Skip to content

chore(nix): toolchain bump #313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sabinem merged 10 commits into from
Sep 16, 2026
Merged

chore(nix): toolchain bump #313

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
3362b99
chore(nix): bump inputs
cmdoret Sep 15, 2026
663520e
fix(nix): unpin inputs, we have a lockfile
cmdoret Sep 15, 2026
15ab6a7
fix(nix): disable devenv dotenv integration -> not supported in flakes
cmdoret Sep 15, 2026
d2df5f3
chore(nix): bump claude
cmdoret Sep 15, 2026
cc2e130
chore(nix): update lock
cmdoret Sep 15, 2026
21eec43
fix(nix): macos friendly fakeroot setup
cmdoret Sep 15, 2026
9102e7d
chore(codegen): regenerate protobuf stubs for the new toolchain
sabinem Sep 16, 2026
c185579
chore(format): apply treefmt for the new toolchain
sabinem Sep 16, 2026
af85f70
chore(lint): satisfy golangci-lint 2.13
sabinem Sep 16, 2026
0851b9d
fix(nix): prettier moved out of nodePackages
sabinem Sep 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion components/backend/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
- [Usage](#usage)
- [Database Schema](#database-schema)
- [Development](#development) - [Prerequisites](#prerequisites) -
[Building](#building) - [Running Tests](#running-tests)
[Building](#building) - [Running Tests](#running-tests)
<!--toc:end-->

A gRPC-based microservice for Hackagon.
Expand Down
2 changes: 1 addition & 1 deletion components/backend/cmd/seed/steps.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -252,7 +252,7 @@ func (h *harness) createQuestions(
Label: spec.label,
Type: spec.qType,
Mandatory: spec.mandatory,
Order: int32(i + 1), //nolint:gosec // a form has a handful of fields
Order: int32(i + 1),
Options: spec.options,
PublicAnswers: spec.publicAnswers,
})
Expand Down
2 changes: 1 addition & 1 deletion components/backend/cmd/service/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ func main() {
}

// Listen
lc := net.ListenConfig{} //nolint:exhaustruct // all fields optional
lc := net.ListenConfig{} //nolint:exhaustruct_v5 // all fields optional
lis, err := lc.Listen(context.Background(), "tcp", fmt.Sprintf(":%s", cfg.Server.Port))
if err != nil {
logx.Fatal("listen", "err", err)
Expand Down
78 changes: 44 additions & 34 deletions components/backend/internal/middleware/rbac.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -173,79 +173,89 @@ func NewRBACEnforcer(cfg *config.Config) (*Enforcer, error) {
return &Enforcer{enforcer: e}, nil
}

// Casbin domain patterns. The `*` stands in for any id, so a policy written
// against these applies in every hackathon rather than to one in particular.
const (
anyHackathonPath = "/hackathon/*"
anyTeamPath = "/hackathon/*/team/*"
)

func defaultPolicies(cfg *config.Config, e *casbin.Enforcer) error {
policies := [][]string{
// HackathonOrganizer can create new hackathons
{HackathonOrganizer.String(), "/hackathon/*", Hackathon.String(), Create.String()},
{HackathonOrganizer.String(), anyHackathonPath, Hackathon.String(), Create.String()},
// Owner can read owned hackathon
{Owner.String(), "/hackathon/*", Hackathon.String(), Read.String()},
{Owner.String(), anyHackathonPath, Hackathon.String(), Read.String()},
// Owners can view it, which Read does not imply.
{Owner.String(), "/hackathon/*", Hackathon.String(), View.String()},
{Owner.String(), anyHackathonPath, Hackathon.String(), View.String()},
// Owner can write owned hackathon
{Owner.String(), "/hackathon/*", Hackathon.String(), Write.String()},
{Owner.String(), anyHackathonPath, Hackathon.String(), Write.String()},
// Owner can write owned hackathon pages
{Owner.String(), "/hackathon/*", Page.String(), Write.String()},
{Owner.String(), anyHackathonPath, Page.String(), Write.String()},
// Owner can write owned hackathon pages
{Owner.String(), "/hackathon/*", Page.String(), Read.String()},
{Owner.String(), anyHackathonPath, Page.String(), Read.String()},
// Owner can write owned hackathon phases
{Owner.String(), "/hackathon/*", Phase.String(), Write.String()},
{Owner.String(), anyHackathonPath, Phase.String(), Write.String()},
// Owner can write owned hackathon phases
{Owner.String(), "/hackathon/*", Phase.String(), Read.String()},
{Owner.String(), anyHackathonPath, Phase.String(), Read.String()},
// Owner can write owned hackathon tracks
{Owner.String(), "/hackathon/*", Track.String(), Write.String()},
{Owner.String(), anyHackathonPath, Track.String(), Write.String()},
// Owner can read owned hackathon tracks
{Owner.String(), "/hackathon/*", Track.String(), Read.String()},
{Owner.String(), anyHackathonPath, Track.String(), Read.String()},
// Owner can write owned hackathon projects
{Owner.String(), "/hackathon/*", Project.String(), Write.String()},
{Owner.String(), anyHackathonPath, Project.String(), Write.String()},
// Project Owner can write owned project
{Owner.String(), "/hackathon/*/project/*", Project.String(), Write.String()},
// Owner can read owned hackathon projects
{Owner.String(), "/hackathon/*", Project.String(), Read.String()},
{Owner.String(), anyHackathonPath, Project.String(), Read.String()},
// Owner can propose owned hackathon projects
{Owner.String(), "/hackathon/*", Project.String(), Propose.String()},
{Owner.String(), anyHackathonPath, Project.String(), Propose.String()},
// Member can read joined hackathon
{Member.String(), "/hackathon/*", Hackathon.String(), Read.String()},
{Member.String(), anyHackathonPath, Hackathon.String(), Read.String()},
// Member can view it, which Read does not imply.
{Member.String(), "/hackathon/*", Hackathon.String(), View.String()},
{Member.String(), anyHackathonPath, Hackathon.String(), View.String()},
// Member can read hackathon pages
{Member.String(), "/hackathon/*", Page.String(), Read.String()},
{Member.String(), anyHackathonPath, Page.String(), Read.String()},
// Member can read hackathon phases
{Member.String(), "/hackathon/*", Phase.String(), Read.String()},
{Member.String(), anyHackathonPath, Phase.String(), Read.String()},
// Member can read hackathon tracks
{Member.String(), "/hackathon/*", Track.String(), Read.String()},
{Member.String(), anyHackathonPath, Track.String(), Read.String()},
// Member can read hackathon projects
{Member.String(), "/hackathon/*", Project.String(), Read.String()},
{Member.String(), anyHackathonPath, Project.String(), Read.String()},
// Owner can create teams
{Owner.String(), "/hackathon/*", Team.String(), Create.String()},
{Owner.String(), anyHackathonPath, Team.String(), Create.String()},
// Owner can read teams
{Owner.String(), "/hackathon/*", Team.String(), Read.String()},
{Owner.String(), anyHackathonPath, Team.String(), Read.String()},
// Owner can edit teams
{Owner.String(), "/hackathon/*", Team.String(), Write.String()},
{Owner.String(), anyHackathonPath, Team.String(), Write.String()},
// Team member can edit team
{Member.String(), "/hackathon/*/team/*", Team.String(), Write.String()},
{Member.String(), anyTeamPath, Team.String(), Write.String()},
// Team member can edit a submission
{Member.String(), "/hackathon/*/team/*", Submission.String(), Write.String()},
{Member.String(), anyTeamPath, Submission.String(), Write.String()},
// Team member can read a submission
{Member.String(), "/hackathon/*/team/*", Submission.String(), Read.String()},
{Member.String(), anyTeamPath, Submission.String(), Read.String()},
// Hackathon owner can read a submission
{Owner.String(), "/hackathon/*", Submission.String(), Read.String()},
{Owner.String(), anyHackathonPath, Submission.String(), Read.String()},
// Owner can manage vote categories
{Owner.String(), "/hackathon/*", VoteCategory.String(), Create.String()},
{Owner.String(), "/hackathon/*", VoteCategory.String(), Read.String()},
{Owner.String(), "/hackathon/*", VoteCategory.String(), Write.String()},
{Owner.String(), anyHackathonPath, VoteCategory.String(), Create.String()},
{Owner.String(), anyHackathonPath, VoteCategory.String(), Read.String()},
{Owner.String(), anyHackathonPath, VoteCategory.String(), Write.String()},
// Owner can manage vote results
{Owner.String(), "/hackathon/*", VoteResult.String(), Create.String()},
{Owner.String(), "/hackathon/*", VoteResult.String(), Read.String()},
{Owner.String(), "/hackathon/*", VoteResult.String(), Write.String()},
{Owner.String(), "/hackathon/*", Vote.String(), Read.String()},
{Owner.String(), anyHackathonPath, VoteResult.String(), Create.String()},
{Owner.String(), anyHackathonPath, VoteResult.String(), Read.String()},
{Owner.String(), anyHackathonPath, VoteResult.String(), Write.String()},
{Owner.String(), anyHackathonPath, Vote.String(), Read.String()},
}

// AddPoliciesEx adds what is missing and skips the rest.
if _, err := e.AddPoliciesEx(policies); err != nil {
return fmt.Errorf("couldn't load grouping policies: %w", err)
}

if _, err := e.AddNamedGroupingPolicy("g2", []string{cfg.Server.AdminKeycloakID, "admin"}); err != nil {
if _, err := e.AddNamedGroupingPolicy(
"g2",
[]string{cfg.Server.AdminKeycloakID, "admin"},
); err != nil {
return fmt.Errorf("couldn't add default admin: %w", err)
}

Expand Down
2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/answer.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/capability.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon_invite.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon_member.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon_role.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon_state.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/hackathon_status.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/page.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/phase.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/project.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/project_comment.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/project_preference.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/project_status.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/question.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/submission.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/submission_status.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/team.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/track.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/entities/visibility.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/hackathon_service.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/hackathon_service_grpc.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/messages/hackathon_svc/add_owner_request.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/messages/hackathon_svc/add_owner_response.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...backend/internal/proto/hackathon/messages/hackathon_svc/approve_participant_request.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...ackend/internal/proto/hackathon/messages/hackathon_svc/approve_participant_response.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...nents/backend/internal/proto/hackathon/messages/hackathon_svc/create_invite_request.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...ents/backend/internal/proto/hackathon/messages/hackathon_svc/create_invite_response.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...nts/backend/internal/proto/hackathon/messages/hackathon_svc/create_question_request.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion ...ts/backend/internal/proto/hackathon/messages/hackathon_svc/create_question_response.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion components/backend/internal/proto/hackathon/messages/hackathon_svc/create_request.pb.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading