fetchpatch: [
  # linuxKernel.kernels.linux_rpi4: 5.15.32 -> 5.15.74
  (fetchpatch {
    url = "https://github.com/NixOS/nixpkgs/pull/199908.diff";
    sha256 = "sha256-XlyRTYwrxYa0S0qQ4R816wjPbNII2CmFQtrd3yzep9Y=";
  })
  # element-web: add wrapper  (faster rebuilds)
  (fetchpatch {
    url = "https://github.com/NixOS/nixpkgs/pull/196885.diff";
    sha256 = "sha256-uLnRYtm2Hhyaky84hrH+7233xV3+JM5jKBbPKF4QtoQ=";
  })
  # phosh-mobile-settings: init at 0.21.1
  (fetchpatch {
    url = "https://git.uninsane.org/colin/nixpkgs/commit/0c1a7e8504291eb0076bbee3f8ebf693f4641112.diff";
    # url = "https://github.com/NixOS/nixpkgs/pull/193845.diff";
    sha256 = "sha256-OczjlQcG7sTM/V9Y9VL/qdwaWPKfjAJsh3czqqhRQig=";
  })

  # librewolf: build with `MOZ_REQUIRE_SIGNING=false`
  (fetchpatch {
    url = "https://github.com/NixOS/nixpkgs/pull/199134.diff";
    # url = "https://git.uninsane.org/colin/nixpkgs/commit/99b82e07fee4d194520d6e8d51bc45c80a4d3c7e.diff";
    sha256 = "sha256-FOAZYaMpSPMYwU26xYD+V/f+df0JjlbuVtqjlcBFW5Q=";
  })

  # lightdm-mobile-greeter: init at 2022-10-30
  (fetchpatch {
    # url = "https://git.uninsane.org/colin/nixpkgs/commit/0a9018c8879d8fe871ee03bc386f8d148e4f88b8.diff";
    url = "https://github.com/NixOS/nixpkgs/pull/199154.diff";
    sha256 = "sha256-+U0AlipPzKx0NcxWu0smLsoPCRqp8KVCsSdUD4R+O64=";
  })

  # # lightdm-mobile-greeter: init at 2022-10-30
  # (fetchpatch {
  #   url = "https://git.uninsane.org/colin/nixpkgs/commit/0a9018c8879d8fe871ee>
  #   sha256 = "sha256-h1+K8UO4+G6yvl6JFd8xBGitPgOCIY7BunW49eGkXQQ=";
  # })
  # # lightdm: add `greeters.mobile` config option
  # (fetchpatch {
  #   url = "https://git.uninsane.org/colin/nixpkgs/commit/1144d6cfe976e7bcfb96>
  #   sha256 = "sha256-ZEvLPqrkpr79yXrsBxgxELR2Awtqk3675jkYZqx2AfY=";
  #   # url = "https://git.uninsane.org/colin/nixpkgs/commit/0a9018c8879d8fe871>
  #   url = "https://github.com/NixOS/nixpkgs/pull/199154.diff";
  #   sha256 = "sha256-zvWwQ+JUt0k4HickBSULIP0n4BG0NuYuD7gHSn859/U=";
  # })

  # # kaiteki: init at 2022-09-03
  # vendorHash changes too frequently (might not be reproducible).
  # using local package defn until stabilized
  # (fetchpatch {
  #   url = "https://git.uninsane.org/colin/nixpkgs/commit/e2c7f5f4870fcb0e5405e9001b39a64c516852d4.diff";
  #   # url = "https://github.com/NixOS/nixpkgs/pull/193169.diff";
  #   sha256 = "sha256-UWnfS+stVpUZ3Sfaym9XtVBlwvHWJVMaW7cYIcf3M5Q=";
  # })


  # Fix mk flutter app
  # closed (not merged). updates fluffychat 1.2.0 -> 1.6.1, but unstable hashing
  # (fetchpatch {
  #   url = "https://github.com/NixOS/nixpkgs/pull/186839.diff";
  #   sha256 = "sha256-NdIfie+eTy4V1vgqiiRPtWdnxZ5ZHsvCMfkEDUv9SC8=";
  # })

  # for raspberry pi: allow building u-boot for rpi 4{,00}
  # TODO: remove after upstreamed: https://github.com/NixOS/nixpkgs/pull/176018
  #   (it's a dupe of https://github.com/NixOS/nixpkgs/pull/112677 )
  ./02-rpi4-uboot.patch

  # TODO: upstream
  # maybe convert this patch to add a `targetUrlExpr` instead of doing the `escapeShellArgs` hack
  ./07-duplicity-rich-url.patch

  # enable aarch64 support for flutter's dart package
  # ./10-flutter-arm64.patch
]