Update flake.lock

[onekey-sec-bot]

Automated changes by the update-flake-lock GitHub Action.

Flake lock file updates:

• Updated input 'filter':
    'github:numtide/nix-filter/41fd48e00c22b4ced525af521ead8792402de0ea' (2023-09-16)
  → 'github:numtide/nix-filter/c843418ecfd0344ecb85844b082ff5675e02c443' (2023-12-04)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/ec750fd01963ab6b20ee1f0cb488754e8036d89d' (2023-11-07)
  → 'github:NixOS/nixpkgs/09dc04054ba2ff1f861357d0e7e76d021b273cd7' (2023-12-08)
• Updated input 'unblob-native':
    'github:onekey-sec/unblob-native/d14b8743fa3265086a2cabcd2f0589fadaad9de8' (2023-11-06)
  → 'github:onekey-sec/unblob-native/69439fc0d33f2d8237c2ad57addcc497f189bd69' (2023-11-27)
• Updated input 'unblob-native/advisory-db':
    'github:rustsec/advisory-db/088ec034cfc17c918d8c1d4f9fbb832b935011b0' (2023-11-02)
  → 'github:rustsec/advisory-db/3338fcfb59cea5fcd7d2a4e7fe24cbc7cb778003' (2023-11-11)
• Updated input 'unblob-native/crane':
    'github:ipetkov/crane/2c89c36bffac32d8267e719f73b0d06e313ede30' (2023-11-03)
  → 'github:ipetkov/crane/ae7cd510e508ee03d792005c2f1c0a3ff25ecb80' (2023-11-18)
• Updated input 'unblob-native/rust-overlay':
    'github:oxalica/rust-overlay/321affd863e3e4e669990a1db5fdabef98387b95' (2023-11-03)
  → 'github:oxalica/rust-overlay/0309d58c91c57e8d519de68312430074de3ef5f8' (2023-11-25)

Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force

[qkaiser]

@vlaci is this something we can fix ?

error: Python version mismatch in 'python3.11-unblob-23.10.31':

       The Python derivation 'python3.11-unblob-[23](https://github.com/onekey-sec/unblob/actions/runs/7005141658/job/19054294300?pr=682#step:7:24).10.31' depends on a Python derivation
       named 'python3.11-pyperscan-0.2.2', but the two derivations use different versions
       of Python:

           'python3.11-unblob-23.10.31' uses /nix/store/vwnrri83bxr1l6x4fxwk[25](https://github.com/onekey-sec/unblob/actions/runs/7005141658/job/19054294300?pr=682#step:7:26)by1x2aaa3d-python3-3.11.6
           'python3.11-pyperscan-0.2.2' uses /nix/store/dc4xnyqi2kh25f1c74dfczxw95anbhhr-python3-3.11.6

       Possible solutions:

         * If 'python3.11-pyperscan-0.2.2' is a Python library, change the reference to 'python3.11-pyperscan-0.2.2'
           in the propagatedBuildInputs of 'python3.11-unblob-23.10.[31](https://github.com/onekey-sec/unblob/actions/runs/7005141658/job/19054294300?pr=682#step:7:32)' to use a 'python3.11-pyperscan-0.2.2' built from the same
           version of Python

         * If 'python3.11-pyperscan-0.2.2' is used as a tool during the build, move the reference to
           'python3.11-pyperscan-0.2.2' in 'python3.11-unblob-23.10.31' from propagatedBuildInputs to nativeBuildInputs

         * If 'python3.11-pyperscan-0.2.2' provides executables that are called at run time, pass its
           bin path to makeWrapperArgs:

               makeWrapperArgs = [ "--prefix PATH : ${lib.makeBinPath [ pyperscan ] }" ];

        at /nix/store/hg0wlqn0l7n5ybybb7d2r2hhsafnpcq3-source/nix/unblob/default.nix:62:12
(use '--show-trace' to show detailed location information)

[qkaiser]

Looked at the flake check again. The python3 version mismatch error is only thrown when I'm checking for a Darwin target. It does not happen for linux-x86_64 or linux-aarch64. Something's off.

I don't see how it could have been caused by pyperscan since its flake.nix was last modified 5 months ago and nixpkgs definition 7 months ago.

[qkaiser]

If someone wants to check:

nix flake check -L --no-build --option system x86_64-linux --extra-platforms x86_64-linux --show-trace
nix flake check -L --no-build --option system aarch64-linux --extra-platforms aarch64-linux --show-trace
nix flake check -L --no-build --option system x86_64-darwin --extra-platforms x86_64-darwin --show-trace

What I don't get is that it's failing for Linux on Github runners, but not on my machine.

@vlaci is it possible that we have some kind of broken cache on cachix or something ?

[vlaci]

As discussed IRL, there is actually an issue in the method pyperscan is included as a dependency. I'll need to update its flake.nix to provide an overlay instead of it using its own incompatible¹ python environment.

Footnotes

1. to be pedantic, it is not strictly incompatible as there are no common dependencies of unblob and pyperscan, if there would be some, we would have discovered this issue sooner. ↩

[vlaci]

unblob-native needed the same care as pyperscan. As unblob-native is simpler, its update is already done onekey-sec/unblob-native#37

[vlaci]

Finally it works!