anchor.diff:      "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"
     ];
   
  -  version = "2.2.11";
  +  version = "2.2.12";
   in
   stdenv.mkDerivation rec {
     name = "gnupg-${version}";
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "2.2.11";
        sha256 = "496c3e123ef53f35436ddccca58e82acaa901ca4e21174e77386c0cea0c49cd9";
        fullOpts = {
          pgpsigUrl = map (n: "${n}.sig") urls;
          pgpKeyFingerprints = [
  
negative.code:   src = fetchurl {
      urls = tarballUrls version;
      hashOutput = false;
      sha256 = "db030f8b4c98640e91300d36d516f1f4f8fe09514a94ea9fc7411ee1a34082cb";
    };
  
    nativeBuildInputs = [
  