nix fix

Author: pcarrier

bin/update-pnpm-hashes

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+nix_file="nix/packages.nix"
+
+# 1. Zero out pnpmDeps.hash so the build fails with a hash mismatch.
+sed -i -E 's|(hash = )"sha256-[^"]*";|\1"";|' "$nix_file"
+
+# 2. Build pnpmDeps; it will fail and print the expected hash.
+got=$(nix build .#pnpmDeps 2>&1 | grep -oP 'got:\s+\Ksha256-\S+' || true)
+
+if [[ -z "$got" ]]; then
+  echo "error: could not extract hash from build output" >&2
+  echo "  (restoring file from git)" >&2
+  git checkout -- "$nix_file"
+  exit 1
+fi
+
+# 3. Write the real hash back.
+sed -i "s|hash = \"\";|hash = \"$got\";|" "$nix_file"
+
+echo "updated pnpmDeps.hash to $got"

nix/packages.nix

@@ -87,12 +87,12 @@
         src = pkgs.fetchCrate {
           pname = "wasm-bindgen-cli";
           version = "0.2.121";
-          hash = "sha256-ZOMgFNOcGkO66Jz/Z83eoIu+DIzo3Z/vq6Z5g6BDY/w=";
+          hash = "sha256-bD5kbL9i3F9uAbmw71jomSbrVDTBmREN647NSKsFXCI=";
         };
         cargoDeps = pkgs.rustPlatform.fetchCargoVendor {
           inherit src;
           inherit (src) pname version;
-          hash = "sha256-DPdCDPTAPBrbqLUqnCwQu1dePs9lGg85JCJOCIr9qjU=";
+          hash = "sha256-bD5kbL9i3F9uAbmw71jomSbrVDTBmREN647NSKsFXCI=";
         };
       };
 
@@ -474,6 +474,7 @@
           blit
           blit-release
           ;
+        inherit pnpmDeps;
         demo-image = demoImage;
         push-demo = pushDemo;
         publish-demo = publishDemo;