From d91b861cd61147a864060d3127cd938b28e32537 Mon Sep 17 00:00:00 2001 From: Ryan Yin Date: Tue, 25 Aug 2026 13:38:38 +0800 Subject: [PATCH] feat(bwraps): update wechat to 4.1.1.8 --- hardening/bwraps/wechat.nix | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/hardening/bwraps/wechat.nix b/hardening/bwraps/wechat.nix index 46ef61a7..f7684b9b 100644 --- a/hardening/bwraps/wechat.nix +++ b/hardening/bwraps/wechat.nix @@ -15,21 +15,20 @@ let pname = "wechat"; # https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/we/wechat/package.nix sources = { - # use https://web.archive.org/save to archive the Linux versions - # add `if_` at the end of timestamps to avoid toolbar insertion - # for a more complicated guide, see https://en.wikipedia.org/wiki/Help:Using_the_Wayback_Machine + # direct CDN urls, pinned by hash (same approach as nixpkgs' wechat package) + # archive.org snapshots are not used because the CDN serves different builds per edge aarch64-linux = { - version = "4.1.1.4"; + version = "4.1.1.8"; src = fetchurl { - url = "https://web.archive.org/web/20260311102559if_/https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_arm64.AppImage"; - hash = "sha256-YlWJxT62tXDaNwYVpsPMC5elFH8fsbI1HjTQn6ePiPo="; + url = "https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_arm64.AppImage"; + hash = "sha256-RLHhac3wSS1C9rx3GsA07Tp1EzxSf2LLBMyPtrECnUY="; }; }; x86_64-linux = { - version = "4.1.1.4"; + version = "4.1.1.8"; src = fetchurl { - url = "https://web.archive.org/web/20260311102439if_/https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_x86_64.AppImage"; - hash = "sha256-XxAvFnlljqurGPDgRr+DnuCKbdVvgXBPh02DLHY3Oz8="; + url = "https://dldir1v6.qq.com/weixin/Universal/Linux/WeChatLinux_x86_64.AppImage"; + hash = "sha256-RX26ArkbAxzdRBLu4HT7v/udnQax5Q/Bgi00hw4RSZA="; }; }; };