Commit 4828c40e authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

vyper: 0.4.0 -> 0.4.1 

Fixes CVE-2025-21607, CVE-2025-27105, CVE-2025-26622 and CVE-2025-27104.

https://github.com/vyperlang/vyper/releases/tag/v0.4.1
parent 2961e003

pkgs/development/compilers/vyper/default.nix

+5 −4
Original line number Diff line number Diff line 
{

  lib,

  lark,

  asttokens,

  buildPythonPackage,

  cbor2,
@@ -28,21 +29,20 @@ let 
in

buildPythonPackage rec {

  pname = "vyper";

  version = "0.4.0";

  version = "0.4.1";

  pyproject = true;



  disabled = pythonOlder "3.10";



  src = fetchPypi {

    inherit pname version;

    hash = "sha256-locUXGoL9C3lLpIgLOmpE2SNPGV6yOXPubNaEA3EfjQ=";

    hash = "sha256-KiGbiVybWtanEjem+30DpuzKqAD6owujJBiEfjUKleM=";

  };



  postPatch = ''

    # pythonRelaxDeps doesn't work

    substituteInPlace setup.py \

      --replace-fail "setuptools_scm>=7.1.0,<8.0.0" "setuptools_scm>=7.1.0" \

      --replace-fail '"pytest-runner",' ""

      --replace-fail "setuptools_scm>=7.1.0,<8.0.0" "setuptools_scm>=7.1.0"

  '';



  nativeBuildInputs = [
@@ -59,6 +59,7 @@ buildPythonPackage rec { 
  ];



  propagatedBuildInputs = [

    lark

    asttokens

    cbor2

    importlib-metadata