erigon: 2.31.0 -> 2.34.0

{ lib, buildGoModule, fetchFromGitHub }:

{ lib, buildGoModule, fetchFromGitHub, nix-update-script }:

let

  pinData = lib.importJSON ./pin.json;

in

buildGoModule rec {

  pname = "erigon";

  version = pinData.version;

  version = "2.34.0";

in

buildGoModule {

  inherit pname version;

  src = fetchFromGitHub {

    owner = "ledgerwatch";

    repo = pname;

    rev = "v${version}";

    sha256 = pinData.sha256;

    sha256 = "sha256-oiFPnDzvLdVkGeflqUcB00peZyVLMzsXi7QzOjPlpHo=";

    fetchSubmodules = true;

  };

  vendorSha256 = pinData.vendorSha256;

  vendorSha256 = "sha256-x/ffvbBKzJrssOo+cuWIiwHWu9UfeBHSbgwmLE0340A=";

  proxyVendor = true;

  # Build errors in mdbx when format hardening is enabled:

    "cmd/rlpdump"

  ];

  passthru.updateScript = ./update.sh;

  passthru.updateScript = nix-update-script { };

  meta = with lib; {

    homepage = "https://github.com/ledgerwatch/erigon/";

{

  "version": "2.31.0",

  "sha256": "sha256-+qVfujPKy/HAkMOJQdHI3G1pBoYG2Lhm5BKHrvf3lv0=",

  "vendorSha256": "sha256-XTGbwMEuLBEXP/QAR8RLRPrbvz2ReCLg4tCogbqHiHg="

}

#!/usr/bin/env nix-shell

#! nix-shell -i oil -p jq sd nix-prefetch-github ripgrep

# TODO set to `verbose` or `extdebug` once implemented in oil

shopt --set xtrace

# we need failures inside of command subs to get the correct vendorSha256

shopt --unset inherit_errexit

const directory = $(dirname $0 | xargs realpath)

const owner = "ledgerwatch"

const repo = "erigon"

const latest_rev = $(curl -q https://api.github.com/repos/${owner}/${repo}/releases/latest | \

  jq -r '.tag_name')

const latest_version = $(echo $latest_rev | sd 'v' '')

const current_version = $(jq -r '.version' $directory/pin.json)

if ("$latest_version" === "$current_version") {

  echo "$repo is already up-to-date"

  return 0

} else {

  const tarball_meta = $(nix-prefetch-github $owner $repo --rev "$latest_rev" --fetch-submodules)

  const tarball_hash = "sha256-$(echo $tarball_meta | jq -r '.sha256')"

  jq ".version = \"$latest_version\" | \

      .\"sha256\" = \"$tarball_hash\" | \

      .\"vendorSha256\" = \"\"" $directory/pin.json | sponge $directory/pin.json

  const new_vendor_sha256 = $(nix-build -A erigon 2>&1 | \

    tail -n 2 | \

    head -n 1 | \

    sd '\s+got:\s+' '')

  jq ".vendorSha256 = \"$new_vendor_sha256\"" $directory/pin.json | sponge $directory/pin.json

}