build: update flake.nix, taskfile

Taskfile.yml

@@ -64,6 +64,23 @@ tasks:
     cmds:
       - task: ci
 
+  nix:flake:build:
+    desc: build goreleaser using the nix flake
+    cmds:
+      - task: nix:flake:update-vendor
+      - nix build .
+
+  nix:flake:update-vendor:
+    desc: update default flake package vendor hash
+    cmds:
+      - bash ./scripts/nix-udpate-flake.sh
+    generates:
+      - flake.nix
+    sources:
+      - flake.lock
+      - go.mod
+      - go.sum
+
   nix:licenses:generate:
     desc: Generate nix/licenses.go
     cmds:

flake.lock

@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1703438236,
-        "narHash": "sha256-aqVBq1u09yFhL7bj1/xyUeJjzr92fXVvQSSEx6AdB1M=",
+        "lastModified": 1707689078,
+        "narHash": "sha256-UUGmRa84ZJHpGZ1WZEBEUOzaPOWG8LZ0yPg1pdDF/yM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5f64a12a728902226210bf01d25ec6cbb9d9265b",
+        "rev": "f9d39fb9aff0efee4a3d5f4a6d7c17701d38a1d8",
         "type": "github"
       },
       "original": {

flake.nix

@@ -17,31 +17,32 @@
           src = ./.;
           ldflags = [ "-s" "-w" "-X main.version=dev" "-X main.builtBy=flake" ];
           doCheck = false;
-          vendorHash = "sha256-wY3kIhNIqTaK9MT1VeePERNhqvbtf6bsyRTjG8nrqxU=";
+          vendorHash = "sha256-2CoQuiv8lVjdNJwwuX/rezoHRaMph0AsptLAudztqF8=";
         };
 
         devShells.default = pkgs.mkShellNoCC {
           packages = with pkgs; [
-            go
+            go_1_22
             go-task
             gofumpt
             syft
             upx
             cosign
             gnupg
+            nix-prefetch
           ];
           shellHook = "go mod tidy";
         };
 
         devShells.docs = pkgs.mkShellNoCC {
-          packages = with pkgs; with staging-pkgs.python311Packages; [
+          packages = with pkgs; with pkgs.python311Packages; [
             go-task
             htmltest
             mkdocs-material
             mkdocs-redirects
             mkdocs-minify
-            mkdocs-rss-plugin
-            mkdocs-include-markdown-plugin
+            staging-pkgs.pkgs.python311Packages.mkdocs-rss-plugin # https://github.com/NixOS/nixpkgs/pull/277350
+            staging-pkgs.pkgs.python311Packages.mkdocs-include-markdown-plugin # https://github.com/NixOS/nixpkgs/pull/277351
           ] ++ mkdocs-material.passthru.optional-dependencies.git;
         };
       }

scripts/nix-udpate-flake.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+NEW_HASH="$(nix-prefetch \
+	--option extra-experimental-features flakes \
+	'{ sha256 }: (builtins.getFlake (toString ./.)).packages.x86_64-linux.default.goModules.overrideAttrs (_: { vendorSha256 = sha256; })')"
+
+sed -i "s|vendorHash = \".*\"|vendorHash = \"${NEW_HASH}\"|" ./flake.nix