-
Notifications
You must be signed in to change notification settings - Fork 205
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump JVM on Darwin and force TLS 1.2 #8697
Conversation
54c9811
to
c6cc53d
Compare
/azp run |
Azure Pipelines successfully started running 1 pipeline(s). |
Details are in the comments but this seems to workaround the annoying tls issues we have been dealing with for the past few days. changelog_begin changelog_end
70c472a
to
4537436
Compare
@@ -8,6 +8,20 @@ let | |||
|
|||
# package overrides | |||
overrides = _: pkgs: rec { | |||
# nixpkgs ships with a very old version of openjdk on darwin |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don’t think this is actually required but the fact that we are on a pretty old JDK doesn’t inspire confidence and I’d rather not waste time debugging issues that have already been fixed.
@@ -27,7 +41,7 @@ let | |||
# and/or documentation. | |||
(pkgs.fetchurl { | |||
url = "https://patch-diff.githubusercontent.com/raw/bazelbuild/bazel/pull/8983.patch"; | |||
sha256 = "1j25bycn9q7536ab3ln6yi6zpzv2b25fwdyxbgnalkpl2dz9idb7"; | |||
sha256 = "1qdyqymsylinkdwqhbxbm8bvbyznrdn74n744pi5xhdwb6lw1r8a"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is unrelated, changing the JVM forced a rebuild and needed a hash change because this file has changed upstream. There don’t seem to be any relevant changes and the PR has now been closed (looks like the change has made it into Bazel 4.0) so hopefully it will stay stable until we get to Bazel 4.0 and can drop it.
Details are in the comments but this seems to workaround the annoying
tls issues we have been dealing with for the past few days.
changelog_begin
changelog_end
Pull Request Checklist
CHANGELOG_BEGIN
andCHANGELOG_END
tagsNOTE: CI is not automatically run on non-members pull-requests for security
reasons. The reviewer will have to comment with
/AzurePipelines run
totrigger the build.