Merge master into staging-next

nixos/modules/services/mail/postfix.nix

···
       "services.postfix.lookupMX was removed. Use services.postfix.settings.main.relayhost and put the hostname in angled brackets, if you need to turn off MX and SRV lookups."
     )
     (lib.mkRemovedOptionModule [ "services" "postfix" "relayHost" ]
-      "services.postfix.relayHost was removed in favor of services.postfix.settings.main.relayhost, which now takes a list of host/port."
+      "services.postfix.relayHost was removed in favor of services.postfix.settings.main.relayhost, which now takes a list of host:port."
     )
     (lib.mkRemovedOptionModule [ "services" "postfix" "relayPort" ]
-      "services.postfix.relayHost was removed in favor of services.postfix.settings.main.relayhost, which now takes a list of host/port."
+      "services.postfix.relayPort was removed in favor of services.postfix.settings.main.relayhost, which now takes a list of host:port."
     )
     (lib.mkRemovedOptionModule [ "services" "postfix" "extraConfig" ]
       "services.postfix.extraConfig was replaced by the structured freeform service.postfix.settings.main option."

pkgs/by-name/aw/awscli2/package.nix

···
 in
 py.pkgs.buildPythonApplication rec {
   pname = "awscli2";
-  version = "2.27.61"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.28.1"; # N.B: if you change this, check if overrides are still up-to-date
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-cli";
     tag = version;
-    hash = "sha256-2lcPqNrGAHvPPVZIQaDbI54sQQ7OsOiMxUx6qg6WeNU=";
+    hash = "sha256-TpyjYnLTBPU83g6/h+BrX4hd4dUbZUvDyJ6m/3v38+A=";
   };
 
   postPatch = ''
···
     # Disable slow tests (only run unit tests)
     "tests/backends"
     "tests/functional"
+  ];
+
+  disabledTests = [
+    # Requires networking (socket binding not possible in sandbox)
+    "test_is_socket"
+    "test_is_special_file_warning"
   ];
 
   pythonImportsCheck = [

pkgs/by-name/az/azure-cli/extensions-manual.nix

···
 
   containerapp = mkAzExtension rec {
     pname = "containerapp";
-    version = "1.2.0b2";
+    version = "1.2.0b3";
     url = "https://azcliprod.blob.core.windows.net/cli-extensions/containerapp-${version}-py2.py3-none-any.whl";
-    hash = "sha256-86+DfGC1Fm55u6JPl0II/qXWqLZTv4ANRkjgQgNkInk=";
+    hash = "sha256-UK7fbWI7NoW8sBo3OEafXX3DolFNQXhFDMHUoE1h/qA=";
     description = "Microsoft Azure Command-Line Tools Containerapp Extension";
     propagatedBuildInputs = with python3Packages; [
       docker

pkgs/by-name/bi/bind/package.nix

···
   nativeBuildInputs = [
     perl
     pkg-config
+    protobufc
     removeReferencesTo
   ];
   buildInputs = [
···
   '';
 
   enableParallelBuilding = true;
+  strictDeps = true;
 
   doCheck = false;
   # TODO: investigate failures; see this and linked discussions:

pkgs/by-name/ch/chirp/package.nix

···
 
 python3Packages.buildPythonApplication {
   pname = "chirp";
-  version = "0.4.0-unstable-2025-07-25";
+  version = "0.4.0-unstable-2025-08-04";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kk7ds";
     repo = "chirp";
-    rev = "85e0655382b2c1564c387aa2fa5e21a444887ea1";
-    hash = "sha256-IrwKTJt8RXJKzZFQjrEYndQ5WmG52IiJnB+hrw89tfU=";
+    rev = "a8fb306f5627f2478d55541d21f7e9ed51363010";
+    hash = "sha256-SQWKHkIf9d23AKnJQv58XlTmuL07HRj6oS8LW4BM+7Y=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/cosmic-protocols/package.nix

···
 
 stdenv.mkDerivation {
   pname = "cosmic-protocols";
-  version = "0-unstable-2025-06-24";
+  version = "0-unstable-2025-08-04";
 
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-protocols";
-    rev = "4f053317cc9a0e776bc24610df91ff84dfd6cc7b";
-    hash = "sha256-p4xRATocwG/QZtjI6fj1CPc+3jqlqr1mwoqojFxfpFE=";
+    rev = "5035f8c810bf734401e21e0a9625c7b7e0c73325";
+    hash = "sha256-FYfSVg7v7S8G1gHZ5puAqb2yZES81HK+KMu0819cQ8w=";
   };
 
   makeFlags = [ "PREFIX=${placeholder "out"}" ];

pkgs/by-name/cr/crush/package.nix

···
     hash = "sha256-SjrkQFSjJrPNynARE92uKA53hkstIUBSvQbqcYSsnaM=";
   };
 
+  # rename TestMain to prevent it from running, as it panics in the sandbox.
+  postPatch = ''
+    substituteInPlace internal/llm/provider/openai_test.go \
+      --replace-fail \
+        "func TestMain" \
+        "func DisabledTestMain"
+  '';
+
   vendorHash = "sha256-aI3MSaQYUOLJxBxwCoVg13HpxK46q6ZITrw1osx5tiE=";
 
   ldflags = [
     "-s"
-    "-w"
     "-X=github.com/charmbracelet/crush/internal/version.Version=${finalAttrs.version}"
   ];
 
-  # rename TestMain to prevent it from running, as it panics in the sandbox.
-  postPatch = ''
-    sed -i 's/func TestMain/func DisabledTestMain/' internal/llm/provider/openai_test.go
-  '';
-
   checkFlags =
     let
       # these tests fail in the sandbox
···
     in
     [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
 
-  doInstallCheck = true;
+  __darwinAllowLocalNetworking = true;
+
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
+
   nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
 
   updateScript = nix-update-script { };
 
   meta = {
     description = "Glamourous AI coding agent for your favourite terminal";
     homepage = "https://github.com/charmbracelet/crush";
+    changelog = "https://github.com/charmbracelet/crush/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.fsl11Mit;
     maintainers = with lib.maintainers; [ x123 ];
     mainProgram = "crush";

pkgs/by-name/do/dotbot/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "dotbot";
-  version = "1.23.0";
+  version = "1.23.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "anishathalye";
     repo = "dotbot";
     tag = "v${version}";
-    hash = "sha256-Bv9nvS8DxmpMB5Bo4Sw2+rVbrnQIcnc/hQZiq0qeJxc=";
+    hash = "sha256-Yq6mpBUokt4Zi84xyA5bayW1WLXEUXFev2aDJ/q/Fgo=";
   };
 
   preCheck = ''

pkgs/by-name/ex/exegol/package.nix

···
 {
-  fetchPypi,
   lib,
+  fetchFromGitHub,
   python3Packages,
   xorg,
 }:
 python3Packages.buildPythonApplication rec {
   pname = "exegol";
-  version = "4.3.11";
+  version = "5.1.1";
   pyproject = true;
 
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-+LnZSFRW7EvG+cPwMStgO6qD4AjOGkLzCarXBrW3Aak=";
+  src = fetchFromGitHub {
+    owner = "ThePorgs";
+    repo = "Exegol";
+    tag = version;
+    hash = "sha256-q84uWxVooQ+tFA2NhQ5N30h8LPhT+fJfxVmcpMzOQVk=";
   };
 
   build-system = with python3Packages; [ pdm-backend ];
···
   pythonRelaxDeps = [
     "rich"
     "argcomplete"
+    "supabase"
   ];
 
   dependencies =
     with python3Packages;
     [
-      pyyaml
-      gitpython
+      argcomplete
+      cryptography
       docker
+      gitpython
+      ifaddr
+      pydantic
+      pyjwt
+      pyyaml
       requests
       rich
-      argcomplete
-      tzlocal
+      supabase
     ]
-    ++ [ xorg.xhost ];
+    ++ pyjwt.optional-dependencies.crypto
+    ++ [ xorg.xhost ]
+    ++ lib.optional (!stdenv.hostPlatform.isLinux) tzlocal;
 
   doCheck = true;
 
···
       stylish macOS users and corporate Windows pros to UNIX-like power users.
     '';
     homepage = "https://github.com/ThePorgs/Exegol";
-    changelog = "https://github.com/ThePorgs/Exegol/releases/tag/${version}";
-    license = lib.licenses.gpl3Only;
+    changelog = "https://github.com/ThePorgs/Exegol/releases/tag/${src.tag}";
+    license = with lib.licenses; [
+      gpl3Only
+      {
+        fullName = "Exegol Software License (ESL) - Version 1.0";
+        url = "https://docs.exegol.com/legal/software-license";
+        # Please use exegol4 if you prefer to avoid the unfree version of Exegol.
+        free = false;
+        redistributable = false;
+      }
+    ];
     mainProgram = "exegol";
     maintainers = with lib.maintainers; [
       _0b11stan

pkgs/by-name/ex/exegol4/package.nix

···
+{
+  fetchPypi,
+  lib,
+  python3Packages,
+  xorg,
+}:
+python3Packages.buildPythonApplication rec {
+  pname = "exegol";
+  version = "4.3.11";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-+LnZSFRW7EvG+cPwMStgO6qD4AjOGkLzCarXBrW3Aak=";
+  };
+
+  build-system = with python3Packages; [ pdm-backend ];
+
+  pythonRelaxDeps = [
+    "rich"
+    "argcomplete"
+  ];
+
+  dependencies =
+    with python3Packages;
+    [
+      pyyaml
+      gitpython
+      docker
+      requests
+      rich
+      argcomplete
+      tzlocal
+    ]
+    ++ [ xorg.xhost ];
+
+  doCheck = true;
+
+  pythonImportsCheck = [ "exegol" ];
+
+  meta = {
+    description = "Fully featured and community-driven hacking environment";
+    longDescription = ''
+      Exegol is a community-driven hacking environment, powerful and yet
+      simple enough to be used by anyone in day to day engagements. Exegol is
+      the best solution to deploy powerful hacking environments securely,
+      easily, professionally. Exegol fits pentesters, CTF players, bug bounty
+      hunters, researchers, beginners and advanced users, defenders, from
+      stylish macOS users and corporate Windows pros to UNIX-like power users.
+    '';
+    homepage = "https://github.com/ThePorgs/Exegol";
+    changelog = "https://github.com/ThePorgs/Exegol/releases/tag/${version}";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "exegol";
+    maintainers = with lib.maintainers; [
+      _0b11stan
+      charB66
+    ];
+  };
+}

pkgs/by-name/fi/filesender/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "filesender";
-  version = "2.56";
+  version = "2.57";
 
   src = fetchFromGitHub {
     owner = "filesender";
     repo = "filesender";
     tag = "filesender-${finalAttrs.version}";
-    hash = "sha256-nGmjhki3RKwpZXd90Nh2VAhwNFIZE0GSdKPjsRJEP0k=";
+    hash = "sha256-I/9Y64jWm7QdQ1yhjCHkLfkKrzV6y0Rp+wkZbDP86fw=";
   };
 
   patches = [

pkgs/by-name/fl/fleet/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "fleet";
-  version = "4.71.0";
+  version = "4.71.1";
 
   src = fetchFromGitHub {
     owner = "fleetdm";
     repo = "fleet";
     tag = "fleet-v${finalAttrs.version}";
-    hash = "sha256-nkSW3209rI3pNK6WTB0HSg5XVs6ZtKfEf8hP5OKMN/4=";
+    hash = "sha256-lEgSgwygLrpkR0Kb6U/+nPRvKD5rMDvl7lxSP9Mf92k=";
   };
   vendorHash = "sha256-UOY9W2ULh2eNIfUmyU38nZCVWNTWIDTf7GBBkptrlTQ=";
 

pkgs/by-name/fo/forgejo-runner/package.nix

···
 in
 buildGoModule rec {
   pname = "forgejo-runner";
-  version = "9.0.1";
+  version = "9.0.2";
 
   src = fetchFromGitea {
     domain = "code.forgejo.org";
     owner = "forgejo";
     repo = "runner";
     rev = "v${version}";
-    hash = "sha256-3VurTHOM7FMRJzmQ5tBmW4E0mw7hePCnff0vhxPsKfE=";
+    hash = "sha256-UjYi7+UAKvdz5FuElYGLfTYQD/E0vS1TJkUyPfUq7YA=";
   };
 
   vendorHash = "sha256-7R42Aa04wCba90xLTX2p6oNX58OpfDDKegqwDw3Ycbk=";
···
   meta = with lib; {
     description = "Runner for Forgejo based on act";
     homepage = "https://code.forgejo.org/forgejo/runner";
-    changelog = "https://code.forgejo.org/forgejo/runner/src/tag/${src.rev}/RELEASE-NOTES.md";
+    changelog = "https://code.forgejo.org/forgejo/runner/releases/tag/${src.rev}";
     license = licenses.mit;
     maintainers = with maintainers; [
       adamcstephens

pkgs/by-name/gr/gren/generated-backend-package.nix

···
 }:
 mkDerivation {
   pname = "gren";
-  version = "0.6.1";
+  version = "0.6.2";
   src = fetchgit {
     url = "https://github.com/gren-lang/compiler.git";
-    sha256 = "0h7mm3y62l3j190sd25db4bifp65xmyc4rc16jhyphp6yzyjcpcl";
-    rev = "b54f0343c8015c777e4fbb74e843181e6f3cb214";
+    sha256 = "1c0fcdc87nmm26hk6c1k4djdk7ld9488fldx8mhwayqfsx0v2d3x";
+    rev = "0343e77040f97864e5eb9790dd9ba0bb5fe1d6ee";
     fetchSubmodules = true;
   };
   isLibrary = false;

pkgs/by-name/gr/gren/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gren";
-  version = "0.6.1";
+  version = "0.6.2";
 
   src = fetchFromGitHub {
     owner = "gren-lang";
     repo = "compiler";
     tag = finalAttrs.version;
-    hash = "sha256-lF0m/ffmwuuhNIFlwnztxVwXF1mtiKZBCnJQYfyo9UA=";
+    hash = "sha256-fTSxQdcOe8VhRb1RhxBJjZ7ZZCMzMDOhEbXag1hjDrA=";
   };
 
   buildInputs = [
···
     runHook postInstall
   '';
 
+  doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgram = "${placeholder "out"}/bin/gren";
   versionCheckProgramArg = "--version";
···
   };
 
   meta = {
-    description = "Compiler for the Gren programming language";
+    description = "Programming language for simple and correct applications";
     homepage = "https://gren-lang.org";
     license = lib.licenses.bsd3;
     mainProgram = "gren";

pkgs/by-name/gr/gren/update.sh

···
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p cabal2nix curl jq nixfmt-rfc-style
+#!nix-shell -i bash -p cabal2nix curl jq nix-update nixfmt-rfc-style
 
 set -euo pipefail
 
···
 nixfmt "${backend_derivation_file}"
 
 echo 'Finished backend generation.'
+
+echo "Updating frontend to version ${latest_version}"
+
+nix-update gren --version "${latest_version}"

pkgs/by-name/he/heroic-unwrapped/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "heroic-unwrapped";
-  version = "2.18.0";
+  version = "2.18.1";
 
   src = fetchFromGitHub {
     owner = "Heroic-Games-Launcher";
     repo = "HeroicGamesLauncher";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DrE1gwer1pozTPWSzc5PpTWacDHhdNk/o6pA62E0uPA=";
+    hash = "sha256-x792VA4PZleqUUgarh59JxJVXrvT95/rINYk8t9i3X0=";
   };
 
   pnpmDeps = pnpm_10.fetchDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 1;
-    hash = "sha256-VaPWB5nUvmnGW6gkW2FwoqcHk/rMfObuhR7RwsyNghk=";
+    hash = "sha256-F8H0eYltIJ0S8AX+2S3cR+v8dvePw09VWToVOLM8qII=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/js/jsonschema-cli/package.nix

···
   nix-update-script,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "jsonschema-cli";
   version = "0.32.0";
 
   src = fetchCrate {
-    inherit pname version;
+    pname = "jsonschema-cli";
+    inherit (finalAttrs) version;
     hash = "sha256-ZcavZSHf2eT65f7HbtZmD2mYUtrXEL/l1opXCvdn1O0=";
   };
 
···
     versionCheckHook
   ];
   doInstallCheck = true;
-  versionCheckProgram = "${placeholder "out"}/bin/${meta.mainProgram}";
   versionCheckProgramArg = "--version";
 
   passthru.updateScript = nix-update-script { };
···
   meta = {
     description = "Fast command-line tool for JSON Schema validation";
     homepage = "https://github.com/Stranger6667/jsonschema";
-    changelog = "https://github.com/Stranger6667/jsonschema/releases/tag/rust-v${version}";
+    changelog = "https://github.com/Stranger6667/jsonschema/releases/tag/rust-v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       kachick
     ];
     mainProgram = "jsonschema-cli";
   };
-}
+})

pkgs/by-name/ma/matrix-gtk-theme/package.nix

···
   stdenvNoCC.mkDerivation
   {
     inherit pname;
-    version = "0-unstable-2025-05-06";
+    version = "0-unstable-2025-07-28";
 
     src = fetchFromGitHub {
       owner = "D3vil0p3r";
       repo = "Matrix-GTK-Theme";
-      rev = "ef8a4e2e5e2b42c5ac1d649e88e40cba420321ca";
-      hash = "sha256-H/MKwZ5IdRekoCKtw3hHOUke8fKU4hdBLT11Lzn7c7I=";
+      rev = "fe8152fff81630efca6dedefe4b7f766fb2700f9";
+      hash = "sha256-maGRPw9qeKTy5JzDvrQIYe2zi4plhDu4NgjevizTAEE=";
     };
 
     propagatedUserEnvPkgs = [ gtk-engine-murrine ];

pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix

···
 in
 python3.pkgs.buildPythonApplication rec {
   pname = "matrix-synapse";
-  version = "1.134.0";
+  version = "1.135.0";
   format = "pyproject";
 
   src = fetchFromGitHub {
     owner = "element-hq";
     repo = "synapse";
     rev = "v${version}";
-    hash = "sha256-q7+yVKFzyu8ccuroZsTSMRRKMwmr3TDojtXNx4bChTE";
+    hash = "sha256-ygLWjI6HzBMTPDhEmf1rT18UhoRekzpG8DkeZXo2dts=";
   };
 
   patches = [
···
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-BfLj+cqS6zpX2qLb+Rur4cy7CyPH2KzdXaTXpNK20DM=";
+    hash = "sha256-4J92s6cSgsEIYQpbU6OOLI/USIJX2Gc7UdEHgWQgmXc=";
   };
 
   postPatch = ''

pkgs/by-name/ni/nix-update/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "nix-update";
-  version = "1.11.0";
+  version = "1.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Mic92";
     repo = "nix-update";
     tag = version;
-    hash = "sha256-G5YehePEMhTgxCnLp8Dg+bDHvOe+QltlCkQHVwMtYx0=";
+    hash = "sha256-oibBkZ7JxVVJSnabHGB0XNwJiYJiAdfUhp7hxTv8ArY=";
   };
 
   build-system = [ python3Packages.setuptools ];

pkgs/by-name/op/openmolcas/package.nix

···
   nevpt2Src = stdenv.mkDerivation {
     pname = "nevpt2-src";
     version = "unstable";
-    phases = [
-      "unpackPhase"
-      "patchPhase"
-      "installPhase"
-    ];
     src = fetchFromGitHub {
       owner = "qcscine";
       repo = "nevpt2";

pkgs/by-name/ro/rofi-bluetooth/package.nix

···
 
 stdenv.mkDerivation {
   pname = "rofi-bluetooth";
-  version = "0-unstable-2023-02-03";
+  version = "0-unstable-2025-04-14";
 
   src = fetchFromGitHub {
     owner = "nickclyde";
     repo = "rofi-bluetooth";
     # https://github.com/nickclyde/rofi-bluetooth/issues/19
-    rev = "9d91c048ff129819f4c6e9e48a17bd54343bbffb";
-    sha256 = "sha256-1Xe3QFThIvJDCUznDP5ZBzwZEMuqmxpDIV+BcVvQDG8=";
+    rev = "0cca4d4aa1c82c9373ce5da781d73683a29484c6";
+    hash = "sha256-ggYoCWRuCi1WKcwb+0zVwq3WvSqJQBitI+/XTpOc6uw=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
···
     runHook postInstall
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Rofi-based interface to connect to bluetooth devices and display status info";
     homepage = "https://github.com/nickclyde/rofi-bluetooth";
-    license = licenses.gpl3Only;
-    maintainers = with maintainers; [ MoritzBoehme ];
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [
+      MoritzBoehme
+      iamanaws
+    ];
     mainProgram = "rofi-bluetooth";
-    platforms = platforms.linux;
+    platforms = lib.platforms.linux;
   };
 }

pkgs/by-name/ru/ruff/package.nix

···
     tests = lib.optionalAttrs stdenv.hostPlatform.isLinux {
       nixos-test-driver-busybox = nixosTests.nixos-test-driver.busybox;
     };
+    # Updating `ruff` needs to be done on staging due to NixOS tests. Disabling r-ryantm update bot:
+    # nixpkgs-update: no auto update
     updateScript = nix-update-script { };
   };
 

pkgs/by-name/sc/scipopt-gcg/package.nix

···
 {
   lib,
-  pkgs,
   stdenv,
   fetchFromGitHub,
   cmake,
···
 
 stdenv.mkDerivation rec {
   pname = "scipopt-gcg";
-  version = "371";
+  version = "372";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
-  scipVersion = "9.2.1";
+  scipVersion = "9.2.3";
 
   src = fetchFromGitHub {
     owner = "scipopt";
     repo = "gcg";
     tag = "v${version}";
-    hash = "sha256-+rD8tGE49Irg9xZTD3Ay87ISSeRI4kbBpCj5ppyENbo=";
+    hash = "sha256-Sx0ZSca7XBT4GqxWt3bzelaXlI7kZCJo+by22mtTFhA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/sc/scipopt-papilo/package.nix

···
   version = "2.4.3";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
-  scipVersion = "9.2.2";
+  scipVersion = "9.2.3";
 
   src = fetchFromGitHub {
     owner = "scipopt";

pkgs/by-name/sc/scipopt-ug/package.nix

···
   version = "1.0.0-beta6";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
-  scipVersion = "9.2.2";
+  scipVersion = "9.2.3";
 
   # Take the SCIPOptSuite source since no other source exists publicly.
   src = fetchzip {

pkgs/by-name/sc/scipopt-zimpl/package.nix

···
   version = "362";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
-  scipVersion = "9.2.2";
+  scipVersion = "9.2.3";
 
   src = fetchFromGitHub {
     owner = "scipopt";

pkgs/by-name/sk/skopeo/package.nix

···
 
 buildGoModule rec {
   pname = "skopeo";
-  version = "1.19.0";
+  version = "1.20.0";
 
   src = fetchFromGitHub {
     rev = "v${version}";
     owner = "containers";
     repo = "skopeo";
-    hash = "sha256-Xi3M8M8UukxwWXNTnbFLA8RIWa6CHs84PjrOvtJEl78=";
+    hash = "sha256-uw41kaIljz9Y378rX2BK0W/ZVUx8IjlIBqYHDuLgZpA=";
   };
 
   outputs = [

pkgs/by-name/sl/slacky/package.nix

···
 }:
 buildNpmPackage (finalAttrs: {
   pname = "slacky";
-  version = "0.0.5";
+  version = "0.0.6";
 
   src = fetchFromGitHub {
     owner = "andirsun";
     repo = "Slacky";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nDxmzZqi7xEe4hnY6iXJg+613lSKElWxvF3w8bRDW90=";
+    hash = "sha256-70mexW+8+0hvVr2PYGtQuBiTh6xo2WFDqLzeCZilgaE=";
   };
 
-  npmDepsHash = "sha256-9+4cxeQw2Elug+xIgzNvpaSMgDVlBFz/+TW1jJwDm40=";
+  npmDepsHash = "sha256-Vqpg+j2mIv5XKzX//ptt9gT+SWPXpVSKSCM+E5cmuCQ=";
 
-  npmPackFlags = [ "--ignore-scripts" ];
+  npmPackFlags = [
+    "--ignore-scripts"
+  ];
+
+  makeCacheWritable = true;
+
+  npmFlags = [
+    "--legacy-peer-deps"
+  ];
+
+  strictDeps = true;
 
   nativeBuildInputs = [
-    electron
     copyDesktopItems
   ];
 
···
   postInstall = ''
     mkdir -p $out/share/icons
     ln -s $out/lib/node_modules/slacky/build/icons/icon.png $out/share/icons/slacky.png
-    makeWrapper ${electron}/bin/electron $out/bin/slacky \
+    makeWrapper ${lib.getExe electron} $out/bin/slacky \
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}" \
       --add-flags $out/lib/node_modules/slacky/
   '';
 
···
     changelog = "https://github.com/andirsun/Slacky/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ awwpotato ];
-    platforms = [ "aarch64-linux" ];
+    platforms = lib.platforms.linux;
     mainProgram = "slacky";
   };
 })

pkgs/by-name/tr/trealla/package.nix

···
 ];
 stdenv.mkDerivation (finalAttrs: {
   pname = "trealla";
-  version = "2.79.2";
+  version = "2.80.8";
 
   src = fetchFromGitHub {
     owner = "trealla-prolog";
     repo = "trealla";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ZbGxluQQi308UN4cdc7kRZq3Vbh+Deh3oUeViefIHX4=";
+    hash = "sha256-ssOytMvL8Qtc8F2e7Rcd1HwllKCtncutFNFl5df2DoU=";
   };
 
   postPatch = ''

pkgs/by-name/uv/uv/package.nix

···
 
   passthru = {
     tests.uv-python = python3Packages.uv;
+
+    # Updating `uv` needs to be done on staging. Disabling r-ryantm update bot:
+    # nixpkgs-update: no auto update
     updateScript = nix-update-script { };
   };
 

pkgs/by-name/vi/victoriametrics/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "VictoriaMetrics";
-  version = "1.122.0";
+  version = "1.123.0";
 
   src = fetchFromGitHub {
     owner = "VictoriaMetrics";
     repo = "VictoriaMetrics";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CpxnCW4+hsc3SQZXMI0pkPnKPvh1GTvCmhg5NkSZbk4=";
+    hash = "sha256-GUVRMlF94BaZSVfz4Z+IBSpf6WuA5o1WQQmeZAqKZ1g=";
   };
 
   vendorHash = null;

pkgs/by-name/xg/xgboost/package.nix

···
   #   in \
   #   rWrapper.override{ packages = [ xgb ]; }"
   pname = lib.optionalString rLibrary "r-" + pnameBase;
-  version = "3.0.2";
+  version = "3.0.3";
 
   src = fetchFromGitHub {
     owner = "dmlc";
     repo = pnameBase;
     tag = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-8mj8uw7bbwhRaL0JZf9L9//a+Re2AwbL0e7Oiw/BqIA=";
+    hash = "sha256-UXYefQMb1xwwH5Jv8FT4rVbXP7xo+8Ya9wFhgMkm/rI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/xr/xremap/package.nix

···
 }:
 let
   pname = "xremap";
-  version = "0.10.13";
+  version = "0.10.14";
 
   src = fetchFromGitHub {
     owner = "xremap";
     repo = "xremap";
     tag = "v${version}";
-    hash = "sha256-yRYffVAqSriU3AebfL1JFIKP9gUSTq5OC8CyyBTx9KQ=";
+    hash = "sha256-7bkLn8cGDxUjy9rMcGmgrzm1YGouScQEmQMlg1k+HCY=";
   };
 
-  cargoHash = "sha256-m7K47XjOO5MoCFTXYNovXm8GI2r66+UKvLV5aoCZIH0=";
+  cargoHash = "sha256-CmlwXmQDqIr2BZrl3/uwTarRV/xGof+2mavAVUejiZE=";
 
   buildXremap =
     {

pkgs/by-name/ze/zellij/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zellij";
-  version = "0.42.2";
+  version = "0.43.0";
 
   src = fetchFromGitHub {
     owner = "zellij-org";
     repo = "zellij";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-O7BZlPSBWy+q349NYCUsw4Rb5X3xyl5Ar+a/uQPQhZY=";
+    hash = "sha256-VlK9ONyNQAlRqLQM62ZDCv/efJbj66DgM0P9DNhvRvk=";
   };
 
   # Remove the `vendored_curl` feature in order to link against the libcurl from nixpkgs instead of
···
       --replace-fail ', "vendored_curl"' ""
   '';
 
-  cargoHash = "sha256-Vo3bshaHjy2F2WFGgaIDEFFAh0e5VPp2G4fETgIH484=";
+  cargoHash = "sha256-P4VabkEFBvj2YkkhXqH/JZp3m3WMKcr0qUMhdorEm1Q=";
 
   env.OPENSSL_NO_VENDOR = 1;
 

pkgs/development/libraries/eccodes/default.nix

···
 
 stdenv.mkDerivation rec {
   pname = "eccodes";
-  version = "2.41.0";
+  version = "2.42.0";
 
   src = fetchurl {
     url = "https://confluence.ecmwf.int/download/attachments/45757960/eccodes-${version}-Source.tar.gz";
-    hash = "sha256-oUZ4QuEe1/YqL1zBmC4E7sYjmPSWLmugOs52RvMs8nA=";
+    hash = "sha256-YDcbNXywEd7lRtsuq6zlt+J/D4fT6kpa3eeJE3GzwSg=";
   };
 
   postPatch = ''

pkgs/development/ocaml-modules/logs-syslog/default.nix

···
+{
+  lib,
+  fetchurl,
+  buildDunePackage,
+  logs,
+  syslog-message,
+  ptime,
+  version ? "0.5.0",
+}:
+
+buildDunePackage {
+  pname = "logs-syslog";
+  inherit version;
+  src = fetchurl {
+    url = "https://github.com/hannesm/logs-syslog/releases/download/v${version}/logs-syslog-${version}.tbz";
+    hash = "sha256-rx7mksA8y1BCEisNTQwSsJaet42eR7tZ3gYzvCqrYNQ=";
+  };
+
+  propagatedBuildInputs = [
+    logs
+    syslog-message
+    ptime
+  ];
+
+  meta = {
+    description = "Logs reporter to syslog (UDP/TCP/TLS)";
+    homepage = "https://github.com/hannesm/logs-syslog";
+    license = lib.licenses.isc;
+    maintainers = [ lib.maintainers.vbgl ];
+  };
+}

pkgs/development/python-modules/accelerate/default.nix

···
 
 buildPythonPackage rec {
   pname = "accelerate";
-  version = "1.7.0";
+  version = "1.9.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "accelerate";
     tag = "v${version}";
-    hash = "sha256-nZoa2Uwd8cHl0H4LM8swHjce7HktpGdcD+6ykfoQ90M=";
+    hash = "sha256-h1XfBG7M8aAN9W09RgIowJ2vgWAjWbUnV1KBXa5aGJU=";
   };
 
   buildInputs = [ llvmPackages.openmp ];
···
   meta = {
     homepage = "https://huggingface.co/docs/accelerate";
     description = "Simple way to train and use PyTorch models with multi-GPU, TPU, mixed-precision";
-    changelog = "https://github.com/huggingface/accelerate/releases/tag/v${version}";
+    changelog = "https://github.com/huggingface/accelerate/releases/tag/${src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ bcdarwin ];
     mainProgram = "accelerate";

pkgs/development/python-modules/airportsdata/default.nix

···
 
 buildPythonPackage rec {
   pname = "airportsdata";
-  version = "20250523";
+  version = "20250706";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "mborsetti";
     repo = "airportsdata";
     tag = "v${version}";
-    hash = "sha256-hqKyWyzBQgD9jB8PuflOsyZxSyU8geBVfBS/dgUsTAE=";
+    hash = "sha256-DINR1r+Gn88XB4EddNg04CNSifYlETRW0ptCX5w2ndM=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/ansible/default.nix

···
 
 let
   pname = "ansible";
-  version = "11.7.0";
+  version = "11.8.0";
 in
 buildPythonPackage {
   inherit pname version;
···
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-+d83xx1Af2W8ucXAbJkY4pfZ6nS1za9ZJsTJqp5E218=";
+    hash = "sha256-KOoDLHfzRLuOpNfTn5pdTpNebItgg2yMiii5z2ya2xo=";
   };
 
   # we make ansible-core depend on ansible, not the other way around,

pkgs/development/python-modules/asana/default.nix

···
 
 buildPythonPackage rec {
   pname = "asana";
-  version = "5.1.0";
+  version = "5.2.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "asana";
     repo = "python-asana";
     tag = "v${version}";
-    hash = "sha256-TYZi/cjwAHuluHpunfStlfPg0SSyaKKWtkJhTun/hQ0=";
+    hash = "sha256-wTA7y7hUyAxNe5xad34thmzTKhQDk/oGHDflxpQdOrY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/bracex/default.nix

···
 
 buildPythonPackage rec {
   pname = "bracex";
-  version = "2.5.post1";
+  version = "2.6";
   format = "pyproject";
-  disabled = pythonOlder "3.8";
+  disabled = pythonOlder "3.9";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-EsUJUkFb+nc9LZzLjnllG4zbHzGkL2CRuAT2uitKZrY=";
+    hash = "sha256-mPE0fNd+Iu6NlnowrU4xCyM/d1Tb8x/z/Ot2FFukfcc=";
   };
 
   nativeBuildInputs = [ hatchling ];

pkgs/development/python-modules/compliance-trestle/default.nix

···
 
 buildPythonPackage rec {
   pname = "compliance-trestle";
-  version = "3.9.0";
+  version = "3.9.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "oscal-compass";
     repo = "compliance-trestle";
     tag = "v${version}";
-    hash = "sha256-WWqrUfDlzpZAXtOlq3Uq8AmUOerUmMCr9KPjdjk4JHg=";
+    hash = "sha256-AJ1luN2X6Q4dp4fna14x6HgUw1uX4X87BXkVBPVIn9k=";
     fetchSubmodules = true;
   };
 

pkgs/development/python-modules/diff-cover/default.nix

···
 
 buildPythonPackage rec {
   pname = "diff-cover";
-  version = "9.3.2";
+  version = "9.6.0";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
   src = fetchPypi {
     pname = "diff_cover";
     inherit version;
-    hash = "sha256-Kpkjn7iWhlDaR5aKg0YHtreXFD5dBAXiTEWnG+WQdVs=";
+    hash = "sha256-deW8BW3Kpoxsh8n7TgfJ5g2u8VtujQNNVtLaniyEqHI=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/google-cloud-compute/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-compute";
-  version = "1.31.0";
+  version = "1.33.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_compute";
     inherit version;
-    hash = "sha256-SCX85iUIiCQdCym1jy961kkcCcyhTZOrey0/UIfRNLc=";
+    hash = "sha256-D/xWv8qVg8L6XyticbZ1ak1vXNvv4mVkIHESlykuQu4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-dlp/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-dlp";
-  version = "3.30.0";
+  version = "3.31.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_dlp";
     inherit version;
-    hash = "sha256-qTCw9C4ULzapSjGptsr5uFL4ThUpROTxsx2ICZCx6H0=";
+    hash = "sha256-Vh3ik1Jel02F1m84o2PB0eVnySQGBGBqGBmPLSPFqhk=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-pubsub/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-pubsub";
-  version = "2.30.0";
+  version = "2.31.1";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_pubsub";
     inherit version;
-    hash = "sha256-Jpde1yjSIJR59PsmZ+OzvXDedgWrrfSzAcZRw57YMEI=";
+    hash = "sha256-9CFPaS2kNa/N+0HnfPqWIjjbluSkumRjeqpxBELZxTI=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/google-cloud-securitycenter/default.nix

···
 
 buildPythonPackage rec {
   pname = "google-cloud-securitycenter";
-  version = "1.38.1";
+  version = "1.39.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
   src = fetchPypi {
     pname = "google_cloud_securitycenter";
     inherit version;
-    hash = "sha256-XsR+gNtFCWhe0PEmaS8lIgGl0+ri7MR/omK+bch4Too=";
+    hash = "sha256-F3yEa7DTppVr2X9ufWVOQ/kkeytGKZmeOY661gUlzP8=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/gphoto2/default.nix

···
 
 buildPythonPackage rec {
   pname = "gphoto2";
-  version = "2.6.1";
+  version = "2.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jim-easterbrook";
     repo = "python-gphoto2";
     tag = "v${version}";
-    hash = "sha256-842otUAcPvwEfcXGNGhFReKbv6DykLNaEkMiN6j9/CM=";
+    hash = "sha256-Z480HR9AlwJQI1yi8+twzHV9PMcTKWqtvoNw6ohV+6M=";
   };
 
   build-system = [

pkgs/development/python-modules/hid/default.nix

···
 
 buildPythonPackage rec {
   pname = "hid";
-  version = "1.0.7";
+  version = "1.0.8";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-P4CeKSq1LEQ1rRRCyO8gW+TJyk7rgPtHx9mODHVSeyo=";
+    hash = "sha256-XKEpp7lDSs5ePkKcEJKhZ5L+/68Geka2ZunFhocs3P4=";
   };
 
   postPatch = ''

pkgs/development/python-modules/holoviews/default.nix

···
 
 buildPythonPackage rec {
   pname = "holoviews";
-  version = "1.20.2";
+  version = "1.21.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "holoviz";
     repo = "holoviews";
     tag = "v${version}";
-    hash = "sha256-QCRVOBMKckPji5rH7iCSnmxbNwtGypMqdfBXilXmngE=";
+    hash = "sha256-JEGTfi4CaJaL/5AFtB92RV0DJvaIYVloukWKQSUFBZA=";
   };
 
   postPatch = ''
···
 
   meta = {
     description = "Python data analysis and visualization seamless and simple";
-    changelog = "https://github.com/holoviz/holoviews/releases/tag/v${version}";
+    changelog = "https://github.com/holoviz/holoviews/releases/tag/${src.tag}";
     mainProgram = "holoviews";
     homepage = "https://www.holoviews.org/";
     license = lib.licenses.bsd3;

pkgs/development/python-modules/hvplot/default.nix

···
 
 buildPythonPackage rec {
   pname = "hvplot";
-  version = "0.11.2";
+  version = "0.11.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "holoviz";
     repo = "hvplot";
     tag = "v${version}";
-    hash = "sha256-3zACW2RDRhdGi5RBPOVQJJHT78DwcgHaCHp27gIEnjA=";
+    hash = "sha256-V1KJtv1FCGITHdgxRWq1LWEgmWOU0N0iW60Wk0O5gC8=";
   };
 
   build-system = [
···
   meta = {
     description = "High-level plotting API for the PyData ecosystem built on HoloViews";
     homepage = "https://hvplot.pyviz.org";
-    changelog = "https://github.com/holoviz/hvplot/releases/tag/v${version}";
+    changelog = "https://github.com/holoviz/hvplot/releases/tag/${src.tag}";
     license = lib.licenses.bsd3;
     maintainers = [ ];
   };

pkgs/development/python-modules/kuzu/default.nix

···
 
 buildPythonPackage rec {
   pname = "kuzu";
-  version = "0.11.0";
+  version = "0.11.1";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-NLn+LZ+UQhWF+SHLBRO9WEhCpXBa51fAn9B14jrLQtc=";
+    hash = "sha256-H3lqQYEGVqswk955lKBUpmVn69scg40UUlss54w/PfE=";
   };
 
   pyproject = true;

pkgs/development/python-modules/latexcodec/default.nix

···
 
 buildPythonPackage rec {
   pname = "latexcodec";
-  version = "3.0.0";
+  version = "3.0.1";
   format = "setuptools";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-kX3F/iQnYswZ2WPmVItC1joRgCjN0zYdYjl+O2OLa8U=";
+    hash = "sha256-54ppEc1y+d7DUDHG7CNYTeaEK/vEYQqWeIaNFM37A1c=";
   };
 
   propagatedBuildInputs = [ six ];

pkgs/development/python-modules/metaflow/default.nix

···
 
 buildPythonPackage rec {
   pname = "metaflow";
-  version = "2.15.20";
+  version = "2.16.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Netflix";
     repo = "metaflow";
     tag = version;
-    hash = "sha256-D4Pf2/xhEJ22kDmmxYS0PiT5k2BJ3CBfTJZ4GrvkI58=";
+    hash = "sha256-zKEk4c4hvXejF6/WxijUIlnR5dOZZjXrD3N1MIG7LMI=";
   };
 
   build-system = [

pkgs/development/python-modules/opensearch-py/default.nix

···
 
 buildPythonPackage rec {
   pname = "opensearch-py";
-  version = "2.8.0";
+  version = "3.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "opensearch-project";
     repo = "opensearch-py";
     tag = "v${version}";
-    hash = "sha256-rPHpGKEIINAEUu2UkJwAM60i0hTzXd1ec6WD50RrgL8=";
+    hash = "sha256-IAEh+rB26Zqv7j5g2YIRZRCAtFbBngoh+w8Z4e2bY+M=";
   };
 
   nativeBuildInputs = [ setuptools ];
···
   meta = {
     description = "Python low-level client for OpenSearch";
     homepage = "https://github.com/opensearch-project/opensearch-py";
-    changelog = "https://github.com/opensearch-project/opensearch-py/releases/tag/v${version}";
+    changelog = "https://github.com/opensearch-project/opensearch-py/releases/tag/${src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ mcwitt ];
   };

pkgs/development/python-modules/optype/default.nix

···
 
 buildPythonPackage rec {
   pname = "optype";
-  version = "0.11.0";
+  version = "0.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jorenham";
     repo = "optype";
     tag = "v${version}";
-    hash = "sha256-jExwQiEkCLiVFwiFYp2dBvH5PiRlSVG20CneGnht+No=";
+    hash = "sha256-sDMB9gSYf108Elsqj6Obk+6B4QKiJcStkJndVrIAWQI=";
   };
 
   disabled = pythonOlder "3.11";

pkgs/development/python-modules/pbs-installer/default.nix

···
 
 buildPythonPackage rec {
   pname = "pbs-installer";
-  version = "2025.06.12";
+  version = "2025.07.23";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "frostming";
     repo = "pbs-installer";
     tag = version;
-    hash = "sha256-OIG+CLtJsYmE2nTHjVpGPIAuEnFzNMVsDYcxPcirgjs=";
+    hash = "sha256-cQPQ5IDjTBTHwUU60w+gCcwTyiaC30DPIb96e0hOHIY=";
   };
 
   build-system = [ pdm-backend ];

pkgs/development/python-modules/pymdown-extensions/default.nix

···
 in
 buildPythonPackage rec {
   pname = "pymdown-extensions";
-  version = "10.15";
+  version = "10.16.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "facelessuser";
     repo = "pymdown-extensions";
     tag = version;
-    hash = "sha256-ADl1l1cgJC3T8EN+cGNq14VfShGLG51ElXFRx+tdnCg=";
+    hash = "sha256-My1sTzWXInXb4TJ3uB7IXRyUrlbJMxrWyzzge8O0ZmQ=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/pymodes/default.nix

···
 
 buildPythonPackage rec {
   pname = "pymodes";
-  version = "2.20";
+  version = "2.21.1";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "junzis";
     repo = "pyModeS";
     tag = "v${version}";
-    hash = "sha256-BC1GLQW0/UBVwx3346mZsXSREGeVS+GhqH2Rl2faUoY=";
+    hash = "sha256-Tla5hJ7J/3R4r4fTQMUIpY+QGvLRuNMZfWU0RsAiuk0=";
   };
 
   build-system = [

pkgs/development/python-modules/pyroaring/default.nix

···
 
 buildPythonPackage rec {
   pname = "pyroaring";
-  version = "1.0.1";
+  version = "1.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Ezibenroc";
     repo = "PyRoaringBitMap";
     tag = version;
-    hash = "sha256-Zs/MO1R4iBHDfTRVizMl6KyEWI6k2iDX7jAkBZs7kZE=";
+    hash = "sha256-g+xpQ2DuVn8b0DiIOY69QOH6iwOYHG4bltX1zbDemdI=";
   };
 
   build-system = [

pkgs/development/python-modules/pytools/default.nix

···
 
 buildPythonPackage rec {
   pname = "pytools";
-  version = "2025.1.6";
+  version = "2025.2.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-k44d+Zl7pax3EDSkmw5jgBvZOiuS5qOPQyQVGaH7Mis=";
+    hash = "sha256-iOxR2SM7CisJNe1/FTRX7nDf0xpaCuQA8/xs3K8tQ90=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/pyyaml-include/default.nix

···
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pytestCheckHook,
-  pyyaml,
+
+  # build-system
   setuptools,
   setuptools-scm,
-  wheel,
+
+  # dependencies
+  fsspec,
+  pyyaml,
+
+  # tests
+  aiohttp,
+  pytestCheckHook,
 }:
 
 buildPythonPackage rec {
   pname = "pyyaml-include";
-  version = "1.3.1";
-  format = "pyproject";
+  version = "2.2";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "tanbro";
     repo = "pyyaml-include";
     tag = "v${version}";
-    hash = "sha256-xsNMIEBYqMVQp+H8R7XpFCwROXA8I6bFvAuHrRvC+DI=";
+    hash = "sha256-nswSYRTZ6LTLSGh78DnrXl3q06Ap1J1IMKOESv1lJoY=";
   };
 
-  nativeBuildInputs = [
+  build-system = [
     setuptools
     setuptools-scm
-    wheel
   ];
 
-  propagatedBuildInputs = [ pyyaml ];
+  dependencies = [
+    fsspec
+    pyyaml
+  ];
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    aiohttp
+    pytestCheckHook
+  ];
 
-  pythonImportsCheck = [ "yamlinclude" ];
+  pythonImportsCheck = [ "yaml_include" ];
 
-  meta = with lib; {
+  __darwinAllowLocalNetworking = true;
+
+  meta = {
     description = "Extending PyYAML with a custom constructor for including YAML files within YAML files";
     homepage = "https://github.com/tanbro/pyyaml-include";
-    license = licenses.gpl3Plus;
+    changelog = "https://github.com/tanbro/pyyaml-include/blob/v${version}/CHANGELOG.md";
+    license = lib.licenses.gpl3Plus;
     maintainers = [ ];
   };
 }

pkgs/development/python-modules/sphinx-codeautolink/default.nix

···
 
 buildPythonPackage rec {
   pname = "sphinx-codeautolink";
-  version = "0.17.4";
+  version = "0.17.5";
   pyproject = true;
 
   outputs = [
···
     owner = "felix-hilden";
     repo = "sphinx-codeautolink";
     tag = "v${version}";
-    hash = "sha256-1a76t4k2hVXwrG6X4w5yFYCMyR12Nlqodd2D0GoH/vM=";
+    hash = "sha256-43XDCajH+uSHnofjK/gH4EAiv2ljjuBr8UbJtm/DsDI=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/ssort/default.nix

···
 
 buildPythonPackage rec {
   pname = "ssort";
-  version = "0.14.0";
+  version = "0.15.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bwhmather";
     repo = "ssort";
     tag = version;
-    hash = "sha256-TINktjuTdyRYkqIs3Jyv6vobSBqV1iPoHrG36sBHah8=";
+    hash = "sha256-7WeLhetqbqiQQlDmoWSMzydhiKcdI2CbemKjWJd5Uoc=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/streamlit/default.nix

···
 
 buildPythonPackage rec {
   pname = "streamlit";
-  version = "1.46.0";
+  version = "1.47.1";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-Cyc0tI8R8eXIBGARtrGiJ0mC3GV+7yrejbcPDh3FPdo=";
+    hash = "sha256-2u15dj0cr+sDzdgAuRqpx63DaIxrLL9OzCyomaq4Kio=";
   };
 
   build-system = [

pkgs/development/python-modules/tinyio/default.nix

···
+{
+  lib,
+  stdenv,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # tests
+  pytestCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "tinyio";
+  version = "0.2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "patrick-kidger";
+    repo = "tinyio";
+    tag = "v${version}";
+    hash = "sha256-5Fk+/tT6mkyIosRKTFG5XuFtAM5wy3v0npiJjN47WV8=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  pythonImportsCheck = [ "tinyio" ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  disabledTests = lib.optionals stdenv.hostPlatform.isDarwin [
+    # AssertionError
+    # assert 0 >= 4, where 0 = sum([False, False, False, False, False])
+    "test_sleep"
+  ];
+
+  meta = {
+    description = "Dead-simple event loop for Python";
+    homepage = "https://github.com/patrick-kidger/tinyio";
+    changelog = "https://github.com/patrick-kidger/tinyio/releases/tag/v${version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+}

pkgs/development/python-modules/xattr/default.nix

···
 
 buildPythonPackage rec {
   pname = "xattr";
-  version = "1.1.4";
+  version = "1.2.0";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-t7AuyyJw2lt+feruqPi1KMFzaEAcK51fY+kfVFtF03I=";
+    hash = "sha256-pkyOIe/xvhQ6zPgP07j94+KKR4w32imHQq9kesPl4Kc=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/xlrd/default.nix

···
 
 buildPythonPackage rec {
   pname = "xlrd";
-  version = "2.0.1";
+  version = "2.0.2";
   format = "setuptools";
 
   src = fetchPypi {
     inherit pname version;
-    sha256 = "f72f148f54442c6b056bf931dbc34f986fd0c3b0b6b5a58d013c9aef274d0c88";
+    sha256 = "sha256-CLXiXeWPIc5x3H2zs7gQbB+ndvMCTFTkW0WzdOiSNMk=";
   };
 
   nativeCheckInputs = [ pytestCheckHook ];

pkgs/development/tools/build-managers/sbt/default.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sbt";
-  version = "1.11.3";
+  version = "1.11.4";
 
   src = fetchurl {
     url = "https://github.com/sbt/sbt/releases/download/v${finalAttrs.version}/sbt-${finalAttrs.version}.tgz";
-    hash = "sha256-PqUJFayLmJuLH8niTllKYNPBgdQwE/6WSxX+s4RIOzw=";
+    hash = "sha256-1LVmQmTh11KRX3jMOaSeaB329h0av2HOppZssiEEarY=";
   };
 
   postPatch = ''

pkgs/development/tools/ilspycmd/default.nix

···
 }:
 buildDotnetModule (finalAttrs: {
   pname = "ilspycmd";
-  version = "9.0-preview3";
+  version = "9.1";
 
   src = fetchFromGitHub {
     owner = "icsharpcode";
     repo = "ILSpy";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-7cPXFaEKr76GtqcNsKx7tstRUeTpSTF8ggxbyEnQa9M=";
+    hash = "sha256-YkZEStCI6Omu8HgClm5qHnXxm5pKJVILtbydY8vAFic=";
   };
 
   nativeBuildInputs = [
···
       fromSource
       binaryBytecode
     ];
-    maintainers = with lib.maintainers; [ emilytrau ];
+    maintainers = with lib.maintainers; [
+      emilytrau
+      tbaldwin
+    ];
   };
 })

pkgs/development/tools/ilspycmd/deps.json

···
     "hash": "sha256-FeM40ktcObQJk4nMYShB61H/E8B7tIKfl9ObJ0IOcCM="
   },
   {
+    "pname": "Microsoft.Sbom.Targets",
+    "version": "3.1.0",
+    "hash": "sha256-7q/fcTp7yU/yj7pCmzIyqBO3hOZ2Uko/jfZugIPjyrs="
+  },
+  {
     "pname": "Microsoft.SourceLink.Common",
     "version": "8.0.0",
     "hash": "sha256-AfUqleVEqWuHE7z2hNiwOLnquBJ3tuYtbkdGMppHOXc="
···
   },
   {
     "pname": "NuGet.Common",
-    "version": "6.11.1",
-    "hash": "sha256-UyZtDyTuymC+sKSX+ripOI6MmJZn11loVapVs4uzaGo="
+    "version": "6.13.2",
+    "hash": "sha256-ASLa/Jigg5Eop0ZrXPl98RW2rxnJRC7pbbxhuV74hFw="
   },
   {
     "pname": "NuGet.Configuration",
-    "version": "6.11.1",
-    "hash": "sha256-JH2UCpjYg8pkqxQ4j4BrWiTKhGzgfn55NMr32wf6+FQ="
+    "version": "6.13.2",
+    "hash": "sha256-z8VW1YdRDanyyRTDYRvRkSv/XPR3c/hMM1y8cNNjx0Y="
   },
   {
     "pname": "NuGet.Frameworks",
-    "version": "6.11.1",
-    "hash": "sha256-p25Oa7wJjwF+2puIhBkZZkKSuk4jGq7xikYSCdfp9Vc="
+    "version": "6.13.2",
+    "hash": "sha256-caDyc+WgYOo43AUTjtbP0MyvYDb6JweEKDdIul61Cac="
   },
   {
     "pname": "NuGet.Packaging",
-    "version": "6.11.1",
-    "hash": "sha256-1yY3p5hQwbUgYCyHnBcuGWiiIib1ppPYt2ntxwXSJW0="
+    "version": "6.13.2",
+    "hash": "sha256-lhO+SFwIYZ4aPHxIGm5ubkkE2a5Ve2xgtroRbNh7hpw="
   },
   {
     "pname": "NuGet.Protocol",
-    "version": "6.11.1",
-    "hash": "sha256-/zFvBV83Q5oMNu68BjmrHtZMAxf/YkDJV8HSsl5GjsY="
+    "version": "6.13.2",
+    "hash": "sha256-5lnAHHZjy7A4vgv65AeBAs64mSNpuoUjxW3HnrMpuzY="
   },
   {
     "pname": "NuGet.Versioning",
-    "version": "6.11.1",
-    "hash": "sha256-fl8lyChMjV7Sp8keAP7CdXZh7ARN/mU39T3gG74jDWY="
+    "version": "6.13.2",
+    "hash": "sha256-gmpyBpKnt+GHqgx/2uFKp+J2csbxEAy1E7WdVT117sw="
   },
   {
     "pname": "System.Buffers",
···
     "hash": "sha256-DKEbpFqXCIEfqp9p3ezqadn5b/S1YTk32/EQK+tEScs="
   },
   {
+    "pname": "System.Collections.Immutable",
+    "version": "8.0.0",
+    "hash": "sha256-F7OVjKNwpqbUh8lTidbqJWYi476nsq9n+6k0+QVRo3w="
+  },
+  {
+    "pname": "System.Collections.Immutable",
+    "version": "9.0.4",
+    "hash": "sha256-0A6gCPjhx0IIAlhskPsWS8cjWpoBJGEYTnW1fkdpFTg="
+  },
+  {
     "pname": "System.ComponentModel.Annotations",
     "version": "5.0.0",
     "hash": "sha256-0pST1UHgpeE6xJrYf5R+U7AwIlH3rVC3SpguilI/MAg="
   },
   {
     "pname": "System.Composition.AttributedModel",
-    "version": "8.0.0",
-    "hash": "sha256-n3aXiBAFIlQicSRLiNtLh++URSUxRBLggsjJ8OMNRpo="
+    "version": "9.0.4",
+    "hash": "sha256-r71EJF5F5ZjAgkuvcI00tAnnIrK+IQ5Wj7wU8MwwRRQ="
   },
   {
     "pname": "System.Diagnostics.EventLog",
···
   },
   {
     "pname": "System.Formats.Asn1",
-    "version": "6.0.0",
-    "hash": "sha256-KaMHgIRBF7Nf3VwOo+gJS1DcD+41cJDPWFh+TDQ8ee8="
+    "version": "8.0.1",
+    "hash": "sha256-may/Wg+esmm1N14kQTG4ESMBi+GQKPp0ZrrBo/o6OXM="
   },
   {
     "pname": "System.Memory",
···
   },
   {
     "pname": "System.Reflection.Metadata",
-    "version": "8.0.1",
-    "hash": "sha256-Swip1XuTs/r2m4RKuG5BXXxcaNGRh+jbMnjFRNdL87U="
+    "version": "9.0.4",
+    "hash": "sha256-JG4esIQbb7J9u/H0HmwFpHjhUYTGIiRVD5KPt3w5okA="
   },
   {
     "pname": "System.Runtime.CompilerServices.Unsafe",
···
     "hash": "sha256-bEG1PnDp7uKYz/OgLOWs3RWwQSVYm+AnPwVmAmcgp2I="
   },
   {
+    "pname": "System.Runtime.CompilerServices.Unsafe",
+    "version": "6.1.2",
+    "hash": "sha256-X2p/U680Zfkr622oc+vg5JYgbDEzE7mLre5DVaayWTc="
+  },
+  {
     "pname": "System.Security.Cryptography.Pkcs",
     "version": "6.0.4",
     "hash": "sha256-2e0aRybote+OR66bHaNiYpF//4fCiaO3zbR2e9GABUI="
···
   },
   {
     "pname": "TomsToolbox.Composition.Analyzer",
-    "version": "2.20.0",
-    "hash": "sha256-xjWXdkXF8X9nDdzLNA2H1WcpPZV4NDiKf//TeQbLUtc="
+    "version": "2.22.0",
+    "hash": "sha256-AXU4yapjJ612DiqezH0lkJA4ktiP3w11gYKVFGAl+A8="
   },
   {
     "pname": "TunnelVisionLabs.ReferenceAssemblyAnnotator",

pkgs/os-specific/linux/kernel/generic.nix

···
 
       structuredConfigFromPatches = map (
         {
-          extraStructuredConfig ? { },
+          structuredExtraConfig ? { },
           ...
         }:
         {
-          settings = extraStructuredConfig;
+          settings = structuredExtraConfig;
         }
       ) kernelPatches;
 

pkgs/shells/fish/plugins/macos.nix

···
 
 buildFishPlugin rec {
   pname = "macos";
-  version = "7.0.1";
+  version = "7.1.0";
 
   src = fetchFromGitHub {
     owner = "halostatue";
     repo = "fish-macos";
     tag = "v${version}";
-    hash = "sha256-E5HfcGEP5YnUXY50eSPPtLxXL9N7nDInlAw91dNehhc=";
+    hash = "sha256-gAbmpEmUvM3pFEZ6oSFM//dmu4sXu6ncMiOH75iq5A4=";
   };
 
   passthru.updateScript = nix-update-script { };

pkgs/shells/fish/plugins/tide.nix

···
 # Refer to the following comment to get you setup: https://github.com/NixOS/nixpkgs/pull/201646#issuecomment-1320893716
 buildFishPlugin rec {
   pname = "tide";
-  version = "6.1.1";
+  version = "6.2.0";
 
   src = fetchFromGitHub {
     owner = "IlanCosman";
     repo = "tide";
     rev = "v${version}";
-    hash = "sha256-ZyEk/WoxdX5Fr2kXRERQS1U1QHH3oVSyBQvlwYnEYyc=";
+    hash = "sha256-1ApDjBUZ1o5UyfQijv9a3uQJ/ZuQFfpNmHiDWzoHyuw=";
   };
 
   #buildFishplugin will only move the .fish files, but tide has a tide configure function

pkgs/tools/inputmethods/ibus/default.nix

···
     description = "Intelligent Input Bus, input method framework";
     license = lib.licenses.lgpl21Plus;
     platforms = lib.platforms.linux;
-    mainProgram = "ibus";
     maintainers = with lib.maintainers; [ ttuegel ];
   };
 })

pkgs/tools/virtualization/mkosi/default.nix

···
 {
   lib,
+  python3Packages,
   fetchFromGitHub,
   stdenv,
-  python,
   systemd,
   pandoc,
   kmod,
···
   libseccomp,
   replaceVars,
   udevCheckHook,
-
-  # Python packages
-  setuptools,
-  setuptools-scm,
-  wheel,
-  buildPythonApplication,
-  pytestCheckHook,
 
   # Optional dependencies
   withQemu ? false,
···
     withKernelInstall = true;
   };
 
-  pythonWithPefile = python.withPackages (ps: [ ps.pefile ]);
+  pythonWithPefile = python3Packages.python.withPackages (ps: [ ps.pefile ]);
 
   deps = [
     bash
···
     qemu
   ];
 in
-buildPythonApplication rec {
+python3Packages.buildPythonApplication rec {
   pname = "mkosi";
   version = "25.3-unstable-2025-04-01";
   format = "pyproject";
···
 
   nativeBuildInputs = [
     pandoc
-    setuptools
-    setuptools-scm
-    wheel
+    python3Packages.setuptools
+    python3Packages.setuptools-scm
+    python3Packages.wheel
     udevCheckHook
   ];
 
···
   '';
 
   checkInputs = [
-    pytestCheckHook
+    python3Packages.pytestCheckHook
   ];
 
   postInstall = ''

pkgs/top-level/all-packages.nix

···
     };
   };
 
-  mkosi = python3Packages.callPackage ../tools/virtualization/mkosi { inherit systemd; };
+  mkosi = callPackage ../tools/virtualization/mkosi { };
 
   mkosi-full = mkosi.override { withQemu = true; };
 

pkgs/top-level/ocaml-packages.nix

···
 
         logs = callPackage ../development/ocaml-modules/logs { };
 
+        logs-syslog = callPackage ../development/ocaml-modules/logs-syslog { };
+
         lru = callPackage ../development/ocaml-modules/lru { };
 
         lsp = callPackage ../development/ocaml-modules/ocaml-lsp/lsp.nix { };

pkgs/top-level/python-packages.nix

···
 
   tinyhtml5 = callPackage ../development/python-modules/tinyhtml5 { };
 
+  tinyio = callPackage ../development/python-modules/tinyio { };
+
   tinyobjloader-py = callPackage ../development/python-modules/tinyobjloader-py { };
 
   tinyrecord = callPackage ../development/python-modules/tinyrecord { };