jiebi/CodeConvo huggingface dataset:
Change:
(void - (if remove? <del> + (if #t </del> <ins> + (begin </ins> (remove-signature file) (add-ad-hoc-signature file)))

Discussion:
Steps to reproduce the behavior:
Could you elaborate more? I have noticed this posted issue and decided to check, considering I need racket in the near future, and I am on M1 Mac mini. I was unable to replicate by installing with specified command Outcome is valid My system has numerous differences though: My nix version is higher. Consider updating your channel and nix version. Maybe it is the culprit? Additionally, I am on previous macOS release. Is this an upstream regression in racket itself related to os update? In my case software looks like to be working:
Possibly. I am on version 12.6 and the homebrew package works well. Also, as you see in the log, the failure happens right after , and in the there is a codesign patch. Maybe it's out of date.
FWIW, I'm getting the same error on nix=2.11.0.
Same error here with basically the same Nix setup. I’m on an M2 MacBook Air. This happens with both and .
Change:
ARROW_SUBSTRAIT_URL = fetchFromGitHub { owner = "substrait-io"; repo = "substrait"; <del> rev = "v0.20.0"; hash = "sha256-71hAwJ0cGvpwK/ibeeQt82e9uqxcu9sM1rPtPENMPfs="; </del> <ins> rev = "v0.27.0"; hash = "sha256-wptEAXembah04pzqAz6UHeUxp+jMf6Lh/IdyuIhy/a8="; </ins> }; <del> patches = [ # Protobuf switched to lower case project name. ./cmake-find-protobuf.patch ]; </del> nativeBuildInputs = [ cmake ninja

Discussion:
Arbitrary code execution in PyArrow (CVE-2023-) Package name: python311Packages.pyarrow (src comes from arrow-cpp) Latest released version: 14.0.1 <!-- Search your package here: --- Current version on the unstable channel: 13.0.0 Current version on the stable/release channel: 12.0.0 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers Note for maintainers: Please tag this issue in your PR.
Change:
./services/networking/kea.nix ./services/networking/keepalived/default.nix ./services/networking/keybase.nix <del> ./services/networking/kippo.nix </del> ./services/networking/knot.nix ./services/networking/kresd.nix ./services/networking/lambdabot.nix

Discussion:
kippo is an SSH honeypot service, here is the module definition: And of course, it needs the kippo package : But now the module is broken because the was removed : ( Here is the commit: and corresponding PR: Should we remove the broken module or re-pachaging the ...? Steps to reproduce the behavior: line to error log says is not exists. I'm not found any maintainers from the module, the deleted package's maintainer is Maintainer information:
I am no longer a regular user of kippo so i didn't mind if the module is deprecated along with the package.
Maybe I can make a PR to remove the module, sorry for bothering you.
Change:
translate-shell = callPackage ../applications/misc/translate-shell { }; <ins> translatepy = with python3.pkgs; toPythonApplication translatepy; </ins> trash-cli = callPackage ../tools/misc/trash-cli { }; trebleshot = libsForQt5.callPackage ../applications/networking/trebleshot { };

Discussion:
Project description Translate, transliterate, get the language of texts in no time with the help of multiple APIs! Metadata homepage URL: source URL: license: agpl3 platforms: linux  It (most likely) runs on many platforms, but I am specifically interested in linux support.
Sweet! Thanks.
Change:
else "${lib.getLib glibc}/lib/ld-linux*"; <ins> downloadsUrl = "https://downloads.haskell.org/ghc"; </ins> in stdenv.mkDerivation rec {

Discussion:
<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on github to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: ghc <!-- The current version can be found easily with the same process than above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: desired version: <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: Please tag this issue in your PR.
Today I tried to install , but it failed at downloading : complained about hash mismatch. It seems like URL has changed.
I used the following overlay as a workaround:
Should work with .
Change:
] ); <del> nativeBuildInputs = [ which ]; </del> <ins> nativeBuildInputs = [ which ] ++ lib.optionals cudaSupport (with cudaPackages; [ cuda_nvcc ]); </ins> propagatedBuildInputs = [ numpy

Discussion:
Symptoms practically identical to . Steps to reproduce the behavior: (e.g. on ) when is enabled. Relevant section (): Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I dont know anything about cuda unfortunately. If anyone else has knowledge, im happy to help merge a PR though.
try passing to , thanks
looks like that worked.
Change:
<ins> { lib, stdenv, fetchFromGitHub, boxfort, meson, libcsptr, pkg-config, gettext, cmake, ninja, protobuf, libffi, libgit2, dyncall, nanomsg, nanopbMalloc, python3Packages, testers, criterion, callPackage }: let # follow revisions defined in .wrap files debugbreak = fetchFromGitHub { owner = "MrAnno"; repo = "debugbreak"; rev = "83bf7e933311b88613cbaadeced9c2e2c811054a"; hash = "sha256-OPrPGBUZN73Nl5NMEf/nME843yTolt913yjut3rAos0="; }; klib = fetchFromGitHub { owner = "attractivechaos"; repo = "klib"; rev = "cdb7e9236dc47abf8da7ebd702cc6f7f21f0c502"; hash = "sha256-+GaI5nXz4jYI0rO17xDhNtFpLlGL2WzeSVLMfB6Cl6E="; }; in stdenv.mkDerivation rec { pname = "criterion"; version = "2.4.2"; src = fetchFromGitHub { owner = "Snaipe"; repo = "Criterion"; rev = "v${version}"; fetchSubmodules = true; hash = "sha256-5GH7AYjrnBnqiSmp28BoaM1Xmy8sPs1atfqJkGy3Yf0="; }; nativeBuildInputs = [ meson ninja cmake pkg-config protobuf ]; buildInputs = [ (lib.getDev boxfort) dyncall gettext libcsptr nanomsg nanopbMalloc libgit2 libffi ]; nativeCheckInputs = with python3Packages; [ cram ]; doCheck = true; prePatch = '' cp -r ${debugbreak} subprojects/debugbreak cp -r ${klib} subprojects/klib for dep in "debugbreak" "klib"; do local meson="$dep/meson.build" chmod +w subprojects/$dep cp subprojects/packagefiles/$meson subprojects/$meson done ''; postPatch = '' patchShebangs ci/isdir.py src/protocol/gen-pb.py ''; outputs = [ "out" "dev" ]; passthru.tests.version = let tester = callPackage ./tests/001-version.nix {}; in testers.testVersion { package = criterion; command = "${lib.getExe tester} --version"; version = "v${version}"; }; meta = { description = "A cross-platform C and C++ unit testing framework for the 21th century"; homepage = "https://github.com/Snaipe/Criterion"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ thesola10 Yumasi sigmanificient ]; platforms = lib.platforms.unix; }; } </ins>

Discussion:
Package name: criterion Latest released version: 2.4.2 <!-- Search your package here: --- Current version on the unstable channel: 2.4.1 Current version on the stable/release channel: 2.4.1 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. -- r-ryantm is failing to update the package because it now also depends on something called 'debugbreak'. Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
The missing is here: (linked in the of criterion)
Change:
installPhase = '' mkdir -p $out/bin for d in bin/sqitch etc lib share ; do <del> ln -s ${sqitchModule}/$d $out/$d </del> <ins> # make sure dest alreay exists before symlink # this prevents installing a broken link into the path if [ -e ${sqitchModule}/$d ]; then ln -s ${sqitchModule}/$d $out/$d fi </ins> done ''; dontStrip = true;

Discussion:
I have tried installing sqitch-pg from nixpkg's master, but it conflicts with my other installs. You should see something like the following error: I tried using the latest version of sqitch from cpan and the issue still occurs. See for some initial debugging System: macOS 10.12.6 (16G29) Nix version: nix-env (Nix) 1.11.15 Nixpkgs version: 18.03pre117347. Sandboxing enabled: false
This isn't darwin specific, buildEnv doesn't know how what to do with because it's a broken symlink.
Change:
<ins> #!/usr/bin/env nix-shell #!nix-shell -i bash -p curl jq nix-prefetch common-updater-scripts nix coreutils # shellcheck shell=bash set -euo pipefail cd "$(dirname "${BASH_SOURCE[0]}")" old_version=$(jq -r ".version" sources.json || echo -n "0.0.1") version=$(curl -s "https://api.github.com/repos/typesense/typesense/releases/latest" | jq -r ".tag_name") version="${version#v}" if [[ "$old_version" == "$version" ]]; then echo "Already up to date!" exit 0 fi declare -A platforms=( [aarch64-linux]="linux-arm64" [x86_64-darwin]="darwin-amd64" [x86_64-linux]="linux-amd64" ) sources_tmp="$(mktemp)" cat <<EOF > "$sources_tmp" { "version": "$version", "platforms": {} } EOF for platform in "${!platforms[@]}"; do arch="${platforms[$platform]}" url="https://dl.typesense.org/releases/${version}/typesense-server-${version}-${arch}.tar.gz" sha256hash="$(nix-prefetch-url --type sha256 "$url")" hash="$(nix hash to-sri --type sha256 "$sha256hash")" echo "$(jq --arg arch "$arch"  --arg platform "$platform"  --arg hash "$hash"  '.platforms += {($platform): {arch: $arch, hash: $hash}}'  "$sources_tmp")" > "$sources_tmp" done cp "$sources_tmp" sources.json </ins>

Discussion:
Project description Fast, typo tolerant, in-memory fuzzy Search Engine for building delightful search experiences. Metadata homepage URL: source URL: license: gpl3 platforms: linux, darwin
Change:
callPackage ../nginx/generic.nix args rec { pname = "openresty"; <del> nginxVersion = "1.15.8"; version = "${nginxVersion}.3"; </del> <ins> nginxVersion = "1.17.8"; version = "${nginxVersion}.2"; </ins> src = fetchurl { url = "https://openresty.org/download/openresty-${version}.tar.gz"; <del> sha256 = "1a1la7vszv1parsnhphydblz64ffhycazncn3ividnvqg2mg735n"; </del> <ins> sha256 = "1813w33hjm1hcqvl3b3f67qgi5zfjiqg6s01hiy12a5j3jqilcig"; </ins> }; fixPatch = patch: let name = patch.name or (builtins.baseNameOf patch); in

Discussion:
, CVSSv3=7.5 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc Cc Cc
Change:
pycosat = callPackage ../development/python-modules/pycosat { }; <ins> pycotap = callPackage ../development/python-modules/pycotap { }; </ins> pycountry = callPackage ../development/python-modules/pycountry { }; pycparser = callPackage ../development/python-modules/pycparser { };

Discussion:
The package PySolFC is broken: It does not even start but throws an exception. Looks like noone has ever tested this. :( -shell -p pysolfc .py Traceback (most recent call last): File "/nix/store/y3xs17qmzs898jyjcbp9vbcj2kkjqhgz-PySolFC-", line 37, in <modulefrom import main # noqa: E402,I202 File "/nix/store/y3xs17qmzs898jyjcbp9vbcj2kkjqhgz-PySolFC-2.6.4/lib/python3.9/site-", line 30, in <modulefrom import Application File "/nix/store/y3xs17qmzs898jyjcbp9vbcj2kkjqhgz-PySolFC-2.6.4/lib/python3.9/site-", line 31, in <modulefrom import GAMEDB, GI, loadGame File "/nix/store/y3xs17qmzs898jyjcbp9vbcj2kkjqhgz-PySolFC-2.6.4/lib/python3.9/site-", line 28, in <modulefrom pysollib.mfxutil import Struct, printerr File "/nix/store/y3xs17qmzs898jyjcbp9vbcj2kkjqhgz-PySolFC-2.6.4/lib/python3.9/site-", line 146, in <moduleuclock = AttributeError: module 'time' has no attribute 'clock'
Just ran into this as well. Looks like was removed in Python 3.8, but also the version of PySolFC in is three and a half years (and ten minor versions) old so decent chance bumping the package version takes care of it
Change:
, glibcLocales # The GraalVM derivation to use , graalvmDrv <del> , name ? "${args.pname}-${args.version}" </del> , executable ? args.pname # JAR used as input for GraalVM derivation, defaults to src , jar ? args.src

Discussion:
After babashka can't display Unicode characters I have a babashka script that outputs the following JSON: The text is a Nerd Font Symbol code point. After the output is: Steps to reproduce the behavior: This has been fixed in the past by I did not test other packages that could be affected by the PR.
Pretty sure this is related to this bug in GraalVM upstream: I am curious if this is affecting projects using GraalVM 21.0.0 vanilla or if not, how is it working and why it is broken in .
It does seem that even setting up inside the C compiler environment is not sufficient to make it work. CC to see if they have more context on what the possibly issue is.
I also hit this today. I tested the same version(v1.3.186) from upstream binary release, which does not have this issue. Shall we always sync the same version of graavm as upstream build ci?
I don't think this is the issue and even if it was, it is not like babashka is the only GraalVM package we have.
I know that folks can't reproduce this issue with upstream, but I also can't reproduce it with GraalVM using Java, e.g.: A patch if anyone wants to test to be applied to : So, can anyone reproduce this issue with GraalVM Native Image itself? If not, the only thing I can think is that the issue here is the GCC (i.e.: non-static) version (upstream compiles with by default). Or something else.
So I got this warning: But this was after already started to build, so I assume this is the same issue as and need to be fixed upstream.
To explain in more details why I think this is an upstream issue: I don't get the same in the initial part of the build, only when the build starts that I get this warning. So what I assume is doing: Running the CC (C Compiler) inside a shell with clean environment We see the , because this shell couldn't set the proper locale thanks to missing environment variables (e.g.: ) Since this shell environment has no environment variables (at least, not the environment variables that we need), this ends up breaking macOS compilation and locale (Unicode) support in Linux Not sure why it works in GraalVM itself though yet. This is all really strange.

While I'm not familiar with graalvm, I do find a hack for this issue, maybe can weigh in to test whether this hack is valid: Some inspiration from a random reddit post and those issues: And I do find it's using , so I thought if I those two into build args, maybe it'd work. And indeed it seems to work.. After I built bb with above args,
BTW, I cannot reproduce with GraalVM Native Image on helloworld java as well. Helloworld produced by GraalVM Native Image has correct unicode output.
Thanks for investigating this issue. Opened so we can have this fixed.
Change:
gnome-podcasts = callPackage ../applications/audio/gnome-podcasts { }; <del> gnome-photos = callPackage ../applications/graphics/gnome-photos { gegl = gegl_0_4; }; </del> <ins> gnome-photos = callPackage ../applications/graphics/gnome-photos { }; </ins> gnokii = callPackage ../tools/misc/gnokii { };

Discussion:
Describe the bug I get this: It can also be seen on hydra: successful build: (revision ) First unsuccessful build: (revision ) To Reproduce Expected behavior It should build. Notify maintainers Maintainer information:
Considering it's abandonware since there's a new version, not resolving it and just setting it as broken is perhaps best.
Or removing arch from meta.platforms. Though really, nothing should be using such ancient version these days.
See for alternative solution (dropping gegl 0.2 completely)
Change:
<del> { lib, stdenv, fetchurl, pkg-config, file, glibmm, gst_all_1, gnome }: </del> <ins> { lib , stdenv , fetchurl , fetchpatch , pkg-config , file , glibmm , gst_all_1 , gnome }: </ins> stdenv.mkDerivation rec { pname = "gstreamermm"; version = "1.10.0";

Discussion:
fails to build. Seems to be . A . That said, the project is mostly abandoned. The last release was 4 years ago, and they recommend building from a release since building from source is much harder. I can confirm, as I am unable to make it build from source (but then again for me autotools is like discovering ancient tablets in the sand with hieroglyphs on them). There are only a few packages that depend on . If it's too much hassle to get working may just want to retire these. Build works. End of log from building on current : End of log trying to build from source:
Thanks for having a look at it. I'm not sure what you mean by retiring the packages. I'd like to mark gstreamermm as broken first, before removing any packages. If nobody finds a fix for the build ofc.
does not actually seem to require at all. I'm working on a PR now to update and just have it depend on and
problem: generated sources are missing in git but these files are in the tarball release we need to exclude to make the patch work says next problem: is not executable is missing shebang line with perl interpreter needs perl module xml ... </details
Change:
<ins> From a29cffa646356228d6ec7bd7ce21fe3ab90fdd19 Mon Sep 17 00:00:00 2001 From: Someone Serge <sergei.kozlukov@aalto.fi> Date: Wed, 7 Feb 2024 16:59:09 +0000 Subject: [PATCH] eigen: allow dependency injection --- cmake/external/eigen.cmake | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/cmake/external/eigen.cmake b/cmake/external/eigen.cmake index c0f7ddc50e..996b83d18a 100644 --- a/cmake/external/eigen.cmake +++ b/cmake/external/eigen.cmake @@ -1,4 +1,3 @@ - if (onnxruntime_USE_PREINSTALLED_EIGEN) add_library(eigen INTERFACE) file(TO_CMAKE_PATH ${eigen_SOURCE_PATH} eigen_INCLUDE_DIRS) @@ -10,14 +9,21 @@ else () URL ${DEP_URL_eigen} URL_HASH SHA1=${DEP_SHA1_eigen} PATCH_COMMAND ${Patch_EXECUTABLE} --ignore-space-change --ignore-whitespace < ${PROJECT_SOURCE_DIR}/patches/eigen/Fix_Eigen_Build_Break.patch +            FIND_PACKAGE_ARGS NAMES Eigen3 ) else() FetchContent_Declare( eigen URL ${DEP_URL_eigen} URL_HASH SHA1=${DEP_SHA1_eigen} +            FIND_PACKAGE_ARGS NAMES Eigen3 ) endif() -    FetchContent_Populate(eigen) -    set(eigen_INCLUDE_DIRS  "${eigen_SOURCE_DIR}") +    FetchContent_MakeAvailable(eigen) +    add_library(eigen ALIAS Eigen3::Eigen) + +    # Onnxruntime doesn't always use `eigen` as a target in +    # `target_link_libraries`, sometimes it just uses +    # `target_include_directories`: +    get_target_property(eigen_INCLUDE_DIRS Eigen3::Eigen INTERFACE_INCLUDE_DIRECTORIES) endif() -- 2.42.0 </ins>

Discussion:
Meaningful errors Full logs: system: host os: multi-user?: sandbox: version: channels(root): channels(jarrod): nixpkgs: Source file with issue:  I tried to locate where is defined, but was unable to.
Edited the issue and I'm not sure if GitHub retroactively sends notifications, so pardon the double-mention:
Will be fixed by .
Change:
cargoHash = "sha256-dY00xcMnOCWhdRzC+3mTHSIqeYEPUDBJeYd/GiLM/38="; <ins> patches = [ # Fix for rust 1.79, see https://github.com/Orange-OpenSource/hurl/issues/3057 # We should be able to remove this at the next hurl version bump (fetchpatch { name = "hurl-fix-rust-1.79"; url = "https://github.com/Orange-OpenSource/hurl/commit/d51c275fc63d1ee5bbdc6fc70279ec8dae86a9c1.patch"; hash = "sha256-peA4Zq5J8ynL7trvydQ3ZqyHpJWrRmJeFeMKH9XT2n4="; }) ]; </ins> nativeBuildInputs = [ pkg-config installShellFiles

Discussion:
Steps to reproduce the behavior: hurl <!-- --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Hydra build: Upstream issue: It seems like to build it on rust 1.79 it needs a patch from: (that is not in any release tag yet)
Change:
<del> diff --git a/configure b/configure index d199975..66d903b 100755 --- a/configure +++ b/configure @@ -734,7 +734,7 @@ def configure_library(lib, output): # libpath needs to be provided ahead libraries if pkg_libpath: output['libraries'] += ( -          filter(None, map(str.strip, pkg_cflags.split('-L')))) +          pkg_libpath.split()) default_libs = getattr(options, shared_lib + '_libname') default_libs = map('-l{0}'.format, default_libs.split(',')) </del>

Discussion:
All builds of fail. When I try to build nixpkgs/master locally, I get the same failure as Any ideas what might cause this?
I think the issue is that it's reaching out to the host Xcode and needs to be patched not to do that. I don't have time to look and although I know about darwin impurities a fair amount, know nothing about nodejs. Someone who actually uses it needs to step up and fix it properly. The fix will likely look like a patch that tells it not to reach out to Xcode and instead teaches it where to find the things it needs. Also relevant is a project is working on to present a fake Xcode to our , but I don't think that's ready yet.
For what it is worth. I have Xcode installed and if I add this line back in it builds for me:
That's weird. I took it out because I couldn't even find that line in the source, but I might have missed it somehow. Feel free to push it back in!
Change:
<ins> { lib, nix-update-script, buildNpmPackage, fetchFromGitHub, runCommand, jq, }: let version = "1.12.3"; src = fetchFromGitHub { owner = "detachhead"; repo = "basedpyright"; rev = "v${version}"; hash = "sha256-n4jiKxkXGCKJkuXSsUktsiJQuCcZ+D/RJH/ippnOVw8="; }; patchedPackageJSON = runCommand "package.json" { } '' ${jq}/bin/jq ' .devDependencies |= with_entries(select(.key == "glob" or .key == "jsonc-parser")) | .scripts =  {  } ' ${src}/package.json > $out ''; pyright-root = buildNpmPackage { pname = "pyright-root"; inherit version src; npmDepsHash = "sha256-63kUhKrxtJhwGCRBnxBfOFXs2ARCNn+OOGu6+fSJey4="; dontNpmBuild = true; postPatch = '' cp ${patchedPackageJSON} ./package.json cp ${./package-lock.json} ./package-lock.json ''; installPhase = '' runHook preInstall cp -r . "$out" runHook postInstall ''; }; pyright-internal = buildNpmPackage { pname = "pyright-internal"; inherit version src; sourceRoot = "${src.name}/packages/pyright-internal"; npmDepsHash = "sha256-ba7GzkKrXps4W1ptv+j9fMMXwpi30ymbqgIJ64PaZ1g="; dontNpmBuild = true; # FIXME: Remove this flag when TypeScript 5.5 is released npmFlags = [ "--legacy-peer-deps" ]; installPhase = '' runHook preInstall cp -r . "$out" runHook postInstall ''; }; in buildNpmPackage rec { pname = "basedpyright"; inherit version src; sourceRoot = "${src.name}/packages/pyright"; npmDepsHash = "sha256-9V1T6w1G1SZi19dgRaFmv+Vy71hmQR+L6cDjQZJrGy8="; postPatch = '' chmod +w ../../ ln -s ${pyright-root}/node_modules ../../node_modules chmod +w ../pyright-internal ln -s ${pyright-internal}/node_modules ../pyright-internal/node_modules ''; postInstall = '' mv "$out/bin/pyright" "$out/bin/basedpyright" mv "$out/bin/pyright-langserver" "$out/bin/basedpyright-langserver" ''; dontNpmBuild = true; passthru.updateScript = nix-update-script { }; meta = { changelog = "https://github.com/detachhead/basedpyright/releases/tag/${version}"; description = "Type checker for the Python language"; homepage = "https://github.com/detachhead/basedpyright"; license = lib.licenses.mit; mainProgram = "basedpyright"; maintainers = with lib.maintainers; [ kiike ]; }; } </ins>

Discussion:
Project description Basedpyright is a fork of with various type checking improvements, improved vscode support and pylance features built into the language server. Metadata homepage URL: source URL: license: mit platforms: unix, linux, darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]: