jiebi/CodeConvo huggingface dataset:
Change:
buildInputs = [ glib <del> systemd </del> <ins> systemdMinimal </ins> libpcap ];

Discussion:
Steps to reproduce the behavior: with enabled <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
This is not really a bug or a build failure, more of a feature request. The expression in nixpkgs doesn't set , as the build with it being set would fail. Someone needs to sit down and figure out why. I propose starting with the code of the two failed tests, seeing if something is missing from nativeCheckInputs. Happy to review a PR, but I don't have the bandwidth to drive this.
It's an indication that the packaging is incorrect. Incorrect packaging sounds like a packaging bug to me. See for the main tracking issue. If it's better categorised as a "bug" than a "build failure", then so be it, but it's absolutely not a "feature request." If you don't have time, that's a totally different topic, that could be just stated as is without the rest of it.
and the test for both use to get information about devices, which is not currently provided by any input. Adding (which provides ) to the check inputs makes this build without errors, even with . Since (a binary output) needs , should probably also be in the regular build inputs. (just stumbled across this randomly and thought I'd try to find out what's up)
Oh, very nice! Wondering how is currently sneaking in then :-) In any case, I'll try to add this to a PR and see how it goes!
I opened that does this, thanks!
The PR has been merged, this can be closed.
Change:
<del> { lib, stdenv, fetchurl }: </del> <ins> { lib, stdenv, fetchurl, gtk-engine-murrine }: </ins> stdenv.mkDerivation rec { pname = "sweet";

Discussion:
Describe the bug Sweet theme doesn't provide murrine gtk engine compared to other themes: Apps thus don't detect the murrine engine because it is not installed. There might also be other problems with the package as I think pixbuf and librsvg are mendatory for themes, I am not sure about that but it could be. Expected behavior The sweet package should install all necessary dependencies. Screenshots ! Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Maintainer information:
Nice! Thank you
Change:
{ lib <del> , pythonOlder </del> , buildPythonPackage , fetchFromGitHub <del> , pkgs </del> <ins> , nose </ins> , numpy <ins> , pythonOlder </ins> , scipy <del> # check inputs , nose </del> }: buildPythonPackage rec { pname = "ecos"; <del> version = "2.0.8"; </del> <ins> version = "2.0.10"; format = "setuptools"; </ins> disabled = pythonOlder "3.6"; src = fetchFromGitHub { owner = "embotech"; repo = "ecos-python"; <del> rev = version; sha256 = "sha256-2OJqbcOZceeD2fO5cu9fohuUVaA2LwQOQSWR4jRv3mk="; </del> <ins> rev = "v${version}"; sha256 = "sha256-TPxrTyVZ1KXgPoDbZZqXT5+NEIEndg9qepujqFQwK+Q="; </ins> fetchSubmodules = true; }; <del> prePatch = '' echo '__version__ = "${version}"' >> ./src/ecos/version.py ''; </del> propagatedBuildInputs = [ numpy scipy ]; <del> checkInputs = [ nose ]; </del> <ins> checkInputs = [ nose ]; </ins> checkPhase = '' <del> # Run tests </del> cd ./src nosetests test_interface.py test_interface_bb.py ''; <del> pythonImportsCheck = [ "ecos" ]; </del> <ins> pythonImportsCheck = [ "ecos" ]; </ins> meta = with lib; { description = "Python package for ECOS: Embedded Cone Solver"; <del> downloadPage = "https://github.com/embotech/ecos-python/releases"; homepage = pkgs.ecos.meta.homepage; license = licenses.asl20; </del> <ins> homepage = "https://github.com/embotech/ecos-python"; license = licenses.gpl3Only; </ins> maintainers = with maintainers; [ drewrisinger ]; }; }

Discussion:
suggests that the ecos-python license as Apache 2.0 but looks like a copy of the GPLv3, not the ASLv2. cc:
Thanks for the hint. The license is GPLv3.
Thanks. Probably a copy-pasta issue.
Change:
<ins> import ./make-test.nix ({ pkgs, ...} : { name = "emacs-daemon"; meta = with pkgs.stdenv.lib.maintainers; { maintainers = [ DamienCassou ]; }; enableOCR = true; machine = { config, pkgs, ... }: { imports = [ ./common/x11.nix ]; services.emacs = { enable = true; defaultEditor = true; }; # Important to get the systemd service running for root environment.variables.XDG_RUNTIME_DIR = "/run/user/0"; environment.variables.TEST_SYSTEM_VARIABLE = "system variable"; }; testScript = '' $machine->waitForUnit("multi-user.target"); # checks that the EDITOR environment variable is set $machine->succeed("test $(basename "$EDITOR") = emacseditor"); # waits for the emacs service to be ready $machine->waitUntilSucceeds("systemctl --user status emacs.service | grep 'Active: active'"); # connects to the daemon $machine->succeed("emacsclient --create-frame $EDITOR &"); # checks that Emacs shows the edited filename $machine->waitForText("emacseditor"); # makes sure environment variables are accessible from Emacs $machine->succeed("emacsclient --eval '(getenv "TEST_SYSTEM_VARIABLE")'") =~ /system variable/ or die; $machine->screenshot("emacsclient"); ''; }) </ins>

Discussion:
Several users are manually adding a systemd user service to their . It would be better to create a NixOS module so that people don't copy/paste half-baked definitions. What do you think?
/cc
Versions of such a user service can be found at: Please tell me where I can find your version so we merge them all
On a related note, I use an XDG autostart to start the Emacs daemon. This may be preferable for some people because the environment will be set up correctly, though there are of course other ways to achieve this.
Sounds like a great idea to me. Those versions look quite similar to mine. build my emacs with GTK3 enabled. So there would obviously need to be a config option. there be a configuration option for the list of Melpa packages, or would this be handled using and the option? : Tikon's config. Having will result in starting emacs for every user who logs in. For a general NixOS module it would be best to leave empty and let the user enable the service with (or adding a symlink in ). : Damien's config, You probably already know, but setting the variable could be achieved by putting this in your configuration: Other variables such as should already be taken care of by sourcing . note that systemd socket activation for Emacs server was implemented in April and should appear in Emacs 25.2.
Please see PR . thanks for your feedback. I didn't do anything special yet. I have the impression allowing that would just duplicate features. But I really don't know. Any opinion?
Yes, it does overlap a little. I am trying to find out if it's possible to make the configuration of emacs any simpler for newcomers. In this case, I think not.
Change:
rtfbs = [ pkgs.zlib pkgs.pcre.dev pkgs.bzip2 pkgs.gzip pkgs.readline ]; rtiff = [ pkgs.libtiff.dev ]; runjags = [ pkgs.jags ]; <del> RSymphony = [ pkgs.symphony ]; </del> RVowpalWabbit = [ pkgs.zlib.dev pkgs.boost ]; rzmq = [ pkgs.zeromq3 ]; SAVE = [ pkgs.zlib pkgs.bzip2 pkgs.icu pkgs.lzma pkgs.pcre ];

Discussion:
I get this error: while trying to evaluate nixpkgs.rPackages (). /cc System: (NixOS: , Ubuntu/Fedora: , ...) macOS Nix version: (run ) nix-env (Nix) 1.11.15 Nixpkgs version: (run ) 03pre119383. Sandboxing enabled: (run ) no
have the same problem but on linux
Change:
] ++ (with newPython.pkgs; [ codecov mock <del> pytest node-semver </del> nose parameterized webtest ]); <del> # Conan 1.14.0 has removed all tests from the Pypi source dist: #     https://github.com/conan-io/conan/pull/4713 # We have recommended they be added back: #     https://github.com/conan-io/conan/issues/4563#issuecomment-602225083 </del> <ins> # TODO: reenable tests now that we fetch tests w/ the source from GitHub. # Not enabled right now due to time constraints/failing tests that I didn't have time to track down </ins> doCheck = false; postPatch = ''

Discussion:
Describe the bug Conan fails to build due to the fact that six was updated in pull request To Reproduce Expected behavior Conan should be updated to use the 1.15 version of six to build correctly. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata system: host os: multi-user?: sandbox: version: channels(narice): channels(root): nixpkgs: Maintainer information:
I'm not actually the maintainer, is, but I'll see if I can see if there's a quick fix
woaw! that was fast! thank you very much
You even got a package update in the bargain :D
Change:
This module implements a GUI for the Wacom Linux Drivers and extends it with profile support to handle different button / pen layouts per profile. ''; <del> homepage = "https://cgit.kde.org/wacomtablet.git/about/"; </del> <ins> homepage = "https://invent.kde.org/system/wacomtablet"; </ins> license = lib.licenses.gpl2; maintainers = [ lib.maintainers.Thra11 ]; platforms = lib.platforms.linux;

Discussion:
Describe the bug The KDE Wacom configuration module is not working, showing "The shared library was not found": To Reproduce Steps to reproduce the behavior: KDE KDE system settings Expected behavior The configuration module should work Screenshots ! Additional context Add any other context about the problem here. Notify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:
can confirm ! system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: (was not mentioned before)
not sure if this is related to
This is still be a problem on 20.09
According to strace, the missing library file is either or . The latter is provided by , so it somehow needs to be made discoverable in the environment of kcmshell5.
Running into same problem now on 20.09.
Just to clarify, does just need backporting to 20.09, or are people still experiencing issues on master after was merged?
I think it just needs backporting, but I'm not yet familiar enough with NixOS to say for sure. I just upgraded my system to unstable and is working as expected (which I'm assuming is because of ). !
I marked this as stale due to inactivity. &rarr;
There was a PR to backport it to 20.09, but nobody reviewed it and it was closed when 20.09 went end-of-life, so I'm assuming everybody using kcm-wacomtablet is now happily running 21.05 or unstable and we can close this.
Yes, I can confirm it is working again in 21.05.
Change:
<ins> { lib , fetchFromGitHub , callPackage , semgrep-core , buildPythonApplication , pythonPackages , pytestCheckHook , git }: let common = callPackage ./common.nix { }; in buildPythonApplication rec { pname = "semgrep"; inherit (common) version; src = "${common.src}/cli"; SEMGREP_CORE_BIN = "${semgrep-core}/bin/semgrep-core"; postPatch = '' substituteInPlace setup.py  --replace "typing-extensions~=4.2" "typing-extensions"  --replace "jsonschema~=3.2" "jsonschema"  --replace "boltons~=21.0" "boltons" # remove git submodule placeholders rm -r ./src/semgrep/{lang,semgrep_interfaces} # link submodule dependencies ln -s ${common.langsSrc}/ ./src/semgrep/lang ln -s ${common.interfacesSrc}/ ./src/semgrep/semgrep_interfaces ''; doCheck = true; checkInputs = [ git pytestCheckHook ] ++ (with pythonPackages; [ pytest-snapshot pytest-mock pytest-freezegun types-freezegun ]); disabledTests = [ # requires networking "tests/unit/test_metric_manager.py" ]; preCheck = '' # tests need a home directory export HOME="$(mktemp -d)" # disabledTestPaths doesn't manage to avoid the e2e tests # remove them from pyproject.toml # and remove need for pytest-split substituteInPlace pyproject.toml  --replace '"tests/e2e",' ""  --replace 'addopts = "--splitting-algorithm=least_duration"' "" ''; propagatedBuildInputs = with pythonPackages; [ attrs boltons colorama click click-option-group glom requests ruamel-yaml tqdm packaging jsonschema wcmatch peewee defusedxml urllib3 typing-extensions python-lsp-jsonrpc ]; meta = common.meta // { description = common.meta.description + " - cli"; }; } </ins>

Discussion:
Project description Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Metadata homepage URL: source URL: license: lgpl-2.1 platforms: Linux (but possibly others as well, because it is mostly Python code)
I marked this as stale due to inactivity. &rarr;
I started attempting this package, however, I'm not at all familiar with OCaml or Dune. Would love some help getting the binary packaged.
I tried building semgrep_core from src and the first level works ok with the dune builder but pfff needed opam packgemanager and also there's copious amounts of git submodules that cause issues with purity
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Change:
yarn run i18n node ./scripts/copy-res.js popd <ins> rm -rf node_modules/matrix-seshat node_modules/keytar ln -s $keytar node_modules/keytar ln -s $seshat node_modules/matrix-seshat </ins> runHook postBuild '';

Discussion:
Describe the bug Riot-Desktop -Security & Privacy Under the "Message search" heading, observe: Riot is missing some components required for securely caching encrypted messages locally. If you'd like to experiment with this feature, build a custom Riot Desktop with search components . it links to here: Notify maintainers cc: Metadata Maintainer information:
Would be fantastic to have built with . I tried building it myself but couldn't do it. :cry:
Just stumbled across this myself. What's the current state on this? What needs to be done before this can be fixed?
So, element seems to use its own build system to build these native dependencies. It tries to download and build those itself with cargo and stuff. Seems quite complicated to package.
I would like to add that support for desktop notifications would be also appreciated. (They showed up on Arch's version, at least) Edit: This problem has been resolved since
I made some progress. This solves the issue of downloading the hakDependencies. Unfortunately they are not locked in any way, so we need to lock them at packaging-time (is that even a term?) by adding them to and Since yarn2nix always runs yarn with , we can safely ignore the upstream reasoning for fetching them outside of yarn dependencies. I'm now at the point where it tries to build seshat in the element-desktop derivation, but unfortunately they don't provide a Cargo lockfile. I'm working on resolving this problem upstream: <details</details
It turns out to be much more complicated, because the cargo build of seshat-node-native calls , so we have multiple layers of npm calling yarn calling cargo calling npm. With lots of things being downloaded and executed. It's a huge shitshow.
Is there anything we could do to help fix building with encrypted chat search working on NixOS?
I poured some (many) more hours into this today. I can build the two native modules, matrix-seshat and keytar, both in a seperate derivation and as part of the element-desktop build. However, I can not build them correctly against electron's node lib, so when starting the compiled thing, it refuses to load the module. Attempting to build against electron gives a mystic error.

Or the second approach, with everything in one derivation using the hak tool: <details</details<rantHonestly it's just a horrible build system. hak and neon and so on don't give any consideration to users who want to build the libraries in an environment without an internet connection. </rant If you can find a fix for the error, there shouldn't be much work left.
I think I found the solution to that error: Upstream is using Electron 12.x while we are using Electron 13.x.
! PR incoming :sparkles:
Change:
}; # Unfree Spotify blob for Clementine <del> unfree = stdenv.mkDerivation { </del> <ins> unfree = mkDerivation { </ins> pname = "clementine-blob"; inherit version; # Use the same patches and sources as Clementine <del> inherit src nativeBuildInputs postPatch; patches = [ ./clementine-spotify-blob.patch ]; </del> <ins> inherit src nativeBuildInputs patches postPatch; </ins> buildInputs = buildInputs ++ [ libspotify makeWrapper ]; # Only build and install the Spotify blob

Discussion:
Describe the bug Since some day, clementine refuse to work. I bisected the error to the commit . The error message in the terminal is: realloc(): invalid pointer fish : Tâche , './result/bin/clementine' terminée par le signal SIGABRT (Abandon) To Reproduce go to a nixpkgs git tree Expected behavior clementine start as expected Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata system: host os: multi-user?: sandbox: version: channels(root): channels(marius): nixpkgs: Maintainer information:
Looks like we are hitting here. cc
I could have sworn I tested this… let me see if I can reproduce this issue.
Yup, and reverting the projectm fix makes it run again. Hm… I was really sure I tested clementine. I don't think I'll have time to look into this properly until the weekend, so as a quick fix, you can revert the projectm update, if you want to.
Change:
, perl , zlib , expat <del> , libffi </del> <ins> , libffi_3_3 </ins> , libselinux , libdrm , udev

Discussion:
Steps to reproduce the behavior: libffi-3.3 Fails as a dependency of amdgpu-pro Please run and paste the result.
Both and build fine for me. does fail.
Oh:
I would say the problem is not in , but in . Proposed the possible fix as
/cc
Change:
dataDir = "/var/db/graphite"; carbonOpts = name: with config.ids; '' <del> --nodaemon --syslog --prefix=${name}  </del> <ins> --nodaemon --syslog --prefix=${name} --pidfile /var/run/${name}.pid  </ins> --uid ${toString uids.graphite} --gid ${toString uids.graphite} ${name} ''; carbonEnv = {

Discussion:
See It seems to have been but now fails on all platforms. According to this was introduced in See for more details. Interestingly enough the same failure was seen with in cc
I think I was wrong. I guess the problem is the switch to llvm 7 from llvm 5 as a default. I will try it out and follow up with a PR if everything works.
That was the problem this issue can be closed with
Change:
homepage = "http://www.namesys.com/"; description = "Support library for Reiser4"; license = lib.licenses.gpl2; <del> maintainers = with lib.maintainers; [ ]; </del> <ins> maintainers = with lib.maintainers; [ mglolenstine ]; </ins> platforms = with lib.platforms; linux; }; }

Discussion:
Package name: libaal Latest released version: 1.0.7 released in 2017 <!-- Search your package here: --- Current version on the unstable channel: 1.0.6 Current version on the stable/release channel: 1.0.6 Notify maintainers Please backport the changes into stable, its used for out of tree reiser4fs. Thank you! <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR.
Change:
sphinxcontrib_httpdomain = buildPythonPackage (rec { <del> name = "sphinxcontrib-httpdomain-1.1.9"; </del> <ins> name = "sphinxcontrib-httpdomain-1.3.0"; # See issue #6548 disabled = isPyPy; # Check is disabled due to this issue: # https://bitbucket.org/pypa/setuptools/issue/137/typeerror-unorderable-types-str-nonetype doCheck = false; </ins> src = pkgs.fetchurl { url = "https://pypi.python.org/packages/source/s/sphinxcontrib-httpdomain/${name}.tar.gz"; <del> md5 = "0f63aea612cc9e0b55a6c39e5b0f87b7"; </del> <ins> md5 = "ad7ea42bd4c7c0ee57b1cb25bbf24aab"; </ins> }; propagatedBuildInputs = with self; [sphinx];

Discussion:
The package pypy2.4-Sphinx-1.2.3 appears to be broken in the stable channel (as well as in the master branch of the repository with pypy 2.5). My $ load-env-pypySphinx $ sphinx-quickstart
Interesting, only happens on pypy. Wrapper is not generated.
Fixed hopefully.
Tested with pypy 2.5. The sphinx-quickstart works and building a non trivial set of documentation also. Thank you.
Change:
them, it undoes the --set-rpath.  this prevents that. */ dontPatchELF = true; <ins> # fortify hardening makes the filter crash # https://github.com/NixOS/nixpkgs/issues/276125 hardeningDisable = [ "fortify3" ]; </ins> meta = with lib; { description = "Canon InkJet printer drivers for the iP5400, MP520, MP210, MP140, iP3500, and MP610 series.  (MP520 drivers also work for MX700.)"; homepage = "http://support-asia.canon-asia.com/content/EN/0100084101.html";

Discussion:
a canon pixma mp210 nixos-23.11 installed (with gnome) cnijfilter280 to print The print filter crash I do not know how I can debug this.
how did you install the package, and how are you printing?
I installed the package with I tried to print using LibreOffice writer on flatpak. If i pin cnijfilter280 from nixos-23.05, it is working:
Hello, the glibc in 23.11 has more hardening checks to detect buggy code, and this crash looks like the code in the filter is tripping one of those checks. Can you try replacing by and retry ?
This is working
can you test ?
This is working too
does it work with (note rather than )
Yes
Change:
wantedBy = [ "multi-user.target" ]; after = [ "network.target" ]; serviceConfig = { <del> ExecStart = "${cfg.package}/bin/confd"; </del> <ins> ExecStart = "${cfg.package.bin}/bin/confd"; </ins> }; };

Discussion:
NixOS services that depend on binaries are now broken (eg ) after This is because the attribute path for binaries has now changed. For example should now be .
I can do it tomorrow.
Change:
sha256 = "1b6gn0dysv631jynh769whww9xcss1gms78sz3nrn855q1dsvcb4"; }; <ins> patches = [ # Fixes CVE-2020-14983 (fetchpatch { url = "https://github.com/chocolate-doom/chocolate-doom/commit/f1a8d991aa8a14afcb605cf2f65cd15fda204c56.diff"; sha256 = "1z6pxg9azcqq7g09hjc09d01knd803nhqilkw2kbx8648hil9mgn"; }) (fetchpatch { url = "https://github.com/chocolate-doom/chocolate-doom/commit/54fb12eeaa7d527defbe65e7e00e37d5feb7c597.diff"; sha256 = "0ww21jn02ld73rkp06f7fqy92jqv8c9q4d1mvsryag1gmvy57znj"; }) ]; </ins> postPatch = '' sed -e 's#/games#/bin#g' -i src{,/setup}/Makefile.am '';

Discussion:
, CVSSv3=9.8 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc
Fixed:
Change:
"-DSQLITE_SECURE_DELETE" "-DSQLITE_MAX_VARIABLE_NUMBER=250000" "-DSQLITE_MAX_EXPR_DEPTH=10000" <del> ]; </del> <ins> ] ++ lib.optionals enableDeserialize [ # Can be removed in v3.36+, as this will become the default "-DSQLITE_ENABLE_DESERIALIZE" ]); </ins> # Test for features which may not be available at compile time preBuild = ''

Discussion:
, CVSSv3=7.5 (nixos-unstable) Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. Scanned versions: nixos-unstable: . Cc Cc
Change:
platforms = []; source = { remotes = ["https://rubygems.org"]; <del> sha256 = "134zg0dzd7216lyczkhv01v27ikkmipjihcy2bzi0qv72p1i923i"; </del> <ins> sha256 = "1wybcipkfawg4pragmayiig03xc084x3hbwywsh1dr9x9pa8f9hj"; </ins> type = "gem"; }; <del> version = "1.1.5"; </del> <ins> version = "1.1.6"; </ins> }; slack-notifier = { groups = ["default"];

Discussion:
, CVSSv3=7.5 (nixos-unstable) CVSSv3=7.5 (nixos-unstable) A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification. A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Scanned versions: nixos-unstable: . Cc Cc Cc