Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: fastmail-desktop 0 -> 1
attrpath: fastmail-desktop
Checking auto update branch...
[version] 
[version] skipping because derivation has updateScript
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] Success
[updateScript] this derivation will be built:
  /nix/store/4y2waa85s938lhw2jzx66f5mlzr60b7m-packages.json.drv
building '/nix/store/4y2waa85s938lhw2jzx66f5mlzr60b7m-packages.json.drv'...

Going to be running update for following packages:
 - fastmail-desktop-1.1.0

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - fastmail-desktop-1.1.0: UPDATING ...
 - fastmail-desktop-1.1.0: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/by-name/fa/fastmail-desktop/sources.nix b/pkgs/by-name/fa/fastmail-desktop/sources.nix
index 8cd885bf99e0..4818a5203240 100644
--- a/pkgs/by-name/fa/fastmail-desktop/sources.nix
+++ b/pkgs/by-name/fa/fastmail-desktop/sources.nix
@@ -1,19 +1,19 @@
 # Generated by ./update.sh - do not update manually!
-# Last updated: 2026-02-26
+# Last updated: 2026-03-20
 { fetchurl, fetchzip }:
 {
   aarch64-darwin = {
-    version = "1.1.0";
+    version = "1.2.0";
     src = fetchurl {
-      url = "https://dl.fastmailcdn.com/desktop/production/mac/arm64/Fastmail-1.1.0-arm64-mac.zip";
-      hash = "sha512-z1iW4DnPKY3b1SnIvmgsA62unqMR8nLJpql0jbMuHxyAxWntAZZjpxY0GhmwmZl/WjaCn2SeXj0iYlTJTecZjQ==";
+      url = "https://dl.fastmailcdn.com/desktop/production/mac/arm64/Fastmail-1.2.0-arm64-mac.zip";
+      hash = "sha512-Go+RfybZohQQTPhBEFvpPhJGGHWvBE6Kin0Qu5bs6topnPBKxtTTy6ClNTNe+XmM74VO7hpc9bELUIBPNF2tyA==";
     };
   };
   x86_64-linux = {
-    version = "1.1.0";
+    version = "1.2.0";
     src = fetchurl {
-      url = "https://dl.fastmailcdn.com/desktop/production/linux/x64/Fastmail-1.1.0.AppImage";
-      hash = "sha512-lXvgZ61M1Ex7jJzFjfC9rYLodGojrbca/t4IOaQ7k/CDI4DyFRDkAGqkGioq7EwzbooS9zTO3fbdYmbOyODFTQ==";
+      url = "https://dl.fastmailcdn.com/desktop/production/linux/x64/com.fastmail.Fastmail-1.2.0.AppImage";
+      hash = "sha512-xdDTUNSaWtMPg7HwBAUmdNOuBwy9gyYoFKWiQM1SbGTBEf5MlxOWNwVSpFZLVRmwlc/vfmid80vsy7pmELcM3g==";
     };
   };
 }

An auto update branch exists with message `fastmail-desktop: 1.0.7 -> 1.0.8`. New version is 1.2.0.
The auto update branch does not match or exceed the new version.
Received ExitFailure 1 when running
Raw command: nix-build --option sandbox true --arg config "{ allowUnfree = true; allowAliases = false; }" --arg overlays "[ ]" -A fastmail-desktop
Received ExitFailure 1 when running
Raw command: nix --extra-experimental-features nix-command log -f . fastmail-desktop --arg config "{ allowUnfree = true; allowAliases = false; }" --arg overlays "[ ]"
Standard output:

error:
       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:37:12:
           36|
           37|   strict = derivationStrict drvAttrs;
             |            ^
           38|

       … while evaluating derivation 'fastmail-desktop-1.2.0'
         whose name attribute is located at /var/cache/nixpkgs-update/worker/worktree/fastmail-desktop/pkgs/stdenv/generic/make-derivation.nix:536:13

       … while evaluating attribute 'installPhase' of derivation 'fastmail-desktop-1.2.0'
         at /var/cache/nixpkgs-update/worker/worktree/fastmail-desktop/pkgs/by-name/fa/fastmail-desktop/linux.nix:50:3:
           49|
           50|   installPhase = ''
             |   ^
           51|     runHook preInstall

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: Refusing to evaluate package 'electron-38.8.4' in /var/cache/nixpkgs-update/worker/worktree/fastmail-desktop/pkgs/development/tools/electron/binary/generic.nix:50 because it is marked as insecure

       Known issues:
        - Electron version 38.8.4 is EOL

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘electron-38.8.4’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "electron-38.8.4"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘electron-38.8.4’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "electron-38.8.4"
              ];
            }