Merge staging-next into staging

maintainers/maintainer-list.nix

···
     githubId = 54999;
     name = "Ariel Nunez";
   };
-  interdependence = {
-    email = "[e-mail]";
-    github = "interdependence";
-    githubId = 45567423;
-    name = "William Vandervalk";
-  };
   Intuinewin = {
     email = "[e-mail]";
     github = "Intuinewin";

nixos/tests/redis.nix

···
       inherit name;
       meta.maintainers = [
         lib.maintainers.flokli
-        lib.teams.helsinki-systems.members
-      ];
+      ] ++ lib.teams.helsinki-systems.members;
 
       nodes = {
         machine =

pkgs/applications/editors/vscode/extensions/tekumara.typos-vscode/default.nix

···
     {
       x86_64-linux = {
         arch = "linux-x64";
-        hash = "sha256-eXDHPU9QH95EcgOC8dl8H1ea6drkyKhrsz3/Dc83tVY=";
+        hash = "sha256-lxslDmnBA5TSFH/5J5Mt/TYsiE+5noQXCnHKAfA7mko=";
       };
       aarch64-linux = {
         arch = "linux-arm64";
-        hash = "sha256-gxJeffxK1q6hUt+j1i32WlUZoc+YAXgUfDBuxA1y73g=";
+        hash = "sha256-hCRtlgRNO49D9YrmPcw+guNwk6RE+mLi9MrJTKI+FdU=";
       };
       x86_64-darwin = {
         arch = "darwin-x64";
-        hash = "sha256-F+OfjPnUbuUnfHp+r8yQwiJ9kCZMWUVOz2zcMTzfhgI=";
+        hash = "sha256-CCsYPdiepfKa5s51ZZT/Rn9PoI4IKzGV+ztNkoQb9eo=";
       };
       aarch64-darwin = {
         arch = "darwin-arm64";
-        hash = "sha256-w2sL0rojNrVnmjiG5efqtdQOjV7/vWx16Yev+8pUxsg=";
+        hash = "sha256-JOJf5JI46eBjSJ26aIe2nJ8TGHFsXsDNkIoCV9upSRA=";
       };
     }
     .${system} or (throw "Unsupported system: ${system}");
···
     # Please update the corresponding binary (typos-lsp)
     # when updating this extension.
     # See pkgs/by-name/ty/typos-lsp/package.nix
-    version = "0.1.39";
+    version = "0.1.40";
     inherit (extInfo) hash arch;
   };
 

pkgs/applications/graphics/pineapple-pictures/default.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pineapple-pictures";
-  version = "1.0.0";
+  version = "1.1.0";
 
   src = fetchFromGitHub {
     owner = "BLumia";
     repo = "pineapple-pictures";
     rev = finalAttrs.version;
-    hash = "sha256-6LcfACoDJqB3Y9vJR1/u1yV3bHHVgU4l9cmCJ5KjqUc=";
+    hash = "sha256-jdybJx/70m9c4/HC1Iz2xm3sf51Fl0jA0lhLvo+KwWw=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/al/alibuild/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "alibuild";
-  version = "1.17.18";
+  version = "1.17.21";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-771XCMYNJsQzD7rb/7q5rheeIL8X2bvMWwLkA40CJ9Y=";
+    hash = "sha256-bUZJs1FnKbPCQYCURynN2L/6qu1w80aMxnWL4oYEJgI=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/al/all-the-package-names/package.nix

···
 
 buildNpmPackage rec {
   pname = "all-the-package-names";
-  version = "2.0.2154";
+  version = "2.0.2156";
 
   src = fetchFromGitHub {
     owner = "nice-registry";
     repo = "all-the-package-names";
     tag = "v${version}";
-    hash = "sha256-JAWD64CTQACKH8uGyGcbWqTkCQxmRvtQIyco4rK3l6Y=";
+    hash = "sha256-XdMapdtcuZhrF/IacXahxCbpgu7f5mjtKxu5whebDvM=";
   };
 
-  npmDepsHash = "sha256-yzjW4m0gHKfWulgAIR04IkWDnHvfCohF/wHi6Wu42cY=";
+  npmDepsHash = "sha256-GUs0JyCYg5lIXZ9i9F+45myGtc6zYYmZ5YTxwcjOVUo=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/aw/awscli2/package.nix

···
 in
 py.pkgs.buildPythonApplication rec {
   pname = "awscli2";
-  version = "2.27.31"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.27.49"; # N.B: if you change this, check if overrides are still up-to-date
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-cli";
     tag = version;
-    hash = "sha256-0d7VdlX3xZkw1SVjbKErFhhoC2owI/JfBQOJ/GfIWyg=";
+    hash = "sha256-fg4UMAsylJJ0Xy8s84Qr7OdiFrzMIP9RsAH+pYDThrU=";
   };
 
   postPatch = ''

pkgs/by-name/ba/backrest/package.nix

···
     homepage = "https://github.com/garethgeorge/backrest";
     changelog = "https://github.com/garethgeorge/backrest/releases/tag/v${version}";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ interdependence ];
+    maintainers = with lib.maintainers; [ ];
     mainProgram = "backrest";
     platforms = lib.platforms.unix;
   };

pkgs/by-name/ca/cargo-udeps/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-udeps";
-  version = "0.1.56";
+  version = "0.1.57";
 
   src = fetchFromGitHub {
     owner = "est31";
     repo = "cargo-udeps";
     rev = "v${version}";
-    sha256 = "sha256-W9COzLyE7A/Yp88HTknSSa9WjufwHMgcmlsqwOYSSCw=";
+    sha256 = "sha256-08IUMw/fCVrmsSL4a86dAbeG+DsS2d7jiVBNKfebVqk=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-ttIzCro9/oiF0ycRG/UzvgMT+3kXhkVAdkNCIVjIc2g=";
+  cargoHash = "sha256-cHQIW3TDxurrkT9FfGCBVG4PRgTg5+XkLXgnDL1rfG0=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/ce/certinfo-go/package.nix

···
 
 buildGoModule rec {
   pname = "certinfo-go";
-  version = "0.1.43";
+  version = "0.1.45";
 
   src = fetchFromGitHub {
     owner = "paepckehh";
     repo = "certinfo";
     tag = "v${version}";
-    hash = "sha256-vXNk4DrElWmV7yxWEiLZexJQzVBUY08fF0in6hpBwjA=";
+    hash = "sha256-dp8Fm+QthwL+c6725H9OFxQtZsbXoT9titaMcN8ZH9c=";
   };
 
-  vendorHash = "sha256-rAXnnd9E3HFvmbI+dIJj0F81NwXXD53QATNNmlOpBRM=";
+  vendorHash = "sha256-BuPvXVgYOzypX5oPLfVB1WFuOIZK4atFUqC0hdHa0UA=";
 
   ldflags = [
     "-s"

pkgs/by-name/ch/chafa/package.nix

···
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "1.16.1";
+  version = "1.16.2";
   pname = "chafa";
 
   src = fetchFromGitHub {
     owner = "hpjansson";
     repo = "chafa";
     tag = finalAttrs.version;
-    hash = "sha256-O57L/VR3M1dTMg+UES6NGh4hU2D7/e9boTMNo6sR/ws=";
+    hash = "sha256-bIFPnbciaog9piqBMSpe9zLwH7irp5CW1WG5frAMqpI=";
   };
 
   outputs = [

pkgs/by-name/cl/cloudcheck/package.nix

···
+{ python3Packages }: with python3Packages; toPythonApplication cloudcheck

pkgs/by-name/co/codex/package.nix

···
 {
   lib,
-  stdenv,
+  rustPlatform,
   fetchFromGitHub,
-  nodejs_22, # Node ≥22 is required by codex-cli
-  pnpm_10,
-  makeBinaryWrapper,
-  installShellFiles,
+  nix-update-script,
+  pkg-config,
+  openssl,
   versionCheckHook,
 }:
-
-stdenv.mkDerivation (finalAttrs: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codex";
-  version = "0.1.2504301751"; # from codex-cli/package.json
+  version = "0.2.0";
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
-    rev = "463a230991393c7b39f2543a9766e6133ef65393";
-    hash = "sha256-CSd5e6BsGEigENjPu6R6s+QhZRLQ2CTmI5XBI9mPkmA=";
+    tag = "rust-v${finalAttrs.version}";
+    hash = "sha256-lpZsECLWmoGJYafL3FlmR6WwOcynGgqWq6IUB+/y6lY=";
   };
 
-  pnpmWorkspaces = [ "@openai/codex" ];
+  sourceRoot = "${finalAttrs.src.name}/codex-rs";
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-DIDAk5ibwEQ9mwOUS2JNFEA2npVK9TBph/TuwiJgfL4=";
 
   nativeBuildInputs = [
-    nodejs_22
-    pnpm_10.configHook
-    makeBinaryWrapper
-    installShellFiles
+    pkg-config
+    openssl
   ];
 
-  pnpmDeps = pnpm_10.fetchDeps {
-    inherit (finalAttrs)
-      pname
-      version
-      src
-      pnpmWorkspaces
-      ;
-    hash = "sha256-pPwHjtqqaG+Zqmq6x5o+WCT1H9XuXAqFNKMzevp7wTc=";
-  };
-
-  buildPhase = ''
-    runHook preBuild
-    pnpm --filter @openai/codex run build
-    runHook postBuild
-  '';
-
-  installPhase = ''
-    runHook preInstall
-
-    dest=$out/lib/node_modules/@openai/codex
-    mkdir -p "$dest"
-    cp -r codex-cli/dist codex-cli/bin codex-cli/package.json "$dest"
-    cp LICENSE README.md "$dest"
-
-    mkdir -p $out/bin
-    makeBinaryWrapper ${nodejs_22}/bin/node $out/bin/codex --add-flags "$dest/bin/codex.js"
-
-    # Install shell completions
-    ${lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
-      $out/bin/codex completion bash > codex.bash
-      $out/bin/codex completion zsh > codex.zsh
-      $out/bin/codex completion fish > codex.fish
-      installShellCompletion codex.{bash,zsh,fish}
-    ''}
-
-    runHook postInstall
-  '';
+  checkFlags = [
+    "--skip=keeps_previous_response_id_between_tasks" # Requires network access
+    "--skip=retries_on_early_close" # Requires network access
+  ];
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];
 
+  passthru = {
+    updateScript = nix-update-script {
+      extraArgs = [
+        "--version-regex"
+        "^rust-v(\\d+\\.\\d+\\.\\d+)$"
+      ];
+    };
+  };
+
   meta = {
     description = "Lightweight coding agent that runs in your terminal";
     homepage = "https://github.com/openai/codex";
+    changelog = "https://raw.githubusercontent.com/openai/codex/refs/tags/rust-v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.asl20;
-    maintainers = [ lib.maintainers.malo ];
     mainProgram = "codex";
+    maintainers = with lib.maintainers; [
+      malo
+      delafthi
+    ];
+    platforms = lib.platforms.unix;
   };
 })

pkgs/by-name/co/conduktor-ctl/package.nix

···
 }:
 buildGoModule rec {
   pname = "conduktor-ctl";
-  version = "0.6.0";
+  version = "0.6.1";
 
   src = fetchFromGitHub {
     owner = "conduktor";
     repo = "ctl";
     rev = "refs/tags/v${version}";
-    hash = "sha256-z0D7+/mrtQhD5zrVCVqXLHJwArhXfE6R/XSjfWmr6Pg=";
+    hash = "sha256-czKQQT/9w2r8BDIP8aqeAG7B0Yk+HmpjgolovHxSlTM=";
   };
 
   vendorHash = "sha256-kPCBzLU6aH6MNlKZcKKFcli99ZmdOtPV5+5gxPs5GH4=";

pkgs/by-name/da/dalfox/package.nix

···
 
 buildGoModule rec {
   pname = "dalfox";
-  version = "2.11.0";
+  version = "2.12.0";
 
   src = fetchFromGitHub {
     owner = "hahwul";
     repo = "dalfox";
     tag = "v${version}";
-    hash = "sha256-EM5T8uBMSkjxd7wTaMFPpbErAhcN2oLaV2g8MAxb0lQ=";
+    hash = "sha256-RJzvsQBsdkuhbGbfGSO/iJXUzdQ7KTeLx9Wntv4p3Hc=";
   };
 
-  vendorHash = "sha256-EgNE3Z/NZ1lV0BPVe4MhB9bIYSMLftzYfmw65ktSo7A=";
+  vendorHash = "sha256-NQBCsGB3GQ0XPoGQdGDCJs4+Bv2Gu3JZj85ESoLiFVg=";
 
   ldflags = [
     "-w"

pkgs/by-name/ei/eigenlayer/package.nix

···
 }:
 buildGoModule rec {
   pname = "eigenlayer";
-  version = "0.13.1";
+  version = "0.13.2";
 
   src = fetchFromGitHub {
     owner = "Layr-Labs";
     repo = "eigenlayer-cli";
     rev = "v${version}";
-    hash = "sha256-sRVeHL5Qjse0HFnbURk+mN3V2awbcu7Gir6Buxotx5E=";
+    hash = "sha256-08Fu2PiYNBJr7vRX4LaxMiR4ke86rqTFHfi0k+A8t6c=";
   };
 
   vendorHash = "sha256-gFWUxC2pTMx3QVbIkqpCrsA2ZTQpal89pEJv11uCMJ8=";

pkgs/by-name/fa/fabric-ai/package.nix

···
 
 buildGoModule rec {
   pname = "fabric-ai";
-  version = "1.4.216";
+  version = "1.4.231";
 
   src = fetchFromGitHub {
     owner = "danielmiessler";
     repo = "fabric";
     tag = "v${version}";
-    hash = "sha256-OYBgKST8TsDPErZq6ABVQ2Fq9Wl6eixVOmgQlJ8XeWs=";
+    hash = "sha256-V/ryS0EB8izLsU0ggmAkdq3oFnR2h16ZF1JTJT/GMwY=";
   };
 
-  vendorHash = "sha256-GkAehT2oFG8cGe+PkceZios3ZG9S0CZs4L7slX+Dkck=";
+  vendorHash = "sha256-g2nMyrmDkb14siqiAMcis1bRijTsJ2KDtaK3FHCofx0=";
 
   # Fabric introduced plugin tests that fail in the nix build sandbox.
   doCheck = false;

pkgs/by-name/fa/favirecon/package.nix

···
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+
+buildGoModule rec {
+  pname = "favirecon";
+  version = "1.0.0";
+
+  src = fetchFromGitHub {
+    owner = "edoardottt";
+    repo = "favirecon";
+    tag = "v${version}";
+    hash = "sha256-nL5W4i4NJEjhkiO83hL9qK4XCIT5fnwRshyDkU1fASk=";
+  };
+
+  vendorHash = "sha256-PRLXVuqth9z0FkaMqUlEue1BFTI37oiobKOg3JvBYGU=";
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  meta = {
+    description = "Tool to detect technologies, WAF, exposed panels and known services";
+    homepage = "https://github.com/edoardottt/favirecon";
+    changelog = "https://github.com/edoardottt/favirecon/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "favirecon";
+  };
+}

pkgs/by-name/ge/genimage/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "genimage";
-  version = "18";
+  version = "19";
 
   src = fetchurl {
     url = "https://public.pengutronix.de/software/genimage/genimage-${version}.tar.xz";
-    sha256 = "sha256-68P4hsTYAGTdbG1ePC6Y5aZwB4JkEIzi+Jraii4T/t0=";
+    sha256 = "sha256-fsT8uGVmKosv8gKEgZBE/6hBN788oW+3SXASkbwB8Qg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gr/gradia/package.nix

···
   libportal-gtk4,
   gnome,
   librsvg,
-  libavif,
+  webp-pixbuf-loader,
+  libsoup_3,
+  bash,
 }:
 python3Packages.buildPythonApplication rec {
   pname = "gradia";
-  version = "1.5.0";
+  version = "1.6.1";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "AlexanderVanhee";
     repo = "Gradia";
     tag = "v${version}";
-    hash = "sha256-IamiF3mn3rVmDJrEOl0Ji+7muo8e8kunOxAZJTBNjM8=";
+    hash = "sha256-OfSqjxNfIk3dQZp4T6W1aL24FGEQKlFLGT+mV1+GR5o=";
   };
 
   nativeBuildInputs = [
···
   buildInputs = [
     libadwaita
     libportal-gtk4
+    libsoup_3
+    bash
   ];
 
   dependencies = with python3Packages; [
···
   ];
 
   postInstall = ''
+    substituteInPlace $out/share/gradia/gradia/ui/image_exporters.py --replace-fail "/bin/bash" "${lib.getExe bash}"
     export GDK_PIXBUF_MODULE_FILE="${
       gnome._gdkPixbufCacheBuilder_DO_NOT_USE {
         extraLoaders = [
           librsvg
-          libavif
+          webp-pixbuf-loader
         ];
       }
     }"

pkgs/by-name/hy/hyprpanel/package.nix

···
 }:
 ags.bundle {
   pname = "hyprpanel";
-  version = "0-unstable-2025-06-22";
+  version = "0-unstable-2025-07-03";
 
   __structuredAttrs = true;
   strictDeps = true;
···
   src = fetchFromGitHub {
     owner = "Jas-SinghFSU";
     repo = "HyprPanel";
-    rev = "2c0c66a8ddcdff69b2ff694fefbcd8df4387a9e7";
-    hash = "sha256-wn6XV23Sz/nsDPI+1FGjtyMfAWJWcXRpNcryS47DJdY=";
+    rev = "343c9857bd7f1d302d591e8d5f3f9952dc84775b";
+    hash = "sha256-MGJmxnjlERXJLDywrSHYSgpt7fhh3/HOHQboRrxDW64=";
   };
 
   # keep in sync with https://github.com/Jas-SinghFSU/HyprPanel/blob/master/flake.nix#L42

pkgs/by-name/jq/jq/disable-end-of-epoch-conversion-test.patch

···
 diff --git a/tests/optional.test b/tests/optional.test
-index 2623731..85bc9e9 100644
+index 77354cc..6cc7c12 100644
 --- a/tests/optional.test
 +++ b/tests/optional.test
-@@ -12,11 +12,6 @@ last(range(365 * 67)|("1970-03-01T01:02:03Z"|strptime("%Y-%m-%dT%H:%M:%SZ")|mkti
- null
- [2037,1,11,1,2,3,3,41]
+@@ -1,10 +1,5 @@
+ # See tests/jq.test and the jq manual for more information.
  
--# Regression test for #3276
+-# Regression test for #3276 (fails on mingw/WIN32)
 -fromdate
 -"2038-01-19T03:14:08Z"
 -2147483648

pkgs/by-name/ko/komikku/package.nix

···
 
 python3.pkgs.buildPythonApplication rec {
   pname = "komikku";
-  version = "1.80.0";
+  version = "1.81.0";
   pyproject = false;
 
   src = fetchFromGitea {
···
     owner = "valos";
     repo = "Komikku";
     tag = "v${version}";
-    hash = "sha256-5+AosFjxaqhIoIz+mbin1oRdjuGj+p117aoHLxYqHDA=";
+    hash = "sha256-k64bcJLKFUMy60a5zj740Pk3lGZ6vKaAv5HOHfoW9p4=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ku/kubectl-ktop/package.nix

···
 
 buildGoModule rec {
   pname = "kubectl-ktop";
-  version = "0.3.7";
+  version = "0.4.1";
 
   src = fetchFromGitHub {
     owner = "vladimirvivien";
     repo = "ktop";
     rev = "v${version}";
-    sha256 = "sha256-oxyEkDY53HjBgjWRajlcg+8Kx092lyLkPgOJleioO7o=";
+    sha256 = "sha256-5iFFYTZq5DcMYVnW90MKVDchVXzjXOPd5BeYcrqL9pQ=";
   };
 
-  vendorHash = "sha256-MLIcTHWo7lsqtAqH8naSvpS013t8KBVPRbch+CfeUNk=";
+  vendorHash = "sha256-qNrjyMMsFE2FmIJc46fYq08b3XFFZeLlspth5anjMm8=";
 
   subPackages = [ "." ];
 

pkgs/by-name/li/libqalculate/package.nix

···
       --replace-fail '"gnuplot - ' '"${gnuplotBinary} - '
   '';
 
-  preBuild = ''
-    pushd docs/reference
-    doxygen Doxyfile
-    popd
-  '';
-
   meta = {
     description = "Advanced calculator library";
     homepage = "http://qalculate.github.io";

pkgs/by-name/ni/nix-ld/package.nix

···
     hash = "sha256-ULoitJD5bMu0pFvh35cY5EEYywxj4e2fYOpqZwKB1lk=";
   };
 
+  # Submitted upstream: https://github.com/nix-community/nix-ld/pull/169
+  patches = [ ./rust-1.88.patch ];
+
   useFetchCargoVendor = true;
   cargoHash = "sha256-cDbszVjZcomag0HZvXM+17SjDiGS07iPj78zgsXstHc=";
 

pkgs/by-name/ni/nix-ld/rust-1.88.patch

···
+diff --git a/src/arch.rs b/src/arch.rs
+index a998697..45ec2cb 100644
+--- a/src/arch.rs
++++ b/src/arch.rs
+@@ -140,7 +140,7 @@ cfg_match! {
+     target_arch = "x86_64" => {
+         pub const ENTRY_TRAMPOLINE: Option<unsafe extern "C" fn() -> !> = Some(entry_trampoline);
+ 
+-        #[naked]
++        #[unsafe(naked)]
+         unsafe extern "C" fn entry_trampoline() -> ! {
+             core::arch::naked_asm!(
+                 "lea r10, [rip + {context}]",
+@@ -159,7 +159,7 @@ cfg_match! {
+     target_arch = "aarch64" => {
+         pub const ENTRY_TRAMPOLINE: Option<unsafe extern "C" fn() -> !> = Some(entry_trampoline);
+ 
+-        #[naked]
++        #[unsafe(naked)]
+         unsafe extern "C" fn entry_trampoline() -> ! {
+             core::arch::naked_asm!(
+                 "adrp x8, {context}",
+diff --git a/src/sys.rs b/src/sys.rs
+index 109d809..bf085d9 100644
+--- a/src/sys.rs
++++ b/src/sys.rs
+@@ -181,6 +181,5 @@ pub fn new_slice_leak(size: usize) -> Option<&'static mut [u8]> {
+ 
+ #[cfg(not(test))]
+ #[lang = "eh_personality"]
+-#[no_mangle]
+ pub extern fn rust_eh_personality() {
+ }

pkgs/by-name/rs/rsrpc/package.nix

···
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  openssl,
+  pkg-config,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "rsrpc";
+  version = "0.24.2";
+
+  src = fetchFromGitHub {
+    owner = "SpikeHD";
+    repo = "rsRPC";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Epf84YY7wkQjBbM09NbCSLiVreIgc/OA2g8tN8OmwXQ=";
+  };
+
+  cargoHash = "sha256-fTDAs88GE+ZoaCSJwCAUolTHpigDbkqNVMlbZOO5v1o=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+  ];
+
+  meta = {
+    changelog = "https://github.com/SpikeHD/rsRPC/releases/tag/v${finalAttrs.version}";
+    description = "Rust implementation of the Discord RPC server";
+    homepage = "https://github.com/SpikeHD/rsRPC";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.pyrox0 ];
+    mainProgram = "rsrpc-cli";
+  };
+})

pkgs/by-name/sh/shellhub-agent/package.nix

···
 
 buildGoModule rec {
   pname = "shellhub-agent";
-  version = "0.19.1";
+  version = "0.19.2";
 
   src = fetchFromGitHub {
     owner = "shellhub-io";
     repo = "shellhub";
     rev = "v${version}";
-    hash = "sha256-xFCUq1x9C+W1xxo6UIpW7ej7ltquvEqNUUvvF86rA9o=";
+    hash = "sha256-ZUsu/zfzCrn0tvmKxcFwKYQbS7JoPUSpg6/l3QHE4Cw=";
   };
 
   modRoot = "./agent";
 
-  vendorHash = "sha256-VjxgBXPrgwm8L3VIy7eLG2pVP+iYnpn1oR+ARRh3EAQ=";
+  vendorHash = "sha256-1UI/JRDRnsRrdV1AfPyE/rWEDAytEYmr+EyXn60UB/Y=";
 
   ldflags = [
     "-s"

pkgs/by-name/si/simplex-chat-desktop/package.nix

···
 
 let
   pname = "simplex-chat-desktop";
-  version = "6.3.6";
+  version = "6.3.7";
 
   src = fetchurl {
     url = "https://github.com/simplex-chat/simplex-chat/releases/download/v${version}/simplex-desktop-x86_64.AppImage";
-    hash = "sha256-EvDDWLgucqTPcf9eC2q9IJKfo1mxRAo82PAzkzxVESc=";
+    hash = "sha256-PsUSSs6HTV3gGbdH+hPifZ2Ak6j1vNSAHsqaL5U1lbY=";
   };
 
   appimageContents = appimageTools.extract {

pkgs/by-name/si/siyuan/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "siyuan";
-  version = "3.1.32";
+  version = "3.2.0";
 
   src = fetchFromGitHub {
     owner = "siyuan-note";
     repo = "siyuan";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-xhiQe9lopKhruwUSTi2GHQ9NPlkaezl1j70z/KOnZEc=";
+    hash = "sha256-Dqdooc1fhBxPDsdFXjUcsVkiXWHWGypyq8qJLd30tEA=";
   };
 
   kernel = buildGoModule {
     name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
     inherit (finalAttrs) src;
     sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-GRKBZe9cd2/sYstiCD/f/ckF0G1GYBPBc8FSFmjw3Mo=";
+    vendorHash = "sha256-LXW3k3wsszJ0Ep8JyGhe9jvlH2FA0a3GCrmDrzJ34Wk=";
 
     patches = [
       (replaceVars ./set-pandoc-path.patch {
···
       sourceRoot
       postPatch
       ;
-    hash = "sha256-PnuU4TWG10JP69BdGz+Uqz+WPUJU/Rb+Hicxy0+gB2Q=";
+    hash = "sha256-eSf4mpKBm1G4K9+V6VXEiPrIVQMyru7o9BGVIUycQaQ=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/app";

pkgs/by-name/tr/trevorproxy/package.nix

···
+{ python3Packages }: with python3Packages; toPythonApplication trevorproxy

pkgs/by-name/tr/trevorspray/package.nix

···
+{
+  lib,
+  python3,
+  fetchPypi,
+}:
+
+python3.pkgs.buildPythonApplication rec {
+  pname = "trevorspray";
+  version = "2.3.1";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-2kprXyZUAe8lBV48mBpmkhBtOoxgrP/TOTdS3Kw2WTE=";
+  };
+
+  build-system = with python3.pkgs; [ poetry-core ];
+
+  dependencies = with python3.pkgs; [
+    beautifulsoup4
+    exchangelib
+    mechanicalsoup
+    pygments
+    pysocks
+    sh
+    tldextract
+    trevorproxy
+  ];
+
+  meta = {
+    description = "Modular password spraying tool";
+    homepage = "https://github.com/blacklanternsecurity/TREVORspray";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "trevorspray";
+  };
+}

pkgs/by-name/un/unwaf/package.nix

···
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+
+buildGoModule rec {
+  pname = "unwaf";
+  version = "0-unstable-2025-07-04";
+
+  src = fetchFromGitHub {
+    owner = "mmarting";
+    repo = "unwaf";
+    rev = "06f19a49d048be1f92f395d04c43c9a2a36d2ab5";
+    hash = "sha256-9gM82vv7Qx4VQv7Ojg2rpmC6SN9olqF+07ovjn7Z3CM=";
+  };
+
+  vendorHash = "sha256-jCL0mEGuiUeruQq6u7wOczqNwT343xtMYkit6QKbZuk=";
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  meta = {
+    description = "Tool designed to help identify WAF bypasses using passive techniques";
+    homepage = "https://github.com/mmarting/unwaf";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "unwaf";
+  };
+}

pkgs/by-name/ve/vesta/package.nix

···
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+}:
+
+buildGoModule rec {
+  pname = "vesta";
+  version = "1.0.10";
+
+  src = fetchFromGitHub {
+    owner = "kvesta";
+    repo = "vesta";
+    tag = "v${version}";
+    hash = "sha256-/AIzIXtevFRW7gxA3dgNC8SPpT5ABrulf62GOpsw5Wc=";
+  };
+
+  vendorHash = "sha256-Rs1UXvSP3iXQySW5yVkP5JTWmEOej4atTpYpmQccbro=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  doInstallCheck = true;
+
+  versionCheckProgramArg = [ "version" ];
+
+  checkFlags = [ "-skip=TestPythonMatch" ];
+
+  meta = {
+    description = "Static analysis of vulnerabilities, Docker and Kubernetes cluster configuration";
+    homepage = "https://github.com/kvesta/vesta";
+    changelog = "https://github.com/kvesta/vesta/blob/${src.tag}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "vesta";
+  };
+}

pkgs/by-name/vu/vuls/package.nix

···
 
 buildGo124Module rec {
   pname = "vuls";
-  version = "0.33.1";
+  version = "0.33.2";
 
   src = fetchFromGitHub {
     owner = "future-architect";
     repo = "vuls";
     tag = "v${version}";
-    hash = "sha256-djs4bhdicZFDETw3tLoks7KKjLh/o6Z6Ivzw0I/VxH8=";
+    hash = "sha256-6tpX8pZNKJXJv6ArwNWn9ih19LU3DNeBUXy9U/dHhVc=";
     fetchSubmodules = true;
   };
 
-  vendorHash = "sha256-1W6xI6rRyaSfryNZSGhgHULotZ42lPsDt27KVzFEhog=";
+  vendorHash = "sha256-vZMpQvEswcsfppZ5tIaI4fqrKkwbN53shefRyLR/Sg8=";
 
   ldflags = [
     "-s"

pkgs/by-name/vu/vunnel/package.nix

···
 
 python3.pkgs.buildPythonApplication rec {
   pname = "vunnel";
-  version = "0.34.1";
+  version = "0.34.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "anchore";
     repo = "vunnel";
     tag = "v${version}";
-    hash = "sha256-+ZWrFODJNhQeB/Zn+3fwuuH4Huu542/imwcv7qEiZes=";
+    hash = "sha256-7bUKDo7l/xZhw6o6nimQKyjucB8uB80wOGUr0V++Q28=";
     leaveDotGit = true;
   };
 

pkgs/by-name/wa/waybar/package.nix

···
   gpsd,
   gtk-layer-shell,
   gtkmm3,
-  howard-hinnant-date,
   iniparser,
   jsoncpp,
   libcava,
···
     [
       gtk-layer-shell
       gtkmm3
-      howard-hinnant-date
       jsoncpp
       libsigcxx
       libxkbcommon

pkgs/by-name/we/webrtc-audio-processing/package.nix

···
     abseil-cpp
   ];
 
-  mesonFlags = lib.lists.optional (!stdenv.hostPlatform.isAarch64) "-Dneon=disabled";
+  mesonFlags =
+    lib.lists.optional (!stdenv.hostPlatform.isAarch64) "-Dneon=disabled"
+    ++ lib.lists.optional (stdenv.hostPlatform.isi686) "-Dinline-sse=false";
 
   passthru.tests.pkg-config = testers.hasPkgConfigModules {
     package = finalAttrs.finalPackage;

pkgs/by-name/xb/xbindkeys/gettext-0.25.patch

···
+diff --git a/Makefile.am b/Makefile.am
+index 3257a0a..e39e8bc 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -35,3 +35,5 @@ endif
+ 
+ 
+ man_MANS = xbindkeys.1 $(man_MANS_TK)
++
++SUBDIRS =
+\ No newline at end of file
+diff --git a/configure.ac b/configure.ac
+index f039ca8..eb0c886 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -3,10 +3,15 @@ AC_INIT(xbindkeys, 1.8.7, [e-mail])
+ AC_PREREQ(2.54)
+ AC_COPYRIGHT(Copyright (C) Philippe Brochard <[e-mail]>)
+ 
++AC_CONFIG_MACRO_DIRS([m4])
++
+ # Automake
+ AM_INIT_AUTOMAKE()
+ AM_MAINTAINER_MODE
+ 
++AM_GNU_GETTEXT_VERSION([0.25])
++AM_GNU_GETTEXT([external])
++
+ AC_CONFIG_SRCDIR([xbindkeys.c])
+ AM_CONFIG_HEADER(config.h)
+ 

pkgs/by-name/xb/xbindkeys/package.nix

···
     sha256 = "1wl2vc5alisiwyk8m07y1ryq8w3ll9ym83j27g4apm4ixjl8d6x2";
   };
 
+  # FIXME: remove when gettext is fixed
+  patches = [ ./gettext-0.25.patch ];
+
   nativeBuildInputs = [
     autoreconfHook
     pkg-config

pkgs/by-name/ya/yad/gettext-0.25.patch

···
+diff --git a/configure.ac b/configure.ac
+index 20a4e42..921ba18 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -8,9 +8,13 @@ AC_PREREQ([2.59])
+ 
+ AC_CONFIG_HEADERS([config.h])
+ AC_CONFIG_SRCDIR([src])
++AC_CONFIG_MACRO_DIRS([m4])
+ 
+ AM_MAINTAINER_MODE
+ 
++AM_GNU_GETTEXT_VERSION([0.25])
++AM_GNU_GETTEXT([external])
++
+ IT_PROG_INTLTOOL([0.40.0])
+ 
+ AC_PROG_CC

pkgs/by-name/ya/yad/package.nix

···
     sha256 = "sha256-Y7bp20fkNdSgBcSV1kPEpWEP7ASwZcScVRaPauwI72M=";
   };
 
+  # FIXME: remove when gettext is fixed
+  patches = [ ./gettext-0.25.patch ];
+
   configureFlags = [
     "--enable-icon-browser"
     "--with-gtk=gtk3"

pkgs/development/python-modules/ciscoconfparse2/default.nix

···
     "attrs"
     "hier-config"
     "passlib"
+    "tomlkit"
     "typeguard"
   ];
 

pkgs/development/python-modules/cloudcheck/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  httpx,
+  poetry-core,
+  poetry-dynamic-versioning,
+  pydantic,
+  pytest-asyncio,
+  pytestCheckHook,
+  radixtarget,
+  regex,
+}:
+
+buildPythonPackage rec {
+  pname = "cloudcheck";
+  version = "7.2.11";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "blacklanternsecurity";
+    repo = "cloudcheck";
+    tag = "v${version}";
+    hash = "sha256-z2KJ6EaqQLc2oQBZCfKMejPlTdgYGzmDPm/rGLHXCQA=";
+  };
+
+  pythonRelaxDeps = [ "radixtarget" ];
+
+  build-system = [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  dependencies = [
+    httpx
+    pydantic
+    radixtarget
+    regex
+  ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [ "cloudcheck" ];
+
+  meta = {
+    description = "Module to check whether an IP address or hostname belongs to popular cloud providers";
+    homepage = "https://github.com/blacklanternsecurity/cloudcheck";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+}

pkgs/development/python-modules/django-lasuite/default.nix

···
 
 buildPythonPackage rec {
   pname = "django-lasuite";
-  version = "0.0.9";
+  version = "0.0.10";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "suitenumerique";
     repo = "django-lasuite";
     tag = "v${version}";
-    hash = "sha256-vUtWBR9uRc99jTe0Gg7k4EZZAkqHct5+GCOHp1mTIkA=";
+    hash = "sha256-2rSPGioyG/2VeyBPfsNU4TL2jvlLjRQpxQSl1AHLL10=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/docling-serve/default.nix

···
     "websockets"
   ];
 
+  pythonRemoveDeps = [
+    "mlx-vlm" # not yet avainable on nixpkgs
+  ];
+
   dependencies =
     [
       docling

pkgs/development/python-modules/geventhttpclient/default.nix

···
 
 buildPythonPackage rec {
   pname = "geventhttpclient";
-  version = "2.3.3";
+  version = "2.3.4";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     tag = version;
     # TODO: unvendor llhttp
     fetchSubmodules = true;
-    hash = "sha256-0ltTmF09EKs+55Mitfe5vxPjmCtnhla6q6SAvhyIQPk=";
+    hash = "sha256-X85co03fMG7OSpkL02n3ektRNzu7oHChtwZzkspsSTk=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/langchain-aws/default.nix

···
 
 buildPythonPackage rec {
   pname = "langchain-aws";
-  version = "0.2.26";
+  version = "0.2.27";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "langchain-ai";
     repo = "langchain-aws";
     tag = "langchain-aws==${version}";
-    hash = "sha256-KuSXevx2beBSMfCM+75RDNIaBRlRWJBxDIm/1dXi110=";
+    hash = "sha256-FHWozXf0zEyKvFODZ+8JHMiwARJETJxmLh3z1HJSNV4=";
   };
 
   postPatch = ''

pkgs/development/python-modules/livekit-api/default.nix

···
 
 buildPythonPackage rec {
   pname = "livekit-api";
-  version = "1.0.2";
+  version = "1.0.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "livekit";
     repo = "python-sdks";
     tag = "api-v${version}";
-    hash = "sha256-QFUCMqRshEid08IbNjyvJvJSVhYfVJRjvXjSTlNlzlU=";
+    hash = "sha256-W9WmruzN5Nm9vrjG1Kcf3Orst0b2Mxm80hKLjwXowl8=";
   };
 
   pypaBuildFlags = [ "livekit-api" ];

pkgs/development/python-modules/mechanicalsoup/default.nix

···
   buildPythonPackage,
   fetchFromGitHub,
   lxml,
+  pytest-cov-stub,
   pytest-httpbin,
   pytest-mock,
   pytestCheckHook,
-  pythonOlder,
-  requests,
   requests-mock,
+  requests,
+  setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "mechanicalsoup";
   version = "1.4.0";
-  format = "setuptools";
-
-  disabled = pythonOlder "3.7";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "MechanicalSoup";
···
     substituteInPlace setup.py \
       --replace "'pytest-runner'" ""
     substituteInPlace setup.cfg \
-      --replace " --cov --cov-config .coveragerc --flake8" ""
+      --replace " --flake8" ""
   '';
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     beautifulsoup4
     lxml
     requests
···
   __darwinAllowLocalNetworking = true;
 
   nativeCheckInputs = [
+    pytest-cov-stub
     pytest-httpbin
     pytest-mock
     pytestCheckHook
···
   ];
 
   pythonImportsCheck = [ "mechanicalsoup" ];
+
+  disabledTests = [
+    # Missing module
+    "test_select_form_associated_elements"
+  ];
 
   meta = with lib; {
     description = "Python library for automating interaction with websites";

pkgs/development/python-modules/oelint-data/default.nix

···
 
 buildPythonPackage rec {
   pname = "oelint-data";
-  version = "1.0.18";
+  version = "1.0.20";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "priv-kweihmann";
     repo = "oelint-data";
     tag = version;
-    hash = "sha256-vaQ+ZX+kTIrgFNDHQ5DPFMmH+GiSWG5pgy+7/yuMVw4=";
+    hash = "sha256-Kfl/zYZ6PvYRn1E0MKzCZLvtqS6WV5U9hvOufFNKmPY=";
   };
 
   build-system = [

pkgs/development/python-modules/polars/avx512.patch

···
+diff --git a/crates/polars-compute/src/lib.rs b/crates/polars-compute/src/lib.rs
+index ebe1ef753..6e1eee897 100644
+--- a/crates/polars-compute/src/lib.rs
++++ b/crates/polars-compute/src/lib.rs
+@@ -5,6 +5,10 @@
+     all(feature = "simd", target_arch = "x86_64"),
+     feature(stdarch_x86_avx512)
+ )]
++#![cfg_attr(
++    all(feature = "simd", target_arch = "x86_64"),
++    feature(avx512_target_feature)
++)]
+ 
+ use arrow::types::NativeType;
+ 

pkgs/development/python-modules/polars/default.nix

···
 }:
 
 let
-  version = "1.27.1";
+  version = "1.31.0";
 
   # Hide symbols to prevent accidental use
   rust-jemalloc-sys = throw "polars: use polarsMemoryAllocator over rust-jemalloc-sys";
···
     owner = "pola-rs";
     repo = "polars";
     tag = "py-${version}";
-    hash = "sha256-/VigBBjZglPleXB9jhWHtA+y7WixjboVbzslprZ/A98=";
+    hash = "sha256-OZ7guV/uxa3jGesAh+ubrFjQSNVp5ImfXfPAQxagTj0=";
   };
 
+  patches = [
+    ./avx512.patch
+  ];
+
   # Do not type-check assertions because some of them use unstable features (`is_none_or`)
   postPatch = ''
     while IFS= read -r -d "" path ; do
···
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-dbPhEMhfe8DZO1D8U+3W1goNK1TAVyLzXHwXzzRvASw=";
+    hash = "sha256-yGTXUW6IVa+nRpmnkEl20/RJ/mxTSAaokETT8QLE+Ns=";
   };
 
   requiredSystemFeatures = [ "big-parallel" ];

pkgs/development/python-modules/pygitguardian/default.nix

···
 
 buildPythonPackage rec {
   pname = "pygitguardian";
-  version = "1.22.0";
+  version = "1.23.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "GitGuardian";
     repo = "py-gitguardian";
     tag = "v${version}";
-    hash = "sha256-AXgsB1ap233o6TP6htOFuQ++AubCRUqGbs5NWT0Qv+w=";
+    hash = "sha256-vpz7HBxRu1srqe+EBnjwNJ7xJ1TMrOIXBulPjDTTk3k=";
   };
 
   pythonRelaxDeps = [

pkgs/development/python-modules/radixtarget/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  poetry-dynamic-versioning,
+}:
+
+buildPythonPackage rec {
+  pname = "radixtarget";
+  version = "3.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "blacklanternsecurity";
+    repo = "radixtarget";
+    rev = "v${version}";
+    hash = "sha256-C7QmiAc8SO7ddfseoGDYkmrkLoxmAGww9MPhBX94ucg=";
+  };
+
+  build-system = [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  # Module has no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "radixtarget" ];
+
+  meta = {
+    description = "Radix implementation designed for lookups of IP addresses/networks and DNS hostnames";
+    homepage = "https://github.com/blacklanternsecurity/radixtarget";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+}

pkgs/development/python-modules/scikit-learn/default.nix

···
     [
       # Skip test_feature_importance_regression - does web fetch
       "test_feature_importance_regression"
+
+      # Fail due to new deprecation warnings in scipy
+      # FIXME: reenable when fixed upstream
+      "test_logistic_regression_path_convergence_fail"
+      "test_linalg_warning_with_newton_solver"
+      "test_newton_cholesky_fallback_to_lbfgs"
     ]
     ++ lib.optionals stdenv.hostPlatform.isAarch64 [
       # doesn't seem to produce correct results?

pkgs/development/python-modules/torchio/default.nix

···
 
 buildPythonPackage rec {
   pname = "torchio";
-  version = "0.20.16";
+  version = "0.20.17";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TorchIO-project";
     repo = "torchio";
     tag = "v${version}";
-    hash = "sha256-BWn4Kg44mMfUs4wtajYZTH6TATWxLVifCfZKfql/hdI=";
+    hash = "sha256-kZCbQGIkWmlXl25UviPrSDo0swCjWnvTTkBnxGI0Y7U=";
   };
 
   build-system = [

pkgs/development/python-modules/torchmetrics/default.nix

···
 
 buildPythonPackage rec {
   pname = "torchmetrics";
-  version = "1.7.3";
+  version = "1.7.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Lightning-AI";
     repo = "torchmetrics";
     tag = "v${version}";
-    hash = "sha256-xnGODA5m4UannZKXn9Mq8bKI1WA+yHTOTicJ6AuLB+4=";
+    hash = "sha256-MpqpzfsT9cxyKHvcw2ue67gaqQfdsLARov50ivGYO98=";
   };
 
   dependencies = [

pkgs/development/python-modules/trevorproxy/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  poetry-core,
+  sh,
+}:
+
+buildPythonPackage rec {
+  pname = "trevorproxy";
+  version = "1.0.9";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-ZUOqtJmLiZbe2LBkpTGELeKFkmzA0WCJ/TXPi9eyRXs=";
+  };
+
+  build-system = [ poetry-core ];
+
+  dependencies = [ sh ];
+
+  pythonImportsCheck = [ "trevorproxy" ];
+
+  meta = {
+    description = "Module to rotate the source IP address via SSH proxies and other methods";
+    homepage = "https://github.com/blacklanternsecurity/TREVORproxy";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "trevorproxy";
+  };
+}

pkgs/development/tools/build-managers/rebar3/default.nix

···
 
           # our patches cause the tests to fail
           doCheck = false;
+
+          # patchShebangs corrupts the magic escript shebang+zip files
+          dontPatchShebangs = true;
         })
       );
     in

pkgs/development/tools/parsing/tree-sitter/default.nix

···
   pname = "tree-sitter";
   inherit src version;
 
-  useFetchCargoVendor = true;
-  cargoHash = "sha256-/KCvLsbb6DullLpRoSYbxtSsm/TMc6o0Y/QmK6BN748=";
+  cargoHash = "sha256-sGh16M7cbT5ct1sT2FcUUoIQFcoOftTuQ0aSCjtkTEs=";
 
   buildInputs =
     [ installShellFiles ]

pkgs/development/tools/qtcreator/default.nix

···
   rustc-demangle,
   elfutils,
   perf,
-  gtk3,
 }:
 
 stdenv.mkDerivation rec {
···
 
   qtWrapperArgs = [
     "--set-default PERFPROFILER_PARSER_FILEPATH ${lib.getBin perf}/bin"
-    "--suffix XDG_DATA_DIRS : ${gtk3}/share/gsettings-schemas/${gtk3.name}"
   ];
 
   meta = with lib; {

pkgs/kde/frameworks/kimageformats/default.nix

···
   extraBuildInputs = [
     libheif
     libjxl
-    libavif
+    # FIXME: cmake files are broken, disabled for now
+    # libavif
     libraw
     openexr
   ];

pkgs/servers/dns/nsd/default.nix

···
   fetchurl,
   libevent,
   openssl,
+  pkg-config,
+  systemdMinimal,
   nixosTests,
   bind8Stats ? false,
   checking ? false,
···
   rootServer ? false,
   rrtypes ? false,
   zoneStats ? false,
+  withSystemd ? lib.meta.availableOn stdenv.hostPlatform systemdMinimal,
 
   configFile ? "/etc/nsd/nsd.conf",
 }:
···
     substituteInPlace nsd-control-setup.sh.in --replace openssl ${openssl}/bin/openssl
   '';
 
-  buildInputs = [
-    libevent
-    openssl
-  ];
+  buildInputs =
+    [
+      libevent
+      openssl
+    ]
+    ++ lib.optionals withSystemd [
+      systemdMinimal
+      pkg-config
+    ];
 
   enableParallelBuilding = true;
 
···
     ++ edf rootServer "root-server"
     ++ edf rrtypes "draft-rrtypes"
     ++ edf zoneStats "zone-stats"
+    ++ edf withSystemd "systemd"
     ++ [
       "--with-ssl=${openssl.dev}"
       "--with-libevent=${libevent.dev}"

pkgs/servers/spicedb/default.nix

···
 
 buildGoModule rec {
   pname = "spicedb";
-  version = "1.44.3";
+  version = "1.44.4";
 
   src = fetchFromGitHub {
     owner = "authzed";
     repo = "spicedb";
     rev = "v${version}";
-    hash = "sha256-V/uUfysSHDtkZjRoJMI4qbfl1PuCE6pbwRhk6D14s60=";
+    hash = "sha256-hpu9tg18JASuHVSrEL9xKWJ/+k6Cam3aBQ2OLsIehjw=";
   };
 
-  vendorHash = "sha256-Tdg9HOzH7N465QX7m65S7+HfT+sdgVpdTnHjhart1ec=";
+  vendorHash = "sha256-EQQtVudG+xjim15Ud4YJ05j0l+omnEnpo42tS99Mmd8=";
 
   ldflags = [
     "-X 'github.com/jzelinskie/cobrautil/v2.Version=${src.rev}'"

pkgs/servers/sql/postgresql/ext/pg_net.nix

···
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg_net";
-  version = "0.16.0";
+  version = "0.18.0";
 
   src = fetchFromGitHub {
     owner = "supabase";
     repo = "pg_net";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Jtb4jGvci70Yb6YoEsr8sSHz30kFeYFitnLjtJK1CGI=";
+    hash = "sha256-MXZewz6vb1ZEGMzbk/x0VtBDH2GxnwYWsy3EjJnas2U=";
   };
 
   buildInputs = [ curl ];
 
-  env.NIX_CFLAGS_COMPILE = "-Wno-error";
+  env.NIX_CFLAGS_COMPILE = toString (
+    lib.optional (lib.versionAtLeast postgresql.version "18") "-Wno-error=missing-variable-declarations"
+  );
 
   meta = {
     description = "Async networking for Postgres";

pkgs/tools/misc/system-config-printer/default.nix

···
 
     # switch to pep517 build tools
     ./pep517.patch
+
+    # FIXME: remove when gettext is fixed
+    ./gettext-0.25.patch
   ];
 
   buildInputs = [

pkgs/tools/misc/system-config-printer/gettext-0.25.patch

···
+diff --git a/Makefile.am b/Makefile.am
+index 9993ca0d..678fa629 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -1,5 +1,7 @@
+ SUBDIRS=. po
+ 
++ACLOCAL_AMFLAGS = -I m4
++
+ EXPORT_MODULES=					\
+ 	cupshelpers/__init__.py			\
+ 	cupshelpers/cupshelpers.py		\

pkgs/tools/security/pinentry/default.nix

···
       dontWrapQtApps = true;
 
       patches =
-        [ ./autoconf-ar.patch ]
+        [
+          ./autoconf-ar.patch
+          ./gettext-0.25.patch
+        ]
         ++ lib.optionals (lib.elem "gtk2" buildFlavors) [
           (fetchpatch {
             url = "https://salsa.debian.org/debian/pinentry/raw/debian/1.1.0-1/debian/patches/0007-gtk2-When-X11-input-grabbing-fails-try-again-over-0..patch";

pkgs/tools/security/pinentry/gettext-0.25.patch

···
 diff --git a/configure.ac b/configure.ac
-index 1b3ded6..0b78e69 100644
+index 2a9f5d2..a3d9b79 100644
 --- a/configure.ac
 +++ b/configure.ac
-@@ -358,6 +358,8 @@ if test "$pinentry_tty" = "yes"; then
+@@ -45,6 +45,7 @@ m4_esyscmd([echo ]mym4_version[>VERSION])
+ 
+ AC_INIT([mym4_package],[mym4_version],[https://bugs.gnupg.org])
+ 
++AC_CONFIG_MACRO_DIRS([m4])
+ AC_CONFIG_AUX_DIR([build-aux])
+ AC_CONFIG_HEADERS([config.h])
+ AC_CONFIG_SRCDIR(pinentry/pinentry.h)
+@@ -329,13 +330,15 @@ if test "$pinentry_tty" = "yes"; then
             [The TTY version of Pinentry is to be build])
  fi
  
 +AM_GNU_GETTEXT_VERSION([0.21])
 +AM_GNU_GETTEXT([external])
++AM_ICONV
  
  dnl
  dnl Additional checks pinentry Curses.
+ dnl
+ if test "$pinentry_curses" = "yes" \
+         -o "$fallback_curses" = "yes" ; then
+-  AM_ICONV
+   if test "$am_cv_func_iconv" != "yes"; then
+     AC_MSG_ERROR([[
+ ***

pkgs/top-level/python-packages.nix

···
 
   clldutils = callPackage ../development/python-modules/clldutils { };
 
+  cloudcheck = callPackage ../development/python-modules/cloudcheck { };
+
   cloudevents = callPackage ../development/python-modules/cloudevents { };
 
   cloudflare = callPackage ../development/python-modules/cloudflare { };
···
 
   radish-bdd = callPackage ../development/python-modules/radish-bdd { };
 
+  radixtarget = callPackage ../development/python-modules/radixtarget { };
+
   radon = callPackage ../development/python-modules/radon { };
 
   railroad-diagrams = callPackage ../development/python-modules/railroad-diagrams { };
···
   treex = callPackage ../development/python-modules/treex { };
 
   treq = callPackage ../development/python-modules/treq { };
+
+  trevorproxy = callPackage ../development/python-modules/trevorproxy { };
 
   trezor = callPackage ../development/python-modules/trezor { };