Unverified Commit c7e554b5 authored by Masum Reza's avatar Masum Reza Committed by GitHub
Browse files

openclaw: fix update script for insecure package (#500841)

parents 9ebff1eb 1694229b

pkgs/by-name/op/openclaw/package.nix

+1 −2
Original line number Diff line number Diff line
@@ -9,7 +9,6 @@ 
  nodejs_22,

  makeWrapper,

  versionCheckHook,

  nix-update-script,

  rolldown,

  installShellFiles,

  version ? "2026.3.12",
@@ -100,7 +99,7 @@ stdenvNoCC.mkDerivation (finalAttrs: { 
  nativeInstallCheckInputs = [ versionCheckHook ];

  doInstallCheck = true;



  passthru.updateScript = nix-update-script { };

  passthru.updateScript = ./update.sh;



  meta = {

    description = "Self-hosted, open-source AI assistant/agent";

pkgs/by-name/op/openclaw/update.sh

0 → 100755
+8 −0
Original line number Diff line number Diff line 
#!/usr/bin/env nix-shell

#!nix-shell -I nixpkgs=./. -i bash -p nix-update

#shellcheck shell=bash



set -euo pipefail



export NIXPKGS_ALLOW_INSECURE=1 # package has knownVulnerabilities

nix-update "$UPDATE_NIX_ATTR_PATH"