From 36546b7cd3bf9c2324ef9766993ff16562c9529d Mon Sep 17 00:00:00 2001 From: Hritwik Date: Sat, 13 Jun 2026 15:40:43 +0530 Subject: [PATCH] filebrowser: 2.63.5 -> 2.63.14 Backport of #530744 to release-25.11. Bumps version and source hash only, keeping the existing buildNpmPackage frontend; the master-branch refactor (#528537) depends on pnpmBuildHook, which is not available on this release branch. Addresses security fixes released upstream in filebrowser 2.63.6 (archive path traversal, login DoS, symlink scope escape, and public-share access-control bugs; see the project's GHSA security advisories). (cherry picked from commit bd64720c1771d16e956e859c819f993a5eaa5088) --- pkgs/by-name/fi/filebrowser/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/fi/filebrowser/package.nix b/pkgs/by-name/fi/filebrowser/package.nix index d44983cc8e8a..996e8e1047a0 100644 --- a/pkgs/by-name/fi/filebrowser/package.nix +++ b/pkgs/by-name/fi/filebrowser/package.nix @@ -12,13 +12,13 @@ }: let - version = "2.63.5"; + version = "2.63.14"; src = fetchFromGitHub { owner = "filebrowser"; repo = "filebrowser"; rev = "v${version}"; - hash = "sha256-/X/TztbZDC1hkRL97jkm6Ak8QmKFDMycekLl6NVPS0k="; + hash = "sha256-9CXHoQWr1RpTwFR8JRR72oQZxHrndTrnxYa6/0Z3Mk0="; }; frontend = buildNpmPackage rec {