public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #22374 from peterhoeg/f/ruby-tar

Browse Source 
fpm: fix vulnerable dependency
This commit is contained in:
Joachim F 2017-02-04 15:27:32 +01:00 committed by GitHub
commit 664360229e
3 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/tools/package-management/fpm/Gemfile
View File

@ -1,2 +1,4 @@
source 'https://rubygems.org' source 'https://rubygems.org'
gem 'archive-tar-minitar', '>= 0.5.2.1', github: 'peterhoeg/archive-tar-minitar'
gem 'fpm' gem 'fpm'

10
pkgs/tools/package-management/fpm/Gemfile.lock
View File

@ -1,7 +1,12 @@
GIT
remote: git://github.com/peterhoeg/archive-tar-minitar.git
revision: dae32ca550a87dba32597115ae18805db4782ebe
specs:
archive-tar-minitar (0.5.2.1)
GEM GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
archive-tar-minitar (0.5.2)
arr-pm (0.0.10) arr-pm (0.0.10)
cabin (> 0) cabin (> 0)
backports (3.6.8) backports (3.6.8)
@ -40,7 +45,8 @@ PLATFORMS
ruby ruby
DEPENDENCIES DEPENDENCIES
archive-tar-minitar (>= 0.5.2.1)!
fpm fpm
BUNDLED WITH BUNDLED WITH
1.12.5 1.14.3

10
pkgs/tools/package-management/fpm/gemset.nix
View File

@ -1,11 +1,13 @@
{ {
archive-tar-minitar = { archive-tar-minitar = {
source = { source = {
remotes = ["https://rubygems.org"]; fetchSubmodules = false;
sha256 = "1j666713r3cc3wb0042x0wcmq2v11vwwy5pcaayy5f0lnd26iqig"; rev = "dae32ca550a87dba32597115ae18805db4782ebe";
type = "gem"; sha256 = "0fvxacbcb52fm5dis451kdd7dv74z8p6nm4vnfqf7jg2aghcxdkd";
type = "git";
url = "git://github.com/peterhoeg/archive-tar-minitar.git";
}; };
version = "0.5.2"; version = "0.5.2.1";
}; };
arr-pm = { arr-pm = {
source = { source = {