nixpkgs/pkgs/applications/networking/browsers/firefox/update.nix

{ writeScript
, lib
, xidel
, common-updater-scripts
, coreutils
, gnused
, gnugrep
, curl
, gnupg
, attrPath
, runtimeShell
, baseUrl ? "http://archive.mozilla.org/pub/firefox/releases/"
, versionSuffix ? ""
, versionKey ? "version"
}:

writeScript "update-${attrPath}" ''
  #!${runtimeShell}
  PATH=${lib.makeBinPath [ common-updater-scripts coreutils curl gnugrep gnupg gnused xidel ]}

  set -eux
  HOME=`mktemp -d`
  export GNUPGHOME=`mktemp -d`
  gpg --receive-keys 14F26682D0916CDD81E37B6D61B7B526D98F0353

  url=${baseUrl}

  # retriving latest released version
  #  - extracts all links from the $url
  #  - extracts lines only with number and dots followed by a slash
  #  - removes trailing slash
  #  - sorts everything with semver in mind
  #  - picks up latest release
  version=`xidel -s $url --extract "//a" | \
           grep "^[0-9.]*${versionSuffix}/$" | \
           sed s/[/]$// | \
           sort --version-sort | \
           tail -n 1`

  curl --silent --show-error -o "$HOME"/shasums "$url$version/SHA512SUMS"
  curl --silent --show-error -o "$HOME"/shasums.asc "$url$version/SHA512SUMS.asc"
  gpgv --keyring="$GNUPGHOME"/pubring.kbx "$HOME"/shasums.asc "$HOME"/shasums

  hash=$(grep '\.source\.tar\.xz$' "$HOME"/shasums | grep '^[^ ]*' -o)

  update-source-version ${attrPath} "$version" "$hash" "" --version-key=${versionKey}
''
firefox, thunderbird: Use common-updater/update-source-version script Replace the custom patching code with the common script. Also use callPackage and makeBinPath 2017-01-04 22:38:55 +00:00			`{ writeScript`
			`, lib`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`, xidel`
firefox, thunderbird: Use common-updater/update-source-version script Replace the custom patching code with the common script. Also use callPackage and makeBinPath 2017-01-04 22:38:55 +00:00			`, common-updater-scripts`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`, coreutils`
			`, gnused`
			`, gnugrep`
			`, curl`
firefox: use SHA512SUM in update.nix 2021-05-05 01:59:09 +00:00			`, gnupg`
firefox, thunderbird: Use common-updater/update-source-version script Replace the custom patching code with the common script. Also use callPackage and makeBinPath 2017-01-04 22:38:55 +00:00			`, attrPath`
treewide: use runtimeShell instead of stdenv.shell whenever possible Whenever we create scripts that are installed to $out, we must use runtimeShell in order to get the shell that can be executed on the machine we create the package for. This is relevant for cross-compiling. The only use case for stdenv.shell are scripts that are executed as part of the build system. Usages in checkPhase are borderline however to decrease the likelyhood of people copying the wrong examples, I decided to use runtimeShell as well. 2019-02-26 11:45:54 +00:00			`, runtimeShell`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`, baseUrl ? "http://archive.mozilla.org/pub/firefox/releases/"`
			`, versionSuffix ? ""`
common-updater, firefox: fix updater for firefox 2018-11-16 14:04:54 +00:00			`, versionKey ? "version"`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`}:`

firefox, thunderbird: Use common-updater/update-source-version script Replace the custom patching code with the common script. Also use callPackage and makeBinPath 2017-01-04 22:38:55 +00:00			`writeScript "update-${attrPath}" ''`
treewide: use runtimeShell instead of stdenv.shell whenever possible Whenever we create scripts that are installed to $out, we must use runtimeShell in order to get the shell that can be executed on the machine we create the package for. This is relevant for cross-compiling. The only use case for stdenv.shell are scripts that are executed as part of the build system. Usages in checkPhase are borderline however to decrease the likelyhood of people copying the wrong examples, I decided to use runtimeShell as well. 2019-02-26 11:45:54 +00:00			`#!${runtimeShell}`
firefox: use SHA512SUM in update.nix 2021-05-05 01:59:09 +00:00			`PATH=${lib.makeBinPath [ common-updater-scripts coreutils curl gnugrep gnupg gnused xidel ]}`

			`set -eux`
			HOME=`mktemp -d`
			export GNUPGHOME=`mktemp -d`
firefox/update.nix: Use fingerprint instead of keyid 2021-06-16 15:07:09 +00:00			`gpg --receive-keys 14F26682D0916CDD81E37B6D61B7B526D98F0353`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00
			`url=${baseUrl}`

			`# retriving latest released version`
			`# - extracts all links from the $url`
			`# - extracts lines only with number and dots followed by a slash`
			`# - removes trailing slash`
			`# - sorts everything with semver in mind`
			`# - picks up latest release`
firefox: Fix update.nix 2018-03-14 12:01:25 +00:00			version=`xidel -s $url --extract "//a" \| \
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`grep "^[0-9.]*${versionSuffix}/$" \| \`
			`sed s/[/]$// \| \`
			`sort --version-sort \| \`
			tail -n 1`

firefox: use SHA512SUM in update.nix 2021-05-05 01:59:09 +00:00			`curl --silent --show-error -o "$HOME"/shasums "$url$version/SHA512SUMS"`
			`curl --silent --show-error -o "$HOME"/shasums.asc "$url$version/SHA512SUMS.asc"`
			`gpgv --keyring="$GNUPGHOME"/pubring.kbx "$HOME"/shasums.asc "$HOME"/shasums`

			`hash=$(grep '\.source\.tar\.xz$' "$HOME"/shasums \| grep '^[^ ]*' -o)`

			`update-source-version ${attrPath} "$version" "$hash" "" --version-key=${versionKey}`
firefox, thunderbird: add updateScript 2016-12-25 08:35:20 +00:00			`''`