Merge master into staging-next

maintainers/maintainer-list.nix

···
     name = "Colton J. McCurdy";
     keys = [ { fingerprint = "D709 03C8 0BE9 ACDC 14F0  3BFB 77BF E531 397E DE94"; } ];
   };
+  mcjocobe = {
+    email = "[e-mail]";
+    github = "mcjocobe";
+    githubId = 94081214;
+    name = "Jose Colomer";
+  };
   mcmtroffaes = {
     email = "[e-mail]";
     github = "mcmtroffaes";

nixos/modules/virtualisation/xen-dom0.nix

···
 
 let
   inherit (builtins) readFile;
+  inherit (lib.meta) hiPrio;
   inherit (lib.modules) mkRemovedOptionModule mkRenamedOptionModule mkIf;
   inherit (lib.options)
     mkOption
···
     environment = {
       systemPackages = [
         cfg.package
-        cfg.qemu.package
+        (hiPrio cfg.qemu.package)
       ];
       etc =
         # Set up Xen Domain 0 configuration files.

pkgs/applications/audio/librespot/default.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "librespot";
-  version = "0.7.0";
+  version = "0.7.1";
 
   src = fetchFromGitHub {
     owner = "librespot-org";
     repo = "librespot";
     rev = "v${version}";
-    hash = "sha256-IsHyYH4RDMRqXLNv6RZNzRTl3+zxan0TM/bjHoZC8YA=";
+    hash = "sha256-gBMzvQxmy+GYzrOKWmbhl56j49BK8W8NYO2RrvS4mWI=";
   };
 
-  cargoHash = "sha256-1Jc7gfnrsvk3Lcrvq0jV78IMKAnMDsW3nDr1W34PVmE=";
+  cargoHash = "sha256-PiGIxMIA/RL+YkpG1f46zyAO5anx9Ii+anKrANCM+rk=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/applications/editors/vscode/extensions/default.nix

···
         mktplcRef = {
           name = "vscode-zig";
           publisher = "ziglang";
-          version = "0.6.12";
-          hash = "sha256-7oZWKk7qqG9maGcjurpsbD1frIH/g+KKe4F2BXmqTeo=";
+          version = "0.6.13";
+          hash = "sha256-4DYsSGqWa+jbD8tguULFQLdhKluXK8skj9nSst9UX8U=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/ziglang.vscode-zig/changelog";

pkgs/applications/emulators/libretro/cores/fceumm.nix

···
 }:
 mkLibretroCore {
   core = "fceumm";
-  version = "0-unstable-2025-05-02";
+  version = "0-unstable-2025-09-03";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "libretro-fceumm";
-    rev = "3544ff567ecc417c170641587083b976739ef9db";
-    hash = "sha256-eNmzWLJVPeqFFEcFIhOQCn9OMrBp0iraTcft5pJVvvE=";
+    rev = "a5dbb223fc27cc4c7763c977682cfe3b3450d482";
+    hash = "sha256-K52Q9KDMgUUY5kmWNuMcZhib5nPdITMt5hXFyDPX+MU=";
   };
 
   meta = {

pkgs/applications/emulators/libretro/cores/play.nix

···
 }:
 mkLibretroCore {
   core = "play";
-  version = "0-unstable-2025-08-20";
+  version = "0-unstable-2025-08-25";
 
   src = fetchFromGitHub {
     owner = "jpd002";
     repo = "Play-";
-    rev = "7062c5e67a4a90b75fe1d0221c43f678a0d049b6";
-    hash = "sha256-PnZNcy69o0Fi2gfC7gDXyo6wUykdG4NxKumEl9P8K9Y=";
+    rev = "fe54d0a413f8e7268bc8a321e691a562edd6b257";
+    hash = "sha256-d+bVkM8BsZ9eiHaSNCC4b156EjOqyQn93lOyy6FLbks=";
     fetchSubmodules = true;
   };
 

pkgs/applications/networking/cluster/terraform-providers/providers.json

···
     "vendorHash": "sha256-oVTanZpCWs05HwyIKW2ajiBPz1HXOFzBAt5Us+EtTRw="
   },
   "equinix": {
-    "hash": "sha256-h/KqxQJVXBszpAxY8zYO8iQxwowtmRbDMdsHeOasjwQ=",
+    "hash": "sha256-bdcsm3160t46qR80M+j7mcTr/LfXd6FiSblEg1E7A20=",
     "homepage": "https://registry.terraform.io/providers/equinix/equinix",
     "owner": "equinix",
     "repo": "terraform-provider-equinix",
-    "rev": "v4.1.0",
+    "rev": "v4.2.0",
     "spdx": "MIT",
     "vendorHash": "sha256-65gJeUzeWB4BA76Mbw4eBScByyYyUqOl2/jwRVMJOVM="
   },
···
     "vendorHash": "sha256-vT1n4FN0s9rQFj4HuXPm6lvNdzWZMyrzeWAanHOQqCg="
   },
   "postgresql": {
-    "hash": "sha256-d1m+aSQFgmL/m30707J1Ic+GdjCosr55tgGgxEU4GXE=",
+    "hash": "sha256-q4duDY9//BK5Jkg6stn0Ig4DJfzkc0gAkUua18XPgSM=",
     "homepage": "https://registry.terraform.io/providers/cyrilgdn/postgresql",
     "owner": "cyrilgdn",
     "repo": "terraform-provider-postgresql",
-    "rev": "v1.25.0",
+    "rev": "v1.26.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-2DWYW/NoNqchnfxEPBCFstzGuFKwXAXVmS9RqRWViWo="
+    "vendorHash": "sha256-wUd5cFXX/oc96WFyNKgQxw8kvYDiqwpDM84wbNml7LA="
   },
   "powerdns": {
     "hash": "sha256-NtJs2oNJbjUYNFsbrfo2RYhqOlKA15GJt9gi1HuTIw0=",
···
     "vendorHash": "sha256-4gtM8U//RXpYc4klCgpZS/3ZRzAHfcbOPTnNqlX4H7M="
   },
   "spacelift": {
-    "hash": "sha256-3YjA+x2pL0qzo2ucb8oK5+X+Zb5ewNQkDbizKKop6e0=",
+    "hash": "sha256-9mYWg/dIH1mkeNMwx+p/JwxG3s5swLbKuNfhi3Ksu8Q=",
     "homepage": "https://registry.terraform.io/providers/spacelift-io/spacelift",
     "owner": "spacelift-io",
     "repo": "terraform-provider-spacelift",
-    "rev": "v1.29.0",
+    "rev": "v1.31.0",
     "spdx": "MIT",
     "vendorHash": "sha256-D8VG9CWP4wo+cxb/ewP+b6qAeaBCu6lNwH2leoiBMAc="
   },
   "spotinst": {
-    "hash": "sha256-SGlNS6E96uXExu60D0WjRXB2YnsJoz4xfxfHe1/pYn8=",
+    "hash": "sha256-6FtJhxNj296yjwGJiJLwwWKA7nUaoaV89Zn2lfyuKxU=",
     "homepage": "https://registry.terraform.io/providers/spotinst/spotinst",
     "owner": "spotinst",
     "repo": "terraform-provider-spotinst",
-    "rev": "v1.225.1",
+    "rev": "v1.226.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-tfANShbNhWcMZvnJUIbErukbGZyPABVS4l0VKWcLqZA="
+    "vendorHash": "sha256-yDmZ2uJE31aumQ2lpkeL5LpEaniSElCMYUryYG0dYYQ="
   },
   "ssh": {
     "hash": "sha256-1UN5QJyjCuxs2vQYlSuz2jsu/HgGTxOoWWRcv4qcwow=",
···
     "vendorHash": "sha256-9M1DsE/FPQK8TG7xCJWbU3HAJCK3p/7lxdzjO1oAfWs="
   },
   "sumologic": {
-    "hash": "sha256-ogZQKIBlpj62Ileu81hJPLDMrEpG0Nhb7+rSZR08NYQ=",
+    "hash": "sha256-plDFznbeeDd33+YSJy2BIDB0hALcgqTE2NdacH4MALQ=",
     "homepage": "https://registry.terraform.io/providers/SumoLogic/sumologic",
     "owner": "SumoLogic",
     "repo": "terraform-provider-sumologic",
-    "rev": "v3.1.3",
+    "rev": "v3.1.4",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-IR6KjFW5GbsOIm3EEFyx3ctwhbifZlcNaZeGhbeK/Wo="
   },

pkgs/applications/virtualization/docker/default.nix

···
 { lib, callPackage }:
 
-rec {
+let
   dockerGen =
     {
       version,
···
       # package dependencies
       stdenv,
       fetchFromGitHub,
-      fetchpatch,
       buildGoModule,
-      makeWrapper,
+      makeBinaryWrapper,
       installShellFiles,
       pkg-config,
       glibc,
···
       runc,
       tini,
       libtool,
-      bash,
       sqlite,
       iproute2,
       docker-buildx,
···
       iptables,
       e2fsprogs,
       xz,
-      util-linux,
+      util-linuxMinimal,
       xfsprogs,
       gitMinimal,
       procps,
···
       withSeccomp ? stdenv.hostPlatform.isLinux,
       libseccomp,
       knownVulnerabilities ? [ ],
+      versionCheckHook,
     }:
     let
       docker-meta = {
···
         src = fetchFromGitHub {
           owner = "opencontainers";
           repo = "runc";
-          rev = runcRev;
+          tag = runcRev;
           hash = runcHash;
         };
 
···
         src = fetchFromGitHub {
           owner = "containerd";
           repo = "containerd";
-          rev = containerdRev;
+          tag = containerdRev;
           hash = containerdHash;
         };
 
···
         src = fetchFromGitHub {
           owner = "krallin";
           repo = "tini";
-          rev = tiniRev;
+          tag = tiniRev;
           hash = tiniHash;
         };
 
···
       moby-src = fetchFromGitHub {
         owner = "moby";
         repo = "moby";
-        rev = mobyRev;
+        tag = mobyRev;
         hash = mobyHash;
       };
 
       moby = buildGoModule (
-        lib.optionalAttrs stdenv.hostPlatform.isLinux rec {
+        lib.optionalAttrs stdenv.hostPlatform.isLinux {
           pname = "moby";
           inherit version;
 
···
           vendorHash = null;
 
           nativeBuildInputs = [
-            makeWrapper
+            makeBinaryWrapper
             pkg-config
             go-md2man
             go
             libtool
             installShellFiles
           ];
+
           buildInputs = [
             sqlite
           ]
-          ++ lib.optional withLvm lvm2
-          ++ lib.optional withBtrfs btrfs-progs
-          ++ lib.optional withSystemd systemd
-          ++ lib.optional withSeccomp libseccomp;
+          ++ lib.optionals withLvm [ lvm2 ]
+          ++ lib.optionals withBtrfs [ btrfs-progs ]
+          ++ lib.optionals withSystemd [ systemd ]
+          ++ lib.optionals withSeccomp [ libseccomp ];
 
           extraPath = lib.optionals stdenv.hostPlatform.isLinux (
             lib.makeBinPath [
···
               xz
               xfsprogs
               procps
-              util-linux
+              util-linuxMinimal
               gitMinimal
             ]
           );
···
           '';
 
           buildPhase = ''
+            runHook preBuild
+
             export GOCACHE="$TMPDIR/go-cache"
             # build engine
             export AUTO_GOPATH=1
             export DOCKER_GITCOMMIT="${cliRev}"
             export VERSION="${version}"
             ./hack/make.sh dynbinary
+
+            runHook postBuild
           '';
 
           installPhase = ''
+            runHook preInstall
+
             install -Dm755 ./bundles/dynbinary-daemon/dockerd $out/libexec/docker/dockerd
             install -Dm755 ./bundles/dynbinary-daemon/docker-proxy $out/libexec/docker/docker-proxy
 
···
             install -Dm755 ./contrib/dockerd-rootless.sh $out/libexec/docker/dockerd-rootless.sh
             makeWrapper $out/libexec/docker/dockerd-rootless.sh $out/bin/dockerd-rootless \
               --prefix PATH : "$out/libexec/docker:$extraPath:$extraUserPath"
+
+            runHook postInstall
           '';
 
-          DOCKER_BUILDTAGS =
-            lib.optional withSystemd "journald"
-            ++ lib.optional (!withBtrfs) "exclude_graphdriver_btrfs"
-            ++ lib.optional (!withLvm) "exclude_graphdriver_devicemapper"
-            ++ lib.optional withSeccomp "seccomp";
+          env.DOCKER_BUILDTAGS = toString (
+            lib.optionals withSystemd [ "journald" ]
+            ++ lib.optionals (!withBtrfs) [ "exclude_graphdriver_btrfs" ]
+            ++ lib.optionals (!withLvm) [ "exclude_graphdriver_devicemapper" ]
+            ++ lib.optionals withSeccomp [ "seccomp" ]
+          );
 
           meta = docker-meta // {
             homepage = "https://mobyproject.org/";
···
       );
 
       plugins =
-        lib.optional buildxSupport docker-buildx
-        ++ lib.optional composeSupport docker-compose
-        ++ lib.optional sbomSupport docker-sbom
-        ++ lib.optional initSupport docker-init;
+        lib.optionals buildxSupport [ docker-buildx ]
+        ++ lib.optionals composeSupport [ docker-compose ]
+        ++ lib.optionals sbomSupport [ docker-sbom ]
+        ++ lib.optionals initSupport [ docker-init ];
+
       pluginsRef = symlinkJoin {
         name = "docker-plugins";
         paths = plugins;
       };
     in
     buildGoModule (
-      lib.optionalAttrs (!clientOnly) {
-        # allow overrides of docker components
-        # TODO: move packages out of the let...in into top-level to allow proper overrides
-        inherit
-          docker-runc
-          docker-containerd
-          docker-tini
-          moby
-          ;
-      }
-      // rec {
+      {
         pname = "docker";
         inherit version;
 
         src = fetchFromGitHub {
           owner = "docker";
           repo = "cli";
+          # Cannot use `tag` since upstream forgot to tag release, see
+          # https://github.com/docker/cli/issues/5789
           rev = cliRev;
           hash = cliHash;
         };
···
         vendorHash = null;
 
         nativeBuildInputs = [
-          makeWrapper
+          makeBinaryWrapper
           pkg-config
           go-md2man
           go
···
 
         # Keep eyes on BUILDTIME format - https://github.com/docker/cli/blob/${version}/scripts/build/.variables
         buildPhase = ''
+          runHook preBuild
+
           export GOCACHE="$TMPDIR/go-cache"
 
           # Mimic AUTO_GOPATH
···
           export BUILDTIME="1970-01-01T00:00:00Z"
           make dynbinary
 
+          runHook postBuild
         '';
 
         outputs = [ "out" ];
···
           runHook postInstall
         '';
 
+        doInstallCheck = true;
+        nativeInstallCheckInputs = [ versionCheckHook ];
+        versionCheckProgramArg = "--version";
+
         passthru = {
           # Exposed for tarsum build on non-linux systems (build-support/docker/default.nix)
           inherit moby-src;
···
           inherit knownVulnerabilities;
         };
       }
+      // lib.optionalAttrs (!clientOnly) {
+        # allow overrides of docker components
+        # TODO: move packages out of the let...in into top-level to allow proper overrides
+        inherit
+          docker-runc
+          docker-containerd
+          docker-tini
+          moby
+          ;
+      }
     );
-
+in
+{
   # Get revisions from
   # https://github.com/moby/moby/tree/${version}/hack/dockerfile/install/*
-  docker_25 = callPackage dockerGen rec {
-    version = "25.0.12";
-    # Upstream forgot to tag release
-    # https://github.com/docker/cli/issues/5789
-    cliRev = "43987fca488a535d810c429f75743d8c7b63bf4f";
-    cliHash = "sha256-OwufdfuUPbPtgqfPeiKrQVkOOacU2g4ommHb770gV40=";
-    mobyRev = "v${version}";
-    mobyHash = "sha256-EBOdbFP6UBK1uhXi1IzcPxYihHikuzzwMvv2NHsksYk=";
-    runcRev = "v1.2.5";
-    runcHash = "sha256-J/QmOZxYnMPpzm87HhPTkYdt+fN+yeSUu2sv6aUeTY4=";
-    containerdRev = "v1.7.27";
-    containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
-    tiniRev = "v0.19.0";
-    tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
-  };
+  docker_25 =
+    let
+      version = "25.0.12";
+    in
+    callPackage dockerGen {
+      inherit version;
+      # Upstream forgot to tag release
+      # https://github.com/docker/cli/issues/5789
+      cliRev = "43987fca488a535d810c429f75743d8c7b63bf4f";
+      cliHash = "sha256-OwufdfuUPbPtgqfPeiKrQVkOOacU2g4ommHb770gV40=";
+      mobyRev = "v${version}";
+      mobyHash = "sha256-EBOdbFP6UBK1uhXi1IzcPxYihHikuzzwMvv2NHsksYk=";
+      runcRev = "v1.2.5";
+      runcHash = "sha256-J/QmOZxYnMPpzm87HhPTkYdt+fN+yeSUu2sv6aUeTY4=";
+      containerdRev = "v1.7.27";
+      containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
+      tiniRev = "v0.19.0";
+      tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
+    };
 
-  docker_28 = callPackage dockerGen rec {
-    version = "28.3.3";
-    cliRev = "v${version}";
-    cliHash = "sha256-+nYpd9VGzzMPcBUfGM7V9MkrslYHDSUlE0vhTqDGc1s=";
-    mobyRev = "v${version}";
-    mobyHash = "sha256-3SWjoF4sXVuYxnENq5n6ZzPJx6BQXnyP8VXTQaaUSFA=";
-    runcRev = "v1.2.6";
-    runcHash = "sha256-XMN+YKdQOQeOLLwvdrC6Si2iAIyyHD5RgZbrOHrQE/g=";
-    containerdRev = "v1.7.27";
-    containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
-    tiniRev = "v0.19.0";
-    tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
-  };
+  docker_28 =
+    let
+      version = "28.3.3";
+    in
+    callPackage dockerGen {
+      version = "28.3.3";
+      cliRev = "v${version}";
+      cliHash = "sha256-+nYpd9VGzzMPcBUfGM7V9MkrslYHDSUlE0vhTqDGc1s=";
+      mobyRev = "v${version}";
+      mobyHash = "sha256-3SWjoF4sXVuYxnENq5n6ZzPJx6BQXnyP8VXTQaaUSFA=";
+      runcRev = "v1.2.6";
+      runcHash = "sha256-XMN+YKdQOQeOLLwvdrC6Si2iAIyyHD5RgZbrOHrQE/g=";
+      containerdRev = "v1.7.27";
+      containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
+      tiniRev = "v0.19.0";
+      tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
+    };
 
 }

pkgs/by-name/co/console-setup/package.nix

···
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "console-setup";
-  version = "1.240";
+  version = "1.242";
 
   src = fetchFromGitLab {
     domain = "salsa.debian.org";
     owner = "installer-team";
     repo = "console-setup";
     tag = finalAttrs.version;
-    hash = "sha256-cKMgFW97B0ippQjXur8e5rrlEVo5EBoAgCCni2MY5Ys=";
+    hash = "sha256-5PV1Mbg7ZGQsotwnBVz8DI77Y8ULCnoTANqBLlP3YrE=";
   };
 
   buildInputs = [

pkgs/by-name/cy/cyclonedx-python/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "cyclonedx-python";
-  version = "7.0.0";
+  version = "7.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CycloneDX";
     repo = "cyclonedx-python";
     tag = "v${version}";
-    hash = "sha256-ucIxq/pQkVd9N5ORrJjswSE1DgmKPw8r7nPJA5Qe4n0=";
+    hash = "sha256-RHw+FYj1oYM5Yf8YcU8tOsxG+3qu0ti/AYzcGxYAp/8=";
   };
 
   build-system = with python3Packages; [ poetry-core ];

pkgs/by-name/di/dissent/package.nix

···
 
 buildGoModule rec {
   pname = "dissent";
-  version = "0.0.35";
+  version = "0.0.37";
 
   src = fetchFromGitHub {
     owner = "diamondburned";
     repo = "dissent";
     tag = "v${version}";
-    hash = "sha256-cmp+oAUV+Oehs/kz6DRW57NgegBWbFVT/7xfY7CbcZM=";
+    hash = "sha256-xrNWMLZMZiJv08hsnc/aDe8e/aytngHKD/EhFVcF5PU=";
   };
 
   nativeBuildInputs = [
···
     install -D -m 444 -t $out/share/dbus-1/services nix/so.libdb.dissent.service
   '';
 
-  vendorHash = "sha256-AhzM0wu2wwwG/sDY+r2wgmotK4zA5u6vzq4KoPMLkL0=";
+  vendorHash = "sha256-tl9H0qtp96XOanniMFqjZcsSU8LqJ4aluPoKULDzVdw=";
 
   meta = {
     description = "Third-party Discord client designed for a smooth, native experience (formerly gtkcord4)";

pkgs/by-name/es/esphome/package.nix

···
 in
 python.pkgs.buildPythonApplication rec {
   pname = "esphome";
-  version = "2025.8.2";
+  version = "2025.8.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "esphome";
     repo = "esphome";
     tag = version;
-    hash = "sha256-UcYzGUz+H5N/jql3KgSNa24mygasAL4sOXLt9PdLYT8=";
+    hash = "sha256-8R6jm+gnFA/MTXhe3J9I6Ar1B18dFgABtfo91/qlmSY=";
   };
 
   patches = [

pkgs/by-name/fa/fastfetch/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "fastfetch";
-  version = "2.51.1";
+  version = "2.52.0";
 
   src = fetchFromGitHub {
     owner = "fastfetch-cli";
     repo = "fastfetch";
     tag = finalAttrs.version;
-    hash = "sha256-RWQuW2XJpbQLFCzuHSJyYdv2RSAAOtlm/xbVd18Nv7A=";
+    hash = "sha256-Zylq4Ae1Ut2iB4qOnOtGkjDjuPxRyr221FVzOx3kdIE=";
   };
 
   outputs = [

pkgs/by-name/hd/hdrhistogram_c/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hdrhistogram_c";
-  version = "0.11.8";
+  version = "0.11.9";
 
   src = fetchFromGitHub {
     owner = "HdrHistogram";
     repo = "HdrHistogram_c";
     tag = finalAttrs.version;
-    hash = "sha256-TFlrC4bgK8o5KRZcLMlYU5EO9Oqaqe08PjJgmsUl51M=";
+    hash = "sha256-9Xp+gPqJpB7xZr5dzyc9Via9gxG9q/EriCx3cm++0kU=";
   };
 
   buildInputs = [ zlib ];

pkgs/by-name/ht/htpdate/package.nix

···
 }:
 
 stdenv.mkDerivation rec {
-  version = "2.0.0";
+  version = "2.0.1";
   pname = "htpdate";
 
   src = fetchFromGitHub {
     owner = "twekkel";
     repo = "htpdate";
     rev = "v${version}";
-    sha256 = "sha256-X7r95Uc4oGB0eVum5D7pC4tebZIyyz73g6Q/D0cjuFM=";
+    sha256 = "sha256-dl3xlwk2q1DdGrIQsbKwdYDjyhGxpYwQGcd9k91LkxA=";
   };
 
   makeFlags = [

pkgs/by-name/in/infisicalsdk/package.nix

···
 
 python3Packages.buildPythonPackage rec {
   pname = "infisicalsdk";
-  version = "1.0.9";
+  version = "1.0.11";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Infisical";
     repo = "python-sdk-official";
     tag = "v${version}";
-    hash = "sha256-k4yJ1o3OOt01vXCfWDZ1zUtr/yoMSg43QzKUG9V/NGA=";
+    hash = "sha256-iapdd59Bsz80yRuEWY6zIVYrsoz+WMEOUymmVHzUOd8=";
   };
 
   build-system = [ python3Packages.setuptools ];

pkgs/by-name/in/inxi/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "inxi";
-  version = "3.3.38-1";
+  version = "3.3.39-1";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "smxi";
     repo = "inxi";
     tag = finalAttrs.version;
-    hash = "sha256-+2NPQUn2A8Xy5ByKYS3MOcad6xXvkqcusWEMr7mkEwA=";
+    hash = "sha256-IfwklyXMOuluQ6L96n7k31RHItE7GmmjExrPAGBjbUQ=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/io/iosevka-bin/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "${name}-bin";
-  version = "33.2.8";
+  version = "33.2.9";
 
   src = fetchurl {
     url = "https://github.com/be5invis/Iosevka/releases/download/v${version}/PkgTTC-${name}-${version}.zip";

pkgs/by-name/io/iosevka-bin/variants.nix

···
 # This file was autogenerated. DO NOT EDIT!
 {
-  Iosevka = "08vbbk1k1cvg7i89y19j7dfvb5icdw9k17x9viy5in8c3zh8l86b";
-  IosevkaAile = "0d3h9zvmm2jq675ypri8gsnyr480f45a6qy3nxs3zlchdk8x8r6w";
-  IosevkaCurly = "024h777s3ya4rs37qcni694rxnhfz4c48spazy2kyhr1vz144f3p";
-  IosevkaCurlySlab = "1xia7kxfl600v1n0mrfxydl4b44k7qhlm7ziqj11mszfh0nyypjh";
-  IosevkaEtoile = "08ihdsbz04f96s2dh2d8yndc04n2xcx0k4f7ai757vkqvj4acl1s";
-  IosevkaSlab = "1rf2jbir0l09w7ndv4rdj4sj5qhhnq5pm85xz3r057rg21d5knxb";
-  IosevkaSS01 = "0rkwi4cnf03ayllfvmldfksriis6gcfzj9lqj79shqxk7j6lwznp";
-  IosevkaSS02 = "038n78mhbxayslr5p8iminrajh37sjihkc8jzxp16aq4xk0c7j1b";
-  IosevkaSS03 = "1ci08fsz3d35qjrq0jg9bw6vw86ckamlfqsk031ay8prnyycbdvk";
-  IosevkaSS04 = "0n128k5ihp2gjl704xfczdbxlzzahw9xsdl28fp15gyk9a2h8h2i";
-  IosevkaSS05 = "0mdn5f73r50zi4x5851s2rw7ya0l1lm9v2ljbv5rwx9qlcn1mv6l";
-  IosevkaSS06 = "0z0bdgywcp1b5y4j7lym3k3ryg0r576mpbsa3fq8z50h3f15i7y6";
-  IosevkaSS07 = "1rn0q1a44351fcihldvvq379np3a4c4q4msmdcgk2ijfrczr78s3";
-  IosevkaSS08 = "1zvjrvk2lp371k5ph7vpmmxw2hnk26qmyvbnm68vivs4x8vlwk3j";
-  IosevkaSS09 = "0ph2pn6q40z5f7blfig0wr4bl4qnqjsj5l67qjws3vjgzjn795yd";
-  IosevkaSS10 = "1vpk21idk0hczch29rq31rg3qw4yvvg8vyi8j1si42ki9lk3mg61";
-  IosevkaSS11 = "0s626n3a3ns877lv1k55bwasgkkbgsvcbgz3hkvghqj4ln90fv67";
-  IosevkaSS12 = "0blskpw05s9da5i9258ii2nvvrgnyixm9nb5ax5vgi94j290wzcj";
-  IosevkaSS13 = "0r1170rzwknfkf5lq2vqxdgmkdncmddgjbaq8dy7hsa3zjd591j7";
-  IosevkaSS14 = "0v9gs6av365x84c50r7k2yhiv1g19s48iwrlxzxi4yzr15v9z3kd";
-  IosevkaSS15 = "1cw013khszmaaxn4vx0clgkw3xidvlsxd85ykx0kr9np3cxlxn07";
-  IosevkaSS16 = "1qskhwplyp30mds9j06g6b8i9dvxsjdg3j65g0gj15mp027hi8mr";
-  IosevkaSS17 = "14zzcw2pk4w0y2r1aic513cmf961szqrpfkfnj577715ch7x02is";
-  IosevkaSS18 = "0la2ikwkazi9m61hm8i9x2w0ppqc7v1qqpvwvx03hhdx2swgp8x5";
-  SGr-Iosevka = "1k916yy505ww9pyxx0lvifa8p5r9zssfyc6fcrdp0bv8faqkkrvp";
-  SGr-IosevkaCurly = "0mw43birmr6d3ykajm046wx1xqyxfaw0fq4vrwihpaz8nqnlhfki";
-  SGr-IosevkaCurlySlab = "11gyyzd3sjk6w23861mzw7gvgd1qfg3la4ljq087jmh7c4gvi3in";
-  SGr-IosevkaFixed = "17lw03agm4jw8i4gymiwq124dm5zll28mcl2rzzmwsf1xl014v07";
-  SGr-IosevkaFixedCurly = "1jn7qm5mhw1jl1w6vxpbz53hpw2ph04i3kpn13nhsy8dvd4gff67";
-  SGr-IosevkaFixedCurlySlab = "0bdzd4dzg0nm2ffv341kp67vmmd5ykvdiil6igsdxkr5wazvn2pf";
-  SGr-IosevkaFixedSlab = "0djllnvsdhfqyhm5mfxh5rjqsw1kd41a0f7ff36a3cqphd63ac7m";
-  SGr-IosevkaFixedSS01 = "09lvpmkyxk3kylyxjliwmywy9v75azwdhwh51hdyzbr231c0mb3z";
-  SGr-IosevkaFixedSS02 = "0dadqys577f71a5d7rrrwa7wc18jls088s1ig4jgga7pw08r1fhx";
-  SGr-IosevkaFixedSS03 = "0k654b1j5sz896p694j7fh0axkdpdzpn0fr3w44mgry6812mx17s";
-  SGr-IosevkaFixedSS04 = "0n1g0kjx55517xlr42jb1r6gr3lgmnrpbrfwm28j5agzkqnjn3sw";
-  SGr-IosevkaFixedSS05 = "0gs174gfq0x05v2hjx7yxk94sldm9hprypm22mv4ksy4x8nmw372";
-  SGr-IosevkaFixedSS06 = "0sybk7ai6ls338yg01rz2r3xl2xa89s4fz7cy8i0a1cakcblapyq";
-  SGr-IosevkaFixedSS07 = "1sqsn3msld2y08ad1imkrxwqkd32frj63q794ynf0blfnkpsgvc6";
-  SGr-IosevkaFixedSS08 = "14j5w97zikhwn57632rxgmq6zfhfhsl4d9f8yiq7isq45nb7kcvn";
-  SGr-IosevkaFixedSS09 = "1pjv8pf8b4wjbxinqi1d2i452bl44jqi0lksdbwanasv7yy8i8l2";
-  SGr-IosevkaFixedSS10 = "0w9840jfxyms367676lyz7b57r3xn582micxgjh8qmdpbbv36xvn";
-  SGr-IosevkaFixedSS11 = "10fd5jbv3wcgy2r9lvwc1qhd2bzpxxym4z16w99wibadas02jjjf";
-  SGr-IosevkaFixedSS12 = "0dbk3l6yrnpdg9mbdixp201n709j0j9br2k3jvdw83q4mcikfcbs";
-  SGr-IosevkaFixedSS13 = "0rzpw8pna6fz99xi1k3cbjbfc5nbsj43k9k747i3yajy99f37ncp";
-  SGr-IosevkaFixedSS14 = "0qmrdzz94c4fjy771wbx81078zdcqb9vfw1rhmxggxykb7ak69ik";
-  SGr-IosevkaFixedSS15 = "1gswliwkh8bq978mjckpqb9ppk65msp6ljc9fvx6j0kk37kn6bn5";
-  SGr-IosevkaFixedSS16 = "046gpzan4d2r4yfk431dd3204ab6yk3jaxg0n9iqwdinsmlvh296";
-  SGr-IosevkaFixedSS17 = "1ykcb85n4iv8xr9db2dbk5iv42qw85lwr2bbl5ij2q19rj6vp73c";
-  SGr-IosevkaFixedSS18 = "19am4y3wbfdkqfk23cninsv7m6rwysa1ij5x0a4fhg8mrm0acwad";
-  SGr-IosevkaSlab = "1m0pqxdcj1638gc1avlb8z3imccl7aif3kkn78gsbjbax5dln0ic";
-  SGr-IosevkaSS01 = "10csf59fp8s0ygg6j8s2zfzd4740vb5rl4z0vhcvsmwllg6jf6av";
-  SGr-IosevkaSS02 = "1mcxb4p6fw56ncw7wkf6g9mhswpwn6mdbdmpcm0qmvgqw2czp4xw";
-  SGr-IosevkaSS03 = "0abkw56n8ihi6l73xmxjxwgqpgrvmxbf76i70xgmh3s50242ksil";
-  SGr-IosevkaSS04 = "0hm1m1s4mqgz9y1z5xbhi7pq4rzl3h8i951844iw3l0d5h2mcpki";
-  SGr-IosevkaSS05 = "0nf20bwnwrl1l6xy4hb3nap3vzgrmnc7cmkjaip0b2dc9i04rqq6";
-  SGr-IosevkaSS06 = "04ncjbrkfpbm3qms4kwgbgqpa2hzpjh6vd2jgwjzzq2hi00k1dzc";
-  SGr-IosevkaSS07 = "198jjf6mvivb499iazbds3yl2d9xggw6xdc3piij76jx196svppf";
-  SGr-IosevkaSS08 = "0qbn6cf51mgzn2f3z8zcq9j7vs5ihwdw8kxs6svpd88y1dlssmcv";
-  SGr-IosevkaSS09 = "1rh7kzfis3kg80lp3g8cbgr5r7372j98vgpc472n0s5rgsmxwr3z";
-  SGr-IosevkaSS10 = "0ajbgchdlld25f21pdz7rkppa1scly91yjl0nhmm10wc436baij1";
-  SGr-IosevkaSS11 = "009a7y4k9lk622mhv14h9nqflja7bm6p1a3l6qn9fw8gc6kclkjl";
-  SGr-IosevkaSS12 = "1mxckmw297xqyazpkriqgwnki07yxjzi8i7a4gvfhpkaq8vj03yl";
-  SGr-IosevkaSS13 = "18fchw618dwvqas18kmmi863gdp3rswimxykqyvdxyv06fwvlaah";
-  SGr-IosevkaSS14 = "1k1fmfjhg6azlylda1227wa6iy0p4bgn22xkhw162f32pjy28z2l";
-  SGr-IosevkaSS15 = "07c1hs8vfbf3wv0cl21sqhm2al4j0xdiav15xp6vqgldh4l5gjgq";
-  SGr-IosevkaSS16 = "0qwfcw95y63wl6qcggd8y5f56h4ighkz4df994nixlhkyvzfa8kr";
-  SGr-IosevkaSS17 = "1aa5c1fb8r3chnpb9b59s5l7rqi58s5g1n5y7pdcmwp9cl1d3sd4";
-  SGr-IosevkaSS18 = "1nkgw6sqyxmf5aw4sanfa3cb4gbrd5871ni4qqn649lgnsjq8bk7";
-  SGr-IosevkaTerm = "19d26zlapms8ppm4qll5l7rplirj1k6xn4y89v2j857li2i7va95";
-  SGr-IosevkaTermCurly = "11wjd0a4gdyhnl8914j084mlb8z4awkn3pd6a3c2fq8qynwkcvc9";
-  SGr-IosevkaTermCurlySlab = "0kajmdzg6iqzg7y51kl9zh0fvw3yz408j63i3lzlrjj4plqyd59f";
-  SGr-IosevkaTermSlab = "1hbgj4psgv5ci4f0mjxd4q3ydk37jp16b7h8kjlfinhldbsrsd7x";
-  SGr-IosevkaTermSS01 = "0kri3c22j7a6c5m26i5l975w6csbkbv2fb2plrwc8c8sdqh5qy8q";
-  SGr-IosevkaTermSS02 = "10mwqfy38rp6ygy5v6irb57dl0irkmnlv133zhdyqbpn9gaiwc19";
-  SGr-IosevkaTermSS03 = "0rn62yl26abi8p0hz5yzkd4nw4im7p84w957fbyr5g2dmwl377ac";
-  SGr-IosevkaTermSS04 = "1rb1ysqq6mkp7kd518py9lpp4k82v538rv6im464n82kgz0caz4l";
-  SGr-IosevkaTermSS05 = "0kc2b9p933l2q18v3an26l4q7fxc7bsm02zslz91y92rwzvjhxdr";
-  SGr-IosevkaTermSS06 = "1m6jcdaa7rca0310ggi9syzc8a2dxyr88q2h09a8v59zx8cfa0vd";
-  SGr-IosevkaTermSS07 = "16w437n33gbflb0bfh7i9rjr33wh5v98yzfm2g5l8f7wpgbc984i";
-  SGr-IosevkaTermSS08 = "1bppjyyqqjdkka2si6skyc9rqs87l325g2vf7vjfav61ddk804w2";
-  SGr-IosevkaTermSS09 = "0wmz1p0dibyzvqxdb9dwwjnsqly36h3hhz5pj0jamnwbjnynfrqj";
-  SGr-IosevkaTermSS10 = "1i7dvd9v4fq0m32d0gb70pw1ivmr47vrh852zh6drsj6852iqc8m";
-  SGr-IosevkaTermSS11 = "1v3fx9778pnfg3gmpnprhawh8863xjfxjfdb59hpd2g6jjakag3b";
-  SGr-IosevkaTermSS12 = "0laqvc1qgjafk573wx0zmapxdy12a3jpd903zvdnks4z46nspl3q";
-  SGr-IosevkaTermSS13 = "15xpvsay23wpp27j903c4v8zhykj742ydfi15lav7rmbd6k182b2";
-  SGr-IosevkaTermSS14 = "14by0l4a038jwv4n8b7iyyji5zzsd6iqqa9mla0rz1135k9qlvza";
-  SGr-IosevkaTermSS15 = "1bb08wpaxwcaj6i4ib40n3xgjn2ps9znfki222afmlvcd593p307";
-  SGr-IosevkaTermSS16 = "10cv77jncjpf29hba8g9s6ppwlkyk885ik4p1vrlaqa6scvy4i7p";
-  SGr-IosevkaTermSS17 = "1l48b3lb2mmrlbvpzsjd1x7i26mbaxy4idbgf1fsi8pkrz6x2cxr";
-  SGr-IosevkaTermSS18 = "080pyjphx7h4lxsrwxd71dxbv5z45ynkpw97k8x0jf6acmkjisc2";
+  Iosevka = "007k48dcrf3274cmhc6ps57kbsrbk8x0d6nbl8rh9avdxgjgk94y";
+  IosevkaAile = "1fzpmkgg63v57d7rha2l13jcxdbggdqpr6m28wbi0l5qchamvk9k";
+  IosevkaCurly = "1vfn87bvviqiqgv2yhfvhd1p113ji26pg3gq0149z6s64ma6yynq";
+  IosevkaCurlySlab = "1px57x1d0ngd3b9n0hqm50lcqhi77vd49cj3rphpiyqxzdawhyyw";
+  IosevkaEtoile = "1wb8k5xlrgz1p2i6lihysaqbas6581mnn14s7pp9l136crjgk49a";
+  IosevkaSlab = "0ky0x4g37x8xm50rwwyclhs4daakgn8cxs8jbhs7w9x8pbqggfak";
+  IosevkaSS01 = "1dp7vbaqgqjqw6jw7ya6ljajjlsd38sz98bwjd3jx9icijd6m49x";
+  IosevkaSS02 = "15d86zhdpjb2bm40vsxbgyw20la8znf06j7svyjpjmxqd1g6sd71";
+  IosevkaSS03 = "093q5p300j2cmid9d6ni4zcizlqrf8hhyk4x8mxygdj9fz3i6shg";
+  IosevkaSS04 = "0dv0a4s56rga47yaf64n5zv0v0fp7mzmw72g3a7bja36irbkgxzh";
+  IosevkaSS05 = "1k12yj80z6z9qa0qhq5k74zx18ghmzz1gsx92s4kl2sfbqhvng2d";
+  IosevkaSS06 = "1v8qj02zqchivh4yl83jq9jhv65y8gz1xf7vk8rgq46plfi1cybg";
+  IosevkaSS07 = "16raccinskvk35algj377mb7yc2ndskijrik46pv20nqsnq9v99n";
+  IosevkaSS08 = "18p7yj8a5ksfw0h95v01176wcx4s3m313vq4m3a2g5qymd3j6c4l";
+  IosevkaSS09 = "197myxzgr3vlsmprcd7dwds6yz9971cy3ivp79p22bx23h0dyyxv";
+  IosevkaSS10 = "14n2fq7k4mz7dnk4jb7plv49g7iazbd6cx4abg4i9myjgy3q9zs3";
+  IosevkaSS11 = "00a3ky4djwwnwfc25kb24dshd60drld421w5835m8msivl2k8iiq";
+  IosevkaSS12 = "0cx56542n7yk6nkd364yippayjymgwkhmg0cxj9knbvlfd2nyqns";
+  IosevkaSS13 = "0286af1d5z7kx7rxb7dclpki3rnzccisv5j0gx9x3d8xainsdm2c";
+  IosevkaSS14 = "0v73a1cg7zy8vzpzvr4ic6gpymywlb4n45qgvf2r5vmds9msv8jw";
+  IosevkaSS15 = "19w1s45hmaw2jvm63k38lpslnix8324qs6ry8sl0807fw6r1ga89";
+  IosevkaSS16 = "1h6nz4rz1hp2304j7axk4cp0sclkrb2ivg7kmyykaxbcrw3r7aap";
+  IosevkaSS17 = "14yz10nq4b25mf1jcy3pisxczvwbink1wb6iq7a951iranxlmpjv";
+  IosevkaSS18 = "0cdzn1yxg5iv4fz1fzdwhprlipqy4m589yd01q9ds2vm4bp674kd";
+  SGr-Iosevka = "0jmfwd56fhhyfn0kpskwjwyvmcd8d808zkvd9jp5d6mxjjw1xd51";
+  SGr-IosevkaCurly = "1yg44gcv54gyrzs9s2kixphn5zw3zmzplzy6flshkvjbkxn4d0c8";
+  SGr-IosevkaCurlySlab = "1c1s2pbls4s6lvx1y60870m1aqrqihxw089r34jp53ai8m8gxfyj";
+  SGr-IosevkaFixed = "1d3gffdih6rrpb5h2yh7r3aaks6wa9g1qv2x240vfxjhj48yns6b";
+  SGr-IosevkaFixedCurly = "0dcjdxvcsw8assmn6aizwiabfx0fkikknp78l9hjkzdwckrdb2nx";
+  SGr-IosevkaFixedCurlySlab = "1ysr6g0pn4kyjzrws47spbam39nddzpy81s89fmfdcj8p41cfmbn";
+  SGr-IosevkaFixedSlab = "1rqzw73aglg2p1k2a3cbgrhcy7jy4c3nklxkcfwpvd5jddrdrlli";
+  SGr-IosevkaFixedSS01 = "0gbjy9dj77l9182psgvgjri7sba439ax68hfz2a8k6r7p5qysw9d";
+  SGr-IosevkaFixedSS02 = "0cjg9vlpsf5b8ff8mfv3wq5v0qhihjasyq5v4xbqcli4k80wrnwl";
+  SGr-IosevkaFixedSS03 = "15hy7xvf75d9x02qwqphsymk2y4kzlzlkr737rzpbsa6kf88njd0";
+  SGr-IosevkaFixedSS04 = "1qy1sfm61x974iyrzg4z0a5v7wjjaizw4h3g8h9jix5428b8hf8p";
+  SGr-IosevkaFixedSS05 = "0vz884a2hf0ih0q3axwq5xmq9mjp7wdrznlfv00l7dgkicgdmjx4";
+  SGr-IosevkaFixedSS06 = "00l9lm4bhic3ll0hv3js6bwiv6gc882b4zv34wy8c48x0zx3k5y8";
+  SGr-IosevkaFixedSS07 = "0zxakdrls5aqhw5sq2b2h9f7kps3am38cwmjgq4wxmmixk1k7z3h";
+  SGr-IosevkaFixedSS08 = "14ziwi93h1wljsf01xkzpzriaw0z5fzm3nc9q6izcc8lz5b9zkcn";
+  SGr-IosevkaFixedSS09 = "1hnx1h1rdpxanbffaa3qn9wa7xlvkbl2y7rdmfhfdji2qwqjfhik";
+  SGr-IosevkaFixedSS10 = "10cz1vlvaygrf9vk5wdidn21kp6ac6x0fyh5q5a8q2pwhwz1ciws";
+  SGr-IosevkaFixedSS11 = "0478zka894x4x4v0px3hdghhvq9fsc657kfx50j5d4r4vhia6ln2";
+  SGr-IosevkaFixedSS12 = "10l58nrnbr4lxdzgzdzb7mzgxm64ivwb0rllwngr3djml3aim47g";
+  SGr-IosevkaFixedSS13 = "1hz5nk10a0l8wa6fnljdc9b5liqfb3fawwmnvysvg8zkmk0459rv";
+  SGr-IosevkaFixedSS14 = "1zfj13x3kbbnmh5qxdq58063g5kf4gbmhrp3fpkn58di1n3iayxv";
+  SGr-IosevkaFixedSS15 = "12dbjdiwiggapjw68scfhg8d8822mjg6asqw96qsj3xh9njv7k3l";
+  SGr-IosevkaFixedSS16 = "0kvvx1b95qhf97f6rcrypcpzz65598c65wkbajf7gdgmxrv7jkyq";
+  SGr-IosevkaFixedSS17 = "0nchcrl9ndb7daii25c53mz742whc3yrybfjskxrgvdfmzh01lzv";
+  SGr-IosevkaFixedSS18 = "1q51z92i22nfara59vyx3brjrxnh4rrf584c4iv9xbhkjqc8ak3i";
+  SGr-IosevkaSlab = "0w9n9sv47s5db4s7kn8fy4f0mmfzj9qxbhr0a9hv7azkzlafrzqz";
+  SGr-IosevkaSS01 = "0ps3c0lqkiw77gk0yi0gczclmwrifclsg96isiqvf7zmycbs9bkd";
+  SGr-IosevkaSS02 = "1x8qjlssjbn0hc1l38bg1x34s5ip699ifj0ckbv8gwwzhvygiyfg";
+  SGr-IosevkaSS03 = "0cmkg6363992ik208qck0h51w8ab6sjl1mjsk8biplj30zcamp5w";
+  SGr-IosevkaSS04 = "14nssnjwwr0wqlc1ql58zycfqddjalwvlynnp3b3r41scclbdh79";
+  SGr-IosevkaSS05 = "0l00b5i84wkkzfm93y700zjd312zw73iynf39v2i9nphqllda28y";
+  SGr-IosevkaSS06 = "08n8pw0n6k07fx6c44sl92za5bmd5zi70hhp7vqlzx9j4wax1b9p";
+  SGr-IosevkaSS07 = "0masfikz2flryw17fw2a5ajaim4yl3w1nnccg3kqfrh7dly79ngx";
+  SGr-IosevkaSS08 = "05jmvm54r5ba1q9s21mp5wh83ijsmpf4390lrhn3ddcx33b9kp2h";
+  SGr-IosevkaSS09 = "1f80vgmhqxcdq1qg624nr3v7f91pxi0bdrl9n38wzb5c1npw9fcv";
+  SGr-IosevkaSS10 = "1288l9mx5x21q2gjp5fsw6dfd3anpirmsvwg2agazjs2cwf8ivbn";
+  SGr-IosevkaSS11 = "1jna83l1jciikyzn6y8wvvb6b8mlc0gdfaklch06mamf3skrdhg0";
+  SGr-IosevkaSS12 = "067jjvp3v3ghy94yl5hx42r19iq49kxq5grl6g6q81qicm2nld5f";
+  SGr-IosevkaSS13 = "0307scnhy104hv2k59f46hs8dv16hgydnyal96nfp97bnwg6i2ai";
+  SGr-IosevkaSS14 = "0c26p3qjw6ppk8h6wvw504mpcvsfg5rxfi54p3knvh1sys49d9yk";
+  SGr-IosevkaSS15 = "1lnn92hg15vabqlk1xdfrjbwxz9wd5gm8gh1nxk52045rfbl0jdv";
+  SGr-IosevkaSS16 = "09m1f9549hwfklgvknampl2kjypdlbqzac0b34c9s35qbda05kn2";
+  SGr-IosevkaSS17 = "141gadhaig3iw43myq10yqchjk33vgnwdc9i6bpknbbdzhk254w8";
+  SGr-IosevkaSS18 = "13n2fwhmhbx58pcsvnwbl83h0q7iil0xwvfnd4s1wn358c70krws";
+  SGr-IosevkaTerm = "1chkfvlds37x9jpwx2gbg4zxzsgjcj220a25agax8bj926hv5lsn";
+  SGr-IosevkaTermCurly = "1rc0filfrrs71hjk0ri8xm222lg2mp2rvwsn9lnanml3671as210";
+  SGr-IosevkaTermCurlySlab = "0kf6k4wfqm1a8fzirbbxn66hfnm3r68gb6s21jgddifyhpgawqcn";
+  SGr-IosevkaTermSlab = "18ia06j7zw235mh1f4vgzch9vby4bppbb6rv0sq3pdpzpqxfii0n";
+  SGr-IosevkaTermSS01 = "1wbhpa9skhbwak2h5jbvyfkzp38b0dpg77ai21sdzq1jwnndc1yi";
+  SGr-IosevkaTermSS02 = "115j26xxy55qj82j0p5zpfk5q4g9jc6z9gb6qdv6w7x0apqjmaiz";
+  SGr-IosevkaTermSS03 = "0amz8vmd637hc414a267mddkqkb7f5lf54na7rr3q577mw7xj3gc";
+  SGr-IosevkaTermSS04 = "1zm6lmj1394anbhm89pqgqk9kk540gsqily77sxcgyjalkpq2x82";
+  SGr-IosevkaTermSS05 = "1sxrn3p8kdlra0vdi8idnir35r2szqasi0fa43fnm4m1xj5jmn2j";
+  SGr-IosevkaTermSS06 = "0j3mc712fciwx48nj20j2794hnisyxcd33b578aw9h45pxdz3w1d";
+  SGr-IosevkaTermSS07 = "17m3ihrjqzj7rj293i9zr64p8wrxz7n9l9inbw1chxqpw8vfwwmc";
+  SGr-IosevkaTermSS08 = "0dwjs9i9xgsf59vx93xx70xnkn367cjpd1za28rbvjcmxgmmlsq4";
+  SGr-IosevkaTermSS09 = "1ssss0p4w34wblqjk09lpwcrw9msan7p0lqa32sqvx7455ycgjii";
+  SGr-IosevkaTermSS10 = "1lx2r02ynpkf9gwr7imxs66igf9yh59ikp4962risi10nrdi04ym";
+  SGr-IosevkaTermSS11 = "10m7dkp5h8m16i4lcmyrl8w40sibfgg55s4b1k7am3c9gqhkfra2";
+  SGr-IosevkaTermSS12 = "015wqi5n6hc3ywk3fw3vzsnm2zdfq710y1p95f350w6nviwb8r2d";
+  SGr-IosevkaTermSS13 = "01apqy46zvx2rizzfy197apyrbrw7brfsq4rl5wms2wbsxc4i1if";
+  SGr-IosevkaTermSS14 = "0d62a3igna0acv3k4zxvqlrj60hbalvw2ngl9sg8llaabp1j0kxz";
+  SGr-IosevkaTermSS15 = "1wypvzvvj1bjfxczij2vpi8dxrgy3qyq9y9gbab8nixsyjbyqyhs";
+  SGr-IosevkaTermSS16 = "03dgkkyzz72i39zd90dgicj4qbdm581amv3y5izfp0cw81hrbiip";
+  SGr-IosevkaTermSS17 = "1qdk0lvvfa3bvbicx0gylcyi8a062f5wh72xk6qd9ng8q71r9aiv";
+  SGr-IosevkaTermSS18 = "0d2q6lallwk03wyncdwjdngssbmj8p34655sm46vdc2wn8z3vnv7";
 }

pkgs/by-name/ji/jira-cli-go/package.nix

···
 
 buildGoModule rec {
   pname = "jira-cli-go";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "ankitpokhrel";
     repo = "jira-cli";
     tag = "v${version}";
-    hash = "sha256-+7R0yf7YVUnJErvhDm6dVskAJdyd7DHM0JJ6V9gzj/Q=";
+    hash = "sha256-NJXLB2N8Kc8Ow6kb2EtPSG+iZ7O4yrhAMi3NFrUuocA=";
   };
 
   vendorHash = "sha256-cl+Sfi9WSPy8qOtB13rRiKtQdDC+HC0+FMKpsWbtU2w=";

pkgs/by-name/ku/kube-state-metrics/package.nix

···
 
 buildGoModule rec {
   pname = "kube-state-metrics";
-  version = "2.16.0";
+  version = "2.17.0";
 
   src = fetchFromGitHub {
     owner = "kubernetes";
     repo = "kube-state-metrics";
     rev = "v${version}";
-    hash = "sha256-mGCDxMF61FLCiMgtPdRBhwwx7ut1X3A5Z5hLXJXX3Gs=";
+    hash = "sha256-w55FOWw9p7yV/bt4leZucOLqjVyHYFF+gVLWLGQKF9M=";
   };
 
-  vendorHash = "sha256-80ielz4che87hkt9U3k+pzuwZjeRz64RfRvXs3JXph8=";
+  vendorHash = "sha256-pcoqeYyOehFNkwD4fWqrk9725BJkv+8sKy1NLv+HJPE=";
 
   excludedPackages = [
     "./tests/e2e"

pkgs/by-name/la/lapce/package.nix

···
 in
 rustPlatform.buildRustPackage rec {
   pname = "lapce";
-  version = "0.4.2";
+  version = "0.4.4";
 
   src = fetchFromGitHub {
     owner = "lapce";
     repo = "lapce";
     tag = "v${version}";
-    sha256 = "sha256-vBBYNHgZiW5JfGeUG6YZObf4oK0hHxTbsZNTfnIX95Y=";
+    sha256 = "sha256-4f6+o1xOopmBZEcQfC6A9VS9lcntKiWsB1iAzdRxYno=";
   };
 
-  cargoHash = "sha256-cgSr1GHQUF4ccVd9w3TT0+EI+lqQpDzfXHdRWr75eDE=";
+  cargoHash = "sha256-hVV3zPGpCBTR56MiSpnMf/ESSHFdMQ0x0IKOa/qzUn8=";
 
   env = {
     # Get openssl-sys to use pkg-config

pkgs/by-name/ma/makima/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "makima";
-  version = "0.10.1";
+  version = "0.10.2";
 
   src = fetchFromGitHub {
     owner = "cyber-sushi";
     repo = "makima";
     rev = "v${version}";
-    hash = "sha256-Pb9XBMs0AeklobxEDRQ1GDeI6hQFZ43EJt/+XQEGrWU=";
+    hash = "sha256-qvIzoYGU0WZdEPlJ3AR3uqOt2br73Vp8+ZU2xkX2si0=";
   };
 
-  cargoHash = "sha256-7XpecFwkUW3VVMYUAmHEL9gk5mpwC0mWN2N8Dptm3iI=";
+  cargoHash = "sha256-8814sRjYlnWAdOOLjj0VAuDr+Hlr1xTcvqx4Ul6XhR4=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ udev ];

pkgs/by-name/mo/mongosh/package.nix

···
 
 buildNpmPackage (finalAttrs: {
   pname = "mongosh";
-  version = "2.5.6";
+  version = "2.5.7";
 
   src = fetchFromGitHub {
     owner = "mongodb-js";
     repo = "mongosh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QK2woc6tlnTwYCZ7QEWCn2bRknye2qY8AYAHMVR9i24=";
+    hash = "sha256-yrL4TVTMnRabg05hwT9mGqtOSYmrg4gfaRA0RkDF/8Q=";
   };
 
-  npmDepsHash = "sha256-TfakEOiCtoRz2Fhwz5teOWq0OLb7uZaYiKHLSq/c1OU=";
+  npmDepsHash = "sha256-WqF/rgNmuxJj93rFXgngjXiOYTQBYWopN17yRI61WHE=";
 
   patches = [
     ./disable-telemetry.patch

pkgs/by-name/mo/morgen/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "morgen";
-  version = "3.6.16";
+  version = "3.6.17";
 
   src = fetchurl {
     name = "morgen-${version}.deb";
     url = "https://dl.todesktop.com/210203cqcj00tw1/versions/${version}/linux/deb";
-    hash = "sha256-j1iv37b7erKOgvKU7R9GaTRNtcQpS4n9Awnni4OLvus=";
+    hash = "sha256-k1JaAYE63bLMwTBH+TmhHa8KBY5YL12GhXrRS0WiilA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ne/nexusmods-app/deps.json

···
     "hash": "sha256-oVkQB+ON7S6Q27OhXrTLaxTL0kWB58HZaFFuiw4iTrE="
   },
   {
-    "pname": "Clarp",
-    "version": "0.2.0",
-    "hash": "sha256-S+qdaIlEDl7Jz8lwI6yaO0Ee8zAqvo+T+hbt7vQ13eo="
-  },
-  {
     "pname": "CliWrap",
     "version": "3.6.7",
     "hash": "sha256-9j3GILP25inLJoQe0E8sF8egVt8ISqEQBGdIShev4Mk="
···
     "pname": "DiffPlex",
     "version": "1.7.2",
     "hash": "sha256-Vsn81duAmPIPkR40h5bEz7hgtF5Kt5nAAGhQZrQbqxE="
+  },
+  {
+    "pname": "DuckDB.NativeBinaries",
+    "version": "1.3.2",
+    "hash": "sha256-wHFmXCpJI44wr1mgybl+4QKhX+CwME9+Smzhi5G9G4w="
   },
   {
     "pname": "DynamicData",
···
     "hash": "sha256-3IEinVTZq6/aajMVA8XTRO3LTIEt0PuhGyITGJLtqz4="
   },
   {
+    "pname": "Microsoft.CodeAnalysis.Common",
+    "version": "4.9.2",
+    "hash": "sha256-QU/nyiJWpdPQGHBdaOEVc+AghnGHcKBFBX0oyhRZ9CQ="
+  },
+  {
     "pname": "Microsoft.CodeAnalysis.CSharp",
     "version": "3.8.0",
     "hash": "sha256-i/r3V/No/VzqmJlWxpGoirvlbJDbBPa/ONZtzYrxuc4="
···
     "pname": "Microsoft.CodeAnalysis.CSharp",
     "version": "4.8.0",
     "hash": "sha256-MmOnXJvd/ezs5UPcqyGLnbZz5m+VedpRfB+kFZeeqkU="
+  },
+  {
+    "pname": "Microsoft.CodeAnalysis.CSharp",
+    "version": "4.9.2",
+    "hash": "sha256-j06Q4A9E65075SBXdXVCMRgeLxA63Rv1vxarydmmVAA="
   },
   {
     "pname": "Microsoft.CodeAnalysis.CSharp.SourceGenerators.Testing",
···
   },
   {
     "pname": "Microsoft.Extensions.AmbientMetadata.Application",
-    "version": "9.4.0",
-    "hash": "sha256-9PpENMGcTwpxzJVGqKz3Bej+4PKGOeV+e+p3OusZSxc="
+    "version": "9.7.0",
+    "hash": "sha256-nRG56q5zBJ6is+qCJhuJPf4b6orz4fJ5uOF6bERUN5A="
   },
   {
     "pname": "Microsoft.Extensions.Compliance.Abstractions",
-    "version": "9.4.0",
-    "hash": "sha256-D6S6rrZg4B01a4b4C3A2GuaIAIo3BK9yQomnKD4nEa4="
+    "version": "9.7.0",
+    "hash": "sha256-a9ter/qJUM0GkzqIQqPXsTuiAG5cD/Hjj8pG2/Hlx/k="
   },
   {
     "pname": "Microsoft.Extensions.Configuration",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration",
-    "version": "9.0.4",
-    "hash": "sha256-01yWDq/dHgU1Trx2OqVsXK/yobwVTClJXB07LrPc8lU="
+    "version": "9.0.7",
+    "hash": "sha256-Su+YntNqtLuY0XEYo1vfQZ4sA0wrHu0ZrcM33blvHWI="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Abstractions",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Abstractions",
-    "version": "9.0.4",
-    "hash": "sha256-5hwq73FCWAJJ8Yb1VHaaryJJhUUiVsetPTrPLlo8N9o="
+    "version": "9.0.7",
+    "hash": "sha256-45ZR8liM/A6II+WPX9X6v9+g2auAKInPbVvY6a79VLk="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Binder",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "9.0.4",
-    "hash": "sha256-l+qlHrdrqgvnveSMCO4qQx1QObAe5lMl80a4Kc3idzw="
+    "version": "9.0.7",
+    "hash": "sha256-9iT3CPY6Vpwi1RCVwveHVteTgpAXloBAo8KCwIPsePg="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.CommandLine",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.CommandLine",
-    "version": "9.0.4",
-    "hash": "sha256-usXy7P5VIBusWSmI1WxpXwwDN404TTZveBoUAlJRWEQ="
+    "version": "9.0.7",
+    "hash": "sha256-L+emOXCVXAu2PNLLd1Bn/v/imrjLJsiAjvWmA0YPgGg="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.EnvironmentVariables",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.EnvironmentVariables",
-    "version": "9.0.4",
-    "hash": "sha256-9agLzJpXM8i24WSB2pIGaIkQL9fyuIBGK14a1jpH/Vk="
+    "version": "9.0.7",
+    "hash": "sha256-r1ndSWcgGv7f7twBcplfCHRdBtV4Z77TsVpfirSrZPk="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.FileExtensions",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.FileExtensions",
-    "version": "9.0.4",
-    "hash": "sha256-i6BP99iTLEVt7aSw2Fu0ogUnY6FlVMat+BMIlndHCkQ="
+    "version": "9.0.7",
+    "hash": "sha256-9+XLNylnsYd/IcLZfDyW/Q+nuYB51BQJeyA+ZMsKan0="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Json",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Json",
-    "version": "9.0.4",
-    "hash": "sha256-scTrZeY5CKX9kMcN7MYQPJVgEFwDTvO+JOk+G3wXrjs="
+    "version": "9.0.7",
+    "hash": "sha256-4lWXlwwGPgv3nrL5V890LPVKxSDM8w4UJYYQlSA28/M="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.UserSecrets",
···
   },
   {
     "pname": "Microsoft.Extensions.Configuration.UserSecrets",
-    "version": "9.0.4",
-    "hash": "sha256-gEYqIFucwNp+4paaEjNkiqGCDG09etqVa8UcclNU17g="
+    "version": "9.0.7",
+    "hash": "sha256-YvYQT27sflpwyklvtgLjc2tphvZSdMnpGDf92vkDrR8="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
···
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "9.0.4",
-    "hash": "sha256-ck7PqIL/3vodYky+d7YX218n+detOoEjZeMr1EqTFPg="
+    "version": "9.0.6",
+    "hash": "sha256-m5vMZj3q3hHQDla/bKbfEk1lUj55p4/bktaqIWAVFRs="
+  },
+  {
+    "pname": "Microsoft.Extensions.DependencyInjection",
+    "version": "9.0.7",
+    "hash": "sha256-/TCCT7WPZpEWP9E3M441y+SZsmdqQ/WMTgL+ce7p2hw="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
···
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "9.0.4",
-    "hash": "sha256-6WcGpsAYRhrpHloEom0oVP7Ff4Gh/O1XWJETJJ3LvEQ="
+    "version": "9.0.6",
+    "hash": "sha256-40rY38OwSqueIWr/KMvJX9u+vipN+AaRQ6eNCZLqrog="
+  },
+  {
+    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
+    "version": "9.0.7",
+    "hash": "sha256-Ltlh01iGj6641DaZSFif/2/2y3y9iFk7GEd+HuRnxPs="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.AutoActivation",
-    "version": "9.4.0",
-    "hash": "sha256-WHglu/2qRZotaBHfm77fB6hiEtbdZz/oyAOIK2OthOI="
+    "version": "9.7.0",
+    "hash": "sha256-vQcW1llTiPIlmzh/GZD3DtK1yh6wbz2IA79epDh3iNE="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics",
···
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics",
-    "version": "9.0.4",
-    "hash": "sha256-fmRuxerdHGVDFFJMpBv9DIzofBSxjLLsi1GvaGq1dUc="
+    "version": "9.0.7",
+    "hash": "sha256-3ju8IiGd0vjPTGLZ3o5kSlzZezGT80Xz0eDxUKXYkqE="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.Abstractions",
···
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.Abstractions",
-    "version": "9.0.4",
-    "hash": "sha256-VgBfZLr/tqAOCW3i8g8lTgdpLU/g5vHfcOUpyoQESig="
+    "version": "9.0.7",
+    "hash": "sha256-kQ+554vO7LEsZlkmwsnhaucVWAPQpzdvNHo0Q6EkCyI="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.ExceptionSummarization",
-    "version": "9.4.0",
-    "hash": "sha256-zWxwe1R7zc/w9lGvShf5LOHGlh6PMzTJA13lVEfObJw="
+    "version": "9.7.0",
+    "hash": "sha256-Q45y2ZmbfoAV1BEKJApYssjeHLT3P0Id046hSt23e/c="
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Abstractions",
···
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Abstractions",
-    "version": "9.0.4",
-    "hash": "sha256-OkAq+1NUG0d1Ww6zT/hZWcPB5+fCr8AJIWmkpX7CQxU="
+    "version": "9.0.7",
+    "hash": "sha256-e/oPQDche6WBSJlVwNIhSu4qknO2TmMMkhX+OqbYGFA="
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Physical",
···
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Physical",
-    "version": "9.0.4",
-    "hash": "sha256-whn/jRYaH56Lha20yChG5wgIllttTq2EtOwyDW+ZDO4="
+    "version": "9.0.7",
+    "hash": "sha256-L7XMdKdZa4UT01TKEjunha3RAK5BBi2E020wRbrvUOU="
   },
   {
     "pname": "Microsoft.Extensions.FileSystemGlobbing",
···
   },
   {
     "pname": "Microsoft.Extensions.FileSystemGlobbing",
-    "version": "9.0.4",
-    "hash": "sha256-lzNTCxATfJvnsl1hlAxhI4cibixYYBq99fK9b9tEo0A="
+    "version": "9.0.7",
+    "hash": "sha256-KjxkTcn1aNZUdoFb6v/xhdG92D5FmwdW2MFL1xAH1x8="
   },
   {
     "pname": "Microsoft.Extensions.Hosting",
···
   },
   {
     "pname": "Microsoft.Extensions.Hosting",
-    "version": "9.0.4",
-    "hash": "sha256-qb3bcAbLnBvc91p/+C6K7P8g2Fd9yRVvPOvIzGFSu/g="
+    "version": "9.0.7",
+    "hash": "sha256-viFduZ4bUscmz3XhqsQ63hzw4+46j9vTnYBL72Eekzo="
   },
   {
     "pname": "Microsoft.Extensions.Hosting.Abstractions",
···
   },
   {
     "pname": "Microsoft.Extensions.Hosting.Abstractions",
-    "version": "9.0.4",
-    "hash": "sha256-eEw2h6S0m8Wb52hWo/31uCA5NQbPn/7veYpzNhkzyl0="
+    "version": "9.0.7",
+    "hash": "sha256-TKWnynGXUb6Ka/q2gMsrOWQYMfaTnlzsATMJIQgltY4="
   },
   {
     "pname": "Microsoft.Extensions.Http",
···
   },
   {
     "pname": "Microsoft.Extensions.Http",
-    "version": "9.0.4",
-    "hash": "sha256-gciOa0FAKivI5f/dzbsbS5HniIx9TJ4BTeBZ9In+fAo="
+    "version": "9.0.7",
+    "hash": "sha256-+n+4Cyq4Du6NBB8TXbbwyiEOw11GqUCsgqHuYxhXwGo="
   },
   {
     "pname": "Microsoft.Extensions.Http.Diagnostics",
-    "version": "9.4.0",
-    "hash": "sha256-fLnehXzSv6+9LtK0sLh4XAu1n3WjBmKT3VpzSqlASVE="
+    "version": "9.7.0",
+    "hash": "sha256-iRhlbmVt2Ijz5KOMyFlFvykUxqHS86WwWAlw76Vj8zo="
   },
   {
     "pname": "Microsoft.Extensions.Http.Resilience",
-    "version": "9.4.0",
-    "hash": "sha256-l4psmvVkKu6+/rXbPDrrtGrzsmBIKFFED8suirggID8="
+    "version": "9.7.0",
+    "hash": "sha256-rqqM0wu3VZd6xArKcl710w3gNN7gBBgAGFkrcGI/I8Q="
   },
   {
     "pname": "Microsoft.Extensions.Logging",
···
   },
   {
     "pname": "Microsoft.Extensions.Logging",
-    "version": "9.0.4",
-    "hash": "sha256-Vj+NGOamKeuMrLNUWlVKFFkz7IKGIv6h1A5X4CK9D5E="
+    "version": "9.0.6",
+    "hash": "sha256-XFcRh5/aGtsNIUnEOLdusdpCVD7K6/6Ixwc2U/+a3c8="
+  },
+  {
+    "pname": "Microsoft.Extensions.Logging",
+    "version": "9.0.7",
+    "hash": "sha256-7n8guHFss8HPnJuAByfzn9ipguDz7dack/udL1uH3h0="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
···
     "hash": "sha256-n0ZRhQ7U/5Kv1hVqUXGoa5gfrhzcy77yFhfonjq6VFc="
   },
   {
+    "pname": "Microsoft.Extensions.Logging.Abstractions",
+    "version": "9.0.6",
+    "hash": "sha256-lhOMYT4+hua7SlgASGFBDhOkrNOsy35WyIxU3nVsD08="
+  },
+  {
+    "pname": "Microsoft.Extensions.Logging.Abstractions",
+    "version": "9.0.7",
+    "hash": "sha256-G8x9e+2D2FzUsYNkXHd4HKQ71iEv5njFiGlvS+7OXLQ="
+  },
+  {
     "pname": "Microsoft.Extensions.Logging.Configuration",
     "version": "8.0.0",
     "hash": "sha256-mzmstNsVjKT0EtQcdAukGRifD30T82BMGYlSu8k4K7U="
···
   },
   {
     "pname": "Microsoft.Extensions.Logging.Configuration",
-    "version": "9.0.4",
-    "hash": "sha256-WzinyQZzj7ty00RrCGsGxwDYJlsta74M5UP0ajGTWCE="
+    "version": "9.0.7",
+    "hash": "sha256-ZgS/4d6hmFtCLWdBL4DtlEFXV84295jWJrgzUPQ1IVI="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Console",
···
   },
   {
     "pname": "Microsoft.Extensions.Logging.Console",
-    "version": "9.0.4",
-    "hash": "sha256-tofh2lKZm+FvMp0Fx9JOXltOpDSutbGLhspdAM27USQ="
+    "version": "9.0.7",
+    "hash": "sha256-KUsy31YvvO8CTwHoNw4DbBOp+/o2sYscvQL7fvCPUvQ="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Debug",
···
   },
   {
     "pname": "Microsoft.Extensions.Logging.Debug",
-    "version": "9.0.4",
-    "hash": "sha256-W1L3jKzyeyTli94+N/Di3YtYtfv9usDFdtEnJUzvF+c="
+    "version": "9.0.7",
+    "hash": "sha256-i9BN2CvK4f5X8WFSeyaeXO5znFArIsCFIZQuIM4BtYE="
   },
   {
     "pname": "Microsoft.Extensions.Logging.EventLog",
···
   },
   {
     "pname": "Microsoft.Extensions.Logging.EventLog",
-    "version": "9.0.4",
-    "hash": "sha256-TQkN+RM5qSHMM4WxXTbEbK5I2j8aBoC/3YvtjBA0gG8="
+    "version": "9.0.7",
+    "hash": "sha256-prMqE+YP+o7P3eIlPFEhTlkBktCFFbgcO1xq3Z3GFfc="
   },
   {
     "pname": "Microsoft.Extensions.Logging.EventSource",
···
   },
   {
     "pname": "Microsoft.Extensions.Logging.EventSource",
-    "version": "9.0.4",
-    "hash": "sha256-fp+/DPSm7gb34634p7ADtMQh8ascCE8ny0A1fCDdQfY="
+    "version": "9.0.7",
+    "hash": "sha256-EMltfPMFkNWKNedONLi2JNB1YX/4khIfK6us5p/uQr0="
   },
   {
     "pname": "Microsoft.Extensions.ObjectPool",
···
   },
   {
     "pname": "Microsoft.Extensions.ObjectPool",
-    "version": "9.0.3",
-    "hash": "sha256-Zj4N4naWNIf6BDI5r6xIILCilgrEKHJ5z4rkoQ4gjg4="
-  },
-  {
-    "pname": "Microsoft.Extensions.ObjectPool",
-    "version": "9.0.4",
-    "hash": "sha256-HRBRlPBdEiTOX2qddbWlen+jjM6TM+rgqhAqxRSaxTU="
+    "version": "9.0.7",
+    "hash": "sha256-ZpWn5yt4dLFKFMKN+yqSzEWKHmtKpPmHJnLMKmWNZ0A="
   },
   {
     "pname": "Microsoft.Extensions.Options",
···
   },
   {
     "pname": "Microsoft.Extensions.Options",
-    "version": "9.0.4",
-    "hash": "sha256-QyjtRCG+L9eyH/UWHf/S+7/ZiSOmuGNoKGO9nlXmjxI="
+    "version": "9.0.6",
+    "hash": "sha256-QXLt+WeCjH3pnbs0UVNXmskuWJtBrbNHOV8Of8w3teg="
+  },
+  {
+    "pname": "Microsoft.Extensions.Options",
+    "version": "9.0.7",
+    "hash": "sha256-nfUnZxx1tKERUddNNyxhGTK7VDTNZIJGYkiOWSHCt/M="
   },
   {
     "pname": "Microsoft.Extensions.Options.ConfigurationExtensions",
···
   },
   {
     "pname": "Microsoft.Extensions.Options.ConfigurationExtensions",
-    "version": "9.0.4",
-    "hash": "sha256-fhI6GGzVC5edaS/QEdl+2WL8/P6u/+wyq9nkLW17X64="
+    "version": "9.0.7",
+    "hash": "sha256-96ycmW7aMb9i0GFXoLVUlb0cc3IIpYXRJ3Pymz/QJi4="
   },
   {
     "pname": "Microsoft.Extensions.Primitives",
···
     "hash": "sha256-v/Ygyo1TMTUbnhdQSV2wzD4FOgAEWd1mpESo3kZ557g="
   },
   {
+    "pname": "Microsoft.Extensions.Primitives",
+    "version": "9.0.6",
+    "hash": "sha256-hO2BmhEhL5sJUv0cf37jhsjr+gRCAJnQKOj38RKxJvo="
+  },
+  {
+    "pname": "Microsoft.Extensions.Primitives",
+    "version": "9.0.7",
+    "hash": "sha256-Vv1EuoBSfjCJ7EKzxh10/nA/rpaFU8D8+bdZZQWzw2I="
+  },
+  {
     "pname": "Microsoft.Extensions.Resilience",
-    "version": "9.4.0",
-    "hash": "sha256-ahNIEfyenOgVm/a7zWzYvgHMl0kf1RlLAXMRadc3ZCI="
+    "version": "9.7.0",
+    "hash": "sha256-uty6qx0B9huC3hse2Yv5yF4zHlYYVtOXavHl3x/77fo="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry",
-    "version": "9.4.0",
-    "hash": "sha256-1hF+rot1+hQji9LR4PWnZvhJ+0iEtE6sW9UcUiRhTfA="
+    "version": "9.7.0",
+    "hash": "sha256-2J7ZkaEiJrEwo95VgY3xncLM8Asxw87WisfQXKcLmxY="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry.Abstractions",
-    "version": "9.4.0",
-    "hash": "sha256-md9dBTjdENsjAAKy56hmdNXO+5R4yQXFTDuWOipWNxQ="
+    "version": "9.7.0",
+    "hash": "sha256-b6Gj39kXrD2Uvtc958xOmS5nTQau7jsR+mJTjqhUtO8="
   },
   {
     "pname": "Microsoft.Extensions.TimeProvider.Testing",
-    "version": "9.4.0",
-    "hash": "sha256-9aIlvFzLlmisl4WrG05+qimoJgtNySTZHnKn3wOf6nQ="
+    "version": "9.7.0",
+    "hash": "sha256-pP/kan3lcJmF+owvLoT99KdenMwR75I74UeRAJXlZr0="
   },
   {
     "pname": "Microsoft.Net.Http.Headers",
···
   },
   {
     "pname": "Microsoft.NETCore.Platforms",
+    "version": "2.1.2",
+    "hash": "sha256-gYQQO7zsqG+OtN4ywYQyfsiggS2zmxw4+cPXlK+FB5Q="
+  },
+  {
+    "pname": "Microsoft.NETCore.Platforms",
     "version": "5.0.0",
     "hash": "sha256-LIcg1StDcQLPOABp4JRXIs837d7z0ia6+++3SF3jl1c="
   },
···
     "hash": "sha256-jDOCZ6VWPqcKE6gqqAdkyLL3G2g6pbG78mpMRhgYx2o="
   },
   {
-    "pname": "NexusMods.Cascade",
-    "version": "0.16.0",
-    "hash": "sha256-TybY3XW0/crQT4pTbHCW7VsAdoTGLTU/GwAxVfxv4uc="
-  },
-  {
-    "pname": "NexusMods.Cascade.SourceGenerator",
-    "version": "0.16.0",
-    "hash": "sha256-fc6Gvf0e1pVZSJvyUJcZQUAsIXh3K9xXSn/3UHeOhZc="
-  },
-  {
     "pname": "NexusMods.Hashing.xxHash3",
     "version": "3.0.4",
     "hash": "sha256-QXqRjwLcIXD4nTJrxkhp+/2WEkGjjJgE8Zi3bX/4Y9M="
···
     "hash": "sha256-n5cVzPcTl0f3iGRFqxr2hP8MXIUQPcAizmDfnmDEAGk="
   },
   {
+    "pname": "NexusMods.HyperDuck",
+    "version": "0.20.0",
+    "hash": "sha256-VGMQHuEVNgbQtHNkgVwbqKrfgtlS6nc2eWfcr2aDdlg="
+  },
+  {
     "pname": "NexusMods.MnemonicDB",
-    "version": "0.17.0",
-    "hash": "sha256-1BAprdtAvVRfA5fpKV3BxpW7PIkSXWbWnUI70uTzk6k="
+    "version": "0.20.0",
+    "hash": "sha256-kMav1mmEFAsNSEdAa4OaEwAt0DuozyzVVmMVHCjcyJU="
   },
   {
     "pname": "NexusMods.MnemonicDB.Abstractions",
-    "version": "0.17.0",
-    "hash": "sha256-eXGPNioGdwhjYhCjV7Aj2vwS2lcMOHxNWfIL9Ww5+NM="
+    "version": "0.20.0",
+    "hash": "sha256-+BCvfhNCMNguq+2NTHyOj8hSF/cC7/krl4BOTIumm0c="
   },
   {
     "pname": "NexusMods.MnemonicDB.SourceGenerator",
-    "version": "0.17.0",
-    "hash": "sha256-TDHxCFa8qWfHD80utMZpD4DWkz0O3MJA3nQAtQgpdFI="
+    "version": "0.20.0",
+    "hash": "sha256-ckWPWMzeekNC977ccGhtqvG9kC6q9yZBx3O8KU/yr4k="
   },
   {
     "pname": "NexusMods.Paths",
···
     "hash": "sha256-k+1dgCZEuEO8xVfdwGKec+FgE//FX1xqIyiyPGYypF0="
   },
   {
+    "pname": "Nito.AsyncEx",
+    "version": "5.1.2",
+    "hash": "sha256-9o4YLWAHSeApF4E/qNFyaZPh/V9N5JSeF32uquukb5I="
+  },
+  {
+    "pname": "Nito.AsyncEx.Context",
+    "version": "5.1.2",
+    "hash": "sha256-7BCVYJgZyU2/Z4r8CKajorlzajr6GBUBAbY3AcswPC0="
+  },
+  {
+    "pname": "Nito.AsyncEx.Coordination",
+    "version": "5.1.2",
+    "hash": "sha256-NHMnIBkGzzuoZL0qHKAwFC35doB08IDvmCQptC2uu2s="
+  },
+  {
+    "pname": "Nito.AsyncEx.Interop.WaitHandles",
+    "version": "5.1.2",
+    "hash": "sha256-1DgBWnkYggWQk0w2g7Y24Ogl7TJ7bQkc/0NIUFJzN00="
+  },
+  {
+    "pname": "Nito.AsyncEx.Oop",
+    "version": "5.1.2",
+    "hash": "sha256-1hnCagbt6SLbn+RpasWdBH3pLvqm8kC2Ut2iG75OUMM="
+  },
+  {
+    "pname": "Nito.AsyncEx.Tasks",
+    "version": "5.1.2",
+    "hash": "sha256-W5jxZZ0pbPHte6TkWTq4FDtHOejvlrdyb1Inw+Yhl4c="
+  },
+  {
+    "pname": "Nito.Cancellation",
+    "version": "1.1.2",
+    "hash": "sha256-oZKZUymYJiM2AfMpX4pX0FIlut0lEWdy250iVX0w+is="
+  },
+  {
+    "pname": "Nito.Collections.Deque",
+    "version": "1.1.1",
+    "hash": "sha256-6Pmz6XQ+rY32O21Z3cUDVQsLH+i53LId18UCPTAxRZQ="
+  },
+  {
+    "pname": "Nito.Disposables",
+    "version": "2.2.1",
+    "hash": "sha256-FKDLUWysqroSHLU2kLjK1m0g417AAPh6n2TIkwiapcM="
+  },
+  {
     "pname": "NLog",
     "version": "5.2.8",
     "hash": "sha256-IrCChiy703DRIebN//M4wwXW7gayuCVD/dHKXCoQcPw="
···
   },
   {
     "pname": "ObservableCollections",
-    "version": "3.3.3",
-    "hash": "sha256-HH/xNIVQpvlWONL8RChuaeW2l6zC47Xx/JNSE5/JRR4="
+    "version": "3.3.4",
+    "hash": "sha256-/4SPmTazrQcF5IW/kT0ZYyDwOCWAPGmFUVywCrvDgxs="
   },
   {
     "pname": "ObservableCollections.R3",
-    "version": "3.3.3",
-    "hash": "sha256-9Zh9wjEHPi0qvix7elMGbrQkbe47cmtFLw2e/Wz5rK8="
+    "version": "3.3.4",
+    "hash": "sha256-oOQ7j/U2XnMsooMTs8VenoiuupoixfXcJmppYy8/5tI="
   },
   {
     "pname": "OneOf",
···
   },
   {
     "pname": "Splat",
-    "version": "15.2.22",
-    "hash": "sha256-GSD6XrFYlYj6jkmI7Z4bYCcRIQCRAyzcuVWHmAll5K4="
+    "version": "15.4.1",
+    "hash": "sha256-qmp9aNmSSGQjrt9womxfC786nxeafH66okaBk0LXnhw="
   },
   {
     "pname": "Splat.Microsoft.Extensions.Logging",
-    "version": "15.2.22",
-    "hash": "sha256-4QO7NAcOqTDxwsheB2wyXRdH626JylEbahQaKWKZpIc="
+    "version": "15.4.1",
+    "hash": "sha256-W5ycBz7V31+XkxROu3G7J8WDw3gfSWUwIuRXvPOkwsU="
   },
   {
     "pname": "SteamKit2",
···
   },
   {
     "pname": "System.CodeDom",
-    "version": "4.4.0",
-    "hash": "sha256-L1xyspJ8pDJNVPYKl+FMGf4Zwm0tlqtAyQCNW6pT6/0="
-  },
-  {
-    "pname": "System.CodeDom",
     "version": "5.0.0",
     "hash": "sha256-UNqyPrK9eshU5kgJukvPamkaxLAp9BmR/J22OjEX+pM="
   },
···
   },
   {
     "pname": "System.Collections.Immutable",
+    "version": "1.7.1",
+    "hash": "sha256-WMMAUqoxT3J1gW9DI8v31VAuhwqTc4Posose5jq1BNo="
+  },
+  {
+    "pname": "System.Collections.Immutable",
     "version": "5.0.0",
     "hash": "sha256-GdwSIjLMM0uVfE56VUSLVNgpW0B//oCeSFj8/hSlbM8="
   },
···
     "hash": "sha256-F7OVjKNwpqbUh8lTidbqJWYi476nsq9n+6k0+QVRo3w="
   },
   {
+    "pname": "System.Collections.Immutable",
+    "version": "9.0.6",
+    "hash": "sha256-aqQxYZfza+pSNrwazdGldlECSkuUTQLWGhIdEk7/2xw="
+  },
+  {
     "pname": "System.CommandLine",
     "version": "2.0.0-beta4.22272.1",
     "hash": "sha256-zSO+CYnMH8deBHDI9DHhCPj79Ce3GOzHCyH1/TiHxcc="
···
   },
   {
     "pname": "System.Diagnostics.EventLog",
-    "version": "9.0.4",
-    "hash": "sha256-afF72ywJo/vfJXt2XiI8Lf2zKcvn0F/p280P1w3Fmk4="
+    "version": "9.0.7",
+    "hash": "sha256-bc0v/V0Qs3ENMlK/oGOkvUtP6jj3fMQOiF6Jk2NQUwM="
   },
   {
     "pname": "System.Diagnostics.Tools",
···
   },
   {
     "pname": "System.IO.Pipelines",
-    "version": "9.0.4",
-    "hash": "sha256-4E3H0n6UloSxvN41xi7hltJb9+hfaFbqwb/eOQOfNsI="
+    "version": "9.0.7",
+    "hash": "sha256-jCnYjyjJeTReO7ySPm1A1VIRNoac5/eMN2q9IGGGEh0="
   },
   {
     "pname": "System.Linq",
···
     "pname": "System.Runtime",
     "version": "4.3.0",
     "hash": "sha256-51813WXpBIsuA6fUtE5XaRQjcWdQ2/lmEokJt97u0Rg="
+  },
+  {
+    "pname": "System.Runtime.CompilerServices.Unsafe",
+    "version": "4.4.0",
+    "hash": "sha256-SeTI4+yVRO2SmAKgOrMni4070OD+Oo8L1YiEVeKDyig="
+  },
+  {
+    "pname": "System.Runtime.CompilerServices.Unsafe",
+    "version": "4.5.2",
+    "hash": "sha256-8eUXXGWO2LL7uATMZye2iCpQOETn2jCcjUhG6coR5O8="
   },
   {
     "pname": "System.Runtime.CompilerServices.Unsafe",

pkgs/by-name/ne/nexusmods-app/game-hashes/default.nix

···
 { fetchurl }:
 let
-  release = "ved4b249e2c35952c";
+  release = "v1a75cea1c1f2efc6";
   owner = "Nexus-Mods";
   repo = "game-hashes";
   repoURL = "https://github.com/${owner}/${repo}";
···
   # Define a binding so that `update-source-version` can find it
   src = fetchurl {
     url = "${repoURL}/releases/download/${release}/game_hashes_db.zip";
-    hash = "sha256-9xJ8yfLRkIV0o++NHK2igd2l83/tsgWc5cuwZO2zseY=";
+    hash = "sha256-LvVOp4vbLwae0CM0CukFoXeNRn0FKXjIhHgbxYwnGnI=";
     passthru = {
       inherit
         src # Also for `update-source-version` support

pkgs/by-name/ne/nexusmods-app/package.nix

···
 in
 buildDotnetModule (finalAttrs: {
   inherit pname;
-  version = "0.15.2";
+  version = "0.16.4";
 
   src = fetchgit {
     url = "https://github.com/Nexus-Mods/NexusMods.App.git";
     rev = "refs/tags/v${finalAttrs.version}";
-    hash = "sha256-WI6ulYDPOBGGt3snimCHswuIaII1aWNT/TZqvJxrQRQ=";
+    hash = "sha256-9Xy5SWwjVWYlbt33meVGFDF96Cx66DXOyECEF47/kSo=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/ne/nexusmods-app/vendored/game-ids.nix

···
   "Baldur's Gate 3" = 3474;
   "Cyberpunk 2077" = 3333;
   "Mount & Blade II: Bannerlord" = 3174;
+  "Skyrim Special Edition" = 1704;
   "Stardew Valley" = 1303;
   # keep-sorted end
 }

pkgs/by-name/ne/nexusmods-app/vendored/games.json

···
     "forum_url": "https://forums.nexusmods.com/games/19-stardew-valley/",
     "nexusmods_url": "https://www.nexusmods.com/stardewvalley",
     "genre": "Simulation",
-    "file_count": 137612,
-    "downloads": 592183501,
+    "file_count": 139050,
+    "downloads": 600849301,
     "domain_name": "stardewvalley",
     "approved_date": 1457432329,
-    "mods": 24655,
-    "collections": 3570
+    "mods": 25015,
+    "collections": 2014
+  },
+  {
+    "id": 1704,
+    "name": "Skyrim Special Edition",
+    "name_lower": "skyrim special edition",
+    "forum_url": "https://forums.nexusmods.com/games/6-skyrim/",
+    "nexusmods_url": "https://www.nexusmods.com/skyrimspecialedition",
+    "genre": "RPG",
+    "file_count": 645252,
+    "downloads": 8778903191,
+    "domain_name": "skyrimspecialedition",
+    "approved_date": 1477480498,
+    "mods": 115650,
+    "collections": 4780
   },
   {
     "id": 3174,
···
     "forum_url": "https://forums.nexusmods.com/games/9-mount-blade-ii-bannerlord/",
     "nexusmods_url": "https://www.nexusmods.com/mountandblade2bannerlord",
     "genre": "Strategy",
-    "file_count": 49182,
-    "downloads": 111421397,
+    "file_count": 49470,
+    "downloads": 112381081,
     "domain_name": "mountandblade2bannerlord",
     "approved_date": 1582898627,
-    "mods": 6136,
-    "collections": 321
+    "mods": 6180,
+    "collections": 283
   },
   {
     "id": 3333,
···
     "forum_url": "https://forums.nexusmods.com/games/1-cyberpunk-2077/",
     "nexusmods_url": "https://www.nexusmods.com/cyberpunk2077",
     "genre": "Action",
-    "file_count": 118327,
-    "downloads": 825382927,
+    "file_count": 120069,
+    "downloads": 850033001,
     "domain_name": "cyberpunk2077",
     "approved_date": 1607433331,
-    "mods": 16707,
-    "collections": 1910
+    "mods": 16998,
+    "collections": 1559
   },
   {
     "id": 3474,
···
     "forum_url": "https://forums.nexusmods.com/games/2-baldurs-gate-3/",
     "nexusmods_url": "https://www.nexusmods.com/baldursgate3",
     "genre": "RPG",
-    "file_count": 100954,
-    "downloads": 325304689,
+    "file_count": 101960,
+    "downloads": 332531245,
     "domain_name": "baldursgate3",
     "approved_date": 1602863114,
-    "mods": 14186,
-    "collections": 3703
+    "mods": 14347,
+    "collections": 1788
   }
 ]

pkgs/by-name/op/opensoundmeter/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "opensoundmeter";
-  version = "1.5";
+  version = "1.5.1";
 
   src = fetchFromGitHub {
     owner = "psmokotnin";
     repo = "osm";
     rev = "v${version}";
-    hash = "sha256-mwtAlQ+2NsmSDuih8LQpFy1b3WaFYtmS1yuUE9Iv/50=";
+    hash = "sha256-Yj/1XbQQtAWub+ZPFAtyFyAgjdjX+sCvIL7W2dnEc4s=";
   };
 
   patches = [ ./build.patch ];

pkgs/by-name/po/postfix-tlspol/package.nix

···
 
 buildGoModule rec {
   pname = "postfix-tlspol";
-  version = "1.8.16";
+  version = "1.8.18";
 
   src = fetchFromGitHub {
     owner = "Zuplu";
     repo = "postfix-tlspol";
     tag = "v${version}";
-    hash = "sha256-Yndu5QpPxAVbkatJDa1yqkEfnJr5M5lLImtMKvt9juQ=";
+    hash = "sha256-ijFKFvdmA1ZHOc3r89yalVSO/tMy9Rzeu1VTgdZLlxI=";
   };
 
   vendorHash = null;

pkgs/by-name/pu/pulumi-esc/package.nix

···
 
 buildGoModule rec {
   pname = "pulumi-esc";
-  version = "0.17.0";
+  version = "0.18.0";
 
   src = fetchFromGitHub {
     owner = "pulumi";
     repo = "esc";
     rev = "v${version}";
-    hash = "sha256-rdoq+Zx+NVJZrVon/OfJIAvEyCWEawSHRLxLBUFR9uY=";
+    hash = "sha256-oxeH7SF2ANCTSdD8GnGmhbB37UOpBSOFo5p81lIw+zU=";
   };
 
   subPackages = "cmd/esc";
 
-  vendorHash = "sha256-q/uY9834Z8lyPmuUxgsk5FgiHnv8EykS7ljdN1XtW8M=";
+  vendorHash = "sha256-IcQaWo5/EoPJjn5pDKwHjd56JeareznE7iSansJIfso=";
 
   ldflags = [
     "-s"

pkgs/by-name/re/readsb/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "readsb";
-  version = "3.14.1696";
+  version = "3.16.1";
 
   src = fetchFromGitHub {
     owner = "wiedehopf";
     repo = "readsb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NStX7GwYffXlvoj30ZReVlUHGUSnAZRXdasMYj6C0Dk=";
+    hash = "sha256-7xhTfrJ1NB3omNyHnw49ts3QTt6uZ31GYeD5l3UxuTU=";
   };
 
   strictDeps = true;

pkgs/by-name/ro/roxctl/package.nix

···
 
 buildGoModule rec {
   pname = "roxctl";
-  version = "4.8.2";
+  version = "4.8.3";
 
   src = fetchFromGitHub {
     owner = "stackrox";
     repo = "stackrox";
     rev = version;
-    sha256 = "sha256-5k1i17zji76JybVGbYsyBOmL2pZvD1li3+AdzXFrWpU=";
+    sha256 = "sha256-fDPw7EA3pRiqpl/5zE3kO07lECvmamfaWT+GH9FXPRU=";
   };
 
   vendorHash = "sha256-Mra4hfg5nW/8CSQK/h6nnsZhN2GLdMg14kBvkFW3Y0w=";

pkgs/by-name/sa/sabnzbd/package.nix

···
 }:
 
 let
-  sabctoolsVersion = "8.2.5";
-  sabctoolsHash = "sha256-ZEC813/JpGPEFL+nXKFAXFfUrrhECCIqONe27LwS00g=";
+  sabctoolsVersion = "8.2.6";
+  sabctoolsHash = "sha256-olZSIjfP2E1tkCG8WzEZfrBJuDEp3PZyFFE5LJODEZE=";
 
   pythonEnv = python3.withPackages (
     ps: with ps; [
···
   ];
 in
 stdenv.mkDerivation rec {
-  version = "4.5.2";
+  version = "4.5.3";
   pname = "sabnzbd";
 
   src = fetchFromGitHub {
     owner = "sabnzbd";
     repo = "sabnzbd";
     rev = version;
-    hash = "sha256-8Q/6H9DfiVkonsIvlv7Y4yDHrvpE9dB/5KxUff14qkA=";
+    hash = "sha256-RFvWk+K/5gXMSO4jPOxkl7f+tnMvz+0u4NWPTUEv4dg=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/sc/scala-cli/sources.json

···
 {
-  "version": "1.8.5",
+  "version": "1.9.0",
   "assets": {
     "aarch64-darwin": {
       "asset": "scala-cli-aarch64-apple-darwin.gz",
-      "sha256": "1r2b46nbfzn4m18jgicnc13ipw469xij91s9gzb4xjv77fslbng6"
+      "sha256": "18iyr4k2nwihnn1rkpd0qj90czn0ff6hr9637kra93hn4rnb565p"
     },
     "aarch64-linux": {
       "asset": "scala-cli-aarch64-pc-linux.gz",
-      "sha256": "1yci9zjyv1ssdgc0kk6gk3yrb2j3jzryxvm5jk6hv0z4swiy6nvv"
+      "sha256": "0b7ra7r0xvglhn28s52g6qdzma36maqdm4d4s14kvi6svjlzg19s"
     },
     "x86_64-darwin": {
       "asset": "scala-cli-x86_64-apple-darwin.gz",
-      "sha256": "0abj0w47ycajc342avrzyw957qjm26lmhsc7612k5s9s892cfkgn"
+      "sha256": "1m0kjah1dgwfsj24l27g9wcjj6j4qcv7a14126xd276lv0imj4hk"
     },
     "x86_64-linux": {
       "asset": "scala-cli-x86_64-pc-linux.gz",
-      "sha256": "1270asc9abijvasmiscy4gr58m903p3mr6qizpjblxnaz5dj1b5r"
+      "sha256": "0mfg8swxglhwvn8q291lav2kik5ciw9l0g2q3xqzwkpl8chvmhp9"
     }
   }
 }

pkgs/by-name/se/seagoat/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "seagoat";
-  version = "1.0.25";
+  version = "1.0.26";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kantord";
     repo = "SeaGOAT";
     tag = "v${version}";
-    hash = "sha256-Qg4sYp2glD7TI6MjqTGFFDlwpLdy7apckTUT29NSK6k=";
+    hash = "sha256-XXKLvm3sEYgfLojtYKI3i8o3HERdH4+FRSo28FBqONg=";
   };
 
   build-system = [ python3Packages.poetry-core ];

pkgs/by-name/sh/shadowsocks-v2ray-plugin/package.nix

···
 
 buildGoModule rec {
   pname = "shadowsocks-v2ray-plugin";
-  version = "1.3.1";
-  # Version 1.3.2 has runtime failures with Go 1.19
-  # https://github.com/NixOS/nixpkgs/issues/219343
-  # https://github.com/shadowsocks/v2ray-plugin/issues/292
-  # nixpkgs-update: no auto update
+  version = "1.3.2-unstable-2025-09-05";
 
   src = fetchFromGitHub {
     owner = "shadowsocks";
     repo = "v2ray-plugin";
-    rev = "v${version}";
-    hash = "sha256-iwfjINY/NQP9poAcCHz0ETxu0Nz58AmD7i1NbF8hBCs=";
+    rev = "e9af1cdd2549d528deb20a4ab8d61c5fbe51f306";
+    hash = "sha256-VkyK+Ee+RJkBixHiduFP2ET18fDNXuOf8x3h1LN9pbY=";
   };
 
-  vendorHash = "sha256-3/1te41U4QQTMeoA1y43QMfJyiM5JhaLE0ORO8ZO7W8=";
+  vendorHash = "sha256-FSYv2jC0NU21GtqRkPHjxPcdmXbiIiOM1HsL8x44gZw=";
 
-  meta = with lib; {
+  meta = {
     description = "Yet another SIP003 plugin for shadowsocks, based on v2ray";
     homepage = "https://github.com/shadowsocks/v2ray-plugin/";
-    license = licenses.mit;
-    maintainers = [ maintainers.ahrzb ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      ahrzb
+      neverbehave
+    ];
     mainProgram = "v2ray-plugin";
   };
 }

pkgs/by-name/sn/snx-rs/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "snx-rs";
-  version = "4.6.0";
+  version = "4.7.0";
 
   src = fetchFromGitHub {
     owner = "ancwrd1";
     repo = "snx-rs";
     tag = "v${version}";
-    hash = "sha256-KfN4lyBngatjk1e3DYabz+sruX/NjELg0psktMb8Pew=";
+    hash = "sha256-P5lGSG/U8sJey9WTGn9l13ozcOo/5dlCt0B8pJeVRtw=";
   };
 
   passthru.updateScript = nix-update-script { };
···
     versionCheckHook
   ];
 
-  cargoHash = "sha256-QMfQqy9VV3GF4ZWmzeWe+xGHYcvAxJUFg3QSCEMgS9E=";
+  cargoHash = "sha256-Mds5j996zOhCA6lySma6zwTJkZHQhIQ00wM76uNKhGw=";
 
   doInstallCheck = true;
   versionCheckProgram = "${placeholder "out"}/bin/snx-rs";

pkgs/by-name/tr/trinity/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "trinity";
-  version = "1.9-unstable-2024-09-19";
+  version = "1.9-unstable-2025-09-02";
 
   src = fetchFromGitHub {
     owner = "kernelslacker";
     repo = "trinity";
-    rev = "ba2360ed84a8c521d9c34af9c909315ea7c62aad";
-    hash = "sha256-lj27EtMzj+ULrAJh27rjiuL3/SzW/NRMG65l8sBi8k4=";
+    rev = "294c46522620afffd7b57af7ef743131ff55a488";
+    hash = "sha256-Fm9bwJ/ofDgSbe/YUgl22Rf0F+NCV32xLPA2kw36zFs=";
   };
 
   postPatch = ''

pkgs/by-name/vi/video-compare/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "video-compare";
-  version = "20250824";
+  version = "20250825";
 
   src = fetchFromGitHub {
     owner = "pixop";
     repo = "video-compare";
     tag = version;
-    hash = "sha256-4gJIit0GcjYKPZUFoKbMufA1UcfXexBncDUHX3IOqes=";
+    hash = "sha256-4sfRTb/FkGL3WdJMW6P9H/EHW5oTw+GTQZhKrWS+ptM=";
   };
 
   postPatch = ''

pkgs/by-name/vt/vtk-dicom/package.nix

···
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  vtk,
+  gdcm,
+  testers,
+  vtk-dicom,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "vtk-dicom";
+  version = "0.8.17";
+
+  src = fetchFromGitHub {
+    owner = "dgobbi";
+    repo = "vtk-dicom";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1lI2qsV4gymWqjeouEHZ5FRlmlh9vimH7J5rzA+eOds=";
+  };
+
+  nativeBuildInputs = [ cmake ];
+
+  buildInputs = [
+    vtk
+    gdcm
+  ];
+
+  cmakeFlags = [
+    (lib.cmakeBool "USE_GDCM" true)
+    (lib.cmakeBool "DICOM_VERSIONED_INSTALL" false)
+    (lib.cmakeBool "BUILD_SHARED_LIBS" (!stdenv.hostPlatform.isStatic))
+    (lib.cmakeFeature "CMAKE_INSTALL_BINDIR" "bin")
+    (lib.cmakeFeature "CMAKE_INSTALL_LIBDIR" "lib")
+    (lib.cmakeFeature "CMAKE_INSTALL_INCLUDEDIR" "include")
+  ]
+  ++ lib.optional finalAttrs.finalPackage.doCheck [
+    # vtkBool does not accept TRUE, we have to use STRING "ON"
+    (lib.cmakeFeature "BUILD_TESTING" "ON")
+  ];
+
+  doCheck = true;
+
+  passthru.tests = {
+    python = vtk-dicom.override {
+      vtk = vtk.override { pythonSupport = true; };
+    };
+
+    cmake-config = testers.hasCmakeConfigModules {
+      moduleNames = [ "DICOM" ];
+      package = finalAttrs.finalPackage;
+    };
+  };
+
+  meta = {
+    description = "DICOM for VTK";
+    homepage = "https://github.com/dgobbi/vtk-dicom";
+    changelog = "https://github.com/dgobbi/vtk-dicom/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [
+      qbisi
+      bcdarwin
+    ];
+    platforms = lib.platforms.unix;
+  };
+})

pkgs/by-name/wa/wakapi/package.nix

···
 {
   lib,
-  buildGoModule,
+  buildGoLatestModule,
   fetchFromGitHub,
   nixosTests,
   nix-update-script,
 }:
 let
-  version = "2.14.1";
+  version = "2.15.0";
 in
-buildGoModule {
+buildGoLatestModule {
   pname = "wakapi";
   inherit version;
 
···
     owner = "muety";
     repo = "wakapi";
     tag = version;
-    hash = "sha256-ujHrb9yXUbUYB0JGftrdTfEeFakgwGJ7EH6e1KnyrnI=";
+    hash = "sha256-tRLZV8vZEvPq5hsUhj5h3AtSGvYXm1SXc+w3CRZFIRU=";
   };
 
-  vendorHash = "sha256-eaaU8vqTpgtSSfaaFDg4Bo06lTjvqLkVuidkq25tjb4=";
+  vendorHash = "sha256-912x6LwitYXdjWpP75Xoc56JXadeLQZuESSyLoaJcU0=";
 
   # Not a go module required by the project, contains development utilities
   excludedPackages = [ "scripts" ];

pkgs/by-name/zu/zuban/package.nix

···
+{
+  fetchFromGitHub,
+  lib,
+  rustPlatform,
+  versionCheckHook,
+  nix-update-script,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zuban";
+
+  version = "0.0.21";
+
+  src = fetchFromGitHub {
+    owner = "zubanls";
+    repo = "zuban";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-llAJwqJmOtauA7pi7dYZhVH0yFBNN65q2y8ecc9hAJY=";
+  };
+
+  buildAndTestSubdir = "crates/zuban";
+
+  cargoHash = "sha256-sZFc+kjerR7a6JzVb0zQXCfYuJVNnoYUihgLd3qrDLM=";
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Mypy-compatible Python Language Server built in Rust";
+    homepage = "https://zubanls.com";
+    # There's no changelog file yet, but they post updates on their blog.
+    changelog = "https://zubanls.com/blog/";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [
+      mcjocobe
+    ];
+    platforms = lib.platforms.all;
+    mainProgram = "zuban";
+  };
+})

pkgs/development/libraries/opencv/4.x.nix

···
     ;
   inherit (lib.trivial) flip;
 
-  version = "4.11.0";
+  version = "4.12.0";
 
   # It's necessary to consistently use backendStdenv when building with CUDA
   # support, otherwise we get libstdc++ errors downstream
···
     owner = "opencv";
     repo = "opencv";
     tag = version;
-    hash = "sha256-oiU4CwoMfuUbpDtujJVTShMCzc5GsnIaprC4DzkSzEM=";
+    hash = "sha256-TZdEeZyBY3vCI53g4VDMzl3AASMuXAZKrSH/+XlxR7c=";
   };
 
   contribSrc = fetchFromGitHub {

pkgs/development/libraries/vtk/generic.nix

···
   libgeotiff,
   laszip_2,
   gdal,
-  gdcm,
   pdal,
   alembic,
   imath,
···
     hash = sourceSha256;
   };
 
-  postPatch =
-    let
-      vtk-dicom = fetchFromGitHub {
-        owner = "dgobbi";
-        repo = "vtk-dicom";
-        tag = "v0.8.17";
-        hash = "sha256-1lI2qsV4gymWqjeouEHZ5FRlmlh9vimH7J5rzA+eOds=";
-      };
-    in
-    ''
-      cp --no-preserve=mode -r ${vtk-dicom} ./Remote/vtkDICOM
-    '';
-
   nativeBuildInputs = [
     cmake
     pkg-config # required for finding MySQl
···
     libgeotiff
     laszip_2
     gdal
-    (gdcm.override { enableVTK = false; })
     pdal
     alembic
     imath
···
     # mpiSupport
     (lib.cmakeBool "VTK_USE_MPI" mpiSupport)
     (vtkBool "VTK_GROUP_ENABLE_MPI" mpiSupport)
-
-    # Remote module options
-    (lib.cmakeBool "USE_GDCM" true) # for vtkDicom
   ];
 
   pythonImportsCheck = [ "vtk" ];

pkgs/development/python-modules/aiohue/default.nix

···
 
 buildPythonPackage rec {
   pname = "aiohue";
-  version = "4.7.4";
+  version = "4.7.5";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
···
     owner = "home-assistant-libs";
     repo = "aiohue";
     tag = version;
-    hash = "sha256-+vvdv8/rAoMdtH6XN9tq4zOLboTuz3CqruN2KkEMv+c=";
+    hash = "sha256-RHWgjugWYJVbzAFhb1bOrm33jZ3MQjkFqUMH+27a6Zw=";
   };
 
   postPatch = ''

pkgs/development/python-modules/bimmer-connected/default.nix

···
 
 buildPythonPackage rec {
   pname = "bimmer-connected";
-  version = "0.17.2";
+  version = "0.17.3";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "bimmerconnected";
     repo = "bimmer_connected";
     tag = version;
-    hash = "sha256-49Lryp9xBiQK1Jb+CVPvH2Z2yzAsbYsZwgkkEhVjrPQ=";
+    hash = "sha256-XKKMOKvZO6CrAioflyhTWZrNJv1+5yqYPFL4Al8YPY8=";
   };
 
   build-system = [

pkgs/development/python-modules/colored/default.nix

···
 
 buildPythonPackage rec {
   pname = "colored";
-  version = "2.2.3";
+  version = "2.3.1";
   format = "pyproject";
 
   src = fetchFromGitLab {
     owner = "dslackw";
     repo = "colored";
     rev = "refs/tags/${version}";
-    hash = "sha256-4APFAIN+cmPPd6qbqVC9iU4YntNEjoPbJXZywG1hsBY=";
+    hash = "sha256-PPaPw7pCZJeBz6h5omZ+kcRXsqi6ncLYGM7FNfZ0r4w=";
   };
 
   nativeBuildInputs = [ flit-core ];

pkgs/development/python-modules/dissect-esedb/default.nix

···
 
 buildPythonPackage rec {
   pname = "dissect-esedb";
-  version = "3.16";
+  version = "3.17";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "fox-it";
     repo = "dissect.esedb";
     tag = version;
-    hash = "sha256-jLv62/3U89sbmcHAA2YYwVPLlLj85nMn4PRE565ppw4=";
+    hash = "sha256-ioF3zszlYu82Zm/VDEewiWkAWsOe5sxAo41xXuwuCZk=";
   };
 
   build-system = [

pkgs/development/python-modules/django-lasuite/default.nix

···
 
 buildPythonPackage rec {
   pname = "django-lasuite";
-  version = "0.0.12";
+  version = "0.0.14";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "suitenumerique";
     repo = "django-lasuite";
     tag = "v${version}";
-    hash = "sha256-cSDNDc8AmiuviVUlV3RhsbhsLF1LbsIkSrw6suTu5zk=";
+    hash = "sha256-v4VSiZf/gpCrD/YGcEQpj6mYJUaxatqktwI+NL+oF7A=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/http-message-signatures/default.nix

···
   buildPythonPackage,
   cryptography,
   fetchFromGitHub,
-  http-sfv,
   pytestCheckHook,
   pythonOlder,
-  setuptools-scm,
+  hatchling,
+  hatch-vcs,
   requests,
 }:
 
 buildPythonPackage rec {
   pname = "http-message-signatures";
   version = "1.0.0";
-  format = "setuptools";
+  pyproject = true;
 
-  disabled = pythonOlder "3.7";
+  disabled = pythonOlder "3.8";
 
   src = fetchFromGitHub {
     owner = "pyauth";
···
     hash = "sha256-vPZeAS3hR7Bmj2FtME+V9WU3TViBndrBb9GLkdMVh2Q=";
   };
 
-  nativeBuildInputs = [ setuptools-scm ];
+  build-system = [
+    hatchling
+    hatch-vcs
+  ];
 
-  propagatedBuildInputs = [
+  dependencies = [
     cryptography
-    http-sfv
   ];
 
   nativeCheckInputs = [
···
 
   pythonImportsCheck = [ "http_message_signatures" ];
 
-  meta = with lib; {
+  meta = {
     description = "Requests authentication module for HTTP Signature";
     homepage = "https://github.com/pyauth/http-message-signatures";
-    license = licenses.asl20;
-    maintainers = with maintainers; [ fab ];
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
   };
 }

pkgs/development/python-modules/imeon-inverter-api/default.nix

···
 
 buildPythonPackage rec {
   pname = "imeon-inverter-api";
-  version = "0.3.14";
+  version = "0.3.16";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Imeon-Inverters-for-Home-Assistant";
     repo = "inverter-api";
     tag = version;
-    hash = "sha256-zjG9rcKdV+o5M3yIRaxz93sP3u4Vfs8JhSSYzKdQi2I=";
+    hash = "sha256-zaGmzp9uOzjtDxca1EWGKQ/PYsKqMldv5mnxQlwfcX4=";
   };
 
   build-system = [ pdm-pep517 ];

pkgs/development/python-modules/millheater/default.nix

···
   async-timeout,
   buildPythonPackage,
   fetchFromGitHub,
+  pyjwt,
   pythonOlder,
   setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "millheater";
-  version = "0.12.5";
+  version = "0.13.1";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
···
     owner = "Danielhiversen";
     repo = "pymill";
     tag = version; # https://github.com/Danielhiversen/pymill/issues/87
-    hash = "sha256-DGMG6LabfKGmQ6MDm/skqeQuOhSlr1ssZ2Z7fItzOt0=";
+    hash = "sha256-fdKMX85uo5L/1ko5aXHzLcWbr24StzRV38jjEbeRRkw=";
   };
 
   build-system = [ setuptools ];
···
   dependencies = [
     aiohttp
     async-timeout
+    pyjwt
   ];
 
   # Project has no tests

pkgs/development/python-modules/notion-client/default.nix

···
 
 buildPythonPackage rec {
   pname = "notion-client";
-  version = "2.4.0";
+  version = "2.5.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "ramnes";
     repo = "notion-sdk-py";
     tag = version;
-    hash = "sha256-vzgFW37pA4LRS+Rqz1QN92EuLTrlWnJqA/H+IhSHQi8=";
+    hash = "sha256-5SuSfjKs5+2lAVyzK3JVk1naiaYYYBF+X2I+k53Fqx4=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/ohme/default.nix

···
 
 buildPythonPackage rec {
   pname = "ohme";
-  version = "1.5.1";
+  version = "1.5.2";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "dan-r";
     repo = "ohmepy";
     tag = "v${version}";
-    hash = "sha256-71uehQEiTTvcBPoNLNYvsE1vgp4vn3AZgGQCYrxtuYs=";
+    hash = "sha256-r3pu+HAQc8hXF2aMuWuE151Lz4rbrVti8YBrm4CS8z4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pyannote-pipeline/default.nix

···
 
 buildPythonPackage rec {
   pname = "pyannote-pipeline";
-  version = "3.0.1";
+  version = "3.1.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pyannote";
     repo = "pyannote-pipeline";
     tag = version;
-    hash = "sha256-0wSgy6kbKi9Wa5dimOz34IV5/8fSwaHDMUpaBW7tm2Y=";
+    hash = "sha256-MMMwZMxu8viUt2DgCgymbz2vEMM9TT0ySKL2KPzAPLA=";
   };
 
   postPatch = ''

pkgs/development/python-modules/pyschlage/default.nix

···
 
 buildPythonPackage rec {
   pname = "pyschlage";
-  version = "2025.7.3";
+  version = "2025.9.0";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "dknowles2";
     repo = "pyschlage";
     tag = version;
-    hash = "sha256-6IY+rCz/tMaj+c2ME8g9KzdYcakW2rcgM9DFHJSF3Jc=";
+    hash = "sha256-ROLtRN/J6LdL67CQ/Ui60RLMLNStb1CZlvQGt8xerOA=";
   };
 
   build-system = [

pkgs/development/python-modules/smolagents/default.nix

···
 
 buildPythonPackage rec {
   pname = "smolagents";
-  version = "1.21.2";
+  version = "1.21.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "smolagents";
     tag = "v${version}";
-    hash = "sha256-sm0G8z5Jaes8XybxeAUiRh3LVuzvnGaem5FLkcA5Qls=";
+    hash = "sha256-X9tJfNxF2icULyma0dWIQEllY9oKaCB+MQ4JJTdzhz4=";
   };
 
   # TODO: remove at the next release

pkgs/development/python-modules/zcc-helper/default.nix

···
 
 buildPythonPackage rec {
   pname = "zcc-helper";
-  version = "3.6";
+  version = "3.7";
   pyproject = true;
 
   src = fetchFromBitbucket {
     owner = "mark_hannon";
     repo = "zcc";
     rev = "release_${version}";
-    hash = "sha256-93zSEGr5y00+heuG0hTME+BkLQBUmHnXXMH12ktMtM4=";
+    hash = "sha256-KMa0RfG3cT1sw5ujnecYtx+A4qjujUPiq6pM3PwNSLM=";
   };
 
   build-system = [ setuptools ];
···
   ];
 
   meta = {
+    changelog = "https://bitbucket.org/mark_hannon/zcc/src/${src.rev}/CHANGELOG.md";
     description = "ZIMI ZCC helper module";
     homepage = "https://bitbucket.org/mark_hannon/zcc";
     license = lib.licenses.mit;

pkgs/misc/arm-trusted-firmware/build-arm-trusted-firmware.nix

···
-{
-  buildPackages,
-  fetchFromGitHub,
-  lib,
-  openssl,
-  pkgsCross,
-  stdenv,
-
-  # Warning: this blob (hdcp.bin) runs on the main CPU (not the GPU) at
-  # privilege level EL3, which is above both the kernel and the
-  # hypervisor.
-  #
-  # This parameter applies only to platforms which are believed to use
-  # hdcp.bin. On all other platforms, or if unfreeIncludeHDCPBlob=false,
-  # hdcp.bin will be deleted before building.
-  unfreeIncludeHDCPBlob ? true,
-}:
-
-lib.extendMkDerivation {
-  constructDrv = stdenv.mkDerivation;
-
-  excludeDrvArgNames = [ "extraMeta" ];
-
-  extendDrvArgs =
-    finalAttrs:
-    {
-      filesToInstall,
-      installDir ? "$out",
-      platform ? null,
-      platformCanUseHDCPBlob ? false, # set this to true if the platform is able to use hdcp.bin
-      ...
-    }@args:
-
-    # delete hdcp.bin if either: the platform is thought to
-    # not need it or unfreeIncludeHDCPBlob is false
-    let
-      deleteHDCPBlobBeforeBuild = !platformCanUseHDCPBlob || !unfreeIncludeHDCPBlob;
-    in
-    {
-      pname = "arm-trusted-firmware${lib.optionalString (platform != null) "-${platform}"}";
-      version = args.version or "2.13.0";
-
-      src =
-        args.src or (fetchFromGitHub {
-          owner = "ARM-software";
-          repo = "arm-trusted-firmware";
-          tag = "v${finalAttrs.version}";
-          hash = "sha256-rxm5RCjT/MyMCTxiEC8jQeFMrCggrb2DRbs/qDPXb20=";
-        });
-
-      patches =
-        lib.optionals deleteHDCPBlobBeforeBuild [
-          # this is a rebased version of https://gitlab.com/vicencb/kevinboot/-/blob/master/atf.patch
-          ./remove-hdcp-blob.patch
-        ]
-        ++ args.patches or [ ];
-
-      postPatch =
-        lib.optionalString deleteHDCPBlobBeforeBuild ''
-          rm plat/rockchip/rk3399/drivers/dp/hdcp.bin
-        ''
-        + args.postPatch or "";
-
-      depsBuildBuild = [ buildPackages.stdenv.cc ] ++ args.depsBuildBuild or [ ];
-
-      nativeBuildInputs = [
-        pkgsCross.arm-embedded.stdenv.cc # For Cortex-M0 firmware in RK3399
-        openssl # For fiptool
-      ]
-      ++ args.nativeBuildInputs or [ ];
-
-      # Make the new toolchain guessing (from 2.11+) happy
-      # https://github.com/ARM-software/arm-trusted-firmware/blob/4ec2948fe3f65dba2f19e691e702f7de2949179c/make_helpers/toolchains/rk3399-m0.mk#L21-L22
-      rk3399-m0-oc = "${pkgsCross.arm-embedded.stdenv.cc.targetPrefix}objcopy";
-
-      buildInputs = [ openssl ] ++ args.buildInputs or [ ];
-
-      makeFlags = [
-        "HOSTCC=$(CC_FOR_BUILD)"
-        "M0_CROSS_COMPILE=${pkgsCross.arm-embedded.stdenv.cc.targetPrefix}"
-        "CROSS_COMPILE=${stdenv.cc.targetPrefix}"
-        # Make the new toolchain guessing (from 2.11+) happy
-        "CC=${stdenv.cc.targetPrefix}cc"
-        "LD=${stdenv.cc.targetPrefix}cc"
-        "AS=${stdenv.cc.targetPrefix}cc"
-        "OC=${stdenv.cc.targetPrefix}objcopy"
-        "OD=${stdenv.cc.targetPrefix}objdump"
-        # Passing OpenSSL path according to docs/design/trusted-board-boot-build.rst
-        "OPENSSL_DIR=${openssl}"
-      ]
-      ++ (lib.optional (platform != null) "PLAT=${platform}")
-      ++ args.makeFlags or [ ]
-      ++ (lib.warnIf (args ? extraMakeFlags)
-        "buildArmTrustedFirmware now accepts `makeFlags`, please switch from using `extraMakeFlags` to `makeFlags`"
-        args.extraMakeFlags or [ ]
-      );
-
-      installPhase = ''
-        runHook preInstall
-
-        mkdir -p ${installDir}
-        cp ${lib.concatStringsSep " " filesToInstall} ${installDir}
-
-        runHook postInstall
-      '';
-
-      hardeningDisable = [ "all" ];
-      dontStrip = true;
-
-      # breaks secondary CPU bringup on at least RK3588, maybe others
-      env.NIX_CFLAGS_COMPILE = "-fomit-frame-pointer";
-
-      meta = {
-        homepage = "https://github.com/ARM-software/arm-trusted-firmware";
-        description = "Reference implementation of secure world software for ARMv8-A";
-        license = [
-          lib.licenses.bsd3
-        ]
-        ++ lib.optionals (!deleteHDCPBlobBeforeBuild) [ lib.licenses.unfreeRedistributable ];
-        maintainers = [ lib.maintainers.lopsided98 ];
-      }
-      // (args.meta or { })
-      // (lib.warnIf (args ? extraMeta)
-        "buildArmTrustedFirmware now accepts `meta`, please switch from using `extraMeta` to `meta`"
-        args.extraMeta or { }
-      );
-    };
-}

pkgs/misc/arm-trusted-firmware/default.nix

···
-{ buildArmTrustedFirmware, stdenv }:
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  fetchFromGitLab,
+  openssl,
+  pkgsCross,
+  buildPackages,
+
+  # Warning: this blob (hdcp.bin) runs on the main CPU (not the GPU) at
+  # privilege level EL3, which is above both the kernel and the
+  # hypervisor.
+  #
+  # This parameter applies only to platforms which are believed to use
+  # hdcp.bin. On all other platforms, or if unfreeIncludeHDCPBlob=false,
+  # hdcp.bin will be deleted before building.
+  unfreeIncludeHDCPBlob ? true,
+}:
 
+let
+  buildArmTrustedFirmware = lib.makeOverridable (
+    {
+      filesToInstall,
+      installDir ? "$out",
+      platform ? null,
+      platformCanUseHDCPBlob ? false, # set this to true if the platform is able to use hdcp.bin
+      extraMakeFlags ? [ ],
+      extraMeta ? { },
+      ...
+    }@args:
+
+    # delete hdcp.bin if either: the platform is thought to
+    # not need it or unfreeIncludeHDCPBlob is false
+    let
+      deleteHDCPBlobBeforeBuild = !platformCanUseHDCPBlob || !unfreeIncludeHDCPBlob;
+    in
+
+    stdenv.mkDerivation (
+      rec {
+
+        pname = "arm-trusted-firmware${lib.optionalString (platform != null) "-${platform}"}";
+        version = "2.13.0";
+
+        src = fetchFromGitHub {
+          owner = "ARM-software";
+          repo = "arm-trusted-firmware";
+          tag = "v${version}";
+          hash = "sha256-rxm5RCjT/MyMCTxiEC8jQeFMrCggrb2DRbs/qDPXb20=";
+        };
+
+        patches = lib.optionals deleteHDCPBlobBeforeBuild [
+          # this is a rebased version of https://gitlab.com/vicencb/kevinboot/-/blob/master/atf.patch
+          ./remove-hdcp-blob.patch
+        ];
+
+        postPatch = lib.optionalString deleteHDCPBlobBeforeBuild ''
+          rm plat/rockchip/rk3399/drivers/dp/hdcp.bin
+        '';
+
+        depsBuildBuild = [ buildPackages.stdenv.cc ];
+
+        nativeBuildInputs = [
+          pkgsCross.arm-embedded.stdenv.cc # For Cortex-M0 firmware in RK3399
+          openssl # For fiptool
+        ];
+
+        # Make the new toolchain guessing (from 2.11+) happy
+        # https://github.com/ARM-software/arm-trusted-firmware/blob/4ec2948fe3f65dba2f19e691e702f7de2949179c/make_helpers/toolchains/rk3399-m0.mk#L21-L22
+        rk3399-m0-oc = "${pkgsCross.arm-embedded.stdenv.cc.targetPrefix}objcopy";
+
+        buildInputs = [ openssl ];
+
+        makeFlags = [
+          "HOSTCC=$(CC_FOR_BUILD)"
+          "M0_CROSS_COMPILE=${pkgsCross.arm-embedded.stdenv.cc.targetPrefix}"
+          "CROSS_COMPILE=${stdenv.cc.targetPrefix}"
+          # Make the new toolchain guessing (from 2.11+) happy
+          "CC=${stdenv.cc.targetPrefix}cc"
+          "LD=${stdenv.cc.targetPrefix}cc"
+          "AS=${stdenv.cc.targetPrefix}cc"
+          "OC=${stdenv.cc.targetPrefix}objcopy"
+          "OD=${stdenv.cc.targetPrefix}objdump"
+          # Passing OpenSSL path according to docs/design/trusted-board-boot-build.rst
+          "OPENSSL_DIR=${openssl}"
+        ]
+        ++ (lib.optional (platform != null) "PLAT=${platform}")
+        ++ extraMakeFlags;
+
+        installPhase = ''
+          runHook preInstall
+
+          mkdir -p ${installDir}
+          cp ${lib.concatStringsSep " " filesToInstall} ${installDir}
+
+          runHook postInstall
+        '';
+
+        hardeningDisable = [ "all" ];
+        dontStrip = true;
+
+        # breaks secondary CPU bringup on at least RK3588, maybe others
+        env.NIX_CFLAGS_COMPILE = "-fomit-frame-pointer";
+
+        meta =
+          with lib;
+          {
+            homepage = "https://github.com/ARM-software/arm-trusted-firmware";
+            description = "Reference implementation of secure world software for ARMv8-A";
+            license = [
+              licenses.bsd3
+            ]
+            ++ lib.optionals (!deleteHDCPBlobBeforeBuild) [ licenses.unfreeRedistributable ];
+            maintainers = with maintainers; [ lopsided98 ];
+          }
+          // extraMeta;
+      }
+      // builtins.removeAttrs args [ "extraMeta" ]
+    )
+  );
+
+in
 {
+  inherit buildArmTrustedFirmware;
+
   armTrustedFirmwareTools = buildArmTrustedFirmware {
-    makeFlags = [
+    # Normally, arm-trusted-firmware builds the build tools for buildPlatform
+    # using CC_FOR_BUILD (or as it calls it HOSTCC). Since want to build them
+    # for the hostPlatform here, we trick it by overriding the HOSTCC setting
+    # and, to be safe, remove CC_FOR_BUILD from the environment.
+    depsBuildBuild = [ ];
+    extraMakeFlags = [
       "HOSTCC=${stdenv.cc.targetPrefix}gcc"
       "fiptool"
       "certtool"
···
     '';
   };
 
-  armTrustedFirmwareAllwinner = buildArmTrustedFirmware (finalAttrs: {
+  armTrustedFirmwareAllwinner = buildArmTrustedFirmware rec {
     platform = "sun50i_a64";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31.bin" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31.bin" ];
+  };
 
-  armTrustedFirmwareAllwinnerH616 = buildArmTrustedFirmware (finalAttrs: {
+  armTrustedFirmwareAllwinnerH616 = buildArmTrustedFirmware rec {
     platform = "sun50i_h616";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31.bin" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31.bin" ];
+  };
 
-  armTrustedFirmwareAllwinnerH6 = buildArmTrustedFirmware (finalAttrs: {
+  armTrustedFirmwareAllwinnerH6 = buildArmTrustedFirmware rec {
     platform = "sun50i_h6";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31.bin" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31.bin" ];
+  };
 
-  armTrustedFirmwareQemu = buildArmTrustedFirmware (finalAttrs: {
+  armTrustedFirmwareQemu = buildArmTrustedFirmware rec {
     platform = "qemu";
-    meta.platforms = [ "aarch64-linux" ];
+    extraMeta.platforms = [ "aarch64-linux" ];
     filesToInstall = [
-      "build/${finalAttrs.platform}/release/bl1.bin"
-      "build/${finalAttrs.platform}/release/bl2.bin"
-      "build/${finalAttrs.platform}/release/bl31.bin"
+      "build/${platform}/release/bl1.bin"
+      "build/${platform}/release/bl2.bin"
+      "build/${platform}/release/bl31.bin"
     ];
-  });
+  };
 
-  armTrustedFirmwareRK3328 = buildArmTrustedFirmware (finalAttrs: {
-    makeFlags = [ "bl31" ];
+  armTrustedFirmwareRK3328 = buildArmTrustedFirmware rec {
+    extraMakeFlags = [ "bl31" ];
     platform = "rk3328";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31/bl31.elf" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31/bl31.elf" ];
+  };
 
-  armTrustedFirmwareRK3399 = buildArmTrustedFirmware (finalAttrs: {
-    makeFlags = [ "bl31" ];
+  armTrustedFirmwareRK3399 = buildArmTrustedFirmware rec {
+    extraMakeFlags = [ "bl31" ];
     platform = "rk3399";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31/bl31.elf" ];
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31/bl31.elf" ];
     platformCanUseHDCPBlob = true;
-  });
+  };
 
-  armTrustedFirmwareRK3568 = buildArmTrustedFirmware (finalAttrs: {
-    makeFlags = [ "bl31" ];
+  armTrustedFirmwareRK3568 = buildArmTrustedFirmware rec {
+    extraMakeFlags = [ "bl31" ];
     platform = "rk3568";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31/bl31.elf" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31/bl31.elf" ];
+  };
 
-  armTrustedFirmwareRK3588 = buildArmTrustedFirmware (finalAttrs: {
-    makeFlags = [ "bl31" ];
+  armTrustedFirmwareRK3588 = buildArmTrustedFirmware rec {
+    extraMakeFlags = [ "bl31" ];
     platform = "rk3588";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31/bl31.elf" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31/bl31.elf" ];
+  };
 
-  armTrustedFirmwareS905 = buildArmTrustedFirmware (finalAttrs: {
-    makeFlags = [ "bl31" ];
+  armTrustedFirmwareS905 = buildArmTrustedFirmware rec {
+    extraMakeFlags = [ "bl31" ];
     platform = "gxbb";
-    meta.platforms = [ "aarch64-linux" ];
-    filesToInstall = [ "build/${finalAttrs.platform}/release/bl31.bin" ];
-  });
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "build/${platform}/release/bl31.bin" ];
+  };
 }

pkgs/servers/home-assistant/component-packages.nix

···
 # Do not edit!
 
 {
-  version = "2025.9.0";
+  version = "2025.9.1";
   components = {
     "3_day_blinds" =
       ps: with ps; [

pkgs/servers/home-assistant/default.nix

···
   extraBuildInputs = extraPackages python.pkgs;
 
   # Don't forget to run update-component-packages.py after updating
-  hassVersion = "2025.9.0";
+  hassVersion = "2025.9.1";
 
 in
 python.pkgs.buildPythonApplication rec {
···
     owner = "home-assistant";
     repo = "core";
     tag = version;
-    hash = "sha256-/94D+yp6FhVnZ7GgL1qsxiwVvFiMg/cR+g66u98TgQE=";
+    hash = "sha256-nHXUv27zoI/48b1a+Bx/VWT2sdgowflFzm49oFGZXNA=";
   };
 
   # Secondary source is pypi sdist for translations
   sdist = fetchPypi {
     inherit pname version;
-    hash = "sha256-8q+43C7O2z3ICbeaHHCZ4rCtF3YxrsiAkEV493Fs7fw=";
+    hash = "sha256-mXwawBBMdjnUcfBn5WnRtgEsVD/RVohem2njNXj16IU=";
   };
 
   build-system = with python.pkgs; [

pkgs/servers/home-assistant/frontend.nix

···
   # the frontend version corresponding to a specific home-assistant version can be found here
   # https://github.com/home-assistant/home-assistant/blob/master/homeassistant/components/frontend/manifest.json
   pname = "home-assistant-frontend";
-  version = "20250903.2";
+  version = "20250903.3";
   format = "wheel";
 
   src = fetchPypi {
···
     pname = "home_assistant_frontend";
     dist = "py3";
     python = "py3";
-    hash = "sha256-fUWcdChQ3Hti76/48gNE9HdwOHXPCQ1fP2ccYVo5Tls=";
+    hash = "sha256-qIBmg+IZJ5SyAqZldUUxZys1UsEun5oL6d3SjG7U2dk=";
   };
 
   # there is nothing to strip in this package

pkgs/servers/home-assistant/stubs.nix

···
 
 buildPythonPackage rec {
   pname = "homeassistant-stubs";
-  version = "2025.9.0";
+  version = "2025.9.1";
   pyproject = true;
 
   disabled = python.version != home-assistant.python.version;
···
     owner = "KapJI";
     repo = "homeassistant-stubs";
     tag = version;
-    hash = "sha256-QInUUbpTofpqldXPxyYv7JbUoGosLRvXfjSsF36tInc=";
+    hash = "sha256-EQQsnHlGlmbSDrCZQold0LY2N7m7zOL3X9E9gSO0bPA=";
   };
 
   build-system = [

pkgs/tools/admin/ibmcloud-cli/default.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "ibmcloud-cli";
-  version = "2.35.1";
+  version = "2.36.0";
 
   src = fetchurl {
     url = "https://download.clis.cloud.ibm.com/ibm-cloud-cli/${finalAttrs.version}/binaries/IBM_Cloud_CLI_${finalAttrs.version}_${platform}.tgz";
     hash =
       {
-        "x86_64-darwin" = "sha256-Vv2w0tnHflwwA9Ux5kLVi51RWXxQptUxNwbuPmOka/I=";
-        "aarch64-darwin" = "sha256-zFmhwIIgvczQS+66KRj4B1w7/ZIiTuShNuec6aCk6wE=";
-        "x86_64-linux" = "sha256-oOOjgS0wzbVrnAousO9Q9+AzM7oMM0w9iJYS4wDzJtI=";
-        "aarch64-linux" = "sha256-d6gf3sy+5MrX/59y2gOEQUmwUJhQTQ20uctUTN6lJTw=";
-        "i686-linux" = "sha256-b7l3JKBJ8ARD5/zLeWlE0cSPmtvvp3/q51Um8dPf6/I=";
-        "powerpc64le-linux" = "sha256-e1OoAksR9cc9NdzhMJT5KNO88iNGonN/2m9BDAhqQRQ=";
-        "s390x-linux" = "sha256-uBi/bnYMOioZmmXUEglBkam2ReGT282JGxmG3hndgjM=";
+        "x86_64-darwin" = "sha256-hIHFfUxAhpA+YIN7Bq65khFFj+3BCuYRtMq2WjQwqYQ=";
+        "aarch64-darwin" = "sha256-ZZ500RWagqhf63zwiQpV8y+gtCxGfbA36F97x67coUE=";
+        "x86_64-linux" = "sha256-+ZKlFvrDPm3ERq8/r7cjgsJWjUr8+sGFqYXdiSUPeXo=";
+        "aarch64-linux" = "sha256-ER/Ey3Jux3i8tC30/65awHdEd6efscUVjX/bFAk1b7c=";
+        "i686-linux" = "sha256-5A0kUegKVHSTZ+jRg5+07wvV4PkCvOPddvyC1ZLCbmI=";
+        "powerpc64le-linux" = "sha256-XcHrdA9i3Euc0yIjUtFrmIFMJi+onXRK+tHzNxmQwHg=";
+        "s390x-linux" = "sha256-loGQxvUqp9ngieVOVuZ6IhOKgyrVGBd+y9LdZtKEPwc=";
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
   };

pkgs/tools/admin/pulumi-bin/data.nix

···
 # DO NOT EDIT! This file is generated automatically by update.sh
 { }:
 {
-  version = "3.192.0";
+  version = "3.193.0";
   pulumiPkgs = {
     x86_64-linux = [
       {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.192.0-linux-x64.tar.gz";
-        sha256 = "1vpib37pj825vl1v2xp8vzg6fk84vhxsd0c38dljnqh5ypn9d60z";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.193.0-linux-x64.tar.gz";
+        sha256 = "1ssm227zph1ysi2dz1biash90xxdbs5advdb5x8j4qw1523rl40m";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.42.0-linux-amd64.tar.gz";
···
         sha256 = "1jql72iwqhxyk5z03fjals4581nf839nq9pjxzcjbvkq0fq3wa0i";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.83.0-linux-amd64.tar.gz";
-        sha256 = "1nh12zwz7qf5i67nbszhi4rbbgg0qyaz9vpdmvbpf70fkhmh7vv1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.84.0-linux-amd64.tar.gz";
+        sha256 = "0nr8lq20483v13m72ywmsvghkbw4icqf68cbpn5zrw0midi5lscy";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.9.0-linux-amd64.tar.gz";
···
         sha256 = "0b2qwl5481hj077svp9mf0jqf5d18vq7nnhwl4mikag7ddf2b9vn";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.5.2-linux-amd64.tar.gz";
-        sha256 = "0ivwl6j8ws22lhw4w94450pbri6lvxg3san1hy3bs2gdhp4p7xcz";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.6.0-linux-amd64.tar.gz";
+        sha256 = "1kvcw8163ghfnrdgc2rzvhfc9npfql7c2d6y6p32j6arwf7h2k4m";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.10.1-linux-amd64.tar.gz";
···
         sha256 = "00gkdgb6s0wqjl6m69sc8dz320aiy2s751qqn73894jyaqa8v9zk";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.54.0-linux-amd64.tar.gz";
-        sha256 = "1hw1d0jf31kqvcrc0nwi81gjfn06c38f5p5cdlk690dnf4zpb631";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.55.0-linux-amd64.tar.gz";
+        sha256 = "0y6ir92jqdm981gsmia9ak1c7n4w07jli0719cj6zvclzj5cqz59";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.52.0-linux-amd64.tar.gz";
···
         sha256 = "0hnardid0kbzy65dmn7vz8ddy5hq78nf2871zz6srf2hfyiv7qa4";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v10.1.1-linux-amd64.tar.gz";
-        sha256 = "17035warwa3grflkkq9bfscp86j9hia7qaarswm3h1cq1l9cmfj4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v11.0.0-linux-amd64.tar.gz";
+        sha256 = "0sm8gqay51g12l20n08pih9vhpm2b95aj71zj6nmqiq5gym89v6z";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v8.41.1-linux-amd64.tar.gz";
···
         sha256 = "08i1k8m59dp56lafx8b0ggmgxl7dfqv8f4nljy4dh95h3bs7fdl2";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.1.1-linux-amd64.tar.gz";
-        sha256 = "1l9kjc8xi2hfxskgczxn1a090zg38lpycx7c6kf709ffk5ymjvic";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.2.0-linux-amd64.tar.gz";
+        sha256 = "12ng3ql6grzbqhrqngs7dfn1wn2pj456k034q46pbmd2w7iy0jdk";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.5.11-linux-amd64.tar.gz";
···
     ];
     x86_64-darwin = [
       {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.192.0-darwin-x64.tar.gz";
-        sha256 = "055ya5ddf2b19h1gkzdyblzib0z7mspy1llp60bphbyn0z4sjkb5";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.193.0-darwin-x64.tar.gz";
+        sha256 = "1waq90b9m63fgj17s0xpxafdxrpp9qyjxpcdhwjqlfpnnbq4kpf5";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.42.0-darwin-amd64.tar.gz";
···
         sha256 = "1fi6y9y151b0c3389p2f7a3m28ay9ka0r57ynpnb8jawflgnx6bc";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.83.0-darwin-amd64.tar.gz";
-        sha256 = "0ib5rvlcfhlrm6racza5lckc0zjfy5m8v9baxvgkl9z5ys8ypf9m";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.84.0-darwin-amd64.tar.gz";
+        sha256 = "1zchdhnsc6f1q5q8nd1712k0rcs67qziliwbiw4inraw2l11njsh";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.9.0-darwin-amd64.tar.gz";
···
         sha256 = "0b2kl4818wh3wlw4nzl875x8m91f5vfg706pba5pdw3b59891n66";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.5.2-darwin-amd64.tar.gz";
-        sha256 = "09rn3w7fxkzf2g9rapk52c92039dfrrgx914pkcafg74cs3920ik";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.6.0-darwin-amd64.tar.gz";
+        sha256 = "1cdpx3540y3kp76ml1qi0awfzvm3172bzc76khdbsdcz9b8f3kb7";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.10.1-darwin-amd64.tar.gz";
···
         sha256 = "1n3afyncwk16cbkc8wch3370z08b2vabpvpp8g55xarhqvqk1qpz";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.54.0-darwin-amd64.tar.gz";
-        sha256 = "12yqra9njdkb1nlj7nj2ldinbs37pkslwz5vc11six6zdyh7l6np";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.55.0-darwin-amd64.tar.gz";
+        sha256 = "0zjpwsrg7d6isck6xc55c6nqdclk6a4avlsnbr9wiyrzn9kyqpss";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.52.0-darwin-amd64.tar.gz";
···
         sha256 = "1m5lh59h7nck1flzxs9m4n0ag0klk3jmnpf7hc509vffxs89xnjq";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v10.1.1-darwin-amd64.tar.gz";
-        sha256 = "0hk32m37xiiai14lnq9qc4xsrzr3i2vcvjjj48i909ag1l3c4xgq";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v11.0.0-darwin-amd64.tar.gz";
+        sha256 = "12yzgpz05pf1y401p94p063c2yj8i5mlmy5bxdd69n4537z17z02";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v8.41.1-darwin-amd64.tar.gz";
···
         sha256 = "1pdvqyfv4cn25h0hg830r2mv5d7g16032badf6f16azscdri81lv";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.1.1-darwin-amd64.tar.gz";
-        sha256 = "00f7ql3am9xmx3vqvv0sg6qrqzgmglngw29drr2rnzjl82m8kazn";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.2.0-darwin-amd64.tar.gz";
+        sha256 = "0bh5jkvzbprwi93gs5ra1hrgf152hxg2yw97148nvpkfripadkhi";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.5.11-darwin-amd64.tar.gz";
···
     ];
     aarch64-linux = [
       {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.192.0-linux-arm64.tar.gz";
-        sha256 = "146bgfz4ygqn9nlyh0bcl1yngfjqp2a42zjsrg3jdx0vba1gzc1h";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.193.0-linux-arm64.tar.gz";
+        sha256 = "1zs5radachwb3lfqa183r12ak249kj7khrrdcw3l8b33d2yj1dvi";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.42.0-linux-arm64.tar.gz";
···
         sha256 = "0dhcqkkmfvryy6smj972jr7z6qaq9kaw8qvlv68b9wgix126dp6s";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.83.0-linux-arm64.tar.gz";
-        sha256 = "0vca0ryw4542m087sxnnwqw3k3z4avbism2milgxz50vi19ysjb8";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.84.0-linux-arm64.tar.gz";
+        sha256 = "0ar11glj329wj64fqwbjwivk3xq893aa1hmnjq3700v8xg3caqdc";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.9.0-linux-arm64.tar.gz";
···
         sha256 = "0g6kmy5raalxm2wlai71sh70w6vvfgphh2x79fqwn4llmqmrbdvh";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.5.2-linux-arm64.tar.gz";
-        sha256 = "0gvqc91xd2sk2w5zmvy11m5a92kgry43sajvnlwd8hx04byhlw2s";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.6.0-linux-arm64.tar.gz";
+        sha256 = "17lndnmwmxshxz7n2zhgc07gr8cqfd06b1mgblyzbx8n2lc0x0sv";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.10.1-linux-arm64.tar.gz";
···
         sha256 = "15n44dya58sqpirhpiicp1x6w9x15qf94a6vamk2h6jbzpfi7c03";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.54.0-linux-arm64.tar.gz";
-        sha256 = "1rj4wgz9cbcl9pkm0h2i9ykxcjhdgdmcywc8i2p0p991f011jivv";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.55.0-linux-arm64.tar.gz";
+        sha256 = "0cbfxcxc4nnr87b54q3g0prcsf4wm0i6b2h2njj0fmg2z16c5pkg";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.52.0-linux-arm64.tar.gz";
···
         sha256 = "111pia2f5xwkwaqs6p90ri29l5b3ivmahsa1bji4fwyyjyp22h4r";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v10.1.1-linux-arm64.tar.gz";
-        sha256 = "0ij97gim1dmh73gfxwbj5l59bqhwindxp4r5sj59fmv7ps13d3k0";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v11.0.0-linux-arm64.tar.gz";
+        sha256 = "0f4bxwj7liyijbsqh0r43s823n02gvpkk0rdxwhg1li4d1mpsqxp";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v8.41.1-linux-arm64.tar.gz";
···
         sha256 = "0kqxz7y1n9zzpw3rv15kb55qvp14rvxh0vymddlrja7iqcvb8nd8";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.1.1-linux-arm64.tar.gz";
-        sha256 = "19hhlbdwx22yg0x5g6310z2mjsv0wfgwc420a5r6f40jr3fwfnyz";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.2.0-linux-arm64.tar.gz";
+        sha256 = "1v6114pywwz9kfxh5469v4hdjm0vysj93ny9wzcy7ivkcnj19hlm";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.5.11-linux-arm64.tar.gz";
···
     ];
     aarch64-darwin = [
       {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.192.0-darwin-arm64.tar.gz";
-        sha256 = "0pad07m4s04fmpbn7h1lq13zq5jxsbsry96135izr9ghk303wslm";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.193.0-darwin-arm64.tar.gz";
+        sha256 = "0gf8in5gcnzwkarnia71da27ypmacgfj0fphdb6hjy7mfd4z8w36";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.42.0-darwin-arm64.tar.gz";
···
         sha256 = "184s2cmnn8nn17bvkgbsxfhllc4bi86m1awa77n2rc7gcszj203h";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.83.0-darwin-arm64.tar.gz";
-        sha256 = "11yv21983xfpf2asc00ng48jxz0xfhrax0gyp20p6gri4alfj5xr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.84.0-darwin-arm64.tar.gz";
+        sha256 = "1xda796x88qgki6crqzqy60h2ddxs9n6axr7b8dbhrf2mssrk5lr";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.9.0-darwin-arm64.tar.gz";
···
         sha256 = "1i1xzsvpy60igksj9x25nn8b473hbhzg6whhjdk45ic8z8n5n5pq";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.5.2-darwin-arm64.tar.gz";
-        sha256 = "0vp65ccimrzhbg3h7rq1p18rjwhb2b4s0y90wvan22nsvwnv5b0p";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.6.0-darwin-arm64.tar.gz";
+        sha256 = "0b4srhyq2adbpzh74s0kcmfflayrk6c7jbq63s2l3zfq2zln4sbm";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.10.1-darwin-arm64.tar.gz";
···
         sha256 = "1lva9jp2fbz58gfgsdbwlyrdd60wpy1xy55af7f8dmabgcc8j391";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.54.0-darwin-arm64.tar.gz";
-        sha256 = "10siibgg271qg5czrhd8xv20dn4allix8qhmlabbqkih0zwdimyr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v4.55.0-darwin-arm64.tar.gz";
+        sha256 = "0c3bj1qb5fhqravw8qqdiwyp51h8ik41i9ibn59cviy1bnr2dkc0";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.52.0-darwin-arm64.tar.gz";
···
         sha256 = "12bzicm43l7yvh02v5fx3z8v46l9i7a9f677735xi5rjbmd2an4c";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v10.1.1-darwin-arm64.tar.gz";
-        sha256 = "0y3hhvp21j1xm7pmfq7j2mzdvz68zc2ljn0sxbiv50084m9vaa7y";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v11.0.0-darwin-arm64.tar.gz";
+        sha256 = "0a1fy15bf66gvy7jvimbnycxb51z85svrpa9flly1ch3g7276w60";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v8.41.1-darwin-arm64.tar.gz";
···
         sha256 = "17fl8apnlz4ifjzp1sq0fi4y1knxh1x2fvhlrg8j568f3svp41f8";
       }
       {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.1.1-darwin-arm64.tar.gz";
-        sha256 = "13n9mdhfnnrcfaasr2ca0myyrk09mbazllzhrrxkriahw64a878h";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v5.2.0-darwin-arm64.tar.gz";
+        sha256 = "1nmk841ax77dm64laja5jdcrk0d4pilj0pfn0jvd5zi13fym43ah";
       }
       {
         url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.5.11-darwin-arm64.tar.gz";

pkgs/tools/security/nitrokey-app2/default.nix

···
 {
   lib,
   stdenv,
-  python3,
+  buildPythonApplication,
   fetchFromGitHub,
-  wrapQtAppsHook,
-  qtbase,
-  qtwayland,
-  qtsvg,
+  poetry-core,
+  fido2,
+  nitrokey,
+  pyside6,
+  usb-monitor,
+  qt6,
 }:
 
-python3.pkgs.buildPythonApplication rec {
+let
+  inherit (qt6)
+    wrapQtAppsHook
+    qtbase
+    qtwayland
+    qtsvg
+    ;
+in
+
+buildPythonApplication rec {
   pname = "nitrokey-app2";
-  version = "2.3.5";
+  version = "2.4.1";
   pyproject = true;
-
-  disabled = python3.pythonOlder "3.9";
 
   src = fetchFromGitHub {
     owner = "Nitrokey";
     repo = "nitrokey-app2";
     tag = "v${version}";
-    hash = "sha256-zhTDr4GyE4jridK3ee8ae3v5behMbuo86q9WdrBVqQg=";
+    hash = "sha256-nzhhtnKKOHA+Cw1y+BpYsyQklzkDnmFRKGIfaJ/dmaQ=";
   };
 
-  nativeBuildInputs = with python3.pkgs; [
-    poetry-core
+  nativeBuildInputs = [
     wrapQtAppsHook
   ];
 
···
     qtsvg
   ];
 
-  propagatedBuildInputs = with python3.pkgs; [
+  build-system = [
+    poetry-core
+  ];
+
+  dependencies = [
+    fido2
     nitrokey
     pyside6
     usb-monitor
···
   postInstall = ''
     install -Dm755 meta/com.nitrokey.nitrokey-app2.desktop $out/share/applications/com.nitrokey.nitrokey-app2.desktop
     install -Dm755 meta/nk-app2.png $out/share/icons/hicolor/128x128/apps/com.nitrokey.nitrokey-app2.png
+  '';
+
+  # wrapQtApps only wrapps binary files and normally skips python programs.
+  # Manually pass the qtWrapperArgs from wrapQtAppsHook to wrap python programs.
+  preFixup = ''
+    makeWrapperArgs+=("''${qtWrapperArgs[@]}")
   '';
 
   meta = with lib; {

pkgs/top-level/all-packages.nix

···
     fftw = fftwFloat;
   };
 
-  buildArmTrustedFirmware =
-    callPackage ../misc/arm-trusted-firmware/build-arm-trusted-firmware.nix
-      { };
-
   arm-trusted-firmware = callPackage ../misc/arm-trusted-firmware { };
   inherit (arm-trusted-firmware)
+    buildArmTrustedFirmware
     armTrustedFirmwareTools
     armTrustedFirmwareAllwinner
     armTrustedFirmwareAllwinnerH616
···
 
   nitrokey-app = libsForQt5.callPackage ../tools/security/nitrokey-app { };
 
-  nitrokey-app2 = qt6Packages.callPackage ../tools/security/nitrokey-app2 { };
+  nitrokey-app2 = python3Packages.callPackage ../tools/security/nitrokey-app2 { };
 
   hy = with python3Packages; toPythonApplication hy;