Merge master into staging-next

nixos/modules/services/monitoring/grafana.nix

···
       type = types.path;
     };
 
+    openFirewall = mkOption {
+      type = types.bool;
+      default = false;
+      description = "Open the ports in the firewall for the server.";
+    };
+
     settings = mkOption {
       description = ''
         Grafana settings. See <https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/>
···
         ln -fs ${cfg.package}/share/grafana/tools ${cfg.dataDir}
       '';
     };
+
+    networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ cfg.settings.server.http_port ];
 
     users.users.grafana = {
       uid = config.ids.uids.grafana;

nixos/modules/services/networking/kea.nix

···
 
   config =
     let
+      commonEnvironment = {
+        KEA_CONTROL_SOCKET_DIR = "/run/kea";
+        KEA_LOCKFILE_DIR = "/run/kea";
+        KEA_PIDFILE_DIR = "/run/kea";
+      };
+
       commonServiceConfig = {
-        ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
+        ExecReload = toString [
+          (lib.getExe' pkgs.coreutils "kill")
+          "-HUP"
+          "$MAINPID"
+        ];
         DynamicUser = true;
         User = "kea";
         ConfigurationDirectory = "kea";
+        Restart = "on-failure";
         RuntimeDirectory = "kea";
+        RuntimeDirectoryMode = "0750";
         RuntimeDirectoryPreserve = true;
         StateDirectory = "kea";
         UMask = "0077";
···
       lib.mkMerge [
         {
           environment.systemPackages = [ package ];
+
+          users.users.kea = {
+            isSystemUser = true;
+            group = "kea";
+          };
+          users.groups.kea = { };
         }
 
         (lib.mkIf cfg.ctrl-agent.enable {
···
               "kea-dhcp-ddns-server.service"
             ];
 
-            environment = {
-              KEA_PIDFILE_DIR = "/run/kea";
-              KEA_LOCKFILE_DIR = "/run/kea";
-            };
+            environment = commonEnvironment;
 
             restartTriggers = [
               ctrlAgentConfig
···
               "multi-user.target"
             ];
 
-            environment = {
-              KEA_PIDFILE_DIR = "/run/kea";
-              KEA_LOCKFILE_DIR = "/run/kea";
-            };
+            environment = commonEnvironment;
 
             restartTriggers = [
               dhcp4Config
···
               "multi-user.target"
             ];
 
-            environment = {
-              KEA_PIDFILE_DIR = "/run/kea";
-              KEA_LOCKFILE_DIR = "/run/kea";
-            };
+            environment = commonEnvironment;
 
             restartTriggers = [
               dhcp6Config
···
               "multi-user.target"
             ];
 
-            environment = {
-              KEA_PIDFILE_DIR = "/run/kea";
-              KEA_LOCKFILE_DIR = "/run/kea";
-            };
+            environment = commonEnvironment;
 
             restartTriggers = [
               dhcpDdnsConfig

nixos/modules/services/security/kanidm.nix

···
                 description = "The redirect URL of the service. These need to exactly match the OAuth2 redirect target";
                 type =
                   let
-                    originStrType = types.strMatching ".*://.*$";
+                    originStrType = types.strMatching ".*://?.*$";
                   in
                   types.either originStrType (types.nonEmptyListOf originStrType);
                 example = "https://someservice.example.com/auth/login";

nixos/modules/services/video/frigate.nix

···
       serviceConfig = {
         ExecStartPre = [
           (pkgs.writeShellScript "frigate-clear-cache" ''
-            rm --recursive --force /var/cache/frigate/*
+            shopt -s extglob
+            rm --recursive --force /var/cache/frigate/!(model_cache)
           '')
           (pkgs.writeShellScript "frigate-create-writable-config" ''
             cp --no-preserve=mode "${format.generate "frigate.yml" filteredConfig}" /run/frigate/frigate.yml

pkgs/applications/audio/pianobooster/default.nix pkgs/by-name/pi/pianobooster/package.nix

···
   fetchFromGitHub,
   cmake,
   pkg-config,
-  qttools,
   alsa-lib,
   ftgl,
   libGLU,
-  qtbase,
   rtmidi,
   libjack2,
   fluidsynth,
   soundfont-fluid,
   unzip,
-  wrapQtAppsHook,
+  libsForQt5,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "pianobooster";
   version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "pianobooster";
     repo = "PianoBooster";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-1WOlAm/HXSL6QK0Kd1mnFEZxxpMseTG+6WzgMNWt+RA=";
   };
 
···
   nativeBuildInputs = [
     cmake
     pkg-config
+  ]
+  ++ (with libsForQt5; [
     qttools
     wrapQtAppsHook
-  ];
+  ]);
 
   buildInputs = [
     alsa-lib
     ftgl
     libGLU
-    qtbase
+    libsForQt5.qtbase
     rtmidi
     libjack2
     fluidsynth
···
     )
   '';
 
-  meta = with lib; {
+  meta = {
     description = "MIDI file player that teaches you how to play the piano";
     mainProgram = "pianobooster";
     homepage = "https://github.com/pianobooster/PianoBooster";
-    license = licenses.gpl3Plus;
-    platforms = platforms.linux;
-    maintainers = with maintainers; [ orivej ];
+    license = lib.licenses.gpl3Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ orivej ];
   };
-}
+})

pkgs/applications/editors/vscode/extensions/default.nix

···
         mktplcRef = {
           name = "svelte-vscode";
           publisher = "svelte";
-          version = "109.9.0";
-          hash = "sha256-OgcFFYoJOtFVlOM12gYBG0AkliniawG6GdRtrFsjDIg=";
+          version = "109.10.0";
+          hash = "sha256-Rpzcf0ioM7faDWG1xcEuz6GNzU1lHZsGxGgaKwC8SKk=";
         };
         meta = {
           changelog = "https://github.com/sveltejs/language-tools/releases";

pkgs/applications/editors/vscode/extensions/streetsidesoftware.code-spell-checker-german/default.nix

···
   mktplcRef = {
     name = "code-spell-checker-german";
     publisher = "streetsidesoftware";
-    version = "2.3.3";
-    hash = "sha256-sEdr8SQDFWgCq77flvbReILgWtT/ao8cJjrgC7RKO80=";
+    version = "2.3.4";
+    hash = "sha256-zc0cv4AOswvYcC4xJOq2JEPMQ5qTj9Dad5HhxtNETEs=";
   };
   meta = {
     changelog = "https://marketplace.visualstudio.com/items/streetsidesoftware.code-spell-checker-german/changelog";

pkgs/applications/editors/vscode/vscodium.nix

···
 
   hash =
     {
-      x86_64-linux = "sha256-W1y/YOt4IP0XvsY5hDVY1u8yV8t5pLdayrvhYDIOylE=";
-      x86_64-darwin = "sha256-pGnOYDkuQUiYuu+bO8Mo/g0IFKrIxtdQMGDxRbmnDYQ=";
-      aarch64-linux = "sha256-SoA7LGgl0qw7bqVwSBN+cGLTVLTPweRJHqZEiPmdnRQ=";
-      aarch64-darwin = "sha256-ne1I80FxW9nwQcGipQPNpJcnpSiLA3CzCckb2lxEl70=";
-      armv7l-linux = "sha256-fN6VponkxBzCH+Xx4bwJSNsqv+/ZilBLZvFLgSKve3A=";
+      x86_64-linux = "sha256-ihRG4CNWFJ9E+F4cVm9ZWLyssY24POgAePf91cFaj6U=";
+      x86_64-darwin = "sha256-TDbTxuyMLK2z3jn+jDjofX/58gaiGdSWlpXUIZv9U1w=";
+      aarch64-linux = "sha256-NwcDwUc8ZtSXMsURIQjH5eWVzxXMFE4SEX6fi9UoUsc=";
+      aarch64-darwin = "sha256-OupASVZeXIWjnMTUv9la7WMGhCtOoUFIYsTFMHGyEfE=";
+      armv7l-linux = "sha256-kh76i3hxq588to2CNMJWzMB6WZa543phSrbbMxUGnSA=";
     }
     .${system} or throwSystem;
 
···
 
   # Please backport all compatible updates to the stable release.
   # This is important for the extension ecosystem.
-  version = "1.102.14746";
+  version = "1.102.24914";
   pname = "vscodium";
 
   executableName = "codium";

pkgs/applications/networking/cluster/terraform-providers/providers.json

···
     "vendorHash": "sha256-/dOiXO2aPkuZaFiwv/6AXJdIADgx8T7eOwvJfBBoqg8="
   },
   "btp": {
-    "hash": "sha256-FYheCO1Ch/NFiWvdLm0mAuheer9XcL9AhMYZ13Ag8Cs=",
+    "hash": "sha256-vXe8nD8x0p3krddfPzEso7KSkO+nPVC1eUP1CYN8WOk=",
     "homepage": "https://registry.terraform.io/providers/SAP/btp",
     "owner": "SAP",
     "repo": "terraform-provider-btp",
-    "rev": "v1.14.0",
+    "rev": "v1.15.0",
     "spdx": "Apache-2.0",
     "vendorHash": "sha256-r4Q7b7ZzK+ZDXhIabTSgP7HY5Q51Hz5ErnW+nV+ZIqA="
   },
···
     "vendorHash": "sha256-fP6brpY/wRI1Yjgapzi+FfOci65gxWeOZulXbGdilrE="
   },
   "linode": {
-    "hash": "sha256-3EBaRDf1ChC92iaYowJEpCIn/br/MxeQGqd47/xuEHo=",
+    "hash": "sha256-rpF/R2wYYwMp+p57NUXFuEw9UpjJUoGFqTbnuGi3j7E=",
     "homepage": "https://registry.terraform.io/providers/linode/linode",
     "owner": "linode",
     "repo": "terraform-provider-linode",
-    "rev": "v3.0.0",
+    "rev": "v3.1.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-o4C58i+/IhMQSziF6Ldb8P+3ojTYyXx9CS65/9ExLpE="
+    "vendorHash": "sha256-n+CNvbY02Z9mYSrnm3qfP6hLXqD+If00mM7m0Aq8608="
   },
   "linuxbox": {
     "hash": "sha256-svQRz1/PdVLpHoxOam1sfRTwHqgqs4ohJQs3IPMMAM4=",
···
     "vendorHash": "sha256-ofzbDmivXgH1i1Gjhpyp0bk3FDs5SnxwoRuNAWyMqyI="
   },
   "openstack": {
-    "hash": "sha256-N5PhTfFNA6jU12uDxSQpOriDOK6okOTh1aFZo3isA7E=",
+    "hash": "sha256-vACjj5wo2zqNls0VgKeylEW5rrsNv1jz5iKoEywBAEc=",
     "homepage": "https://registry.terraform.io/providers/terraform-provider-openstack/openstack",
     "owner": "terraform-provider-openstack",
     "repo": "terraform-provider-openstack",
-    "rev": "v3.3.1",
+    "rev": "v3.3.2",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-ke7Dd3I/6Mja8SzrDy/f4GGgcB3C9xpCT4KiCr0PNZw="
+    "vendorHash": "sha256-AlB9tC3KejgUAjjT2pY7Q2mTS/AV4QRusSnyPiOheXE="
   },
   "opentelekomcloud": {
     "hash": "sha256-HbtNk5UAr+q09mOICkKzh9wIP0HM9MFVVR6gEIBdnvs=",

pkgs/applications/video/mpv/scripts/manga-reader.nix

···
 buildLua {
   pname = "manga-reader";
 
-  version = "0-unstable-2025-05-01";
+  version = "0-unstable-2025-07-15";
   src = fetchFromGitHub {
     owner = "Dudemanguy";
     repo = "mpv-manga-reader";
-    rev = "01312a1bf84ff2de48483760b7c9d638ebe08e20";
-    hash = "sha256-j2uLB2pZiCKvMJBebXoXom9J5jJYMCA2Gz0QUI2yCQQ=";
+    rev = "bb4ec1208feb440ce430f0963373ab2db5b7d743";
+    hash = "sha256-Zz2rPnnQHz2BqCM3jEJD/FuFLKtiNGWvAZpiH7jyLmo=";
   };
   passthru.updateScript = unstableGitUpdater { };
 

pkgs/by-name/al/aliyun-cli/package.nix

···
 
 buildGoModule rec {
   pname = "aliyun-cli";
-  version = "3.0.290";
+  version = "3.0.291";
 
   src = fetchFromGitHub {
     owner = "aliyun";
     repo = "aliyun-cli";
     tag = "v${version}";
-    hash = "sha256-mYWG3L2qFNd2QqYiHiNPl2TgvGKJlFkPP6GEurkmSB8=";
+    hash = "sha256-/nrspG9pB8pOnkTpnY3/4872sfe1Wg14MnKftEz4YX0=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/al/alsa-plugins/package.nix

···
   meta = {
     description = "Various plugins for ALSA";
     homepage = "http://alsa-project.org/";
-    license = lib.licenses.lgpl21;
+
+    license = with lib.licenses; [
+      lgpl21Plus
+      lgpl2Plus # maemo plugin
+      gpl2Plus # attributes.m4 & usb_stream.h
+    ];
+
     maintainers = [ lib.maintainers.marcweber ];
     platforms = lib.platforms.linux;
   };

pkgs/by-name/au/audacious-plugins/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "audacious-plugins";
-  version = "4.4.2";
+  version = "4.5";
 
   src = fetchFromGitHub {
     owner = "audacious-media-player";
     repo = "audacious-plugins";
     rev = "${pname}-${version}";
-    hash = "sha256-fA7xB04WLlleLIBDEZOVqDQguKAXtTsJoedQ9A/ZHQg=";
+    hash = "sha256-2GsNIkvrjZ1EOXi6H5jagdawxXp0kVg7C4FaEZkMHwM=";
   };
 
   patches = [ ./0001-Set-plugindir-to-PREFIX-lib-audacious.patch ];

pkgs/by-name/au/audiobookshelf/source.json

···
 {
   "owner": "advplyr",
   "repo": "audiobookshelf",
-  "rev": "878f0787ba39ff82f9d5b6b5b5bb397ec667f010",
-  "hash": "sha256-XZVPLNnG+CRafRKeqFILKfmELEyt1RrIB1ssBO5nb/I=",
-  "version": "2.26.2",
-  "depsHash": "sha256-S++Q/sVFZX0qqWSjzMxzYR8ImjUVoNP5pGTqIkCGqVE=",
-  "clientDepsHash": "sha256-+DcweA3g8kdzDqHFencOnaMMx4BRZ+MTZg5BwQNzK2k="
+  "rev": "a7a3a565098791a8157ed54b46b5258bb97c141d",
+  "hash": "sha256-AnPHwb3ad6TvgQ9DJdOYwQ+RwE5+iMA7tDAPnviQ9YM=",
+  "version": "2.26.3",
+  "depsHash": "sha256-+UbOYtS0lumYajQklm0izgW6oNb0QcxvDKYtRSFICj8=",
+  "clientDepsHash": "sha256-5BHutO2aCvVWvN/LySMtgPPl9HQLsu8Tjj/k7FIiAr8="
 }

pkgs/by-name/ba/bant/package.nix

···
 in
 buildBazelPackage rec {
   pname = "bant";
-  version = "0.2.0";
+  version = "0.2.1";
 
   src = fetchFromGitHub {
     owner = "hzeller";
     repo = "bant";
     rev = "v${version}";
-    hash = "sha256-Qq35WhRFpmQwWPupcjnUo/SEFRSRynVIx+PiHEsGED8=";
+    hash = "sha256-xiTi4GrCeoI8hIEgYMAdzUPvJzYvXrvbo6MBq9my5Cw=";
   };
 
   bazelFlags = [

pkgs/by-name/da/darkhttpd/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "darkhttpd";
-  version = "1.16";
+  version = "1.17";
 
   src = fetchFromGitHub {
     owner = "emikulic";
     repo = "darkhttpd";
     rev = "v${version}";
-    sha256 = "sha256-dcNoGU08tu950PlwSghoZwGSaSbP8NJ5qhWUi3bAtZY=";
+    sha256 = "sha256-d5pDUY1EbVjykb4in4hhbgbjIXJtj133nRAQ84ASicQ=";
   };
 
   enableParallelBuilding = true;

pkgs/by-name/fn/fna3d/package.nix

···
     homepage = "https://fna-xna.github.io/";
     license = lib.licenses.mspl;
     platforms = lib.platforms.linux;
-    mainProgram = pname;
+    mainProgram = "fna3d";
     maintainers = with lib.maintainers; [ mrtnvgr ];
   };
 }

pkgs/by-name/fr/frr/package.nix

···
     owner = "FRRouting";
     repo = "frr";
     rev = "frr-${finalAttrs.version}";
-    hash = "sha256-62+WTabM+gx8CJDAb7LnTG45B1jcpWTTEouiQW3q468=";
+    hash = "sha256-p+pjWsWk/x1pdyp1zbT0GQUKnW1DprHcJLpg7t746Lc=";
   };
 
   # Without the std explicitly set, we may run into abseil-cpp

pkgs/by-name/fx/fx/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "fx";
-  version = "37.0.1";
+  version = "38.0.0";
 
   src = fetchFromGitHub {
     owner = "antonmedv";
     repo = "fx";
     tag = finalAttrs.version;
-    hash = "sha256-n2Jaw8ffRnMQ89OsV5HhRGkjD3n8p49N2jYyx3SUrjU=";
+    hash = "sha256-9g9xtnmM3ANsvfxqE8pMTxiiUj+uQadhBooRQYKQpTg=";
   };
 
   vendorHash = "sha256-yVAoswClpf5+1nwLyrLKLYFt9Noh2HRemif1e1nWm7M=";

pkgs/by-name/ga/gatekeeper/package.nix

···
 
 buildGoModule rec {
   pname = "gatekeeper";
-  version = "3.19.3";
+  version = "3.20.0";
 
   src = fetchFromGitHub {
     owner = "open-policy-agent";
     repo = "gatekeeper";
     tag = "v${version}";
-    hash = "sha256-FQ5Q9S/YvJQaa2mUWXv8huTK89SZ31UaFbBCEduGsyg=";
+    hash = "sha256-7DJWqm51eRGYTES2x05D2JSJwaaHiXgH4uq31nOIXIs=";
   };
 
   vendorHash = null;

pkgs/by-name/ge/geesefs/package.nix

···
 }:
 
 let
-  version = "0.43.0";
+  version = "0.43.1";
 in
 buildGoModule {
   pname = "geesefs";
···
     owner = "yandex-cloud";
     repo = "geesefs";
     rev = "v${version}";
-    hash = "sha256-KkKdqSev6xpYfEjDSLVs/gKc3NCvLrzukNEQT2Wuk+A=";
+    hash = "sha256-BJOhQRIvURz0UL/InSZwU/kdq/Ha0Idsqa0UZGf9aTU=";
   };
 
   # hashes differ per architecture otherwise.

pkgs/by-name/gh/ghost-cli/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ghost-cli";
-  version = "1.27.0";
+  version = "1.27.1";
 
   src = fetchFromGitHub {
     owner = "TryGhost";
     repo = "Ghost-CLI";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xOchKEktagamLJQONI9SJsv5vypVpBOAy/SWGdSzjLc=";
+    hash = "sha256-ka+fqfUw6SSixrSHV2rbFsAqEM2f/yTQNcGONJKTRMc=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-Dgy+Ab0OaapjuuuRMcfHtzpsrfI5uPItXDY4XE9iK3A=";
+    hash = "sha256-SaekfV1QZw6PIJm8GtyjZmCSNIc0aXolz1mEyTwVERM=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gi/git-spice/package.nix

···
 
 buildGo124Module rec {
   pname = "git-spice";
-  version = "0.15.1";
+  version = "0.15.2";
 
   src = fetchFromGitHub {
     owner = "abhinav";
     repo = "git-spice";
     tag = "v${version}";
-    hash = "sha256-mx34JGgY6qKhPdZVs1Z9gVO/VhHnFrl6TThq5dEz/zc=";
+    hash = "sha256-vpBQdkP5jC3glGykLCd3/df4Lhi0MeU0XLnlTNDp1bM=";
   };
 
   vendorHash = "sha256-uh4GUkfWo12pYQD/Mpw+EWwmukHUpxOii7DTu6C84zo=";
···
 
   __darwinAllowLocalNetworking = true;
 
-  preCheck = lib.optionalString (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) ''
+  preCheck = ''
+    # timeout on both aarch64-darwin and x86_64-linux
+    rm testdata/script/issue725_pre_push_hook_worktree.txt
+
+    # failing on both aarch64-darwin and x86_64-linux
+    # TODO: check if this still fails after next release
+    rm testdata/script/branch_restack_conflict_no_edit.txt
+  ''
+
+  + lib.optionalString (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) ''
     # timeout
     rm testdata/script/branch_submit_remote_prompt.txt
     rm testdata/script/branch_submit_multiple_pr_templates.txt

pkgs/by-name/gn/gnome-notes/package.nix

···
   libuuid,
   curl,
   libhandy,
-  webkitgtk_4_0,
+  webkitgtk_4_1,
   gnome,
   adwaita-icon-theme,
   libxml2,
···
     (fetchpatch {
       url = "https://gitlab.gnome.org/GNOME/gnome-notes/-/commit/994af76ce5144062d55d141129bf6bf5fab002ee.patch";
       hash = "sha256-z7dPOLZzaqvdqUIDy6+V3dKossRbG0EDjBu2oJCF6b4=";
+    })
+
+    # build: Depend on webkit2gtk-4.1
+    # https://gitlab.gnome.org/GNOME/gnome-notes/-/merge_requests/200
+    (fetchpatch {
+      url = "https://gitlab.gnome.org/GNOME/gnome-notes/-/commit/0791507873c96d0463cd0c83108415541f854edd.patch";
+      hash = "sha256-TwCi9sDudeiOjrH2VevAynxvy/WTmwB2HrWqhviPg8o=";
     })
   ];
 
···
     libuuid
     curl
     libhandy
-    webkitgtk_4_0
+    webkitgtk_4_1
     tinysparql
     gnome-online-accounts
     gsettings-desktop-schemas

pkgs/by-name/gr/gradia/package.nix

···
   meson,
   ninja,
   appstream,
+  gtksourceview5,
   desktop-file-utils,
   gobject-introspection,
   wrapGAppsHook4,
···
   ];
 
   buildInputs = [
+    gtksourceview5
     libadwaita
     libportal-gtk4
     libsoup_3

pkgs/by-name/gt/gthumb/package.nix

···
   libtiff,
   gst_all_1,
   libraw,
-  libsoup_2_4,
-  libsecret,
   glib,
   gtk3,
   gsettings-desktop-schemas,
-  libchamplain,
   libjxl,
   librsvg,
   libwebp,
   libX11,
-  json-glib,
   lcms2,
   bison,
   flex,
···
   python3,
   desktop-file-utils,
   itstool,
-  withWebservices ? true,
-  webkitgtk_4_0,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
···
     gst_all_1.gst-plugins-bad
     gst_all_1.gst-plugins-ugly
     gtk3
-    json-glib
     lcms2
-    libchamplain
     libheif
     libjpeg
     libjxl
     libraw
     librsvg
-    libsecret
-    libsoup_2_4
     libtiff
     libwebp
     libX11
-  ]
-  ++ lib.optional withWebservices webkitgtk_4_0;
+  ];
 
   mesonFlags = [
-    "-Dlibchamplain=true"
     "-Dlibjxl=true"
-    (lib.mesonBool "webservices" withWebservices)
+    # Depends on libsoup2.
+    # https://gitlab.gnome.org/GNOME/gthumb/-/issues/244
+    "-Dlibchamplain=false"
+    "-Dwebservices=false"
   ];
 
   postPatch = ''
···
     mainProgram = "gthumb";
     platforms = platforms.linux;
     license = licenses.gpl2Plus;
-    maintainers = [ maintainers.mimame ];
+    maintainers = with maintainers; [
+      bobby285271
+      mimame
+    ];
   };
 })

pkgs/by-name/ht/httpdirfs/package.nix

···
     libuuid
   ];
 
+  env.NIX_CFLAGS_COMPILE = toString [
+    "-Wno-error=attribute-warning"
+    "-Wno-error=pedantic"
+  ];
+
   passthru = {
     tests.version = testers.testVersion {
       command = "${lib.getExe finalAttrs.finalPackage} --version";

pkgs/by-name/hy/hypnotix/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "hypnotix";
-  version = "4.9";
+  version = "5.0";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "hypnotix";
     rev = version;
-    hash = "sha256-mM6NeDtRoPUSQ/smtvpYJ3qqeqiPHquP96ChJgSJWL0=";
+    hash = "sha256-nBt+eGzUQaRO2IaEkvhdEZcVuKpZFEqIYSdVKSO1l4M=";
   };
 
   patches = [

pkgs/by-name/ke/kea/dont-create-var.patch

···
 diff --git a/Makefile.am b/Makefile.am
-index 10708e7..d4efd73 100644
+index a81f4cc..5d61407 100644
 --- a/Makefile.am
 +++ b/Makefile.am
-@@ -150,13 +150,6 @@ cppcheck:
+@@ -173,18 +173,6 @@ cppcheck:
  docs:
  	$(MAKE) -C doc/sphinx
  
 -
--# These steps are necessary during installation
+-# These steps are necessary during installation. chmod is for reinstallation/upgrade.
 -install-exec-hook:
--	mkdir -p $(DESTDIR)${localstatedir}/log/
--	mkdir -p $(DESTDIR)${localstatedir}/lib/${PACKAGE_NAME}
--	mkdir -p $(DESTDIR)${runstatedir}/${PACKAGE_NAME}
+-	mkdir -m 750 -p "$(DESTDIR)${localstatedir}/lib/${PACKAGE_NAME}"
+-	chmod 750 "$(DESTDIR)${localstatedir}/lib/${PACKAGE_NAME}"
+-	mkdir -m 750 -p "$(DESTDIR)${localstatedir}/log/${PACKAGE_NAME}"
+-	chmod 750 "$(DESTDIR)${localstatedir}/log/${PACKAGE_NAME}"
+-	mkdir -m 750 -p "$(DESTDIR)${runstatedir}/${PACKAGE_NAME}"
+-	chmod 750 "$(DESTDIR)${runstatedir}/${PACKAGE_NAME}"
+-	mkdir -m 750 -p "$(DESTDIR)${sysconfdir}/${PACKAGE_NAME}"
+-	chmod 750 "$(DESTDIR)${sysconfdir}/${PACKAGE_NAME}"
 -
  EXTRA_DIST  = tools/path_replacer.sh
  EXTRA_DIST += tools/mk_cfgrpt.sh
  
 diff --git a/src/lib/dhcpsrv/Makefile.am b/src/lib/dhcpsrv/Makefile.am
-index a0a0289..ba42f8a 100644
+index 7e0f3c4..08c53d8 100644
 --- a/src/lib/dhcpsrv/Makefile.am
 +++ b/src/lib/dhcpsrv/Makefile.am
-@@ -408,5 +408,3 @@ libkea_dhcpsrv_parsers_include_HEADERS = \
+@@ -420,6 +420,3 @@ libkea_dhcpsrv_parsers_include_HEADERS = \
+ 	parsers/shared_networks_list_parser.h \
  	parsers/simple_parser4.h \
  	parsers/simple_parser6.h
- 
+-
 -install-data-local:
 -	$(mkinstalldirs) $(DESTDIR)$(dhcp_data_dir)

pkgs/by-name/ke/kea/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "kea";
-  version = "2.6.2"; # only even minor versions are stable
+  version = "2.6.3"; # only even minor versions are stable
 
   src = fetchurl {
     url = "https://ftp.isc.org/isc/${pname}/${version}/${pname}-${version}.tar.gz";
-    hash = "sha256-ilC2MQNzS1nDuGGczWdm0t/uPwLjpfnzq8HNVfcPpCQ=";
+    hash = "sha256-ACQaWVX/09IVosCYxFJ/nX9LIDGIsnb5o2JQ3T2d1hI=";
   };
 
   patches = [
···
   ];
 
   postPatch = ''
-    substituteInPlace ./src/bin/keactrl/Makefile.am --replace '@sysconfdir@' "$out/etc"
+    substituteInPlace ./src/bin/keactrl/Makefile.am --replace-fail '@sysconfdir@' "$out/etc"
     # darwin special-casing just causes trouble
-    substituteInPlace ./m4macros/ax_crypto.m4 --replace 'apple-darwin' 'nope'
+    substituteInPlace ./m4macros/ax_crypto.m4 --replace-fail 'apple-darwin' 'nope'
   '';
 
   outputs = [

pkgs/by-name/ko/koboldcpp/package.nix

···
 in
 effectiveStdenv.mkDerivation (finalAttrs: {
   pname = "koboldcpp";
-  version = "1.95.1";
+  version = "1.96";
 
   src = fetchFromGitHub {
     owner = "LostRuins";
     repo = "koboldcpp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-aoVOEPK3hPuzkrHIFvDrnAw2D/OxXlRLXXP0CZJghx4=";
+    hash = "sha256-/kHx2v9g0o5eh38d9hlhc724vQNTXVpaX1GeQouJPhk=";
   };
 
   enableParallelBuilding = true;
···
     (makeBool "LLAMA_METAL" metalSupport)
     (lib.optionals cublasSupport "CUDA_DOCKER_ARCH=${builtins.head cudaArches}")
   ];
+
+  env = {
+    # Fixes an issue where "fprintf" is being called with a format string that isn't a string literal
+    NIX_CFLAGS_COMPILE = lib.optionalString vulkanSupport "-Wno-error=format-security";
+    NIX_CXXFLAGS_COMPILE = lib.optionalString vulkanSupport "-Wno-error=format-security";
+  };
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/kt/ktls-utils/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "ktls-utils";
-  version = "1.2.0";
+  version = "1.2.1";
 
   src = fetchFromGitHub {
     owner = "oracle";
     repo = "ktls-utils";
     rev = "ktls-utils-${version}";
-    hash = "sha256-cGvTuesaAMWVeJFQKdGKLGJJ4OMudOjqxCneViGl4IQ=";
+    hash = "sha256-aCn9qBD1bh7VFSSrC1uR/XPfFI+YC/gylCr7tSs56VQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ku/kubectl-ai/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "kubectl-ai";
-  version = "0.0.17";
+  version = "0.0.18";
 
   src = fetchFromGitHub {
     owner = "GoogleCloudPlatform";
     repo = "kubectl-ai";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-64y8XiJ59pEvYMZzOVcepKxRffmijDWoO5A8ccWtsZY=";
+    hash = "sha256-xxqR6jBK5RACyYGyOmIt2CY99ggWz0ygO9lmT2c0REc=";
   };
 
-  vendorHash = "sha256-I3sObZNTH4w+1THOWPJDdtKPYeoQ8ULvSzyh+91pHNI=";
+  vendorHash = "sha256-AuvBO7ucP/tWcag5NonDreXynxLm001Mu+Z1oIG8axw=";
 
   # Build the main command
   subPackages = [ "cmd" ];

pkgs/by-name/li/liana/package.nix

···
 in
 rustPlatform.buildRustPackage rec {
   pname = "liana";
-  version = "11.1"; # keep in sync with lianad
+  version = "12.0"; # keep in sync with lianad
 
   src = fetchFromGitHub {
     owner = "wizardsardine";
     repo = "liana";
     tag = "v${version}";
-    hash = "sha256-trP6jnhMPASPkV7VwSHCl7gUhmx4F+68YK/QK+SPPZg=";
+    hash = "sha256-TZUNYr7p4P/++eX9ZNU/d1IurPrkZn/PJmJOsB01VMY=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-Zmxb4ZxuIyyKWrGaX3/1UHgkmo/XtqIHuP9luAnzgm4=";
+  cargoHash = "sha256-Hb5icOKgQiDzFLWwUfkwXcr1vn80QcAr+fKwG37PkYc=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/lu/luau/package.nix

···
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau";
-  version = "0.682";
+  version = "0.683";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     tag = finalAttrs.version;
-    hash = "sha256-yHmcUDBgNKcOg6ZW/fP7ZatdkCgG1y1ECRUbnZ7wHZY=";
+    hash = "sha256-FOqqAX4Fyznx95ssaJ225U5BSjQH7RkFRZFU9YgLY48=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/no/nova/package.nix

···
 
 buildGoModule rec {
   pname = "nova";
-  version = "3.11.4";
+  version = "3.11.6";
 
   src = fetchFromGitHub {
     owner = "FairwindsOps";
     repo = "nova";
     rev = "v${version}";
-    hash = "sha256-0jDmuZqq3NNTekmu6saUjCuc0G0tj10hV0tRjwkYQg4=";
+    hash = "sha256-lYnVysBeZAYM++tlbVnIUfmJMujilHiPtLBH5Vp0puI=";
   };
 
-  vendorHash = "sha256-qXYhj3vVS6MoU4JPEDIxDZNDM2j/4Nxp6ZSlqUYVjMA=";
+  vendorHash = "sha256-+cw2NclPLT9S1iakK2S5uc+nFE84MIl6QOH/L0kgoHE=";
 
   ldflags = [
     "-X main.version=${version}"

pkgs/by-name/nu/nu_scripts/package.nix

···
 
 stdenvNoCC.mkDerivation {
   pname = "nu_scripts";
-  version = "0-unstable-2025-07-08";
+  version = "0-unstable-2025-07-24";
 
   src = fetchFromGitHub {
     owner = "nushell";
     repo = "nu_scripts";
-    rev = "b09b60cc434bb9be05ce2bbb6dc299760d13b18b";
-    hash = "sha256-Vh2yuIMvYiYdCYWqFRx7G24hWrQ5iJr1byOV/pIkFyI=";
+    rev = "bd128cf5257bf3f6c3453cbb4fd431d01d3467db";
+    hash = "sha256-8sJc7oF0m/hi/Uqm1X6ciIYAk5zW8hm0byX2RVZS6V8=";
   };
 
   installPhase = ''

pkgs/by-name/ph/phpactor/package.nix

···
   php,
   versionCheckHook,
 }:
-
 php.buildComposerProject2 (finalAttrs: {
   pname = "phpactor";
-  version = "2025.04.17.0";
+  version = "2025.07.25.0";
 
   src = fetchFromGitHub {
     owner = "phpactor";
     repo = "phpactor";
-    rev = finalAttrs.version;
-    hash = "sha256-HJH+31qAE4shamRl1/+TRtje0ZzOtPV7l++NIaacmxE=";
+    tag = finalAttrs.version;
+    hash = "sha256-9XWlWwq+xvqPgKIc7IGoMVTxajjYsrPo/ra/0JIE168=";
   };
 
-  vendorHash = "sha256-qdR8/ME9H7gusALjXXbKl8hj20N704Nw1tC3V9xTcEY=";
+  vendorHash = "sha256-3xkt0QjytW4BOCgZdevat7zkSuZTPPvwz3yptiq5zoo=";
 
   nativeBuildInputs = [ installShellFiles ];
-
-  php = php.withExtensions (
-    { all, ... }:
-    with all;
-    [
-      mbstring
-      tokenizer
-    ]
-  );
 
   postInstall = ''
     installShellCompletion --cmd phpactor \

pkgs/by-name/pi/pixelflasher/package.nix

···
 }:
 python3Packages.buildPythonApplication rec {
   pname = "pixelflasher";
-  version = "8.1.1.0";
+  version = "8.3.1.0";
   format = "other";
 
   src = fetchFromGitHub {
     owner = "badabing2005";
     repo = "PixelFlasher";
     tag = "v${version}";
-    hash = "sha256-zXXc12E0ocAH0QucvmoncbEwHy/IyJU1YBPedeSpLfc=";
+    hash = "sha256-/IEnQQ1fUKWeoKIOH4q9NmWM2Sz/b1xDqQ1s9zEWOI8=";
   };
 
   desktopItems = [

pkgs/by-name/po/polkadot/package.nix

···
 in
 rustPlatform.buildRustPackage rec {
   pname = "polkadot";
-  version = "2503-5";
+  version = "2506";
 
   src = fetchFromGitHub {
     owner = "paritytech";
     repo = "polkadot-sdk";
     rev = "polkadot-stable${version}";
-    hash = "sha256-hQ0tXPore1kbezBCsacAsSZAB1GHXEp5BJatxdi19eI=";
+    hash = "sha256-xXty0KwF/1ZZUMu4l2yYUKVl40eNrGsBVhBVVfirb6Q=";
 
     # the build process of polkadot requires a .git folder in order to determine
     # the git commit hash that is being built and add it to the version string.
···
   '';
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-fK8EBgIdXHfxpNWUyquEutZpkTGSe11ZsLwe13ZZ1+0=";
+  cargoHash = "sha256-4LT4TiXRZIgyhy1eBr017Wh8Nyo26udCMffwIXRaCrM=";
 
   buildType = "production";
   buildAndTestSubdir = "polkadot";
···
   checkInputs = [
     cacert
   ];
+
+  doCheck = false;
 
   OPENSSL_NO_VENDOR = 1;
   PROTOC = "${protobuf}/bin/protoc";

pkgs/by-name/pu/pulseaudio-dlna/zeroconf.nix

···
-{
-  lib,
-  buildPythonPackage,
-  fetchPypi,
-  ifaddr,
-  typing,
-  pythonOlder,
-  netifaces,
-  six,
-  enum-compat,
-}:
-
-buildPythonPackage rec {
-  pname = "zeroconf";
-  version = "0.19.1";
-  format = "setuptools";
-
-  src = fetchPypi {
-    inherit pname version;
-    sha256 = "0ykzg730n915qbrq9bn5pn06bv6rb5zawal4sqjyfnjjm66snkj3";
-  };
-
-  propagatedBuildInputs = [
-    netifaces
-    six
-    enum-compat
-    ifaddr
-  ]
-  ++ lib.optionals (pythonOlder "3.5") [ typing ];
-
-  meta = with lib; {
-    description = "Pure python implementation of multicast DNS service discovery";
-    homepage = "https://github.com/jstasiak/python-zeroconf";
-    license = licenses.lgpl21;
-    maintainers = [ ];
-  };
-}

pkgs/by-name/qs/qsv/package.nix

···
 
 let
   pname = "qsv";
-  version = "5.1.0";
+  version = "6.0.1";
 in
 rustPlatform.buildRustPackage {
   inherit pname version;
···
     owner = "dathere";
     repo = "qsv";
     rev = version;
-    hash = "sha256-AQ7vpxrGa0CtFvKzT2iHmeoafpaWOVLqEL9eO3QeBEM=";
+    hash = "sha256-lB/lWLTZ0sfs0COZ/BgnQ2xf0aQQJnKaN06aoPMfuQc=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-Kmcl7ifAFf7dJ3LESdH1xm7M3Wl/wMKUjN2ZcLkvUHE=";
+  cargoHash = "sha256-ZgGFUOqJ5WBDaO/V3X3fUFqnIykL68Rilpjc21DyhAc=";
 
   buildInputs = [
     file

pkgs/by-name/qt/qtscrcpy/package.nix

···
 
 stdenv.mkDerivation rec {
   pname = "qtscrcpy";
-  version = "3.1.3";
+  version = "3.3.1";
 
   src =
     (fetchFromGitHub {
       owner = "barry-ran";
       repo = "QtScrcpy";
       tag = "v${version}";
-      hash = "sha256-deJachXKClyJymUSRgqlwZhwr4Hlo4GXynJRlyu6uBU=";
+      hash = "sha256-kDeMgSIEIQxaTDR/QAcIaEmPjkmUKBsGyF8fISRzu1M=";
       fetchSubmodules = true;
     }).overrideAttrs
       (_: {
···
 
   postPatch = ''
     substituteInPlace QtScrcpy/QtScrcpyCore/{include/QtScrcpyCoreDef.h,src/device/server/server.h} \
-      --replace-fail 'serverVersion = "3.1"' 'serverVersion = "${scrcpy.version}"'
+      --replace-fail 'serverVersion = "3.3.1"' 'serverVersion = "${scrcpy.version}"'
     substituteInPlace QtScrcpy/util/config.cpp \
-      --replace-fail 'COMMON_SERVER_VERSION_DEF "3.1"' 'COMMON_SERVER_VERSION_DEF "${scrcpy.version}"'
+      --replace-fail 'COMMON_SERVER_VERSION_DEF "3.3.1"' 'COMMON_SERVER_VERSION_DEF "${scrcpy.version}"'
     substituteInPlace QtScrcpy/audio/audiooutput.cpp \
       --replace-fail 'sndcpy.sh' "$out/share/qtscrcpy/sndcpy.sh"
     substituteInPlace QtScrcpy/sndcpy/sndcpy.sh \

pkgs/by-name/r1/r10k/package.nix

···
       anthonyroussel
     ];
     platforms = lib.platforms.unix;
-    mainProgram = pname;
+    mainProgram = "r10k";
   };
 }

pkgs/by-name/ri/rio/package.nix

···
       wayland
     ];
 in
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rio";
-  version = "0.2.20";
+  version = "0.2.23";
 
   src = fetchFromGitHub {
     owner = "raphamorim";
     repo = "rio";
-    rev = "v${version}";
-    hash = "sha256-/RQPjT5IIhV6bp3u5BhsCglGIJbQoBKIJ88U2Tp3qVE=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-hhKlXuhv0PP8/xCIZ0lFGtCYCzOzH0gUeh48GdKpG6A=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-T88K2ujB4hskbQW5+urlSdEgN+XSmEEb80eW5gw51Gs=";
+  cargoHash = "sha256-+pfudGeWq4EARQDu+HAZczWlzStuzDPArMm1oCZGfKU=";
 
   nativeBuildInputs = [
     ncurses
···
       oluceps
     ];
     platforms = lib.platforms.unix;
-    changelog = "https://github.com/raphamorim/rio/blob/v${version}/docs/docs/releases.md";
+    changelog = "https://github.com/raphamorim/rio/blob/v${finalAttrs.version}/docs/docs/releases.md";
     mainProgram = "rio";
   };
-}
+})

pkgs/by-name/sa/savepagenow/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "savepagenow";
-  version = "1.1.1";
+  version = "1.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pastpages";
     repo = "savepagenow";
-    rev = "v${version}";
-    sha256 = "1lz6rc47cds9rb35jdf8n13gr61wdkh5jqzx4skikm1yrqkwjyhm";
+    tag = version;
+    sha256 = "sha256-omQ28GqgBKC8W51c0qb6Tg06obXskyfF+2dg/13ah1M=";
   };
 
-  build-system = with python3Packages; [ setuptools ];
+  SETUPTOOLS_SCM_PRETEND_VERSION = version;
+
+  build-system = with python3Packages; [ setuptools-scm ];
 
   dependencies = with python3Packages; [
     click

pkgs/by-name/sc/scotty/package.nix

···
 
 buildGoModule (finalAttrs: {
   pname = "scotty";
-  version = "0.7.0";
+  version = "0.7.1";
 
   src = fetchFromSourcehut {
     owner = "~phw";
     repo = "scotty";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-NvFvayz8B69Vtl+Ghl9UBXqJqvka8p6hi2ClcQ7Xeys=";
+    hash = "sha256-Sf1JuIWCscHPn7bA7spQ1zTKt+1kEehR+rEZ1+MTnoE=";
   };
 
   # Otherwise checks fail with `panic: open /etc/protocols: operation not permitted` when sandboxing is enabled on Darwin
···
       --replace-fail '!os.IsNotExist(err)' '!os.IsNotExist(err) && !os.IsPermission(err)'
   '';
 
-  vendorHash = "sha256-+Hypr514lp0MuZVH9R9LUP93TYq2VNGuZ+6OWytohc8=";
+  vendorHash = "sha256-AfCSp/f8jAy1a6PyYHMErmOOgADXTfliJPQgyNLhVFo=";
 
   env = {
     # *Some* locale is required to be set

pkgs/by-name/sh/shaperglot-cli/package.nix

···
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "shaperglot-cli";
-  version = "0-unstable-2025-06-20";
+  version = "0-unstable-2025-07-18";
 
   src = fetchFromGitHub {
     owner = "googlefonts";
     repo = "shaperglot";
-    rev = "0c521f32f8fe5c927a4aac2236307547fa281972";
-    hash = "sha256-V7eBt0m82mW4NALWZeYVJD4TeU5l0kaOJPyDFxRSIUs=";
+    rev = "fafea94d0c4ffe291b34c6748149006b13476755";
+    hash = "sha256-o5fh/rywa5AUhCXWUkuXH3XMCtVX2nio+jk+vwHVN14=";
   };
 
-  cargoHash = "sha256-19amPodlTIxuBue8UT5PfWHUe4evmJsAHcrIAx6YVSk=";
+  cargoHash = "sha256-SrC9RAbD/qxn5Ywp83cCZmdjNrxJlZAGBYB9O+/yJHA=";
 
   cargoBuildFlags = [
     "--package=shaperglot-cli"

pkgs/by-name/sh/shotwell/package.nix

···
   gcr,
   libgee,
   gexiv2,
-  librest,
   gettext,
   desktop-file-utils,
   gdk-pixbuf,
···
     glib-networking
     gdk-pixbuf
     librsvg
-    librest
     gcr
     adwaita-icon-theme
     libsecret

pkgs/by-name/sl/slumber/package.nix

···
 
 rustPlatform.buildRustPackage rec {
   pname = "slumber";
-  version = "3.2.0";
+  version = "3.3.0";
 
   src = fetchFromGitHub {
     owner = "LucasPickering";
     repo = "slumber";
     tag = "v${version}";
-    hash = "sha256-FR+XHgL/DfVFeEbAT1h1nwBnJkG7jnHfd+JRLVTY0LE=";
+    hash = "sha256-3VsnK0CxcSYOnHTXPGdtwUn/0m5Uj9DThm3Mc4bMYoY=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-qRqdNCeVb7dD91q6gEK1c5rQ8LhcwJ5hwn1TfSPseO4=";
+  cargoHash = "sha256-ZDB7YiqesCAnXkSyMQzV6LHRjUdv00SSG6aS8JKArfY=";
 
   meta = {
     description = "Terminal-based HTTP/REST client";

pkgs/by-name/sn/snyk/package.nix

···
 }:
 
 let
-  version = "1.1297.3";
+  version = "1.1298.1";
 in
 buildNpmPackage {
   pname = "snyk";
···
     owner = "snyk";
     repo = "cli";
     tag = "v${version}";
-    hash = "sha256-oyodfLDfgFKCmt8d4Bff/4SIEjyqX1pw5fp95uEmuf4=";
+    hash = "sha256-oLkzEm7OMBNqT+EDrwujqQek4LWwKgYFUoMRWhpqY4o=";
   };
 
-  npmDepsHash = "sha256-SzrBhY7iWGlIPNB+5ROdaxAlQSetSKc3MPBp+4nNh+o=";
+  npmDepsHash = "sha256-7fHehEKjNNRdRk9+kARzn75G0r1pse7ULn/Oz6mQRKM=";
 
   postPatch = ''
     substituteInPlace package.json \

pkgs/by-name/sq/sqldef/package.nix

···
 
 buildGoModule rec {
   pname = "sqldef";
-  version = "2.0.5";
+  version = "2.0.6";
 
   src = fetchFromGitHub {
     owner = "sqldef";
     repo = "sqldef";
     rev = "v${version}";
-    hash = "sha256-+5Ri5MbQJEF3Z3mocO/ugXwZ9ye2IY2YXkdAMLkPupg=";
+    hash = "sha256-vlUrg/mCviFwlNT47o/5wUfl1oFFd6s8Q/Xdpn048Sk=";
   };
 
   proxyVendor = true;

pkgs/by-name/st/stunner/package.nix

···
 }:
 
 let
-  version = "0.0.10";
+  version = "0.0.12";
 in
 buildGoModule {
   pname = "stunner";
···
     owner = "jaxxstorm";
     repo = "stunner";
     tag = "v${version}";
-    hash = "sha256-rwoid49YkrXU59XiC6zY6562MShomozQNV0KFPv7oMM=";
+    hash = "sha256-f45MliWauAkUkffcoexRz+ZjWUYmhZ6yVKqqdC56V04=";
   };
 
   vendorHash = "sha256-tO61UBZxPBg6oFKOuMjPSb4EHZ9wPAyBsdQZb7DLdw0=";

pkgs/by-name/sy/synology-cloud-sync-decryption-tool/package.nix

···
 {
   lib,
   writeScript,
+  stdenv,
   qt5,
   fetchurl,
   autoPatchelfHook,
 }:
 
-qt5.mkDerivation rec {
+stdenv.mkDerivation rec {
   pname = "synology-cloud-sync-decryption-tool";
   version = "027";
 
···
     sha256 = "sha256-EWxADvkfhnMwHIauJj3pH6SvSkkrc4cwAhsf1pWOOWQ=";
   };
 
-  nativeBuildInputs = [ autoPatchelfHook ];
+  nativeBuildInputs = [
+    autoPatchelfHook
+    qt5.wrapQtAppsHook
+  ];
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/ta/tabiew/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "tabiew";
-  version = "0.10.1";
+  version = "0.11.0";
 
   src = fetchFromGitHub {
     owner = "shshemi";
     repo = "tabiew";
     tag = "v${version}";
-    hash = "sha256-J8SqqZNAB1bEFaaEjRh77zb+7l2RwZrh316ZG18taKs=";
+    hash = "sha256-ilZOXV9P3i2Gzcop9PRCHznorEdGMje097d9my0JVeU=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-o8bGsPwpJbXHvioyfI8OZEfgsewUFMSZ+2kPIMTO0gk=";
+  cargoHash = "sha256-TYOsE0v2m0lTTK/+S82URDk4+ywu2nzzTQAi9pdBu2U=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/tf/tfswitch/package.nix

···
 }:
 buildGoModule rec {
   pname = "tfswitch";
-  version = "1.4.6";
+  version = "1.4.7";
 
   src = fetchFromGitHub {
     owner = "warrensbox";
     repo = "terraform-switcher";
     rev = "v${version}";
-    sha256 = "sha256-KYie6nabNJDGNvs2vOQHl+ISEGNKwReHuDahMo1SmbM=";
+    sha256 = "sha256-r3zTIcn+AOYAgdaCVmKFg4rZrJZFvg7HDB/yU59z+cs=";
   };
 
-  vendorHash = "sha256-IXawIayV9RbWgoKKgnHAtr6RQrYGUBRF5CrQnPsrebc=";
+  vendorHash = "sha256-HbNdWvKvmZDalDQoMtQMaXiT0NIFNtVowSIYO4z9h8c=";
 
   # Disable tests since it requires network access and relies on the
   # presence of release.hashicorp.com

pkgs/by-name/ti/timezonemap/package.nix

···
   file,
   gobject-introspection,
   json-glib,
-  libsoup_2_4,
+  libsoup_3,
 }:
 
 stdenv.mkDerivation {
···
       url = "https://git.launchpad.net/ubuntu/+source/libtimezonemap/plain/debian/patches/timezone-map-Never-try-to-access-to-free-d-or-null-values.patch?id=88f72f724e63df061204f6818c9a1e7d8c003e29";
       sha256 = "sha256-M5eR0uaqpJOeW2Ya1Al+3ZciXukzHpnjJTMVvdO0dPE=";
     })
+
+    # Port to libsoup3
+    # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068679
+    (fetchpatch {
+      url = "https://git.launchpad.net/ubuntu/+source/libtimezonemap/plain/debian/patches/port-to-libsoup3.patch?id=b8346a99d4abece742bce73780ccf0edfa0b99f0";
+      hash = "sha256-BHLVA3Vcakl9COAiSPo0OyFOUz4ejsxB22gJW/+m7NI=";
+    })
   ];
 
   nativeBuildInputs = [
···
     gtk3
     glib
     json-glib
-    libsoup_2_4
+    libsoup_3
   ];
 
   configureFlags = [

pkgs/by-name/tr/tray-tui/package.nix

···
 }:
 rustPlatform.buildRustPackage rec {
   pname = "tray-tui";
-  version = "0.2.1";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "Levizor";
     repo = "tray-tui";
     tag = version;
-    hash = "sha256-iZyhcBCOUq2KuQR21sQiwFeEIr7DNBs1fYRu5Nv5+ng=";
+    hash = "sha256-iJ3793D6/yT63s4akdFvWIpe+5wgjWv29cwB5deID60=";
   };
 
   useFetchCargoVendor = true;
 
-  cargoHash = "sha256-o3FmSNOiCcbLoU6/LtbugalWUm/ME9kG8bzfem3HqWI=";
+  cargoHash = "sha256-T5O37QuubTHp9a5iYrXN2Wrc+Xez+rGiAowcbSp33A4=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/up/upgrade-assistant/package.nix

···
 { lib, buildDotnetGlobalTool }:
 buildDotnetGlobalTool {
   pname = "upgrade-assistant";
-  version = "0.5.1084";
+  version = "0.5.1165";
 
-  nugetHash = "sha256-O+HHLqou6hRAQ8vUzq+VfX0vRM+nZGPnfCg8niYX2gE=";
+  nugetHash = "sha256-6LHGgpdCTiDaKZN5oWWUotH2SwExu9I1PAyt8TmQAh0=";
 
   meta = {
     homepage = "https://github.com/dotnet/upgrade-assistant";

pkgs/by-name/xp/xpipe/package.nix

···
     ];
     maintainers = with lib.maintainers; [ crschnick ];
     platforms = [ "x86_64-linux" ];
-    mainProgram = pname;
+    mainProgram = "xpipe";
   };
 }

pkgs/by-name/ya/yamlscript/package.nix

···
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "yamlscript";
-  version = "0.1.97";
+  version = "0.2.2";
 
   src = fetchurl {
     url = "https://github.com/yaml/yamlscript/releases/download/${finalAttrs.version}/yamlscript.cli-${finalAttrs.version}-standalone.jar";
-    hash = "sha256-xyKn+Eec6Kspoe0kq3N/nQDIOJSJcrb9CE/uUF3+Qcs=";
+    hash = "sha256-JGtslASDw/jZxmM936uBW0xcHR3QQSDB99WjwYXim1Q=";
   };
 
   extraNativeImageBuildArgs = [

pkgs/by-name/yt/ytdl-sub/package.nix

···
 
 python3Packages.buildPythonApplication rec {
   pname = "ytdl-sub";
-  version = "2025.07.04";
+  version = "2025.07.24";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jmbannon";
     repo = "ytdl-sub";
     tag = version;
-    hash = "sha256-aVI/OY1Dh5LvbDyg+GuWBz2e6oUgTzErqfnow22v8CI=";
+    hash = "sha256-yeF4Lt1IzMbkIXXzVMJjZb3D0UTiv4d5fSoN8uJBlBM=";
   };
 
   postPatch = ''

pkgs/desktops/mate/caja-extensions/default.nix

···
   glib,
   gst_all_1,
   gtk3,
-  gupnp,
+  gupnp_1_6,
   imagemagick,
   mate-desktop,
   wrapGAppsHook3,
···
     gst_all_1.gst-plugins-base
     gst_all_1.gst-plugins-good
     gtk3
-    gupnp
+    gupnp_1_6
     imagemagick
     mate-desktop
   ];

pkgs/development/compilers/dotnet/stage0.nix

···
             "false"
           ];
 
-        # https://github.com/dotnet/source-build/issues/4920
-        ${if stdenv.isLinux && lib.versionAtLeast old.version "10" then "postFixup" else null} = ''
-          find $out \( -name crossgen2 -or -name ilc \) -type f -print0 |
-            xargs -0 patchelf --add-needed libssl.so --add-rpath "${lib.makeLibraryPath [ openssl ]}"
-        '';
-
         passthru =
           old.passthru or { }
           // (

pkgs/development/libraries/dee/default.nix

···
   vala,
   python3,
   autoreconfHook,
+  gtk-doc,
 }:
 
 stdenv.mkDerivation rec {
···
     autoreconfHook
     gobject-introspection
     python3
+    gtk-doc
   ];
 
   buildInputs = [

pkgs/development/libraries/libfive/default.nix

···
 
 stdenv.mkDerivation {
   pname = "libfive";
-  version = "0-unstable-2025-07-07";
+  version = "0-unstable-2025-07-23";
 
   src = fetchFromGitHub {
     owner = "libfive";
     repo = "libfive";
-    rev = "ba841d3ba91b885ba19c40e382d6ae6f3534a4b5";
-    hash = "sha256-YVqP4k8KBLMYZOuWYLXijZBEiNGhQaaVNBVQtpIgvjc=";
+    rev = "e8370983e7bc6d49409affcc34fc70c673cc876f";
+    hash = "sha256-Jtf3yEnIySsLdSt5G3VdU3nUV55LHnES23fCAilXjNw=";
   };
 
   nativeBuildInputs = [

pkgs/development/libraries/mesa/default.nix

···
     (buildPackages.mesa.cross_tools or null)
   ];
 
-  disallowedRequisites = lib.optionals needNativeCLC [
-    (buildPackages.mesa.cross_tools or null)
-  ];
+  disallowedRequisites = lib.optional (
+    needNativeCLC && buildPackages.mesa ? cross_tools
+  ) buildPackages.mesa.cross_tools;
 
   doCheck = false;
 

pkgs/development/python-modules/cobs/default.nix

···
 
 buildPythonPackage rec {
   pname = "cobs";
-  version = "1.2.1";
+  version = "1.2.2";
   format = "setuptools";
 
   disabled = pythonOlder "3.6";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-Kvf4eRzeGufGuTb10MNf4p/rEN4l95wVsK8NZyl4PMA=";
+    hash = "sha256-291eMhEdcnhvg9DCaSFdzWrGKbGsGWLGh4Ih87LKmNo=";
   };
 
   checkPhase = ''

pkgs/development/python-modules/constantdict/default.nix

···
 
 buildPythonPackage rec {
   pname = "constantdict";
-  version = "2025.1.1";
+  version = "2025.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "matthiasdiener";
     repo = "constantdict";
     tag = "v${version}";
-    hash = "sha256-M3duCafyJk/W3KIqP43ErXr/EfCj6/Sin6eCaaxyI5g=";
+    hash = "sha256-jX6g9xBteZOc/7Ob5N8eUSCycb6JoE5i38T52zknOTI=";
   };
 
   build-system = [

pkgs/development/python-modules/ddgs/default.nix

···
 
 buildPythonPackage rec {
   pname = "ddgs";
-  version = "9.2.3";
+  version = "9.4.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "deedy5";
     repo = "ddgs";
     tag = "v${version}";
-    hash = "sha256-TWLB/IAUn0YEXwYGooqd/pz8xv8tmK8E1ZZ8G/TEtbU=";
+    hash = "sha256-W7Ug9hYOfdskWrhRgkogwru8XE6kqxsqqnXsdD81mKk=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/drf-pydantic/default.nix

···
 
 buildPythonPackage rec {
   pname = "drf-pydantic";
-  version = "2.7.1";
+  version = "2.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "georgebv";
     repo = "drf-pydantic";
     tag = "v${version}";
-    hash = "sha256-ABtSoxj/+HHq4hj4Yb6bEiyOl00TCO/9tvBzhv6afxM=";
+    hash = "sha256-Kg+xQ5DgrQMtbga9BF1kmqX0zLAaxu26PnGn8SNVGN8=";
   };
 
   build-system = [

pkgs/development/python-modules/fastcore/default.nix

···
 
 buildPythonPackage rec {
   pname = "fastcore";
-  version = "1.8.5";
+  version = "1.8.6";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
···
     owner = "fastai";
     repo = "fastcore";
     tag = version;
-    hash = "sha256-Osjpt/oxw5LAVUvhPg2cICSeKaLrOdppNT0jqHz9HyA=";
+    hash = "sha256-m/22tTIysVFgNWUUWKC/1TV/dkEki8dDACb0XvKayAw=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/langchain-groq/default.nix

···
 
 buildPythonPackage rec {
   pname = "langchain-groq";
-  version = "0.3.2";
+  version = "0.3.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "langchain-ai";
     repo = "langchain";
     tag = "langchain-groq==${version}";
-    hash = "sha256-KsKT7+jpTTiSVMZWcIwW7+1BCL7rpZHg/OX3PNLI6As=";
+    hash = "sha256-f0s8fBT1+uZbatWSPehKfrGYGotBFeNixCiGaAc753o=";
   };
 
   sourceRoot = "${src.name}/libs/partners/groq";

pkgs/development/python-modules/manifestoo-core/default.nix

···
 
 buildPythonPackage rec {
   pname = "manifestoo-core";
-  version = "1.8.2";
+  version = "1.9";
   format = "pyproject";
 
   src = fetchPypi {
     inherit version;
     pname = "manifestoo_core";
-    hash = "sha256-e/kpgGaaQqPI+4WeHXYpVc01t5vexHlmsDuAoGFShEM=";
+    hash = "sha256-4cBgxbjXfOVMRQ+iQnjb/LdRUkoeb2hWI6VhSnqSMVM=";
   };
 
   nativeBuildInputs = [ hatch-vcs ];

pkgs/development/python-modules/markdown-inline-graphviz/default.nix

···
+{
+  buildPythonPackage,
+  fetchFromGitHub,
+  pkgs, # Only for pkgs.graphviz
+  lib,
+  setuptools,
+  markdown,
+}:
+
+buildPythonPackage rec {
+  pname = "markdown-inline-graphviz";
+  version = "1.1.3";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "cesaremorel";
+    repo = "markdown-inline-graphviz";
+    tag = "v${version}";
+    hash = "sha256-FUBRFImX5NOxyYAK7z5Bo8VKVQllTbEewEGZXtVMBQE=";
+  };
+
+  # Using substituteInPlace because there's only one replacement
+  postPatch = ''
+    substituteInPlace markdown_inline_graphviz.py \
+      --replace-fail "args = [command, '-T'+filetype]" "args = [\"${pkgs.graphviz}/bin/\" + command, '-T'+filetype]"
+  '';
+
+  build-system = [ setuptools ];
+
+  dependencies = [ markdown ];
+
+  # No tests available
+  doCheck = false;
+
+  pythonImportsCheck = [ "markdown_inline_graphviz" ];
+
+  meta = {
+    description = "Render inline graphs with Markdown and Graphviz";
+    homepage = "https://github.com/cesaremorel/markdown-inline-graphviz/";
+    changelog = "https://github.com/cesaremorel/markdown-inline-graphviz/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ drupol ];
+  };
+}

pkgs/development/python-modules/mkdocs-git-authors-plugin/default.nix

···
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonOlder,
+  setuptools,
   mkdocs,
+  gitMinimal,
 }:
 
 buildPythonPackage rec {
   pname = "mkdocs-git-authors-plugin";
-  version = "0.9.2";
-  format = "setuptools";
-
-  disabled = pythonOlder "3.8";
+  version = "0.10.0";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "timvink";
     repo = "mkdocs-git-authors-plugin";
     tag = "v${version}";
-    hash = "sha256-2ITro34lZ+tz7ev7Yuh1wJjsSNik6VUTt3dupIajmLU=";
+    hash = "sha256-Uy1XgSJchA7hkc9i4hE8Ws4OWY5GRzvfnhKkZvxT2d0=";
   };
 
-  propagatedBuildInputs = [ mkdocs ];
+  postPatch = ''
+    substituteInPlace src/mkdocs_git_authors_plugin/git/command.py \
+      --replace-fail 'args = ["git"]' 'args = ["${gitMinimal}/bin/git"]'
+  '';
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [ mkdocs ];
 
   pythonImportsCheck = [ "mkdocs_git_authors_plugin" ];
 
-  meta = with lib; {
+  meta = {
     description = "Lightweight MkDocs plugin to display git authors of a markdown page";
     homepage = "https://github.com/timvink/mkdocs-git-authors-plugin";
-    license = licenses.mit;
-    maintainers = with maintainers; [ totoroot ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ totoroot ];
   };
 }

pkgs/development/python-modules/mlx-lm/default.nix

···
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  jinja2,
+  mlx,
+  numpy,
+  protobuf,
+  pyyaml,
+  transformers,
+  sentencepiece,
+  pytestCheckHook,
+  writableTmpDirAsHomeHook,
+}:
+
+buildPythonPackage rec {
+  pname = "mlx-lm";
+  version = "0.26.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "ml-explore";
+    repo = "mlx-lm";
+    tag = "v${version}";
+    hash = "sha256-J69XIqsjQ4sQqhx+EkjKcVXVlQ4A4PGJvICSiCfoSOA=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    jinja2
+    mlx
+    numpy
+    protobuf
+    pyyaml
+    transformers
+  ];
+
+  nativeCheckInputs = [
+    writableTmpDirAsHomeHook
+    pytestCheckHook
+    sentencepiece
+  ];
+
+  pythonImportsCheck = [
+    "mlx_lm"
+  ];
+
+  disabledTestPaths = [
+    # Requires network access to huggingface.co
+    "tests/test_datsets.py"
+    "tests/test_generate.py"
+    "tests/test_server.py"
+    "tests/test_tokenizers.py"
+    "tests/test_utils.py::TestUtils::test_convert"
+    "tests/test_utils.py::TestUtils::test_load"
+    "tests/test_utils_load_model.py"
+    "tests/test_prompt_cache.py::TestPromptCache::test_cache_to_quantized"
+    "tests/test_prompt_cache.py::TestPromptCache::test_cache_with_generate"
+    "tests/test_prompt_cache.py::TestPromptCache::test_trim_cache_with_generate"
+    # RuntimeError: [metal_kernel] No GPU back-end.
+    "tests/test_models.py::TestModels::test_bitnet"
+  ];
+
+  meta = {
+    description = "Run LLMs with MLX";
+    homepage = "https://github.com/ml-explore/mlx-lm";
+    license = lib.licenses.mit;
+    platforms = [
+      "aarch64-darwin"
+    ];
+    maintainers = with lib.maintainers; [ ferrine ];
+  };
+}

pkgs/development/python-modules/plantuml-markdown/default.nix

···
 {
   buildPythonPackage,
   fetchFromGitHub,
+  pkgs, # Only for pkgs.plantuml,
   lib,
   plantuml,
   markdown,
···
   runCommand,
   writeText,
   plantuml-markdown,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
···
   version = "3.11.1";
   format = "setuptools";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "mikitex70";
     repo = "plantuml-markdown";
     tag = version;
     hash = "sha256-DgHWqwPsZ5q1XqrfaAiUslKnJdHX4Pzw9lygF3iaxz4=";
   };
+
+  postPatch = ''
+    substituteInPlace plantuml_markdown/plantuml_markdown.py \
+      --replace-fail '"plantuml_cmd": ["plantuml"' '"plantuml_cmd": ["${lib.getExe pkgs.plantuml}"'
+  '';
 
   propagatedBuildInputs = [
     plantuml
···
   ];
 
   # The package uses a custom script that downloads a certain version of plantuml for testing.
+  # Missing https://github.com/ezequielramos/http-server-mock which looks unmaintained
   doCheck = false;
 
   pythonImportsCheck = [ "plantuml_markdown" ];
···
       ! grep -q "Error" $out
     '';
 
-  meta = with lib; {
+  meta = {
     description = "PlantUML plugin for Python-Markdown";
     longDescription = ''
       This plugin implements a block extension which can be used to specify a PlantUML
···
     '';
     homepage = "https://github.com/mikitex70/plantuml-markdown";
     changelog = "https://github.com/mikitex70/plantuml-markdown/releases/tag/${src.tag}";
-    license = licenses.bsd2;
-    maintainers = with maintainers; [ nikstur ];
+    license = lib.licenses.bsd2;
+    maintainers = with lib.maintainers; [ nikstur ];
   };
 }

pkgs/development/python-modules/tencentcloud-sdk-python/default.nix

···
 
 buildPythonPackage rec {
   pname = "tencentcloud-sdk-python";
-  version = "3.0.1427";
+  version = "3.0.1429";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
···
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = version;
-    hash = "sha256-OuQQr9ptcTL6YjeUWIa2ak3i1NMO1uhql+dR+cIJUQU=";
+    hash = "sha256-icA5CuDkGYipXXcL1ePODBC8CMmMLLmBwD/X/nykqL8=";
   };
 
   build-system = [ setuptools ];

pkgs/os-specific/linux/kernel/linux-rpi.nix

···
         {
           "1" = "bcmrpi_defconfig";
           "2" = "bcm2709_defconfig";
-          "3" = if stdenv.hostPlatform.isAarch64 then "bcmrpi3_defconfig" else "bcm2709_defconfig";
+          "3" = if stdenv.hostPlatform.isAarch64 then "bcm2711_defconfig" else "bcm2709_defconfig";
           "4" = "bcm2711_defconfig";
         }
         .${toString rpiVersion};

pkgs/servers/monitoring/grafana/plugins/grafana-exploretraces-app/default.nix

···
 
 grafanaPlugin {
   pname = "grafana-exploretraces-app";
-  version = "1.1.1";
-  zipHash = "sha256-vzLZvBxFF9TQBWvuAUrfWROIerOqPPjs/OKUyX1dBac=";
+  version = "1.1.2";
+  zipHash = "sha256-eLSC+K1+JqSOo0HgFCTZ8pYevtO3s/ZhkJBlr29GGdY=";
   meta = with lib; {
     description = "Opinionated traces app";
     license = licenses.agpl3Only;

pkgs/servers/spicedb/default.nix

···
 
 buildGoModule rec {
   pname = "spicedb";
-  version = "1.44.4";
+  version = "1.45.1";
 
   src = fetchFromGitHub {
     owner = "authzed";
     repo = "spicedb";
     rev = "v${version}";
-    hash = "sha256-hpu9tg18JASuHVSrEL9xKWJ/+k6Cam3aBQ2OLsIehjw=";
+    hash = "sha256-cKCAA9C0vsCa0BszspvPfrKbdWyaccrMtiO6UWhLIh4=";
   };
 
-  vendorHash = "sha256-EQQtVudG+xjim15Ud4YJ05j0l+omnEnpo42tS99Mmd8=";
+  vendorHash = "sha256-R4lOmHIBgnlvOukMjXdVx5e9Oneo1EizhsrDXiTbwTc=";
 
   ldflags = [
     "-X 'github.com/jzelinskie/cobrautil/v2.Version=${src.rev}'"

pkgs/tools/networking/q/default.nix pkgs/by-name/q/q/package.nix

···
   src = fetchFromGitHub {
     owner = "natesales";
     repo = "q";
-    rev = "v${version}";
-    sha256 = "sha256-Chvh+L1RV/T/blFjGS2wiJynXxbWE6eKbu4TRTFTb3o=";
+    tag = "v${version}";
+    hash = "sha256-Chvh+L1RV/T/blFjGS2wiJynXxbWE6eKbu4TRTFTb3o=";
   };
 
   vendorHash = "sha256-7OknLdkJB3ujX/DL+DVdWFK5RcoEw5R9h/KY4OfKeCw=";

pkgs/top-level/all-packages.nix

···
 
   py7zr = with python3Packages; toPythonApplication py7zr;
 
-  q = callPackage ../tools/networking/q { };
-
   qFlipper = libsForQt5.callPackage ../tools/misc/qflipper { };
 
   ronin = callPackage ../tools/security/ronin { };
···
   subzerod = with python3Packages; toPythonApplication subzerod;
 
   system-config-printer = callPackage ../tools/misc/system-config-printer {
-    autoreconfHook = buildPackages.autoreconfHook269;
     libxml2 = libxml2Python;
   };
 
···
 
   trytond = with python3Packages; toPythonApplication trytond;
 
-  ttfautohint = libsForQt5.callPackage ../tools/misc/ttfautohint {
-    autoreconfHook = buildPackages.autoreconfHook269;
-  };
+  ttfautohint = libsForQt5.callPackage ../tools/misc/ttfautohint { };
   ttfautohint-nox = ttfautohint.override { enableGUI = false; };
 
   twilight = callPackage ../tools/graphics/twilight {
···
 
   makeDBusConf = callPackage ../development/libraries/dbus/make-dbus-conf.nix { };
 
-  dee = callPackage ../development/libraries/dee {
-    autoreconfHook = buildPackages.autoreconfHook269;
-  };
+  dee = callPackage ../development/libraries/dee { };
 
   draco = callPackage ../development/libraries/draco {
     tinygltf = callPackage ../development/libraries/draco/tinygltf.nix { };
···
 
   highfive-mpi = highfive.override { hdf5 = hdf5-mpi; };
 
-  hivex = callPackage ../development/libraries/hivex {
-    autoreconfHook = buildPackages.autoreconfHook269;
-  };
+  hivex = callPackage ../development/libraries/hivex { };
 
   hspell = callPackage ../development/libraries/hspell { };
 
···
     ];
   };
 
-  libmodsecurity = callPackage ../tools/security/libmodsecurity {
-    autoreconfHook = buildPackages.autoreconfHook269;
-  };
+  libmodsecurity = callPackage ../tools/security/libmodsecurity { };
 
   nsd = callPackage ../servers/dns/nsd (config.nsd or { });
 
···
   peaclock = callPackage ../applications/misc/peaclock {
     stdenv = gccStdenv;
   };
-
-  pianobooster = qt5.callPackage ../applications/audio/pianobooster { };
 
   pianoteq = callPackage ../applications/audio/pianoteq { };
 

pkgs/top-level/python-packages.nix

···
 
   markdown-include = callPackage ../development/python-modules/markdown-include { };
 
+  markdown-inline-graphviz = callPackage ../development/python-modules/markdown-inline-graphviz { };
+
   markdown-it-py = callPackage ../development/python-modules/markdown-it-py { };
 
   markdown-macros = callPackage ../development/python-modules/markdown-macros { };
···
   );
 
   mlx = callPackage ../development/python-modules/mlx { };
+
+  mlx-lm = callPackage ../development/python-modules/mlx-lm { };
 
   mlxtend = callPackage ../development/python-modules/mlxtend { };