colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #22374 from peterhoeg/f/ruby-tar

Browse Source 
fpm: fix vulnerable dependency
This commit is contained in:
Joachim F 2017-02-04 15:27:32 +01:00 committed by GitHub
commit 664360229e
3 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkgs/tools/package-management/fpm/Gemfile
View File

@ -1,2 +1,4 @@
source 'https://rubygems.org'
gem 'archive-tar-minitar', '>= 0.5.2.1', github: 'peterhoeg/archive-tar-minitar'
gem 'fpm'

10
pkgs/tools/package-management/fpm/Gemfile.lock
View File

@ -1,7 +1,12 @@
GIT
remote: git://github.com/peterhoeg/archive-tar-minitar.git
revision: dae32ca550a87dba32597115ae18805db4782ebe
specs:
archive-tar-minitar (0.5.2.1)
GEM
remote: https://rubygems.org/
specs:
archive-tar-minitar (0.5.2)
arr-pm (0.0.10)
cabin (> 0)
backports (3.6.8)
@ -40,7 +45,8 @@ PLATFORMS
ruby
DEPENDENCIES
archive-tar-minitar (>= 0.5.2.1)!
fpm
BUNDLED WITH
1.12.5
1.14.3

10
pkgs/tools/package-management/fpm/gemset.nix
View File

@ -1,11 +1,13 @@
{
archive-tar-minitar = {
source = {
remotes = ["https://rubygems.org"];
sha256 = "1j666713r3cc3wb0042x0wcmq2v11vwwy5pcaayy5f0lnd26iqig";
type = "gem";
fetchSubmodules = false;
rev = "dae32ca550a87dba32597115ae18805db4782ebe";
sha256 = "0fvxacbcb52fm5dis451kdd7dv74z8p6nm4vnfqf7jg2aghcxdkd";
type = "git";
url = "git://github.com/peterhoeg/archive-tar-minitar.git";
};
version = "0.5.2";
version = "0.5.2.1";
};
arr-pm = {
source = {