1#!/usr/bin/env nix-shell
2#!nix-shell -i bash -p curl jq
3
4set -euo pipefail -x
5
6cd "$(dirname "$0")"
7
8chromium_version=$(curl -s "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
9sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json")
10
11sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \
12 -e "0,/sha256/s/sha256 = \".*\"/sha256 = \"$sha256\"/" \
13 --in-place ./default.nix