Files
Alexis Williams a8e085905b dragonflydb: 1.34.2 -> 1.39.0
Fixes CVE-2026-54341 (RESTORE operations may crash the server; affects
versions < 1.39), and brings the package up to the current release.

The vendored dependency patches are regenerated against the v1.39.0
helio/dragonfly CMake files, which changed a large number of third-party
declarations:

- Pin abseil-cpp to 20250512.1, the release helio's in-tree patches target
  (nixpkgs' abseil-cpp now tracks a newer version the patches no longer apply
  to), and bump the vendored aws-sdk-cpp and jsoncons pins.
- hnswlib now comes from dragonfly's fork rather than nixpkgs, matching
  upstream's switch away from nmslib's hnswlib.
- Vendor the new snowball stemmer dependency (built in-tree); nixpkgs'
  libstemmer is an older snowball release.
- Drop the mimalloc 2.1.6 and jemalloc pins, which helio no longer builds.
- Disable aws-sdk-cpp's git-dependent submodule-version enforcement, which
  cannot run in the sandbox (the source is already fetched at the exact tag
  with submodules).

Assisted-by: Claude Code (Claude Opus 4.8)
2026-06-27 14:29:32 -07:00
..
2026-06-27 14:29:32 -07:00