anchor.diff:  , libsecret
   , file
   , gtk3
  +, libnma
  +, libnma-gtk4
  +, gtk4
   , withGnome ? true
   , gnome
   , kmod
  -, fetchpatch
   }:
   
  -let
  +stdenv.mkDerivation rec {
     pname = "NetworkManager-openconnect";
  -  version = "1.2.6";
  -in stdenv.mkDerivation {
  -  name = "${pname}${if withGnome then "-gnome" else ""}-${version}";
  +  version = "1.2.8";
   
     src = fetchurl {
  -    url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
  -    sha256 = "0nlp290nkawc4wqm978n4vhzg3xdqi8kpjjx19l855vab41rh44m";
  +    url = "mirror://gnome/sources/NetworkManager-openconnect/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
  +    sha256 = "Xe2qeF2C2OI53dCCv6xSUMaR6WRGS+GAe2gnJjYzzcw=";
     };
   
     patches = [
       (substituteAll {
         src = ./fix-paths.patch;
         inherit kmod openconnect;
  -    })
  -
  -    # Don't use etc/dbus-1/system.d
  -    (fetchpatch {
  -      url = "https://gitlab.gnome.org/GNOME/NetworkManager-openconnect/merge_requests/9.patch";
  -      sha256 = "0yd2dmq6gq6y4czr7dqdgaiqvw2vyv2gikznpfdxyfn2v1pcrk9m";
       })
     ];
   
  
positive.code:     networkmanager
    ] ++ lib.optionals withGnome [
      gtk3
      gcr
      libsecret
    ];
  
negative.code: 
    configureFlags = [
      "--with-gnome=${if withGnome then "yes" else "no"}"
      "--with-gtk4=${if withGnome then "yes" else "no"}"
      "--enable-absolute-paths"
    ];
  
    passthru = {
  