From 97fbb30fdb5ae6afea48b88018ae154a29a57eca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <v@cunat.cz>
Date: Wed, 22 Jul 2026 12:01:56 +0200
Subject: [PATCH] knot-resolver_5: 5.7.6 -> 5.7.7 (security!)

https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.7
(cherry picked from commit 0c2857e469eadde05ad0c009cd89614b19cf6e2d)
---
 pkgs/by-name/kn/knot-resolver_5/package.nix | 14 ++------------
 1 file changed, 2 insertions(+), 12 deletions(-)

diff --git a/pkgs/by-name/kn/knot-resolver_5/package.nix b/pkgs/by-name/kn/knot-resolver_5/package.nix
index 1bc541bb9498..af61e7ac71cd 100644
--- a/pkgs/by-name/kn/knot-resolver_5/package.nix
+++ b/pkgs/by-name/kn/knot-resolver_5/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchurl,
-  fetchpatch,
   # native deps.
   runCommand,
   pkg-config,
@@ -36,11 +35,11 @@ let
 
   unwrapped = stdenv.mkDerivation (finalAttrs: {
     pname = "knot-resolver_5";
-    version = "5.7.6";
+    version = "5.7.7";
 
     src = fetchurl {
       url = "https://secure.nic.cz/files/knot-resolver/knot-resolver-${finalAttrs.version}.tar.xz";
-      sha256 = "500ccd3a560300e547b8dc5aaff322f7c8e2e7d6f0d7ef5f36e59cb60504d674";
+      sha256 = "481d2a6eb8690023895d389601e56fffbaeba3cc18cc1de5a5f177df9d0f9530";
     };
 
     outputs = [
@@ -48,15 +47,6 @@ let
       "dev"
     ];
 
-    patches = [
-      (fetchpatch {
-        # https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1772
-        url = "https://gitlab.nic.cz/knot/knot-resolver/-/commit/f4eaf8e69cc9839f68b613d0be10103e05c57fe9.patch";
-        hash = "sha256-u/YQ85Jb5OxV8G3HeVPQUw0cmA+TLIDPze9mreqJGL4=";
-        excludes = [ "daemon/ratelimiting.test/tests.inc.c" ];
-      })
-    ];
-
     # Path fixups for the NixOS service.
     postPatch = ''
       patch meson.build <<EOF