Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: apko 1.2.30 -> 1.2.35 https://github.com/chainguard-dev/apko/releases
attrpath: apko
Checking auto update branch...
No auto update branch exists
[version] 
[version] generic version rewriter does not support multiple hashes
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Found old vendorHash = "sha256-HZrL3K1gbg5fXp0yrfXxgZ780qTGJJ2bpZ7Y//EhOqo="
[golangModuleVersion] Replaced vendorHash with sha256-sPLqpe7oKN30igq4OQAIh13vohuhnDoijCM0q3nHIZ0=
[golangModuleVersion] Finished updating vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] skipping because derivation has no updateScript
Diff after rewrites:
diff --git a/pkgs/by-name/ap/apko/package.nix b/pkgs/by-name/ap/apko/package.nix
index 611491298716..a1269cb68133 100644
--- a/pkgs/by-name/ap/apko/package.nix
+++ b/pkgs/by-name/ap/apko/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "apko";
-  version = "1.2.30";
+  version = "1.2.35";
 
   src = fetchFromGitHub {
     owner = "chainguard-dev";
     repo = "apko";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-uNUzlPuk2HD7O4ENnQ01u9h2U0PbP3a4XiYYvVuksqo=";
+    hash = "sha256-A2rzKNIhcfsFFMU0My6Ak++T1D5WGBrdK4SW1XQoCyw=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
       find "$out" -name .git -print0 | xargs -0 rm -rf
     '';
   };
-  vendorHash = "sha256-HZrL3K1gbg5fXp0yrfXxgZ780qTGJJ2bpZ7Y//EhOqo=";
+  vendorHash = "sha256-sPLqpe7oKN30igq4OQAIh13vohuhnDoijCM0q3nHIZ0=";
 
   excludedPackages = [
     "internal/gen-jsonschema"

Successfully finished processing
[check][nixpkgs-review]
## `nixpkgs-review` result

Generated using [`nixpkgs-review`](https://github.com/Mic92/nixpkgs-review).

Command: `nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'`
Commit: `ad6fe71504ff652bd8b52839de83575d15a02c29`

---
### `x86_64-linux`
<details>
  <summary>:white_check_mark: 2 packages built:</summary>
  <ul>
    <li>apko</li>
    <li>tests.config-nix-unit</li>
  </ul>
</details>


Automatic update generated by [nixpkgs-update](https://github.com/nix-community/nixpkgs-update) tools. This update was made based on information from https://github.com/chainguard-dev/apko/releases.

meta.description for apko is: Build OCI images using APK directly without Dockerfile

meta.homepage for apko is: https://apko.dev/

meta.changelog for apko is: https://github.com/chainguard-dev/apko/releases/tag/v1.2.35


###### Updates performed
- Golang update

###### To inspect upstream changes





###### Impact

<b>Checks done</b>

---

- built on NixOS
- The tests defined in `passthru.tests`, if any, passed
- found 1.2.35 with grep in /nix/store/20fcz7bf8ff1rh5y6f1iqfjiq3baf3kd-apko-1.2.35
- found 1.2.35 in filename of file in /nix/store/20fcz7bf8ff1rh5y6f1iqfjiq3baf3kd-apko-1.2.35

---

<details>
<summary>
<b>Rebuild report</b> (if merged into master) (click to expand)
</summary>

```
9 total rebuild path(s)

3 package rebuild(s)

First fifty rebuilds by attrpath

apko
tests.config-nix-unit
```

</details>

<details>
<summary>
<b>Instructions to test this update</b> (click to expand)
</summary>

---

Either **download from the cache**:
```
nix-store -r /nix/store/20fcz7bf8ff1rh5y6f1iqfjiq3baf3kd-apko-1.2.35 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '
```
(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the `trusted-users` list or you can use `sudo` since root is effectively trusted.

Or, **build yourself**:
```
nix-build -A apko https://github.com/r-ryantm/nixpkgs/archive/ad6fe71504ff652bd8b52839de83575d15a02c29.tar.gz
```
Or:
```
nix build github:r-ryantm/nixpkgs/ad6fe71504ff652bd8b52839de83575d15a02c29#apko
```

After you've downloaded or built it, look at the files and if there are any, run the binaries:
```
ls -la /nix/store/20fcz7bf8ff1rh5y6f1iqfjiq3baf3kd-apko-1.2.35
ls -la /nix/store/20fcz7bf8ff1rh5y6f1iqfjiq3baf3kd-apko-1.2.35/bin
```

---

</details>
<br/>



### Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as _failed to build_ independent of the
change, simply because they are already broken on the target branch.

## `nixpkgs-review` result

Generated using [`nixpkgs-review`](https://github.com/Mic92/nixpkgs-review).

Command: `nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'`
Commit: `ad6fe71504ff652bd8b52839de83575d15a02c29`

---
### `x86_64-linux`
<details>
  <summary>:white_check_mark: 2 packages built:</summary>
  <ul>
    <li>apko</li>
    <li>tests.config-nix-unit</li>
  </ul>
</details>

---

###### Maintainer pings

cc @06kellyjac @developer-guy for [testing](https://github.com/nix-community/nixpkgs-update/blob/main/doc/nixpkgs-maintainer-faq.md#r-ryantm-opened-a-pr-for-my-package-what-do-i-do).

> [!TIP]
> As a maintainer, if your package is located under `pkgs/by-name/*`, you can comment **`@NixOS/nixpkgs-merge-bot merge`** to automatically merge this update using the [`nixpkgs-merge-bot`](https://github.com/NixOS/nixpkgs/blob/master/ci/README.md#nixpkgs-merge-bot).
https://api.github.com/repos/NixOS/nixpkgs/pulls/550951