Unverified Commit 10d125b9 authored by Bobby Rong's avatar Bobby Rong
Browse files

webkitgtk_6_0: 2.50.6 → 2.52.0 

https://github.com/WebKit/WebKit/compare/webkitgtk-2.50.6...webkitgtk-2.52.0
https://webkitgtk.org/2026/03/18/webkitgtk2.52.0-released.html
https://webkitgtk.org/security/WSA-2026-0001.html

Usage of libwoff2 has been disabled when freetype has woff2 support.
https://bugs.webkit.org/show_bug.cgi?id=257627

Support for libsoup2 has been removed.
https://bugs.webkit.org/show_bug.cgi?id=300163

Fixes CVE-2025-46299.
parent cda48547

pkgs/development/libraries/webkitgtk/default.nix

+3 −6
Original line number Diff line number Diff line
@@ -60,7 +60,6 @@ 
  sqlite,

  gst-plugins-base,

  gst-plugins-bad,

  woff2,

  bubblewrap,

  libseccomp,

  libbacktrace,
@@ -85,7 +84,7 @@ in 
# https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang.

clangStdenv.mkDerivation (finalAttrs: {

  pname = "webkitgtk";

  version = "2.50.6";

  version = "2.52.0";

  name = "webkitgtk-${finalAttrs.version}+abi=${abiVersion}";



  outputs = [
@@ -100,7 +99,7 @@ clangStdenv.mkDerivation (finalAttrs: { 


  src = fetchurl {

    url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz";

    hash = "sha256-Kygav4iU/8YXIVLlZgt17u7b4cxD1ng9Cdx598hlu0I=";

    hash = "sha256-sxxV8YGUrIO6CMm5O77/71en7P9/Qch00XqeeFPcoZ8=";

  };



  patches = lib.optionals clangStdenv.hostPlatform.isLinux [
@@ -145,6 +144,7 @@ clangStdenv.mkDerivation (finalAttrs: { 
    enchant

    expat

    flite

    freetype

    libavif

    libepoxy

    libjxl
@@ -173,12 +173,10 @@ clangStdenv.mkDerivation (finalAttrs: { 
    nettle

    p11-kit

    sqlite

    woff2

  ]

  ++ lib.optionals clangStdenv.hostPlatform.isBigEndian [

    # https://bugs.webkit.org/show_bug.cgi?id=274032

    fontconfig

    freetype

  ]

  ++ lib.optionals clangStdenv.hostPlatform.isDarwin [

    libedit
@@ -221,7 +219,6 @@ clangStdenv.mkDerivation (finalAttrs: { 
    [

      "-DENABLE_INTROSPECTION=ON"

      "-DPORT=GTK"

      "-DUSE_SOUP2=${cmakeBool false}"

      "-DUSE_LIBSECRET=${cmakeBool withLibsecret}"

      "-DENABLE_EXPERIMENTAL_FEATURES=${cmakeBool enableExperimental}"

    ]