Merge remote-tracking branch 'origin/staging-next' into staging

lib/modules.nix

···
                   inherit
                     lib
                     options
-                    config
                     specialArgs
                     ;
                   _class = class;
                   _prefix = prefix;
+                  config = addErrorContext "if you get an infinite recursion here, you probably reference `config` in `imports`. If you are trying to achieve a conditional import behavior dependent on `config`, consider importing unconditionally, and using `mkEnableOption` and `mkIf` to control its effect." config;
                 }
                 // specialArgs
               );
···
       # evaluation of the option.
       context = name: ''while evaluating the module argument `${name}' in "${key}":'';
       extraArgs = mapAttrs (
-        name: _: addErrorContext (context name) (args.${name} or config._module.args.${name})
+        name: _:
+        addErrorContext (context name) (
+          args.${name} or (addErrorContext
+            "noting that argument `${name}` is not externally provided, so querying `_module.args` instead, requiring `config`"
+            config._module.args.${name}
+          )
+        )
       ) (functionArgs f);
 
       # Note: we append in the opposite order such that we can add an error

lib/tests/modules.sh

···
     fi
 }
 
+invertIfUnset() {
+    gate="$1"
+    shift
+    if [[ -n "${!gate:-}" ]]; then
+        "$@"
+    else
+        ! "$@"
+    fi
+}
+
+globalErrorLogCheck() {
+    invertIfUnset "REQUIRE_INFINITE_RECURSION_HINT" \
+      grep -i 'if you get an infinite recursion here' \
+      <<<"$err" >/dev/null \
+      || {
+        if [[ -n "${REQUIRE_INFINITE_RECURSION_HINT:-}" ]]; then
+            echo "Unexpected infinite recursion hint"
+        else
+            echo "Expected infinite recursion hint, but none found"
+        fi
+        return 1
+      }
+}
+
 checkConfigError() {
     local errorContains=$1
     local err=""
···
         logFailure
         logEndFailure
     else
+        if ! globalErrorLogCheck "$err"; then
+            logStartFailure
+            echo "LOG:"
+            reportFailure "$@"
+            echo "GLOBAL ERROR LOG CHECK FAILED"
+            logFailure
+            logEndFailure
+        fi
         if echo "$err" | grep -zP --silent "$errorContains" ; then
             ((++pass))
         else
···
 # Check that using _module.args on imports cause infinite recursions, with
 # the proper error context.
 set -- "$@" ./define-_module-args-custom.nix ./import-custom-arg.nix
-checkConfigError 'while evaluating the module argument .*custom.* in .*import-custom-arg.nix.*:' "$@"
-checkConfigError 'infinite recursion encountered' "$@"
+REQUIRE_INFINITE_RECURSION_HINT=1 checkConfigError 'while evaluating the module argument .*custom.* in .*import-custom-arg.nix.*:' "$@"
+REQUIRE_INFINITE_RECURSION_HINT=1 checkConfigError 'infinite recursion encountered' "$@"
 
 # Check _module.check.
 set -- config.enable ./declare-enable.nix ./define-enable.nix ./define-attrsOfSub-foo.nix
···
 checkConfigOutput '^null$' config.foo ./freeform-attrsOf.nix ./freeform-str-dep-unstr.nix
 checkConfigOutput '^"24"$' config.foo ./freeform-attrsOf.nix ./freeform-str-dep-unstr.nix ./define-value-string.nix
 # Check whether an freeform-typed value can depend on a declared option, this can only work with lazyAttrsOf
-checkConfigError 'infinite recursion encountered' config.foo ./freeform-attrsOf.nix ./freeform-unstr-dep-str.nix
+REQUIRE_INFINITE_RECURSION_HINT=1 checkConfigError 'infinite recursion encountered' config.foo ./freeform-attrsOf.nix ./freeform-unstr-dep-str.nix
 checkConfigError 'The option .* was accessed but has no value defined. Try setting the option.' config.foo ./freeform-lazyAttrsOf.nix ./freeform-unstr-dep-str.nix
 checkConfigOutput '^"24"$' config.foo ./freeform-lazyAttrsOf.nix ./freeform-unstr-dep-str.nix ./define-value-string.nix
 # submodules in freeformTypes should have their locations annotated

nixos/doc/manual/release-notes/rl-2511.section.md

···
 
 - [`services.victorialogs.package`](#opt-services.victorialogs.package) now defaults to `victorialogs`, as `victoriametrics` no longer contains the VictoriaLogs binaries.
 
+- The `services.traccar.settings` attribute has been reworked. Instead of the previous flat attribute set the new implementation uses nested attribute sets. You need to update you configuration manually. For instance, `services.traccar.settings.loggerConsole` becomes `services.traccar.settings.logger.console`.
+
 - The `wstunnel` module was converted to RFC42-style settings, you will need to update your NixOS config if you make use of this module.
 
 - [private-gpt](https://github.com/zylon-ai/private-gpt) service has been removed by lack of maintenance upstream.

nixos/modules/profiles/installation-device.nix

···
     boot.kernel.sysctl."vm.overcommit_memory" = "1";
 
     # To speed up installation a little bit, include the complete
-    # stdenv in the Nix store on the CD.
+    # stdenvNoCC in the Nix store on the CD.
     system.extraDependencies =
       with pkgs;
       [
-        stdenv
         stdenvNoCC # for runCommand
         busybox
         # For boot.initrd.systemd

nixos/modules/security/auditd.nix

···
   pkgs,
   ...
 }:
+let
+  cfg = config.security.auditd;
 
+  settingsType =
+    with lib.types;
+    nullOr (oneOf [
+      bool
+      nonEmptyStr
+      path
+      int
+    ]);
+
+  pluginOptions = lib.types.submodule {
+    options = {
+      active = lib.mkEnableOption "Whether to enable this plugin";
+      direction = lib.mkOption {
+        type = lib.types.enum [
+          "in"
+          "out"
+        ];
+        default = "out";
+        description = ''
+          The option is dictated by the plugin. In or out are the only choices.
+          You cannot make a plugin operate in a way it wasn't  designed just by
+          changing this option. This option is to give a clue to the event dispatcher
+          about which direction events flow.
+
+          ::: {.note}
+          Inbound events are not supported yet.
+          :::
+        '';
+      };
+      path = lib.mkOption {
+        type = lib.types.path;
+        description = "This is the absolute path to the plugin executable.";
+      };
+      type = lib.mkOption {
+        type = lib.types.enum [ "always" ];
+        readOnly = true;
+        default = "always";
+        description = ''
+          This tells the dispatcher how the plugin wants to be run. There is only
+          one valid option, `always`, which means the plugin is external and should
+          always be run. The default is `always` since there are no more builtin plugins.
+        '';
+      };
+      args = lib.mkOption {
+        type = lib.types.nullOr (lib.types.listOf lib.types.nonEmptyStr);
+        default = null;
+        description = ''
+          This allows you to pass arguments to the child program.
+          Generally plugins do not take arguments and have their own
+          config file that instructs them how they should be configured.
+        '';
+      };
+      format = lib.mkOption {
+        type = lib.types.enum [
+          "binary"
+          "string"
+        ];
+        default = "string";
+        description = ''
+          Binary passes the data exactly as the audit event dispatcher gets it from
+          the audit daemon. The string option tells the dispatcher to completely change
+          the event into a string suitable for parsing with the audit parsing library.
+        '';
+      };
+      settings = lib.mkOption {
+        type = lib.types.nullOr (
+          lib.types.submodule {
+            freeformType = lib.types.attrsOf settingsType;
+          }
+        );
+        default = null;
+        description = "Plugin-specific config file to link to /etc/audit/<plugin>.conf";
+      };
+    };
+  };
+
+  prepareConfigValue =
+    v:
+    if lib.isBool v then
+      (if v then "yes" else "no")
+    else if lib.isList v then
+      lib.concatStringsSep " " (map prepareConfigValue v)
+    else
+      builtins.toString v;
+  prepareConfigText =
+    conf:
+    lib.concatLines (
+      lib.mapAttrsToList (k: v: if v == null then "#${k} =" else "${k} = ${prepareConfigValue v}") conf
+    );
+in
 {
-  options.security.auditd.enable = lib.mkEnableOption "the Linux Audit daemon";
+  options.security.auditd = {
+    enable = lib.mkEnableOption "the Linux Audit daemon";
 
-  config = lib.mkIf config.security.auditd.enable {
+    settings = lib.mkOption {
+      type = lib.types.submodule {
+        freeformType = lib.types.attrsOf settingsType;
+        options = {
+          # space_left needs to be larger than admin_space_left, yet they default to be the same if left open.
+          space_left = lib.mkOption {
+            type = lib.types.either lib.types.int (lib.types.strMatching "[0-9]+%");
+            default = 75;
+            description = ''
+              If the free space in the filesystem containing log_file drops below this value, the audit daemon takes the action specified by
+              {option}`space_left_action`. If the value of {option}`space_left` is specified as a whole number, it is interpreted as an absolute size in mebibytes
+              (MiB). If the value is specified as a number between 1 and 99 followed by a percentage sign (e.g., 5%), the audit daemon calculates
+              the absolute size in megabytes based on the size of the filesystem containing {option}`log_file`. (E.g., if the filesystem containing
+              {option}`log_file` is 2 gibibytes in size, and {option}`space_left` is set to 25%, then the audit daemon sets {option}`space_left` to approximately 500 mebibytes.
+
+              ::: {.note}
+              This calculation is performed when the audit daemon starts, so if you resize the filesystem containing {option}`log_file` while the
+              audit daemon is running, you should send the audit daemon SIGHUP to re-read the configuration file and recalculate the correct per‐
+              centage.
+              :::
+            '';
+          };
+          admin_space_left = lib.mkOption {
+            type = lib.types.either lib.types.int (lib.types.strMatching "[0-9]+%");
+            default = 50;
+            description = ''
+              This is a numeric value in mebibytes (MiB) that tells the audit daemon when to perform a configurable action because the system is running
+              low on disk space. This should be considered the last chance to do something before running out of disk space. The numeric value for
+              this parameter should be lower than the number for {option}`space_left`. You may also append a percent sign (e.g. 1%) to the number to have
+              the audit daemon calculate the number based on the disk partition size.
+            '';
+          };
+        };
+      };
+
+      default = { };
+      description = "auditd configuration file contents. See {auditd.conf} for supported values.";
+    };
+
+    plugins = lib.mkOption {
+      type = lib.types.attrsOf pluginOptions;
+      default = { };
+      defaultText = lib.literalExpression ''
+        {
+          af_unix = {
+            path = lib.getExe' pkgs.audit "audisp-af_unix";
+            args = [
+              "0640"
+              "/var/run/audispd_events"
+              "string"
+            ];
+            format = "binary";
+          };
+          remote = {
+            path = lib.getExe' pkgs.audit "audisp-remote";
+            settings = { };
+          };
+          filter = {
+            path = lib.getExe' pkgs.audit "audisp-filter";
+            args = [
+              "allowlist"
+              "/etc/audit/audisp-filter.conf"
+              (lib.getExe' pkgs.audit "audisp-syslog")
+              "LOG_USER"
+              "LOG_INFO"
+              "interpret"
+            ];
+            settings = { };
+          };
+          syslog = {
+            path = lib.getExe' pkgs.audit "audisp-syslog";
+            args = [ "LOG_INFO" ];
+          };
+        }
+      '';
+      description = "Plugin definitions to register with auditd";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    assertions = [
+      {
+        assertion =
+          let
+            cfg' = cfg.settings;
+          in
+          (
+            (lib.isInt cfg'.space_left && lib.isInt cfg'.admin_space_left)
+            -> cfg'.space_left > cfg'.admin_space_left
+          )
+          && (
+            let
+              get_percent = s: lib.toInt (lib.strings.removeSuffix "%" s);
+            in
+            (lib.isString cfg'.space_left && lib.isString cfg'.admin_space_left)
+            -> (get_percent cfg'.space_left) > (get_percent cfg'.admin_space_left)
+          );
+        message = "`security.auditd.settings.space_left` must be larger than `security.auditd.settings.admin_space_left`";
+      }
+    ];
+
     # Starting auditd should also enable loading the audit rules..
     security.audit.enable = lib.mkDefault true;
 
     environment.systemPackages = [ pkgs.audit ];
+
+    # setting this to anything other than /etc/audit/plugins.d will break, so we pin it here
+    security.auditd.settings.plugin_dir = "/etc/audit/plugins.d";
+
+    environment.etc = {
+      "audit/auditd.conf".text = prepareConfigText cfg.settings;
+    }
+    // (lib.mapAttrs' (
+      pluginName: pluginDefinitionConfigValue:
+      lib.nameValuePair "audit/plugins.d/${pluginName}.conf" {
+        text = prepareConfigText (lib.removeAttrs pluginDefinitionConfigValue [ "settings" ]);
+      }
+    ) cfg.plugins)
+    // (lib.mapAttrs' (
+      pluginName: pluginDefinitionConfigValue:
+      lib.nameValuePair "audit/audisp-${pluginName}.conf" {
+        text = prepareConfigText pluginDefinitionConfigValue.settings;
+      }
+    ) (lib.filterAttrs (_: v: v.settings != null) cfg.plugins));
+
+    security.auditd.plugins = {
+      af_unix = {
+        path = lib.getExe' pkgs.audit "audisp-af_unix";
+        args = [
+          "0640"
+          "/var/run/audispd_events"
+          "string"
+        ];
+        format = "binary";
+      };
+      remote = {
+        path = lib.getExe' pkgs.audit "audisp-remote";
+        settings = { };
+      };
+      filter = {
+        path = lib.getExe' pkgs.audit "audisp-filter";
+        args = [
+          "allowlist"
+          "/etc/audit/audisp-filter.conf"
+          (lib.getExe' pkgs.audit "audisp-syslog")
+          "LOG_USER"
+          "LOG_INFO"
+          "interpret"
+        ];
+        settings = { };
+      };
+      syslog = {
+        path = lib.getExe' pkgs.audit "audisp-syslog";
+        args = [ "LOG_INFO" ];
+      };
+    };
 
     systemd.services.auditd = {
       description = "Security Audit Logging Service";

nixos/modules/services/monitoring/traccar.nix

···
   cfg = config.services.traccar;
   stateDirectory = "/var/lib/traccar";
   configFilePath = "${stateDirectory}/config.xml";
-  expandCamelCase = lib.replaceStrings lib.upperChars (map (s: ".${s}") lib.lowerChars);
-  mkConfigEntry = key: value: "<entry key='${expandCamelCase key}'>${value}</entry>";
+
+  # Map leafs to XML <entry> elements as expected by traccar, using
+  # dot-separated keys for nested attribute paths.
+  mapLeafs = lib.mapAttrsRecursive (
+    path: value: "<entry key='${lib.concatStringsSep "." path}'>${value}</entry>"
+  );
+
+  mkConfigEntry = config: lib.collect builtins.isString (mapLeafs config);
+
   mkConfig =
     configurationOptions:
     pkgs.writeText "traccar.xml" ''
       <?xml version='1.0' encoding='UTF-8'?>
       <!DOCTYPE properties SYSTEM 'http://java.sun.com/dtd/properties.dtd'>
       <properties>
-          ${builtins.concatStringsSep "\n" (lib.mapAttrsToList mkConfigEntry configurationOptions)}
+          ${builtins.concatStringsSep "\n" (mkConfigEntry configurationOptions)}
       </properties>
     '';
 
   defaultConfig = {
-    databaseDriver = "org.h2.Driver";
-    databasePassword = "";
-    databaseUrl = "jdbc:h2:${stateDirectory}/traccar";
-    databaseUser = "sa";
-    loggerConsole = "true";
-    mediaPath = "${stateDirectory}/media";
-    templatesRoot = "${stateDirectory}/templates";
+    database = {
+      driver = "org.h2.Driver";
+      password = "";
+      url = "jdbc:h2:${stateDirectory}/traccar";
+      user = "sa";
+    };
+    logger.console = "true";
+    media.path = "${stateDirectory}/media";
+    templates.root = "${stateDirectory}/templates";
   };
+
 in
 {
   options.services.traccar = {
     enable = lib.mkEnableOption "Traccar, an open source GPS tracking system";
+    settingsFile = lib.mkOption {
+      type = with lib.types; nullOr path;
+      default = null;
+      description = ''
+        File used as configuration for traccar. When specified, {option}`settings` is ignored.
+      '';
+    };
     settings = lib.mkOption {
       apply = lib.recursiveUpdate defaultConfig;
       default = defaultConfig;
       description = ''
         {file}`config.xml` configuration as a Nix attribute set.
-        Attribute names are translated from camelCase to dot-separated strings. For instance:
-        {option}`mailSmtpPort = "25"`
-        would result in the following configuration property:
+        This option is ignored if `settingsFile` is set.
+
+        Nested attributes get translated to a properties entry in the traccar configuration.
+        For instance: `mail.smtp.port = "25"` results in the following entry:
         `<entry key='mail.smtp.port'>25</entry>`
-        Configuration options should match those described in
-        [Traccar - Configuration File](https://www.traccar.org/configuration-file/).
-        Secret tokens should be specified using {option}`environmentFile`
+
+        Secrets should be specified using {option}`environmentFile`
         instead of this world-readable attribute set.
+        [Traccar - Configuration File](https://www.traccar.org/configuration-file/).
       '';
     };
     environmentFile = lib.mkOption {
···
 
         Can be used for storing the secrets without making them available in the world-readable Nix store.
 
-        For example, you can set {option}`services.traccar.settings.databasePassword = "$TRACCAR_DB_PASSWORD"`
+        For example, you can set {option}`services.traccar.settings.database.password = "$TRACCAR_DB_PASSWORD"`
         and then specify `TRACCAR_DB_PASSWORD="<secret>"` in the environment file.
         This value will get substituted in the configuration file.
       '';
···
 
   config =
     let
-      configuration = mkConfig cfg.settings;
+      configuration = if cfg.settingsFile != null then cfg.settingsFile else mkConfig cfg.settings;
     in
     lib.mkIf cfg.enable {
       systemd.services.traccar = {
···
 
         serviceConfig = {
           DynamicUser = true;
-          EnvironmentFile = cfg.environmentFile;
+          EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
           ExecStart = "${lib.getExe pkgs.traccar} ${configFilePath}";
           LockPersonality = true;
           NoNewPrivileges = true;

nixos/tests/audit.nix

···
+{ lib, ... }:
 {
 
   name = "audit";
+
+  meta = {
+    maintainers = with lib.maintainers; [ grimmauld ];
+  };
 
   nodes = {
     machine =
···
             "-a always,exit -F exe=${lib.getExe pkgs.hello} -k nixos-test"
           ];
         };
-        security.auditd.enable = true;
+        security.auditd = {
+          enable = true;
+          plugins.af_unix.active = true;
+          plugins.syslog.active = true;
+          # plugins.remote.active = true; # needs configuring a remote server for logging
+          # plugins.filter.active = true; # needs configuring allowlist/denylist
+        };
 
         environment.systemPackages = [ pkgs.hello ];
       };
···
 
     with subtest("Audit subsystem gets enabled"):
       assert "enabled 1" in machine.succeed("auditctl -s")
+
+    with subtest("unix socket plugin activated"):
+      machine.succeed("stat /var/run/audispd_events")
 
     with subtest("Custom rule produces audit traces"):
       machine.succeed("hello")

nixos/tests/installer.nix

···
               system.extraDependencies =
                 with pkgs;
                 [
+                  # TODO: Remove this when we can install systems
+                  # without `stdenv`.
+                  stdenv
+
                   bintools
                   brotli
                   brotli.dev

pkgs/applications/audio/seq66/default.nix

···
 
 stdenv.mkDerivation rec {
   pname = "seq66";
-  version = "0.99.20";
+  version = "0.99.21";
 
   src = fetchFromGitHub {
     owner = "ahlstromcj";
     repo = "seq66";
     rev = version;
-    hash = "sha256-YFSvwviC2f5PJD91jcmLuqf+kDqDeMhXNXD3n45kJL8=";
+    hash = "sha256-0joa69nSX3lcpoRq9YToNA75Sg9dlYMGRZEfcJm9Vjg=";
   };
 
   nativeBuildInputs = [

pkgs/applications/virtualization/docker/buildx.nix

···
 
 buildGoModule rec {
   pname = "docker-buildx";
-  version = "0.25.0";
+  version = "0.26.1";
 
   src = fetchFromGitHub {
     owner = "docker";
     repo = "buildx";
     rev = "v${version}";
-    hash = "sha256-DdG2z0raDHcbBMDl7C0WORKhG0ZB9Gvie8u4/isE8ow=";
+    hash = "sha256-+ubv/8UdejxY7u3RdgS7L18hZHohlqGu9E3L0bTAmLY=";
   };
 
   doCheck = false;

pkgs/by-name/a2/a2ps/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "a2ps";
-  version = "4.15.6";
+  version = "4.15.7";
 
   src = fetchurl {
     url = "mirror://gnu/a2ps/a2ps-${version}.tar.gz";
-    hash = "sha256-h/+dgByxGWkYHVuM+LZeZeWyS7DHahuCXoCY8pBvvfQ=";
+    hash = "sha256-cV84Zwr9lQtMpxwB9Gj+760mXKUtPxEpNMY8Cov7uK8=";
   };
 
   postPatch = ''

pkgs/by-name/ai/airgeddon/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "airgeddon";
-  version = "11.50";
+  version = "11.51";
 
   src = fetchFromGitHub {
     owner = "v1s1t0r1sh3r3";
     repo = "airgeddon";
     tag = "v${version}";
-    hash = "sha256-hy6q25hWGEFlih0IuwoqDRjbUk1/iShj6uY+mz6hlFU=";
+    hash = "sha256-PkP8sPpX/z3yjvTpsRYJ9fKzUaMsnCp+p6AAoTlcAA0=";
   };
 
   strictDeps = true;

pkgs/by-name/ar/ark-pixel-font/package.nix

···
 
 python312Packages.buildPythonPackage rec {
   pname = "ark-pixel-font";
-  version = "2025.03.14";
+  version = "2025.07.21";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "TakWolf";
     repo = "ark-pixel-font";
     tag = version;
-    hash = "sha256-B/XsZEpSxY4k8uj3Vy31c9+GcO7d3NFcADLtPU6p/CI=";
+    hash = "sha256-NnkXKe4qlWl4lDHNcO5aVJWwyeSrHoHxqlla+RMgtQw=";
   };
 
   dependencies = with python312Packages; [

pkgs/by-name/ar/arrow/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "arrow";
-  version = "3.0.0";
+  version = "3.1.0";
 
   src = fetchFromGitHub {
     owner = "mhgolkar";
     repo = "Arrow";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oodW6XvesBWic0yK1Se/tycjqblE4qUSuAk+3MY3x8I=";
+    hash = "sha256-+Tlqh0Xn2xnF2AWv9u5xIWo6Mvg/uEsqqxWx70kd3+k=";
   };
 
   desktopItems = [

pkgs/by-name/as/ashuffle/package.nix

···
   src = fetchFromGitHub {
     owner = "joshkunz";
     repo = "ashuffle";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-HQ4+vyTvX0mhfuRclbiC+MvllV3300ztAwL0IxrUiC8=";
     fetchSubmodules = true;
   };

pkgs/by-name/au/augeas/package.nix

···
   src = fetchFromGitHub {
     owner = "hercules-team";
     repo = "augeas";
-    rev = "release-${version}";
+    tag = "release-${version}";
     fetchSubmodules = true;
     hash = "sha256-U5tm3LDUeI/idHtL2Zy33BigkyvHunXPjToDC59G9VE=";
   };

pkgs/by-name/av/avalonia/package.nix

···
       src = fetchFromGitHub {
         owner = "AvaloniaUI";
         repo = "Avalonia";
-        rev = version;
+        tag = version;
         fetchSubmodules = true;
         hash = "sha256-b7K8h2hqkLnXj3YIaRKUqlbWsDNhfWCEqH1W8K0lP6g=";
       };

pkgs/by-name/aw/awk-language-server/package.nix

···
   src = fetchFromGitHub {
     owner = "Beaglefoot";
     repo = "awk-language-server";
-    rev = "server-${version}";
+    tag = "server-${version}";
     hash = "sha256-YtduDfMAUAoQY9tgyhgERFwx9TEgD52KdeHnX2MrjjI=";
     sparseCheckout = [ "server" ];
     postFetch = ''

pkgs/by-name/bc/bchoppr/package.nix

···
   src = fetchFromGitHub {
     owner = "sjaehn";
     repo = "bchoppr";
-    rev = version;
+    tag = version;
     hash = "sha256-/aLoLUpWu66VKd9lwjli+FZZctblrZUPSEsdYH85HwQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/be/bespokesynth/package.nix

···
   src = fetchFromGitHub {
     owner = "BespokeSynth";
     repo = "bespokesynth";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-ad8wdLos3jM0gRMpcfRKeaiUxJsPGqWd/7XeDz87ToQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/bi/bio-gappa/package.nix

···
   src = fetchFromGitHub {
     owner = "lczech";
     repo = "gappa";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-WV8PO0v+e14tyjEm+xQGveQ0Pslgeh+osEMCqF8mue0=";
     fetchSubmodules = true;
   };

pkgs/by-name/bi/biodiff/package.nix

···
   src = fetchFromGitHub {
     owner = "8051Enthusiast";
     repo = "biodiff";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-ZLxjOV08sC5dKICvRUyL6FLMORkxwdLgNq7L45CDwa4=";
     fetchSubmodules = true;
   };

pkgs/by-name/bi/bitbox/package.nix

···
   src = fetchFromGitHub {
     owner = "BitBoxSwiss";
     repo = "bitbox-wallet-app";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-zpkjYnGsmPKjxUpp2H1qSzqthOO1mTmki3bPqo35sBo=";
   };

pkgs/by-name/bl/blink1-tool/package.nix

···
   src = fetchFromGitHub {
     owner = "todbot";
     repo = "blink1-tool";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-xuCjPSQUQ/KOcdsie/ndecUiEt+t46m4eI33PXJoAAY=";
   };

pkgs/by-name/bl/blobfuse/package.nix

···
 }:
 
 let
-  version = "2.4.2";
+  version = "2.5.0";
   src = fetchFromGitHub {
     owner = "Azure";
     repo = "azure-storage-fuse";
     rev = "blobfuse2-${version}";
-    sha256 = "sha256-bpMX7flbb/QYZUtq1I1s2lAvrBhW7esPwxN/JupryDo=";
+    sha256 = "sha256-BRLORwEY8PeD9hFkpm3Gup+eXzdFkW1Rkr73ncyKrso=";
   };
 in
 buildGoModule {
   pname = "blobfuse";
   inherit version src;
 
-  vendorHash = "sha256-uWesaZshuBVf4yJiX6YqNMr0GiBkrHhOqefnCrpPCHg=";
+  vendorHash = "sha256-L1ix9pRal5Ssfwf+kl9SFC9bbveuKeiuzrBwapvbFZY=";
 
   buildInputs = [ fuse3 ];
 

pkgs/by-name/bo/boa/package.nix

···
   src = fetchFromGitHub {
     owner = "boa-dev";
     repo = "boa";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-foCIzzFoEpcE6i0QrSbiob3YHIOeTpjwpAMtcPGL8Vg=";
     fetchSubmodules = true;
   };

pkgs/by-name/bo/bom/package.nix

···
   src = fetchFromGitHub {
     owner = "kubernetes-sigs";
     repo = "bom";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-nYzBaFtOJhqO0O6MJsxTw/mxsIOa+cnU27nOFRe2/uI=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/br/brewtarget/package.nix

···
   src = fetchFromGitHub {
     owner = "Brewtarget";
     repo = "brewtarget";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-VVdihVdNIAtPlugqGWDWvxMdOFGLnRmewPt6BgvbxBk=";
     fetchSubmodules = true;
   };

pkgs/by-name/br/brickstore/package.nix

···
   src = fetchFromGitHub {
     owner = "rgriebl";
     repo = "brickstore";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-4sxPplZ1t8sSfwTCeeBtfU4U0gcE9FROt6dKvkfyO6Q=";
     fetchSubmodules = true;
   };

pkgs/by-name/bs/bs2b-lv2/package.nix

···
   src = fetchFromGitHub {
     owner = "nilninull";
     repo = "bs2b-lv2";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-dOcDPtiKN9Kfs2cdaeDO/GkWrh5tfJSHfiHPBtxJXvc=";
   };

pkgs/by-name/bu/budgie-control-center/package.nix

···
   src = fetchFromGitHub {
     owner = "BuddiesOfBudgie";
     repo = "budgie-control-center";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-W5PF7BPdQdg/7xJ4J+fEnuDdpoG/lyhX56RDnX2DXoY=";
   };

pkgs/by-name/bu/budgie-desktop/package.nix

···
   src = fetchFromGitHub {
     owner = "BuddiesOfBudgie";
     repo = "budgie-desktop";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-lDsQlUAa79gnM8wC5pwyquvFyEiayH4W4gD/uyC5Koo=";
   };

pkgs/by-name/bu/buf/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "buf";
-  version = "1.55.1";
+  version = "1.56.0";
 
   src = fetchFromGitHub {
     owner = "bufbuild";
     repo = "buf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-41IY2P2s9kCV6aQh5vg7xVmu4Ovl9gakGmgcI/QSwfw=";
+    hash = "sha256-a2yU8KgMRNEz5fgFx/e0U6Hrtw53neeO5PWsTU8AV14=";
   };
 
-  vendorHash = "sha256-2kg7VXIFKXXY1uDUSV3+4vo6GYwnxyvJIZ/a8j99lhk=";
+  vendorHash = "sha256-lWcqXMkOpa+bh40zH8LQ86mIbTAqB2mk8naN1oY7Xuc=";
 
   patches = [
     # Skip a test that requires networking to be available to work.

pkgs/by-name/bu/bugdom/package.nix

···
   src = fetchFromGitHub {
     owner = "jorio";
     repo = "bugdom";
-    rev = version;
+    tag = version;
     hash = "sha256-0c7v5tSqYuqtLOFl4sqD7+naJNqX/wlKHVntkZQGJ8A=";
     fetchSubmodules = true;
   };

pkgs/by-name/bu/bulk_extractor/package.nix

···
   src = fetchFromGitHub {
     owner = "simsong";
     repo = "bulk_extractor";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-Jj/amXESFBu/ZaiIRlDKmtWTBVQ2TEvOM2jBYP3y1L8=";
     fetchSubmodules = true;
   };

pkgs/by-name/ca/capacities/package.nix

···
 }:
 let
   pname = "capacities";
-  version = "1.48.7";
+  version = "1.50.4";
   name = "${pname}-${version}";
 
   src = fetchurl {
     url = "https://web.archive.org/web/20250519011655/https://capacities-desktop-app.fra1.cdn.digitaloceanspaces.com/capacities-${version}.AppImage";
-    hash = "sha256-fa1Wk3w+f467n0JtRz+Zjw9QKDKKnhS23biEtNqO17Y=";
+    hash = "sha256-8sp6q86C36FbJ1azhX5QWbb2PmqJ/bbZQX31yzNByU4=";
   };
 
   appimageContents = appimageTools.extractType2 {

pkgs/by-name/ca/catppuccin-gtk/package.nix

···
     src = fetchFromGitHub {
       owner = "catppuccin";
       repo = "gtk";
-      rev = "v${version}";
+      tag = "v${version}";
       fetchSubmodules = true;
       hash = "sha256-q5/VcFsm3vNEw55zq/vcM11eo456SYE5TQA3g2VQjGc=";
     };

pkgs/by-name/ch/chow-centaur/package.nix

···
   src = fetchFromGitHub {
     owner = "jatinchowdhury18";
     repo = "KlonCentaur";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-kDDom6q0Tgni0/L+FgBVZC1/sL9W9fRP60U4o4ijP1c=";
     fetchSubmodules = true;
   };

pkgs/by-name/ch/chow-kick/package.nix

···
   src = fetchFromGitHub {
     owner = "Chowdhury-DSP";
     repo = "ChowKick";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-YYcNiJGGw21aVY03tyQLu3wHCJhxYiDNJZ+LWNbQdj4=";
     fetchSubmodules = true;
   };

pkgs/by-name/ch/chow-phaser/package.nix

···
   src = fetchFromGitHub {
     owner = "jatinchowdhury18";
     repo = "ChowPhaser";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-9wo7ZFMruG3QNvlpILSvrFh/Sx6J1qnlWc8+aQyS4tQ=";
   };

pkgs/by-name/ch/chow-tape-model/package.nix

···
   src = fetchFromGitHub {
     owner = "jatinchowdhury18";
     repo = "AnalogTapeModel";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-WriHi68Y6hAsrwE+74JtVlAKUR9lfTczj6UK9h2FOGM=";
     fetchSubmodules = true;
   };

pkgs/by-name/cl/closurecompiler/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "closure-compiler";
-  version = "20250528";
+  version = "20250706";
 
   src = fetchurl {
     url = "mirror://maven/com/google/javascript/closure-compiler/v${version}/closure-compiler-v${version}.jar";
-    sha256 = "sha256-P7NzTMgMdvG4LMKcmJx+x2LsPvmjtrr+RC6Oy/CVvD0=";
+    sha256 = "sha256-yf2w6a04S1Y60nL1hkxrhdLAiYO7yjdrUUqTPbyT2Ow=";
   };
 
   dontUnpack = true;

pkgs/by-name/cl/cloudcompare/package.nix

···
   src = fetchFromGitHub {
     owner = "CloudCompare";
     repo = "CloudCompare";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-a/0lf3Mt5ZpLFRM8jAoqZer8pY1ROgPRY4dPt34Bk3E=";
     fetchSubmodules = true;
   };

pkgs/by-name/cm/cmdstan/package.nix

···
   src = fetchFromGitHub {
     owner = "stan-dev";
     repo = "cmdstan";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-9Dan86C0nxxxkIXaOSKExY0hngAgWTpL4RlI3rTnBZo=";
   };

pkgs/by-name/co/codebook/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codebook";
-  version = "0.3.5";
+  version = "0.3.6";
 
   src = fetchFromGitHub {
     owner = "blopker";
     repo = "codebook";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lQfk4dJ9WFraxMDWJVSBiTGumikfHYlMBe+0NHa/3nY=";
+    hash = "sha256-zSxMvWRpH1AtvHo/odQZftxgAMdOd8p2ZiMUcsOWhes=";
   };
 
   buildAndTestSubdir = "crates/codebook-lsp";
-  cargoHash = "sha256-MLd7V5Pp8yx4pFAXSjZf4KUGp964ombrnGKbrtXhC0I=";
+  cargoHash = "sha256-FS8ZEjFFoNCJGkfL8C5hBgwj9o9XT239/9Qh/Xea2wk=";
 
   # Integration tests require internet access for dictionaries
   doCheck = false;

pkgs/by-name/co/codecrafters-cli/package.nix

···
   src = fetchFromGitHub {
     owner = "codecrafters-io";
     repo = "cli";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-YgQPDc5BUIoEd44NLpRluxCKooW99qvcSTrFPm6qJKM=";
     # A shortened git commit hash is part of the version output, and is
     # needed at build time. Use the `.git` directory to retrieve the

pkgs/by-name/co/colima/package.nix

···
   src = fetchFromGitHub {
     owner = "abiosoft";
     repo = "colima";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-RQnHqEabxyoAKr8BfmVhk8z+l5oy8pa5JPTWk/0FV5g=";
     # We need the git revision
     leaveDotGit = true;

pkgs/by-name/co/convimg/package.nix

···
   src = fetchFromGitHub {
     owner = "mateoconlechuga";
     repo = "convimg";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-5insJ391Usef8GF3Yh74PEqE534zitQg9udFRPcz69g=";
     fetchSubmodules = true;
   };

pkgs/by-name/cp/cp2k/package.nix

···
   src = fetchFromGitHub {
     owner = "cp2k";
     repo = "cp2k";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-04AFiEuv+EYubZVoYErQDdr9zipKlF7Gqy8DrUaYUMk=";
     fetchSubmodules = true;
   };

pkgs/by-name/cp/cpp-netlib/package.nix

···
   src = fetchFromGitHub {
     owner = "cpp-netlib";
     repo = "cpp-netlib";
-    rev = "cpp-netlib-${version}";
+    tag = "cpp-netlib-${version}";
     sha256 = "18782sz7aggsl66b4mmi1i0ijwa76iww337fi9sygnplz2hs03a3";
     fetchSubmodules = true;
   };

pkgs/by-name/cp/cpp-redis/package.nix

···
   src = fetchFromGitHub {
     owner = "cpp-redis";
     repo = "cpp_redis";
-    rev = version;
+    tag = version;
     hash = "sha256-dLAnxgldylWWKO3WIyx+F7ylOpRH+0nD7NZjWSOxuwQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/cp/cppcheck/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cppcheck";
-  version = "2.17.1";
+  version = "2.18.0";
 
   outputs = [
     "out"
···
     owner = "danmar";
     repo = "cppcheck";
     tag = finalAttrs.version;
-    hash = "sha256-jsLhVKNr/4RWw2SVNkycm/xbcy1BKIf983oTnaJKV6U=";
+    hash = "sha256-trbL2Me1VWmVMfL45H50xbR36izifFmoLHKQvte6oZQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/cr/crc32c/package.nix

···
   src = fetchFromGitHub {
     owner = "google";
     repo = "crc32c";
-    rev = version;
+    tag = version;
     sha256 = "0c383p7vkfq9rblww6mqxz8sygycyl27rr0j3bzb8l8ga71710ii";
     fetchSubmodules = true;
   };

pkgs/by-name/cr/criterion/package.nix

···
   src = fetchFromGitHub {
     owner = "Snaipe";
     repo = "Criterion";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-5GH7AYjrnBnqiSmp28BoaM1Xmy8sPs1atfqJkGy3Yf0=";
   };

pkgs/by-name/cr/crun/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "crun";
-  version = "1.22";
+  version = "1.23.1";
 
   src = fetchFromGitHub {
     owner = "containers";
     repo = "crun";
     rev = version;
-    hash = "sha256-6XhwGuV9btN7wuwJuQITHtVTKBcawTuMG8lY22RMdWk=";
+    hash = "sha256-jGRL/P4pR3nNikTYZxxqFvOK63pepClVhwBmeCF/dNU=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/de/design/package.nix

···
   src = fetchFromGitHub {
     owner = "dubstar-04";
     repo = "Design";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-Q4R/Ztu4w8IRvq15xNXN/iP/6hIHe/W+me1jROGpYc8=";
   };

pkgs/by-name/de/detect-it-easy/package.nix

···
   src = fetchFromGitHub {
     owner = "horsicq";
     repo = "DIE-engine";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-yHgxYig5myY2nExweUk2muKbJTKN3SiwOLgQcMIY/BQ=";
   };

pkgs/by-name/di/dix/package.nix

···
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dix";
-  version = "1.2.1";
+  version = "1.2.2";
 
   src = fetchFromGitHub {
     owner = "faukah";
     repo = "dix";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cSmxpzj5bNcMgfxJQiYwcwKjCrsTHxY+loRi+pzpFd4=";
+    hash = "sha256-Gq5Nr6xVGpAf1XnYrmoeyvqVgffAi8R6QETJU3xv22M=";
   };
 
-  cargoHash = "sha256-iYjDN3t1rZaZEm6TCUl/mZkVzxqYNHRTZkPipheG9EY=";
+  cargoHash = "sha256-IEsZNuLXKa+MInuortG4ifHTZ0Ngs0ugm02BK6shzHA=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;

pkgs/by-name/dr/dragmap/package.nix

···
   src = fetchFromGitHub {
     owner = "Illumina";
     repo = "DRAGMAP";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-f1jsOErriS1I/iUS4CzJ3+Dz8SMUve/ccb3KaE+L7U8=";
   };

pkgs/by-name/dr/dragonfly-reverb/package.nix

···
   src = fetchFromGitHub {
     owner = "michaelwillis";
     repo = "dragonfly-reverb";
-    rev = version;
+    tag = version;
     hash = "sha256-YXJ4U5J8Za+DlXvp6QduvCHIVC2eRJ3+I/KPihCaIoY=";
     fetchSubmodules = true;
   };

pkgs/by-name/dr/dragonflydb/package.nix

···
   src = fetchFromGitHub {
     owner = pname;
     repo = "dragonfly";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-P6WMW/n+VezWDXGagT4B+ZYyCp8oufDV6MTrpKpLZcs=";
     fetchSubmodules = true;
   };

pkgs/by-name/dr/drogon/package.nix

···
   src = fetchFromGitHub {
     owner = "drogonframework";
     repo = "drogon";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-eFOYmqfyb/yp83HRa0hWSMuROozR/nfnEp7k5yx8hj0=";
     fetchSubmodules = true;
   };

pkgs/by-name/dx/dxvk_2/package.nix

···
   src = fetchFromGitHub {
     owner = "doitsujin";
     repo = "dxvk";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-edu9JQAKu8yUZLh+37RB1s1A3+s8xeUYQ5Oibdes9ZI=";
     fetchSubmodules = true; # Needed for the DirectX headers and libdisplay-info
   };

pkgs/by-name/ec/ecs-agent/package.nix

···
 
 buildGoModule rec {
   pname = "amazon-ecs-agent";
-  version = "1.96.0";
+  version = "1.97.0";
 
   src = fetchFromGitHub {
     rev = "v${version}";
     owner = "aws";
     repo = "amazon-ecs-agent";
-    hash = "sha256-jKqGKSPjHQvRKAxqB81u/i7LeIV8IeiCF9O5dSmebQQ=";
+    hash = "sha256-QdEmV78bQDw3YaJCPCFlLpo1rLsRu4Hn8e/JrZVkGQc=";
   };
 
   vendorHash = null;

pkgs/by-name/ed/editorconfig-core-c/package.nix

···
   src = fetchFromGitHub {
     owner = "editorconfig";
     repo = "editorconfig-core-c";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-myJNJxKwgmgm+P2MqnYmW8OC0oYcInL+Suyf/xwX9xo=";
     fetchSubmodules = true;
   };

pkgs/by-name/ei/eiwd/package.nix

···
   src = fetchFromGitHub {
     owner = "illiliti";
     repo = "eiwd";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-rmkXR4RZbtD6lh8cGrHLWVGTw4fQqP9+Z9qaftG1ld0=";
     fetchSubmodules = true;
   };

pkgs/by-name/en/encpipe/package.nix

···
   src = fetchFromGitHub {
     owner = "jedisct1";
     repo = "encpipe";
-    rev = version;
+    tag = version;
     hash = "sha256-YlEKSWzZuQyDi0mbwJh9Dfn4gKiOeqihSHPt4yY6YdY=";
     fetchSubmodules = true;
   };

pkgs/by-name/eo/eos-installer/package.nix

···
   src = fetchFromGitHub {
     owner = "endlessm";
     repo = "eos-installer";
-    rev = "Release_${version}";
+    tag = "Release_${version}";
     sha256 = "BqvZglzFJabGXkI8hnLiw1r+CvM7kSKQPj8IKYBB6S4=";
     fetchSubmodules = true;
   };

pkgs/by-name/er/erigon/package.nix

···
   src = fetchFromGitHub {
     owner = "ledgerwatch";
     repo = "erigon";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-MQpHRlKxWCBD2Tj9isxMKwvYBy9HtDkQPyKPse8uB3g=";
     fetchSubmodules = true;
   };

pkgs/by-name/et/eternity/package.nix

···
   src = fetchFromGitHub {
     owner = "team-eternity";
     repo = "eternity";
-    rev = version;
+    tag = version;
     sha256 = "0dlz7axbiw003bgwk2hl43w8r2bwnxhi042i1xwdiwaja0cpnf5y";
     fetchSubmodules = true;
   };

pkgs/by-name/ez/ezquake/package.nix

···
   src = fetchFromGitHub {
     owner = "QW-Group";
     repo = pname + "-source";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-ThrsJfj+eP7Lv2ZSNLO6/b98VHrL6/rhwf2p0qMvTF8=";
   };

pkgs/by-name/fa/fastddsgen/package.nix

···
   src = fetchFromGitHub {
     owner = "eProsima";
     repo = "Fast-DDS-Gen";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-4w6DYz0QhD8L27FE+SzptfoMjhiuJ6OFex2LNAqwmPw=";
   };

pkgs/by-name/fa/faust2/package.nix

···
   src = fetchFromGitHub {
     owner = "grame-cncm";
     repo = "faust";
-    rev = version;
+    tag = version;
     hash = "sha256-Rn+Cjpk4vttxARrkDSnpKdBdSRtgElsit8zu1BA8Jd4=";
     fetchSubmodules = true;
   };

pkgs/by-name/fa/faustlive/package.nix

···
   src = fetchFromGitHub {
     owner = "grame-cncm";
     repo = "faustlive";
-    rev = version;
+    tag = version;
     hash = "sha256-RqtdDkP63l/30sL5PDocvpar5TI4LdKfeeliSNeOHog=";
     fetchSubmodules = true;
   };

pkgs/by-name/fe/feather/package.nix

···
   src = fetchFromGitHub {
     owner = "feather-wallet";
     repo = "feather";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-DZBRZBcoba32Z/bFThn/9siC8VESg5gdfoFO4Nw8JqM=";
     fetchSubmodules = true;
   };

pkgs/by-name/fi/firestarter/package.nix

···
   src = fetchFromGitHub {
     owner = "tud-zih-energy";
     repo = "FIRESTARTER";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "1ik6j1lw5nldj4i3lllrywqg54m9i2vxkxsb2zr4q0d2rfywhn23";
     fetchSubmodules = true;
   };

pkgs/by-name/fl/flutter_rust_bridge_codegen/package.nix

···
   src = fetchFromGitHub {
     owner = "fzyzcjy";
     repo = "flutter_rust_bridge";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-Us+LwT6tjBcTl2xclVsiLauSlIO8w+PiokpiDB+h1fI=";
     fetchSubmodules = true;
   };

pkgs/by-name/fl/flycast/package.nix

···
   src = fetchFromGitHub {
     owner = "flyinghead";
     repo = "flycast";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-OnlSkwPDUrpj9uEPEAxZO1iSgd5ZiQUJLneu14v9pKQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/fn/fna3d/package.nix

···
   src = fetchFromGitHub {
     owner = "FNA-XNA";
     repo = "FNA3D";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-0rRwIbOciPepo+ApvJiK5IyhMdq/4jsMlCSv0UeDETs=";
   };

pkgs/by-name/fo/foxotron/package.nix

···
   src = fetchFromGitHub {
     owner = "Gargaj";
     repo = "Foxotron";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-OnZWoiQ5ASKQV73/W6nl17B2ANwqCy/PlybHbNwrOyQ=";
   };

pkgs/by-name/fr/freebayes/package.nix

···
     name = "freebayes-${version}-src";
     owner = "ekg";
     repo = "freebayes";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "035nriknjqq8gvil81vvsmvqwi35v80q8h1cw24vd1gdyn1x7bys";
     fetchSubmodules = true;
   };

pkgs/by-name/fr/freecad/package.nix

···
     src = fetchFromGitHub {
       owner = "FreeCAD";
       repo = "FreeCAD";
-      rev = finalAttrs.version;
+      tag = finalAttrs.version;
       hash = "sha256-VFTNawXxu2ofjj2Frg4OfVhiMKFywBhm7lZunP85ZEQ=";
       fetchSubmodules = true;
     };

pkgs/by-name/fu/fulcio/package.nix

···
   src = fetchFromGitHub {
     owner = "sigstore";
     repo = "fulcio";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-UVUVT4RvNHvzIwV6azu2h1O9lnNu0PQnnkj4wbrY8BA=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/ge/gebaar-libinput/package.nix

···
   src = fetchFromGitHub {
     owner = "Coffee2CodeNL";
     repo = "gebaar-libinput";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "1kqcgwkia1p195xr082838dvj1gqif9d63i8a52jb0lc32zzizh6";
     fetchSubmodules = true;
   };

pkgs/by-name/ge/gerbolyze/package.nix

···
   src = fetchFromGitHub {
     owner = "jaseg";
     repo = "gerbolyze";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-bisLln3Y239HuJt0MkrCU+6vLLbEDxfTjEJMkcbE/wE=";
     fetchSubmodules = true;
   };

pkgs/by-name/gf/gfxreconstruct/package.nix

···
   src = fetchFromGitHub {
     owner = "LunarG";
     repo = "gfxreconstruct";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-MuCdJoBFxKwDCOCltlU3oBS9elFS6F251dHjHcIb4Jg=";
     fetchSubmodules = true;
   };

pkgs/by-name/gi/gildas/package.nix

···
 in
 
 stdenv.mkDerivation rec {
-  srcVersion = "jul25a";
-  version = "20250701_a";
+  srcVersion = "jul25b";
+  version = "20250701_b";
   pname = "gildas";
 
   src = fetchurl {
···
       "http://www.iram.fr/~gildas/dist/gildas-src-${srcVersion}.tar.xz"
       "http://www.iram.fr/~gildas/dist/archive/gildas/gildas-src-${srcVersion}.tar.xz"
     ];
-    hash = "sha256-t64lcbdrPXu4II5IGyd9Un6yJGrH+wqKRt5jmr/F5y4=";
+    hash = "sha256-TU9UdvyzlIWGJWAAJIIGBO5NgXuKDYTdjHhFHRwTagU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gi/gimx/package.nix

···
   src = fetchFromGitHub {
     owner = "matlo";
     repo = "GIMX";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-BcFLdQgEAi6Sxyb5/P9YAIkmeXNZXrKcOa/6g817xQg=";
   };

pkgs/by-name/gi/git-get/package.nix

···
   src = fetchFromGitHub {
     owner = "grdl";
     repo = "git-get";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-v98Ff7io7j1LLzciHNWJBU3LcdSr+lhwYrvON7QjyCI=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/gi/gitqlient/package.nix

···
   src = fetchFromGitHub {
     owner = "francescmm";
     repo = "gitqlient";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-gfWky5KTSj+5FC++QIVTJbrDOYi/dirTzs6LvTnO74A=";
   };

pkgs/by-name/gl/glslls/package.nix

···
   src = fetchFromGitHub {
     owner = "svenstaro";
     repo = "glsl-language-server";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-wi1QiqaWRh1DmIhwmu94lL/4uuMv6DnB+whM61Jg1Zs=";
   };

pkgs/by-name/gl/glslviewer/package.nix

···
     owner = "patriciogonzalezvivo";
     repo = "glslViewer";
     fetchSubmodules = true;
-    rev = version;
+    tag = version;
     hash = "sha256-Ve3wmX5+kABCu8IRe4ySrwsBJm47g1zvMqDbqrpQl88=";
   };
   nativeBuildInputs = [

pkgs/by-name/gn/gnustep-libobjc/package.nix

···
   src = fetchFromGitHub {
     owner = "gnustep";
     repo = "libobjc2";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-+NP214bbisk7dCFAHaxnhNOfC/0bZLp8Dd2A9F2vK+s=";
     fetchSubmodules = true;
   };

pkgs/by-name/go/gossa/package.nix

···
   src = fetchFromGitHub {
     owner = "pldubouilh";
     repo = "gossa";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-FGlUj0BJ8KeCfvdN9+NG4rqtaUIxgpqQ+09Ie1/TpAQ=";
   };

pkgs/by-name/gr/grandorgue/package.nix

···
   src = fetchFromGitHub {
     owner = "GrandOrgue";
     repo = "grandorgue";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-9H7YpTtv9Y36Nc0WCyRy/ohpOQ3WVUd9gMahnGhANRc=";
   };

pkgs/by-name/gr/grenedalf/package.nix

···
   src = fetchFromGitHub {
     owner = "lczech";
     repo = "grenedalf";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-DJ7nZjOvYFQlN/L+S2QcMVvH/M9Dhla4VXl2nxc22m4=";
     fetchSubmodules = true;
   };

pkgs/by-name/gr/grpc-tools/package.nix

···
   src = fetchFromGitHub {
     owner = "grpc";
     repo = "grpc-node";
-    rev = "grpc-tools@${version}";
+    tag = "grpc-tools@${version}";
     hash = "sha256-708lBIGW5+vvSTrZHl/kc+ck7JKNXElrghIGDrMSyx8=";
     fetchSubmodules = true;
   };

pkgs/by-name/gr/grpc/package.nix

···
   src = fetchFromGitHub {
     owner = "grpc";
     repo = "grpc";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-97+llHIubNYwULSD0KxEcGN+T8bQWufaEH6QT9oTgwg=";
     fetchSubmodules = true;
   };

pkgs/by-name/gw/gwyddion/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "gwyddion";
-  version = "2.68";
+  version = "2.69";
   src = fetchurl {
     url = "mirror://sourceforge/gwyddion/gwyddion-${version}.tar.xz";
-    sha256 = "sha256-clw/cXODYrELHiz3bTkWhM8vFacaKzTvHK3avW1am/o=";
+    sha256 = "sha256-WX62tR7ldaB/NQzAVzvHTQBaNJDZgyrRNqNp5w0w76Y=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gx/gxplugins-lv2/package.nix

···
   src = fetchFromGitHub {
     owner = "brummer10";
     repo = "GxPlugins.lv2";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-NvmFoOAQtAnKrZgzG1Shy1HuJEWgjJloQEx6jw59hag=";
     fetchSubmodules = true;
   };

pkgs/by-name/ha/hamrs-pro/package.nix

···
 
 let
   pname = "hamrs-pro";
-  version = "2.41.1";
+  version = "2.42.1";
 
   throwSystem = throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}";
 
   srcs = {
     x86_64-linux = fetchurl {
       url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-linux-x86_64.AppImage";
-      hash = "sha256-HJXuxqIZU1dHf+ABb4rXnQkbQ1x7khpYiYq+0/HKZTs=";
+      hash = "sha256-LPXrzS/OF+O4zYlk+Ubf46mZbjTaE8OEA9n7NkC/jxE=";
     };
 
     aarch64-linux = fetchurl {
       url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-linux-arm64.AppImage";
-      hash = "sha256-pgMXAlOKxxzxJHMfM1fSfwmdKq2K1o7UVBQdeAwEIKE=";
+      hash = "sha256-WTmUscuz4mCnW19zoqxBkqBrb1VJBn/FBf2sDQQ3hF8=";
     };
 
     x86_64-darwin = fetchurl {
       url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-mac-x64.dmg";
-      hash = "sha256-kIvw18jvZCBJqdIL9fikSpKmZw+NDqFhCNvEO9gkvMA=";
+      hash = "sha256-n1wDHbo8URIZEIzJx6O7zGnH/RtMj75ltXImM3Q1QvI=";
     };
 
     aarch64-darwin = fetchurl {
       url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-mac-arm64.dmg";
-      hash = "sha256-+zMXF8p/KcJrMbeFF2uHLBpqEmUtzN9rNVBD8+h1PG0=";
+      hash = "sha256-x/hxKLCVme5l7lo7REy8EjEBstrWA9uyC2sA811eOPk=";
     };
   };
 

pkgs/by-name/he/helio-workstation/package.nix

···
   src = fetchFromGitHub {
     owner = "helio-fm";
     repo = "helio-workstation";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-JzJA9Y710upgzvsgPEV9QzpRUTYI0i2yi6thnUAcrL0=";
   };

pkgs/by-name/ic/ictree/package.nix

···
   src = fetchFromGitHub {
     owner = "NikitaIvanovV";
     repo = "ictree";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-77Wo6jN8VUGTXBuGL0a9kvSIixdyEQoxqqNsHq9jcWw=";
     fetchSubmodules = true;
   };

pkgs/by-name/il/illum/package.nix

···
   src = fetchFromGitHub {
     owner = "jmesmon";
     repo = "illum";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "S4lUBeRnZlRUpIxFdN/bh979xvdS7roF6/6Dk0ZUrnM=";
     fetchSubmodules = true;
   };

pkgs/by-name/im/imagelol/package.nix

···
   src = fetchFromGitHub {
     owner = "MCRedstoner2004";
     repo = "imagelol";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "0978zdrfj41jsqm78afyyd1l64iki9nwjvhd8ynii1b553nn4dmd";
     fetchSubmodules = true;
   };

pkgs/by-name/in/inferno/package.nix

···
   src = fetchFromGitHub {
     owner = "jonhoo";
     repo = "inferno";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-D72rkTnUgLJRHFEDoUwQDLQJAPGyqmxhf6hmNJGUl+U=";
     fetchSubmodules = true;
   };

pkgs/by-name/io/iosevka-bin/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "${name}-bin";
-  version = "33.2.6";
+  version = "33.2.7";
 
   src = fetchurl {
     url = "https://github.com/be5invis/Iosevka/releases/download/v${version}/PkgTTC-${name}-${version}.zip";

pkgs/by-name/io/iosevka-bin/variants.nix

···
 # This file was autogenerated. DO NOT EDIT!
 {
-  Iosevka = "1cvcxr6s3g14dq13hfy81xx7mjs8smqh56ci7l9r9mmlvxi89bkh";
-  IosevkaAile = "06prb7bq78rxnxpydsgqpzlija93dp8bymj2k0pghxg05cwk47q8";
-  IosevkaCurly = "0zjh14n49wgg2fajmk63ra8yh8iq4km58g9ivyhaz7i2lz4iiaiw";
-  IosevkaCurlySlab = "16i2643p2fzjhlvwjhhnnsdcwa2baqx7ww02bjlxri2bwvbfqfjq";
-  IosevkaEtoile = "0a3bp1k6010cqp3vh1k9zxbg99mnxnvv1h7sjr90kym24mhj6n2f";
-  IosevkaSlab = "1skwbr41y4rpvfn6x9s0sqjz3gki9j46d0wcnmv067zag2mjvbd4";
-  IosevkaSS01 = "0v53a2ifpccgppia83y9v7766ch363913ic7lsfzkrlp1hxk8l2w";
-  IosevkaSS02 = "12jhv59flx0wl4vwf42f4rqfwb7k1l1sn6k9kazj7lbkh7sjjdd3";
-  IosevkaSS03 = "118dd5ij4q0f1wkjywh3dy96xrzy4a4ymn1naznvkfv660f9kdxc";
-  IosevkaSS04 = "1dqrbkkdp936sarfgzj9z1rnpy571gf3ms4kaarh12fz4yns0c11";
-  IosevkaSS05 = "05fw66j0s8pm5iqcz38lvnhpkxb8721gh45yh6bhkf34nl4kyw5y";
-  IosevkaSS06 = "1mbqlql2n936rayjmda47d6g1mdlmswxcgxcq3whs8b5p7jaj0ka";
-  IosevkaSS07 = "0b3z830accqm633wiqcdqqjinmh3wd69q7n7sa8xg7nkg865cxa1";
-  IosevkaSS08 = "1ac6q00ah67y2rn3fdby2wdpz4qnmcp3r5rzmbcj5wry6cvfnjgj";
-  IosevkaSS09 = "0zs8g3mijlwcppli0613x8q5q9axp2mn2dvj51civ28hjgzg5gp0";
-  IosevkaSS10 = "1lalr25znbxkmaw1a9rg8qagby0z8cml58l5pkvbjm2bz0ly2ry1";
-  IosevkaSS11 = "10vxwc7qsi4m2bhzb0rxwqvvx8bb2sibzjsby1b9wfkdbn9kcrrj";
-  IosevkaSS12 = "0qgign3c7g72wh0vlghy593fl067cgryd8z8vzbndg42npn302c2";
-  IosevkaSS13 = "0kicp6xdk321pg2msfi50ngxzclr2w8dss9gzyd1ls8gsx596p45";
-  IosevkaSS14 = "1g69wr3822avxqhsdrmfannwbvgigkdghi192j8a4bg0rr73sba2";
-  IosevkaSS15 = "0yliiksrwmcisyba1mzh2yhrmyxgzid2inccfhvybaimhyqx6mm8";
-  IosevkaSS16 = "1kcwma2l6p69mkb4pw56hi8797bg5wncxk59g191fl94y08mlc9v";
-  IosevkaSS17 = "1qy7576kr37nwgdr7r5j3ry12crn4z78x4kf8s5vzqmrxrjrdhnx";
-  IosevkaSS18 = "1xqh5s607imyzn8c7pzah7l6w409ki6xq214cinc298p8k3qxi9y";
-  SGr-Iosevka = "0dpdaq8c45dz8zcn27mxpdwwwgczw0glx0mg0qa29msp24dqc54r";
-  SGr-IosevkaCurly = "1j1h8yv6gi4fp8ci1ycpnbl2ayzzfzykb8q8cm8h4dxk38xwa3ab";
-  SGr-IosevkaCurlySlab = "07y5r7w42hnfx9sz33yapgc2x3vdjnzsispzl565va5wgyl8hcw9";
-  SGr-IosevkaFixed = "15792ir7x3mzrpfbhaisfihciw2k5j9l75qfvzxzr2p8j6k6b2mk";
-  SGr-IosevkaFixedCurly = "0i9g38b8qsz20h0sw2fk57rcrxspwf18x52z9zyvkh1nbhhxhx6f";
-  SGr-IosevkaFixedCurlySlab = "0lnx5wamvpahhxijxzqa2yzyxcrw9fi5c3l2lckz2phc94ivxxcm";
-  SGr-IosevkaFixedSlab = "1ck3xsc7w6a8jvdbggc5r9kjv6ycf8rmscjdpx334icgx9f3yfvd";
-  SGr-IosevkaFixedSS01 = "125siykvnh2qjycral9807687hqlv1kl7mcl10cgdq8my51sskxp";
-  SGr-IosevkaFixedSS02 = "1li6z7s370ga767asp2q2dw5nf43w7s7hwxcnlvvm5ylg4cw2sg2";
-  SGr-IosevkaFixedSS03 = "1dz5z4bp127x5plim4f6x6bcjwr3868s721syp1m9d8x1a31a5m1";
-  SGr-IosevkaFixedSS04 = "0p765cbh6rv47qqpncnijc29mm6wwjr6sw7srr1z7krvsqlybdw8";
-  SGr-IosevkaFixedSS05 = "0r5kqsj2fymw1p1x35p3jdwzqv48gy26025hz1n55rmpg2nln3m2";
-  SGr-IosevkaFixedSS06 = "041v6af6dw1bxkj1byxlin0dm6y93zlby9avsiyz3dd8mi19687j";
-  SGr-IosevkaFixedSS07 = "1wq9wpn3ggclalrqmn7l87hpi6mw3rqgxlyv3sqz4kr0qp5ysfya";
-  SGr-IosevkaFixedSS08 = "0xg00rwmhaacqsl2vhp0azjz4cgiryskxmfkcvz03k58fqaw1bq4";
-  SGr-IosevkaFixedSS09 = "0kzqgl25dd3lyf9hvkg7dh37dksy9gla0cd0wb5q4mvilblpaswr";
-  SGr-IosevkaFixedSS10 = "1492048iv4n3g3jk11njrxnqc9hl2gv89w1bqaqcmwnn4vw3l2jw";
-  SGr-IosevkaFixedSS11 = "1cnm293rxx7dxfgjbxd0n68njlkv6r3dz7dn3p8dsjfh6mq4gapm";
-  SGr-IosevkaFixedSS12 = "0d760gqpxh04rq52qpvvdbsicx8d9jrp3i3ak17m1m4v3cisi5xp";
-  SGr-IosevkaFixedSS13 = "1vnb3hrp8z2h0hz14fnlxxv3dpz74s4a33mhy0sm8ax5myich8sk";
-  SGr-IosevkaFixedSS14 = "0hz6cqb84abvllnkvnni0g2cjrwnzhy9iz45q5xs0f2s69kxkzil";
-  SGr-IosevkaFixedSS15 = "147a7x7np8v8p7qm9hr1mqghskxfbfag3454zvmna0ymi9w3d7w7";
-  SGr-IosevkaFixedSS16 = "0q9p01hazmaqdbvfv1y821dff4n41k2bkmylp8hzvd2qpyn1m7pv";
-  SGr-IosevkaFixedSS17 = "12kpc47kj1yx5b5bcpakagjif16hzq1a2psqna89ainxcw5qil2j";
-  SGr-IosevkaFixedSS18 = "0h3l8ci22hk3rbrhcilkr7mxdbs0j80ak38ncg0vj72qllpni0ib";
-  SGr-IosevkaSlab = "1mfr1ny5ksivg9cmlw5y9v0aqdxjdgcalr8l2vfad063i5igwm22";
-  SGr-IosevkaSS01 = "07w50mjqry9gxfajsnvhxlhyl7hzqaspiz55ccpfl8bajqmavpb4";
-  SGr-IosevkaSS02 = "0imd2rv1rmz0xxf5wl44d85d46kfp286kdxlc5z0rzm2ghylw029";
-  SGr-IosevkaSS03 = "17lz4ay6l4zaa31lz84s6pvfq5fbwag4r4c3iwh973xrhcsp0i97";
-  SGr-IosevkaSS04 = "1mpb4cyd44dxjqxyzina19ly5x0w37h9c2jhrj0c7zcwvn5ippzw";
-  SGr-IosevkaSS05 = "054qxgv3j5cp3agnv33aipc0fbya7k7091zg5jkliz7ybfjmp7cs";
-  SGr-IosevkaSS06 = "1kdakk5vv2vk23jij5q704qdppii982q6h5qy27kgc58kx7yhyi4";
-  SGr-IosevkaSS07 = "09i3lvc6p15mmh9m2c4wbiww0cb22rzlwysx2xqc5445vjmb8z7l";
-  SGr-IosevkaSS08 = "1kxkjbnxaa7nkq5qbfzzjaqmx0vj69i5x6dkk3f11kvfxjm294cg";
-  SGr-IosevkaSS09 = "0z80bqkv9xdmakzvkjpq0dr886mc7qhgqkqzi2zcxkknij09pm93";
-  SGr-IosevkaSS10 = "1q6d3apwaalsg07pvs1g93vmlmbrylbvyaadf14a5aqgj8q0whq5";
-  SGr-IosevkaSS11 = "0pah1l6hak2sd7alhd3bj811pm6rz2n3rnkbs71d389a717l6263";
-  SGr-IosevkaSS12 = "1v8iqc836rlp9h11762zrjlhazkyixjk4y9gz9bwnfg2qb7bblgh";
-  SGr-IosevkaSS13 = "0vma8101573kb5v264g5n9fmznnia53wm7kq46j1v9wjhyik5dmc";
-  SGr-IosevkaSS14 = "0f3z45d5wz8g1iyjj3sz73spawm2lbis94v7ziq038qvwa6b69qn";
-  SGr-IosevkaSS15 = "0f8c8ckbhdaxna30brqixnybsal9vlj85qrjv9mfnj87ayrb7k4p";
-  SGr-IosevkaSS16 = "1wxy8kkv3hvbqvkxng8rvb42dlna40dv9zdpmdax8zl122bsc684";
-  SGr-IosevkaSS17 = "0riax8l3ywjpnlnyaxvhd5cc8r8288881jqnay3397mcah11r9fj";
-  SGr-IosevkaSS18 = "10rx46k9jn0aldqbi5zyqizihvq5wsqyp3qglgmyan9fivwg7a8j";
-  SGr-IosevkaTerm = "0jv8z75sigkz82qxjvzm3q8hnfmznfh84w9041lhyjsq93vf4gzs";
-  SGr-IosevkaTermCurly = "195hl0vaycbpxg4ssx2qg1fjwlrnd8ryafyg53vq67gsp7slm405";
-  SGr-IosevkaTermCurlySlab = "112xgh42v2sbbwi1iar103cpgb6qbl3lmgy89dsrad7813v9mdis";
-  SGr-IosevkaTermSlab = "0hxx2drjmyq96cffk7kykinksl328rmjqaif3ppkf0c7hadn8s6l";
-  SGr-IosevkaTermSS01 = "0133sric8inqn3ym0ynq3ngllm1j8nrh3whggl00d2l8zn9sm1v2";
-  SGr-IosevkaTermSS02 = "1a8hxxj616qigxllfqsam10wgl726h8mbp9ri4s4lqg5fa24jvhg";
-  SGr-IosevkaTermSS03 = "0lq9si8d87magnx1v8igfb6y53njs1a07mr6dwp2c69cy9g8v6fl";
-  SGr-IosevkaTermSS04 = "0fdchd663z2xym0cxv1kv7czzv1ad6m48952hrc3rq8wvaqvkn4b";
-  SGr-IosevkaTermSS05 = "0v94dkp2bp1m8xf5nlk7ncwvb6v6f9p6zzczpb4m6gyy6n1yprsn";
-  SGr-IosevkaTermSS06 = "19apwxhvmnbcqphkwd2czp6szbjnw87q9mn3gpzwd731nrh0cfdz";
-  SGr-IosevkaTermSS07 = "0zyf1ylxqah1m6d8mh8k74czj30ycznvqs74ivj7d6wh1bpzzl5y";
-  SGr-IosevkaTermSS08 = "10s1qgb6aqil07lnm7zgagldl3k5bj8xb976kabf4da9yi3qff1x";
-  SGr-IosevkaTermSS09 = "0gzcvs6ppklhs4ymyabxmrk7b9pmbnn9v3w24q6hjmjxg8l4qsja";
-  SGr-IosevkaTermSS10 = "0gaf4q6jn3yfq28yvrflx2k7jgk4iw6d5p53a5zmywj7kr2a8vvg";
-  SGr-IosevkaTermSS11 = "183caa2py7ssadbmdwkyrm5briqzsj1r45aia92wp6ll449h29ka";
-  SGr-IosevkaTermSS12 = "03nhshkycnqzjvd3jvdzxnfrgw3l7jpmgs552dc0gwps5n2628w5";
-  SGr-IosevkaTermSS13 = "1di6fpds2i0jyf08jidlbddz6l2vba99f74cdgn8v39g4kyq8ng2";
-  SGr-IosevkaTermSS14 = "04ya798vwh6svbnapbxr2nd2z3g5x6hjqvyccbcizcdik498m1aw";
-  SGr-IosevkaTermSS15 = "1gi61fpzl27kp60ph9w1sn0kghgkmby80qnwjzs7ny6k8xnlwq23";
-  SGr-IosevkaTermSS16 = "1kq20xqfg76pv86bh5djd558injd0vqcg5m7pm3bzy4scriw3vw3";
-  SGr-IosevkaTermSS17 = "1m85s4c1l6qvng0bi3201klvaw2iz2lkshnx490xjfypx70231hm";
-  SGr-IosevkaTermSS18 = "1yinpsq5dbjqxyxaflfdvzmdg1v0ghqnigcf7j2cc9bqld397xh8";
+  Iosevka = "0z7w7j7wwc36qzmwralkbyps60p8x5wb514bdnjk8s9023z2w0nz";
+  IosevkaAile = "0pbappmm45vma5d45l2a98zb6213hfb0k30hvwv5298ds3k95f89";
+  IosevkaCurly = "1zw9gas6yw6dxk5ahdbbc9374rzzanr9k38ka4jhydn8zmcnsq85";
+  IosevkaCurlySlab = "1yvlyg5c5lydc5ycn9i8pnch1jwm749sng17b3xc0x18ndrqsa2x";
+  IosevkaEtoile = "12q8bvl8ckkj8v6ngw68bn62mcdfl5w71l7hc3m9b3fr4gfvz2gm";
+  IosevkaSlab = "0fpj2phmmsfqzii39a3zvyjzrbhjnn914cdcgp6g1b6xk5qd1p5n";
+  IosevkaSS01 = "03fzxs4wba1qc5mhy9cr664gfh9zz9wg0qsw3gxnn1rd9xd2y5ri";
+  IosevkaSS02 = "08pi97qzjs4v7xgck8g68llm880bp23kfgp8sqxdv4n2d5cr4yib";
+  IosevkaSS03 = "1d75hzcjz55jb9xwgky1ns78lg776aw0a0a8gyfm8kxhmb8n1kpp";
+  IosevkaSS04 = "0snq7wd02j0xmcf6smqxv33f4z9wdr14dz7hla892hnbm0pymlws";
+  IosevkaSS05 = "0xp502q3zv506fbgjid51n7j5hcq3hjvq8rz417shd9f68mx0z9z";
+  IosevkaSS06 = "0w2rjmv1k13jhndv165xaamcscxbsgh38icnzj72hs3kw8mgijj7";
+  IosevkaSS07 = "17661r5bnwd3hphy52d1mjp9sxs4jfxc741x672jxwdwnj8w6ffh";
+  IosevkaSS08 = "15q1kskng4nsp60kv09zwvp24m9lql9wa3ahb94s57k1rqmf4jn6";
+  IosevkaSS09 = "1l6p0arvndkz36h3x1npb1yj910nvbj3v0a3j5lz6dbhv0imsx0q";
+  IosevkaSS10 = "1agwjpw1hh8wagacld61ld9gyh5vmirrabjvv5s7gzrfr8acgp18";
+  IosevkaSS11 = "1hz7ln5w083z17napnm8v1gw6nzh8dkzbiqw8zrv5bmbj3jzc21n";
+  IosevkaSS12 = "10kz86ypf9c41n8yk7yx2rrxmwr3c0gwznw9lrida15lppwfq6as";
+  IosevkaSS13 = "0wbprdjyilp18j8gxa1fa0iggy84mzy826ms3bq20i4q6xcsqli5";
+  IosevkaSS14 = "07a6xcxl4mksxfpfvwx5pr3vw6mpnz9bfpfbsy53jgn3yc6cfwl1";
+  IosevkaSS15 = "1ij9z4ngh7s7ld4bh0f6mz4zxlsfa2l1dpq3b429na9vachv1khj";
+  IosevkaSS16 = "1skg7aqnzd7nyc43glbgg4b10xzmmc0gn20v6qmkrdv1cyhxwm87";
+  IosevkaSS17 = "0xcdv8zygvmh218qk9lgjcgdflcr54s7p86x5br2aja658azdlzp";
+  IosevkaSS18 = "1nf6wajmjx2aqqmv6zbfa29jsvg4lw8jf1jk32xrd5953yx30y6z";
+  SGr-Iosevka = "1czz0cz9py8ldrp0h1la5dd1b558ss32f2vbmcv5j5c76fify71f";
+  SGr-IosevkaCurly = "0zfqx11alkbd2bj77rnzgb4jy91fa6ns596m82gfkmks7ggq3b4j";
+  SGr-IosevkaCurlySlab = "0l0vfbq5vya9igx6xd9hsnm96bp8j87qnhj553rhd56jy73ms5la";
+  SGr-IosevkaFixed = "100g3j0v8qfmkkhl0zwyy736i5a0ci33hfmh1dwnzkx993qwrv01";
+  SGr-IosevkaFixedCurly = "0nriagy3m1r8fn2r51k4xi69b7xj09dhg4bvl0gj2syrrqldnkyj";
+  SGr-IosevkaFixedCurlySlab = "1bpihhg5gxlbg152vdwbb6kq5k8dcrirzwhay4w5bq9fzfg62p6z";
+  SGr-IosevkaFixedSlab = "0v5mfni7y3h519xa2r70bqx5ragk6l68kghsr1k0wbnv03m3ha7w";
+  SGr-IosevkaFixedSS01 = "158l9b0cdaa7al88wg6bba9xxp6sn914gj58g201w5xsbd0srpql";
+  SGr-IosevkaFixedSS02 = "1082wffk762mdc855iz7zrqhb9dpmd3yj324jzzsvhwhhj66hmnl";
+  SGr-IosevkaFixedSS03 = "1kr194dpq365ickgrmhrrjpsy0mv5ixm5z7xbciw6pppmk8aaami";
+  SGr-IosevkaFixedSS04 = "0z31masbyxvmfagdpcs1iz3ibslvg54ix9w6ld0rzkdjvln8g6pr";
+  SGr-IosevkaFixedSS05 = "0rnda4lnjv0ya1911mbrsymada6qq7nzrnzikzm2140ck3lq8lcl";
+  SGr-IosevkaFixedSS06 = "11p8ks82drhvmm9qnlqqz1r77chg0ffdrx4m0s32k46s928kjkxs";
+  SGr-IosevkaFixedSS07 = "07xfkr1qdvvr5w26q6qgfqbij2d3iaxxwh0ibj0x9v9zwf6nn7w3";
+  SGr-IosevkaFixedSS08 = "0p0phcjakd0x9qph8wr43l4qg8v3kv05k1dzmvbx7v6dbj69b230";
+  SGr-IosevkaFixedSS09 = "1hghv10j5gdizr0yjxs0qdmqvqdi397bzwscdj0asislf2scji52";
+  SGr-IosevkaFixedSS10 = "0yjwyhdkxg2icxsql814a33zf0k4pzsxwnk5wydd535qld2jl188";
+  SGr-IosevkaFixedSS11 = "0jrnmr5aspc155ajn9cxbapvbl240njx2zha7x0r1q471r7kf42y";
+  SGr-IosevkaFixedSS12 = "1p463hmkvmkcr4602blzwafs0gzi83b781barwi862dah5mp3yq6";
+  SGr-IosevkaFixedSS13 = "1jr0rfr276870gdl3ljysw4zp2habyqa80wcbzsdsp2m2nqdwn53";
+  SGr-IosevkaFixedSS14 = "1zryh9bmiipn4zvkga39ksqfrrnsr04invmidhrd955g39yz1c4a";
+  SGr-IosevkaFixedSS15 = "1ly33fh8m3hwkmzm7fr870wys3xp49cknd9dmdm1v4calylfd88w";
+  SGr-IosevkaFixedSS16 = "0gq66d1x5hdfn2iwcl75rq0586l7k6in9vsfhxabfgw9gp6y852c";
+  SGr-IosevkaFixedSS17 = "0sj1jmipz8a2vwizg6p0ywa838w2m3x5lfj49ql1ybh1bjz1cj23";
+  SGr-IosevkaFixedSS18 = "1rkz18k0nrz6if3nmcjpvrcbc2pg5w8z6dsvld90yf1964qll7q3";
+  SGr-IosevkaSlab = "18kif4a83qs1nsv3pvnyf8labw89ix4x42ydji6l387lzzxn5919";
+  SGr-IosevkaSS01 = "1j74h95csjfdvgmbqmnvgavhm5kjvbkh1rsh4xgrf4rqjcnr82kw";
+  SGr-IosevkaSS02 = "1n63pwjm05mwxzy18zw4hd0547ycg1dl0ivykgw1f25yf968wfg9";
+  SGr-IosevkaSS03 = "0a8v523slxnja9vslfz4cxy5g6h0zcj30mky70wxmnf2gmfvc7zv";
+  SGr-IosevkaSS04 = "0ylvzphbhvixfq69zyaick56jpkff33vyc2z1pszqblz0dzdc8kn";
+  SGr-IosevkaSS05 = "1ij58iqs9bmibgg9pj38053phnydwcb2k9npgbs88f08s1pgjvh5";
+  SGr-IosevkaSS06 = "00yfsbhgcxd3dv888hw8r4n4ivwxcn0m3zz99djgzxn0nd8r10y2";
+  SGr-IosevkaSS07 = "0b5c29x479i04afdkjplbq135pzhfcwi144xs0k2ba6s85g0y10d";
+  SGr-IosevkaSS08 = "1by2vd7kjqiqj7f3zps4xiz0ydq3gnljkh7jly513dg0idg2agwv";
+  SGr-IosevkaSS09 = "0a9sgh2vwm57ay1pzlrmwd549aaidg7p8b76dhxvhmvf006ay92b";
+  SGr-IosevkaSS10 = "079vr05ilaijqyy1wkqgk42jg5i2s3sz5y3i19gr1yqgfdpq2b3j";
+  SGr-IosevkaSS11 = "11l0cf7ib9ibcckpjymrpwgsadz3glwdics3mzhhzv28fz91b95c";
+  SGr-IosevkaSS12 = "1sbwi3fbj421z8jaa224hy8vmk565brclxzg9dnsdg5x8kxlf6jg";
+  SGr-IosevkaSS13 = "1qsqa76wkz2adaabigw6d74k0s0jlswagsyknxcpynh6fmzqcrs4";
+  SGr-IosevkaSS14 = "002kzsjqsajz5q1wy0vfr836ljmlm417zb3c6yjlnqp2zpzz26d5";
+  SGr-IosevkaSS15 = "1h74gl7xm2qdy0v3xhj0nmwn6b6zwxnmrv0wwpqd2yn4jf57xa4v";
+  SGr-IosevkaSS16 = "0y58mggxv7bqymf45bcy2mjlngz3hp5mbisy1n65d7kmqcjfyj97";
+  SGr-IosevkaSS17 = "1b728h7qnyd9i3jp1j7d7n11vksw6518rhl7470h01qmqnmpw579";
+  SGr-IosevkaSS18 = "1hh64ys2bjh7qlkz30vnj38grkr4s6c5nm8c1zgf6yi02xcrnxjg";
+  SGr-IosevkaTerm = "1k85q6y3h0i8ivm0llif3k4llgaxin87gmvjxn4h8092yfi59kkh";
+  SGr-IosevkaTermCurly = "1xwif6qjada58mswqd0myr2p2h06dik55cj4bsk3kmva2avvn2d3";
+  SGr-IosevkaTermCurlySlab = "161583x6zphxxzpzkp889rhjihpxy2ahrdc8nbqldn7j2nijz56s";
+  SGr-IosevkaTermSlab = "1fsx3z12plbkgjjdppf9c2b0y40vsavqp5hkj5b1j336cxah97yr";
+  SGr-IosevkaTermSS01 = "1z2xyyb2ddlrarxqzrv9x7hajpifqi15simqnmd31d899kx1zqx3";
+  SGr-IosevkaTermSS02 = "1nrr55hh2kd57ri6ipcm2425g469xj1gxf7lzivi1w8dbgk6mi4j";
+  SGr-IosevkaTermSS03 = "1zp7p0b4y911lxf80bkhj7x68xpjc36a6x6lmq2msq886hyayq14";
+  SGr-IosevkaTermSS04 = "15bzbrch7f0c4sxi01sasavkbjvgja1h740hd2zaqlsshx8sk91z";
+  SGr-IosevkaTermSS05 = "1zl760ikgq7y0x03zjnild7dpx9ndc1g0rjk5drp84qg8saaayz3";
+  SGr-IosevkaTermSS06 = "0zy62b3njnz0ip666xx68lmc8b4yaa610fy5qf9d6c8yj0qfb1gd";
+  SGr-IosevkaTermSS07 = "0m9j0v4ijz6yprvvnbv7591vh81xr1yyr73fy4463v9za99ccpvn";
+  SGr-IosevkaTermSS08 = "1a5qgy3cbf166q2j3gg8h4a0rfz9cjb6c1kqrmkvabxxk6fmg3s5";
+  SGr-IosevkaTermSS09 = "1hz3pasx0zg7467cpdwrm9gnfdwslbp5llawfsr2qp5vzkqggxhj";
+  SGr-IosevkaTermSS10 = "1cgfsmf2arcpjn3wclhkfqajx4nkc24d8ww3k8156bjd7bn8hxa8";
+  SGr-IosevkaTermSS11 = "0z6rw2f8palzm2k00pacnaw27kipr4sd3l9rh3ahw88s4h0r3kgv";
+  SGr-IosevkaTermSS12 = "0qak5xq61wxzr3gcyhamf9sanzisx8n72l7acwd7nffk9c5c7iy9";
+  SGr-IosevkaTermSS13 = "13vi16nks0kbd0hyg1g4cxi3pxxqk3sj297h5nxv0i0khfrdyyys";
+  SGr-IosevkaTermSS14 = "1q004ws9aamdvkfm2as6281ypk0fvq5m9ccv11azs9jcfydx5s1n";
+  SGr-IosevkaTermSS15 = "0fdk1x6wpzsrg0r304nsk9hszpy9yndjkrq62q6a466sxsykj3ij";
+  SGr-IosevkaTermSS16 = "0yiwj0dz7lf1y6v7snmxl5zfqq66hg4dg82fb2axibh0f0k9x51y";
+  SGr-IosevkaTermSS17 = "1xih5lnxl4v3gw3vz93pv2djkibmb13y4a76ky7svyg2y3v5dzhm";
+  SGr-IosevkaTermSS18 = "1qlk7fcsp3sbq4q1zny5gvfbqmkgz7cqxz5pvgfcjd6i6s932lmb";
 }

pkgs/by-name/iq/iqtree/package.nix

···
   src = fetchFromGitHub {
     owner = "iqtree";
     repo = "iqtree2";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-8d5zqZIevv3bnq7z7Iyo/x8i445y1RAFtRMeK8s/ieQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/it/itgmania/package.nix

···
   src = fetchFromGitHub {
     owner = "itgmania";
     repo = "itgmania";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-C9qVUZdRnKbQgfgbXnzT+lI2+FEXBaMQv/U6UF5wyzo=";
   };

pkgs/by-name/ja/jay/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "jay";
-  version = "1.10.0";
+  version = "1.11.0";
 
   src = fetchFromGitHub {
     owner = "mahkoh";
     repo = "jay";
     rev = "v${version}";
-    sha256 = "sha256-wrA/UGxhIUMc2T+0/UNKS9iN44pe9ap2l+xL8ZE5jsI=";
+    sha256 = "sha256-lVdNilNMeVN27VaDufWiNVme0apnX+w0x9JeHkDzFH4=";
   };
 
-  cargoHash = "sha256-2LfEktaHB+uIQSWeSFG+v7+7wfkGlDz54m7P4KttPLI=";
+  cargoHash = "sha256-5j4ECjBCMSCmGfFUQ72nwER/vTvCiDl6f2CyNF3n1ek=";
 
   SHADERC_LIB_DIR = "${lib.getLib shaderc}/lib";
 

pkgs/by-name/je/jetbrains-runner/package.nix

···
   src = fetchFromGitHub {
     owner = "alex1701c";
     repo = "JetBrainsRunner";
-    rev = version;
+    tag = version;
     hash = "sha256-fzGwwvBgvUVU6Ra66KrIAqRjWWR6pWYbWVkOk2tDwkc=";
     fetchSubmodules = true;
   };

pkgs/by-name/js/json-fortran/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "json-fortran";
-  version = "9.0.3";
+  version = "9.0.4";
 
   src = fetchFromGitHub {
     owner = "jacobwilliams";
     repo = "json-fortran";
     rev = version;
-    hash = "sha256-MMHMyEPZYz7dkYX1OA9D1kgRCTpzTVussJbh4rWHlyU=";
+    hash = "sha256-tLDs/yh9xMfZd2m+jD6Mm3Lr4asI4SrBDOAU2vN5OfA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ju/junction/package.nix

···
   src = fetchFromGitHub {
     owner = "sonnyp";
     repo = "junction";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-gnFig8C46x73gAUl9VVx3Y3hrhEVeP/DvaYHYuv9RTg=";
     fetchSubmodules = true;
   };

pkgs/by-name/kd/kdigger/package.nix

···
   src = fetchFromGitHub {
     owner = "quarkslab";
     repo = "kdigger";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-hpLhtTENtOBQjm+CZRAcx1BG9831JUFIsLL57wZIrso=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/ki/kimai/package.nix

···
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "kimai";
-  version = "2.36.1";
+  version = "2.37.0";
 
   src = fetchFromGitHub {
     owner = "kimai";
     repo = "kimai";
     tag = finalAttrs.version;
-    hash = "sha256-TZMkCKwfmn2Iv1BXKH49NRB6oCIKlPmkrPcLNZlyaPo=";
+    hash = "sha256-cxVPR1xNupIyT5nwWpia11MXwx48G5WwkoGhdj0KUJ8=";
   };
 
   php = php.buildEnv {
···
     '';
   };
 
-  vendorHash = "sha256-ROy/ZWVOZ6fM92kV94uPiyUudmuCpK+9zE/5xzd+BQc=";
+  vendorHash = "sha256-scRFKOIb03poY94IpJ7Nj8p6AooTD+bSQjX48izfujY=";
 
   composerNoPlugins = false;
   composerNoScripts = false;

pkgs/by-name/kl/klystrack/package.nix

···
   src = fetchFromGitHub {
     owner = "kometbomb";
     repo = "klystrack";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     sha256 = "1h99sm2ddaq483hhk2s3z4bjbgn0d2h7qna7l7qq98wvhqix8iyz";
   };

pkgs/by-name/kr/krillinai/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "krillinai";
-  version = "1.3.0";
+  version = "1.3.1";
 
   src = fetchFromGitHub {
     owner = "krillinai";
     repo = "KlicStudio";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Cd+MrKXezcBKRSwmoRaD/2jiNT7r8R7IGweXHDZFhWE=";
+    hash = "sha256-LLVm5L8usGoMBbeU/eQMNv/+WMQcdyiOQmj3NM/D9TU=";
   };
 
   vendorHash = "sha256-bAKLNpt0K06egScyn7ImHV0csDsMQGUm92kU1PVQK+I=";

pkgs/by-name/ks/kssd/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "kssd";
-  version = "2.21";
+  version = "2.21-unstable-2024-05-27";
 
   src = fetchFromGitHub {
     owner = "yhg926";
     repo = "public_kssd";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-D/s1jL2oKE0rSdRMVljskYFsw5UPOv1L95Of+K+e17w=";
+    rev = "ce96b66dddc2d6c1ce611ad84cdf4c7ba62b4aa5";
+    hash = "sha256-qafPyDl+pDfnJ7S6mHBHht2OcQEQeV2kQM+ir5LTGFA=";
   };
 
   patches = [
···
     '';
   };
 
-  meta = with lib; {
+  meta = {
     description = "K-mer substring space decomposition";
-    license = licenses.asl20;
+    license = lib.licenses.asl20;
     homepage = "https://github.com/yhg926/public_kssd";
-    maintainers = with maintainers; [ unode ];
-    platforms = platforms.linux;
+    maintainers = with lib.maintainers; [ unode ];
+    platforms = lib.platforms.linux;
     mainProgram = "kssd";
   };
 })

pkgs/by-name/ld/ldacbt/package.nix

···
   src = fetchFromGitHub {
     repo = "ldacBT";
     owner = "ehfive";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "09dalysx4fgrgpfdm9a51x6slnf4iik1sqba4xjgabpvq91bnb63";
     fetchSubmodules = true;
   };

pkgs/by-name/ld/ldc/package.nix

···
   src = fetchFromGitHub {
     owner = "ldc-developers";
     repo = "ldc";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-6LcpY3LSFK4KgEiGrFp/LONu5Vr+/+vI04wEEpF3s+s=";
     fetchSubmodules = true;
   };

pkgs/by-name/le/lemminx/package.nix

···
   src = fetchFromGitHub {
     owner = "eclipse";
     repo = "lemminx";
-    rev = version;
+    tag = version;
     hash = "sha256-a+9RN1265fsmYAUMuUTxA+VqJv7xPlzuc8HqoZwmR4M=";
     # Lemminx reads this git information at runtime from a git.properties
     # file on the classpath

pkgs/by-name/le/leptosfmt/package.nix

···
   src = fetchFromGitHub {
     owner = "bram209";
     repo = "leptosfmt";
-    rev = version;
+    tag = version;
     hash = "sha256-+trLQFU8oP45xHQ3DsEESQzQX2WpvQcfpgGC9o5ITcY=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libbladeRF/package.nix

···
   src = fetchFromGitHub {
     owner = "Nuand";
     repo = "bladeRF";
-    rev = "libbladeRF_v${version}";
+    tag = "libbladeRF_v${version}";
     hash = "sha256-H40w5YKp6M3QLrsPhILEnJiWutCYLtbgC4a63sV397Q=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libcaption/package.nix

···
   src = fetchFromGitHub {
     owner = "szatmary";
     repo = "libcaption";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-OBtxoFJF0cxC+kfSK8TIKIdLkmCh5WOJlI0fejnisJo=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libcgroup/package.nix

···
   src = fetchFromGitHub {
     owner = "libcgroup";
     repo = "libcgroup";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-kWW9ID/eYZH0O/Ge8pf3Cso4yu644R5EiQFYfZMcizs=";
   };

pkgs/by-name/li/libdatachannel/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "libdatachannel";
-  version = "0.23.0";
+  version = "0.23.1";
 
   src = fetchFromGitHub {
     owner = "paullouisageneau";
     repo = "libdatachannel";
     rev = "v${version}";
-    hash = "sha256-bzheNNG6J0tswFZT+Vlqm2FS9MArois46yb8XeL5YqI=";
+    hash = "sha256-+2xJ3H5tnlP015dr0V5WidMl434EsMHwu6p7SrvizgM=";
   };
 
   outputs = [

pkgs/by-name/li/libff/package.nix

···
   src = fetchFromGitHub {
     owner = "scipr-lab";
     repo = "libff";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "0dczi829497vqlmn6n4fgi89bc2h9f13gx30av5z2h6ikik7crgn";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libime/package.nix

···
   src = fetchFromGitHub {
     owner = "fcitx";
     repo = "libime";
-    rev = version;
+    tag = version;
     hash = "sha256-liVJEBUYcVYjjJCMW68xXbEHKQpAgTLCPm2yIdWG3IQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libjxl/package.nix

···
   src = fetchFromGitHub {
     owner = "libjxl";
     repo = "libjxl";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-ORwhKOp5Nog366UkLbuWpjz/6sJhxUO6+SkoJGH+3fE=";
     # There are various submodules in `third_party/`.
     fetchSubmodules = true;

pkgs/by-name/li/libmysqlconnectorcpp/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "libmysqlconnectorcpp";
-  version = "9.3.0";
+  version = "9.4.0";
 
   src = fetchurl {
     url = "mirror://mysql/Connector-C++/mysql-connector-c++-${version}-src.tar.gz";
-    hash = "sha256-Jopvf0pstZ9T3eWWI74VWfkTop7B3oG/D/zL94DRtBY=";
+    hash = "sha256-NqfJPUoQ0doqLmY2dVnZF0GqDwNivArpQxcc8XcfZhU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/li/libnitrokey/package.nix

···
   src = fetchFromGitHub {
     owner = "Nitrokey";
     repo = "libnitrokey";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-4PEZ31QyVOmdhpKqTN8fwcHoLuu+w+OJ3fZeqwlE+io=";
     # On OSX, libnitrokey depends on a custom version of hidapi in a submodule.
     # Monitor https://github.com/Nitrokey/libnitrokey/issues/140 to see if we

pkgs/by-name/li/liboqs/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "liboqs";
-  version = "0.13.0";
+  version = "0.14.0";
 
   src = fetchFromGitHub {
     owner = "open-quantum-safe";
     repo = "liboqs";
     rev = finalAttrs.version;
-    hash = "sha256-E3wOiWeQSgWzzu4zoYfLV1kGV3jsFE+XEnUezWSqkcA=";
+    hash = "sha256-BJgsXbKcQjJFk/A7JvkA0NKztv0BAnkgCAXv/TM2/04=";
   };
 
   patches = [

pkgs/by-name/li/libredwg/package.nix

···
   src = fetchFromGitHub {
     owner = "LibreDWG";
     repo = "libredwg";
-    rev = version;
+    tag = version;
     hash = "sha256-FlBHwNsqVSBE8dTDewoKkCbs8Jd/4d69MPpEFzg6Ruc=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/libresprite/package.nix

···
   src = fetchFromGitHub {
     owner = "LibreSprite";
     repo = "LibreSprite";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-jXjrA859hR46Cp5qi6Z1C+hLWCUR7yGlASOGlTveeW8=";
   };

pkgs/by-name/li/librum/package.nix

···
   src = fetchFromGitHub {
     owner = "Librum-Reader";
     repo = "Librum";
-    rev = "v.${version}";
+    tag = "v.${version}";
     fetchSubmodules = true;
     hash = "sha256-Iwcbcz8LrznFP8rfW6mg9p7klAtTx4daFxylTeFKrH0=";
   };

pkgs/by-name/li/libsidplayfp/package.nix

···
   src = fetchFromGitHub {
     owner = "libsidplayfp";
     repo = "libsidplayfp";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-rK7Il8WE4AJbn7GKn21fXr1o+DDdyOjfJ0saeqcZ5Pg=";
   };

pkgs/by-name/li/libstaden-read/package.nix

···
   src = fetchFromGitHub {
     owner = "jkbonfield";
     repo = "io_lib";
-    rev = "io_lib-" + builtins.replaceStrings [ "." ] [ "-" ] finalAttrs.version;
+    tag = "io_lib-" + builtins.replaceStrings [ "." ] [ "-" ] finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-X96gFrefH2NAp4+fvVLXHP9FbF04gQOWLm/tAFJPgR8=";
   };

pkgs/by-name/li/libsurvive/package.nix

···
   src = fetchFromGitHub {
     owner = "cntools";
     repo = "libsurvive";
-    rev = "v${version}";
+    tag = "v${version}";
     # Fixes 'Unknown CMake command "cnkalman_generate_code"'
     fetchSubmodules = true;
     hash = "sha256-NcxdTKra+YkLt/iu9+1QCeQZLV3/qlhma2Ns/+ZYVsk=";

pkgs/by-name/li/libtorrent-rasterbar-2_0_x/package.nix

···
   src = fetchFromGitHub {
     owner = "arvidn";
     repo = "libtorrent";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-iph42iFEwP+lCWNPiOJJOejISFF6iwkGLY9Qg8J4tyo=";
     fetchSubmodules = true;
   };

pkgs/by-name/li/linuxwave/package.nix

···
   src = fetchFromGitHub {
     owner = "orhun";
     repo = "linuxwave";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-OuD5U/T3GuCQrzdhx01NXPSXD7pUAvLnNsznttJogz8=";
   };

pkgs/by-name/li/litmus/package.nix

···
   src = fetchFromGitHub {
     owner = "notroj";
     repo = "litmus";
-    rev = version;
+    tag = version;
     # Required for neon m4 macros, bundled neon not used
     fetchSubmodules = true;
     hash = "sha256-jWz0cnytgn7px3vvB9/ilWBNALQiW5/QvgguM27I3yQ=";

pkgs/by-name/lo/logiops/package.nix

···
   src = fetchFromGitHub {
     owner = "PixlOne";
     repo = "logiops";
-    rev = "v${oldAttrs.version}";
+    tag = "v${oldAttrs.version}";
     hash = "sha256-GAnlPqjIFGyOWwYFs7gth2m9ITc1jyiaW0sWwQ2zFOs=";
     # In v0.3.0, the `ipcgull` submodule was added as a dependency
     # https://github.com/PixlOne/logiops/releases/tag/v0.3.0

pkgs/by-name/lo/loksh/package.nix

···
   src = fetchFromGitHub {
     owner = "dimkr";
     repo = "loksh";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-BxQ7SZwRP9PlD2MV7DqG7tQ2lqzlkTwmaKwbgC7NYrc=";
   };

pkgs/by-name/lu/luanti/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luanti";
-  version = "5.12.0";
+  version = "5.13.0";
 
   src = fetchFromGitHub {
     owner = "luanti-org";
     repo = "luanti";
     tag = finalAttrs.version;
-    hash = "sha256-voP2/6s2tjsIULHa5+M08oNNLg0YQmtFmPeNO4TnE9E=";
+    hash = "sha256-TvI0+G7bRwwkEegv/AN4aBIN05M1AnWsaYD4lr3VTb8=";
   };
 
   patches = [

pkgs/by-name/lu/luau-lsp/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau-lsp";
-  version = "1.52.1";
+  version = "1.53.1";
 
   src = fetchFromGitHub {
     owner = "JohnnyMorganz";
     repo = "luau-lsp";
     tag = finalAttrs.version;
-    hash = "sha256-h99VTcOrbe7e63inMN7y0ohEQebzRPRYcKiHU3aBI18=";
+    hash = "sha256-EsDmWxl0qWDBh6Vrz5Hzjy1ZzEWn/5QQTrCWXehQZ4M=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/lu/lune/package.nix

···
   src = fetchFromGitHub {
     owner = "filiptibell";
     repo = "lune";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-Kk3ZIF+kQzsg/ApUm12bbWlIthj5cpVefAqEGhgxb3w=";
     fetchSubmodules = true;
   };

pkgs/by-name/ly/LycheeSlicer/package.nix

···
 }:
 let
   pname = "LycheeSlicer";
-  version = "7.4.0";
+  version = "7.4.2";
 
   src = fetchurl {
     url = "https://mango-lychee.nyc3.cdn.digitaloceanspaces.com/LycheeSlicer-${version}.AppImage";
-    hash = "sha256-ivyRpQSyYatWITgiOsgNJRVAWIlFmsU+GlzYDRoESbA=";
+    hash = "sha256-RTLlNB6eiesXZayC69hpnXQsAgmPuaJTC+18Q6KzAP0=";
   };
 
   desktopItem = makeDesktopItem {

pkgs/by-name/ly/lynis/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "lynis";
-  version = "3.1.4";
+  version = "3.1.5";
 
   src = fetchFromGitHub {
     owner = "CISOfy";
     repo = "lynis";
     rev = version;
-    sha256 = "sha256-OnEEdJGU7ma6f7aA6ihgixHWZGZDmx7nzqmJH3p+ijk=";
+    sha256 = "sha256-XMgC6KjkLgjSOBHBx7WM7C2Vm3Z/lto7CFs10kIxwZc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ma/makeself/package.nix

···
   src = fetchFromGitHub {
     owner = "megastep";
     repo = "makeself";
-    rev = "release-${version}";
+    tag = "release-${version}";
     fetchSubmodules = true;
     hash = "sha256-15lUtErGsbXF2Gn0f0rvA18mMuVMmkKrGO2poeYZU9g=";
   };

pkgs/by-name/ma/mamba/package.nix

···
   src = fetchFromGitHub {
     owner = "brummer10";
     repo = "Mamba";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-S1+nGnB1LHIUgYves0qtWh+QXYKjtKWICpOo38b3zbY=";
     fetchSubmodules = true;
   };

pkgs/by-name/ma/manifest-tool/package.nix

···
   src = fetchFromGitHub {
     owner = "estesp";
     repo = "manifest-tool";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-tEUsqrJGRhyirI8TEgG6r9crHX58webHO5v7JLLRQ30=";
     leaveDotGit = true;
     postFetch = ''

pkgs/by-name/ma/mariadb-galera/package.nix

···
   src = fetchFromGitHub {
     owner = "codership";
     repo = "galera";
-    rev = "release_${version}";
+    tag = "release_${version}";
     hash = "sha256-v7zwhXfW9K1wvV951Utt/rUbSIMiRZB1rWfeK1VJzN4=";
     fetchSubmodules = true;
   };

pkgs/by-name/ma/marker/package.nix

···
   src = fetchFromGitHub {
     owner = "fabiocolacio";
     repo = "Marker";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-HhDhigQ6Aqo8R57Yrf1i69sM0feABB9El5R5OpzOyB0=";
   };

pkgs/by-name/ma/master_me/package.nix

···
   src = fetchFromGitHub {
     owner = "trummerschlunk";
     repo = "master_me";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-eesMXxRcCgzhSQ+WUqM00EuKYhFxysjH+RWKHKGYzUM=";
   };

pkgs/by-name/ma/material-design-icons/package.nix

···
   src = fetchFromGitHub {
     owner = "Templarian";
     repo = "MaterialDesign-Webfont";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-7t3i3nPJZ/tRslLBfY+9kXH8TR145GC2hPFYJeMHRL8=";
     sparseCheckout = [ "fonts" ];
   };

pkgs/by-name/me/megaglest/package.nix

···
   src = fetchFromGitHub {
     owner = "MegaGlest";
     repo = "megaglest-source";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     sha256 = "0fb58a706nic14ss89zrigphvdiwy5s9dwvhscvvgrfvjpahpcws";
   };

pkgs/by-name/me/mercure/package.nix

···
 
 buildGoModule rec {
   pname = "mercure";
-  version = "0.19.2";
+  version = "0.20.0";
 
   src = fetchFromGitHub {
     owner = "dunglas";
     repo = "mercure";
     rev = "v${version}";
-    hash = "sha256-Dmivt+djzY/3dr4aglRLFGG4LgH+Q7tZpqxnY70lHqI=";
+    hash = "sha256-JBvfNzsOP4ggJ7D2+5yW8837QsN15wO6EbFrTKVensU=";
   };
 
   sourceRoot = "${src.name}/caddy";
 
-  vendorHash = "sha256-WqlwQGA0zptt3WZKpDrWNAkAy1UIXmapdAFkZAntqLM=";
+  vendorHash = "sha256-ZCvIgyGw4F4VGbnuan5O+to5n969ThRZNFezu+byKWg=";
 
   subPackages = [ "mercure" ];
   excludedPackages = [ "../cmd/mercure" ];

pkgs/by-name/mi/micropython/package.nix

···
   src = fetchFromGitHub {
     owner = "micropython";
     repo = "micropython";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-yH5omiYs07ZKECI+DAnpYq4T+r2O/RuGdtN+dhYxePc=";
     fetchSubmodules = true;
 

pkgs/by-name/mi/minia/package.nix

···
   src = fetchFromGitHub {
     owner = "GATB";
     repo = "minia";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "0bmfrywixaaql898l0ixsfkhxjf2hb08ssnqzlzacfizxdp46siq";
     fetchSubmodules = true;
   };

pkgs/by-name/ml/mlt/package.nix

···
   src = fetchFromGitHub {
     owner = "mltframework";
     repo = "mlt";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-z1bW+hcVeMeibC1PUS5XNpbkNB+75YLoOWZC2zuDol4=";
     # The submodule contains glaxnimate code, since MLT uses internally some functions defined in glaxnimate.
     # Since glaxnimate is not available as a library upstream, we cannot remove for now this dependency on

pkgs/by-name/mm/mmex/package.nix

···
   src = fetchFromGitHub {
     owner = "moneymanagerex";
     repo = "moneymanagerex";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-gpDwfRKXgp6hEpitflVIAIOU/k3Fx6hKKhyzQvLlog8=";
   };

pkgs/by-name/mm/mmv/package.nix

···
   src = fetchFromGitHub {
     owner = "rrthomas";
     repo = "mmv";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-h+hdrIQz+7jKdMdJtWhBbZgvmNTIOr7Q38nhfAWC+G4=";
     fetchSubmodules = true;
   };

pkgs/by-name/mo/moonlight-embedded/package.nix

···
   src = fetchFromGitHub {
     owner = "moonlight-stream";
     repo = "moonlight-embedded";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-Jc706BjIT3rS9zwntNOdgszP4CHuX+qxvPvWeU68Amg=";
     fetchSubmodules = true;
   };

pkgs/by-name/mo/moonlight-qt/package.nix

···
   src = fetchFromGitHub {
     owner = "moonlight-stream";
     repo = "moonlight-qt";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-rWVNpfRDLrWsqELPFquA6rW6/AfWV+6DNLUCPqIhle0=";
     fetchSubmodules = true;
   };

pkgs/by-name/mo/mountpoint-s3/package.nix

···
   src = fetchFromGitHub {
     owner = "awslabs";
     repo = "mountpoint-s3";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-uV0umUoJkYgmjWjv8GMnk5TRRbCCJS1ut3VV1HvkaAw=";
     fetchSubmodules = true;
   };

pkgs/by-name/mo/movim/package.nix

···
 in
 php.buildComposerProject2 (finalAttrs: {
   pname = "movim";
-  version = "0.30.1";
+  version = "0.31";
 
   src = fetchFromGitHub {
     owner = "movim";
     repo = "movim";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-MjP1rLyWJWrUAHrOKAwGN3A0wIq4iPaXlaUbtPs3F6U=";
+    hash = "sha256-rW751UhDBhakOrAT4BOiRDPpGldf1EwNZY8iavXlpLk=";
   };
 
   php = php.buildEnv (
···
     ++ lib.optional minify.style.enable lightningcss
     ++ lib.optional minify.svg.enable scour;
 
-  vendorHash = "sha256-7jb4/UgnMcXtLCihwk4rr0HLw99FgiYeYJVATGxM/D4=";
+  vendorHash = "sha256-xkFyjs3jW7j+8WosRaxBEYQU2dwQlDr4/nrdtW03xvA=";
 
   postPatch = ''
     # Our modules are already wrapped, removes missing *.so warnings;

pkgs/by-name/mo/mozc/package.nix

···
   src = fetchFromGitHub {
     owner = "google";
     repo = "mozc";
-    rev = version;
+    tag = version;
     hash = "sha256-w0bjoMmq8gL7DSehEG7cKqp5e4kNOXnCYLW31Zl9FRs=";
     fetchSubmodules = true;
   };

pkgs/by-name/ms/mscp/package.nix

···
   src = fetchFromGitHub {
     owner = "upa";
     repo = "mscp";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-5lX0b3JfjmQh/HlESRMNxqCe2qFRAEZoazysoy252dY=";
     fetchSubmodules = true;
   };

pkgs/by-name/mu/museum/package.nix

···
     owner = "ente-io";
     repo = "ente";
     sparseCheckout = [ "server" ];
-    rev = "photos-v${version}";
+    tag = "photos-v${version}";
     hash = "sha256-801wTTxruhZc18+TAPSYrBRtCPNZXwSKs2Hkvc/6BjM=";
   };
 

pkgs/by-name/mu/mustache-go/package.nix

···
   src = fetchFromGitHub {
     owner = "cbroglie";
     repo = "mustache";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-A7LIkidhpFmhIjiDu9KdmSIdqFNsV3N8J2QEo7yT+DE=";
   };

pkgs/by-name/na/nasc/package.nix

···
   src = fetchFromGitHub {
     owner = "parnold-x";
     repo = "nasc";
-    rev = version;
+    tag = version;
     sha256 = "02b9a59a9fzsb6nn3ycwwbcbv04qfzm6x7csq2addpzx5wak6dd8";
     fetchSubmodules = true;
   };

pkgs/by-name/ne/neural-amp-modeler-lv2/package.nix

···
   src = fetchFromGitHub {
     owner = "mikeoliphant";
     repo = "neural-amp-modeler-lv2";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-5BOZOocZWWSWawXJFMAgM0NR0s0CbkzDVr6fnvZMvd0=";
   };

pkgs/by-name/ne/neuron/package.nix

···
   src = fetchFromGitHub {
     owner = "neuronsimulator";
     repo = "nrn";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-dmpx0Wud0IhdFvvTJuW/w1Uq6vFYaNal9n27LAqV1Qc=";
   };

pkgs/by-name/ne/newelle/package.nix

···
 }:
 
 let
-  version = "1.0.0";
+  version = "1.0.1";
 in
 python3Packages.buildPythonApplication {
   pname = "newelle";
···
     owner = "qwersyk";
     repo = "Newelle";
     tag = version;
-    hash = "sha256-9Tjp1RZMEdJWLjcy2AjOy3Rw7Q1ulFeZU4y+rMXSmFA=";
+    hash = "sha256-l/eNf1KLZeuDWf1A/5Y8fggOovKmjW6UFNMvNxuJXkc=";
   };
 
   postPatch = ''

pkgs/by-name/ng/nghttp3/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "nghttp3";
-  version = "1.10.1";
+  version = "1.11.0";
 
   src = fetchFromGitHub {
     owner = "ngtcp2";
     repo = "nghttp3";
     rev = "v${version}";
-    hash = "sha256-V4JFqi3VdblpBlZJ1uFX56AlJn894oiX86OfoxVjBbE=";
+    hash = "sha256-8WQfXzzF3K0IJNectrE1amQ6Njq4pZslrcVun6Uhi6E=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/ni/ninjas2/package.nix

···
   src = fetchFromGitHub {
     owner = "clearly-broken-software";
     repo = "ninjas2";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "1kwp6pmnfar2ip9693gprfbcfscklgri1k1ycimxzlqr61nkd2k9";
     fetchSubmodules = true;
   };

pkgs/by-name/ni/nitrokey-fido2-firmware/package.nix

···
   src = fetchFromGitHub {
     owner = "Nitrokey";
     repo = "nitrokey-fido2-firmware";
-    rev = "${version}.nitrokey";
+    tag = "${version}.nitrokey";
     hash = "sha256-7AsnxRf8mdybI6Mup2mV01U09r5C/oUX6fG2ymkkOOo=";
     fetchSubmodules = true;
   };

pkgs/by-name/ni/nitrokey-pro-firmware/package.nix

···
   src = fetchFromGitHub {
     owner = "Nitrokey";
     repo = "nitrokey-pro-firmware";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-q+kbEOLA05xR6weAWDA1hx4fVsaN9UNKiOXGxPRfXuI=";
     fetchSubmodules = true;
   };

pkgs/by-name/ni/nitrokey-start-firmware/package.nix

···
   src = fetchFromGitHub {
     owner = "Nitrokey";
     repo = "nitrokey-start-firmware";
-    rev = "RTM.${finalAttrs.version}";
+    tag = "RTM.${finalAttrs.version}";
     hash = "sha256-POW1d/fgOyYa7127FSTCtHGyMWYzKW0qqA1WUyvNc3w=";
     fetchSubmodules = true;
   };

pkgs/by-name/no/noisetorch/package.nix

···
   src = fetchFromGitHub {
     owner = "noisetorch";
     repo = "NoiseTorch";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-gOPSMPH99Upi/30OnAdwSb7SaMV0i/uHB051cclfz6A=";
   };

pkgs/by-name/no/notes/package.nix

···
   src = fetchFromGitHub {
     owner = "nuttyartist";
     repo = "notes";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-ceZ37torgnxZJybacjnNG+kNAU/I2Ki7ZZ7Tzn4pIas=";
     fetchSubmodules = true;
   };

pkgs/by-name/no/noto-fonts-cjk-sans/package.nix

···
   src = fetchFromGitHub {
     owner = "notofonts";
     repo = "noto-cjk";
-    rev = "Sans${version}";
+    tag = "Sans${version}";
     hash = "sha256-i3ZKoSy2SVs46IViha+Sg8atH4n3ywgrunHPLtVT4Pk=";
     sparseCheckout = [
       "Sans/OTC"

pkgs/by-name/no/noto-fonts-cjk-serif/package.nix

···
   src = fetchFromGitHub {
     owner = "notofonts";
     repo = "noto-cjk";
-    rev = "Serif${version}";
+    tag = "Serif${version}";
     hash = "sha256-Bwuu64TAnOnqUgLlBsUw/jnv9emngqFBmVn6zEqySlc=";
     sparseCheckout = [
       "Serif/OTC"

pkgs/by-name/od/odin2/package.nix

···
   src = fetchFromGitHub {
     owner = "TheWaveWarden";
     repo = "odin2";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-N96Nb7G6hqfh8DyMtHbttl/fRZUkS8f2KfPSqeMAhHY=";
   };

pkgs/by-name/op/openboardview/package.nix

···
   src = fetchFromGitHub {
     owner = "OpenBoardView";
     repo = "OpenBoardView";
-    rev = version;
+    tag = version;
     hash = "sha256-sKDDOPpCagk7rBRlMlZhx+RYYbtoLzJsrnL8qKZMKW8=";
     fetchSubmodules = true;
   };

pkgs/by-name/op/opencl-clhpp/package.nix

···
   src = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "OpenCL-CLHPP";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     sha256 = "sha256-3RVZJIt03pRmjrPa9q6h6uqFCuTnxvEqjUGUmdwybbY=";
   };

pkgs/by-name/op/openmsx/package.nix

···
   src = fetchFromGitHub {
     owner = "openMSX";
     repo = "openMSX";
-    rev = "RELEASE_${builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version}";
+    tag = "RELEASE_${builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version}";
     hash = "sha256-iY+oZ7fHZnnEGunM4kOxOGH2Biqj2PfdLhbT8J4mYrA=";
     fetchSubmodules = true;
   };

pkgs/by-name/op/openrocket/package.nix

···
   src = fetchFromGitHub {
     owner = "openrocket";
     repo = "openrocket";
-    rev = "release-${finalAttrs.version}";
+    tag = "release-${finalAttrs.version}";
     hash = "sha256-Dg/v72N9cDG9Ko5JIcZxGxh+ClRDgf5Jq5DvQyCiYOs=";
     fetchSubmodules = true;
   };

pkgs/by-name/op/openseachest/package.nix

···
   src = fetchFromGitHub {
     owner = "Seagate";
     repo = "openSeaChest";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-kd2JRtqnxfYRJcr1yKSB0LZAR96j2WW4tR1iRTvVANs=";
     fetchSubmodules = true;
   };

pkgs/by-name/op/opensubdiv/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "opensubdiv";
-  version = "3.6.0";
+  version = "3.6.1";
 
   src = fetchFromGitHub {
     owner = "PixarAnimationStudios";
     repo = "OpenSubdiv";
     tag = "v${lib.replaceStrings [ "." ] [ "_" ] finalAttrs.version}";
-    hash = "sha256-liy6pQyWMk7rw0usrCoLGzZLO7RAg0z2pV/GF2NnOkE=";
+    hash = "sha256-/22SeMzNNnrUgmPGpgbQwoYthdAdhRa615VhVJOvP9o=";
   };
 
   outputs = [

pkgs/by-name/oq/oqs-provider/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   name = "oqs-provider";
-  version = "0.9.0";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "open-quantum-safe";
     repo = "oqs-provider";
     rev = finalAttrs.version;
-    hash = "sha256-R9rau/Q+KSkr0hNxpvc3ub9eLQqS1kIONoOEw8zFUBk=";
+    hash = "sha256-/FdVcFNrRWJmEmO1B+LybL+MH4N7LdwvHaOpQi6vCTU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/or/orocos-kdl/package.nix

···
   src = fetchFromGitHub {
     owner = "orocos";
     repo = "orocos_kinematics_dynamics";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "15ky7vw461005axx96d0f4zxdnb9dxl3h082igyd68sbdb8r1419";
     # Needed to build Python bindings
     fetchSubmodules = true;

pkgs/by-name/or/orogene/package.nix

···
   src = fetchFromGitHub {
     owner = "orogene";
     repo = "orogene";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-GMWrlvZZ2xlcvcRG3u8jS8KiewHpyX0brNe4pmCpHbM=";
     fetchSubmodules = true;
   };

pkgs/by-name/os/osqp/package.nix

···
   src = fetchFromGitHub {
     owner = "oxfordcontrol";
     repo = "osqp";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-enkK5EFyAeLaUnHNYS3oq43HsHY5IuSLgsYP0k/GW8c=";
     fetchSubmodules = true;
   };

pkgs/by-name/os/ossia-score/package.nix

···
   src = fetchFromGitHub {
     owner = "ossia";
     repo = "score";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-khVWoHsxezQjU6O+OX7t1zuzLJpIVTim1rMswD7TaQU=";
     fetchSubmodules = true;
   };

pkgs/by-name/ow/owamp/package.nix

···
   src = fetchFromGitHub {
     owner = "perfsonar";
     repo = "owamp";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "5o85XSn84nOvNjIzlaZ2R6/TSHpKbWLXTO0FmqWsNMU=";
     fetchSubmodules = true;
   };

pkgs/by-name/p1/p11-kit/package.nix

···
   src = fetchFromGitHub {
     owner = "p11-glue";
     repo = "p11-kit";
-    rev = version;
+    tag = version;
     hash = "sha256-2xDUvXGsF8x42uezgnvOXLVUdNNHcaE042HDDEJeplc=";
     fetchSubmodules = true;
   };

pkgs/by-name/pa/pam_rssh/package.nix

···
   src = fetchFromGitHub {
     owner = "z4yx";
     repo = "pam_rssh";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-VxbaxqyIAwmjjbgfTajqwPQC3bp7g/JNVNx9yy/3tus=";
     fetchSubmodules = true;
   };

pkgs/by-name/pd/pdfcpu/package.nix

···
   src = fetchFromGitHub {
     owner = "pdfcpu";
     repo = "pdfcpu";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-HTqaFl/ug/4sdchZBD4VQiXbD1L0/DVf2efZ3BV/vx4=";
     # Apparently upstream requires that the compiled executable will know the
     # commit hash and the date of the commit. This information is also presented

pkgs/by-name/pd/pdfslicer/package.nix

···
   src = fetchFromGitHub {
     owner = "junrrein";
     repo = "pdfslicer";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     sha256 = "0sja0ddd9c8wjjpzk2ag8q1lxpj09adgmhd7wnsylincqnj2jyls";
   };

pkgs/by-name/pe/penguin-subtitle-player/package.nix

···
   src = fetchFromGitHub {
     owner = "carsonip";
     repo = "Penguin-Subtitle-Player";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-AhdShg/eWqF44W1r+KmcHzbGKF2TNSD/wPKj+x4oQkM=";
     fetchSubmodules = true;
   };

pkgs/by-name/pf/pff-tool/package.nix

···
+{
+  lib,
+  stdenv,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  libpff,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "pff-tools";
+  version = "0-unstable-2025-07-22";
+
+  src = fetchFromGitHub {
+    owner = "avranju";
+    repo = "pff-tools";
+    rev = "d8776cd45e62c82adbbcc04f2f636b569de057ca";
+    hash = "sha256-MDMrKaq/iz5WdLhh3rv2ODFdaMoaeFtacT8xmRf3Qec=";
+  };
+
+  cargoHash = "sha256-SL+FTuVkgq0ll8SH7FgVapvemarc7ci0KtoGG16zxCM=";
+
+  nativeBuildInputs = [
+    pkg-config
+    rustPlatform.bindgenHook
+  ];
+
+  buildInputs = [
+    libpff
+  ];
+
+  # Tests require a sample PST/OST file.
+  doCheck = false;
+
+  meta = {
+    description = "Command-line tools to process PFF files";
+    homepage = "https://github.com/avranju/pff-tools";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ d3vil0p3r ];
+    mainProgram = "pff-cli";
+  };
+})

pkgs/by-name/pi/picom/package.nix

···
   src = fetchFromGitHub {
     owner = "yshui";
     repo = "picom";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-H8IbzzrzF1c63MXbw5mqoll3H+vgcSVpijrlSDNkc+o=";
     fetchSubmodules = true;
   };

pkgs/by-name/pk/pkcs11-provider/package.nix

···
   src = fetchFromGitHub {
     owner = "latchset";
     repo = "pkcs11-provider";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-Q9dmzYDBco+LLVWdORFTjRyk0RX8qhmZ1m+Kgfeyr04=";
   };

pkgs/by-name/pm/pmix/package.nix

···
   src = fetchFromGitHub {
     repo = "openpmix";
     owner = "openpmix";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-qj/exBi1siCHY1QqNY+ad6n3XI4JZuwnM93Vp+rj1AQ=";
     fetchSubmodules = true;
   };

pkgs/by-name/pn/pngquant/package.nix

···
   src = fetchFromGitHub {
     owner = "kornelski";
     repo = "pngquant";
-    rev = version;
+    tag = version;
     hash = "sha256-u2zEp9Llo+c/+1QGW4V4r40KQn/ATHCTEsrpy7bRf/I=";
     fetchSubmodules = true;
   };

pkgs/by-name/po/pokeget-rs/package.nix

···
   src = fetchFromGitHub {
     owner = "talwat";
     repo = "pokeget-rs";
-    rev = version;
+    tag = version;
     hash = "sha256-EtEmaA0ukLoK0vaX+s3d8xodB3pUwSb1EyeyMBF0+rc=";
     fetchSubmodules = true;
   };

pkgs/by-name/po/polybar/package.nix

···
   src = fetchFromGitHub {
     owner = "polybar";
     repo = "polybar";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-5PYKl6Hi4EYEmUBwkV0rLiwxNqIyR5jwm495YnNs0gI=";
     fetchSubmodules = true;
   };

pkgs/by-name/po/polylux2pdfpc/package.nix

···
   src = fetchFromGitHub {
     owner = "polylux-typ";
     repo = "polylux";
-    rev = "v${version}";
+    tag = "v${version}";
     sparseCheckout = [ dirname ];
     hash = "sha256-41FgRejonvVTmE89WGm0Cqumm8lb6kkfxtkWV74UKJA=";
   };

pkgs/by-name/po/ponyc/package.nix

···
   src = fetchFromGitHub {
     owner = "ponylang";
     repo = "ponyc";
-    rev = version;
+    tag = version;
     hash = "sha256-4gDv8UWTk0RWVNC4PU70YKSK9fIMbWBsQbHboVls2BA=";
     fetchSubmodules = true;
   };

pkgs/by-name/po/poptracker/package.nix

···
   src = fetchFromGitHub {
     owner = "black-sliver";
     repo = "PopTracker";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-DFJfuDOzcVdiXLv5EzO5TL3UJLCZPM1bTZharp2ww5U=";
     fetchSubmodules = true;
   };

pkgs/by-name/pr/pragtical/package.nix

···
   src = fetchFromGitHub {
     owner = "pragtical";
     repo = "pragtical";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
 
     # also fetch required git submodules

pkgs/by-name/pr/prime-server/package.nix

···
   src = fetchFromGitHub {
     owner = "kevinkreiser";
     repo = "prime_server";
-    rev = version;
+    tag = version;
     sha256 = "0izmmvi3pvidhlrgfpg4ccblrw6fil3ddxg5cfxsz4qbh399x83w";
     fetchSubmodules = true;
   };

pkgs/by-name/pr/process-compose/package.nix

···
   src = fetchFromGitHub {
     owner = "F1bonacc1";
     repo = "process-compose";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-qv/fVfuQD7Nan5Nn1RkwXoGZuPYSRWQaojEn6MCF9BQ=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/pr/proteus/package.nix

···
   src = fetchFromGitHub {
     owner = "GuitarML";
     repo = "Proteus";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-WhJh+Sx64JYxQQ1LXpDUwXeodFU1EZ0TmMhn+6w0hQg=";
   };

pkgs/by-name/pr/protozero/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "protozero";
-  version = "1.8.0";
+  version = "1.8.1";
 
   src = fetchFromGitHub {
     owner = "mapbox";
     repo = "protozero";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kqR0YLxkRu8WclxaoR/zx+2sRTEZus7dUTbqjBkv12U=";
+    hash = "sha256-69GEAz6wSGMGozsWS9xmoTgyH8mTuDM9mUTCXfVI6f8=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/pr/prrte/package.nix

···
   src = fetchFromGitHub {
     owner = "openpmix";
     repo = "prrte";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-4JEh4N/38k0Xgp0CqnFipaEZlJBQr8nyxoncyz0/7yo=";
     fetchSubmodules = true;
   };

pkgs/by-name/pv/pvsneslib/package.nix

···
   src = fetchFromGitHub {
     owner = "alekmaul";
     repo = "pvsneslib";
-    rev = version;
+    tag = version;
     hash = "sha256-Cl4+WvjKbq5IPqf7ivVYwBYwDDWWHGNeq4nWXPxsUHw=";
     fetchSubmodules = true;
   };

pkgs/by-name/qc/qcm/package.nix

···
   src = fetchFromGitHub {
     owner = "hypengw";
     repo = "Qcm";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-41GsG+NKCMw+LuRUf31ilRso/SkKYVV3IrMSviOZdWs=";
   };

pkgs/by-name/qg/qgrep/package.nix

···
   src = fetchFromGitHub {
     owner = "zeux";
     repo = "qgrep";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-TeXOzfb1Nu6hz9l6dXGZY+xboscPapKm0Z264hv1Aww=";
   };

pkgs/by-name/qg/qgroundcontrol/package.nix

···
   src = fetchFromGitHub {
     owner = "mavlink";
     repo = "qgroundcontrol";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-wjrfwE97J+UzBPIARQ6cPadN6xIdqR8i+ZKbtiDproM=";
     fetchSubmodules = true;
   };

pkgs/by-name/qu/quadrafuzz/package.nix

···
   src = fetchFromGitHub {
     owner = "jpcima";
     repo = "quadrafuzz";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "1kjsf7il9krihwlrq08gk2xvil4b4q5zd87nnm103hby2w7ws7z1";
     fetchSubmodules = true;
   };

pkgs/by-name/qu/questdb/package.nix

···
 
     mkdir -p $out/bin $out/share/java
     cp questdb.sh $out/bin
+    cp env.sh $out/bin
+    cp print-hello.sh $out/bin
     cp questdb.jar $out/share/java
 
     ln -s $out/share/java/questdb.jar $out/bin

pkgs/by-name/ra/rapidyaml/package.nix

···
     owner = "biojppm";
     repo = "rapidyaml";
     fetchSubmodules = true;
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-+ENfflVjeesX14m0G71HdeSIECopZV4J2JL9+c+nbXE=";
   };
 

pkgs/by-name/ra/raycast/package.nix

···
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "raycast";
-  version = "1.102.0";
+  version = "1.102.3";
 
   src =
     {
       aarch64-darwin = fetchurl {
         name = "Raycast.dmg";
         url = "https://releases.raycast.com/releases/${finalAttrs.version}/download?build=arm";
-        hash = "sha256-f26Tf59ow7rJiL+2BRgDhbEpWB2z4JaRUsT9UMxKjV4=";
+        hash = "sha256-rb67RWmv4zJs4osGt/4D5XfV3ZT1YbwhHAhEqPrCxCk=";
       };
       x86_64-darwin = fetchurl {
         name = "Raycast.dmg";
         url = "https://releases.raycast.com/releases/${finalAttrs.version}/download?build=x86_64";
-        hash = "sha256-Ict34LSjpN1Ah/uOclRi0xQfO6oQgmP57K+12bIjW6k=";
+        hash = "sha256-1CCIrqDv7h0z/49X9UrObeWmyAz++XpMdZ58ilW4wIM=";
       };
     }
     .${stdenvNoCC.system} or (throw "raycast: ${stdenvNoCC.system} is unsupported.");

pkgs/by-name/rb/rbdoom-3-bfg/package.nix

···
   src = fetchFromGitHub {
     owner = "RobertBeckebans";
     repo = "rbdoom-3-bfg";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-9BZEFO+e5IG6hv9+QI9OJecQ84rLTWBDz4k0GU6SeDE=";
     fetchSubmodules = true;
   };

pkgs/by-name/re/re-isearch/0001-fix-JsonHitTable-undefined-reference.patch

···
-# fixes "undefined reference to `IDB::JsonHitTable(RESULT const&)" build failure
-
----
- src/idb.cxx | 26 --------------------------
- 1 file changed, 26 deletions(-)
-
-diff --git a/src/idb.cxx b/src/idb.cxx
-index 2469c06..753a9fb 100644
---- a/src/idb.cxx
-+++ b/src/idb.cxx
-@@ -5486,37 +5486,11 @@ STRING IDB::XMLHitTable(const RESULT& Result)
- }
- #endif
-
--#if 0
- STRING IDB::JsonHitTable(const RESULT& Result)
- {
--#if 1
-   message_log (LOG_FATAL, "JsonHitTable is not yet implemented");
-   return NulString;
--#else
--/*
--<folders>
--    <folder id="123" private="0" archived="0" order="1">Shopping</folder>
--</folders>
--
--is JSON
--
--{
--    "folders": {
--        "folder":{
--        "@": {
--            "id": "123",
--            "private": "0",
--            "archived": "0",
--            "order": "1"
--            },
--        "#": "Shopping"
--        }
--    }
--}
--*/
- }
--#endif
--#endif
-
-
- PIRSET IDB::SearchSmart(QUERY *Query, const STRING& DefaultField)
---
-2.47.2

pkgs/by-name/re/re-isearch/1001-Fix-resurcive-make-parallelism.patch

···
+From 9fc97ea817762e2575954cd31aa735b2cfec7a5e Mon Sep 17 00:00:00 2001
+From: OPNA2608 <[e-mail]>
+Date: Sun, 3 Aug 2025 19:08:30 +0200
+Subject: [PATCH] build/Makefile: Fix recursive make & parallelism
+
+- Recursively calling make should be done by using the special `MAKE` variable, which will preserve parallelism across calls
+- Don't hardcode parallelism in recursive make calls, inherit user-supplied ones instead
+---
+ build/Makefile | 18 +++++++++---------
+ 1 file changed, 9 insertions(+), 9 deletions(-)
+
+diff --git a/build/Makefile b/build/Makefile
+index 6633ebd..807bfd9 100644
+--- a/build/Makefile
++++ b/build/Makefile
+@@ -2,36 +2,36 @@ UNAME := $(shell uname)
+ 
+ all:
+ ifeq ($(UNAME), Darwin)
+-	make -j 5  -f Makefile.MacOS-OMP $(MFLAGS)  
++	$(MAKE) -f Makefile.MacOS-OMP $(MFLAGS)
+ endif
+ ifeq ($(UNAME), Linux)
+-	make -j 3  -f Makefile.ubuntu $(MFLAGS)
++	$(MAKE) -f Makefile.ubuntu $(MFLAGS)
+ endif
+ ifeq ($(UNAME), Solaris)
+-	make  -f Makefile.solaris $(MFLAGS)
++	$(MAKE) -f Makefile.solaris $(MFLAGS)
+ endif
+ 
+ install:
+ ifeq ($(UNAME), Darwin)
+-	make -j 5  -f Makefile.MacOS-OMP $(MFLAGS) install
++	$(MAKE) -f Makefile.MacOS-OMP $(MFLAGS) install
+ endif
+ ifeq ($(UNAME), Linux)
+-	make -j 3  -f Makefile.ubuntu $(MFLAGS) install
++	$(MAKE) -f Makefile.ubuntu $(MFLAGS) install
+ endif
+ ifeq ($(UNAME), Solaris)
+-	make  -f Makefile.solaris $(MFLAGS) install
++	$(MAKE) -f Makefile.solaris $(MFLAGS) install
+ endif
+ 
+ 
+ plugins:
+ ifeq ($(UNAME), Darwin)
+-	make -j 5 -f Makefile.MacOS $(MFLAGS) plugins
++	$(MAKE) -f Makefile.MacOS $(MFLAGS) plugins
+ endif
+ ifeq ($(UNAME), Linux)
+-	make -j 3  -f Makefile.ubuntu $(MFLAGS) plugins
++	$(MAKE) -f Makefile.ubuntu $(MFLAGS) plugins
+ endif
+ ifeq ($(UNAME), Solaris)
+-	make  -f Makefile.solaris $(MFLAGS) plugins
++	$(MAKE) -f Makefile.solaris $(MFLAGS) plugins
+ endif
+ 
+ 
+-- 
+2.50.1
+

pkgs/by-name/re/re-isearch/package.nix

···
 
 stdenv.mkDerivation {
   pname = "re-Isearch";
-  version = "2.20220925.4.0a-unstable-2025-03-16";
+  version = "2.20220925.4.0a-unstable-2025-05-15";
 
   src = fetchFromGitHub {
     owner = "re-Isearch";
     repo = "re-Isearch";
-    rev = "56e0dfbe7468881b3958ca8e630f41a5354e9873";
-    hash = "sha256-tI75D02/sFEkHDQX/BpDlu24WNP6Qh9G0MIfEvs8npM=";
+    rev = "35e939fd60948f112b668b06d2b8b75f2c7425d3";
+    hash = "sha256-r7KUwx2SrfnpSknGSpzw33Qwp63htoKknrnmdOgA/9Y=";
   };
 
-  # Upstream issue: https://github.com/re-Isearch/re-Isearch/issues/11
-  patches = [ ./0001-fix-JsonHitTable-undefined-reference.patch ];
+  patches = [
+    # https://github.com/re-Isearch/re-Isearch/pull/12
+    ./1001-Fix-resurcive-make-parallelism.patch
+  ];
 
   postPatch = ''
     # Fix gcc-13 build due to missing <cstdint> include.
+    # https://github.com/re-Isearch/re-Isearch/pull/13
     sed -e '1i #include <cstdint>' -i src/mmap.cxx
 
-    # g++: error: unrecognized command-line option '-msse2'
-    # gcc: error: unrecognized command-line option '-m64'
+    # These flags are not supported on all architectures
+    # https://github.com/re-Isearch/re-Isearch/issues/14
     substituteInPlace build/Makefile.ubuntu \
       --replace-fail "-msse2" "" \
       --replace-fail "-m64" ""
···
   ];
 
   makeFlags = [
-    "CC=g++"
-    "cc=gcc"
-    "LD=g++"
+    "CC=${stdenv.cc.targetPrefix}c++"
+    "cc=${stdenv.cc.targetPrefix}cc"
+    "LD=${stdenv.cc.targetPrefix}c++"
   ];
 
   preBuild = ''
     cd build
-    make clean # clean up pre-built objects in the source
     makeFlagsArray+=(
-      EXTRA_INC="-I${db.dev}/include -I${lib.getDev file}/include"
+      EXTRA_INC="-I${lib.getDev db}/include -I${lib.getDev file}/include"
       LD_PATH="-L../lib -L${db.out}/lib -L${file}/lib -L${libnsl}/lib"
     )
   '';
+
+  # Handwritten Makefiles, doesn't properly ensure that libraries are built before they're used in linking
+  # ld: cannot find -libUtils: No such file or directory
+  # ld: cannot find -libLocal: No such file or directory
+  enableParallelBuilding = false;
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/re/renode-unstable/package.nix

···
 renode.overrideAttrs (
   finalAttrs: _: {
     pname = "renode-unstable";
-    version = "1.15.3+20250720git2309db7fd";
+    version = "1.15.3+20250801git3f8169b88";
 
     src = fetchurl {
       url = "https://builds.renode.io/renode-${finalAttrs.version}.linux-dotnet.tar.gz";
-      hash = "sha256-pcgjT27cBlHzHnh4q9AsgVAVXshdvA0Tdo0dsq9rXP4=";
+      hash = "sha256-1GtLD69h0oYLXqs5n+0Vzc00WtK6mdPR9BkP4tjOmW8=";
     };
 
     passthru.updateScript =

pkgs/by-name/re/revive/package.nix

···
   src = fetchFromGitHub {
     owner = "mgechev";
     repo = "revive";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-89BlSc2tgxAJUGZM951fF+0H+SOsl0+xz/G18neRZxI=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/rh/rhvoice/package.nix

···
   src = fetchFromGitHub {
     owner = "RHVoice";
     repo = "RHVoice";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-4l4S4MUnVGN/El1BBuZvzPPcavUefjMyBk1hk0ux7zo=";
   };

pkgs/by-name/ri/ricochet-refresh/package.nix

···
   src = fetchFromGitHub {
     owner = "blueprint-freespeech";
     repo = "ricochet-refresh";
-    rev = "v${finalAttrs.version}-release";
+    tag = "v${finalAttrs.version}-release";
     fetchSubmodules = true;
     hash = "sha256-/IT3K3PL2fNl4P7xzItVnI8xJx5MmKxhw3ZEX9rN7j4=";
   };

pkgs/by-name/ri/rictydiminished-with-firacode/package.nix

···
   src = fetchFromGitHub {
     owner = "hakatashi";
     repo = "RictyDiminished-with-FiraCode";
-    rev = version;
+    tag = version;
     hash = "sha256-twh3yLAM4MUjWzSDNmo8gNIRf01hieXeOS334sNdFk4=";
     fetchSubmodules = true;
   };

pkgs/by-name/ri/rio/package.nix

···
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rio";
-  version = "0.2.23";
+  version = "0.2.24";
 
   src = fetchFromGitHub {
     owner = "raphamorim";
     repo = "rio";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-hhKlXuhv0PP8/xCIZ0lFGtCYCzOzH0gUeh48GdKpG6A=";
+    hash = "sha256-djKDi4ysRWtoMabJkEZ3jQ8hAE9JISi/ivjSFZmAwLY=";
   };
 
-  cargoHash = "sha256-+pfudGeWq4EARQDu+HAZczWlzStuzDPArMm1oCZGfKU=";
+  cargoHash = "sha256-cdMIbip5fjDHewh/HiYzb/3QVRXUH7OeRQO+zfuGw6Q=";
 
   nativeBuildInputs = [
     ncurses

pkgs/by-name/rm/rmw/package.nix

···
   src = fetchFromGitHub {
     owner = "theimpossibleastronaut";
     repo = "rmw";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-rfJdJHSkusZj/PN74KgV5i36YC0YRZmIfRdvkUNoKEM=";
     fetchSubmodules = true;
   };

pkgs/by-name/ro/rocksdb/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocksdb";
-  version = "10.2.1";
+  version = "10.4.2";
 
   src = fetchFromGitHub {
     owner = "facebook";
     repo = "rocksdb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-v8kZShgz0O3nHZwWjTvhcM56qAs/le1XgMVYyvVd4tg=";
+    hash = "sha256-mKh6zsmxsiUix4LX+npiytmKvLbo6WNA9y4Ns/EY+bE=";
   };
 
   patches = lib.optional (

pkgs/by-name/ro/rofi-file-browser/package.nix

···
   src = fetchFromGitHub {
     owner = "marvinkreis";
     repo = "rofi-file-browser-extended";
-    rev = version;
+    tag = version;
     hash = "sha256-UEFv0skFzWhgFkmz1h8uV1ygW977zNq1Dw8VAawqUgw=";
     fetchSubmodules = true;
   };

pkgs/by-name/rp/rpiboot/package.nix

···
   src = fetchFromGitHub {
     owner = "raspberrypi";
     repo = "usbboot";
-    rev = version;
+    tag = version;
     hash = "sha256-WccnaIUF5M080M4vg5NzBCLpLVcE7ts/oJJE8CLRi8A=";
     fetchSubmodules = true;
   };

pkgs/by-name/rt/rtags/package.nix

···
   src = fetchFromGitHub {
     owner = "andersbakken";
     repo = "rtags";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-EJ5pC53S36Uu7lM6KuLvLN6MAyrQW/Yk5kPqZNS5m8c=";
     fetchSubmodules = true;
     # unicode file names lead to different checksums on HFS+ vs. other

pkgs/by-name/ru/rubyfmt/package.nix

···
   src = fetchFromGitHub {
     owner = "fables-tales";
     repo = "rubyfmt";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-IIHPU6iwFwQ5cOAtOULpMSjexFtTelSd/LGLuazdmUo=";
     fetchSubmodules = true;
   };

pkgs/by-name/ru/rustdesk-server/package.nix

···
   src = fetchFromGitHub {
     owner = "rustdesk";
     repo = "rustdesk-server";
-    rev = version;
+    tag = version;
     hash = "sha256-5LRMey1cxmjLg1s9RtVwgPjHjwYLSQHa6Tyv7r/XEQs=";
     fetchSubmodules = true;
   };

pkgs/by-name/sa/sambamba/package.nix

···
   src = fetchFromGitHub {
     owner = "biod";
     repo = "sambamba";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-3O9bHGpMuCgdR2Wm7Dv1VUjMT1QTn8K1hdwgjvwhFDw=";
     fetchSubmodules = true;
   };

pkgs/by-name/sa/samtools/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "samtools";
-  version = "1.21";
+  version = "1.22.1";
 
   src = fetchurl {
     url = "https://github.com/samtools/samtools/releases/download/${version}/${pname}-${version}.tar.bz2";
-    hash = "sha256-BXJLCDprbwMF/K5SQ6BWzDbPgmMJw8uTR6a4nuP8Wto=";
+    hash = "sha256-Aqpc0LpS4GwggAVOBZ19d6iF3+lxfDHNid/npAR+2g4=";
   };
 
   # tests require `bgzip` from the htslib package

pkgs/by-name/sb/sby/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "sby";
-  version = "0.52";
+  version = "0.55";
 
   src = fetchFromGitHub {
     owner = "YosysHQ";
     repo = "sby";
     tag = "v${version}";
-    hash = "sha256-E/je1lHvYCpmRlwM17PWTQemSnz8azviKiz4t9z17UM=";
+    hash = "sha256-Q02CLx8GYu7Rnngd03kRGstYVOm8mBl7JsP0bYOFtDg=";
   };
 
   nativeCheckInputs = [

pkgs/by-name/sc/scipopt-papilo/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "scipopt-papilo";
-  version = "2.4.2";
+  version = "2.4.3";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
   scipVersion = "9.2.2";
···
     owner = "scipopt";
     repo = "papilo";
     tag = "v${version}";
-    hash = "sha256-/1AsAesUh/5YXeCU2OYopoG3SXAwAecPD88QvGkb2bY=";
+    hash = "sha256-SsRAwidqvisoDODBLRatVWFw7wGeLUavmPXSlPmD7d8=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/sc/scipopt-scip/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "scipopt-scip";
-  version = "9.2.2";
+  version = "9.2.3";
 
   src = fetchFromGitHub {
     owner = "scipopt";
     repo = "scip";
     tag = "v${lib.replaceStrings [ "." ] [ "" ] version}";
-    hash = "sha256-gxR308XrlmuUym/ujwGcD9a7Z+Z7vQNHaK4zO/PWPBQ=";
+    hash = "sha256-Zc1AXNpHQXXFO8jkMaJj6xYkmkQxAM8G+SiPiH9xCAw=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/sc/scotch/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "scotch";
-  version = "7.0.7";
+  version = "7.0.8";
 
   src = fetchFromGitLab {
     domain = "gitlab.inria.fr";
     owner = "scotch";
     repo = "scotch";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-hjxEJCV6/L/oJnonpN5zj0Asnh6d7j0We1T29G1dhmQ=";
+    hash = "sha256-AtpaBxgV9EamkAlvH9psp+K0o923EhSu6LQA89qyG3w=";
   };
 
   outputs = [

pkgs/by-name/se/seamly2d/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "seamly2d";
-  version = "2025.6.23.216";
+  version = "2025.7.21.216";
 
   src = fetchFromGitHub {
     owner = "FashionFreedom";
     repo = "Seamly2D";
     tag = "v${version}";
-    hash = "sha256-FcNSl+LXqxEMW8bY+WJCCnumRzBUMiP+Vj/VQ1EEmZo=";
+    hash = "sha256-rS+2dwRx5tZySfjSHOmr/PJxJntjcwbM9O99dCsMgnI=";
   };
 
   buildInputs = [

pkgs/by-name/se/searxng/package.nix

···
 python.pkgs.toPythonModule (
   python.pkgs.buildPythonApplication rec {
     pname = "searxng";
-    version = "0-unstable-2025-07-18";
+    version = "0-unstable-2025-08-03";
     pyproject = true;
 
     src = fetchFromGitHub {
       owner = "searxng";
       repo = "searxng";
-      rev = "ff2e0ea2788a04ae5a13fc90b3725828a1ebc026";
-      hash = "sha256-Pxpozg3ecqGzwUCXL9zYsCivr9VpCVSYc/kjZn+V4xk=";
+      rev = "2e62eb5d68d875c49e32229103a4fd75fe26c104";
+      hash = "sha256-UKGPkaG2agXZhEi2h8g2gXHHEDmDSzL/f9B+l5WZVvE=";
     };
 
     nativeBuildInputs = with python.pkgs; [ pythonRelaxDepsHook ];
···
         typer
         uvloop
         valkey
+        whitenoise
       ]
       ++ httpx.optional-dependencies.http2
       ++ httpx-socks.optional-dependencies.asyncio;

pkgs/by-name/se/securefs/package.nix

···
   src = fetchFromGitHub {
     owner = "netheril96";
     repo = "securefs";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-7xjGuN7jcLgfGkaBoSj+WsBpM806PPGzeBs7DnI+fwc=";
   };

pkgs/by-name/se/semantic-release/package.nix

···
 
 buildNpmPackage rec {
   pname = "semantic-release";
-  version = "24.2.5";
+  version = "24.2.7";
 
   src = fetchFromGitHub {
     owner = "semantic-release";
     repo = "semantic-release";
     rev = "v${version}";
-    hash = "sha256-WS3hd84vDSH/u7AxtkPL8E1UutUKHzARSzVYOHLlKPU=";
+    hash = "sha256-7BIEb4gQLppa+CXCR+oYPvb/l8UB6ihNh4veBdDG8ac=";
   };
 
-  npmDepsHash = "sha256-uQWQ+0Ub1piW/BATHrrWfzjv10/f2fyVL5JwDF1NdqM=";
+  npmDepsHash = "sha256-ODu8foiTtU7bsaVL/ri4eCwpcyg/7CdSGtyPsA/myxU=";
 
   dontNpmBuild = true;
 
···
     homepage = "https://semantic-release.gitbook.io/semantic-release/";
     license = lib.licenses.mit;
     maintainers = [ lib.maintainers.sestrella ];
+    # https://hydra.nixos.org/job/nixpkgs/trunk/semantic-release.aarch64-linux
+    badPlatforms = [ "aarch64-linux" ];
   };
 }

pkgs/by-name/se/serial-studio/package.nix

···
   src = fetchFromGitHub {
     owner = "Serial-Studio";
     repo = "Serial-Studio";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-q3RWy3HRs5NG0skFb7PSv8jK5pI5rtbccP8j38l8kjM=";
     fetchSubmodules = true;
   };

pkgs/by-name/sf/sfizz/gcc13.patch

···
-Submodule plugins/vst/external/VST_SDK/VST3_SDK/public.sdk contains modified content
-diff --git a/plugins/vst/external/VST_SDK/VST3_SDK/public.sdk/source/vst/utility/stringconvert.h b/plugins/vst/external/VST_SDK/VST3_SDK/public.sdk/source/vst/utility/stringconvert.h
-index ff910aa..f15ae78 100644
---- a/plugins/vst/external/VST_SDK/VST3_SDK/public.sdk/source/vst/utility/stringconvert.h
-+++ b/plugins/vst/external/VST_SDK/VST3_SDK/public.sdk/source/vst/utility/stringconvert.h
-@@ -37,6 +37,7 @@
- #pragma once
- 
- #include "pluginterfaces/vst/vsttypes.h"
-+#include <cstdint>
- #include <string>
- 
- //------------------------------------------------------------------------

pkgs/by-name/sf/sfizz/package.nix

···
   catch2,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "sfizz";
-  version = "1.2.1";
+  version = "1.2.3";
 
   src = fetchFromGitHub {
     owner = "sfztools";
     repo = "sfizz";
-    rev = version;
-    hash = "sha256-/G9tvJ4AcBSTmo44xDDKf6et1nSn/FV5m27ztDu10kI=";
+    tag = finalAttrs.version;
+    hash = "sha256-347olgxCyCRmKX0jxgBkYkoBuy9TMbsQgWOIoMppUAo=";
     fetchSubmodules = true;
   };
 
···
     freetype
     pango
   ];
+
   nativeBuildInputs = [
     cmake
     pkg-config
   ];
 
-  # Fix missing include
-  patches = [ ./gcc13.patch ];
-
-  postPatch = ''
-    cp ${catch2}/include/catch2/catch.hpp tests/catch2/catch.hpp
-
-    substituteInPlace plugins/editor/external/vstgui4/vstgui/lib/platform/linux/x11fileselector.cpp \
-      --replace 'zenitypath = "zenity"' 'zenitypath = "${zenity}/bin/zenity"'
-    substituteInPlace plugins/editor/src/editor/NativeHelpers.cpp \
-      --replace '/usr/bin/zenity' '${zenity}/bin/zenity'
-  '';
-
-  cmakeFlags = [ "-DSFIZZ_TESTS=ON" ];
+  cmakeFlags = [
+    (lib.cmakeBool "SFIZZ_TESTS" true)
+  ];
 
   doCheck = true;
 
-  meta = with lib; {
+  meta = {
     homepage = "https://github.com/sfztools/sfizz";
     description = "SFZ jack client and LV2 plugin";
-    license = licenses.bsd2;
-    maintainers = [ maintainers.magnetophon ];
-    platforms = platforms.all;
-    badPlatforms = platforms.darwin;
+    license = lib.licenses.bsd2;
+    maintainers = with lib.maintainers; [ magnetophon ];
+    platforms = lib.platforms.linux;
   };
-}
+})

pkgs/by-name/sh/shadered/package.nix

···
   src = fetchFromGitHub {
     owner = "dfranx";
     repo = "SHADERed";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     sha256 = "0drf8wwx0gcmi22jq2yyjy7ppxynfq172wqakchscm313j248fjr";
   };

pkgs/by-name/sh/shim-unsigned/package.nix

···
   src = fetchFromGitHub {
     owner = "rhboot";
     repo = "shim";
-    rev = version;
+    tag = version;
     hash = "sha256-KFpt//A4/T0FRBSPuTKQH/mEIqLVEiE+Lpvuq7ec6eo=";
     fetchSubmodules = true;
   };

pkgs/by-name/sh/shisho/package.nix

···
   src = fetchFromGitHub {
     owner = "flatt-security";
     repo = "shisho";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-G7sHaDq+F5lXNaF1sSLUecdjZbCejJE79P4AQifKdFY=";
     fetchSubmodules = true;
   };

pkgs/by-name/sh/show-midi/package.nix

···
   src = fetchFromGitHub {
     owner = "gbevin";
     repo = "ShowMIDI";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-jANrFZqJZZMTGyNa0sIthoQzaDMdLzpGZqHfxNw8hDg=";
     fetchSubmodules = true;
   };

pkgs/by-name/si/singular/package.nix

···
 
     # if a release is tagged (which sometimes does not happen), it will
     # be in the format below.
-    rev = "Release-${lib.replaceStrings [ "." ] [ "-" ] version}";
+    tag = "Release-${lib.replaceStrings [ "." ] [ "-" ] version}";
     hash = "sha256-vrRIirWQLbbe1l07AqqHK/StWo0egKuivdKT5R8Rx58=";
 
     # the repository's .gitattributes file contains the lines "/Tst/

pkgs/by-name/sn/snes9x/package.nix

···
   src = fetchFromGitHub {
     owner = "snes9xgit";
     repo = "snes9x";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-INMVyB3alwmsApO7ToAaUWgh7jlg2MeLxqHCEnUO88U=";
   };

pkgs/by-name/so/sonobus/package.nix

···
   src = fetchFromGitHub {
     owner = "sonosaurus";
     repo = "sonobus";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-NOdmHFKrV7lb8XbeG5GdLKYZ0c/vcz3fcqYj9JvE+/Q=";
     fetchSubmodules = true;
   };

pkgs/by-name/so/sony-headphones-client/package.nix

···
   src = fetchFromGitHub {
     owner = "Plutoberth";
     repo = "SonyHeadphonesClient";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-vhI97KheKzr87exCh4xNN7NDefcagdMu1tWSt67vLiU=";
     fetchSubmodules = true;
   };

pkgs/by-name/sp/space-station-14-launcher/package.nix

···
   src = fetchFromGitHub {
     owner = "space-wizards";
     repo = "SS14.Launcher";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-Es+DBwWh2QxCev+Aepi8ItTXSYIgNgb05zdScOBZNJs=";
     fetchSubmodules = true;
   };

pkgs/by-name/sp/spdk/package.nix

···
   src = fetchFromGitHub {
     owner = "spdk";
     repo = "spdk";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-27mbIycenOk51PLQrAfU1cZcjiWddNtxoyC6Q9wxqFg=";
     fetchSubmodules = true;
   };

pkgs/by-name/sp/spicy-parser-generator/package.nix

···
   src = fetchFromGitHub {
     owner = "zeek";
     repo = "spicy";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-+F7P8D70vN85pYyTOSMXgf1yWgPJHPpvP38rOyKTJ/A=";
     fetchSubmodules = true;
   };

pkgs/by-name/sq/sqlcheck/package.nix

···
   src = fetchFromGitHub {
     owner = "jarulraj";
     repo = "sqlcheck";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-rGqCtEO2K+OT44nYU93mF1bJ07id+ixPkRSC8DcO6rY=";
     fetchSubmodules = true;
   };

pkgs/by-name/sq/squawk/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "squawk";
-  version = "2.21.0";
+  version = "2.21.1";
 
   src = fetchFromGitHub {
     owner = "sbdchd";
     repo = "squawk";
     tag = "v${version}";
-    hash = "sha256-Za+d1o1fmD35yKtiK/SGWucOPeKowbrwzOHdBvAh1EE=";
+    hash = "sha256-Ox6UPy4EFN3WEpXYXx0SGVRcAY0zl0x7eCxKP/kS3qo=";
   };
 
-  cargoHash = "sha256-jSvcuBurw9HDnemm5133ElrDdTMHzlt+C5d99Kywk7w=";
+  cargoHash = "sha256-WRGz70lb1HwVOwi+un8h7PoDMlFrJbuFmw3q+JKkfZw=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/st/starboard/package.nix

···
   src = fetchFromGitHub {
     owner = "aquasecurity";
     repo = "starboard";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-yQ4ABzN8EvD5qs0yjTaihM145K79LglprC2nlqAw0XU=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.

pkgs/by-name/st/steamworks/1001-Add-missing-logger-methods.patch

···
+From 5f144d5d26ea0dd1754ed25a583ebafa01ecbb4b Mon Sep 17 00:00:00 2001
+From: OPNA2608 <[e-mail]>
+Date: Sun, 3 Aug 2025 20:06:49 +0200
+Subject: [PATCH] src/common/logger.h: Add missing methods under NDEBUG
+
+---
+ src/common/logger.h | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/src/common/logger.h b/src/common/logger.h
+index 0901205..259f058 100644
+--- a/src/common/logger.h
++++ b/src/common/logger.h
+@@ -81,6 +81,9 @@ public:
+ 	LoggerStream& getStream(int level) { return stream; }
+ 
+ 	void debug(...) {}
++	void warn(...) {}
++
++	bool isDebugEnabled() { return false; }
+ };
+ 
+ // Bogus level numbers; I don't know if these are compatible with
+-- 
+2.50.1
+

pkgs/by-name/st/steamworks/package.nix

···
   log4cpp,
   openldap,
   sqlite,
-  nix-update-script,
+  gitUpdater,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
···
     hash = "sha256-hD1nTyv/t7MQdopqivfSE0o4Qk1ymG8zQVg56lY+t9o=";
   };
 
-  # src/common/logger.h:254:63: error: 'uint8_t' does not name a type
+  patches = [
+    # https://gitlab.com/arpa2/steamworks/-/merge_requests/13
+    ./1001-Add-missing-logger-methods.patch
+  ];
+
   postPatch = ''
-    sed -i "38i #include <cstdint>" src/common/logger.h
+    # src/common/logger.h:254:63: error: 'uint8_t' does not name a type
+    # https://gitlab.com/arpa2/steamworks/-/merge_requests/11
+    sed -i "40i #include <cstdint>" src/common/logger.h
+
+    # ld: cannot find -lLog4cpp: No such file or directory
+    # https://gitlab.com/arpa2/steamworks/-/merge_requests/12
+    substituteInPlace src/common/CMakeLists.txt \
+      --replace-fail 'Catch2::Catch2 Log4cpp' 'Catch2::Catch2 Log4cpp::Log4cpp'
   '';
 
   strictDeps = true;
···
     sqlite
   ];
 
-  # Currently doesn't build in `Release` since a macro is messing with some code
-  # when building in `Release`.
-  cmakeBuildType = "Debug";
+  checkInputs = [
+    catch2
+  ];
 
-  passthru.updateScript = nix-update-script { };
+  doCheck = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
+
+  passthru.updateScript = gitUpdater {
+    rev-prefix = "v";
+  };
 
   meta = {
     description = "Configuration information distributed over LDAP in near realtime";

pkgs/by-name/st/stellar-core/package.nix

···
   src = fetchFromGitHub {
     owner = "stellar";
     repo = "stellar-core";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-lxBn/T01Tsa7tid3mRJUigUwv9d3BAPZhV9Mp1lywBU=";
     fetchSubmodules = true;
   };

pkgs/by-name/st/sticky-notes/package.nix

···
   src = fetchFromGitHub {
     owner = "vixalien";
     repo = "sticky";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-82Yxw8NSw82rxhuAgsdN2lCiQ/hli4tQiU6jCgGyp4U=";
     fetchSubmodules = true;
   };

pkgs/by-name/st/stochas/package.nix

···
   src = fetchFromGitHub {
     owner = "surge-synthesizer";
     repo = "stochas";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-Gp49cWvUkwz4xAq5sA1nUO+amRC39iWeUemQJyv6hTs=";
     fetchSubmodules = true;
   };

pkgs/by-name/su/subtitleedit/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "subtitleedit";
-  version = "4.0.12";
+  version = "4.0.13";
 
   src = fetchzip {
     url = "https://github.com/SubtitleEdit/subtitleedit/releases/download/${version}/SE${
       lib.replaceStrings [ "." ] [ "" ] version
     }.zip";
-    hash = "sha256-UlkFTsdssrjrPA0oOXJuSckEf1uMxh+POojfDX7NUu8=";
+    hash = "sha256-Oo/w+1cEQ3+Xoa9H9VrGCaLFWFI2ajdj9wn3Pk9WEUk=";
     stripRoot = false;
   };
 

pkgs/by-name/su/sumo/package.nix

···
   src = fetchFromGitHub {
     owner = "eclipse";
     repo = "sumo";
-    rev = "v${lib.replaceStrings [ "." ] [ "_" ] version}";
+    tag = "v${lib.replaceStrings [ "." ] [ "_" ] version}";
     hash = "sha256-yXXOCvlHAzGmNQeXyWQtmq1UdkQ6qt4L9noUii/voP4=";
     fetchSubmodules = true;
   };

pkgs/by-name/su/surge-XT/package.nix

···
   src = fetchFromGitHub {
     owner = "surge-synthesizer";
     repo = "surge";
-    rev = "release_xt_${version}";
+    tag = "release_xt_${version}";
     fetchSubmodules = true;
     hash = "sha256-4b0H3ZioiXFc4KCeQReobwQZJBl6Ep2/8JlRIwvq/hQ=";
   };

pkgs/by-name/su/sus-compiler/package.nix

···
   src = fetchFromGitHub {
     owner = "pc2";
     repo = "sus-compiler";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-dQef5TiOV33lnNl7XKl7TlCY0E2sEclehWOmy2uvISY=";
     fetchSubmodules = true;
   };

pkgs/by-name/sv/svaba/package.nix

···
   src = fetchFromGitHub {
     owner = "walaj";
     repo = "svaba";
-    rev = version;
+    tag = version;
     sha256 = "1vv5mc9z5d22kgdy7mm27ya5aahnqgkcrskdr2405058ikk9g8kp";
     fetchSubmodules = true;
   };

pkgs/by-name/sy/symfony-cli/package.nix

···
   src = fetchFromGitHub {
     owner = "symfony-cli";
     repo = "symfony-cli";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-xl8pKfAgaeEjtITMpp6urwPndIBXxSyYEcX0PpVK8nc=";
     leaveDotGit = true;
     postFetch = ''

pkgs/by-name/sy/syslogng/package.nix

···
   src = fetchFromGitHub {
     owner = "syslog-ng";
     repo = "syslog-ng";
-    rev = "syslog-ng-${finalAttrs.version}";
+    tag = "syslog-ng-${finalAttrs.version}";
     hash = "sha256-/hLrUwJhA0jesOl7gmWHfTVO2M7IG8QNPRzc/TIGTH4=";
     fetchSubmodules = true;
   };

pkgs/by-name/ta/taisei/package.nix

···
   src = fetchFromGitHub {
     owner = "taisei-project";
     repo = "taisei";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-rThLz8o6IYhIBUc0b1sAQi2aF28btajcM1ScTv+qn6c=";
     fetchSubmodules = true;
   };

pkgs/by-name/ta/tamatool/package.nix

···
   src = fetchFromGitHub {
     owner = "jcrona";
     repo = "tamatool";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-VDmpIBuMWg3TwfCf9J6/bi/DaWip6ESAQWvGh2SH+A8=";
     fetchSubmodules = true;
   };

pkgs/by-name/ta/tangram/package.nix

···
   src = fetchFromGitHub {
     owner = "sonnyp";
     repo = "Tangram";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-OtQN8Iigu92iKa7CAaslIpbS0bqJ9Vus++inrgV/eeM=";
     fetchSubmodules = true;
   };

pkgs/by-name/ta/tarantool/package.nix

···
   src = fetchFromGitHub {
     owner = "tarantool";
     repo = "tarantool";
-    rev = version;
+    tag = version;
     hash = "sha256-yCRU5IxC6gNS+O2KYtKWjFk35EHkBnnzWy5UnyuB9f4=";
     fetchSubmodules = true;
   };

pkgs/by-name/ta/taskwarrior2/package.nix

···
   src = fetchFromGitHub {
     owner = "GothenburgBitFactory";
     repo = "taskwarrior";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-0YveqiylXJi4cdDCfnPtwCVOJbQrZYsxnXES+9B4Yfw=";
     fetchSubmodules = true;
   };

pkgs/by-name/tc/tcpflow/package.nix

···
   src = fetchFromGitHub {
     owner = "simsong";
     repo = "tcpflow";
-    rev = "tcpflow-${version}";
+    tag = "tcpflow-${version}";
     sha256 = "0vbm097jhi5n8pg08ia1yhzc225zv9948blb76f4br739l9l22vq";
     fetchSubmodules = true;
   };

pkgs/by-name/te/tempo/package.nix

···
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "tempo";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-RzDOx2ZyA0ZntFD1ryfipsgPsxVmsdOusZ37RCnQQnM=";
   };

pkgs/by-name/te/tev/package.nix

···
   src = fetchFromGitHub {
     owner = "Tom94";
     repo = "tev";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-ke1T5nOrDoJilpfshAIAFWw/640Gm5OaxZ+ZakCevTs=";
   };

pkgs/by-name/th/themix-gui/package.nix

···
   src = fetchFromGitHub {
     owner = "themix-project";
     repo = "themix-gui";
-    rev = version;
+    tag = version;
     hash = "sha256-xFtwNx1c7Atb+9yorZhs/uVkkoxbZiELJ0SZ88L7KMs=";
     fetchSubmodules = true;
   };

pkgs/by-name/ti/tiledb/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "tiledb";
-  version = "2.28.0";
+  version = "2.28.1";
 
   src = fetchFromGitHub {
     owner = "TileDB-Inc";
     repo = "TileDB";
     tag = version;
-    hash = "sha256-jNKnc8IPkXDxRUY9QJ+35qt2na1nO6RPeCVWBLb7lME=";
+    hash = "sha256-Cs3Lr8I/Mu02x78d7IySG0XX4u/VAjBs4p4b00XDT5k=";
   };
 
   patches = lib.optionals stdenv.hostPlatform.isDarwin [ ./generate_embedded_data_header.patch ];

pkgs/by-name/ti/timewarrior/package.nix

···
   src = fetchFromGitHub {
     owner = "GothenburgBitFactory";
     repo = "timewarrior";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-6WZ5k9cxWe+eS9me700ITq0rKEiIuDhTtmuzhOnUM4k=";
     fetchSubmodules = true;
   };

pkgs/by-name/ti/tinty/package.nix

···
   nix-update-script,
 }:
 let
-  version = "0.27.0";
+  version = "0.28.0";
 in
 rustPlatform.buildRustPackage {
   pname = "tinty";
···
     owner = "tinted-theming";
     repo = "tinty";
     tag = "v${version}";
-    hash = "sha256-3gJRVKkC3B+DVfVmvlRjBdp6cD5x5wZMX3p4PWVIjno=";
+    hash = "sha256-9bMqB2TkLj/FjHpaHoOWZihKOvUAwCT5leyua70GEhg=";
   };
 
-  cargoHash = "sha256-CJcPhUxClxk2SQAbAt1hzX7QbAhpXQCEc4xy1ADkAtk=";
+  cargoHash = "sha256-q0JPho+WSg4gDrfs+RevnJnQ3vdQ67uLPx7Afdidmu0=";
 
   # Pretty much all tests require internet access
   doCheck = false;

pkgs/by-name/ti/tinyfecvpn/package.nix

···
   src = fetchFromGitHub {
     owner = "wangyu-";
     repo = "tinyfecvpn";
-    rev = version;
+    tag = version;
     hash = "sha256-g4dduREH64TDK3Y2PKc5RZiISW4h2ALRh8vQK7jvCZU=";
     fetchSubmodules = true;
   };

pkgs/by-name/ti/tinygo/package.nix

···
   src = fetchFromGitHub {
     owner = "tinygo-org";
     repo = "tinygo";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-I/9JXjt6aF/80Mh3iRgUYXv4l+m3XIpmKsIBviOuWCo=";
     fetchSubmodules = true;
     # The public hydra server on `hydra.nixos.org` is configured with

pkgs/by-name/tl/tlock/package.nix

···
   src = fetchFromGitHub {
     owner = "eklairs";
     repo = "tlock";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-O6erxzanSO5BjMnSSmn89w9SA+xyHhp0SSDkCk5hp8Y=";
     fetchSubmodules = true;
   };

pkgs/by-name/tp/tpnote/package.nix

···
   oniguruma,
   installShellFiles,
   tpnote,
-  testers,
+  versionCheckHook,
+  nix-update-script,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tpnote";
   version = "1.25.14";
 
   src = fetchFromGitHub {
     owner = "getreu";
     repo = "tp-note";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-CgC4aLg1GdqDXzuWfV4i5C4//I3GJ2RJa0y3oFOM0II=";
   };
 
···
 
   RUSTONIG_SYSTEM_LIBONIG = true;
 
-  passthru.tests.version = testers.testVersion { package = tpnote; };
-
   # The `tpnote` crate has no unit tests. All tests are in `tpnote-lib`.
   checkType = "debug";
   cargoTestFlags = "--package tpnote-lib";
   doCheck = true;
 
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
   meta = {
-    changelog = "https://github.com/getreu/tp-note/releases/tag/v${version}";
+    changelog = "https://github.com/getreu/tp-note/releases/tag/v${finalAttrs.version}";
     description = "Markup enhanced granular note-taking";
     homepage = "https://blog.getreu.net/projects/tp-note/";
     license = lib.licenses.mit;
     mainProgram = "tpnote";
     maintainers = with lib.maintainers; [ getreu ];
   };
-}
+})

pkgs/by-name/tr/tracebox/package.nix

···
   src = fetchFromGitHub {
     owner = "tracebox";
     repo = "tracebox";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-1KBJ4uXa1XpzEw23IjndZg+aGJXk3PVw8LYKAvxbxCA=";
     fetchSubmodules = true;
   };

pkgs/by-name/tr/trackma/package.nix

···
   src = fetchFromGitHub {
     owner = "z411";
     repo = "trackma";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "Hov9qdVabu1k3SIoUmvcRtSK8TcETqGPXI2RqN/bei4=";
     fetchSubmodules = true; # for anime-relations submodule
   };

pkgs/by-name/tr/transmission_3/package.nix

···
   src = fetchFromGitHub {
     owner = "transmission";
     repo = "transmission";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-n4iEDt9AstDZPZXN47p13brNLbNWS3BTB+A4UuoEjzE=";
     fetchSubmodules = true;
   };

pkgs/by-name/tr/trealla/package.nix

···
 ];
 stdenv.mkDerivation (finalAttrs: {
   pname = "trealla";
-  version = "2.78.24";
+  version = "2.79.2";
 
   src = fetchFromGitHub {
     owner = "trealla-prolog";
     repo = "trealla";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-0OCb/U09b7DNd3bOEszuVH7gA0cRVqoWS7/HRZRFCIs=";
+    hash = "sha256-ZbGxluQQi308UN4cdc7kRZq3Vbh+Deh3oUeViefIHX4=";
   };
 
   postPatch = ''

pkgs/by-name/tr/trexio/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "trexio";
-  version = "2.5.0";
+  version = "2.6.0";
 
   src = fetchFromGitHub {
     owner = "TREX-CoE";
     repo = "trexio";
     rev = "v${version}";
-    hash = "sha256-KP8tpwBr/ymjcXmCssdn+Xti0UKgazJSGTgVpvE+CiM=";
+    hash = "sha256-mTn/46oIvBbv7X0QwDxXQJH3QyH34u487QpLferC2Uc=";
   };
 
   postPatch = ''

pkgs/by-name/tr/trezord/package.nix

···
   src = fetchFromGitHub {
     owner = "trezor";
     repo = "trezord-go";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-3I6NOzDMhzRyVSOURl7TjJ1Z0P0RcKrSs5rNaZ0Ho9M=";
   };

pkgs/by-name/tv/tvm/package.nix

···
   src = fetchFromGitHub {
     owner = "apache";
     repo = "incubator-tvm";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-/5IpOraFTgg6sQ1TLHoepq/C8VHKg5BXKrNMBSyYajA=";
   };

pkgs/by-name/ty/typstyle/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "typstyle";
-  version = "0.13.16";
+  version = "0.13.17";
 
   src = fetchFromGitHub {
     owner = "typstyle-rs";
     repo = "typstyle";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dfw1jyPNZ0LDEZ+pbJt9DWKa4aBlFCAZIgKrZK+AmJw=";
+    hash = "sha256-JsRMs6ARiXs/S/ybkzNo4giR3BvGbOm8X/UH08kvznU=";
   };
 
-  cargoHash = "sha256-Eg8i+vsBp0BuxxBWXZisVKiGge25UKfxoK/3Knk+LsU=";
+  cargoHash = "sha256-G7X5FoWHEWFoLqfHmbuSylG7/xp4aXrSugnGc20oZcE=";
 
   # Disabling tests requiring network access
   checkFlags = [

pkgs/by-name/um/umpire/package.nix

···
   src = fetchFromGitHub {
     owner = "LLNL";
     repo = "umpire";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-MHvJRXAMV64GxGgCJjQPlaNyxVjBvyQXogbla9UMFL8=";
     fetchSubmodules = true;
   };

pkgs/by-name/un/unvanquished/package.nix

···
   src = fetchFromGitHub {
     owner = "Unvanquished";
     repo = "Unvanquished";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-wOFSPPEu7AGsEcqHG7xFWzFlYZRWAIvvfTj5FLZ3HFc=";
   };

pkgs/by-name/ur/ursadb/package.nix

···
   src = fetchFromGitHub {
     owner = "CERT-Polska";
     repo = "ursadb";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-UVfOImngYPB8UBQHzxwJM+dT3DWiT+7V+QGfUggjazI=";
     fetchSubmodules = true;
   };

pkgs/by-name/ut/utf8cpp/package.nix

···
   src = fetchFromGitHub {
     owner = "nemtrif";
     repo = "utfcpp";
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-e8qH4eygLnQw7B8x+HN+vH8cr8fkxnTFz+PKtFJ8dGE=";
   };

pkgs/by-name/ut/utox/package.nix

···
   src = fetchFromGitHub {
     owner = "uTox";
     repo = "uTox";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-DxnolxUTn+CL6TbZHKLHOUMTHhtTSWufzzOTRpKjOwc=";
     fetchSubmodules = true;
   };

pkgs/by-name/uu/uuu/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "uuu";
-  version = "1.5.201";
+  version = "1.5.219";
 
   src = fetchFromGitHub {
     owner = "nxp-imx";
     repo = "mfgtools";
     rev = "uuu_${finalAttrs.version}";
-    hash = "sha256-G1Let5cJVzxKLs+4umnGfcSEvTeotqsgpZ0CDycBNEo=";
+    hash = "sha256-hiRKW97PBU6bIXnS/D1oPaSLpY8Z/wm+m8Pp/4RCVQM=";
   };
 
   passthru.updateScript = nix-update-script {

pkgs/by-name/vc/vcpkg/package.nix

···
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "vcpkg";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-ZJu3dFsKc7L2THgGXNtBszXUbEEoM3bnLxtf5x5UPTM=";
     leaveDotGit = true;
     postFetch = ''

pkgs/by-name/ve/vencord/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "vencord";
-  version = "1.12.7";
+  version = "1.12.9";
 
   src = fetchFromGitHub {
     owner = "Vendicated";
     repo = "Vencord";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-MS88KCH8ZdLyKoR0K45CSJutZSKUhz4FAE2VtrSx0ic=";
+    hash = "sha256-dvQM4xHRcHLRxEh3+V2LKBPv+Es6T1CTbD9/oY912Ys=";
   };
 
   pnpmDeps = pnpm_10.fetchDeps {

pkgs/by-name/ve/veryl/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "veryl";
-  version = "0.16.2";
+  version = "0.16.3";
 
   src = fetchFromGitHub {
     owner = "veryl-lang";
     repo = "veryl";
     rev = "v${version}";
-    hash = "sha256-YMJUxeCc9b7EObkQHTkP34JCYVFYhh6aUp4fLBQINP0=";
+    hash = "sha256-oAA9EG06MTd88oiW93qIpnzjTWV2SoIDec/SLzI0ouQ=";
     fetchSubmodules = true;
   };
 
-  cargoHash = "sha256-2+3UlnIZIRJv+pZhFa8NU+S6/D5eHhuYZ095HUygPSk=";
+  cargoHash = "sha256-TtK8qGlioJ0yOrLhe2kQ/DrQmnz9wDJjRMS1r24HLE4=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/vi/violet/package.nix

···
   src = fetchFromGitHub {
     owner = "paullouisageneau";
     repo = "violet";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-OBrEydVqhbxJZED8mUjV605kvtbXPqb35X1XeNBNvjg=";
     fetchSubmodules = true;
   };

pkgs/by-name/vn/vnote/package.nix

···
   src = fetchFromGitHub {
     owner = "vnotex";
     repo = "vnote";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-40k0wSqRdwlUqrbb9mDK0dqsSEqCfbNLt+cUKeky+do=";
   };

pkgs/by-name/vo/volk/package.nix

···
   src = fetchFromGitHub {
     owner = "gnuradio";
     repo = "volk";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-R1FT5sbl0fAAl6YIX5aD5CiQ/AjZkCSDPPQPiuy4WBY=";
     fetchSubmodules = true;
   };

pkgs/by-name/vo/volk_2/package.nix

···
   src = fetchFromGitHub {
     owner = "gnuradio";
     repo = "volk";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-XvX6emv30bSB29EFm6aC+j8NGOxWqHCNv0Hxtdrq/jc=";
     fetchSubmodules = true;
   };

pkgs/by-name/vu/vue-language-server/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "vue-language-server";
-  version = "3.0.1";
+  version = "3.0.4";
 
   src = fetchFromGitHub {
     owner = "vuejs";
     repo = "language-tools";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-VPN4XWZDT44GwUZNih9sH2AiOKr8800B748DRoZ6hWc=";
+    hash = "sha256-vWnJ3Qaa1dcXmQ+PTvbuK6lpgqR7J/Z0UrsPr2pD8Q4=";
   };
 
   pnpmDeps = pnpm.fetchDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 1;
-    hash = "sha256-X34wBcLHhCkpr6oFrUE33X8EjUjdSpV5TZQPYbMzRDs=";
+    hash = "sha256-UlIAW0m8Y3he8uDd73pXufk4r4PAXWFPDYFvRa2Fw4Y=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/vu/vuetorrent/package.nix

···
 
 buildNpmPackage rec {
   pname = "vuetorrent";
-  version = "2.27.0";
+  version = "2.28.1";
 
   src = fetchFromGitHub {
     owner = "VueTorrent";
     repo = "VueTorrent";
     tag = "v${version}";
-    hash = "sha256-0yzxlXyA8wEY6oixjhXFBZ+FL5vFbK6OiLSt5/bv0e4=";
+    hash = "sha256-YIhZREiHFRYgPvI0DVMHaD4TU7mQyigEDUwOaNheqdw=";
   };
 
-  npmDepsHash = "sha256-7tcLXKpqF4LMuLCcjfVSZUipdrjQiiTS2R5XmLVxv2o=";
+  npmDepsHash = "sha256-VS6cjwKsNo0TNEF/71u2PTb2ZhSz5AG9YVh/FTIopzg=";
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/wa/waagent/package.nix

···
 in
 python.pkgs.buildPythonApplication rec {
   pname = "waagent";
-  version = "2.14.0.0";
+  version = "2.14.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Azure";
     repo = "WALinuxAgent";
-    tag = "pre-v${version}";
-    hash = "sha256-nJZXyqdsSQgW+nGqyTS9XSW4z5mGRHtCYsDHKDw/eiM=";
+    tag = "v${version}";
+    hash = "sha256-1q/buJSVaxu2ZTpDAw5slgQIJ0pih2i6nA42hgKqJ5I=";
   };
   patches = [
     # Suppress the following error when waagent tries to configure sshd:

pkgs/by-name/wa/wabt/package.nix

···
   src = fetchFromGitHub {
     owner = "WebAssembly";
     repo = "wabt";
-    rev = version;
+    tag = version;
     hash = "sha256-Ejr+FxaYRDI01apHhKTs11iwcv72a8ZxyPmVetEvadU=";
     fetchSubmodules = true;
   };

pkgs/by-name/wa/wasm-tools/package.nix

···
   src = fetchFromGitHub {
     owner = "bytecodealliance";
     repo = "wasm-tools";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-SrWmoDSz2/qSiex46CeDIgarjgGRp2KOThGP4YjglZY=";
     fetchSubmodules = true;
   };

pkgs/by-name/wa/watchyourlan/package.nix

···
 
 buildGoModule rec {
   pname = "watchyourlan";
-  version = "2.1.2";
+  version = "2.1.3";
 
   src = fetchFromGitHub {
     owner = "aceberg";
     repo = "WatchYourLAN";
     tag = version;
-    hash = "sha256-BI/Ydp7YswgdhwaptmqohwCw1gvRefFF9cz3Bjc2cnA=";
+    hash = "sha256-TFqBuJHoHKJ/ftorgNG9JpiOrjSmqw+tHhaOYzoTeUM=";
   };
 
-  vendorHash = "sha256-NUv90wq3nFHDtfk3BitwJ3ZfciPESUIDzS5S/6zafEQ=";
+  vendorHash = "sha256-3HxpKahFa8keM9wbNJ3anEBMCoEphaj5rOhydajtnY0=";
 
   ldflags = [
     "-s"

pkgs/by-name/wa/waydroid-helper/package.nix

···
 {
   lib,
+  python3Packages,
   fetchFromGitHub,
-  nix-update-script,
+  appstream,
+  cmake,
   desktop-file-utils,
-  libadwaita,
+  glib,
+  gobject-introspection,
   meson,
   ninja,
   pkg-config,
   wrapGAppsHook4,
-  libxml2,
-  python3Packages,
-  appstream,
-  glib,
-  cmake,
+  bash,
+  bindfs,
   dbus,
-  systemd,
-  bash,
+  e2fsprogs,
   fakeroot,
-  gobject-introspection,
+  fuse,
+  libadwaita,
+  libxml2,
+  systemd,
+  unzip,
+  nix-update-script,
 }:
 
-python3Packages.buildPythonApplication rec {
-  pname = "waydroid-helper";
-  version = "0.1.2";
-  pyproject = false; # uses meson
+let
+  version = "0.2.3";
 
   src = fetchFromGitHub {
     owner = "ayasa520";
     repo = "waydroid-helper";
     tag = "v${version}";
-    hash = "sha256-dYduO5Wi8Ia/pR1xQKPhC6Ek/1Q9fm2RaVuhm9KYiU0=";
+    hash = "sha256-QxtCxujf7S3YRx/4rRMecFBomP+9tqrIBdYhc3WQT20=";
   };
+in
+python3Packages.buildPythonApplication {
+  pname = "waydroid-helper";
+  inherit version src;
+  pyproject = false; # uses meson
 
   postPatch = ''
     substituteInPlace dbus/meson.build \
···
       --replace-fail "dbus_service_dir," "'$out/share/dbus-1/system-services',"
     substituteInPlace systemd/meson.build \
       --replace-fail ": systemd_system_unit_dir" ": '$out/lib/systemd/system'" \
-      --replace-fail ": systemd_user_unit_dir" ": '$out/lib/sysusers.d'"
-    # com.jaoushingan.WaydroidHelper.desktop: component-name-missing, description-first-para-too-short
-    # url-homepage-missing, desktop-app-launchable-omitted, content-rating-missing, developer-info-missing
+      --replace-fail ": systemd_user_unit_dir" ": '$out/lib/systemd/user'"
+    substituteInPlace systemd/{system/waydroid-mount,user/waydroid-monitor}.service \
+      --replace-fail "/usr/bin/waydroid-helper" "$out/bin/waydroid-helper"
+  ''
+  # com.jaoushingan.WaydroidHelper.desktop: component-name-missing, description-first-para-too-short
+  # url-homepage-missing, desktop-app-launchable-omitted, content-rating-missing, developer-info-missing
+  + ''
     sed -i '/test(/{N;/Validate appstream file/!b;:a;N;/)/!ba;d}' data/meson.build
   '';
 
   nativeBuildInputs = [
     appstream
+    cmake
+    desktop-file-utils
     glib
-    cmake
+    gobject-introspection
     meson
     ninja
     pkg-config
     wrapGAppsHook4
-    desktop-file-utils
-    gobject-introspection
   ];
 
   buildInputs = [
-    libxml2
+    bash
+    dbus
     libadwaita
-    dbus
-    bash
+    libxml2
     systemd
   ];
 
   dontUseCmakeConfigure = true;
 
   dependencies = with python3Packages; [
-    pygobject3
+    aiofiles
+    dbus-python
     httpx
+    pygobject3
     pyyaml
-    aiofiles
-    dbus-python
   ];
 
   strictDeps = true;
···
 
   makeWrapperArgs = [
     "\${gappsWrapperArgs[@]}"
-    "--prefix PATH : ${lib.makeBinPath [ fakeroot ]}"
+    "--prefix PATH : ${
+      lib.makeBinPath [
+        bindfs
+        e2fsprogs
+        fakeroot
+        fuse
+        unzip
+      ]
+    }"
   ];
 
   postInstallCheck = ''
···
   passthru.updateScript = nix-update-script { };
 
   meta = {
-    description = "Provides a user-friendly way to configure Waydroid and install extensions";
-    homepage = "https://github.com/ayasa520/waydroid-helper";
     changelog = "https://github.com/ayasa520/waydroid-helper/releases/tag/${src.tag}";
-    mainProgram = "waydroid-helper";
-    platforms = lib.platforms.linux;
+    description = "User-friendly way to configure Waydroid and install extensions, including Magisk and ARM translation";
+    homepage = "https://github.com/ayasa520/waydroid-helper";
     license = with lib.licenses; [ gpl3Plus ];
+    mainProgram = "waydroid-helper";
     maintainers = with lib.maintainers; [ ];
+    platforms = lib.platforms.linux;
   };
 }

pkgs/by-name/wa/wayland-bongocat/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "wayland-bongocat";
-  version = "1.2.2";
+  version = "1.2.3";
   src = fetchFromGitHub {
     owner = "saatvik333";
     repo = "wayland-bongocat";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-7IsWg0VE6Sqo0elOAUicmWGasXrvBeGeBRP/mDVgfzI=";
+    hash = "sha256-XCjOusgvTkEiID55MxP2ppVtKiDz5XAF1kSCIAXN3DQ=";
   };
 
   # Package dependencies

pkgs/by-name/wi/wiliwili/package.nix

···
   src = fetchFromGitHub {
     owner = "xfangfang";
     repo = "wiliwili";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-37DQafP+PFjrfNXJt88oK0ghqQEVQjDdVbYsf1tHAN4=";
   };

pkgs/by-name/wi/wineasio/package.nix

···
   src = fetchFromGitHub {
     owner = "wineasio";
     repo = "wineasio";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-d5BGJAkaM5XZXyqm6K/UzFE4sD6QVHHGnLi1bcHxiaM=";
     fetchSubmodules = true;
   };

pkgs/by-name/wo/wolf-shaper/package.nix

···
   src = fetchFromGitHub {
     owner = "wolf-plugins";
     repo = "wolf-shaper";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-4oi1wnex6eNRHUWXZHnvrmqp4veFuPJqD0YuOhDepg4=";
     fetchSubmodules = true;
   };

pkgs/by-name/wx/wxGTK31/package.nix

···
   src = fetchFromGitHub {
     owner = "wxWidgets";
     repo = "wxWidgets";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-9qYPatpTT28H+fz77o7/Y3YVmiK0OCsiQT5QAYe93M0=";
     fetchSubmodules = true;
   };

pkgs/by-name/wx/wxformbuilder/package.nix

···
   src = fetchFromGitHub {
     owner = "wxFormBuilder";
     repo = "wxFormBuilder";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     leaveDotGit = true;
     postFetch = ''

pkgs/by-name/x4/x42-avldrums/package.nix

···
   src = fetchFromGitHub {
     owner = "x42";
     repo = "avldrums.lv2";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-AZKHjzgw0TtLHh4TF+yOUSa+GlNVwyHCpJWAZikXTy4=";
     fetchSubmodules = true;
   };

pkgs/by-name/xe/xemu/package.nix

···
   src = fetchFromGitHub {
     owner = "xemu-project";
     repo = "xemu";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
     hash = "sha256-lTZ5j5ULh4GFW4zlQy4l7e4zr8TEIvenGNC59O6G0Wg=";
   };

pkgs/by-name/xg/xgboost/package.nix

···
   src = fetchFromGitHub {
     owner = "dmlc";
     repo = pnameBase;
-    rev = "v${version}";
+    tag = "v${version}";
     fetchSubmodules = true;
     hash = "sha256-8mj8uw7bbwhRaL0JZf9L9//a+Re2AwbL0e7Oiw/BqIA=";
   };

pkgs/by-name/xk/xkb-switch-i3/package.nix

···
   src = fetchFromGitHub {
     owner = "Zebradil";
     repo = "xkb-switch-i3";
-    rev = version;
+    tag = version;
     hash = "sha256-5d1DdRtz0QCWISSsWQt9xgTOekYUCkhfMsjG+/kyQK4=";
     fetchSubmodules = true;
   };

pkgs/by-name/xp/xpano/package.nix

···
   src = fetchFromGitHub {
     owner = "krupkat";
     repo = "xpano";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "sha256-f2qoBpZ5lPBocPas8KMsY5bSYL20gO+ZHLz2R66qSig=";
     fetchSubmodules = true;
   };

pkgs/by-name/xs/xstow/package.nix

···
   src = fetchFromGitHub {
     owner = "majorkingleo";
     repo = "xstow";
-    rev = version;
+    tag = version;
     fetchSubmodules = true;
     hash = "sha256-c89+thw5N3Cgl1Ww+W7c3YsyhNJMLlreedvdWJFY3WY=";
   };

pkgs/by-name/xt/xtuner/package.nix

···
   src = fetchFromGitHub {
     owner = "brummer10";
     repo = "XTuner";
-    rev = "v${version}";
+    tag = "v${version}";
     sha256 = "1i5chfnf3hcivwzni9z6cn9pb68qmwsx8bf4z7d29a5vig8kbhrv";
     fetchSubmodules = true;
   };

pkgs/by-name/yo/youtube-tui/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "youtube-tui";
-  version = "0.8.3";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "Siriusmart";
     repo = "youtube-tui";
     tag = "v${version}";
-    hash = "sha256-pt/lKvNDd3gji2+Ubd/ARiuV5MvdSxMfzJubACXTcUc=";
+    hash = "sha256-svZoE7WuBlehYVRRn8S0rR2/5j87DLreqARmfLyHdLg=";
   };
 
-  cargoHash = "sha256-JbG+fYyHC6Li4kuNjQRS7gxU7nLADMEqTZQEBRAASjM=";
+  cargoHash = "sha256-cFee80E/XI4EI5EW8gfB4OOCltJaPS4asE0AXTAGv/k=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/za/zam-plugins/package.nix

···
   src = fetchFromGitHub {
     owner = "zamaudio";
     repo = "zam-plugins";
-    rev = version;
+    tag = version;
     hash = "sha256-pjnhDavKnyQjPF4nUO+j1J+Qtw8yIYMY9A5zBMb4zFU=";
     fetchSubmodules = true;
   };

pkgs/by-name/zi/zimfw/package.nix

···
   src = fetchFromGitHub {
     owner = "zimfw";
     repo = "zimfw";
-    rev = "v${version}";
+    tag = "v${version}";
     ## zim only needs this one file to be installed.
     sparseCheckout = [ "zimfw.zsh" ];
     hash = "sha256-qQViaQOpLp8F4zvJETbNp0lxpdVhM1Meg7WcMKkjJRQ=";

pkgs/by-name/zl/zls/package.nix

···
   src = fetchFromGitHub {
     owner = "zigtools";
     repo = "zls";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     fetchSubmodules = true;
     hash = "sha256-A5Mn+mfIefOsX+eNBRHrDVkqFDVrD3iXDNsUL4TPhKo=";
   };

pkgs/by-name/zo/zoneminder/package.nix

···
   src = fetchFromGitHub {
     owner = "ZoneMinder";
     repo = "zoneminder";
-    rev = version;
+    tag = version;
     hash = "sha256-0mpT3qjF8zlcsd6OlNIvrabDsz+oJPPy9Vn2TQSuHAI=";
     fetchSubmodules = true;
   };

pkgs/by-name/zp/zpaqfranz/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "zpaqfranz";
-  version = "62.2";
+  version = "62.4";
 
   src = fetchFromGitHub {
     owner = "fcorbelli";
     repo = "zpaqfranz";
     rev = finalAttrs.version;
-    hash = "sha256-brTlBvJ6MQY7kPbdUuNrSuYZUtwhkNfu+SDoNJqyZ9o=";
+    hash = "sha256-bRYXQ+w4gLDsMeknmTMhbdzjf/PpD7qh5QHTRY8eqR0=";
   };
 
   nativeBuildInputs = [

pkgs/development/compilers/dart/sources.nix

···
 let
-  version = "3.8.1";
+  version = "3.8.2";
 in
 { fetchurl }:
 {
   versionUsed = version;
   "${version}-x86_64-darwin" = fetchurl {
     url = "https://storage.googleapis.com/dart-archive/channels/stable/release/${version}/sdk/dartsdk-macos-x64-release.zip";
-    hash = "sha256-OTcd89ZPlPWz2cERnD9UkWTFYoxqE7lFG3tEhZ8fkRQ=";
+    hash = "sha256-30f5sONEzlXcf8NrNPPK0vUYclULhIfj3H+Q9tlRuJE=";
   };
   "${version}-aarch64-darwin" = fetchurl {
     url = "https://storage.googleapis.com/dart-archive/channels/stable/release/${version}/sdk/dartsdk-macos-arm64-release.zip";
-    hash = "sha256-UIC8b0p4zM4OOOceRkdsCNYeCBRTZGlI8/DHcXepKPg=";
+    hash = "sha256-PO/YQEIKNSl302T9Lq+4pfOoUVrkJjFZ9bEETWujUpE=";
   };
   "${version}-aarch64-linux" = fetchurl {
     url = "https://storage.googleapis.com/dart-archive/channels/stable/release/${version}/sdk/dartsdk-linux-arm64-release.zip";
-    hash = "sha256-eKMkAJe+47ebAJxp6tIuGq7e3ty+CT6qmACExWYQlsg=";
+    hash = "sha256-YFfbTNkJ437F99zzSsCmW8NPtBMwtMNxjEPbGlDokG8=";
   };
   "${version}-x86_64-linux" = fetchurl {
     url = "https://storage.googleapis.com/dart-archive/channels/stable/release/${version}/sdk/dartsdk-linux-x64-release.zip";
-    hash = "sha256-DVjAEKNh8/FYixwvV5QvfMr3t6u+A0BP73oQLrY48J0=";
+    hash = "sha256-KUW6qxHPdHIyjlVzcTmTuvkXlX+taRwUYcq9WglugxE=";
   };
 }

pkgs/development/compilers/graalvm/community-edition/graalvm-ce/hashes.nix

···
 # Generated by update.sh script
 {
-  "version" = "24.0.1";
+  "version" = "24.0.2";
   "hashes" = {
     "aarch64-linux" = {
-      sha256 = "0bkn7ml2xikhscwnb9ixa9zb80lvkbvh28r56bv3s3gvmn7vxld3";
-      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.1/graalvm-community-jdk-24.0.1_linux-aarch64_bin.tar.gz";
+      sha256 = "1xfncszlnxmjxfj79b3z5isc8a3gjk0cn3i7b0yli4c7hld9akf5";
+      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.2/graalvm-community-jdk-24.0.2_linux-aarch64_bin.tar.gz";
     };
     "x86_64-linux" = {
-      sha256 = "1pjbm3kb7hs2hna39qj1ji57fsyckskiv3wwl1v08h1fczg49ifj";
-      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.1/graalvm-community-jdk-24.0.1_linux-x64_bin.tar.gz";
+      sha256 = "080774x1chpa0n8bpmw575g5myi63ikffwgcvq3r7nvdh9n88qkd";
+      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.2/graalvm-community-jdk-24.0.2_linux-x64_bin.tar.gz";
     };
     "x86_64-darwin" = {
-      sha256 = "1qjr0d3nwz0fc5yr78gjsqa8x9y1srczi7y0zbq6p6mcf3c1a9j5";
-      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.1/graalvm-community-jdk-24.0.1_macos-x64_bin.tar.gz";
+      sha256 = "1lvn38dd7kl086344237jq20a1l4cqj2wcdjain1bawds5bdi7n5";
+      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.2/graalvm-community-jdk-24.0.2_macos-x64_bin.tar.gz";
     };
     "aarch64-darwin" = {
-      sha256 = "1bffg1k0hwv5hniakcqh165a7k8fp5r4nj0595ynrmshncgnc60f";
-      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.1/graalvm-community-jdk-24.0.1_macos-aarch64_bin.tar.gz";
+      sha256 = "11ymqs0knhx70n8mvanfnqaq3d8x5a9955hqccllgzj6fz86hl0z";
+      url = "https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-24.0.2/graalvm-community-jdk-24.0.2_macos-aarch64_bin.tar.gz";
     };
   };
 }

pkgs/development/compilers/koka/default.nix pkgs/by-name/ko/koka/package.nix

···
 {
+  lib,
   stdenv,
+  fetchFromGitHub,
   pkgsHostTarget,
+  haskellPackages,
   cmake,
   makeWrapper,
-  mkDerivation,
-  fetchFromGitHub,
-  alex,
-  lib,
-  hpack,
-  aeson,
-  array,
-  async,
-  base,
-  bytestring,
-  co-log-core,
-  cond,
-  containers,
-  directory,
-  FloatingHex,
-  isocline,
-  lens,
-  lsp_2_4_0_0,
-  mtl,
-  network,
-  network-simple,
-  parsec,
-  process,
-  text,
-  text-rope,
-  time,
 }:
 
 let
-  version = "3.1.2";
+  version = "3.2.2";
+
   src = fetchFromGitHub {
     owner = "koka-lang";
     repo = "koka";
     rev = "v${version}";
-    hash = "sha256-BNkMtYf5maWtKEZzob+218ke1SIkrP7/nboQ2sZKkxI=";
+    hash = "sha256-k1N085NoAlxewAhg5UDMo7IUf2A6gCTc9k5MWMbU0d0=";
     fetchSubmodules = true;
   };
+
   kklib = stdenv.mkDerivation {
     pname = "kklib";
     inherit version;
···
       cp -a ../../kklib ''${!outputDev}/share/koka/v${version}
     '';
   };
+
   inherit (pkgsHostTarget.targetPackages.stdenv) cc;
   runtimeDeps = [
     cc
···
     pkgsHostTarget.cmake
   ];
 in
-mkDerivation rec {
+haskellPackages.mkDerivation {
   pname = "koka";
   inherit version src;
+
   isLibrary = false;
   isExecutable = true;
-  libraryToolDepends = [ hpack ];
-  executableHaskellDepends = [
+
+  buildTools = [ makeWrapper ];
+
+  libraryToolDepends = with haskellPackages; [
+    hpack
+  ];
+
+  executableHaskellDepends = with haskellPackages; [
+    FloatingHex
     aeson
     array
     async
     base
     bytestring
     co-log-core
-    cond
     containers
     directory
-    FloatingHex
+    hashable
     isocline
     lens
-    lsp_2_4_0_0
+    lsp
     mtl
     network
     network-simple
     parsec
     process
+    stm
     text
     text-rope
     time
     kklib
   ];
-  executableToolDepends = [
+
+  executableToolDepends = with haskellPackages; [
     alex
-    makeWrapper
   ];
+
   postInstall = ''
     mkdir -p $out/share/koka/v${version}
     cp -a lib $out/share/koka/v${version}
···
       --set CC "${lib.getBin cc}/bin/${cc.targetPrefix}cc" \
       --prefix PATH : "${lib.makeSearchPath "bin" runtimeDeps}"
   '';
+
+  doHaddock = false;
+
   doCheck = false;
+
   prePatch = "hpack";
+
   description = "Koka language compiler and interpreter";
   homepage = "https://github.com/koka-lang/koka";
-  changelog = "${homepage}/blob/master/doc/spec/news.mdk";
+  changelog = "https://github.com/koka-lang/koka/blob/v${version}/doc/spec/news.mdk";
   license = lib.licenses.asl20;
   maintainers = with lib.maintainers; [
     siraben

pkgs/development/compilers/osl/default.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "openshadinglanguage";
-  version = "1.14.5.1";
+  version = "1.14.6.0";
 
   src = fetchFromGitHub {
     owner = "AcademySoftwareFoundation";
     repo = "OpenShadingLanguage";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-dmGVCx4m2bkeKhAJbU1mrzEDAmnL++7GA5okb9wwk/Y=";
+    hash = "sha256-HVkZZkB15+PT9HcAo8NPhzM86wv5ZvnARQVu+n2gTGw=";
   };
 
   cmakeFlags = [

pkgs/development/coq-modules/interval/default.nix

···
     in
     with lib.versions;
     lib.switch coq.coq-version [
+      (case (range "8.13" "9.1") "4.11.3")
       (case (range "8.13" "9.0") "4.11.2")
       (case (range "8.13" "8.20") "4.11.1")
       (case (range "8.12" "8.19") "4.10.0")
···
       (case (range "8.7" "8.11") "3.4.2")
       (case (range "8.5" "8.6") "3.3.0")
     ] null;
+  release."4.11.3".sha256 = "sha256-Cwovc3ln7ZEEDgMEh+pSUYqD/rtwFk4ED2hTRdy9YRg";
   release."4.11.2".sha256 = "sha256-ouhjHtlxcqt06+Pt+UZAzwp83bVYPh3N+8jnsVvapSU=";
   release."4.11.1".sha256 = "sha256-QWZvU468rOhK796xCCEawW6rhCRTPnE0iLll9ynKflo=";
   release."4.11.0".sha256 = "sha256-vPwa4zSjyvxHLGDoNaBnHV2pb77dnQFbC50BL80fcvE=";

pkgs/development/coq-modules/wasmcert/default.nix

···
+{
+  lib,
+  mkCoqDerivation,
+  callPackage,
+  coq,
+  flocq,
+  parseque,
+  mathcomp-boot,
+  compcert,
+  ExtLib,
+  version ? null,
+}:
+
+with lib;
+mkCoqDerivation {
+  pname = "wasm";
+  repo = "WasmCert-Coq";
+  owner = "WasmCert";
+
+  inherit version;
+  defaultVersion =
+    let
+      case = coq: mc: out: {
+        cases = [
+          coq
+          mc
+        ];
+        inherit out;
+      };
+    in
+    with lib.versions;
+    lib.switch
+      [ coq.coq-version mathcomp-boot.version ]
+      [
+        (case (isEq "8.20") (isEq "2.4") "2.1.0")
+      ]
+      null;
+
+  release."2.1.0".sha256 = "sha256-k094mxDLLeelYP+ABm+dm6Y5YrachrbhNeZhfwLHNRo=";
+
+  mlPlugin = true;
+  useDune = true;
+
+  propagatedBuildInputs = [
+    ExtLib
+    mathcomp-boot
+    parseque
+    flocq
+    compcert
+  ];
+
+  buildInputs = [
+    coq.ocamlPackages.mdx
+    coq.ocamlPackages.linenoise
+    coq.ocamlPackages.wasm
+  ];
+
+  releaseRev = v: "v${v}";
+
+  passthru.tests.HelloWorld = callPackage ./test.nix { };
+
+  meta = {
+    description = "Wasm mechanisation in Coq/Rocq";
+    maintainers = with maintainers; [ womeier ];
+    license = licenses.mit;
+  };
+}

pkgs/development/coq-modules/wasmcert/test.nix

···
+{
+  stdenv,
+  coq,
+  wasmcert,
+}:
+
+stdenv.mkDerivation {
+  pname = "wasmcert-interpreter-test";
+  inherit (wasmcert) src version;
+  nativeCheckInputs = [
+    wasmcert
+    coq
+  ];
+  dontConfigure = true;
+  dontBuild = true;
+  doCheck = true;
+
+  checkPhase = ''
+    coqc .ci/import_test.v
+
+    wasm_coq_interpreter tests/add.wasm -r main
+
+    if [ $? -ne 0 ]; then
+      echo "Wasm_coq_interpreter failed to run hello world program"
+      exit 1
+    fi
+  '';
+
+  installPhase = "touch $out";
+}

pkgs/development/ocaml-modules/ocsigen-start/default.nix

···
   stdenv,
   lib,
   fetchFromGitHub,
-  fetchpatch,
   ocaml,
   findlib,
   ocsigen-toolkit,
···
 
 stdenv.mkDerivation rec {
   pname = "ocaml${ocaml.version}-ocsigen-start";
-  version = "6.2.0";
+  version = "7.1.0";
 
   nativeBuildInputs = [
     ocaml
···
 
   patches = [
     ./templates-dir.patch
-    # Compatibility with tyxml 4.6.x
-    (fetchpatch {
-      url = "https://github.com/ocsigen/ocsigen-start/commit/0b70506f94fcb2e06cb65ce0d6a28b9b84c695f3.patch";
-      hash = "sha256-p/VvIu9reI8lc9lxWiTrjZvn46vuF00QInYuWPtRVyk=";
-    })
   ];
 
   src = fetchFromGitHub {
     owner = "ocsigen";
     repo = "ocsigen-start";
     rev = version;
-    hash = "sha256-i2nj/m1Ihb/bprtHvZh47/oK0v+aFNVH+A2CB4rrrPk=";
+    hash = "sha256-2DFFceUI7BYgGKvJ1sZphLWt/Rusa5Y86yc94Mi/quo=";
   };
 
   preInstall = ''

pkgs/development/ocaml-modules/ocsipersist/default.nix

···
 {
   buildDunePackage,
   ocsipersist-lib,
-  ocsipersist-pgsql,
-  ocsipersist-sqlite,
 }:
 
 buildDunePackage {
   pname = "ocsipersist";
   inherit (ocsipersist-lib) src version;
-  duneVersion = "3";
-
-  buildInputs = [
-    ocsipersist-pgsql
-    ocsipersist-sqlite
-  ];
 
   propagatedBuildInputs = [ ocsipersist-lib ];
 
   meta = ocsipersist-lib.meta // {
-    description = "Persistent key/value storage (for Ocsigen) using multiple backends";
+    description = "Persistent key/value storage for OCaml using multiple backends";
   };
 }

pkgs/development/ocaml-modules/ocsipersist/lib.nix

···
 
 buildDunePackage rec {
   pname = "ocsipersist-lib";
-  version = "1.1.0";
-
-  duneVersion = "3";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "ocsigen";
     repo = "ocsipersist";
-    rev = version;
-    sha256 = "sha256:1d6kdcfjvrz0dl764mnyxc477aa57rvmzkg154qc915w2y1nbz9a";
+    tag = version;
+    hash = "sha256-7CKKwJxqxUpCMNs4xGbsMZ6Qud9AnczBStTXS+N21DU=";
   };
 
   buildInputs = [ lwt_ppx ];
···
     description = "Persistent key/value storage (for Ocsigen) - support library";
     license = lib.licenses.lgpl21Only;
     maintainers = [ lib.maintainers.vbgl ];
-    inherit (src.meta) homepage;
+    homepage = "https://github.com/ocsigen/ocsipersist/";
   };
 }

pkgs/development/ocaml-modules/ocsipersist/pgsql-config.nix

···
+{
+  buildDunePackage,
+  findlib,
+  ocsipersist-pgsql,
+  ocsigen_server,
+  xml-light,
+}:
+
+buildDunePackage {
+  pname = "ocsipersist-pgsql-config";
+  inherit (ocsipersist-pgsql) version src;
+
+  propagatedBuildInputs = [
+    findlib
+    ocsipersist-pgsql
+    ocsigen_server
+    xml-light
+  ];
+
+  meta = ocsipersist-pgsql.meta // {
+    description = "Ocsigen Server configuration file extension for ocsipersist-pgsql";
+  };
+}

pkgs/development/ocaml-modules/ocsipersist/pgsql.nix

···
 {
   buildDunePackage,
-  ocsipersist-lib,
+  ocsipersist,
   lwt_log,
-  ocsigen_server,
   pgocaml,
   xml-light,
 }:
 
 buildDunePackage {
   pname = "ocsipersist-pgsql";
-  inherit (ocsipersist-lib) version src;
-  duneVersion = "3";
+  inherit (ocsipersist) version src;
 
   propagatedBuildInputs = [
     lwt_log
-    ocsigen_server
-    ocsipersist-lib
+    ocsipersist
     pgocaml
-    xml-light
   ];
 
-  meta = ocsipersist-lib.meta // {
-    description = "Persistent key/value storage (for Ocsigen) using PostgreSQL";
+  meta = ocsipersist.meta // {
+    description = "Persistent key/value storage for OCaml using PostgreSQL";
   };
 }

pkgs/development/ocaml-modules/ocsipersist/sqlite-config.nix

···
+{
+  buildDunePackage,
+  findlib,
+  ocsipersist-sqlite,
+  ocsigen_server,
+  xml-light,
+}:
+
+buildDunePackage {
+  pname = "ocsipersist-sqlite-config";
+  inherit (ocsipersist-sqlite) version src;
+
+  propagatedBuildInputs = [
+    findlib
+    ocsipersist-sqlite
+    ocsigen_server
+    xml-light
+  ];
+
+  meta = ocsipersist-sqlite.meta // {
+    description = "Ocsigen Server configuration file extension for ocsipersist-sqlite";
+  };
+}

pkgs/development/ocaml-modules/ocsipersist/sqlite.nix

···
 {
   buildDunePackage,
-  ocsipersist-lib,
+  ocsipersist,
   lwt_log,
   ocaml_sqlite3,
   ocsigen_server,
-  xml-light,
 }:
 
 buildDunePackage {
   pname = "ocsipersist-sqlite";
-  inherit (ocsipersist-lib) version src;
-  duneVersion = "3";
+  inherit (ocsipersist) version src;
 
   propagatedBuildInputs = [
     lwt_log
     ocaml_sqlite3
-    ocsigen_server
-    ocsipersist-lib
-    xml-light
+    ocsipersist
   ];
 
-  meta = ocsipersist-lib.meta // {
-    description = "Persistent key/value storage (for Ocsigen) using SQLite";
+  meta = ocsipersist.meta // {
+    description = "Persistent key/value storage for OCaml using SQLite";
   };
 }

pkgs/development/python-modules/authlib/default.nix

···
 
 buildPythonPackage rec {
   pname = "authlib";
-  version = "1.6.0";
+  version = "1.6.1";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "lepture";
     repo = "authlib";
     tag = "v${version}";
-    hash = "sha256-USZc+IKcg0+aEG2ISx29jTwm8BBuzNqFoZLBpZ7K2DU=";
+    hash = "sha256-2VVfq3D5SbWQI+ZLtG1+fv5CkY54DQ9dvgpMiSffueE=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/basedmypy/default.nix

···
     substituteInPlace \
       pyproject.toml \
       --replace-warn 'types-setuptools==' 'types-setuptools>='
+  ''
+  # __closed__ returns None at runtime (not a bool)
+  + ''
+    substituteInPlace test-data/unit/lib-stub/typing_extensions.pyi \
+      --replace-fail "__closed__: bool" "__closed__: None"
   '';
 
   build-system = [
···
   ++ lib.optionals stdenv.hostPlatform.isi686 [
     # https://github.com/python/mypy/issues/15221
     "mypyc/test/test_run.py"
-  ];
+  ]
+  ++
+    lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64 && pythonOlder "3.13")
+      [
+        # mypy/test/testsolve.py::SolveSuite::test_simple_constraints_with_dynamic_type: [Any | A] != [Any]
+        "mypy/test/testsolve.py"
+      ];
 
   passthru.updateScript = nix-update-script { };
 

pkgs/development/python-modules/blocksat-cli/default.nix

···
     # Non-NixOS package managers are not present in the build environment.
     "test_parse_upgradable_list_apt"
     "test_parse_upgradable_list_dnf"
+    # Fails due to GPG clearsign output lacking trailing newline in some setups.
+    "test_clearsign_verification"
   ];
 
   disabledTestPaths = [ "blocksatgui/tests/" ];

pkgs/development/python-modules/eth-abi/default.nix

···
   pytestCheckHook,
   pytest-xdist,
   eth-hash,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "eth-abi";
-  version = "5.1.0";
+  version = "5.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-abi";
     tag = "v${version}";
-    hash = "sha256-D3aGMx2oZFttwQ90ouwQbbRelCb2bvyQgvamKweX9Nw=";
+    hash = "sha256-/tyGm/lH72oZEKfTd25t+k0y3TuAZQg+hUABT4YCP2g=";
   };
 
   build-system = [ setuptools ];
···
     hypothesis
     pytestCheckHook
     pytest-xdist
+    pydantic
   ]
   ++ eth-hash.optional-dependencies.pycryptodome;
 
   disabledTests = [
     # boolean list representation changed
     "test_get_abi_strategy_returns_certain_strategies_for_known_type_strings"
+    "test_install_local_wheel"
   ];
 
   pythonImportsCheck = [ "eth_abi" ];

pkgs/development/python-modules/eth-account/default.nix

···
 
 buildPythonPackage rec {
   pname = "eth-account";
-  version = "0.13.5";
+  version = "0.13.7";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-account";
     tag = "v${version}";
-    hash = "sha256-CBD0vJLYA+3FreOTsVXJlDJhRvPbDUn4X55o6EF+uBA=";
+    hash = "sha256-Ipz2zIKCpIzKBtX0UZnvpKZeTUcDPbGTzMgmcJC/4qs=";
   };
 
   build-system = [ setuptools ];
···
     eth-rlp
     eth-utils
     hexbytes
+    pydantic
     rlp
     websockets
   ];
···
   ];
 
   pythonImportsCheck = [ "eth_account" ];
+
+  pythonRelaxDeps = [ "eth-keyfile" ];
 
   meta = {
     description = "Account abstraction library for web3.py";

pkgs/development/python-modules/eth-keyfile/default.nix

···
   eth-keys,
   eth-utils,
   pycryptodome,
+  py-ecc,
   # nativeCheckInputs
   pytestCheckHook,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "eth-keyfile";
-  version = "0.8.1";
+  version = "0.9.1";
   pyproject = true;
 
   src = fetchFromGitHub {
···
     repo = "eth-keyfile";
     tag = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-HufsN3aXdQErcQmnG2PZnEm5joqpy4f8IWNm3VrzJSY=";
+    hash = "sha256-DR17EupRDnviN6OXF+B+RlCVdG8cfcvnIgIEKxrXFKs=";
   };
 
   build-system = [ setuptools ];
···
     eth-keys
     eth-utils
     pycryptodome
+    py-ecc
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    pytestCheckHook
+    pydantic
+  ];
 
   pythonImportsCheck = [ "eth_keyfile" ];
+
+  disabledTests = [
+    "test_install_local_wheel"
+  ];
 
   meta = {
     description = "Tools for handling the encrypted keyfile format used to store private keys";

pkgs/development/python-modules/eth-keys/default.nix

···
   coincurve,
   eth-hash,
   isPyPy,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "eth-keys";
-  version = "0.6.0";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-keys";
     tag = "v${version}";
-    hash = "sha256-HyOfuzwldtqjjowW7HGdZ8RNMXNK3y2NrXUoeMlWJjs=";
+    hash = "sha256-H/s/D4f4tqP/WTil9uLmFw2Do9sEjMWwEreQEooeszQ=";
   };
 
   build-system = [ setuptools ];
···
     hypothesis
     pyasn1
     pytestCheckHook
+    pydantic
   ]
   ++ optional-dependencies.coincurve
   ++ lib.optional (!isPyPy) eth-hash.optional-dependencies.pysha3
   ++ lib.optional isPyPy eth-hash.optional-dependencies.pycryptodome;
 
   pythonImportsCheck = [ "eth_keys" ];
+
+  disabledTests = [ "test_install_local_wheel" ];
 
   optional-dependencies = {
     coincurve = [ coincurve ];

pkgs/development/python-modules/eth-rlp/default.nix

···
   pytestCheckHook,
   pythonOlder,
   rlp,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "eth-rlp";
-  version = "2.1.0";
+  version = "2.2.0";
   pyproject = true;
   disabled = pythonOlder "3.8";
 
···
     owner = "ethereum";
     repo = "eth-rlp";
     rev = "v${version}";
-    hash = "sha256-FTqIutndf+epmO5XNEUoRAUEmn299aTLIZNe5SMcxAQ=";
+    hash = "sha256-e8nPfxk3OnFEcPnfTy1IEUCHVId6E/ssNOUeAe331+U=";
   };
 
   build-system = [ setuptools ];
···
     rlp
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ] ++ eth-hash.optional-dependencies.pycryptodome;
+  nativeCheckInputs = [
+    pytestCheckHook
+    pydantic
+  ]
+  ++ eth-hash.optional-dependencies.pycryptodome;
 
   pythonImportsCheck = [ "eth_rlp" ];
+
+  disabledTests = [
+    "test_install_local_wheel"
+  ];
 
   meta = with lib; {
     description = "RLP definitions for common Ethereum objects";

pkgs/development/python-modules/eth-tester/default.nix

···
 
 buildPythonPackage rec {
   pname = "eth-tester";
-  version = "0.12.0-beta.2";
+  version = "0.13.0-beta.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-tester";
     tag = "v${version}";
-    hash = "sha256-ox7adsqD0MPZFcxBhino8cgwYYEWrBnD+ugPQOuOO2U=";
+    hash = "sha256-ssPtsEQAyaJde/empEpGU1bf3s4yxwlEXqpacN5GWDw=";
   };
 
   build-system = [ setuptools ];
···
   ];
 
   pythonImportsCheck = [ "eth_tester" ];
+
+  disabledTests = [
+    "test_install_local_wheel"
+  ];
 
   meta = {
     description = "Tool suite for testing ethereum applications";

pkgs/development/python-modules/eth-typing/default.nix

···
 
 buildPythonPackage rec {
   pname = "eth-typing";
-  version = "5.1.0";
+  version = "5.2.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-typing";
     tag = "v${version}";
-    hash = "sha256-IOWd6WFPAYO+VZwlMilRVHtudEjHt5p8Xu4WloFB/ww=";
+    hash = "sha256-w/xYqDmtlNs9dk4lTX0zxjdlUc7l7vi8ZnSE62W0m8o=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/eth-utils/default.nix

···
   eth-typing,
   cytoolz,
   toolz,
+  pydantic,
   # nativeCheckInputs
   hypothesis,
   mypy,
···
 
 buildPythonPackage rec {
   pname = "eth-utils";
-  version = "5.1.0";
+  version = "5.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "eth-utils";
     tag = "v${version}";
-    hash = "sha256-uPzg1gUEsulQL2u22R/REHWx1ZtbMxvcXf6UgWqkDF4=";
+    hash = "sha256-VWNQyLfOEQTusdNHO/8/fWyGVFVwr1Cg1IfyNMSsfGQ=";
   };
 
   build-system = [ setuptools ];
···
     hypothesis
     mypy
     pytestCheckHook
+    pydantic
   ]
   ++ eth-hash.optional-dependencies.pycryptodome;
 

pkgs/development/python-modules/hexbytes/default.nix

···
   hypothesis,
   pytestCheckHook,
   pythonOlder,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "hexbytes";
-  version = "1.2.0";
+  version = "1.3.1";
   pyproject = true;
   disabled = pythonOlder "3.8";
 
···
     owner = "ethereum";
     repo = "hexbytes";
     tag = "v${version}";
-    hash = "sha256-8st1nQiGApt+aNl8/cftYk0ZzA+MxbLyGi53UWUlAjM=";
+    hash = "sha256-xYXxlyVGdsksxZJtSpz1V3pj4NL7IzX0gaQeCoiHr8g=";
   };
 
   build-system = [ setuptools ];
···
     eth-utils
     hypothesis
     pytestCheckHook
+    pydantic
   ];
+
+  disabledTests = [ "test_install_local_wheel" ];
 
   pythonImportsCheck = [ "hexbytes" ];
 

pkgs/development/python-modules/molecule/default.nix

···
 
 buildPythonPackage rec {
   pname = "molecule";
-  version = "25.6.0";
+  version = "25.7.0";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-DbII3li+zssMqHvyzEjhAXI04eOtlHwXlIdzf4hOfHw=";
+    hash = "sha256-oljMrwotFaoLSS/Epa1jhouyKeCYRRzZpY+/QBW7pRA=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/ossapi/default.nix

···
 
 buildPythonPackage rec {
   pname = "ossapi";
-  version = "5.3.1";
+  version = "5.3.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "tybug";
     repo = "ossapi";
     tag = "v${version}";
-    hash = "sha256-5a2kSdOHF0BM/ZjhtPc9O/BiZXeLuZFlXwVOJHnKYLI=";
+    hash = "sha256-sLzw/0RsA0PGxxQeVz4TGIpTMMlrZ0i4ZGolrz5S16E=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/py-ecc/default.nix

···
   pythonAtLeast,
   pythonOlder,
   setuptools,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "py-ecc";
-  version = "7.0.0";
+  version = "8.0.0";
   pyproject = true;
   disabled = pythonOlder "3.8";
 
···
     owner = "ethereum";
     repo = "py_ecc";
     rev = "v${version}";
-    hash = "sha256-DKe+bI1GEzXg4Y4n5OA1/hWYz9L3X1AvaOFPEnCaAfs=";
+    hash = "sha256-4nmmX4TuErHxIDrBi+Ppr+4vuE7dSeqf8OqOxtqb3sY=";
   };
 
   nativeBuildInputs = [ setuptools ];
···
     eth-utils
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    pytestCheckHook
+    pydantic
+  ];
 
   disabledTests = lib.optionals (pythonAtLeast "3.12") [
     # https://github.com/ethereum/py_ecc/issues/133
···
     "test_pairing_negative_G1"
     "test_pairing_negative_G2"
     "test_pairing_output_order"
+    "test_install_local_wheel"
   ];
 
   pythonImportsCheck = [ "py_ecc" ];

pkgs/development/python-modules/py-evm/default.nix

···
 
 buildPythonPackage rec {
   pname = "py-evm";
-  version = "0.10.1-beta.2";
+  version = "0.12.1-beta.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "py-evm";
     tag = "v${version}";
-    hash = "sha256-2BWMen/6ZcL1/SgGP0XcrTC63+LEjZO7Ogb3anhavsE=";
+    hash = "sha256-n2F0ApdmIED0wrGuNN45lyb7cGu8pRn8mLDehT7Ru9E=";
   };
 
   build-system = [ setuptools ];
···
     eth-typing
     eth-utils
     lru-dict
+    pydantic
     py-ecc
     rlp
     trie

pkgs/development/python-modules/pybase64/default.nix

···
 
 buildPythonPackage rec {
   pname = "pybase64";
-  version = "1.4.1";
+  version = "1.4.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     repo = "pybase64";
     tag = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-mEwFcnqUKCWYYrcjELshJYNqTxQ//4w4OzaWhrzB5Mg=";
+    hash = "sha256-VSCMBKyDgNjwRUvT29z3KdN/dReqbmaaNeWomnyFJFg=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/rlp/default.nix

···
   eth-utils,
   hypothesis,
   pytestCheckHook,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "rlp";
-  version = "4.0.0";
+  version = "4.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "pyrlp";
     rev = "v${version}";
-    hash = "sha256-cRp+ZOPYs9kcqMKGaiYMOFBY+aPCyFqu+1/5wloLwqU=";
+    hash = "sha256-moerdcAJXqhlzDnTlvxL3Nzz485tOzJVCPlGrof80eQ=";
   };
 
   build-system = [ setuptools ];
···
   nativeCheckInputs = [
     hypothesis
     pytestCheckHook
+    pydantic
   ];
 
   pythonImportsCheck = [ "rlp" ];
+
+  disabledTests = [ "test_install_local_wheel" ];
 
   meta = with lib; {
     description = "RLP serialization library";

pkgs/development/python-modules/slither-analyzer/default.nix

···
 
 buildPythonPackage rec {
   pname = "slither-analyzer";
-  version = "0.10.3";
+  version = "0.11.3";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "crytic";
     repo = "slither";
     tag = version;
-    hash = "sha256-KWLv0tpd1FHZ9apipVPWw6VjtfYpngsH7XDQQ3luBZA=";
+    hash = "sha256-HgPQPyxDvKrmqGiHjiVGxEguYUcaNYwK1gZoMMkQWhM=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/trie/default.nix

···
   hypothesis,
   pytestCheckHook,
   pytest-xdist,
+  pydantic,
 }:
 
 buildPythonPackage rec {
   pname = "trie";
-  version = "3.0.1";
+  version = "3.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "py-trie";
     tag = "v${version}";
-    hash = "sha256-kG/5ijckiEOfB5y1c3Yqudqnb1MDbPD25YZZM+H13Lw=";
+    hash = "sha256-QDywlAyFbQGgkATVifdixlnob4Tmsvr/VZ1rafzWKrU=";
   };
 
   build-system = [ setuptools ];
···
     hypothesis
     pytestCheckHook
     pytest-xdist
+    pydantic
   ]
   ++ eth-hash.optional-dependencies.pycryptodome;
 
···
     "test_fixtures_exist"
     "test_bin_trie_update_value"
     "test_branch_updates"
+    "test_install_local_wheel"
   ];
   disabledTestPaths = [ "tests/core/test_iter.py" ];
 

pkgs/development/python-modules/web3/default.nix

···
 
 buildPythonPackage rec {
   pname = "web3";
-  version = "7.8.0";
+  version = "7.12.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ethereum";
     repo = "web3.py";
     tag = "v${version}";
-    hash = "sha256-Rk12QZK47oF0ri1+kCquW4vaqPPPO5UPYOhq4StR1+U=";
+    hash = "sha256-5fmZJun8yRm+BSKPfe9Fsmp7IWpFhwHD3+iBtkKmr1w=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/x-transformers/default.nix

···
 
 buildPythonPackage rec {
   pname = "x-transformers";
-  version = "2.4.14";
+  version = "2.5.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lucidrains";
     repo = "x-transformers";
     tag = version;
-    hash = "sha256-mKn7w+FJAfNYNBE8ugnJhhj2K1IWpIslr0k4qGpLU6o=";
+    hash = "sha256-9PUOPcTm2xvtKV4T2lAGu/3BiQZzSlwo43i0x1gbrAM=";
   };
 
   build-system = [ hatchling ];

pkgs/development/tools/ocaml/js_of_ocaml/compiler.nix

···
   sedlex,
   version ?
     if lib.versionAtLeast ocaml.version "4.13" then
-      "6.1.1"
+      "6.2.0"
     else if lib.versionAtLeast ocaml.version "4.11" then
       "6.0.1"
     else
···
     url = "https://github.com/ocsigen/js_of_ocaml/releases/download/${version}/js_of_ocaml-${version}.tbz";
     hash =
       {
+        "6.2.0" = "sha256-fMZBd40bFyo1KogzPuDoxiE2WgrPzZuH44v9243Spdo=";
         "6.1.1" = "sha256-0x2kGq5hwCqqi01QTk6TcFIz0wPNgaB7tKxe7bA9YBQ=";
         "6.0.1" = "sha256-gT2+4rYuFUEEnqI6IOQFzyROJ+v6mFl4XPpT4obSxhQ=";
         "5.9.1" = "sha256-aMlcYIcdjpyaVMgvNeLtUEE7y0QPIg0LNRayoe4ccwc=";

pkgs/os-specific/linux/akvcam/default.nix

···
 
 stdenv.mkDerivation rec {
   pname = "akvcam";
-  version = "1.2.7";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "webcamoid";
     repo = "akvcam";
     rev = version;
-    sha256 = "sha256-I+dGfRLFOV8E35fLFnWtNWmqpzbWsA2dBx6pBKQsa7Q=";
+    sha256 = "sha256-3fs+Kfafry77SQvsAidM29g9CcfjWirteS/VdNSWVCE=";
   };
   sourceRoot = "${src.name}/src";
 

pkgs/os-specific/linux/universal-pidff/default.nix

···
 
 stdenv.mkDerivation rec {
   pname = "universal-pidff";
-  version = "0.1.1";
+  version = "0.2.0";
 
   src = fetchFromGitHub {
     owner = "JacKeTUs";
     repo = "universal-pidff";
     tag = version;
-    hash = "sha256-Ebj0s08x5+qkJFOUeiLF9lwfyJIH5llPRM+ZXcT594I=";
+    hash = "sha256-qjnQTkQiufHPEwMH+F+XE+VBc/DSTX6d0vxot35xbUc=";
   };
 
   postPatch = ''

pkgs/tools/misc/grub/default.nix

···
     riscv64-linux.target = "riscv64";
   };
 
-  canEfi = lib.any (system: stdenv.hostPlatform.system == system) (
-    lib.mapAttrsToList (name: _: name) efiSystemsBuild
-  );
-  inPCSystems = lib.any (system: stdenv.hostPlatform.system == system) (
-    lib.mapAttrsToList (name: _: name) pcSystems
-  );
+  xenSystemsBuild = {
+    i686-linux.target = "i386";
+    x86_64-linux.target = "x86_64";
+  };
+
+  inPCSystems = lib.any (system: stdenv.hostPlatform.system == system) (lib.attrNames pcSystems);
 
   gnulib = fetchFromSavannah {
     repo = "gnulib";
···
     hash = "sha256-IoRiJHNQ58y0UhCAD0CrpFiI8Mz1upzAtyh5K4Njh/w=";
   };
 in
+
+assert zfsSupport -> zfs != null;
+assert !(efiSupport && xenSupport);
+
 stdenv.mkDerivation rec {
   pname = "grub";
   version = "2.12";
···
   ]
   ++ lib.optionals xenSupport [
     "--with-platform=xen"
-    "--target=${efiSystemsBuild.${stdenv.hostPlatform.system}.target}"
+    "--target=${xenSystemsBuild.${stdenv.hostPlatform.system}.target}"
   ];
 
   # save target that grub is compiled for
···
     license = licenses.gpl3Plus;
 
     platforms =
-      if xenSupport then
-        [
-          "x86_64-linux"
-          "i686-linux"
-        ]
+      if efiSupport then
+        lib.attrNames efiSystemsBuild
+      else if xenSupport then
+        lib.attrNames xenSystemsBuild
       else
         platforms.gnu ++ platforms.linux;
 
     maintainers = [ ];
-
-    broken = !(efiSupport -> canEfi) || !(zfsSupport -> zfs != null) || (efiSupport && xenSupport);
   };
 }

pkgs/tools/misc/opentelemetry-collector/builder.nix

···
   pname = "ocb";
   # Also update `pkgs/tools/misc/opentelemetry-collector/releases.nix`
   # whenever that version changes.
-  version = "0.129.0";
+  version = "0.131.0";
 
   src = fetchFromGitHub {
     owner = "open-telemetry";
     repo = "opentelemetry-collector";
     rev = "cmd/builder/v${version}";
-    hash = "sha256-sKz4JWZUaprMY1kJNnX2Lrg4xM+y2MPulStKHfG/htg=";
+    hash = "sha256-T4Ffa3csQaxoRxSobNpoHqyOw6PrKdPj1XUmdrSK5d8=";
   };
 
   sourceRoot = "${src.name}/cmd/builder";
-  vendorHash = "sha256-nKd+fq3wLT1Hebeu+VQhjs320xdykgJ95yhxKDuyVFY=";
+  vendorHash = "sha256-1240ZKF6/MqspTXd5rznE4/bZ2QWmXS0KgPwuCdm/lA=";
 
   env.CGO_ENABLED = 0;
   ldflags = [

pkgs/top-level/all-packages.nix

···
   julia-stable-bin = julia_111-bin;
   julia-bin = julia-stable-bin;
 
-  koka = haskell.lib.compose.justStaticExecutables (
-    haskellPackages.callPackage ../development/compilers/koka { }
-  );
-
   kotlin = callPackage ../development/compilers/kotlin { };
   kotlin-native = callPackage ../development/compilers/kotlin/native.nix { };
 

pkgs/top-level/coq-packages.nix

···
           };
         })
       );
+      wasmcert = callPackage ../development/coq-modules/wasmcert { };
       waterproof = callPackage ../development/coq-modules/waterproof { };
       zorns-lemma = callPackage ../development/coq-modules/zorns-lemma { };
       filterPackages = doesFilter: if doesFilter then filterCoqPackages self else self;

pkgs/top-level/ocaml-packages.nix

···
 
         ocsipersist-pgsql = callPackage ../development/ocaml-modules/ocsipersist/pgsql.nix { };
 
+        ocsipersist-pgsql-config =
+          callPackage ../development/ocaml-modules/ocsipersist/pgsql-config.nix
+            { };
+
         ocsipersist-sqlite = callPackage ../development/ocaml-modules/ocsipersist/sqlite.nix { };
+
+        ocsipersist-sqlite-config =
+          callPackage ../development/ocaml-modules/ocsipersist/sqlite-config.nix
+            { };
 
         octavius = callPackage ../development/ocaml-modules/octavius { };