From 18406b99641936d7269b8870bc11561440575dae Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 14 Apr 2026 01:06:47 +0200
Subject: [PATCH 1/3] govulncheck: 1.1.4 -> 1.2.0

Diff: https://github.com/golang/vuln/compare/v1.1.4...v1.2.0

Changelog: https://github.com/golang/vuln/releases/tag/v1.2.0
---
 pkgs/by-name/go/govulncheck/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/go/govulncheck/package.nix b/pkgs/by-name/go/govulncheck/package.nix
index a6d2d6e8f365..665a9508cdee 100644
--- a/pkgs/by-name/go/govulncheck/package.nix
+++ b/pkgs/by-name/go/govulncheck/package.nix
@@ -7,13 +7,13 @@
 
 buildGoLatestModule rec {
   pname = "govulncheck";
-  version = "1.1.4";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "vuln";
     tag = "v${version}";
-    hash = "sha256-d1JWh/K+65p0TP5vAQbSyoatjN4L5nm3VEA+qBSrkAA=";
+    hash = "sha256-15DTxzlK7mkUt7KCwsV5+E5dPopCwFylI0fmVB0LDEo=";
   };
 
   patches = [
@@ -23,7 +23,7 @@ buildGoLatestModule rec {
     })
   ];
 
-  vendorHash = "sha256-MSTKDeWVxD2Fa6fNoku4EwFwC90XZ5acnM67crcgXDg=";
+  vendorHash = "sha256-+hJtGG9GGDb3D9Cgm7hreySjOlXXsc7HxHcoS2Cxfbs=";
 
   subPackages = [
     "cmd/govulncheck"

From df9fea8789230d754d49af48635b82fed5041333 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 14 Apr 2026 01:08:42 +0200
Subject: [PATCH 2/3] govulncheck: migrate to finalAttrs

---
 pkgs/by-name/go/govulncheck/package.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/go/govulncheck/package.nix b/pkgs/by-name/go/govulncheck/package.nix
index 665a9508cdee..cedb1ce863c0 100644
--- a/pkgs/by-name/go/govulncheck/package.nix
+++ b/pkgs/by-name/go/govulncheck/package.nix
@@ -5,21 +5,21 @@
   replaceVars,
 }:
 
-buildGoLatestModule rec {
+buildGoLatestModule (finalAttrs: {
   pname = "govulncheck";
   version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "vuln";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-15DTxzlK7mkUt7KCwsV5+E5dPopCwFylI0fmVB0LDEo=";
   };
 
   patches = [
     # patch in version information
     (replaceVars ./version.patch {
-      inherit version;
+      inherit (finalAttrs) version;
     })
   ];
 
@@ -40,7 +40,7 @@ buildGoLatestModule rec {
   meta = {
     homepage = "https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck";
     downloadPage = "https://github.com/golang/vuln";
-    changelog = "https://github.com/golang/vuln/releases/tag/v${version}";
+    changelog = "https://github.com/golang/vuln/releases/tag/${finalAttrs.src.tag}";
     description = "Database client and tools for the Go vulnerability database, also known as vuln";
     mainProgram = "govulncheck";
     longDescription = ''
@@ -64,10 +64,10 @@ buildGoLatestModule rec {
       example, a dependency with a Windows-specific vulnerability will not be
       reported for a Linux build.
     '';
-    license = with lib.licenses; [ bsd3 ];
+    license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [
       jk
       SuperSandro2000
     ];
   };
-}
+})

From 42ff802fee26f31bda6bb665496d2d593607af1c Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 14 Apr 2026 01:10:09 +0200
Subject: [PATCH 3/3] govulncheck: add versionCheckHook

---
 pkgs/by-name/go/govulncheck/package.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkgs/by-name/go/govulncheck/package.nix b/pkgs/by-name/go/govulncheck/package.nix
index cedb1ce863c0..15d6a566b196 100644
--- a/pkgs/by-name/go/govulncheck/package.nix
+++ b/pkgs/by-name/go/govulncheck/package.nix
@@ -3,6 +3,7 @@
   buildGoLatestModule,
   fetchFromGitHub,
   replaceVars,
+  versionCheckHook,
 }:
 
 buildGoLatestModule (finalAttrs: {
@@ -37,6 +38,12 @@ buildGoLatestModule (finalAttrs: {
     "-w"
   ];
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  versionCheckProgramArg = [ "--version" ];
+
   meta = {
     homepage = "https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck";
     downloadPage = "https://github.com/golang/vuln";