anchor.diff:  # Those pieces of software we entirely ignore upstream's handling of, and just
   # make sure they're in the path if desired.
   let
  -  k3sVersion = "1.18.2+k3s1";     # k3s git tag
  +  k3sVersion = "1.18.8+k3s1";     # k3s git tag
     traefikChartVersion = "1.81.0"; # taken from ./scripts/download at the above k3s tag
  -  k3sRootVersion = "0.3.0";       # taken from .s/cripts/download at the above k3s tag
  +  k3sRootVersion = "0.4.1";       # taken from ./scripts/download at the above k3s tag
  +  k3sCNIVersion = "0.8.6-k3s1";   # taken from ./scripts/version.sh at the above k3s tag
     # bundled into the k3s binary
     traefikChart = fetchurl {
       url = "https://kubernetes-charts.storage.googleapis.com/traefik-${traefikChartVersion}.tgz";
  
positive.code:       owner = "rancher";
        repo = "plugins";
        rev = "v${version}";
        sha256 = "0ax72z1ziann352bp6khfds8vlf3bbkqckrkpx4l4jxgqks45izs";
      };
  
      meta = {
  
negative.code:     url = "https://github.com/rancher/k3s";
      rev = "v${k3sVersion}";
      leaveDotGit = true; # ./scripts/version.sh depends on git
      sha256 = "17qsvbj1lvgxqdkxayyqnjwsjs3cx06nfv2hqvixjszn4vf30qlg";
    };
    # Stage 1 of the k3s build:
    # Let's talk about how k3s is structured.
  