jiebi/CodeConvo huggingface dataset:
Change:
Project description fcitx5-skk is an input method engine for Fcitx5, which uses libskk as its backend. It seems some of the fcitx5 engines (including fcitx5-skk) are missing. Probably the other engines also need to be . Metadata homepage URL: source URL: license: gpl3+ platforms: linux
I wrote a package anyhow, but I'm not sure if it is OK.
PR is wellcome. What is for? Is it involved in fcitx5-qt? gcc is not necessary in because it is always here and someone may want to use other compiler such as clang.

Discussion:
<ins> { lib , stdenv , fetchFromGitHub , pkg-config , cmake , extra-cmake-modules , gettext , fcitx5 , fcitx5-qt , libskk , qtbase , skk-dicts , wrapQtAppsHook , enableQt ? false }: stdenv.mkDerivation rec { pname = "fcitx5-skk"; version = "5.0.15"; src = fetchFromGitHub { owner = "fcitx"; repo = pname; rev = version; sha256 = "sha256-y5GciWJMEFQM8SsqYANXe/SdVq6GEqsfF1yrKKhw0KA="; }; nativeBuildInputs = [ cmake extra-cmake-modules gettext pkg-config ] ++ lib.optional enableQt wrapQtAppsHook; buildInputs = [ fcitx5 libskk ] ++ lib.optionals enableQt [ fcitx5-qt qtbase ]; cmakeFlags = [ "-DENABLE_QT=${toString enableQt}" "-DSKK_DEFAULT_PATH=${skk-dicts}/share/SKK-JISYO.L" ]; meta = with lib; { description = "Input method engine for Fcitx5, which uses libskk as its backend"; homepage = "https://github.com/fcitx/fcitx5-skk"; license = licenses.gpl3Plus; maintainers = with maintainers; [ milran ]; platforms = platforms.linux; }; } </ins>

"fcitx5-m17n", "fcitx5-qt", "fcitx5-rime", <ins> "fcitx5-skk", </ins> "fcitx5-table-extra", "fcitx5-table-other", "fcitx5-unikey"

}; }; <ins> fcitx5-skk = libsForQt5.callPackage ../tools/inputmethods/fcitx5/fcitx5-skk.nix { }; fcitx5-skk-qt = fcitx5-skk.override { enableQt = true; }; </ins> fcitx5-unikey = libsForQt5.callPackage ../tools/inputmethods/fcitx5/fcitx5-unikey.nix { }; fcitx5-configtool = libsForQt5.callPackage ../tools/inputmethods/fcitx5/fcitx5-configtool.nix { };
Change:
Enabled logseq's Git auto commit feature, it show an error: Steps to reproduce the behavior: ... ... ... no error If applicable, add screenshots to help explain your problem. Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result.
This should be fixed now that has landed!

Discussion:
<del> { lib, stdenv, fetchurl, appimageTools, makeWrapper, autoPatchelfHook, electron, curl, expat, gcc, openssl, zlib }: </del> <ins> { lib, stdenv, fetchurl, appimageTools, makeWrapper, autoPatchelfHook, electron, git, curl, expat, gcc, openssl, zlib }: </ins> stdenv.mkDerivation rec { pname = "logseq"; <del> version = "0.6.6"; </del> <ins> version = "0.6.8"; </ins> src = fetchurl { url = "https://github.com/logseq/logseq/releases/download/${version}/logseq-linux-x64-${version}.AppImage"; <del> sha256 = "r6IBvhA8H8XnMIBgZZodyU61xtqNA4N9kCRv/QWQc9M="; </del> <ins> sha256 = "QPbH7d2RC8DLze44Q3gCQ9IzHOgIq8IB+hZr9+8rTs0="; </ins> name = "${pname}-${version}.AppImage"; };

postFixup = '' makeWrapper ${electron}/bin/electron $out/bin/${pname}  <ins> --prefix PATH : ${lib.makeBinPath [ git ]}  </ins> --add-flags $out/share/${pname}/resources/app '';
Change:
I tried to use nix-prefetch-git to check out while using the options. The resulting sha256 hash is not the correct one to use with . I wrote a bash script that produces the issue on my machine. When run this on my machine the following output is produced: I would expect that using the hash given by would work for . n/a <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --I have no idea who the maintainer of this is. Sorry. If community members know who is responsible for this code, feel free to add them. Please run and paste the result.
bump

Discussion:
fi done <ins> if test -n $deepClone; then leaveDotGit=true fi </ins> if test -z "$url"; then usage fi
Change:
introduced a locker by consequence if you enable the XFCE4 DE and the new locker replaces any other already defined without a trivial way to disable. Steps to reproduce the behavior: any other locker using something like 4 locker is used anyway A way to enable XFCE4 stuff but without the locker, it can be enabled by default but with a option to disable. (I can't screenshot on the lockscreen) This is the current commit of my config: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.

Discussion:
<para> <literal>services.xserver.desktopManager.xfce</literal> now includes Xfce’s screen locker, <del> <literal>xfce4-screensaver</literal>. </del> <ins> <literal>xfce4-screensaver</literal> that is enabled by default. You can disable it by setting <literal>false</literal> to <link linkend="opt-services.xserver.desktopManager.xfce.enableScreensaver">services.xserver.desktopManager.xfce.enableScreensaver</link>. </ins> </para> </listitem> <listitem>

- xfsprogs was update to version 5.15, which enables inobtcount and bigtime by default on filesystem creation. Support for these features was added in kernel 5.10 and deemed stable in kernel 5.15. If you want to be able to mount XFS filesystems created with this release of xfsprogs on kernel releases older than 5.10, you need to format them with `mkfs.xfs -m bigtime=0 -m inobtcount=0`. <del> - `services.xserver.desktopManager.xfce` now includes Xfce's screen locker, `xfce4-screensaver`. </del> <ins> - `services.xserver.desktopManager.xfce` now includes Xfce's screen locker, `xfce4-screensaver` that is enabled by default. You can disable it by setting `false` to [services.xserver.desktopManager.xfce.enableScreensaver](#opt-services.xserver.desktopManager.xfce.enableScreensaver). </ins> - The `hadoop` package has added support for `aarch64-linux` and `aarch64-darwin` as of 3.3.1 ([#158613](https://github.com/NixOS/nixpkgs/pull/158613)).

default = true; description = "Enable the XFWM (default) window manager."; }; <ins> enableScreensaver = mkOption { type = types.bool; default = true; description = "Enable the XFCE screensaver."; }; </ins> }; };

ristretto xfce4-appfinder xfce4-notifyd <del> xfce4-screensaver </del> xfce4-screenshooter xfce4-session xfce4-settings

] ++ optionals (!cfg.noDesktop) [ xfce4-panel xfdesktop <del> ]; </del> <ins> ] ++ optional cfg.enableScreensaver xfce4-screensaver; </ins> environment.pathsToLink = [ "/share/xfce4"

xfce4-notifyd ]; <del> security.pam.services.xfce4-screensaver.unixAuth = true; </del> <ins> security.pam.services.xfce4-screensaver.unixAuth = cfg.enableScreensaver; </ins> }; }
Change:
Project description Hashlink is a virtual machine used in Haxe/Heaps game projects. This is the same stack that shiro games and motion twin uses to make things like Dead Cells and Northgard. The full steps for installing heaps (which goes through dependencies) can be found , and one of the steps is to download hashlink and put it on the path. Metadata homepage URL: source URL: license: mit platforms: linux, mac, windows
I am on it, will try to compose a first draft. :-)
That was fast! I really appreciate it! I put in a few haxe-related package requests today, I'm so surprised no one else has requested them before! But once they're in we'll be happy! Not really looking to nix-ify my haxe projects yet since I imagine it'll be involved, but getting hashlink on the path in a package is a step in the right direction right? :) Really appreciate this, thank you!
I'm not really familiar with the Haxe ecosystem, but the Arch build for Hashlink suggested that this packaging task seemed simple enough (no complex build system, just a Makefile, no dependencies on other parts of the Haxe ecosystem) so that I could do it. Glad that I could be of help. :-) Thank you for your issue contributions! While the pull request is not yet merged, you can use hashlink as follows: (Be wary that commands like this can cause the execution of arbitrary code, so in principle one should use these only with trusted repositories.)
Thanks for your hard work!
how are things going with the PR? I think someone has asked a question on it, I don't know if that means that it's stalled from going in? Thanks again!
There are in fact issues with hashlink on NixOS I think - I think there's some libraries that are build with hashlink that are unhandled - there's an issue for this already as hinted in your PR:

Discussion:
<ins> { stdenv , lib , fetchFromGitHub , libGL , libGLU , libpng , libjpeg_turbo , libuv , libvorbis , mbedtls , openal , pcre , SDL2 , sqlite }: stdenv.mkDerivation rec { pname = "hashlink"; version = "1.12"; src = fetchFromGitHub { owner = "HaxeFoundation"; repo = "hashlink"; rev = version; sha256 = "AiUGhTxz4Pkrks4oE+SAuAQPMuC5T2B6jo3Jd3sNrkQ="; }; patches = [ ./hashlink.patch ]; makeFlags = [ "PREFIX=$(out)" ]; buildInputs = [ libGL libGLU libjpeg_turbo libpng libuv libvorbis mbedtls openal pcre SDL2 sqlite ]; meta = with lib; { description = "A virtual machine for Haxe"; homepage = "https://hashlink.haxe.org/"; license = licenses.mit; platforms = [ "x86_64-linux" ]; maintainers = with maintainers; [ iblech locallycompact ]; }; } </ins>

<ins> *** a/Makefile  1970-01-01 01:00:01.000000000 +0100 --- b/Makefile  2022-06-21 23:36:10.023460654 +0200 *************** endif *** 109,110 **** --- 109,111 ---- LIBOPENAL = -lopenal + LIBOPENGL = -lGL RELEASE_NAME = linux </ins>

hadoop3 = hadoop_3_3; hadoop = hadoop3; <ins> hashlink = callPackage ../development/interpreters/hashlink { }; </ins> io = callPackage ../development/interpreters/io { }; ivy = callPackage ../development/interpreters/ivy { };
Change:
Project description LDtk is an open source level editor that's used to make video games such as Dead Cells. It's just reached a big milestone and recently hit 1.0.0 release (now on 1.1.1). I apologise to the people of nixpkgs for requesting for so many new packages today! Metadata homepage URL: source URL: license: mit platforms: linux, mac, windows

Discussion:
<ins> { lib, stdenv, fetchurl, makeWrapper, makeDesktopItem, copyDesktopItems, unzip , appimage-run }: stdenv.mkDerivation rec { pname = "ldtk"; version = "1.1.3"; src = fetchurl { url = "https://github.com/deepnight/ldtk/releases/download/v${version}/ubuntu-distribution.zip"; sha256 = "sha256-qw7+4k4IH2+9DX4ny8EBbSlyXBrk/y91W04+zWPGupk="; }; nativeBuildInputs = [ unzip makeWrapper copyDesktopItems appimage-run ]; buildInputs = [ appimage-run ]; unpackPhase = '' runHook preUnpack unzip $src appimage-run -x src 'LDtk ${version} installer.AppImage' runHook postUnpack ''; installPhase = '' runHook preInstall install -Dm644 'LDtk ${version} installer.AppImage' $out/share/ldtk.AppImage makeWrapper ${appimage-run}/bin/appimage-run $out/bin/ldtk  --add-flags $out/share/ldtk.AppImage install -Dm644 src/ldtk.png $out/share/icons/hicolor/1024x1024/apps/ldtk.png runHook postInstall ''; desktopItems = [ (makeDesktopItem { name = "ldtk"; exec = "ldtk"; icon = "ldtk"; terminal = false; desktopName = "LDtk"; comment = "2D level editor"; categories = [ "Utility" ]; mimeTypes = [ "application/json" ]; }) ]; meta = with lib; { homepage = "https://ldtk.io/"; description = "Modern, lightweight and efficient 2D level editor"; license = licenses.mit; platforms = [ "x86_64-linux" ]; maintainers = with maintainers; [ felschr ]; sourceProvenance = with sourceTypes; [ binaryBytecode ]; }; } </ins>

languagetool = callPackage ../tools/text/languagetool {  }; <ins> ldtk = callPackage ../applications/editors/ldtk { }; </ins> lepton = callPackage ../tools/graphics/lepton { }; lepton-eda = callPackage ../applications/science/electronics/lepton-eda { };
Change:
Project description A CLI program that will let you save and apply your Linux customizations with just one command! It officially supports KDE Plasma but it can be used on all other desktop environments too! Metadata homepage URL: source URL: license: gpl3 platforms: linux

Discussion:
<ins> { lib, python3Packages, fetchPypi }: python3Packages.buildPythonApplication rec { pname = "konsave"; version = "2.2.0"; src = fetchPypi { inherit version; pname = "Konsave"; hash = "sha256-tWarqT2jFgCuSsa2NwMHRaR3/wj0khiRHidvRNMwM8M="; }; nativeBuildInputs = with python3Packages; [ setuptools-scm ]; propagatedBuildInputs = with python3Packages; [ pyyaml setuptools ]; preCheck = '' export HOME=$(mktemp -d) ''; meta = with lib; { description = "Save Linux Customization"; maintainers = with maintainers; [ MoritzBoehme ]; homepage = "https://github.com/Prayag2/konsave"; license = licenses.gpl3; platforms = platforms.linux; }; } </ins>

komorebi = callPackage ../applications/graphics/komorebi { }; <ins> konsave = callPackage ../applications/misc/konsave { }; </ins> krapslog = callPackage ../tools/misc/krapslog { }; krelay = callPackage ../applications/networking/cluster/krelay { };
Change:
prusa-slicer crashes, maybe related to our wxWidgets version. See for now. cc
Maybe caused by Maybe backport that change, or use the prusa-slicer wxWidget fork.
I can reproduce it with nixpkgs rev Using the wxWidgets fork from prusa3d fixes the issue. Will try to write a PR soon.

Discussion:
<del> { stdenv, lib, fetchFromGitHub, cmake, copyDesktopItems, makeDesktopItem, pkg-config, wrapGAppsHook , boost, cereal, cgal_5, curl, dbus, eigen, expat, glew, glib, gmp, gtest, gtk3, hicolor-icon-theme , ilmbase, libpng, mpfr, nlopt, openvdb, pcre, qhull, systemd, tbb, wxGTK31-gtk3, xorg, fetchpatch }: stdenv.mkDerivation rec { </del> <ins> { stdenv, lib, fetchFromGitHub, cmake, copyDesktopItems, makeDesktopItem , pkg-config, wrapGAppsHook, boost, cereal, cgal_5, curl, dbus, eigen, expat , glew, glib, gmp, gtest, gtk3, hicolor-icon-theme, ilmbase, libpng, mpfr, nlopt , openvdb, pcre, qhull, systemd, tbb, wxGTK31-gtk3, xorg, fetchpatch , wxGTK31-gtk3-override ? null }: let wxGTK31-gtk3-prusa = wxGTK31-gtk3.overrideAttrs (old: rec { pname = "wxwidgets-prusa3d-patched"; version = "3.1.4"; src = fetchFromGitHub { owner = "prusa3d"; repo = "wxWidgets"; rev = "489f6118256853cf5b299d595868641938566cdb"; hash = "sha256-xGL5I2+bPjmZGSTYe1L7VAmvLHbwd934o/cxg9baEvQ="; fetchSubmodules = true; }; }); wxGTK31-gtk3-override' = if wxGTK31-gtk3-override == null then wxGTK31-gtk3-prusa else wxGTK31-gtk3-override; in stdenv.mkDerivation rec { </ins> pname = "prusa-slicer"; version = "2.4.1";

pcre systemd tbb <del> wxGTK31-gtk3 </del> <ins> wxGTK31-gtk3-override' </ins> xorg.libX11 ] ++ checkInputs;

<del> { lib, fetchFromGitHub, makeDesktopItem, prusa-slicer }: </del> <ins> { lib, fetchFromGitHub, makeDesktopItem, prusa-slicer, wxGTK31-gtk3 }: </ins> let appname = "SuperSlicer"; pname = "super-slicer";

passthru = allVersions; }; <del> allVersions = builtins.mapAttrs (_name: version: (prusa-slicer.overrideAttrs (override version))) versions; </del> <ins> prusa-slicer' = prusa-slicer.override { wxGTK31-gtk3-override = wxGTK31-gtk3; }; allVersions = builtins.mapAttrs (_name: version: (prusa-slicer'.overrideAttrs (override version))) versions; </ins> in allVersions.stable
Change:
prusa-slicer crashes, maybe related to our wxWidgets version. See for now. cc
Maybe caused by Maybe backport that change, or use the prusa-slicer wxWidget fork.
I can reproduce it with nixpkgs rev Using the wxWidgets fork from prusa3d fixes the issue. Will try to write a PR soon.

Discussion:
<del> { stdenv, lib, fetchFromGitHub, cmake, copyDesktopItems, makeDesktopItem, pkg-config, wrapGAppsHook , boost, cereal, cgal_5, curl, dbus, eigen, expat, glew, glib, gmp, gtest, gtk3, hicolor-icon-theme , ilmbase, libpng, mpfr, nlopt, openvdb, pcre, qhull, systemd, tbb, wxGTK31-gtk3, xorg, fetchpatch }: stdenv.mkDerivation rec { </del> <ins> { stdenv, lib, fetchFromGitHub, cmake, copyDesktopItems, makeDesktopItem , pkg-config, wrapGAppsHook, boost, cereal, cgal_5, curl, dbus, eigen, expat , glew, glib, gmp, gtest, gtk3, hicolor-icon-theme, ilmbase, libpng, mpfr, nlopt , openvdb, pcre, qhull, systemd, tbb, wxGTK31-gtk3, xorg, fetchpatch , wxGTK31-gtk3-override ? null }: let wxGTK31-gtk3-prusa = wxGTK31-gtk3.overrideAttrs (old: rec { pname = "wxwidgets-prusa3d-patched"; version = "3.1.4"; src = fetchFromGitHub { owner = "prusa3d"; repo = "wxWidgets"; rev = "489f6118256853cf5b299d595868641938566cdb"; hash = "sha256-xGL5I2+bPjmZGSTYe1L7VAmvLHbwd934o/cxg9baEvQ="; fetchSubmodules = true; }; }); wxGTK31-gtk3-override' = if wxGTK31-gtk3-override == null then wxGTK31-gtk3-prusa else wxGTK31-gtk3-override; in stdenv.mkDerivation rec { </ins> pname = "prusa-slicer"; version = "2.4.2";

pcre systemd tbb <del> wxGTK31-gtk3 </del> <ins> wxGTK31-gtk3-override' </ins> xorg.libX11 ] ++ checkInputs;

<del> { lib, fetchFromGitHub, makeDesktopItem, prusa-slicer }: </del> <ins> { lib, fetchFromGitHub, makeDesktopItem, prusa-slicer, wxGTK31-gtk3 }: </ins> let appname = "SuperSlicer"; pname = "super-slicer";

passthru = allVersions; }; <del> allVersions = builtins.mapAttrs (_name: version: (prusa-slicer.overrideAttrs (override version))) versions; </del> <ins> prusa-slicer' = prusa-slicer.override { wxGTK31-gtk3-override = wxGTK31-gtk3; }; allVersions = builtins.mapAttrs (_name: version: (prusa-slicer'.overrideAttrs (override version))) versions; </ins> in allVersions.stable
Change:
qutebrowser can't find userscripts in . Steps to reproduce the behavior: Should search for userscripts also in This might have broken from v2.4.0 -2.5.0, but not sure. Workaround is configuring qutebrowser with home-manager, and launching <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --^. ; ; ;,- ,- ,-"""   ^^ ,-; ; ,- / ;; ,^ / ,^ ,-" - qutebrowser v2.5.0 Git commit: Backend: QtWebEngine 5.15.8, based on Chromium 87.0.4280.144 Qt: 5.15.3 CPython: 3.9.11 PyQt: 5.15.4 sip: 6.5.1 colorama: no jinja2: 3.0.3 pygments: 2.11.2 yaml: 6.0 adblock: 0.5.2 PyQt5.QtWebEngineWidgets: yes PyQt5.QtWebEngine: 5.15.4 PyQt5.QtWebKitWidgets: no 2.8.335 (/nix/store/z5n6n43w80lh2p2pfp694q38chlrmnl0-pdfjs-) sqlite: 3.38.1 QtNetwork SSL: OpenSSL 1.1.1n 15 Mar 2022 Style: QFusionStyle Platform plugin: xcb OpenGL: NVIDIA Corporation, 4.6.0 NVIDIA 510.60.02 Platform: Linux-5.17.1-x86_64-with-glibc2.34, 64bit Linux distribution: NixOS 22.05 (Quokka) (nixos) Frozen: False Imported from /nix/store/n6igivhh4ly81khcmldpglph8vpq5lff-qutebrowser-2.5.0/lib/python3.9/site-packages/qutebrowser Using Python from /nix/store/9px00aaqzb6n5p03i9wd8rx3msg95y9r-python3-3.9.11/bin/python3.9 Qt library executable path: /nix/store/p1aapf3rsdw6xvj557as4694l78zd1hc-qtbase-5.15.3/libexec, data path: /nix/store/p1aapf3rsdw6xvj557as4694l78zd1hc-qtbase-5.15.3 Paths: cache: /tmp/qutebrowser-basedir-30rgq892/cache config: /tmp/qutebrowser-basedir-30rgq892/config data: /tmp/qutebrowser-basedir-30rgq892/data runtime: /tmp/qutebrowser-basedir-30rgq892/runtime Autoconfig loaded: yes no was loaded Uptime: 0:00:00
Indeed, It seems there have been changes regarding the discovery of userscripts. I'm taking a look now.

Discussion:
postPatch = '' substituteInPlace qutebrowser/misc/quitter.py --subst-var-by qutebrowser "$out/bin/qutebrowser" <del> sed -i "s,/usr/share/,$out/share/,g" qutebrowser/utils/standarddir.py </del> <ins> sed -i "s,/usr,$out,g" qutebrowser/utils/standarddir.py </ins> '' + lib.optionalString withPdfReader '' sed -i "s,/usr/share/pdf.js,${pdfjs},g" qutebrowser/browser/pdfjs.py '';
Change:
It's not possible to lock screen in xfce unless "xlockmore" is installed. in in XFCE and try to lock without success and then retry to lock System: NixOS Emu Nix version: 1.11.2 Nixpkgs version: "16.03.973."
I think that's because there is no blessed lock screen for XFCE. tries XScreenSaver, GNOME Screensaver, XLock and SLock -- in that order.
Has a situation like this (multiple optional but at least one required dependency on an executable) already been handled in NixOS?
I think this is generally resolved by some kind of switch, but we have to add one. Something like of ...
I kept as-is: see
I think the issue may be resolved. At least with (as of 2023-09-17) lock screen is possible without having installed.

Discussion:
default = true; description = "Enable the XFWM (default) window manager."; }; <ins> screenLock = mkOption { type = types.enum [ "xscreensaver" "xlockmore" "slock" ]; default = "xlockmore"; description = "Application used by XFCE to lock the screen."; }; </ins> }; };

pkgs.tango-icon-theme pkgs.shared_mime_info pkgs.which # Needed by the xfce's xinitrc script. <ins> pkgs."${cfg.screenLock}" </ins> pkgs.xfce.exo pkgs.xfce.gtk_xfce_engine pkgs.xfce.mousepad
Change:
When using I'd expect to show Z3 and Alt-Ergo. Steps to reproduce the behavior: (make sure is merged or check out my branch) I'd expect and to be listed. The derivation does : It should do instead to overwrite the config completely. Please run and paste the result.
Thanks for the report. Would you like to open a PR with the proposed change?

Discussion:
<del> { lib, stdenv, fetchFromGitHub, ocamlPackages, why3 }: </del> <ins> { lib, stdenv, fetchFromGitHub, fetchpatch, ocamlPackages, why3 }: </ins> stdenv.mkDerivation rec { pname = "easycrypt";

sha256 = "sha256:09rdwcj70lkamkhd895p284rfpz4bcnsf55mcimhiqncd2a21ml7"; }; <ins> # Fix build with Why3 1.5 patches = fetchpatch { url = "https://github.com/EasyCrypt/easycrypt/commit/d226387432deb7f22738e1d5579346a2cbc9be7a.patch"; sha256 = "sha256:1zvxij35fnr3h9b5wdl8ml17aqfx3a39rd4mgwmdvkapbg3pa4lm"; }; </ins> nativeBuildInputs = with ocamlPackages; [ dune_3 findlib

stdenv.mkDerivation rec { pname = "why3"; <del> version = "1.4.1"; </del> <ins> version = "1.5.0"; </ins> src = fetchurl { url = "https://why3.gitlabpages.inria.fr/releases/${pname}-${version}.tar.gz"; <del> sha256 = "sha256:1rqyypzlvagrn43ykl0c5wxyvnry5fl1ykn3xcvlzgghk96yq3jq"; </del> <ins> sha256 = "sha256:0qjh49pyqmg3xi09fn4lyzz23i6h18y9sgc8ayscvx3bwr3vcqhr"; </ins> }; buildInputs = with ocamlPackages; [

installPhase = '' mkdir -p $out/bin <del> makeWrapper ${why3}/bin/why3 $out/bin/why3 --add-flags "--extra-config $out/share/why3/why3.conf" </del> <ins> makeWrapper ${why3}/bin/why3 $out/bin/why3 --add-flags "--config $out/share/why3/why3.conf" </ins> ''; }

, gdk-pixbuf, wrapGAppsHook }: <ins> let why3_1_5 = why3; in let why3 = why3_1_5.overrideAttrs (o: rec { version = "1.4.1"; src = fetchurl { url = "https://why3.gitlabpages.inria.fr/releases/${o.pname}-${version}.tar.gz"; sha256 = "sha256:1rqyypzlvagrn43ykl0c5wxyvnry5fl1ykn3xcvlzgghk96yq3jq"; }; }); in </ins> let mkocamlpath = p: "${p}/lib/ocaml/${ocamlPackages.ocaml.version}/site-lib"; runtimeDeps = with ocamlPackages; [
Change:
, CVSSv3=9.1 (nixos-unstable) Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak potentially sensitive environmental information or lead to limited denial of service conditions. This issue is patched in version v0.17.1 Workarounds: Block access to and paths on the authenticate service. This can be done with any L7 proxy, including Pomerium's own proxy service. Scanned versions: nixos-unstable: . Cc Cc

Discussion:
in buildGoModule rec { pname = "pomerium"; <del> version = "0.17.0"; </del> <ins> version = "0.17.1"; </ins> src = fetchFromGitHub { owner = "pomerium"; repo = "pomerium"; rev = "v${version}"; <del> hash = "sha256:1hv76i6k9f0kp527nxlxqhklsvkh2cmfnqlszmlk2hxij31qnf8q"; </del> <ins> hash = "sha256:0b9mdzyfn7c6gwgslqk787yyrrcmdjf3282vx2zvhcr3psz0xqwx"; </ins> }; vendorSha256 = "sha256:1cq4m5a7z64yg3v1c68d15ilw78il6p53vaqzxgn338zjggr3kig";