Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: checkpolicy 3.8.1 -> 3.9 https://github.com/SELinuxProject/selinux/releases
attrpath: checkpolicy
Checking auto update branch...
No auto update branch exists
[version] 
[version] updated version and sha256
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] skipping because derivation has no updateScript
Diff after rewrites:
diff --git a/pkgs/by-name/ch/checkpolicy/package.nix b/pkgs/by-name/ch/checkpolicy/package.nix
index 326c37f8fb82..8bcfa2794585 100644
--- a/pkgs/by-name/ch/checkpolicy/package.nix
+++ b/pkgs/by-name/ch/checkpolicy/package.nix
@@ -9,12 +9,12 @@
 
 stdenv.mkDerivation rec {
   pname = "checkpolicy";
-  version = "3.8.1";
+  version = "3.9";
   inherit (libsepol) se_url;
 
   src = fetchurl {
     url = "${se_url}/${version}/checkpolicy-${version}.tar.gz";
-    sha256 = "sha256-e0d8UW4mk9i2xRE4YyMXfx19tRwuBOttDejKKzYSDl0=";
+    sha256 = "sha256-3YWwFzym6Wsi6/RyvLzPBOsQ4aoHrdjxt+Dp6OmV4Cc=";
   };
 
   nativeBuildInputs = [

Received ExitFailure 1 when running
Raw command: nix-build --option sandbox true --arg config "{ allowUnfree = true; allowAliases = false; }" --arg overlays "[ ]" -A checkpolicy
nix build failed.
setting SOURCE_DATE_EPOCH to timestamp 1752663313 of file "checkpolicy-3.9/tests/test_roundtrip.sh"
Running phase: patchPhase
@nix { "action": "setPhase", "phase": "patchPhase" }
Running phase: updateAutotoolsGnuConfigScriptsPhase
@nix { "action": "setPhase", "phase": "updateAutotoolsGnuConfigScriptsPhase" }
Running phase: configurePhase
@nix { "action": "setPhase", "phase": "configurePhase" }
no configure script, doing nothing
Running phase: buildPhase
@nix { "action": "setPhase", "phase": "buildPhase" }
build flags: SHELL=/nix/store/lw117lsr8d585xs63kx5k233impyrq7q-bash-5.3p3/bin/bash PREFIX=\$\(out\) LIBSEPOLA=/nix/store/nq0z749xdz4dw4bkqz4nc0j7fl47wcg5-libsepol-3.8.1/lib/libsepol.a
bison -y -d policy_parse.y
gcc -g -Wall -Wshadow -O2 -fno-strict-aliasing -o y.tab.o -c y.tab.c
flex policy_scan.l
gcc -g -Wall -Wshadow -O2 -fno-strict-aliasing -o lex.yy.o -c lex.yy.c
gcc  -g -Wall -Werror -Wshadow -O2 -fno-strict-aliasing -o queue.o -c queue.c
gcc  -g -Wall -Werror -Wshadow -O2 -fno-strict-aliasing -o module_compiler.o -c module_compiler.c
gcc  -g -Wall -Werror -Wshadow -O2 -fno-strict-aliasing -o parse_util.o -c parse_util.c
gcc  -g -Wall -Werror -Wshadow -O2 -fno-strict-aliasing -o policy_define.o -c policy_define.c
policy_define.c: In function 'define_neveraudit':
policy_define.c:296:21: error: 'TYPE_FLAGS_NEVERAUDIT' undeclared (first use in this function)
  296 |         t->flags |= TYPE_FLAGS_NEVERAUDIT;
      |                     ^~~~~~~~~~~~~~~~~~~~~
policy_define.c:296:21: note: each undeclared identifier is reported only once for each function it appears in
policy_define.c: In function 'define_genfs_context_helper':
policy_define.c:6013:64: error: 'POLICYDB_CAP_GENFS_SECLABEL_WILDCARD' undeclared (first use in this function); did you mean 'POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS'?
 6013 |         int wildcard = ebitmap_get_bit(&policydbp->policycaps, POLICYDB_CAP_GENFS_SECLABEL_WILDCARD);
      |                                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                                                                POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS
make: *** [Makefile:39: policy_define.o] Error 1