anchor.diff:    src = fetchurl {
       urls = tarballUrls major minor;
       hashOutput = false;
  -    sha256 = "073eced3acef49a3883e69ffd5f0f0b5f46e2760ad86eddc6c0866df4e7abb35";
  +    sha256 = "bb9acab8af2ac430edf45faaaa4ed2c51f86e57cb57689be6701aceef4732ca7";
     };
   
     configureFlags = [
  
positive.code:     # Gnupg depends on this so we have to decouple this fetch from the rest of the build.
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "3.6" "5";
        inherit (src)
          outputHashAlgo;
        fullOpts = {
          pgpsigUrls = map (n: "${n}.sig") urls;
          pgpKeyFingerprint = "1F42 4189 05D8 206A A754  CCDC 29EE 58B9 9686 5171";
        };
        outputHash = "073eced3acef49a3883e69ffd5f0f0b5f46e2760ad86eddc6c0866df4e7abb35";
      };
    };
  
  
negative.code:   ];
  
    major = "3.6";
    minor = "6";
    version = "${major}.${minor}";
  in
  stdenv.mkDerivation rec {
  