invoice2data 0 -> 1 attrpath: invoice2data Checking auto update branch... [version] [version] skipping because derivation has updateScript [rustCrateVersion] [rustCrateVersion] No cargoSha256 or cargoHash found [golangModuleVersion] [golangModuleVersion] Not a buildGoModule package with vendorSha256 or vendorHash [updateScript] [updateScript] Success [updateScript] this derivation will be built: /nix/store/fgd9g5vrq49hdhy4s15zlzaj79bzin2r-packages.json.drv building '/nix/store/fgd9g5vrq49hdhy4s15zlzaj79bzin2r-packages.json.drv'... Going to be running update for following packages: - invoice2data-0.3.6 Press Enter key to continue... Running update for: - invoice2data-0.3.6: UPDATING ... - invoice2data-0.3.6: DONE. Packages updated! [quotedUrls] [quotedUrls] nothing found to replace Diff after rewrites: diff --git a/pkgs/tools/text/invoice2data/default.nix b/pkgs/tools/text/invoice2data/default.nix index d2348615901..e953c28d9e6 100644 --- a/pkgs/tools/text/invoice2data/default.nix +++ b/pkgs/tools/text/invoice2data/default.nix @@ -8,14 +8,14 @@ python3.pkgs.buildPythonApplication rec { pname = "invoice2data"; - version = "0.3.6"; + version = "0.4.1"; format = "setuptools"; src = fetchFromGitHub { owner = "invoice-x"; repo = pname; - rev = "v${version}"; - sha256 = "sha256-t1jgLyKtQsLINlnkCdSbVfTM6B/EiD1yGtx9UHjyZVE="; + rev = "refs/tags/v${version}"; + sha256 = "sha256-Q7nTtqLXRZ6mI3LMnxtgUdstmdQE8XrYNs+lN51rCcI="; }; nativeBuildInputs = with python3.pkgs; [ No auto update branch exists Received ExitFailure 1 when running Raw command: /nix/store/3nqhcyc7vid1npgcd0m7arg5sn325nhz-nix-2.12.0/bin/nix-build --option sandbox true --arg config "{ allowBroken = true; allowUnfree = true; allowAliases = false; }" --arg overlays "[ ]" -A invoice2data Received ExitFailure 1 when running Raw command: /nix/store/3nqhcyc7vid1npgcd0m7arg5sn325nhz-nix-2.12.0/bin/nix log -f . invoice2data Standard output: error: Package ‘xpdf-4.04’ in /var/cache/nixpkgs-update/worker/worktree/invoice2data/pkgs/applications/misc/xpdf/default.nix:55 is marked as insecure, refusing to evaluate. Known issues: - CVE-2018-7453: loop in PDF objects - CVE-2018-16369: loop in PDF objects - CVE-2019-9587: loop in PDF objects - CVE-2019-9588: loop in PDF objects - CVE-2019-16088: loop in PDF objects You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: For `nix shell`, `nix build`, `nix develop` or any other Nix 2.4+ (Flake) command, `--impure` must be passed in order to read this environment variable. b) for `nixos-rebuild` you can add ‘xpdf-4.04’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "xpdf-4.04" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘xpdf-4.04’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "xpdf-4.04" ]; } (use '--show-trace' to show detailed location information)