Merge staging-next into staging

pkgs/applications/networking/browsers/firefox/wrapper.nix

···
         // to be able to install addons that do not have an extid
         // Security is maintained because only user whitelisted addons
         // with a checksum can be installed
-        ${ lib.optionalString usesNixExtensions ''lockPref("xpinstall.signatures.required", false)'' };
+        ${ lib.optionalString usesNixExtensions ''lockPref("xpinstall.signatures.required", false);'' }
       '';
 
       #############################

pkgs/by-name/al/alpaca/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "alpaca";
-  version = "4.0.1";
+  version = "5.0.5";
   pyproject = false; # Built with meson
 
   src = fetchFromGitHub {
     owner = "Jeffser";
     repo = "Alpaca";
     tag = version;
-    hash = "sha256-BTTqSYoyhtFh+sk95hTNpg9AK/mdnXKz3hy/nqSbSTQ=";
+    hash = "sha256-VfD10mMlRNi6Ye3IXy60ygx9DGTpzG06T6zQLm+8dFo=";
   };
 
   nativeBuildInputs = [
···
     odfpy
     pyicu
     matplotlib
+    openai
   ];
 
   dontWrapGApps = true;
···
       aleksana
       Gliczy
     ];
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.unix;
   };
 }

pkgs/by-name/ev/evcc/package.nix

···
 }:
 
 let
-  version = "0.200.3";
+  version = "0.200.4";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-mp2Kfgo1RCmKkNpPRwmS5nWG1YmJVQ6nWjWKfBk6500=";
+    hash = "sha256-ld90jN3IuYPzKLef13a437rCTf5rt1Lxo+Sxj8atYF4=";
   };
 
   vendorHash = "sha256-sx04fyRXX9H2182yz8qvdLv/sSLXTrzhlwpf8lMSVew=";

pkgs/by-name/fa/fastjet-contrib/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "fastjet-contrib";
-  version = "1.100";
+  version = "1.101";
 
   src = fetchurl {
     url = "https://fastjet.hepforge.org/contrib/downloads/fjcontrib-${version}.tar.gz";
-    sha256 = "sha256-Uq2UXZGVxA80eVjcBAQeQccTDoRevfDBPxu91bbSQps=";
+    sha256 = "sha256-2+itIZn3LWTdKfYhj29T793I+z5d2cXRDy/R4j1uRPY=";
   };
 
   buildInputs = [ fastjet ];

pkgs/by-name/go/gopls/package.nix

···
 
 buildGoModule rec {
   pname = "gopls";
-  version = "0.18.0";
+  version = "0.18.1";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "tools";
     rev = "gopls/v${version}";
-    hash = "sha256-YFAJH3jepOcgAdnSBP0G0e/GoNx9crLuQxgUFDBecwY=";
+    hash = "sha256-5w6R3kaYwrZyhIYjwLqfflboXT/z3HVpZiowxeUyaWg=";
   };
 
   modRoot = "gopls";
-  vendorHash = "sha256-gz46W1uvA4LBe8UaKH9arAKJt1QtbbGLrF4LSwI6M4o=";
+  vendorHash = "sha256-/tca93Df90/8K1dqhOfUsWSuFoNfg9wdWy3csOtFs6Y=";
 
   # https://github.com/golang/tools/blob/9ed98faa/gopls/main.go#L27-L30
   ldflags = [ "-X main.version=v${version}" ];

pkgs/by-name/im/immich/package.nix

···
   cacert,
   unzip,
   # runtime deps
+  cairo,
   exiftool,
+  giflib,
   jellyfin-ffmpeg, # Immich depends on the jellyfin customizations, see https://github.com/NixOS/nixpkgs/issues/351943
   imagemagick,
+  libjpeg,
+  libpng,
   libraw,
   libheif,
+  librsvg,
+  pango,
   perl,
+  pixman,
   vips,
 }:
 let
···
       rm node_modules/@immich/sdk
       ln -s ${openapi} node_modules/@immich/sdk
     '';
+
+    env.npm_config_build_from_source = "true";
+
+    nativeBuildInputs = [
+      pkg-config
+    ];
+
+    buildInputs = [
+      # https://github.com/Automattic/node-canvas/blob/master/Readme.md#compiling
+      cairo
+      giflib
+      libjpeg
+      libpng
+      librsvg
+      pango
+      pixman
+    ];
 
     installPhase = ''
       runHook preInstall

pkgs/by-name/im/immich/sources.json

···
 {
-  "version": "1.126.1",
-  "hash": "sha256-sUdnuO/FhTCpYEqeJ5DTL4AQZC1Li990M2viWPCxnFc=",
+  "version": "1.127.0",
+  "hash": "sha256-9lCMVQxMNNZgu9KTxNJfE4woZ+xLhS8JvfurtC/nf8c=",
   "components": {
     "cli": {
-      "npmDepsHash": "sha256-Al2cA4Fqn4IFMDyvoaRpxuAqbiwN9uP16RGapIQonps=",
-      "version": "2.2.50"
+      "npmDepsHash": "sha256-iKKENhyGgAfpetYt4SPxvJZrxYWevMID0jjCou9t8X8=",
+      "version": "2.2.51"
     },
     "server": {
-      "npmDepsHash": "sha256-qjSX8tu4HTYZneb7+hfPvcbU2raoeNuAbSXJlr0k0V4=",
-      "version": "1.126.1"
+      "npmDepsHash": "sha256-ZWRiQlXHXofUiyxNY74RL4IMIpv5XhNrR6g/GUcyaDA=",
+      "version": "1.127.0"
     },
     "web": {
-      "npmDepsHash": "sha256-LlOVgSrfSWIp8VSwKwUb/1sxLOjVqssXAyfVhVPtle4=",
-      "version": "1.126.1"
+      "npmDepsHash": "sha256-A7bhxO/l0x5UoFCSy48BbUZX4mOXsXQwSS3EQHnAsFE=",
+      "version": "1.127.0"
     },
     "open-api/typescript-sdk": {
-      "npmDepsHash": "sha256-noStzQk2AGWDqDiRNBvfd+hWF+RXgwoh9s08vRMiK2w=",
-      "version": "1.126.1"
+      "npmDepsHash": "sha256-14bcRhQi0VoodQl+GoK+uXFSqqDou7C2Rh50UoW71J8=",
+      "version": "1.127.0"
     },
     "geonames": {
       "timestamp": "20250129185843",

pkgs/by-name/li/libxlsxwriter/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "libxlsxwriter";
-  version = "1.2.0";
+  version = "1.2.1";
 
   src = fetchFromGitHub {
     owner = "jmcnamara";
     repo = "libxlsxwriter";
     tag = "v${version}";
-    hash = "sha256-SKLQIx3DGRWGjRAJFD1FKN1F8E/ZSuj2rV38YxZw6fw=";
+    hash = "sha256-PlKUDJEYQ2LThdq8F3ylFTgusZ9wTaL9pdAznAXpwI0=";
   };
 
   buildInputs = [

pkgs/by-name/so/solana-cli/package.nix

···
   # Taken from https://github.com/solana-labs/solana/blob/master/scripts/cargo-install-all.sh#L84
   solanaPkgs ?
     [
+      "cargo-build-bpf"
+      "cargo-test-bpf"
+      "cargo-build-sbf"
+      "cargo-test-sbf"
       "solana"
       "solana-bench-tps"
       "solana-faucet"
···
 
     mkdir -p $out/bin/sdk/bpf
     cp -a ./sdk/bpf/* $out/bin/sdk/bpf/
+    mkdir -p $out/bin/sdk/sbf
+    cp -a ./sdk/sbf/* $out/bin/sdk/sbf
+    mkdir -p $out/bin/deps
+    find . -name libsolana_program.dylib -exec cp {} $out/bin/deps \;
+    find . -name libsolana_program.rlib -exec cp {} $out/bin/deps \;
   '';
 
   # Used by build.rs in the rocksdb-sys crate. If we don't set these, it would

pkgs/development/python-modules/pywikibot/default.nix

···
 
 buildPythonPackage rec {
   pname = "pywikibot";
-  version = "9.6.2";
+  version = "9.6.3";
   format = "setuptools";
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-iPmQxOJmc9Ms8UhK43HrYgyyvu0g4/hO8bmO39AXOTo=";
+    hash = "sha256-tSEo6o9/YZRt0ZWt7N0WmM6wOK6lQc7wLYyPt4L7hhg=";
   };
 
   propagatedBuildInputs = [

pkgs/servers/monitoring/prometheus/blackbox-exporter.nix

···
 
 buildGoModule rec {
   pname = "blackbox_exporter";
-  version = "0.25.0";
+  version = "0.26.0";
   rev = "v${version}";
 
   src = fetchFromGitHub {
     inherit rev;
     owner = "prometheus";
     repo = "blackbox_exporter";
-    sha256 = "sha256-RyVP/lcCN/HbhRtGM7n4kFRpBxMO5SvpleeygzCq5bA=";
+    sha256 = "sha256-pdvYpu2EbcZIMyeWDWzb4TGlRE0cJgvIWJ62pHx7Xsk=";
   };
 
-  vendorHash = "sha256-gVVYccbwtB9/WA3lfzXwI9cZkTdTv96/2gLfwtoE+WM=";
+  vendorHash = "sha256-Mw1+YQVmK4rqOLGIt6TSFgFsdMeL0h0A7ZJAtoL0klU=";
 
   # dns-lookup is performed for the tests
   doCheck = false;