This refactor performs a mechanical migration of gnuplot to the by-name
layout and updates the derivation to the modern finalAttrs style.
Key changes:
* Move gnuplot from pkgs/tools/graphics/gnuplot/ to pkgs/by-name/gn/gnuplot/
and rename set-gdfontpath-from-fontconfig.sh accordingly.
* Replace the old `rec { ... }` form with `stdenv.mkDerivation (finalAttrs: { ... })`
following current Nixpkgs conventions.
* Remove the unused mkDerivation argument and stop switching the derivation
function based on `withQt`. gnuplot does not require libsForQt5.mkDerivation;
Qt support is handled entirely through inputs and configure flags.
* Replace qttools/qtbase/qtsvg with libsForQt5.qttools/qtbase/qtsvg when
`withQt = true`.
* Convert `${pname}-${version}` to `${finalAttrs.version}` and update
`sha256` → `hash`.
* Add by-name variants gnuplot_qt and gnuplot_aquaterm using override
wrappers.
* Remove the old top-level aliases for gnuplot, gnuplot_qt, and
gnuplot_aquaterm from all-packages.nix; by-name exposure now handles them.
This change is purely structural and does not modify gnuplot’s build
behaviour beyond adopting the standard finalAttrs pattern.
The test runner's buildInputs (writableTmpDirAsHomeHook, openssl)
need to be nativeBuildInputs. In the static (cross-musl) build,
strictDeps is enabled and only nativeBuildInputs are added to PATH.
With buildInputs, openssl was not in PATH, causing
HttpsBinaryCacheStoreTest.queryPathInfo to crash.
tests/du/deref.sh and tests/du/inacc-dir.sh can fail depending
on filesystem behavior due to non-deterministic disk usage.
Other du tests are already skipped in nixpkgs, so extend the
skip list accordingly.
Fixes#508849
Master already contains the GHSA-g3g9-5vj6-r3gj sandbox escape fix and
the landlock abstract socket hardening, so drop the now-redundant
downstream backports.
The 2.28.6 tarball already contains the mdbook 0.5 compatibility fix
and the GHSA-g3g9-5vj6-r3gj sandbox escape fix, so drop the
now-redundant downstream backports.
The 2.34.5 tarball already contains the GHSA-g3g9-5vj6-r3gj sandbox
escape fix and the landlock abstract socket hardening, so drop the
now-redundant downstream backports.
The 2.31.4 tarball already contains the lowdown 3.0 compatibility fix,
the GHSA-g3g9-5vj6-r3gj sandbox escape fix and the landlock abstract
socket hardening, so drop the now-redundant downstream backports.
