webkitgtk_6_0: 2.46.6 → 2.48.0

WebKit/WebKit@webkitgtk-2.46.6...webkitgtk-2.48.0
https://webkitgtk.org/2024/10/29/webkitgtk2.47.1-released.html
https://webkitgtk.org/2024/11/26/webkitgtk2.47.2-released.html
https://webkitgtk.org/2025/01/21/webkitgtk2.47.3-released.html
https://webkitgtk.org/2025/02/05/webkitgtk2.47.4-released.html
https://webkitgtk.org/2025/02/25/webkitgtk2.47.90-released.html
https://webkitgtk.org/2025/03/14/webkitgtk2.48.0-released.html
https://webkitgtk.org/security/WSA-2025-0002.html

CVE-2024-44192, CVE-2024-54467, CVE-2025-24201

Author: jtojnar

pkgs/development/libraries/webkitgtk/default.nix

@@ -36,6 +36,7 @@
   libsecret,
   libxslt,
   harfbuzz,
+  icu,
   hyphen,
   libsysprof-capture,
   libpthreadstubs,
@@ -79,7 +80,7 @@
 # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang.
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "webkitgtk";
-  version = "2.46.6";
+  version = "2.48.0";
   name = "${finalAttrs.pname}-${finalAttrs.version}+abi=${
     if lib.versionAtLeast gtk3.version "4.0" then
       "6.0"
@@ -99,7 +100,7 @@ clangStdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-8rMd5pMiC6m6t2zm3f5bC/qyUVyysKcPPFTUBQdmwys=";
+    hash = "sha256-lJBKVc8S1EpONs6tr/8C1G2nPXa+m0dp80y/3w7r+I4=";
   };
 
   patches = lib.optionals clangStdenv.hostPlatform.isLinux [
@@ -135,6 +136,7 @@ clangStdenv.mkDerivation (finalAttrs: {
       at-spi2-core
       cairo # required even when using skia
       enchant2
+      flite
       libavif
       libepoxy
       libjxl
@@ -143,6 +145,7 @@ clangStdenv.mkDerivation (finalAttrs: {
       gst-plugins-base
       harfbuzz
       hyphen
+      icu
       libGL
       libGLU
       libgbm
@@ -186,7 +189,7 @@ clangStdenv.mkDerivation (finalAttrs: {
       geoclue2
     ]
     ++ lib.optionals enableExperimental [
-      flite
+      # For ENABLE_WEB_RTC
       openssl
     ]
     ++ lib.optionals withLibsecret [