From b87fdd03a6c68e5cdca9b87cb81233654b96e6e4 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Wed, 1 Jul 2026 19:01:32 +0300
Subject: [PATCH 1/5] pdfcpu: small COMMIT file cut improvement

---
 pkgs/by-name/pd/pdfcpu/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/pd/pdfcpu/package.nix b/pkgs/by-name/pd/pdfcpu/package.nix
index 7a55adc0ed1f..1b7500e5d4f8 100644
--- a/pkgs/by-name/pd/pdfcpu/package.nix
+++ b/pkgs/by-name/pd/pdfcpu/package.nix
@@ -77,7 +77,7 @@ buildGoModule (finalAttrs: {
       if stdenv.hostPlatform.isDarwin then "Library/Application Support" else ".config"
     }"/pdfcpu
     versionOutput="$($out/bin/pdfcpu version)"
-    for part in ${finalAttrs.version} $(cat COMMIT | cut -c1-8) $(cat SOURCE_DATE); do
+    for part in ${finalAttrs.version} $(cut -c1-8 COMMIT) $(cat SOURCE_DATE); do
       if [[ ! "$versionOutput" =~ "$part" ]]; then
           echo version output did not contain expected part $part . Output was:
           echo "$versionOutput"

From 22e233c10d719762654b10bbc7b547eec00352d1 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Wed, 1 Jul 2026 19:02:12 +0300
Subject: [PATCH 2/5] pdfcpu: small quoting improvements to installCheckPhase

---
 pkgs/by-name/pd/pdfcpu/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pd/pdfcpu/package.nix b/pkgs/by-name/pd/pdfcpu/package.nix
index 1b7500e5d4f8..7ee8dbb9966e 100644
--- a/pkgs/by-name/pd/pdfcpu/package.nix
+++ b/pkgs/by-name/pd/pdfcpu/package.nix
@@ -77,9 +77,9 @@ buildGoModule (finalAttrs: {
       if stdenv.hostPlatform.isDarwin then "Library/Application Support" else ".config"
     }"/pdfcpu
     versionOutput="$($out/bin/pdfcpu version)"
-    for part in ${finalAttrs.version} $(cut -c1-8 COMMIT) $(cat SOURCE_DATE); do
+    for part in ${finalAttrs.version} "$(cut -c1-8 COMMIT)" "$(cat SOURCE_DATE)"; do
       if [[ ! "$versionOutput" =~ "$part" ]]; then
-          echo version output did not contain expected part $part . Output was:
+          echo version output did not contain expected part \"$part\" . Output was:
           echo "$versionOutput"
           exit 3
       fi

From 86f40cc8aa4f5eded542bb6fbbcec808981514b8 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Wed, 1 Jul 2026 19:04:57 +0300
Subject: [PATCH 3/5] pdfcpu: add meta.changelog

---
 pkgs/by-name/pd/pdfcpu/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/pd/pdfcpu/package.nix b/pkgs/by-name/pd/pdfcpu/package.nix
index 7ee8dbb9966e..6ed6245615ee 100644
--- a/pkgs/by-name/pd/pdfcpu/package.nix
+++ b/pkgs/by-name/pd/pdfcpu/package.nix
@@ -90,6 +90,7 @@ buildGoModule (finalAttrs: {
 
   meta = {
     description = "PDF processor written in Go";
+    changelog = "https://pdfcpu.io/changelog/";
     homepage = "https://pdfcpu.io";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ doronbehar ];

From 83b00deddbaf29a8920d5755d40f283aad0e4452 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Wed, 1 Jul 2026 19:22:10 +0300
Subject: [PATCH 4/5] pdfcpu: use space tolerant Bash array ldflags assignment

---
 pkgs/by-name/pd/pdfcpu/package.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pd/pdfcpu/package.nix b/pkgs/by-name/pd/pdfcpu/package.nix
index 6ed6245615ee..6f6d16fee2e1 100644
--- a/pkgs/by-name/pd/pdfcpu/package.nix
+++ b/pkgs/by-name/pd/pdfcpu/package.nix
@@ -48,8 +48,10 @@ buildGoModule (finalAttrs: {
 
   # ldflags based on metadata from git and source
   preBuild = ''
-    ldflags+=" -X main.commit=$(cat COMMIT)"
-    ldflags+=" -X main.date=$(cat SOURCE_DATE)"
+    ldflags+=(
+      "-X 'main.commit=$(cat COMMIT)'"
+      "-X 'main.date=$(cat SOURCE_DATE)'"
+    )
   '';
 
   nativeBuildInputs = [

From 88cd12125a8d4c4003f2882f7e62b0c2cca27fd3 Mon Sep 17 00:00:00 2001
From: Alexis Hildebrandt <afh@surryhill.net>
Date: Tue, 30 Jun 2026 06:14:38 +0200
Subject: [PATCH 5/5] pdfcpu: 0.12.1 -> 0.13.0

Change Log: https://pdfcpu.io/changelog/
---
 pkgs/by-name/pd/pdfcpu/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/pd/pdfcpu/package.nix b/pkgs/by-name/pd/pdfcpu/package.nix
index 6f6d16fee2e1..cebaa6e081f9 100644
--- a/pkgs/by-name/pd/pdfcpu/package.nix
+++ b/pkgs/by-name/pd/pdfcpu/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "pdfcpu";
-  version = "0.12.1";
+  version = "0.13.0";
 
   src = fetchFromGitHub {
     owner = "pdfcpu";
     repo = "pdfcpu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xAWzn32evg3PmHlevL38P06zOof3a4mmLmNuFfO2gAU=";
+    hash = "sha256-o+gg/XdsPotmuk+H62Bzu4zG9Zu2HABlr4S/YhbtCiI=";
     # Apparently upstream requires that the compiled executable will know the
     # commit hash and the date of the commit. This information is also presented
     # in the output of `pdfcpu version` which we use as a sanity check in the
@@ -33,12 +33,12 @@ buildGoModule (finalAttrs: {
     postFetch = ''
       cd "$out"
       git rev-parse HEAD > $out/COMMIT
-      git log -1 --pretty=%cd --date=format:'%Y-%m-%dT%H:%M:%SZ' > $out/SOURCE_DATE
+      git log -1 --pretty=%cd --date=format:'%Y-%m-%d %H:%M:%S UTC' > $out/SOURCE_DATE
       find "$out" -name .git -print0 | xargs -0 rm -rf
     '';
   };
 
-  vendorHash = "sha256-5+zHlHp/8Jp9TE87IUgJqQHDINNe7ah34jPW/n5ORz8=";
+  vendorHash = "sha256-yieD29GFQQrYVbYNwFHDQX9l0KOKu0usng1OPoaVBZ8=";
 
   ldflags = [
     "-s"