anchor.diff:    # **please** update this patch when you update to a new openssh release.
     gssapiPatch = fetchpatch {
       name = "openssh-gssapi.patch";
  -    url = "https://salsa.debian.org/ssh-team/openssh/raw/debian/1%258.1p1-2/debian/patches/gssapi.patch";
  -    sha256 = "0zfxx46a5lpjp317z354yyswa2wvmb1pp5p0nxsbhsrzw94jvxsj";
  +    url = "https://salsa.debian.org/ssh-team/openssh/raw/debian/1%258.2p1-1/debian/patches/gssapi.patch";
  +    sha256 = "081gryqkfr5zr4f5m4v0piq1sxz06sb38z5lqxccgpivql7pa8d8";
     };
   
   in
   with stdenv.lib;
   stdenv.mkDerivation rec {
     pname = "openssh";
  -  version = if hpnSupport then "7.8p1" else "8.1p1";
  +  version = if hpnSupport then "7.8p1" else "8.2p1";
   
     src = if hpnSupport then
         fetchurl {
  
positive.code: 
    nativeBuildInputs = [ pkgconfig ] ++ optional (hpnSupport || withGssapiPatches) autoreconfHook;
    buildInputs = [ zlib openssl libedit pam ]
      ++ optional withKerberos kerberos;
  
    preConfigure = ''
  
negative.code: , withKerberos ? true
  , withGssapiPatches ? false
  , kerberos
  , libfido2
  , withFIDO ? stdenv.hostPlatform.isUnix
  , linkOpenssl? true
  }:
  
  