php.packages.composer: 2.7.6 -> 2.7.7 (#318910)

diff: https://github.com/composer/composer/compare/2.7.6..2.7.7
changelog: https://github.com/composer/composer/releases/tag/2.7.7

Fix: CVE-2024-35241, CVE-2024-35242
This commit is contained in:
Pol Dellaiera 2024-06-11 03:51:50 +02:00 committed by GitHub
parent a53f8b3cd0
commit 8aeb30ae73
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -15,13 +15,13 @@
stdenvNoCC.mkDerivation (finalAttrs: {
pname = "composer";
version = "2.7.6";
version = "2.7.7";
# Hash used by ../../../build-support/php/pkgs/composer-phar.nix to
# use together with the version from this package to keep the
# bootstrap phar file up-to-date together with the end user composer
# package.
passthru.pharHash = "sha256-KdyaGe8zU12wYbMRgLKoM6fPjSz0FFszovg1BId7ugg=";
passthru.pharHash = "sha256-qrlAzVPShaVMUEZYIKIID8txgqS6Hl95Wr+xBBSktL4=";
composer = callPackage ../../../build-support/php/pkgs/composer-phar.nix {
inherit (finalAttrs) version;
@ -32,7 +32,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
owner = "composer";
repo = "composer";
rev = finalAttrs.version;
hash = "sha256-LZwg3PR3zl07Nb6MS8oKkRfjLgqtT/c4sfUOzWE4S+U=";
hash = "sha256-N8el4oyz3ZGIXN2qmpf6Df0SIjuc1GjyuMuQCcR/xN4=";
};
nativeBuildInputs = [ makeBinaryWrapper ];
@ -86,7 +86,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
outputHashMode = "recursive";
outputHashAlgo = "sha256";
outputHash = "sha256-AyX57oV5Jf8U4B9tEl+b2Rnt/Igu7ockEap0wfN9b2Q=";
outputHash = "sha256-AsuiTDXJs7jN4N/dJr10BT2PH0f6K2CWDvI8zQW5L9c=";
};
installPhase = ''