hexa- on nostr

Open in Damus

LovesTha🥧 · 4w

So I just had my nixos-rebuild fail due to the insecure nature of pnpm-10.29.2, which is fine. The package triggering the inclusion of that pinned package is `vikunja-desktop`. But I don't understa...

hexa- @hexa- 1782868510

@nprofile1q... The vikunja service does not in any way depend on the desktop app as far as I can tell.

The vulnerable pnpm version was unpinned in

https://github.com/NixOS/nixpkgs/pull/536772 a few hours ago.

1

LovesTha🥧 · 4w

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqs4lvdkvq5y59kd825daqqc0vpykt2nn9lxpzkr5yxkyhmz5fp3uquns53y odd. My pull (two hours ago) of nixos pkgs locally still had the pinned version. And I was blind, I do have the -desktop added despite not actively using it :)