vyper: 0.4.0 -> 0.4.1

Fixes CVE-2025-21607, CVE-2025-27105, CVE-2025-26622 and CVE-2025-27104.

https://github.com/vyperlang/vyper/releases/tag/v0.4.1
This commit is contained in:
Thomas Gerbet 2025-04-06 12:56:01 +02:00
parent 2961e00314
commit 4828c40ef4

View file

@ -1,5 +1,6 @@
{
lib,
lark,
asttokens,
buildPythonPackage,
cbor2,
@ -28,21 +29,20 @@ let
in
buildPythonPackage rec {
pname = "vyper";
version = "0.4.0";
version = "0.4.1";
pyproject = true;
disabled = pythonOlder "3.10";
src = fetchPypi {
inherit pname version;
hash = "sha256-locUXGoL9C3lLpIgLOmpE2SNPGV6yOXPubNaEA3EfjQ=";
hash = "sha256-KiGbiVybWtanEjem+30DpuzKqAD6owujJBiEfjUKleM=";
};
postPatch = ''
# pythonRelaxDeps doesn't work
substituteInPlace setup.py \
--replace-fail "setuptools_scm>=7.1.0,<8.0.0" "setuptools_scm>=7.1.0" \
--replace-fail '"pytest-runner",' ""
--replace-fail "setuptools_scm>=7.1.0,<8.0.0" "setuptools_scm>=7.1.0"
'';
nativeBuildInputs = [
@ -59,6 +59,7 @@ buildPythonPackage rec {
];
propagatedBuildInputs = [
lark
asttokens
cbor2
importlib-metadata