From 2aba7ac90dce096e369dbad70983794c158a5eac Mon Sep 17 00:00:00 2001
From: Sergei Zimmerman <sergei@zimmerman.foo>
Date: Mon, 18 Aug 2025 21:42:55 +0300
Subject: [PATCH] hydra: Fix otherNixes.nix_2_3

25.05 has it marked as insecure, but we don't care about it
for testing purposes.

(cherry picked from commit 051290b155c154ff937d804878026334e74b8685)
---
 tests/nixos/default.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/tests/nixos/default.nix b/tests/nixos/default.nix
index f0b1a8865..8f72eb226 100644
--- a/tests/nixos/default.nix
+++ b/tests/nixos/default.nix
@@ -77,7 +77,15 @@ let
     { lib, pkgs, ... }:
     {
       imports = [ checkOverrideNixVersion ];
-      nix.package = lib.mkForce pkgs.nixVersions.nix_2_3;
+      nix.package = lib.mkForce (
+        pkgs.nixVersions.nix_2_3.overrideAttrs (o: {
+          meta = o.meta // {
+            # This version shouldn't be used by end-users, but we run tests against
+            # it to ensure we don't break protocol compatibility.
+            knownVulnerabilities = [ ];
+          };
+        })
+      );
     };
 
   otherNixes.nix_2_13.setNixPackage =
@@ -88,6 +96,8 @@ let
         nixpkgs-23-11.legacyPackages.${pkgs.stdenv.hostPlatform.system}.nixVersions.nix_2_13.overrideAttrs
           (o: {
             meta = o.meta // {
+              # This version shouldn't be used by end-users, but we run tests against
+              # it to ensure we don't break protocol compatibility.
               knownVulnerabilities = [ ];
             };
           })