Winter a19cd4ffb1 Revert "treewide: replace rev with tag"
This reverts commit 65a333600d5c88a98d674f637d092807cfc12253.

This wasn't tested for correctness with something like fodwatch [0],
and should not have been (self-)merged so quickly, especially without
further review.

It also resulted in the breakage of at least one package [1] (and that's
the one we know of and was caught).

A few packages that were updated in between this commit and this revert
were not reverted back to using `rev`, but other than that, this is a
1:1 revert.

[0]: https://codeberg.org/raphaelr/fodwatch
[1]: https://github.com/NixOS/nixpkgs/pull/396904 / 758551e4587d75882aebc21a04bee960418f8ce9
2025-04-08 02:57:25 -04:00

34 lines
931 B
Nix

{
lib,
fetchFromGitHub,
php,
}:
let
version = "5.2.0";
in
php.buildComposerWithPlugin {
pname = "cyclonedx/cyclonedx-php-composer";
inherit version;
src = fetchFromGitHub {
owner = "CycloneDX";
repo = "cyclonedx-php-composer";
rev = "v${version}";
hash = "sha256-0fb1QiuVJqcB7CAEyB0y60/O9iiibT06mccZYe52dFQ=";
};
composerLock = ./composer.lock;
vendorHash = "sha256-QPlHWXXksetNSsv3olmCtPA/VsFVPV09rYQEsPezZoE=";
meta = {
changelog = "https://github.com/CycloneDX/cyclonedx-php-composer/releases/tag/v${version}";
description = "Composer plugin that facilitates the creation of a CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects";
homepage = "https://github.com/CycloneDX/cyclonedx-php-composer";
license = lib.licenses.asl20;
mainProgram = "composer";
maintainers = with lib.maintainers; [ drupol ];
platforms = lib.platforms.all;
};
}