The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
- use wrapGAppsHook - use patchShebangs - move freezegun to checkInputs - libsoup_3 is needed now - gnome-keyring was replaced with libsecret