fix(zsh): pin plugin sources to commits instead of branches

1 files changed, 8 insertions, 5 deletions

diff --git a/modules/home/zsh.nix b/modules/home/zsh.nix
index ab6489d..a7817f9 100644
--- a/modules/home/zsh.nix
+++ b/modules/home/zsh.nix
@@ -1,23 +1,26 @@
 { pkgs, lib, ... }:
 
 let
+  # Pinned to commits, not branch names: a branch ref keeps moving while the
+  # hash stays put, so every upstream push breaks the build with a mismatch.
+  # To update: bump rev, then `nix flake prefetch github:<owner>/<repo>/<rev>`.
   zsh-autocomplete = pkgs.fetchFromGitHub {
     owner = "marlonrichert";
     repo = "zsh-autocomplete";
-    rev = "main";
-    hash = "sha256-KYey9sidz8VzgfM9YVaCsVXpKKdCjSHk3tuadQz9Re0=";
+    rev = "027cdab14451e98c9d36d72b1f79d9488ac88e46";
+    hash = "sha256-lnQJqbQJXz6rzClPHc9DMLbwxesvsH5tZronkG/QgJE=";
   };
   zsh-autosuggestions = pkgs.fetchFromGitHub {
     owner = "zsh-users";
     repo = "zsh-autosuggestions";
-    rev = "master";
+    rev = "85919cd1ffa7d2d5412f6d3fe437ebdbeeec4fc5";
     hash = "sha256-KmkXgK1J6iAyb1FtF/gOa0adUnh1pgFsgQOUnNngBaE=";
   };
   zsh-vi-mode = pkgs.fetchFromGitHub {
     owner = "jeffreytse";
     repo = "zsh-vi-mode";
-    rev = "master";
-    hash = "sha256-WdZHCVxVVOs4HyG5f56vAA17UWYOvb9Yf6v7M1RIdU4=";
+    rev = "91cafe4a09b6670cb8e761aa413e5f7b9e00816f";
+    hash = "sha256-5ZYcxl5sjfn1XfQ7D28Si4OXwCHHapAJSboJfNgl/5A=";
   };
 in
 {