Running nixpkgs-update (https://github.com/NixOS/infra/blob/main/non-critical-infra/modules/nixpkgs-update/README.md) with UPDATE_INFO: cracklib 2.10.3 -> 2.10.4 https://github.com/cracklib/cracklib/releases
attrpath: cracklib
Checking auto update branch...
[version] 
[version] skipping because derivation has updateScript
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] Success
[updateScript] this derivation will be built:
  /nix/store/x56y5vhjjz5xgisc3f2822pxiazx8lm1-packages.json.drv
building '/nix/store/x56y5vhjjz5xgisc3f2822pxiazx8lm1-packages.json.drv'...

Going to be running update for following packages:
 - cracklib-2.10.3

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - cracklib-2.10.3: UPDATING ...
 - cracklib-2.10.3: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/by-name/cr/cracklib/package.nix b/pkgs/by-name/cr/cracklib/package.nix
index 9a1c37363f51..20c6e7e01951 100644
--- a/pkgs/by-name/cr/cracklib/package.nix
+++ b/pkgs/by-name/cr/cracklib/package.nix
@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cracklib";
-  version = "2.10.3";
+  version = "2.10.4-gpg";
 
   src = fetchFromGitHub {
     owner = "cracklib";
     repo = "cracklib";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ORpJje4TGw1STtvRiNEwUwSDbLXdS+WgXGlc1Wtf/gw=";
+    hash = "sha256-WGyO4X9Yj32MS0jGtASFfaMsMXeDAOPlER51wnmz61k=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/src";

No auto update branch exists
Old version 2.10.3" not present in staging derivation file with contents: {
  stdenv,
  lib,
  fetchFromGitHub,
  autoreconfHook,
  zlib,
  bash,
  buildPackages,
  nix-update-script,
  pkgsCross,
  pkgsStatic,
}:

stdenv.mkDerivation (finalAttrs: {
  pname = "cracklib";
  version = "2.10.4";

  src = fetchFromGitHub {
    owner = "cracklib";
    repo = "cracklib";
    tag = "v${finalAttrs.version}";
    hash = "sha256-d59/7LZfG9GvIYnqXEqInPnBn1x6calLEjwDkFbq96U=";
  };

  sourceRoot = "${finalAttrs.src.name}/src";

  outputs = [
    "bin"
    "out"
    "dev"
    "man"
  ];

  strictDeps = true;
  enableParallelBuilding = true;

  nativeBuildInputs = [
    autoreconfHook
  ]
  ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [ buildPackages.cracklib ];

  buildInputs = [
    zlib
    bash
  ];

  configureFlags = [
    "--without-python"
  ];

  postInstall =
    # For cross compilation use the tools from nativeBuildInputs. Otherwise use
    # the ones in the util directory of the source tree.
    lib.optionalString (stdenv.hostPlatform == stdenv.buildPlatform) ''
      PATH=$PATH:util
    ''
    + ''
      cracklib-format $out/share/cracklib/cracklib-small \
      | cracklib-packer $out/share/cracklib/pw_dict
    '';

  passthru = {
    updateScript = nix-update-script { };
    tests = {
      cross =
        let
          systemString = if stdenv.buildPlatform.isAarch64 then "gnu64" else "aarch64-multiplatform";
        in
        pkgsCross.${systemString}.cracklib;
      static = pkgsStatic.cracklib;
    };
  };

  __structuredAttrs = true;

  meta = {
    homepage = "https://github.com/cracklib/cracklib";
    description = "Password checking library";
    changelog = "https://github.com/cracklib/cracklib/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.lgpl21;
    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
})