Merge remote-tracking branch 'origin/master' into staging-next

maintainers/maintainer-list.nix

···
     github = "brianmcgillion";
     githubId = 1044263;
   };
+  bricked = {
+    name = "bricked";
+    email = "[e-mail]";
+    github = "brckd";
+    githubId = 92804487;
+    keys = [ { fingerprint = "58A2 81E6 2FBD 6E4E 664C  B603 7B4D 2A02 BB0E C28C"; } ];
+  };
   britter = {
     name = "Benedikt Ritter";
     email = "[e-mail]";
···
     github = "dsymbol";
     githubId = 88138099;
   };
+  dtomvan = {
+    email = "[e-mail]";
+    github = "dtomvan";
+    githubId = 51440893;
+    name = "Tom van Dijk";
+    keys = [ { fingerprint = "D044 F07B 8863 B681 26BD  79FE 7A98 4C82 07AD BA51"; } ];
+  };
   dtzWill = {
     email = "[e-mail]";
     github = "dtzWill";
···
     github = "nbdd0121";
     githubId = 4065244;
     name = "Gary Guo";
+  };
+  gauravghodinde = {
+    email = "[e-mail]";
+    github = "gauravghodinde";
+    githubId = 65962770;
+    name = "Gaurav Ghodinde";
   };
   gavin = {
     email = "[e-mail]";

pkgs/by-name/ag/age-plugin-se/package.nix

···
     swiftpm
   ];
 
+  # Can't find libdispatch without this on NixOS. (swift 5.8)
+  LD_LIBRARY_PATH = lib.optionalString stdenv.isLinux "${swiftPackages.Dispatch}/lib";
+
   postPatch =
     let
       swift-crypto = fetchFromGitHub {
···
       remko
     ];
     mainProgram = "age-plugin-se";
-    platforms = lib.platforms.darwin;
+    platforms = lib.platforms.unix;
   };
 })

pkgs/by-name/ch/chrome-pak-customizer/package.nix

···
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  installShellFiles,
+  cmake,
+  ninja,
+}:
+
+stdenv.mkDerivation {
+  pname = "chrome-pak-customizer";
+  version = "2.0-unstable-2021-06-24";
+
+  src = fetchFromGitHub {
+    owner = "myfreeer";
+    repo = "chrome-pak-customizer";
+    rev = "bfabc033207ebbd6e0017ce99500d3e379a0a3f6";
+    hash = "sha256-MCGLbHSUPcO1nMUYCqRws4+hLGEaNjX9oqGzixw8VWY=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+    installShellFiles
+  ];
+
+  cmakeFlags = [ (lib.cmakeBool "LGPL" false) ];
+
+  installPhase = ''
+    runHook preInstall
+
+    installBin pak
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Simple batch tool to customize pak files in chrome or chromium-based browser";
+    homepage = "https://github.com/myfreeer/chrome-pak-customizer";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ulysseszhan ];
+    mainProgram = "pak";
+    platforms = lib.platforms.all;
+  };
+}

pkgs/by-name/dp/dpdk/package.nix

···
 {
-  lib,
   stdenv,
+  lib,
   fetchurl,
   pkg-config,
   meson,
···
   doxygen,
   python3,
   pciutils,
+  fetchpatch,
   withExamples ? [ ],
   shared ? false,
   machine ? (
···
   ),
 }:
 
-stdenv.mkDerivation (finalAttrs: {
+stdenv.mkDerivation rec {
   pname = "dpdk";
-  version = "25.03";
+  version = "24.07";
 
   src = fetchurl {
-    url = "https://fast.dpdk.org/rel/dpdk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-akCnMTKChuvXloWxj/pZkua3cME4Q9Zf0NEVfPzP9j0=";
+    url = "https://fast.dpdk.org/rel/dpdk-${version}.tar.xz";
+    sha256 = "sha256-mUT35fJo56ybQZPizVTvbZj24dfd3JZ8d65PZhbW+70=";
   };
 
   nativeBuildInputs = [
···
     python3.pkgs.sphinx
     python3.pkgs.pyelftools
   ];
-
   buildInputs = [
     jansson
     libbpf
···
     libbsd
   ];
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2024-11614.patch";
+      url = "https://git.dpdk.org/dpdk-stable/patch/?id=fdf13ea6fede07538fbe5e2a46fa6d4b2368fa81";
+      hash = "sha256-lD2mhPm5r1tWZb4IpzHa2SeK1DyQ3rwjzArRTpAgZAY=";
+    })
+  ];
+
   postPatch = ''
     patchShebangs config/arm buildtools
   '';
···
     "doc"
   ] ++ lib.optional (withExamples != [ ]) "examples";
 
-  meta = {
+  meta = with lib; {
     description = "Set of libraries and drivers for fast packet processing";
     homepage = "http://dpdk.org/";
-    license = with lib.licenses; [
+    license = with licenses; [
       lgpl21
       gpl2Only
       bsd2
     ];
-    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [
+    platforms = platforms.linux;
+    maintainers = with maintainers; [
       magenbluten
       orivej
       mic92
       zhaofengli
     ];
   };
-})
+}

pkgs/by-name/ha/hanken-grotesk/package.nix

···
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+}:
+
+stdenvNoCC.mkDerivation {
+  pname = "hanken-grotesk";
+  version = "0-unstable-2024-01-30";
+
+  src = fetchFromGitHub {
+    owner = "marcologous";
+    repo = "hanken-grotesk";
+    rev = "1ab416e82130b2d3ddb7710abf7ceabf07156a13";
+    hash = "sha256-CgxqC+4QrjdsB7VdAMneP8ND9AsWPVI8d8UOn4kytxs=";
+  };
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir --parents $out/share/fonts
+    cp --recursive fonts/ttf $out/share/fonts/truetype
+    cp --recursive fonts/variable $out/share/fonts/variable
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Hanken Grotesk typeface";
+    longDescription = "Hanken Grotesk is a sans serif typeface inspired by the classic grotesques.";
+    homepage = "https://github.com/marcologous/hanken-grotesk";
+    license = lib.licenses.ofl;
+    platforms = lib.platforms.all;
+    maintainers = with lib.maintainers; [ bricked ];
+  };
+}

pkgs/by-name/ld/ldeep/package.nix

···
   };
 
   pythonRelaxDeps = [
+    "termcolor"
     "cryptography"
     "ldap3-bleeding-edge"
   ];

pkgs/by-name/li/libacars/package.nix

···
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  cmake,
+}:
+stdenv.mkDerivation rec {
+  pname = "libacars";
+  version = "2.2.0";
+
+  src = fetchFromGitHub {
+    owner = "szpajder";
+    repo = "libacars";
+    tag = "v${version}";
+    hash = "sha256-2n1tuKti8Zn5UzQHmRdvW5Q+x4CXS9QuPHFQ+DFriiE=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+  ];
+
+  cmakeFlags = [
+    "-DCMAKE_INSTALL_LIBDIR=lib"
+  ];
+
+  meta = with lib; {
+    homepage = "https://github.com/szpajder/libacars";
+    description = "Aircraft Communications Addressing and Reporting System (ACARS) message decoder";
+    license = licenses.mit;
+    platforms = platforms.unix;
+    maintainers = [ maintainers.mafo ];
+  };
+}

pkgs/by-name/nu/nuclei-templates/package.nix

···
 
 stdenvNoCC.mkDerivation rec {
   pname = "nuclei-templates";
-  version = "10.1.7";
+  version = "10.2.0";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "nuclei-templates";
     tag = "v${version}";
-    hash = "sha256-wpsnxaWU3U5dxqGtgF8QyJzbi+Ft9ZHiuEF8WStiCpo=";
+    hash = "sha256-eOsnyOujOO6q7078XnOUTBgr91SdCGtuc7sFn9UZb70=";
   };
 
   installPhase = ''

pkgs/by-name/oc/ocserv/package.nix

···
   ronn,
   pam,
   libxcrypt,
+  oath-toolkit,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
···
     lz4
     pam
     libxcrypt
+    oath-toolkit
   ];
 
   meta = {

pkgs/by-name/re/readarr/package.nix

···
     ."${stdenv.hostPlatform.system}" or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
   hash =
     {
-      x64-linux_hash = "sha256-QHZ6pdeCIld5pkgK6ZBhxKho6kM/IBCx0BlxM1xiTXk=";
-      arm64-linux_hash = "sha256-FoRKTsuCCTS9Y56GR6xfvLrmLmqVIoEk8P7RGzE3NU0=";
-      x64-osx_hash = "sha256-Wj3JVkwJXrtgAGBYcv8e2kGzSGGzYeG9TL+Dtt/ulpI=";
+      x64-linux_hash = "sha256-pkFyal2u/2YeKuv8QwZNvO1HBT4lpNSw+M2u6isDK5s=";
+      arm64-linux_hash = "sha256-NPBUmeAihbS8qMML3E/9QEmOfgdH2fzaWtA4vV1TIK8=";
+      x64-osx_hash = "sha256-6urFLKOL63xAUQHDqDq8NkFUnQuOC5i+MI3ANJUU1Vg=";
     }
     ."${arch}-${os}_hash";
 in
 stdenv.mkDerivation rec {
   pname = "readarr";
-  version = "0.4.14.2782";
+  version = "0.4.15.2787";
 
   src = fetchurl {
     url = "https://github.com/Readarr/Readarr/releases/download/v${version}/Readarr.develop.${version}.${os}-core-${arch}.tar.gz";

pkgs/by-name/re/rexi/package.nix

···
+{
+  lib,
+  python3Packages,
+  fetchFromGitHub,
+}:
+
+python3Packages.buildPythonApplication rec {
+  pname = "rexi";
+  version = "1.2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "royreznik";
+    repo = "rexi";
+    tag = "v${version}";
+    hash = "sha256-tag2/QTM6tDCU3qr4e1GqRYAZgpvEgtA+FtR4P7WdiU=";
+  };
+
+  build-system = with python3Packages; [
+    poetry-core
+  ];
+
+  dependencies = with python3Packages; [
+    colorama
+    typer
+    textual
+  ];
+
+  nativeCheckInputs = with python3Packages; [
+    pytest
+    pytest-asyncio
+    pytest-cov
+  ];
+
+  pythonRelaxDeps = [
+    "textual"
+    "typer"
+  ];
+
+  meta = {
+    description = "User-friendly terminal UI to interactively work with regular expressions";
+    homepage = "https://github.com/royreznik/rexi";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ gauravghodinde ];
+    mainProgram = "rexi";
+  };
+}

pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix

···
 
 stdenvNoCC.mkDerivation {
   pname = "roddhjav-apparmor-rules";
-  version = "0-unstable-2025-04-16";
+  version = "0-unstable-2025-04-25";
 
   src = fetchFromGitHub {
     owner = "roddhjav";
     repo = "apparmor.d";
-    rev = "9f0947a0fc0408da9350b95eb95a6860f8018471";
-    hash = "sha256-7CDAlttsebdDix4kKTrp3CKejWfodO2BkqcweHt1D8M=";
+    rev = "3295a1334a7bbbe66b1f857a43d414ed96534455";
+    hash = "sha256-5RZzqblfRheqzEWvyPsDLJdG7IImblOpz5bIsooIrAo=";
   };
 
   dontConfigure = true;

pkgs/by-name/si/signal-desktop-bin/copy-noto-emoji.py

···
     )
 
 
-def emoji_to_emoji_data_name(emoji: str) -> str:
-    r"""Return the npm emoji-data emoji name of an emoji.
-
-    emoji-data emoji names are hyphen‐minus‐separated Unicode scalar
-    values, represented in lowercase big‐endian hex padded to at least
-    four digits.
-
-    >>> emoji_to_emoji_data_name("😶‍🌫️")
-    '1f636-200d-1f32b-fe0f'
-    >>> emoji_to_emoji_data_name("\U0001f636\u200d\U0001f32b\ufe0f")
-    '1f636-200d-1f32b-fe0f'
-    """
-    return "-".join(f"{ord(scalar_value):04x}" for scalar_value in emoji)
-
-
 def _main() -> None:
     noto_png_path, asar_root = (Path(arg) for arg in sys.argv[1:])
     asar_root = asar_root.absolute()
···
     out_path = asar_root / "images" / "nixpkgs-emoji"
     out_path.mkdir(parents=True)
 
-    emoji_data_out_path = (
-        asar_root
-        / "node_modules"
-        / "emoji-datasource-apple"
-        / "img"
-        / "apple"
-        / "64"
-    )
-    emoji_data_out_path.mkdir(parents=True)
-
     jumbomoji_json_path = asar_root / "build" / "jumbomoji.json"
     with jumbomoji_json_path.open() as jumbomoji_json_file:
         jumbomoji_packs = json.load(jumbomoji_json_file)
···
                     file=sys.stderr,
                 )
                 continue
-
-            (
-                emoji_data_out_path / f"{emoji_to_emoji_data_name(emoji)}.png"
-            ).symlink_to(out_path / emoji)
 
     print(out_path.relative_to(asar_root))
 

pkgs/by-name/si/signal-desktop-bin/generic.nix

···
   at-spi2-core,
   libappindicator-gtk3,
   libgbm,
+  libwebp,
   # Runtime dependencies:
   systemd,
   libnotify,
···
       runHook postInstall
     '';
   });
+
+  noto-emoji-sheet-32 = fetchurl {
+    url = "https://raw.githubusercontent.com/iamcal/emoji-data/refs/tags/v15.1.2/sheet_google_32.png";
+    hash = "sha256-S03NCTbvB5yeQl62WpLNjNGhjNErtgaOB6tAj/X8vPc=";
+  };
+  noto-emoji-sheet-64 = fetchurl {
+    url = "https://raw.githubusercontent.com/iamcal/emoji-data/refs/tags/v15.1.2/sheet_google_64.png";
+    hash = "sha256-kZYStR5xAuausSpOD6wJZRJZ1K6nPpweE3aYSgWntS4=";
+  };
 in
 stdenv.mkDerivation rec {
   inherit pname version;
···
       asar extract "$out/${libdir}/resources/app.asar" $out/asar-contents
       rm -r \
         "$out/${libdir}/resources/app.asar"{,.unpacked} \
-        $out/asar-contents/node_modules/emoji-datasource-apple
+        $out/asar-contents/images/emoji-sheet-32.webp \
+        $out/asar-contents/images/emoji-sheet-64.webp
     '';
   };
 
···
     # override doesn't preserve splicing https://github.com/NixOS/nixpkgs/issues/132651
     # Has to use `makeShellWrapper` from `buildPackages` even though `makeShellWrapper` from the inputs is spliced because `propagatedBuildInputs` would pick the wrong one because of a different offset.
     (buildPackages.wrapGAppsHook3.override { makeWrapper = buildPackages.makeShellWrapper; })
+    libwebp
   ];
 
   buildInputs = [
···
     # Create required symlinks:
     ln -s libGLESv2.so "$out/lib/signal-desktop/libGLESv2.so.2"
 
+    # Compress the emoji sheets to webp, as signal expects webp images. The flags used are the same as those used upstream.
+    cwebp -progress -mt -preset icon -alpha_filter best -alpha_q 20 -pass 10 -q 75 ${noto-emoji-sheet-32} -o asar-contents/images/emoji-sheet-32.webp
+    cwebp -progress -mt -preset icon -alpha_filter best -alpha_q 20 -pass 10 -q 75 ${noto-emoji-sheet-64} -o asar-contents/images/emoji-sheet-64.webp
+
     # Copy the Noto Color Emoji PNGs into the ASAR contents. See `src`
     # for the motivation, and the script for the technical details.
     emojiPrefix=$(
···
 
       # Various npm packages
       lib.licenses.free
+
+      lib.licenses.asl20 # noto-emoji
+      lib.licenses.mit # emoji-data
     ];
     maintainers = with lib.maintainers; [
       mic92

pkgs/by-name/si/signal-desktop-bin/signal-desktop-aarch64.nix

···
 { callPackage }:
 callPackage ./generic.nix { } {
   pname = "signal-desktop-bin";
-  version = "7.47.0-1";
+  version = "7.52.0";
 
   libdir = "usr/lib64/signal-desktop";
   bindir = "usr/bin";
···
     bsdtar -xf $downloadedFile -C "$out"
   '';
 
-  url = "https://download.copr.fedorainfracloud.org/results/useidel/signal-desktop/fedora-42-aarch64/08795262-signal-desktop/signal-desktop-7.47.0-1.fc42.aarch64.rpm";
-  hash = "sha256-CDj9OX6OfEzbP8kusqnWN+MCPPEi9u2Hj1LkpsCg3vI=";
+  url = "https://download.copr.fedorainfracloud.org/results/useidel/signal-desktop/fedora-42-aarch64/08956500-signal-desktop/signal-desktop-7.52.0-1.fc42.aarch64.rpm";
+  hash = "sha256-kQbCkswCNRnz/K6KpZKJ55bCaM2YFL9wW+erVA+3Nok=";
 }

pkgs/by-name/si/signal-desktop-bin/signal-desktop-darwin.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "signal-desktop-bin";
-  version = "7.51.0";
+  version = "7.52.0";
 
   src = fetchurl {
     url = "https://updates.signal.org/desktop/signal-desktop-mac-universal-${finalAttrs.version}.dmg";
-    hash = "sha256-dUcBvKbGVsEUxOSv8u/jjuvYjHar2+zbv+/ZRS85w1w=";
+    hash = "sha256-GamsV4tWLEWbegUIrmZ4ZpAuRbfZzlxjnEy7FOo4q/E=";
   };
   sourceRoot = ".";
 

pkgs/by-name/si/signal-desktop-bin/signal-desktop.nix

···
 { callPackage }:
 callPackage ./generic.nix { } rec {
   pname = "signal-desktop-bin";
-  version = "7.47.0";
+  version = "7.52.0";
 
   libdir = "opt/Signal";
   bindir = libdir;
   extractPkg = "dpkg-deb -x $downloadedFile $out";
 
   url = "https://updates.signal.org/desktop/apt/pool/s/signal-desktop/signal-desktop_${version}_amd64.deb";
-  hash = "sha256-rH1iuyVYoUNFvj2Z9DI5MXcX+sXjN2NSW2uaKafTO9M=";
+  hash = "sha256-SOe0BAEE5ljBb/OM3F7ejQQk8/KROFf7kfs/Gtp+bSY=";
 }

pkgs/by-name/sl/slint-viewer/package.nix

···
+{
+  lib,
+  rustPlatform,
+  fetchCrate,
+  kdePackages,
+  libGL,
+  nix-update-script,
+  versionCheckHook,
+  withQt6Support ? true,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "slint-viewer";
+  version = "1.10.0";
+
+  src = fetchCrate {
+    inherit (finalAttrs) pname version;
+    hash = "sha256-i6JB/bc8lQE9K9Jy1mUz2I/LKIoEtc/dgJzsQTcEXeQ=";
+  };
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-fXREHHPR2CZtyvvOdL5wKnkmT1q9Xj+ik2lR/52ApLI=";
+
+  CXXFLAGS = lib.optionals withQt6Support [
+    "-I ${lib.getDev libGL}/include"
+  ];
+
+  nativeBuildInputs = lib.optionals withQt6Support (
+    with kdePackages;
+    [
+      qtbase
+      qtsvg
+      wrapQtAppsHook
+    ]
+  );
+
+  # There are no tests
+  doCheck = false;
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Viewer for .slint files from the Slint Project";
+    mainProgram = "slint-viewer";
+    homepage = "https://github.com/slint-ui/slint/tree/master/tools/viewer";
+    license = lib.licenses.gpl3Only;
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    maintainers = with lib.maintainers; [ dtomvan ];
+  };
+})

pkgs/by-name/ss/ssh-openpgp-auth/daemon.nix

···
 
 callPackage ./generic.nix {
   pname = "sshd-openpgp-auth";
-  version = "0.3.0";
-  srcHash = "sha256-IV0Nhdqyn12HDOp1jaKz3sKTI3ktFd5b6qybCLWt27I=";
-  cargoHash = "sha256-WyYzDzC83iL1c8gCj+mYDq3/gsFxmxEWKwLhWLEygkI=";
+  version = "0.3.1";
+  srcHash = "sha256-YS8/q8faWSRNciR03wwiiGGgkvZqb5Euto22pde53C8=";
+  cargoHash = "sha256-rBkKQAq1IAc4udS65RvprQe6knxyAFKxCWKGW5k5te4=";
   metaDescription = "Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys";
 }

pkgs/by-name/ss/ssh-openpgp-auth/package.nix

···
 
 callPackage ./generic.nix {
   pname = "ssh-openpgp-auth";
-  version = "0.2.2";
-  srcHash = "sha256-5ew6jT6Zr54QYaWFQIGYXd8sqC3yHHZjPfoaCossm8o=";
-  cargoHash = "sha256-PHJiyq7zovn7EA7jDLJQxjxu2ErPHqBMwAlJpb5UVQY=";
+  version = "0.2.3";
+  srcHash = "sha256-YS8/q8faWSRNciR03wwiiGGgkvZqb5Euto22pde53C8=";
+  cargoHash = "sha256-rBkKQAq1IAc4udS65RvprQe6knxyAFKxCWKGW5k5te4=";
   metaDescription = "Command-line tool that provides client-side functionality to transparently verify the identity of remote SSH hosts";
 }

pkgs/by-name/te/testssl/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "testssl.sh";
-  version = "3.0.9";
+  version = "3.2.0";
 
   src = fetchFromGitHub {
     owner = "drwetter";
     repo = "testssl.sh";
     rev = "v${version}";
-    sha256 = "sha256-MZNQ7oOJD/vjOwDiPOZr3k+Mn0XXVdkP7cC/0mnWLic=";
+    sha256 = "sha256-h/Z++Osrog8svIiUF53Cj7KYfKLnimueyp4N3/6bSiE=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/xs/xsokoban/package.nix

···
     libXt
   ];
 
-  env.NIX_CFLAGS_COMPILE = "-I${libXpm.dev}/include/X11";
+  env.NIX_CFLAGS_COMPILE = "-I${libXpm.dev}/include/X11 -Wno-error=implicit-int -Wno-error=implicit-function-declaration";
 
   hardeningDisable = [ "format" ];
 
···
 
   preConfigure = ''
     sed -e 's/getline/my_getline/' -i score.c
+    sed -e 's/getpass/my_getpass/' -i externs.h display.c
 
     chmod a+rw config.h
     cat >>config.h <<EOF
···
 
   meta = with lib; {
     description = "X sokoban";
+    homepage = "https://www.cs.cornell.edu/andru/xsokoban.html";
     mainProgram = "xsokoban";
     license = licenses.publicDomain;
     maintainers = [ maintainers.raskin ];

pkgs/development/compilers/ponyc/default.nix pkgs/by-name/po/ponyc/package.nix

···
 
 stdenv.mkDerivation (rec {
   pname = "ponyc";
-  version = "0.58.6";
+  version = "0.59.0";
 
   src = fetchFromGitHub {
     owner = "ponylang";
     repo = pname;
     rev = version;
-    hash = "sha256-cCZo/lOvSvF19SGQ9BU2J3EBKHF9PgRBhuUVBkggF9I=";
+    hash = "sha256-4gDv8UWTk0RWVNC4PU70YKSK9fIMbWBsQbHboVls2BA=";
     fetchSubmodules = true;
   };
 
-  benchmarkRev = "1.7.1";
+  benchmarkRev = "1.9.1";
   benchmark = fetchFromGitHub {
     owner = "google";
     repo = "benchmark";
     rev = "v${benchmarkRev}";
-    hash = "sha256-gg3g/0Ki29FnGqKv9lDTs5oA9NjH23qQ+hTdVtSU+zo=";
+    hash = "sha256-5xDg1duixLoWIuy59WT0r5ZBAvTR6RPP7YrhBYkMxc8=";
   };
 
-  googletestRev = "1.12.1";
+  googletestRev = "1.15.2";
   googletest = fetchFromGitHub {
     owner = "google";
     repo = "googletest";
-    rev = "release-${googletestRev}";
-    hash = "sha256-W+OxRTVtemt2esw4P7IyGWXOonUN5ZuscjvzqkYvZbM=";
+    rev = "v${googletestRev}";
+    hash = "sha256-1OJ2SeSscRBNr7zZ/a8bJGIqAnhkg45re0j3DtPfcXM=";
   };
 
   nativeBuildInputs =
···
     # Replace downloads with local copies.
     substituteInPlace lib/CMakeLists.txt \
         --replace-fail "https://github.com/google/benchmark/archive/v$benchmarkRev.tar.gz" "$NIX_BUILD_TOP/deps/benchmark-$benchmarkRev.tar" \
-        --replace-fail "https://github.com/google/googletest/archive/release-$googletestRev.tar.gz" "$NIX_BUILD_TOP/deps/googletest-$googletestRev.tar"
+        --replace-fail "https://github.com/google/googletest/archive/refs/tags/v$googletestRev.tar.gz" "$NIX_BUILD_TOP/deps/googletest-$googletestRev.tar"
   '';
 
   preBuild = ''

pkgs/development/python-modules/polars/default.nix

···
 }:
 
 let
-  version = "1.21.0";
+  version = "1.27.1";
 
   # Hide symbols to prevent accidental use
   rust-jemalloc-sys = throw "polars: use polarsMemoryAllocator over rust-jemalloc-sys";
···
     owner = "pola-rs";
     repo = "polars";
     tag = "py-${version}";
-    hash = "sha256-/MmuaQG8ozl2yAVBXIibbtKjCQbw98azBFSKiP2PE0A=";
+    hash = "sha256-/VigBBjZglPleXB9jhWHtA+y7WixjboVbzslprZ/A98=";
   };
 
   # Do not type-check assertions because some of them use unstable features (`is_none_or`)
···
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-CVKT3x8SkpL7VFw6yc4pGwd0EYwufXtBp4Xl2eD88sM=";
+    hash = "sha256-dbPhEMhfe8DZO1D8U+3W1goNK1TAVyLzXHwXzzRvASw=";
   };
 
   requiredSystemFeatures = [ "big-parallel" ];

pkgs/top-level/all-packages.nix

···
   open-watcom-bin-unwrapped = callPackage ../development/compilers/open-watcom/bin.nix { };
   open-watcom-bin = wrapWatcom open-watcom-bin-unwrapped { };
 
-  ponyc = callPackage ../development/compilers/ponyc {
-    # Upstream pony no longer supports GCC
-    stdenv = llvmPackages.stdenv;
-  };
-
-  pony-corral = callPackage ../development/compilers/ponyc/pony-corral.nix { };
-
   replibyte = callPackage ../development/tools/database/replibyte { };
 
   rml = callPackage ../development/compilers/rml {