jiebi/CodeConvo huggingface dataset:
Change:
Unable to build libxml2 Repro: nix-env -i libxml2 make[4]: Entering directory '/private/var/folders/7g/1ptqqd597r76dqzk7hjy0bgc0000gn/T/nix-build-libxml2-' CC CC libxml2- CC libxml.c:1649:43: warning: passing 'unsigned char ' to parameter of type 'const char ' converts between pointers to integer types with different sign [-Wpointer-sign] message = libxmlcharPtrConstWrap(ptr); ^~~ ./libxmlwrap.h:240:48: note: passing argument to parameter 'str' here PyObject libxmlcharPtrConstWrap(const char str); ^ 1 warning generated. CCLD ld: library not found for -lintl clang-7: error: linker command failed with exit code 1 (use -v to see invocation) make[4]: [Makefile:600: ] Error 1 make[4]: Leaving directory '/private/var/folders/7g/1ptqqd597r76dqzk7hjy0bgc0000gn/T/nix-build-libxml2-' make[3]: [Makefile:694: all-recursive] Error 1 make[3]: Leaving directory '/private/var/folders/7g/1ptqqd597r76dqzk7hjy0bgc0000gn/T/nix-build-libxml2-' make[2]: [Makefile:528: all] Error 2 make[2]: Leaving directory '/private/var/folders/7g/1ptqqd597r76dqzk7hjy0bgc0000gn/T/nix-build-libxml2-' make[1]: [Makefile:1479: all-recursive] Error 1 make[1]: Leaving directory '/private/var/folders/7g/1ptqqd597r76dqzk7hjy0bgc0000gn/T/nix-build-libxml2-' make: [Makefile:893: all] Error 2 builder for '/nix/store/xcqdl8cfjjbjvh7g9ka0ip3r4awy80a8-libxml2-' failed with exit code 2 error: build of '/nix/store/xcqdl8cfjjbjvh7g9ka0ip3r4awy80a8-libxml2-' failed Metadata* system: host os: multi-user?: sandbox: version: channels(swarnpriya): nixpkgs:
Disclaimer: I barely know what I'm doing. I tried adding as a build input to libxml2. That got this error:
I've been getting this as well, since . Any clue? I think this sort of thing has happened before, but I don't recall the details.
I thought somebody else already fixed this after some discussion no irc. My proposal was essentially the patch above but guarded for python2 only.

Discussion:
{ stdenv, lib, fetchurl, fetchpatch <del> , zlib, xz, python, ncurses, findXMLCatalogs </del> <ins> , zlib, xz, python, gettext, ncurses, findXMLCatalogs </ins> , pythonSupport ? stdenv.buildPlatform == stdenv.hostPlatform , icuSupport ? false, icu ? null , enableShared ? stdenv.hostPlatform.libc != "msvcrt"

++ lib.optional (enableStatic && enableShared) "static"; buildInputs = lib.optional pythonSupport python <ins> ++ lib.optional (pythonSupport && python?isPy2 && python.isPy2) gettext </ins> ++ lib.optional (pythonSupport && python?isPy3 && python.isPy3) ncurses # Libxml2 has an optional dependency on liblzma.  However, on impure # platforms, it may end up using that from /usr/lib, and thus lack a
Change:
Describe the bug fails to cross-compile on atleast and . it fails with: To Reproduce Steps to reproduce the behavior: - Expected behavior dnsmasq is successfully cross-compiled. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata system: host os: multi-user?: sandbox: version: channels(root): channels(betaboon): nixpkgs:
I marked this as stale due to inactivity. &rarr;
This is still relevant.

Discussion:
{ lib, stdenv, fetchurl, pkg-config, dbus, nettle, fetchpatch <del> , libidn, libnetfilter_conntrack }: </del> <ins> , libidn, libnetfilter_conntrack, buildPackages }: </ins> with lib; let

"BINDIR=$(out)/bin" "MANDIR=$(out)/man" "LOCALEDIR=$(out)/share/locale" <ins> "PKG_CONFIG=${buildPackages.pkg-config}/bin/${buildPackages.pkg-config.targetPrefix}pkg-config" </ins> ]; hardeningEnable = [ "pie" ];
Change:
Describe the bug The definition for is derived from a GitHub archive that contains contents that differ only by case. This causes a hash mismatch in the fixed output derivation. To Reproduce Steps to reproduce the behavior: without any cache Or more practically, try to build the src attribute by clearing the hash: Observe the hash is , but is expected to be . May depend on local filesystem behavior. Additional context Comparing a diff of the two outputs. One fetched from hydra, one fetched locally: Notify maintainers cc as listed maintainer Metadata system: host os: multi-user?: sandbox: version: channels(lorne): channels(root): nixpkgs: Maintainer information:
I marked this as stale due to inactivity. &rarr;

Discussion:
url = "https://github.com/darlinghq/darling/archive/d2cc5fa748003aaa70ad4180fff0a9a85dc65e9b.tar.gz"; sha256 = "11b51fw47nl505h63bgx5kqiyhf3glhp1q6jkpb6nqfislnzzkrf"; postFetch = '' <del> # Get rid of case conflict mkdir $out </del> <ins> # The archive contains both `src/opendirectory` and `src/OpenDirectory`, # pre-create the directory to choose the canonical case on # case-insensitive filesystems. mkdir -p $out/src/OpenDirectory </ins> cd $out tar -xzf $downloadedFile --strip-components=1 rm -r $out/src/libm <ins> # If `src/opendirectory` and `src/OpenDirectory` refer to different # things, then combine them into `src/OpenDirectory` to match the result # on case-insensitive filesystems. if [ "$(stat -c %i src/opendirectory)" != "$(stat -c %i src/OpenDirectory)" ]; then mv src/opendirectory/* src/OpenDirectory/ rmdir src/opendirectory fi </ins> ''; };
Change:
Describe the bug With enabled, fails to build the system with the following error: To Reproduce Use the following initrd-ssh config: With keys in generated by . Those are their permissions: Build fails with the above error. Expected behavior Build shouldn't fail. Notify maintainers Related to PR so cc Metadata In rescue environment installing a new NixOS system:
I tried both string and path for the host keys config, so both: And They all don't work for me, unfortunately.
I walked around this problem by first switch to for the server installation (which uses the dropbear initrd ssh), and then switch back to after the installation is finished. It looks like the problem only affects . Can't reproduce it during normal operations.
I think have the same things here at beginning, starting from live cd i finally found a way. Using this : - =OK

Discussion:
boot.initrd.extraUtilsCommandsTest = '' # sshd requires a host key to check config, so we pass in the test's <ins> tmpkey="$(mktemp initrd-ssh-testkey.XXXXXXXXXX)" cp "${../../../tests/initrd-network-ssh/ssh_host_ed25519_key}" "$tmpkey" # keys from Nix store are world-readable, which sshd doesn't like chmod 600 "$tmpkey" </ins> echo -n ${escapeShellArg sshdConfig} | $out/bin/sshd -t -f /dev/stdin  <del> -h ${../../../tests/initrd-network-ssh/ssh_host_ed25519_key} </del> <ins> -h "$tmpkey" rm "$tmpkey" </ins> ''; boot.initrd.network.postCommands = ''
Change:
Describe the bug When trying to build the package To Reproduce Any of look at Additional context According to , wasn't changed itself, so probably the python framework changed in a way such that you can't give manually anymore. Notify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(root): channels(turion): nixpkgs: Maintainer information:

Discussion:
buildPythonPackage rec { pname = "progressbar2"; <del> version = "3.51.3"; </del> <ins> version = "3.51.4"; </ins> src = fetchPypi { inherit pname version; <del> sha256 = "ecf687696dd449067f69ef6730c4d4a0189db1f8d1aad9e376358354631d5b2c"; </del> <ins> sha256 = "0dnfw8mdrz78gck4ibnv64cinbp5f7kw349wjgpwv53z6p7jiwhk"; </ins> }; propagatedBuildInputs = [ python-utils ];

pytest sphinx flake8 pytestpep8 pytest-flakes pytestcov pytestcache freezegun ]; <del> # ignore tests on the nix wrapped setup.py and don't flake .eggs directory </del> <ins> # ignore tests on the nix wrapped setup.py </ins> checkPhase = '' runHook preCheck <del> ${python.interpreter} setup.py test --addopts "--ignore=.eggs" </del> <ins> ${python.interpreter} setup.py test </ins> runHook postCheck '';

homepage = "https://progressbar-2.readthedocs.io/en/latest/"; description = "Text progressbar library for python"; license = licenses.bsd3; <del> maintainers = with maintainers; [ ashgillman ]; </del> <ins> maintainers = with maintainers; [ ashgillman turion ]; </ins> }; }
Change:
Describe the bug Trying to install the bash-completion package on armv7l fails due to multiple test failures. This seems to be caused by as reverting that commit makes the tests pass. Build log at commit (nixos-unstable when I was testing): Build log at the same commit after : To Reproduce Expected behavior Build succeeds. Screenshots N/A Additional context I'm running this on an Odroid HC2 machine, so native armv7l, not armv7l on AArch64 or something like that. Without xdist the tests take considerably longer to run. Maybe using xdist can be made conditional on the architecture? Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- who introduced the usage of xdist for the tests Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:
on IRC pointed out to me that the 8 cores of the HC2 are more than many other armv7l machines, so I ran the tests with instead of . That also fails, but it looks like it's less tests timing out:
I did another run. It's not deterministic. The second try with passed. The original commit already mentions that the tests are flaky. I'm not sure that tests failing gives any meaningful data, at least when the tests are run in parallel.
I'm seeing this as well on the same hardware. I wrote a patch to increase the timeout, but it still fails even if I increase it to 500 seconds if my machine is running other builds. The tests that fail seem pretty much random. If my machine has no load, it succeeds even with the original (30 second) timeout.
I've done some more testing, this time on an x86_64 machine. It's an Intel NUC with an i3-7100U. This is a 2 core/4 thread processor. While the tests usually pass on an unloaded machine, even watching a Youtube video in Chrome at the same time made them fail for me. I also tried with to simulate a heavily loaded system. With the tests running in parallel they failed more than half the time out of a few runs I did, but having them run serially I couldn't get them to fail at all. I'm sending a pull request to revert the cell that made the tests parallel since I'm a pretty firm believer that flaky tests are worse than no tests.

Discussion:
python3Packages.pexpect python3Packages.pytest bashInteractive <del> # use xdist to speed up the test run, just like upstream: # https://github.com/scop/bash-completion/blob/009bf2228c68894629eb6fd17b3dc0f1f6d67615/test/requirements.txt#L4 python3Packages.pytest_xdist </del> ]; # - ignore test_gcc on ARM because it assumes -march=native

# - ignore test_ls because impure logic # - ignore test_screen because it assumes vt terminals exist checkPhase = '' <del> pytest -n $NIX_BUILD_CORES .  </del> <ins> pytest .  </ins> ${stdenv.lib.optionalString (stdenv.hostPlatform.isAarch64 || stdenv.hostPlatform.isAarch32) "--ignore=test/t/test_gcc.py"}  --ignore=test/t/test_chsh.py  --ignore=test/t/test_ether_wake.py
Change:
Describe the bug Trying to build fails To Reproduce Additional context Apparently it was already broken here: Maybe it makes sense to update to recently released version 2020.1. Notify maintainers
I'll try and fix by updating.

Discussion:
, curl }: let <del> version = "2020.1.1"; </del> <ins> version = "2020.1.3"; </ins> shortVersion = builtins.substring 0 6 version; in stdenv.mkDerivation rec {

src = fetchurl { url = "mirror://sourceforge/flightgear/release-${shortVersion}/${pname}-${version}.tar.bz2"; <del> sha256 = "1z52r28xg05q6hdlh4szzfjlpgkvbdyn2dpaji9b57y58ccrqsfh"; </del> <ins> sha256 = "1l8kiicm0klbx0b05994vqd8a8wj7k0djbbg41a6i3q5d17jrnk6"; </ins> }; nativeBuildInputs = [ cmake ];

}: let <del> version = "2019.1.1"; </del> <ins> version = "2020.1.2"; </ins> shortVersion = builtins.substring 0 6 version; data = stdenv.mkDerivation rec { <del> pname = "flightgear-base"; </del> <ins> pname = "flightgear-data"; </ins> inherit version; src = fetchurl { url = "mirror://sourceforge/flightgear/release-${shortVersion}/FlightGear-${version}-data.tar.bz2"; <del> sha256 = "14zm0hzshbca4ych72631hpc4pw2w24zib62ri3lwm8nz6j63qhf"; </del> <ins> sha256 = "0ldsjb54k8nb99h6n4f4x20nawd2pa0a8skkwkrgckdpmdv0zwyk"; </ins> }; phases = [ "installPhase" ];

src = fetchurl { url = "mirror://sourceforge/flightgear/release-${shortVersion}/${pname}-${version}.tar.bz2"; <del> sha256 = "189wal08p9lrz757pmazxnf85sfymsqrm3nfvdad95pfp6bg7pyi"; </del> <ins> sha256 = "1770kgwa7z70sx6da9x1q9cszpd3ywz6nn8jrb6xv8ldjqcpqpvb"; </ins> }; # Of all the files in the source and data archives, there doesn't seem to be
Change:
Describe the Bug The Typora pkg cannot work: To Reproduce During the package installation, This message will occur: The URL cannot be reached.
anyone can solve the problem?

Discussion:
, lib , fetchurl , makeWrapper <del> , electron_5 </del> <ins> , electron_8 </ins> , dpkg , gtk3 , glib

stdenv.mkDerivation rec { pname = "typora"; <del> version = "0.9.73"; </del> <ins> version = "0.9.89"; </ins> src = fetchurl { url = "https://www.typora.io/linux/typora_${version}_amd64.deb"; <del> sha256 = "1fgcb4bx5pw8ah5j30d38gw7qi1cmqarfhvgdns9f2n0d57bvvw3"; </del> <ins> sha256 = "0gk8j13z1ymad34zzcy4vqwyjgd5khgyw5xjj9rbzm5v537kqmx6"; </ins> }; nativeBuildInputs = [

gtk3 ]; <del> unpackPhase = "dpkg-deb -x $src ."; </del> <ins> # The deb contains setuid permission on `chrome-sandbox`, which will actually not get installed. unpackPhase = "dpkg-deb --fsys-tarfile $src | tar -x --no-same-permissions --no-same-owner"; </ins> dontWrapGApps = true;

''; postFixup = '' <del> makeWrapper ${electron_5}/bin/electron $out/bin/typora  </del> <ins> makeWrapper ${electron_8}/bin/electron $out/bin/typora  </ins> --add-flags $out/share/typora  "''${gappsWrapperArgs[@]}"  ${lib.optionalString withPandoc ''--prefix PATH : "${lib.makeBinPath [ pandoc ]}"''}
Change:
Project description PDlib - A PHP extension for Dlib Metadata homepage URL: source URL: license: mit platforms: all
cc
I marked this as stale due to inactivity. &rarr;

Discussion:
<ins> { buildPecl, lib, pkgs }: let pname = "pdlib"; version = "1.0.2"; in buildPecl { inherit pname version; src = pkgs.fetchFromGitHub { owner = "goodspb"; repo = "pdlib"; rev = "v${version}"; sha256 = "0qnmqwlw5vb2rvliap4iz9val6mal4qqixcw69pwskdw5jka6v5i"; }; nativeBuildInputs = [ pkgs.pkg-config ]; buildInputs = [ (pkgs.dlib.override { guiSupport = true; }) ]; meta = with lib; { description = "A PHP extension for Dlib"; license = with licenses; [ mit ]; maintainers = lib.teams.php.members; }; } </ins>

oci8 = callPackage ../development/php-packages/oci8 { }; <ins> pdlib = callPackage ../development/php-packages/pdlib { }; </ins> pcov = callPackage ../development/php-packages/pcov { }; pcs = buildPecl {
Change:
Describe the bug I don't know if we should just update it or not. To Reproduce Steps to reproduce the behavior: on master Expected behavior Screenshots Additional context Notify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(bbigras): channels(root): nixpkgs: Maintainer information:
I can reproduce the issue locally It used to build previously The current is not in the Hydra cache because was never built by Hydra, so, unless someone else has the , we can't compare Upstream tag doesn't appear to be updated, git repo doesn't use export-subst It is not clear to me what has happened here.
Dear all, the tag v1.7.4 has been changed after October 2019. It was not published for long as it involuntarily got into a commit. There have been no public releases for v1.7.4 marked on Github or our the FIRESTARTER Website as of October 2019.
Thanks everyone for the help. :heart:

Discussion:
owner = "tud-zih-energy"; repo = "FIRESTARTER"; rev = "v${version}"; <del> sha256 = "161mg0h1hvp6bxfjdhyfqrljvphys896mfd36254rbgzxm38ibi7"; </del> <ins> sha256 = "0zqfqb7hf48z39g1qhbl1iraf8rz4d629h1q6ikizckpzfq23kd0"; </ins> }; nativeBuildInputs = [ python3 ];

homepage = "https://tu-dresden.de/zih/forschung/projekte/firestarter"; description = "Processor Stress Test Utility"; platforms = platforms.linux; <del> maintainers = with maintainers; [ astro ]; </del> <ins> maintainers = with maintainers; [ astro marenz ]; </ins> license = licenses.gpl3; }; }
Change:
Describe the bug No Proj support in python-mapnik To Reproduce Steps to reproduce the behavior: Expected behavior It seems that all the Proj machinery is in place, Screenshots If applicable, add screenshots to help explain your problem. Additional context Add any other context about the problem here. Notify maintainers Metadata Maintainer information:
I marked this as stale due to inactivity. &rarr;

Discussion:
buildInputs = [ boost cairo freetype gdal harfbuzz icu libjpeg libpng libtiff <del> libwebp libxml2 proj python sqlite zlib </del> <ins> libwebp proj python sqlite zlib </ins> # optional inputs postgresql ]; <ins> propagatedBuildInputs = [ libxml2 ]; </ins> prefixKey = "PREFIX="; preConfigure = '' patchShebangs ./configure ''; <ins> # NOTE: 2021-05-06: # Add -DACCEPT_USE_OF_DEPRECATED_PROJ_API_H=1 for backwards compatibility # with major versions 6 and 7 of proj which are otherwise not compatible # with mapnik 3.1.0. Note that: # # 1. Starting with proj version 8, this workaround will no longer be #    supported by the upstream proj project. # # 2. Without the workaround, mapnik configures itself without proj support. # # 3. The master branch of mapnik (after 3.1.0) appears to add native support #    for the proj 6 api, so this workaround is not likely to be needed in #    subsequent mapnik releases. At that point, this block comment and the #    NIX_CFLAGS_COMPILE expression can be removed. NIX_CFLAGS_COMPILE = if version != "3.1.0" && lib.versionAtLeast version "3.1.0" then throw "The mapnik compatibility workaround for proj 6 may no longer be required. Remove workaround after checking." else if lib.versionAtLeast (lib.getVersion proj) "8" then throw ("mapnik currently requires a version of proj less than 8, but proj version is: " + (lib.getVersion proj)) else "-DACCEPT_USE_OF_DEPRECATED_PROJ_API_H=1"; </ins> configureFlags = [ "BOOST_INCLUDES=${boost.dev}/include" "BOOST_LIBS=${boost.out}/lib"

"JPEG_LIBS=${libjpeg.out}/lib" "PNG_INCLUDES=${libpng.dev}/include" "PNG_LIBS=${libpng.out}/lib" <del> "PROJ_INCLUDES=${proj}/include" "PROJ_LIBS=${proj}/lib" </del> <ins> "PROJ_INCLUDES=${proj.dev}/include" "PROJ_LIBS=${proj.out}/lib" </ins> "SQLITE_INCLUDES=${sqlite.dev}/include" "SQLITE_LIBS=${sqlite.out}/lib" "TIFF_INCLUDES=${libtiff.dev}/include" "TIFF_LIBS=${libtiff.out}/lib" "WEBP_INCLUDES=${libwebp}/include" "WEBP_LIBS=${libwebp}/lib" <del> "XML2_INCLUDES=${libxml2.dev}/include" "XML2_LIBS=${libxml2.out}/lib" </del> <ins> "XMLPARSER=libxml2" ]; buildFlags = [ "JOBS=$(NIX_BUILD_CORES)" </ins> ]; meta = with lib; {
Change:
Describe the bug Since upgrading to mullvad-vpn 2020.5 on nixos-unstable the client () can't connect to anymore. To Reproduce Set and run . Expected behavior The mullvad client should be able to connect to the daemon. Screenshots ! Additional context The seems to be fine. Here's the log: And the (client) log: Notify maintainers Metadata Please run and paste the result. Maintainer information:
I got some more logging than provided in the systemd logs running it manually: The code in question seems to be here: the path it's trying to write to is: The whole function is new in . doesn't exist on my machine
Ok adding copies the config files into Mullvad adds to the end of IDK if this is an ideal solution or one that fits NixOS but the mullvad daemon is working now.
While enabling seems to fix the issue with OpenVPN but it's still not working for me when I try to use Wireguard.
fixed this particular issue for me, works with wireguard too. In case it's any help, my full config is here:
I'm running right now and it's working for me. My current config is:
This problem has reappeared for me, with exactly the same symptoms, when I run Mullvad in the current stable, which is 21.05. A workaround (which I don't fully understand) is to completely disable my firewall using It's not sufficient to have the firewall on with the ports recommended by Mullvad opened - that's the following ports, according to TCP: 80, 443, 1401 UDP: 53, 1194, 1195, 1196, 1197, 1300, 1301, 1302, 1303, 1400
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Have you tried open these ports instead of disabling the firewall?
Yes.
If you use there VPN than you should not have to open any ports because the default nixos firewall is only blocking incoming traffic not out-going.

Discussion:
config = mkIf cfg.enable { boot.kernelModules = [ "tun" ]; <ins> # mullvad-daemon writes to /etc/iproute2/rt_tables networking.iproute2.enable = true; </ins> systemd.services.mullvad-daemon = { description = "Mullvad VPN daemon"; wantedBy = [ "multi-user.target" ];
Change:
Describe the bug Conan fails to build due to the fact that six was updated in pull request To Reproduce Expected behavior Conan should be updated to use the 1.15 version of six to build correctly. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata system: host os: multi-user?: sandbox: version: channels(narice): channels(root): nixpkgs: Maintainer information:
I'm not actually the maintainer, is, but I'll see if I can see if there's a quick fix
woaw! that was fast! thank you very much
You even got a package update in the bargain :D

Discussion:
<del> { lib, python3, git, pkgconfig }: </del> <ins> { lib, python3, fetchFromGitHub, git, pkgconfig }: </ins> # Note: # Conan has specific dependency demands; check

}; in newPython.pkgs.buildPythonApplication rec { <del> version = "1.25.0"; </del> <ins> version = "1.27.0"; </ins> pname = "conan"; <del> src = newPython.pkgs.fetchPypi { inherit pname version; sha256 = "1wgmx6s4h5m6zixb3wlaicy56rsqcy2srzmvii80xdx9g5wvi9pv"; </del> <ins> src = fetchFromGitHub { owner = "conan-io"; repo = "conan"; rev = version; sha256 = "0ncqs1p4g23fmzgdmwppgxr8w275h38hgjdzs456cgivz8xs9rjl"; </ins> }; propagatedBuildInputs = with newPython.pkgs; [

] ++ (with newPython.pkgs; [ codecov mock <del> pytest node-semver </del> nose parameterized webtest ]); <del> # Conan 1.14.0 has removed all tests from the Pypi source dist: #     https://github.com/conan-io/conan/pull/4713 # We have recommended they be added back: #     https://github.com/conan-io/conan/issues/4563#issuecomment-602225083 </del> <ins> # TODO: reenable tests now that we fetch tests w/ the source from GitHub. # Not enabled right now due to time constraints/failing tests that I didn't have time to track down </ins> doCheck = false; postPatch = ''
Change:
, CVSSv3=9.8 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc
Fixed:

Discussion:
<del> { stdenv, autoreconfHook, pkgconfig, SDL2, SDL2_mixer, SDL2_net, fetchFromGitHub }: </del> <ins> { stdenv, autoreconfHook, pkgconfig, SDL2, SDL2_mixer, SDL2_net, fetchFromGitHub, fetchpatch }: </ins> stdenv.mkDerivation rec { pname = "crispy-doom";

sha256 = "1b6gn0dysv631jynh769whww9xcss1gms78sz3nrn855q1dsvcb4"; }; <ins> patches = [ # Fixes CVE-2020-14983 (fetchpatch { url = "https://github.com/chocolate-doom/chocolate-doom/commit/f1a8d991aa8a14afcb605cf2f65cd15fda204c56.diff"; sha256 = "1z6pxg9azcqq7g09hjc09d01knd803nhqilkw2kbx8648hil9mgn"; }) (fetchpatch { url = "https://github.com/chocolate-doom/chocolate-doom/commit/54fb12eeaa7d527defbe65e7e00e37d5feb7c597.diff"; sha256 = "0ww21jn02ld73rkp06f7fqy92jqv8c9q4d1mvsryag1gmvy57znj"; }) ]; </ins> postPatch = '' sed -e 's#/games#/bin#g' -i src{,/setup}/Makefile.am '';
Change:
, CVSSv3=8.8 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc

Discussion:
stdenv.mkDerivation rec { pname   = "keycloak"; <del> version = "10.0.2"; </del> <ins> version = "11.0.2"; </ins> src = fetchzip { url    = "https://downloads.jboss.org/keycloak/${version}/keycloak-${version}.zip"; <del> sha256 = "1fn8yd02m0bnvwkbrfxrdnxfab30s0wzm3zxpy63wf3vak7nacma"; </del> <ins> sha256 = "0ayg6cl6mff64qs36djnfs3is4x0pzhk7zwb27cbln77q3icc0j0"; </ins> }; nativeBuildInputs = [ makeWrapper ];