this derivation will be built:
  /nix/store/740svhj4c244sfa432pzd0r0hrb7kcx9-treefmt-check.drv
building '/nix/store/740svhj4c244sfa432pzd0r0hrb7kcx9-treefmt-check.drv'
treefmt-check> tribuchet: building on gi-build-x86-01
treefmt-check> treefmt v2.5.0traversed 491 files
treefmt-check> emitted 338 files for processing
treefmt-check> formatted 338 files (1 changed) in 742ms
treefmt-check>  M tests/hermes-signal.nix
treefmt-check> diff --git a/tests/hermes-signal.nix b/tests/hermes-signal.nix
treefmt-check> index 26c3a13..acb86b1 100644
treefmt-check> --- a/tests/hermes-signal.nix
treefmt-check> +++ b/tests/hermes-signal.nix
treefmt-check> @@ -375,7 +375,9 @@ in
treefmt-check>      # at startup. So a host unit has to put the number where the guest's
treefmt-check>      # credential already points.
treefmt-check>      testGuestReadsThePublishedNumber = {
treefmt-check> -      expr = lib.filter (lib.hasInfix "SIGNAL") derivedIdentity.systemd.services."microvm@hermes-alice".serviceConfig.LoadCredential;
treefmt-check> +      expr =
treefmt-check> +        lib.filter (lib.hasInfix "SIGNAL")
treefmt-check> +          derivedIdentity.systemd.services."microvm@hermes-alice".serviceConfig.LoadCredential;
treefmt-check>        expected = [
treefmt-check>          "SIGNAL_ACCOUNT:/run/hermes-signal-alice/account"
treefmt-check>          "SIGNAL_ALLOWED_USERS:/run/hermes-signal-alice/account"
error: Cannot build '/nix/store/740svhj4c244sfa432pzd0r0hrb7kcx9-treefmt-check.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/kdlvicd8g5l4xjab16vkyx410h25pmhw-treefmt-check
       Last 20 log lines:
       > tribuchet: building on gi-build-x86-01
       > treefmt v2.5.0traversed 491 files
       > emitted 338 files for processing
       > formatted 338 files (1 changed) in 742ms
       >  M tests/hermes-signal.nix
       > diff --git a/tests/hermes-signal.nix b/tests/hermes-signal.nix
       > index 26c3a13..acb86b1 100644
       > --- a/tests/hermes-signal.nix
       > +++ b/tests/hermes-signal.nix
       > @@ -375,7 +375,9 @@ in
       >      # at startup. So a host unit has to put the number where the guest's
       >      # credential already points.
       >      testGuestReadsThePublishedNumber = {
       > -      expr = lib.filter (lib.hasInfix "SIGNAL") derivedIdentity.systemd.services."microvm@hermes-alice".serviceConfig.LoadCredential;
       > +      expr =
       > +        lib.filter (lib.hasInfix "SIGNAL")
       > +          derivedIdentity.systemd.services."microvm@hermes-alice".serviceConfig.LoadCredential;
       >        expected = [
       >          "SIGNAL_ACCOUNT:/run/hermes-signal-alice/account"
       >          "SIGNAL_ALLOWED_USERS:/run/hermes-signal-alice/account"
       For full logs, run:
         nix log /nix/store/740svhj4c244sfa432pzd0r0hrb7kcx9-treefmt-check.drv