From 24a82994c40a7dd4889f256e7d0f6f2defa1272f Mon Sep 17 00:00:00 2001
From: Andreas Wiese <aw-devel@meterriblecrew.net>
Date: Tue, 16 Dec 2025 23:13:33 +0100
Subject: [PATCH] python3Packages.granian: refresh tests' TLS certs

granian up to 2.6.0 delivers TLS certificates in its test fixtures which
expired on Dec 1.  This makes those tests fail.  That's somehow good and
bad simultaneously, but anyways unfortunate.

This is fixed upstream, but not in a release.  Fetch and apply the
appropriate patch manually.
---
 pkgs/development/python-modules/granian/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/development/python-modules/granian/default.nix b/pkgs/development/python-modules/granian/default.nix
index 2d0a95898814..34144ff5a139 100644
--- a/pkgs/development/python-modules/granian/default.nix
+++ b/pkgs/development/python-modules/granian/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  fetchurl,
   fetchFromGitHub,
   rustPlatform,
   cacert,
@@ -34,6 +35,11 @@ buildPythonPackage rec {
   # and allow the final application to make the allocator decision
   # via LD_PRELOAD or similar.
   patches = [
+    (fetchurl {
+      # Refresh expired TLS certificates for tests
+      url = "https://github.com/emmett-framework/granian/commit/189f1bed2effb4a8a9cba07b2c5004e599a6a890.patch";
+      hash = "sha256-7FgVR7/lAh2P5ptGx6jlFzWuk24RY7wieN+aLaAEY+c=";
+    })
     ./no-alloc.patch
   ];