anchor.diff:  with stdenv.lib;
   
   let
  -  # There is some fairly brittle string substitutions going on to replace paths,
  -  # so please verify this script in case you are upgrading it
  +  # Check if the script needs to have other binaries wrapped when changing this.
     update-resolved = fetchurl {
  -    url = "https://raw.githubusercontent.com/jonathanio/update-systemd-resolved/v1.2.7/update-systemd-resolved";
  -    sha256 = "12zfzh42apwbj7ks5kfxf3far7kaghlby4yapbhn00q8pbdlw7pq";
  +    url = "https://raw.githubusercontent.com/jonathanio/update-systemd-resolved/v1.3.0/update-systemd-resolved";
  +    sha256 = "021qzv1k0zxgv1rmyfpqj3zlzqr28xa7zff1n7vrbjk36ijylpsc";
     };
   
   in stdenv.mkDerivation rec {
  
positive.code: { stdenv, fetchurl, fetchpatch, pkgconfig
  , iproute, lzo, openssl, pam
  , useSystemd ? stdenv.isLinux, systemd ? null, utillinux ? null
  , pkcs11Support ? false, pkcs11helper ? null,
  
negative.code:     sha256 = "1qpbllwlha7cffsd5dlddb8rl22g9rar5zflkz1wrcllhvfkl7v4";
    };
  
    nativeBuildInputs = [ makeWrapper pkgconfig ];
  
    buildInputs = [ lzo openssl ]
                    ++ optionals stdenv.isLinux [ pam iproute ]
  