jiebi/CodeConvo huggingface dataset:
Change:
<ins> { lib , autoreconfHook , bc , fetchFromGitHub , gettext , makeWrapper , perl , python3 , screen , stdenv , vim , tmux }: let pythonEnv = python3.withPackages (ps: with ps; [ snack ]); in stdenv.mkDerivation (finalAttrs: { pname = "byobu"; version = "6.12"; src = fetchFromGitHub { owner = "dustinkirkland"; repo = "byobu"; rev = finalAttrs.version; hash = "sha256-NzC9Njsnz14mfKnERGDZw8O3vux0wnfCKwjUeTBQswc="; }; nativeBuildInputs = [ autoreconfHook gettext makeWrapper ]; buildInputs = [ perl # perl is needed for `lib/byobu/include/*` scripts screen tmux ]; doCheck = true; strictDeps = true; postPatch = '' for file in usr/bin/byobu-export.in usr/lib/byobu/menu; do substituteInPlace $file  --replace "gettext" "${gettext}/bin/gettext" done ''; postInstall = '' # By some reason the po files are not being compiled for po in po/*.po; do lang=''${po#po/} lang=''${lang%.po} # Path where byobu looks for translations, as observed in the source code # and strace mkdir -p $out/share/byobu/po/$lang/LC_MESSAGES/ msgfmt --verbose $po -o $out/share/byobu/po/$lang/LC_MESSAGES/byobu.mo done # Override the symlinks, otherwise they mess with the wrapping cp --remove-destination $out/bin/byobu $out/bin/byobu-screen cp --remove-destination $out/bin/byobu $out/bin/byobu-tmux for file in $out/bin/byobu*; do # We don't use the usual "-wrapped" suffix because arg0 within the shebang # scripts points to the filename and byobu matches against this to know # which backend to start with bname="$(basename $file)" mv "$file" "$out/bin/.$bname" makeWrapper "$out/bin/.$bname" "$out/bin/$bname"  --argv0 $bname  --prefix PATH ":" "$out/bin"  --set BYOBU_PATH ${lib.makeBinPath [ vim bc ]}  --set BYOBU_PYTHON "${pythonEnv}/bin/python" done ''; meta = { homepage = "https://www.byobu.org/"; description = "Text-based window manager and terminal multiplexer"; longDescription = '' Byobu is a text-based window manager and terminal multiplexer. It was originally designed to provide elegant enhancements to the otherwise functional, plain, practical GNU Screen, for the Ubuntu server distribution. Byobu now includes an enhanced profiles, convenient keybindings, configuration utilities, and toggle-able system status notifications for both the GNU Screen window manager and the more modern Tmux terminal multiplexer, and works on most Linux, BSD, and Mac distributions. ''; license = with lib.licenses; [ gpl3Plus ]; mainProgram = "byobu"; maintainers = with lib.maintainers; [ AndersonTorres ]; platforms = lib.platforms.unix; }; }) </ins>

Discussion:
Package name: Byobu Latest released version: 6.12Current version on the unstable channel: 5.133 Current version on the stable/release channel: 5.133 Byobu development has permanently moved from Launchpad to GitHub Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
pinging and as maintainers
Change:
<ins> { lib , buildPythonApplication , fetchFromGitHub , wrapGAppsHook , gobject-introspection , gtk3 , docutils , gtksourceview , gtkspell3 , librsvg , pygobject3 , webkitgtk }: buildPythonApplication rec { pname = "formiko"; version = "1.4.3"; src = fetchFromGitHub { owner = "ondratu"; repo = "formiko"; rev = version; sha256 = "0n7w585gbrpn2xcd5n04hivrjarpr2wj260y2kpxpgh93vn52sdi"; }; nativeBuildInputs = [ wrapGAppsHook gobject-introspection gtk3 ]; propagatedBuildInputs = [ docutils gobject-introspection gtk3 gtksourceview gtkspell3 librsvg pygobject3 webkitgtk ]; # Needs a display doCheck = false; meta = with lib; { description = "reStructuredText editor and live previewer"; homepage = "https://github.com/ondratu/formiko"; license = licenses.bsd3; maintainers = with maintainers; [ shamilton ]; platforms = platforms.linux; }; } </ins>

Discussion:
Project description The application is available and . Metadata homepage URL: source URL: license: bsd platforms: unix, linux, darwin
Change:
buildPythonPackage rec { pname = "bash_kernel"; <del> version = "0.7.1"; </del> <ins> version = "0.7.2"; </ins> format = "flit"; disabled = isPy27; src = fetchPypi { inherit pname version; <del> sha256 = "1s2kc7m52kq28b4j1q3456g5ani6nmq4n0rpbqi3yvh7ks0rby19"; </del> <ins> sha256 = "0w0nbr3iqqsgpk83rgd0f5b02462bkyj2n0h6i9dwyc1vpnq9350"; </ins> }; patches = [

Discussion:
Describe the bug Bash kernel for Jupyter does not build: To Reproduce Steps to reproduce the behavior: Notify maintainers Metadata Maintainer information:
Change:
cargoHash = "sha256-0D+aM/zap5UDQ+k9c/p+ZfN1OUjDzFRArvcmqEOcBbM="; <del> buildInputs = lib.optionals stdenv.isDarwin [ Cocoa CoreServices Foundation libiconv ]; </del> <ins> buildInputs = lib.optionals stdenv.isDarwin [ Foundation Cocoa ]; NIX_LDFLAGS = lib.optionals (stdenv.isDarwin && stdenv.isx86_64) [ "-framework" "AppKit" ]; </ins> # `test with_cargo` tries to call cargo-watch as a cargo subcommand # (calling cargo-watch with command `cargo watch`)

Discussion:
Steps to reproduce the behavior: cargo-watch on x86-64-darwin Sounds similar to this issue: Though I have a hard time seeing any dependency that would be built with a different version of the framework in its closure. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result. My system is showing as "aarch64-darwin", but I'm building with Rosetta. Hydra reports the same issue: Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
seexpr = callPackage ../development/compilers/seexpr { }; <ins> semgrep = python3.pkgs.callPackage ../tools/security/semgrep { }; semgrep-core = callPackage ../tools/security/semgrep/semgrep-core.nix { }; </ins> setroot = callPackage  ../tools/X11/setroot { }; setserial = callPackage ../tools/system/setserial { };

Discussion:
Project description Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Metadata homepage URL: source URL: license: lgpl-2.1 platforms: Linux (but possibly others as well, because it is mostly Python code)
I marked this as stale due to inactivity. &rarr;
I started attempting this package, however, I'm not at all familiar with OCaml or Dune. Would love some help getting the binary packaged.
I tried building semgrep_core from src and the first level works ok with the dune builder but pfff needed opam packgemanager and also there's copious amounts of git submodules that cause issues with purity
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Change:
environment.WG_ENDPOINT_RESOLUTION_RETRIES = "infinity"; path = with pkgs; [ iproute2 wireguard-tools ]; <del> serviceConfig = { Type = "oneshot"; RemainAfterExit = true; }; </del> <ins> serviceConfig = if !dynamicRefreshEnabled then { Type = "oneshot"; RemainAfterExit = true; } else { Type = "simple"; # re-executes 'wg' indefinitely # Note that `Type = "oneshot"` services with `RemainAfterExit = true` # cannot be used with systemd timers (see `man systemd.timer`), # which is why `simple` with a loop is the best choice here. # It also makes starting and stopping easiest. }; </ins> script = let <del> wg_setup = "${wg} set ${interfaceName} peer ${peer.publicKey}" + optionalString (psk != null) " preshared-key ${psk}" + optionalString (peer.endpoint != null) " endpoint ${peer.endpoint}" + optionalString (peer.persistentKeepalive != null) " persistent-keepalive ${toString peer.persistentKeepalive}" + optionalString (peer.allowedIPs != []) " allowed-ips ${concatStringsSep "," peer.allowedIPs}"; </del> <ins> wg_setup = concatStringsSep " " ( [ ''${wg} set ${interfaceName} peer "${peer.publicKey}"'' ] ++ optional (psk != null) ''preshared-key "${psk}"'' ++ optional (peer.endpoint != null) ''endpoint "${peer.endpoint}"'' ++ optional (peer.persistentKeepalive != null) ''persistent-keepalive "${toString peer.persistentKeepalive}"'' ++ optional (peer.allowedIPs != []) ''allowed-ips "${concatStringsSep "," peer.allowedIPs}"'' ); </ins> route_setup = optionalString interfaceCfg.allowedIPsAsRoutes (concatMapStringsSep "n" (allowedIP: <del> "${ip} route replace ${allowedIP} dev ${interfaceName} table ${interfaceCfg.table}" </del> <ins> ''${ip} route replace "${allowedIP}" dev "${interfaceName}" table "${interfaceCfg.table}"'' </ins> ) peer.allowedIPs); in '' ${wg_setup} ${route_setup} <ins> ${optionalString (peer.dynamicEndpointRefreshSeconds != 0) '' # Re-execute 'wg' periodically to notice DNS / hostname changes. # Note this will not time out on transient DNS failures such as DNS names # because we have set 'WG_ENDPOINT_RESOLUTION_RETRIES=infinity'. # Also note that 'wg' limits its maximum retry delay to 20 seconds as of writing. while ${wg_setup}; do sleep "${toString peer.dynamicEndpointRefreshSeconds}"; done ''} </ins> ''; postStop = let route_destroy = optionalString interfaceCfg.allowedIPsAsRoutes (concatMapStringsSep "n" (allowedIP: <del> "${ip} route delete ${allowedIP} dev ${interfaceName} table ${interfaceCfg.table}" </del> <ins> ''${ip} route delete "${allowedIP}" dev "${interfaceName}" table "${interfaceCfg.table}"'' </ins> ) peer.allowedIPs); in '' <del> ${wg} set ${interfaceName} peer ${peer.publicKey} remove </del> <ins> ${wg} set "${interfaceName}" peer "${peer.publicKey}" remove </ins> ${route_destroy} ''; };

Discussion:
On NixOS 20.09, steps to reproduce the behavior: setting up wireguard, change to another port still shows the old port:
This seems to be fixed by my PR
Change:
llvmPackages, python3, stdenv, <ins> testers, </ins> zlib, # Boolean flags withHTML ? true,

Discussion:
Sometime between 23.11 and now, the binary broke due to a linking issue. Steps to reproduce the behavior:
fixes it of course, but I don't see an obvious less brutal approach.
adding to the works for me.
Good point, somehow thought this was already the case. PR up.
Change:
passthru.updateScript = ./update.sh; <ins> postInstall = '' mv $out/bin/wireguard $out/bin/wireguard-go ''; </ins> meta = with stdenv.lib; { description = "Userspace Go implementation of WireGuard"; homepage = "https://git.zx2c4.com/wireguard-go/about/";

Discussion:
Describe the bug The package is supposed to vend a binary called . Instead it's vending a binary called . The upstream repo has a Makefile that explicitly passes to . I don't see any equivalent in our package (which bypasses the Makefile). This is a problem both because of breaking expectations, and also because the package makes the assumption that provides a binary called . In particular, the script tries to invoke the binary as part of the subcommand. To Reproduce Steps to reproduce the behavior: what binaries it provides Expected behavior It should provide . Notify maintainers Also the maintainers, in case the resolution is to change to use the name instead of : Metadata system: host os: multi-user?: sandbox: version: channels(lilyball): nixpkgs: Maintainer information:
It's possible to override the buildPhase in to run make. However in this case it might be easier to just perform the remame with a in .
Change:
<ins> diff --git a/config.go b/config.go index de16249..fb91ec0 100644 --- a/config.go +++ b/config.go @@ -20,7 +20,7 @@ const configFile = "config.toml" func initializeConfigIfNot() { log.Println("Checking if config needs to be initialized") -	conf := config{Threshold: 95, DisplayMonitorSources: false, EnableUpdates: true} +	conf := config{Threshold: 95, DisplayMonitorSources: false, EnableUpdates: false} configdir := configDir() ok, err := exists(configdir) if err != nil { </ins>

Discussion:
Project description NoiseTorch is an easy to use open source application for Linux with PulseAudio. It creates a virtual microphone that suppresses noise, in any application. Metadata homepage URL: source URL: license: gpl3 platforms: linux language: go
I'll try to package it myself soon.
For those who want to try now before the package is merged go build works ok:
Change:
# The test driver doesn't add an RPath to the build libdir preCheck = '' <del> export LD_LIBRARY_PATH=$PWD/src </del> <ins> export LD_LIBRARY_PATH=$LD_LIBRARY_PATH''${LD_LIBRARY_PATH:+:}$PWD/src export DYLD_LIBRARY_PATH=$DYLD_LIBRARY_PATH''${DYLD_LIBRARY_PATH:+:}$PWD/src </ins> ''; # The cmake install gets tripped up and installs a nix tree into $out, in

Discussion:
Describe the bug oneDNN is a dependency of pytorch. Today, oneDNN's are all linux-based but oneDNN actually appears to compile fine on ; its tests just all immediately fail because of RPATH problems. To Reproduce Expected behavior I expect oneDNN to build and check successfully. Additional context I think that this problem may be able to be fixed by adding in on Darwin, much like is currently set and exported. Note, for even more detail/context on CMake's support for controlling RPATH on macOS, please see Notify maintainers Metadata (Note, I am actually testing this using nix flakes, with this ) Maintainer information:
Change:
<ins> { lib, buildGoModule, fetchFromGitHub, installShellFiles }: buildGoModule rec { pname = "crowdsec"; version = "1.4.2"; src = fetchFromGitHub { owner = "crowdsecurity"; repo = pname; rev = "v${version}"; hash = "sha256-hL3+hTOuwcbxiVZeq9oZjfKI1TJJt64g+74NolA3Drc="; }; vendorHash = "sha256-FPsoufB9UDgBDIE3yUq4doBse3qgjP19ussYnMAxntk="; nativeBuildInputs = [ installShellFiles ]; subPackages = [ "cmd/crowdsec" "cmd/crowdsec-cli" ]; ldflags = [ "-s" "-w" "-X github.com/crowdsecurity/crowdsec/pkg/cwversion.Version=v${version}" "-X github.com/crowdsecurity/crowdsec/pkg/cwversion.BuildDate=1970-01-01_00:00:00" ]; postBuild = "mv $GOPATH/bin/{crowdsec-cli,cscli}"; postInstall = '' mkdir -p $out/share/crowdsec cp -r ./config $out/share/crowdsec/ installShellCompletion --cmd cscli  --bash <($out/bin/cscli completion bash)  --fish <($out/bin/cscli completion fish)  --zsh <($out/bin/cscli completion zsh) ''; meta = with lib; { homepage = "https://crowdsec.net/"; changelog = "https://github.com/crowdsecurity/crowdsec/releases/tag/v${version}"; description = "CrowdSec is a free, open-source and collaborative IPS"; longDescription = '' CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on fail2ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors. CrowdSec is engineered for modern Cloud/Containers/VM based infrastructures (by decoupling detection and remediation). Once detected you can remedy threats with various bouncers (firewall block, nginx http 403, Captchas, etc.) while the aggressive IP can be sent to CrowdSec for curation before being shared among all users to further improve everyone's security. ''; license = licenses.mit; maintainers = with maintainers; [ jk urandom ]; }; } </ins>

Discussion:
Project description CrowdSec - the open-source and participative IPS able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global CTI database to protect the user network. Metadata homepage URL: source URL: license: mit platforms: linux
I am head of community at CrowdSec. Feel free to get in touch if you need any assistance in creating packages for NixOS.
Fantastic! Thank you
No problem. Feel free to join our to ask for help from our community.
working on this
Hey any news on this ? I'd be interested in helping to package it as well or trying/testing the draft PR, but I don't know what's the current status (I've read your draft PR and it seems it was going okay, but you needed to add a NixOS module and some agents/bouncers?)
Change:
# https://github.com/tulir/mautrix-telegram/issues/584 [ -f ${settingsFile} ] && rm -f ${settingsFile} old_umask=$(umask) <del> umask 0277 </del> <ins> umask 0177 </ins> ${pkgs.envsubst}/bin/envsubst  -o ${settingsFile}  -i ${settingsFileUnsubstituted}

Discussion:
cannot access (read/write) on first start. Steps to reproduce the behavior: systemd service Maintainer information:
Also reproducible on master. Looking into it.
Thank you :-)
contains a potential fix :)
Works perfectly! :+1:
Change:
- The `nix.readOnlyStore` option has been renamed to `boot.readOnlyNixStore` to clarify that it configures the NixOS boot process, not the Nix daemon. <ins> - Deprecated `xlibsWrapper` transitional package has been removed in favour of direct use of its constitutents: `xorg.libX11`, `freetype` and others. </ins> ## Other Notable Changes {#sec-release-23.05-notable-changes} <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

Discussion:
In I noticed unusual behaviour of when is overridden. That PR handles override part. But I think should just disappear. Where should be no reason (for example) for to depend on at build time. is just the wrapper around a few libraries. Quoting : Mechanically we can replace with the list of packages it provides. Even better would be to audit needed libraries for each user and use only a subset of them. Example fix: [x] perlPackages.X11Protocol: [x] pulseaudio: More packages to fix: [x] Xaw3d: [x] emacs: [x] fox16: [x] geant4: [x] [x] gtk2: [x] [x] haskellPackages.greenclip: [x] [x] lesstif: [x] monotoneViz: [x] motif: [x] mythtv: [x] ocaml- [x] [x] [x] pypy2, pypy3: [x] qgis: [x] qgis-ltr: [x] [x] qt6Packages.qtwayland: [x] rPackages.Cairo: [x] rPackages.devEMF: [x] [x] rPackages,rgl: [x] tightvnc: [x] weston: Fixed packages: [x] astromenace: [x] catclock: [x] clanlib: [x] conky: [x] elinks: [x] fox: [x] freeglut: [x] ghostscript, ghostscriptX: [x] gnome2.libgnomeui: [x] glbinding: [x] glew, glew-egl: [x] glew110: [x] imhex: [x] imlib2,

imlib2Full: [x] ion3: [x] libagar: [x] libstroke: [x] lirc: [x] mitschemeX11: [x] ncview: [x] nedit: [x] notion: [x] oneko: [x] openrw: [x] pasystray: [x] pcb: [x] povray: [x] pythonFull: [x] qemacs: [x] qmmp: [x] rss-glx: [x] scrot: [x] soxt: [x] survex: [x] synergy: [x] ted: [x] unclutter: [x] unclutter-xfixes: [x] vlc: [x] voxelands: [x] wordnet: [x] xautolock: [x] xfe: [x] x11sshaskpass: [x] xfig: [x] xidlehook: [x] xine-ui: [x] xinputcalibrator: [x] xmountains: [x] xspim: [x] xtrlock-pam: [x] xwinwrap: [x] xxgdb: [x] zoom:
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Change:
}; substitutions = mkOption { <del> type = types.nullOr (types.enum ["free" "combi" "ms"]); </del> <ins> type = types.enum ["free" "combi" "ms" "none"]; </ins> default = "free"; description = '' Font substitutions to replace common Type 1 fonts with nicer

Discussion:
Documentation of suggests disabling substitutions should be possible by setting the option's value to "none". This fails with the following error: Trying to set the option's value to null produces: Add one of the following to fonts.fontconfig.ultimate.substitutions = "none"; fonts.fontconfig.ultimate.substitutions = null; There appears to be a mismatch in the type definition of the option and how it is being used within the module. System: NixOS 17.03 @ + plus few custom commits not related to fontconfig Nix version: 1.11.11 Nixpkgs version: Sandboxing enabled: no
Change:
<del> { stdenv, fetchurl, cmake, pkgconfig, gtk3, perl, vte, pcre, glib }: </del> <ins> { stdenv, fetchurl, cmake, pkgconfig, gtk3, perl, vte, pcre, glib , makeWrapper }: </ins> stdenv.mkDerivation rec { name = "sakura-${version}";

Discussion:
sakura terminal emulator terminates when trying to change color by context menu with following error: GLib-GIO-ERROR *: No GSettings schemas are installed on the system [1] 9932 trace trap sakura run sakura, right click to popup context menu : options -select colors -(click on color field to open color chooser) Here is a thread that discusses the issue. it seems that the color-chooser gui description is missing that is needed by sakura. should include gsettings as runtime dependency. actually it has gtk3 package as dependency which provides those schemata, however it obvious doesn't look in the right path. this kind of error got fixed for System: (17.03pre98008. (Gorilla)) Nix version: (nix-env (Nix) 1.11.4) Nixpkgs version: ("17.03pre98008.")
Change:
done wrapProgram $out/bin/cqlsh --prefix PATH : ${python}/bin <ins> runHook postInstall </ins> ''; passthru = {

Discussion:
, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc

, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc

, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc

, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc
See also , ,
Change:
generatedJson = { inherit apps; }; <ins> appBaseDefs = builtins.fromJSON (builtins.readFile ./nextcloud-apps.json); </ins> in { # Create a derivation from the official Nextcloud apps. # This takes the data generated from the go tool. <del> mkNextcloudDerivation = self.callPackage ({ }: { data }: </del> <ins> mkNextcloudDerivation = self.callPackage ({ }: { pname, data }: </ins> pkgs.fetchNextcloudApp { <del> inherit (data) url sha256; </del> <ins> appName = pname; appVersion = data.version; license = appBaseDefs.${pname}; inherit (data) url sha256 description homepage; </ins> }) {}; <del> } // lib.mapAttrs (type: pkgs: lib.makeExtensible (_: lib.mapAttrs (pname: data: self.mkNextcloudDerivation { inherit data; }) pkgs)) generatedJson; </del> <ins> } // lib.mapAttrs (type: pkgs: lib.makeExtensible (_: lib.mapAttrs (pname: data: self.mkNextcloudDerivation { inherit pname; inherit data; }) pkgs)) generatedJson; </ins> in (lib.makeExtensible (_: (lib.makeScope newScope packages))).extend (selfNC: superNC: {})

Discussion:
The nextcloud package set offers apps, that have licensing information attached, but not exposed as part of their meta attribute. Also, there are some apps, like news, where the licensing information says , which requires clarification. This needs to be fixed.
Thank you for opening the draft PR in order to fix my mistakes and broken packages. I'm sorry for the bad communication and the inability to resolve this serious issue. Fixing this for Wordpress packages and themes (wp4nix) and Nextcloud apps (nc4nix) in a foreseeable time exceeds my skills and competence. Therefore I would like to offer to add a flag to these package sets and remove them for the next release 23.11 if it's not resolved by then.