jiebi/CodeConvo huggingface dataset:
Change:
, CVSSv3=5.9 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc

Discussion:
stdenv.mkDerivation rec { pname = "mutt"; <del> version = "1.14.3"; </del> <ins> version = "1.14.4"; </ins> src = fetchurl { url = "http://ftp.mutt.org/pub/mutt/${pname}-${version}.tar.gz"; <del> sha256 = "0wd4cv1c9hqymvml979g607nh3xxmlyx1ifc4r4qf39v6grnsmdi"; </del> <ins> sha256 = "1hykkq3m7kqic5r7vzg45xaww7415fv5i2d03slzykqb47w5d3na"; </ins> }; patches = optional smimeSupport (fetchpatch {
Change:
, CVSSv3=5.3 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc
See also:
Fixed in 7.4.6, 7.3.18, and 7.2.31
merged - closing

Discussion:
in { php72 = generic { <del> version = "7.2.29"; sha256 = "08xry2fgqgg8s0ym1hh11wkbr36av3zq1bn4krbciw1b7x8gb8ga"; </del> <ins> version = "7.2.31"; sha256 = "0057x1s43f9jidmrl8daka6wpxclxc1b1pm5cjbz616p8nbmb9qv"; </ins> # https://bugs.php.net/bug.php?id=76826 extraPatches = optional stdenv.isDarwin ./php72-darwin-isfinite.patch; }; php73 = generic { <del> version = "7.3.16"; sha256 = "0bh499v9dfgh9k51w4rird1slb9rh9whp5h37fb84c98d992s1xq"; </del> <ins> version = "7.3.19"; sha256 = "199l1lr7ima92icic7b1bqlb036md78m305lc3v6zd4zw8qix70d"; </ins> # https://bugs.php.net/bug.php?id=76826 extraPatches = optional stdenv.isDarwin ./php73-darwin-isfinite.patch; }; php74 = generic { <del> version = "7.4.6"; sha256 = "0j133pfwa823d4jhx2hkrrzjl4hswvz00b1z58r5c82xd5sr9vd6"; </del> <ins> version = "7.4.7"; sha256 = "0ynq4fz54jpzh9nxvbgn3vrdad2clbac0989ai0yrj2ryc0hs3l0"; </ins> }; }
Change:
, CVSSv3=8.8 (nixos-20.03) CVSSv3=5.4 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc
See also: ,
CVE-2020-7065 fixed in 7.4.4 and 7.3.16
merged - closing

Discussion:
in { php72 = generic { <del> version = "7.2.29"; sha256 = "08xry2fgqgg8s0ym1hh11wkbr36av3zq1bn4krbciw1b7x8gb8ga"; </del> <ins> version = "7.2.31"; sha256 = "0057x1s43f9jidmrl8daka6wpxclxc1b1pm5cjbz616p8nbmb9qv"; </ins> # https://bugs.php.net/bug.php?id=76826 extraPatches = optional stdenv.isDarwin ./php72-darwin-isfinite.patch; }; php73 = generic { <del> version = "7.3.16"; sha256 = "0bh499v9dfgh9k51w4rird1slb9rh9whp5h37fb84c98d992s1xq"; </del> <ins> version = "7.3.19"; sha256 = "199l1lr7ima92icic7b1bqlb036md78m305lc3v6zd4zw8qix70d"; </ins> # https://bugs.php.net/bug.php?id=76826 extraPatches = optional stdenv.isDarwin ./php73-darwin-isfinite.patch; }; php74 = generic { <del> version = "7.4.6"; sha256 = "0j133pfwa823d4jhx2hkrrzjl4hswvz00b1z58r5c82xd5sr9vd6"; </del> <ins> version = "7.4.7"; sha256 = "0ynq4fz54jpzh9nxvbgn3vrdad2clbac0989ai0yrj2ryc0hs3l0"; </ins> }; }
Change:
, CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=5.9 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc Cc
A security update 1.6.24 addressing the vulnerabilities exists. I'd suggest marking openafs-1.6 as broken, now, to enforce migration to openafs-1.8. I am unaware of plans to further maintain openafs-1.6 beyond 1.6.24. Edit: Maybe, we should do both, update to 1.6.24 and mark it broken. So, users have a secure version as of now and still get the hint to take action.
Alternative idea: Go with only openafs 1.8 on master and upgrade to openafs 1.6.24 on NixOS 20.03. This way, user must migrate to 1.8 when upgrading to NixOS 20.09 which is the only sensible action security wise.
This is fixed with the move to 1.6.24 for 20.09. Closed.

Discussion:
{ fetchurl }: rec { <del> version = "1.6.23"; </del> <ins> version = "1.6.24"; </ins> src = fetchurl { url = "http://www.openafs.org/dl/openafs/${version}/openafs-${version}-src.tar.bz2"; <del> sha256 = "1gy7a0jhagxif8av540xb1aa6cl7id08nsgjbgady54bnmb0viga"; </del> <ins> sha256 = "1dxzc1y5mmx3ap0m94sx80vfs3qxkckid3wc1xm0wr5i6fh7zn1h"; </ins> }; srcs = [ src (fetchurl { url = "http://www.openafs.org/dl/openafs/${version}/openafs-${version}-doc.tar.bz2"; <del> sha256 = "18my71s9mddy0k835852ksjzkza7xs73kyxavmdqflh5vkywb6y0"; </del> <ins> sha256 = "0aq9ipqpr2ksmk30h2dc4mlrkrqs16xnmspwfb6xj3rgr1pwszlx"; </ins> })]; }
Change:
, CVSSv3=7.5 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc Cc Cc

Discussion:
callPackage ../nginx/generic.nix args rec { pname = "openresty"; <del> nginxVersion = "1.15.8"; version = "${nginxVersion}.3"; </del> <ins> nginxVersion = "1.17.8"; version = "${nginxVersion}.2"; </ins> src = fetchurl { url = "https://openresty.org/download/openresty-${version}.tar.gz"; <del> sha256 = "1a1la7vszv1parsnhphydblz64ffhycazncn3ividnvqg2mg735n"; </del> <ins> sha256 = "1813w33hjm1hcqvl3b3f67qgi5zfjiqg6s01hiy12a5j3jqilcig"; </ins> }; fixPatch = patch: let name = patch.name or (builtins.baseNameOf patch); in
Change:
, CVSSv3=8.8 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc

Discussion:
{ stdenv, fetchurl, fetchpatch, cmake, pcre, pkgconfig, python2 <del> , libX11, libXpm, libXft, libXext, libGLU, libGL, zlib, libxml2, lzma, gsl_1 </del> <ins> , libX11, libXpm, libXft, libXext, libGLU, libGL, zlib, libxml2, lz4, lzma, gsl_1, xxHash </ins> , Cocoa, OpenGL, noSplash ? false }: stdenv.mkDerivation rec { pname = "root"; <del> version = "5.34.36"; </del> <ins> version = "5.34.38"; </ins> src = fetchurl { url = "https://root.cern.ch/download/root_v${version}.source.tar.gz"; <del> sha256 = "1kbx1jxc0i5xfghpybk8927a0wamxyayij9c74zlqm0595gqx1pw"; </del> <ins> sha256 = "1ln448lszw4d6jmbdphkr2plwxxlhmjkla48vmmq750xc1lxlfrc"; </ins> }; nativeBuildInputs = [ pkgconfig ]; <del> buildInputs = [ cmake pcre python2 zlib libxml2 lzma gsl_1 ] </del> <ins> buildInputs = [ cmake pcre python2 zlib libxml2 lz4 lzma gsl_1 xxHash ] </ins> ++ stdenv.lib.optionals (!stdenv.isDarwin) [ libX11 libXpm libXft libXext libGLU libGL ] ++ stdenv.lib.optionals (stdenv.isDarwin) [ Cocoa OpenGL ] ;

patches = [ ./sw_vers_root5.patch <del> (fetchpatch { name = "enable_new_gcc.patch"; url = "https://aur.archlinux.org/cgit/aur.git/plain/enable_new_gcc.patch?h=root5&id=91c50876081a0af36f84ec4f0f9dba869107fa4f"; sha256 = "1rnp0xlw0yqi7mjs4w145njd79i8kkir1qik7zwicdik9axf8ygm"; }) </del> # prevents rootcint from looking in /usr/includes and such ./purify_include_paths_root5.patch
Change:
, CVSSv3=9.8 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) CVSSv3=7.5 (nixos-20.03) CVSSv3=7.0 (nixos-20.03) CVSSv3=5.5 (nixos-20.03) CVSSv3=5.5 (nixos-20.03) CVSSv3=5.5 (nixos-20.03) CVSSv3=5.5 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc Cc
See also: ,

Discussion:
stdenv.mkDerivation rec { pname = "sqlite-analyzer"; <del> version = "3.32.2"; </del> <ins> version = "3.32.3"; </ins> src = assert version == sqlite.version; fetchurl { url = "https://sqlite.org/2020/sqlite-src-${archiveVersion version}.zip"; <del> sha256 = "1jqhs896cvp9l399mjpbv1x2qbfvq875l1vrgnl3zc4ffdjxs9z0"; </del> <ins> sha256 = "1fgmslzf013ry3a7g2vms7zyg24gs53gfj308r6ki4inbn3g04lk"; </ins> }; nativeBuildInputs = [ unzip ];

stdenv.mkDerivation rec { pname = "sqlite"; <del> version = "3.32.2"; </del> <ins> version = "3.32.3"; </ins> # NB! Make sure to update analyzer.nix src (in the same directory). src = fetchurl { url = "https://sqlite.org/2020/sqlite-autoconf-${archiveVersion version}.tar.gz"; <del> sha256 = "1130bcd70s2vlsq0d638pb5qrw9kwqvjswnp2dfypghx9hjz3gid"; </del> <ins> sha256 = "0rlbaq177gcgk5dswd3akbhv2nvvzljrbhgy18hklbhw7h90f5d3"; </ins> }; outputs = [ "bin" "dev" "out" ];
Change:
, CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc

Discussion:
license = licenses.asl20; platforms = platforms.linux ++ platforms.darwin; maintainers = [ maintainers.bjornfor ]; <ins> knownVulnerabilities = [ "CVE-2018-1320" "CVE-2018-11798" "CVE-2019-0205" "CVE-2019-0210" "CVE-2020-13949" ]; </ins> }; }

license = licenses.asl20; platforms = platforms.linux ++ platforms.darwin; maintainers = [ maintainers.bjornfor ]; <ins> knownVulnerabilities = [ "CVE-2020-13949" ]; </ins> }; }
Change:
Somewhere between the current channel and cross-compilation broke. It's a dependency of gpg, and systemd is usually compiled with a minimal gpg, to verify container image signatures - meaning this currently breaks NixOS cross. It's probably in the dependency closure of a lot of other stuff, so fixing it is probably better than building a systemd without a minimal gpg ;-) seems unrelated - while it looks like this might have , it was targeted to , is currently in , but not yet in master - so it broke before that, and still fails with it. I'm currently bisecting this, but wanted to open a tracking issue, in case anyone else is running into this. cc
This has briefly been discussed in yesterday: ;
I'd be not so sure that it wasn't . Reverting on top of makes buildable for me. According to they had cross fixes in both and .
Hmm, my bisecting didn't get me too far: I ed all other build failures that weren't exactly the one as found here. did you get any further?
no skips in my log but ive hit a stdenv rebuild, and need to head to bed
Yeah bisecting stuff that went to staging is a PITA. Especially if it's cross stuff. I recognised that is part of your list of possible commits. I'm pretty sure this is an upstream problem.
There are some fixes upstream since the release, trying them.
bisect confirms that the problem did happen at a recent version update
So work took me away from this, but the main problem might be that the script that generates the header during include was not in extra dist. There was a commit fixing this, but of course doesn't regenerate the tarball. Just fetching that file and seeing if any of the is actually needed is the next thing I'm going to try.

Discussion:
'' + lib.optionalString (stdenv.hostPlatform.isAarch32 && stdenv.hostPlatform.isMusl) '' ln -s src/syscfg/lock-obj-pub.arm-unknown-linux-gnueabi.h src/syscfg/lock-obj-pub.arm-unknown-linux-musleabihf.h ln -s src/syscfg/lock-obj-pub.arm-unknown-linux-gnueabi.h src/syscfg/lock-obj-pub.linux-musleabihf.h <ins> '' # This file was accidentally excluded from the sdist until # 013720333c6ec1d38791689bc49ba039d98e16b3, post release. # TODO make unconditional next mass rebuild + lib.optionalString (stdenv.buildPlatform != stdenv.hostPlatform) '' cp ${fetchurl { url = "https://raw.githubusercontent.com/gpg/libgpg-error/50e62b36ea01ed25d12c443088b85d4f41a2b3e1/src/gen-lock-obj.sh"; sha256 = "10cslipa6npalj869asaamj0w941dhmx0yjafpyyh69ypsg2m2c3"; }} ./src/gen-lock-obj.sh chmod +x ./src/gen-lock-obj.sh </ins> ''; outputs = [ "out" "dev" "info" ];
Change:
, CVSSv3=8.8 (nixos-20.03, nixos-unstable) CVSSv3=8.8 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.

Discussion:
<del> {lib, stdenv, fetchurl, libpng, perl, gettext }: </del> <ins> {lib, stdenv, fetchpatch, fetchurl, libpng, perl, gettext }: </ins> stdenv.mkDerivation rec { pname = "xcftools";

buildInputs = [ libpng perl gettext ]; <del> patchPhase = '' </del> <ins> patches = [ (fetchpatch { name = "CVE-2019-5086.CVE-2019-5087.patch"; url = "https://github.com/gladk/xcftools/commit/59c38e3e45b9112c2bcb4392bccf56e297854f8a.patch"; sha256 = "sha256-a1Biv6viXzTSaLDzinOyu0HdDTUPsKITsdKu9B9Y8GE="; }) ]; postPatch = '' </ins> # Required if building with libpng-1.6, innocuous otherwise substituteInPlace xcf2png.c          --replace png_voidp_NULL NULL
Change:
Describe the bug I'm testing out with the following configuration: Which yields the following: The error message, decoded, says: To Reproduce Steps to reproduce the behavior: to expected zfs datasets, create snapshot, generate keys, etc... client host with the above configuration. Expected behavior A transmission of a snapshot from the client to Notify maintainers Metadata
At first glance this looks like the remote host doesn't have lz4 in its path when root logs in. Can you confirm this by starting an SSH session to that host as root and doing a whereis lz4?
That was it: installing fixed it; a snaphot is currently being transmitted. A note about being expected should probably be to the documentation of .

Discussion:
}; host = mkOption { <del> description = "Remote host where snapshots should be sent."; </del> <ins> description = "Remote host where snapshots should be sent. <literal>lz4</literal> is expected to be installed on this host."; </ins> example = "example.com"; type = types.str; };
Change:
This would be a generic solution to fix cases like . Some information about this is e.g. and there are possibly other relevant environment variables that we should set (e.g. the ones mentioned ). It also seems like we currently leak some invalid Nix store references into : Not sure if this is really intended. E.g. cross compiling currently fails with: With it succeeds:
That's (partially) done on purpose
We should not nuke all references, but instead remove only references. Also, we can replace with in . We just need to find a way now to set the variables, in that file, so it works for all architectures. We could also modify the function to read a JSON file with our overrides, maybe even the filename passed as environment variable.
For some reason GitHub didn't automatically close this when landed in master (or I'm missing something).

Discussion:
<ins> From 1911995b1a1252d80bf2b9651840e185a1a6baf5 Mon Sep 17 00:00:00 2001 From: Hong Xu <hong@topbug.net> Date: Thu, 25 Jul 2019 10:25:55 -0700 Subject: [PATCH] On all posix systems, not just Darwin, set LDSHARED (if not set) according to CC This patch is slightly different from https://bugs.python.org/issue24935 , except that we now handle LDSHARED according to CC on all posix systems, not just Darwin or Linux. --- Lib/distutils/sysconfig.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Lib/distutils/sysconfig.py b/Lib/distutils/sysconfig.py index 37feae5df7..9fdce6896d 100644 --- a/Lib/distutils/sysconfig.py +++ b/Lib/distutils/sysconfig.py @@ -199,10 +199,10 @@ def customize_compiler(compiler): if 'CC' in os.environ: newcc = os.environ['CC'] -            if (sys.platform == 'darwin' +            if (os.name == 'posix' and 'LDSHARED' not in os.environ and ldshared.startswith(cc)): -                # On OS X, if CC is overridden, use that as the default +                # On POSIX systems, if CC is overridden, use that as the default #       command for LDSHARED as well ldshared = newcc + ldshared[len(cc):] cc = newcc -- 2.25.1 </ins>

sha256 = "1h18lnpx539h5lfxyk379dxwr8m2raigcjixkf133l4xy3f4bzi2"; } ) <ins> ] ++ [ # LDSHARED now uses $CC instead of gcc. Fixes cross-compilation of extension modules. ./3.8/0001-On-all-posix-systems-not-just-Darwin-set-LDSHARED-if.patch </ins> ]; postPatch = ''

# for python cross-compiling _PYTHON_HOST_PLATFORM = stdenv.hostPlatform.config; <del> # The i686 case is a quick hack; I don't know what's wrong. postConfigure = stdenv.lib.optionalString (!stdenv.isi686) '' export LDSHARED="$LD -shared" ''; </del> # gcc bug with -O1 on ARM with gcc 4.8 # This should be fine on all platforms so apply universally
Change:
Describe the bug I am unable to build an environment with and just the texlive packages that I want to use. To Reproduce Steps to reproduce the behavior: this file, where the package is used only as an example. : Expected behavior A symlink to a directory containing and with the requested files. Additional context I am trying to build a texlive environment with only the packages I need. Notify maintainers Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(raghu): nixpkgs: Maintainer information:
It works now. Many thanks.
Applied to release-20.03 as well, should hit the channel soon. Enjoy!

Discussion:
ignoreCollisions = false; paths = pkgList.nonbin; <ins> pathsToLink = [ "/" "/tex/generic/config" # make it a real directory for scheme-infraonly ]; </ins> buildInputs = [ makeWrapper ] ++ pkgList.extraInputs;
Change:
, CVSSv3=2.4 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives. Cc
See also:
merged - closed.

Discussion:
<del> { stdenv, fetchurl }: </del> <ins> { stdenv, fetchurl, nixosTests }: </ins> stdenv.mkDerivation rec { pname = "wordpress";

cp -r . $out/share/wordpress ''; <ins> passthru.tests = { inherit (nixosTests) wordpress; }; </ins> meta = with stdenv.lib; { homepage = "https://wordpress.org"; description = "WordPress is open source software you can use to create a beautiful website, blog, or app";
Change:
, CVSSv3=9.8 (nixos-20.03) Scanned versions: nixos-20.03: . May contain false positives.
Fixed in

Discussion:
assert gssSupport -> libkrb5 != null; stdenv.mkDerivation rec { <del> name = "curl-7.68.0"; </del> <ins> pname = "curl"; version = "7.70.0"; </ins> src = fetchurl { urls = [ <del> "https://curl.haxx.se/download/${name}.tar.bz2" "https://github.com/curl/curl/releases/download/${lib.replaceStrings ["."] ["_"] name}/${name}.tar.bz2" </del> <ins> "https://curl.haxx.se/download/${pname}-${version}.tar.bz2" "https://github.com/curl/curl/releases/download/${lib.replaceStrings ["."] ["_"] pname}-${version}/${pname}-${version}.tar.bz2" </ins> ]; <del> sha256 = "1fgf4f33wj25jk6lkpxmrvmfnnxvc66z3k3561rxr8nngn8m8zr0"; </del> <ins> sha256 = "1l19b2xmzwjl2fqlbv46kwlz1823miaxczyx2a5lz8k7mmigw2x5"; </ins> }; <ins> patches = [ # remove these two patches for cURL >= 7.71.0 (fetchurl { # https://www.openwall.com/lists/oss-security/2020/06/24/1 name = "CVE-2020-8169.patch"; url = "https://github.com/curl/curl/commit/600a8cded447cd.patch"; sha256 = "10qdh995mgaxza3va7r7gl1xkyfidbhk09i5srm9h59ml4fqm36r"; }) (fetchurl { # https://www.openwall.com/lists/oss-security/2020/06/24/2 name = "CVE-2020-8177.patch"; url = "https://github.com/curl/curl/commit/8236aba58542c5f.patch"; sha256 = "08zwizkbwy2blcqza4681099cd13z3ww2lq5ypnf2c5zsysnv48a"; }) ]; </ins> outputs = [ "bin" "dev" "out" "man" "devdoc" ]; separateDebugInfo = stdenv.isLinux;

meta = with stdenv.lib; { description = "A command line tool for transferring files with URL syntax"; homepage    = https://curl.haxx.se/; <del> maintainers = with maintainers; [ lovek323 ]; </del> license = licenses.curl; <ins> maintainers = with maintainers; [ lovek323 ]; </ins> platforms = platforms.all; }; }
Change:
Project description An RSS/Atom feed reader for GNOME. Metadata homepage URL: source URL: license: GPL v3 platforms: linux, possibly others?
I haven't tested it extensively yet but here's my current expression: The basic at the very least seem to work.
I haven't run into any problems using your expression, are you planning on creating a pull request for this?
Glad you found it useful. And thank you for the reminder, I forgot about this (just stashed it into a local overlay) but will try and prepare a PR in the next couple of days.

Discussion:
<ins> { lib , callPackage , stdenv , fetchFromGitLab , appstream , gobject-introspection , meson , ninja , pkg-config , wrapGAppsHook , glib , gtk3 , libhandy , listparser ? callPackage ./listparser.nix { } , webkitgtk , python3 }: python3.pkgs.buildPythonApplication rec { pname = "feeds"; version = "0.16.1"; src = fetchFromGitLab { domain = "gitlab.gnome.org"; owner = "World"; repo = "gfeeds"; rev = version; sha256 = "10hq06nx7lcm3dqq34qkxc6k6383mvjs7pxii9y9995d9kk5a49k"; }; format = "other"; nativeBuildInputs = [ appstream glib # for glib-compile-schemas gobject-introspection meson ninja pkg-config wrapGAppsHook ]; buildInputs = [ glib gtk3 libhandy webkitgtk ]; propagatedBuildInputs = with python3.pkgs; [ beautifulsoup4 dateutil feedparser html5lib listparser lxml pillow pygments pygobject3 pyreadability pytz requests ]; # https://github.com/NixOS/nixpkgs/issues/56943 strictDeps = false; dontWrapGApps = true; preFixup = '' makeWrapperArgs+=("''${gappsWrapperArgs[@]}") ''; passthru = { inherit listparser; }; meta = with lib; { description = "An RSS/Atom feed reader for GNOME"; homepage = "https://gitlab.gnome.org/World/gfeeds"; license = licenses.gpl3Plus; maintainers = [ maintainers.pbogdan ]; platforms = platforms.linux; }; } </ins>

<ins> { lib , python3 }: python3.pkgs.buildPythonPackage rec { pname = "listparser"; version = "0.18"; src = python3.pkgs.fetchPypi { inherit pname version; sha256 = "0hdqs1mmayw1r8yla43hgb4d9y3zqs5483vgf8j9ygczkd2wrq2b"; }; propagatedBuildInputs = with python3.pkgs; [ requests six ]; checkPhase = '' ${python3.interpreter} lptest.py ''; meta = with lib; { description = "A parser for subscription lists"; homepage = "https://github.com/kurtmckee/listparser"; license = licenses.lgpl3Plus; maintainers = [ maintainers.pbogdan ]; platforms = platforms.linux; }; } </ins>

feedreader = callPackage ../applications/networking/feedreaders/feedreader {}; <ins> feeds = callPackage ../applications/networking/feedreaders/feeds {}; </ins> fend = callPackage ../tools/misc/fend { }; ferm = callPackage ../tools/networking/ferm { };
Change:
Describe the bug When I attempt to use from or , I get the following error: To Reproduce Steps to reproduce the behavior: Expected behavior Either is downloaded from cache or builds successfully. Additional context I had originally thought this was due to the recent , but it appears that there may be some upstream issues with Helm. For example, the say this: That having been said, I'm not totally convinced this is the root cause. I tried to confirm the fix with 3.2.2 by overriding the helm derivation to use the new version: No matter which of 3.2.2, 3.2.3, or 3.2.4 I choose, I get the same set of errors (see collapsed element below). <details<summary<strongBuild log for 3.2.4</strong</summary</detailsNotify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(gustavderdrache): nixpkgs: Maintainer information:
Update: it looks like caused the issue. If I pin nixpkgs to 's parent commit (), I can both fetch helm from the nix cache and build it locally:

Discussion:
rev = "v${version}"; sha256 = "1453qkd9s4z4r0xzmv8ym7qfg33szf6gizfkb5zxj590fcbsgnd7"; }; <del> vendorSha256 = null; </del> <ins> vendorSha256 = "0j25m56cwzjd9b75v7xlb26q81bsmln77k23h9n8v2f2gqwwpkrl"; </ins> subPackages = [ "cmd/helm" ]; buildFlagsArray = [ "-ldflags=-w -s -X helm.sh/helm/v3/internal/version.version=v${version}" ];