Merge remote-tracking branch 'origin/master' into staging-next

pkgs/applications/editors/manuskript/default.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "manuskript";
-  version = "0.16.1";
+  version = "0.17.0";
 
   format = "other";
 
···
     repo = pname;
     owner = "olivierkes";
     tag = version;
-    hash = "sha256-/Ryvv5mHdZ3iwMpZjOa62h8D2B00pzknJ70DfjDTPPA=";
+    hash = "sha256-jOhbN6lMx04q60S0VOABmSNE/x9Er9exFYvWJe2INlE=";
   };
 
   nativeBuildInputs = [ wrapQtAppsHook ];

pkgs/applications/networking/cluster/linkerd/edge.nix

···
 
 (callPackage ./generic.nix { }) {
   channel = "edge";
-  version = "25.6.2";
-  sha256 = "0499zs1iq1a8i2xyg5yb59c8r08nw3zlahbn8w4rsrfb5099924p";
-  vendorHash = "sha256-ePioPHA9gps76VncdPkDEDE3sLUlrCxr7CFsXqoR6KM=";
+  version = "25.7.1";
+  sha256 = "1aijd3ymh95hqa896iidmffc1wn7fs318z023vvqk80rryqha5pa";
+  vendorHash = "sha256-5/WtI24m260I4yy3PgIhh3c60anzlEjIBua41V9Gb1E=";
 }

pkgs/applications/networking/instant-messengers/discord/default.nix

···
   versions =
     if stdenv.hostPlatform.isLinux then
       {
-        stable = "0.0.98";
+        stable = "0.0.100";
         ptb = "0.0.148";
         canary = "0.0.709";
         development = "0.0.81";
···
     x86_64-linux = {
       stable = fetchurl {
         url = "https://stable.dl2.discordapp.net/apps/linux/${version}/discord-${version}.tar.gz";
-        hash = "sha256-JT3fIG5zj2tvVPN9hYxCUFInb78fuy8QeWeZClaYou8=";
+        hash = "sha256-3trE9awddfB1ZasJQjbQc0xOoTqIRY0thEwL7Uz5+O8=";
       };
       ptb = fetchurl {
         url = "https://ptb.dl2.discordapp.net/apps/linux/${version}/discord-ptb-${version}.tar.gz";

pkgs/by-name/au/autotiling-rs/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "autotiling-rs";
-  version = "0.1.3";
+  version = "0.1.4";
 
   src = fetchFromGitHub {
     owner = "ammgws";
     repo = "autotiling-rs";
     rev = "v${version}";
-    sha256 = "sha256-LQbmF2M6pWa0QEbKF770x8TFLMGrJeq5HnXHvLrDDPA=";
+    sha256 = "sha256-rihNlKaESxIEQ61FP6PzIg82yuwQ/R4GX5BA0Ss+I5w=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-s2r8517RgcMq+6S2M+gTI7a+C4AhxIkDOHG0XjRI4rI=";
+  cargoHash = "sha256-mXuI+kA8J2Bhli6HiX9h72i61cRbByKJQtUHHjCUza8=";
 
   meta = with lib; {
     description = "Autotiling for sway (and possibly i3)";

pkgs/by-name/co/copybara/package.nix

···
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "copybara";
-  version = "20250501";
+  version = "20250630";
 
   src = fetchurl {
     url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-a6ONq8mvSCLEAhdGdOCQWxnsflphZBkRt9K/U/ZF7IA=";
+    hash = "sha256-eXvFPzlQT3sVcXi+b6ze/3Llnv9T0S2cELdDbyHJ6Yg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/cr/crc/package.nix

···
 }:
 
 let
-  openShiftVersion = "4.18.2";
-  okdVersion = "4.15.0-0.okd-2024-02-23-163410";
-  microshiftVersion = "4.18.2";
+  openShiftVersion = "4.19.0";
+  okdVersion = "4.19.0-okd-scos.1";
+  microshiftVersion = "4.19.0";
   writeKey = "$(MODULEPATH)/pkg/crc/segment.WriteKey=cvpHsNcmGCJqVzf6YxrSnVlwFSAZaYtp";
-  gitCommit = "80aa80ab331ad193c67bbe0972ce15c662a6e52e";
-  gitHash = "sha256-6FZjFPKrrOm0idLdWCv89LOiaiFCFwiYL8j8zrMTgik=";
+  gitCommit = "47be8d03134694b9580c96dfd319594f8ce1e1c4";
+  gitHash = "sha256-KhUP4BHuQPv0vc5o5ujEK37gWYpnMMJ0DsMx1RwTtqI=";
 in
 buildGoModule (finalAttrs: {
   pname = "crc";
-  version = "2.51.0";
+  version = "2.52.0";
 
   src = fetchFromGitHub {
     owner = "crc-org";

pkgs/by-name/de/devcontainer/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "devcontainer";
-  version = "0.77.0";
+  version = "0.78.0";
 
   src = fetchFromGitHub {
     owner = "devcontainers";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/DImAFCz46lrlVtD/Ftrytz/tqsPgtPuWhjLomlmh5k=";
+    hash = "sha256-xQrfYtBL9hUiB6KZcA03KNgGfL8DpkxVNmjl+wS1L00=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-S4aBRGtrSVAE6Er9DZqGfpBGh8tEJVqTstWrqlAONBg=";
+    hash = "sha256-LqrNRBMAWUqJH0+a17dIJgpKFP2rlECnWi4eVFfUTFg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/er/ergo/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "ergo";
-  version = "5.0.27";
+  version = "6.0.0";
 
   src = fetchurl {
     url = "https://github.com/ergoplatform/ergo/releases/download/v${version}/ergo-${version}.jar";
-    sha256 = "sha256-cxIgV31++o9Tn5CsEyr4eWcvy8Os8zKHJkwa5EUzr6k=";
+    sha256 = "sha256-gHDXMirYSXMpBISMDW+Wh3o7BZuWnBG8CXV/thMh/Ww=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/fo/fopnu/package.nix

···
 
 stdenvNoCC.mkDerivation rec {
   pname = "fopnu";
-  version = "1.67";
+  version = "1.68";
 
   src = fetchurl {
     url = "https://download2.fopnu.com/download/fopnu-${version}-1.x86_64.manualinstall.tar.gz";
-    hash = "sha256-O8wmf+/moIZlxZfqozftWEABQR0qPbw41erCxfmV3Mc=";
+    hash = "sha256-q+nI0s4zu6+Lr8pdEyR8/zOkq5ULydYt2bntvzyalZo=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ga/garnet/package.nix

···
 
 buildDotnetModule rec {
   pname = "garnet";
-  version = "1.0.72";
+  version = "1.0.75";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "garnet";
     tag = "v${version}";
-    hash = "sha256-2hJl1JwwfAWZFEo1eUPXCoglj11qu1IzFkQlMl9lxm8=";
+    hash = "sha256-Kn5ZEBdYS4jIgd/D1RwwCEwsR49jEUa+HeXad7hPUlE=";
   };
 
   projectFile = "main/GarnetServer/GarnetServer.csproj";

pkgs/by-name/gi/gigalixir/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "gigalixir";
-  version = "1.14.0";
+  version = "1.15.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "gigalixir";
     repo = "gigalixir-cli";
     tag = "v${version}";
-    hash = "sha256-D7HbNQ0heQ0aXAA+z0JIwqWlerChPvzXrIGtXz+UiwQ=";
+    hash = "sha256-OCPxOVWHUvH3Tj9bR+aj2VUNNuY5GWhnDaSKRDqLSvI=";
   };
 
   postPatch = ''

pkgs/by-name/gi/gitlab-runner/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "gitlab-runner";
-  version = "18.1.0";
+  version = "18.1.1";
 
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-runner";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Bm3WP8d4Fpcjj/2Ljl9AuhULTMHvWjOKjhN3tx6lEQQ=";
+    hash = "sha256-XJgGw+7jC0b/UBI3p7RoamOSHGswtPaO4f/apARVW2Y=";
   };
 
-  vendorHash = "sha256-7efuq0D1X+HJF4RT5bSri2B0Ad/AzbsKWFYGdtQxA+Q=";
+  vendorHash = "sha256-G9qZKWI//ECG88Tu8zb8nEDSwNRabVMsrp7aQzVsxCY=";
 
   # For patchShebangs
   buildInputs = [ bash ];

pkgs/by-name/gr/grafana-dash-n-grab/package.nix

···
 
 buildGoModule rec {
   pname = "grafana-dash-n-grab";
-  version = "0.8.0";
+  version = "0.8.1";
 
   src = fetchFromGitHub {
     rev = "v${version}";
     owner = "esnet";
     repo = "gdg";
-    sha256 = "sha256-Ou8Yj20q7SGYuFnw3yFvjGHtKE+Uswqfbp9NJztqetU=";
+    sha256 = "sha256-Rt7MUiC8zTL4Ni18FKdzkk30G5fCH6ZxBxpHePO3/LE=";
   };
 
-  vendorHash = "sha256-ow5bVwKrvviS7jxpT2xkWX6YufFAM9v7V1o/mNn4Czg=";
+  vendorHash = "sha256-3BR3tB2CLT7aT+0DsKqA3rwle1RoJRv1/i38HBYkL/0=";
 
   ldflags = [
     "-s"

pkgs/by-name/in/inform6/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "inform6";
-  version = "6.42-r8";
+  version = "6.42-r9";
 
   src = fetchurl {
     url = "https://ifarchive.org/if-archive/infocom/compilers/inform6/source/inform-${version}.tar.gz";
-    sha256 = "sha256-Co3XNcr0LDGeEYTxIFmqTsaKm4q5VpLpVsTNnJHUX8o=";
+    sha256 = "sha256-aHYjqjdISnyUxtruDDWD0cHEOxBpvm3+TfNxtGofezQ=";
   };
 
   buildInputs = [ perl ];

pkgs/by-name/in/intel-media-sdk/package.nix

···
       midchildan
       pjungkamp
     ];
+    knownVulnerabilities = [
+      ''
+        End of life with various local privilege escalation vulnerabilites:
+          - CVE-2023-22656
+          - CVE-2023-45221
+          - CVE-2023-47169
+          - CVE-2023-47282
+          - CVE-2023-48368
+      ''
+    ];
     platforms = [ "x86_64-linux" ];
   };
 }

pkgs/by-name/jd/jdt-language-server/package.nix

···
 }:
 
 let
-  timestamp = "202505151856";
+  timestamp = "202506271502";
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "jdt-language-server";
-  version = "1.47.0";
+  version = "1.48.0";
 
   src = fetchurl {
     url = "https://download.eclipse.org/jdtls/milestones/${finalAttrs.version}/jdt-language-server-${finalAttrs.version}-${timestamp}.tar.gz";
-    hash = "sha256-NUJCaUk2AWzUhjWWfLKM1LBzV3na/pYwdxOdKCPM2jo=";
+    hash = "sha256-sKf6EkDiyvEpbVnqcJxSXUpjH779pJ5xguB+AMHeYsk=";
   };
 
   sourceRoot = ".";

pkgs/by-name/ka/kazumi/package.nix

···
 
 flutter332.buildFlutterApplication rec {
   pname = "kazumi";
-  version = "1.7.3";
+  version = "1.7.4";
 
   src = fetchFromGitHub {
     owner = "Predidit";
     repo = "Kazumi";
     tag = version;
-    hash = "sha256-xsJ7kOhmySPYURTgEI0yoXMOWQRcjbFHueeqOZ7HsbE=";
+    hash = "sha256-Tzg8vFu2/ZLHQ1Ijp4et+qNPX0ytTZ//zVqQHJ6QBxs=";
   };
 
   pubspecLock = lib.importJSON ./pubspec.lock.json;

pkgs/by-name/ka/kazumi/pubspec.lock.json

···
   },
   "sdks": {
     "dart": ">=3.7.0 <4.0.0",
-    "flutter": ">=3.32.2"
+    "flutter": ">=3.32.5"
   }
 }

pkgs/by-name/kt/ktop/package.nix

···
 
 buildGoModule rec {
   pname = "ktop";
-  version = "0.3.7";
+  version = "0.4.1";
   excludedPackages = [ ".ci" ];
 
   src = fetchFromGitHub {
     owner = "vladimirvivien";
     repo = "ktop";
     rev = "v${version}";
-    hash = "sha256-oxyEkDY53HjBgjWRajlcg+8Kx092lyLkPgOJleioO7o=";
+    hash = "sha256-5iFFYTZq5DcMYVnW90MKVDchVXzjXOPd5BeYcrqL9pQ=";
   };
 
-  vendorHash = "sha256-MLIcTHWo7lsqtAqH8naSvpS013t8KBVPRbch+CfeUNk=";
+  vendorHash = "sha256-qNrjyMMsFE2FmIJc46fYq08b3XFFZeLlspth5anjMm8=";
   ldflags = [
     "-s"
     "-w"

pkgs/by-name/la/lazysql/package.nix

···
 
 buildGoModule rec {
   pname = "lazysql";
-  version = "0.3.7";
+  version = "0.3.8";
 
   src = fetchFromGitHub {
     owner = "jorgerojas26";
     repo = "lazysql";
     rev = "v${version}";
-    hash = "sha256-fpzcCCLkUJGuTfQiADwLL2238LP0TJJMYAXUwCfPkFM=";
+    hash = "sha256-aRySSDNqxdu4kZRohvG/PmOK3Uipvnw9DctJ8h5vl2g=";
   };
 
   vendorHash = "sha256-LLOUTml/mz7edCUy82k+S5PfpFovgUTQr0BoQQXiVGs=";

pkgs/by-name/li/librewolf-bin-unwrapped/package.nix

···
 
   pname = "librewolf-bin-unwrapped";
 
-  version = "139.0.4-1";
+  version = "140.0.2-1";
 in
 
 stdenv.mkDerivation {
···
     url = "https://gitlab.com/api/v4/projects/44042130/packages/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz";
     hash =
       {
-        i686-linux = "sha256-JE/BaRr/idpGuKkNxN9syOLGddnT1jlvnP8LNkHUNXw=";
-        x86_64-linux = "sha256-kENor/EGKgeCltiJSn03JMpJAtHaHAsuHzWTU2Yx3+Y=";
-        aarch64-linux = "sha256-VYVicoH45aFXx8rJu//0ycI579f0Nc1PLj2VdL6vPNo=";
+        i686-linux = "sha256-yT0THuPV5kGqixPkP+lEWbsXzUQQaNVHXQ97TycLpTI=";
+        x86_64-linux = "sha256-CEH9ZPQ6H9o3YjH52fvy7RHRuQSGikpFG7BOEVft4oM=";
+        aarch64-linux = "sha256-7urFzyOQ5/KbIFdL34Fkb+Z6ORhDfXZFQoY8RkMcNao=";
       }
       .${stdenv.hostPlatform.system} or throwSystem;
   };

pkgs/by-name/mm/mmsd-tng/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mmsd-tng";
-  version = "2.6.3";
+  version = "2.6.4";
 
   src = fetchFromGitLab {
     owner = "kop316";
     repo = "mmsd";
     rev = finalAttrs.version;
-    hash = "sha256-kXl+T5A8Qw0PmJ47sned8dzTIYUmaWc8w6X6BLEdLIg=";
+    hash = "sha256-/nHsLs7C2W7bCjTPBBlAN+O7zP4bgVW0dBmjHaoY2I8=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/mo/moonraker/package.nix

···
 in
 stdenvNoCC.mkDerivation rec {
   pname = "moonraker";
-  version = "0.9.3-unstable-2025-06-12";
+  version = "0.9.3-unstable-2025-07-08";
 
   src = fetchFromGitHub {
     owner = "Arksine";
     repo = "moonraker";
-    rev = "ccbfd6498941cb4d8b49d192c8dd34feacfbe84a";
-    sha256 = "sha256-SCexS9dRbdwNSy5bTrGaEfP9EmkO3c/IL2+OIG7/K24=";
+    rev = "06cdffa169109f5ca1309903ad0ee7c2f7f62111";
+    sha256 = "sha256-zTwC96WdlUsHCi1a1Owaun207AzbvDTT5SvhLaZmTVM=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/ne/newt-go/package.nix pkgs/by-name/fo/fosrl-newt/package.nix

···
     homepage = "https://github.com/fosrl/newt";
     changelog = "https://github.com/fosrl/newt/releases/tag/${src.tag}";
     license = lib.licenses.agpl3Only;
-    maintainers = with lib.maintainers; [ fab ];
+    maintainers = with lib.maintainers; [
+      fab
+      jackr
+      sigmasquadron
+    ];
     mainProgram = "newt";
   };
 }

pkgs/by-name/nt/ntfy-sh/package.nix

···
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  buildNpmPackage,
+  nixosTests,
+  debianutils,
+  mkdocs,
+  python3,
+  python3Packages,
+}:
+
+buildGoModule (
+  finalAttrs:
+
+  let
+    ui = buildNpmPackage {
+      inherit (finalAttrs) src version;
+      pname = "ntfy-sh-ui";
+      npmDepsHash = "sha256-oiOv4d+Gxk43gUAZXrTpcsfuEEpGyJMYS19ZRHf9oF8=";
+
+      prePatch = ''
+        cd web/
+      '';
+
+      installPhase = ''
+        runHook preInstall
+
+        mv build/index.html build/app.html
+        rm build/config.js
+        mkdir -p $out
+        mv build/ $out/site
+
+        runHook postInstall
+      '';
+    };
+  in
+  {
+    pname = "ntfy-sh";
+    version = "2.13.0";
+
+    src = fetchFromGitHub {
+      owner = "binwiederhier";
+      repo = "ntfy";
+      tag = "v${finalAttrs.version}";
+      hash = "sha256-D4wLIGVItH5lZlfmgd2+QsqB4PHlyX4ORpwT1NGdV60=";
+    };
+
+    vendorHash = "sha256-7+nvkyLcdQZ/B4Lly4ygcOGxSLkXXqCqu7xvCB4+8Wo=";
+
+    doCheck = false;
+
+    ldflags = [
+      "-s"
+      "-w"
+      "-X main.version=${finalAttrs.version}"
+    ];
+
+    nativeBuildInputs = [
+      debianutils
+      mkdocs
+      python3
+      python3Packages.mkdocs-material
+      python3Packages.mkdocs-minify-plugin
+    ];
+
+    postPatch = ''
+      sed -i 's# /bin/echo# echo#' Makefile
+    '';
+
+    preBuild = ''
+      cp -r ${ui}/site/ server/
+      make docs-build
+    '';
+
+    passthru = {
+      updateScript = ./update.sh;
+      tests.ntfy-sh = nixosTests.ntfy-sh;
+    };
+
+    meta = {
+      description = "Send push notifications to your phone or desktop via PUT/POST";
+      homepage = "https://ntfy.sh";
+      license = lib.licenses.asl20;
+      maintainers = with lib.maintainers; [
+        arjan-s
+        fpletz
+      ];
+    };
+  }
+)

pkgs/by-name/ov/overturemaps/package.nix

···
 
 python3Packages.buildPythonPackage rec {
   pname = "overturemaps";
-  version = "0.14.0";
+  version = "0.15.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-UtYS5FcNBT9IIiybKUXK+jwGnXQ+oR/HQI3ntfV8NYg=";
+    hash = "sha256-XzD+G8ER6AbmJJpX5vq235K4DAh/h5OWWHtum5sV9MY=";
   };
 
   build-system = with python3Packages; [ poetry-core ];

pkgs/by-name/re/refine/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "refine";
-  version = "0.5.9";
+  version = "0.5.10";
   pyproject = false; # uses meson
 
   src = fetchFromGitLab {
···
     owner = "TheEvilSkeleton";
     repo = "Refine";
     tag = version;
-    hash = "sha256-jX2U6YZCvB8IxUHoByO4egqV40C/L/O8z7AIEYYHBRY=";
+    hash = "sha256-/CyenSdF0dZR6HLw9FTv+OhJfNg55/dGE9y1A1hbcPA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/su/sunshine/package.nix

···
   libglvnd,
   numactl,
   amf-headers,
-  intel-media-sdk,
   svt-av1,
   vulkan-loader,
   libappindicator,
···
     ++ lib.optionals cudaSupport [
       cudaPackages.cudatoolkit
       cudaPackages.cuda_cudart
-    ]
-    ++ lib.optionals stdenv.hostPlatform.isx86_64 [
-      intel-media-sdk
     ];
 
   runtimeDependencies = [

pkgs/by-name/sy/symbolicator/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "symbolicator";
-  version = "25.6.1";
+  version = "25.6.2";
 
   src = fetchFromGitHub {
     owner = "getsentry";
     repo = "symbolicator";
     rev = version;
-    hash = "sha256-11FxkZwMIbGQC3FXVoialDFLaXSuQshC84bSB/EogSI=";
+    hash = "sha256-So6WApFwgTlhwcQlxBUVlL/JPW1X+ZkJhFxb+0ZMI3o=";
     fetchSubmodules = true;
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-WkwpVFFUrcef1Hql5o/GqCKWLpQtWkmhpBBA/tc7iTU=";
+  cargoHash = "sha256-eQJ/V+4uvcg8v+b8DVJHGNbOq9OTCs/E6wU0WBuxsEA=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/sy/syrics/package.nix

···
 
 python3.pkgs.buildPythonApplication rec {
   pname = "syrics";
-  version = "0.1.2.0";
+  version = "0.1.2.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "akashrchandran";
     repo = "syrics";
     tag = "v${version}";
-    hash = "sha256-YoH5rgj0kt9fDILc9dTAFO5erOBWexuqT9hY7e6bj6Q=";
+    hash = "sha256-qRC376RcheiiRAmxwszXbz5CFkpsN6uREiCwc0/NUQg=";
   };
 
   build-system = [

pkgs/by-name/tu/tutanota-desktop/package.nix

···
 
 appimageTools.wrapType2 rec {
   pname = "tutanota-desktop";
-  version = "293.250624.0";
+  version = "293.250630.0";
 
   src = fetchurl {
     url = "https://github.com/tutao/tutanota/releases/download/tutanota-desktop-release-${version}/tutanota-desktop-linux.AppImage";
-    hash = "sha256-drt5RCky5ChefZb/aICIj7YfSjY+WvKiaMufZLj1UHU=";
+    hash = "sha256-USyNM4cQs+ugwkDwsookR3rDn2+6uir6NnL651jM85I=";
   };
 
   extraPkgs = pkgs: [ pkgs.libsecret ];

pkgs/by-name/wi/wipeout-rewrite/package.nix

···
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "wipeout-rewrite";
-  version = "0-unstable-2025-04-26";
+  version = "0-unstable-2025-06-14";
 
   src = fetchFromGitHub {
     owner = "phoboslab";
     repo = "wipeout-rewrite";
-    rev = "38159b447c53fe9d0e3a02c82f2c20eb21138afb";
-    hash = "sha256-dB90khtdj2386SYiHxE3OYt8iJjy640/4VRXGjqh1ww=";
+    rev = "e510130d893f24f9524c1413a4587996b9ff867c";
+    hash = "sha256-qKtOdDzRP0IjwS6dXEya06nJ9AMCpUNLwtf4RF3o9r4=";
   };
 
   enableParallelBuilding = true;

pkgs/by-name/zo/zoom-us/package.nix

···
   # and often with different versions. We write them on three lines
   # like this (rather than using {}) so that the updater script can
   # find where to edit them.
-  versions.aarch64-darwin = "6.5.1.58208";
-  versions.x86_64-darwin = "6.5.1.58208";
-  versions.x86_64-linux = "6.5.1.2550";
+  versions.aarch64-darwin = "6.5.3.58803";
+  versions.x86_64-darwin = "6.5.3.58803";
+  versions.x86_64-linux = "6.5.3.2773";
 
   srcs = {
     aarch64-darwin = fetchurl {
       url = "https://zoom.us/client/${versions.aarch64-darwin}/zoomusInstallerFull.pkg?archType=arm64";
       name = "zoomusInstallerFull.pkg";
-      hash = "sha256-hIYZ2OU5lww4MyRZOhcV4qQDGEN8Hdolw6a4g/ItcFQ=";
+      hash = "sha256-Cwr4xshh3PJ3Vi4tH60/qeAp9OsvqdGkoj8Fwe88K/0=";
     };
     x86_64-darwin = fetchurl {
       url = "https://zoom.us/client/${versions.x86_64-darwin}/zoomusInstallerFull.pkg";
-      hash = "sha256-t/xIrVfjAl6dM9RWa+imyFHqS2KIJsKnoU0fiDQL9dQ=";
+      hash = "sha256-45N/IhJpxZrxGVvqNWJC6ZiC6B3Srjd1Ucqxx+mc6eE=";
     };
     x86_64-linux = fetchurl {
       url = "https://zoom.us/client/${versions.x86_64-linux}/zoom_x86_64.pkg.tar.xz";
-      hash = "sha256-1YcbAlnUEk9R95r7RIuxAxNfRymdIOAjKkCw7a+1Lm4=";
+      hash = "sha256-laZg8uAo4KhgntYetAZGoGp0QPkK9EXPQh6kJ6VEkgE=";
     };
   };
 

pkgs/development/libraries/ffmpeg/generic.nix

···
   withLcms2 ? withFullDeps, # ICC profile support via lcms2
   withLzma ? withHeadlessDeps, # xz-utils
   withMetal ? false, # Unfree and requires manual downloading of files
-  withMfx ? withFullDeps && (with stdenv.hostPlatform; isLinux && !isAarch), # Hardware acceleration via intel-media-sdk/libmfx
+  withMfx ? false, # Hardware acceleration via intel-media-sdk/libmfx
   withModplug ? withFullDeps && !stdenv.hostPlatform.isDarwin, # ModPlug support
   withMp3lame ? withHeadlessDeps, # LAME MP3 encoder
   withMysofa ? withFullDeps, # HRTF support via SOFAlizer
···
   withVmaf ? withFullDeps && !stdenv.hostPlatform.isAarch64 && lib.versionAtLeast version "5", # Netflix's VMAF (Video Multi-Method Assessment Fusion)
   withVoAmrwbenc ? withFullDeps && withVersion3, # AMR-WB encoder
   withVorbis ? withHeadlessDeps, # Vorbis de/encoding, native encoder exists
-  withVpl ? false, # Hardware acceleration via intel libvpl
+  withVpl ? withFullDeps && stdenv.hostPlatform.isLinux, # Hardware acceleration via intel libvpl
   withVpx ? withHeadlessDeps && stdenv.buildPlatform == stdenv.hostPlatform, # VP8 & VP9 de/encoding
   withVulkan ? withHeadlessDeps && !stdenv.hostPlatform.isDarwin,
   withVvenc ? withFullDeps && lib.versionAtLeast version "7.1", # H.266/VVC encoding

pkgs/development/python-modules/pyswitchbot/default.nix

···
 
 buildPythonPackage rec {
   pname = "pyswitchbot";
-  version = "0.67.0";
+  version = "0.68.1";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "Danielhiversen";
     repo = "pySwitchbot";
     tag = version;
-    hash = "sha256-e2bzmJAwJ6BbqP3R0FmTG1UR6TsPggXJlSkO3wdPWQY=";
+    hash = "sha256-4GvFCl4E/VUPDG3Ssz5v3ou5goPfCFEpAa1wKc3R+Ao=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/wandb/default.nix

···
 
       # HandleAbandonedError / SystemExit when run in sandbox
       "test_makedirs_raises_oserror__uses_temp_dir"
+      "test_no_root_dir_access__uses_temp_dir"
 
       # AssertionError: Not all requests have been executed
       "test_image_refs"

pkgs/servers/http/tomcat/default.nix

···
   };
 
   tomcat10 = common {
-    version = "10.1.42";
-    hash = "sha256-m29iOmn6DMhQElyJVXPuZX9+5WYIl2uiapZEsF5J/ac=";
+    version = "10.1.43";
+    hash = "sha256-hZ0Vx/DgjlQ6klv4RyjuIWbHELFKYvvJvn9Y8XqpZ10=";
   };
 
   tomcat11 = common {

pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix

···
 }:
 buildFishPlugin {
   pname = "exercism-cli-fish-wrapper";
-  version = "0-unstable-2025-06-23";
+  version = "0-unstable-2025-06-27";
 
   src = fetchFromGitHub {
     owner = "glennj";
     repo = "exercism-cli-fish-wrapper";
-    rev = "eaaa6f482a635a12b844794f173a692e69d89688";
-    hash = "sha256-9TKCiGlYhNCnAJ52BWOeuEPY2Cu/Z+CsBYM1IJ8/On0=";
+    rev = "ab03e0a670d07ccaa4e72be7c1f3da1d1092ce3e";
+    hash = "sha256-wtxddxEob8L2tavoaZaM/AaEgDzMVkAo3Z1oEtIHxYU=";
   };
 
   passthru.updateScript = unstableGitUpdater { };

pkgs/tools/misc/ntfy-sh/default.nix

···
-{
-  lib,
-  buildGoModule,
-  fetchFromGitHub,
-  buildNpmPackage,
-  nixosTests,
-  debianutils,
-  mkdocs,
-  python3,
-  python3Packages,
-}:
-
-buildGoModule rec {
-  pname = "ntfy-sh";
-  version = "2.12.0";
-
-  src = fetchFromGitHub {
-    owner = "binwiederhier";
-    repo = "ntfy";
-    tag = "v${version}";
-    hash = "sha256-fnnDVx84dc0iHA1Xa7AgdiBzLxCm4UIZjbMkc24GLVI=";
-  };
-
-  vendorHash = "sha256-DXvQbVKFviGhTosW4F+FB/tbJBzM5FHULWv4cO3RnK4=";
-
-  ui = buildNpmPackage {
-    inherit src version;
-    pname = "ntfy-sh-ui";
-    npmDepsHash = "sha256-SmSItsOjpi874c2AK/3Xmtb0/PisXM+07eoQEEYWKt0=";
-
-    prePatch = ''
-      cd web/
-    '';
-
-    installPhase = ''
-      mv build/index.html build/app.html
-      rm build/config.js
-      mkdir -p $out
-      mv build/ $out/site
-    '';
-  };
-
-  doCheck = false;
-
-  ldflags = [
-    "-s"
-    "-w"
-    "-X main.version=${version}"
-  ];
-
-  nativeBuildInputs = [
-    debianutils
-    mkdocs
-    python3
-    python3Packages.mkdocs-material
-    python3Packages.mkdocs-minify-plugin
-  ];
-
-  postPatch = ''
-    sed -i 's# /bin/echo# echo#' Makefile
-  '';
-
-  preBuild = ''
-    cp -r ${ui}/site/ server/
-    make docs-build
-  '';
-
-  passthru = {
-    updateScript = ./update.sh;
-    tests.ntfy-sh = nixosTests.ntfy-sh;
-  };
-
-  meta = with lib; {
-    description = "Send push notifications to your phone or desktop via PUT/POST";
-    homepage = "https://ntfy.sh";
-    license = licenses.asl20;
-    maintainers = with maintainers; [
-      arjan-s
-      fpletz
-    ];
-  };
-}

pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix

···
 
 buildGoModule rec {
   pname = "steampipe-plugin-aws";
-  version = "1.16.1";
+  version = "1.17.0";
 
   src = fetchFromGitHub {
     owner = "turbot";
     repo = "steampipe-plugin-aws";
     tag = "v${version}";
-    hash = "sha256-xi7L9u1pUvUavguRVgGQQuFXzQ9olrisD3riawENf1A=";
+    hash = "sha256-fjxT3nG28CKdkvJSq/PJTqrttH0M96WlP1lWyh0sZtk=";
   };
 
   vendorHash = "sha256-pKgt1KWVHwdVgHHNwL/FO+hLHFsCbtUepiNFItLyIlo=";

pkgs/top-level/aliases.nix

···
   netbox_3_5 = throw "netbox 3.5 series has been removed as it was EOL"; # Added 2024-01-22
   netbox_3_7 = throw "netbox 3.7 series has been removed as it was EOL"; # Added 2025-04-23
   nettools = net-tools; # Added 2025-06-11
+  newt-go = fosrl-newt; # Added 2025-06-24
   nextcloud29 = throw ''
     Nextcloud v29 has been removed from `nixpkgs` as the support for is dropped
     by upstream in 2025-04. Please upgrade to at least Nextcloud v30 by declaring

pkgs/top-level/all-packages.nix

···
   # ntfsprogs are merged into ntfs-3g
   ntfsprogs = pkgs.ntfs3g;
 
-  ntfy-sh = callPackage ../tools/misc/ntfy-sh { };
-
   nvfancontrol = callPackage ../tools/misc/nvfancontrol {
     libXNVCtrl = linuxPackages.nvidia_x11.settings.libXNVCtrl;
   };