A malicious Host Rule could be crafted to inject shell metacharacters
which could lead to command execution, we can make sure they are quoted
appropriately.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>
As `fileName` makes more sense (as it's not always a lock file we're
updating).
Also, if you set `fileName`, it would never actually output the
filename.
This renames the usages of `lockFile` to `fileName`.
Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io>
* fix(nix): flake lock refresh
* fix(nix): handle nixpkgs upgrades with not explicit ref correct
* Remove fileMatch hack
* Force lock file updates for nix
* Support new lockable channel
as requested by @Mic92
* Fix lints
* Remove hack and set rangeStrategy instead
* Fix tests
* Add example comments
* Use codeBlock, inline fixtures
* Add test back which went missing while merging
* Simplify code
* Fix tests
* Fix undefined being displayed in dashboard
* revert: Fix undefined being displayed in dashboard
* fix(nix): use lockedVersion, fake confirmations and conditionally set currentValue
* test(nix): check for lockedVersion instead of currentDigest, remove rangeStrategy
* fix: only replace digest
* fix: make sure flake.nix contains new digest
* fix: replace deprecated update-input with flake update
* fix: update tests
* fix: only set lockedVersion for lockable tarballs, cleanup
* fix: don't use special versioning
* fix: get nixpkgs currentValue in tarballs
* test: fill in code coverage gaps
* test: fill in more code coverage gaps
* fix: use correct extract type
* test: improve code coverage
* test: explicitly check flakeLocked and flakeOriginal to see what isn't being covered
* fix: check both original and locked inputs for bad types
* test: add missing root
* Update lib/modules/manager/nix/extract.ts
Co-authored-by: Joshua Spence <josh@spence.com.au>
* Update lib/modules/manager/nix/extract.ts
Co-authored-by: Joshua Spence <josh@spence.com.au>
* fix: explicitly set log messages
* Update lib/modules/manager/nix/extract.ts
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
* Update lib/modules/manager/nix/extract.ts
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
* Update lib/modules/manager/nix/extract.ts
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
---------
Co-authored-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
Co-authored-by: Joshua Spence <josh@spence.com.au>
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
Jamie Tanna