libhsts: update preload list

+5 -4
+2 -2
pkgs/by-name/li/libhsts/package.nix
··· 9 9 python3, 10 10 }: 11 11 let 12 - chromium_version = "90.0.4417.1"; 12 + chromium_version = "140.0.7324.1"; 13 13 14 14 hsts_list = fetchurl { 15 15 url = "https://raw.github.com/chromium/chromium/${chromium_version}/net/http/transport_security_state_static.json"; 16 - sha256 = "09f24n30x5dmqk8zk7k2glcilgr27832a3304wj1yp97158sqsfx"; 16 + hash = "sha256-XV3yZA3Ai4It7S/y4V0h+UtKm8SXm6x1hlITD7jGY9I="; 17 17 }; 18 18 19 19 in
+3 -2
pkgs/by-name/li/libhsts/update.sh
··· 5 5 6 6 cd "$(dirname "$0")" 7 7 8 - chromium_version=$(curl -s "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name') 8 + chromium_version=$(curl -s ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name') 9 9 sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json") 10 + hash=$(nix hash convert --to sri "$sha256") 10 11 11 12 sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \ 12 - -e "0,/sha256/s/sha256 = \".*\"/sha256 = \"$sha256\"/" \ 13 + -e "0,/hash/s/hash = \".*\"/sha256 = \"$hash\"/" \ 13 14 --in-place ./default.nix