jiebi/CodeConvo huggingface dataset:
Change:
<ins> { lib, stdenv, fetchFromGitHub, makeWrapper, jdk, jre }: stdenv.mkDerivation { pname = "remnants-of-the-precursors"; version = "1.04"; src = fetchFromGitHub { owner = "rayfowler"; repo = "rotp-public"; rev = "e3726fc22c2c44316306c50c79779e3da1c4c140"; sha256 = "sha256-oMA8LRpBoBX7t4G+HuRz0a8g+UEwYO7Ya0Qq4j8AWec="; }; nativeBuildInputs = [ jdk makeWrapper ]; # By default, the game tries to write to the java class path. If that fails # (and it always does, since they are in the read-only nix store), it won't # launch. patches = [ ./0001-store-config-and-saves-in-XDG_CONFIG_HOME.patch ]; buildPhase = '' runHook preBuild javac -d "$out/share/" -sourcepath src src/rotp/Rotp.java runHook postBuild ''; installPhase = '' runHook preInstall # We need the assets, but don't want the source files. find "src/rotp" -type f -name '*java' -exec rm "{}" ; cp -r src/rotp/* "$out/share/rotp/" mkdir -p $out/bin makeWrapper ${jre}/bin/java $out/bin/rotp  --add-flags "-cp $out/share rotp.Rotp" runHook postInstall ''; meta = with lib; { description = ''Open-source modernization of the 1993 classic "Master of Orion", written in Java''; homepage = "https://www.remnantsoftheprecursors.com/"; # See LICENSE file in source repo for more details. license = with licenses; [ # All java files created by Ray Fowler: gpl3Only # All Java files in the src/rotp/apachemath folder: asl20 # The /src/rotp/model/planet/PlanetHeightMap.java file: # # This file is a Java-rewrite of the "Planet Generator" code (originally in C) # available from the following site: # #     http://hjemmesider.diku.dk/~torbenm/Planet # # That page includes the following statement: "Both the program itself and # maps created by the program are free for use, modification and reproduction, # both privately and for commercial purposes, as long as this does not limit # what other people may do with the program and the images they produce with # the program" { free = true; url = "http://hjemmesider.diku.dk/~torbenm/Planet"; } # All image files are copyright by Peter Penev. # # All sound files are copyright by Remi Agullo. # # Various *.txt files that contain a license notice are copyright by Jeff Colucci. This # includes English text and any foreign language translations. # # The manual.pdf file is copyright by Tom Chick. This includes any foreign language # translations of the manual contained in this repository cc-by-nc-nd-40 ]; maintainers = with maintainers; [ jtrees ]; platforms = [ "x86_64-linux" ]; }; } </ins>

Discussion:
Project description Remnants of the Precursors is an open-source modernization of the 1993 classic "Master of Orion" written in Java. Metadata homepage URL: source URL: licenses: various, primarily gpl3 (details ) platforms: linux  It (most likely) runs on many platforms, but I am specifically interested in linux support.
Change:
gtk3 ]; <del> unpackPhase = "dpkg-deb -x $src ."; </del> <ins> # The deb contains setuid permission on `chrome-sandbox`, which will actually not get installed. unpackPhase = "dpkg-deb --fsys-tarfile $src | tar -x --no-same-permissions --no-same-owner"; </ins> dontWrapGApps = true;

Discussion:
Describe the Bug The Typora pkg cannot work: To Reproduce During the package installation, This message will occur: The URL cannot be reached.
anyone can solve the problem?

Describe the bug Current version 0.9.73 is broken (download link at least). To Reproduce Steps to reproduce the behaviour: -env -i typora ... ... Expected behaviour Typora installed successfully. Screenshots ! Additional context Maybe we should replace the deb package: ${version} by Notify maintainers Metadata /nix/store/5k0id2x2sqj9k7kb9f1jzf382mpn6b2r-nix-info copying path '/nix/store/5k0id2x2sqj9k7kb9f1jzf382mpn6b2r-nix-info' from ''... system: host os: multi-user?: sandbox: version: channels(root): channels(vutaliy): nixpkgs:
The version referenced is simply outdated and not available any more from upstream. Switching to the is no solution, as the contents may change without being visible through the file name, leading to a hash mismatch and breaking the build.
I tried updating to 0.9.89 with sha256 but the .deb has setuid for the chrome sandbox and with it builds, but crashes at startup.

Describe the bug Typora have released version 0.9.80 To Reproduce Steps to reproduce the behavior: -env -i typora old version compared to the latest version in their website :( Expected behavior The latest version should be installed Screenshots If applicable, add screenshots to help explain your problem. Additional context Add any other context about the problem here. Metadata Please run and paste the result. Maintainer information:
Can do :+1:
Hey, I just noticed that the current version 0.9.73 is broken (download link at least), I'll update it to 0.9.9.33.2. Edit: I just noticed that the url using the version is now broken all versions. We should replace the deb package: ${version} by Do you have a better idea?
Change:
pydenticon = callPackage ../development/python-modules/pydenticon { }; <ins> pydeps = callPackage ../development/python-modules/pydeps { inherit (pkgs) graphviz; }; </ins> pydes = callPackage ../development/python-modules/pydes { }; py-desmume = callPackage ../development/python-modules/py-desmume { };

Discussion:
Project description Python module dependency visualization. Given a python project it can produce a graph of the dependencies, exported in the graphviz dot language.  Metadata homepage URL: source URL: license: bsd2 platforms: unix
Change:
quazip = quazip_qt4; }; <del> screenkey = python2Packages.callPackage ../applications/video/screenkey { }; </del> <ins> screenkey = callPackage ../applications/video/screenkey { }; </ins> quazip_qt4 = libsForQt5.quazip.override { qtbase = qt4;

Discussion:
Project description Screenkey is currently in version 0.9. The latest version is currently 1.1. Major changes: The repository was migrated from github to gitlab Version 1.0 switched to Python 3 and GTK 3 Metadata homepage URL: source URL: changelog URL: Nix source URL:
Change:
svt-av1 libappindicator libnotify <ins> miniupnpc </ins> ] ++ lib.optionals cudaSupport [ cudaPackages.cudatoolkit ] ++ lib.optionals stdenv.isx86_64 [

Discussion:
Package name: sunshine Latest released version: 0.22.0 <!-- Search your package here: --- Current version on the unstable channel: 0.21.0 Current version on the stable/release channel: 0.21.0 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. -- Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
with subtest("lxc-container generator configures plain container"): # reuse the existing container to save some time machine.succeed("incus exec container test -- -e /run/systemd/system/service.d/zzz-lxc-service.conf") <ins> check_sysctl("container") </ins> with subtest("lxc-container generator configures nested container"): machine.execute("incus delete --force container")

Discussion:
not working in lxc containers. But sysctl command works fine and /proc/sys/ is writable. This nix option seems to finally take effect via . And the look like this: This looks fine, So I tried to manually run the command in , and it takes effect! But this looks even weirder. Through , I got: There is an unusual . It looks like this: Obviously, there is not is NixOS. So won't run at all. I looked it up on the internet and found out it's from distrobuilder: So maybe we should just patch it? Steps to reproduce the behavior: a privilege container with NixOS in it. something to and rebuild the system , and there is no effect should run and takes effect. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Are you able to you reproduce this with unstable? There are some improvements post 23.11 to the use of the lxc generator.
Yes, I'm already on latest unstable channel. The channel information in metadata tab is incorrect because I'm using flakes. There are many hard-coded FHS paths in distrobuilder. Such as this line, that causes this problem:
can you test this change?
It works fine for me. But I don’t know if there are any problems caused by other hard-coded paths in distrobuilder. And I don’t know whether using sysctl on an unprivileged container will cause the service to fail to start, and whether the startup failure will cause problems. But it seems that sets , so there should be no problem?
Thanks for testing! There shouldn't be, since we patch and wrap the distrobuilder lxc generator. I audited it again after updating the patch for this fix. You can always see the resulting file by building . The PR has tests which should cover unprivileged containers. I've just updated them to add a check verifying systemd-sysctl successfully started.
Change:
input.gid = ids.gids.input; kvm.gid = ids.gids.kvm; render.gid = ids.gids.render; <ins> shadow.gid = ids.gids.shadow; </ins> }; system.activationScripts.users = stringAfter [ "stdio" ]

Discussion:
Describe the bug Currently, /etc/shadow belongs to the root group. For many use cases, this poses no problems, but when some program needs to use PAM to authenticate on the behalf of multiple users, the program needs to be executed as root (which seems generally unacceptable security-wise). One example is PAM authentication in Nginx, where the (see discussion on this). Expected behavior I think it's reasonable for /etc/shadow to belong to a group called "shadow" so users can make the decision on letting some programs/users read /etc/shadow. . If maintainers agree this is a reasonable thing to do, and if someone can confirm if this change is as simple as adding a group called shadow and adding a line in update-users- chown-ing /etc/shadow to root:shadow, then I'll create a PR. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
I've tackled this in PTAL.
Just as a reminder, the 20.09 release is scheduled to happen this monday, the 28th. If this is still relevant to blocking the release, then there should be some forward movement. A blocker meeting has still yet to be scheduled. But, if you consider this item to still warrant blocking the entirety of the nixos-20.09 release, the please do so on the . A template for proposing an item can be found
As soon as the above PR is merged (), it can be backported to 20.09, and this issue won't be blocking 20.09 anymore.
Change:
extraRevision = "-tlpdb${toString tlpdbVersion.revision}"; extraVersion = "-tlpdb-${toString tlpdbVersion.revision}"; <ins> extraNativeBuildInputs = [ installShellFiles ]; </ins> # build Data.tlpdb.lua (part of the 'tlType == "run"' package) postUnpack = '' if [[ -f "$out"/scripts/texdoc/texdoc.tlu ]]; then

Discussion:
texlive's texdoc has imported a . Maybe we can support it. can work, will search to get the package names but So there is still something needed to be done :cry:
Change:
stdenv.mkDerivation (finalAttrs: { pname = "qmplay2"; <del> version = "23.06.17"; </del> <ins> version = "23.08.22"; </ins> src = fetchFromGitHub { owner = "zaps166"; repo = "QMPlay2"; rev = finalAttrs.version; fetchSubmodules = true; <del> hash = "sha256-f4lIXB0eTyteCJdWFP0XnsnxGWc32CV+HlqpaCjmgOE="; </del> <ins> hash = "sha256-Ug7WAqZ+BxspQUXweL/OnVBGCsU60DOWNexbi0GpDo0="; </ins> }; nativeBuildInputs = [

Discussion:
Package name: Latest released version: <!-- Search your package here: --- Current version on the unstable channel: Current version on the stable/release channel: <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR.
Change:
<del> { lib, buildPythonPackage, fetchPypi, isPy3k, pytest, mock, setuptools_scm }: </del> <ins> { lib, buildPythonPackage, fetchPypi, fetchpatch, isPy3k, pytest, mock, setuptools_scm }: </ins> buildPythonPackage rec { pname = "pytest-mock";

Discussion:
Caused by the pytest update in . Upstream issue filed at
Adding this from my overlay solves it (but still waiting for a release):
Couldn't we just backport that for now instead of bumping the whole package?
I was mentioning this as a quickfifx, backporting the commit seems more sensible. Let's ask the maintainer
Change:
<ins> { lib, stdenv, rustPlatform, fetchFromGitHub, buildNpmPackage, makeWrapper, ffmpeg_5, git, pkg-config, sqlite, libvaSupport ? stdenv.hostPlatform.isLinux, libva, }: rustPlatform.buildRustPackage rec { pname = "dim"; version = "0-unstable-2023-12-29"; src = fetchFromGitHub { owner = "Dusk-Labs"; repo = "dim"; rev = "3ccb4ab05fc1d7dbd4ebbba9ff2de0ecc9139b27"; hash = "sha256-1mgbrDnIkIdWy78uj4EjjgwBQxw/rIS1LCFNscXXPbk="; }; frontend = buildNpmPackage { pname = "dim-ui"; inherit version; src = "${src}/ui"; postPatch = '' ln -s ${./package-lock.json} package-lock.json ''; npmDepsHash = "sha256-6oSm3H6RItHOrBIvP6uvR7sBboBRWFuP3VwU38GMfgQ="; installPhase = '' runHook preInstall cp -r build $out runHook postInstall ''; }; patches = [ # Upstream uses a 'ffpath' function to look for config directory and # (ffmpeg) binaries in the same directory as the binary. Patch it to use # the working dir and PATH instead. ./relative-paths.diff ]; postConfigure = '' ln -ns $frontend ui/build ''; nativeBuildInputs = [ makeWrapper pkg-config git ]; buildInputs = [ sqlite ] ++ lib.optional libvaSupport libva; buildFeatures = lib.optional libvaSupport "vaapi"; cargoLock = { lockFile = ./Cargo.lock; outputHashes = { "mp4-0.8.2" = "sha256-OtVRtOTU/yoxxoRukpUghpfiEgkKoJZNflMQ3L26Cno="; "nightfall-0.3.12-rc4" = "sha256-DtSXdIDg7XBgzEYzHdzjrHdM1ESKTQdgByeerH5TWwU="; }; }; checkFlags = [ # Requires network "--skip=tmdb::tests::johhny_test_seasons" "--skip=tmdb::tests::once_upon_get_year" "--skip=tmdb::tests::tmdb_get_cast" "--skip=tmdb::tests::tmdb_get_details" "--skip=tmdb::tests::tmdb_get_episodes" "--skip=tmdb::tests::tmdb_get_seasons" "--skip=tmdb::tests::tmdb_search" # Broken doctest "--skip=dim-utils/src/lib.rs" ]; postInstall = '' wrapProgram $out/bin/dim  --prefix PATH : ${lib.makeBinPath [ffmpeg_5]} ''; meta = { homepage = "https://github.com/Dusk-Labs/dim"; description = "Self-hosted media manager"; license = lib.licenses.agpl3Only; mainProgram = "dim"; maintainers = [ lib.maintainers.misterio77 ]; platforms = lib.platforms.unix; }; } </ins>

Discussion:
Project description Dim is a self-hosted media manager. With minimal setup, Dim will organize and beautify your media collections, letting you access and play them anytime from anywhere. Metadata homepage URL: source URL: license: GNU General Public License v2.0 platforms: Unix
Not sure if it is at all useful but I have been trying (failing) to make a flake for this. So far I have But I get
I have gotten it to work. Steps to reproduce: a with the content below
I'll try to make a normal and a module at some point when I have time.
entirely unrelated, but if you're good at packaging applications with would you mind taking a look at if you get a chance? :heart:
I marked this as stale due to inactivity. &rarr;
I have this ready to go, will open a PR later today.
Change:
default = {}; example = literalExample '' { <del> "example.org" = "/srv/http/nginx"; </del> <ins> "example.org" = null; </ins> "mydomain.org" = null; } ''; description = '' <del> A list of extra domain names, which are included in the one certificate to be issued, with their own server roots if needed. </del> <ins> A list of extra domain names, which are included in the one certificate to be issued. Setting a distinct server root is deprecated and not functional in 20.03+ </ins> ''; };

Discussion:
introduces DNS-01 challenge support, yet states only webroot verification is supported. We should update this file, and add a section explaining how to configure DNS-01 challenges. cc
I'll try and do that tonight
I ended up rewriting the whole doc for acme, it was badly outdated and not particularly helpful. Still need to build an example for DNS-01, will try do that tomorrow.
Change:
tg_owt = callPackage ./tg_owt.nix {}; in mkDerivation rec { pname = "telegram-desktop"; <del> version = "2.7.5"; </del> <ins> version = "2.8.11"; # Note: Update via pkgs/applications/networking/instant-messengers/telegram/tdesktop/update.py </ins> # Telegram-Desktop with submodules <del> src = fetchurl { url = "https://github.com/telegramdesktop/tdesktop/releases/download/v${version}/tdesktop-${version}-full.tar.gz"; sha256 = "sha256-9GxBw5ii9Musjq7D3KMf/P5BA4h690EgXRbhynHwO98="; </del> <ins> src = fetchFromGitHub { owner = "telegramdesktop"; repo = "tdesktop"; rev = "v${version}"; fetchSubmodules = true; sha256 = "020ycgb77vx7rza590i3csrvq1zgm15rvpxqqcp0xkb4yh71i3hb"; </ins> }; <del> patches = [ # fixes issue with ffmpeg>=4.4 crashes, hasn't been upstreamed yet (fetchpatch { url = "https://raw.githubusercontent.com/gentoo/gentoo/1c91884873968997be4b0c954169d04dc839f1db/net-im/telegram-desktop/files/tdesktop-2.7.4-voice-crash.patch"; sha256 = "sha256-inLXcP70yJlkkmdeXlc3HRL7Vt+Sf00LLJG33gwBKdY="; }) (fetchpatch { url = "https://raw.githubusercontent.com/gentoo/gentoo/1c91884873968997be4b0c954169d04dc839f1db/net-im/telegram-desktop/files/tdesktop-2.7.4-voice-ffmpeg44.patch"; sha256 = "sha256-p57LipNf7BDhVvNKRuicVqx0vU6IBL/Cvr5BAfLF4Hs="; }) ]; </del> <ins> patches = [(fetchpatch { # ref: https://github.com/desktop-app/lib_webview/pull/9 url = "https://github.com/desktop-app/lib_webview/commit/75e924934eee8624020befbef1f3cb5b865d3b86.patch"; sha256 = "sha256-rN4FVK4KT+xNf9IVdcpbxMqT0+t3SINJPRRQPyMiDP0="; stripLen = 1; extraPrefix = "Telegram/lib_webview/"; })]; </ins> postPatch = '' <del> substituteInPlace Telegram/lib_spellcheck/spellcheck/platform/linux/linux_enchant.cpp  --replace '"libenchant-2.so.2"' '"${enchant2}/lib/libenchant-2.so.2"' </del> substituteInPlace Telegram/CMakeLists.txt  --replace '"''${TDESKTOP_LAUNCHER_BASENAME}.appdata.xml"' '"''${TDESKTOP_LAUNCHER_BASENAME}.metainfo.xml"'

Discussion:
, CVSSv3=5.3 (nixos-21.05, nixos-unstable) A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client. Scanned versions: nixos-21.05: ; nixos-unstable: . Cc Cc Cc
Change:
# We must build at least one type of libraries assert enableShared || enableStatic; <del> # Python isn't supported when cross-compiling assert enablePython -> stdenv.hostPlatform == stdenv.buildPlatform; </del> assert enableNumpy -> enablePython; # Boost <1.69 can't be built on linux with clang >8, because pth was removed

Discussion:
Steps to reproduce the behavior: current "master" () When removing the check in boost (which seems invalid, it does build fine): actual reason is: It tries to use the aarch64 python3.9 executable on the host system (x84_64).
Change:
mapAttrs (name: value: { assertion = value.generatePrivateKeyFile -> (value.privateKey == null); message = "networking.wireguard.interfaces.${name}.generatePrivateKey must not be set if networking.wireguard.interfaces.${name}.privateKey is set."; <del> }) cfg.interfaces)); </del> <ins> }) cfg.interfaces)) ++ map ({ interfaceName, peer, ... }: { assertion = (peer.presharedKey == null) || (peer.presharedKeyFile == null); message = "networking.wireguard.interfaces.${interfaceName} peer «${peer.publicKey}» has both presharedKey and presharedKeyFile set, but only one can be used."; }) all_peers; </ins> boot.extraModulePackages = [ kernel.wireguard ]; environment.systemPackages = [ pkgs.wireguard-tools ]; <del> systemd.services = (mapAttrs' generateSetupServiceUnit cfg.interfaces) </del> <ins> systemd.services = (mapAttrs' generateInterfaceUnit cfg.interfaces) // (listToAttrs (map generatePeerUnit all_peers)) </ins> // (mapAttrs' generateKeyServiceUnit (filterAttrs (name: value: value.generatePrivateKeyFile) cfg.interfaces)); systemd.paths = mapAttrs' generatePathUnit (filterAttrs (name: value: value.privateKeyFile != null) cfg.interfaces); <del> }; </del> <ins> }); </ins> }

Discussion:
In there was an option introduced that indefinitely tries to restart the wireguard service until all peer hostnames are resolved. Instead it should use as introduced by instead. This feature will be available in the next snapshot release of wireguard. cc
Alright 0.0. has been released for the purpose of this disaster being fixed. care to cleanup the mess?
I fail to see what mess/disaster you're refering to.
Change:
, git , perl , python3 <ins> , stdenv </ins> , stdenvNoCC , ninja , autoPatchelfHook

Discussion:
The package contains compiler toolchain binaries (like ) and libc libraries to be used by the compiler outputs. When is run on the package, it incorrectly adds the internal libc directory to the rpath of the compiler binaries. This causes the compiler binaries to break with an error message like this: This problem was introduced in / This was done because the systemd package wanted to use to add dependencies to its rpath. But using to do this had an undesired side effect of removing glibc from the rpath (for a reason I don't yet understand). So s previous behavior to ignore libc dependencies was changed. a flag to autoPatchelfHook telling it to leave libc in the rpath if it's found. Enable this only on systemd. the libc change to autoPatchelfHook altogether, and instead modify findLibs and make-initrd-ng to automatically check libc. Either solution would restore the old libc behavior of autoPatchelfHook for everyone else. The former would then add different code for systemd, and the latter would change a couple other programs to account for lacking this new behavior
Fixed by
Change:
, libXtst, libvorbis, hunspell, lzo, xz, bzip2, libiconv , qtbase, qtsvg, qtwebkit, qtx11extras, qttools, qmake , wrapQtAppsHook <ins> , wrapGAppsHook </ins> , withCC ? true, opencc , withEpwing ? true, libeb , withExtraTiff ? true, libtiff

Discussion:
Currently, most functions work without problem. However, when I try to add new paths to search dictionaries, it crashes with the following error message: Steps to reproduce the behavior: goldendict Edit Dictionaries Source Add crashes A dialog should pop up to select the path. Reproduced using the latest master branch of this repo. Using startx and qtile as the window manager I've submitted a PR to fix this issue (see ) <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --