Merge staging-next into staging

nixos/doc/manual/release-notes/rl-2505.section.md

···
 
 - The default Erlang OTP version has been updated to 27.
 
+- The default Elixir version has been updated to 1.18.
+
 - `nixos-rebuild-ng`, a full rewrite of `nixos-rebuild` in Python, is available for testing. You can enable it by setting [system.rebuild.enableNg](options.html#opt-system.rebuild.enableNg) in your configuration (this will replace the old `nixos-rebuild`), or by adding `nixos-rebuild-ng` to your `environment.systemPackages` (in this case, it will live side-by-side with `nixos-rebuild` as `nixos-rebuild-ng`). It is expected that the next major version of NixOS (25.11) will enable `system.rebuild.enableNg` by default.
 - A `nixos-rebuild build-image` sub-command has been added.
 

nixos/modules/services/backup/zfs-replication.nix

···
 }:
 let
   cfg = config.services.zfs.autoReplication;
-  recursive = lib.optionalString cfg.recursive " --recursive";
-  followDelete = lib.optionalString cfg.followDelete " --follow-delete";
 in
 {
   options = {
     services.zfs.autoReplication = {
       enable = lib.mkEnableOption "ZFS snapshot replication";
+
+      package = lib.mkPackageOption pkgs "zfs-replicate" { };
 
       followDelete = lib.mkOption {
         description = "Remove remote snapshots that don't have a local correspondent.";
···
         "https://github.com/alunduil/zfs-replicate"
       ];
       restartIfChanged = false;
-      serviceConfig.ExecStart = "${pkgs.zfs-replicate}/bin/zfs-replicate${recursive} -l ${lib.escapeShellArg cfg.username} -i ${lib.escapeShellArg cfg.identityFilePath}${followDelete} ${lib.escapeShellArg cfg.host} ${lib.escapeShellArg cfg.remoteFilesystem} ${lib.escapeShellArg cfg.localFilesystem}";
+      serviceConfig.ExecStart =
+        let
+          args = lib.map lib.escapeShellArg (
+            [
+              "-l"
+              cfg.username
+              "-i"
+              cfg.identityFilePath
+              cfg.host
+              cfg.remoteFilesystem
+              cfg.localFilesystem
+            ]
+            ++ (lib.optional cfg.recursive "--recursive")
+            ++ (lib.optional cfg.followDelete "--follow-delete")
+          );
+        in
+        "${lib.getExe cfg.package} ${lib.concatStringSep " " args}";
       wantedBy = [
         "zfs-snapshot-daily.service"
         "zfs-snapshot-frequent.service"

nixos/modules/services/mail/stalwart-mail.nix

···
   cfg = config.services.stalwart-mail;
   configFormat = pkgs.formats.toml { };
   configFile = configFormat.generate "stalwart-mail.toml" cfg.settings;
-  dataDir = "/var/lib/stalwart-mail";
   useLegacyStorage = lib.versionOlder config.system.stateVersion "24.11";
 
   parsePorts =
···
         By default, the module is configured to store everything locally.
       '';
     };
+
+    dataDir = lib.mkOption {
+      type = lib.types.path;
+      default = "/var/lib/stalwart-mail";
+      description = ''
+        Data directory for stalwart
+      '';
+    };
   };
 
   config = lib.mkIf cfg.enable {
···
           {
             # structured data in SQLite, blobs on filesystem
             db.type = lib.mkDefault "sqlite";
-            db.path = lib.mkDefault "${dataDir}/data/index.sqlite3";
+            db.path = lib.mkDefault "${cfg.dataDir}/data/index.sqlite3";
             fs.type = lib.mkDefault "fs";
-            fs.path = lib.mkDefault "${dataDir}/data/blobs";
+            fs.path = lib.mkDefault "${cfg.dataDir}/data/blobs";
           }
         else
           {
             # everything in RocksDB
             db.type = lib.mkDefault "rocksdb";
-            db.path = lib.mkDefault "${dataDir}/db";
+            db.path = lib.mkDefault "${cfg.dataDir}/db";
             db.compression = lib.mkDefault "lz4";
           };
       storage.data = lib.mkDefault "db";
···
         preStart =
           if useLegacyStorage then
             ''
-              mkdir -p ${dataDir}/data/blobs
+              mkdir -p ${cfg.dataDir}/data/blobs
             ''
           else
             ''
-              mkdir -p ${dataDir}/db
+              mkdir -p ${cfg.dataDir}/db
             '';
 
         serviceConfig = {

nixos/modules/services/networking/ddclient.nix

···
         '';
       };
       usev4 = lib.mkOption {
-        default = "webv4, webv4=checkip.dyndns.com/, webv4-skip='Current IP Address: '";
+        default = "webv4, webv4=ipify-ipv4";
         type = str;
         description = ''
           Method to determine the IPv4 address to send to the dynamic DNS provider. Only used if `use` is not set.
         '';
       };
       usev6 = lib.mkOption {
-        default = "webv6, webv6=checkipv6.dyndns.com/, webv6-skip='Current IP Address: '";
+        default = "webv6, webv6=ipify-ipv6";
         type = str;
         description = ''
           Method to determine the IPv6 address to send to the dynamic DNS provider. Only used if `use` is not set.
···
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];
       restartTriggers = lib.optional (cfg.configFile != null) cfg.configFile;
-      path = lib.optional (lib.hasPrefix "if," cfg.use || lib.hasPrefix "if," cfg.usev4 || lib.hasPrefix "if," cfg.usev6) pkgs.iproute2;
+      path = lib.optional (lib.hasPrefix "if," cfg.use || lib.hasPrefix "ifv4," cfg.usev4 || lib.hasPrefix "ifv6," cfg.usev6) pkgs.iproute2;
 
       serviceConfig = {
         DynamicUser = true;

nixos/modules/services/web-servers/nginx/default.nix

···
             };
             ipv6 = mkOption {
               type = types.bool;
-              default = true;
+              default = config.networking.enableIPv6;
+              defaultText = lib.literalExpression "config.networking.enableIPv6";
               description = ''
                 By default, nginx will look up both IPv4 and IPv6 addresses while resolving.
                 If looking up of IPv6 addresses is not desired, the ipv6=off parameter can be

nixos/modules/virtualisation/qemu-vm.nix

···
       ${lib.getExe cfg.tpm.package} \
         socket \
         --tpmstate dir="$NIX_SWTPM_DIR" \
-        --ctrl type=unixio,path="$NIX_SWTPM_DIR"/socket,terminate \
+        --server type=unixio,path="$NIX_SWTPM_DIR"/socket \
+        --ctrl type=unixio,path="$NIX_SWTPM_DIR"/socket.ctrl \
         --pid file="$NIX_SWTPM_DIR"/pid --daemon \
+        --flags not-need-init \
         --tpm2 \
         --log file="$NIX_SWTPM_DIR"/stdout,level=6
 
+      (
+        export TPM2TOOLS_TCTI=swtpm:path="$NIX_SWTPM_DIR"/socket
+        export PATH=${
+          lib.makeBinPath [
+            pkgs.tpm2-tools
+          ]
+        }:$PATH
+
+        tpm2_startup --clear
+        tpm2_startup
+
+        ${lib.optionalString (cfg.tpm.provisioning != null)
+          # Run provisioning in a subshell not to pollute vars
+          ''
+            (
+              export TCTI=swtpm:path="$NIX_SWTPM_DIR"/socket
+              ${cfg.tpm.provisioning}
+            )
+          ''
+        }
+
+        tpm2_shutdown
+        tpm2_shutdown --clear
+      )
+
       # Enable `fdflags` builtin in Bash
       # We will need it to perform surgical modification of the file descriptor
       # passed in the coprocess to remove `FD_CLOEXEC`, i.e. close the file descriptor
···
       # will stop it.
       coproc waitingswtpm {
         read || :
-        echo "" | ${lib.getExe hostPkgs.socat} STDIO UNIX-CONNECT:"$NIX_SWTPM_DIR"/socket
+        ${cfg.tpm.package}/bin/swtpm_ioctl --unix "$NIX_SWTPM_DIR"/socket.ctrl --stop 2>/dev/null
       }
       # Clear `FD_CLOEXEC` on the coprocess' file descriptor stdin.
       fdflags -s-cloexec ''${waitingswtpm[1]}
···
         example = "tpm-tis-device";
         description = "QEMU device model for the TPM, uses the appropriate default based on th guest platform system and the package passed.";
       };
+
+      provisioning = mkOption {
+        type = types.nullOr types.str;
+        default = null;
+        description = ''
+          Script to provision the TPM before control is handed off to the VM.
+
+          `TPM2TOOLS_TCTI` will be provided to configure tpm2-tools to use the
+          swtpm instance transparently.
+          `TCTI` is also provided as a generic value, consumer is expected to
+          re-export it however it may need (`TPM2OPENSSL_TCTI`, `TPM2_PKCS11_TCTI`,
+          ...).
+        '';
+        example = literalExpression ''
+          tpm2_nvdefine 0xcafecafe \
+            -C o \
+            -a "ownerread|policyread|policywrite|ownerwrite|authread|authwrite"
+          echo "foobar" | tpm2_nvwrite 0xcafecafe -C o
+        '';
+      };
     };
 
     virtualisation.useDefaultFilesystems = mkOption {
···
         "-nographic"
       ])
       (mkIf (cfg.tpm.enable) [
-        "-chardev socket,id=chrtpm,path=\"$NIX_SWTPM_DIR\"/socket"
+        "-chardev socket,id=chrtpm,path=\"$NIX_SWTPM_DIR\"/socket.ctrl"
         "-tpmdev emulator,id=tpm_dev_0,chardev=chrtpm"
         "-device ${cfg.tpm.deviceModel},tpmdev=tpm_dev_0"
       ])

nixos/tests/all-tests.nix

···
   tmate-ssh-server = handleTest ./tmate-ssh-server.nix { };
   tomcat = handleTest ./tomcat.nix {};
   tor = handleTest ./tor.nix {};
+  tpm-ek = handleTest ./tpm-ek {};
   traefik = handleTestOn ["aarch64-linux" "x86_64-linux"] ./traefik.nix {};
   trafficserver = handleTest ./trafficserver.nix {};
   transfer-sh = handleTest ./transfer-sh.nix {};

nixos/tests/tpm-ek/ca.crt

···
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

nixos/tests/tpm-ek/ca.priv

···
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC1tBr/aneQCULi
+xAST/Gev/ITUYV7QHpgByNcF+yeqMkTigFVcknSwhM6pw++apPARrEjtf3YTzrFA
+lM7zmo5M16exbDNKKgTQ90Ms8bvQbeAiHZneWFpT1kuQxcnb0veOsbzM7ksV7qRH
+CxUNF4cVzqGu9SU8LyVzvwiw4HQoWBnX8vA19Fqa1U8mAfrDFyuXhDk5g01GKVRk
+mSmLwI9gtlHmB8bQxp7nPrKWdQ89rQMsoa4O3rAXZ9zaazu2mygHoTV0J2vJiFUa
+95u3ZAfAdfq8mPjFa0cnd2v9IaIgB7cJHlYS1S/LcK9pomw9bQ5AeoRYiEmhX9Dx
+CSH8r/EnAgMBAAECggEAUKW/1d3Lc4KozT1zSrucyd+qlRkim/z4OtKJnX37/O6S
+5HVRbeUTJcXMdE0i6+CJLU7qj38jSWdUBPYHZNgUkManB3ieyywbNySIDEq+saQS
+9xFsWeOdM9jJcVhYX9kjR5Jb2hlp+jIRd/bTQRxQOL2dxanI/Q1v8g+4K8lzxPOV
+YF/QxD2QY9vQp3QJwB3/NGF0QyQtFjAem+SnOZbObQnLrfRcLufi4nu7sCJ8MUZg
+t7BK2XMCvajYYt5a49cU/eFDzQqBWSs+GGwMnrM7UVdCXhPUDsPvR95QD7LJ1ZGI
+G4E1J3WCTokrFX5ZvIMYnlye/S+6lyqFSBn46+zcAQKBgQDqwOjrj3jtgiIQz2il
+d8ooR8Eo3JZdLI9ge4tCTt4IyxgBWFOOO1tTmcShj33vtBocj8JyAdla6JF8wVwM
+jCGJI7wKFxtbY/stdHVp1X/X6BylL6+ROHmC4+aTAdfNkppNWVNRlrRDX9V8cUIN
+Q2hesreyZbaJCVzhb1mLm/g2kQKBgQDGJg9/978d8kqUNMMk9VYH8ACqF24P+T0d
+NDhm1LMkQyt5dlQYux8ZFOG4xezgR15cEZkWOhmkvK0QS0VGzalHZqgKkZXvafJW
+FjnFpH9qqkezJRPFT1abUu+LsTHy5Q32GrrRbxRyKHpOBK9f3eIkIo4t0FTIIxc+
+eu7x2uS4NwKBgAllRS1AZcejwLdJhdexjq7ECHAZPA9onChxaWZy/6H8du5+2YFE
+0OfsrJkGxDSW0cC45EBp4Igp7MDAgG2kIid5/amtuROUUdZE5fohaGd8y8C0wuMe
+Dob1liHmHfwFVRWpcJNAY+CaclHzuoALZZ78qiuCtKaRcF05dq0Gxg1xAoGAJAAY
+QtS9SXCS8jhf2CAm4ExPopedLJPI8bxiHvS4E3eMt4WzI8cjkEgF9q8nKVxuHWYp
+HSuzKwYIn3Q9gu6sucdB8qGezx+9orxpBKqtZ7DGVBsBa5DNmGzKDuRDwfCxx6v1
+k0WOPmtyRSh+wHkstAn/MP2v2ajeeUCWlySA96MCgYAqnjyTiaWIK0HZqW3YQcfV
+WDg/GqliRJg6mnR6uPHSbIIx2beQM3wowSvi7LEDo8/a27UDfCqL7RtsG/UJ6i4l
+9Usuy/odRSzMz9HB2jLYwBkx5LQwT7MaoMHtqWS4T7LRdSdsUXUk9fvCMb4lDUWl
+vwXYKH6kQJr7q+hBbBPikA==
+-----END PRIVATE KEY-----

nixos/tests/tpm-ek/default.nix

···
+import ../make-test-python.nix (
+  { lib, pkgs, ... }:
+
+  let
+    inherit (pkgs) writeText tpm2-tools openssl;
+    ek_config = writeText "ek-sign.cnf" ''
+      [ tpm_policy ]
+      basicConstraints = CA:FALSE
+
+      keyUsage = keyEncipherment
+      certificatePolicies = 2.23.133.2.1
+      extendedKeyUsage = 2.23.133.8.1
+
+      subjectAltName = ASN1:SEQUENCE:dirname_tpm
+
+      [ dirname_tpm ]
+      seq = EXPLICIT:4,SEQUENCE:dirname_tpm_seq
+
+      [ dirname_tpm_seq ]
+      set = SET:dirname_tpm_set
+
+      [ dirname_tpm_set ]
+      seq.1 = SEQUENCE:dirname_tpm_seq_manufacturer
+      seq.2 = SEQUENCE:dirname_tpm_seq_model
+      seq.3 = SEQUENCE:dirname_tpm_seq_version
+
+      # We're going to mock up an STM TPM here
+      [dirname_tpm_seq_manufacturer]
+      oid = OID:2.23.133.2.1
+      str = UTF8:"id:53544D20"
+
+      [dirname_tpm_seq_model]
+      oid = OID:2.23.133.2.2
+      str = UTF8:"ST33HTPHAHD4
+
+      [dirname_tpm_seq_version]
+      oid = OID:2.23.133.2.3
+      str = UTF8:"id:00010101"
+    '';
+  in
+  {
+    name = "tpm-ek";
+
+    meta = {
+      maintainers = with lib.maintainers; [ baloo ];
+    };
+
+    nodes.machine =
+      { pkgs, ... }:
+      {
+        environment.systemPackages = [
+          openssl
+          tpm2-tools
+        ];
+
+        security.tpm2 = {
+          enable = true;
+          tctiEnvironment.enable = true;
+        };
+
+        virtualisation.tpm = {
+          enable = true;
+          provisioning = ''
+            export PATH=${
+              lib.makeBinPath [
+                openssl
+              ]
+            }:$PATH
+
+            tpm2_createek -G rsa -u ek.pub -c ek.ctx -f pem
+
+            # Sign a certificate
+            # Pretend we're an STM TPM
+            openssl x509 \
+              -extfile ${ek_config} \
+              -new -days 365 \
+              \
+              -subj "/CN=this.is.required.but.it.should.not/" \
+              -extensions tpm_policy \
+              \
+              -CA ${./ca.crt} -CAkey ${./ca.priv} \
+              \
+              -out device.der -outform der \
+              -force_pubkey ek.pub
+
+            # Create a nvram slot for the certificate, and we need the size
+            # to precisely match the length of the certificate we're going to
+            # put in.
+            tpm2_nvdefine 0x01c00002 \
+              -C o \
+              -a "ownerread|policyread|policywrite|ownerwrite|authread|authwrite" \
+              -s "$(wc -c device.der| cut -f 1 -d ' ')"
+
+            tpm2_nvwrite 0x01c00002 -C o -i device.der
+          '';
+        };
+      };
+
+    testScript = ''
+      start_all()
+      machine.wait_for_unit("multi-user.target")
+
+      machine.succeed('tpm2_nvread 0x01c00002 | openssl x509 -inform der -out /tmp/ek.pem')
+      print(machine.succeed('openssl x509 -in /tmp/ek.pem -text'))
+      machine.succeed('openssl verify -CAfile ${./ca.crt} /tmp/ek.pem')
+    '';
+  }
+)

pkgs/applications/blockchains/monero-cli/default.nix

···
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   cmake,
   pkg-config,
   boost,
···
     rev = "bff7fdfe436c727982cc553bdfb29a9021b423b0";
     hash = "sha256-VNypeEz9AV0ts8X3vINwYMOgO8VpNmyUPC4iY3OOuZI=";
   };
-
 in
 stdenv.mkDerivation rec {
   pname = "monero-cli";
···
     hash = "sha256-nDiFJjhsISYM8kTgJUaPYL44iyccnz5+Pd5beBh+lsM=";
   };
 
-  patches = [ ./use-system-libraries.patch ];
+  patches = [
+    ./use-system-libraries.patch
+    # https://github.com/monero-project/monero/pull/9462
+    (fetchpatch2 {
+      url = "https://github.com/monero-project/monero/commit/65568d3a884857ce08d1170f5801a6891a5c187c.patch?full_index=1";
+      hash = "sha256-Btuy69y02UyVMmsOiCRPZhM7qW5+FRNujOZjNMRdACQ=";
+    })
+  ];
 
   postPatch = ''
     # manually install submodules
···
       libusb1
       protobuf_21
     ]
-    ++ lib.optionals (trezorSupport && stdenv.hostPlatform.isLinux) [
-      udev
-    ];
+    ++ lib.optionals (trezorSupport && stdenv.hostPlatform.isLinux) [ udev ];
 
   cmakeFlags =
     [

pkgs/applications/misc/lutris/default.nix

···
   psmisc,
   mesa-demos,
   vulkan-tools,
-  xboxdrv,
   pulseaudio,
   p7zip,
   xgamma,
···
     psmisc
     mesa-demos
     vulkan-tools
-    xboxdrv
     pulseaudio
     p7zip
     xgamma

pkgs/applications/networking/browsers/ladybird/default.nix

···
 , libpulseaudio
 , libwebp
 , libxcrypt
+, openssl
 , python3
 , qt6Packages
 , woff2
 , ffmpeg
+, fontconfig
 , simdutf
 , skia
 , nixosTests
-, AppKit
-, Cocoa
-, Foundation
-, OpenGL
 , unstableGitUpdater
+, apple-sdk_14
 }:
 
 let
···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "ladybird";
-  version = "0-unstable-2024-11-21";
+  version = "0-unstable-2024-12-23";
 
   src = fetchFromGitHub {
     owner = "LadybirdWebBrowser";
     repo = "ladybird";
-    rev = "6dc61f895db424e1ab245a7d4d219c6054a31ce3";
-    hash = "sha256-lEE2cfnQMSBi7+d34dbiuE5lwiGOzW1384/ohC+cf7I=";
+    rev = "d5bbf8dcf803c429afab76610dfba3b1ee23f0ae";
+    hash = "sha256-Kew/MFFCq6sTXt8jfXC78kpQNHAjX8cQyLWO3+MeikU=";
   };
 
   postPatch = ''
···
   buildInputs = with qt6Packages; [
     curl
     ffmpeg
+    fontconfig
     libavif
     libjxl
     libwebp
     libxcrypt
+    openssl
     qtbase
     qtmultimedia
     simdutf
-    skia
+    (skia.overrideAttrs (prev: {
+      gnFlags = prev.gnFlags ++ [
+        # https://github.com/LadybirdBrowser/ladybird/commit/af3d46dc06829dad65309306be5ea6fbc6a587ec
+        # https://github.com/LadybirdBrowser/ladybird/commit/4d7b7178f9d50fff97101ea18277ebc9b60e2c7c
+        # Remove when/if this gets upstreamed in skia.
+        "extra_cflags+=[\"-DSKCMS_API=__attribute__((visibility(\\\"default\\\")))\"]"
+      ];
+    }))
     woff2
   ] ++ lib.optional stdenv.hostPlatform.isLinux [
     libpulseaudio.dev
     qtwayland
   ] ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    AppKit
-    Cocoa
-    Foundation
-    OpenGL
+    apple-sdk_14
   ];
 
   cmakeFlags = [
···
     maintainers = with maintainers; [ fgaz ];
     platforms = [ "x86_64-linux" "aarch64-linux" "x86_64-darwin" "aarch64-darwin" ];
     mainProgram = "Ladybird";
-    # use of undeclared identifier 'NSBezelStyleAccessoryBarAction'
-    broken = stdenv.hostPlatform.isDarwin;
   };
 })

pkgs/applications/networking/instant-messengers/gurk-rs/default.nix

···
   pkgsBuildHost,
   openssl,
   pkg-config,
-  testers,
+  versionCheckHook,
+  nix-update-script,
   gurk-rs,
 }:
 
 rustPlatform.buildRustPackage rec {
   pname = "gurk-rs";
-  version = "0.5.2";
+  version = "0.6.0";
 
   src = fetchFromGitHub {
     owner = "boxdot";
     repo = "gurk-rs";
-    rev = "refs/tags/v${version}";
-    hash = "sha256-ZVpI60pZZCLRnKdC80P8f63gE0+Vi1lelhyFPAhpHyU=";
+    tag = "v${version}";
+    hash = "sha256-FPbEtk2A7qs/85VsmfV1uPsVZ7V5WKhMKeWrzUt5L4w=";
   };
 
   postPatch = ''
···
 
   useFetchCargoVendor = true;
 
-  cargoHash = "sha256-jTZ2wJPXj3nU7GVTfne64eSra+JuKhNryCtRZMKOE44=";
+  cargoHash = "sha256-yLZKat6NNZkbyTpAVpOvDAbbNajh4Vaebc7fmK0I3Mc=";
 
   nativeBuildInputs = [
     protobuf
···
 
   useNextest = true;
 
-  passthru.tests.version = testers.testVersion {
-    package = gurk-rs;
-  };
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+  versionCheckProgram = "${placeholder "out"}/bin/${meta.mainProgram}";
+  versionCheckProgramArg = [ "--version" ];
+
+  passthru.updateScript = nix-update-script { };
 
   meta = with lib; {
     description = "Signal Messenger client for terminal";

pkgs/build-support/coq/meta-fetch/default.nix

···
     sort
     switch
     switch-if
-    versionAtLeast
+    versionOlder
     versions
     ;
 
···
   shortVersion =
     x:
     if (isString x && match "^/.*" x == null) then
-      findFirst (v: versions.majorMinor v == x) null (sort versionAtLeast (attrNames release))
+      findFirst (v: versions.majorMinor v == x) null (sort (l: r: versionOlder r l) (attrNames release))
     else
       null;
   isShortVersion = x: shortVersion x != null;

pkgs/by-name/cr/crossplane-cli/package.nix

···
 
 buildGoModule rec {
   pname = "crossplane-cli";
-  version = "1.18.1";
+  version = "1.18.2";
 
   src = fetchFromGitHub {
     owner = "crossplane";
     repo = "crossplane";
     rev = "v${version}";
-    hash = "sha256-IIgn7dNX/edcCmd4rQ+l1vaB4TcqNJSIx6WEBq4oNJY=";
+    hash = "sha256-G4Kve77BoQ/RphvggLHIVV+hhkjmTS3q1nQWnDhAjHA=";
   };
 
-  vendorHash = "sha256-Am41aAV1AlKOIrC11byqshMDGjzzg7mGI4kARwLINl8=";
+  vendorHash = "sha256-yUaCmiY+qPUfUi2/+c9deSa2atPRWtZ03jHHQ2HmjTM=";
 
   ldflags = [
     "-s"

pkgs/by-name/ej/ejsonkms/package.nix

···
 
 buildGoModule rec {
   pname = "ejsonkms";
-  version = "0.2.2";
+  version = "0.2.3";
 
   src = fetchFromGitHub {
     owner = "envato";
     repo = "ejsonkms";
     rev = "v${version}";
-    hash = "sha256-aHnxdEADrzaRld7G2owSHO/0xYXIa8EBBR+phdA4eRM=";
+    hash = "sha256-GrereV1IFRTaQEK+wjRHnXSydaKQgQeuxYgSAxEuok0=";
   };
 
-  vendorHash = "sha256-aLcSCDgd3IGiUg/JAPNIV30tAh6tDYZnFnqzaLELXw0=";
+  vendorHash = "sha256-bfR2jz4M5C60Nket9UW2C9GTK8jkbm6FZUar+wwDnbc=";
 
   ldflags = [
     "-X main.version=v${version}"

pkgs/by-name/ek/eksctl/package.nix

···
 
 buildGoModule rec {
   pname = "eksctl";
-  version = "0.198.0";
+  version = "0.199.0";
 
   src = fetchFromGitHub {
     owner = "weaveworks";
     repo = pname;
     rev = version;
-    hash = "sha256-iYjp6gJlw5iVjbEcx/fLlTDkd0AXKLCJw7ig8h3cSCM=";
+    hash = "sha256-INB8D7kk8/t0xUuspHph0Ot468OxtMIJrv3jgjI34cw=";
   };
 
-  vendorHash = "sha256-f7+IlOcGJL5G52wPZz1oeHmR8LR8XZh6ASV1qi7hXi0=";
+  vendorHash = "sha256-T8F+auAf07tTzh80fk7PcuVNv8Wx4ArmY2OxXL2FH+I=";
 
   doCheck = false;
 

pkgs/by-name/es/esp-generate/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "esp-generate";
-  version = "0.1.0";
+  version = "0.2.1";
 
   src = fetchFromGitHub {
     owner = "esp-rs";
     repo = "esp-generate";
     rev = "v${version}";
-    hash = "sha256-vfHORu0C3vK7a9jv1Wj+XjqM7mR8/t0N4x3hfARdxaw=";
+    hash = "sha256-o8b30xCkHWdfGhI+8KXVj1U8xJtt7YsRcKBL6FxUVW8=";
   };
 
-  cargoHash = "sha256-hYgEZvRXXhgzuNuSu4ytrlWDwlVYX6R46agu+BxrbEo=";
+  cargoHash = "sha256-oppQG3YqiTe0feuvIrKkSCYLBRgNIGOOQ31/pCSJaPY=";
 
   meta = {
     description = "Template generation tool to create no_std applications targeting Espressif's chips";

pkgs/by-name/gi/gitprompt-rs/package.nix

···
   git,
 }:
 let
-  version = "0.3.0";
+  version = "0.4.1";
 in
 rustPlatform.buildRustPackage {
   pname = "gitprompt-rs";
···
     owner = "9ary";
     repo = "gitprompt-rs";
     rev = version;
-    hash = "sha256-BqI3LbG7I/0wjzJaP8bxRwTM56joLqVaQCmAydX5vQM=";
+    hash = "sha256-U0ylhgD86lbXvt6jMLaEQdL/zbcbXnfrA72FMEzBkN0=";
   };
 
-  cargoHash = "sha256-KBBdhiXEZz1/w6Zr/LogyceBdCn1ebfkVgGbtcdAeis=";
+  cargoHash = "sha256-N0ROUFdTA8umiUcZuKkANPCPHCPKIyNOLHRWta/253s=";
 
   postPatch = ''
     substituteInPlace src/main.rs \
···
   meta = {
     description = "Simple Git prompt";
     homepage = "https://github.com/9ary/gitprompt-rs";
-    license = lib.licenses.mpl20;
+    license = lib.licenses.bsd0;
     maintainers = with lib.maintainers; [
       isabelroses
       cafkafk

pkgs/by-name/ha/halo/package.nix

···
 }:
 stdenv.mkDerivation rec {
   pname = "halo";
-  version = "2.20.11";
+  version = "2.20.12";
   src = fetchurl {
     url = "https://github.com/halo-dev/halo/releases/download/v${version}/halo-${version}.jar";
-    hash = "sha256-4Y89yMR6rVREA1V1Xm8WAGeBKovxmy0/XPzM9CKluzE=";
+    hash = "sha256-BixJ36qlUnifIK7xWCZeY2nOGBAy2p6zL2CQvlgSMj8=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ko/komac/package.nix

···
 }:
 
 let
-  version = "2.6.0";
+  version = "2.8.0";
   src = fetchFromGitHub {
     owner = "russellbanks";
     repo = "Komac";
     rev = "refs/tags/v${version}";
-    hash = "sha256-YFaa2kU42NlhRivBEPV1mSr3j95P4NFwUKM0Xx8tpfg=";
+    hash = "sha256-yAf89GtKu500VPn+CKF6sGC+TPhJcGz2lR7C30/YBRI=";
   };
 in
 rustPlatform.buildRustPackage {
···
 
   pname = "komac";
 
-  cargoHash = "sha256-kb18phtY5rRNUw0ZaZu2tipAaOURSy+2duf/+cOj5Y8=";
+  cargoHash = "sha256-wgOZoKsbYkbbCKS+2pfqgsHD5Azw72gPJXHhfw5mNqo=";
 
   nativeBuildInputs =
     [

pkgs/by-name/li/libesmtp/package.nix

···
   ];
   buildInputs = [ openssl ];
 
+  mesonFlags = lib.optional (stdenv.hostPlatform.libc == "glibc") "-Dc_args=-D_DEFAULT_SOURCE";
+
   src = fetchFromGitHub {
     owner = "libesmtp";
     repo = pname;

pkgs/by-name/nc/nco/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nco";
-  version = "5.2.9";
+  version = "5.3.0";
 
   src = fetchFromGitHub {
     owner = "nco";
     repo = "nco";
     rev = finalAttrs.version;
-    hash = "sha256-EEBtHbaPS6LmtZL2xJPVvQmLsJaxMbxcOeFePRPxCws=";
+    hash = "sha256-ACXz+Rd80qejtKqjJMs35l6HwojnFEDtLMinH4DmnTg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ne/next-ls/package.nix

···
 {
   lib,
 
-  beam_minimal,
+  beamPackages,
   fetchFromGitHub,
 }:
 
-let
-  beamPackages = beam_minimal.packages.erlang_27;
-  elixir = beamPackages.elixir_1_17;
-in
-
 beamPackages.mixRelease rec {
   pname = "next-ls";
   version = "0.23.2";
···
   };
 
   mixFodDeps = beamPackages.fetchMixDeps {
-    inherit src version elixir;
+    inherit src version;
     pname = "next-ls-deps";
     hash = "sha256-4Rt5Q0fX+fbncvxyXdpIhgEvn9VYX/QDxDdnbanT21Q=";
   };
-
-  inherit elixir;
-  inherit (beamPackages) erlang;
 
   removeCookie = false;
 

pkgs/by-name/ne/nextcloud-talk-desktop/package.nix

···
 {
   lib,
   stdenv,
+  fetchurl,
   fetchzip,
   autoPatchelfHook,
+  copyDesktopItems,
+  makeDesktopItem,
   nss,
   cairo,
   xorg,
···
     stripRoot = false;
   };
 
-  nativeBuildInputs = [ autoPatchelfHook ];
+  icon = fetchurl {
+    url = "https://raw.githubusercontent.com/nextcloud/talk-desktop/refs/tags/v1.0.0/img/icons/icon.png";
+    hash = "sha256-DteSSuxIs0ukIJrvUO/3Mrh5F2GG5UAVvGRZUuZonkg=";
+  };
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+    copyDesktopItems
+  ];
 
   buildInputs =
     [
···
   # Fixes `Zygote could not fork`
   runtimeDependencies = [ systemd ];
 
+  desktopItems = [
+    (makeDesktopItem {
+      type = "Application";
+      name = "nextcloud-talk-desktop";
+      desktopName = "Nextcloud Talk";
+      comment = finalAttrs.meta.description;
+      exec = finalAttrs.meta.mainProgram;
+      icon = "nextcloud-talk-desktop";
+      categories = [ "Chat" ];
+    })
+  ];
+
   preInstall = ''
     mkdir -p $out/bin
     mkdir -p $out/opt
···
 
     # Link the application in $out/bin away from contents of `preInstall`
     ln -s "$out/opt/Nextcloud Talk-linux-x64/Nextcloud Talk" $out/bin/nextcloud-talk-desktop
+    mkdir -p $out/share/icons/hicolor/512x512/apps
+    cp $icon $out/share/icons/hicolor/512x512/apps/nextcloud-talk-desktop.png
 
     runHook postInstall
   '';

pkgs/by-name/om/omnictl/package.nix

···
 
 buildGoModule rec {
   pname = "omnictl";
-  version = "0.44.1";
+  version = "0.45.0";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-+yN2s8LQbOlN1vkovU0pEl5O9s8NZ8u0TYMh2bTbYCM=";
+    hash = "sha256-FA2lGSeTbJXc/BEWOu43sV2xS9tTwQ+iKrDW2tFAsJ4=";
   };
 
-  vendorHash = "sha256-5K2ZmWYU8+M044mzrqYJv1aZ/E7aRsFWfq19W658SZ4=";
+  vendorHash = "sha256-U/cserG37gM1XDN9HcPqnq4hPJSaOaLBoIs5OcsocYw=";
 
   ldflags = [
     "-s"

pkgs/by-name/pl/plow/package.nix

···
 
 buildGoModule rec {
   pname = "plow";
-  version = "1.3.1";
+  version = "1.3.2";
 
   src = fetchFromGitHub {
     owner = "six-ddc";
     repo = "plow";
     rev = "refs/tags/v${version}";
-    hash = "sha256-TynFq7e4MtZlA5SmGMybhmCVw67yHYgZWffQjuyhTDA=";
+    hash = "sha256-q9k5GzhYPOP8p8VKrqpoHc3B9Qak+4DtZAZZuFlkED0=";
   };
 
-  vendorHash = "sha256-t2lBPyCn8bu9hLsWmaCGir9egbX0mQR+8kB0RfY7nHE=";
+  vendorHash = "sha256-KfnDJI6M6tzfoI7krKId5FXUw27eV6cEoz3UaNrlXWk=";
 
   ldflags = [
     "-s"
     "-w"
+    "-X main.version=${version}"
   ];
 
   passthru.tests.version = testers.testVersion {

pkgs/by-name/si/signaturepdf/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "signaturepdf";
-  version = "1.7.1";
+  version = "1.7.2";
 
   src = fetchFromGitHub {
     owner = "24eme";
     repo = "signaturepdf";
     rev = "v${version}";
-    hash = "sha256-OFsTTF+QmjRv0LdfRTWig6LjRXq1TXWOLeyEX5Ak62o=";
+    hash = "sha256-Mo8r80XgrHdtr7k67MQpWBgTrsUpnyygufwmvUIe2n4=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/sk/skia/package.nix

···
 , cctools
 , zlib
 , apple-sdk_11
+, fixDarwinDylibNames
 
 , enableVulkan ? !stdenv.hostPlatform.isDarwin
 }:
···
     gn
     ninja
     python3
-  ] ++ lib.optionals stdenv.hostPlatform.isDarwin [ xcbuild cctools.libtool zlib ];
+  ] ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    xcbuild
+    cctools.libtool
+    zlib
+    fixDarwinDylibNames
+  ];
 
   buildInputs = [
     expat

pkgs/by-name/tu/tuifimanager/package.nix

···
   python3.pkgs.buildPythonApplication
   rec {
     pname = "tuifimanager";
-    version = "5.0.0";
-    format = "pyproject";
+    version = "5.0.5";
+
+    pyproject = true;
 
     src = fetchFromGitHub {
       owner = "GiorgosXou";
       repo = "TUIFIManager";
       rev = "v.${version}";
-      hash = "sha256-2yYD1YFGoN0uj3HzcYxEs3zbwfUIDLLzvfTcZILx5h4=";
+      hash = "sha256-KwyRGNT3o/Ww+szBI+MmMMw5ZaSPT+G3xJIw5g9iBKo=";
     };
 
+    build-system = with python3.pkgs; [
+      setuptools
+      setuptools-scm
+    ];
+
     nativeBuildInputs =
-      [
-        python3.pkgs.setuptools
-        python3.pkgs.setuptools-scm
-      ]
+      [ ]
       ++ (lib.optionals enableDragAndDrop [
         qt6.wrapQtAppsHook
         makeWrapper

pkgs/by-name/xb/xboxdrv/fix-60-sec-delay.patch

···
-From 7326421eeaadbc2aeb3828628c2e65bb7be323a9 Mon Sep 17 00:00:00 2001
-From: buxit <[e-mail]>
-Date: Wed, 2 Nov 2016 16:25:14 +0100
-Subject: [PATCH] fix 60 seconds delay
-
-use `libusb_handle_events_timeout_completed()` instead of `libusb_handle_events()`
-should fix #144
----
- src/usb_gsource.cpp | 5 ++++-
- 1 file changed, 4 insertions(+), 1 deletion(-)
-
-diff --git a/src/usb_gsource.cpp b/src/usb_gsource.cpp
-index 00bf1315..afb38f65 100644
---- a/src/usb_gsource.cpp
-+++ b/src/usb_gsource.cpp
-@@ -174,7 +174,10 @@ USBGSource::on_source_dispatch(GSource* source, GSourceFunc callback, gpointer u
- gboolean
- USBGSource::on_source()
- {
--  libusb_handle_events(NULL);
-+  struct timeval to;
-+  to.tv_sec = 0;
-+  to.tv_usec = 0;
-+  libusb_handle_events_timeout_completed(NULL, &to, NULL);
-   return TRUE;
- }
- 

pkgs/by-name/xb/xboxdrv/package.nix

···
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  scons,
-  libX11,
-  pkg-config,
-  libusb1,
-  boost,
-  glib,
-  dbus-glib,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "xboxdrv";
-  version = "0.8.8";
-
-  src = fetchFromGitHub {
-    owner = "xboxdrv";
-    repo = "xboxdrv";
-    rev = "v${version}";
-    hash = "sha256-R0Bt4xfzQA1EmZbf7lcWLwSSUayf5Y711QhlAVhiLrY=";
-  };
-
-  makeFlags = [ "PREFIX=$(out)" ];
-  nativeBuildInputs = [
-    pkg-config
-    scons
-  ];
-  buildInputs = [
-    libX11
-    libusb1
-    boost
-    glib
-    dbus-glib
-  ];
-  enableParallelBuilding = true;
-  dontUseSconsInstall = true;
-
-  patches = [
-    ./fix-60-sec-delay.patch
-    ./scons-py3.patch
-    ./scons-v4.2.0.patch
-    ./xboxdrvctl-py3.patch
-  ];
-
-  meta = with lib; {
-    homepage = "https://xboxdrv.gitlab.io/";
-    description = "Xbox/Xbox360 (and more) gamepad driver for Linux that works in userspace";
-    license = licenses.gpl3Plus;
-    maintainers = [ ];
-    platforms = platforms.linux;
-  };
-}

pkgs/by-name/xb/xboxdrv/scons-py3.patch

···
-From 17bd43a7d3ef86216abc36b42b4e6a1f70aa9979 Mon Sep 17 00:00:00 2001
-From: xnick <[e-mail]>
-Date: Thu, 12 Oct 2017 20:34:35 +0300
-Subject: [PATCH] Update SConstruct
-
-python3 compatible
----
- SConstruct | 16 ++++++++--------
- 1 file changed, 8 insertions(+), 8 deletions(-)
-
-diff --git a/SConstruct b/SConstruct
-index 4cd79704..c0007054 100644
---- a/SConstruct
-+++ b/SConstruct
-@@ -19,7 +19,7 @@ def build_dbus_glue(target, source, env):
-     xml = re.sub(r"callback = \(([A-Za-z_]+)\) \(marshal_data \? marshal_data : cc->callback\);",
-                  r"union { \1 fn; void* obj; } conv;\n  "
-                  "conv.obj = (marshal_data ? marshal_data : cc->callback);\n  "
--                 "callback = conv.fn;", xml)
-+                 "callback = conv.fn;", xml.decode('utf-8'))
- 
-     with open(target[0].get_path(), "w") as f:
-         f.write(xml)
-@@ -29,10 +29,10 @@ def build_bin2h(target, source, env):
-     Takes a list of files and converts them into a C source that can be included
-     """
-     def c_escape(str): 
--        return str.translate(string.maketrans("/.-", "___"))
-+        return str.translate(bytes.maketrans(b"/.-", b"___"))
-     
--    print target
--    print source
-+    print(target)
-+    print(source)
-     with open(target[0].get_path(), "w") as fout:
-         fout.write("// autogenerated by scons Bin2H builder, do not edit by hand!\n\n")
- 
-@@ -45,8 +45,8 @@ def build_bin2h(target, source, env):
-                 data = fin.read()
-                 fout.write("// \"%s\"\n" % src.get_path())
-                 fout.write("const char %s[] = {" % c_escape(src.get_path()))
--                bytes_arr = ["0x%02x" % ord(c) for c in data]
--                for i in xrange(len(bytes_arr)):
-+                bytes_arr = ["0x%02x" % c for c in data]
-+                for i in range(len(bytes_arr)):
-                     if i % 13 == 0:
-                         fout.write("\n  ")
-                     fout.write(bytes_arr[i])
-@@ -131,12 +131,12 @@ env.Append(CPPDEFINES = { 'PACKAGE_VERSION': "'\"%s\"'" % package_version })
- conf = Configure(env)
- 
- if not conf.env['CXX']:
--    print "g++ must be installed!"
-+    print('g++ must be installed!')
-     Exit(1)
- 
- # X11 checks
- if not conf.CheckLibWithHeader('X11', 'X11/Xlib.h', 'C++'):
--    print 'libx11-dev must be installed!'
-+    print('libx11-dev must be installed!')
-     Exit(1)
- 
- env = conf.Finish()

pkgs/by-name/xb/xboxdrv/scons-v4.2.0.patch

···
---- a/SConstruct	2021-10-31 20:42:44.232084185 -0400
-+++ b/SConstruct	2021-10-31 20:42:54.063024444 -0400
-@@ -36,7 +36,7 @@
-     with open(target[0].get_path(), "w") as fout:
-         fout.write("// autogenerated by scons Bin2H builder, do not edit by hand!\n\n")
- 
--        if env.has_key("BIN2H_NAMESPACE"):
-+        if "BIN2H_NAMESPACE" in env:
-             fout.write("namespace %s {\n\n" % env["BIN2H_NAMESPACE"])
-             
-         # write down data
-@@ -62,7 +62,7 @@
-                                     for src in source], ",\n"))
-             fout.write("\n}\n\n")
- 
--        if env.has_key("BIN2H_NAMESPACE"):
-+        if "BIN2H_NAMESPACE" in env:
-             fout.write("} // namespace %s\n\n" % env["BIN2H_NAMESPACE"])
-                 
-         fout.write("/* EOF */\n")

pkgs/by-name/xb/xboxdrv/xboxdrvctl-py3.patch

···
---- a/xboxdrvctl	2021-06-21 19:39:51.000000000 -0400
-+++ b/xboxdrvctl 19:43:27.467984928 -0400
-@@ -1,4 +1,4 @@
--#!/usr/bin/env python2
-+#!/usr/bin/env python3
- 
- ##  Xbox360 USB Gamepad Userspace Driver
- ##  Copyright (C) 2011 Ingo Ruhnke <[e-mail]>
-@@ -37,23 +37,23 @@
-                   help="print controller status")
- 
- group.add_option("-s", "--slot", metavar="SLOT", type="int",
--                  dest="slot", 
-+                  dest="slot",
-                   help="use slot SLOT for actions")
- 
- group.add_option("-l", "--led", metavar="NUM", type="int",
--                  dest="led", 
-+                  dest="led",
-                   help="set LED")
- 
--group.add_option("-r", "--rumble", metavar="L:R", 
--                  dest="rumble", 
-+group.add_option("-r", "--rumble", metavar="L:R",
-+                  dest="rumble",
-                   help="print controller status")
- 
- group.add_option("-c", "--config", metavar="NUM", type="int",
--                  dest="config", 
-+                  dest="config",
-                   help="switches to controller configuration NUM")
- 
- group.add_option("--shutdown", action="store_true",
--                  dest="shutdown", 
-+                  dest="shutdown",
-                   help="shuts down the daemon")
- 
- parser.add_option_group(group)
-@@ -69,9 +69,9 @@
-     try:
-         bus.get_object("org.seul.Xboxdrv", '/org/seul/Xboxdrv/Daemon')
-     except dbus.exceptions.DBusException:
--				bus = dbus.SystemBus()
-+        bus = dbus.SystemBus()
- else:
--    print "Error: invalid argument to --bus. Must be 'auto', 'session, or 'system'"
-+    print("Error: invalid argument to --bus. Must be 'auto', 'session, or 'system'")
-     exit()
- 
- if options.status:
-@@ -82,19 +82,19 @@
-     daemon.Shutdown()
- else:
-     if (options.led or options.rumble or options.config) and options.slot == None:
--        print "Error: --slot argument required"
-+        print("Error: --slot argument required")
-         exit()
-     else:
-         if options.slot != None:
-             slot = bus.get_object("org.seul.Xboxdrv", '/org/seul/Xboxdrv/ControllerSlots/%d' % options.slot)
--    
-+
-             if options.led != None:
-                 slot.SetLed(options.led)
- 
-             if options.rumble:
-                 m = re.match('^(\d+):(\d+)$', options.rumble)
-                 if not m:
--                    print "Error: invalid argument to --rumble"
-+                    print("Error: invalid argument to --rumble")
-                     exit()
-                 else:
-                     left  = int(m.group(1))

pkgs/development/beam-modules/default.nix

···
       elvis-erlang = callPackage ./elvis-erlang { };
 
       # BEAM-based languages.
-      elixir = elixir_1_17;
+      elixir = elixir_1_18;
 
       elixir_1_18 = lib'.callElixir ../interpreters/elixir/1.18.nix {
         inherit erlang;
···
       # Remove old versions of elixir, when the supports fades out:
       # https://hexdocs.pm/elixir/compatibility-and-deprecations.html
 
-      ex_doc = callPackage ./ex_doc { inherit elixir fetchMixDeps mixRelease; };
+      ex_doc = callPackage ./ex_doc {
+        inherit fetchMixDeps mixRelease;
+        elixir = elixir_1_17;
+      };
 
       elixir-ls = callPackage ./elixir-ls { inherit elixir fetchMixDeps mixRelease; };
 

pkgs/development/interpreters/elixir/generic-builder.nix

···
       with hot code upgrades.
     '';
 
-    license = licenses.epl10;
+    license = licenses.asl20;
     platforms = platforms.unix;
     maintainers = teams.beam.members;
   };

pkgs/development/ocaml-modules/owl-base/default.nix

···
 
 buildDunePackage rec {
   pname = "owl-base";
-  version = "1.1";
+  version = "1.2";
 
   duneVersion = "3";
 
   src = fetchurl {
     url = "https://github.com/owlbarn/owl/releases/download/${version}/owl-${version}.tbz";
-    hash = "sha256-mDYCZ2z33VTEvc6gV4JTecIXA/vHIWuU37BADGl/yog=";
+    hash = "sha256-OBei5DkZIsiiIltOM8qV2mgJJGmU5r8pGjAMgtjKxsU=";
   };
 
   minimalOCamlVersion = "4.10";

pkgs/development/python-modules/binance-connector/default.nix

···
 
 buildPythonPackage rec {
   pname = "binance-connector";
-  version = "3.10.0";
+  version = "3.11.0";
   format = "setuptools";
 
   disabled = pythonOlder "3.7";
···
   src = fetchFromGitHub {
     owner = "binance";
     repo = "${pname}-python";
-    rev = "refs/tags/v${version}";
-    hash = "sha256-WZUDGUAFy4t5uLtv/p5UkBMX+posilbgEHazIDYFc+Q=";
+    tag = "v${version}";
+    hash = "sha256-qy6J/03GzpvDX+KJz9ZrQc0OoT1LXWD0umN7dMLxxb4=";
   };
 
   propagatedBuildInputs = [

pkgs/development/python-modules/cliff/default.nix

···
 
 buildPythonPackage rec {
   pname = "cliff";
-  version = "4.7.0";
+  version = "4.8.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-bKRfjfUZu8ByLGEEnee35EKkZfp/P1Urltc1+ib9WyY=";
+    hash = "sha256-I+/1AuYDzwqoQerqZmKkLNMGQWkWKz5ZayAiZADjTf0=";
   };
 
   postPatch = ''

pkgs/development/python-modules/ffmpy/default.nix

···
 
 buildPythonPackage rec {
   pname = "ffmpy";
-  version = "0.4.0";
+  version = "0.5.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8.1";
···
     owner = "Ch00k";
     repo = "ffmpy";
     rev = "refs/tags/${version}";
-    hash = "sha256-XWI0Hq4vf9Q0/dRzmu1B7EQHdQRkWaNJaBaqusWW7YM=";
+    hash = "sha256-spbyz1EyMJRXJTm7TqN9XoqR9ztBKsNZx3NURwV7N2w=";
   };
 
   postPatch = ''
     # default to store ffmpeg
-    substituteInPlace ffmpy.py \
+    substituteInPlace ffmpy/ffmpy.py \
       --replace-fail \
         'executable: str = "ffmpeg",' \
         'executable: str = "${ffmpeg-headless}/bin/ffmpeg",'

pkgs/development/python-modules/inform/default.nix

···
 
 buildPythonPackage rec {
   pname = "inform";
-  version = "1.32";
+  version = "1.33";
   format = "pyproject";
 
   disabled = pythonOlder "3.7";
···
   src = fetchFromGitHub {
     owner = "KenKundert";
     repo = "inform";
-    rev = "refs/tags/v${version}";
-    hash = "sha256-RWcplWgGaIoiOZ28oPU4LtXQhwaTImc4bGHokHM5Kpg=";
+    tag = "v${version}";
+    hash = "sha256-YX+YT3pocauIAsxsfIM+TchiXYMGYVwiE84NnXoZDqQ=";
   };
 
   nativeBuildInputs = [ flit-core ];

pkgs/development/python-modules/latexify-py/default.nix

···
 
 buildPythonPackage rec {
   pname = "latexify-py";
-  version = "0.4.3-post1";
+  version = "0.4.4";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchFromGitHub {
     owner = "google";
     repo = "latexify_py";
-    rev = "refs/tags/v${version}";
-    hash = "sha256-4924pqgc+C8VDTTK5Dac6UJV0tcicVBdnkWvE1ynyvY=";
+    tag = "v${version}";
+    hash = "sha256-tyBIOIVRSNrhO1NOD7Zqmiksrvrm42DUY4w1IocVRl4=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/mkdocs-awesome-pages-plugin/default.nix

···
 }:
 buildPythonPackage rec {
   pname = "mkdocs-awesome-pages-plugin";
-  version = "2.9.3";
+  version = "2.10.1";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
   src = fetchFromGitHub {
     owner = "lukasgeiter";
     repo = "mkdocs-awesome-pages-plugin";
-    rev = "refs/tags/v${version}";
-    hash = "sha256-jDPoMAJ20n9bQu11CRNvKLQthRUh3+jR6t+fM3+vGzY=";
+    tag = "v${version}";
+    hash = "sha256-p/oG2SvGZrRbIS2yhW3M1+t+OO0przeNsFUtqObNDUA=";
   };
 
   propagatedBuildInputs = [

pkgs/development/python-modules/oslo-concurrency/default.nix

···
 
 buildPythonPackage rec {
   pname = "oslo-concurrency";
-  version = "6.1.0";
+  version = "6.2.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "oslo.concurrency";
     inherit version;
-    hash = "sha256-tWSuCvLuV3DztuYw3yakuGdsf+Qih/GIPiWaUard8Jc=";
+    hash = "sha256-q515k1EZ4ryw7et/hYcjaveEQkSrhxU3ILjKhDfRvgI=";
   };
 
   postPatch = ''

pkgs/development/python-modules/oslo-config/default.nix

···
 
 buildPythonPackage rec {
   pname = "oslo-config";
-  version = "9.6.0";
+  version = "9.7.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "oslo.config";
     inherit version;
-    hash = "sha256-nwXvcOSNmmGo0Mm+04naJPLvWonfW26N63x0HWETZn4=";
+    hash = "sha256-s3Hr8/mmPpK4HVxyuE0vlvQFU1MmmcaOHFzYyp7KCIs=";
   };
 
   postPatch = ''

pkgs/development/python-modules/oslo-i18n/default.nix

···
 
 buildPythonPackage rec {
   pname = "oslo-i18n";
-  version = "6.4.0";
+  version = "6.5.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "oslo.i18n";
     inherit version;
-    hash = "sha256-ZuBMBB6f8X0H4T7H9IKV+8NhaRQ8csojUqPvzJjntgg=";
+    hash = "sha256-k5O8rpLq3F93ETLRxqsjmxmJb/bYheOvwhqfqk3pJNM=";
   };
 
   postPatch = ''

pkgs/development/python-modules/oslo-serialization/default.nix

···
   oslo-utils,
   oslotest,
   pbr,
-  pytz,
   setuptools,
   stestr,
 }:
 
 buildPythonPackage rec {
   pname = "oslo-serialization";
-  version = "5.5.0";
+  version = "5.6.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "oslo.serialization";
     inherit version;
-    hash = "sha256-nnUvxdipdZVnKN2WqCGGeDs/78rLs1U6zZMwWIYeFaY=";
+    hash = "sha256-TH1OEtqFPMTwS5EjBBE06Iboyf9Xq1fBli061Kh7f3w=";
   };
 
   postPatch = ''
···
   dependencies = [
     msgpack
     oslo-utils
-    pytz
   ];
 
   nativeCheckInputs = [

pkgs/development/python-modules/posthog/default.nix

···
     "test_request"
     "test_trying_to_use_django_integration"
     "test_upload"
+    # AssertionError: 2 != 3
+    "test_flush_interval"
   ];
 
   meta = with lib; {

pkgs/development/python-modules/pyiceberg/default.nix

···
     hash = "sha256-L3YlOtzJv9R4TLeJGzfMQ+0nYtQEsqmgNZpW9B6vVAI=";
   };
 
-  patches = lib.optionals (pythonOlder "3.12") [
+  patches = [
     # Build script fails to build the cython extension on python 3.11 (no issues with python 3.12):
     # distutils.errors.DistutilsSetupError: each element of 'ext_modules' option must be an Extension instance or 2-tuple
     # This error vanishes if Cython and setuptools imports are swapped

pkgs/development/python-modules/python-neutronclient/default.nix

···
     hash = "sha256-U82ZI/Q6OwdypA41YfdGVa3IA4+QJhqz3gW2IR0S7cs=";
   };
 
+  patches = [
+    # fix wheel metadata to support python 3.12
+    # based on https://github.com/openstack/python-neutronclient/commit/f882f1ddb60bcd77096eb8a74e9e86d10723e8be
+    ./python-3.12.diff
+  ];
+
   build-system = [
     setuptools
     pbr
···
 
   meta = with lib; {
     description = "Python bindings for the OpenStack Networking API";
-    homepage = "https://opendev.org/openstack/python-neutronclient/";
+    homepage = "https://github.com/openstack/python-neutronclient/";
     license = licenses.asl20;
     maintainers = teams.openstack.members;
   };

pkgs/development/python-modules/python-neutronclient/python-3.12.diff

···
+--- a/setup.cfg	2024-12-25 04:00:53.429397282 +0100
++++ b/setup.cfg	2024-12-25 04:03:48.308447471 +0100
+@@ -6,7 +6,7 @@
+ author = OpenStack Networking Project
+ author_email = [e-mail]
+ home_page = https://docs.openstack.org/python-neutronclient/latest/
+-python_requires = >=3.8
++python_requires = >=3.9
+ classifier = 
+ 	Environment :: OpenStack
+ 	Intended Audience :: Developers
+@@ -18,8 +18,10 @@
+ 	Programming Language :: Python :: Implementation :: CPython
+ 	Programming Language :: Python :: 3 :: Only
+ 	Programming Language :: Python :: 3
+-	Programming Language :: Python :: 3.8
+ 	Programming Language :: Python :: 3.9
++	Programming Language :: Python :: 3.10
++	Programming Language :: Python :: 3.11
++	Programming Language :: Python :: 3.12
+ 
+ [files]
+ packages = 

pkgs/development/python-modules/tempest/default.nix

···
 
 buildPythonPackage rec {
   pname = "tempest";
-  version = "41.0.0";
+  version = "42.0.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-e0cxWm0ZNQl2bJnVzcMiiN+Wadd65nJZoLJnBRr2Qqw=";
+    hash = "sha256-nW6cSOhC56YkyUQiXcJTqaojRseIf9q8YGSe4skhTA4=";
   };
 
   pythonRelaxDeps = [ "defusedxml" ];

pkgs/development/python-modules/tpm2-pytss/default.nix

···
   substituteAll,
   buildPythonPackage,
   fetchPypi,
+  fetchpatch,
   pythonOlder,
   asn1crypto,
   cffi,
···
     [
       # Fix hardcoded `fapi-config.json` configuration path
       ./fapi-config.patch
+      # libtpms (underneath swtpm) bumped the TPM revision
+      # https://github.com/tpm2-software/tpm2-pytss/pull/593
+      (fetchpatch {
+        url = "https://github.com/tpm2-software/tpm2-pytss/pull/593.patch";
+        hash = "sha256-CNJnSIvUQ0Yvy0o7GdVfFZ7kHJd2hBt5Zv1lqgOeoks=";
+      })
     ]
     ++ lib.optionals isCross [
       # pytss will regenerate files from headers of tpm2-tss.

pkgs/servers/nextcloud/packages/28.json

···
 {
   "bookmarks": {
-    "hash": "sha256-xwyft6RGra/T9l8TSRRmWN50ZrdfTlZy3/pIpq/IzZs=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v14.2.6/bookmarks-14.2.6.tar.gz",
-    "version": "14.2.6",
+    "hash": "sha256-T0XDgDnAAI3ifOwz6BNCtjj6ZDXOhhUSLRIJKdD4qaQ=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v14.2.7/bookmarks-14.2.7.tar.gz",
+    "version": "14.2.7",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users and via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
···
     "hash": "sha256-63yeX5w8nOdZuzbICJ6hJCjIHzigBKJToTPoEVPm/EE=",
     "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.12.6/deck-v1.12.6.tar.gz",
     "version": "1.12.6",
-    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in Markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your Markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
+    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
     "homepage": "https://github.com/nextcloud/deck",
     "licenses": [
       "agpl"
···
     ]
   },
   "mail": {
-    "hash": "sha256-3204b2WiDc1Oa4dFgdmwVAGBlhCeAUqUiCwI2muzZHI=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v3.7.15/mail-v3.7.15.tar.gz",
-    "version": "3.7.15",
+    "hash": "sha256-59ra95yAOnHG+a6sSK6dJmmZ7qqUqtanfrw1jjpTjQ0=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v3.7.17/mail-v3.7.17.tar.gz",
+    "version": "3.7.17",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
···
     ]
   },
   "polls": {
-    "hash": "sha256-7KSQDY2LXMWEbo3PFH3VMfq819swNnxCT5kiFvHI83s=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.5/polls-v7.2.5.tar.gz",
-    "version": "7.2.5",
+    "hash": "sha256-l0oK9go7NVkTJCyC1sagWwZpa/R5ZQsXTOishNSpYuw=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.6/polls-v7.2.6.tar.gz",
+    "version": "7.2.6",
     "description": "A polls app, similar to Doodle/Dudle with the possibility to restrict access (members, certain groups/users, hidden and public).",
     "homepage": "https://github.com/nextcloud/polls",
     "licenses": [

pkgs/servers/nextcloud/packages/29.json

···
 {
   "bookmarks": {
-    "hash": "sha256-xwyft6RGra/T9l8TSRRmWN50ZrdfTlZy3/pIpq/IzZs=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v14.2.6/bookmarks-14.2.6.tar.gz",
-    "version": "14.2.6",
+    "hash": "sha256-T0XDgDnAAI3ifOwz6BNCtjj6ZDXOhhUSLRIJKdD4qaQ=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v14.2.7/bookmarks-14.2.7.tar.gz",
+    "version": "14.2.7",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users and via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
···
     "hash": "sha256-yhUkB1IodvWOg2fl+gJW3x68YrG0+eyIrrlpXTFVAwE=",
     "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.13.3/deck-v1.13.3.tar.gz",
     "version": "1.13.3",
-    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in Markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your Markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
+    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
     "homepage": "https://github.com/nextcloud/deck",
     "licenses": [
       "agpl"
···
     ]
   },
   "groupfolders": {
-    "hash": "sha256-LCVfAx4nkbzs8CQzQlm8mlO23MB4/SKr9pFk+K1Pl6M=",
-    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v17.0.7/groupfolders-v17.0.7.tar.gz",
-    "version": "17.0.7",
+    "hash": "sha256-YZEc1KJ+kkUBbdgmMT8mNVVdpHeVJbXsF+AqBA9Icac=",
+    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v17.0.8/groupfolders-v17.0.8.tar.gz",
+    "version": "17.0.8",
     "description": "Admin configured folders shared with everyone in a group.\n\nFolders can be configured from *Group folders* in the admin settings.\n\nAfter a folder is created, the admin can give access to the folder to one or more groups, control their write/sharing permissions and assign a quota for the folder.",
     "homepage": "https://github.com/nextcloud/groupfolders",
     "licenses": [
···
     ]
   },
   "mail": {
-    "hash": "sha256-3204b2WiDc1Oa4dFgdmwVAGBlhCeAUqUiCwI2muzZHI=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v3.7.15/mail-v3.7.15.tar.gz",
-    "version": "3.7.15",
+    "hash": "sha256-59ra95yAOnHG+a6sSK6dJmmZ7qqUqtanfrw1jjpTjQ0=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v3.7.17/mail-v3.7.17.tar.gz",
+    "version": "3.7.17",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
···
     ]
   },
   "news": {
-    "hash": "sha256-J4d98sk8YqU/mgMjVMU3FZ6rq2uzopljoHFQsuZ5ztA=",
-    "url": "https://github.com/nextcloud/news/releases/download/25.1.0/news.tar.gz",
-    "version": "25.1.0",
+    "hash": "sha256-LnOu1zhD9sWlM81iQSdlClLRVyZFF3DLH6zrx1NYsr8=",
+    "url": "https://github.com/nextcloud/news/releases/download/25.1.2/news.tar.gz",
+    "version": "25.1.2",
     "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
     "homepage": "https://github.com/nextcloud/news",
     "licenses": [
···
     ]
   },
   "polls": {
-    "hash": "sha256-7KSQDY2LXMWEbo3PFH3VMfq819swNnxCT5kiFvHI83s=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.5/polls-v7.2.5.tar.gz",
-    "version": "7.2.5",
+    "hash": "sha256-l0oK9go7NVkTJCyC1sagWwZpa/R5ZQsXTOishNSpYuw=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.6/polls-v7.2.6.tar.gz",
+    "version": "7.2.6",
     "description": "A polls app, similar to Doodle/Dudle with the possibility to restrict access (members, certain groups/users, hidden and public).",
     "homepage": "https://github.com/nextcloud/polls",
     "licenses": [

pkgs/servers/nextcloud/packages/30.json

···
 {
   "bookmarks": {
-    "hash": "sha256-sLXfAkykRU8y1XuxLUQBQt5oSPVJLwNtUDl9+7j4PV8=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v15.0.3/bookmarks-15.0.3.tar.gz",
-    "version": "15.0.3",
+    "hash": "sha256-T/B+L2dhCyUCMYEyUQDMOCeMOBASIW7/A7RPtCol5Kc=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v15.0.4/bookmarks-15.0.4.tar.gz",
+    "version": "15.0.4",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users and via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
···
     ]
   },
   "calendar": {
-    "hash": "sha256-HWe9YFSJuV6AFvLy+QO8kioK+VnUESaHUwxdfNPNue8=",
-    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v5.0.6/calendar-v5.0.6.tar.gz",
-    "version": "5.0.6",
+    "hash": "sha256-P536HKK0dX6LYX4GXu8hgOrbGnsJ8bY3Ou7aR2Hh51k=",
+    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v5.0.8/calendar-v5.0.8.tar.gz",
+    "version": "5.0.8",
     "description": "The Calendar app is a user interface for Nextcloud's CalDAV server. Easily sync events from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Contacts - more to come.\n* 🌐 **WebCal Support!** Want to see your favorite team’s matchdays in your calendar? No problem!\n* 🙋 **Attendees!** Invite people to your events\n* ⌚️ **Free/Busy!** See when your attendees are available to meet\n* ⏰ **Reminders!** Get alarms for events inside your browser and via email\n* 🔍 Search! Find your events at ease\n* ☑️ Tasks! See tasks with a due date directly in the calendar\n* 🙈 **We’re not reinventing the wheel!** Based on the great [c-dav library](https://github.com/nextcloud/cdav-library), [ical.js](https://github.com/mozilla-comm/ical.js) and [fullcalendar](https://github.com/fullcalendar/fullcalendar) libraries.",
     "homepage": "https://github.com/nextcloud/calendar/",
     "licenses": [
···
     ]
   },
   "contacts": {
-    "hash": "sha256-M3AC9KT3aMpDYeGgfqVWdI4Lngg/yw/36HSBS3N+G5c=",
+    "hash": "sha256-Slk10WZfUQGsYnruBR5APSiuBd3jh3WG1GIqKhTUdfU=",
     "url": "https://github.com/nextcloud-releases/contacts/releases/download/v6.1.2/contacts-v6.1.2.tar.gz",
-    "version": "6.1.1",
+    "version": "6.1.2",
     "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
     "homepage": "https://github.com/nextcloud/contacts#readme",
     "licenses": [
···
     ]
   },
   "cospend": {
-    "hash": "sha256-N2Vj5LTJpXEedKZljJGJfPSikh6qNBh8OKN7Ne3gt3o=",
-    "url": "https://github.com/julien-nc/cospend-nc/releases/download/v2.0.0/cospend-2.0.0.tar.gz",
-    "version": "2.0.0",
+    "hash": "sha256-3Jbti6plql9O9kknhZOlpqDtwPI0SYlnXP1qr0ZNpDA=",
+    "url": "https://github.com/julien-nc/cospend-nc/releases/download/v3.0.7/cospend-3.0.7.tar.gz",
+    "version": "3.0.7",
     "description": "# Nextcloud Cospend 💰\n\nNextcloud Cospend is a group/shared budget manager. It was inspired by the great [IHateMoney](https://github.com/spiral-project/ihatemoney/).\n\nYou can use it when you share a house, when you go on vacation with friends, whenever you share expenses with a group of people.\n\nIt lets you create projects with members and bills. Each member has a balance computed from the project bills. Balances are not an absolute amount of money at members disposal but rather a relative information showing if a member has spent more for the group than the group has spent for her/him, independently of exactly who spent money for whom. This way you can see who owes the group and who the group owes. Ultimately you can ask for a settlement plan telling you which payments to make to reset members balances.\n\nProject members are independent from Nextcloud users. Projects can be shared with other Nextcloud users or via public links.\n\n[MoneyBuster](https://gitlab.com/eneiluj/moneybuster) Android client is [available in F-Droid](https://f-droid.org/packages/net.eneiluj.moneybuster/) and on the [Play store](https://play.google.com/store/apps/details?id=net.eneiluj.moneybuster).\n\n[PayForMe](https://github.com/mayflower/PayForMe) iOS client is currently under developpement!\n\nThe private and public APIs are documented using [the Nextcloud OpenAPI extractor](https://github.com/nextcloud/openapi-extractor/). This documentation can be accessed directly in Nextcloud. All you need is to install Cospend (>= v1.6.0) and use the [the OCS API Viewer app](https://apps.nextcloud.com/apps/ocs_api_viewer) to browse the OpenAPI documentation.\n\n## Features\n\n* ✎ Create/edit/delete projects, members, bills, bill categories, currencies\n* ⚖ Check member balances\n* 🗠 Display project statistics\n* ♻ Display settlement plan\n* Move bills from one project to another\n* Move bills to trash before actually deleting them\n* Archive old projects before deleting them\n* 🎇 Automatically create reimbursement bills from settlement plan\n* 🗓 Create recurring bills (day/week/month/year)\n* 📊 Optionally provide custom amount for each member in new bills\n* 🔗 Link personal files to bills (picture of physical receipt for example)\n* 👩 Public links for people outside Nextcloud (can be password protected)\n* 👫 Share projects with Nextcloud users/groups/circles\n* 🖫 Import/export projects as csv (compatible with csv files from IHateMoney and SplitWise)\n* 🔗 Generate link/QRCode to easily add projects in MoneyBuster\n* 🗲 Implement Nextcloud notifications and activity stream\n\nThis app usually support the 2 or 3 last major versions of Nextcloud.\n\nThis app is under development.\n\n🌍 Help us to translate this app on [Nextcloud-Cospend/MoneyBuster Crowdin project](https://crowdin.com/project/moneybuster).\n\n⚒ Check out other ways to help in the [contribution guidelines](https://github.com/julien-nc/cospend-nc/blob/master/CONTRIBUTING.md).\n\n## Documentation\n\n* [User documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/user.md)\n* [Admin documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/admin.md)\n* [Developer documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/dev.md)\n* [CHANGELOG](https://github.com/julien-nc/cospend-nc/blob/master/CHANGELOG.md#change-log)\n* [AUTHORS](https://github.com/julien-nc/cospend-nc/blob/master/AUTHORS.md#authors)\n\n## Known issues\n\n* It does not make you rich\n\nAny feedback will be appreciated.\n\n\n\n## Donation\n\nI develop this app during my free time.\n\n* [Donate with Paypal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=66PALMY8SF5JE) (you don't need a paypal account)\n* [Donate with Liberapay : ![Donate using Liberapay](https://liberapay.com/assets/widgets/donate.svg)](https://liberapay.com/eneiluj/donate)",
     "homepage": "https://github.com/julien-nc/cospend-nc",
     "licenses": [
···
     "hash": "sha256-BiUu//ouJiQt/BhrDBH16yGHoH4Kzb260A7ALIqSyEk=",
     "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.14.2/deck-v1.14.2.tar.gz",
     "version": "1.14.2",
-    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in Markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your Markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
+    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
     "homepage": "https://github.com/nextcloud/deck",
     "licenses": [
       "agpl"
···
     ]
   },
   "groupfolders": {
-    "hash": "sha256-drHfR9EagYg1zUyrk7i841PDOTZZNJmRJFLA5ft6TTs=",
-    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v18.0.7/groupfolders-v18.0.7.tar.gz",
-    "version": "18.0.7",
+    "hash": "sha256-+AhyN/GfGpom+pdFDnYt90j66bWKCWntSsE/kOo4sB8=",
+    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v18.0.8/groupfolders-v18.0.8.tar.gz",
+    "version": "18.0.8",
     "description": "Admin configured folders shared with everyone in a group.\n\nFolders can be configured from *Group folders* in the admin settings.\n\nAfter a folder is created, the admin can give access to the folder to one or more groups, control their write/sharing permissions and assign a quota for the folder.",
     "homepage": "https://github.com/nextcloud/groupfolders",
     "licenses": [
···
     ]
   },
   "mail": {
-    "hash": "sha256-m3S4PWNsToqP0QodpJopt0A7nBVB/3vvZA92C9viiNk=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v4.0.7/mail-stable4.0.tar.gz",
-    "version": "4.0.7",
+    "hash": "sha256-l0GrQzJWyz16gYL6vZWwDgrnEm1xW1xGnPfycsz4mkU=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v4.1.1/mail-v4.1.1.tar.gz",
+    "version": "4.1.1",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
···
     ]
   },
   "maps": {
-    "hash": "sha256-Rsg+26VNEX4lAHESfWQgbxvsAO/krvrml8pqBGfDXts=",
-    "url": "https://github.com/nextcloud/maps/releases/download/v1.5.0-1-nightly/maps-1.5.0-1-nightly.tar.gz",
+    "hash": "sha256-CsffBLHjgL/DeXo8ryGKFzvQ/RA4V7hfuFdllDfL0yg=",
+    "url": "https://github.com/nextcloud/maps/releases/download/v1.5.0/maps-1.5.0.tar.gz",
     "version": "1.5.0",
     "description": "**The whole world fits inside your cloud!**\n\n- **🗺 Beautiful map:** Using [OpenStreetMap](https://www.openstreetmap.org) and [Leaflet](https://leafletjs.com), you can choose between standard map, satellite, topographical, dark mode or even watercolor! 🎨\n- **⭐ Favorites:** Save your favorite places, privately! Sync with [GNOME Maps](https://github.com/nextcloud/maps/issues/30) and mobile apps is planned.\n- **🧭 Routing:** Possible using either [OSRM](http://project-osrm.org), [GraphHopper](https://www.graphhopper.com) or [Mapbox](https://www.mapbox.com).\n- **🖼 Photos on the map:** No more boring slideshows, just show directly where you were!\n- **🙋 Contacts on the map:** See where your friends live and plan your next visit.\n- **📱 Devices:** Lost your phone? Check the map!\n- **〰 Tracks:** Load GPS tracks or past trips. Recording with [PhoneTrack](https://f-droid.org/en/packages/net.eneiluj.nextcloud.phonetrack/) or [OwnTracks](https://owntracks.org) is planned.",
     "homepage": "https://github.com/nextcloud/maps",
···
     ]
   },
   "news": {
-    "hash": "sha256-J4d98sk8YqU/mgMjVMU3FZ6rq2uzopljoHFQsuZ5ztA=",
-    "url": "https://github.com/nextcloud/news/releases/download/25.1.0/news.tar.gz",
-    "version": "25.1.0",
+    "hash": "sha256-LnOu1zhD9sWlM81iQSdlClLRVyZFF3DLH6zrx1NYsr8=",
+    "url": "https://github.com/nextcloud/news/releases/download/25.1.2/news.tar.gz",
+    "version": "25.1.2",
     "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
     "homepage": "https://github.com/nextcloud/news",
     "licenses": [
···
     ]
   },
   "polls": {
-    "hash": "sha256-7KSQDY2LXMWEbo3PFH3VMfq819swNnxCT5kiFvHI83s=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.5/polls-v7.2.5.tar.gz",
-    "version": "7.2.5",
+    "hash": "sha256-l0oK9go7NVkTJCyC1sagWwZpa/R5ZQsXTOishNSpYuw=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v7.2.6/polls-v7.2.6.tar.gz",
+    "version": "7.2.6",
     "description": "A polls app, similar to Doodle/Dudle with the possibility to restrict access (members, certain groups/users, hidden and public).",
     "homepage": "https://github.com/nextcloud/polls",
     "licenses": [
···
     ]
   },
   "spreed": {
-    "hash": "sha256-VIqW/F+wU4HmLVBcFpICEUaugU8BkDmOAjolbHdJ6VY=",
-    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v20.1.0/spreed-v20.1.0.tar.gz",
-    "version": "20.1.0",
+    "hash": "sha256-S5bl2wiuEiS4e1cnt5/R6zgFslDEnoEd9Bkl9H9ufE4=",
+    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v20.1.1/spreed-v20.1.1.tar.gz",
+    "version": "20.1.1",
     "description": "Chat, video & audio-conferencing using WebRTC\n\n* 💬 **Chat** Nextcloud Talk comes with a simple text chat, allowing you to share or upload files from your Nextcloud Files app or local device and mention other participants.\n* 👥 **Private, group, public and password protected calls!** Invite someone, a whole group or send a public link to invite to a call.\n* 🌐 **Federated chats** Chat with other Nextcloud users on their servers\n* 💻 **Screen sharing!** Share your screen with the participants of your call.\n* 🚀 **Integration with other Nextcloud apps** like Files, Calendar, User status, Dashboard, Flow, Maps, Smart picker, Contacts, Deck, and many more.\n* 🌉 **Sync with other chat solutions** With [Matterbridge](https://github.com/42wim/matterbridge/) being integrated in Talk, you can easily sync a lot of other chat solutions to Nextcloud Talk and vice-versa.",
     "homepage": "https://github.com/nextcloud/spreed",
     "licenses": [

pkgs/shells/nushell/plugins/skim.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "nu_plugin_skim";
-  version = "0.9.1";
+  version = "0.11.1";
 
   src = fetchFromGitHub {
     owner = "idanarye";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-cPM4Z1o2ED8Q5u9AcnwBv+SOvuE2C4NO9xC7PfX+ntk=";
+    hash = "sha256-z+NT5WjwBn5yrdQNuERswZgsfM4OJPKssWPyClIi0Fk=";
   };
 
-  cargoHash = "sha256-93GSnw/3Ms83bYEyRRc2sguUpR7BIWz8hgqzXdU5CF4=";
+  cargoHash = "sha256-IcecexmlWjpmqgkuhJv58+GeLhi8cHNItKzUHC3+UCc=";
 
   nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ rustPlatform.bindgenHook ];
   buildInputs = lib.optionals stdenv.hostPlatform.isDarwin [

pkgs/tools/networking/lychee/default.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "lychee";
-  version = "0.17.0";
+  version = "0.18.0";
 
   src = fetchFromGitHub {
     owner = "lycheeverse";
     repo = pname;
     rev = "lychee-v${version}";
-    hash = "sha256-flfKo7rN2//ho6q7Iv8tDK8d+5kjpAYELZZHwwZaV/E=";
+    hash = "sha256-DRGby8Ov7Mosz4FVz/w2ECkvyuBktL9PTnUYds+mCI8=";
   };
 
-  cargoHash = "sha256-K0B1o27vXCoQPt1FoX1AXLeYUHiNVzYStU/dkpw6+xQ=";
+  cargoHash = "sha256-pD8UQEdZwZNAeON4zKYa6nUaz87vx7n/Op8H5NtXRZo=";
 
   nativeBuildInputs = [ pkg-config ];
 
   buildInputs = [ openssl ];
+
+  cargoTestFlags = [
+    # don't run doctests since they tend to use the network
+    "--lib"
+    "--bins"
+    "--tests"
+  ];
 
   checkFlags = [
     #  Network errors for all of these tests

pkgs/top-level/aliases.nix

···
   x509-limbo = throw "'x509-limbo' has been removed from nixpkgs"; # Added 2024-10-22
   xarchive = throw "'xarchive' has been removed due to lack of maintenance upstream. Consider using 'file-roller' instead"; # Added 2024-10-19
   xbmc-retroarch-advanced-launchers = throw "'xbmc-retroarch-advanced-launchers' has been renamed to/replaced by 'kodi-retroarch-advanced-launchers'"; # Converted to throw 2024-10-17
+  xboxdrv = throw "'xboxdrv' has been dropped as it has been superseded by an in-tree kernel driver"; # Added 2024-12-25
   xdg_utils = throw "'xdg_utils' has been renamed to/replaced by 'xdg-utils'"; # Converted to throw 2024-10-17
   xen-light = throw "'xen-light' has been renamed to/replaced by 'xen-slim'"; # Added 2024-06-30
   xen-slim = throw "'xen-slim' has been renamed to 'xen'. The old Xen package with built-in components no longer exists"; # Added 2024-10-05

pkgs/top-level/all-packages.nix

···
 
   kavita = callPackage ../servers/web-apps/kavita { };
 
-  livebook = callPackage ../servers/web-apps/livebook {
+  livebook = callPackage ../by-name/li/livebook/package.nix {
     elixir = elixir_1_17;
     beamPackages = beamPackages.extend (self: super: { elixir = elixir_1_17; });
   };
···
 
   ladspa-sdk = callPackage ../applications/audio/ladspa-sdk { };
 
-  ladybird = callPackage ../applications/networking/browsers/ladybird {
-    stdenv = if stdenv.hostPlatform.isDarwin then overrideSDK stdenv "11.0" else stdenv;
-    inherit (darwin.apple_sdk_11_0.frameworks) AppKit Cocoa Foundation OpenGL;
-  };
+  ladybird = callPackage ../applications/networking/browsers/ladybird { };
 
   lemonbar = callPackage ../applications/window-managers/lemonbar { };