash": "sha256-MPaRdVkf6zZP5fCPxYCi8Dr4pZzgmXzg8T9nVEbp3Mw=",
|
|
"owner": "ipetkov",
|
|
"repo": "crane",
|
|
"rev": "2c71e194474d13de031d729b729c968ddbe3507f",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "ipetkov",
|
|
"repo": "crane",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"fenix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"release-ngit",
|
|
"buzz",
|
|
"nixpkgs"
|
|
],
|
|
"rust-analyzer-src": "rust-analyzer-src"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1786606848,
|
|
"narHash": "sha256-RS78j/7iFHjIMzTr9bS3PypjvPozHBfdR5xBJ+ABXXA=",
|
|
"owner": "nix-community",
|
|
"repo": "fenix",
|
|
"rev": "3df888be63045c349a6d322f0214f1346bb18be9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "fenix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-utils": {
|
|
"inputs": {
|
|
"systems": "systems"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1731533236,
|
|
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-utils_2": {
|
|
"inputs": {
|
|
"systems": "systems_2"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1731533236,
|
|
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1793110635,
|
|
"narHash": "sha256-dhoW6VgFWlaodSY5jrBn+CF2FLmaUvDVgM7+C7T2+NM=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "31ecbaca1bdefa45dffc409f0250bd8039ea0010",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-unstable",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"release-ngit": {
|
|
"inputs": {
|
|
"buzz": "buzz",
|
|
"flake-utils": "flake-utils",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
],
|
|
"rust-overlay": [
|
|
"rust-overlay"
|
|
]
|
|
},
|
|
"locked": {
|
|
"allRefs": true,
|
|
"lastModified": 1790023723,
|
|
"narHash": "sha256-EjS0HAsRK8ARl4Km48qAunEY9bLha4DFbaaLax+SS8I=",
|
|
"ref": "refs/heads/main",
|
|
"rev": "31e48be58ee3fa2e3c56b1df68b6358c385d5e91",
|
|
"revCount": 1763,
|
|
"type": "git",
|
|
"url": "https://relay.ngit.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit.git"
|
|
},
|
|
"original": {
|
|
"allRefs": true,
|
|
"rev": "31e48be58ee3fa2e3c56b1df68b6358c385d5e91",
|
|
"type": "git",
|
|
"url": "https://relay.ngit.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit.git"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"crane": "crane",
|
|
"nixpkgs": "nixpkgs",
|
|
"release-ngit": "release-ngit",
|
|
"rust-overlay": "rust-overlay"
|
|
}
|
|
},
|
|
"rust-analyzer-src": {
|
|
"flake": false,
|
|
"locked": {
|
|
"lastModified": 1786530578,
|
|
"narHash": "sha256-fCOcC64H7e0EIlIHTCsl5FQ9CW4S6VK3OLn1ugWR9zI=",
|
|
"owner": "rust-lang",
|
|
"repo": "rust-analyzer",
|
|
"rev": "068bb508581477a5e3f753e1e206d34288dfa9c9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "rust-lang",
|
|
"ref": "nightly",
|
|
"repo": "rust-analyzer",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"rust-overlay": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1781580018,
|
|
"narHash": "sha256-BlTedbM77FmesD2ZqR73vhFy+y77UrhefV7IYw1pDsk=",
|
|
"owner": "oxalica",
|
|
"repo": "rust-overlay",
|
|
"rev": "8bceba21a1ebea535c27c4dc723a0d5a4db9e386",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "oxalica",
|
|
"repo": "rust-overlay",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems_2": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|