2025-07-18 19:00:41 +02:00

53 lines
1.2 KiB
Nix

{
lib,
writeScript,
common-updater-scripts,
coreutils,
curl,
fetchurl,
gnugrep,
gnupg,
jq,
majorVersion,
runtimeShell,
}:
let
rev = "901fc09b83c686693be51b3c9a13578929cbc1ab"; # should be the HEAD of nodejs/release-keys
pubring = fetchurl {
url = "https://github.com/nodejs/release-keys/raw/${rev}/gpg-only-active-keys/pubring.kbx";
hash = "sha256-r/thHVLDlMVRN3Ahr5Apivy+h2IuvPm4QhYFoAmms3E=";
};
in
writeScript "update-nodejs" ''
#!${runtimeShell}
set -e
set -o pipefail
PATH=${
lib.makeBinPath [
common-updater-scripts
coreutils
curl
gnugrep
gnupg
jq
]
}
version=`\
curl --silent https://api.github.com/repos/nodejs/node/git/refs/tags | \
jq -r '.[] | select(.ref | startswith("refs/tags/v${majorVersion}")) | .ref' | \
sort --version-sort | \
tail -1 | \
grep -oP "^refs/tags/v\K.*"`
hash_hex=`
curl --silent "https://nodejs.org/dist/v''${version}/SHASUMS256.txt.asc" | \
gpgv --keyring="${pubring}" --output - | \
grep -oP "^([0-9a-f]{64})(?=\s+node-v''${version}.tar.xz$)"`
update-source-version nodejs_${majorVersion} "''${version}" "''${hash_hex}"
''