From e1dc830f54929baf820cb5a7fe8de8e920dc246e Mon Sep 17 00:00:00 2001 From: Morgan Helton Date: Sat, 4 Jul 2026 12:07:02 -0500 Subject: [PATCH 1/3] awscli2: relax urllib3 version constraint --- pkgs/by-name/aw/awscli2/package.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/by-name/aw/awscli2/package.nix b/pkgs/by-name/aw/awscli2/package.nix index be8022c2300a..c7056f3d61c2 100644 --- a/pkgs/by-name/aw/awscli2/package.nix +++ b/pkgs/by-name/aw/awscli2/package.nix @@ -75,6 +75,7 @@ py.pkgs.buildPythonApplication rec { --replace-fail 'prompt-toolkit>=3.0.24,<3.0.52' 'prompt-toolkit>=3.0.24' \ --replace-fail 'ruamel_yaml>=0.15.0,<=0.19.1' 'ruamel_yaml>=0.15.0' \ --replace-fail 'ruamel_yaml_clib>=0.2.0,<=0.2.15' 'ruamel_yaml_clib>=0.2.0' \ + --replace-fail 'urllib3>=1.25.4,<=2.6.3' 'urllib3>=1.25.4' \ --replace-fail 'wcwidth<0.3.0' 'wcwidth>=0.3.0' substituteInPlace requirements-base.txt \ From 5ee94d0c8f074cb1effde3997ddc2cccbbddc331 Mon Sep 17 00:00:00 2001 From: Morgan Helton Date: Sat, 4 Jul 2026 12:20:53 -0500 Subject: [PATCH 2/3] awscli2: use standard-format CA bundle for awscrt --- pkgs/by-name/aw/awscli2/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/aw/awscli2/package.nix b/pkgs/by-name/aw/awscli2/package.nix index c7056f3d61c2..c30ddabf05f2 100644 --- a/pkgs/by-name/aw/awscli2/package.nix +++ b/pkgs/by-name/aw/awscli2/package.nix @@ -86,7 +86,7 @@ py.pkgs.buildPythonApplication rec { # through PYTHONPATH sed -i '/pip>=/d' requirements/bootstrap.txt - ln -sf ${cacert}/etc/ssl/certs/ca-bundle.crt awscli/botocore/cacert.pem + ln -sf ${cacert}/etc/ssl/certs/ca-no-trust-rules-bundle.crt awscli/botocore/cacert.pem ''; nativeBuildInputs = [ From 33a24068654d0ad1ed412cedc352d524a2ce2294 Mon Sep 17 00:00:00 2001 From: Morgan Helton Date: Sat, 4 Jul 2026 12:20:54 -0500 Subject: [PATCH 3/3] python3Packages.botocore: use standard-format CA bundle for awscrt --- pkgs/development/python-modules/botocore/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/development/python-modules/botocore/default.nix b/pkgs/development/python-modules/botocore/default.nix index 810b95dfb660..706731f2dcf4 100644 --- a/pkgs/development/python-modules/botocore/default.nix +++ b/pkgs/development/python-modules/botocore/default.nix @@ -31,7 +31,7 @@ buildPythonPackage rec { }; postPatch = '' - ln -sf ${cacert}/etc/ssl/certs/ca-bundle.crt botocore/cacert.pem + ln -sf ${cacert}/etc/ssl/certs/ca-no-trust-rules-bundle.crt botocore/cacert.pem ''; build-system = [