jiebi/CodeConvo huggingface dataset:
Change:
autoreconfHook ] ++ lib.optional withQt5 qt5.wrapQtAppsHook; <del> pythonPath = with python3Packages; [ </del> <ins> pythonPath = with python311Packages; [ </ins> dbus pillow pygobject3

Discussion:
Steps to reproduce the behavior: build .#hplip Looks like more fallout from Python 3.12. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Change:
<ins> { lib , rustPlatform , fetchFromGitHub , cmake , pkg-config , wrapGAppsHook , atk , glib , gtk3-x11 }: rustPlatform.buildRustPackage rec { pname = "ukmm"; version = "0.7.1"; src = fetchFromGitHub { owner = "NiceneNerd"; repo = pname; rev = "v${version}"; sha256 = "sha256-TvRaaAVJPqvTTqs+d5d4y1KmDTvE41uP5AykLtHxD9w="; }; cargoLock = { lockFile = ./Cargo.lock; outputHashes = { "catppuccin-egui-1.0.2" = "sha256-+ILfvDgZxe/QPJuVqIbRjaHNovpRAX+ym2QZ96glb4w="; "ecolor-0.20.0" = "sha256-uTDkNRWsA1nM8Qhb0X2LjVDRuaW31vWxR8kDLL27BVE="; "egui-notify-0.4.0" = "sha256-jybtUnv9xqzulZ5nfg+T1u8iTOsPjKGVVQ7JhwbvPdU="; "egui_commonmark-0.6.0" = "sha256-hsVbtL2F+jifnzN6FgcDAVtLd1bVxTs0twn0SMvq9eU="; "egui_dock-0.2.1" = "sha256-gGIO0boXKxLu0ABDH/uJhEZEoE/ql8E65LRmr0Xhv3s="; "junction-0.2.0" = "sha256-6+pPp5wG1NoIj16Z+OvO4Pvy0jnQibn/A9cTaHAEVq4="; "msbt-0.1.1" = "sha256-PtBs60xgYrwS7yPnRzXpExwYUD3azIaqObRnnJEL5dE="; "msyt-1.2.1" = "sha256-aw5whCoQBhO0u9Fx2rTO1sRuPdGnAAlmPWv5q8CbQcI="; }; }; RUSTC_BOOTSTRAP = true; nativeBuildInputs = [ cmake pkg-config wrapGAppsHook ]; buildInputs = [ atk glib gtk3-x11 ]; cargoTestFlags = [ "--all" ]; checkFlags = [ # Requires a game dump of Breath of the Wild "--skip=gui::tasks::tests::remerge" "--skip=pack::tests::pack_mod" "--skip=project::tests::project_from_mod" "--skip=tests::read_meta" "--skip=unpack::tests::read_mod" "--skip=unpack::tests::unpack_mod" "--skip=unpack::tests::unzip_mod" # Requires Clear Camera mod "--skip=bnp::test_convert" ]; meta = with lib; { description = "A new mod manager for The Legend of Zelda: Breath of the Wild"; homepage = "https://github.com/NiceneNerd/ukmm"; changelog = "https://github.com/NiceneNerd/ukmm/blob/${src.rev}/CHANGELOG.md"; license = licenses.gpl3Plus; maintainers = with maintainers; [ kira-bruneau ]; platforms = platforms.linux; }; } </ins>

Discussion:
Project description A cross platform mod loader for The Legend of Zelda: Breath of the Wild in CEMU. Metadata homepage URL: source URL: license: GPL3+ platforms: Windows, Linux
I actually have this packaged in my nur repo: , but I let it go out of date for a bit. (should get back to updating that ). You can test it out with The version I packaged works really well (or at least when I was still using it ) - it was just frustrating to maintain with all the patches & new dependencies, and I decided to hold of on merging to nixpkgs for now.
Maybe should be made instead?
Please test / .
Change:
<del> { stdenv, buildGoPackage, fetchFromGitHub, bash, go-bindata}: </del> <ins> { stdenv, buildGoModule, fetchFromGitHub, go-bindata, nixosTests }: </ins> <del> buildGoPackage rec { </del> <ins> buildGoModule rec { </ins> pname = "traefik"; <del> version = "1.7.14"; goPackagePath = "github.com/containous/traefik"; </del> <ins> version = "2.2.0"; </ins> src = fetchFromGitHub { owner = "containous"; repo = "traefik"; rev = "v${version}"; <del> sha256 = "1j3p09j8rpdkp8v4d4mz224ddakkvhzchvccm9qryrqc2fq4022v"; </del> <ins> sha256 = "1dcazssabqxr9wv3dds3z7ks3y628qa07vgnn3hpdwxzm2b2ma92"; </ins> }; <del> nativeBuildInputs = [ go-bindata bash ]; buildPhase = '' runHook preBuild ( cd go/src/github.com/containous/traefik bash ./script/make.sh generate CODENAME=$(awk -F "=" '/CODENAME=/ { print $2}' script/binary) go build -ldflags " -X github.com/containous/traefik/version.Version=${version}  -X github.com/containous/traefik/version.Codename=$CODENAME  " -a -o $bin/bin/traefik ./cmd/traefik ) runHook postBuild </del> <ins> modSha256 = "0w3ssxvsmq8i6hbfmn4ig2x13i2nlqy5q1khcblf9pq5vhk202qx"; subPackages = [ "cmd/traefik" ]; nativeBuildInputs = [ go-bindata ]; passthru.tests = { inherit (nixosTests) traefik; }; preBuild = '' go generate CODENAME=$(awk -F "=" '/CODENAME=/ { print $2}' script/binary) makeFlagsArray+=("-ldflags= -X github.com/containous/traefik/version.Version=${version}  -X github.com/containous/traefik/version.Codename=$CODENAME") </ins> ''; meta = with stdenv.lib; { homepage = "https://traefik.io"; description = "A modern reverse proxy"; license = licenses.mit; <del> maintainers = with maintainers; [ hamhut1066 vdemeester ]; </del> <ins> maintainers = with maintainers; [ vdemeester ]; </ins> }; }

Discussion:
Project description Traefik is a microservice oriented reverse proxy written in Go. It configures itself by container labels from docker/other provider or from text files. It does TLS termination and can fetch certs from let's encrypt automatically. A nixOS module to add configuration to the file backend (similar to the nginx ones) seems easy to implement. Traefik 1.0 is currently packaged (, ) Traefik 2.0 is NOT backwards compatible A package for 2.0 (not source built) has been written up by Metadata homepage URL: source URL: license: MIT platforms: linux, darwin, freebsd, openbsd, windows
Change:
<del> WGET_ARGS=( https://download.kde.org/stable/release-service/22.04.0/src -A '*.tar.xz' ) </del> <ins> WGET_ARGS=( https://download.kde.org/stable/release-service/22.04.1/src -A '*.tar.xz' ) </ins>

Discussion:
! Steps to reproduce the behavior: ... ... ... no fail system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
From what I looked earlier, probably due to poppler update. Here's similar stuff for inkscape:
Should be fixed by
Change:
nativeCheckInputs = path; postInstall = '' <del> wrapProgram $out/bin/rga  --prefix PATH ":" "${lib.makeBinPath path}" </del> <ins> for bin in $out/bin/*; do wrapProgram $bin  --prefix PATH ":" "${lib.makeBinPath path}" done </ins> ''; meta = with lib; {

Discussion:
As of (),  ships with a binary called . However, the Nix package does not include in , which means that this executable fails if is not already in for some reason. Steps to reproduce the behavior: neither nor are installed/in in any other way (works) (produces ) (the UI will open, indicating that it works) In all honesty, this might be the expected behavior. is not the main functionality of , so it might be okay to ship it as is, where running will report that needs to be installed. However, I was caught off guard by this, and I expected that would work. and Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
coreutils = callPackage ../tools/misc/coreutils { aclSupport = stdenv.isLinux; <ins> attrSupport = stdenv.isLinux; </ins> }; coreutils-prefixed = coreutils.override { withPrefix = true; singleBinary = false; };

Discussion:
When trying to copy a file with extended attributes, the attributes don't get copied. When forcing to copy the attributes, it reports: The issue was probably introduced with multiple outputs support. Previously, would find libs&headers while building, propagated through . But now, only the libs propagate and not , so can't find the header and disables support. Not sure if coreutils should just list as a (when is) or if should somehow signal that its output should propagate too. System: Nix version: Nixpkgs version:
By default, the output should be propagated and it should propagate libs and some others in turn. I'll re-check all this later (if noone else is faster).
Hmm, as far as I can tell from the git logs, at least explicitly didn't propagate .
When I tested 16.03 it doesn't have xattr support there either. But anyway, enables it.
I'm pretty sure it used to work at some point, but it might have been a few years ago :) Thanks!
Change:
"-Dgallium-opencl=icd" # Enable the gallium OpenCL frontend "-Dclang-libdir=${llvmPackages.clang-unwrapped.lib}/lib" ] ++ optional enablePatentEncumberedCodecs <del> "-Dvideo-codecs=h264dec,h264enc,h265dec,h265enc,vc1dec"; </del> <ins> "-Dvideo-codecs=h264dec,h264enc,h265dec,h265enc,vc1dec" ++ optional (vulkanLayers != []) "-D vulkan-layers=${builtins.concatStringsSep "," vulkanLayers}"; </ins> buildInputs = with xorg; [ expat llvmPackages.libllvm libglvnd xorgproto

Discussion:
Our mesa build is missing the device-select and overlay layers so that functionality doesn't work. Add to mesonFlags and to postInstall to get device-select working. This doesn't get the overlay working, probably needs a similar change. Other distros eg arch do include these layers: The functionality these layers enable is described .
Ah, got the overlay working too, needs that replace in explicit_layer.d too. !
Change:
(fetchNuGet { pname = "Microsoft.Identity.Client.Extensions.Msal"; version = "4.60.3"; sha256 = "19l92ynvrhb76r0zpj8qhyymxgz45knyhdqr6za4s7rzbssibi08"; }) (fetchNuGet { pname = "Microsoft.IdentityModel.Abstractions"; version = "6.35.0"; sha256 = "0i6kdvqdbzynzrr4g5idx4ph4ckggsbsy0869lwa10fhmyxrh73g"; }) (fetchNuGet { pname = "Microsoft.NET.StringTools"; version = "17.4.0"; sha256 = "1smx30nq22plrn2mw4wb5vfgxk6hyx12b60c4wabmpnr81lq3nzv"; }) <del> (fetchNuGet { pname = "Microsoft.NET.Test.Sdk"; version = "17.9.0"; sha256 = "1lls1fly2gr1n9n1xyl9k33l2v4pwfmylyzkq8v4v5ldnwkl1zdb"; }) </del> <ins> (fetchNuGet { pname = "Microsoft.NET.Test.Sdk"; version = "17.10.0"; sha256 = "13g8fwl09li8fc71nk13dgkb7gahd4qhamyg2xby7am63nlchhdf"; }) </ins> (fetchNuGet { pname = "Microsoft.NETCore.Platforms"; version = "1.0.1"; sha256 = "01al6cfxp68dscl15z7rxfw9zvhm64dncsw09a1vmdkacsa2v6lr"; }) (fetchNuGet { pname = "Microsoft.NETCore.Platforms"; version = "1.1.0"; sha256 = "08vh1r12g6ykjygq5d3vq09zylgb84l63k49jc4v8faw9g93iqqm"; }) (fetchNuGet { pname = "Microsoft.NETCore.Platforms"; version = "3.1.0"; sha256 = "1gc1x8f95wk8yhgznkwsg80adk1lc65v9n5rx4yaa4bc5dva0z3j"; })

Discussion:
update script errors when executed as: Logs: -shell --argstr package bicep logs at: Update script should not error. It should update package. An update for bicep 0.28.1 is available. CC
Error looks like a red herring, I see it during successful updates. Seems like a problem with a dependency version in that release. I was able to run it on a newer commit after they bump dependencies. When you run the fetch-deps I see this on that release:
Change:
prefixLength = 96; }; }; <ins> mappings = { "192.0.2.42" = "2001:db8::2"; }; </ins> }; };

Discussion:
When using the provided tayga service, it's not really possible to setup explicit mappings. This seems like an oversight. N/A Some sort of should exist. N/A It is possible to workaround the issue by sticking them into but... uh yeah anyway. :sweat_smile: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- (?) Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
stdenv.mkDerivation rec { pname = "pgbouncer"; <del> version = "1.16.0"; </del> <ins> version = "1.16.1"; </ins> src = fetchurl { url = "https://pgbouncer.github.io/downloads/files/${version}/${pname}-${version}.tar.gz"; <del> sha256 = "0li66jk1v07bpfmmqzcqjn5vkhglfhwnbncc5bpalg5qidhr38x4"; </del> <ins> sha256 = "1z7p3ghpmbp5qv1bz9s186jn0hfnr300dc5p0hmh6vbnwklpfx08"; </ins> }; nativeBuildInputs = [ pkg-config ];

Discussion:
, CVSSv3=8.1 (nixos-unstable) When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1. Scanned versions: nixos-unstable: . Cc
Change:
<ins> { lib , buildNpmPackage , fetchFromGitHub , jq , libsecret , pkg-config , nodePackages , runCommand , vscode-js-debug , nix-update-script }: buildNpmPackage rec { pname = "vscode-js-debug"; version = "1.90.0"; src = fetchFromGitHub { owner = "microsoft"; repo = "vscode-js-debug"; rev = "v${version}"; hash = "sha256-SmWPKO7CEXaOIkuf9Y+825EfGsIz+rWlnCsh1T2UEF0="; }; npmDepsHash = "sha256-DfeaiqKadTnGzOObK01ctlavwqTMa0tqn59sLZMPvUM="; nativeBuildInputs = [ pkg-config nodePackages.node-gyp jq ]; buildInputs = [ libsecret ]; postPatch = '' jq ' .scripts.postinstall |= empty |             # tries to install playwright, not necessary for build .scripts.build |= "gulp dapDebugServer" |   # there is no build script defined .bin |= "./dist/src/dapDebugServer.js"      # there is no bin output defined ' ${src}/package.json > package.json ''; makeCacheWritable = true; npmInstallFlags = [ "--include=dev" ]; preBuild = '' export PATH="node_modules/.bin:$PATH" ''; passthru.updateScript = nix-update-script { extraArgs = [ "--version-regex" "v((?!d{4}.d.d{3}).*)" ]; }; passthru.tests.test = runCommand "${pname}-test" { nativeBuildInputs = [ vscode-js-debug ]; meta.timeout = 60; } '' output=$(js-debug --help 2>&1) if grep -Fw -- "Usage: dapDebugServer.js [port|socket path=8123] [host=localhost]" - <<< "$output"; then touch $out else echo "Expected help output was not found!" >&2 echo "The output was:" >&2 echo "$output" >&2 exit 1 fi ''; meta = with lib; { description = "A DAP-compatible JavaScript debugger"; longDescription = '' This is a [DAP](https://microsoft.github.io/debug-adapter-protocol/)-based JavaScript debugger. It debugs Node.js, Chrome, Edge, WebView2, VS Code extensions, and more. It has been the default JavaScript debugger in Visual Studio Code since 1.46, and is gradually rolling out in Visual Studio proper. ''; homepage = "https://github.com/microsoft/vscode-js-debug"; changelog = "https://github.com/microsoft/vscode-js-debug/blob/v${version}/CHANGELOG.md"; mainProgram = "js-debug"; license = licenses.mit; maintainers = with maintainers; [ zeorin ]; }; } </ins>

Discussion:
Project description <!-- Describe the project a little: --A DAP-based JS debugger built for VSCode. Can be built standalone and used with other editors that support the Debug Adapter Protocol. Supercedes For example used standalone in Neovim via Metadata homepage URL: source URL: license: mit platforms: unix, linux, darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I created a PR: Your :+1:'s and reviews would be appreciated.
Change:
, lib , fetchFromGitHub , fetchFromGitLab <del> , fetchpatch , fetchurl </del> , Foundation , abseil-cpp , cmake <ins> , eigen , gtest </ins> , libpng , nlohmann_json , nsync

Discussion:
Meaningful errors Full logs: system: host os: multi-user?: sandbox: version: channels(root): channels(jarrod): nixpkgs: Source file with issue:  I tried to locate where is defined, but was unable to.
Edited the issue and I'm not sure if GitHub retroactively sends notifications, so pardon the double-mention:
Will be fixed by .
Change:
{ lib <del> , buildGoModule </del> <ins> , rustPlatform </ins> , fetchFromGitHub }: <del> buildGoModule rec { </del> <ins> rustPlatform.buildRustPackage rec { </ins> pname = "tailspin"; <del> version = "0.1.1"; </del> <ins> version = "1.4.0"; </ins> src = fetchFromGitHub { owner = "bensadeh"; <del> repo = pname; rev = version; sha256 = "sha256-f9VfOcLOWJ4yr/CS0lqaqiaTfzOgdoI9CaS70AMNdsc="; </del> <ins> repo = "tailspin"; rev = "refs/tags/${version}"; hash = "sha256-mtMUHiuGuzLEJk4S+AnpyYGPn0naIP45R9itzXLhG8g="; </ins> }; <del> vendorHash = "sha256-gn7/pFw7JEhkkd/PBP4jLUKb5NBaRE/rb049Ic/Bu7A="; CGO_ENABLED = 0; subPackages = [ "." ]; </del> <ins> cargoHash = "sha256-M+TUdKtR8/vpkyJiO17LBPDgXq207pC2cUKE7krarfY="; </ins> meta = with lib; { <del> description = "A log file highlighter and a drop-in replacement for `tail -f`"; </del> <ins> description = "A log file highlighter"; </ins> homepage = "https://github.com/bensadeh/tailspin"; <ins> changelog = "https://github.com/bensadeh/tailspin/blob/${version}/CHANGELOG.md"; </ins> license = licenses.mit; maintainers = with maintainers; [ dit7ya ]; mainProgram = "spin";

Discussion:
Package name: tailspin Latest released version: 1.4.0 <!-- Search your package here: --- Current version on the unstable channel: 0.1.1 Current version on the stable/release channel: 0.1.1 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers:
Change:
}; }; <del> syncthing-gtk = buildPythonPackage rec { version = "0.6.3"; name = "syncthing-gtk-${version}"; src = pkgs.fetchFromGitHub { owner = "syncthing"; repo = "syncthing-gtk"; rev = "v${version}"; sha256 = "1qa5bw2qizjiqvkms8i31wsjf8cw9p0ciamxgfgq6n37wcalv6ms"; }; disabled = isPy3k; propagatedBuildInputs = with self; [ pkgs.syncthing dateutil pyinotify pkgs.libnotify pkgs.psmisc pygobject3 pkgs.gtk3 ]; patchPhase = '' substituteInPlace "scripts/syncthing-gtk"  --replace "/usr/share" "$out/share" substituteInPlace setup.py --replace "version = get_version()" "version = '${version}'" ''; meta = { description = " GTK3 & python based GUI for Syncthing "; maintainers = with maintainers; [ DamienCassou ]; platforms = pkgs.syncthing.meta.platforms; homepage = "https://github.com/syncthing/syncthing-gtk"; license = licenses.gpl2; }; }; </del> tarsnapper = buildPythonPackage rec { name = "tarsnapper-0.2.1"; disabled = isPy3k;

Discussion:
with current current unstable channel, the fail2ban package misses its etc path. The package hasn't been updated for some time and the out path is apparently generated by rewriting pathes in its : This suggests that the breakage might be related to the recent python packaging rework, so /cc as well as pkg maintainers
Change:
}); }; commonOverrides = [ <del> (mkOverride "jsonschema" "3.2.0" "0ykr61yiiizgvm3bzipa3l73rvj49wmrybbfwhvpgk3pscl5pa68") </del> <ins> (self: super: { jsonschema = super.jsonschema_3; }) </ins> ]; }; mkGui = args: libsForQt5.callPackage (import ./gui.nix (addVersion args // extraArgs)) { };

Discussion:
Steps to reproduce the behavior: (as of ) <details<summaryBuild Log</summary<preerror: builder for '/nix/store/8r1frbwzxwncagff57r7zz86zl2nsxbm-python3.10-jsonschema-' failed with exit code 1; last 10 log lines: For full logs, run 'nix log /nix/store/8r1frbwzxwncagff57r7zz86zl2nsxbm-python3.10-jsonschema-'. error: 1 dependencies of derivation '/nix/store/2413pkb4n4z1bj0rywpcfbi8s1yisvkg-python3.10-bravado-core-' failed to build error: 1 dependencies of derivation '/nix/store/x9h491ipp10gpp771jzfr3qyn3y6pbf9-powerdns-admin-' failed to build </pre</detailsLooks like json schema got updated to 4.13 which requires adding a patch. When , we're not patching (please excuse the pun), so it tries to apply to new patch against 3.2.0 which, of course, fails. Seems like we probably just need to override the to remove the offending patch? <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.
, and are also broken in similar fashion.
I'll take a look later today.
I opened .
Change:
# ~400 failures doCheck = false; <del> propagatedBuildInputs = with python3Packages; [ </del> <ins> propagatedBuildInputs = with python.pkgs; [ </ins> # See https://github.com/Flexget/Flexget/blob/master/requirements.txt apscheduler beautifulsoup4

Discussion:
Using the latest flexget, when run it has issues with sqlalchemy. Steps to reproduce the behavior: flexget to the list of installed system packages flexget (or just flexget check) It throws a lot of errors like: And hence it things the config file is garbage and won't process. Passing the config and no errors throwing Please run and paste the result.
Change:
sha256 = "0rljl44y8p8hgaqializlyrgpij1wbnrzyp0ll5kcg7w05nylq48"; }; <del> patches = lib.optional stdenv.isDarwin ./darwin.patch ++ [ </del> <ins> patches = lib.optional stdenv.isDarwin ./darwin.patch ++ [ </ins> (fetchpatch { <del> name = "pdfocr.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=a507b139adf37d2c742e039815601cdc2aa00a84"; sha256 = "1fx6pdgwrbk3bqsx53764d61llfj9s5q8lxqkna7mjnp7mg4krj3"; }) </del> <ins> name = "pdfocr.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=a507b139adf37d2c742e039815601cdc2aa00a84"; sha256 = "1fx6pdgwrbk3bqsx53764d61llfj9s5q8lxqkna7mjnp7mg4krj3"; }) </ins> (fetchpatch { <del> name = "pdf-layer.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=b82e9b6d6b46877e5c3763cc3bc641c66fa7eb54"; sha256 = "0ma8jq8d9a0mf26qjklgi4gdaflpjik1br1nhafzvjz7ccl56ksm"; }) </del> <ins> name = "pdf-layer.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=b82e9b6d6b46877e5c3763cc3bc641c66fa7eb54"; sha256 = "0ma8jq8d9a0mf26qjklgi4gdaflpjik1br1nhafzvjz7ccl56ksm"; }) </ins> (fetchpatch { <del> name = "pixmap.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=32e4e8b4bcbacbf92af7c88337efae21986d9603"; sha256 = "1zqkxgwrhcwsdya98pcmpq2815jjmv3fwsp0sba9f5nq5xi6whbj"; }) ]; </del> <ins> name = "pixmap.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=32e4e8b4bcbacbf92af7c88337efae21986d9603"; sha256 = "1zqkxgwrhcwsdya98pcmpq2815jjmv3fwsp0sba9f5nq5xi6whbj"; }) (fetchpatch { name = "CVE-2021-3407.patch"; url = "http://git.ghostscript.com/?p=mupdf.git;a=patch;h=cee7cefc610d42fd383b3c80c12cbc675443176a"; sha256 = "18g9jsj90jnqibaff8pqi70a7x8ygc3sh4jl4xnvlv8vr7fxxbh6"; }) ]; </ins> postPatch = '' sed -i "s/__OPENJPEG__VERSION__/${openJpegVersion}/" source/fitz/load-jpx.c

Discussion:
, CVSSv3=5.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc Cc
Change:
swiftPackages = recurseIntoAttrs (callPackage ../development/compilers/swift { }); inherit (swiftPackages) swift swiftpm sourcekit-lsp swift-format swiftpm2nix; <del> swiProlog = callPackage ../development/compilers/swi-prolog { </del> <ins> swi-prolog = callPackage ../development/compilers/swi-prolog { </ins> inherit (darwin.apple_sdk.frameworks) Security; }; <del> swiPrologWithGui = swiProlog.override { withGui = true; }; </del> <ins> swi-prolog-gui = swi-prolog.override { withGui = true; }; </ins> tbb_2020_3 = callPackage ../development/libraries/tbb/2020_3.nix { }; tbb_2021_5 = callPackage ../development/libraries/tbb/2021_5.nix { } ;

Discussion:
It seems that errors with when attempting to have in . There has been no updates in the lspserver. I came across this while trying to update my systems. Currently, says , so that was the last build I had with the lsp not causing a build failure. Steps to reproduce the behavior: this expression: It seems this started happening in . Works fine on the parent commit. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
It seems adding to allows it to build, it is not clear to me how is being used here as I am not familiar with how packs work in swiProlog and why made this necessary. From looking at that commit in , it appears to be something that changed upstream. This builds:
I can confirm that with 9.1.21, swi-prolog + lsp-server builds just fine, even with the latest packaging. Something must indeed have changed upstream. 9.1.22 is the first version that stops building for me. The notes that the pack system got a refactor at that point, so that's probably what is going on here, but nothing indicates a sudden need for git. If git is now necessary for pack installation (even if we already pre-cloned everything) it should be a dependency. any idea why git became necessary here?
We can resolve this with a patch to SWI-Prolog to respect in the options, then adding that option to our invocation. I submitted a PR to SWI-Prolog (SWI-Prolog/swipl-devel). If upstream merges this, we can just apply the same patch to stable.
swi-prolog 9.2.7 backported the PR mentioned above. I've modified the package definition to supply the proper flag which suppresses git use during extraPacks install.