uv: fix CVE-2025-62518 #454422
uv: fix CVE-2025-62518 #454422
Conversation
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
This report is automatically generated by the PR / Check / cherry-pick CI workflow.
Some of the commits in this PR require the author's and reviewer's attention.
Please follow the backporting guidelines and cherry-pick with the -x flag.
This requires changes to the unstable master and staging branches first, before backporting them.
Occasionally, commits are not cherry-picked at all, for example when updating minor versions of packages which have already advanced to the next major on unstable.
These commits can optionally be marked with a Not-cherry-picked-because: <reason> footer.
If you need to merge this PR despite the warnings, please dismiss this review shortly before merging.
Warning
Couldn't locate original commit hash in message of 000b8ec.
Hint: The full diffs are also available in the runner logs with slightly better highlighting.
Prince213
added
1.severity: security
nixpkgs-ci
bot
added
10.rebuild-linux: 501+
dotlambda
dismissed
github-actions[bot]’s stale review
We patch rather than bump the version.
Prince213
force-pushed
the
push-tstwnztkywvs
branch
from
000b8ec to
b36e88b
Compare
There was a problem hiding this comment.
This report is automatically generated by the PR / Check / cherry-pick CI workflow.
Some of the commits in this PR require the author's and reviewer's attention.
Please follow the backporting guidelines and cherry-pick with the -x flag.
This requires changes to the unstable master and staging branches first, before backporting them.
Occasionally, commits are not cherry-picked at all, for example when updating minor versions of packages which have already advanced to the next major on unstable.
These commits can optionally be marked with a Not-cherry-picked-because: <reason> footer.
If you need to merge this PR despite the warnings, please dismiss this review shortly before merging.
Warning
Couldn't locate original commit hash in message of a1d2687.
Hint: The full diffs are also available in the runner logs with slightly better highlighting.
Prince213
force-pushed
the
push-tstwnztkywvs
branch
from
b36e88b to
a1d2687
Compare
Prince213
left a comment
Prince213
left a comment
There was a problem hiding this comment.
Built on x86_64-linux:
/nix/store/y6k316mbyp9g4m2m0j09m15y24c6yxc6-uv-0.7.22
/nix/store/fa6daxbcalxx6nj67ixmfbin108i65nm-python3.12-uv-0.7.22
/nix/store/gp400286199h6pvgwv0sp54gx7p9vmc4-python3.12-uv-build-0.7.22
We patch rather than bump the version.
nixpkgs-ci
bot
added
the
12.approvals: 1
nixpkgs-ci
bot
added
12.approvals: 2
b0a2466
4 participants
Related to:
Things done
passthru.tests.nixpkgs-reviewon this PR. See nixpkgs-review usage../result/bin/.Add a 👍 reaction to pull requests you find important.