From e113d6276b01ba1c5876c2594d095a593b1a74c6 Mon Sep 17 00:00:00 2001
From: Gerhard Schwanzer <geri@sdf.org>
Date: Sat, 19 Sep 2026 18:10:14 +0200
Subject: [PATCH] kuma: 2.12.3 -> 2.12.11

Fixes CVE-2026-52724.

https://redirect.github.com/kumahq/kuma/releases/tag/v2.12.11

Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
Not-cherry-picked-because: release-26.05 requires the fixed 2.12.11 release and uses a different package definition
---
 .../networking/cluster/kuma/default.nix        | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/pkgs/applications/networking/cluster/kuma/default.nix b/pkgs/applications/networking/cluster/kuma/default.nix
index a2d3ff4d459e..3250c5da0fde 100644
--- a/pkgs/applications/networking/cluster/kuma/default.nix
+++ b/pkgs/applications/networking/cluster/kuma/default.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  buildGoModule,
+  buildGo126Module,
   coredns,
   installShellFiles,
   isFull ? false,
@@ -15,19 +15,19 @@
   ],
 }:
 
-buildGoModule rec {
+buildGo126Module rec {
   inherit pname;
-  version = "2.12.3";
+  version = "2.12.11";
   tags = lib.optionals enableGateway [ "gateway" ];
 
   src = fetchFromGitHub {
     owner = "kumahq";
     repo = "kuma";
-    tag = version;
-    hash = "sha256-C/q3fCcMMnqjXeoO/t/YOKHLq8HDNfF+x75nCcjwwvE=";
+    tag = "v${version}";
+    hash = "sha256-OhPCwJfLhfbU3f64jSvAYNlJSveJx8a8SyIknk9t+Vg=";
   };
 
-  vendorHash = "sha256-KgZYKopW+FOdwBIGxa2RLiEbefZ/1vAhcsWtcYhgdFs=";
+  vendorHash = "sha256-N7PzdRkVvaQ1oXbOt1eoqFMyBtkbw9/P8DujxRaa48M=";
 
   # no test files
   doCheck = false;
@@ -55,13 +55,13 @@ buildGoModule rec {
 
   ldflags =
     let
-      prefix = "github.com/kumahq/kuma/pkg/version";
+      prefix = "github.com/kumahq/kuma/v2/pkg/version";
     in
     [
       "-s"
       "-w"
       "-X ${prefix}.version=${version}"
-      "-X ${prefix}.gitTag=${version}"
+      "-X ${prefix}.gitTag=v${version}"
       "-X ${prefix}.gitCommit=${version}"
       "-X ${prefix}.buildDate=${version}"
     ];
@@ -69,7 +69,7 @@ buildGoModule rec {
   meta = {
     description = "Service mesh controller";
     homepage = "https://kuma.io/";
-    changelog = "https://github.com/kumahq/kuma/blob/${version}/CHANGELOG.md";
+    changelog = "https://github.com/kumahq/kuma/releases/tag/v${version}";
     license = lib.licenses.asl20;
   };
 }