[25.11] cosmic-greeter: apply upstream patch for security hardening

[a-kenji]

(cherry picked from commit 64db9dd)

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

[github-actions]

This report is automatically generated by the PR / Check / cherry-pick CI workflow.

Some of the commits in this PR require the author's and reviewer's attention.

Sometimes it is not possible to cherry-pick exactly the same patch.
This most frequently happens when resolving merge conflicts.
The range-diff will help to review the resolution of conflicts.

If you need to merge this PR despite the warnings, please dismiss this review shortly before merging.

Warning

Difference between 838c3f9 and original 64db9dd may warrant inspection.

Show diff

@@ Metadata
  ## Commit message ##
     cosmic-greeter: apply upstream patch for security hardening
 
+    (cherry picked from commit 64db9dd59be49b07d88409084dd94c1cf34b5097)
+
  ## pkgs/by-name/co/cosmic-greeter/package.nix ##
 @@
    nix-update-script,
@@ pkgs/by-name/co/cosmic-greeter/package.nix
  
  rustPlatform.buildRustPackage (finalAttrs: {
 @@ pkgs/by-name/co/cosmic-greeter/package.nix: rustPlatform.buildRustPackage (finalAttrs: {
-     hash = "sha256-U0JrxvMWzISSA0tP8moasN7iN7TfZreEwbvWZGHRn8E=";
+     hash = "sha256-HP2Dl/vEX4K3XaXtjOpN1EW6uE4RuLm2+RMLB3QvOXQ=";
    };
  
--  cargoHash = "sha256-sNJTXBInr/h8w5dhOOP9ceBYWBcJW3qGjDuaG6UTV90=";
-+  cargoHash = "sha256-J5ycaeKZsEBPcI9JH8bHsOAcXXwcx/D21GlVhJZbGwM=";
+-  cargoHash = "sha256-4yRBgFrH4RBpuvChTED+ynx+PyFumoT2Z+R1gXxF4Xc=";
++  cargoHash = "sha256-KLIUE3+iAZbNB6YPSl75I6jHwa1RBN+go5A7RFi5LxE=";
 +
 +  cargoPatches = [
 +    (fetchpatch2 {
@@ pkgs/by-name/co/cosmic-greeter/package.nix: rustPlatform.buildRustPackage (final
 +    })
 +  ];
  
-   env.VERGEN_GIT_SHA = finalAttrs.src.tag;
- 
+   env = {
+     VERGEN_GIT_COMMIT_DATE = "2025-12-05";

Hint: The full diffs are also available in the runner logs with slightly better highlighting.