
This is a pattern that should be avoided. So far hypothesis is the only package using it if I am correct, let's not add more. Instead, we should solve the underlying issue. That is, we build, install and test within one derivation. That we should split up. Doing this more will only result in trouble. This reverts commit 49e0bbb333ad0f55a8dd24d61c57e4ebde45db08, reversing changes made to 2f2a55496a21b20ae7ad9b8b193c83b90ff8256a.
38 lines
842 B
Nix
38 lines
842 B
Nix
{ lib
|
|
, buildPythonPackage
|
|
, fetchPypi
|
|
, fetchpatch
|
|
, docutils
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "Pygments";
|
|
version = "2.5.2";
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
sha256 = "98c8aa5a9f778fcd1026a17361ddaf7330d1b7c62ae97c3bb0ae73e0b9b6b0fe";
|
|
};
|
|
|
|
patches = [
|
|
(fetchpatch {
|
|
name = "CVE-2021-27291.patch";
|
|
url = "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14.patch";
|
|
sha256 = "0ap7jgkmvkkzijabsgnfrwl376cjsxa4jmzvqysrkwpjq3q4rxpa";
|
|
excludes = ["CHANGES"];
|
|
})
|
|
];
|
|
|
|
propagatedBuildInputs = [ docutils ];
|
|
|
|
# Circular dependency with sphinx
|
|
doCheck = false;
|
|
|
|
meta = {
|
|
homepage = "https://pygments.org/";
|
|
description = "A generic syntax highlighter";
|
|
license = lib.licenses.bsd2;
|
|
maintainers = with lib.maintainers; [ ];
|
|
};
|
|
}
|