cargo-semver-checks: Permission denied to .cargo-lock during rebuild on aarch64-darwin

[sukhmel]

Nixpkgs version

• Stable (25.05)

Describe the bug

I'm using nix-darwin to manage packages, unstable is chosen channel, but cargo-semver-checks is overridden to be from 25.05:

self: super: let
  nixpkgs-25-05 = import (builtins.fetchTarball {
    url = https://github.com/nixos/nixpkgs/tarball/e466a0c403d69b1413cc9f079da9dfded569205e;
    sha256 = "0ywqrf002rby134vm5sjk6cmwwyl0cc485glj2lg6r65xppxiqvc";
  }) { system = super.system; };
in
{
  cargo-semver-checks = nixpkgs-25-05.cargo-semver-checks;
}

During rebuild I get the following error: failed to open: /tmp/test_crates/debug/.cargo-lock

This happens both with sandbox enabled and disabled, I also think, this error appeared quite some time ago, but can't be sure as to when has it started.

Current generation cargo-semver-checks is 0.39.0, the one that fails to build is 0.41.0

Steps to reproduce

nix build github:NixOS/nixpkgs/nixos-25.05#cargo-semver-checks

And this is the longer way, that I used to reproduce the error originally, I think it is equivalent?:

# flake.nix
{
  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05";
  outputs = { self, nixpkgs }: {
    cargo-semver-checks = (import nixpkgs {}).cargo-semver-checks;
  };
}
# then run 
# 
#   nix flake info; nix repl
#  :lf .
#  :b outputs.cargo-semver-checks

Expected behaviour

cargo-semver-checks builds without failure

Screenshots

No response

Relevant log output

       >       Adding template (local) to dependencies
       >      Locking 1 package to latest Rust 1.86.0 compatible version
       > /private/tmp/nix-build-cargo-semver-checks-0.41.0.drv-0/source
       > Generating: associated_items_hidden_from_public_api/new
       > /private/tmp/nix-build-cargo-semver-checks-0.41.0.drv-0/source/test_crates/associated_items_hidden_from_public_api/new /private/tmp/nix-build-cargo-semver-checks-0.41.0.drv-0/source
       > error: failed to open: /tmp/test_crates/debug/.cargo-lock
       >
       > Caused by:
       >   Permission denied (os error 13)

Additional context

No response

System metadata

No response

Are you using nix-darwin?

Yes, I am using nix-darwin.

Notify maintainers

@figsoda @matthiasbeyer

---

Note for maintainers: Please tag this issue in your pull request description. (i.e. Resolves #ISSUE.)

I assert that this issue is relevant for Nixpkgs

• I assert that this is a bug and not a support request.
• I assert that this is not a duplicate of an existing issue.
• I assert that I have read the NixOS Code of Conduct and agree to abide by it.

Is this issue important to you?

Add a 👍 reaction to issues you find important.