invidious: patch CVE-2026-58447

77ad41678b

https://tracker.security.nixos.org/suggestions/by-id/10419/

Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
(cherry picked from commit 4c54c8b879)

pkgs/by-name/in/invidious/package.nix

@@ -3,6 +3,7 @@
   callPackage,
   crystal,
   fetchFromGitHub,
+  fetchpatch2,
   librsvg,
   pkg-config,
   libxml2,
@@ -41,6 +42,15 @@ crystal.buildCrystalPackage rec {
     inherit (versions.invidious) hash;
   };
 
+  patches = [
+    # Remove with the first release containing this commit.
+    (fetchpatch2 {
+      name = "CVE-2026-58447.patch";
+      url = "https://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45.patch?full_index=1";
+      hash = "sha256-0pf6eu0ckQ2gYHLr2tEDy+1dvAhVjepG26kuxuHbZl8=";
+    })
+  ];
+
   postPatch =
     let
       # Replacing by the value (templates) of the variables ensures that building