Running phase: unpackPhase unpacking source archive /nix/store/4p5m5q9m3x234ska0gdzkspd5wiv9j1y-source source root is source Running phase: patchPhase Executing npmConfigHook Configuring npm Validating consistency between /build/source/package-lock.json and /nix/store/8f1kr8n5jbm8grj34d9gr6rvnyj6nvjv-container-release-action-0.0.0-npm-deps/package-lock.json 19c19 < "eslint": "10.9.0", --- > "eslint": "10.8.1", 1327,1329c1327,1329 < "version": "10.9.0", < "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.9.0.tgz", < "integrity": "sha512-5KeEOJZBfEVA47boFiBsf+6MmmJpffM7qEBg4pLla2e4nlKgdKlqCW0oSLOGsT8Wl5uCGJptLV1bkaiShj90Gw==", --- > "version": "10.8.1", > "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.8.1.tgz", > "integrity": "sha512-wqA7W2jbsC/BnV9Iv1UZpKVFkO1AdNoSmYW8NWG4HNOBbkAMvIqDZ27pI2f07dqn583NcIC44ckjAcOXDL1QbQ==", ERROR: npmDepsHash is out of date The package-lock.json in src is not the same as the in /nix/store/8f1kr8n5jbm8grj34d9gr6rvnyj6nvjv-container-release-action-0.0.0-npm-deps. To fix the issue: 1. Use `lib.fakeHash` as the npmDepsHash value 2. Build the derivation and wait for it to fail with a hash mismatch 3. Copy the 'got: sha256-' value back into the npmDepsHash field