From e04ddc8dbde3a7430ff930d32ca01b7a9e5b15dd Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 1 Apr 2025 17:21:32 +0200
Subject: [PATCH] firefox-esr-128-unwrapped: 128.8.1esr -> 128.9.0esr

https://www.mozilla.org/en-US/firefox/128.9.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2025-22

Fixes: CVE-2025-3028, CVE-2025-3029, CVE-2025-3030
(cherry picked from commit b5f04a27760aa22bf5c3e1c6926d96c3f3e599b8)
---
 .../networking/browsers/firefox/packages/firefox-esr-128.nix  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-esr-128.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-esr-128.nix
index 38638f4e00f7..68c8a4970727 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-esr-128.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-esr-128.nix
@@ -9,10 +9,10 @@
 
 buildMozillaMach rec {
   pname = "firefox";
-  version = "128.8.1esr";
+  version = "128.9.0esr";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "040c4c6667d5020569075e25cad21d019a66165cc2e05ecd386db2c1db1243473c4a1a96ca4901d734da8c7aee4761574b284afb44aff85cef071da995619157";
+    sha512 = "c0c8ac8374291cc93279064c73c17786c6f4fba7505ebc2cbd7a4ce7c82710620abdae7be15f60c43f9d10c3614fc9fd31f094e787105d528031c6f0510f7339";
   };
 
   meta = {