From 508fbfd3a733a84e68972bbc9a6a9347d82c30c1 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 6 Sep 2026 10:07:37 +0200
Subject: [PATCH] python3Packages.checkdmarc: 5.17.5 -> 6.0.1

Changelog: https://github.com/domainaware/checkdmarc/blob/6.0.1/CHANGELOG.md
---
 .../python-modules/checkdmarc/default.nix     | 36 ++++++++++++++-----
 1 file changed, 27 insertions(+), 9 deletions(-)

diff --git a/pkgs/development/python-modules/checkdmarc/default.nix b/pkgs/development/python-modules/checkdmarc/default.nix
index 02730ae9f0b6..f6d9becedfd9 100644
--- a/pkgs/development/python-modules/checkdmarc/default.nix
+++ b/pkgs/development/python-modules/checkdmarc/default.nix
@@ -1,12 +1,16 @@
 {
   lib,
+  stdenv,
   buildPythonPackage,
   cryptography,
   dnspython,
   expiringdict,
   fetchFromGitHub,
   hatchling,
+  httpx,
+  iana-etc,
   importlib-resources,
+  libredirect,
   pem,
   publicsuffixlist,
   pyleri,
@@ -19,14 +23,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "checkdmarc";
-  version = "5.17.5";
+  version = "6.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "domainaware";
     repo = "checkdmarc";
     tag = finalAttrs.version;
-    hash = "sha256-jwsAemOqJzMpQXliesr+wntAXjVoo/1rFr+1SSqqeRY=";
+    hash = "sha256-yyyaA0gLnRpyf1MueHWd67kzXDMOJYd5CHzAG/mBIA0=";
   };
 
   pythonRelaxDeps = [
@@ -41,6 +45,7 @@ buildPythonPackage (finalAttrs: {
     cryptography
     dnspython
     expiringdict
+    httpx
     importlib-resources
     pem
     publicsuffixlist
@@ -49,26 +54,39 @@ buildPythonPackage (finalAttrs: {
     requests
     timeout-decorator
     xmltodict
-  ];
+  ]
+  ++ dnspython.optional-dependencies.doh;
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    httpx
+    pytestCheckHook
+  ]
+  ++ httpx.optional-dependencies.http2;
 
   pythonImportsCheck = [ "checkdmarc" ];
 
+  preCheck = lib.optionalString stdenv.hostPlatform.isLinux ''
+    echo "nameserver 127.0.0.1" > resolv.conf
+    export NIX_REDIRECTS=/etc/protocols=${iana-etc}/etc/protocols:/etc/resolv.conf=$(realpath resolv.conf) \
+      LD_PRELOAD=${libredirect}/lib/libredirect.so
+  '';
+
   disabledTests = [
     # Tests require network access
     "testBIMI"
+    "testCheckSoaDelegatedChildZoneLive"
+    "testCheckSoaFallsBackToBaseDomainLive"
     "testDMARCPctLessThan100Warning"
-    "testSPFMissingARecord"
-    "testSPFMissingMXRecord"
-    "testSplitSPFRecord"
-    "testTooManySPFDNSLookups"
-    "testTooManySPFVoidDNSLookups"
     "testDNSSEC"
     "testDnssecFalseWhenNoKey"
     "testGetDnskeyCache"
     "testIncludeMissingSPF"
     "testKnownGood"
+    "testSPFMissingARecord"
+    "testSPFMissingMXRecord"
+    "testSplitSPFRecord"
+    "testTooManySPFDNSLookups"
+    "testTooManySPFVoidDNSLookups"
   ];
 
   meta = {