chipsec 0 -> 1 attrpath: chipsec Checking auto update branch... [version] [version] skipping because derivation has updateScript [rustCrateVersion] [rustCrateVersion] No cargoSha256 or cargoHash found [golangModuleVersion] [golangModuleVersion] Not a buildGoModule package with vendorSha256 or vendorHash [npmDepsVersion] [npmDepsVersion] No npmDepsHash [updateScript] [updateScript] Success [updateScript] this derivation will be built: /nix/store/5g5rzsahwbs7g6yg1wcfn6yskkldn9cc-packages.json.drv building '/nix/store/5g5rzsahwbs7g6yg1wcfn6yskkldn9cc-packages.json.drv'... Going to be running update for following packages: - chipsec-1.10.6 Press Enter key to continue... Running update for: - chipsec-1.10.6: UPDATING ... - chipsec-1.10.6: DONE. Packages updated! Diff after rewrites: diff --git a/pkgs/tools/security/chipsec/default.nix b/pkgs/tools/security/chipsec/default.nix index 8842cbab248c..18c13d65de2f 100644 --- a/pkgs/tools/security/chipsec/default.nix +++ b/pkgs/tools/security/chipsec/default.nix @@ -10,15 +10,15 @@ python3.pkgs.buildPythonApplication rec { pname = "chipsec"; - version = "1.10.6"; + version = "1.12.7"; disabled = !stdenv.isLinux; src = fetchFromGitHub { owner = "chipsec"; repo = "chipsec"; - rev = version; - hash = "sha256-+pbFG1SmSO/cnt1e+kel7ereC0I1OCJKKsS0KaJDWdc="; + rev = "refs/tags/${version}"; + hash = "sha256-PFIFp1P5k+BtzxRUsWKloGQO0GnrT9XKlAYxA+8BcRw="; }; patches = lib.optionals withDriver [ ./ko-path.diff ./compile-ko.diff ]; No auto update branch exists Successfully finished processing cachix "/nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7" [check][nixpkgs-review] Result of `nixpkgs-review` run on x86_64-linux [1](https://github.com/Mic92/nixpkgs-review)
1 package marked as broken and skipped:
20 packages failed to build:
1 package built:
Automatic update generated by [nixpkgs-update](https://github.com/ryantm/nixpkgs-update) tools. This update was made based on information from passthru.updateScript. meta.description for chipsec is: Platform Security Assessment Framework meta.homepage for chipsec is: https://github.com/chipsec/chipsec ###### Updates performed - Ran passthru.UpdateScript ###### To inspect upstream changes ###### Impact Checks done --- - built on NixOS - The tests defined in `passthru.tests`, if any, passed - found 1.12.7 with grep in /nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7 - found 1.12.7 in filename of file in /nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7 ---
Rebuild report (if merged into master) (click to expand) ``` 41 total rebuild path(s) 41 package rebuild(s) First fifty rebuilds by attrpath chipsec linuxKernel.packages.linux_4_19.chipsec linuxKernel.packages.linux_4_19_hardened.chipsec linuxKernel.packages.linux_5_10.chipsec linuxKernel.packages.linux_5_10_hardened.chipsec linuxKernel.packages.linux_5_15.chipsec linuxKernel.packages.linux_5_15_hardened.chipsec linuxKernel.packages.linux_5_4.chipsec linuxKernel.packages.linux_5_4_hardened.chipsec linuxKernel.packages.linux_6_1.chipsec linuxKernel.packages.linux_6_1_hardened.chipsec linuxKernel.packages.linux_6_5.chipsec linuxKernel.packages.linux_6_5_hardened.chipsec linuxKernel.packages.linux_6_6.chipsec linuxKernel.packages.linux_6_6_hardened.chipsec linuxKernel.packages.linux_6_7.chipsec linuxKernel.packages.linux_hardened.chipsec linuxKernel.packages.linux_latest_libre.chipsec linuxKernel.packages.linux_libre.chipsec linuxKernel.packages.linux_lqx.chipsec linuxKernel.packages.linux_xanmod.chipsec linuxKernel.packages.linux_xanmod_latest.chipsec linuxKernel.packages.linux_xanmod_stable.chipsec linuxKernel.packages.linux_zen.chipsec linuxPackages-libre.chipsec linuxPackages.chipsec linuxPackages_4_19_hardened.chipsec linuxPackages_5_10_hardened.chipsec linuxPackages_5_15_hardened.chipsec linuxPackages_5_4_hardened.chipsec linuxPackages_6_1_hardened.chipsec linuxPackages_6_5_hardened.chipsec linuxPackages_6_6_hardened.chipsec linuxPackages_hardened.chipsec linuxPackages_latest-libre.chipsec linuxPackages_latest.chipsec linuxPackages_lqx.chipsec linuxPackages_xanmod.chipsec linuxPackages_xanmod_latest.chipsec linuxPackages_xanmod_stable.chipsec linuxPackages_zen.chipsec ```
Instructions to test this update (click to expand) --- Either **download from Cachix**: ``` nix-store -r /nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7 \ --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \ --option trusted-public-keys ' nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= ' ``` (The Cachix cache is only trusted for this store-path realization.) For the Cachix download to work, your user must be in the `trusted-users` list or you can use `sudo` since root is effectively trusted. Or, **build yourself**: ``` nix-build -A chipsec https://github.com/r-ryantm/nixpkgs/archive/4935cc7f8dfe4df6b7568325684f4a84fae072b6.tar.gz ``` Or: ``` nix build github:r-ryantm/nixpkgs/4935cc7f8dfe4df6b7568325684f4a84fae072b6#chipsec ``` After you've downloaded or built it, look at the files and if there are any, run the binaries: ``` ls -la /nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7 ls -la /nix/store/w8wk0yas3awgf3hish8427p5paynni63-chipsec-1.12.7/bin ``` ---

### Pre-merge build results We have automatically built all packages that will get rebuilt due to this change. This gives evidence on whether the upgrade will break dependent packages. Note sometimes packages show up as _failed to build_ independent of the change, simply because they are already broken on the target branch. Result of `nixpkgs-review` run on x86_64-linux [1](https://github.com/Mic92/nixpkgs-review)
1 package marked as broken and skipped:
20 packages failed to build:
1 package built:
--- ###### Maintainer pings cc @JohnAZoidberg @erdnaxe for [testing](https://github.com/ryantm/nixpkgs-update/blob/master/doc/nixpkgs-maintainer-faq.md#r-ryantm-opened-a-pr-for-my-package-what-do-i-do). https://api.github.com/repos/NixOS/nixpkgs/pulls/281903