jiebi/CodeConvo huggingface dataset:
Change:
src = fetchFromGitHub { owner = "stp"; repo = "stp"; <del> rev    = version; sha256 = "1yg2v4wmswh1sigk47drwsxyayr472mf4i47lqmlcgn9hhbx1q87"; </del> <ins> rev = version; hash = "sha256-B+HQF4TJPkYrpodE4qo4JHvlu+a5HTJf1AFyXTnZ4vk="; </ins> }; patches = [ # Fix missing type declaration # due to undeterminisitic compilation # of circularly dependent headers ./stdint.patch <ins> # Python 3.12+ compatibility for build: https://github.com/stp/stp/pull/450 (fetchpatch { url = "https://github.com/stp/stp/commit/fb185479e760b6ff163512cb6c30ac9561aadc0e.patch"; hash = "sha256-guFgeWOrxRrxkU7kMvd5+nmML0rwLYW196m1usE2qiA="; }) </ins> ]; postPatch = ''

Discussion:
Klee installation returns the following error: Steps to reproduce the behavior: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Thanks for the report; looking into it.
Looks like a STP issue on master/unstable; any ideas?
KLEE works on 24.05, try that in the meantime.
See also: , , and others. Seems like this is treewide.
It looks like there's an update to ; I'll bump it after gets merged but those two changes should fix klee.
Change:
RestrictRealtime = true; PrivateMounts = true; SystemCallFilter = [ <del> "@system-service @pkey @chown" </del> <ins> "@system-service @pkey" </ins> "~@privileged @resources" <ins> "@chown" </ins> ]; SystemCallArchitectures = "native"; # AF_UNIX is required to connect to a postgres socket.

Discussion:
After upgrading to NixOS 23.11, I got in the unit logs: If I remove , then I get: Steps to reproduce the behavior: matrix-appservice-irc on NixOS 23.05 to NixOS 23.11 The service should start without failing. This is due to . Commit already fixes part of the problem, but it does not seem to fix everything. Maybe we should add more syscalls to the allowlist? Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Any audit log statements in that could indicate what specific syscall was used?
Are you sure your channel actually has the backport? What's the contents of the file referred to by ?
The dmesg logs associated with all the systemctl restart I tried: syscall=93 and syscall=260 seems blocked. Yes, I am using NixOS 23.11 channel (updated yesterday). contains:
That's fchown and fchownat. Weird.
Please check on the machine where this breaks.
On an affected system, I don’t see / in the list returned by the command you posted unless I remove from the setting in the service file. Correspondingly lists as being part of the set (which kinda makes sense if you think about it). System configuration: Linux 5.10.120-xen (provided by hosting company) NixOS 23.11 systemd 254.6 This service configuration works though:
Thank you I applied the following workaround in the meantime (sharing it because the following syntax was a bit foreign to me before):
Change:
--replace "qt_macx_spec = 'macx-g++'" "qt_macx_spec = 'unsupported/macx-clang-libc++'" # for bootstrapping phase  ''} <del> configureFlagsArray=(  --confirm-license --bindir $out/bin  --destdir $out/${python.sitePackages}  --plugin-destdir $out/lib/qt4/plugins --sipdir $out/share/sip/PyQt4  --dbus=${dbus-python}/include/dbus-1.0 --verbose) ${python.executable} configure.py $configureFlags "''${configureFlagsArray[@]}" </del> <ins> chmod +x configure.py sed -i '1i#!${python.interpreter}' configure.py </ins> ''; <del> nativeBuildInputs = [ pkgconfig ]; buildInputs = [ makeWrapper qt4 lndir dbus ]; </del> <ins> configureScript = "./configure.py"; dontAddPrefix = true; configureFlags = [ "--confirm-license" "--bindir=${placeholder "out"}/bin" "--destdir=${placeholder "out"}/${python.sitePackages}" "--plugin-destdir=${placeholder "out"}/lib/qt4/plugins" "--sipdir=${placeholder "out"}/share/sip/PyQt4" "--dbus=${stdenv.lib.getDev dbus-python}/include/dbus-1.0" "--verbose" ]; nativeBuildInputs = [ pkgconfig lndir makeWrapper qt4 ]; buildInputs = [ qt4 dbus ]; </ins> propagatedBuildInputs = [ sip ];

Discussion:
Pulseeffects depends on pyqt4 which does not build. Maybe we could build the plugin without pyqt4.
Looks like needs in nativeBuildInputs for qmake. also needs to go in nativeBuildInputs.
Change:
stdenv.mkDerivation rec { pname = "nfs-utils"; <del> version = "2.5.1"; </del> <ins> version = "2.6.2"; </ins> src = fetchurl { <del> url = "https://kernel.org/pub/linux/utils/nfs-utils/${version}/${pname}-${version}.tar.xz"; sha256 = "1i1h3n2m35q9ixs1i2qf1rpjp10cipa3c25zdf1xj1vaw5q8270g"; </del> <ins> url = "mirror://kernel/linux/utils/nfs-utils/${version}/${pname}-${version}.tar.xz"; hash = "sha256-UgCHPoHE1hDiRi/CYv4YE18tvni3l5+VrM0VmuZNUBE="; </ins> }; # libnfsidmap is built together with nfs-utils from the same source,

Discussion:
Here's my attempt: current version: 2.5.1 desired version: 2.6.2
That current attempt results in:
seems to work just fine for me, when not touching . so basically your diff, but without and leaving as is.
Change:
dnd-tools = callPackage ../applications/misc/dnd-tools { }; <ins> dnglab = callPackage ../tools/graphics/dnglab { }; </ins> inherit (callPackage ../applications/virtualization/docker {}) docker_20_10;

Discussion:
Project description DNGLab - A camera RAW to DNG file format converter Command line tool to convert camera RAW files to Digital Negative Format (DNG). Metadata homepage URL: n/a source URL: license: GNU Lesser General Public License v2.1 platforms: unix, linux, darwin
Can you please test the linked PR and let me know if it works for you (I have not personally tested the program)?
Change:
githubId = 541748; name = "Felipe Espinoza"; }; <ins> fehnomenal = { email = "fehnomenal@fehn.systems"; github = "fehnomenal"; githubId = 9959940; name = "Andreas Fehn"; }; </ins> felschr = { email = "dev@felschr.com"; github = "felschr";

Discussion:
Project description Open source IFC library and geometry engine base c++ Metadata homepage URL: source URL: license: lgpl 3.0 platforms: linux
This package would be great to have
Hello, I'm a bot and I thank you in the name of the community for opening this issue. To help our human contributors focus on the most-relevant reports, I check up on old issues to see if they're still relevant. This issue has had no activity for 180 days, and so I marked it as stale, but you can rest assured it will never be closed by a non-human. The community would appreciate your effort in checking if the issue is still valid. If it isn't, please close it. If the issue persists, and you'd like to remove the stale label, you simply need to leave a comment. Your comment can be as simple as "still important to me". If you'd like it to get more attention, you can ask for help by searching for maintainers and people that previously touched related code and @ mention them in a comment. You can use or on the relevant files to find them. Lastly, you can always ask for help at or at .
soft bump
Change:
let pname = "1password"; <del> version = if channel == "stable" then "8.10.7" else "8.10.8-42.BETA"; </del> <ins> version = if channel == "stable" then "8.10.8" else "8.10.9-29.BETA"; </ins> sources = { stable = { x86_64-linux = { url = "https://downloads.1password.com/linux/tar/stable/x86_64/1password-${version}.x64.tar.gz"; <del> sha256 = "sha256-5KMAzstoPmNgFejp21R8PcdrmUtkX3qxHYX3rV5JqyE="; </del> <ins> hash = "sha256-E7lXyxoBL2ziMIIisskJJhZ5ymKyuv4zXEqigUtU41I="; </ins> }; aarch64-linux = { url = "https://downloads.1password.com/linux/tar/stable/aarch64/1password-${version}.arm64.tar.gz"; <del> sha256 = "sha256-Tmof+ma1SJMQRSV1T5flLeXfe6W1a2U2mYzi+MrxvJM="; </del> <ins> hash = "sha256-V/qJHt49pPEm1g92hEQCscmJ3ZkSHTY2oA69d6DxkmU="; </ins> }; x86_64-darwin = { url = "https://downloads.1password.com/mac/1Password-${version}-x86_64.zip"; <del> sha256 = "sha256-jtqgJJy1ZhyaEUEafT1ywD529aKGDqc0J3mgYSGVTWU="; </del> <ins> hash = "sha256-H2t4sEbm2Mp89a++r8oFSyvg19zc9dAsq3phX/h1VVg="; </ins> }; aarch64-darwin = { url = "https://downloads.1password.com/mac/1Password-${version}-aarch64.zip"; <del> sha256 = "sha256-qLqK6CZcqDfIGX0FzEnAZP3Rkxw8CNtT6sFy8u0IqwM="; </del> <ins> hash = "sha256-8lVc69Ra0wYxnlVcehtAIujrmUQXmsgsK8ATR4vkBe0="; </ins> }; }; beta = { x86_64-linux = { url = "https://downloads.1password.com/linux/tar/beta/x86_64/1password-${version}.x64.tar.gz"; <del> sha256 = "sha256-nPstDndWuPMSGJlbyniEfljdEy+TOB9zWMJ+db7xCx4="; </del> <ins> hash = "sha256-gC+niXGxg37pzMWu/yzD5KcrzbI39u//syVlPne6nBQ="; </ins> }; aarch64-linux = { url = "https://downloads.1password.com/linux/tar/beta/aarch64/1password-${version}.arm64.tar.gz"; <del> sha256 = "sha256-waJjvqF6OXGrf90srvvZ+hyxapcQApGTsxTzNMX9V3s="; </del> <ins> hash = "sha256-y9P7032GaNKbDzL922HUwiu3DxqKzTiA5g1I3V+852k="; </ins> }; x86_64-darwin = { url = "https://downloads.1password.com/mac/1Password-${version}-x86_64.zip"; <del> sha256 = "sha256-i9hbnjXx2/RWJ9YvrFDOGbi7dpiHtxWsN0HAZPOhK8o="; </del> <ins> hash = "sha256-/avHauTuFmKQiHL1WpRI488F8rcwvEOe26kmGF7sv3k="; </ins> }; aarch64-darwin = { url = "https://downloads.1password.com/mac/1Password-${version}-aarch64.zip"; <del> sha256 = "sha256-tat2x2J4/yKhWp4sWCEqU+SSZaNRx8WTcCJAAbo1Kpk="; </del> <ins> hash = "sha256-kMrA8PhAtOjkgbl9m7NtzIJin+a05llQKdEzlkLE0sY="; </ins> }; }; }; src = fetchurl { <del> inherit (sources.${channel}.${stdenv.system}) url sha256; </del> <ins> inherit (sources.${channel}.${stdenv.system}) url hash; </ins> }; meta = with lib; {

Discussion:
Package name: _1password-gui Latest released version: 8.10.8 Current version on the unstable channel: 8.10.7 Current version on the stable/release channel: 8.10.7 Notify maintainers CC Note for maintainers: Please tag this issue in your PR. Thanks for all the hard work!
Change:
patchShebangs . # relax dependencies <del> substituteInPlace requirements.txt  --replace "eventlet==0.33.0" "eventlet>=0.33.0"  --replace "psycopg2==2.9.*" "psycopg2>=2.9"  --replace "cryptography==3.*" "cryptography>=3.0"  --replace "requests==2.25.*" "requests>=2.25.0"  --replace "boto3==1.20.*" "boto3>=1.20"  --replace "botocore==1.23.*" "botocore>=1.23"  --replace "pytz==2021.*" "pytz"  --replace "Werkzeug==2.0.3" "werkzeug>=2.*"  --replace "azure-identity==1.9.0" "azure-identity==1.*"  --replace "azure-mgmt-resource==21.0.0" "azure-mgmt-resource==21.*" </del> <ins> sed 's|==|>=|g' -i requirements.txt </ins> # don't use Server Mode (can be overridden later) substituteInPlace pkg/pip/setup_pip.py  --replace "req = req.replace('psycopg2', 'psycopg2-binary')" "req = req" 

Discussion:
Adding pgadmin4 to and then leads to Steps to reproduce the behavior: pgadmin4 to in with error NixOS derivation succeeds Please run and paste the result.
I know, thanks for reporting this. Please see for the fix or for the progress
Change:
cpcfs = callPackage ../tools/filesystems/cpcfs { }; coreutils =  callPackage ../tools/misc/coreutils { }; <del> coreutils-full = coreutils.override { minimal = false; }; </del> <ins> # The coreutils above are built with dependencies from # bootstrapping. We cannot override it here, because that pulls in # openssl from the previous stage as well. coreutils-full = callPackage ../tools/misc/coreutils { minimal = false; }; </ins> coreutils-prefixed = coreutils.override { withPrefix = true; singleBinary = false; }; corkscrew = callPackage ../tools/networking/corkscrew { };

Discussion:
I've built a minimal system and noticed that there are two openssls in the system closure. One of those comes via coreutils-full and is the bootstrap openssl. It's my understanding that this should not leak into the system closure. coreutils-full depends on pkgs.openssl instead of the bootstrap openssl. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --This happens at least for the last couple of years in Nixpkgs. I've tested 20.03 and it has the same issue.
This hacky(?) workaround is:
Change:
}; networking.firewall = mkIf cfg.openPorts { <del> # https://help.ubnt.com/hc/en-us/articles/204910084-UniFi-Change-Default-Ports-for-Controller-and-UAPs </del> <ins> # https://help.ubnt.com/hc/en-us/articles/218506997 </ins> allowedTCPPorts = [ 8080  # Port for UAP to inform controller. 8880  # Port for HTTP portal redirect, if guest portal is enabled. 8843  # Port for HTTPS portal redirect, ditto. <ins> 6789  # Port for UniFi mobile speed test. </ins> ]; allowedUDPPorts = [ 3478  # UDP port used for STUN.

Discussion:
opens most of the ports required for the Unifi controller, except it's missing port 6789, which is used for the UniFi mobile speed test. /cc
Hey I took the maintainership for only recently, so could you elaborate on what the UniFi mobile speed test is? I can't find good info about that on UBNT's support site. includes only the minimum required ports. Depending on wether 6789 is strictly required for operation, I'd add it or if not, it could be mentioned in the of , as 8443 is.
The UniFi iOS app has 2 features that rely on this port. The first is the WiFi Throughput test and the second is the Heatmap overlay. IMO all L3 ports should be opened except for 8443, and the only reason to exclude 8443 by default is because the operator may wish to configure a server on port 443 to proxy the unifi controller (which is exactly what I’m doing, using ), which would make port 8443 redundant. But the other ports (including 6789) don’t have the potential for being proxied like the web GUI does.
Thanks for elaborating, I think that makes sense. Would you mind to provide a PR to add 6789 to the open ports? If yes I can do it as well.
PR submitted as . Untested, but this change is pretty safe.
Change:
# Build definition checks for the Python modules needed at runtime by importing them. (buildPackages.python3.withPackages pythonModules) finalAttrs.setupHook # move .gir files <del> ] ++ lib.optionals (!stdenv.buildPlatform.canExecute stdenv.hostPlatform) [ gobject-introspection-unwrapped ]; </del> <ins> # can't use canExecute, we need prebuilt when cross ] ++ lib.optionals (stdenv.buildPlatform != stdenv.hostPlatform) [ gobject-introspection-unwrapped ]; </ins> buildInputs = [ (python3.withPackages pythonModules)

Discussion:
Building on gives us: cc system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
Change:
# ArrayFire have a repo with assets for the examples. Since we don't build # the examples anyway, remove the dependency on assets. <del> patches = [ ./no-assets.patch ./no-download.patch ]; </del> <ins> patches = [ ./no-assets.patch ./no-download.patch # Fix for newer opencl-clhpp. Remove with the next release. (fetchpatch { url = "https://github.com/arrayfire/arrayfire/pull/3562.patch"; hash = "sha256-AdWlpcRTn9waNAaVpZfK6sJ/xBQLiBC4nBeEYiGNN50"; }) ]; </ins> postPatch = '' mkdir -p ./extern/af_glad-src

Discussion:
Auto-updates for this package seem to fail due to changes to opencl-headers that introduce cmake Seems to me like should fix this issue and no manual intervention will be needed, but I'm not entirely sure. At the moment this package is very outdated and misses bugfixes without which software using this library fails to build with certain compiler flags. I'm not sure who to tag here since the package has no maintainers. this issue seems relevant. Package name: opencl-clhpp Latest released version: 2023.12.14 <!-- Search your package here: --- Current version on the unstable channel: 2.0.15 Current version on the stable/release channel: 2.0.15 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Indeed seems like cmake patch has resolved auto-update issue:
Change:
{ "darwin": { <del> "hash": "sha256-EDhj4Gb0ykFX8W2G8osusjggemcuHO7hkUKb151cQ6g=", "version": "0.2024.08.20.08.02.stable_00" </del> <ins> "hash": "sha256-EDu3BwNvCsy11pycqwDasSdV1g50fFQCa2eaax3mGTg=", "version": "0.2024.09.03.08.02.stable_03" </ins> }, "linux_x86_64": { <del> "hash": "sha256-Uk5pSoAvEppjLnskLc5/ftcCaiJnXATJfCPDP2QpBo8=", "version": "0.2024.08.20.08.02.stable_00" </del> <ins> "hash": "sha256-yG7Gr2B5VqDuZfB4RJZYZNt7SNOJ2HSwSCM+1iKhshc=", "version": "0.2024.09.03.08.02.stable_03" </ins> }, "linux_aarch64": { <del> "hash": "sha256-B0mUAwydIgi7Nhm/iUhEjkV3LL+qLfXZcOz6+7eDZGc=", "version": "0.2024.08.20.08.02.stable_00" </del> <ins> "hash": "sha256-gg5ACoABFesDUhdVBOlv+bQtliQ3N/RZlmzDMuONef8=", "version": "0.2024.09.03.08.02.stable_03" </ins> } }

Discussion:
Package name: warp-terminal Latest released version: 0.2024.09.03.08.02.stable03 Current version on the unstable channel: 0.2024.08.20.08.02.stable00 Current version on the stable/release channel: 0.2024.07.16.08.02.stable_03 Notify maintainers Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
<ins> diff --git a/lib/sanitizer_common/sanitizer_mac.cpp b/lib/sanitizer_common/sanitizer_mac.cpp --- a/lib/sanitizer_common/sanitizer_mac.cpp +++ b/lib/sanitizer_common/sanitizer_mac.cpp @@ -613,9 +613,15 @@ HandleSignalMode GetHandleSignalMode(int signum) { // Offset example: // XNU 17 -- macOS 10.13 -- iOS 11 -- tvOS 11 -- watchOS 4 constexpr u16 GetOSMajorKernelOffset() { -  if (TARGET_OS_OSX) return 4; -  if (TARGET_OS_IOS || TARGET_OS_TV) return 6; -  if (TARGET_OS_WATCH) return 13; +#if TARGET_OS_OSX +  return 4; +#endif +#if TARGET_OS_IOS || TARGET_OS_TV +  return 6; +#endif +#if TARGET_OS_WATCH +  return 13; +#endif } using VersStr = char[64]; @@ -627,13 +633,13 @@ static uptr ApproximateOSVersionViaKernelVersion(VersStr vers) { u16 os_major = kernel_major - offset; const char *format = "%d.0"; -  if (TARGET_OS_OSX) { -    if (os_major >= 16) {  // macOS 11+ -      os_major -= 5; -    } else {  // macOS 10.15 and below -      format = "10.%d"; -    } +#if TARGET_OS_OSX +  if (os_major >= 16) {  // macOS 11+ +    os_major -= 5; +  } else {  // macOS 10.15 and below +    format = "10.%d"; } +#endif return internal_snprintf(vers, sizeof(VersStr), format, os_major); } @@ -681,15 +687,14 @@ void ParseVersion(const char *vers, u16 *major, u16 *minor) { // Aligned versions example: // macOS 10.15 -- iOS 13 -- tvOS 13 -- watchOS 6 static void MapToMacos(u16 *major, u16 *minor) { -  if (TARGET_OS_OSX) -    return; - -  if (TARGET_OS_IOS || TARGET_OS_TV) +#if !TARGET_OS_OSX +#if TARGET_OS_IOS || TARGET_OS_TV *major += 2; -  else if (TARGET_OS_WATCH) +#elif TARGET_OS_WATCH *major += 9; -  else +#else UNREACHABLE("unsupported platform"); +#endif if (*major >= 16) {  // macOS 11+ *major -= 5; @@ -697,6 +702,7 @@ static void MapToMacos(u16 *major, u16 *minor) { *minor = *major; *major = 10; } +#endif } static MacosVersion GetMacosAlignedVersionInternal() { </ins>

Discussion:
Describe the bug Building or fails with: To Reproduce Steps to reproduce the behavior: until approximately 70% (sometimes a few percent earlier) Additional context Compilation log for with only : Compilation log for with only : I had this problem with Sierra with XCode 9.2 also. I just upgraded to Mojave 10.14.6 and XCode 11.13.1. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata system: host os: multi-user?: sandbox: version: channels(peterhil): channels(root): nixpkgs: Maintainer information:
Change:
inherit version; sha256 = "6c80b1e5ad3665290ea39320b91e1be1e0d5f60652b964a3070216de83d2e47c"; }; <del> doCheck= false; </del> <ins> doCheck = false; </ins> }); } )

Discussion:
The recent nixos-unstable update () breaks octoprint. Last known good commit is . Steps to reproduce the behavior: result: This is probably because the derivation of octoprint has an override for . Werkzeug changed its API in version 2, which lead to a similar . When v1.0.1 , it fails with the old Werkzeug version due to an incorrect redirect. This is also why builds without issues, but fails to build, when its needed for octoprint. I'm not a 100% sure its the werkzeug override. Octoprint has a lot of Python overrides.. build sucessfully. Please run and paste the result.
Feel free to open a PR overriding the pytest-httpbin version for octoprint.
it seems it wasn't just (at least not in aarch64). Anyway, I submitted a PR which should fix the build issues introduced by recent Python upgrades.
Change:
anarchism = callPackage ../data/documentation/anarchism { }; <ins> ananicy = callPackage ../misc/ananicy { }; ananicy-cpp = callPackage ../misc/ananicy-cpp { }; </ins> andagii = callPackage ../data/fonts/andagii { }; andika = callPackage ../data/fonts/andika { };

Discussion:
Project description Ananicy (ANother Auto NICe daemon) — is a shell daemon created to manage processes' IO and CPU priorities, with community-driven set of rules for popular applications (anyone may add their own rule via github's pull request mechanism). It's mainly for desktop usage. Metadata homepage URL: source URL: license: gpl3 platforms: linux
Change:
config = lib.mkIf cfg.enable { environment.systemPackages = [ pkgs.supergfxctl ]; <del> environment.etc."supergfxd.conf" = lib.mkIf (cfg.settings != null) { source = json.generate "supergfxd.conf" cfg.settings; }; </del> <ins> environment.etc."supergfxd.conf" = lib.mkIf (cfg.settings != null) { source = json.generate "supergfxd.conf" cfg.settings; mode = "0644"; }; </ins> services.dbus.enable = true;

Discussion:
does not running when you edit . Steps to reproduce the behavior: JSON value of Running service with my setting. ! Left is generated by nixos, Right is generated by supergfxd and edit me. ! I can run without and can edit conf generated by . However, I cannot run with same setting. (edit ) I use zephyrus G14. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --
Please test
Complete ! Thank you !