From c4bf8c39a2a657a53ca7ca883d285a37b1eece46 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <fabian@affolter-engineering.ch>
Date: Sat, 20 Sep 2025 10:20:12 +0200
Subject: [PATCH 1/3] tunnelgraf: update changelog entry

---
 pkgs/by-name/tu/tunnelgraf/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/tu/tunnelgraf/package.nix b/pkgs/by-name/tu/tunnelgraf/package.nix
index 7a479b098ba5..a3d99cafec35 100644
--- a/pkgs/by-name/tu/tunnelgraf/package.nix
+++ b/pkgs/by-name/tu/tunnelgraf/package.nix
@@ -46,7 +46,7 @@ python3.pkgs.buildPythonApplication rec {
   meta = {
     description = "Tool to manage SSH tunnel hops to many endpoints";
     homepage = "https://github.com/denniswalker/tunnelgraf";
-    changelog = "https://github.com/denniswalker/tunnelgraf/releases/tag/v${version}";
+    changelog = "https://github.com/denniswalker/tunnelgraf/releases/tag/${src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "tunnelgraf";

From aeb3a0032cefb7d399fff727f18284501fc0b41f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <fabian@affolter-engineering.ch>
Date: Sat, 20 Sep 2025 11:42:33 +0200
Subject: [PATCH 2/3] python313Packages.sshtunnel: disable failing test

---
 pkgs/development/python-modules/sshtunnel/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/python-modules/sshtunnel/default.nix b/pkgs/development/python-modules/sshtunnel/default.nix
index 59a2bbd6243c..1cec6aca987b 100644
--- a/pkgs/development/python-modules/sshtunnel/default.nix
+++ b/pkgs/development/python-modules/sshtunnel/default.nix
@@ -35,6 +35,8 @@ buildPythonPackage rec {
     "test_get_keys"
     "connect_via_proxy"
     "read_ssh_config"
+    # Test doesn't work with paramiko < 4.0.0 and the patch above
+    "test_read_private_key_file"
   ];
 
   meta = with lib; {

From 2fad2a73081b28fd2c3b977750832be5af06b800 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <fabian@affolter-engineering.ch>
Date: Sat, 20 Sep 2025 11:43:09 +0200
Subject: [PATCH 3/3] tunnelgraf: override paramiko

---
 pkgs/by-name/tu/tunnelgraf/package.nix | 26 ++++++++++++++++++++++----
 1 file changed, 22 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/tu/tunnelgraf/package.nix b/pkgs/by-name/tu/tunnelgraf/package.nix
index a3d99cafec35..254bffb5859d 100644
--- a/pkgs/by-name/tu/tunnelgraf/package.nix
+++ b/pkgs/by-name/tu/tunnelgraf/package.nix
@@ -1,10 +1,28 @@
 {
   lib,
   fetchFromGitHub,
+  fetchPypi,
   python3,
 }:
 
-python3.pkgs.buildPythonApplication rec {
+let
+  py = python3.override {
+    packageOverrides = self: super: {
+
+      # Doesn't work with latest paramiko
+      paramiko = super.paramiko.overridePythonAttrs (oldAttrs: rec {
+        version = "3.4.0";
+        src = fetchPypi {
+          pname = "paramiko";
+          inherit version;
+          hash = "sha256-qsCPJqMdxN/9koIVJ9FoLZnVL572hRloEUqHKPPCdNM=";
+        };
+        doCheck = false;
+      });
+    };
+  };
+in
+py.pkgs.buildPythonApplication rec {
   pname = "tunnelgraf";
   version = "1.0.6";
   pyproject = true;
@@ -19,14 +37,14 @@ python3.pkgs.buildPythonApplication rec {
   pythonRelaxDeps = [
     "click"
     "deepmerge"
-    "paramiko"
     "psutil"
     "pydantic"
+    "python-hosts"
   ];
 
-  build-system = with python3.pkgs; [ hatchling ];
+  build-system = with py.pkgs; [ hatchling ];
 
-  dependencies = with python3.pkgs; [
+  dependencies = with py.pkgs; [
     click
     deepmerge
     paramiko