Merge staging-next into staging

doc/release-notes/rl-2505.section.md

···
   For those unable to upgrade yet, there is a [v0 compatibility mode](https://www.openpolicyagent.org/docs/v1.0.1/v0-compatibility/)
   available too.
 
+- `helmfile` was updated to v1.0.0, which introduces several breaking changes.
+  See the release notes of
+  [v1.0.0](https://github.com/helmfile/helmfile/releases/v1.0.0) for more
+  information.
+
 - `vscode-utils.buildVscodeExtension` now requires pname as an argument
 
 - `nerdfonts` has been separated into individual font packages under the namespace `nerd-fonts`. The directories for font
···
 
 ### NexusMods.App upgraded {#sec-nixpkgs-release-25.05-incompatibilities-nexusmods-app-upgraded}
 
-- `nexusmods-app` has been upgraded from version 0.6.3 to 0.9.2.
+- `nexusmods-app` has been upgraded from version 0.6.3 to 0.10.2.
 
   - Before upgrading, you **must reset all app state** (mods, games, settings, etc). NexusMods.App will crash if any state from a version older than 0.7.0 is still present.
 

maintainers/maintainer-list.nix

···
     githubId = 450276;
     name = "Nick Hu";
   };
+  nicklewis = {
+    email = "[e-mail]";
+    github = "nicklewis";
+    githubId = 115494;
+    name = "Nick Lewis";
+  };
   nicknovitski = {
     email = "[e-mail]";
     github = "nicknovitski";

nixos/tests/all-tests.nix

···
   schleuder = handleTest ./schleuder.nix { };
   scion-freestanding-deployment = handleTest ./scion/freestanding-deployment { };
   scrutiny = runTest ./scrutiny.nix;
+  scx = runTest ./scx/default.nix;
   sddm = handleTest ./sddm.nix { };
   sdl3 = handleTest ./sdl3.nix { };
   seafile = handleTest ./seafile.nix { };

nixos/tests/scx/default.nix

···
+{ pkgs, ... }:
+
+{
+  name = "scx_full";
+  meta = {
+    inherit (pkgs.scx.full.meta) maintainers;
+  };
+
+  nodes.machine = {
+    boot.kernelPackages = pkgs.linuxPackages_latest;
+    services.scx.enable = true;
+
+    specialisation = {
+      bpfland.configuration.services.scx.scheduler = "scx_bpfland";
+      central.configuration.services.scx.scheduler = "scx_central";
+      lavd.configuration.services.scx.scheduler = "scx_lavd";
+      rlfifo.configuration.services.scx.scheduler = "scx_rlfifo";
+      rustland.configuration.services.scx.scheduler = "scx_rustland";
+      rusty.configuration.services.scx.scheduler = "scx_rusty";
+    };
+  };
+
+  testScript = ''
+    specialisation = [
+      "bpfland",
+      "central",
+      "lavd",
+      "rlfifo",
+      "rustland",
+      "rusty"
+    ]
+
+    def activate_specialisation(name: str):
+      machine.succeed(f"/run/booted-system/specialisation/{name}/bin/switch-to-configuration test >&2")
+
+    for sched in specialisation:
+      with subtest(f"{sched}"):
+        activate_specialisation(sched)
+        machine.succeed("systemctl restart scx.service")
+        machine.succeed(f"ps -U root -u root u | grep scx_{sched}")
+  '';
+}

pkgs/applications/networking/cluster/helmfile/default.nix

···
 
 buildGoModule rec {
   pname = "helmfile";
-  version = "0.171.0";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "helmfile";
     repo = "helmfile";
     rev = "v${version}";
-    hash = "sha256-zZt0YxGbDqIhg2tXjQo5QnD09ASOUgFyQ1uWbGcujkc=";
+    hash = "sha256-JvjReRKFTwKku7DXjS8zq/KFdbPU9B9EccYUmTMLV6E=";
   };
 
-  vendorHash = "sha256-sGqnM40Y1nr9dXcSSC1lkwh1ToRLpCMiWJhyMcxxH9U=";
+  vendorHash = "sha256-SWvRnoqxNJMRdAomvkIxGOdyeqVWblM9LaQ4wF2g6ms=";
 
   proxyVendor = true; # darwin/linux hash mismatch
 

pkgs/by-name/ap/apkid/package.nix

···
 
 python3.pkgs.buildPythonApplication rec {
   pname = "apkid";
-  version = "2.1.5";
-  format = "setuptools";
+  version = "3.0.0";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rednaga";
     repo = "APKiD";
     tag = "v${version}";
-    hash = "sha256-yO3k2kT043/KkiCjDnNUlqxX86kQqMZ+CghD+yon3r4=";
+    hash = "sha256-/8p2qR1je65k1irXFcCre2e16rhGjcu0+u6RChMYTWQ=";
   };
 
-  propagatedBuildInputs = with python3.pkgs; [
-    yara-python
-  ];
+  postPatch = ''
+    # We have dex support enabled in yara-python
+    substituteInPlace setup.py \
+      --replace "yara-python-dex>=1.0.1" "yara-python"
+  '';
+
+  build-system = with python3.pkgs; [ setuptools ];
+
+  dependencies = with python3.pkgs; [ yara-python ];
 
-  nativeCheckInputs = with python3.pkgs; [
-    pytestCheckHook
-  ];
+  nativeCheckInputs = with python3.pkgs; [ pytestCheckHook ];
 
   preBuild = ''
     # Prepare the YARA rules
     ${python3.interpreter} prep-release.py
   '';
 
-  postPatch = ''
-    # We have dex support enabled in yara-python
-    substituteInPlace setup.py \
-      --replace "yara-python-dex>=1.0.1" "yara-python"
-  '';
-
-  pythonImportsCheck = [
-    "apkid"
-  ];
+  pythonImportsCheck = [ "apkid" ];
 
   meta = with lib; {
     description = "Android Application Identifier";
-    mainProgram = "apkid";
     homepage = "https://github.com/rednaga/APKiD";
-    license = with licenses; [ gpl3Only ];
+    changelog = "https://github.com/rednaga/APKiD/releases/tag/${src.tag}";
+    license = licenses.gpl3Only;
     maintainers = with maintainers; [ fab ];
+    mainProgram = "apkid";
   };
 }

pkgs/by-name/co/codex/package.nix

···
 {
   lib,
-  buildNpmPackage,
+  stdenv,
   fetchFromGitHub,
+  nodejs_22, # Node ≥22 is required by codex-cli
+  pnpm_10,
+  makeBinaryWrapper,
+  installShellFiles,
   versionCheckHook,
 }:
 
-buildNpmPackage rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "codex";
-  version = "0.1.2504161510"; # from codex-cli/package.json
+  version = "0.1.2504251709"; # from codex-cli/package.json
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
-    rev = "b0ccca555685b1534a0028cb7bfdcad8fe2e477a";
-    hash = "sha256-WTnP6HZfrMjUoUZL635cngpfvvjrA2Zvm74T2627GwA=";
+    rev = "103093f79324482020490cb658cc1a696aece3bc";
+    hash = "sha256-GmMQi67HRanGKhiTKX8wgnpUbA1UwkPVe3siU4qC02Y=";
+  };
+
+  pnpmWorkspaces = [ "@openai/codex" ];
+
+  nativeBuildInputs = [
+    nodejs_22
+    pnpm_10.configHook
+    makeBinaryWrapper
+    installShellFiles
+  ];
+
+  pnpmDeps = pnpm_10.fetchDeps {
+    inherit (finalAttrs)
+      pname
+      version
+      src
+      pnpmWorkspaces
+      ;
+    hash = "sha256-pPwHjtqqaG+Zqmq6x5o+WCT1H9XuXAqFNKMzevp7wTc=";
   };
 
-  sourceRoot = "${src.name}/codex-cli";
+  buildPhase = ''
+    runHook preBuild
+    pnpm --filter @openai/codex run build
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    dest=$out/lib/node_modules/@openai/codex
+    mkdir -p "$dest"
+    cp -r codex-cli/dist codex-cli/bin codex-cli/package.json "$dest"
+    cp LICENSE README.md "$dest"
+
+    mkdir -p $out/bin
+    makeBinaryWrapper ${nodejs_22}/bin/node $out/bin/codex --add-flags "$dest/bin/codex.js"
+
+    # Install shell completions
+    ${lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+      $out/bin/codex completion bash > codex.bash
+      $out/bin/codex completion zsh > codex.zsh
+      $out/bin/codex completion fish > codex.fish
+      installShellCompletion codex.{bash,zsh,fish}
+    ''}
 
-  npmDepsHash = "sha256-riVXC7T9zgUBUazH5Wq7+MjU1FepLkp9kHLSq+ZVqbs=";
+    runHook postInstall
+  '';
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];
···
     maintainers = [ lib.maintainers.malo ];
     mainProgram = "codex";
   };
-}
+})

pkgs/by-name/ed/edopro/deps.nix

···
 # This is automatically generated by the update script.
 # DO NOT MANUALLY EDIT.
 {
-  assets-hash = "sha256-vZhkWJ1ZoNEwdc5kM1S0hyXnWmupiTOanCi9DCuqw/k=";
-  edopro-version = "40.1.4";
-  edopro-rev = "c713e23491a1e55c9d8e91257e5f2b5873696b9b";
-  edopro-hash = "sha256-mj0xEJsFcnY//za0uJosAPOPbU/jlduNX0YSNmvduLE=";
-  irrlicht-version = "1.9.0-unstable-2023-02-18";
-  irrlicht-rev = "7edde28d4f8c0c3589934c398a3a441286bb7c22";
-  irrlicht-hash = "sha256-Q2tNiYE/enZPqA5YhUe+Tkvmqtmmz2E0OqTRUDnt+UA=";
+  assets-hash = "sha256-cta4k6yxrdaFFfum0eshEzLODExBfA+oVPqcOpXG9uk=";
+  edopro-version = "41.0.2";
+  edopro-rev = "e5c0578aa504d0831dcbe29dbacd018f7b885b2c";
+  edopro-hash = "sha256-ZkQXWt73S3Nn+RnkG+e91BId7keI5OpM3NSeDMJWlZY=";
+  irrlicht-version = "1.9.0-unstable-2025-03-30";
+  irrlicht-rev = "47264fc2bc3223d110c589c9ffe4339d696a3dd0";
+  irrlicht-hash = "sha256-AwUCHQOivNgSnYe8kG6JxDIz7H5PC6RoozGiOGUejTI=";
 }

pkgs/by-name/ed/edopro/ocgcore-lua-symbols.patch

···
+From 41e750142b44465f3af197b7e2f0d6f54fc48c2d Mon Sep 17 00:00:00 2001
+From: OPNA2608 <[e-mail]>
+Date: Mon, 21 Oct 2024 17:42:24 +0200
+Subject: [PATCH] Mark Lua symbols as C symbols
+
+Otherwise linking against our Lua built by a C-compiler fails due to the symbols being resolved as C++ symbols.
+---
+ interpreter.h | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/interpreter.h b/interpreter.h
+index 6c405a1..c471ecb 100644
+--- a/interpreter.h
++++ b/interpreter.h
+@@ -9,9 +9,11 @@
+ #define INTERPRETER_H_
+ 
+ // Due to longjmp behaviour, we must build Lua as C++ to avoid UB
++extern "C" {
+ #include <lua.h>
+ #include <lualib.h>
+ #include <lauxlib.h>
++}
+ 
+ #include "common.h"
+ #include <unordered_map>
+-- 
+2.44.1
+

pkgs/by-name/ed/edopro/package.nix

···
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch,
   fetchzip,
   makeWrapper,
   premake5,
-  writeShellScriptBin,
+  writeShellApplication,
   runCommandLocal,
   symlinkJoin,
+  writeText,
   imagemagick,
   bzip2,
   curl,
+  envsubst,
   flac,
-  # Use fmt 10+ after release 40.1.4+
-  fmt_9,
+  fmt,
   freetype,
   irrlicht,
   libevent,
···
   sqlite,
   wayland,
   egl-wayland,
+  zenity,
   covers_url ? "https://pics.projectignis.org:2096/pics/cover/{}.jpg",
   fields_url ? "https://pics.projectignis.org:2096/pics/field/{}.png",
   # While ygoprodeck has higher quality images, "spamming" of their api results in a ban.
···
   ];
 
   deps = import ./deps.nix;
+
+  edopro-src = fetchFromGitHub {
+    owner = "edo9300";
+    repo = "edopro";
+    rev = deps.edopro-rev;
+    fetchSubmodules = true;
+    hash = deps.edopro-hash;
+  };
 in
 let
   assets = fetchzip {
···
     };
   };
 
+  ocgcore =
+    let
+      # Refer to CORENAME EPRO_TEXT in <edopro>/gframe/dllinterface.cpp for this
+      ocgcoreName = lib.strings.concatStrings [
+        (lib.optionalString (!stdenv.hostPlatform.isWindows) "lib")
+        "ocgcore"
+        (
+          if stdenv.hostPlatform.isiOS then
+            "-ios"
+          else if stdenv.hostPlatform.isAndroid then
+            (
+              if stdenv.hostPlatform.isx86_64 then
+                "x64"
+              else if stdenv.hostPlatform.isx86_32 then
+                "x86"
+              else if stdenv.hostPlatform.isAarch64 then
+                "v8"
+              else if stdenv.hostPlatform.isAarch32 then
+                "v7"
+              else
+                throw "Don't know what platform suffix edopro expects for ocgcore on: ${stdenv.hostPlatform.system}"
+            )
+          else
+            lib.optionalString (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) ".aarch64"
+        )
+        stdenv.hostPlatform.extensions.sharedLibrary
+      ];
+    in
+    stdenv.mkDerivation {
+      pname = "ocgcore-edopro";
+      version = deps.edopro-version;
+
+      src = edopro-src;
+      sourceRoot = "${edopro-src.name}/ocgcore";
+
+      nativeBuildInputs = [
+        premake5
+      ];
+
+      enableParallelBuilding = true;
+
+      buildFlags = [
+        "verbose=true"
+        "config=release"
+        "ocgcoreshared"
+      ];
+
+      makeFlags = [
+        "-C"
+        "build"
+      ];
+
+      # To make sure linking errors are discovered at build time, not when edopro runs into them during loading
+      env.NIX_LDFLAGS = "--unresolved-symbols=report-all";
+
+      installPhase = ''
+        runHook preInstall
+
+        install -Dm644 bin/release/*ocgcore*${stdenv.hostPlatform.extensions.sharedLibrary} $out/lib/${ocgcoreName}
+
+        runHook postInstall
+      '';
+
+      meta = {
+        description = "YGOPro script engine";
+        homepage = "https://github.com/edo9300/ygopro-core";
+        license = lib.licenses.agpl3Plus;
+        inherit maintainers;
+        platforms = lib.platforms.unix;
+      };
+    };
+
   edopro = stdenv.mkDerivation {
     pname = "edopro";
     version = deps.edopro-version;
 
-    src = fetchFromGitHub {
-      owner = "edo9300";
-      repo = "edopro";
-      rev = deps.edopro-rev;
-      hash = deps.edopro-hash;
-    };
+    src = edopro-src;
 
     nativeBuildInputs = [
       makeWrapper
···
       bzip2
       curl
       flac
-      fmt_9
+      fmt
       freetype
       irrlicht-edopro
       libevent
···
       sqlite
     ];
 
-    patches = [
-      (fetchpatch {
-        name = "libgit2-version.patch";
-        url = "https://github.com/edo9300/edopro/commit/f8ddbfff51231827a8dd1dcfcb2dda85f50a56d9.patch";
-        hash = "sha256-w9VTmWfw6vEyVvsOH+AK9lAbUOV+MagzGQ3Wa5DCS/U=";
-      })
-    ];
-
     # nixpkgs' gcc stack currently appears to not support LTO
+    # Override where bundled ocgcore get looked up in, so we can supply ours
+    # (can't use --prebuilt-core or let it build a core on its own without making core updates impossible)
     postPatch = ''
       substituteInPlace premake5.lua \
         --replace-fail 'flags "LinkTimeOptimization"' 'removeflags "LinkTimeOptimization"'
+
+      substituteInPlace gframe/game.cpp \
+        --replace-fail 'ocgcore = LoadOCGcore(Utils::GetWorkingDirectory())' 'ocgcore = LoadOCGcore("${lib.getLib ocgcore}/lib/")'
 
       touch ocgcore/premake5.lua
     '';
···
         "textures"
         "WindBot"
       ];
+      wrapperZenityMessageTemplate = writeText "edopro-wrapper-multiple-versions-message.txt.in" ''
+        Nixpkgs' EDOPro wrapper has found more than 1 directory in: ''${EDOPRO_BASE_DIR}
+
+        We expected the only directory to be: ''${EDOPRO_DIR}
+
+        There may have been an update, requiring you to migrate any files you care about from an older version.
+
+        Examples include:
+
+        - decks/*
+        - config/system.conf - which has your client's settings
+        - any custom things you may have installed into: fonts, skins, script, sound, ...
+        - anything you wish to preserve from: replay, screenshots
+
+        Once you have copied over everything important to ''${EDOPRO_DIR}, delete the old version's path.
+      '';
     in
-    writeShellScriptBin "edopro" ''
-      set -eu
-      EDOPRO_DIR="''${XDG_DATA_HOME:-$HOME/.local/share}/edopro"
+    writeShellApplication {
+      name = "edopro";
+      runtimeInputs = [
+        envsubst
+        zenity
+      ];
+      text = ''
+        export EDOPRO_VERSION="${deps.edopro-version}"
+        export EDOPRO_BASE_DIR="''${XDG_DATA_HOME:-$HOME/.local/share}/edopro"
+        export EDOPRO_DIR="''${EDOPRO_BASE_DIR}/''${EDOPRO_VERSION}"
 
-      if [ ! -d $EDOPRO_DIR ]; then
-          mkdir -p $EDOPRO_DIR
-          cp -r --no-preserve=all ${assets}/{${assetsToCopy}} $EDOPRO_DIR
-          chmod -R go-rwx $EDOPRO_DIR
+        # If versioned directory doesn't exist yet, make it & copy over assets
+        if [ ! -d "$EDOPRO_DIR" ]; then
+            mkdir -p "$EDOPRO_DIR"
+            cp -r --no-preserve=all ${assets}/{${assetsToCopy}} "$EDOPRO_DIR"
+            chmod -R go-rwx "$EDOPRO_DIR"
+
+            rm "$EDOPRO_DIR"/config/io.github.edo9300.EDOPro.desktop.in
+        fi
+
+        # Different versions provide different assets. Some are necessary for the game to run properly (configs for
+        # where to get incremental updates from, online servers, card scripting, certificates for communication etc),
+        # and some are optional nice-haves (example decks). It's also possible to override assets with custom skins.
+        #
+        # Don't try to manage all of this across versions, just inform the user that they may need to migrate their
+        # files if it looks like there are multiple versions.
 
-          rm $EDOPRO_DIR/config/io.github.edo9300.EDOPro.desktop.in
-      fi
+        edoproTopDirs="$(find "$EDOPRO_BASE_DIR" -mindepth 1 -maxdepth 1 -type d | wc -l)"
+        if [ "$edoproTopDirs" -ne 1 ]; then
+          zenity \
+            --info \
+            --title='[NIX] Multiple asset copies found' \
+            --text="$(envsubst < ${wrapperZenityMessageTemplate})" \
+            --ok-label='Continue to EDOPro'
+        fi
 
-      exec ${lib.getExe edopro} -C $EDOPRO_DIR $@
-    '';
+        exec ${lib.getExe edopro} -C "$EDOPRO_DIR" "$@"
+      '';
+    };
 
   edopro-desktop = runCommandLocal "io.github.edo9300.EDOPro.desktop" { } ''
     mkdir -p $out/share/applications

pkgs/by-name/ed/edopro/update.py

···
 #! nix-shell -i python -p nix-prefetch-github python3Packages.githubkit
 import json
 import subprocess
+import sys
 
 from githubkit import GitHub, UnauthAuthStrategy
 from githubkit.versions.latest.models import (
···
 with GitHub(UnauthAuthStrategy()) as github:
     edopro: Tag = github.rest.repos.list_tags("edo9300", "edopro").parsed_data[0]
 
-    # This dep is not versioned in anyway and is why we check below to see if this is a new version.
+    # This dep is not versioned in any way and is why we check below to see if this is a new version.
     irrlicht: Commit = github.rest.repos.list_commits(
         "edo9300", "irrlicht1-8-4"
     ).parsed_data[0]
 
-    irrlicht: Commit = github.rest.repos.get_commit(
-        "edo9300", "irrlicht1-8-4", "7edde28d4f8c0c3589934c398a3a441286bb7c22"
-    ).parsed_data
-
 
 edopro_working_version: str = ""
 try:
···
             if "edopro-version" in line:
                 edopro_working_version = line.split('"')[1]
 except FileNotFoundError:
-    print("Error: Dep file not found.")
+    print("Error: Dep file not found.", file=sys.stderr)
     exit(2)
 
 if edopro_working_version == "":
-    print("Working version is unbound")
+    print("Working version is unbound", file=sys.stderr)
     exit(5)
 
 if edopro_working_version == edopro.name:
···
     return out_json["hash"]
 
 
-edopro_hash = get_hash("edo9300", "edopro", edopro.commit.sha)
+edopro_hash = get_hash("edo9300", "edopro", edopro.commit.sha, submodule=True)
 irrlicht_hash = get_hash("edo9300", "irrlicht1-8-4", irrlicht.sha)
 
 asset_legacy_hash: str = (
···
   edopro-version = "{edopro.name}";
   edopro-rev = "{edopro.commit.sha}";
   edopro-hash = "{edopro_hash}";
-  irrlicht-version = "{"1.9.0-unstable-" + irrlicht.commit.committer.date.split("T")[0]}";
+  irrlicht-version = "{"1.9.0-unstable-" + irrlicht.commit.committer.date.strftime("%Y-%m-%d")}";
   irrlicht-rev = "{irrlicht.sha}";
   irrlicht-hash = "{irrlicht_hash}";
 }}

pkgs/by-name/en/encrypted-dns-server/package.nix

···
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  libsodium,
+  nix-update-script,
+  versionCheckHook,
+}:
+rustPlatform.buildRustPackage rec {
+  pname = "encrypted-dns-server";
+  version = "0.9.16";
+
+  src = fetchFromGitHub {
+    owner = "DNSCrypt";
+    repo = "encrypted-dns-server";
+    tag = version;
+    hash = "sha256-llBMOqmxEcysoBsRg5s1uqCyR6+ilTgBI7BaeSDVoEw=";
+  };
+
+  cargoHash = "sha256-33XcfiktgDG34aamw8X3y0QkybVENUJxLhx47WZUpFc=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ libsodium ];
+
+  env = {
+    SODIUM_USE_PKG_CONFIG = true;
+  };
+
+  passthru.updateScript = nix-update-script { };
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+  versionCheckProgram = "${placeholder "out"}/bin/encrypted-dns";
+  versionCheckProgramArg = "--version";
+
+  meta = {
+    changelog = "https://github.com/DNSCrypt/encrypted-dns-server/releases/tag/${version}";
+    description = "An easy to install, high-performance, zero maintenance proxy to run an encrypted DNS server";
+    homepage = "https://github.com/DNSCrypt/encrypted-dns-server";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ paepcke ];
+    mainProgram = "encrypted-dns";
+  };
+}

pkgs/by-name/fl/flclash/package.nix

···
 
 let
   pname = "flclash";
-  version = "0.8.82";
+  version = "0.8.83";
 
   src =
     (fetchFromGitHub {
       owner = "chen08209";
       repo = "FlClash";
       tag = "v${version}";
-      hash = "sha256-vZa/JHnoCHuCGWh9ImdK67uBmqosiDm0LZ+/lszPSlY=";
+      hash = "sha256-vkek2pHeXiIQ8pv5t8mRJDvqojhYW5cTUeKWN/mhGu8=";
       fetchSubmodules = true;
     }).overrideAttrs
       (_: {
···
 
     modRoot = "core";
 
-    vendorHash = "sha256-oVgYvRrG7Izr9zlc/76ZKRQgxobzeNzXr9SaIgW1sMY=";
+    vendorHash = "sha256-YrJtvkDpSQnx5AE+3zjCim8lrTjARzJvz6nCkKVOCew=";
 
     env.CGO_ENABLED = 0;
 

pkgs/by-name/fl/flclash/pubspec.lock.json

···
       "version": "0.3.4+2"
     },
     "crypto": {
-      "dependency": "transitive",
+      "dependency": "direct dev",
       "description": {
         "name": "crypto",
         "sha256": "1e445881f28f22d6140f181e07737b22f1e099a5e1ff94b0af2f9e4a463f4855",
···
       "version": "0.12.17"
     },
     "material_color_utilities": {
-      "dependency": "transitive",
+      "dependency": "direct main",
       "description": {
         "name": "material_color_utilities",
         "sha256": "f7142bb1154231d7ea5f96bc7bde4bda2a0945d2806bb11670e30b850d56bdec",

pkgs/by-name/ge/geocode-glib_2/package.nix

···
 
   passthru = {
     updateScript = gnome.updateScript {
+      attrPath = "geocode-glib_2";
       packageName = "geocode-glib";
     };
     tests = {

pkgs/by-name/gu/gucci/package.nix

···
   gucci,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "gucci";
-  version = "1.6.10";
+  version = "1.9.0";
 
   src = fetchFromGitHub {
     owner = "noqcks";
     repo = "gucci";
-    tag = version;
-    sha256 = "sha256-bwPQQtaPHby96C5ZHZhBTok+m8GPPS40U1CUPVYqCa4=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-CL4Vn3DP40tBBejN28iQSIV+2GtHwl7IS8zVJ5wcqwY=";
   };
 
-  vendorHash = "sha256-/4OnbtxxhXQnmSV6UbjgzXdL7szhL9rKiG5BR8FsyqI=";
+  vendorHash = "sha256-+0pq2lbwfvWdAiz7nONrmlRRxS886B+wieoMeuxLUtM=";
 
   ldflags = [
     "-s"
     "-w"
-    "-X main.AppVersion=${version}"
+    "-X main.AppVersion=${finalAttrs.version}"
   ];
 
   passthru.tests.version = testers.testVersion {
···
     "-skip=^TestIntegration"
   ];
 
-  meta = with lib; {
+  meta = {
     description = "Simple CLI templating tool written in golang";
     mainProgram = "gucci";
     homepage = "https://github.com/noqcks/gucci";
-    license = licenses.mit;
-    maintainers = with maintainers; [ braydenjw ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ braydenjw ];
   };
-}
+})

pkgs/by-name/ha/hatari/package.nix

···
 {
   lib,
   stdenv,
-  fetchurl,
-  zlib,
-  SDL,
+  fetchFromGitLab,
   cmake,
+  zlib,
+  SDL2,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "hatari";
-  version = "2.3.1";
+  version = "2.5.0";
 
-  src = fetchurl {
-    url = "https://download.tuxfamily.org/hatari/${version}/${pname}-${version}.tar.bz2";
-    sha256 = "sha256-RKL2LKmV442eCHSAaVbwucPMhOqJ4BaaY4SbY807ZL0=";
+  src = fetchFromGitLab {
+    domain = "framagit.org";
+    owner = "hatari";
+    repo = "hatari";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-RC+KA6rNG4Hk3dvTtejiHl9+pPHImALF0Ho5QuTtjz4=";
   };
 
   # For pthread_cancel
   cmakeFlags = [ "-DCMAKE_EXE_LINKER_FLAGS=-lgcc_s" ];
 
   nativeBuildInputs = [ cmake ];
+
   buildInputs = [
     zlib
-    SDL
+    SDL2
   ];
 
   meta = {
···
     platforms = lib.platforms.linux;
     maintainers = [ ];
   };
-}
+})

pkgs/by-name/he/hebcal/package.nix

···
 {
   lib,
-  stdenv,
+  buildGoModule,
   fetchFromGitHub,
-  autoreconfHook,
 }:
 
-stdenv.mkDerivation rec {
-  version = "4.24";
+buildGoModule (finalAttrs: {
   pname = "hebcal";
+  version = "5.9.0";
 
   src = fetchFromGitHub {
     owner = "hebcal";
     repo = "hebcal";
-    rev = "v${version}";
-    sha256 = "sha256-iWp2S3s8z/y4dZ66Ogqu7Yf4gTUvSS1J5F7d0ifRbcY=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-JtabO3/IM7Mh6zzO6Jwth1axnwOxIn/a3GQO9x3EHLw=";
   };
 
-  nativeBuildInputs = [ autoreconfHook ];
+  vendorHash = "sha256-PhJdUU+QivGuLwHuThL7c645mbAgl160sbZ8y7Dd02M=";
+
+  preBuild = ''
+    make dcity.go
+  '';
 
   doCheck = true;
 
-  meta = with lib; {
+  meta = {
     homepage = "https://hebcal.github.io";
     description = "Perpetual Jewish Calendar";
     longDescription = "Hebcal is a program which prints out the days in the Jewish calendar for a given Gregorian year. Hebcal is fairly flexible in terms of which events in the Jewish calendar it displays.";
-    license = licenses.gpl2Plus;
-    maintainers = [ maintainers.hhm ];
-    platforms = platforms.all;
+    license = lib.licenses.gpl2Plus;
+    maintainers = [ lib.maintainers.hhm ];
+    platforms = lib.platforms.all;
     mainProgram = "hebcal";
   };
-}
+})

pkgs/by-name/ho/honcho/package.nix

···
   python3Packages,
 }:
 
-let
+python3Packages.buildPythonApplication rec {
   pname = "honcho";
-in
-
-python3Packages.buildPythonApplication rec {
-  name = "${pname}-${version}";
-  version = "1.1.0";
+  version = "2.0.0";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "nickstenning";
     repo = "honcho";
-    rev = "v${version}";
-    sha256 = "1y0r8dw4pqcq7r4n58ixjdg1iy60lp0gxsd7d2jmhals16ij71rj";
+    tag = "v${version}";
+    hash = "sha256-hXPoqxK9jzCn7KrQ6zH0E/3YVC60OSoiUx6654+bhhw=";
   };
 
-  propagatedBuildInputs = [ python3Packages.setuptools ];
+  build-system = with python3Packages; [
+    setuptools
+    setuptools-scm
+  ];
 
   nativeCheckInputs = with python3Packages; [
     jinja2
···
 
   checkPhase = ''
     runHook preCheck
+
     PATH=$out/bin:$PATH coverage run -m pytest
+
     runHook postCheck
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Python clone of Foreman, a tool for managing Procfile-based applications";
-    license = licenses.mit;
+    license = lib.licenses.mit;
     homepage = "https://github.com/nickstenning/honcho";
-    maintainers = with maintainers; [ benley ];
-    platforms = platforms.unix;
+    maintainers = with lib.maintainers; [ benley ];
+    platforms = lib.platforms.unix;
     mainProgram = "honcho";
   };
 }

pkgs/by-name/in/inter-alia/package.nix

···
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+}:
+
+stdenvNoCC.mkDerivation {
+  pname = "inter-alia";
+  version = "0-unstable-2024-01-12";
+
+  src = fetchFromGitHub {
+    owner = "Shavian-info";
+    repo = "interalia";
+    rev = "5d182c4eb5511fec3879646c8b44c79ba338d53e";
+    hash = "sha256-q93cCrbKc72CH/2ybJPDY5wkUZvFyCKoyQe6WhL+kAU=";
+  };
+
+  outputs = [
+    "out"
+    "web"
+    "variable"
+    "variableweb"
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    install -D -m444 -t $out/share/fonts/opentype instance_otf/*.otf
+    install -D -m444 -t $out/share/fonts/truetype instance_ttf/*.ttf
+    install -D -m444 -t $web/share/fonts/webfont instance_woff2/*.woff2
+    install -D -m444 -t $variable/share/fonts/opentype variable_otf/*.otf
+    install -D -m444 -t $variable/share/fonts/truetype variable_ttf/*.ttf
+    install -D -m444 -t $variableweb/share/fonts/webfont variable_woff2/*.woff2
+
+    runHook postInstall
+  '';
+
+  meta = {
+    homepage = "https://shavian.info/shavian_fonts/";
+    description = "Expansion of Inter typeface to support the Shavian alphabet, old-style figures, & refinements to IPA glyphs";
+    longDescription = ''
+          Inter Alia is an expanded version of Rasmus Andersson's beautiful open source sans serif typeface, Inter. Inter was specially designed for user interfaces with focus on high legibility of small-to-medium sized text on computer screens.
+
+      Inter Alia builds on the features of Inter to add:
+
+          support for the Shavian alphabet with a newly designed set of glyphs, including the letters missing from Unicode (through character variants accessed by inserting 'Variation Selector 1' (U+FE00) after 𐑒, 𐑜, 𐑢, 𐑤, 𐑻, and 𐑺)
+          support for old-style figures or numerals, also known as text figures, with both proportional and tabular spacing
+          refinements to International Phonetic Alphabet glyphs and other less common glyphs.
+    '';
+    license = lib.licenses.ofl;
+    platforms = lib.platforms.all;
+    maintainers = with lib.maintainers; [ toastal ];
+  };
+}

pkgs/by-name/kn/kn/package.nix

···
   lib,
   buildGoModule,
   fetchFromGitHub,
+  getent,
   installShellFiles,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "kn";
-  version = "1.15.0";
+  version = "1.18.0";
 
   src = fetchFromGitHub {
     owner = "knative";
     repo = "client";
-    rev = "knative-v${version}";
-    sha256 = "sha256-bXICU1UBNPVIumzRPSOWa1I5hUYWEvo6orBpUvbPEvg=";
+    tag = "knative-v${finalAttrs.version}";
+    hash = "sha256-Hi5MIzOTL8B1gL+UNv/G18VkBXflSObzCaZZALjWjw0=";
   };
 
-  vendorHash = null;
+  vendorHash = "sha256-bgZi5SdedpqqAdkl+iP1gqXonEMSrHjXKV2QRijvrtE=";
+
+  env.GOWORK = "off";
 
   subPackages = [ "cmd/kn" ];
 
   nativeBuildInputs = [ installShellFiles ];
 
-  ldflags = [
-    "-X knative.dev/client/pkg/kn/commands/version.Version=v${version}"
-    "-X knative.dev/client/pkg/kn/commands/version.VersionEventing=v${version}"
-    "-X knative.dev/client/pkg/kn/commands/version.VersionServing=v${version}"
-  ];
+  ldflags = [ "-X knative.dev/client/pkg/commands/version.Version=v${finalAttrs.version}" ];
 
   postInstall = ''
     installShellCompletion --cmd kn \
···
   '';
 
   doInstallCheck = true;
+
   installCheckPhase = ''
-    $out/bin/kn version | grep ${version} > /dev/null
+    runHook preInstallCheck
+
+    PATH=$PATH:${getent}/bin $out/bin/kn version | grep ${finalAttrs.version} > /dev/null
+
+    runHook postInstallCheck
   '';
 
-  meta = with lib; {
-    description = "Knative client kn is your door to the Knative world. It allows you to create Knative resources interactively from the command line or from within scripts";
+  meta = {
+    description = "Create Knative resources interactively from the command line or from within scripts";
     mainProgram = "kn";
     homepage = "https://github.com/knative/client";
-    changelog = "https://github.com/knative/client/releases/tag/v${version}";
-    license = licenses.asl20;
-    maintainers = with maintainers; [ bryanasdev000 ];
+    changelog = "https://github.com/knative/client/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ bryanasdev000 ];
   };
-}
+})

pkgs/by-name/ne/nexusmods-app/deps.json

···
   },
   {
     "pname": "Avalonia",
-    "version": "11.1.3",
-    "hash": "sha256-kz+k/vkuWoL0XBvRT8SadMOmmRCFk9W/J4k/IM6oYX0="
+    "version": "11.2.0",
+    "hash": "sha256-kG3tnsLdodlvIjYd5feBZ0quGd2FsvV8FIy7uD5UZ5Q="
   },
   {
     "pname": "Avalonia",
-    "version": "11.2.0",
-    "hash": "sha256-kG3tnsLdodlvIjYd5feBZ0quGd2FsvV8FIy7uD5UZ5Q="
+    "version": "11.2.3",
+    "hash": "sha256-NUoyXJkIsgbkcKFVb10VRafM4ViHs801c/7vhu3ssUY="
   },
   {
     "pname": "Avalonia",
-    "version": "11.2.4",
-    "hash": "sha256-CcdWUxqd43A4KeY1K4T5M6R1M0zuwdwyd5Qh/BAlNT4="
+    "version": "11.2.6",
+    "hash": "sha256-f+fuElhlc2dCUt/GD/Noh07JqPIA8ZtpFxdmetdPVVI="
   },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
···
   },
   {
     "pname": "Avalonia.AvaloniaEdit",
-    "version": "11.1.0",
-    "hash": "sha256-K9+hK+4aK93dyuGytYvVU25daz605+KN54hmwQYXFF8="
+    "version": "11.2.0",
+    "hash": "sha256-AFe1jt9xR8XGq4tKkxOdUd7aQOGRSE+M2EQ8fOiV6xo="
   },
   {
     "pname": "Avalonia.BuildServices",
···
   },
   {
     "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.2.4",
-    "hash": "sha256-21Wfb4p0dCevw8Iu/Fchngt1teAnBaxEWgiUpFkerTo="
+    "version": "11.2.6",
+    "hash": "sha256-TeUwMcNIvXw/gMuApUODZ7nuymM6OF9cNUGSajlyfoQ="
   },
   {
     "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.2.4",
-    "hash": "sha256-fqQBKzHcL0CwuOQ90Gp+UUZZP9OQ9U6H41bvikxQJpo="
+    "version": "11.2.6",
+    "hash": "sha256-69ZtybLdpGG28M6p1Cenz6PZEfdf1VKxA4wIrw5FJnI="
   },
   {
     "pname": "Avalonia.Controls.TreeDataGrid",
···
   },
   {
     "pname": "Avalonia.Desktop",
-    "version": "11.2.4",
-    "hash": "sha256-WKTOx7RNSb0fOMg5Za4j+u9DwKXDqVzHwQCEXSm7TFo="
+    "version": "11.2.6",
+    "hash": "sha256-PANuvQlAhDWjnv7VUzxOjz6XRmt4l/YKhVLSIP7YL24="
   },
   {
     "pname": "Avalonia.Diagnostics",
-    "version": "11.2.4",
-    "hash": "sha256-MUSfRXeJ1bstO2rTqWWCQyVq2EpjM5b5bxe0KxVAEU4="
+    "version": "11.2.6",
+    "hash": "sha256-Lc9qLIywzD06I9sPXQRjLLLijDoFOVmuO5qNh301gYQ="
   },
   {
     "pname": "Avalonia.FreeDesktop",
-    "version": "11.2.4",
-    "hash": "sha256-lw8YFXR/pn0awFvFW+OhjZ2LbHonL6zwqLIz+pQp+Sk="
+    "version": "11.2.6",
+    "hash": "sha256-816li4Nj8+oNkfeMjOAtFSFS+DSo9e2S3K45xqyHJAQ="
   },
   {
     "pname": "Avalonia.Headless",
-    "version": "11.2.4",
-    "hash": "sha256-3XvLm+pu+s3gXJVyn8dl8teQX4ikNn+dvKXb18Owsn8="
+    "version": "11.2.6",
+    "hash": "sha256-sV68KaIcXu/IK7dQ8S6GdPtRNm6PaOTv5v+z4IUYp1E="
   },
   {
     "pname": "Avalonia.Labs.Panels",
···
   },
   {
     "pname": "Avalonia.Native",
-    "version": "11.2.4",
-    "hash": "sha256-MvxivGjYerXcr70JpWe9CCXO6MU9QQgCkmZfjZCFdJM="
+    "version": "11.2.6",
+    "hash": "sha256-by589X1UIjeQNK0lJMLfNzF2dK+qTNT6CBJNLgG86Aw="
   },
   {
     "pname": "Avalonia.ReactiveUI",
-    "version": "11.2.4",
-    "hash": "sha256-LqwLUDCIbJowol6BNTTsK7a7KjcLLbCM3y3KKvuHRGw="
+    "version": "11.2.6",
+    "hash": "sha256-DsUxdEQMgpmzgRS5zkf3rqk32YL3xFN7KoQkn1Xl6WU="
   },
   {
     "pname": "Avalonia.Remote.Protocol",
···
   },
   {
     "pname": "Avalonia.Remote.Protocol",
-    "version": "11.2.4",
-    "hash": "sha256-mKQVqtzxnZu6p64ZxIHXKSIw3AxAFjhmrxCc5/1VXfc="
+    "version": "11.2.6",
+    "hash": "sha256-Q2uPnR6tPFWExohhMJKnJGTet8IVpQn/HIcRurUPAHQ="
   },
   {
     "pname": "Avalonia.Skia",
···
   },
   {
     "pname": "Avalonia.Skia",
-    "version": "11.2.4",
-    "hash": "sha256-82UQGuCl5hN5kdA3Uz7hptpNnG1EPlSB6k/a6XPSuXI="
+    "version": "11.2.6",
+    "hash": "sha256-6CfDcJT707iSB9XUQRvSvr5YWMavhiYPnHwVudUl74c="
   },
   {
     "pname": "Avalonia.Svg.Skia",
···
   },
   {
     "pname": "Avalonia.Themes.Fluent",
-    "version": "11.2.4",
-    "hash": "sha256-CPun/JWFCVoGxgMA510/gMP2ZB9aZJ9Bk8yuNjwo738="
+    "version": "11.2.6",
+    "hash": "sha256-L664hbpCtbu8aDX7YLnqKybF/eQFfes8eQp4A+as8PY="
   },
   {
     "pname": "Avalonia.Themes.Simple",
-    "version": "11.2.4",
-    "hash": "sha256-rnF2/bzN8AuOFlsuekOxlu+uLI7n1kIAmC36FFXMKak="
+    "version": "11.2.6",
+    "hash": "sha256-kE31/1tchMJ6XmEbjLr5Idc7uKBAbuhsroUMg0LQauA="
   },
   {
     "pname": "Avalonia.Win32",
-    "version": "11.2.4",
-    "hash": "sha256-LJSKiLbdof8qouQhN7pY1RkMOb09IiAu/nrJFR2OybY="
+    "version": "11.2.6",
+    "hash": "sha256-e+DNtKz4UDNqOP1vvVRqbD67n5IG9PxmGkMz7B6b7AY="
   },
   {
     "pname": "Avalonia.X11",
-    "version": "11.2.4",
-    "hash": "sha256-qty8D2/HlZz/7MiEhuagjlKlooDoW3fow5yJY5oX4Uk="
+    "version": "11.2.6",
+    "hash": "sha256-atnfxY6vspMzvMFc9PzwWb/uPNkPx5tF3zDGKeqlGIw="
   },
   {
     "pname": "AvaloniaEdit.TextMate",
-    "version": "11.1.0",
-    "hash": "sha256-Nv52bUxA02VcsKCbMqEAkNBl46gznSivRZ3llLHrhkM="
+    "version": "11.2.0",
+    "hash": "sha256-O9uQHHMwXCf6xaK+oUNRPJUQC6+p97UmZU1OsLOeroI="
   },
   {
     "pname": "Bannerlord.LauncherManager",
···
   },
   {
     "pname": "GameFinder",
-    "version": "4.5.0",
-    "hash": "sha256-n9LaGrFy4kHTeXfk5HQbnZli1rzIaw0kWx4bXjUuFm8="
+    "version": "4.6.1",
+    "hash": "sha256-wx5MEcWHg+O7qmXZeoJiLCfEawh5rwtYdxYkSJh+/sk="
   },
   {
     "pname": "GameFinder.Common",
-    "version": "4.5.0",
-    "hash": "sha256-2HHwusG2DqMSfgH3eD07afvLTmRsUSOcPc6yIuHcMks="
+    "version": "4.6.1",
+    "hash": "sha256-bkgdsruhxbpu9zdyAebPSEPk08WzfzxUbxLGbIHjFT0="
   },
   {
     "pname": "GameFinder.Launcher.Heroic",
-    "version": "4.5.0",
-    "hash": "sha256-N9wQl4kTPcQC0ulqPm5OugCVeBUEstVLyG87/dwu1Fg="
+    "version": "4.6.1",
+    "hash": "sha256-Zx4fxMvdwoNKQFXe6vz2bp3IFqoK0QHzsB8BveqnNqY="
   },
   {
     "pname": "GameFinder.RegistryUtils",
-    "version": "4.5.0",
-    "hash": "sha256-n6ZmjyUlAp75mVIYi0R4ncQX7hqLAvsgapMf58Mr3Jo="
+    "version": "4.6.1",
+    "hash": "sha256-AKC6Lrwyb+oFLdUpAAERkdIblRlvNOb94C4hvJflaac="
   },
   {
     "pname": "GameFinder.StoreHandlers.EADesktop",
-    "version": "4.5.0",
-    "hash": "sha256-JUt5STjbESpaFmvDeGM0yQqgQziD4Or5FxBPwW4XMJE="
+    "version": "4.6.1",
+    "hash": "sha256-6NG35ERzXLt8nGC2mt5/qF3LUSSceHRqlnWtjRfRGTY="
   },
   {
     "pname": "GameFinder.StoreHandlers.EGS",
-    "version": "4.5.0",
-    "hash": "sha256-O8rFUroxJHQoX0UFK4xmV637Qz+bm5Xk/SCIbhRDZQA="
+    "version": "4.6.1",
+    "hash": "sha256-h+zv/YY8tLSz4XaLLZZVD7n04poAbqrJ422IHfT2rK0="
   },
   {
     "pname": "GameFinder.StoreHandlers.GOG",
-    "version": "4.5.0",
-    "hash": "sha256-EyX15gumoPf4hyZ4Q8YFfyQfD1dj6J2RmilcGnkf7NE="
+    "version": "4.6.1",
+    "hash": "sha256-SZNRdt77Bgg3I7w6/R0OSeDI6qt90pP1GIrEg2x/a4I="
   },
   {
     "pname": "GameFinder.StoreHandlers.Origin",
-    "version": "4.5.0",
-    "hash": "sha256-N2TS31L6hzJKn4LsW7g31v2LRsCjKyjVdOH6Kum7vWE="
+    "version": "4.6.1",
+    "hash": "sha256-xp7KDYEsdxjTzRRpkqPkeuf5Umi/5+o9+k0Xn9m6Yus="
   },
   {
     "pname": "GameFinder.StoreHandlers.Steam",
-    "version": "4.5.0",
-    "hash": "sha256-IjdnksYT1EApOxYix6eInBAE2khwOyTbK11hjNqXZT8="
+    "version": "4.6.1",
+    "hash": "sha256-xPW1IGePWF+clMOSjDky4AgEqCMMa42+ZmrH+WkZUcg="
   },
   {
     "pname": "GameFinder.StoreHandlers.Xbox",
-    "version": "4.5.0",
-    "hash": "sha256-CmiTBT2T3pC3GzqxUr6T2hQNDp9gmxrRPDkFOzNC3Yo="
+    "version": "4.6.1",
+    "hash": "sha256-jcWgZKQt4NYvEOAgA6tDlnm7oHCV6hwTNKztMpXnC1E="
   },
   {
     "pname": "GameFinder.Wine",
-    "version": "4.5.0",
-    "hash": "sha256-QARwwZNoHOEnSnHZXeqoGj9R0uK+hMXte9Hc38vZlAI="
+    "version": "4.6.1",
+    "hash": "sha256-DZTxn55GNcWsowre57csnhIS6SW4loC+6XroJ9ZGEC8="
   },
   {
     "pname": "Gee.External.Capstone",
···
   },
   {
     "pname": "LinuxDesktopUtils.XDGDesktopPortal",
-    "version": "1.0.0",
-    "hash": "sha256-DTxWI/DI01Flb4yfSxukaEw6roSzD9iy4Twy1I8/5Mg="
+    "version": "1.0.2",
+    "hash": "sha256-qE9u3mL/HTN1ABU4zegEpOSq6IblpmIVB9hlYrUzULE="
   },
   {
     "pname": "LiveChartsCore",
···
   },
   {
     "pname": "NexusMods.MnemonicDB",
-    "version": "0.9.114",
-    "hash": "sha256-VE1SEKwsS+XAi12l+0jYOQDG1zYSI1t9wKDjXMMyyng="
+    "version": "0.9.122",
+    "hash": "sha256-uaADmIInfTD6jxbfG2XpBzZplVBjuuki7glK5iIS6BM="
   },
   {
     "pname": "NexusMods.MnemonicDB.Abstractions",
-    "version": "0.9.114",
-    "hash": "sha256-6nNJkQp5FhO29oKnwSvP3Qw6/Zab3RwB3F7WkS6mDBY="
+    "version": "0.9.122",
+    "hash": "sha256-UVGEPXfDx9vaOBPofVmlqJLg0LZS14AETFZWWc8KB14="
   },
   {
     "pname": "NexusMods.MnemonicDB.SourceGenerator",
-    "version": "0.9.114",
-    "hash": "sha256-vMGecXrBoDgWFk1VyMqsENEVpWuGVaPULjJ4azZThRE="
+    "version": "0.9.122",
+    "hash": "sha256-6YlvYr3mSd/D96iDm6zqP6O9x3mo/DezS3RRRBIn2wk="
   },
   {
     "pname": "NexusMods.Paths",
-    "version": "0.10.0",
-    "hash": "sha256-tzUKPBrGNyZvVgScDAP0qvVF5nV6635v3NlBvzpnz1M="
+    "version": "0.15.0",
+    "hash": "sha256-No2kbrDVmJ5ySLm7jH+gNAfNLVnsv4AtLT1phcuOFLc="
   },
   {
     "pname": "NexusMods.Paths",
-    "version": "0.15.0",
-    "hash": "sha256-No2kbrDVmJ5ySLm7jH+gNAfNLVnsv4AtLT1phcuOFLc="
+    "version": "0.18.0",
+    "hash": "sha256-HNFDFStIXxkoHU8bt9enmb6YxU2NZnqbiapztQpzCcE="
   },
   {
     "pname": "NexusMods.Paths.Extensions.Nx",
-    "version": "0.15.0",
-    "hash": "sha256-8QT+Iu32u4m5wqMG2bAqramnUQPLDmUB8/c+ew4fRqM="
+    "version": "0.18.0",
+    "hash": "sha256-UcDLHyepHB1c3RnObNk7Y+2+GDAg+ZmJkGwJ+fLfo1w="
   },
   {
     "pname": "NexusMods.Paths.TestingHelpers",
-    "version": "0.15.0",
-    "hash": "sha256-xUZIAND1Ob0SRuoTTuJqw7N2j/4ncIlck3lgfeWxd5M="
+    "version": "0.18.0",
+    "hash": "sha256-J8vNJ5njlKz9Nl6JzrTo232p8PAgm9t3RPh+y7nnD68="
   },
   {
     "pname": "NLog",
···
   },
   {
     "pname": "ObservableCollections",
-    "version": "3.3.2",
-    "hash": "sha256-pM/2bPf2QvgOhkqA/cSpd/0jAqhOXrtLn01WWZiuoGc="
+    "version": "3.3.3",
+    "hash": "sha256-HH/xNIVQpvlWONL8RChuaeW2l6zC47Xx/JNSE5/JRR4="
   },
   {
     "pname": "ObservableCollections.R3",
-    "version": "3.3.2",
-    "hash": "sha256-q/Ch2JW4H/CvE0oFxmqQDKbgQVo1HfHmtuhMrnFQSEU="
+    "version": "3.3.3",
+    "hash": "sha256-9Zh9wjEHPi0qvix7elMGbrQkbe47cmtFLw2e/Wz5rK8="
   },
   {
     "pname": "OneOf",
···
   },
   {
     "pname": "Projektanker.Icons.Avalonia",
-    "version": "9.4.1",
-    "hash": "sha256-RK62Wls48/j7QZTLlzHOLCXV0jK/0WBra5367zyit7s="
+    "version": "9.6.1",
+    "hash": "sha256-vO6CqlO3EjzGYElIjy6r2d5b8g33P1m4EoqYuew9anM="
   },
   {
     "pname": "Projektanker.Icons.Avalonia.MaterialDesign",
-    "version": "9.4.1",
-    "hash": "sha256-YfGVVfl/Yon9WgJCZscXZMbZoCNg+OvGFvdPSxe+Q1I="
+    "version": "9.6.1",
+    "hash": "sha256-5e/MUcfACOKbX6Wgc+L/3nuDDbS8ccTXwZ0G5obo7Kw="
   },
   {
     "pname": "protobuf-net",
···
     "hash": "sha256-Wb3ELPbVhxEMqkrQq5vIjGC36VAzIuMdiYqSAEnVXpY="
   },
   {
+    "pname": "R3",
+    "version": "1.3.0",
+    "hash": "sha256-IHKC8TzTPV9FSlUahbZ1EAtEOaATHUB3Ta7snJW1PKw="
+  },
+  {
     "pname": "R3Extensions.Avalonia",
-    "version": "1.2.9",
-    "hash": "sha256-ZNah6u4+a13E93rYGtZIyYPIb3mkopIjjCzYUgmjCxQ="
+    "version": "1.3.0",
+    "hash": "sha256-zqLbdbKQrDz0YweAs50h5kc5O/4cYR/t/IQHYDwBDLg="
   },
   {
     "pname": "ReactiveUI",
···
     "pname": "ReactiveUI.Fody",
     "version": "19.5.41",
     "hash": "sha256-LfKELxAfApQLL0fDd7UJCsZML5C4MFN+Gc5ECaBXmUM="
-  },
-  {
-    "pname": "Reloaded.Memory",
-    "version": "9.4.1",
-    "hash": "sha256-bXaTAUx+/SiiMLmxuPumV9z5w1HcHpzEoNuR+xNhafs="
   },
   {
     "pname": "Reloaded.Memory",
···
   },
   {
     "pname": "System.Text.Json",
-    "version": "8.0.4",
-    "hash": "sha256-g5oT7fbXxQ9Iah1nMCr4UUX/a2l+EVjJyTrw3FTbIaI="
-  },
-  {
-    "pname": "System.Text.Json",
     "version": "8.0.5",
     "hash": "sha256-yKxo54w5odWT6nPruUVsaX53oPRe+gKzGvLnnxtwP68="
   },
···
   },
   {
     "pname": "TextMateSharp",
-    "version": "1.0.59",
-    "hash": "sha256-qfAGSgVpTrWMZSk0TFDVP1IgWWi6O1jEEvWc0Pvw9i0="
-  },
-  {
-    "pname": "TextMateSharp",
-    "version": "1.0.64",
-    "hash": "sha256-49Fdf6ndcb4BKMlWYjkjpJ3pLp17Z10FcGJpfdXvvzc="
+    "version": "1.0.65",
+    "hash": "sha256-kZx3CBDzu7qUSnihs9Q4Ck78ih1aJ+0g8cN8Hke+E5w="
   },
   {
     "pname": "TextMateSharp.Grammars",
-    "version": "1.0.59",
-    "hash": "sha256-ru5VxQK4PFRJhHu+MvCzDt3EwbC/94n1whtDovUAUDA="
-  },
-  {
-    "pname": "TextMateSharp.Grammars",
-    "version": "1.0.64",
-    "hash": "sha256-ykBZOyvaX1/iFmZjue754qJG4jfPx38ZdHevEZvh7w8="
+    "version": "1.0.65",
+    "hash": "sha256-tZx/GKYX3bomQFVFaEgneNYHpB74v+8D90IfkYImlhE="
   },
   {
     "pname": "Tmds.DBus.Protocol",
-    "version": "0.18.0",
-    "hash": "sha256-u5bRK7XbxU/NdMu8PZqxb3fmRdPTbimQ/YIe5/scPOo="
+    "version": "0.20.0",
+    "hash": "sha256-CRW/tkgsuBiBJfRwou12ozRQsWhHDooeP88E5wWpWJw="
   },
   {
     "pname": "Tmds.DBus.Protocol",
-    "version": "0.20.0",
-    "hash": "sha256-CRW/tkgsuBiBJfRwou12ozRQsWhHDooeP88E5wWpWJw="
+    "version": "0.21.2",
+    "hash": "sha256-gaK/5aAummyin6ptnhaJbnA0ih4+2xADrtrLfFbHwYI="
   },
   {
     "pname": "TransparentValueObjects",
···
   },
   {
     "pname": "ValveKeyValue",
-    "version": "0.10.0.360",
-    "hash": "sha256-LPQ6isUsA3cQKiO6ADijrCQ2ucx4TD01+kGzei3jIGY="
+    "version": "0.13.1.398",
+    "hash": "sha256-dBoEU9Eb0VhzDWHLJY74xamz2Yt283tve+81I8mIxJc="
   },
   {
     "pname": "Verify",
···
     "pname": "YamlDotNet",
     "version": "16.3.0",
     "hash": "sha256-4Gi8wSQ8Rsi/3+LyegJr//A83nxn2fN8LN1wvSSp39Q="
+  },
+  {
+    "pname": "ZLinq",
+    "version": "0.9.6",
+    "hash": "sha256-MxKNBih6j/t+S+Adw7OgkVN5llUylP+gstF9LSsDShY="
   },
   {
     "pname": "ZstdSharp.Port",

pkgs/by-name/ne/nexusmods-app/package.nix

···
 in
 buildDotnetModule (finalAttrs: {
   inherit pname;
-  version = "0.9.2";
+  version = "0.10.2";
 
   src = fetchgit {
     url = "https://github.com/Nexus-Mods/NexusMods.App.git";
     rev = "refs/tags/v${finalAttrs.version}";
-    hash = "sha256-Xb/i25l0jLn87OeouD0+CRv11d8aOn7Sr69z3TkS6I4=";
+    hash = "sha256-L75nmxjymPfuu6CM5QRE1jInElNrD2OuAXMR8+c2tGQ=";
     fetchSubmodules = true;
-    fetchLFS = true;
   };
 
   enableParallelBuilding = false;

pkgs/by-name/pa/parseable/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "parseable";
-  version = "1.7.3";
+  version = "2.2.0";
 
   src = fetchFromGitHub {
     owner = "parseablehq";
     repo = "parseable";
     tag = "v${version}";
-    hash = "sha256-arRaib5jzU2mtSJI70UphVqPN+hOGoag++jopgx/zCw=";
+    hash = "sha256-oMDFi5cBcghxzwmmR/Gg50PcYCb6HaxDqWA8vVyw30Y=";
   };
 
   LOCAL_ASSETS_PATH = fetchzip {
···
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-j+v3lf3x3eW1PAjYdPHfma6PnUsb4m6ZBRj+5jdPxCs=";
+  cargoHash = "sha256-kVLUSu+9jW3M0YosmpZWDIKCj7GilZZibMMtufHPdfM=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/pd/pdfcpu/package.nix

···
 
 buildGoModule rec {
   pname = "pdfcpu";
-  version = "0.10.1";
+  version = "0.10.2";
 
   src = fetchFromGitHub {
     owner = "pdfcpu";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-IODE6/TIXZZC5Z8guFK24iiHTwj84fcf9RiAyFkX2F8=";
+    hash = "sha256-vfU0mFfOW9K3rgVNdfN2RBiKJLbijoVMtuywsoclEgE=";
     # Apparently upstream requires that the compiled executable will know the
     # commit hash and the date of the commit. This information is also presented
     # in the output of `pdfcpu version` which we use as a sanity check in the

pkgs/by-name/pl/plantuml/package.nix

···
   stdenvNoCC,
   fetchurl,
   graphviz,
+  gitUpdater,
   jre,
   makeBinaryWrapper,
   testers,
···
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plantuml";
-  version = "1.2025.0";
+  version = "1.2025.2";
 
   src = fetchurl {
     url = "https://github.com/plantuml/plantuml/releases/download/v${finalAttrs.version}/plantuml-pdf-${finalAttrs.version}.jar";
-    hash = "sha256-tHlhO7+q/iG5jbivTzQtvaOiDXoIEC/thA2nJnS6Kak=";
+    hash = "sha256-mDP72BLe7+WqjCsxIrhF//jVQVpmU0jwgFeH2sW1mH0=";
   };
 
   nativeBuildInputs = [
···
     $out/bin/plantuml -testdot
   '';
 
-  passthru.tests.version = testers.testVersion {
-    package = finalAttrs.finalPackage;
-    command = "plantuml --version";
+  passthru = {
+    tests.version = testers.testVersion {
+      package = finalAttrs.finalPackage;
+      command = "plantuml --version";
+    };
+    updateScript = gitUpdater {
+      url = "https://github.com/plantuml/plantuml.git";
+      allowedVersions = "^1\\.[0-9\\.]+$";
+      rev-prefix = "v";
+    };
   };
 
   meta = {

pkgs/by-name/re/re-isearch/package.nix

···
   postPatch = ''
     # Fix gcc-13 build due to missing <cstdint> include.
     sed -e '1i #include <cstdint>' -i src/mmap.cxx
+
+    # g++: error: unrecognized command-line option '-msse2'
+    # gcc: error: unrecognized command-line option '-m64'
+    substituteInPlace build/Makefile.ubuntu \
+      --replace-fail "-msse2" "" \
+      --replace-fail "-m64" ""
   '';
 
   nativeBuildInputs = [ writableTmpDirAsHomeHook ];
···
     description = "Novel multimodal search and retrieval engine";
     homepage = "https://nlnet.nl/project/Re-iSearch/";
     license = lib.licenses.asl20;
-    platforms = [ "x86_64-linux" ];
+    platforms = lib.platforms.linux;
     maintainers = [ lib.maintainers.astro ];
     teams = [ lib.teams.ngi ];
   };

pkgs/by-name/re/reth/package.nix

···
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "reth";
+  version = "1.3.12";
+
+  src = fetchFromGitHub {
+    owner = "paradigmxyz";
+    repo = pname;
+    rev = "v${version}";
+    hash = "sha256-59XUrMaXMiqSELQX8i7eK4Eo8YfGjPVZHT6q+rxoSPs=";
+  };
+
+  cargoHash = "sha256-FHQ+iPcjxwcY7uoZMXlm/lRoVA5E5wRg7qFgJe+VSEc=";
+
+  nativeBuildInputs = [
+    rustPlatform.bindgenHook
+  ];
+
+  # Some tests fail due to I/O that is unfriendly with nix sandbox.
+  checkFlags = [
+    "--skip=builder::tests::block_number_node_config_test"
+    "--skip=builder::tests::launch_multiple_nodes"
+    "--skip=builder::tests::rpc_handles_none_without_http"
+    "--skip=cli::tests::override_trusted_setup_file"
+    "--skip=cli::tests::parse_env_filter_directives"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Modular Ethereum execution client in Rust by Paradigm";
+    homepage = "https://github.com/paradigmxyz/reth";
+    license = with lib.licenses; [
+      mit
+      asl20
+    ];
+    mainProgram = "reth";
+    maintainers = with lib.maintainers; [ mitchmindtree ];
+    platforms = lib.platforms.unix;
+  };
+}

pkgs/by-name/si/simdutf/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "simdutf";
-  version = "6.5.0";
+  version = "7.0.0";
 
   src = fetchFromGitHub {
     owner = "simdutf";
     repo = "simdutf";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-bZ4r62GMz2Dkd3fKTJhelitaA8jUBaDjG6jOysEg8Nk=";
+    hash = "sha256-sXxw3PCctcy4kxJHvUfXc07gArRqF5lz9DEJvzyzY48=";
   };
 
   # Fix build on darwin

pkgs/by-name/st/stepmania/package.nix

···
   libvorbis,
   udev,
   xorg,
+  zlib,
 }:
 
 stdenv.mkDerivation {
···
     libvorbis
     udev
     xorg.libXtst
+    zlib
   ];
 
   cmakeFlags = [
     "-DWITH_SYSTEM_FFMPEG=1"
     "-DWITH_SYSTEM_PNG=on"
+    "-DWITH_SYSTEM_ZLIB=on"
     "-DGTK2_GDKCONFIG_INCLUDE_DIR=${gtk2.out}/lib/gtk-2.0/include"
     "-DGTK2_GLIBCONFIG_INCLUDE_DIR=${glib.out}/lib/glib-2.0/include"
   ];

pkgs/by-name/ta/talosctl/package.nix

···
 
 buildGoModule rec {
   pname = "talosctl";
-  version = "1.9.5";
+  version = "1.10.0";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "talos";
     tag = "v${version}";
-    hash = "sha256-2YKZfW62yOA8uV3bn6at/9YV3OHjiMuqA1SUupyAAx4=";
+    hash = "sha256-T/iFzMl3+tZu3EFNyof+QIywJA7ZTLm1asvy/q97Dus=";
   };
 
-  vendorHash = "sha256-f2hOAF746nMAZe1KEopdpFHfRMEZQdy4VoVUi49CBJo=";
+  vendorHash = "sha256-aFxeKyBcMdw5WOTRvXRofO2jA7rrQNaJGrZw3mcqvXE=";
 
   ldflags = [
     "-s"

pkgs/by-name/uh/uhexen2/package.nix

···
   fetchgit,
   SDL,
   stdenv,
+  alsa-lib,
+  libGL,
   libogg,
   libvorbis,
   libmad,
···
 
   buildInputs = [
     SDL
+    alsa-lib
+    libGL
     libogg
     libvorbis
     libmad

pkgs/by-name/vi/victoriametrics/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "VictoriaMetrics";
-  version = "1.115.0";
+  version = "1.116.0";
 
   src = fetchFromGitHub {
     owner = "VictoriaMetrics";
     repo = "VictoriaMetrics";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pCr2H6kaZURLX4IustRZuSIlIdRWU2Spzh1SWoYYj8M=";
+    hash = "sha256-iXMn1C5dUzsZSNwv4PqS4iMsTlxjhj9U9YLJHy8WGHs=";
   };
 
   vendorHash = null;

pkgs/by-name/wa/watchlog/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "watchlog";
-  version = "1.244.0";
+  version = "1.246.0";
 
   src = fetchFromGitLab {
     owner = "kevincox";
     repo = "watchlog";
     rev = "v${version}";
-    hash = "sha256-RQggLV4ROV9j5FxiJ2pRh/jlTFhgKUiBO/Gh/jLJ3tg=";
+    hash = "sha256-1AcA2Ar2XVLMfBxG2GtsXe9zNF/8pJBZ2NzihhMm3Vk=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-hdNEEbpsasAc8thQ6fKP4DQ+6jQiA2CO781Zz8CEiHU=";
+  cargoHash = "sha256-83vDlH/S8rZqLwBux3WoTIkGFf01Powyz9sZpsVY+AQ=";
 
   meta = {
     description = "Easier monitoring of live logs";

pkgs/development/libraries/mesa/common.nix

···
 # nix build .#legacyPackages.x86_64-darwin.mesa .#legacyPackages.aarch64-darwin.mesa
 rec {
   pname = "mesa";
-  version = "25.0.4";
+  version = "25.0.5";
 
   src = fetchFromGitLab {
     domain = "gitlab.freedesktop.org";
     owner = "mesa";
     repo = "mesa";
     rev = "mesa-${version}";
-    hash = "sha256-TiMd1YVQxOlrmdwDQDoTFh6nbVMfnW75ISfzoUQgKHU=";
+    hash = "sha256-zYZgvuRnqhPbVmxmdmq4rLng20gMiAvJYD0o4jN5McI=";
   };
 
   meta = {

pkgs/development/python-modules/aiontfy/default.nix

···
+{
+  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatch-regex-commit,
+  hatchling,
+  lib,
+  mashumaro,
+  orjson,
+  pytest-asyncio,
+  pytest-cov-stub,
+  pytestCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "aiontfy";
+  version = "0.5.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "tr4nt0r";
+    repo = "aiontfy";
+    tag = "v${version}";
+    hash = "sha256-WQb6sNjpQVgh+9vH7EyrmJHCWL0Mcmw4hHPHa8KsLYc=";
+  };
+
+  build-system = [
+    hatch-regex-commit
+    hatchling
+  ];
+
+  dependencies = [
+    aiohttp
+    mashumaro
+    orjson
+  ];
+
+  pythonImportsCheck = [ "aiontfy" ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytest-cov-stub
+    pytestCheckHook
+  ];
+
+  meta = {
+    changelog = "https://github.com/tr4nt0r/aiontfy/releases/tag/${src.tag}";
+    description = "Async ntfy client library";
+    homepage = "https://github.com/tr4nt0r/aiontfy";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ dotlambda ];
+  };
+}

pkgs/development/python-modules/bc-detect-secrets/default.nix

···
 
 buildPythonPackage rec {
   pname = "bc-detect-secrets";
-  version = "1.5.41";
+  version = "1.5.42";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "bridgecrewio";
     repo = "detect-secrets";
     tag = version;
-    hash = "sha256-YFBG/0jT7o2HFUDWzpr1N+aRcg9iVFyyYqDL0TuBOAw=";
+    hash = "sha256-ADK9zopoO7rOslJx3imxiKbziVK6oInfYHytgTVbq/w=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/boto3-stubs/default.nix

···
 
 buildPythonPackage rec {
   pname = "boto3-stubs";
-  version = "1.38.5";
+  version = "1.38.6";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit version;
-    hash = "sha256-sCxjR/j03GmpmQuKSd40ejHR3p2z+H28w+XpTpNRVSA=";
+    hash = "sha256-NFnRID2lyjQAoWBrXaxTsQwxh3rBG7+VqCuFeE/zJ3E=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/botocore-stubs/default.nix

···
 
 buildPythonPackage rec {
   pname = "botocore-stubs";
-  version = "1.38.5";
+  version = "1.38.6";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "botocore_stubs";
     inherit version;
-    hash = "sha256-Vg4ZPjnysVOw1kvEIKfgL4oYjz8cZnt5qUu/KrVq3cc=";
+    hash = "sha256-Vu2Hs+CHDSGpaKg0YSm1eOH2tw7pAtALu2sWLCkSIvQ=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/celery/default.nix

···
   pythonOlder,
   pyyaml,
   setuptools,
-  tzdata,
   vine,
 }:
 
 buildPythonPackage rec {
   pname = "celery";
-  version = "5.5.0";
+  version = "5.5.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-ENSfmSbRYjcxAQmw5uHi96ITO4TmhLs2U012Y+ZpGbs=";
+    hash = "sha256-TWkw81T50pKVQl16NyYSRcdKMoB8Rddkvtwoav0Ock4=";
   };
 
   build-system = [ setuptools ];
···
     click-repl
     kombu
     python-dateutil
-    tzdata
     vine
   ];
 

pkgs/development/python-modules/google-genai/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-genai";
-  version = "1.11.0";
+  version = "1.12.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "python-genai";
     tag = "v${version}";
-    hash = "sha256-0z+I8nFYh4IhTfj8VgayGZwma9woPY0E+K/0fq4v2EM=";
+    hash = "sha256-+m5VwGErIAlXlbATTUMYU5oGSvqFSyRE6UqIByIv87U=";
   };
 
   build-system = [

pkgs/development/python-modules/mcpadapt/default.nix

···
 
 buildPythonPackage rec {
   pname = "mcpadapt";
-  version = "0.1.3";
+  version = "0.1.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "grll";
     repo = "mcpadapt";
     tag = "v${version}";
-    hash = "sha256-9TMVg70kj25bSNvgVxeFNsY6YnBg+9KswOfcv4Y2SqA=";
+    hash = "sha256-1GgQ2JVCSNCnsxPS82e+6ICG7ChTGFYiejCPtI827Yk=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/mypy-boto3/default.nix

···
       "sha256-tzYioIJx6aJQxiCUMOCQl71uzKW9f9kEw2xZlFrgfpI=";
 
   mypy-boto3-cleanrooms =
-    buildMypyBoto3Package "cleanrooms" "1.38.0"
-      "sha256-SfcrN5BVxW5t1zEUDUww6qOKqFrnu6DclVFwy8hWGVE=";
+    buildMypyBoto3Package "cleanrooms" "1.38.6"
+      "sha256-1OGeYcLRpFeLfnxKEjSUPfPI6keLDJbZVvhNXq12OaA=";
 
   mypy-boto3-cloud9 =
     buildMypyBoto3Package "cloud9" "1.38.0"
···
       "sha256-RQh46jrXqj4bXTRJ+tPR9sql7yUn7Ek9u4p0OU0A7b0=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.38.0"
-      "sha256-75De58jFMumZ5f04hEx1dLC8mdk+XdQWnO/eP4dfzKk=";
+    buildMypyBoto3Package "ec2" "1.38.6"
+      "sha256-jkfIR/cdjFrsW05jU8Vmc4HZIO0AmD9TVhZH17B/q6c=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.38.0"
       "sha256-1zg5Vw+V+bpp5FxTw0CSfxSN7JNVBwY4I8uDFhEJL3w=";
 
   mypy-boto3-ecr =
-    buildMypyBoto3Package "ecr" "1.38.0"
-      "sha256-JPXmkpdWjQSVG8Z7gH385dRy/3HUraLxDLdmO/mqZU4=";
+    buildMypyBoto3Package "ecr" "1.38.6"
+      "sha256-CTIvlIYRlak6FnjhbyyShNGtYbRk45/ESXEKIoR7q/I=";
 
   mypy-boto3-ecr-public =
-    buildMypyBoto3Package "ecr-public" "1.38.0"
-      "sha256-qJ22ZyzB+8OVRjRklxWYKJlA9WZg542CccUWmdx4p+s=";
+    buildMypyBoto3Package "ecr-public" "1.38.6"
+      "sha256-aSZu8mxsTho4pvWWbNwlJf0IROjqjTlIUEE5DJkAje4=";
 
   mypy-boto3-ecs =
     buildMypyBoto3Package "ecs" "1.38.3"
···
       "sha256-uypKW3Cqj98SLeWmSwCXVKhKpXWXEvwdUexqqFgXeEc=";
 
   mypy-boto3-logs =
-    buildMypyBoto3Package "logs" "1.38.0"
-      "sha256-5jb6bzG4T2w9jNW4XYf9m6t2ZjGZnEoMg8LPAAPv5ac=";
+    buildMypyBoto3Package "logs" "1.38.6"
+      "sha256-Fpe+7mXJQHikCVyn/hcRvFPu/U+wvDL0JmDN0/Vvxwc=";
 
   mypy-boto3-lookoutequipment =
     buildMypyBoto3Package "lookoutequipment" "1.38.0"

pkgs/development/python-modules/neoteroi-mkdocs/default.nix

···
 }:
 buildPythonPackage rec {
   pname = "neoteroi-mkdocs";
-  version = "1.1.1";
+  version = "1.1.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Neoteroi";
     repo = "mkdocs-plugins";
     tag = "v${version}";
-    hash = "sha256-EbhkhcH8sGxiwimg9dfmSSOJR7DYw7nfS3m1HUSH0vg=";
+    hash = "sha256-+bH4pkY+BE31t3b750ZAbbesKLFjgx6KF9b2tXFTmhI=";
   };
 
   buildInputs = [ hatchling ];

pkgs/development/python-modules/odp-amsterdam/default.nix

···
 
 buildPythonPackage rec {
   pname = "odp-amsterdam";
-  version = "6.0.2";
+  version = "6.1.1";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
···
     owner = "klaasnicolaas";
     repo = "python-odp-amsterdam";
     tag = "v${version}";
-    hash = "sha256-veBccNxqhqBYKUC5pdjZ1IOWUYUqiNK5pJq1L+8UCxA=";
+    hash = "sha256-ZSo0CNN4NjHQDq3Nx6aqfPEssfty7wNefFX6QG5+pQ4=";
   };
 
   postPatch = ''

pkgs/development/python-modules/openfga-sdk/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pythonAtLeast,
+  pytestCheckHook,
+  aiohttp,
+  build,
+  mock,
+  opentelemetry-api,
+  pytest-asyncio,
+  pytest-cov-stub,
+  python-dateutil,
+  setuptools,
+  urllib3,
+}:
+
+buildPythonPackage rec {
+  pname = "openfga-sdk";
+  version = "0.9.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "openfga";
+    repo = "python-sdk";
+    tag = "v${version}";
+    hash = "sha256-+4Np406HAB6uHZhDUUSn9aDbuC4/G172+TZ560rYjlk=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    aiohttp
+    build
+    opentelemetry-api
+    python-dateutil
+    urllib3
+  ];
+
+  pythonImportsCheck = [ "openfga_sdk" ];
+
+  nativeCheckInputs = [
+    mock
+    pytest-cov-stub
+    pytestCheckHook
+  ] ++ lib.optionals (pythonAtLeast "3.13") [ pytest-asyncio ];
+
+  disabledTests = lib.optionals (pythonAtLeast "3.13") [
+    # These fail due to a race condition in the test mocks
+    "test_client_batch_check_multiple_request"
+    "test_client_batch_check_multiple_request_fail"
+  ];
+
+  meta = {
+    changelog = "https://github.com/openfga/python-sdk/blob/v${version}/CHANGELOG.md";
+    description = "Fine-Grained Authorization solution for Python";
+    homepage = "https://github.com/openfga/python-sdk";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ nicklewis ];
+  };
+}

pkgs/development/python-modules/playwrightcapture/default.nix

···
 
 buildPythonPackage rec {
   pname = "playwrightcapture";
-  version = "1.29.0";
+  version = "1.29.1";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "Lookyloo";
     repo = "PlaywrightCapture";
     tag = "v${version}";
-    hash = "sha256-p2EprahxHqq4jL7bdnq1+BK3IPea5tZLu/X4N+kZLSY=";
+    hash = "sha256-n2lVP+oThZ2hRVOadudaaNFU2KI14rrkG7ipJ0vrj20=";
   };
 
   pythonRelaxDeps = [

pkgs/development/python-modules/publicsuffixlist/default.nix

···
 
 buildPythonPackage rec {
   pname = "publicsuffixlist";
-  version = "1.0.2.20250428";
+  version = "1.0.2.20250430";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-Ayh85fs1eiNNJzJNgFV3bWYc3Mw+iEdvNB9+ci3BY68=";
+    hash = "sha256-de7yJviyIb/R0Z93yh5LeQKpefjGsJi1YWZ/AtXwtnc=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pygitguardian/default.nix

···
 
 buildPythonPackage rec {
   pname = "pygitguardian";
-  version = "1.20.0";
+  version = "1.21.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "GitGuardian";
     repo = "py-gitguardian";
     tag = "v${version}";
-    hash = "sha256-vTzQbk6a/CTeCSjDB05AquuUft2oeFwEyZEM6jrnRD0=";
+    hash = "sha256-pFbryvVwAQbhjNDZ0v+edvtWpkHZ1AVTz0tEsfYBXz8=";
   };
 
   pythonRelaxDeps = [

pkgs/development/python-modules/tencentcloud-sdk-python/default.nix

···
 
 buildPythonPackage rec {
   pname = "tencentcloud-sdk-python";
-  version = "3.0.1367";
+  version = "3.0.1369";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = version;
-    hash = "sha256-DY//LYVzL1gCqp++yk6R1O9HBa8Df8x3q980bDTvGWA=";
+    hash = "sha256-2KJ8Xcg5JB7/CWrFohvDcEplYY5QjJsr/b8xCKZpUQY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/timezonefinder/default.nix

···
 
 buildPythonPackage rec {
   pname = "timezonefinder";
-  version = "6.5.7";
+  version = "6.5.9";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
+  disabled = pythonOlder "3.10";
 
   src = fetchFromGitHub {
     owner = "jannikmi";
     repo = "timezonefinder";
     tag = version;
-    hash = "sha256-Jo3sOFbmy+NKPL0+21rZQUXIC9WpVT1D3X2sxTC89jY=";
+    hash = "sha256-LkGDR8nSGfRiBxSXugauGhe3+8RsLRPWU3oE+1c5iCk=";
   };
 
   build-system = [
···
   ];
 
   pythonImportsCheck = [ "timezonefinder" ];
+
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-warn '"poetry-core>=1.0.0,<2.0.0"' '"poetry-core>=1.0.0"'
+  '';
 
   preCheck = ''
     # Some tests need the CLI on the PATH

pkgs/development/python-modules/tlds/default.nix

···
 
 buildPythonPackage rec {
   pname = "tlds";
-  version = "2025042400";
+  version = "2025043000";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kichik";
     repo = "tlds";
     tag = version;
-    hash = "sha256-SxiV0EVOECxNjq+v8dCKtm+zcAvNdG6HwsQzUpmVaos=";
+    hash = "sha256-yyDnQMQmZAlHvrWgxSi47E26fJ74FI4COwv1NOLvOL0=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/unstructured-client/default.nix

···
 
 buildPythonPackage rec {
   pname = "unstructured-client";
-  version = "0.33.0";
+  version = "0.34.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Unstructured-IO";
     repo = "unstructured-python-client";
     tag = "v${version}";
-    hash = "sha256-leQlBLR4BfirUpjhxSiXIgTm7Di6lh5ic0oELzON+Uw=";
+    hash = "sha256-HzdIth6pK13zi3nDusgY9paeiWEKzSpJhwGVMjDpd/g=";
   };
 
   preBuild = ''

pkgs/development/python-modules/wallbox/default.nix

···
   lib,
   aenum,
   buildPythonPackage,
-  fetchPypi,
-  pythonOlder,
+  fetchFromGitHub,
   requests,
   setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "wallbox";
-  version = "0.8.0";
+  version = "0.9.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-S1JP7/D3U853fQU3a2pyL+dt/hVLDP3TB82tcGlcXVQ=";
+  src = fetchFromGitHub {
+    owner = "cliviu74";
+    repo = "wallbox";
+    tag = version;
+    hash = "sha256-1/hm0x71YTW3cA11Nw/e4xUol5T9lElgm1bKi1wRi3o=";
   };
 
   build-system = [
···
 
   pythonImportsCheck = [ "wallbox" ];
 
-  meta = with lib; {
+  meta = {
     description = "Module for interacting with Wallbox EV charger API";
     homepage = "https://github.com/cliviu74/wallbox";
-    changelog = "https://github.com/cliviu74/wallbox/releases/tag/${version}";
-    license = licenses.mit;
-    maintainers = with maintainers; [ dotlambda ];
+    changelog = "https://github.com/cliviu74/wallbox/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ dotlambda ];
   };
 }

pkgs/os-specific/linux/guvcview/default.nix

···
   lib,
   stdenv,
   fetchurl,
+  cmake,
   intltool,
   pkg-config,
   portaudio,
···
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "2.1.0";
   pname = "guvcview";
+  version = "2.2.1";
 
   src = fetchurl {
     url = "mirror://sourceforge/project/guvcview/source/guvcview-src-${finalAttrs.version}.tar.bz2";
-    hash = "sha256-PZPkyfq40aepveGm278E1s+dNHwTS1EotFhqHZC2PPs=";
+    hash = "sha256-0q3HznYpYehTw+FrURutYVBEktEvPi634w2kovet5a8=";
   };
 
   nativeBuildInputs =
     [
       intltool
       pkg-config
+      cmake
     ]
     ++ lib.optionals useGtk [ wrapGAppsHook3 ]
     ++ lib.optionals useQt [ wrapQtAppsHook ];

pkgs/os-specific/linux/scx/scx_full.nix

···
   stdenv,
   scx-common,
   scx,
+  nixosTests,
 }:
 scx.cscheds.overrideAttrs (oldAttrs: {
   pname = "scx_full";
···
     + ''
       cp ${scx.rustscheds}/bin/* ${placeholder "bin"}/bin/
     '';
+
+  passthru.tests.basic = nixosTests.scx;
 
   passthru.updateScript.command = ./update.sh;
 

pkgs/tools/security/ggshield/default.nix

···
 
 python3.pkgs.buildPythonApplication rec {
   pname = "ggshield";
-  version = "1.38.1";
+  version = "1.39.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "GitGuardian";
     repo = "ggshield";
     tag = "v${version}";
-    hash = "sha256-VioahNz9mlai+pavSTvuyE8dm1gyrjFgBLlSPE1IKRw=";
+    hash = "sha256-9VQLWeZPYz3ZqNUzw1vLC5no2NjRru4GcUpjW4QhuBY=";
   };
 
   pythonRelaxDeps = true;

pkgs/top-level/python-packages.nix

···
 
   aionotion = callPackage ../development/python-modules/aionotion { };
 
+  aiontfy = callPackage ../development/python-modules/aiontfy { };
+
   aionut = callPackage ../development/python-modules/aionut { };
 
   aiooncue = callPackage ../development/python-modules/aiooncue { };
···
   openerz-api = callPackage ../development/python-modules/openerz-api { };
 
   openevsewifi = callPackage ../development/python-modules/openevsewifi { };
+
+  openfga-sdk = callPackage ../development/python-modules/openfga-sdk { };
 
   openhomedevice = callPackage ../development/python-modules/openhomedevice { };