From c3266010f87a52a20ad99492524e5adbc8ffe9b0 Mon Sep 17 00:00:00 2001
From: Marin <git@mar.in>
Date: Mon, 26 Jan 2026 10:08:48 -0700
Subject: [PATCH 1/2] age-plugin-tpm: fix version

age-plugin-tpm v1.0.1 added --version cli flag.
Currently, version is reported as `dev` in nixkpgs.
This fixes it and reports 1.0.1.
---
 pkgs/by-name/ag/age-plugin-tpm/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/ag/age-plugin-tpm/package.nix b/pkgs/by-name/ag/age-plugin-tpm/package.nix
index 061ad37c157e..54a2a8ad6cc8 100644
--- a/pkgs/by-name/ag/age-plugin-tpm/package.nix
+++ b/pkgs/by-name/ag/age-plugin-tpm/package.nix
@@ -36,6 +36,7 @@ buildGoModule rec {
   ldflags = [
     "-s"
     "-w"
+    "-X main.version=${version}"
   ];
 
   passthru.tests = {

From 3cecf58e1938046a95adffdc8eb7444776e384e0 Mon Sep 17 00:00:00 2001
From: Marin <git@mar.in>
Date: Mon, 26 Jan 2026 13:01:01 -0600
Subject: [PATCH 2/2] age-plugin-tpm: add versionCheckHook

---
 pkgs/by-name/ag/age-plugin-tpm/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/ag/age-plugin-tpm/package.nix b/pkgs/by-name/ag/age-plugin-tpm/package.nix
index 54a2a8ad6cc8..38af494ca43e 100644
--- a/pkgs/by-name/ag/age-plugin-tpm/package.nix
+++ b/pkgs/by-name/ag/age-plugin-tpm/package.nix
@@ -7,6 +7,7 @@
   swtpm,
   openssl,
   age,
+  versionCheckHook,
 }:
 
 buildGoModule rec {
@@ -28,6 +29,7 @@ buildGoModule rec {
     age
     swtpm
   ];
+  nativeInstallCheckInputs = [ versionCheckHook ];
 
   buildInputs = [
     openssl