nixpkgs-review: 2.8.0 -> 2.9.0

, fetchFromGitHub

, bubblewrap

, nix-output-monitor

, cacert

, git

, nix

, withSandboxSupport ? false

, withNom ? false

}:

python3.pkgs.buildPythonApplication rec {

  pname = "nixpkgs-review";

  version = "2.8.0";

  version = "2.9.0";

  src = fetchFromGitHub {

    owner = "Mic92";

    repo = "nixpkgs-review";

    rev = version;

    sha256 = "sha256-v8IRRmONb10sPndfsuaUYMrGbbosj48cbfgANZCtIN0=";

    sha256 = "sha256-SNAroKkPXiX5baGPRYnzqiVwPwko/Uari/tvjIU7/4k=";

  };

  makeWrapperArgs =

    let

      binPath = [ nix git ] ++ lib.optional withSandboxSupport bubblewrap;

      binPath = [ nix git ]

        ++ lib.optional withSandboxSupport bubblewrap

        ++ lib.optional withNom nix-output-monitor;

    in

    [

      "--prefix PATH : ${lib.makeBinPath binPath}"

      "--set NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt"

      "--set-default NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt"

      # we don't have any runtime deps but nix-review shells might inject unwanted dependencies

      "--unset PYTHONPATH"

    ];