diff options
| author | Robert Schütz <nix@dotlambda.de> | 2022-08-11 13:35:18 +0000 |
|---|---|---|
| committer | Robert Schütz <nix@dotlambda.de> | 2022-08-11 13:35:18 +0000 |
| commit | d3462c92f9e8bd09c03ed9620bcfb2ccef62ee3b (patch) | |
| tree | 9892e0486b0a67417fc9800d8c67f6696437f090 | |
| parent | db8c23037a5d162d2cb380300102e5ac9b049ebb (diff) | |
python310Packages.automat: don't depend on m2r
The latter depends on an outdated, vulnerable version of mistune.
| -rw-r--r-- | pkgs/development/python-modules/automat/default.nix | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/pkgs/development/python-modules/automat/default.nix b/pkgs/development/python-modules/automat/default.nix index bb7525d8859a..094015e56f5e 100644 --- a/pkgs/development/python-modules/automat/default.nix +++ b/pkgs/development/python-modules/automat/default.nix @@ -1,8 +1,8 @@ { lib , buildPythonPackage , fetchPypi +, fetchpatch , attrs -, m2r , pytest-benchmark , pytestCheckHook , setuptools-scm @@ -19,8 +19,17 @@ let automat = buildPythonPackage rec { sha256 = "7979803c74610e11ef0c0d68a2942b152df52da55336e0c9d58daf1831cbdf33"; }; + patches = [ + # don't depend on m2r + (fetchpatch { + name = "dont-depend-on-m2r.patch"; + url = "https://github.com/glyph/automat/compare/v20.2.0..2562fa4ddeba5b5945d9482baa4c26a414f5e831.patch"; + includes = [ "setup.py" ]; + hash = "sha256-jlPLJMu1QbBpiVYHDiqPydrXjEoZgYZTVVGNxSA0NxY="; + }) + ]; + nativeBuildInputs = [ - m2r setuptools-scm ]; |