{ depotdownloader }:
depotdownloader.overrideAttrs({ patches ? [], version, ... }: {
  patches = assert builtins.elem version [ "2.4.7" "2.5.0" ]; patches ++ [
    # with this, nix has access to the hashes in the manifest
    ./0001-emit-json-in-.DepotDownload.patch
    # the manifest can arrive out of order across requests to the same build!
    # luckily that singular reproducibility snag is patched in 1 line.
    ./0002-ProtoManifest-sort-files-in-constructor.patch
  ];
})