From 5dc3e871298560be9c1c84ab01fd7ae708ca6392 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 27 Jan 2026 12:14:57 +0100
Subject: [PATCH 1/2] python314Packages.appthreat-vulnerability-db: 6.5.1 ->
 6.6.0

Changelog: https://github.com/AppThreat/vulnerability-db/releases/tag/v6.6.0
---
 .../appthreat-vulnerability-db/default.nix    | 23 +++++++++++++++----
 1 file changed, 18 insertions(+), 5 deletions(-)

diff --git a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
index 04ed03667916..44b3486595fc 100644
--- a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
+++ b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
@@ -7,11 +7,13 @@
   fetchFromGitHub,
   httpx,
   msgpack,
+  oras,
   orjson,
   packageurl-python,
   pydantic,
-  pytestCheckHook,
   pytest-cov-stub,
+  pytestCheckHook,
+  pyyaml,
   rich,
   semver,
   setuptools,
@@ -21,14 +23,14 @@
 
 buildPythonPackage rec {
   pname = "appthreat-vulnerability-db";
-  version = "6.5.1";
+  version = "6.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "AppThreat";
     repo = "vulnerability-db";
     tag = "v${version}";
-    hash = "sha256-SyUTDWi9t37Gw8qn7vCpW+l5jBAXFH5b/VACrFhgsRU=";
+    hash = "sha256-/tcfHEvTdk0B/vfcqqkTn9kGT3QIPLWW4l01fjnrhqE=";
   };
 
   pythonRelaxDeps = [
@@ -51,13 +53,24 @@ buildPythonPackage rec {
     semver
     tabulate
   ]
-  ++ httpx.optional-dependencies.http2;
+  ++ httpx.optional-dependencies.http2
+  ++ pydantic.optional-dependencies.email;
+
+  optional-dependencies = {
+    all = [
+      oras
+      pyyaml
+    ];
+    custom = [ pyyaml ];
+    oras = [ oras ];
+  };
 
   nativeCheckInputs = [
     pytest-cov-stub
     pytestCheckHook
     writableTmpDirAsHomeHook
-  ];
+  ]
+  ++ lib.flatten (builtins.attrValues optional-dependencies);
 
   disabledTests = [
     # Tests require network access

From 1e962f742d463a4389f471d8526fc2736b0d9a13 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 27 Jan 2026 12:17:15 +0100
Subject: [PATCH 2/2] python314Packages.appthreat-vulnerability-db: migrate to
 finalAttrs

---
 .../appthreat-vulnerability-db/default.nix             | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
index 44b3486595fc..d2b16878798a 100644
--- a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
+++ b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix
@@ -21,7 +21,7 @@
   writableTmpDirAsHomeHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "appthreat-vulnerability-db";
   version = "6.6.0";
   pyproject = true;
@@ -29,7 +29,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "AppThreat";
     repo = "vulnerability-db";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-/tcfHEvTdk0B/vfcqqkTn9kGT3QIPLWW4l01fjnrhqE=";
   };
 
@@ -70,7 +70,7 @@ buildPythonPackage rec {
     pytestCheckHook
     writableTmpDirAsHomeHook
   ]
-  ++ lib.flatten (builtins.attrValues optional-dependencies);
+  ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);
 
   disabledTests = [
     # Tests require network access
@@ -84,9 +84,9 @@ buildPythonPackage rec {
   meta = {
     description = "Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm";
     homepage = "https://github.com/appthreat/vulnerability-db";
-    changelog = "https://github.com/AppThreat/vulnerability-db/releases/tag/${src.tag}";
+    changelog = "https://github.com/AppThreat/vulnerability-db/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "vdb";
   };
-}
+})