+2
-2
maintainers/scripts/copy-tarballs.pl
+2
-2
maintainers/scripts/copy-tarballs.pl
······+$hash = `nix --extra-experimental-features nix-command hash to-base16 --type '$algo' $hash` or die;
+2
-2
pkgs/applications/audio/reaper/updater.sh
+2
-2
pkgs/applications/audio/reaper/updater.sh
···pkg_hash=$(nix-prefetch-url https://www.reaper.fm/files/${reaper_ver%.*}.x/reaper${reaper_ver/./}_linux_$arch.tar.xz)update-source-version reaper "${reaper_ver}" "$pkg_hash" --system=$arch-linux --ignore-same-versionpkg_hash=$(nix-prefetch-url https://www.reaper.fm/files/${reaper_ver%.*}.x/reaper${reaper_ver/./}_universal.dmg)update-source-version reaper "${reaper_ver}" "$pkg_hash" --system=$arch-darwin --ignore-same-version
+1
-1
pkgs/applications/blockchains/teos/update.sh
+1
-1
pkgs/applications/blockchains/teos/update.sh
···(cd "$nixpkgs" && update-source-version teos "$version" "$hashcheck" && update-source-version teos --ignore-same-version --source-key=cargoDeps)
+2
-2
pkgs/applications/editors/cudatext/update.sh
+2
-2
pkgs/applications/editors/cudatext/update.sh
······jq ".\"${repo}\".rev = \"${latest}\" | .\"${repo}\".hash = \"${sriHash}\"" deps.json | sponge deps.json
+1
-1
pkgs/applications/editors/vscode/extensions/_maintainers/update-bin-srcs-lib.sh
+1
-1
pkgs/applications/editors/vscode/extensions/_maintainers/update-bin-srcs-lib.sh
···+unpackedSha256="$(nix --extra-experimental-features nix-command hash path --base32 --type sha256 "$unpackedStorePath")"
+1
-1
pkgs/applications/editors/vscode/extensions/ms-vscode.cpptools/update_helper.sh
+1
-1
pkgs/applications/editors/vscode/extensions/ms-vscode.cpptools/update_helper.sh
···+cpptoolsSha256="$(nix --extra-experimental-features nix-command hash path --base32 --type sha512 "$cpptoolsStorePath")"
+1
-1
pkgs/applications/editors/vscode/update-vscode.sh
+1
-1
pkgs/applications/editors/vscode/update-vscode.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix eval --raw -f . vscode.src.url --system "$system")))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix eval --raw -f . vscode.src.url --system "$system")))update-source-version vscode $latestVersion $hash --system=$system --ignore-same-version --ignore-same-hash
+1
-1
pkgs/applications/editors/vscode/update-vscodium.sh
+1
-1
pkgs/applications/editors/vscode/update-vscodium.sh
···-hash=$(nix hash convert --hash-algo sha256 --to sri $(nix-prefetch-url "https://github.com/VSCodium/vscodium/releases/download/$latestVersion/VSCodium-$2-$latestVersion.$3"))+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(nix-prefetch-url "https://github.com/VSCodium/vscodium/releases/download/$latestVersion/VSCodium-$2-$latestVersion.$3"))
+1
-1
pkgs/applications/graphics/tesseract/fetch-language-hashes
+1
-1
pkgs/applications/graphics/tesseract/fetch-language-hashes
···+hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url $url 2>/dev/null))
+2
-2
pkgs/applications/networking/browsers/librewolf/update.nix
+2
-2
pkgs/applications/networking/browsers/librewolf/update.nix
···+srcHash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(jq -r .sha256 < $prefetchOut))···-ffHash=$(nix hash convert --to sri --hash-algo sha512 $(grep '\.source\.tar\.xz$' "$HOME"/shasums | grep '^[^ ]*' -o))+ffHash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha512 $(grep '\.source\.tar\.xz$' "$HOME"/shasums | grep '^[^ ]*' -o))
+1
-1
pkgs/applications/networking/cluster/timoni/update.sh
+1
-1
pkgs/applications/networking/cluster/timoni/update.sh
···-NEXT_HASH=$(nix hash to-sri --type sha256 $(nix-prefetch-url --unpack --type sha256 $(nix eval --raw -f $NIXPKGS_ROOT/default.nix $ATTR.src.url)))+NEXT_HASH=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --unpack --type sha256 $(nix eval --raw -f $NIXPKGS_ROOT/default.nix $ATTR.src.url)))
+1
-1
pkgs/by-name/at/atlassian-plugin-sdk/package.nix
+1
-1
pkgs/by-name/at/atlassian-plugin-sdk/package.nix
···DOWNLOAD_URL="${mavenGroupIdUrl}/atlassian-plugin-sdk/${version}/atlassian-plugin-sdk-$NEW_VERSION.tar.gz"+NIX_HASH=$(nix --extra-experimental-features nix-command hash to-sri sha256:$(nix-prefetch-url $DOWNLOAD_URL))
+1
-1
pkgs/by-name/ba/balatro/package.nix
+1
-1
pkgs/by-name/ba/balatro/package.nix
···+# Use `nix --extra-experimental-features nix-command hash file --sri --type sha256` to get the correct hash
+1
-1
pkgs/by-name/be/beekeeper-studio/update.sh
+1
-1
pkgs/by-name/be/beekeeper-studio/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url "$(nix eval -f . --raw beekeeper-studio.src.url --system aarch64-linux)"))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url "$(nix eval -f . --raw beekeeper-studio.src.url --system aarch64-linux)"))
+2
-2
pkgs/by-name/bi/bilibili/update.sh
+2
-2
pkgs/by-name/bi/bilibili/update.sh
···+amd64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$amd64_hash")+arm64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$arm64_hash")
+1
-1
pkgs/by-name/bl/bloomeetunes/update.sh
+1
-1
pkgs/by-name/bl/bloomeetunes/update.sh
···-hash=$(nix hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/HemantKArya/BloomeeTunes/archive/refs/tags/${latestTag}.tar.gz"))+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/HemantKArya/BloomeeTunes/archive/refs/tags/${latestTag}.tar.gz"))
+1
-1
pkgs/by-name/bo/boundary/update.sh
+1
-1
pkgs/by-name/bo/boundary/update.sh
···
+3
-3
pkgs/by-name/bu/buck2/update.sh
+3
-3
pkgs/by-name/bu/buck2/update.sh
···+PRELUDE_SRIHASH="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$PRELUDE_SHA256HASH")"···sha256hash="$(nix-prefetch-url --type sha256 "https://github.com/facebook/buck2/releases/download/${VERSION}/buck2-${arch_target}.zst")"+srihash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$sha256hash")"sha256hash="$(nix-prefetch-url --type sha256 "https://github.com/facebook/buck2/releases/download/${VERSION}/rust-project-${arch_target}.zst")"+srihash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$sha256hash")"
+1
-1
pkgs/by-name/bu/buckets/package.nix
+1
-1
pkgs/by-name/bu/buckets/package.nix
···+# nix-prefetch-url <url> | xargs nix --extra-experimental-features nix-command hash convert --hash-algo sha256
+1
-1
pkgs/by-name/ch/chatgpt/update.sh
+1
-1
pkgs/by-name/ch/chatgpt/update.sh
···LATEST_VERSION=$(echo "$XML_DATA" | xmllint --xpath '/rss/channel/item[1]/*[local-name()="shortVersionString"]/text()' -)+HASH=$(nix-prefetch-url $DOWNLOAD_URL | xargs nix --extra-experimental-features nix-command hash convert --hash-algo sha256)
+1
-1
pkgs/by-name/cl/clojure-lsp/package.nix
+1
-1
pkgs/by-name/cl/clojure-lsp/package.nix
···old_jar_hash="$(nix-instantiate --strict --json --eval -A clojure-lsp.jar.drvAttrs.outputHash | jq -r .)"curl -o clojure-lsp-standalone.jar -sL "https://github.com/clojure-lsp/clojure-lsp/releases/download/$latest_version/clojure-lsp-standalone.jar"-new_jar_hash="$(nix-hash --flat --type sha256 clojure-lsp-standalone.jar | xargs -n1 nix hash convert --hash-algo sha256)"+new_jar_hash="$(nix-hash --flat --type sha256 clojure-lsp-standalone.jar | xargs -n1 nix --extra-experimental-features nix-command hash convert --hash-algo sha256)"
+1
-1
pkgs/by-name/co/coder/update.sh
+1
-1
pkgs/by-name/co/coder/update.sh
···+local SRI_HASH=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $NEW_HASH)
+1
-1
pkgs/by-name/co/confluent-cli/update.sh
+1
-1
pkgs/by-name/co/confluent-cli/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/$latestVersion/confluent_${latestVersion}_$2.tar.gz"))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/$latestVersion/confluent_${latestVersion}_$2.tar.gz"))
+1
-1
pkgs/by-name/cr/crc/update.sh
+1
-1
pkgs/by-name/cr/crc/update.sh
···CRC_GIT_PREFETCH=$(nix-prefetch-url --unpack https://github.com/crc-org/crc/archive/${CRC_COMMIT}.tar.gz)+CRC_GIT_HASH=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 ${CRC_GIT_PREFETCH})
+1
-1
pkgs/by-name/db/dbgate/update.sh
+1
-1
pkgs/by-name/db/dbgate/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; dbgate.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; dbgate.src.url" --system "$system" | tr -d '"')))
+1
-1
pkgs/by-name/de/dependabot-cli/update.sh
+1
-1
pkgs/by-name/de/dependabot-cli/update.sh
···SHA256="$(nix-prefetch-url --quiet --unpack https://github.com/dependabot/cli/archive/refs/tags/v${VERSION}.tar.gz)"+HASH="$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$SHA256")"nix-prefetch-docker --json --quiet --final-image-name dependabot-update-job-proxy --final-image-tag "nixpkgs-dependabot-cli-$VERSION" ghcr.io/github/dependabot-update-job-proxy/dependabot-update-job-proxy latest > "$temp_dir/dependabot-update-job-proxy.json"
+1
-1
pkgs/by-name/dr/draupnir/update.sh
+1
-1
pkgs/by-name/dr/draupnir/update.sh
···curl https://raw.githubusercontent.com/the-draupnir-project/Draupnir/v$latestVersion/yarn.lock -o yarn.lock+NEW_YARN_OFFLINE_HASH=`nix --extra-experimental-features nix-command hash to-sri --type sha256 $TMP_PREFETCH_HASH`
+1
-1
pkgs/by-name/du/duplicati/package.nix
+1
-1
pkgs/by-name/du/duplicati/package.nix
···-# nix hash convert --to sri "sha256:`nix-prefetch-url --unpack https://updates.duplicati.com/stable/duplicati-2.1.0.5_stable_2025-03-04-linux-arm64-cli.zip`"+# nix --extra-experimental-features nix-command hash convert --to sri "sha256:`nix-prefetch-url --unpack https://updates.duplicati.com/stable/duplicati-2.1.0.5_stable_2025-03-04-linux-arm64-cli.zip`"
+1
-1
pkgs/by-name/dy/dynamodb-local/package.nix
+1
-1
pkgs/by-name/dy/dynamodb-local/package.nix
···DOWNLOAD_URL="https://d1ni2b6xgvw0s0.cloudfront.net/v2.x/dynamodb_local_$NEW_VERSION_DATE.tar.gz"+NIX_HASH=$(nix --extra-experimental-features nix-command hash to-sri sha256:$(nix-prefetch-url $DOWNLOAD_URL))
+1
-1
pkgs/by-name/el/electrs/update.sh
+1
-1
pkgs/by-name/el/electrs/update.sh
···(cd "$nixpkgs" && update-source-version electrs "$version" "$hash" && update-source-version electrs --ignore-same-version --source-key=cargoDeps)
+1
-1
pkgs/by-name/en/envoy-bin/update.sh
+1
-1
pkgs/by-name/en/envoy-bin/update.sh
···URL="https://github.com/envoyproxy/envoy/releases/download/v${VER}/envoy-${VER}-linux-${ARCH}"+nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$(nix-prefetch-url --type sha256 "$URL")"
+1
-1
pkgs/by-name/fe/feishu/package.nix
+1
-1
pkgs/by-name/fe/feishu/package.nix
···update_link=$(echo $package_info | jq -r '.data.download_link' | sed 's/lf[0-9]*-ug-sign.feishucdn.com/sf3-cn.feishucdn.com\/obj/;s/?.*$//')+sri_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $sha256_hash)update-source-version feishu $new_version $sri_hash $update_link --system=$platform --ignore-same-version --source-key="sources.$platform"
+2
-2
pkgs/by-name/fi/fishnet/update.bash
+2
-2
pkgs/by-name/fi/fishnet/update.bash
······nix-prefetch-url --type sha256 "https://tests.stockfishchess.org/api/nn/${new_nnue_small_file}"
+3
-3
pkgs/by-name/fl/fluxcd/update.sh
+3
-3
pkgs/by-name/fl/fluxcd/update.sh
···SRC_SHA256=$(nix-prefetch-url --quiet --unpack "https://github.com/fluxcd/flux2/archive/refs/tags/${LATEST_TAG}.tar.gz")+SRC_HASH=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$SRC_SHA256")MANIFESTS_SHA256=$(nix-prefetch-url --quiet --unpack "https://github.com/fluxcd/flux2/releases/download/${LATEST_TAG}/manifests.tar.gz")+MANIFESTS_HASH=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$MANIFESTS_SHA256")···VENDOR_SHA256=$(nix-build --no-out-link -A fluxcd "$NIXPKGS_PATH" 2>&1 >/dev/null | grep "got:" | cut -d':' -f2 | sed 's| ||g')+VENDOR_HASH=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$VENDOR_SHA256")
+2
-2
pkgs/by-name/ga/gauge/plugins/make-gauge-plugin.nix
+2
-2
pkgs/by-name/ga/gauge/plugins/make-gauge-plugin.nix
······
+3
-3
pkgs/by-name/go/google-chrome/update.sh
+3
-3
pkgs/by-name/go/google-chrome/update.sh
···local download_url="https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${version}-1_amd64.deb"+new_sri_hash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$new_hash")"sed -i "/^ linux = stdenvNoCC.mkDerivation/,/^ });/s/version = \".*\"/version = \"$version\"/" "$DEFAULT_NIX"sed -i "/^ linux = stdenvNoCC.mkDerivation/,/^ });/s|hash = \".*\"|hash = \"$new_sri_hash\"|" "$DEFAULT_NIX"···+new_hash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$(nix-prefetch-url "$download_url" 2>/dev/null)")"+new_sri_hash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$new_hash")"sed -i "/^ darwin = stdenvNoCC.mkDerivation/,/^ });/s/version = \".*\"/version = \"$manifest_version\"/" "$DEFAULT_NIX"
+1
-1
pkgs/by-name/ha/hamrs-pro/update.sh
+1
-1
pkgs/by-name/ha/hamrs-pro/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; hamrs-pro.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; hamrs-pro.src.url" --system "$system" | tr -d '"')))
+1
-1
pkgs/by-name/he/hey-mail/package.nix
+1
-1
pkgs/by-name/he/hey-mail/package.nix
···+hash=$(nix --extra-experimental-features nix-command hash to-sri "sha512:$(jq -r .download_sha512 <<<"$data")")
+1
-1
pkgs/by-name/ho/hoppscotch/update.sh
+1
-1
pkgs/by-name/ho/hoppscotch/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import $BASEDIR {}; hoppscotch.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import $BASEDIR {}; hoppscotch.src.url" --system "$system" | tr -d '"')))(cd $BASEDIR && update-source-version hoppscotch $latestVersion $hash --system=$system --ignore-same-version)
+1
-1
pkgs/by-name/i-/i-dot-ming/package.nix
+1
-1
pkgs/by-name/i-/i-dot-ming/package.nix
···curl -Lo $tmp/I.Ming.ttf https://raw.githubusercontent.com/ichitenfont/I.Ming/$version/$version/I.Ming-$version.ttf+hash=$(nix --extra-experimental-features nix-command hash path --type sha256 --base32 --sri $tmp)
+1
-1
pkgs/by-name/ib/ibm-plex/update.sh
+1
-1
pkgs/by-name/ib/ibm-plex/update.sh
···url="https://github.com/IBM/plex/releases/download/%40ibm%2Fplex-${family}%40${version}/ibm-plex-${family}.zip"-printf ' "%s" = "%s";\n' "$family" "$(nix-prefetch-url --unpack "$url" | xargs nix hash convert --hash-algo sha256)" >>"$dirname/hashes.nix"+printf ' "%s" = "%s";\n' "$family" "$(nix-prefetch-url --unpack "$url" | xargs nix --extra-experimental-features nix-command hash convert --hash-algo sha256)" >>"$dirname/hashes.nix"
+1
-1
pkgs/by-name/je/jenkins/package.nix
+1
-1
pkgs/by-name/je/jenkins/package.nix
···
+1
-1
pkgs/by-name/je/jetbrains-toolbox/update.sh
+1
-1
pkgs/by-name/je/jetbrains-toolbox/update.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $prefetch)update-source-version jetbrains-toolbox $latestVersion $hash --system=$system --ignore-same-version
+1
-1
pkgs/by-name/ke/keyguard/update.sh
+1
-1
pkgs/by-name/ke/keyguard/update.sh
···-hash=$(nix hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/AChep/keyguard-app/archive/refs/tags/${latestTag}.tar.gz"))+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/AChep/keyguard-app/archive/refs/tags/${latestTag}.tar.gz"))
+1
-1
pkgs/by-name/li/librewolf-bin-unwrapped/update.sh
+1
-1
pkgs/by-name/li/librewolf-bin-unwrapped/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(curl ${GITLAB_TOKEN:+-H "Private-Token: $GITLAB_TOKEN"} -sL https://gitlab.com/api/v4/projects/44042130/packages/generic/librewolf/$latestVersion/librewolf-$latestVersion-$2-package.tar.xz.sha256sum))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(curl ${GITLAB_TOKEN:+-H "Private-Token: $GITLAB_TOKEN"} -sL https://gitlab.com/api/v4/projects/44042130/packages/generic/librewolf/$latestVersion/librewolf-$latestVersion-$2-package.tar.xz.sha256sum))update-source-version librewolf-bin-unwrapped $latestVersion $hash --system=$1 --ignore-same-version
+1
-1
pkgs/by-name/lm/lmstudio/update.sh
+1
-1
pkgs/by-name/lm/lmstudio/update.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 "$(nix-prefetch-url "${url}")")update-source-version lmstudio "${version}" "${hash}" --system="${arch}" --version-key="version_${arch}" \
+2
-2
pkgs/by-name/lo/localsend/update.sh
+2
-2
pkgs/by-name/lo/localsend/update.sh
···DARWIN_x64_URL="https://github.com/localsend/localsend/releases/download/v${latestVersion}/LocalSend-${latestVersion}.dmg"+DARWIN_X64_SHA=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url ${DARWIN_x64_URL}))GIT_SRC_URL="https://github.com/localsend/localsend/archive/refs/tags/v${latestVersion}.tar.gz"+GIT_SRC_SHA=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --unpack ${GIT_SRC_URL}))
+1
-1
pkgs/by-name/mi/mihomo-party/update.sh
+1
-1
pkgs/by-name/mi/mihomo-party/update.sh
···prefetch=$(nix-prefetch-url "https://github.com/mihomo-party-org/mihomo-party/releases/download/v$latestVersion/mihomo-party-linux-$latestVersion-$2.deb")+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $prefetch)
+1
-1
pkgs/by-name/mu/mullvad-browser/update.nix
+1
-1
pkgs/by-name/mu/mullvad-browser/update.nix
···update-source-version "${pname}" "$version" "$hash" --ignore-same-version --source-key="sources.$platform"
+1
-1
pkgs/by-name/nb/nbxplorer/util/update-common.sh
+1
-1
pkgs/by-name/nb/nbxplorer/util/update-common.sh
+1
-1
pkgs/by-name/om/ombi/update.sh
+1
-1
pkgs/by-name/om/ombi/update.sh
···sed -i "s|$hashKey = \"[a-zA-Z0-9\/+-=]*\";|$hashKey = \"$sriHash\";|g" "$dirname/default.nix"
+2
-2
pkgs/by-name/pd/pdfium-binaries/update.sh
+2
-2
pkgs/by-name/pd/pdfium-binaries/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url --unpack $(nix-instantiate --eval -E "with import ./. {}; pdfium-binaries.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url --unpack $(nix-instantiate --eval -E "with import ./. {}; pdfium-binaries.src.url" --system "$system" | tr -d '"')))update-source-version pdfium-binaries $latestVersion $hash --system=$system --ignore-same-version···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url --unpack $(nix-instantiate --eval -E "with import ./. {}; pdfium-binaries-v8.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url --unpack $(nix-instantiate --eval -E "with import ./. {}; pdfium-binaries-v8.src.url" --system "$system" | tr -d '"')))update-source-version pdfium-binaries-v8 $latestVersion $hash --system=$system --ignore-same-version
+1
-1
pkgs/by-name/pe/perses/update.sh
+1
-1
pkgs/by-name/pe/perses/update.sh
···+hash="$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 "${hash}")"
+1
-1
pkgs/by-name/ph/phoenixd/update.sh
+1
-1
pkgs/by-name/ph/phoenixd/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; phoenixd.src.url" --system "$system" | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; phoenixd.src.url" --system "$system" | tr -d '"')))
+1
-1
pkgs/by-name/pi/pilipalax/update.sh
+1
-1
pkgs/by-name/pi/pilipalax/update.sh
···-hash=$(nix hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/orz12/PiliPalaX/archive/refs/tags/${latestTag}.tar.gz"))+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(nix-prefetch-url --unpack "https://github.com/orz12/PiliPalaX/archive/refs/tags/${latestTag}.tar.gz"))
+3
-3
pkgs/by-name/pl/platformsh/update.sh
+3
-3
pkgs/by-name/pl/platformsh/update.sh
···linux_arm64_url=https://github.com/platformsh/cli/releases/download/$version/platform_${version}_linux_arm64.tar.gzlinux_amd64_url=https://github.com/platformsh/cli/releases/download/$version/platform_${version}_linux_amd64.tar.gzdarwin_all_url=https://github.com/platformsh/cli/releases/download/$version/platform_${version}_darwin_all.tar.gz-linux_arm64_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_arm64_url"))-linux_amd64_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_amd64_url"))-darwin_all_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$darwin_all_url"))+linux_arm64_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_arm64_url"))+linux_amd64_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_amd64_url"))+darwin_all_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$darwin_all_url"))
+1
-1
pkgs/by-name/pr/protoc-gen-grpc-java/update.sh
+1
-1
pkgs/by-name/pr/protoc-gen-grpc-java/update.sh
···url="https://repo1.maven.org/maven2/io/grpc/protoc-gen-grpc-java/${version}/protoc-gen-grpc-java-${version}-${arch}.exe"+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$(nix-prefetch-url "${url}")")
+3
-3
pkgs/by-name/qq/qq/update.sh
+3
-3
pkgs/by-name/qq/qq/update.sh
···+darwin_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$darwin_hash")···+linux_aarch64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$linux_aarch64_hash")+linux_x86_64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$linux_x86_64_hash")
+1
-1
pkgs/by-name/re/readarr/update.sh
+1
-1
pkgs/by-name/re/readarr/update.sh
···url="https://github.com/Readarr/Readarr/releases/download/v$version/Readarr.develop.$version.$os-core-$arch.tar.gz"sed -i "s|$hashKey = \"[a-zA-Z0-9\/+-=]*\";|$hashKey = \"$sriHash\";|g" "$dirname/package.nix"
+1
-1
pkgs/by-name/rn/rnnoise/package.nix
+1
-1
pkgs/by-name/rn/rnnoise/package.nix
···+nix-prefetch-url "$1" | xargs nix --extra-experimental-features nix-command hash to-sri --type sha256
+1
-1
pkgs/by-name/ru/rundeck/package.nix
+1
-1
pkgs/by-name/ru/rundeck/package.nix
···download_url="https://packagecloud.io/pagerduty/rundeck/packages/java/org.rundeck/rundeck-$full_version.war/artifacts/rundeck-$full_version.war/download?distro_version_id=167"-hash=$(curl -L "$download_url" | nix-hash --flat --type sha256 --base32 - | nix hash to-sri --type sha256)+hash=$(curl -L "$download_url" | nix-hash --flat --type sha256 --base32 - | nix --extra-experimental-features nix-command hash to-sri --type sha256)
+1
-1
pkgs/by-name/si/signal-desktop-bin/update.sh
+1
-1
pkgs/by-name/si/signal-desktop-bin/update.sh
···-darwinHash="$(nix hash convert --hash-algo sha256 --to sri "$(nix-prefetch-url "https://updates.signal.org/desktop/signal-desktop-mac-universal-${latestVersion}.dmg")")"+darwinHash="$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$(nix-prefetch-url "https://updates.signal.org/desktop/signal-desktop-mac-universal-${latestVersion}.dmg")")"
+1
-1
pkgs/by-name/sp/sparkle/update.sh
+1
-1
pkgs/by-name/sp/sparkle/update.sh
···-hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; sparkle.src.url" --system aarch64-linux | tr -d '"')))+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; sparkle.src.url" --system aarch64-linux | tr -d '"')))
+1
-1
pkgs/by-name/st/standardnotes/update.nix
+1
-1
pkgs/by-name/st/standardnotes/update.nix
···
+2
-2
pkgs/by-name/st/stockfish/update.bash
+2
-2
pkgs/by-name/st/stockfish/update.bash
···new_nnue_big_file="$(grep --perl-regexp --only-matching 'EvalFileDefaultNameBig "\Knn-(\w+).nnue' "$new_src/src/evaluate.h")"new_nnue_small_file="$(grep --perl-regexp --only-matching 'EvalFileDefaultNameSmall "\Knn-(\w+).nnue' "$new_src/src/evaluate.h")"
+1
-1
pkgs/by-name/su/sudachidict/update.sh
+1
-1
pkgs/by-name/su/sudachidict/update.sh
···URL="https://github.com/$ORG/$REPO/releases/download/v$VERSION/sudachi-dictionary-$VERSION-$TYPE.zip"+HASH=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$PLAIN_HASH")sed -i -E "/(${TYPE} = fetchzip \{|^ *url = .*${TYPE}\.zip\";\$)/,/^ *hash = / s|hash = \"[^\"]*\"|hash = \"$HASH\"|" package.nix
+1
-1
pkgs/by-name/ta/tailwindcss_3/update.sh
+1
-1
pkgs/by-name/ta/tailwindcss_3/update.sh
···URL="https://github.com/tailwindlabs/tailwindcss/releases/download/v${LATEST_VERSION}/tailwindcss-${TAILWINDPLAT}"+HASH=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$(nix-prefetch-url --type sha256 "$URL")")
+1
-1
pkgs/by-name/ta/tandoor-recipes/update.sh
+1
-1
pkgs/by-name/ta/tandoor-recipes/update.sh
···+yarn_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$yarn_hash")
+1
-1
pkgs/by-name/te/termius/package.nix
+1
-1
pkgs/by-name/te/termius/package.nix
···+hash=$(nix --extra-experimental-features nix-command hash to-sri "sha512:$(jq -r .download_sha512 <<<"$data")")
+1
-1
pkgs/by-name/th/the-unarchiver/update/update.mjs
+1
-1
pkgs/by-name/th/the-unarchiver/update/update.mjs
···+.execSync(`nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri ${prefetchHash}`)
+1
-1
pkgs/by-name/to/tor-browser/update.nix
+1
-1
pkgs/by-name/to/tor-browser/update.nix
···update-source-version "${pname}" "$version" "$hash" --ignore-same-version --source-key="sources.$platform"
+1
-1
pkgs/by-name/tr/tradingview/update.sh
+1
-1
pkgs/by-name/tr/tradingview/update.sh
···
+1
-1
pkgs/by-name/ty/typesense/update.sh
+1
-1
pkgs/by-name/ty/typesense/update.sh
···+hash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$sha256hash")"
+3
-3
pkgs/by-name/up/upsun/update.sh
+3
-3
pkgs/by-name/up/upsun/update.sh
···linux_arm64_url=https://github.com/platformsh/cli/releases/download/$version/upsun_${version}_linux_arm64.tar.gzlinux_amd64_url=https://github.com/platformsh/cli/releases/download/$version/upsun_${version}_linux_amd64.tar.gzdarwin_all_url=https://github.com/platformsh/cli/releases/download/$version/upsun_${version}_darwin_all.tar.gz-linux_arm64_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_arm64_url"))-linux_amd64_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_amd64_url"))-darwin_all_hash=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$darwin_all_url"))+linux_arm64_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_arm64_url"))+linux_amd64_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$linux_amd64_url"))+darwin_all_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$darwin_all_url"))
+1
-1
pkgs/by-name/va/vault-bin/update-bin.sh
+1
-1
pkgs/by-name/va/vault-bin/update-bin.sh
···
+1
-1
pkgs/by-name/vi/vivaldi/update-vivaldi.sh
+1
-1
pkgs/by-name/vi/vivaldi/update-vivaldi.sh
···+hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "$url"))
+2
-2
pkgs/by-name/wa/waveterm/update.sh
+2
-2
pkgs/by-name/wa/waveterm/update.sh
···prefetch=$(nix-prefetch-url "https://github.com/wavetermdev/waveterm/releases/download/v$latestVersion/waveterm-linux-$2-$latestVersion.deb")+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $prefetch)···prefetch=$(nix-prefetch-url "https://github.com/wavetermdev/waveterm/releases/download/v$latestVersion/Wave-darwin-$2-$latestVersion.zip")+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $prefetch)
+1
-1
pkgs/by-name/we/wechat-uos/update.sh
+1
-1
pkgs/by-name/we/wechat-uos/update.sh
···url+=("https://pro-store-packages.uniontech.com/appstore/pool/appstore/c/com.tencent.wechat/com.tencent.wechat_"$version"_"$i".deb")+hash+=("$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $sha256sum)")
+1
-1
pkgs/by-name/wh/whisparr/update.sh
+1
-1
pkgs/by-name/wh/whisparr/update.sh
···url="https://whisparr.servarr.com/v1/update/nightly/updatefile?runtime=netcore&version=${version}&arch=${arch}&os=${os}"
+1
-1
pkgs/by-name/xu/xunlei-uos/update.sh
+1
-1
pkgs/by-name/xu/xunlei-uos/update.sh
···url+=("https://pro-store-packages.uniontech.com/appstore/pool/appstore/c/com.xunlei.download/com.xunlei.download_"$version"_"$i".deb")+hash+=("$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $sha256sum)")
+2
-2
pkgs/by-name/ya/yazi/plugins/update.py
+2
-2
pkgs/by-name/ya/yazi/plugins/update.py
···new_hash = run_command(f"nix-prefetch-url --unpack --type sha256 {prefetch_url} 2>/dev/null")+new_hash = run_command(f"nix --extra-experimental-features nix-command hash to-sri --type sha256 {new_hash} 2>/dev/null")+new_hash = run_command(f"nix --extra-experimental-features nix-command hash to-sri --type sha256 {raw_hash} 2>/dev/null")
+3
-3
pkgs/by-name/zo/zoom-us/update.sh
+3
-3
pkgs/by-name/zo/zoom-us/update.sh
···-hash_aarch64_darwin=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_aarch64_darwin}/zoomusInstallerFull.pkg?archType=arm64"))-hash_x86_64_darwin=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_x86_64_darwin}/zoomusInstallerFull.pkg"))-hash_x86_64_linux=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_x86_64_linux}/zoom_x86_64.pkg.tar.xz"))+hash_aarch64_darwin=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_aarch64_darwin}/zoomusInstallerFull.pkg?archType=arm64"))+hash_x86_64_darwin=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_x86_64_darwin}/zoomusInstallerFull.pkg"))+hash_x86_64_linux=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 "https://zoom.us/client/${version_x86_64_linux}/zoom_x86_64.pkg.tar.xz"))
+4
-4
pkgs/development/compilers/dotnet/update.sh
+4
-4
pkgs/development/compilers/dotnet/update.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha512 "$hash")···if hash=$(curl -s --head "$url" -o /dev/null -w '%header{x-ms-meta-sha512}') && [[ -n "$hash" ]]; then+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha512 "$hash")catalog_url=$(curl -sL --compressed "${nuget_registration_base_url}${pkg,,}/${version,,}.json" | jq -r ".catalogEntry") && [[ -n "$catalog_url" ]] &&···+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo "${hash_algorithm,,}" "$hash")+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha512 "$hash")
+1
-1
pkgs/development/compilers/graalvm/graalvm-oracle/hashes.nix
+1
-1
pkgs/development/compilers/graalvm/graalvm-oracle/hashes.nix
···# $ rg -No "(https://.+)\"" -r '$1' pkgs/development/compilers/graalvm/graalvm-oracle/hashes.nix | \+# parallel -k 'echo {}; nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(curl -s {}.sha256)'
+1
-1
pkgs/development/libraries/libcef/update.sh
+1
-1
pkgs/development/libraries/libcef/update.sh
···url="https://cef-builds.spotifycdn.com/cef_binary_${cef_version}+g${git_revision}+chromium-${chromium_version}_linux${arch}_minimal.tar.bz2"+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$(nix-prefetch-url --quiet "$url")")
+1
-1
pkgs/development/libraries/science/math/libtorch/prefetch.sh
+1
-1
pkgs/development/libraries/science/math/libtorch/prefetch.sh
···+hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --unpack "$url" --name "$name"))
+1
-1
pkgs/development/python-modules/jaxlib/prefetch.sh
+1
-1
pkgs/development/python-modules/jaxlib/prefetch.sh
···+nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$sha256"
+1
-1
pkgs/development/python-modules/mypy-boto3/update.sh
+1
-1
pkgs/development/python-modules/mypy-boto3/update.sh
···awk -i inplace -v pkg="\"$package_short_name\"" -v new_version="$version" -v new_sha256="$sri_hash" '
+1
-1
pkgs/development/python-modules/ray/prefetch.sh
+1
-1
pkgs/development/python-modules/ray/prefetch.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$sha256")
+1
-1
pkgs/development/python-modules/torch/bin/prefetch.sh
+1
-1
pkgs/development/python-modules/torch/bin/prefetch.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 $(nix-prefetch-url "$url" --name "$name"))
+1
-1
pkgs/development/python-modules/torchaudio/prefetch.sh
+1
-1
pkgs/development/python-modules/torchaudio/prefetch.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 $(nix-prefetch-url "$url" --name "$name"))
+1
-1
pkgs/development/python-modules/torchvision/prefetch.sh
+1
-1
pkgs/development/python-modules/torchvision/prefetch.sh
···+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 $(nix-prefetch-url "$url" --name "$name"))
+1
-1
pkgs/development/python-modules/types-aiobotocore/update.sh
+1
-1
pkgs/development/python-modules/types-aiobotocore/update.sh
···+sri_hash="$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $hash)"
+1
-1
pkgs/development/tools/continuous-integration/woodpecker/update.sh
+1
-1
pkgs/development/tools/continuous-integration/woodpecker/update.sh
···src_hash=$(nix-prefetch-url --type sha256 --unpack "https://github.com/woodpecker-ci/woodpecker/releases/download/v$version/woodpecker-src.tar.gz")+src_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$src_hash")
+1
-1
pkgs/development/tools/infisical/update.sh
+1
-1
pkgs/development/tools/infisical/update.sh
···sha256hash="$(nix-prefetch-url --type sha256 "https://github.com/infisical/infisical/releases/download/${RELEASE_NAME}/infisical_${VERSION}_${arch_target}.tar.gz")"+srihash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$sha256hash")"
+1
-1
pkgs/development/tools/rover/update.sh
+1
-1
pkgs/development/tools/rover/update.sh
···+rover_sri_hash=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$rover_hash")
+1
-1
pkgs/misc/lilypond/update.sh
+1
-1
pkgs/misc/lilypond/update.sh
···-NEXT=$(nix hash to-sri --type sha256 $(nix-prefetch-url --type sha256 --unpack $(nix eval --raw -f default.nix $ATTR.src.url)))+NEXT=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $(nix-prefetch-url --type sha256 --unpack $(nix eval --raw -f default.nix $ATTR.src.url)))
+1
-1
pkgs/os-specific/linux/batman-adv/version.nix
+1
-1
pkgs/os-specific/linux/batman-adv/version.nix
···-# for tool in alfred batctl batman-adv; do nix-prefetch-url https://downloads.open-mesh.org/batman/releases/batman-adv-2025.2/$tool-2025.2.tar.gz --type sha256 | xargs nix hash convert --hash-algo sha256 --to sri; done+# for tool in alfred batctl batman-adv; do nix-prefetch-url https://downloads.open-mesh.org/batman/releases/batman-adv-2025.2/$tool-2025.2.tar.gz --type sha256 | xargs nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri; done
+1
-1
pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/bootstrap-sources.nix
+1
-1
pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/bootstrap-sources.nix
···+nix --extra-experimental-features nix-command hash path $(nix build --print-out-paths -f '<nixpkgs>' make-minimal-bootstrap-sources)
+1
-1
pkgs/servers/etcd/3.5/update.sh
+1
-1
pkgs/servers/etcd/3.5/update.sh
···ETCD_SRC_HASH=$(nix-prefetch-url --quiet --unpack https://github.com/etcd-io/etcd/archive/refs/tags/${LATEST_TAG}.tar.gz)+ETCD_SRC_HASH=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 $ETCD_SRC_HASH)
+1
-1
pkgs/servers/lidarr/update.sh
+1
-1
pkgs/servers/lidarr/update.sh
···url="https://github.com/Lidarr/Lidarr/releases/download/v$version/Lidarr.master.$version.$os-core-$arch.tar.gz"sed -i "s|$hashKey = \"[a-zA-Z0-9\/+-=]*\";|$hashKey = \"$sriHash\";|g" "$dirname/default.nix"
+1
-1
pkgs/tools/admin/ibmcloud-cli/update.sh
+1
-1
pkgs/tools/admin/ibmcloud-cli/update.sh
···curl -fsSL -o $tmp/ibmcloud-cli $(nix-instantiate --eval -E "with import ./. {}; ibmcloud-cli.src.url" --system "$system" | tr -d '"')update-source-version ibmcloud-cli $latestVersion $hash --system=$system --ignore-same-version
+1
-1
pkgs/tools/misc/xvfb-run/update.sh
+1
-1
pkgs/tools/misc/xvfb-run/update.sh
···info=$(nix-prefetch-git --quiet --url "https://github.com/archlinux/svntogit-packages" --rev "refs/heads/packages/xorg-server")+sha256=$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$(jq -r '.sha256' <<< "$info")")