Running phase: unpackPhase
unpacking source archive /nix/store/ql57baf0ka6kg471db0a7yjp8299k2hr-source
source root is source
Running phase: patchPhase
Executing npmConfigHook
Configuring npm
Validating consistency between /build/source/package-lock.json and /nix/store/3w95l1cnb2ngpc5712bynjd6j03vn578-container-release-action-0.0.0-npm-deps/package-lock.json
19c19
<         "eslint": "10.9.1",
---
>         "eslint": "10.9.0",
1327,1329c1327,1329
<       "version": "10.9.1",
<       "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.9.1.tgz",
<       "integrity": "sha512-9VaAkDURekixUQJy0oJYl2DcN6oKMfxay7XzaGYAWQwsb6qfKf+x76R2k1L8kb1boc+FyCAaTA9GmiKaaiaF+A==",
---
>       "version": "10.9.0",
>       "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.9.0.tgz",
>       "integrity": "sha512-5KeEOJZBfEVA47boFiBsf+6MmmJpffM7qEBg4pLla2e4nlKgdKlqCW0oSLOGsT8Wl5uCGJptLV1bkaiShj90Gw==",

ERROR: npmDepsHash is out of date

The package-lock.json in src is not the same as the in /nix/store/3w95l1cnb2ngpc5712bynjd6j03vn578-container-release-action-0.0.0-npm-deps.

To fix the issue:
1. Use `lib.fakeHash` as the npmDepsHash value
2. Build the derivation and wait for it to fail with a hash mismatch
3. Copy the 'got: sha256-' value back into the npmDepsHash field