Merge master into staging-next

.github/ISSUE_TEMPLATE/01_bug_report.yml

···
         Please mention the people who are in the **Maintainers** list of the offending package. This is done by by searching for the package on the [NixOS Package Search](https://search.nixos.org/packages) and mentioning the people listed under **Maintainers** by prefixing their GitHub usernames with an '@' character. Please add the mentions above the `---` characters in the template below.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

.github/ISSUE_TEMPLATE/02_bug_report_darwin.yml

···
         If this issue is related to the Darwin packaging architecture as a whole, or is related to the core Darwin frameworks, consider mentioning the `@NixOS/darwin-core` team.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

.github/ISSUE_TEMPLATE/03_bug_report_nixos.yml

···
         If in doubt, check `git blame` for whoever last touched the module, or check the associated package's maintainers. Please add the mentions above the `---` characters.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

.github/ISSUE_TEMPLATE/04_build_failure.yml

···
         Please mention the people who are in the **Maintainers** list of the offending package. This is done by by searching for the package on the [NixOS Package Search](https://search.nixos.org/packages) and mentioning the people listed under **Maintainers** by prefixing their GitHub usernames with an '@' character. Please add the mentions above the `---` characters in the template below.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

.github/ISSUE_TEMPLATE/09_documentation_request.yml

···
         Please mention the people who are in the **Maintainers** list of the offending package. This is done by by searching for the package on the [NixOS Package Search](https://search.nixos.org/packages) and mentioning the people listed under **Maintainers** by prefixing their GitHub usernames with an '@' character. Please add the mentions above the `---` characters in the template below.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

.github/ISSUE_TEMPLATE/10_unreproducible_package.yml

···
         Please mention the people who are in the **Maintainers** list of the offending package. This is done by by searching for the package on the [NixOS Package Search](https://search.nixos.org/packages) and mentioning the people listed under **Maintainers** by prefixing their GitHub usernames with an '@' character. Please add the mentions above the `---` characters in the template below.
       value: |
 
+
         ---
 
         **Note for maintainers:** Please tag this issue in your pull request description. (i.e. `Resolves #ISSUE`.)

maintainers/maintainer-list.nix

···
     githubId = 33031;
     name = "Greg Pfeil";
   };
+  semtexerror = {
+    email = "[e-mail]";
+    github = "SemtexError";
+    githubId = 8776314;
+    name = "Robin";
+  };
   sengaya = {
     email = "[e-mail]";
     github = "sengaya";

nixos/modules/services/web-apps/slskd.nix

···
         Type = "simple";
         User = cfg.user;
         Group = cfg.group;
+        Environment = ["DOTNET_USE_POLLING_FILE_WATCHER=1"];
         EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
         StateDirectory = "slskd";  # Creates /var/lib/slskd and manages permissions
         ExecStart = "${cfg.package}/bin/slskd --app-dir /var/lib/slskd --config ${configurationYaml}";

nixos/tests/akkoma.nix

···
-/*
-  End-to-end test for Akkoma.
-
-  Based in part on nixos/tests/pleroma.
+# end‐to‐end test for Akkoma
+{
+  lib,
+  pkgs,
+  confined ? false,
+  ...
+}:
+let
+  inherit ((pkgs.formats.elixirConf { }).lib) mkRaw;
 
-  TODO: Test federation.
-*/
-import ./make-test-python.nix (
-  {
-    pkgs,
-    package ? pkgs.akkoma,
-    confined ? false,
-    ...
-  }:
-  let
-    userPassword = "4LKOrGo8SgbPm1a6NclVU5Wb";
-
-    provisionUser = pkgs.writers.writeBashBin "provisionUser" ''
-      set -eu -o errtrace -o pipefail
-
-      pleroma_ctl user new jamy [e-mail] --password '${userPassword}' --moderator --admin -y
-    '';
-
-    tlsCert =
-      pkgs.runCommand "selfSignedCerts"
-        {
-          nativeBuildInputs = with pkgs; [ openssl ];
-        }
-        ''
-          mkdir -p $out
-          openssl req -x509 \
-            -subj '/CN=akkoma.nixos.test/' -days 49710 \
-            -addext 'subjectAltName = DNS:akkoma.nixos.test' \
-            -keyout "$out/key.pem" -newkey ed25519 \
-            -out "$out/cert.pem" -noenc
-        '';
+  package = pkgs.akkoma;
 
-    sendToot = pkgs.writers.writeBashBin "sendToot" ''
-      set -eu -o errtrace -o pipefail
+  tlsCert =
+    names:
+    pkgs.runCommand "certificates-${lib.head names}"
+      {
+        nativeBuildInputs = with pkgs; [ openssl ];
+      }
+      ''
+        mkdir -p $out
+        openssl req -x509 \
+          -subj '/CN=${lib.head names}/' -days 49710 \
+          -addext 'subjectAltName = ${lib.concatStringsSep ", " (map (name: "DNS:${name}") names)}' \
+          -keyout "$out/key.pem" -newkey ed25519 \
+          -out "$out/cert.pem" -noenc
+      '';
 
-      export REQUESTS_CA_BUNDLE="/etc/ssl/certs/ca-certificates.crt"
+  tlsCertA = tlsCert [
+    "akkoma-a.nixos.test"
+    "media.akkoma-a.nixos.test"
+  ];
 
-      ${pkgs.toot}/bin/toot login_cli -i "akkoma.nixos.test" -e "[e-mail]" -p '${userPassword}'
-      ${pkgs.toot}/bin/toot post "hello world Jamy here"
-      ${pkgs.toot}/bin/toot timeline -1 | grep -F -q "hello world Jamy here"
+  tlsCertB = tlsCert [
+    "akkoma-b.nixos.test"
+    "media.akkoma-b.nixos.test"
+  ];
 
-      # Test file upload
-      echo "y" | ${pkgs.toot}/bin/toot upload <(dd if=/dev/zero bs=1024 count=1024 status=none) \
-        | grep -F -q "https://akkoma.nixos.test:443/media"
-    '';
+  testMedia = pkgs.runCommand "blank.png" { nativeBuildInputs = with pkgs; [ imagemagick ]; } ''
+    magick -size 640x480 canvas:transparent "PNG8:$out"
+  '';
 
-    checkFe = pkgs.writers.writeBashBin "checkFe" ''
-      set -eu -o errtrace -o pipefail
-
+  checkFe = pkgs.writeShellApplication {
+    name = "checkFe";
+    runtimeInputs = with pkgs; [ curl ];
+    text = ''
       paths=( / /static/{config,styles}.json /pleroma/admin/ )
 
       for path in "''${paths[@]}"; do
         diff \
-          <(${pkgs.curl}/bin/curl -f -S -s -o /dev/null -w '%{response_code}' "https://akkoma.nixos.test$path") \
+          <(curl -f -S -s -o /dev/null -w '%{response_code}' "https://$1$path") \
           <(echo -n 200)
       done
     '';
+  };
 
-    hosts = nodes: ''
-      ${nodes.akkoma.networking.primaryIPAddress} akkoma.nixos.test
-      ${nodes.client.networking.primaryIPAddress} client.nixos.test
-    '';
-  in
-  {
-    name = "akkoma";
-    nodes = {
-      client =
-        {
-          nodes,
-          pkgs,
-          config,
-          ...
-        }:
-        {
-          security.pki.certificateFiles = [ "${tlsCert}/cert.pem" ];
-          networking.extraHosts = hosts nodes;
+  commonConfig =
+    { nodes, ... }:
+    {
+      security.pki.certificateFiles = [
+        "${tlsCertA}/cert.pem"
+        "${tlsCertB}/cert.pem"
+      ];
+
+      networking.extraHosts = ''
+        ${nodes.akkoma-a.networking.primaryIPAddress} akkoma-a.nixos.test media.akkoma-a.nixos.test
+        ${nodes.akkoma-b.networking.primaryIPAddress} akkoma-b.nixos.test media.akkoma-b.nixos.test
+        ${nodes.client-a.networking.primaryIPAddress} client-a.nixos.test
+        ${nodes.client-b.networking.primaryIPAddress} client-b.nixos.test
+      '';
+    };
+
+  clientConfig =
+    { pkgs, ... }:
+    {
+      environment = {
+        sessionVariables = {
+          REQUESTS_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
         };
+        systemPackages = with pkgs; [ toot ];
+      };
+    };
 
-      akkoma =
-        {
-          nodes,
-          pkgs,
-          config,
-          ...
-        }:
-        {
-          networking.extraHosts = hosts nodes;
-          networking.firewall.allowedTCPPorts = [ 443 ];
-          environment.systemPackages = with pkgs; [ provisionUser ];
-          systemd.services.akkoma.confinement.enable = confined;
+  serverConfig =
+    { config, pkgs, ... }:
+    {
+      networking = {
+        domain = "nixos.test";
+        firewall.allowedTCPPorts = [ 443 ];
+      };
 
-          services.akkoma = {
-            enable = true;
-            package = package;
-            config = {
-              ":pleroma" = {
-                ":instance" = {
-                  name = "NixOS test Akkoma server";
-                  description = "NixOS test Akkoma server";
-                  email = "[e-mail]";
-                  notify_email = "[e-mail]";
-                  registration_open = true;
-                };
+      systemd.services.akkoma.confinement.enable = confined;
 
-                ":media_proxy" = {
-                  enabled = false;
-                };
+      services.akkoma = {
+        enable = true;
+        inherit package;
+        config = {
+          ":pleroma" = {
+            ":instance" = {
+              name = "NixOS test Akkoma server";
+              description = "NixOS test Akkoma server";
+              email = "[e-mail]";
+              notify_email = "[e-mail]";
+              registration_open = true;
+            };
 
-                "Pleroma.Web.Endpoint" = {
-                  url.host = "akkoma.nixos.test";
-                };
-                "Pleroma.Upload" = {
-                  base_url = "https://akkoma.nixos.test:443/media/";
-                };
-              };
+            ":media_proxy" = {
+              enabled = false;
+            };
+
+            "Pleroma.Web.Endpoint" = {
+              url.host = config.networking.fqdn;
             };
 
-            nginx = {
-              addSSL = true;
-              sslCertificate = "${tlsCert}/cert.pem";
-              sslCertificateKey = "${tlsCert}/key.pem";
+            "Pleroma.Upload" = {
+              base_url = "https://media.${config.networking.fqdn}/media/";
             };
+
+            # disable certificate verification until we figure out how to
+            # supply our own certificates
+            ":http".adapter.pools = mkRaw "%{default: [conn_opts: [transport_opts: [verify: :verify_none]]]}";
           };
+        };
 
-          services.nginx.enable = true;
-          services.postgresql.enable = true;
+        nginx.addSSL = true;
+      };
+
+      services.nginx.enable = true;
+      services.postgresql.enable = true;
+    };
+in
+{
+  name = "akkoma";
+  nodes = {
+    client-a =
+      { ... }:
+      {
+        imports = [
+          clientConfig
+          commonConfig
+        ];
+      };
+
+    client-b =
+      { ... }:
+      {
+        imports = [
+          clientConfig
+          commonConfig
+        ];
+      };
+
+    akkoma-a =
+      { ... }:
+      {
+        imports = [
+          commonConfig
+          serverConfig
+        ];
+
+        services.akkoma.nginx = {
+          sslCertificate = "${tlsCertA}/cert.pem";
+          sslCertificateKey = "${tlsCertA}/key.pem";
+        };
+      };
+
+    akkoma-b =
+      { ... }:
+      {
+        imports = [
+          commonConfig
+          serverConfig
+        ];
+
+        services.akkoma.nginx = {
+          sslCertificate = "${tlsCertB}/cert.pem";
+          sslCertificateKey = "${tlsCertB}/key.pem";
         };
-    };
+      };
+  };
+
+  testScript = ''
+    import json
+    import random
+    import string
+    from shlex import quote
+
+    def randomString(len):
+      return "".join(random.choice(string.ascii_letters + string.digits) for _ in range(len))
+
+    def registerUser(user, password):
+      return 'pleroma_ctl user new {0} {0}@nixos.test --password {1} -y'.format(
+        quote(user), quote(password))
+
+    def loginUser(instance, user, password):
+      return 'toot login_cli -i {}.nixos.test -e {}@nixos.test -p {}'.format(
+        quote(instance), quote(user), quote(password))
+
+    userAName = randomString(11)
+    userBName = randomString(11)
+    userAPassword = randomString(22)
+    userBPassword = randomString(22)
+
+    testMessage = randomString(22)
+    testMedia = '${testMedia}'
+
+    start_all()
+    akkoma_a.wait_for_unit('akkoma-initdb.service')
+    akkoma_b.wait_for_unit('akkoma-initdb.service')
+
+    # test repeated initialisation
+    akkoma_a.systemctl('restart akkoma-initdb.service')
+
+    akkoma_a.wait_for_unit('akkoma.service')
+    akkoma_b.wait_for_unit('akkoma.service')
+    akkoma_a.wait_for_file('/run/akkoma/socket');
+    akkoma_b.wait_for_file('/run/akkoma/socket');
+
+    akkoma_a.succeed(registerUser(userAName, userAPassword))
+    akkoma_b.succeed(registerUser(userBName, userBPassword))
 
-    testScript =
-      { nodes, ... }:
-      ''
-        start_all()
-        akkoma.wait_for_unit('akkoma-initdb.service')
-        akkoma.systemctl('restart akkoma-initdb.service')  # test repeated initialisation
-        akkoma.wait_for_unit('akkoma.service')
-        akkoma.wait_for_file('/run/akkoma/socket');
-        akkoma.succeed('${provisionUser}/bin/provisionUser')
-        akkoma.wait_for_unit('nginx.service')
-        client.succeed('${sendToot}/bin/sendToot')
-        client.succeed('${checkFe}/bin/checkFe')
-      '';
-  }
-)
+    akkoma_a.wait_for_unit('nginx.service')
+    akkoma_b.wait_for_unit('nginx.service')
+
+    client_a.succeed(loginUser('akkoma-a', userAName, userAPassword))
+    client_b.succeed(loginUser('akkoma-b', userBName, userBPassword))
+
+    client_b.succeed('toot follow {}@akkoma-a.nixos.test'.format(userAName))
+    client_a.wait_until_succeeds('toot followers | grep -F -q {}'.format(quote(userBName)))
+
+    client_a.succeed('toot post {} --media {} --description "nothing to see here"'.format(
+      quote(testMessage), quote(testMedia)))
+
+    # verify test message
+    status = json.loads(client_b.wait_until_succeeds(
+      'toot status --json "$(toot timeline -1 | grep -E -o \'^ID [^ ]+\' | cut -d \' \' -f 2)"'))
+    assert status['content'] == testMessage
+
+    # compare attachment to original
+    client_b.succeed('cmp {} <(curl -f -S -s {})'.format(quote(testMedia),
+      quote(status['media_attachments'][0]['url'])))
+
+    client_a.succeed('${lib.getExe checkFe} akkoma-a.nixos.test')
+    client_b.succeed('${lib.getExe checkFe} akkoma-b.nixos.test')
+  '';
+}

nixos/tests/all-tests.nix

···
   age-plugin-tpm-decrypt = runTest ./age-plugin-tpm-decrypt.nix;
   agorakit = runTest ./web-apps/agorakit.nix;
   airsonic = runTest ./airsonic.nix;
-  akkoma = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./akkoma.nix {};
-  akkoma-confined = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./akkoma.nix { confined = true; };
+  akkoma = runTestOn [ "x86_64-linux" "aarch64-linux" ] {
+    imports = [ ./akkoma.nix ];
+    _module.args.confined = false;
+  };
+  akkoma-confined = runTestOn [ "x86_64-linux" "aarch64-linux" ] {
+    imports = [ ./akkoma.nix ];
+    _module.args.confined = true;
+  };
   alice-lg = runTest ./alice-lg.nix;
   alloy = runTest ./alloy.nix;
   allTerminfo = runTest ./all-terminfo.nix;

nixos/tests/apparmor/makeExpectedPolicies.nix

···
 { pkgs }:
 ''
-  ixr ${pkgs.bash}/libexec/**,
-  mr ${pkgs.bash}/lib/**.so*,
-  mr ${pkgs.bash}/lib64/**.so*,
-  mr ${pkgs.bash}/share/**,
-  r ${pkgs.bash},
-  r ${pkgs.bash}/etc/**,
-  r ${pkgs.bash}/lib/**,
-  r ${pkgs.bash}/lib64/**,
-  x ${pkgs.bash}/foo/**,
+  ixr ${pkgs.bashNonInteractive}/libexec/**,
+  mr ${pkgs.bashNonInteractive}/lib/**.so*,
+  mr ${pkgs.bashNonInteractive}/lib64/**.so*,
+  mr ${pkgs.bashNonInteractive}/share/**,
+  r ${pkgs.bashNonInteractive},
+  r ${pkgs.bashNonInteractive}/etc/**,
+  r ${pkgs.bashNonInteractive}/lib/**,
+  r ${pkgs.bashNonInteractive}/lib64/**,
+  x ${pkgs.bashNonInteractive}/foo/**,
   ixr ${pkgs.glibc}/libexec/**,
   mr ${pkgs.glibc}/lib/**.so*,
   mr ${pkgs.glibc}/lib64/**.so*,
···
   r ${pkgs.libunistring}/lib/**,
   r ${pkgs.libunistring}/lib64/**,
   x ${pkgs.libunistring}/foo/**,
+  ixr ${pkgs.tzdata}/libexec/**,
+  mr ${pkgs.tzdata}/lib/**.so*,
+  mr ${pkgs.tzdata}/lib64/**.so*,
+  mr ${pkgs.tzdata}/share/**,
+  r ${pkgs.tzdata},
+  r ${pkgs.tzdata}/etc/**,
+  r ${pkgs.tzdata}/lib/**,
+  r ${pkgs.tzdata}/lib64/**,
+  x ${pkgs.tzdata}/foo/**,
   ixr ${pkgs.glibc.libgcc}/libexec/**,
   mr ${pkgs.glibc.libgcc}/lib/**.so*,
   mr ${pkgs.glibc.libgcc}/lib64/**.so*,

pkgs/applications/editors/sublime/4/packages.nix

···
   } { };
 
   sublime4-dev = common {
-    buildVersion = "4191";
+    buildVersion = "4196";
     dev = true;
-    x64sha256 = "fJy0BNToM8beMv5jYdFiecyjudzTG+r0mEpi9erZs4A=";
-    aarch64sha256 = "KgqZ9+rEGM9wcgqk+CenFInmDc3jPMdnRBpTREHBpjE=";
+    x64sha256 = "lsvPDqN9YkhDl/4LjLoHkV+Po9lTJpS498awzMMCh3c=";
+    aarch64sha256 = "Bwy69jCKkj8AT8WeMXJ3C+yUk+PArHETyp1ZvMXjR5A=";
   } { };
 }

pkgs/applications/editors/vscode/extensions/default.nix

···
         };
       };
 
+      tboby.cwtools-vscode = callPackage ./tboby.cwtools-vscode { };
+
       tomoki1207.pdf = buildVscodeMarketplaceExtension {
         mktplcRef = {
           name = "pdf";

pkgs/applications/editors/vscode/extensions/tboby.cwtools-vscode/default.nix

···
+{
+  lib,
+  vscode-utils,
+}:
+vscode-utils.buildVscodeMarketplaceExtension {
+  mktplcRef = {
+    name = "cwtools-vscode";
+    publisher = "tboby";
+    version = "0.10.25";
+    hash = "sha256-TcnS4Cwn+V9hwScpLgUK5u8Jfm89EBv+koUOi1bB0DM=";
+  };
+  meta = {
+    description = "Paradox Language Features for Visual Studio Code";
+    downloadPage = "https://marketplace.visualstudio.com/items?itemName=tboby.cwtools-vscode";
+    homepage = "https://github.com/cwtools/cwtools-vscode";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.therobot2105 ];
+  };
+}

pkgs/applications/networking/cluster/nomad/default.nix

···
   lib,
   buildGoModule,
   buildGo122Module,
-  buildGo123Module,
+  buildGo124Module,
   fetchFromGitHub,
   nixosTests,
   installShellFiles,
···
   };
 
   nomad_1_9 = generic {
-    buildGoModule = buildGo123Module;
-    version = "1.9.6";
-    sha256 = "sha256-j+3ecQsFicdYX4GddwaKEwoIFu88kdjI5Kl8bHUQQwE=";
-    vendorHash = "sha256-frHIP86NsW6C9GRdPaZQc3PilolXJ2ojaNZYlrMcbOg=";
+    buildGoModule = buildGo124Module;
+    version = "1.9.7";
+    sha256 = "sha256-U02H6DPr1friQ9EwqD/wQnE2Fm20OE5xNccPDJfnsqI=";
+    vendorHash = "sha256-9GnwqkexJAxrhW9yJFaDTdSaZ+p+/dcMuhlusp4cmyw=";
     license = lib.licenses.bsl11;
     passthru.tests.nomad = nixosTests.nomad;
     preCheck = ''

pkgs/applications/version-management/sublime-merge/default.nix

···
   } { };
 
   sublime-merge-dev = common {
-    buildVersion = "2101";
+    buildVersion = "2105";
     dev = true;
-    aarch64sha256 = "/56SBJ9ehoBCLTWYo8hGpn6/uqKxsSfcSzcJDd3uUMc=";
-    x64sha256 = "AIH0VtEetiHdip0PIx1U1mcFlFz1gk0VCRDq4C5/wNM=";
+    aarch64sha256 = "PpiY2nD4fexo9zmKeHQ9KYnzB8sWkVa4YqO2q3C/abE=";
+    x64sha256 = "sUyI6ukNZjvszuKDL5fKvIpf3llZn+qQRg7WSdjw4rs=";
   } { };
 }

pkgs/applications/virtualization/singularity/generic.nix

···
   libseccomp,
   libuuid,
   mount,
+  versionCheckHook,
   # This is for nvidia-container-cli
   nvidia-docker,
   openssl,
···
           ]
         ) originalDefaultPaths}
     '') sourceFilesWithDefaultPaths}
-
-    substituteInPlace internal/pkg/util/gpu/nvidia.go \
-      --replace \
-        'return fmt.Errorf("/usr/bin not writable in the container")' \
-        ""
   '';
 
   postConfigure = ''
···
 
   postFixup = ''
     substituteInPlace "$out/bin/run-singularity" \
-      --replace "/usr/bin/env ${projectName}" "$out/bin/${projectName}"
+      --replace-fail "/usr/bin/env ${projectName}" "$out/bin/${projectName}"
+
     # Respect PATH from the environment/the user.
     # Fallback to bin paths provided by Nixpkgs packages.
     wrapProgram "$out/bin/${projectName}" \
       --suffix PATH : "$systemDefaultPath" \
       --suffix PATH : "$inputsDefaultPath"
+
     # Make changes in the config file
     ${lib.optionalString forceNvcCli ''
       substituteInPlace "$out/etc/${projectName}/${projectName}.conf" \
-        --replace "use nvidia-container-cli = no" "use nvidia-container-cli = yes"
+        --replace-fail "use nvidia-container-cli = no" "use nvidia-container-cli = yes"
     ''}
     ${lib.optionalString (enableNvidiaContainerCli && projectName == "singularity") ''
       substituteInPlace "$out/etc/${projectName}/${projectName}.conf" \
-        --replace "# nvidia-container-cli path =" "nvidia-container-cli path = ${nvidia-docker}/bin/nvidia-container-cli"
+        --replace-fail "# nvidia-container-cli path =" "nvidia-container-cli path = ${nvidia-docker}/bin/nvidia-container-cli"
     ''}
     ${lib.optionalString (removeCompat && (projectName != "singularity")) ''
       unlink "$out/bin/singularity"
···
       ln -s ${lib.escapeShellArg starterSuidPath} "$out/libexec/${projectName}/bin/starter-suid"
     ''}
   '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgram = "${placeholder "out"}/bin/${projectName}";
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
 
   meta = {
     description = "Application containers for linux" + extraDescription;

pkgs/applications/virtualization/singularity/packages.nix

···
     callPackage
       (import ./generic.nix rec {
         pname = "singularity-ce";
-        version = "4.2.2";
+        version = "4.3.0";
         projectName = "singularity";
 
         src = fetchFromGitHub {
           owner = "sylabs";
           repo = "singularity";
           tag = "v${version}";
-          hash = "sha256-BW+oUZh82m2QDf0tUKRLcPk3mUpkukZkVzSIfXtQwio=";
+          hash = "sha256-zmrwP5ZAsRz+1zR/VozjBiT+YGJrCnvD3Y7dUsqbQwk=";
         };
 
         # Override vendorHash with overrideAttrs.
         # See https://nixos.org/manual/nixpkgs/unstable/#buildGoModule-vendorHash
-        vendorHash = "sha256-ed779LFPL38i/+pGlGIty9I/SvOtjF4/dOAx8zY7Y5E=";
+        vendorHash = "sha256-Ayp+V8M3PP53ZLEagsxBB/r8Ci0tNIiH9NtbHpX6NmM=";
 
-        # Do not build conmon and squashfuse from the Git submodule sources,
-        # Use Nixpkgs provided version
         extraConfigureFlags = [
-          "--without-conmon"
+          # Do not build squashfuse from the Git submodule sources, use Nixpkgs provided version
           "--without-squashfuse"
+          # Disable subid as it requires (unavailable?) libsubid headers:
+          "--without-libsubid"
         ];
 
         extraDescription = " (Sylabs Inc's fork of Singularity, a.k.a. SingularityCE)";

pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprscroller.nix

···
 
 mkHyprlandPlugin hyprland {
   pluginName = "hyprscroller";
-  version = "0-unstable-2025-01-30";
+  version = "0-unstable-2025-03-07";
 
   src = fetchFromGitHub {
     owner = "dawsers";
     repo = "hyprscroller";
-    rev = "e4b13544ef3cc235eb9ce51e0856ba47eb36e8ac";
-    hash = "sha256-OYCcIsE25HqVBp8z76Tk1v+SuYR7W1nemk9mDS9GHM8=";
+    rev = "fb3b2ec63c85f22a107bd635890fcb1afc30b01f";
+    hash = "sha256-FErWOeUmyFWPNjE+EYWVvVwXGO7+4lVqZBwiapXa6Yw=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/av/avbroot/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "avbroot";
-  version = "3.4.1";
+  version = "3.13.0";
 
   src = fetchFromGitHub {
     owner = "chenxiaolong";
     repo = "avbroot";
     tag = "v${version}";
-    hash = "sha256-gG8pR/D5oaPPqq0e815J6z+dDVxh4VSoHIm1Yl3x2p4=";
+    hash = "sha256-ncgi/oQAvvNRX8Vf4RKlro6hV+uCCsdBdjdjVyVvTUg=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-9FM6r7+R9aR0lYJdJxnCuGKLXZ71Ia9UVmY4Pk9UAqw=";
+  cargoHash = "sha256-E4CcgUfuttKClqvofOvI2QJVzhsYrAw1yK0VR1miDVk=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/aw/awscli2/package.nix

···
 in
 py.pkgs.buildPythonApplication rec {
   pname = "awscli2";
-  version = "2.24.16"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.24.22"; # N.B: if you change this, check if overrides are still up-to-date
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-cli";
     tag = version;
-    hash = "sha256-WbCJ3sBCI5wC6QbxY1KKNpJ8hkK6yhonq7F2Gzxw8DA=";
+    hash = "sha256-cqDBUwc9E9TPN5E4CaCxc5sAZgCXalgl2ejGftyzV1k=";
   };
 
   postPatch = ''

pkgs/by-name/ba/bazecor/package.nix

···
 }:
 let
   pname = "bazecor";
-  version = "1.6.4";
+  version = "1.6.5";
   src = appimageTools.extract {
     inherit pname version;
     src = fetchurl {
       url = "https://github.com/Dygmalab/Bazecor/releases/download/v${version}/Bazecor-${version}-x64.AppImage";
-      hash = "sha256-S0fJNkDDZAssum7wDDxHkzH9WZcGSEX05nl3S/DOH14=";
+      hash = "sha256-TitZzTNfEnuU0clTsGKexrtbIcsqE1W9A1pJCefVA6U=";
     };
 
     # Workaround for https://github.com/Dygmalab/Bazecor/issues/370
···
       substituteInPlace \
         $out/usr/lib/bazecor/resources/app/.webpack/main/index.js \
         --replace-fail \
-          'checkUdev=()=>{try{if(c.default.existsSync(f))return c.default.readFileSync(f,"utf-8").trim()===d.trim()}catch(e){u.default.error(e)}return!1}' \
+          'checkUdev=()=>{try{if(l.default.existsSync(h))return l.default.readFileSync(h,"utf-8").trim()===f.trim()}catch(e){d.default.error(e)}return!1}' \
           'checkUdev=()=>{return 1}'
     '';
   };

pkgs/by-name/bi/bind/dont-keep-configure-flags.patch

···
 diff --git a/bin/named/include/named/globals.h b/bin/named/include/named/globals.h
-index 82b632ef04..dedfd4d33b 100644
+index 25d03fff60..c1920c3a80 100644
 --- a/bin/named/include/named/globals.h
 +++ b/bin/named/include/named/globals.h
-@@ -69,7 +69,9 @@ EXTERN const char *named_g_version	INIT(PACKAGE_VERSION);
- EXTERN const char *named_g_product	INIT(PACKAGE_NAME);
- EXTERN const char *named_g_description	INIT(PACKAGE_DESCRIPTION);
- EXTERN const char *named_g_srcid	INIT(PACKAGE_SRCID);
+@@ -71,7 +71,9 @@ EXTERN const char *named_g_version     INIT(PACKAGE_VERSION);
+ EXTERN const char *named_g_product     INIT(PACKAGE_NAME);
+ EXTERN const char *named_g_description INIT(PACKAGE_DESCRIPTION);
+ EXTERN const char *named_g_srcid       INIT(PACKAGE_SRCID);
 +#if 0
- EXTERN const char *named_g_configargs	INIT(PACKAGE_CONFIGARGS);
+ EXTERN const char *named_g_configargs  INIT(PACKAGE_CONFIGARGS);
 +#endif
- EXTERN const char *named_g_builder	INIT(PACKAGE_BUILDER);
- EXTERN in_port_t named_g_port		INIT(0);
- EXTERN in_port_t named_g_tlsport	INIT(0);
+ EXTERN const char *named_g_builder     INIT(PACKAGE_BUILDER);
+ EXTERN in_port_t named_g_port	       INIT(0);
+ EXTERN in_port_t named_g_tlsport       INIT(0);
 diff --git a/bin/named/main.c b/bin/named/main.c
-index 9ad2d0e277..9729a2b3fc 100644
+index be3c629f30..58325fc1b5 100644
 --- a/bin/named/main.c
 +++ b/bin/named/main.c
-@@ -481,7 +481,9 @@ printversion(bool verbose) {
+@@ -574,7 +574,9 @@ printversion(bool verbose) {
  	}
  
  	printf("running on %s\n", named_os_uname());
···
  #ifdef __clang__
  	printf("compiled by CLANG %s\n", __VERSION__);
  #else /* ifdef __clang__ */
-@@ -1027,9 +1029,11 @@ setup(void) {
+@@ -1124,10 +1126,11 @@ setup(void) {
+ 	isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL,
  		      NAMED_LOGMODULE_MAIN, ISC_LOG_NOTICE, "running on %s",
  		      named_os_uname());
- 
+-
 +#if 0
  	isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL,
  		      NAMED_LOGMODULE_MAIN, ISC_LOG_NOTICE, "built with %s",

pkgs/by-name/bi/bind/package.nix

···
   libtool,
   libxml2,
   openssl,
+  liburcu,
   libuv,
   nghttp2,
   jemalloc,
···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bind";
-  version = "9.18.33";
+  version = "9.20.6";
 
   src = fetchurl {
     url = "https://downloads.isc.org/isc/bind9/${finalAttrs.version}/${finalAttrs.pname}-${finalAttrs.version}.tar.xz";
-    hash = "sha256-+zc/rF67xBxkUWCv1an7RRkY9sDmmrHZR0FU4rUV3kA=";
+    hash = "sha256-7X9UtE+EpyAaL6epSfMCHqVoUpv62Q/KZk/VXAUQQTQ=";
   };
 
   outputs = [
···
       libtool
       libxml2
       openssl
+      liburcu
       libuv
       nghttp2
       jemalloc
···
       sed -i "$f" -e 's|-L${openssl.dev}|-L${lib.getLib openssl}|g'
     done
 
+    mkdir -p $out/etc
     cat <<EOF >$out/etc/rndc.conf
     include "/etc/bind/rndc.key";
     options {

pkgs/by-name/bl/bluespec/package.nix

···
   asciidoctor,
   texliveFull,
   which,
+  # install -m 644 lib/libstp.dylib /private/tmp/nix-build-bluespec-2024.07.drv-5/source/inst/lib/SAT
+  # install: cannot stat 'lib/libstp.dylib': No such file or directory
+  # https://github.com/B-Lang-org/bsc/pull/600 might fix it
+  stubStp ? !stdenv.hostPlatform.isDarwin,
+  withDocs ? true,
 }:
 
 let
···
 
   enableParallelBuilding = true;
 
-  outputs = [
-    "out"
-    "doc"
-  ];
+  outputs =
+    [
+      "out"
+    ]
+    ++ lib.optionals withDocs [
+      "doc"
+    ];
 
   # https://github.com/B-Lang-org/bsc/pull/278 is still applicable, but will probably not be applied as such
   # there is work ongoing: https://github.com/B-Lang-org/bsc/issues/595 https://github.com/B-Lang-org/bsc/pull/600
···
 
   preBuild = ''
     patchShebangs \
+      src/vendor/stp/src/AST/genkinds.pl \
       src/Verilog/copy_module.pl \
       src/comp/update-build-version.sh \
       src/comp/update-build-system.sh \
       src/comp/wrapper.sh
 
     substituteInPlace src/comp/Makefile \
-      --replace 'BINDDIR' 'BINDIR' \
-      --replace 'install-bsc install-bluetcl' 'install-bsc install-bluetcl $(UTILEXES) install-utils'
+      --replace-fail 'install-bsc install-bluetcl' 'install-bsc install-bluetcl $(UTILEXES) install-utils'
+
+    # For darwin
+    # ld: library not found for -ltcl8.5
+    substituteInPlace ./platform.sh \
+      --replace-fail 'TCLSH=/usr/bin/tclsh' 'TCLSH=`which tclsh`'
 
     # allow running bsc to bootstrap
     export LD_LIBRARY_PATH=$PWD/inst/lib/SAT
···
     perl
     pkg-config
     texliveFull
+    tcl
   ];
 
-  makeFlags = [
-    "release"
-    "NO_DEPS_CHECKS=1" # skip the subrepo check (this deriviation uses yices-src instead of the subrepo)
-    "NOGIT=1" # https://github.com/B-Lang-org/bsc/issues/12
-    "LDCONFIG=ldconfig" # https://github.com/B-Lang-org/bsc/pull/43
-    "STP_STUB=1" # uses yices as a SMT solver and stub out STP
-  ];
+  env.NIX_CFLAGS_COMPILE = toString (
+    lib.optionals (stdenv.cc.isClang) [
+      # wide_data.cxx:1750:15: error: variable length arrays in C++ are a Clang extension [-Werror,-Wvla-cxx-extension]
+      "-Wno-error"
+    ]
+  );
+
+  makeFlags =
+    [
+      "NO_DEPS_CHECKS=1" # skip the subrepo check (this deriviation uses yices-src instead of the subrepo)
+      "NOGIT=1" # https://github.com/B-Lang-org/bsc/issues/12
+      "LDCONFIG=ldconfig" # https://github.com/SRI-CSL/yices2/blob/fda0a325ea7923f152ea9f9a5d20eddfd1d96224/Makefile.build#L66
+      (if withDocs then "release" else "install-src")
+    ]
+    ++ lib.optionals stubStp [
+      "STP_STUB=1" # uses yices as a SMT solver and stub out STP
+    ];
 
   doCheck = true;
 
···
     iverilog
   ];
 
-  checkTarget = "check-smoke"; # this is the shortest check but "check-suite" tests much more
+  # /nix/store/7y0vlsf6l8lr3vjsbrirqrsbx4mwqiwf-cctools-binutils-darwin-1010.6/bin/strip: error: unknown argument '-u'
+  # make[1]: *** [Makefile:97: smoke_test_bluesim] Error 1
+  checkTarget = lib.optionalString (!stdenv.hostPlatform.isDarwin) "check-smoke"; # this is the shortest check but "check-suite" tests much more
 
-  installPhase = ''
-    mkdir -p $out
-    mv inst/bin $out
-    mv inst/lib $out
+  installPhase =
+    ''
+      mkdir -p $out
+      mv inst/bin $out
+      mv inst/lib $out
 
-    # fragile, I know..
-    mkdir -p $doc/share/doc/bsc
-    mv inst/README $doc/share/doc/bsc
-    mv inst/ReleaseNotes.* $doc/share/doc/bsc
-    mv inst/doc/*.pdf $doc/share/doc/bsc
-  '';
+    ''
+    + lib.optionalString withDocs ''
+      # fragile, I know..
+      mkdir -p $doc/share/doc/bsc
+      mv inst/README $doc/share/doc/bsc
+      mv inst/ReleaseNotes.* $doc/share/doc/bsc
+      mv inst/doc/*.pdf $doc/share/doc/bsc
+    '';
 
   meta = {
     description = "Toolchain for the Bluespec Hardware Definition Language";
     homepage = "https://github.com/B-Lang-org/bsc";
     license = lib.licenses.bsd3;
-    platforms = [ "x86_64-linux" ];
+    platforms = [
+      "x86_64-linux"
+      "aarch64-darwin"
+    ];
     mainProgram = "bsc";
     # darwin fails at https://github.com/B-Lang-org/bsc/pull/35#issuecomment-583731562
     # aarch64 fails, as GHC fails with "ghc: could not execute: opt"

pkgs/by-name/ci/cimg/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cimg";
-  version = "3.4.3";
+  version = "3.5.3";
 
   src = fetchFromGitHub {
     owner = "GreycLab";
     repo = "CImg";
     tag = "v.${finalAttrs.version}";
-    hash = "sha256-Abe7mSbdj06MossUQXCKZPzzfyvJyRVeLfzINYNPv4g=";
+    hash = "sha256-iGpLVsS8o8BqxEu63mZeeB49+lnYmdi2X5ISip89UDY=";
   };
 
   outputs = [

pkgs/by-name/co/containerd/package.nix

···
 
 buildGoModule rec {
   pname = "containerd";
-  version = "2.0.2";
+  version = "2.0.3";
 
   outputs = [
     "out"
···
     owner = "containerd";
     repo = "containerd";
     tag = "v${version}";
-    hash = "sha256-aCC6nH+bxjk6dUIzUva4ILH0FD6QkWiJmdrcMLA18Jw=";
+    hash = "sha256-MPzC7X4r3zrDM6Ej8lICDIB29X+s6jQ1sHQmnk9Zc10=";
   };
 
   postPatch = "patchShebangs .";

pkgs/by-name/co/copacetic/package.nix

···
 }:
 buildGoModule rec {
   pname = "copacetic";
-  version = "0.9.0";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "project-copacetic";
     repo = "copacetic";
     tag = "v${version}";
-    hash = "sha256-hvSbjkqrd//thUex2It31Z4Vrj1u07WEAQFAnWiPo6M=";
+    hash = "sha256-aLFRhmxJ5Hj2vvdYCwALBeK0avPF/jDWUgQiSw0fFGg=";
   };
 
-  vendorHash = "sha256-eefYbB88wXQME8ehm/ieVBtOmmtxHkZSsjE05yeQ7Gw=";
+  vendorHash = "sha256-+iS6nom52eofgcj/fZPVs2Eog9Un5ThSX+EBVmHTSlo=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/db/dbx/package.nix

···
 {
   lib,
+  stdenv,
+  python3,
   fetchFromGitHub,
-  git,
-  python3,
+
+  # tests
+  addBinToPathHook,
+  gitMinimal,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
 }:
 let
   python = python3.override {
     self = python;
-    packageOverrides = self: super: { pydantic = super.pydantic_1; };
+    packageOverrides = self: super: {
+      pydantic = super.pydantic_1;
+
+      # python-on-whales is the only aiohttp dependency that is incompatible with pydantic_1
+      # Override aiohttp to remove this dependency
+      aiohttp = super.aiohttp.overridePythonAttrs (old: {
+        # Remove python-on-whales from nativeCheckInputs
+        nativeCheckInputs = lib.filter (p: (p.pname or "") != "python-on-whales") old.nativeCheckInputs;
+
+        disabledTestPaths = [
+          # Requires python-on-whales
+          "tests/autobahn/test_autobahn.py"
+        ] ++ (old.disabledTestPaths or [ ]);
+      });
+
+      databricks-sdk = super.databricks-sdk.overridePythonAttrs (old: {
+        # Tests require langchain-openai which is incompatible with pydantic_1
+        doCheck = false;
+      });
+    };
   };
 in
 python.pkgs.buildPythonApplication rec {
   pname = "dbx";
-  version = "0.8.18";
+  version = "0.8.19";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "databrickslabs";
     repo = "dbx";
     tag = "v${version}";
-    hash = "sha256-5qjEABNTSUD9I2uAn49HQ4n+gbAcmfnqS4Z2M9MvFXQ=";
+    hash = "sha256-DNVJcCDHyWCorTxNN6RR6TWNF2MrysXT44UbwegROTU=";
   };
 
+  postPatch = ''
+    # Probably a typo
+      substituteInPlace src/dbx/custom.py \
+        --replace-fail "_make_rich_rext" "_make_rich_text"
+
+    # dbx pins an old version of typer.
+    # In newer versions of typer, `callback` does not accept the 'name' argument anymore.
+    substituteInPlace src/dbx/cli.py \
+      --replace-fail 'name="dbx",' ""
+
+    # Fixes: TypeError: 'NoneType' object is not iterable
+    substituteInPlace src/dbx/utils/common.py \
+      --replace-fail \
+        '[t.split("=") for t in multiple_argument]' \
+        '[t.split("=") for t in multiple_argument] if multiple_argument else []'
+  '';
+
   pythonRelaxDeps = [
     "cryptography"
     "databricks-cli"
+    "pydantic"
     "rich"
+    "tenacity"
     "typer"
   ];
 
   pythonRemoveDeps = [ "mlflow-skinny" ];
 
-  build-system = with python.pkgs; [ setuptools ];
+  build-system = with python.pkgs; [
+    hatch-vcs
+    hatchling
+  ];
 
-  propagatedBuildInputs = with python.pkgs; [
+  dependencies = with python.pkgs; [
     aiohttp
     click
     cookiecutter
···
     requests
     retry
     rich
+    setuptools
     tenacity
     typer
     watchdog
   ];
 
-  optional-dependencies = with python3.pkgs; {
+  optional-dependencies = with python.pkgs; {
     aws = [ boto3 ];
     azure = [
       azure-storage-blob
···
   };
 
   nativeCheckInputs =
-    [ git ]
-    ++ (with python3.pkgs; [
+    [
+      addBinToPathHook
+      gitMinimal
+      versionCheckHook
+      writableTmpDirAsHomeHook
+    ]
+    ++ (with python.pkgs; [
       pytest-asyncio
       pytest-mock
       pytest-timeout
+      pytest-xdist
       pytestCheckHook
     ]);
-
-  preCheck = ''
-    export HOME=$(mktemp -d)
-    export PATH="$PATH:$out/bin"
-  '';
-
-  pytestFlagsArray = [ "tests/unit" ];
+  versionCheckProgramArg = "--version";
 
   disabledTests = [
     # Fails because of dbfs CLI wrong call
···
     "test_python_basic_sanity_check"
   ];
 
-  disabledTestPaths = [
-    "tests/unit/api/"
-    "tests/unit/api/test_build.py"
-    "tests/unit/api/test_destroyer.py"
-    "tests/unit/api/test_jinja.py"
-    "tests/unit/commands/test_configure.py"
-    "tests/unit/commands/test_deploy_jinja_variables_file.py"
-    "tests/unit/commands/test_deploy.py"
-    "tests/unit/commands/test_destroy.py"
-    "tests/unit/commands/test_execute.py"
-    "tests/unit/commands/test_help.py"
-    "tests/unit/commands/test_launch.py"
-    "tests/unit/models/test_deployment.py"
-    "tests/unit/models/test_destroyer.py"
-    "tests/unit/models/test_task.py"
-    "tests/unit/sync/test_commands.py"
-    "tests/unit/utils/test_common.py"
+  disabledTestPaths = lib.optionals stdenv.hostPlatform.isDarwin [
+    # ERROR fsevents:fsevents.py:310 Unhandled exception in FSEventsEmitter
+    # SystemError: Cannot start fsevents stream. Use a kqueue or polling observer instead.
+    "tests/unit/sync/test_event_handler.py"
   ];
 
   pythonImportsCheck = [ "dbx" ];
 
-  meta = with lib; {
+  meta = {
     description = "CLI tool for advanced Databricks jobs management";
     homepage = "https://github.com/databrickslabs/dbx";
     changelog = "https://github.com/databrickslabs/dbx/blob/v${version}/CHANGELOG.md";
-    license = licenses.databricks-dbx;
-    maintainers = with maintainers; [ GuillaumeDesforges ];
+    license = lib.licenses.databricks-dbx;
+    maintainers = with lib.maintainers; [ GuillaumeDesforges ];
   };
 }

pkgs/by-name/de/delve/package.nix

···
 
 buildGoModule rec {
   pname = "delve";
-  version = "1.24.0";
+  version = "1.24.1";
 
   src = fetchFromGitHub {
     owner = "go-delve";
     repo = "delve";
     rev = "v${version}";
-    hash = "sha256-R1MTMRAIceHv9apKTV+k4d8KoBaRJSZCflxqhgfQWu4=";
+    hash = "sha256-QAFCJ5oQYHDXrNLptRdAWzzbX6J9XVgnmsB3eZ3Lko8=";
   };
 
   vendorHash = null;

pkgs/by-name/de/descent3-unwrapped/package.nix

···
   # the wrapped version of Descent 3. Once there’s a stable version of Descent
   # 3 that supports the -additionaldir command-line option, we can stop using
   # an unstable version of Descent 3.
-  version = "1.5.0-beta-unstable-2025-03-06";
+  version = "1.5.0-beta-unstable-2025-03-11";
   src = fetchFromGitHub {
     owner = "DescentDevelopers";
     repo = "Descent3";
-    rev = "c99e57cfabb16b2b428d4827eedb26b8cc20a1ee";
+    rev = "231c62d581847171efeab9caa2666e578fb501f1";
     leaveDotGit = true;
     # Descent 3 is supposed to display its Git commit hash in the bottom right
     # corner of the main menu. That feature only works if either the .git
···
       git rev-parse --verify HEAD | tr --delete '\n' > git-hash.txt
       rm -r .git
     '';
-    hash = "sha256-HbEAv4HFZromeVfsH66m9PwinOG9qs5rQLGK5hkO3+A=";
+    hash = "sha256-UM3RHA+Lev+wUY73Mo2Y6zpGutRXM7uKM+e2Rwsf+XU=";
   };
 
   hardeningDisable = [ "format" ];

pkgs/by-name/do/docfx/package.nix

···
+{
+  lib,
+  buildDotnetGlobalTool,
+  dotnetCorePackages,
+}:
+
+buildDotnetGlobalTool {
+  pname = "docfx";
+  version = "2.78.3";
+
+  dotnet-sdk = dotnetCorePackages.sdk_8_0;
+  dotnet-runtime = dotnetCorePackages.runtime_8_0;
+
+  nugetHash = "sha256-hLb6OmxqXOOxFaq/N+aZ0sAzEYjU0giX3c1SWQtKDbs=";
+
+  meta = {
+    description = "Build your technical documentation site with docfx, with landing pages, markdown, API reference docs for .NET, REST API and more";
+    homepage = "https://github.com/dotnet/docfx";
+    license = lib.licenses.mit;
+    mainProgram = "docfx";
+    maintainers = with lib.maintainers; [ semtexerror ];
+  };
+}

pkgs/by-name/fi/find-billy/package.nix

···
   just,
   inkscape,
   imagemagick,
+  nix-update-script,
 }:
 
 stdenv.mkDerivation rec {
   pname = "find-billy";
-  version = "1.0.12";
+  version = "1.0.13";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "annaaurora";
     repo = "Find-Billy";
     rev = "v${version}";
-    hash = "sha256-A8pfkL000pl9ymQCHphb6HFip+Wah4k9Tc/8ruuHQlw=";
+    hash = "sha256-VpQpAODasJpHLU1UQ3NoVnrO+tvwdMNpPDNkg/NDM+4=";
   };
 
   strictDeps = true;
···
 
     runHook postInstall
   '';
+
+  passthru.updateScript = nix-update-script { };
 
   meta = with lib; {
     description = "2 dimensional Pixel Art Jump & Run";

pkgs/by-name/fi/firebase-tools/package.nix

···
   fetchFromGitHub,
   python3,
   xcbuild,
+  nix-update-script,
 }:
 buildNpmPackage rec {
   pname = "firebase-tools";
-  version = "13.32.0";
+  version = "13.34.0";
 
   src = fetchFromGitHub {
     owner = "firebase";
     repo = "firebase-tools";
     tag = "v${version}";
-    hash = "sha256-KImt8se4pf/W1XAV8PprYmJRWQqMIAH9FVCEFSV/3Ys=";
+    hash = "sha256-2Zyg7D0/JYQ/PSYsoOIa/aSjGibySP+XZNWpT+dct8k=";
   };
 
-  npmDepsHash = "sha256-/EWfXiITSV1r4zVvnHk+9U7MpcUlp7/MNUBJWRw3wRk=";
+  npmDepsHash = "sha256-3JaafJIfqhS7c8krdXwARufuVV/PG4emvbVv8H3gy8Q=";
 
   postPatch = ''
     ln -s npm-shrinkwrap.json package-lock.json
···
   env = {
     PUPPETEER_SKIP_DOWNLOAD = true;
   };
+
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     changelog = "https://github.com/firebase/firebase-tools/blob/v${version}/CHANGELOG.md";

pkgs/by-name/gh/ghciwatch/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "ghciwatch";
-  version = "1.1.3";
+  version = "1.1.5";
 
   src = fetchFromGitHub {
     owner = "MercuryTechnologies";
     repo = "ghciwatch";
     rev = "v${version}";
-    hash = "sha256-LE2QiqPjn3tLnGUC0EjfrTPmYrPt8Mt9TgVOM+uX2xM=";
+    hash = "sha256-K7BNGRilzi01loE0yS4CZFDNz8TQ9Z+fELO5HUvGObE=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-P4zpGuKE6KDG3Zrgp0TStbQmW28bQZCyCmUsoJiKwiU=";
+  cargoHash = "sha256-kH5YTadpaUXDma+7SfBJxrOIsd9Gm0EU3MfhFmQ3U80=";
 
   buildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
     darwin.apple_sdk.frameworks.CoreFoundation

pkgs/by-name/gl/globalping-cli/package.nix

···
-{ lib, buildGoModule, fetchFromGitHub, installShellFiles, nix-update-script }:
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  stdenv,
+  installShellFiles,
+  nix-update-script,
+}:
 
 buildGoModule rec {
   pname = "globalping-cli";
···
   nativeBuildInputs = [ installShellFiles ];
 
   env.CGO_ENABLED = 0;
-  ldflags = [ "-s" "-w" "-X main.version=${version}" ];
+  subPackages = [ "." ];
+  ldflags = [
+    "-s"
+    "-w"
+    "-X main.version=${version}"
+  ];
 
   preCheck = ''
     export HOME="$TMPDIR"
···
     in
     [ "-skip=^${builtins.concatStringsSep "|^" skippedTests}" ];
 
-  postInstall = ''
-    mv $out/bin/${pname} $out/bin/globalping
-    installShellCompletion --cmd globalping \
-      --bash <($out/bin/globalping completion bash) \
-      --fish <($out/bin/globalping completion fish) \
-      --zsh <($out/bin/globalping completion zsh)
-  '';
+  postInstall =
+    ''
+      mv $out/bin/globalping-cli $out/bin/globalping
+    ''
+    + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+      installShellCompletion --cmd globalping \
+        --bash <($out/bin/globalping completion bash) \
+        --fish <($out/bin/globalping completion fish) \
+        --zsh <($out/bin/globalping completion zsh)
+    '';
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/gm/gmic-qt/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gmic-qt${lib.optionalString (variant != "standalone") "-${variant}"}";
-  version = "3.4.2";
+  version = "3.5.0";
 
   src = fetchFromGitHub {
-    owner = "c-koi";
+    owner = "GreycLab";
     repo = "gmic-qt";
     rev = "v.${finalAttrs.version}";
-    hash = "sha256-fM6dBxBC2b1/v+rfiP//QaAcTJmMtYPn4OUNwVqKhYk=";
+    hash = "sha256-1fav1O75HBC7ySBgybn4goLFkX6HFbwRHARncfbkaoM=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gm/gmic/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gmic";
-  version = "3.4.3";
+  version = "3.5.3";
 
   outputs = [
     "out"
···
     owner = "GreycLab";
     repo = "gmic";
     rev = "v.${finalAttrs.version}";
-    hash = "sha256-dYHADdt9PboUgIRU6wu5uCs2KQ88z5/FZPXvvyYct00=";
+    hash = "sha256-DO9BtU0TW1HzCgrwx4Hocxlhl+tO0IztifqBloqmmtM=";
   };
 
   # TODO: build this from source
···
     url = "https://gmic.eu/gmic_stdlib_community${
       lib.replaceStrings [ "." ] [ "" ] finalAttrs.version
     }.h";
-    hash = "sha256-M/AL1w9KGi+dIGVQ+vdWY8PSCHi+s/aZef08AxeQMJE=";
+    hash = "sha256-LWAzg72MZ4kOTAS+2xwR3iVY8vPch3NAjx/uXX2Y0W4=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gr/grafana-alloy/package.nix

···
 
 buildGoModule rec {
   pname = "grafana-alloy";
-  version = "1.7.1";
+  version = "1.7.4";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "alloy";
     tag = "v${version}";
-    hash = "sha256-t1YDYQ+0RKHYaL/oE9XGjV7/g28rHO9avL6/CTfMHeE=";
+    hash = "sha256-vMNh7tvRYGJRRWcLePBbNlUU2qVNtKhOSwsfB1dWWRA=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-d9uWbZ+5YSnB3yqL/YZ0ld+8soO3oGb8gttzj3Q7MXs=";
+  vendorHash = "sha256-rZcqCcb++A8HYLVcGVWQ61fEXAqF0GXbTze/GGsF5bA=";
 
   nativeBuildInputs = [
     fixup-yarn-lock

pkgs/by-name/gr/grafana-image-renderer/package.json

···
     "@types/jest": "^29.5.12",
     "@types/jsdom": "20.0.0",
     "@types/multer": "^1.4.7",
-    "@types/node": "^18.7.18",
+    "@types/node": "^22.13.1",
     "@types/pixelmatch": "^5.2.6",
     "@types/supertest": "^2.0.15",
     "@typescript-eslint/eslint-plugin": "5.37.0",
     "@typescript-eslint/parser": "5.37.0",
+    "@yao-pkg/pkg": "^6.3.0",
     "axios": "1.7.4",
     "cross-env": "7.0.3",
     "eslint": "8.23.1",
···
     "jest": "^29.7.0",
     "jsonwebtoken": "^9.0.2",
     "lint-staged": "13.0.3",
-    "pkg": "^5.8.1",
     "prettier": "2.7.1",
     "supertest": "^7.0.0",
     "ts-jest": "^29.1.1",
···
   },
   "bin": "build/app.js",
   "engines": {
-    "node": ">= 18"
+    "node": ">= 22"
   }
 }

pkgs/by-name/gr/grafana-image-renderer/package.nix

···
 
 mkYarnPackage rec {
   pname = "grafana-image-renderer";
-  version = "3.12.1";
+  version = "3.12.3";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "grafana-image-renderer";
     rev = "v${version}";
-    hash = "sha256-j01C5h8RKZi/jcJyzXqgw0sAiBdVphi1kLxgqygVhkg=";
+    hash = "sha256-twB2V5iecLEMTrp+prFmDoJvcGLVQlLJ+DTSl/9V8S8=";
   };
 
   offlineCache = fetchYarnDeps {
     yarnLock = src + "/yarn.lock";
-    hash = "sha256-eYn69tlwCu3ohSCFdifMifvLgHgogv9aq6n8N363Hbw=";
+    hash = "sha256-TcsWApSR48OUIcQGko3XIaFCp22vFJbHcxrdFxUyRZU=";
   };
 
   packageJSON = ./package.json;

pkgs/by-name/ht/htop-vim/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "htop-vim";
-  version = "unstable-2023-02-16";
+  version = "3.4.0";
 
   src = fetchFromGitHub {
-    owner = "KoffeinFlummi";
+    owner = "htop-dev";
     repo = pname;
-    rev = "b2b58f8f152343b70c33b79ba51a298024278621";
-    hash = "sha256-ZfdBAlnjoy8g6xwrR/i2+dGldMOfLlX6DRlNqB8pkGM=";
+    rev = version;
+    hash = "sha256-4M2Kzy/tTpIZzpyubnXWywQh7Np5InT4sYkVG2v6wWs";
   };
 
   patches = [
-    # See https://github.com/htop-dev/htop/pull/1412
-    # Remove when updating to 3.4.0
     (fetchpatch2 {
-      name = "htop-resolve-configuration-path.patch";
-      url = "https://github.com/htop-dev/htop/commit/0dac8e7d38ec3aeae901a987717b5177986197e4.patch";
-      hash = "sha256-Er1d/yV1fioYfEmXNlLO5ayAyXkyy+IaGSx1KWXvlv0=";
+      name = "vim-keybindings.patch";
+      url = "https://aur.archlinux.org/cgit/aur.git/plain/vim-keybindings.patch?h=htop-vim&id=d10f022b3ca1207200187a55f5b116a5bd8224f7";
+      hash = "sha256-fZDTA2dCOmXxUYD6Wm41q7TxL7fgQOj8a/8yJC7Zags=";
     })
   ];
+
+  # upstream removed pkg-config support and uses dlopen now
+  postPatch =
+    let
+      libnlPath = lib.getLib libnl;
+    in
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      substituteInPlace configure.ac \
+        --replace-fail /usr/include/libnl3 ${lib.getDev libnl}/include/libnl3
+      substituteInPlace linux/LibNl.c \
+        --replace-fail libnl-3.so ${libnlPath}/lib/libnl-3.so \
+        --replace-fail libnl-genl-3.so ${libnlPath}/lib/libnl-genl-3.so
+    '';
 
   nativeBuildInputs = [ autoreconfHook ] ++ lib.optional stdenv.hostPlatform.isLinux pkg-config;
 
···
 
   meta = with lib; {
     description = "Interactive process viewer, with vim-style keybindings";
-    homepage = "https://github.com/KoffeinFlummi/htop-vim";
+    homepage = "https://aur.archlinux.org/packages/htop-vim";
     license = licenses.gpl2Only;
     platforms = platforms.all;
     maintainers = with maintainers; [ thiagokokada ];

pkgs/by-name/jb/jbigkit/package.nix

···
   fetchpatch,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "jbigkit";
   version = "2.1";
 
   src = fetchurl {
-    url = "https://www.cl.cam.ac.uk/~mgk25/jbigkit/download/${pname}-${version}.tar.gz";
-    sha256 = "0cnrcdr1dwp7h7m0a56qw09bv08krb37mpf7cml5sjdgpyv0cwfy";
+    url = "https://www.cl.cam.ac.uk/~mgk25/jbigkit/download/jbigkit-${finalAttrs.version}.tar.gz";
+    hash = "sha256-3nEGtr+vSV1oZcfdesbKE4G9EuDYFAXqgefyFnJj2TI=";
   };
 
   patches = [
+    # Archlinux patch: build shared object
+    (fetchpatch {
+      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-shared_lib.patch";
+      hash = "sha256-+efeeKg3FJ/TjSOj58kD+DwnaCm3zhGzKLfUes/d5rg=";
+    })
+    (fetchpatch {
+      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-ldflags.patch";
+      hash = "sha256-ik3NifyuhDHnIMTrNLAKInPgu2F5u6Gvk9daqrn8ZhY=";
+    })
+    # Archlinux patch: update coverity
+    (fetchpatch {
+      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-coverity.patch";
+      hash = "sha256-APm9A2f4sMufuY3cnL9HOcSCa9ov3pyzgQTTKLd49/E=";
+    })
+    # Archlinux patch: fix build warnings
+    (fetchpatch {
+      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-build_warnings.patch";
+      hash = "sha256-lDEJ1bvZ+zR7K4CiTq+aXJ8PGjILE3W13kznLLlGOOg=";
+    })
     # Archlinux patch: this helps users to reduce denial-of-service risks, as in CVE-2017-9937
     (fetchpatch {
       url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/0013-new-jbig.c-limit-s-maxmem-maximum-decoded-image-size.patch";
···
   ];
 
   makeFlags = [
+    "AR=${lib.getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ar"
     "CC=${stdenv.cc}/bin/${stdenv.cc.targetPrefix}cc"
-    "AR=${lib.getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ar"
+    "DESTDIR=${placeholder "out"}"
     "RANLIB=${lib.getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ranlib"
   ];
 
···
   installPhase = ''
     runHook preInstall
 
-    install -D -m644 libjbig/libjbig.a $out/lib/libjbig.a
-    install -D -m644 libjbig/libjbig85.a $out/lib/libjbig85.a
-    install -D -m644 libjbig/jbig.h $out/include/jbig.h
-    install -D -m644 libjbig/jbig_ar.h $out/include/jbig_ar.h
-    install -D -m644 libjbig/jbig85.h $out/include/jbig85.h
+    install -vDm 644 libjbig/*.h -t "$out/include/"
+    install -vDm 755 pbmtools/{jbgtopbm{,85},pbmtojbg{,85}} -t "$out/bin/"
+    install -vDm 644 pbmtools/*.1* -t "$out/share/man/man1/"
 
-    install -d -m755 $out/share/man/man1
-    install -m644 pbmtools/*.1* $out/share/man/man1
-
-    install -D -m755 pbmtools/jbgtopbm $out/bin/jbgtopbm
-    install -D -m755 pbmtools/pbmtojbg $out/bin/pbmtojbg
-    install -D -m755 pbmtools/jbgtopbm85 $out/bin/jbgtopbm85
-    install -D -m755 pbmtools/pbmtojbg85 $out/bin/pbmtojbg85
+    install -vDm 755 libjbig/*.so.* -t "$out/lib/"
+    for lib in libjbig.so libjbig85.so; do
+      ln -sv "$lib.${finalAttrs.version}" "$out/lib/$lib"
+      ln -sv "$out/lib/$lib.${finalAttrs.version}" "$out/lib/$lib.0"
+    done
 
     runHook postInstall
   '';
 
-  meta = with lib; {
+  doCheck = true;
+
+  meta = {
+    broken = stdenv.hostPlatform.isDarwin;
+    description = "Software implementation of the JBIG1 data compression standard";
     homepage = "http://www.cl.cam.ac.uk/~mgk25/jbigkit/";
-    description = "Software implementation of the JBIG1 data compression standard";
-    license = licenses.gpl2Plus;
-    platforms = platforms.all;
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.all;
   };
-}
+})

pkgs/by-name/ke/keycloak/package.nix

···
 in
 stdenv.mkDerivation rec {
   pname = "keycloak";
-  version = "26.1.3";
+  version = "26.1.4";
 
   src = fetchzip {
     url = "https://github.com/keycloak/keycloak/releases/download/${version}/keycloak-${version}.zip";
-    hash = "sha256-JtxUAs6tNCiYTFndmgyiIm7IlFAmBoXzrIIU165lbB4=";
+    hash = "sha256-pYUiTVJRoUTXfFv7B2Oi+0xofMf5yjhNsqTnV8ehAlU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/la/lanzaboote-tool/package.nix

···
   ];
 
   meta = with lib; {
-    description = "Lanzaboote UEFI tooling for SecureBoot enablement on NixOS systems";
+    description = "Lanzaboote UEFI tooling for SecureBoot enablement on NixOS systems (unwrapped; does not contain the required stub)";
     homepage = "https://github.com/nix-community/lanzaboote";
     license = licenses.gpl3Only;
-    mainProgram = "lzbt";
+    mainProgram = "lzbt-unwrapped";
     maintainers = with maintainers; [
       raitobezarius
       nikstur

pkgs/by-name/li/libblockdev/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "libblockdev";
-  version = "3.2.1";
+  version = "3.3.0";
 
   src = fetchFromGitHub {
     owner = "storaged-project";
     repo = "libblockdev";
     rev = finalAttrs.version;
-    hash = "sha256-85vfHHR6WqSPCW1QmD3HccIpOqNYrx1PDjTh297VA1A=";
+    hash = "sha256-Q7610i+2PQi+Oza3c2SwPneljrb+1cuFA4K4DQTpt8A=";
   };
 
   outputs = [ "out" "dev" "devdoc" "python" ];

pkgs/by-name/lo/lovely-injector/package.nix

···
   lib,
 }:
 let
-  version = "0.6.0";
-  lovelyInjector = fetchFromGitHub {
-    owner = "vgskye";
-    repo = "lovely-injector";
-    rev = "3224915f4d47b557c34b5012797cf92d4cc629af";
-    hash = "sha256-fzkuuu6pmvqeJa7qlX8jhtCLC4oYRLUm1hqHTRiYEX8=";
-  };
+  version = "0.7.1";
 in
 rustPlatform.buildRustPackage {
   pname = "lovely-injector";
   inherit version;
-  src = lovelyInjector;
+  src = fetchFromGitHub {
+    owner = "ethangreen-dev";
+    repo = "lovely-injector";
+    tag = "v${version}";
+    hash = "sha256-fzkuuu6pmvqeJa7qlX8jhtCLC4oYRLUm1hqHTRiYEX8=";
+  };
   useFetchCargoVendor = true;
   cargoHash = "sha256-Mkmj+ENdUge1V1cVAQOV2K01sYKEyhxTse0f5o6H6Xc=";
   # no tests
···
     homepage = "https://github.com/ethangreen-dev/lovely-injector";
     downloadPage = "https://github.com/ethangreen-dev/lovely-injector/releases";
     maintainers = [ lib.maintainers.antipatico ];
-    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    platforms = [ "x86_64-linux" ];
   };
 }

pkgs/by-name/ni/nix-forecast/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "nix-forecast";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "getchoo";
     repo = "nix-forecast";
     tag = "v${version}";
-    hash = "sha256-kNSH2QbryNAfZXILQzMk9MHDzX4420KyQJOKW0Xrl7c=";
+    hash = "sha256-di9RV4xSCqIa+UCdALAEdR0cDq3u799L3YyFyAF+bRg=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-M4gMvF7v1uxBPh8it0DWSSSgWeES/QXSApeCFW+0dlI=";
+  cargoHash = "sha256-n5LKfHBmua8iridnHY0C6ayjREwnqQpDI75+Ips4aNc=";
 
   nativeBuildInputs = [
     installShellFiles
     makeBinaryWrapper
   ];
 
-  doInstallCheck = true;
+  # TODO: Re-enable next update
+  # doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];
 
   # NOTE: Yes, we specifically need Nix. Lix does not have the newer

pkgs/by-name/od/odafileconverter/package.nix

···
   # To obtain the version you will need to run the following command:
   #
   # dpkg-deb -I ${odafileconverter.src} | grep Version
-  version = "25.11.0.0";
+  version = "25.12.0.0";
 
   src = fetchurl {
     # NB: this URL is not stable (i.e. the underlying file and the corresponding version will change over time)
-    url = "https://web.archive.org/web/20241212154957/https://www.opendesign.com/guestfiles/get?filename=ODAFileConverter_QT6_lnxX64_8.3dll_25.11.deb";
-    hash = "sha256-lykCOT9gmXZ3vGmak8mvrIMBEmGMJ/plmE3vkk9EjYo=";
+    url = "https://www.opendesign.com/guestfiles/get?filename=ODAFileConverter_QT6_lnxX64_8.3dll_25.12.deb";
+    hash = "sha256-bc5gFg7101GKqiKAx1w7DpoO24d3JpFccPKUUAfOrdw=";
   };
 
   buildInputs = [

pkgs/by-name/op/open-policy-agent/package.nix

···
 
 buildGoModule rec {
   pname = "open-policy-agent";
-  version = "1.1.0";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "open-policy-agent";
     repo = "opa";
     rev = "v${version}";
-    hash = "sha256-D1OTFc74I9CCGQzzMygbDhalpvFrTexz+JOGdU2rIR0=";
+    hash = "sha256-9pLySzYfLyRcbhKz+zusBFHNVnhtGyqlsrNr1AzDQx0=";
   };
 
   vendorHash = null;

pkgs/by-name/os/os-agent/package.nix

···
 
 buildGoModule rec {
   pname = "os-agent";
-  version = "1.7.1";
+  version = "1.7.2";
 
   src = fetchFromGitHub {
     owner = "home-assistant";
     repo = "os-agent";
     tag = "${version}";
-    hash = "sha256-/lY848qlgs87n23CbxVh0dZNPaOAPZUKHlkN8yvMEug=";
+    hash = "sha256-nny4gmSW8U9jdW//GXTn/zlmRhMbhf+4dbxju9Qs7zA=";
   };
 
   vendorHash = "sha256-9boWe/mvJ/C/I8B7b4hJgz2dEDgpKCNTE/8pVAsNTxg=";

pkgs/by-name/pa/pay-respects/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "pay-respects";
-  version = "0.6.13";
+  version = "0.6.14";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "iff";
     repo = "pay-respects";
     rev = "v${version}";
-    hash = "sha256-uiNGx0+tN75pGZy3kW0ibZfjT9Cs+P2M5fT5CtFwJDo=";
+    hash = "sha256-D6wkLrIzFpCTzOtVD8GcfBAZS48pNAIkTUTw3DRf7ds=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-ItXWks18xxb+bP35hBdB3UL5TNSo4vCc/Tm4+EX8NUs=";
+  cargoHash = "sha256-QdeU+0o68j5Y0IKouyJ8ypZghuS8NKxCUpmZxi+sxuk=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/ph/phase-cli/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "phase-cli";
-  version = "1.18.7";
+  version = "1.19.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "phasehq";
     repo = "cli";
     tag = "v${version}";
-    hash = "sha256-ggxTXI3NUHiK1aJqy19rgDlbZxPfGxnqvIlh3NVi9BY=";
+    hash = "sha256-E5vSF8/DLUH2zfGwbQ3XqELTSP4XR3cqfcMM8hMaOf4=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/rl/rlama/package.nix

···
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  pkg-config,
+  makeWrapper,
+  poppler-utils,
+  tesseract,
+  catdoc,
+  python3Packages,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+buildGoModule rec {
+  pname = "rlama";
+  version = "0.1.29";
+
+  src = fetchFromGitHub {
+    owner = "dontizi";
+    repo = "rlama";
+    tag = "v${version}";
+    hash = "sha256-Zaw2itvfUC+5fVHGfPQ+qWfjLzPqowAFt8kvBYHR9B0=";
+  };
+
+  vendorHash = "sha256-oJulwIMb9DpgRZFxw4/WMejrFONbCC8ni0YclS1WwT0=";
+
+  env.CGO_ENABLED = "0";
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  nativeBuildInputs = [
+    pkg-config
+    makeWrapper
+  ];
+
+  postInstall = ''
+    wrapProgram $out/bin/rlama \
+      --prefix PATH : ${
+        lib.makeBinPath [
+          poppler-utils
+          tesseract
+          catdoc
+          python3Packages.pdfminer-six
+          python3Packages.docx2txt
+          python3Packages.xlsx2csv
+        ]
+      }
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = [ "--version" ];
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Retrieval-Augmented Language Model Adapter";
+    homepage = "https://github.com/dontizi/rlama";
+    changelog = "https://github.com/dontizi/rlama/releases/tag/v${version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ liberodark ];
+    mainProgram = "rlama";
+  };
+}

pkgs/by-name/ru/ruff/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ruff";
-  version = "0.10.0";
+  version = "0.11.0";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "ruff";
     tag = finalAttrs.version;
-    hash = "sha256-/xeyJCK1E0KJF7f+HBuL8tz2mcNVS3rNf2tm2gTVVys=";
+    hash = "sha256-/CVpNBOBpvQhz7X80nUHC2x7ZxxCJH8O0WAABJKEriA=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-o0M2PWnsT3rNnB8R0ImNx4AYhDBVN6TlaN4IPdWQ1gc=";
+  cargoHash = "sha256-t2VRNmuKdl1kgZ5g2BS79PFKhJsxDHwxxuMRDcjt//k=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/ry/ryubing/package.nix

···
   cctools,
   darwin,
   dotnetCorePackages,
-  fetchFromGitHub,
+  fetchFromGitLab,
   libX11,
   libgdiplus,
   moltenvk,
···
   pname = "ryubing";
   version = "1.2.86";
 
-  src = fetchFromGitHub {
+  src = fetchFromGitLab {
+    domain = "git.ryujinx.app";
     owner = "Ryubing";
     repo = "Ryujinx";
-    rev = version;
-    hash = "sha256-fRdSmdejTK4BUAw5nj3hGCu5u2yZ+tZDN0PoCRzEZIw=";
+    tag = version;
+    hash = "sha256-Goxg2+zaKaqbGv5q/ril4TBtfTbPEYEwQQ/M6NlEpus=";
   };
 
   nativeBuildInputs = lib.optional stdenv.isDarwin [

pkgs/by-name/sn/snipe-it/package.nix

···
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "snipe-it";
-  version = "7.1.16";
+  version = "8.0.4";
 
   src = fetchFromGitHub {
     owner = "snipe";
     repo = "snipe-it";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-TGa/zI1hpF17EdyohGo4Lu+yAiF2gp6ZQACk7Tqq880=";
+    hash = "sha256-iS9PfWZlwWfxMkCJS7Lbp2+XxoGJz2yedn4nsu34YhU=";
   };
 
-  vendorHash = "sha256-jINYWbQ2jdYbG9YdP2elqm9Zk5X8/ksUZqLHkH/l6Gw=";
+  vendorHash = "sha256-6lNNwktcWU5FlzSPl1G4TW8OGMzLbWeVebNOvuYx9ls=";
 
   postInstall = ''
     snipe_it_out="$out/share/php/snipe-it"

pkgs/by-name/so/sol2/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "sol2";
-  version = "3.3.1";
+  version = "3.5.0";
   src = fetchFromGitHub {
     owner = "ThePhD";
     repo = "sol2";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-7QHZRudxq3hdsfEAYKKJydc4rv6lyN6UIt/2Zmaejx8=";
+    hash = "sha256-bW6HD9WLOWizli6LnrkFZKxiT8IdN0QESlok+xCFz1w=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/tw/twingate/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "twingate";
-  version = "2024.263.131851";
+  version = "2025.72.142645";
 
   src = fetchurl {
     url = "https://binaries.twingate.com/client/linux/DEB/x86_64/${version}/twingate-amd64.deb";
-    hash = "sha256-8rmTGCHROdq+g+IsuZUMbhXfQEKfiy0riSXjLZ2yDhA=";
+    hash = "sha256-8NIaPj6q2wPq908ZQt4Dihb0ffcc/pccrQD6lonsehc=";
   };
 
   buildInputs = [

pkgs/by-name/vi/virtnbdbackup/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "virtnbdbackup";
-  version = "2.21";
+  version = "2.22";
 
   src = fetchFromGitHub {
     owner = "abbbi";
     repo = "virtnbdbackup";
     tag = "v${version}";
-    hash = "sha256-gWxanvpfRf+2nZyBa0FAPImTIl7tomUzIbsdTR6kR5E=";
+    hash = "sha256-mJF6PYWGC65t9ckb256XsdGtV94jeJclGD3dpE6sW+U=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/zi/zipline/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "zipline";
-  version = "4.0.0";
+  version = "4.0.1";
 
   src = fetchFromGitHub {
     owner = "diced";
     repo = "zipline";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-q+/fjSvrPoTDwk+vxg7qltoJvD/cLcAG5fzKen1cAuk=";
+    hash = "sha256-HKd6OXnr9Xcxdaas0Pfvnq3nozFbOTcQsUxiIqDmvXI=";
   };
 
   pnpmDeps = pnpm_9.fetchDeps {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-rDm3LFFB65SdSfqABMZelhfx4Cq6u0EV3xdDp9lBR54=";
+    hash = "sha256-4dVhCv06ze7kmHhwejiMTleojzl//S0yabW7tPyeuT8=";
   };
 
   buildInputs = [ vips ];

pkgs/by-name/zw/zwave-js-ui/package.nix

···
 
 buildNpmPackage rec {
   pname = "zwave-js-ui";
-  version = "9.31.0";
+  version = "9.32.0";
 
   src = fetchFromGitHub {
     owner = "zwave-js";
     repo = "zwave-js-ui";
     tag = "v${version}";
-    hash = "sha256-KlJqzAgMyjA9OxCsKRICZ82ZBe+GpNuBvEHCtG5jvc4=";
+    hash = "sha256-DZm3IoLc28YMbwWL6+qHd5BSyRQswRatEvGmwuIzBZM=";
   };
-  npmDepsHash = "sha256-qy3hnZ9KvMRBJ+XVjxFdS8jQvlhvOEEZDcZUgQaFUT0=";
+  npmDepsHash = "sha256-FZ/iStpC5DiNthV42/QAzek261ZUAL1DOEIixVlArZ0=";
 
   passthru.tests.zwave-js-ui = nixosTests.zwave-js-ui;
 

pkgs/development/node-packages/aliases.nix

···
   "@mermaid-js/mermaid-cli" = pkgs.mermaid-cli; # added 2023-10-01
   "@nerdwallet/shepherd" = pkgs.shepherd; # added 2023-09-30
   "@nestjs/cli" = pkgs.nest-cli; # Added 2023-05-06
+  "@shopify/cli" = throw "@shopify/cli has been removed because it was broken"; # added 2025-03-12
   "@tailwindcss/language-server" = pkgs.tailwindcss-language-server; # added 2024-01-22
   "@volar/vue-language-server" = pkgs.vue-language-server; # added 2024-06-15
   "@vue/language-server" = pkgs.vue-language-server; # added 2024-06-15
···
   npm = pkgs.nodejs.overrideAttrs (old: { meta = old.meta // { mainProgram = "npm"; }; }); # added 2024-10-04
   inherit (pkgs) npm-check-updates; # added 2023-08-22
   ocaml-language-server = throw "ocaml-language-server was removed because it was abandoned upstream"; # added 2023-09-04
+  parcel = throw "parcel has been removed because it was broken"; # added 2025-03-12
   parcel-bundler = self.parcel; # added 2023-09-04
   inherit (pkgs) patch-package; # added 2024-06-29
   pkg = pkgs.vercel-pkg; # added 2023-10-04

pkgs/development/node-packages/node-packages.json

···
 , "@babel/cli"
 , "@commitlint/cli"
 , "@microsoft/rush"
-, "@shopify/cli"
 , "@tailwindcss/aspect-ratio"
 , "@tailwindcss/forms"
 , "@tailwindcss/line-clamp"
···
 , "npm-merge-driver"
 , "nrm"
 , "orval"
-, "parcel"
 , "parsoid"
 , "peerflix"
 , "peerflix-server"

pkgs/development/node-packages/node-packages.nix

···
     bypassCache = true;
     reconstructLock = true;
   };
-  "@shopify/cli" = nodeEnv.buildNodePackage {
-    name = "_at_shopify_slash_cli";
-    packageName = "@shopify/cli";
-    version = "3.75.4";
-    src = fetchurl {
-      url = "https://registry.npmjs.org/@shopify/cli/-/cli-3.75.4.tgz";
-      sha512 = "4+jcMOZiw6Nsm3007liTKA2inI9LwgM1HljCpLhT9aFMZZ+qqF1tbixBL08hbc1C44AuKsYuQtCrY531PBEIrA==";
-    };
-    dependencies = [
-      sources."@ast-grep/napi-0.33.0"
-      sources."esbuild-0.24.2"
-    ];
-    buildInputs = globalBuildInputs;
-    meta = {
-      description = "A CLI tool to build for the Shopify platform";
-      homepage = "https://github.com/shopify/cli#readme";
-      license = "MIT";
-    };
-    production = true;
-    bypassCache = true;
-    reconstructLock = true;
-  };
   "@tailwindcss/aspect-ratio" = nodeEnv.buildNodePackage {
     name = "_at_tailwindcss_slash_aspect-ratio";
     packageName = "@tailwindcss/aspect-ratio";
···
     meta = {
       description = "A swagger client generator for typescript";
       homepage = "https://github.com/orval-labs/orval#readme";
-      license = "MIT";
-    };
-    production = true;
-    bypassCache = true;
-    reconstructLock = true;
-  };
-  parcel = nodeEnv.buildNodePackage {
-    name = "parcel";
-    packageName = "parcel";
-    version = "2.13.3";
-    src = fetchurl {
-      url = "https://registry.npmjs.org/parcel/-/parcel-2.13.3.tgz";
-      sha512 = "8GrC8C7J8mwRpAlk7EJ7lwdFTbCN+dcXH2gy5AsEs9pLfzo9wvxOTx6W0fzSlvCOvZOita+8GdfYlGfEt0tRgA==";
-    };
-    dependencies = [
-      sources."@babel/code-frame-7.26.2"
-      sources."@babel/helper-validator-identifier-7.25.9"
-      sources."@isaacs/cliui-8.0.2"
-      sources."@jridgewell/gen-mapping-0.3.8"
-      sources."@jridgewell/resolve-uri-3.1.2"
-      sources."@jridgewell/set-array-1.2.1"
-      sources."@jridgewell/source-map-0.3.6"
-      sources."@jridgewell/sourcemap-codec-1.5.0"
-      sources."@jridgewell/trace-mapping-0.3.25"
-      sources."@lezer/common-1.2.3"
-      sources."@lezer/lr-1.4.2"
-      sources."@lmdb/lmdb-darwin-arm64-2.8.5"
-      sources."@lmdb/lmdb-darwin-x64-2.8.5"
-      sources."@lmdb/lmdb-linux-arm-2.8.5"
-      sources."@lmdb/lmdb-linux-arm64-2.8.5"
-      sources."@lmdb/lmdb-linux-x64-2.8.5"
-      sources."@lmdb/lmdb-win32-x64-2.8.5"
-      sources."@mischnic/json-sourcemap-0.1.1"
-      sources."@parcel/bundler-default-2.13.3"
-      sources."@parcel/cache-2.13.3"
-      sources."@parcel/codeframe-2.13.3"
-      sources."@parcel/compressor-raw-2.13.3"
-      sources."@parcel/config-default-2.13.3"
-      sources."@parcel/core-2.13.3"
-      sources."@parcel/diagnostic-2.13.3"
-      sources."@parcel/events-2.13.3"
-      sources."@parcel/feature-flags-2.13.3"
-      sources."@parcel/fs-2.13.3"
-      sources."@parcel/graph-3.3.3"
-      sources."@parcel/logger-2.13.3"
-      sources."@parcel/markdown-ansi-2.13.3"
-      sources."@parcel/namer-default-2.13.3"
-      sources."@parcel/node-resolver-core-3.4.3"
-      sources."@parcel/optimizer-css-2.13.3"
-      sources."@parcel/optimizer-htmlnano-2.13.3"
-      sources."@parcel/optimizer-image-2.13.3"
-      sources."@parcel/optimizer-svgo-2.13.3"
-      sources."@parcel/optimizer-swc-2.13.3"
-      sources."@parcel/package-manager-2.13.3"
-      sources."@parcel/packager-css-2.13.3"
-      sources."@parcel/packager-html-2.13.3"
-      sources."@parcel/packager-js-2.13.3"
-      sources."@parcel/packager-raw-2.13.3"
-      sources."@parcel/packager-svg-2.13.3"
-      sources."@parcel/packager-wasm-2.13.3"
-      sources."@parcel/plugin-2.13.3"
-      sources."@parcel/profiler-2.13.3"
-      sources."@parcel/reporter-cli-2.13.3"
-      sources."@parcel/reporter-dev-server-2.13.3"
-      sources."@parcel/reporter-tracer-2.13.3"
-      sources."@parcel/resolver-default-2.13.3"
-      sources."@parcel/runtime-browser-hmr-2.13.3"
-      sources."@parcel/runtime-js-2.13.3"
-      sources."@parcel/runtime-react-refresh-2.13.3"
-      sources."@parcel/runtime-service-worker-2.13.3"
-      sources."@parcel/rust-2.13.3"
-      sources."@parcel/source-map-2.1.1"
-      sources."@parcel/transformer-babel-2.13.3"
-      sources."@parcel/transformer-css-2.13.3"
-      (
-        sources."@parcel/transformer-html-2.13.3"
-        // {
-          dependencies = [
-            sources."dom-serializer-2.0.0"
-            sources."domhandler-5.0.3"
-            sources."domutils-3.2.2"
-            sources."entities-4.5.0"
-            sources."htmlparser2-9.1.0"
-            sources."posthtml-parser-0.12.1"
-          ];
-        }
-      )
-      sources."@parcel/transformer-image-2.13.3"
-      sources."@parcel/transformer-js-2.13.3"
-      sources."@parcel/transformer-json-2.13.3"
-      sources."@parcel/transformer-postcss-2.13.3"
-      (
-        sources."@parcel/transformer-posthtml-2.13.3"
-        // {
-          dependencies = [
-            sources."dom-serializer-2.0.0"
-            sources."domhandler-5.0.3"
-            sources."domutils-3.2.2"
-            sources."entities-4.5.0"
-            sources."htmlparser2-9.1.0"
-            sources."posthtml-parser-0.12.1"
-          ];
-        }
-      )
-      sources."@parcel/transformer-raw-2.13.3"
-      sources."@parcel/transformer-react-refresh-wrap-2.13.3"
-      (
-        sources."@parcel/transformer-svg-2.13.3"
-        // {
-          dependencies = [
-            sources."dom-serializer-2.0.0"
-            sources."domhandler-5.0.3"
-            sources."domutils-3.2.2"
-            sources."entities-4.5.0"
-            sources."htmlparser2-9.1.0"
-            sources."posthtml-parser-0.12.1"
-          ];
-        }
-      )
-      sources."@parcel/types-2.13.3"
-      sources."@parcel/types-internal-2.13.3"
-      sources."@parcel/utils-2.13.3"
-      sources."@parcel/watcher-2.5.1"
-      sources."@parcel/workers-2.13.3"
-      sources."@swc/core-1.10.18"
-      sources."@swc/counter-0.1.3"
-      sources."@swc/helpers-0.5.15"
-      sources."@swc/types-0.1.18"
-      sources."@trysound/sax-0.2.0"
-      sources."abab-2.0.6"
-      sources."acorn-8.14.0"
-      (
-        sources."acorn-globals-4.3.4"
-        // {
-          dependencies = [
-            sources."acorn-6.4.2"
-          ];
-        }
-      )
-      sources."acorn-walk-6.2.0"
-      sources."ajv-6.12.6"
-      sources."ansi-regex-5.0.1"
-      sources."ansi-styles-4.3.0"
-      sources."argparse-2.0.1"
-      sources."array-equal-1.0.2"
-      sources."asn1-0.2.6"
-      sources."assert-plus-1.0.0"
-      sources."async-limiter-1.0.1"
-      sources."asynckit-0.4.0"
-      sources."aws-sign2-0.7.0"
-      sources."aws4-1.13.2"
-      sources."balanced-match-1.0.2"
-      sources."base-x-3.0.10"
-      sources."bcrypt-pbkdf-1.0.2"
-      sources."boolbase-1.0.0"
-      sources."brace-expansion-2.0.1"
-      sources."braces-3.0.3"
-      sources."browser-process-hrtime-1.0.0"
-      sources."browserslist-4.24.4"
-      sources."buffer-from-1.1.2"
-      sources."callsites-3.1.0"
-      sources."caniuse-api-3.0.0"
-      sources."caniuse-lite-1.0.30001700"
-      sources."caseless-0.12.0"
-      sources."chalk-4.1.2"
-      sources."chrome-trace-event-1.0.4"
-      sources."clone-2.1.2"
-      sources."color-convert-2.0.1"
-      sources."color-name-1.1.4"
-      sources."colord-2.9.3"
-      sources."combined-stream-1.0.8"
-      sources."commander-12.1.0"
-      sources."concat-map-0.0.1"
-      sources."core-util-is-1.0.2"
-      sources."cosmiconfig-9.0.0"
-      sources."cross-spawn-7.0.6"
-      sources."css-declaration-sorter-7.2.0"
-      (
-        sources."css-select-5.1.0"
-        // {
-          dependencies = [
-            sources."dom-serializer-2.0.0"
-            sources."domhandler-5.0.3"
-            sources."domutils-3.2.2"
-            sources."entities-4.5.0"
-          ];
-        }
-      )
-      (
-        sources."css-tree-2.3.1"
-        // {
-          dependencies = [
-            sources."mdn-data-2.0.30"
-          ];
-        }
-      )
-      sources."css-what-6.1.0"
-      sources."cssesc-3.0.0"
-      sources."cssnano-7.0.6"
-      sources."cssnano-preset-default-7.0.6"
-      sources."cssnano-utils-5.0.0"
-      (
-        sources."csso-5.0.5"
-        // {
-          dependencies = [
-            sources."css-tree-2.2.1"
-          ];
-        }
-      )
-      sources."cssom-0.3.8"
-      sources."cssstyle-1.4.0"
-      sources."dashdash-1.14.1"
-      sources."data-urls-1.1.0"
-      sources."deep-is-0.1.4"
-      sources."delayed-stream-1.0.0"
-      sources."detect-libc-1.0.3"
-      (
-        sources."dom-serializer-1.4.1"
-        // {
-          dependencies = [
-            sources."entities-2.2.0"
-          ];
-        }
-      )
-      sources."domelementtype-2.3.0"
-      sources."domexception-1.0.1"
-      sources."domhandler-4.3.1"
-      sources."domutils-2.8.0"
-      sources."dotenv-16.4.7"
-      sources."dotenv-expand-11.0.7"
-      sources."eastasianwidth-0.2.0"
-      sources."ecc-jsbn-0.1.2"
-      sources."electron-to-chromium-1.5.104"
-      sources."emoji-regex-9.2.2"
-      sources."entities-3.0.1"
-      sources."env-paths-2.2.1"
-      sources."error-ex-1.3.2"
-      sources."escalade-3.2.0"
-      sources."escodegen-1.14.3"
-      sources."esprima-4.0.1"
-      sources."estraverse-4.3.0"
-      sources."esutils-2.0.3"
-      sources."extend-3.0.2"
-      sources."extsprintf-1.3.0"
-      sources."fast-deep-equal-3.1.3"
-      sources."fast-json-stable-stringify-2.1.0"
-      sources."fast-levenshtein-2.0.6"
-      sources."fill-range-7.1.1"
-      sources."foreground-child-3.3.1"
-      sources."forever-agent-0.6.1"
-      sources."form-data-2.3.3"
-      sources."fs.realpath-1.0.0"
-      sources."get-port-4.2.0"
-      sources."getpass-0.1.7"
-      sources."glob-10.4.5"
-      sources."globals-13.24.0"
-      sources."har-schema-2.0.0"
-      sources."har-validator-5.1.5"
-      sources."has-flag-4.0.0"
-      sources."html-encoding-sniffer-1.0.2"
-      sources."html-tags-1.2.0"
-      (
-        sources."htmlnano-2.1.1"
-        // {
-          dependencies = [
-            sources."srcset-5.0.1"
-          ];
-        }
-      )
-      sources."htmlparser2-7.2.0"
-      sources."http-signature-1.2.0"
-      sources."iconv-lite-0.4.24"
-      sources."import-fresh-3.3.1"
-      sources."indexes-of-1.0.1"
-      sources."inflight-1.0.6"
-      sources."inherits-2.0.4"
-      sources."is-absolute-url-3.0.3"
-      sources."is-arrayish-0.2.1"
-      sources."is-extglob-2.1.1"
-      sources."is-fullwidth-code-point-3.0.0"
-      sources."is-glob-4.0.3"
-      sources."is-html-1.1.0"
-      sources."is-json-2.0.1"
-      sources."is-number-7.0.0"
-      sources."is-typedarray-1.0.0"
-      sources."isexe-2.0.0"
-      sources."isstream-0.1.2"
-      sources."jackspeak-3.4.3"
-      sources."js-tokens-4.0.0"
-      sources."js-yaml-4.1.0"
-      sources."jsbn-0.1.1"
-      (
-        sources."jsdom-14.1.0"
-        // {
-          dependencies = [
-            sources."acorn-6.4.2"
-          ];
-        }
-      )
-      sources."json-parse-even-better-errors-2.3.1"
-      sources."json-schema-0.4.0"
-      sources."json-schema-traverse-0.4.1"
-      sources."json-stringify-safe-5.0.1"
-      sources."json5-2.2.3"
-      sources."jsprim-1.4.2"
-      sources."levn-0.3.0"
-      sources."lightningcss-1.29.1"
-      sources."lilconfig-3.1.3"
-      sources."lines-and-columns-1.2.4"
-      (
-        sources."lmdb-2.8.5"
-        // {
-          dependencies = [
-            sources."node-addon-api-6.1.0"
-          ];
-        }
-      )
-      sources."lodash-4.17.21"
-      sources."lodash.memoize-4.1.2"
-      sources."lodash.sortby-4.7.0"
-      sources."lodash.uniq-4.5.0"
-      sources."lru-cache-10.4.3"
-      sources."mdn-data-2.0.28"
-      sources."micromatch-4.0.8"
-      sources."mime-db-1.52.0"
-      sources."mime-types-2.1.35"
-      sources."minimatch-9.0.5"
-      sources."minipass-7.1.2"
-      sources."msgpackr-1.11.2"
-      sources."nanoid-3.3.8"
-      sources."node-addon-api-7.1.1"
-      (
-        sources."node-gyp-build-optional-packages-5.1.1"
-        // {
-          dependencies = [
-            sources."detect-libc-2.0.3"
-          ];
-        }
-      )
-      sources."node-releases-2.0.19"
-      sources."nth-check-2.1.1"
-      sources."nullthrows-1.1.1"
-      sources."nwsapi-2.2.16"
-      sources."oauth-sign-0.9.0"
-      sources."once-1.4.0"
-      sources."optionator-0.8.3"
-      sources."ordered-binary-1.5.3"
-      sources."package-json-from-dist-1.0.1"
-      sources."parent-module-1.0.1"
-      sources."parse-json-5.2.0"
-      sources."parse5-5.1.0"
-      sources."path-is-absolute-1.0.1"
-      sources."path-key-3.1.1"
-      sources."path-scurry-1.11.1"
-      sources."performance-now-2.1.0"
-      sources."picocolors-1.1.1"
-      sources."picomatch-2.3.1"
-      sources."pn-1.1.0"
-      sources."postcss-8.5.3"
-      sources."postcss-calc-10.1.1"
-      sources."postcss-colormin-7.0.2"
-      sources."postcss-convert-values-7.0.4"
-      (
-        sources."postcss-discard-comments-7.0.3"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."postcss-discard-duplicates-7.0.1"
-      sources."postcss-discard-empty-7.0.0"
-      sources."postcss-discard-overridden-7.0.0"
-      sources."postcss-merge-longhand-7.0.4"
-      (
-        sources."postcss-merge-rules-7.0.4"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."postcss-minify-font-values-7.0.0"
-      sources."postcss-minify-gradients-7.0.0"
-      sources."postcss-minify-params-7.0.2"
-      (
-        sources."postcss-minify-selectors-7.0.4"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."postcss-normalize-charset-7.0.0"
-      sources."postcss-normalize-display-values-7.0.0"
-      sources."postcss-normalize-positions-7.0.0"
-      sources."postcss-normalize-repeat-style-7.0.0"
-      sources."postcss-normalize-string-7.0.0"
-      sources."postcss-normalize-timing-functions-7.0.0"
-      sources."postcss-normalize-unicode-7.0.2"
-      sources."postcss-normalize-url-7.0.0"
-      sources."postcss-normalize-whitespace-7.0.0"
-      sources."postcss-ordered-values-7.0.1"
-      sources."postcss-reduce-initial-7.0.2"
-      sources."postcss-reduce-transforms-7.0.0"
-      sources."postcss-selector-parser-7.1.0"
-      sources."postcss-svgo-7.0.1"
-      (
-        sources."postcss-unique-selectors-7.0.3"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."postcss-value-parser-4.2.0"
-      sources."posthtml-0.16.6"
-      sources."posthtml-parser-0.11.0"
-      sources."posthtml-render-3.0.0"
-      sources."prelude-ls-1.1.2"
-      sources."psl-1.15.0"
-      sources."punycode-2.3.1"
-      (
-        sources."purgecss-6.0.0"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."qs-6.5.3"
-      sources."react-error-overlay-6.0.9"
-      sources."react-refresh-0.14.2"
-      sources."regenerator-runtime-0.14.1"
-      sources."relateurl-0.2.7"
-      sources."request-2.88.2"
-      sources."request-promise-core-1.1.4"
-      sources."request-promise-native-1.0.9"
-      sources."resolve-from-4.0.0"
-      sources."safe-buffer-5.2.1"
-      sources."safer-buffer-2.1.2"
-      sources."saxes-3.1.11"
-      sources."semver-7.7.1"
-      sources."shebang-command-2.0.0"
-      sources."shebang-regex-3.0.0"
-      sources."signal-exit-4.1.0"
-      sources."source-map-0.6.1"
-      sources."source-map-js-1.2.1"
-      sources."source-map-support-0.5.21"
-      sources."srcset-4.0.0"
-      sources."sshpk-1.18.0"
-      sources."stealthy-require-1.1.1"
-      sources."string-width-5.1.2"
-      (
-        sources."string-width-cjs-4.2.3"
-        // {
-          dependencies = [
-            sources."emoji-regex-8.0.0"
-            sources."strip-ansi-6.0.1"
-          ];
-        }
-      )
-      (
-        sources."strip-ansi-7.1.0"
-        // {
-          dependencies = [
-            sources."ansi-regex-6.1.0"
-          ];
-        }
-      )
-      sources."strip-ansi-cjs-6.0.1"
-      (
-        sources."stylehacks-7.0.4"
-        // {
-          dependencies = [
-            sources."postcss-selector-parser-6.1.2"
-          ];
-        }
-      )
-      sources."supports-color-7.2.0"
-      (
-        sources."svgo-3.3.2"
-        // {
-          dependencies = [
-            sources."commander-7.2.0"
-          ];
-        }
-      )
-      sources."symbol-tree-3.2.4"
-      sources."term-size-2.2.1"
-      (
-        sources."terser-5.39.0"
-        // {
-          dependencies = [
-            sources."commander-2.20.3"
-          ];
-        }
-      )
-      sources."timsort-0.3.0"
-      sources."to-regex-range-5.0.1"
-      sources."tough-cookie-2.5.0"
-      sources."tr46-1.0.1"
-      sources."tslib-2.8.1"
-      sources."tunnel-agent-0.6.0"
-      sources."tweetnacl-0.14.5"
-      sources."type-check-0.3.2"
-      sources."type-fest-0.20.2"
-      sources."typescript-5.7.3"
-      (
-        sources."uncss-0.17.3"
-        // {
-          dependencies = [
-            sources."brace-expansion-1.1.11"
-            sources."commander-2.20.3"
-            sources."glob-7.2.3"
-            sources."minimatch-3.1.2"
-            sources."picocolors-0.2.1"
-            sources."postcss-7.0.39"
-            sources."postcss-selector-parser-6.0.2"
-          ];
-        }
-      )
-      sources."uniq-1.0.1"
-      sources."update-browserslist-db-1.1.2"
-      sources."uri-js-4.4.1"
-      sources."util-deprecate-1.0.2"
-      sources."utility-types-3.11.0"
-      sources."uuid-3.4.0"
-      sources."verror-1.10.0"
-      sources."w3c-hr-time-1.0.2"
-      sources."w3c-xmlserializer-1.1.2"
-      sources."weak-lru-cache-1.2.2"
-      sources."webidl-conversions-4.0.2"
-      sources."whatwg-encoding-1.0.5"
-      sources."whatwg-mimetype-2.3.0"
-      sources."whatwg-url-7.1.0"
-      sources."which-2.0.2"
-      sources."word-wrap-1.2.5"
-      (
-        sources."wrap-ansi-8.1.0"
-        // {
-          dependencies = [
-            sources."ansi-styles-6.2.1"
-          ];
-        }
-      )
-      (
-        sources."wrap-ansi-cjs-7.0.0"
-        // {
-          dependencies = [
-            sources."emoji-regex-8.0.0"
-            sources."string-width-4.2.3"
-            sources."strip-ansi-6.0.1"
-          ];
-        }
-      )
-      sources."wrappy-1.0.2"
-      sources."ws-6.2.3"
-      sources."xml-name-validator-3.0.0"
-      sources."xmlchars-2.2.0"
-    ];
-    buildInputs = globalBuildInputs;
-    meta = {
-      description = "Blazing fast, zero configuration web application bundler";
-      homepage = "https://github.com/parcel-bundler/parcel#readme";
       license = "MIT";
     };
     production = true;

pkgs/development/python-modules/buienradar/default.nix

···
   vincenty,
   xmltodict,
   pytestCheckHook,
+  requests-mock,
+  syrupy,
 }:
 
 buildPythonPackage rec {
   pname = "buienradar";
-  version = "1.0.7";
-  format = "setuptools";
+  version = "1.0.9";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mjj4791";
     repo = "python-buienradar";
-    # https://github.com/mjj4791/python-buienradar/issues/14
     tag = version;
-    hash = "sha256-DwOysdA6B9DMH1j/1Oetx2rCgqwk/UggCdH0lBVS6Hw=";
+    hash = "sha256-DTdxzBe9fBOH5fHME++oq62xMtBKnjY7BCevwjl8VZ8=";
   };
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     docopt
     pytz
     requests
···
     xmltodict
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    pytestCheckHook
+    requests-mock
+    syrupy
+  ];
 
   disabledTests = [
     # require network connection
     "test_rain_data"
     "test_json_data"
     "test_xml_data"
+    # tests fail if run on a different day
+    "test_id_upper1"
+    "test_invalid_data"
+    "test_missing_data"
+    "test_readdata1_30"
+    "test_readdata1_60"
+    "test_readdata2_30"
+    "test_readdata2_60"
+    "test_readdata3"
+  ];
+
+  pytestFlagsArray = [
+    "--snapshot-warn-unused"
   ];
 
   pythonImportsCheck = [

pkgs/development/python-modules/huggingface-hub/default.nix

···
 
 buildPythonPackage rec {
   pname = "huggingface-hub";
-  version = "0.29.2";
+  version = "0.29.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "huggingface_hub";
     tag = "v${version}";
-    hash = "sha256-7KP40p7ULWOrkI62DSjmOgrQ0AdX++z+WaLy93L+3WY=";
+    hash = "sha256-zUI5awSEKJ4PuSdtRRe0XJCpr3KLLfI7R+dafUuzfRU=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/langsmith/default.nix

···
 
   # dependencies
   httpx,
-  langchain-core,
   orjson,
   pydantic,
   requests,

pkgs/development/python-modules/pysuez/default.nix

···
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  hatchling,
-  aiohttp,
-  pythonOlder,
-}:
-
-buildPythonPackage rec {
-  pname = "pysuez";
-  version = "2.0.3";
-  pyproject = true;
-
-  disabled = pythonOlder "3.8";
-
-  src = fetchFromGitHub {
-    owner = "jb101010-2";
-    repo = "pySuez";
-    tag = version;
-    hash = "sha256-D/XsJL393fDIKMB1Wyzods5hLsdU3Qgq8T5aTJ3SLrM=";
-  };
-
-  build-system = [ hatchling ];
-
-  dependencies = [ aiohttp ];
-
-  # Module has no tests
-  doCheck = false;
-
-  pythonImportsCheck = [ "pysuez" ];
-
-  meta = with lib; {
-    description = "Module to get water consumption data from Suez";
-    mainProgram = "pysuez";
-    homepage = "https://github.com/jb101010-2/pySuez";
-    changelog = "https://github.com/jb101010-2/pySuez/releases/tag/${version}";
-    license = licenses.asl20;
-    maintainers = with maintainers; [ fab ];
-  };
-}

pkgs/development/python-modules/stringzilla/default.nix

···
 
 buildPythonPackage rec {
   pname = "stringzilla";
-  version = "3.12.1";
+  version = "3.12.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ashvardanian";
     repo = "stringzilla";
     tag = "v${version}";
-    hash = "sha256-k1QkYzzumBTi7I0bFhFiBbUDBJLKNhVX9Su03imBPOw=";
+    hash = "sha256-ER2qaHIW6lmHHZjCIg1PZo1Hpra8vQWTfOk+KTO9GrU=";
   };
 
   postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''

pkgs/development/python-modules/structlog/default.nix

···
 {
   lib,
+  better-exceptions,
   buildPythonPackage,
   fetchFromGitHub,
   freezegun,
+  greenlet,
   hatch-fancy-pypi-readme,
   hatch-vcs,
   hatchling,
   pretend,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
+  rich,
   simplejson,
+  twisted,
 }:
 
 buildPythonPackage rec {
   pname = "structlog";
-  version = "25.1.0";
+  version = "25.2.0";
   pyproject = true;
-
-  disabled = pythonOlder "3.8";
 
   src = fetchFromGitHub {
     owner = "hynek";
     repo = "structlog";
     tag = version;
-    hash = "sha256-zhIiDy+Wnt03WDc4BwQpSfiZorDf8BHiORCw8TotgJU=";
+    hash = "sha256-sDJZMAXOfcBx+PgKt48nsATEiR5QvAfyrCP+qWiTzrc=";
   };
 
   build-system = [
···
   ];
 
   nativeCheckInputs = [
+    better-exceptions
     freezegun
+    greenlet
     pretend
     pytest-asyncio
     pytestCheckHook
+    rich
     simplejson
+    twisted
   ];
 
   pythonImportsCheck = [ "structlog" ];
 
-  meta = with lib; {
+  meta = {
     description = "Painless structural logging";
     homepage = "https://github.com/hynek/structlog";
     changelog = "https://github.com/hynek/structlog/blob/${src.tag}/CHANGELOG.md";
-    license = licenses.asl20;
-    maintainers = with maintainers; [ dotlambda ];
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ dotlambda ];
   };
 }

pkgs/development/python-modules/tesla-fleet-api/default.nix

···
 
 buildPythonPackage rec {
   pname = "tesla-fleet-api";
-  version = "0.9.12";
+  version = "0.9.13";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
···
     owner = "Teslemetry";
     repo = "python-tesla-fleet-api";
     tag = "v${version}";
-    hash = "sha256-1ir1x/uvcVoad82KaGAMm/S52MT7E5SkiTnUH2cWV34=";
+    hash = "sha256-Q+nALf5SBDjh6s6d8lZhFVIkz0vGvzRD8OgXX6v8mJY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/velbus-aio/default.nix

···
 
 buildPythonPackage rec {
   pname = "velbus-aio";
-  version = "2025.3.0";
+  version = "2025.3.1";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "Cereal2nd";
     repo = "velbus-aio";
     tag = version;
-    hash = "sha256-hcVKJq+3cnhHtYc27lAj92CHzW3woCxU9dJ5lvj5Kgc=";
+    hash = "sha256-4lfxY8+EUtTAyRB40p+nShzmC3Qbxu6MJn9Zo7bImyk=";
     fetchSubmodules = true;
   };
 

pkgs/development/python-modules/xknxproject/default.nix

···
 
 buildPythonPackage rec {
   pname = "xknxproject";
-  version = "3.8.1";
+  version = "3.8.2";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "XKNX";
     repo = "xknxproject";
     tag = version;
-    hash = "sha256-iuW83gKDJTgFkfSW32OPOuwyGLyFoZGKQGUDJkVUGAM=";
+    hash = "sha256-EIonCsolfAAFQpHuSFUuYAAZozjtqSwJCpw86Cc2d4I=";
   };
 
   build-system = [ setuptools ];

pkgs/kde/third-party/karousel/default.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "karousel";
-  version = "0.11";
+  version = "0.12";
 
   src = fetchFromGitHub {
     owner = "peterfajdiga";
     repo = "karousel";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-KAbOOOF8rMA6lwgn0gUQleh5EF7ISIvvi3OubuM/50w=";
+    hash = "sha256-BfEMLn49LN5e2TT0e9jPtfJNrvUC92D66HyvmDPJrV4=";
   };
 
   postPatch = ''

pkgs/servers/home-assistant/component-packages.nix

···
 # Do not edit!
 
 {
-  version = "2025.3.2";
+  version = "2025.3.3";
   components = {
     "3_day_blinds" =
       ps: with ps; [
···
       ];
     "suez_water" =
       ps: with ps; [
-        pysuez
+        pysuezv2
       ];
     "sun" =
       ps: with ps; [

pkgs/servers/home-assistant/custom-components/dirigera_platform/package.nix

···
 buildHomeAssistantComponent rec {
   owner = "sanjoyg";
   domain = "dirigera_platform";
-  version = "2.6.6";
+  version = "2.6.8";
 
   src = fetchFromGitHub {
     owner = "sanjoyg";
     repo = "dirigera_platform";
     rev = version;
-    hash = "sha256-OoTmEVjo6pzFQ5uoZOcmpOhVUoM2DM8HBAvJA58zjAU=";
+    hash = "sha256-FNcGl6INQlVP+P3qmExWLI1ALh9ZacjJAbNKRtgM3ms=";
   };
 
   postPatch = ''

pkgs/servers/home-assistant/custom-lovelace-modules/advanced-camera-card/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "advanced-camera-card";
-  version = "7.3.3";
+  version = "7.3.5";
 
   src = fetchzip {
     url = "https://github.com/dermotduffy/advanced-camera-card/releases/download/v${version}/advanced-camera-card.zip";
-    hash = "sha256-4qsOSfO8a2Wq+kO2l2CbjsEOM+pd4/ofcu41smnlV3E=";
+    hash = "sha256-DpQHSHZ+jmaUjepbUYiGJJ3d7xu2mj15Tts6DAXY4Ng=";
   };
 
   # TODO: build from source once yarn berry support lands in nixpkgs

pkgs/servers/home-assistant/default.nix

···
   extraBuildInputs = extraPackages python.pkgs;
 
   # Don't forget to run update-component-packages.py after updating
-  hassVersion = "2025.3.2";
+  hassVersion = "2025.3.3";
 
 in
 python.pkgs.buildPythonApplication rec {
···
     owner = "home-assistant";
     repo = "core";
     tag = version;
-    hash = "sha256-iL0yzgYlPIhdNEKwxCVqe1M1co+z7AMArbtxA0KJQoo=";
+    hash = "sha256-uWNK7izeaK5XZMNfDgq/npJ1PrmC/HYHvHc5NU7Rff8=";
   };
 
   # Secondary source is pypi sdist for translations
   sdist = fetchPypi {
     inherit pname version;
-    hash = "sha256-21WtUbqhsxv2DEy63zZ7dPGP+UE+snln3wLGbtICGDQ=";
+    hash = "sha256-axmqJRiOt5T8gr/eh7qXOQBMLrcR9ZSqLS8SlmTgkE8=";
   };
 
   build-system = with python.pkgs; [

pkgs/servers/home-assistant/pytest-homeassistant-custom-component.nix

···
 
 buildPythonPackage rec {
   pname = "pytest-homeassistant-custom-component";
-  version = "0.13.222";
+  version = "0.13.223";
   pyproject = true;
 
   disabled = pythonOlder "3.12";
···
     owner = "MatthewFlamm";
     repo = "pytest-homeassistant-custom-component";
     rev = "refs/tags/${version}";
-    hash = "sha256-a7bRxG2rDfxJ/1kfPQFXLaGxlGS6vuxADbJhs5qytkM=";
+    hash = "sha256-mt8byu88r76cVkZlu8LSiInm/jwboauo6YblY2aTulA=";
   };
 
   build-system = [ setuptools ];

pkgs/servers/home-assistant/stubs.nix

···
 
 buildPythonPackage rec {
   pname = "homeassistant-stubs";
-  version = "2025.3.2";
+  version = "2025.3.3";
   pyproject = true;
 
   disabled = python.version != home-assistant.python.version;
···
     owner = "KapJI";
     repo = "homeassistant-stubs";
     rev = "refs/tags/${version}";
-    hash = "sha256-aUkXbAyuyL8iZuWxFwVJNNYA6ANK8R2UrV5bA7MCLZc=";
+    hash = "sha256-SI43zL0DfXGfk/A8VhoUTq+3Q4N2730vBxEXRj8fgUI=";
   };
 
   build-system = [

pkgs/servers/home-assistant/update-component-packages.py

···
     "numpy": "numpy",
     "ollama-hass": "ollama",
     "paho-mqtt": "paho-mqtt",
-    "pysuezV2": "pysuez",
     "sentry-sdk": "sentry-sdk",
     "slackclient": "slack-sdk",
     "SQLAlchemy": "sqlalchemy",

pkgs/top-level/all-packages.nix

···
   sickgear = callPackage ../servers/sickbeard/sickgear.nix { };
 
   snipe-it = callPackage ../by-name/sn/snipe-it/package.nix {
-    php = php81;
+    php = php84;
   };
 
   spacecookie =

pkgs/top-level/python-aliases.nix

···
   pysparse = throw "pysparse has been abandoned upstream."; # added 2023-02-28
   pyspotify = throw "pyspotify has been removed because Spotify stopped supporting libspotify"; # added 2022-05-29
   PyStemmer = pystemmer; # added 2023-02-19
+  pysuez = pysuezv2; # added 2025-03-14
   pytado = python-tado; # added 2024-12-02
   pytest_6 = pytest; # added 2022-02-10
   pytestcov = pytest-cov; # added 2021-01-04

pkgs/top-level/python-packages.nix

···
 
   pysubs2 = callPackage ../development/python-modules/pysubs2 { };
 
-  pysuez = callPackage ../development/python-modules/pysuez { };
-
   pysuezv2 = callPackage ../development/python-modules/pysuezv2 { };
 
   pysqlitecipher = callPackage ../development/python-modules/pysqlitecipher { };