nixVersions.nix_2_31: Add patch for SRI hash formatting fix

[dramforever]

Fix for the missing error message on an invalid SRI hash. Repro from K900:

nix build --expr 'let pkgs = import <nixpkgs> {}; in pkgs.fetchurl { url = "ohno"; hash = "sha256-ohno"; }' --impure

Patch is from NixOS/nix#14240, which is on 2.31-maintenance but not in a release yet.

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

---

Add a 👍 reaction to pull requests you find important.

[nixpkgs-ci]

Successfully created backport PR for release-25.11:

• [Backport release-25.11] nixVersions.nix_2_31: Add patch for SRI hash formatting fix #468221

[fabianhjr]

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review pr 468208
Commit: 4f6df2ad2fb576e6d37f08aa977e26ff95ed18c1

---

x86_64-linux

⏩ 1 package marked as broken and skipped:

• tests.pkg-config.defaultPkgConfigPackages.tests-combined

⏩ 2 packages blacklisted:

• nixos-install-tools
• tests.nixos-functions.nixos-test

❌ 4 packages failed to build:

• nixStatic
• nixStatic.dev
• nixStatic.doc
• nixStatic.man

✅ 1 test built:

• nixosTests.simple

✅ 146 packages built:

• appvm
• bundix
• cabal2nix
• cached-nix-shell
• chirpstack-concentratord
• colmena
• comma
• common-updater-scripts
• corto
• crate2nix
• crush
• dhall-nix
• dhall-nixpkgs
• disko
• dub-to-nix
• dydisnix
• fusionInventory
• gcalcli
• gcalcli.dist
• gclient2nix
• glpi-agent
• haskellPackages.cli-nix
• haskellPackages.cli-nix.doc
• haskellPackages.dhall-nix
• haskellPackages.dhall-nix.doc
• haskellPackages.dhall-nixpkgs
• haskellPackages.dhall-nixpkgs.doc
• haskellPackages.hnix
• haskellPackages.hnix.doc
• haskellPackages.niv
• haskellPackages.niv.bin
• haskellPackages.niv.data
• haskellPackages.niv.doc
• haskellPackages.nix-paths
• haskellPackages.nix-paths.doc
• haskellPackages.nix-thunk
• haskellPackages.nix-thunk.doc
• haskellPackages.nvfetcher
• haskellPackages.nvfetcher.doc
• haskellPackages.update-nix-fetchgit
• haskellPackages.update-nix-fetchgit.doc
• home-manager
• kcl
• libnixxml
• localtunnel
• lua51Packages.luarocks-nix
• luarocks-nix (luaPackages.luarocks-nix)
• lua53Packages.luarocks-nix
• lua54Packages.luarocks-nix
• luajitPackages.luarocks-nix
• luarocks-packages-updater
• luarocks-packages-updater.dist
• lux-cli
• mdwatch
• meshlab
• mlv-app
• nil
• nim_lk
• niv (niv.bin, niv.data)
• nix (nixVersions.nix_2_31, nixVersions.stable)
• nix-bundle
• nix-direnv
• nix-forecast
• nix-index
• nix-init
• nix-pin
• nix-prefetch
• nix-prefetch-docker
• nix-prefetch-github (python313Packages.nix-prefetch-github)
• nix-prefetch-github.dist (python313Packages.nix-prefetch-github.dist)
• nix-prefetch-github.man (python313Packages.nix-prefetch-github.man)
• nix-required-mounts
• nix-required-mounts.dist
• nix-serve
• nix-template
• nix-update
• nix-update.dist
• nix-visualize
• nix-visualize.dist
• nix-web
• nix.dev (nixVersions.nix_2_31.dev, nixVersions.stable.dev)
• nix.doc (nixVersions.nix_2_31.doc, nixVersions.stable.doc)
• nix.man (nixVersions.nix_2_31.man, nixVersions.stable.man)
• nixci
• nixos-anywhere
• nixos-generators
• nixos-option
• nixos-rebuild
• nixos-rebuild-ng
• nixos-rebuild-ng.dist
• nixos-shell
• nixpkgs-hammering
• nixpkgs-manual
• nixpkgs-review
• nixpkgs-review.dist
• nixpkgs-reviewFull
• nixpkgs-reviewFull.dist
• nixseparatedebuginfod2
• nixtract
• node2nix (nodePackages.node2nix)
• nodePackages_latest.node2nix
• nps
• nuget-to-json
• nurl
• nvfetcher
• python312Packages.nix-kernel
• python312Packages.nix-kernel.dist
• python312Packages.nix-prefetch-github
• python312Packages.nix-prefetch-github.dist
• python312Packages.nix-prefetch-github.man
• python312Packages.pymeshlab (python313Packages.pymeshlab)
• python313Packages.nix-kernel
• python313Packages.nix-kernel.dist
• python313Packages.nixpkgs-updaters-library
• python313Packages.nixpkgs-updaters-library.dist
• ragenix
• sbomnix
• sbomnix.dist
• sus-compiler
• swiftpm2nix (swiftPackages.swiftpm2nix)
• terranix
• tests.devShellTools.nixos
• tests.dhall.generateDhallDirectoryPackage
• tests.fetchgit.cached-prefetch-avoids-fetch
• tests.fetchgit.prefetch-git-no-add-path
• tests.pkg-config.defaultPkgConfigPackages.nix-cmd
• tests.pkg-config.defaultPkgConfigPackages.nix-expr
• tests.pkg-config.defaultPkgConfigPackages.nix-main
• tests.pkg-config.defaultPkgConfigPackages.nix-store
• tests.pkgs-lib
• tests.testers.lycheeLinkCheck.network
• tests.testers.nixosTest-example
• tests.testers.runNixOSTest-example (tests.testers.runNixOSTest-extendNixOS)
• tests.trivial-builders.references
• update-nix-fetchgit
• update-python-libraries
• vclab-nexus
• vclab-nexus.bin
• vimPluginsUpdater
• vulnix
• vulnix.dist
• vulnix.doc
• vulnix.man
• wp4nix
• xosd-xft
• zon2nix

[vcunat]

I think this is what broke nix build on *-darwin, e.g. see
https://hydra.nixos.org/build/316056678

[vcunat]

Yes, I just confirmed locally that reverting this PR on nixpkgs master would fix that build failure (on aarch64-darwin).

[dramforever]

Is this possibly filesystem dependent? I can't reproduce the problem on the nix-community darwin builder

[Ericson2314]

Maybe this is a matter of making sure we also update the test suite?

[dramforever]

It shouldn't be a test suite problem, because it clearly builds on Linux, and on Darwin with sandbox...