Merge remote-tracking branch 'origin/staging-next' into staging

doc/languages-frameworks/php.section.md

···
 
 In Nix, there are multiple approaches to building a Composer-based project.
 
-One such method is the `php.buildComposerProject` helper function, which serves
+One such method is the `php.buildComposerProject2` helper function, which serves
 as a wrapper around `mkDerivation`.
 
 Using this function, you can build a PHP project that includes both a
···
 you wish to modify the Composer version, use the `composer` attribute. It is
 important to note that both attributes should be of the `derivation` type.
 
-Here's an example of working code example using `php.buildComposerProject`:
+Here's an example of working code example using `php.buildComposerProject2`:
 
 ```nix
 { php, fetchFromGitHub }:
 
-php.buildComposerProject (finalAttrs: {
+php.buildComposerProject2 (finalAttrs: {
   pname = "php-app";
   version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "git-owner";
     repo = "git-repo";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-VcQRSss2dssfkJ+iUb5qT+FJ10GHiFDzySigcmuVI+8=";
   };
 

doc/release-notes/rl-2505.section.md

···
 
 - `cassandra_3_0` and `cassandra_3_11` have been removed as they have reached end-of-life. Please update to `cassandra_4`. See the [changelog](https://github.com/apache/cassandra/blob/cassandra-4.0.17/NEWS.txt) for more information about the upgrade process.
 
+- `mariadb_105` has been removed as it has reached end-of-life in 2025-06. Please update to `mariadb_106`.
+
 - NetBox was updated to `>= 4.2.0`. Have a look at the breaking changes
   of the [4.1 release](https://github.com/netbox-community/netbox/releases/tag/v4.1.0)
   and the [4.2 release](https://github.com/netbox-community/netbox/releases/tag/v4.2.0),

lib/default.nix

···
         toSentenceCase
         addContextFrom
         splitString
+        splitStringBy
         removePrefix
         removeSuffix
         versionOlder

lib/strings.nix

···
     map (addContextFrom s) splits;
 
   /**
+    Splits a string into substrings based on a predicate that examines adjacent characters.
+
+    This function provides a flexible way to split strings by checking pairs of characters
+    against a custom predicate function. Unlike simpler splitting functions, this allows
+    for context-aware splitting based on character transitions and patterns.
+
+    # Inputs
+
+    `predicate`
+    : Function that takes two arguments (previous character and current character)
+      and returns true when the string should be split at the current position.
+      For the first character, previous will be "" (empty string).
+
+    `keepSplit`
+    : Boolean that determines whether the splitting character should be kept as
+      part of the result. If true, the character will be included at the beginning
+      of the next substring; if false, it will be discarded.
+
+    `str`
+    : The input string to split.
+
+    # Return
+
+    A list of substrings from the original string, split according to the predicate.
+
+    # Type
+
+    ```
+    splitStringBy :: (string -> string -> bool) -> bool -> string -> [string]
+    ```
+
+    # Examples
+    :::{.example}
+    ## `lib.strings.splitStringBy` usage example
+
+    Split on periods and hyphens, discarding the separators:
+    ```nix
+    splitStringBy (prev: curr: builtins.elem curr [ "." "-" ]) false "foo.bar-baz"
+    => [ "foo" "bar" "baz" ]
+    ```
+
+    Split on transitions from lowercase to uppercase, keeping the uppercase characters:
+    ```nix
+    splitStringBy (prev: curr: builtins.match "[a-z]" prev != null && builtins.match "[A-Z]" curr != null) true "fooBarBaz"
+    => [ "foo" "Bar" "Baz" ]
+    ```
+
+    Handle leading separators correctly:
+    ```nix
+    splitStringBy (prev: curr: builtins.elem curr [ "." ]) false ".foo.bar.baz"
+    => [ "" "foo" "bar" "baz" ]
+    ```
+
+    Handle trailing separators correctly:
+    ```nix
+    splitStringBy (prev: curr: builtins.elem curr [ "." ]) false "foo.bar.baz."
+    => [ "foo" "bar" "baz" "" ]
+    ```
+    :::
+  */
+  splitStringBy =
+    predicate: keepSplit: str:
+    let
+      len = stringLength str;
+
+      # Helper function that processes the string character by character
+      go =
+        pos: currentPart: result:
+        # Base case: reached end of string
+        if pos == len then
+          result ++ [ currentPart ]
+        else
+          let
+            currChar = substring pos 1 str;
+            prevChar = if pos > 0 then substring (pos - 1) 1 str else "";
+            isSplit = predicate prevChar currChar;
+          in
+          if isSplit then
+            # Split here - add current part to results and start a new one
+            let
+              newResult = result ++ [ currentPart ];
+              newCurrentPart = if keepSplit then currChar else "";
+            in
+            go (pos + 1) newCurrentPart newResult
+          else
+            # Keep building current part
+            go (pos + 1) (currentPart + currChar) result;
+    in
+    if len == 0 then [ (addContextFrom str "") ] else map (addContextFrom str) (go 0 "" [ ]);
+
+  /**
     Return a string without the specified prefix, if the prefix matches.
 
     # Inputs

lib/tests/misc.nix

···
     ];
   };
 
+  testSplitStringBySimpleDelimiter = {
+    expr = strings.splitStringBy (
+      prev: curr:
+      builtins.elem curr [
+        "."
+        "-"
+      ]
+    ) false "foo.bar-baz";
+    expected = [
+      "foo"
+      "bar"
+      "baz"
+    ];
+  };
+
+  testSplitStringByLeadingDelimiter = {
+    expr = strings.splitStringBy (prev: curr: builtins.elem curr [ "." ]) false ".foo.bar.baz";
+    expected = [
+      ""
+      "foo"
+      "bar"
+      "baz"
+    ];
+  };
+
+  testSplitStringByTrailingDelimiter = {
+    expr = strings.splitStringBy (prev: curr: builtins.elem curr [ "." ]) false "foo.bar.baz.";
+    expected = [
+      "foo"
+      "bar"
+      "baz"
+      ""
+    ];
+  };
+
+  testSplitStringByMultipleConsecutiveDelimiters = {
+    expr = strings.splitStringBy (prev: curr: builtins.elem curr [ "." ]) false "foo...bar";
+    expected = [
+      "foo"
+      ""
+      ""
+      "bar"
+    ];
+  };
+
+  testSplitStringByKeepingSplitChar = {
+    expr = strings.splitStringBy (prev: curr: builtins.elem curr [ "." ]) true "foo.bar.baz";
+    expected = [
+      "foo"
+      ".bar"
+      ".baz"
+    ];
+  };
+
+  testSplitStringByCaseTransition = {
+    expr = strings.splitStringBy (
+      prev: curr: builtins.match "[a-z]" prev != null && builtins.match "[A-Z]" curr != null
+    ) true "fooBarBaz";
+    expected = [
+      "foo"
+      "Bar"
+      "Baz"
+    ];
+  };
+
+  testSplitStringByEmptyString = {
+    expr = strings.splitStringBy (prev: curr: builtins.elem curr [ "." ]) false "";
+    expected = [ "" ];
+  };
+
+  testSplitStringByComplexPredicate = {
+    expr = strings.splitStringBy (
+      prev: curr:
+      prev != ""
+      && curr != ""
+      && builtins.match "[0-9]" prev != null
+      && builtins.match "[a-z]" curr != null
+    ) true "123abc456def";
+    expected = [
+      "123"
+      "abc456"
+      "def"
+    ];
+  };
+
+  testSplitStringByUpperCaseStart = {
+    expr = strings.splitStringBy (prev: curr: builtins.match "[A-Z]" curr != null) true "FooBarBaz";
+    expected = [
+      ""
+      "Foo"
+      "Bar"
+      "Baz"
+    ];
+  };
+
   testEscapeShellArg = {
     expr = strings.escapeShellArg "esc'ape\nme";
     expected = "'esc'\\''ape\nme'";

maintainers/maintainer-list.nix

···
     githubId = 11493130;
     name = "Asbjørn Olling";
   };
+  aschleck = {
+    name = "April Schleck";
+    github = "aschleck";
+    githubId = 115766;
+  };
   ascii17 = {
     name = "Allen Conlon";
     email = "[e-mail]";
···
   };
   awwpotato = {
     email = "[e-mail]";
+    matrix = "@awwpotato:envs.net";
     github = "awwpotato";
     githubId = 153149335;
     name = "awwpotato";
···
     githubId = 12715461;
     name = "Anders Bo Rasmussen";
   };
+  fvckgrimm = {
+    email = "[e-mail]";
+    github = "fvckgrimm";
+    githubId = 55907409;
+    name = "Grimm";
+  };
   fwc = {
     github = "fwc";
     githubId = 29337229;
···
     githubId = 1915;
     name = "Asherah Connor";
   };
+  kiyotoko = {
+    email = "[e-mail]";
+    github = "Kiyotoko";
+    githubId = 49951907;
+    name = "Karl Zschiebsch";
+  };
   kjeremy = {
     email = "[e-mail]";
     name = "Jeremy Kolb";
···
     github = "linuxissuper";
     githubId = 74221543;
     name = "Moritz Goltdammer";
-  };
-  linuxmobile = {
-    email = "[e-mail]";
-    github = "linuxmobile";
-    githubId = 10554636;
-    name = "Braian A. Diez";
   };
   linuxwhata = {
     email = "[e-mail]";
···
     email = "[e-mail]";
     github = "x3rAx";
     githubId = 2268851;
+  };
+  x807x = {
+    name = "x807x";
+    email = "[e-mail]";
+    matrix = "@x807x:matrix.org";
+    github = "x807x";
+    githubId = 86676478;
   };
   xanderio = {
     name = "Alexander Sieg";

nixos/modules/services/mail/maddy.nix

···
 
       enable = lib.mkEnableOption "Maddy, a free an open source mail server";
 
+      package = lib.mkPackageOption pkgs "maddy" { };
+
       user = lib.mkOption {
         default = "maddy";
         type = with lib.types; uniq str;
···
 
     systemd = {
 
-      packages = [ pkgs.maddy ];
+      packages = [ cfg.package ];
       services = {
         maddy = {
           serviceConfig = {
···
           script = ''
             ${lib.optionalString (cfg.ensureAccounts != [ ]) ''
               ${lib.concatMapStrings (account: ''
-                if ! ${pkgs.maddy}/bin/maddyctl imap-acct list | grep "${account}"; then
-                  ${pkgs.maddy}/bin/maddyctl imap-acct create ${account}
+                if ! ${cfg.package}/bin/maddyctl imap-acct list | grep "${account}"; then
+                  ${cfg.package}/bin/maddyctl imap-acct create ${account}
                 fi
               '') cfg.ensureAccounts}
             ''}
             ${lib.optionalString (cfg.ensureCredentials != { }) ''
               ${lib.concatStringsSep "\n" (
-                lib.mapAttrsToList (name: cfg: ''
-                  if ! ${pkgs.maddy}/bin/maddyctl creds list | grep "${name}"; then
-                    ${pkgs.maddy}/bin/maddyctl creds create --password $(cat ${lib.escapeShellArg cfg.passwordFile}) ${name}
+                lib.mapAttrsToList (name: credentials: ''
+                  if ! ${cfg.package}/bin/maddyctl creds list | grep "${name}"; then
+                    ${cfg.package}/bin/maddyctl creds create --password $(cat ${lib.escapeShellArg credentials.passwordFile}) ${name}
                   fi
                 '') cfg.ensureCredentials
               )}
···
     };
 
     environment.systemPackages = [
-      pkgs.maddy
+      cfg.package
     ];
   };
 }

nixos/modules/services/web-apps/peertube.nix

···
       environment = env;
 
       path = with pkgs; [
-        nodejs_18
+        nodejs_20
         yarn
         ffmpeg-headless
         openssl
···
       })
       (lib.attrsets.setAttrByPath
         [ cfg.user "packages" ]
-        [ peertubeEnv pkgs.nodejs_18 pkgs.yarn pkgs.ffmpeg-headless ]
+        [ peertubeEnv pkgs.nodejs_20 pkgs.yarn pkgs.ffmpeg-headless ]
       )
       (lib.mkIf cfg.redis.enableUnixSocket {
         ${config.services.peertube.user}.extraGroups = [ "redis-peertube" ];

nixos/modules/services/web-apps/wiki-js.nix

···
         WorkingDirectory = "/var/lib/${cfg.stateDirectoryName}";
         DynamicUser = true;
         PrivateTmp = true;
-        ExecStart = "${pkgs.nodejs_18}/bin/node ${pkgs.wiki-js}/server";
+        ExecStart = "${pkgs.nodejs_20}/bin/node ${pkgs.wiki-js}/server";
       };
     };
   };

pkgs/applications/editors/rstudio/default.nix

···
   zip,
   git,
   makeWrapper,
-  electron_33,
+  electron_34,
   server ? false, # build server version
   pam,
   nixosTests,
···
 let
   # Note: we shouldn't use the latest electron here, since the node-abi dependency might
   # need to be updated every time the latest electron gets a new abi version number
-  electron = electron_33;
+  electron = electron_34;
 
   mathJaxSrc = fetchzip {
     url = "https://s3.amazonaws.com/rstudio-buildtools/mathjax-27.zip";

pkgs/applications/misc/redshift/default.nix

···
 
   gammastep = mkRedshift rec {
     pname = "gammastep";
-    version = "2.0.9";
+    version = "2.0.11";
 
     src = fetchFromGitLab {
       owner = "chinstrap";
       repo = pname;
       rev = "v${version}";
-      hash = "sha256-EdVLBBIEjMu+yy9rmcxQf4zdW47spUz5SbBDbhmLjOU=";
+      hash = "sha256-c8JpQLHHLYuzSC9bdymzRTF6dNqOLwYqgwUOpKcgAEU=";
     };
 
     meta = redshift.meta // {

pkgs/applications/science/logic/eprover/default.nix

···
   enableHO ? false,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "eprover";
-  version = "3.1";
+  version = "3.2";
 
   src = fetchurl {
-    url = "https://wwwlehre.dhbw-stuttgart.de/~sschulz/WORK/E_DOWNLOAD/V_${version}/E.tgz";
-    hash = "sha256-+E2z7JAkiNXhZrWRXFbhI5f9NmB0Q4eixab4GlAFqYY=";
+    url = "https://wwwlehre.dhbw-stuttgart.de/~sschulz/WORK/E_DOWNLOAD/V_${finalAttrs.version}/E.tgz";
+    hash = "sha256-B0yOX8MGJHY0HOeQ/RWtgATTIta2YnhEvSdoqIML1K4=";
   };
 
   buildInputs = [ which ];
···
   preConfigure = ''
     sed -e 's/ *CC *= *gcc$//' -i Makefile.vars
   '';
+
   configureFlags =
     [
       "--exec-prefix=$(out)"
···
       "--enable-ho"
     ];
 
-  meta = with lib; {
+  meta = {
     description = "Automated theorem prover for full first-order logic with equality";
     homepage = "http://www.eprover.org/";
-    license = licenses.gpl2;
-    maintainers = with maintainers; [
+    license = lib.licenses.gpl2;
+    maintainers = with lib.maintainers; [
       raskin
     ];
-    platforms = platforms.all;
+    platforms = lib.platforms.all;
   };
-}
+})

pkgs/build-support/go/module.nix

···
           "buildGoModule: vendorHash is missing"
       ),
 
+      # The go.sum file to track which can cause rebuilds.
+      goSum ? null,
+
       # Whether to delete the vendor folder supplied with the source.
       deleteVendor ? false,
 
···
         vendorHash
         deleteVendor
         proxyVendor
+        goSum
         ;
       goModules =
         if (finalAttrs.vendorHash == null) then
           ""
         else
           (stdenv.mkDerivation {
-            name = "${finalAttrs.name or "${finalAttrs.pname}-${finalAttrs.version}"}-go-modules";
+            name =
+              let
+                prefix = "${finalAttrs.name or "${finalAttrs.pname}-${finalAttrs.version}"}-";
+
+                # If "goSum" is supplied then it can cause "goModules" to rebuild.
+                # Attach the hash name of the "go.sum" file so we can rebuild when it changes.
+                suffix = lib.optionalString (
+                  finalAttrs.goSum != null
+                ) "-${(lib.removeSuffix "-go.sum" (lib.removePrefix "${builtins.storeDir}/" finalAttrs.goSum))}";
+              in
+              "${prefix}go-modules${suffix}";
 
             nativeBuildInputs = (finalAttrs.nativeBuildInputs or [ ]) ++ [
               go
···
               cacert
             ];
 
-            inherit (finalAttrs) src modRoot;
+            inherit (finalAttrs) src modRoot goSum;
 
             # The following inheritance behavior is not trivial to expect, and some may
             # argue it's not ideal. Changing it may break vendor hashes in Nixpkgs and

pkgs/by-name/al/allure/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "allure";
-  version = "2.33.0";
+  version = "2.34.0";
 
   src = fetchurl {
     url = "https://github.com/allure-framework/allure2/releases/download/${finalAttrs.version}/allure-${finalAttrs.version}.tgz";
-    hash = "sha256-ZRAvIBF89LFYWfmO/bPqL85/XQ9l0TRGOs/uQ9no7tA=";
+    hash = "sha256-1R4x8LjUv4ZQXfFeJ1HkHml3sRLhb1tRV3UqApVEo7U=";
   };
 
   dontConfigure = true;

pkgs/by-name/an/angryoxide/package.nix

···
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  libxkbcommon,
+  sqlite,
+  zlib,
+  wayland,
+}:
+
+let
+  libwifi = fetchFromGitHub {
+    owner = "Ragnt";
+    repo = "libwifi";
+    rev = "71268e1898ad88b8b5d709e186836db417b33e81";
+    hash = "sha256-2X/TZyLX9Tb54c6Sdla4bsWdq05NU72MVSuPvNfxySk=";
+  };
+in
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "angryoxide";
+  version = "0.8.32";
+
+  src = fetchFromGitHub {
+    owner = "Ragnt";
+    repo = "AngryOxide";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Sla5lvyqZho9JE4QVS9r0fx5+DVlU90c8OSfO4/f0B4=";
+  };
+
+  postPatch = ''
+    rm -r libs/libwifi
+    ln -s ${libwifi} libs/libwifi
+  '';
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-mry4l0a7DZOWkrChU40OVRCBjKwI39cyZtvEBA5tro0=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    libxkbcommon
+    sqlite
+    wayland
+    zlib
+  ];
+
+  meta = {
+    description = "802.11 Attack Tool";
+    changelog = "https://github.com/Ragnt/AngryOxide/releases/tag/v${finalAttrs.version}";
+    homepage = "https://github.com/Ragnt/AngryOxide/";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fvckgrimm ];
+    mainProgram = "angryoxide";
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/ar/argocd/package.nix

···
 
 buildGoModule rec {
   pname = "argocd";
-  version = "2.14.9";
+  version = "2.14.10";
 
   src = fetchFromGitHub {
     owner = "argoproj";
     repo = "argo-cd";
     rev = "v${version}";
-    hash = "sha256-L8ipYgMpL6IhPh/fSanNywzUMDJQfMZc7pyYr2dtbAw=";
+    hash = "sha256-Z+xSA0LrvXHHmNg7+i53Y1mSYnLYURZUglXRKvkld14=";
   };
 
   proxyVendor = true; # darwin/linux hash mismatch
-  vendorHash = "sha256-j+uwLG9/r9dlK9JWrQmJdgBOqgZs/aIvkh1Sg81dm1I=";
+  vendorHash = "sha256-Xm9J08pxzm3fPQjMA6NDu+DPJGsvtUvj+n/qrOZ9BE4=";
 
   # Set target as ./cmd per cli-local
   # https://github.com/argoproj/argo-cd/blob/master/Makefile#L227

pkgs/by-name/be/beeper/package.nix

···
     # disable creating a desktop file and icon in the home folder during runtime
     linuxConfigFilename=$out/resources/app/build/main/linux-*.mjs
     echo "export function registerLinuxConfig() {}" > $linuxConfigFilename
-    substituteInPlace $out/beepertexts.desktop --replace-fail "AppRun" "beeper"
   '';
 
   extraInstallCommands = ''
     install -Dm 644 ${appimageContents}/beepertexts.png $out/share/icons/hicolor/512x512/apps/beepertexts.png
     install -Dm 644 ${appimageContents}/beepertexts.desktop -t $out/share/applications/
+    substituteInPlace $out/share/applications/beepertexts.desktop --replace-fail "AppRun" "beeper"
 
     . ${makeWrapper}/nix-support/setup-hook
     wrapProgram $out/bin/beeper \

pkgs/by-name/be/beyond-all-reason/package.nix

···
+{
+  lib,
+  fetchurl,
+  appimageTools,
+  openal,
+}:
+let
+  version = "1.2988.0";
+  pname = "beyond-all-reason";
+
+  src = fetchurl {
+    url = "https://github.com/beyond-all-reason/BYAR-Chobby/releases/download/v${version}/Beyond-All-Reason-${version}.AppImage";
+    hash = "sha256-ZJW5BdxxqyrM2TJTO0SBp4BXt3ILyi77EZx73X8hqJE=";
+  };
+in
+appimageTools.wrapType2 {
+  inherit pname version src;
+
+  extraPkgs = pkgs: [ openal ];
+
+  meta = {
+    homepage = "https://www.beyondallreason.info/";
+    downloadPage = "https://www.beyondallreason.info/download";
+    changelog = "https://github.com/beyond-all-reason/BYAR-Chobby/releases/tag/v${version}";
+    description = "Free Real Time Strategy Game with a grand scale and full physical simulation in a sci-fi setting";
+    license = lib.licenses.gpl2Plus;
+    platforms = [ "x86_64-linux" ];
+    maintainers = with lib.maintainers; [
+      kiyotoko
+    ];
+  };
+}

pkgs/by-name/bl/blender/package.nix

···
 
 stdenv'.mkDerivation (finalAttrs: {
   pname = "blender";
-  version = "4.4.0";
+  version = "4.4.1";
 
   srcs = fetchzip {
     name = "source";
     url = "https://download.blender.org/source/blender-${finalAttrs.version}.tar.xz";
-    hash = "sha256-pAzOayAPyRYgTixAyg2prkUtI70uFulRuBYhgU9ZNw4=";
+    hash = "sha256-5MsJ7UFpwwtaq905CiTkas/qPYOaeiacSSl3qu9h5w0=";
   };
 
   patches = [ ] ++ lib.optional stdenv.hostPlatform.isDarwin ./darwin.patch;

pkgs/by-name/ca/calibre/package.nix

···
       $ETN 'test_qt'  # we don't include svg or webp support
       $ETN 'test_import_of_all_python_modules'  # explores actual file paths, gets confused
       $ETN 'test_websocket_basic'  # flakey
+      ${lib.optionalString stdenv.hostPlatform.isAarch64 "$ETN 'test_piper'"} # https://github.com/microsoft/onnxruntime/issues/10038
       ${lib.optionalString (!unrarSupport) "$ETN 'test_unrar'"}
     )
 

pkgs/by-name/ca/cargo-ament-build/Cargo.lock

···
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "anyhow"
+version = "1.0.98"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e16d2d3311acee920a9eb8d33b8cbc1787ce4a264e85f964c2404b969bdcd487"
+
+[[package]]
+name = "autocfg"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26"
+
+[[package]]
+name = "cargo-ament-build"
+version = "0.1.9"
+dependencies = [
+ "anyhow",
+ "cargo-manifest",
+ "pico-args",
+]
+
+[[package]]
+name = "cargo-manifest"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf5acda331466fdea759172dbc2fb9e650e382dbca6a8dd3f576d9aeeac76da6"
+dependencies = [
+ "serde",
+ "serde_derive",
+ "toml",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown",
+]
+
+[[package]]
+name = "pico-args"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db8bcd96cb740d03149cbad5518db9fd87126a10ab519c011893b1754134c468"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.94"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a31971752e70b8b2686d7e46ec17fb38dad4051d94024c88df49b667caea9c84"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.219"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.219"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b09a44accad81e1ba1cd74a32461ba89dee89095ba17b32f5d03683b1b1fc2a0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "toml"
+version = "0.5.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4f7f0dd8d50a853a531c426359045b1998f04219d88799810762cd4ad314234"
+dependencies = [
+ "indexmap",
+ "serde",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"

pkgs/by-name/ca/cargo-ament-build/package.nix

···
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "cargo-ament-build";
+  version = "0.1.9";
+
+  src = fetchFromGitHub {
+    owner = "ros2-rust";
+    repo = "cargo-ament-build";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-5D0eB3GCQLgVYuYkHMTkboruiYSAaWy3qZjF/hVpRP0=";
+  };
+
+  cargoLock.lockFile = ./Cargo.lock;
+
+  postPatch = ''
+    ln -s ${./Cargo.lock} Cargo.lock
+  '';
+
+  nativeBuildInputs = [ pkg-config ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Cargo plugin for use with colcon workspaces";
+    homepage = "https://github.com/ros2-rust/cargo-ament-build";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ guelakais ];
+  };
+})

pkgs/by-name/cd/cdncheck/package.nix

···
 
 buildGoModule rec {
   pname = "cdncheck";
-  version = "1.1.14";
+  version = "1.1.15";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "cdncheck";
     tag = "v${version}";
-    hash = "sha256-VbFpZilrPR7Ajs1FY0a+qlkBnwvh+F18fmIf2oYlIFE=";
+    hash = "sha256-iIK/MnhX+1mZCHeGPEsdUO8T4HOpSA3Fy0fnjgVzG5g=";
   };
 
   vendorHash = "sha256-/1REkZ5+sz/H4T4lXhloz7fu5cLv1GoaD3dlttN+Qd4=";

pkgs/by-name/ch/chamber/package.nix

···
 
 buildGoModule rec {
   pname = "chamber";
-  version = "3.1.1";
+  version = "3.1.2";
 
   src = fetchFromGitHub {
     owner = "segmentio";
     repo = pname;
     rev = "v${version}";
-    sha256 = "sha256-1ySOlP0sFk3+IRt/zstZK6lEE2pzoVSiZz3wFxdesgc=";
+    sha256 = "sha256-9+I/zH4sHlLQkEn+fCboI3vCjYjlk+hdYnWuxq47r5I=";
   };
 
   env.CGO_ENABLED = 0;
 
-  vendorHash = "sha256-KlouLjW9hVKFi9uz34XHd4CzNOiyO245QNygkB338YQ=";
+  vendorHash = "sha256-IjCBf1h6r+EDLfgGqP/VfsHaD5oPkIR33nYBAcb6SLY=";
 
   ldflags = [
     "-s"

pkgs/by-name/cl/clever-tools/package.nix

···
   lib,
   buildNpmPackage,
   fetchFromGitHub,
-  nodejs_18,
+  nodejs_20,
   installShellFiles,
   makeWrapper,
   stdenv,
···
 
   version = "3.12.0";
 
-  nodejs = nodejs_18;
+  nodejs = nodejs_20;
 
   src = fetchFromGitHub {
     owner = "CleverCloud";

pkgs/by-name/cl/clock-rs/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "clock-rs";
-  version = "0.1.214";
+  version = "0.1.215";
 
   src = fetchFromGitHub {
     owner = "Oughie";
     repo = "clock-rs";
     tag = "v${version}";
-    sha256 = "sha256-D0Wywl20TFIy8aQ9UkcI6T+5huyRuCCPc+jTeXsZd8g=";
+    sha256 = "sha256-uDEvJqaaBNRxohYqHE6qfqUF07ynRvGwJKWbYfgPEvg=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-W4m4JffqNwebGWYNsMF6U0bDroqXJAixmcmqcqYjyzw=";
+  cargoHash = "sha256-Zry6mkOUdEgC95Y3U3RCXPJUsmaSoRPlHvUThI92GQU=";
 
   meta = {
     description = "Modern, digital clock that effortlessly runs in your terminal";

pkgs/by-name/co/coder/update.sh

···
     # Update version number, using '#' as delimiter
     sed -i "/${channel} = {/,/};/{
         s#^\(\s*\)version = .*#\1version = \"$version\";#
-    }" ./default.nix
+    }" ./package.nix
 
     # Update hashes for each architecture
     for ARCH in "${!ARCHS[@]}"; do
···
         # Update the Nix file with the new hash, using '#' as delimiter and preserving indentation
         sed -i "/${channel} = {/,/};/{
             s#^\(\s*\)${ARCH} = .*#\1${ARCH} = \"${SRI_HASH}\";#
-        }" ./default.nix
+        }" ./package.nix
     done
 }
 

pkgs/by-name/da/dalphaball/package.nix

···
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  gfortran,
+  gmp,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "dalphaball";
+  version = "0-unstable-2023-06-15";
+
+  src = fetchFromGitHub {
+    owner = "outpace-bio";
+    repo = "DAlphaBall";
+    rev = "7b9dc05fa2a40f7ea36c6d89973d150eaed459d9";
+    hash = "sha256-mUxEL9b67z/mG+0pcM5uQ/jPAfEUpJlXOXPmqDea+U4=";
+  };
+
+  sourceRoot = "${src.name}/src";
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    gfortran
+  ];
+
+  buildInputs = [
+    gfortran.cc.lib
+    gmp
+  ];
+
+  installPhase = ''
+    runHook preInstall
+    install -Dm755 DAlphaBall.gcc $out/bin/DAlphaBall
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Computes the surface area and volume of unions of many balls";
+    mainProgram = "DAlphaBall";
+    homepage = "https://github.com/outpace-bio/DAlphaBall";
+    license = lib.licenses.lgpl21Only;
+    maintainers = with lib.maintainers; [ aschleck ];
+    platforms = lib.platforms.unix;
+  };
+}

pkgs/by-name/db/db-rest/package.nix

···
   lib,
   buildNpmPackage,
   fetchFromGitHub,
-  nodejs_18,
+  nodejs,
   nix-update-script,
   nixosTests,
 }:
···
   pname = "db-rest";
   version = "6.1.0";
 
-  nodejs = nodejs_18;
+  inherit nodejs;
 
   src = fetchFromGitHub {
     owner = "derhuerst";

pkgs/by-name/de/debian-devscripts/package.nix

···
     exec ''${EDITOR-${nano}/bin/nano} "$@"
   '';
 in
-stdenv.mkDerivation rec {
-  version = "2.23.5";
+stdenv.mkDerivation (finalAttrs: {
   pname = "debian-devscripts";
+  version = "2.25.10";
 
   src = fetchurl {
-    url = "mirror://debian/pool/main/d/devscripts/devscripts_${version}.tar.xz";
-    hash = "sha256-j0fUVTS/lPKFdgeMhksiJz2+E5koB07IK2uEj55EWG0=";
+    url = "mirror://debian/pool/main/d/devscripts/devscripts_${finalAttrs.version}.tar.xz";
+    hash = "sha256-pEzXrKV/bZbYG7j5QXjRDATZRGLt0fhdpwTDbCoKcus=";
   };
 
   patches = [
···
   ];
 
   postPatch = ''
-    substituteInPlace scripts/Makefile --replace /usr/share/dpkg ${dpkg}/share/dpkg
-    substituteInPlace scripts/debrebuild.pl --replace /usr/bin/perl ${perlPackages.perl}/bin/perl
+    substituteInPlace scripts/debrebuild.pl \
+      --replace-fail "/usr/bin/perl" "${perlPackages.perl}/bin/perl"
     patchShebangs scripts
+    # Remove man7 target to avoid missing *.7 file error
+    substituteInPlace doc/Makefile \
+      --replace-fail " install_man7" ""
   '';
 
   nativeBuildInputs = [
     makeWrapper
     pkg-config
   ];
+
   buildInputs =
     [
       xz
···
         --prefix PYTHONPATH : "$out/${python.sitePackages}" \
         --prefix PATH : "${dpkg}/bin"
     done
-    ln -s cvs-debi $out/bin/cvs-debc
     ln -s debchange $out/bin/dch
     ln -s pts-subscribe $out/bin/pts-unsubscribe
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Debian package maintenance scripts";
-    license = licenses.free; # Mix of public domain, Artistic+GPL, GPL1+, GPL2+, GPL3+, and GPL2-only... TODO
-    maintainers = with maintainers; [ raskin ];
-    platforms = platforms.unix;
+    license = lib.licenses.free; # Mix of public domain, Artistic+GPL, GPL1+, GPL2+, GPL3+, and GPL2-only... TODO
+    maintainers = with lib.maintainers; [ raskin ];
+    platforms = lib.platforms.unix;
   };
-}
+})

pkgs/by-name/de/decktape/package.nix

···
 }:
 buildNpmPackage rec {
   name = "decktape";
-  version = "3.14.0";
+  version = "3.15.0";
 
   src = fetchFromGitHub {
     owner = "astefanutti";
     repo = "decktape";
     rev = "v${version}";
-    hash = "sha256-V7JoYtwP7iQYFi/WhFpkELs7mNKF6CqrMyjWhxLkcTA=";
+    hash = "sha256-SsdjqkMEVD0pVgIZ9Upmrz/1KOWcb1KUy/v/xTCVGc0=";
   };
 
-  npmDepsHash = "sha256-rahrIhB0GhqvzN2Vu6137Cywr19aQ70gVbNSSYzFD+s=";
+  npmDepsHash = "sha256-Z5fLGMvxVhM8nW81PQ5ZFPHK6m2uoYUv0A4XsTa3Z2Y=";
   npmPackFlags = [ "--ignore-scripts" ];
 
   dontNpmBuild = true;

pkgs/by-name/de/detect-it-easy/package.nix

···
     mkdir -p $out/share/icons
   '';
 
-  # clean up wrongly created dirs in `install.sh` and broken .desktop file
   postInstall = ''
-    grep -v "Version=#VERSION#" $src/LINUX/die.desktop > $out/share/applications/die.desktop
+    cp -r $src/XYara/yara_rules $out/lib/die/
   '';
 
   meta = {

pkgs/by-name/de/devcontainer/package.nix

···
   docker,
   yarn,
   docker-compose,
+  nix-update-script,
 }:
 
 let
···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "devcontainer";
-  version = "0.72.0";
+  version = "0.75.0";
 
   src = fetchFromGitHub {
     owner = "devcontainers";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3rSWD6uxwcMQdHBSmmAQ0aevqevVXINigCj06jjEcRc=";
+    hash = "sha256-mzS5ejiD8HuvcD6aHIgbRU1pi43P8AiuDLaIlwpGllE=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-KSVr6RlBEeDAo8D+7laTN+pSH8Ukl6WTpeAULuG2fq8=";
+    hash = "sha256-ix9rixdrvt6hYtx4QTvsg3fm2uz3MvZxFZQfKkTDWc8=";
   };
 
   nativeBuildInputs = [
···
         ]
       }
   '';
+
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Dev container CLI, run and manage your dev environments via a devcontainer.json";

pkgs/by-name/do/dolphin-emu/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dolphin-emu";
-  version = "2503";
+  version = "2503a";
 
   src = fetchFromGitHub {
     owner = "dolphin-emu";
     repo = "dolphin";
     tag = finalAttrs.version;
     fetchSubmodules = true;
-    hash = "sha256-oqJKXFcsFgoYjUqdk3Z/CIFhOa8w0drcF4JwtHRI1Hs=";
+    hash = "sha256-vhXiEgJO8sEv937Ed87LaS7289PLZlxQGFTZGFjs1So=";
   };
 
   strictDeps = true;

pkgs/by-name/du/duply/package.nix

···
   which,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "duply";
-  version = "2.4";
+  version = "2.5.5";
 
   src = fetchurl {
-    url = "mirror://sourceforge/project/ftplicity/duply%20%28simple%20duplicity%29/2.4.x/duply_${version}.tgz";
-    hash = "sha256-DCrp3o/ukzkfnVaLbIK84bmYnXvqKsvlkGn3GJY3iNg=";
+    url = "mirror://sourceforge/project/ftplicity/duply%20%28simple%20duplicity%29/2.5.x/duply_${finalAttrs.version}.tgz";
+    hash = "sha256-ABryuV5jJNoxcJLsSjODLOHuLKrSEhY3buzy1cQh+AU=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
+
   buildInputs = [ txt2man ];
 
   postPatch = "patchShebangs .";
 
   installPhase = ''
+    runHook preInstall
+
     mkdir -p "$out/bin"
     mkdir -p "$out/share/man/man1"
     install -vD duply "$out/bin"
···
           which
         ]}
     "$out/bin/duply" txt2man > "$out/share/man/man1/duply.1"
+
+    runHook postInstall
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Shell front end for the duplicity backup tool";
     mainProgram = "duply";
     longDescription = ''
···
       secure backups on non-trusted spaces are no child's play?
     '';
     homepage = "https://duply.net/";
-    license = licenses.gpl2Only;
-    maintainers = [ maintainers.bjornfor ];
+    license = lib.licenses.gpl2Only;
+    maintainers = [ lib.maintainers.bjornfor ];
     platforms = lib.platforms.unix;
   };
-}
+})

pkgs/by-name/el/elf-info/package.nix

···
   nix-update-script,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "elf-info";
   version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "kevin-lesenechal";
     repo = "elf-info";
-    rev = "v${version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-wbFVuoarOoxV9FqmuHJ9eZlG4rRqy1rsnuqbGorC2Rk=";
   };
 
···
     maintainers = with lib.maintainers; [ viperML ];
     mainProgram = "elf";
   };
-}
+})

pkgs/by-name/el/elfcat/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "elfcat";
-  version = "0.1.9";
+  version = "0.1.10";
 
   src = fetchFromGitHub {
     owner = "ruslashev";
     repo = "elfcat";
     rev = version;
-    sha256 = "sha256-lmoOwxRGXcInoFb2YDawLKaebkcUftzpPZ1iTXbl++c=";
+    sha256 = "sha256-8jyOYV455APlf8F6HmgyvgfNGddMzrcGhj7yFQT6qvg=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-3rqxST7dcp/2+B7DiY92C75P0vQyN2KY3DigBEZ1W1w=";
+  cargoHash = "sha256-oVl+40QunvKZIbhsOgqNTsvWduCXP/QJ0amT8ECSsMU=";
 
   meta = with lib; {
     description = "ELF visualizer, generates HTML files from ELF binaries";

pkgs/by-name/en/ente-cli/package.nix

···
 {
   lib,
   buildGoModule,
-  ente-cli,
   fetchFromGitHub,
   installShellFiles,
   nix-update-script,
   stdenv,
   testers,
 }:
-let
-  version = "0.2.3";
 
-  canExecute = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
-in
-buildGoModule {
+buildGoModule (finalAttrs: {
   pname = "ente-cli";
-  inherit version;
+  version = "0.2.3";
 
   src = fetchFromGitHub {
     owner = "ente-io";
     repo = "ente";
-    tag = "cli-v${version}";
+    tag = "cli-v${finalAttrs.version}";
     hash = "sha256-qKMFoNtD5gH0Y+asD0LR5d3mxGpr2qVWXIUzJTSezeI=";
     sparseCheckout = [ "cli" ];
   };
···
   ldflags = [
     "-s"
     "-w"
-    "-X main.AppVersion=cli-v${version}"
+    "-X main.AppVersion=cli-v${finalAttrs.version}"
   ];
 
   nativeBuildInputs = [ installShellFiles ];
···
     # also guarding with `isLinux` because ENTE_CLI_SECRETS_PATH doesn't help on darwin:
     # > error setting password in keyring: exit status 195
     #
-    + lib.optionalString (stdenv.buildPlatform.isLinux && canExecute) ''
-      export ENTE_CLI_CONFIG_PATH=$TMP
-      export ENTE_CLI_SECRETS_PATH=$TMP/secrets
+    +
+      lib.optionalString
+        (stdenv.buildPlatform.isLinux && stdenv.buildPlatform.canExecute stdenv.hostPlatform)
+        ''
+          export ENTE_CLI_CONFIG_PATH=$TMP
+          export ENTE_CLI_SECRETS_PATH=$TMP/secrets
 
-      installShellCompletion --cmd ente \
-        --bash <($out/bin/ente completion bash) \
-        --fish <($out/bin/ente completion fish) \
-        --zsh <($out/bin/ente completion zsh)
-    '';
+          installShellCompletion --cmd ente \
+            --bash <($out/bin/ente completion bash) \
+            --fish <($out/bin/ente completion fish) \
+            --zsh <($out/bin/ente completion zsh)
+        '';
 
   passthru = {
     # only works on linux, see comment above about ENTE_CLI_SECRETS_PATH on darwin
     tests.version = lib.optionalAttrs stdenv.hostPlatform.isLinux (
       testers.testVersion {
-        package = ente-cli;
+        package = finalAttrs.finalPackage;
         command = ''
           env ENTE_CLI_CONFIG_PATH=$TMP \
               ENTE_CLI_SECRETS_PATH=$TMP/secrets \
               ente version
         '';
-        version = "Version cli-v${ente-cli.version}";
+        version = "Version cli-v${finalAttrs.version}";
       }
     );
     updateScript = nix-update-script {
···
       The Ente CLI is a Command Line Utility for exporting data from Ente. It also does a few more things, for example, you can use it to decrypting the export from Ente Auth.
     '';
     homepage = "https://github.com/ente-io/ente/tree/main/cli#readme";
-    changelog = "https://github.com/ente-io/ente/releases/tag/cli-v${version}";
+    changelog = "https://github.com/ente-io/ente/releases/tag/cli-v${finalAttrs.version}";
     license = lib.licenses.agpl3Only;
     maintainers = [
       lib.maintainers.zi3m5f
     ];
     mainProgram = "ente";
   };
-}
+})

pkgs/by-name/ev/evcc/package.nix

···
 }:
 
 let
-  version = "0.203.1";
+  version = "0.203.2";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-TdEK63F7LQwyj6aPA1NKqZLUn2cnP0XgS51vqfzNVJ8=";
+    hash = "sha256-OMZUJ98oiKKFsgSKLxQtdnoId4yHBNO+wKjhsgZNo6w=";
   };
 
-  vendorHash = "sha256-TqtJlsT/uaqQe/mAh1hw92N3uw6GLkdwh9aIMmdNbkY=";
+  vendorHash = "sha256-oC6aX8hAQfLpEEkpsPYm6ALxFqReKgDiAFse2WJGt60=";
 
   commonMeta = with lib; {
     license = licenses.mit;
···
 
   npmDeps = fetchNpmDeps {
     inherit src;
-    hash = "sha256-LaP6Ee13OKwRoAZ7oF/nH8rE5zqFYzrhq6CwPaaF9SE=";
+    hash = "sha256-5d6GoFrNgMV6Teb9/cE8MYrO7FowlZfwcGxHjsymQWM=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fh/fheroes2/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "fheroes2";
-  version = "1.1.6";
+  version = "1.1.7";
 
   src = fetchFromGitHub {
     owner = "ihhub";
     repo = "fheroes2";
     rev = version;
-    hash = "sha256-CowCP+gZuGSXWbALYBkmyn+RlDgOGho/Px34GutrBX0=";
+    hash = "sha256-PXh8yPalXQ91roSzvWXLnHVgjz7unyWytR1x3bvh2OU=";
   };
 
   nativeBuildInputs = [ imagemagick ];

pkgs/by-name/fl/fleeting-plugin-aws/package.nix

···
   versionCheckHook,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "fleeting-plugin-aws";
   version = "1.0.1";
 
   src = fetchFromGitLab {
     owner = "gitlab-org/fleeting/plugins";
     repo = "aws";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-3m7t2uGO7Rlfckb8mdYVutW0/ng0OiUAH5XTBoB//ZU=";
   };
 
   vendorHash = "sha256-hfuszGVWfMreGz22+dkx0/cxznjq2XZf7pAn4TWOQ5M=";
 
-  subPackages = [ "cmd/fleeting-plugin-aws" ];
-
-  # See https://gitlab.com/gitlab-org/fleeting/plugins/aws/-/blob/v1.0.0/Makefile?ref_type=tags#L20-22.
+  # Needed for "fleeting-plugin-aws -version" to not show "dev".
   #
-  # Needed for "fleeting-plugin-aws version" to not show "dev".
+  # https://gitlab.com/gitlab-org/fleeting/plugins/aws/-/blob/v1.0.0/Makefile?ref_type=tags#L20-22
   ldflags =
     let
-      # See https://gitlab.com/gitlab-org/fleeting/plugins/aws/-/blob/v1.0.0/Makefile?ref_type=tags#L14.
-      #
-      # Couldn't find a way to substitute "go list ." into "ldflags".
       ldflagsPackageVariablePrefix = "gitlab.com/gitlab-org/fleeting/plugins/aws";
     in
     [
       "-X ${ldflagsPackageVariablePrefix}.NAME=fleeting-plugin-aws"
-      "-X ${ldflagsPackageVariablePrefix}.VERSION=v${version}"
-      "-X ${ldflagsPackageVariablePrefix}.REVISION=${src.rev}"
+      "-X ${ldflagsPackageVariablePrefix}.VERSION=${finalAttrs.version}"
+      "-X ${ldflagsPackageVariablePrefix}.REFERENCE=v${finalAttrs.version}"
     ];
 
   doInstallCheck = true;
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
-  versionCheckProgram = "${builtins.placeholder "out"}/bin/fleeting-plugin-aws";
-
-  versionCheckProgramArg = "version";
+  versionCheckProgramArg = "-version";
 
   passthru = {
     updateScript = nix-update-script { };
···
     mainProgram = "fleeting-plugin-aws";
     maintainers = with lib.maintainers; [ commiterate ];
   };
-}
+})

pkgs/by-name/fo/fooyin/package.nix

···
   kdsingleapplication,
   pipewire,
   taglib,
+  libebur128,
   libvgm,
   libsndfile,
   libarchive,
   libopenmpt,
   game-music-emu,
   SDL2,
+  fetchpatch,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
···
     pipewire
     SDL2
     # input plugins
+    libebur128
     libvgm
     libsndfile
     libarchive
···
     # we need INSTALL_FHS to be true as the various artifacts are otherwise just dumped in the root
     # of $out and the fixupPhase cleans things up anyway
     (lib.cmakeBool "INSTALL_FHS" true)
+  ];
+
+  # Remove after next release
+  patches = [
+    (fetchpatch {
+      name = "qbrush.patch";
+      url = "https://github.com/fooyin/fooyin/commit/e44e08abb33f01fe85cc896170c55dbf732ffcc9.patch";
+      hash = "sha256-soDj/SFctxxsnkePv4dZgyDHYD2eshlEziILOZC4ddM=";
+    })
   ];
 
   env.LANG = "C.UTF-8";

pkgs/by-name/fr/frog-protocols/package.nix

···
   lib,
   meson,
   ninja,
-  nix-update-script,
+  unstableGitUpdater,
   stdenv,
   testers,
 }:
···
   ];
 
   passthru = {
-    updateScript = nix-update-script { };
+    updateScript = unstableGitUpdater { };
     tests.pkg-config = testers.hasPkgConfigModules { package = finalAttrs.finalPackage; };
   };
 

pkgs/by-name/fu/fum/package.nix

···
     homepage = "https://github.com/qxb3/fum";
     changelog = "https://github.com/qxb3/fum/releases/tag/v${version}";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ linuxmobile ];
+    maintainers = with lib.maintainers; [ FKouhai ];
     platforms = lib.platforms.linux;
     mainProgram = "fum";
   };

pkgs/by-name/ge/gel/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "gel";
-  version = "7.0.3";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "geldata";
     repo = "gel-cli";
     tag = "v${version}";
-    hash = "sha256-QP4LtLgF2OWCsPCFzpLR8k/RetfEevSd8Uv/PciHCwk=";
+    hash = "sha256-HqMfReKt1Gl2c7ectgcW514ARCgfNi8PaykvKJUZirY=";
     fetchSubmodules = true;
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-s8UKYZs4GorM0qvAvE+HL+Qma2x05IDtuqYebMDrZHk=";
+    hash = "sha256-rxlJQSh3CN4lBFOWFMZmdH91xgRnBbywXA/gakSKsck=";
   };
 
   nativeBuildInputs = [
···
   env = {
     OPENSSL_NO_VENDOR = true;
   };
-
-  # cli warns when edgedb found but gel doesn't
-  postInstall = ''
-    mv $out/bin/edgedb $out/bin/gel
-  '';
 
   doCheck = false;
 

pkgs/by-name/ge/geteduroam-cli/package.nix

···
   versionCheckHook,
   nix-update-script,
 }:
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "geteduroam-cli";
   version = "0.8";
 
   src = fetchFromGitHub {
     owner = "geteduroam";
     repo = "linux-app";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-2iAvE38r3iwulBqW+rrbrpNVgQlDhhcVUsjZSOT5P1A=";
   };
 
···
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ viperML ];
     platforms = lib.platforms.linux;
-    changelog = "https://github.com/geteduroam/linux-app/releases/tag/${version}";
+    changelog = "https://github.com/geteduroam/linux-app/releases/tag/${finalAttrs.version}";
   };
-}
+})

pkgs/by-name/gl/glance/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "glance";
-  version = "0.7.12";
+  version = "0.7.13";
 
   src = fetchFromGitHub {
     owner = "glanceapp";
     repo = "glance";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HytxMin0IM6KAqGu/Cq/WCT79DiH01LpTK3RNgWf7iQ=";
+    hash = "sha256-MinskibgOCb8OytC+Uxg31g00Ha/un7MF+uvL9xosUU=";
   };
 
   vendorHash = "sha256-+7mOCU5GNQV8+s9QPki+7CDi4qtOIpwjC//QracwzHI=";

pkgs/by-name/go/go-chromecast/package.nix

···
 
 buildGoModule rec {
   pname = "go-chromecast";
-  version = "0.3.3";
+  version = "0.3.4";
 
   src = fetchFromGitHub {
     owner = "vishen";
     repo = "go-chromecast";
     tag = "v${version}";
-    hash = "sha256-6I10UZ7imH1R78L2uM/697PskPYjhKSiPHoMM7EFElU=";
+    hash = "sha256-FFe87Z0aiNP5aGAiJ2WJkKRAMCQGWEBB0gLDGBpE3fk=";
   };
 
-  vendorHash = "sha256-cu8PuZLkWLatU46VieaeoV5oyejyjR0uVUMVzOrheLM=";
+  vendorHash = "sha256-MOC9Yqo5p02eZLFJYBE8CxHxZv3RcpqV2sEPZOWiDeE=";
 
   env.CGO_ENABLED = 0;
 

pkgs/by-name/gt/gtree/package.nix

···
 
 buildGoModule rec {
   pname = "gtree";
-  version = "1.11.3";
+  version = "1.11.4";
 
   src = fetchFromGitHub {
     owner = "ddddddO";
     repo = "gtree";
     rev = "v${version}";
-    hash = "sha256-VGlSc0NMl1yMoqLyIwxJn1s24Uw2DAv4BO2hM/7ffXA=";
+    hash = "sha256-a2kQVn/3PyGZliPOB/2hFULK+YJBv7JVv0p7cbmfsN0=";
   };
 
-  vendorHash = "sha256-F4obYTU8LNsrNZtgFSf1A1a2N5aG2U94cXr91uVJT4s=";
+  vendorHash = "sha256-ARmyA8qYKv8xTmpaN77D/NlBfFJFVTGudpBeQG5apso=";
 
   subPackages = [
     "cmd/gtree"

pkgs/by-name/ha/havn/package.nix

···
   rustPlatform,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "havn";
   version = "0.2.1";
 
   src = fetchFromGitHub {
     owner = "mrjackwills";
     repo = "havn";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-SXsCJzKfm77/IH3H7L5STylusmlN9DN4xd12Vt6L3TM=";
   };
 
···
   meta = {
     homepage = "https://github.com/mrjackwills/havn";
     description = "Fast configurable port scanner with reasonable defaults";
-    changelog = "https://github.com/mrjackwills/havn/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/mrjackwills/havn/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ luftmensch-luftmensch ];
     mainProgram = "havn";
     platforms = lib.platforms.linux;
   };
-}
+})

pkgs/by-name/he/hermitcli/package.nix

···
 
 buildGoModule rec {
   pname = "hermit";
-  version = "0.44.5";
+  version = "0.44.6";
 
   src = fetchFromGitHub {
     rev = "v${version}";
     owner = "cashapp";
     repo = "hermit";
-    hash = "sha256-QPGN90iZd6UamSJv0v0eDRmLhKAhNRZW6jWhU9iRlfY=";
+    hash = "sha256-PNzMR9bYR7Dv62kN6tYBdabGR01iXw537WRUtJXl1CE=";
   };
 
-  vendorHash = "sha256-TF9GtXvOyd6NH6bxT6YLibUby4VmrNBQrtw/0qhqxzQ=";
+  vendorHash = "sha256-GnZqM5ZKpg2yKAzUaXLOOKspbpjNnihscftkDT/7P9w=";
 
   subPackages = [ "cmd/hermit" ];
 

pkgs/by-name/ju/jumppad/package.nix

···
 
 buildGoModule rec {
   pname = "jumppad";
-  version = "0.18.1";
+  version = "0.19.0";
 
   src = fetchFromGitHub {
     owner = "jumppad-labs";
     repo = "jumppad";
     rev = version;
-    hash = "sha256-2QF37dDQP+rSaLeNE9a41sA8iWnlUQaeXS00FoLdnfY=";
+    hash = "sha256-dzxFNOMFXbygTs4WIrG7aZ7LlEpkxepTgOP/QVq9z8s=";
   };
   vendorHash = "sha256-BuXbizA/OJiP11kSIO476tWPYPzGTKmzPHeyIqs8pWc=";
 

pkgs/by-name/lo/loadwatch/package.nix

···
 {
   lib,
   stdenv,
-  fetchgit,
+  fetchFromSourcehut,
 }:
 
-stdenv.mkDerivation {
+stdenv.mkDerivation (finalAttrs: {
   pname = "loadwatch";
-  version = "1.1-1-g6d2544c";
+  version = "1.1-4-g868bd29";
 
-  src = fetchgit {
-    url = "git://woffs.de/git/fd/loadwatch.git";
-    sha256 = "1bhw5ywvhyb6snidsnllfpdi1migy73wg2gchhsfbcpm8aaz9c9b";
-    rev = "6d2544c0caaa8a64bbafc3f851e06b8056c30e6e";
+  src = fetchFromSourcehut {
+    owner = "~woffs";
+    repo = "loadwatch";
+    hash = "sha256-/4kfGdpYJWQyb7mRaVUpyQQC5VP96bDsBDfM3XhcJXw=";
+    rev = finalAttrs.version;
   };
 
-  installPhase = ''
-    mkdir -p $out/bin
-    install loadwatch lw-ctl $out/bin
-  '';
+  makeFlags = [ "bindir=$(out)/bin" ];
 
-  meta = with lib; {
+  meta = {
     description = "Run a program using only idle cycles";
-    license = licenses.gpl2Only;
-    maintainers = with maintainers; [ woffs ];
-    platforms = platforms.all;
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ woffs ];
+    platforms = lib.platforms.all;
   };
-}
+})

pkgs/by-name/lu/luau/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "luau";
-  version = "0.667";
+  version = "0.670";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     rev = version;
-    hash = "sha256-AEPUdqQ+uIWxSTOwwbZ8tWSz3VKKHa1D08o6oeEREkg=";
+    hash = "sha256-3iRQJ3v8MyW9LZiaEAkRFubFBdPxg7EEzXYqzbKspFY=";
   };
 
   nativeBuildInputs = [ cmake ];
···
     changelog = "https://github.com/luau-lang/luau/releases/tag/${version}";
     license = licenses.mit;
     platforms = platforms.all;
-    maintainers = [ ];
+    maintainers = with maintainers; [ prince213 ];
     mainProgram = "luau";
   };
 }

pkgs/by-name/ma/macos-instantview/package.nix

···
+{
+  stdenvNoCC,
+  fetchurl,
+  lib,
+  _7zz,
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "instantview";
+  version = "3.22R0002";
+
+  src = fetchurl {
+    url = "https://www.siliconmotion.com/downloads/macOS_InstantView_V${finalAttrs.version}.dmg";
+    hash = "sha256-PdgX9zCrVYtNbuOCYKVo9cegCG/VY7QXetivVsUltbg=";
+  };
+
+  nativeBuildInputs = [ _7zz ];
+
+  dontUnpack = true;
+  dontConfigure = true;
+  dontBuild = true;
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p "$out/Applications"
+
+    # Extract the DMG using 7zip
+    7zz x "$src" -oextracted -y
+
+    # Move the extracted contents to $out
+    cp -r extracted/* "$out/Applications/"
+
+    runHook postInstall
+  '';
+
+  meta = {
+    platforms = lib.platforms.darwin;
+    description = "USB Docking Station plugin-and-display support with SM76x driver";
+    homepage = "https://www.siliconmotion.com/events/instantview/";
+    license = lib.licenses.unfree;
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+    maintainers = with lib.maintainers; [ aspauldingcode ];
+  };
+})

pkgs/by-name/ma/mas/package.nix

···
 
 stdenvNoCC.mkDerivation rec {
   pname = "mas";
-  version = "1.9.0";
+  version = "2.1.0";
 
   src = fetchurl {
     url = "https://github.com/mas-cli/mas/releases/download/v${version}/mas-${version}.pkg";
-    hash = "sha256-MiSrCHLby3diTAzDPCYX1ZwdmzcHwOx/UJuWrlRJe54=";
+    hash = "sha256-pT8W/ZdNP7Fv5nyTX9vKbTa2jIk3THN1HVCmuEIibfc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/mc/mcpelauncher-ui-qt/package.nix

···
   stdenv,
   mcpelauncher-client,
   fetchFromGitHub,
+  fetchpatch,
   cmake,
   pkg-config,
   zlib,
···
 
   patches = [
     ./dont_download_glfw_ui.patch
+    # Qt 6.9 no longer implicitly converts non-char types (such as booleans) to
+    # construct a QChar. This leads to a build failure with Qt 6.9. Upstream
+    # has merged a patch, but has not yet formalized it through a release, so
+    # we must fetch it manually. Remove this fetch on the next point release.
+    (fetchpatch {
+      url = "https://github.com/minecraft-linux/mcpelauncher-ui-qt/commit/0526b1fd6234d84f63b216bf0797463f41d2bea0.diff";
+      hash = "sha256-vL5iqbs50qVh4BKDxTOpCwFQWO2gLeqrVLfnpeB6Yp8=";
+      stripLen = 1;
+      extraPrefix = "mcpelauncher-ui-qt/";
+    })
   ];
 
   nativeBuildInputs = [

pkgs/by-name/me/mesen/deps.json

···
 [
   {
     "pname": "Avalonia",
-    "version": "11.2.0",
-    "hash": "sha256-kG3tnsLdodlvIjYd5feBZ0quGd2FsvV8FIy7uD5UZ5Q="
+    "version": "11.2.4",
+    "hash": "sha256-CcdWUxqd43A4KeY1K4T5M6R1M0zuwdwyd5Qh/BAlNT4="
   },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
···
   },
   {
     "pname": "Avalonia.BuildServices",
-    "version": "0.0.29",
-    "hash": "sha256-WPHRMNowRnYSCh88DWNBCltWsLPyOfzXGzBqLYE7tRY="
+    "version": "0.0.31",
+    "hash": "sha256-wgtodGf644CsUZEBIpFKcUjYHTbnu7mZmlr8uHIxeKA="
   },
   {
     "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.2.0",
-    "hash": "sha256-x6IdcSo3e2Pq/En9/N80HpPblEXSAv51VRlBrF8wlVM="
+    "version": "11.2.3",
+    "hash": "sha256-z3ZHxVSOoOjqq+5G71jnGN1Y0i3YpAkox7cj3lNr6kg="
   },
   {
     "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.2.0",
-    "hash": "sha256-pd/cD82onMZ0iMLl9TOCl35PEvAPbyX2lUj49lrBpOA="
+    "version": "11.2.3",
+    "hash": "sha256-jIJvuYN0iym/WeOC0C7z5xj5kCZSXGoeLQ/q5qQfewM="
   },
   {
     "pname": "Avalonia.Controls.ProportionalStackPanel",
···
   },
   {
     "pname": "Avalonia.Desktop",
-    "version": "11.2.0",
-    "hash": "sha256-+5ISi6WXe8AIjClVo3UqZHgzZpFbMgFk13YvHHhx9MM="
+    "version": "11.2.4",
+    "hash": "sha256-WKTOx7RNSb0fOMg5Za4j+u9DwKXDqVzHwQCEXSm7TFo="
   },
   {
     "pname": "Avalonia.Diagnostics",
-    "version": "11.2.0",
-    "hash": "sha256-k60HGDKnsXiDOnxSH+Hx2ihyqmxSSeWIBJx2XD1ELW0="
+    "version": "11.2.3",
+    "hash": "sha256-DIGkaBff+C3BLwedw5xteR5lfzb6ecxiLt12eJVgLQc="
   },
   {
     "pname": "Avalonia.FreeDesktop",
-    "version": "11.2.0",
-    "hash": "sha256-u4CQvG6EdsyaHSWa+Y704sDiWZlqbArB0g4gcoCFwQo="
+    "version": "11.2.4",
+    "hash": "sha256-lw8YFXR/pn0awFvFW+OhjZ2LbHonL6zwqLIz+pQp+Sk="
   },
   {
     "pname": "Avalonia.MarkupExtension",
···
   },
   {
     "pname": "Avalonia.Native",
-    "version": "11.2.0",
-    "hash": "sha256-fMikurP2RAnOahZkORxuGOKGn5iQ0saZCEYsvoFiFQI="
+    "version": "11.2.4",
+    "hash": "sha256-MvxivGjYerXcr70JpWe9CCXO6MU9QQgCkmZfjZCFdJM="
   },
   {
     "pname": "Avalonia.ReactiveUI",
-    "version": "11.2.0",
-    "hash": "sha256-6GXX1ZA6gS9CpkQnGepx1PFNoKiwcHQyLSK5qOGmjYo="
+    "version": "11.2.3",
+    "hash": "sha256-NqRetBiFg5gNCS8C0J1JJJsZ4sz+w+GoEegGFddBGDg="
   },
   {
     "pname": "Avalonia.Remote.Protocol",
-    "version": "11.2.0",
-    "hash": "sha256-QwYY3bpShJ1ayHUx+mjnwaEhCPDzTk+YeasCifAtGzM="
+    "version": "11.2.3",
+    "hash": "sha256-dSeu7rnTD9rIvlyro2iFS52oi0vvfeaGV3kDm90BkKw="
+  },
+  {
+    "pname": "Avalonia.Remote.Protocol",
+    "version": "11.2.4",
+    "hash": "sha256-mKQVqtzxnZu6p64ZxIHXKSIw3AxAFjhmrxCc5/1VXfc="
   },
   {
     "pname": "Avalonia.Skia",
-    "version": "11.2.0",
-    "hash": "sha256-rNR+l+vLtlzTU+F51FpOi4Ujy7nR5+lbTc3NQte8s/o="
+    "version": "11.2.4",
+    "hash": "sha256-82UQGuCl5hN5kdA3Uz7hptpNnG1EPlSB6k/a6XPSuXI="
   },
   {
     "pname": "Avalonia.Themes.Fluent",
-    "version": "11.2.0",
-    "hash": "sha256-Ate6KC61pwXmTAk5h1uh7rjwAViuiO/qgAVMl3F1BA8="
+    "version": "11.2.4",
+    "hash": "sha256-CPun/JWFCVoGxgMA510/gMP2ZB9aZJ9Bk8yuNjwo738="
   },
   {
     "pname": "Avalonia.Themes.Simple",
-    "version": "11.2.0",
-    "hash": "sha256-l88ZX50Nao8wjtRnyZxNFFgRpJ/yxxNki6NY48dyTUg="
+    "version": "11.2.3",
+    "hash": "sha256-UF15yTDzHmqd33siH3TJxmxaonA51dzga+hmCUahn1k="
   },
   {
     "pname": "Avalonia.Win32",
-    "version": "11.2.0",
-    "hash": "sha256-A9PB6Bt61jLdQlMOkchWy/3BwROgxS9BP8FObs/KFiU="
+    "version": "11.2.4",
+    "hash": "sha256-LJSKiLbdof8qouQhN7pY1RkMOb09IiAu/nrJFR2OybY="
   },
   {
     "pname": "Avalonia.X11",
-    "version": "11.2.0",
-    "hash": "sha256-EP9cCqriEh8d+Wwyv27QGK/CY6w2LcCjtcIv79PZqkM="
+    "version": "11.2.4",
+    "hash": "sha256-qty8D2/HlZz/7MiEhuagjlKlooDoW3fow5yJY5oX4Uk="
   },
   {
     "pname": "CommunityToolkit.Mvvm",
···
   },
   {
     "pname": "HarfBuzzSharp",
-    "version": "7.3.0.2",
-    "hash": "sha256-ibgoqzT1NV7Qo5e7X2W6Vt7989TKrkd2M2pu+lhSDg8="
+    "version": "7.3.0.3",
+    "hash": "sha256-1vDIcG1aVwVABOfzV09eAAbZLFJqibip9LaIx5k+JxM="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.Linux",
-    "version": "7.3.0.2",
-    "hash": "sha256-SSfyuyBaduGobJW+reqyioWHhFWsQ+FXa2Gn7TiWxrU="
+    "version": "7.3.0.3",
+    "hash": "sha256-HW5r16wdlgDMbE/IfE5AQGDVFJ6TS6oipldfMztx+LM="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.macOS",
-    "version": "7.3.0.2",
-    "hash": "sha256-dmEqR9MmpCwK8AuscfC7xUlnKIY7+Nvi06V0u5Jff08="
+    "version": "7.3.0.3",
+    "hash": "sha256-UpAVfRIYY8Wh8xD4wFjrXHiJcvlBLuc2Xdm15RwQ76w="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
-    "version": "7.3.0.3-preview.2.2",
-    "hash": "sha256-1NlcTnXrWUYZ2r2/N3SPxNIjNcyIpiiv3g7h8XxpNkM="
+    "version": "7.3.0.3",
+    "hash": "sha256-jHrU70rOADAcsVfVfozU33t/5B5Tk0CurRTf4fVQe3I="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.Win32",
-    "version": "7.3.0.2",
-    "hash": "sha256-x4iM3NHs9VyweG57xA74yd4uLuXly147ooe0mvNQ8zo="
+    "version": "7.3.0.3",
+    "hash": "sha256-v/PeEfleJcx9tsEQAo5+7Q0XPNgBqiSLNnB2nnAGp+I="
   },
   {
     "pname": "MicroCom.Runtime",
···
   },
   {
     "pname": "SkiaSharp",
-    "version": "2.88.8",
-    "hash": "sha256-rD5gc4SnlRTXwz367uHm8XG5eAIQpZloGqLRGnvNu0A="
+    "version": "2.88.9",
+    "hash": "sha256-jZ/4nVXYJtrz9SBf6sYc/s0FxS7ReIYM4kMkrhZS+24="
   },
   {
     "pname": "SkiaSharp.NativeAssets.Linux",
-    "version": "2.88.8",
-    "hash": "sha256-fOmNbbjuTazIasOvPkd2NPmuQHVCWPnow7AxllRGl7Y="
+    "version": "2.88.9",
+    "hash": "sha256-mQ/oBaqRR71WfS66mJCvcc3uKW7CNEHoPN2JilDbw/A="
   },
   {
     "pname": "SkiaSharp.NativeAssets.macOS",
-    "version": "2.88.8",
-    "hash": "sha256-CdcrzQHwCcmOCPtS8EGtwsKsgdljnH41sFytW7N9PmI="
+    "version": "2.88.9",
+    "hash": "sha256-qvGuAmjXGjGKMzOPBvP9VWRVOICSGb7aNVejU0lLe/g="
   },
   {
     "pname": "SkiaSharp.NativeAssets.WebAssembly",
-    "version": "2.88.8",
-    "hash": "sha256-GWWsE98f869LiOlqZuXMc9+yuuIhey2LeftGNk3/z3w="
+    "version": "2.88.9",
+    "hash": "sha256-vgFL4Pdy3O1RKBp+T9N3W4nkH9yurZ0suo8u3gPmmhY="
   },
   {
     "pname": "SkiaSharp.NativeAssets.Win32",
-    "version": "2.88.8",
-    "hash": "sha256-b8Vb94rNjwPKSJDQgZ0Xv2dWV7gMVFl5GwTK/QiZPPM="
+    "version": "2.88.9",
+    "hash": "sha256-kP5XM5GgwHGfNJfe4T2yO5NIZtiF71Ddp0pd1vG5V/4="
   },
   {
     "pname": "Splat",

pkgs/by-name/me/mesen/dont-use-alternative-restore-sources.patch

···
-diff --git a/UI/UI.csproj b/UI/UI.csproj
-index 2a0eb78..74751bc 100644
---- a/UI/UI.csproj
-+++ b/UI/UI.csproj
-@@ -90,11 +90,6 @@
- 	  <None Remove="Styles\StartupStyles.xaml" />
- 	  <None Remove="Utilities\DipSwitchDefinitions.xml" />
- 	</ItemGroup>
--	<PropertyGroup>
--		<RestoreSources>
--			https://nuget-feed-nightly.avaloniaui.net/v3/index.json;https://api.nuget.org/v3/index.json
--		</RestoreSources>
--	</PropertyGroup>
- 	<ItemGroup>
- 		<TrimmerRootAssembly Include="Mesen" />
- 		<TrimmerRootAssembly Include="AvaloniaEdit" />

pkgs/by-name/me/mesen/dont-use-nightly-avalonia.patch

···
+diff --git a/UI/UI.csproj b/UI/UI.csproj
+index 7721884..3011ae8 100644
+--- a/UI/UI.csproj
++++ b/UI/UI.csproj
+@@ -90,11 +90,6 @@
+ 	  <None Remove="Styles\StartupStyles.xaml" />
+ 	  <None Remove="Utilities\DipSwitchDefinitions.xml" />
+ 	</ItemGroup>
+-	<PropertyGroup>
+-		<RestoreSources>
+-			https://nuget-feed-nightly.avaloniaui.net/v3/index.json;https://api.nuget.org/v3/index.json
+-		</RestoreSources>
+-	</PropertyGroup>
+ 	<ItemGroup>
+ 		<TrimmerRootAssembly Include="Mesen" />
+ 		<TrimmerRootAssembly Include="AvaloniaEdit" />
+@@ -105,13 +100,13 @@
+ 		<TrimmerRootAssembly Include="Dock.Settings" />
+ 	</ItemGroup>
+   <ItemGroup>
+-    <PackageReference Include="Avalonia" Version="11.3.999-cibuild0054047-alpha" />
++    <PackageReference Include="Avalonia" Version="11.2.4" />
+     <PackageReference Include="Avalonia.AvaloniaEdit" Version="11.1.0" />
+-    <PackageReference Include="Avalonia.Desktop" Version="11.3.999-cibuild0054047-alpha" />
++    <PackageReference Include="Avalonia.Desktop" Version="11.2.4" />
+     <PackageReference Include="Avalonia.Controls.ColorPicker" Version="11.2.3" />
+     <PackageReference Include="Avalonia.Diagnostics" Version="11.2.3" Condition="'$(OptimizeUi)'!='true'" />
+     <PackageReference Include="Avalonia.ReactiveUI" Version="11.2.3" />
+-    <PackageReference Include="Avalonia.Themes.Fluent" Version="11.3.999-cibuild0054047-alpha" />
++    <PackageReference Include="Avalonia.Themes.Fluent" Version="11.2.4" />
+     <PackageReference Include="Dock.Avalonia" Version="11.2.0" />
+     <PackageReference Include="Dock.Model.Mvvm" Version="11.2.0" />
+     <PackageReference Include="Dotnet.Bundle" Version="*" />

pkgs/by-name/me/mesen/dont-zip-libraries.patch

···
 diff --git a/UI/Config/ConfigManager.cs b/UI/Config/ConfigManager.cs
-index 56c1ff1..ed5fe8a 100644
+index c3249cf..96c6ae0 100644
 --- a/UI/Config/ConfigManager.cs
 +++ b/UI/Config/ConfigManager.cs
 @@ -51,7 +51,6 @@ namespace Mesen.Config
  			} else {
  				homeFolder = DefaultDocumentsFolder;
  			}
--			Program.ExtractNativeDependencies(homeFolder);
+-			DependencyHelper.ExtractNativeDependencies(homeFolder);
  			_homeFolder = homeFolder;
  			Config.Save();
  		}
 diff --git a/UI/Program.cs b/UI/Program.cs
-index dfc4ba3..632cef2 100644
+index dc923ab..ae7a1cc 100644
 --- a/UI/Program.cs
 +++ b/UI/Program.cs
 @@ -54,8 +54,6 @@ namespace Mesen
···
  
  			if(!File.Exists(ConfigManager.GetConfigFile())) {
 -				//Could not find configuration file, show wizard
--				ExtractNativeDependencies(ConfigManager.HomeFolder);
+-				DependencyHelper.ExtractNativeDependencies(ConfigManager.HomeFolder);
  				App.ShowConfigWindow = true;
  				BuildAvaloniaApp().StartWithClassicDesktopLifetime(args, ShutdownMode.OnMainWindowClose);
  				if(File.Exists(ConfigManager.GetConfigFile())) {
···
  			Task.Run(() => ConfigManager.LoadConfig());
  
 -			//Extract core dll & other native dependencies
--			ExtractNativeDependencies(ConfigManager.HomeFolder);
+-			DependencyHelper.ExtractNativeDependencies(ConfigManager.HomeFolder);
 -
  			if(CommandLineHelper.IsTestRunner(args)) {
  				return TestRunner.Run(args);
  			}
-@@ -147,7 +142,7 @@ namespace Mesen
+@@ -105,7 +100,7 @@ namespace Mesen
  						libraryName = libraryName + ".dylib";
  					}
  				}
···
  			return IntPtr.Zero;
  		}
 diff --git a/UI/UI.csproj b/UI/UI.csproj
-index 053d495..2a0eb78 100644
+index 67fe57d..65762d3 100644
 --- a/UI/UI.csproj
 +++ b/UI/UI.csproj
-@@ -634,7 +634,6 @@
+@@ -637,7 +637,6 @@
      <EmbeddedResource Include="Debugger\Utilities\LuaScripts\NtscSafeArea.lua" />
      <EmbeddedResource Include="Debugger\Utilities\LuaScripts\NesPianoRoll.lua" />
      <EmbeddedResource Include="Debugger\Utilities\LuaScripts\ReverseMode.lua" />
···
      <EmbeddedResource Include="Localization\resources.en.xml" WithCulture="false" Type="Non-Resx" />
      <EmbeddedResource Include="Utilities\DipSwitchDefinitions.xml" />
    </ItemGroup>
-@@ -644,16 +643,5 @@
+@@ -647,16 +646,4 @@
      </AvaloniaXaml>
    </ItemGroup>
  
···
 -    <Exec Command="cd $(OutDir)&#xD;&#xA;rd Dependencies /s /q&#xD;&#xA;md Dependencies&#xD;&#xA;xcopy /s $(ProjectDir)Dependencies\* Dependencies&#xD;&#xA;copy libHarfBuzzSharp.dll Dependencies&#xD;&#xA;copy libSkiaSharp.dll Dependencies&#xD;&#xA;copy MesenCore.dll Dependencies&#xD;&#xA;cd Dependencies&#xD;&#xA;del ..\Dependencies.zip&#xD;&#xA;powershell Compress-Archive -Path * -DestinationPath '..\Dependencies.zip' -Force&#xD;&#xA;copy ..\Dependencies.zip $(ProjectDir)" />
 -  </Target>
 -
--	<Target Name="PreBuildLinux" BeforeTargets="PreBuildEvent" Condition="'$(RuntimeIdentifier)'=='linux-x64'">
+-	<Target Name="PreBuildLinux" BeforeTargets="PreBuildEvent" Condition="'$(RuntimeIdentifier)'=='linux-x64' Or '$(RuntimeIdentifier)'=='linux-arm64'">
 -    <Exec Command="cd $(OutDir)&#xD;&#xA;rm -rf Dependencies&#xD;&#xA;mkdir Dependencies&#xD;&#xA;cp -R $(ProjectDir)/Dependencies/* Dependencies&#xD;&#xA;cp libHarfBuzzSharp.so Dependencies&#xD;&#xA;cp libSkiaSharp.so Dependencies&#xD;&#xA;cp MesenCore.so Dependencies&#xD;&#xA;cd Dependencies&#xD;&#xA;rm ../Dependencies.zip&#xD;&#xA;zip -r ../Dependencies.zip *&#xD;&#xA;cp ../Dependencies.zip $(ProjectDir)" />
 -  </Target>
 -  
 -	<Target Name="PreBuildOsx" BeforeTargets="PreBuildEvent" Condition="'$(RuntimeIdentifier)'=='osx-x64' Or '$(RuntimeIdentifier)'=='osx-arm64'">
 -    <Exec Command="cp ./Assets/MesenIcon.icns $(OutDir)&#xD;&#xA;cd $(OutDir)&#xD;&#xA;rm -R Dependencies&#xD;&#xA;mkdir Dependencies&#xD;&#xA;cp -R $(ProjectDir)/Dependencies/* Dependencies&#xD;&#xA;cp libHarfBuzzSharp.dylib Dependencies&#xD;&#xA;cp libSkiaSharp.dylib Dependencies&#xD;&#xA;cp MesenCore.dylib Dependencies&#xD;&#xA;cd Dependencies&#xD;&#xA;rm ../Dependencies.zip&#xD;&#xA;zip -r ../Dependencies.zip *&#xD;&#xA;cp ../Dependencies.zip $(ProjectDir)" />
 -  </Target>
- 
+-
  </Project>
-

pkgs/by-name/me/mesen/package.nix

···
   fetchFromGitHub,
   wrapGAppsHook3,
   gtk3,
+  libX11,
   SDL2,
 }:
 
 buildDotnetModule rec {
   pname = "mesen";
-  version = "2.0.0-unstable-2024-12-25";
+  version = "2.0.0-unstable-2025-04-01";
 
   src = fetchFromGitHub {
     owner = "SourMesen";
     repo = "Mesen2";
-    rev = "6820db37933002089a04d356d8469481e915a359";
-    hash = "sha256-TzGMZr351XvVj/wARWJxRisRb5JlkyzdjCVYbwydBVE=";
+    rev = "0dfdbbdd9b5bc4c5d501ea691116019266651aff";
+    hash = "sha256-+Jzw1tfdiX2EmQIoPuMtLmJrv9nx/XqfyLEBW+AXj1I=";
   };
 
   patches = [
-    # the nightly avalonia repository url is still queried, which errors out
-    # even if we don't actually need any nightly versions
-    ./dont-use-alternative-restore-sources.patch
+    # patch out the usage of nightly avalonia builds, since we can't use alternative restore sources
+    ./dont-use-nightly-avalonia.patch
     # upstream has a weird library loading mechanism, which we override with a more sane alternative
     ./dont-zip-libraries.patch
   ];
···
 
     nativeBuildInputs = [ SDL2 ];
 
-    buildInputs = [ SDL2 ];
+    buildInputs = [ SDL2 ] ++ lib.optionals clangStdenv.hostPlatform.isLinux [ libX11 ];
 
     makeFlags = [ "core" ];
 

pkgs/by-name/mi/minio-warp/package.nix

···
 
 buildGoModule rec {
   pname = "minio-warp";
-  version = "1.1.1";
+  version = "1.1.2";
 
   src = fetchFromGitHub {
     owner = "minio";
     repo = "warp";
     rev = "v${version}";
-    hash = "sha256-zRRvY/PpLSY8cx3vqcAGfVK7FJKzFnxtghhIwrlUh+Y=";
+    hash = "sha256-loyEGnJ6ExWMUyArNNpQGzpagFgwlNzaNBO8EPXkMws=";
   };
 
-  vendorHash = "sha256-Qyb8ivuZplbOIxoS2cC+2FSZbW7CnChv1jaIKkCzgN4=";
+  vendorHash = "sha256-/+vKs5NzzyP9Ihz+zbxGf/OEHD0kaf0wZzE0Sg++3bE=";
 
   # See .goreleaser.yml
   ldflags = [

pkgs/by-name/mo/mongoc/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "mongoc";
-  version = "2.0.0";
+  version = "1.30.2";
 
   src = fetchFromGitHub {
     owner = "mongodb";
     repo = "mongo-c-driver";
     tag = version;
-    hash = "sha256-GKXfTrZqdfgxzNi0fM9Ik4XeZGn9IlX75+cXmm5tXPY=";
+    hash = "sha256-RDUrD8MPZd1VBePyR+L5GiT/j5EZIY1KHLQKG5MsuSM=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ni/nim-unwrapped-2_0/package.nix

···
 
 nim-unwrapped-2_2.overrideAttrs (
   finalAttrs: previousAttrs: {
-    version = "2.0.12";
+    version = "2.0.16";
     src = fetchurl {
       url = "https://nim-lang.org/download/nim-${finalAttrs.version}.tar.xz";
-      hash = "sha256-xIh5ScXrjX+an1bwrrK/IUD6vwruDwWAoxnioJgVczo=";
+      hash = "sha256-sucMbAEbVQcJMJCoiH+iUncyCP0EfuOPhWLiVp5cN4o=";
     };
     patches = lib.lists.unique (
       builtins.filter (

pkgs/by-name/ni/nim-unwrapped-2_2/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nim-unwrapped";
-  version = "2.2.2";
+  version = "2.2.4";
   strictDeps = true;
 
   src = fetchurl {
     url = "https://nim-lang.org/download/nim-${finalAttrs.version}.tar.xz";
-    hash = "sha256-f8ybh6ycC6Wkif3Cbi2EgM6Wo8piIQDWJn75ITX9ih8=";
+    hash = "sha256-+CtBl1D8zlYfP4l6BIaxgBhoRddvtdmfJIzhZhCBicc=";
   };
 
   buildInputs = [

pkgs/by-name/ni/nix-search-tv/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "nix-search-tv";
-  version = "2.1.5";
+  version = "2.1.6";
 
   src = fetchFromGitHub {
     owner = "3timeslazy";
     repo = "nix-search-tv";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9tOrEcSZ6chVKq82zCoFCy3as71p5k7poXXFO/mXhw0=";
+    hash = "sha256-AgFedZzkNuTXJFzIs+U2m0nELjFUwESYUbUCSmh0G3Q=";
   };
 
-  vendorHash = "sha256-hgZWppiy+P3BfoKOMClzCot1shKcGTZnsMCJ/ItxckE=";
+  vendorHash = "sha256-hBkro++bjYGrhnq8rmSuKTgnkicagOHTkfRYluSBUX8=";
 
   subPackages = [ "cmd/nix-search-tv" ];
 

pkgs/by-name/no/normcap/package.nix

···
   ];
 
   pythonRelaxDeps = [
+    "jeepney"
     "shiboken6"
   ];
 

pkgs/by-name/nv/nvc/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "nvc";
-  version = "1.15.2";
+  version = "1.16.0";
 
   src = fetchFromGitHub {
     owner = "nickg";
     repo = "nvc";
     rev = "r${version}";
-    hash = "sha256-GMgGnsEKItVgQLwk6gY8pU6lIGoGGWPGhkBJwmVRy+Q=";
+    hash = "sha256-RI86VdWuPTcjkQstwDBN/rDLv/Imy9kYH/nIJSGuIcI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/pd/pdfcpu/package.nix

···
 {
   lib,
   buildGoModule,
+  stdenv,
   fetchFromGitHub,
+  writableTmpDirAsHomeHook,
 }:
 
 buildGoModule rec {
   pname = "pdfcpu";
-  version = "0.9.1";
+  version = "0.10.1";
 
   src = fetchFromGitHub {
     owner = "pdfcpu";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-PJTEaWU/erqVJakvxfB0aYRsi/tcGxYYZjCdEvThmzM=";
+    hash = "sha256-IODE6/TIXZZC5Z8guFK24iiHTwj84fcf9RiAyFkX2F8=";
     # Apparently upstream requires that the compiled executable will know the
     # commit hash and the date of the commit. This information is also presented
     # in the output of `pdfcpu version` which we use as a sanity check in the
···
     '';
   };
 
-  vendorHash = "sha256-x5EXv2LkJg2LAdml+1I4MzgTvNo6Gl+6e6UHVQ+Z9rU=";
+  vendorHash = "sha256-27YTR/vYuNggjUIbpKs3/yEJheUXMaLZk8quGPwgNNk=";
 
   ldflags = [
     "-s"
···
   # No tests
   doCheck = false;
   doInstallCheck = true;
+  installCheckInputs = [
+    writableTmpDirAsHomeHook
+  ];
+  # NOTE: Can't use `versionCheckHook` since a writeable $HOME is required and
+  # `versionCheckHook` uses --ignore-environment
   installCheckPhase = ''
-    export HOME=$(mktemp -d)
     echo checking the version print of pdfcpu
-    $out/bin/pdfcpu version | grep ${version}
-    $out/bin/pdfcpu version | grep $(cat COMMIT | cut -c1-8)
-    $out/bin/pdfcpu version | grep $(cat SOURCE_DATE)
+    mkdir -p $HOME/"${
+      if stdenv.hostPlatform.isDarwin then "Library/Application Support" else ".config"
+    }"/pdfcpu
+    versionOutput="$($out/bin/pdfcpu version)"
+    for part in ${version} $(cat COMMIT | cut -c1-8) $(cat SOURCE_DATE); do
+      if [[ ! "$versionOutput" =~ "$part" ]]; then
+          echo version output did not contain expected part $part . Output was:
+          echo "$versionOutput"
+          exit 3
+      fi
+    done
   '';
 
   subPackages = [ "cmd/pdfcpu" ];

pkgs/by-name/pe/peertube/package.nix

···
   fixup-yarn-lock,
   jq,
   fd,
-  nodejs_18,
+  nodejs_20,
   which,
   yarn,
 }:
···
     fd
   ];
 
-  buildInputs = [ nodejs_18 ];
+  buildInputs = [ nodejs_20 ];
 
   buildPhase = ''
     # Build node modules

pkgs/by-name/pr/prismlauncher-unwrapped/package.nix

···
   cmake,
   cmark,
   extra-cmake-modules,
-  fetchpatch,
+  fetchpatch2,
   gamemode,
   ghc_filesystem,
   jdk17,
···
     rm -rf source/libraries/libnbtplusplus
     ln -s ${libnbtplusplus} source/libraries/libnbtplusplus
   '';
+
+  patches = [
+    # https://github.com/PrismLauncher/PrismLauncher/pull/3622
+    # https://github.com/NixOS/nixpkgs/issues/400119
+    (fetchpatch2 {
+      name = "fix-qt6.9-compatibility.patch";
+      url = "https://github.com/PrismLauncher/PrismLauncher/commit/8bb9b168fb996df9209e1e34be854235eda3d42a.diff";
+      hash = "sha256-hOqWBrUrVUhMir2cfc10gu1i8prdNxefTyr7lH6KA2c=";
+    })
+  ];
 
   nativeBuildInputs = [
     cmake

pkgs/by-name/pr/prometheus-smartctl-exporter/package.nix

···
 
 buildGoModule rec {
   pname = "smartctl_exporter";
-  version = "0.13.0";
+  version = "0.14.0";
 
   src = fetchFromGitHub {
     owner = "prometheus-community";
     repo = pname;
     tag = "v${version}";
-    hash = "sha256-0WppsqDl4nKa6s/dyX9zsUzoqAgStDSBWMM0eolTPdk=";
+    hash = "sha256-9woQgqkPYKMu8p35aeSv3ua1l35BuMzFT4oCVpmyG2E=";
   };
 
-  vendorHash = "sha256-Sy/lm55NAhYDdVLli5yQpoRVieJU8RJDRFzd4Len6eg=";
+  vendorHash = "sha256-bDO7EgCjmObNaYHllczDKuFyKTKH0iCFDSLke6VMsHI=";
 
   postPatch = ''
     substituteInPlace main.go README.md \

pkgs/by-name/ps/pscale/package.nix

···
 
 buildGoModule rec {
   pname = "pscale";
-  version = "0.239.0";
+  version = "0.241.0";
 
   src = fetchFromGitHub {
     owner = "planetscale";
     repo = "cli";
     rev = "v${version}";
-    sha256 = "sha256-y7SIZ/upQrzHQbncEyJM5OrJDXDuh7It3lOWSn3Y7hI=";
+    sha256 = "sha256-he9LLC8ijbgfmTDVURKZhU5RyOJC8U4vjPQBNNtC9WI=";
   };
 
-  vendorHash = "sha256-qcv5pFCibYSJvekSmj4iLeQWunW9+U/mbzbaGTp1sso=";
+  vendorHash = "sha256-Gt2dDgIAn7Hjlb2VI5VBKP7IfzkMZvCyLmOYYBtLx3o=";
 
   ldflags = [
     "-s"

pkgs/by-name/pu/pulsar/update.mjs

···
 #!/usr/bin/env nix-shell
 /*
-#!nix-shell -i node -p nodejs_18
+#!nix-shell -i node -p nodejs
 */
 
 import { promises as fs } from 'node:fs';

pkgs/by-name/qu/quill-log/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "quill-log";
-  version = "9.0.1";
+  version = "9.0.2";
 
   src = fetchFromGitHub {
     owner = "odygrd";
     repo = "quill";
     rev = "v${version}";
-    hash = "sha256-RPffzaFrkV7w40CAQLAXV47EyWv4M7pShaY7Phsmw1o=";
+    hash = "sha256-8BXdSITZKdJSstS4LbOCT9BedFHbmd/6bAPiQsCC+8Y=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/re/readest/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "readest";
-  version = "0.9.35";
+  version = "0.9.36";
 
   src = fetchFromGitHub {
     owner = "readest";
     repo = "readest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-w6aMfJwQDEG5WmFdZhtxeTi9w8X3tBqBmpo0nItLYrE=";
+    hash = "sha256-r/mpqeHKo6oQqNCnFByxHZf7RSWD5esZbweAEuda9ME=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/re/redeclipse/package.nix

···
   pkg-config,
   freetype,
   zlib,
+  libGL,
   libX11,
   SDL2,
   SDL2_image,
···
   };
 
   buildInputs = [
+    libGL
     libX11
     freetype
     zlib

pkgs/by-name/rk/rke/package.nix

···
 
 buildGoModule rec {
   pname = "rke";
-  version = "1.8.1";
+  version = "1.8.2";
 
   src = fetchFromGitHub {
     owner = "rancher";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-mTSeUFmkXI9yZ1yeBXzudf2BmLtdmoiTlB/wtn++NAo=";
+    hash = "sha256-/n6XGpwlGaaDDA5fJgCfDGr5GdaF3Qf5BS7fBdJmVYw=";
   };
 
-  vendorHash = "sha256-5+BjXPh52RNoaU/ABpvgbAO+mKcW4Hg2SRxRhV9etIo=";
+  vendorHash = "sha256-OWC8OZhORHwntAR2YHd4KfQgB2Wtma6ayBWfY94uOA4=";
 
   subPackages = [ "." ];
 

pkgs/by-name/sa/satisfactorymodmanager/package.nix

···
   wails,
   wrapGAppsHook3,
   glib-networking,
+  makeDesktopItem,
+  copyDesktopItems,
 }:
 
 buildGoModule rec {
···
     pnpm_8.configHook
     wails
     wrapGAppsHook3
+    copyDesktopItems
   ];
 
   buildInputs = [
···
   installPhase = ''
     runHook preInstall
     install -Dm755 build/bin/SatisfactoryModManager -t "$out/bin"
+
+    for i in 16 32 64 128 256 512; do
+      install -D ./icons/"$i"x"$i".png "$out"/share/icons/hicolor/"$i"x"$i"/apps/SatisfactoryModManager.png
+    done
     runHook postInstall
   '';
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "SatisfactoryModManager";
+      desktopName = "Satisfactory Mod Manager";
+      exec = "SatisfactoryModManager %u";
+      mimeTypes = [ "x-scheme-handler/smmanager" ];
+      icon = "SatisfactoryModManager";
+      terminal = false;
+      categories = [ "Game" ];
+    })
+  ];
 
   meta = {
     broken = stdenv.hostPlatform.isDarwin;

pkgs/by-name/sc/scspell/package.nix

···
+{ python3Packages }: with python3Packages; toPythonApplication scspell

pkgs/by-name/sl/slskd/package.nix

···
   fetchFromGitHub,
   fetchNpmDeps,
   mono,
-  nodejs_18,
+  nodejs_20,
   slskd,
   testers,
   nix-update-script,
 }:
 
 let
-  nodejs = nodejs_18;
+  nodejs = nodejs_20;
   # https://github.com/NixOS/nixpkgs/blob/d88947e91716390bdbefccdf16f7bebcc41436eb/pkgs/build-support/node/build-npm-package/default.nix#L62
   npmHooks = buildPackages.npmHooks.override { inherit nodejs; };
 in

pkgs/by-name/sl/slurm-nm/package.nix

···
     description = "Generic network load monitor";
     homepage = "https://github.com/mattthias/slurm";
     license = licenses.gpl2Plus;
-    platforms = [ "x86_64-linux" ];
+    platforms = platforms.unix;
     maintainers = with maintainers; [ mikaelfangel ];
     mainProgram = "slurm";
   };

pkgs/by-name/sq/sqlc/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "sqlc";
-  version = "1.28.0";
+  version = "1.29.0";
 
   src = fetchFromGitHub {
     owner = "sqlc-dev";
     repo = "sqlc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kACZusfwEIO78OooNGMXCXQO5iPYddmsHCsbJ3wkRQs=";
+    hash = "sha256-BaEvmvbo6OQ1T9lgIuNJMyvnvVZd/20mFEMQdFtxdZc=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-5KVCG92aWVx2J78whEwhEhqsRNlw4xSdIPbSqYM+1QI=";
+  vendorHash = "sha256-LpF94Jv7kukSa803WCmnO+y6kvHLPz0ZGEdbjwVFV40=";
 
   subPackages = [ "cmd/sqlc" ];
 

pkgs/by-name/st/starboard/package.nix

···
 
 buildGoModule rec {
   pname = "starboard";
-  version = "0.15.24";
+  version = "0.15.25";
 
   src = fetchFromGitHub {
     owner = "aquasecurity";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-GZ+KOnQV/eXPt1QGaqWj4JAlPNhNKpVn7rlC7W4zfDo=";
+    hash = "sha256-mCYnJ1SFa3OuYQlPWTq9vWV9s/jtaQ6dOousV/UNR18=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
···
       find "$out" -name .git -print0 | xargs -0 rm -rf
     '';
   };
-  vendorHash = "sha256-5TeiEGu5B+5uNnkxdBlPqLu/g9FZ4VWrbZFfp/JsJiA=";
+  vendorHash = "sha256-qujObGBxUFGxtrdlJmTOTW6HUbDCjNSElPqhQfYqId4=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/sy/syndicate_utils/package.nix

···
     owner = "ehmry";
     repo = "syndicate_utils";
     rev = finalAttrs.version;
-    hash = "sha256-X8sb/2mkhVp0jJpTk9uYSDhAVui4jHl355amRCnkNhA=";
+    hash = "sha256-zHVL2A5mAZX73Xk6Pcs02wHCAVfsOYxDO8/yKX0FvBs=";
   };
 
   buildInputs = [
···
     libxslt
     openssl
   ];
-
-  nimFlags = [ "--define:nimPreviewHashRef" ];
 
   meta = finalAttrs.src.meta // {
     description = "Utilities for the Syndicated Actor Model";

pkgs/by-name/sy/syndicate_utils/sbom.json

···
       "type": "application",
       "bom-ref": "pkg:nim/syndicate_utils",
       "name": "syndicate_utils",
-      "description": "Utilites for Syndicated Actors and Synit",
-      "version": "20250110",
+      "description": "Utilities for Syndicated Actors and Synit",
+      "version": "20250422",
       "authors": [
         {
           "name": "Emery Hemingway"
···
       "version": "trunk",
       "externalReferences": [
         {
-          "url": "https://git.syndicate-lang.org/ehmry/syndicate-nim/archive/eb3c522f9f051ceeef4c8518820fcd90fe2a2c2d.tar.gz",
+          "url": "https://git.syndicate-lang.org/ehmry/syndicate-nim/archive/9c3dbbaa661dfc191ccb5be791a78cf977adec8b.tar.gz",
           "type": "source-distribution"
         },
         {
···
         },
         {
           "name": "nix:fod:path",
-          "value": "/nix/store/sg7dxaz3g2qgb2sp0lzyyl2iwddbxljl-source"
+          "value": "/nix/store/crza0j3plp9a0bw78cinyk6hwhn3llcf-source"
         },
         {
           "name": "nix:fod:rev",
-          "value": "eb3c522f9f051ceeef4c8518820fcd90fe2a2c2d"
+          "value": "9c3dbbaa661dfc191ccb5be791a78cf977adec8b"
         },
         {
           "name": "nix:fod:sha256",
-          "value": "1gjjybfgw99dm8m5i6nm5zsgs7bavkqw6pgia8pc4n41h4ppshiw"
+          "value": "08pa25f7d0x1228hmrpzn7g2jd1bwip4fvihvw4mx335ssx317kw"
         },
         {
           "name": "nix:fod:url",
-          "value": "https://git.syndicate-lang.org/ehmry/syndicate-nim/archive/eb3c522f9f051ceeef4c8518820fcd90fe2a2c2d.tar.gz"
+          "value": "https://git.syndicate-lang.org/ehmry/syndicate-nim/archive/9c3dbbaa661dfc191ccb5be791a78cf977adec8b.tar.gz"
         },
         {
           "name": "nix:fod:ref",
···
       "type": "library",
       "bom-ref": "pkg:nim/preserves",
       "name": "preserves",
-      "version": "20241221",
+      "version": "20250214",
       "externalReferences": [
         {
-          "url": "https://git.syndicate-lang.org/ehmry/preserves-nim/archive/c9f5806b153b2fd3ed8f868f8cf36cdbc25cd3d5.tar.gz",
+          "url": "https://git.syndicate-lang.org/ehmry/preserves-nim/archive/21480c2fd0a6cc6ecfd34fb532ed975b135b0b8e.tar.gz",
           "type": "source-distribution"
         },
         {
···
         },
         {
           "name": "nix:fod:path",
-          "value": "/nix/store/jr5la48ywfs0ghn5v5256rjqwyxzmd7a-source"
+          "value": "/nix/store/1d8nbd5nfqpl6l3c7c783h6r0gc47vwf-source"
         },
         {
           "name": "nix:fod:rev",
-          "value": "c9f5806b153b2fd3ed8f868f8cf36cdbc25cd3d5"
+          "value": "21480c2fd0a6cc6ecfd34fb532ed975b135b0b8e"
         },
         {
           "name": "nix:fod:sha256",
-          "value": "1fh8r9mhr3f4mf45fc1shnqfxdrdlif1nsvqd016ni16vmcvclmc"
+          "value": "136kr6pj5rv3184ykishbkmg86ss85nzygy5wc1lr9l0pgwx6936"
         },
         {
           "name": "nix:fod:url",
-          "value": "https://git.syndicate-lang.org/ehmry/preserves-nim/archive/c9f5806b153b2fd3ed8f868f8cf36cdbc25cd3d5.tar.gz"
+          "value": "https://git.syndicate-lang.org/ehmry/preserves-nim/archive/21480c2fd0a6cc6ecfd34fb532ed975b135b0b8e.tar.gz"
         },
         {
           "name": "nix:fod:ref",
-          "value": "20241221"
+          "value": "20250214"
         },
         {
           "name": "nix:fod:srcDir",

pkgs/by-name/tr/traefik/package.nix

···
   nix-update-script,
 }:
 
-buildGo124Module rec {
+buildGo124Module (finalAttrs: {
   pname = "traefik";
   version = "3.3.6";
 
   # Archive with static assets for webui
   src = fetchzip {
-    url = "https://github.com/traefik/traefik/releases/download/v${version}/traefik-v${version}.src.tar.gz";
+    url = "https://github.com/traefik/traefik/releases/download/v${finalAttrs.version}/traefik-v${finalAttrs.version}.src.tar.gz";
     hash = "sha256-HA/JSwcss5ytGPqe2dqsKTZxuhWeC/yi8Mva4YVFeDs=";
     stripRoot = false;
   };
···
 
     ldflags="-s"
     ldflags+=" -w"
-    ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major version}/pkg/version.Version=${version}"
-    ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major version}/pkg/version.Codename=$CODENAME"
+    ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major finalAttrs.version}/pkg/version.Version=${finalAttrs.version}"
+    ldflags+=" -X github.com/traefik/traefik/v${lib.versions.major finalAttrs.version}/pkg/version.Codename=$CODENAME"
   '';
 
   doCheck = false;
···
 
   passthru.updateScript = nix-update-script { };
 
-  meta = with lib; {
+  meta = {
     homepage = "https://traefik.io";
     description = "Modern reverse proxy";
-    changelog = "https://github.com/traefik/traefik/raw/v${version}/CHANGELOG.md";
-    license = licenses.mit;
-    maintainers = with maintainers; [
+    changelog = "https://github.com/traefik/traefik/raw/v${finalAttrs.version}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
       djds
       vdemeester
     ];
     mainProgram = "traefik";
   };
-}
+})

pkgs/by-name/tu/tuicam/package.nix

···
     homepage = "https://github.com/hlsxx/tuicam";
     changelog = "https://github.com/hlsxx/tuicam/releases/tag/v${version}";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ linuxmobile ];
+    maintainers = with lib.maintainers; [ FKouhai ];
     platforms = lib.platforms.linux;
     mainProgram = "tuicam";
   };

pkgs/by-name/us/usbfluxd/package.nix

···
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  autoreconfHook,
+  pkg-config,
+  libimobiledevice,
+  libusb1,
+  libusbmuxd,
+  usbmuxd,
+  libplist,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "usbfluxd";
+  version = "1.0";
+
+  src = fetchFromGitHub {
+    owner = "corellium";
+    repo = "usbfluxd";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-tfAy3e2UssPlRB/8uReLS5f8N/xUUzbjs8sKNlr40T0=";
+  };
+
+  nativeBuildInputs = [
+    autoreconfHook
+    pkg-config
+  ];
+
+  buildInputs = [
+    libimobiledevice
+    libusb1
+    libusbmuxd
+    usbmuxd
+    libplist
+  ];
+
+  postPatch = ''
+    substituteInPlace configure.ac \
+      --replace-fail 'with_static_libplist=yes' 'with_static_libplist=no'
+    substituteInPlace usbfluxd/utils.h \
+      --replace-fail PLIST_FORMAT_BINARY //PLIST_FORMAT_BINARY \
+      --replace-fail PLIST_FORMAT_XML, NOT_PLIST_FORMAT_XML
+  '';
+
+  meta = {
+    homepage = "https://github.com/corellium/usbfluxd";
+    description = "Redirects the standard usbmuxd socket to allow connections to local and remote usbmuxd instances so remote devices appear connected locally";
+    license = lib.licenses.gpl2Plus;
+    mainProgram = "usbfluxctl";
+    maintainers = with lib.maintainers; [ x807x ];
+  };
+})

pkgs/by-name/vu/vulkan-cts/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "vulkan-cts";
-  version = "1.4.1.3";
+  version = "1.4.2.0";
 
   src = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "VK-GL-CTS";
     rev = "vulkan-cts-${finalAttrs.version}";
-    hash = "sha256-44UGGeuKMCP4fLsZnIPdWDjozd87su9TUbFBnftVrNY=";
+    hash = "sha256-+ydv67uQkoofU3GrSJWosb99DrGDGs80z+hq9MpFIpA=";
   };
 
   prePatch = ''

pkgs/by-name/vu/vulkan-cts/sources.nix

···
   amber = fetchFromGitHub {
     owner = "google";
     repo = "amber";
-    rev = "1ec5e96db7e0343d045a52c590e30eba154f74a8";
-    hash = "sha256-4LoV7PfkwLrg+7GyuB1poC/9zE/3jy8nhs+uPe2U3lA=";
+    rev = "6fa5ac1fb3b01c93eef3caa2aeb8841565e38d90";
+    hash = "sha256-JUrOz+hpGk8rgxMLzrCrfbM60HsLyRnf6cG4j2BqMq0=";
   };
 
   glslang = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "glslang";
-    rev = "3a2834e7702651043ca9f35d022739e740563516";
-    hash = "sha256-hHmqvdgBS23bLGCzlKJtlElw79/WvxEbPSwpbQFHQYY=";
+    rev = "1b65bd602b23d401d1c4c86dfa90a36a52c66294";
+    hash = "sha256-W1a6qeW4W4eNMl2UXEl0HpuLngtUjVsJI/MaiZ5wcWQ=";
   };
 
   jsoncpp = fetchFromGitHub {
···
   spirv-headers = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "SPIRV-Headers";
-    rev = "36d5e2ddaa54c70d2f29081510c66f4fc98e5e53";
-    hash = "sha256-8hx8/1vaY4mRnfNaBsghWqpzyzY4hkVkNFbQEFZif9g=";
+    rev = "767e901c986e9755a17e7939b3046fc2911a4bbd";
+    hash = "sha256-mXj6HDIEEjvGLO3nJEIRxdJN28/xUA2W+r9SRnh71LU=";
   };
 
   spirv-tools = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "SPIRV-Tools";
-    rev = "3fb52548bc8a68d349d31e21bd4e80e3d953e87c";
-    hash = "sha256-RJ3Q3U4GjqvUXDy8Jd4NWgjhKOxYMMK1Jerj19dAqno=";
+    rev = "3364b982713a0440d1d342dd5eec65b122a61b71";
+    hash = "sha256-zVo1i/AgwPBXVXgKpdubX0TTu7gqoX88BzZfhRZ4Z2o=";
   };
 
   video_generator = fetchFromGitHub {
···
   vulkan-docs = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "Vulkan-Docs";
-    rev = "c7a3955e47d223c6a37fb29e2061c973eec98d0a";
-    hash = "sha256-dTkLzENuEfe0TVvJAgYevJNPyI/lWbjx8Pzz3Lj76PY=";
+    rev = "645c59c70e826d9738b6bb103316c03d887dfed3";
+    hash = "sha256-r3JqAt0+JUwQS9JuWbKDx9L3ceDPQfYaAtnRz3l07ig=";
   };
 
   vulkan-validationlayers = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "Vulkan-ValidationLayers";
-    rev = "902f3cf8d51e76be0c0deb4be39c6223abebbae2";
-    hash = "sha256-p4DFlyU1jjfVFlEOE21aNHfqaTZ8QbSCFQfpsYS0KR0=";
+    rev = "6cf616f131e9870c499a50441bca2d07ccda9733";
+    hash = "sha256-nKamcLF17IA56tcxQLc8zUbkB9yQCW+Nag+Wn8pUqUg=";
   };
 
   vulkan-video-samples = fetchFromGitHub {

pkgs/by-name/wa/waypipe/package.nix

···
 }:
 llvmPackages.stdenv.mkDerivation rec {
   pname = "waypipe";
-  version = "0.10.3";
+  version = "0.10.4";
 
   src = fetchFromGitLab {
     domain = "gitlab.freedesktop.org";
     owner = "mstoeckl";
     repo = "waypipe";
     tag = "v${version}";
-    hash = "sha256-E0NJTOK8wf42dXgBtsOmCKlfSLC/zEuUxLKVxwcb9Ig=";
+    hash = "sha256-O47b1CHCEwUSigjk0Ml3uLhRRxcPC6Phj2cnIlX1Hkg=";
   };
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-T2/su0DQt8KZ8diHTNz3jzeMZaW3cGcAFA6MYs1Qn3k=";
+    hash = "sha256-c561GpU2XENILSzk0Zka0qrtXZm7xaq/hiJA4Iv++QI=";
   };
 
   strictDeps = true;

pkgs/by-name/we/weaviate/package.nix

···
 
 buildGoModule rec {
   pname = "weaviate";
-  version = "1.29.1";
+  version = "1.30.1";
 
   src = fetchFromGitHub {
     owner = "weaviate";
     repo = "weaviate";
     rev = "v${version}";
-    hash = "sha256-Akg0iY5M3X6ztKxhNEkhi03VnbNpNW7/Vcbv2KB6X54=";
+    hash = "sha256-Rxi21DifRnOzUgPO3U74LMQ/27NwvYzcj3INplTT1j4=";
   };
 
-  vendorHash = "sha256-U2ean49ESKmcQ3fTtd6y9MwfWPr6tolvgioyKbQsBmU=";
+  vendorHash = "sha256-jXfVPdORMBOAl3Od3GknGo7Qtfb4H3RqGYdI6Jx1/5I=";
 
   subPackages = [ "cmd/weaviate-server" ];
 

pkgs/by-name/ya/yazi/plugins/duckdb/default.nix

···
 }:
 mkYaziPlugin {
   pname = "duckdb.yazi";
-  version = "25.4.8-unstable-2025-04-09";
+  version = "25.4.8-unstable-2025-04-20";
 
   src = fetchFromGitHub {
     owner = "wylie102";
     repo = "duckdb.yazi";
-    rev = "eaa748c62e24f593104569d2dc15d50b1d48497b";
-    hash = "sha256-snQ+n7n+71mqAsdzrXcI2v7Bg0trrbiHv3mIAxldqlc=";
+    rev = "6259e2d26236854b966ebc71d28de0397ddbe4d8";
+    hash = "sha256-9DMqE/pihp4xT6Mo2xr51JJjudMRAesxD5JqQ4WXiM4=";
   };
 
   meta = {

pkgs/by-name/ya/yazi/plugins/rich-preview/default.nix

···
 }:
 mkYaziPlugin {
   pname = "rich-preview.yazi";
-  version = "0-unstable-2025-01-18";
+  version = "0-unstable-2025-04-22";
 
   src = fetchFromGitHub {
     owner = "AnirudhG07";
     repo = "rich-preview.yazi";
-    rev = "2559e5fa7c1651dbe7c5615ef6f3b5291347d81a";
-    hash = "sha256-dW2gAAv173MTcQdqMV32urzfrsEX6STR+oCJoRVGGpA=";
+    rev = "fdcf37320e35f7c12e8087900eebffcdafaee8cb";
+    hash = "sha256-HO9hTCfgGTDERClZaLnUEWDvsV9GMK1kwFpWNM1wq8I=";
   };
 
   meta = {

pkgs/by-name/ya/yazi/plugins/starship/default.nix

···
 }:
 mkYaziPlugin {
   pname = "starship.yazi";
-  version = "25.4.8-unstable-2025-04-09";
+  version = "25.4.8-unstable-2025-04-20";
 
   src = fetchFromGitHub {
     owner = "Rolv-Apneseth";
     repo = "starship.yazi";
-    rev = "c0707544f1d526f704dab2da15f379ec90d613c2";
-    hash = "sha256-H8j+9jcdcpPFXVO/XQZL3zq1l5f/WiOm4YUxAMduSRs=";
+    rev = "6fde3b2d9dc9a12c14588eb85cf4964e619842e6";
+    hash = "sha256-+CSdghcIl50z0MXmFwbJ0koIkWIksm3XxYvTAwoRlDY=";
   };
 
   meta = {

pkgs/by-name/ya/yazi/plugins/toggle-pane/default.nix

···
 }:
 mkYaziPlugin {
   pname = "toggle-pane.yazi";
-  version = "25.2.26-unstable-2025-03-19";
+  version = "25.2.26-unstable-2025-04-21";
 
   src = fetchFromGitHub {
     owner = "yazi-rs";
     repo = "plugins";
-    rev = "273019910c1111a388dd20e057606016f4bd0d17";
-    hash = "sha256-80mR86UWgD11XuzpVNn56fmGRkvj0af2cFaZkU8M31I=";
+    rev = "4b027c79371af963d4ae3a8b69e42177aa3fa6ee";
+    hash = "sha256-auGNSn6tX72go7kYaH16hxRng+iZWw99dKTTUN91Cow=";
   };
 
   meta = {

pkgs/development/compilers/elm/default.nix

···
   pkgs,
   lib,
   makeWrapper,
-  nodejs ? pkgs.nodejs_18,
+  nodejs ? pkgs.nodejs_20,
 }:
 
 let

pkgs/development/compilers/elm/packages/node/node-composition.nix

···
     inherit system;
   },
   system ? builtins.currentSystem,
-  nodejs ? pkgs."nodejs_18",
+  nodejs ? pkgs."nodejs_20",
 }:
 
 let

pkgs/development/libraries/pangolin/default.nix

···
   eigen,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "pangolin";
   version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "stevenlovegrove";
     repo = "Pangolin";
-    rev = "v${version}";
+    rev = "v${finalAttrs.version}";
     sha256 = "sha256-B5YuNcJZHjR3dlVs66rySi68j29O3iMtlQvCjTUZBeY=";
   };
 
···
     ffmpeg
     libjpeg
     libpng
-    libtiff
+    libtiff.out
     eigen
   ];
 
   # The tests use cmake's findPackage to find the installed version of
   # pangolin, which isn't what we want (or available).
   doCheck = false;
-  cmakeFlags = [ "-DBUILD_TESTS=OFF" ];
+  cmakeFlags = [ (lib.cmakeBool "BUILD_TESTS" false) ];
 
   meta = {
     description = "Lightweight portable rapid development library for managing OpenGL display / interaction and abstracting video input";
···
     maintainers = [ ];
     platforms = lib.platforms.all;
   };
-}
+})

pkgs/development/php-packages/phalcon/default.nix

···
 
 buildPecl rec {
   pname = "phalcon";
-  version = "5.9.2";
+  version = "5.9.3";
 
   src = fetchFromGitHub {
     owner = "phalcon";
     repo = "cphalcon";
     rev = "v${version}";
-    hash = "sha256-SuY65GZ4eys2N5jX3/cmRMF4g+tGTeeQecoZvFkOnr4=";
+    hash = "sha256-1+8+kIaKvgQCE+qvZOkYOW/RdDv4ln0njC5VzL9jvnQ=";
   };
 
   internalDeps = [

pkgs/development/php-packages/phpstan/default.nix

···
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "phpstan";
-  version = "2.1.11";
+  version = "2.1.12";
 
   src = fetchFromGitHub {
     owner = "phpstan";
     repo = "phpstan-src";
     tag = finalAttrs.version;
-    hash = "sha256-K9XhLR5b3bPIt/6lyBxM6y7SgPZmvy9TvRpyohOwtDM=";
+    hash = "sha256-KX5wvt6MGzxp24z9ga2U9NL1F9qUDeqLaILoISfB7dQ=";
   };
 
-  vendorHash = "sha256-I3v585gdcBzA24PavB9zBt2JfW1w7WdY94cxLnOjQxg=";
+  vendorHash = "sha256-JFrRZMB8ety+ZJSIgaTRCTbE+t2HfAUmtyBLHwEg+9A=";
   composerStrictValidation = false;
 
   doInstallCheck = true;

pkgs/development/php-packages/wikidiff2/default.nix

···
+{
+  lib,
+  buildPecl,
+  fetchFromGitHub,
+  pkg-config,
+  libthai,
+}:
+
+buildPecl rec {
+  pname = "wikidiff2";
+  version = "1.14.1";
+
+  src = fetchFromGitHub {
+    owner = "wikimedia";
+    repo = "mediawiki-php-wikidiff2";
+    tag = version;
+    hash = "sha256-UTOfLXv2QWdjThxfrPQDLB8Mqo4js6LzOKXePivdp9k=";
+  };
+
+  nativeBuildInputs = [ pkg-config ];
+  buildInputs = [ libthai ];
+
+  meta = {
+    description = "PHP extension which formats changes between two input texts, producing HTML or JSON.";
+    license = lib.licenses.gpl2;
+    homepage = "https://www.mediawiki.org/wiki/Wikidiff2";
+    maintainers = with lib.maintainers; [ georgyo ];
+  };
+}

pkgs/development/python-modules/aioairzone-cloud/default.nix

···
 
 buildPythonPackage rec {
   pname = "aioairzone-cloud";
-  version = "0.6.11";
+  version = "0.6.12";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
···
     owner = "Noltari";
     repo = "aioairzone-cloud";
     tag = version;
-    hash = "sha256-S/9j2QecmcEEn/nhyYe5iZ+nyVxgnXqdap09Ia7rhyY=";
+    hash = "sha256-maSYT1sd1GTe0Av0NvOUinI/GBYFzjUAemRLx7sDPUk=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/aioapns/default.nix

···
 
 buildPythonPackage rec {
   pname = "aioapns";
-  version = "3.3.1";
+  version = "4.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-bfQpcp/oEBpFu9ywog8CFGGHR8Z5kL6l2O2nzZXaN90=";
+    hash = "sha256-NxX6q/P6bAJA52N/RCfYjQiv3M6w3PuVbG0JtvSUJ/g=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/ariadne/default.nix

···
 
 buildPythonPackage rec {
   pname = "ariadne";
-  version = "0.26.1";
+  version = "0.26.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "mirumee";
     repo = "ariadne";
     tag = version;
-    hash = "sha256-37SMBW49sSyaO2JrMtSZzS9wDUWo+otkPYCVrT9+4rY=";
+    hash = "sha256-zkxRg11O/P7+qU+vdDG3i8Tpn6dXByaGLN9t+e2dhyE=";
   };
 
   patches = [ ./remove-opentracing.patch ];

pkgs/development/python-modules/asf-search/default.nix

···
 
 buildPythonPackage rec {
   pname = "asf-search";
-  version = "8.1.1";
+  version = "8.1.2";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "asfadmin";
     repo = "Discovery-asf_search";
     tag = "v${version}";
-    hash = "sha256-9NyBDpCIsRBPN2965SR106h6hxwML7kXv6sY3YlPseA=";
+    hash = "sha256-/EQpeTFGDbJnC/HnnK9v3eaz1xVvv3i0bSIZ27z9GVU=";
   };
 
   pythonRelaxDeps = [ "tenacity" ];
···
   meta = with lib; {
     description = "Python wrapper for the ASF SearchAPI";
     homepage = "https://github.com/asfadmin/Discovery-asf_search";
-    changelog = "https://github.com/asfadmin/Discovery-asf_search/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/asfadmin/Discovery-asf_search/blob/${src.tag}/CHANGELOG.md";
     license = licenses.bsd3;
     maintainers = with maintainers; [ bzizou ];
   };

pkgs/development/python-modules/azure-mgmt-datafactory/default.nix

···
 
 buildPythonPackage rec {
   pname = "azure-mgmt-datafactory";
-  version = "9.1.0";
+  version = "9.2.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
   src = fetchPypi {
     pname = "azure_mgmt_datafactory";
     inherit version;
-    hash = "sha256-oVqOTpYnoaEMGZbqrpnxNlPIl+h582S7k3ijPC4RTIw=";
+    hash = "sha256-UTLpwkxEGsIl8qYCJZJLqlUHnKge/325mnDWYdZLsNc=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/azure-mgmt-storage/default.nix

···
 
 buildPythonPackage rec {
   pname = "azure-mgmt-storage";
-  version = "22.1.1";
+  version = "22.2.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
   src = fetchPypi {
     pname = "azure_mgmt_storage";
     inherit version;
-    hash = "sha256-JaqlroxAww4vkfiq5vUpBrBVfpR9XBuYF9T/nezBE0A=";
+    hash = "sha256-f+1DPSROJ20G3fNPn6e5uHE08IX8Y0YBr1tn8qAITYY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/bash-kernel/default.nix

···
 {
   lib,
   buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
+  replaceVars,
+  bashInteractive,
   flit-core,
   filetype,
   ipykernel,
+  pexpect,
+  writableTmpDirAsHomeHook,
   python,
-  pexpect,
-  bashInteractive,
-  replaceVars,
 }:
 
 buildPythonPackage rec {
···
   version = "0.10.0";
   pyproject = true;
 
-  src = fetchPypi {
-    pname = "bash_kernel";
-    inherit version;
-    hash = "sha256-LtWgpBbEGNHXUecVBb1siJ4SFXREtQxCh6aF2ndcKMo=";
+  src = fetchFromGitHub {
+    owner = "takluyver";
+    repo = "bash_kernel";
+    tag = version;
+    hash = "sha256-ugFMcQx1B1nKoO9rhb6PMllRcoZi0O4B9um8dOu5DU4=";
   };
 
   patches = [
···
     pexpect
   ];
 
-  preBuild = ''
-    export HOME=$TMPDIR
-  '';
+  nativeBuildInputs = [
+    writableTmpDirAsHomeHook
+  ];
 
   postInstall = ''
     ${python.pythonOnBuildForHost.interpreter} -m bash_kernel.install --prefix $out
···
 
     runHook postCheck
   '';
+
+  __darwinAllowLocalNetworking = true;
 
   meta = {
     description = "Bash Kernel for Jupyter";

pkgs/development/python-modules/boto3-stubs/default.nix

···
 
 buildPythonPackage rec {
   pname = "boto3-stubs";
-  version = "1.37.37";
+  version = "1.37.38";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit version;
-    hash = "sha256-5Ge3qmTJb3Embj09djzYJuNOQGPVEcDexDQdMHHTQow=";
+    hash = "sha256-14wt6I6fGmC+8Fz61bjtwFHxdivghlyDvr5xZEj1ZRA=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/botocore-stubs/default.nix

···
 
 buildPythonPackage rec {
   pname = "botocore-stubs";
-  version = "1.37.37";
+  version = "1.37.38";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "botocore_stubs";
     inherit version;
-    hash = "sha256-0aWPUp6VSYknmqibg5FidCjJWOBj8CIEqgztpOMTYBU=";
+    hash = "sha256-ukdVtQZJZJ8xKbjympz8Rj1l1SlgXdOI8dpi+DbVYGc=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/bump-my-version/default.nix

···
   wcmatch,
 
   # test
+  mercurial,
   gitMinimal,
   freezegun,
   pre-commit,
···
 
 buildPythonPackage rec {
   pname = "bump-my-version";
-  version = "1.0.2";
+  version = "1.1.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "callowayproject";
     repo = "bump-my-version";
     tag = version;
-    hash = "sha256-V5eFh2ne7ivtTH46QAxG0YPE0JN/W7Dt2fbf085hBVM=";
+    hash = "sha256-O7Ihw2AKJyOmBLReNI6TP5K3HgOFDuK1/9lN3d3/SrQ=";
   };
 
   build-system = [
···
   };
 
   nativeCheckInputs = [
+    mercurial
     gitMinimal
     freezegun
     pre-commit

pkgs/development/python-modules/command-runner/default.nix

···
 
 buildPythonPackage rec {
   pname = "command-runner";
-  version = "1.7.2";
+  version = "1.7.3";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "netinvent";
     repo = "command_runner";
     tag = "v${version}";
-    hash = "sha256-2+Tvp0nFDcD6D99z/13RGRTrioFR0dhPDnicX9ZbIxY=";
+    hash = "sha256-BNjMMs44eDnGmcFXiMydJIU0RpsFOyd2TjH7BOGQP2E=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/commitizen/default.nix

···
 
 buildPythonPackage rec {
   pname = "commitizen";
-  version = "4.5.0";
+  version = "4.6.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "commitizen-tools";
     repo = "commitizen";
     tag = "v${version}";
-    hash = "sha256-J3jwCgiwM2SOJJ8tpXNxHodyhkMb631cb1Usr8Cnwx0=";
+    hash = "sha256-tn87aMJf6UeiTaMmG7Yr+1MenGBTSWrNRIM+QME+8uI=";
   };
 
   pythonRelaxDeps = [

pkgs/development/python-modules/crytic-compile/default.nix

···
 
 buildPythonPackage rec {
   pname = "crytic-compile";
-  version = "0.3.8";
+  version = "0.3.9";
   format = "setuptools";
 
   disabled = pythonOlder "3.8";
···
     owner = "crytic";
     repo = "crytic-compile";
     tag = version;
-    hash = "sha256-7hmak2tqyhBxIv6zEySuxxCAQoeJJRsKMjb1t196s7w=";
+    hash = "sha256-oXmjncNblC0r+qL39G5s9EXGKQZKIYBHwrJaSaLEkyc=";
   };
 
   propagatedBuildInputs = [

pkgs/development/python-modules/dep-logic/default.nix

···
 
 buildPythonPackage rec {
   pname = "dep-logic";
-  version = "0.4.11";
+  version = "0.5.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "pdm-project";
     repo = "dep-logic";
     tag = version;
-    hash = "sha256-AS+ZCs50MBXKbsQsu0vIefpCOf3zU4iohCngzaKNIfA=";
+    hash = "sha256-30n3ZojY3hFUIRViap88V7HjyRiC6rHvnSHxESfK+o4=";
   };
 
   nativeBuildInputs = [ pdm-backend ];
···
     description = "Python dependency specifications supporting logical operations";
     homepage = "https://github.com/pdm-project/dep-logic";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ tomasajt ];
+    maintainers = with lib.maintainers; [
+      tomasajt
+      misilelab
+    ];
   };
 }

pkgs/development/python-modules/docling-serve/default.nix

···
 
 buildPythonPackage rec {
   pname = "docling-serve";
-  version = "0.7.0";
+  version = "0.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "docling-project";
     repo = "docling-serve";
     tag = "v${version}";
-    hash = "sha256-QasHVoJITOuys4hASwC43eIy5854G12Yvu7Zncr9ia8=";
+    hash = "sha256-ACoqhaGiYHf2dqulxfHQDH/JIhuUlH7wyu0JY4hd0U8=";
   };
 
   build-system = [

pkgs/development/python-modules/empy/default.nix

···
     description = "Templating system for Python";
     mainProgram = "em.py";
     maintainers = with maintainers; [ nkalupahana ];
-    license = licenses.lgpl21Only;
+    license = licenses.bsd3;
   };
 }

pkgs/development/python-modules/fake-useragent/default.nix

···
 
 buildPythonPackage rec {
   pname = "fake-useragent";
-  version = "2.1.0";
+  version = "2.2.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "fake-useragent";
     repo = "fake-useragent";
     tag = version;
-    hash = "sha256-pEZfbFw9JWmR4Zf9AH0mw7zBJVbo6v9iUTU0awHSAt4=";
+    hash = "sha256-CaFIXcS5y6m9mAfy4fniuA4VPTl6JfFq1WHnlLFz6fA=";
   };
 
   postPatch = ''

pkgs/development/python-modules/fedora-messaging/default.nix

···
 
 buildPythonPackage rec {
   pname = "fedora-messaging";
-  version = "3.7.0";
+  version = "3.7.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fedora-infra";
     repo = "fedora-messaging";
     tag = "v${version}";
-    hash = "sha256-MBvFrOUrcPhsFR9yD7yqRM4Yf2StcNvL3sqFIn6XbMc=";
+    hash = "sha256-ZITCX6MFPpQvhr3OoFT/yxOubXihrljv5hwntUOSpf4=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/galois/default.nix

···
 
 buildPythonPackage rec {
   pname = "galois";
-  version = "0.4.4";
+  version = "0.4.5";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "mhostetter";
     repo = "galois";
     tag = "v${version}";
-    hash = "sha256-x24TyJYy+z3v41DpJyOTYin/YvkqMHd/Rg4bTivk9M0=";
+    hash = "sha256-FsJZaDHx1AagNMIRXBNS9BcDJBie2qwXwnQACW/Rzdk=";
   };
 
   pythonRelaxDeps = [
···
   meta = with lib; {
     description = "Python package that extends NumPy arrays to operate over finite fields";
     homepage = "https://github.com/mhostetter/galois";
-    changelog = "https://github.com/mhostetter/galois/releases/tag/v${version}";
+    changelog = "https://github.com/mhostetter/galois/releases/tag/${src.tag}";
     downloadPage = "https://github.com/mhostetter/galois/releases/tag/v${version}";
     license = licenses.mit;
     maintainers = with maintainers; [ chrispattison ];

pkgs/development/python-modules/gguf/default.nix

···
 }:
 buildPythonPackage rec {
   pname = "gguf";
-  version = "0.14.0";
+  version = "0.16.2";
   format = "pyproject";
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-2ZlvGXp3eDHPngHvrCTL+oF3hzdTBbjE7hYHR3jivOg=";
+    hash = "sha256-D8lWKJow0PHzr9dewNST9zriYpo/IfOEbdFofYeRx8E=";
   };
 
   dependencies = [

pkgs/development/python-modules/google-cloud-artifact-registry/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-artifact-registry";
-  version = "1.15.2";
+  version = "1.16.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_artifact_registry";
     inherit version;
-    hash = "sha256-0w4HVBOqHnLechpkiVlnOrCPjSuQaXP84jDGtU6Q2RE=";
+    hash = "sha256-PDikL/ECsIdQn7gXoF04SVxpp7aZ9allTJL+pnd947E=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-compute/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-compute";
-  version = "1.29.0";
+  version = "1.30.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_compute";
     inherit version;
-    hash = "sha256-EVYtOEsTaVh+DKvDQhgwE0270Z94Yg9mm6CpPL0Z0Ug=";
+    hash = "sha256-iy0/43OA3lhZp4YIHZvMEgOg86IFMAg5on+CjVmCiic=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-datacatalog/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-datacatalog";
-  version = "3.26.0";
+  version = "3.26.1";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_datacatalog";
     inherit version;
-    hash = "sha256-rE3KvGuBi4YIwxLiICX5b1AO93NAWL6IpapNW5a/FVY=";
+    hash = "sha256-qKCBos0KyFEZBHSNLmsU3CR3nmXiFht1zH4QdINlokg=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-datastore/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-datastore";
-  version = "2.20.2";
+  version = "2.21.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_datastore";
     inherit version;
-    hash = "sha256-lmXQCXKdlVEynZR29NW9qcEdNGkkPqiiwNlJC2WqiZ8=";
+    hash = "sha256-7uRU3UpV9bMn+fNEko/xoJpvd8I9Xj2QitMaE8wvQHM=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-netapp/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-netapp";
-  version = "0.3.20";
+  version = "0.3.21";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
   src = fetchPypi {
     pname = "google_cloud_netapp";
     inherit version;
-    hash = "sha256-ZPJMw+fOPcKrRpwoZYPSBCUpuejJsDSXLqvbhNvMWfA=";
+    hash = "sha256-H6nkC+D2HSMV/ascQoKa3gJmRH5iuXugDiYM1NFR7tU=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-secret-manager/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-secret-manager";
-  version = "2.23.2";
+  version = "2.23.3";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_secret_manager";
     inherit version;
-    hash = "sha256-h2M3mSqredhkfbFYk3G8tztJhmK1hhlZmfjJRVpZfyk=";
+    hash = "sha256-WYxMCp0Q1J1QDrSuoyVd/yUKovksAo9cl+OzZ/doyAg=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-speech/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-speech";
-  version = "2.31.1";
+  version = "2.32.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_speech";
     inherit version;
-    hash = "sha256-/fDTUMBke1ZpRUAr2K7vK3r9pnq7UgbrTbTtQfkjtA8=";
+    hash = "sha256-icJhixMdMQxsAOfATSkP+ppdaMIBkQMHZqdzeFDwTnc=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-texttospeech/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-texttospeech";
-  version = "2.25.1";
+  version = "2.26.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
   src = fetchPypi {
     pname = "google_cloud_texttospeech";
     inherit version;
-    hash = "sha256-N918PwI/WpfbcpiXGNllMOBfricOXR3kHRBLMWp3Cvw=";
+    hash = "sha256-Q68biKa5vs3mmju/iqgM36XxL4mZ5WvPnew3Q1Ttf2o=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-websecurityscanner/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-websecurityscanner";
-  version = "1.17.1";
+  version = "1.17.2";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_websecurityscanner";
     inherit version;
-    hash = "sha256-nDjk29d1V19fUNei6lJLtmJDwfLcBSnXm4jZQV2s+vI=";
+    hash = "sha256-EWTO9yWJUHe+mELBp1/CxB6OCaS0woZtooKFAGH4yGY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/graph-tool/default.nix

···
 in
 buildPythonPackage rec {
   pname = "graph-tool";
-  version = "2.96";
+  version = "2.97";
   format = "other";
 
   src = fetchurl {
     url = "https://downloads.skewed.de/graph-tool/graph-tool-${version}.tar.bz2";
-    hash = "sha256-kNW09I/5U2kwKFOCWRdsedoXtIdnZhg9Bjy1GOw1rVc=";
+    hash = "sha256-Yt2PuLuvvv4iNcv6UHzr5lTwFkReVtVO/znSADkxjKU=";
   };
 
   postPatch = ''

pkgs/development/python-modules/lib4sbom/default.nix

···
 
 buildPythonPackage rec {
   pname = "lib4sbom";
-  version = "0.8.3";
+  version = "0.8.4";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "anthonyharrison";
     repo = "lib4sbom";
     tag = "v${version}";
-    hash = "sha256-7ERjzfMIz1tRvShxO2hR+DzRYyfV3KxpHmgJTLErnRw=";
+    hash = "sha256-QTYtaEo5LdDPfv8KgQ3IUJgKphQl2xyQXrcSn19IeKo=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/mediapy/default.nix

···
 
 buildPythonPackage rec {
   pname = "mediapy";
-  version = "1.2.2";
+  version = "1.2.3";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-QtmhqpPBg1ULgk27Tw3l2mGqXITbjwHwY6zR8juQ7wo=";
+    hash = "sha256-vDt5wXZ6OsCSbzShm+Ms9jhD5h3bMvBeMXOxmL65s7I=";
   };
 
   nativeBuildInputs = [ flit-core ];

pkgs/development/python-modules/neoteroi-mkdocs/default.nix

···
 }:
 buildPythonPackage rec {
   pname = "neoteroi-mkdocs";
-  version = "1.1.0";
+  version = "1.1.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Neoteroi";
     repo = "mkdocs-plugins";
     tag = "v${version}";
-    hash = "sha256-qizF1Y3BUyr0ekoATJVa62q7gvpbMW3fIKViov2tFTI=";
+    hash = "sha256-EbhkhcH8sGxiwimg9dfmSSOJR7DYw7nfS3m1HUSH0vg=";
   };
 
   buildInputs = [ hatchling ];
···
   meta = with lib; {
     homepage = "https://github.com/Neoteroi/mkdocs-plugins";
     description = "Plugins for MkDocs";
-    changelog = "https://github.com/Neoteroi/mkdocs-plugins/releases/v${version}";
+    changelog = "https://github.com/Neoteroi/mkdocs-plugins/releases/${src.tag}";
     license = licenses.mit;
     maintainers = with maintainers; [
       aldoborrero

pkgs/development/python-modules/papermill/default.nix

···
 {
   lib,
   stdenv,
-  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  setuptools,
+
+  # dependencies
   ansicolors,
-  azure-datalake-store,
-  azure-identity,
-  azure-storage-blob,
-  boto3,
-  buildPythonPackage,
   click,
   entrypoints,
-  fetchFromGitHub,
-  gcsfs,
-  ipykernel,
-  moto,
   nbclient,
   nbformat,
-  pyarrow,
-  pygithub,
-  pytest-mock,
-  pytestCheckHook,
-  pythonAtLeast,
-  pythonOlder,
   pyyaml,
   requests,
-  setuptools,
   tenacity,
   tqdm,
+  pythonAtLeast,
+  aiohttp,
+
+  # optional-dependencies
+  azure-datalake-store,
+  azure-identity,
+  azure-storage-blob,
+  gcsfs,
+  pygithub,
+  pyarrow,
+  boto3,
+
+  # tests
+  ipykernel,
+  moto,
+  pytest-mock,
+  pytestCheckHook,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
 }:
 
 buildPythonPackage rec {
···
   version = "2.6.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "nteract";
     repo = "papermill";
···
   build-system = [ setuptools ];
 
   dependencies = [
+    ansicolors
     click
-    pyyaml
+    entrypoints
+    nbclient
     nbformat
-    nbclient
-    tqdm
+    pyyaml
     requests
-    entrypoints
     tenacity
-    ansicolors
+    tqdm
   ] ++ lib.optionals (pythonAtLeast "3.12") [ aiohttp ];
 
   optional-dependencies = {
···
       moto
       pytest-mock
       pytestCheckHook
+      versionCheckHook
+      writableTmpDirAsHomeHook
     ]
     ++ optional-dependencies.azure
     ++ optional-dependencies.s3
     ++ optional-dependencies.gcs;
+  versionCheckProgramArg = "--version";
 
-  preCheck = ''
-    export HOME=$(mktemp -d)
-  '';
+  pythonImportsCheck = [ "papermill" ];
 
-  pythonImportsCheck = [ "papermill" ];
+  # Using pytestFlagsArray to prevent disabling false positives
+  pytestFlagsArray = [
+    # AssertionError: 'error' != 'display_data'
+    "--deselect=papermill/tests/test_execute.py::TestBrokenNotebook2::test"
+
+    # AssertionError: '\x1b[31mSystemExit\x1b[39m\x1b[31m:\x1b[39m 1\n' != '\x1b[0;31mSystemExit\x1b[0m\x1b[0;31m:\x1b[0m 1\n'
+    "--deselect=papermill/tests/test_execute.py::TestOutputFormatting::test_output_formatting"
+  ];
 
   disabledTests =
     [
···
 
   __darwinAllowLocalNetworking = true;
 
-  meta = with lib; {
+  meta = {
     description = "Parametrize and run Jupyter and interact with notebooks";
     homepage = "https://github.com/nteract/papermill";
-    license = licenses.bsd3;
+    changelog = "https://papermill.readthedocs.io/en/latest/changelog.html";
+    license = lib.licenses.bsd3;
     maintainers = [ ];
     mainProgram = "papermill";
   };

pkgs/development/python-modules/pettingzoo/default.nix

···
 
 buildPythonPackage rec {
   pname = "pettingzoo";
-  version = "1.25.1";
+  version = "1.25.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Farama-Foundation";
     repo = "PettingZoo";
     tag = version;
-    hash = "sha256-e25+UNCGjBOAt2f440d6W4lvhxKXRmwLfDvNxeC2Jfk=";
+    hash = "sha256-hQe/TMlLG//Bn8aaSo0/FPOUvOEyKfztuTIS7SMsUQ4=";
   };
 
   build-system = [

pkgs/development/python-modules/plaid-python/default.nix

···
 
 buildPythonPackage rec {
   pname = "plaid-python";
-  version = "29.1.0";
+  version = "30.0.0";
   pyproject = true;
 
   disabled = pythonOlder "3.6";
···
   src = fetchPypi {
     pname = "plaid_python";
     inherit version;
-    hash = "sha256-wDYjgHg0FbQYNsa3aIAbSl3TtZe9lbe8tti5HZJq4Vc=";
+    hash = "sha256-qCaXtvLceFg5njbKbqPVHW81HniGswB4HIdWU51/4X4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pox/default.nix

···
 
 buildPythonPackage rec {
   pname = "pox";
-  version = "0.3.5";
+  version = "0.3.6";
   format = "setuptools";
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-gSDuTJTpUObgSD4FCk8OVgduWQugqa3RlSTCVL0jwtE=";
+    hash = "sha256-hO7tOWABWaYoBKrPwA41Pt6q5n2MZHzKqrc6bv7T9gU=";
   };
 
   # Test sare failing the sandbox

pkgs/development/python-modules/pybase64/default.nix

···
 
 buildPythonPackage rec {
   pname = "pybase64";
-  version = "1.4.0";
+  version = "1.4.1";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     repo = "pybase64";
     tag = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-Yl0P9Ygy6IirjSFrutl+fmn4BnUL1nXzbQgADNQFg3I=";
+    hash = "sha256-mEwFcnqUKCWYYrcjELshJYNqTxQ//4w4OzaWhrzB5Mg=";
   };
 
   build-system = [ setuptools ];
···
     description = "Fast Base64 encoding/decoding";
     mainProgram = "pybase64";
     homepage = "https://github.com/mayeut/pybase64";
-    changelog = "https://github.com/mayeut/pybase64/releases/tag/v${version}";
+    changelog = "https://github.com/mayeut/pybase64/releases/tag/${src.tag}";
     license = lib.licenses.bsd2;
     maintainers = [ ];
   };

pkgs/development/python-modules/pyixapi/default.nix

···
 
 buildPythonPackage rec {
   pname = "pyixapi";
-  version = "0.2.5";
+  version = "0.2.6";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "peering-manager";
     repo = "pyixapi";
     tag = version;
-    hash = "sha256-jzRdseBaNOr3Dozp15/s3ZGTcwqmCBHqdGZmP3dtdsE=";
+    hash = "sha256-NS8rVzLpEtpuLal6sApXI3hjASiIeXZuZ4xyj9Zv1k0=";
   };
 
   pythonRelaxDeps = [ "pyjwt" ];

pkgs/development/python-modules/pylacus/default.nix

···
 
 buildPythonPackage rec {
   pname = "pylacus";
-  version = "1.13.2";
+  version = "1.14.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "ail-project";
     repo = "PyLacus";
     tag = "v${version}";
-    hash = "sha256-EZhlAlZbxcZRpdeAqIwEXV9YPyleW2jnea+e5jRL1EE=";
+    hash = "sha256-fpu22X4xWRP7Kzp15gIziNCxMmS7P8wb+Zcbr5wlUBc=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/pystac/default.nix

···
 
 buildPythonPackage rec {
   pname = "pystac";
-  version = "1.12.2";
+  version = "1.13.0";
   pyproject = true;
   disabled = pythonOlder "3.9";
 
···
     owner = "stac-utils";
     repo = "pystac";
     tag = "v${version}";
-    hash = "sha256-Cz9VyHIAfeRvK+az1ETVrTXvBh/VpkgmtERElfgAdBo=";
+    hash = "sha256-DxRJsnbzXBnpQSJE0VwkXV3vyH6WffiMaZ3119XBxJ8=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pytibber/default.nix

···
 
 buildPythonPackage rec {
   pname = "pytibber";
-  version = "0.31.0";
+  version = "0.31.1";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
···
     owner = "Danielhiversen";
     repo = "pyTibber";
     tag = version;
-    hash = "sha256-NCzgh/hPbbKgJLvfOzXSkOCrV53w/F0F5TglQ2gOAJk=";
+    hash = "sha256-qQ/F7SF91wiWelV6kFBDjv5UmrrcD5TmwCsNuG5c25s=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/qcs-sdk-python/default.nix

···
 
 buildPythonPackage rec {
   pname = "qcs-sdk-python";
-  version = "0.21.12";
+  version = "0.21.18";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rigetti";
     repo = "qcs-sdk-rust";
     tag = "python/v${version}";
-    hash = "sha256-5tabdxMvYW0g2k48MTAm15+o/OI7yFyL19xirUBN7D4=";
+    hash = "sha256-uN9SQnQR5y4gyJeQI5H04hT1OL1ZQBwCdz8GkNMMTLY=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-YOBI0q7OsjFhoQUO2K4Q3CprcxHgJbTmg+klXj41p0o=";
+    hash = "sha256-PqQMG8RKF8Koz796AeoG/X9SeL1TruwOVPqwfKuq984=";
   };
 
   buildAndTestSubdir = "crates/python";
···
     "test_get_report"
     "test_get_version_info"
     "test_list_quantum_processors_timeout"
+    "test_quilc_tracing"
+    "test_qvm_tracing"
   ];
 
   meta = {

pkgs/development/python-modules/scspell/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pyxdg,
+  setuptools,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
+}:
+
+buildPythonPackage rec {
+  pname = "scspell";
+  version = "2.3";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "myint";
+    repo = "scspell";
+    tag = "v${version}";
+    hash = "sha256-XiUdz+uHOJlqo+TWd1V/PvzkGJ2kPXzJJSe5Smfdgec=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    pyxdg
+  ];
+
+  nativeCheckInputs = [
+    versionCheckHook
+    writableTmpDirAsHomeHook
+  ];
+
+  versionCheckProgramArg = "--version";
+
+  pythonImportsCheck = [ "scspell" ];
+
+  meta = {
+    description = "A spell checker for source code";
+    homepage = "https://github.com/myint/scspell";
+    license = lib.licenses.gpl2;
+    maintainers = with lib.maintainers; [ guelakais ];
+    mainProgram = "scspell";
+  };
+}

pkgs/development/python-modules/unstructured-client/default.nix

···
 
 buildPythonPackage rec {
   pname = "unstructured-client";
-  version = "0.32.3";
+  version = "0.33.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Unstructured-IO";
     repo = "unstructured-python-client";
     tag = "v${version}";
-    hash = "sha256-bHiYV86c3ViCLix6vR55GiM8qTv64jj9tD8nF/jMUm4=";
+    hash = "sha256-leQlBLR4BfirUpjhxSiXIgTm7Di6lh5ic0oELzON+Uw=";
   };
 
   preBuild = ''
···
   '';
 
   build-system = [ poetry-core ];
+
+  pythonRelaxDeps = [
+    "pydantic"
+  ];
 
   dependencies = [
     aiofiles

pkgs/development/python-modules/vector/default.nix

···
 
 buildPythonPackage rec {
   pname = "vector";
-  version = "1.6.1";
+  version = "1.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "scikit-hep";
     repo = "vector";
     tag = "v${version}";
-    hash = "sha256-EHvdz6Tv3qJr6yUAw3/TuoMSrOCAQpsFBF1sS5I2p2k=";
+    hash = "sha256-IMr3+YveR/FDQ2MbgbWr1KJFrdH9B+KOFVNGJjz6Zdk=";
   };
 
   build-system = [

pkgs/games/doom-ports/slade/default.nix

···
   zip,
   wxGTK,
   gtk3,
-  sfml,
+  sfml_2,
   fluidsynth,
   curl,
   freeimage,
···
 
 stdenv.mkDerivation rec {
   pname = "slade";
-  version = "3.2.6";
+  version = "3.2.7";
 
   src = fetchFromGitHub {
     owner = "sirjuddington";
     repo = "SLADE";
     rev = version;
-    hash = "sha256-pcWmv1fnH18X/S8ljfHxaL1PjApo5jyM8W+WYn+/7zI=";
+    hash = "sha256-+i506uzO2q/9k7en6CKs4ui9gjszrMOYwW+V9W5Lvns=";
   };
 
   nativeBuildInputs = [
···
   buildInputs = [
     wxGTK
     gtk3
-    sfml
+    sfml_2
     fluidsynth
     curl
     freeimage
···
     )
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Doom editor";
     homepage = "http://slade.mancubus.net/";
-    license = licenses.gpl2Only; # https://github.com/sirjuddington/SLADE/issues/1754
-    platforms = platforms.linux;
-    maintainers = with maintainers; [ abbradar ];
+    license = lib.licenses.gpl2Only; # https://github.com/sirjuddington/SLADE/issues/1754
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ abbradar ];
   };
 }

pkgs/misc/base16-builder/node-packages.nix

···
     inherit system;
   },
   system ? builtins.currentSystem,
-  nodejs ? pkgs."nodejs_18",
+  nodejs ? pkgs."nodejs_20",
 }:
 
 let

pkgs/os-specific/linux/prl-tools/default.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "prl-tools";
-  version = "20.2.2-55879";
+  version = "20.3.0-55895";
 
   # We download the full distribution to extract prl-tools-lin.iso from
   # => ${dmg}/Parallels\ Desktop.app/Contents/Resources/Tools/prl-tools-lin.iso
   src = fetchurl {
     url = "https://download.parallels.com/desktop/v${lib.versions.major finalAttrs.version}/${finalAttrs.version}/ParallelsDesktop-${finalAttrs.version}.dmg";
-    hash = "sha256-MgToUW9H4NWjY+yBxTqg9wZ2VDNbbDu0tIeHcGZxPkM=";
+    hash = "sha256-Bs1hgEr5y9TYMGPXGrIOmqMgeyc6wHVo1x7OijTYifY=";
   };
 
   hardeningDisable = [

pkgs/servers/deconz/default.nix

···
 
 stdenv.mkDerivation rec {
   pname = "deconz";
-  version = "2.28.1";
+  version = "2.29.5";
 
   src = fetchurl {
     url = "https://deconz.dresden-elektronik.de/ubuntu/beta/deconz-${version}-qt5.deb";
-    sha256 = "sha256-uHbo0XerUx81o7gXK570iJKiotkQ0aCXUVcyYelMu4k=";
+    sha256 = "sha256-vUMnxduQfZv6YHA2hRnhbKf9sBvVCCE2n4ZnutmaRpw=";
   };
 
   nativeBuildInputs = [

pkgs/servers/sql/mariadb/default.nix

···
     };
 in
 self: {
+  mariadb_105 = throw "'mariadb_105' has been removed because it reached its End of Life. Consider upgrading to 'mariadb_106'.";
   # see https://mariadb.org/about/#maintenance-policy for EOLs
-  mariadb_105 = self.callPackage generic {
-    # Supported until 2025-06-24
-    version = "10.5.28";
-    hash = "sha256-C1BwII2gEWZA8gvQhfETZSf5mMwjJocVvL81Lnt/PME=";
-  };
   mariadb_106 = self.callPackage generic {
     # Supported until 2026-07-06
     version = "10.6.21";

pkgs/servers/teleport/16/default.nix

···
 import ../generic.nix (
   args
   // {
-    version = "16.5.0";
-    hash = "sha256-d634UB/YGDdAeBEJcRsRE5gqd31oQX3P4HJ+PoMQUmk=";
-    vendorHash = "sha256-0/ZYG8mYv3B0YJ89NJVG7M29/hU2zBtSXmoD32VEqpk=";
-    pnpmHash = "sha256-dqCfwMzSnEPQXz1bsroqSihkvw2Kcvyz+A4fpa52LVk=";
-    cargoHash = "sha256-NASNBk4QVoqe2cz4l94aXo6pUtF8Qxwb61XRI/ErjTs=";
+    version = "16.5.3";
+    hash = "sha256-yaHy75oS+HuO++qHEDaGByz11vwAqfaDT9qb94iKs3Y=";
+    vendorHash = "sha256-pHAiJ080lyWtb7xbwSeD9g8JlyXZyqtZC2IpsUJ7YaY=";
+    pnpmHash = "sha256-JQca2eFxcKJDHIaheJBg93ivZU95UWMRgbcK7QE4R10=";
+    cargoHash = "sha256-04zykCcVTptEPGy35MIWG+tROKFzEepLBmn04mSbt7I=";
   }
 )

pkgs/servers/teleport/17/default.nix

···
 import ../generic.nix (
   args
   // {
-    version = "17.4.2";
-    hash = "sha256-hiitFUN7bJR68sh/HrWsQMUm1lM2J3yjSoIT7mv/ldo=";
-    vendorHash = "sha256-03qkUH7UfAF0FwbG5enKf9Ke1teN89vmzk8yRfGvmPg=";
-    pnpmHash = "sha256-Hh4R+mkJJp9CR4NHw+VFzLPxb7e9T1BQkey0in2t934=";
-    cargoHash = "sha256-0PT9y56V/WHo3M5TcpVWBuHcQMZ0w2L4rEuXuTvVNFU=";
+    version = "17.4.5";
+    hash = "sha256-VsgwX/ffHY4640FsXLtEht5acUX4bnaAlLDxMnLb0Mg=";
+    vendorHash = "sha256-3G7Vw/R08vG/tC16RBNPM0oOu6lLOgNpRLN/FAaKvuQ=";
+    pnpmHash = "sha256-gc1m76w3o0N1F6xYr2ZS6DOGvwbjK8k6bC8G8+xVFVQ=";
+    cargoHash = "sha256-qz8gkooQTuBlPWC4lHtvBQpKkd+nEZ0Hl7AVg9JkPqs=";
   }
 )

pkgs/servers/teleport/disable-wasm-opt-for-ironrdp.patch

···
+# Based on https://github.com/gravitational/teleport/commit/994890fb05360b166afd981312345a4cf01bc422.patch?full_index=1
+diff --git a/web/packages/shared/libs/ironrdp/Cargo.toml b/web/packages/shared/libs/ironrdp/Cargo.toml
+index 4252ba95372bdab9a1e2f74e164e303bedd5eee8..4c203290984223564f50ee775a137e86f3c2ddf0 100644
+--- a/web/packages/shared/libs/ironrdp/Cargo.toml
++++ b/web/packages/shared/libs/ironrdp/Cargo.toml
+@@ -7,6 +7,9 @@ publish.workspace = true
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+ 
++[package.metadata.wasm-pack.profile.release]
++wasm-opt = false
++
+ [lib]
+ crate-type = ["cdylib"]
+ 

pkgs/servers/teleport/generic.nix

···
     ];
 
     patches = [
-      (fetchpatch {
-        name = "disable-wasm-opt-for-ironrdp.patch";
-        url = "https://github.com/gravitational/teleport/commit/994890fb05360b166afd981312345a4cf01bc422.patch?full_index=1";
-        hash = "sha256-Y5SVIUQsfi5qI28x5ccoRkBjpdpeYn0mQk8sLO644xo=";
-      })
+      ./disable-wasm-opt-for-ironrdp.patch
     ];
 
     configurePhase = ''
···
     buildPhase = ''
       PATH=$PATH:$PWD/node_modules/.bin
 
-      pushd web/packages/teleport
+      pushd web/packages
+      pushd shared
       # https://github.com/gravitational/teleport/blob/6b91fe5bbb9e87db4c63d19f94ed4f7d0f9eba43/web/packages/teleport/README.md?plain=1#L18-L20
-      RUST_MIN_STACK=16777216 wasm-pack build ./src/ironrdp --target web --mode no-install
+      RUST_MIN_STACK=16777216 wasm-pack build ./libs/ironrdp --target web --mode no-install
+      popd
+      pushd teleport
       vite build
+      popd
       popd
     '';
 

pkgs/tools/admin/meshcentral/default.nix

···
   fetchzip,
   fetchYarnDeps,
   yarn2nix-moretea,
-  nodejs_18,
+  nodejs_20,
   dos2unix,
 }:
 
···
   preFixup = ''
     mkdir -p $out/bin
     chmod a+x $out/libexec/meshcentral/deps/meshcentral/meshcentral.js
-    sed -i '1i#!${nodejs_18}/bin/node' $out/libexec/meshcentral/deps/meshcentral/meshcentral.js
+    sed -i '1i#!${nodejs_20}/bin/node' $out/libexec/meshcentral/deps/meshcentral/meshcentral.js
     ln -s $out/libexec/meshcentral/deps/meshcentral/meshcentral.js $out/bin/meshcentral
   '';
 

pkgs/tools/security/gopass/hibp.nix

···
 
 buildGoModule rec {
   pname = "gopass-hibp";
-  version = "1.15.15";
+  version = "1.15.16";
 
   src = fetchFromGitHub {
     owner = "gopasspw";
     repo = "gopass-hibp";
     rev = "v${version}";
-    hash = "sha256-auY0Wg5ki4WIHtA172wJJj9VxQEHWMmQop5bIviinn8=";
+    hash = "sha256-wmZtLVZhIKAcaE7CC7mlGq/ybcANki1vzdgAoh+NXB8=";
   };
 
-  vendorHash = "sha256-QgLQN5WjiDK/9AReoCXSWH+Mh7xF2NbUSJiiO/E8jpo=";
+  vendorHash = "sha256-5+DdlNqPNbStG7c6eX4t+4ICi3ZfCNQblkyw3eFZZL4=";
 
   subPackages = [ "." ];
 

pkgs/tools/security/onlykey/onlykey.nix

···
     inherit system;
   },
   system ? builtins.currentSystem,
-  nodejs ? pkgs.nodejs_18,
+  nodejs ? pkgs.nodejs_20,
 }:
 
 let

pkgs/top-level/packages-config.nix

···
         rPackages
         roundcubePlugins
         sourceHanPackages
-        zabbix50
         zabbix60
         ;
 

pkgs/top-level/php-packages.nix

···
 
         vld = callPackage ../development/php-packages/vld { };
 
+        wikidiff2 = callPackage ../development/php-packages/wikidiff2 { };
+
         xdebug = callPackage ../development/php-packages/xdebug { };
 
         yaml = callPackage ../development/php-packages/yaml { };
···
               { name = "calendar"; }
               {
                 name = "ctype";
-                postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''
-                  # Broken test on aarch64-darwin
-                  rm ext/ctype/tests/lc_ctype_inheritance.phpt
-                '';
+                postPatch =
+                  lib.optionalString (stdenv.hostPlatform.isDarwin && lib.versionAtLeast php.version "8.2")
+                    # Broken test on aarch64-darwin
+                    ''
+                      rm ext/ctype/tests/lc_ctype_inheritance.phpt
+                    '';
               }
               {
                 name = "curl";

pkgs/top-level/python-packages.nix

···
 
   scs = callPackage ../development/python-modules/scs { };
 
+  scspell = callPackage ../development/python-modules/scspell { };
+
   sdds = callPackage ../development/python-modules/sdds { };
 
   sdjson = callPackage ../development/python-modules/sdjson { };