ente-auth: 4.0.2 -> 4.1.0

[niklaskorz]

https://github.com/ente-io/ente/releases/tag/auth-v4.1.0

This update fixes a security issue and should thus be backported to NixOS 24.11.

Note that due to a rename of the data directory and the binary in upstream, this update is not backwards compatible.
Ente-auth will automatically migrate the old data directory on first launch, meaning a rollback from 4.1.0 to 4.0.2 may lead to data loss.

Currently in draft mode as it does not build yet.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[zi3m5f]

This update fixes a security issue and should thus be backported to NixOS 24.11.

I am not sure how urgent ente-io/ente#3545 is but maybe we should try to only backport the fix to 24.11 and decide later if we want to update to 4.1.x?

[zi3m5f]

Currently in draft mode as it does not build yet.

error: hash mismatch in fixed-output derivation '/nix/store/ihbvpyw1ammkfxj1jzwyx1vm0vb5z5jb-pub-sqflite-2.3.3+2.drv':
         specified: sha256-TdvCtEO7KL1R2oOSwGWllmS5kGCIU5CkvvUqUJf3tUc=
            got:    sha256-+XTVtkFJ94VifwnutvUuAqqiyWwrcEiZ3Uz0H4D9zWA=
error: hash mismatch in fixed-output derivation '/nix/store/qx291zbh1gvkgbjv5gkkm0507fhb2987-source.drv':
         specified: sha256-6fJ0OAZ9p8+zanPl39p3VX9xUMGV47klcwfEnwyRX98=
            got:    sha256-ytKGRsBhKD/GfaWiFvhT0g+UzG7mZI100Ws1GBibsxI=

[niklaskorz]

Currently in draft mode as it does not build yet.

error: hash mismatch in fixed-output derivation '/nix/store/ihbvpyw1ammkfxj1jzwyx1vm0vb5z5jb-pub-sqflite-2.3.3+2.drv':
         specified: sha256-TdvCtEO7KL1R2oOSwGWllmS5kGCIU5CkvvUqUJf3tUc=
            got:    sha256-+XTVtkFJ94VifwnutvUuAqqiyWwrcEiZ3Uz0H4D9zWA=
error: hash mismatch in fixed-output derivation '/nix/store/qx291zbh1gvkgbjv5gkkm0507fhb2987-source.drv':
         specified: sha256-6fJ0OAZ9p8+zanPl39p3VX9xUMGV47klcwfEnwyRX98=
            got:    sha256-ytKGRsBhKD/GfaWiFvhT0g+UzG7mZI100Ws1GBibsxI=

Yup that's where I am stuck, any idea what might cause the mismatch?

[gepbird]

Currently in draft mode as it does not build yet.

error: hash mismatch in fixed-output derivation '/nix/store/ihbvpyw1ammkfxj1jzwyx1vm0vb5z5jb-pub-sqflite-2.3.3+2.drv':
         specified: sha256-TdvCtEO7KL1R2oOSwGWllmS5kGCIU5CkvvUqUJf3tUc=
            got:    sha256-+XTVtkFJ94VifwnutvUuAqqiyWwrcEiZ3Uz0H4D9zWA=
error: hash mismatch in fixed-output derivation '/nix/store/qx291zbh1gvkgbjv5gkkm0507fhb2987-source.drv':
         specified: sha256-6fJ0OAZ9p8+zanPl39p3VX9xUMGV47klcwfEnwyRX98=
            got:    sha256-ytKGRsBhKD/GfaWiFvhT0g+UzG7mZI100Ws1GBibsxI=

I got these hashes too, not sure why they changed, last update to the auth-v4.1.0 branch was 2 weeks ago.