macbook: allow insecure pnpm (CVE-flagged build dep in closure)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
rope 2026-06-30 10:26:49 +01:00
parent 7a9cf0e1f0
commit ebef93f618

View file

@ -49,7 +49,7 @@
]; ];
nixpkgs.config.allowInsecurePredicate = pkg: nixpkgs.config.allowInsecurePredicate = pkg:
(lib.hasPrefix "broadcom-sta" (lib.getName pkg)); lib.any (p: lib.hasPrefix p (lib.getName pkg)) [ "broadcom-sta" "pnpm" ];
services.xserver.deviceSection = lib.mkDefault '' services.xserver.deviceSection = lib.mkDefault ''
Option "TearFree" "true" Option "TearFree" "true"