shisho: drop

- `opensmtpd-filter-dkimsign` is now installed into `libexec/smtpd` instead of `libexec/opensmtpd` so that now it is properly linked into the environment built by `services.opensmtpd.procPackages`. If you hardcoded path to `filter-dkimsign` please consider using this option.

- `shisho` has been removed because it's archived. `semgrep`, `opengrep`, and `ast-grep` provide similar functionality.

- `services.openssh.settings.AcceptEnv` now explicitly defined as an option that takes a list of strings, to facilitate option merging. Setting it to a string value is no longer supported.

- All Xfce packages have been moved to top level (e.g. if you previously added `pkgs.xfce.xfce4-whiskermenu-plugin` to `environment.systemPackages`, you will need to change it to `pkgs.xfce4-whiskermenu-plugin`). The `xfce` scope will be removed in NixOS 26.11.

{

  lib,

  fetchFromGitHub,

  rustPlatform,

  installShellFiles,

  rustfmt,

  stdenv,

}:

rustPlatform.buildRustPackage (finalAttrs: {

  pname = "shisho";

  version = "0.5.2";

  src = fetchFromGitHub {

    owner = "flatt-security";

    repo = "shisho";

    tag = "v${finalAttrs.version}";

    hash = "sha256-G7sHaDq+F5lXNaF1sSLUecdjZbCejJE79P4AQifKdFY=";

    fetchSubmodules = true;

  };

  cargoHash = "sha256-gv3qvDzqwuuAVpbaOpMI7DuapSALMr/qzyhor3avYQI=";

  nativeBuildInputs = [

    installShellFiles

    # required to build serde-sarif dependency

    rustfmt

  ];

  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''

    installShellCompletion --cmd shisho \

      --bash <($out/bin/shisho completion bash) \

      --fish <($out/bin/shisho completion fish) \

      --zsh <($out/bin/shisho completion zsh)

  '';

  doInstallCheck = true;

  installCheckPhase = ''

    runHook preInstallCheck

    $out/bin/shisho --help

    $out/bin/shisho --version | grep "${finalAttrs.version}"

    runHook postInstallCheck

  '';

  meta = {

    homepage = "https://docs.shisho.dev/shisho/";

    changelog = "https://docs.shisho.dev/changelog/";

    description = "Lightweight static analyzer for several programming languages";

    mainProgram = "shisho";

    longDescription = ''

      Shisho is a lightweight static code analyzer designed for developers and

      is the core engine for Shisho products. It is, so to speak, like a

      pluggable and configurable linter; it gives developers a way to codify

      your domain knowledge over your code as rules. With powerful automation

      and integration capabilities, the rules will help you find and fix issues

      semiautomatically.

    '';

    license = lib.licenses.agpl3Only;

    maintainers = with lib.maintainers; [ jk ];

  };

})

  shades-of-gray-theme = throw "'shades-of-gray-theme' has been removed because upstream is a 404"; # Added 2025-12-20

  shared_desktop_ontologies = throw "'shared_desktop_ontologies' has been removed as it had been abandoned upstream"; # Added 2025-11-09

  shipyard = throw "'shipyard' has been renamed to/replaced by 'jumppad'"; # Converted to throw 2025-10-27

  shisho = throw "'shisho' has been removed, as it is archived upstream. Consider using 'semgrep', 'opengrep', or 'ast-grep' instead"; # Added 2026-04-28

  sic-image-cli = warnAlias "'sic-image-cli' has been renamed to 'imagineer'" imagineer; # Added 2026-03-29

  siduck76-st = throw "'siduck76-st' has been renamed to/replaced by 'st-snazzy'"; # Converted to throw 2025-10-27

  sierra-breeze-enhanced = throw "'sierra-breeze-enhanced' has been removed, as it is only compatible with Plasma 5, which is EOL"; # Added 2025-08-20