quickjs: 2024-01-13 -> 2025-04-26

Fixes CVE-2025-46687.

https://bellard.org/quickjs/Changelog

+3 -9
+3 -9
pkgs/by-name/qu/quickjs/package.nix
··· 8 8 9 9 stdenv.mkDerivation (finalAttrs: { 10 10 pname = "quickjs"; 11 - version = "2024-01-13"; 11 + version = "2025-04-26"; 12 12 13 13 src = fetchurl { 14 14 url = "https://bellard.org/quickjs/quickjs-${finalAttrs.version}.tar.xz"; 15 - hash = "sha256-PEv4+JW/pUvrSGyNEhgRJ3Hs/FrDvhA2hR70FWghLgM="; 15 + hash = "sha256-LyAHTCUWbvb3gfOBxQ1XtQLLhdRw1jmrzOu+95VMg78="; 16 16 }; 17 17 18 18 outputs = [ ··· 38 38 ''; 39 39 40 40 postBuild = '' 41 + make doc/version.texi 41 42 pushd doc 42 43 makeinfo *texi 43 44 popd ··· 61 62 '' 62 63 set +o pipefail 63 64 qjs --help 2>&1 | grep "QuickJS version" 64 - qjscalc --help 2>&1 | grep "QuickJS version" 65 65 set -o pipefail 66 66 '' 67 67 ··· 93 93 ES2023 specification including modules, asynchronous generators, proxies 94 94 and BigInt. 95 95 96 - It optionally supports mathematical extensions such as big decimal 97 - floating point numbers (BigDecimal), big binary floating point numbers 98 - (BigFloat) and operator overloading. 99 - 100 96 Main Features: 101 97 102 98 - Small and easily embeddable: just a few C files, no external ··· 112 108 - Can compile Javascript sources to executables with no external dependency. 113 109 - Garbage collection using reference counting (to reduce memory usage and 114 110 have deterministic behavior) with cycle removal. 115 - - Mathematical extensions: BigDecimal, BigFloat, operator overloading, 116 - bigint mode, math mode. 117 111 - Command line interpreter with contextual colorization implemented in 118 112 Javascript. 119 113 - Small built-in standard library with C library wrappers.