ayugram-desktop: 7.0.9 -> 7.2.9

[Prince213]

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.
• Follows the automation/AI policy.

[nixpkgs-review-gha]

✅ nixpkgs-review result

Generated using nixpkgs-review-gha (05be241)

Command: nixpkgs-review pr 571310
Commit: 644ea847dd29b2747a2810bc5fe619c9de121e44 (subsequent changes)
Merge: 40f7e6405508fe76403f6d84c48d013f33eae913

Triggered by @Prince213 (25235514)
Logs: https://github.com/Prince213/nixpkgs-review-gha/actions/runs/37626589876/attempts/2

Download packages from cache:

• x86_64-linux

  nix-store -r \
    --option binary-caches 'https://cache.nixos.org/ https://prince213.cachix.org' \
    --option trusted-public-keys '
      cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
      prince213.cachix.org-1:/IaNJqdZLM9GDpvGnsTAu2t+I9jbKzM5ZElQUz+9JXw=
    ' \
    /nix/store/29j3i9h838yk7g0p595dcglkkc0w9saq-ayugram-desktop-7.2.9

• aarch64-linux

  nix-store -r \
    --option binary-caches 'https://cache.nixos.org/ https://prince213.cachix.org' \
    --option trusted-public-keys '
      cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
      prince213.cachix.org-1:/IaNJqdZLM9GDpvGnsTAu2t+I9jbKzM5ZElQUz+9JXw=
    ' \
    /nix/store/p9yiv86a560avihp6s62q68hvaj97rjr-ayugram-desktop-7.2.9

• aarch64-darwin

  nix-store -r \
    --option binary-caches 'https://cache.nixos.org/ https://prince213.cachix.org' \
    --option trusted-public-keys '
      cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
      prince213.cachix.org-1:/IaNJqdZLM9GDpvGnsTAu2t+I9jbKzM5ZElQUz+9JXw=
    ' \
    /nix/store/k1bqimiq1ilfm7v1w8kj8bwy9s33h81y-ayugram-desktop-7.2.9

---

x86_64-linux

✅ 1 package built:

• ayugram-desktop

---

aarch64-linux

✅ 1 package built:

• ayugram-desktop

---

aarch64-darwin (sandbox = relaxed)

✅ 1 package built:

• ayugram-desktop

[Misaka13514]

This PR fixes CVE-2026-107181 in AyuGram Desktop 7.0.9: https://nvd.nist.gov/vuln/detail/cve-2026-107181

• https://github.com/AyuGram/AyuGramDesktop/blob/v7.0.9/Telegram/SourceFiles/core/sandbox.cpp#L354-L356
• https://github.com/AyuGram/AyuGramDesktop/blob/v7.0.9/Telegram/SourceFiles/support/support_helper.cpp#L673-L751

[Misaka13514]

@Prince213 Should we backport it to 26.05?

[nixpkgs-ci]

Backport failed for release-26.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-26.05
git worktree add -d .worktree/backport-571310-to-release-26.05 origin/release-26.05
cd .worktree/backport-571310-to-release-26.05
git switch --create backport-571310-to-release-26.05
git cherry-pick -x cad77a1a4ff5245daac19fbe0e91847f0cd7c03d 644ea847dd29b2747a2810bc5fe619c9de121e44