(cherry picked from commit 8a0bda1b766c7c78e2d436db970ca82fccec0843)

(cherry picked from commit 0f06b7840b8051db64c5f77c82b989fc41dec325)

Resolves #430685

This was the only user of `fetchurl` which was using `-r`, which is incompatible with `--continue-at -` from 4d7a4fbd9f634d0c2f1e660d3981e965b3513466.
Rather than engineer a way to pass range options to `fetchurl`, let's just make a custom builder for this derivation.
It actually makes the whole thing more clear.

(cherry picked from commit 252b0b5c333b02f53d986c5151a4eda574056544)

(cherry picked from commit a47cf293c9df9e166069f000a5ccaa6f8432191c)

https://about.gitlab.com/releases/2025/08/27/patch-release-gitlab-18-3-1-released/
(cherry picked from commit a481b621204c0a610c11fcd067e1201e7d06ccf3)

(cherry picked from commit 8ea7916703286490d9cbef1e81d3d877a14e5db3)

Downloads have moved from the `hopperv4` directory to the `public`
directory at some point.

(cherry picked from commit ce1fd2787e182238c900203912a561eb2db95730)

This allows running a full comparison between two commits locally.

What was previously `eval.full` is now called `eval.all`. The new
`eval.full` takes a `baseline` argument for the comparison.

(cherry picked from commit ccc12c839b1158763041559204e6065537c3f548)

We had set a default of 5000 for local evaluation earlier for
`singleSystem`, it makes sense to also use that for `full`.

The README is also a bit outdated, because Nix 2.30 significantly
changed the memory requirements. Rewriting the README to also show the
ability to directly evaluate the current system only.

(cherry picked from commit 0e0709794790105ed3303348e5bd1153fcebeaf3)

Recent firefox started using fileport.h API. This API was exposed in SDK
15.4, but we are still running on 15.2. XNU source headers contain the
header for some time, so we can pull it from there instead.

(cherry picked from commit 5dfd85b1b982b16c43e8bd048893ead6d5bf2983)

Changelog: https://git.sr.ht/~rjarry/aerc/tree/0.21.0/item/CHANGELOG.md
(cherry picked from commit b920c5d88c49542c77d29226588e5f63720b341f)

(cherry picked from commit 9b25238d7dd8eb13aa6773ae4672df4921c4564c)

(cherry picked from commit 71a2f416267e0a12eb7092123d00c88070c18233)

(cherry picked from commit e77b772b90d2835c61a4288eda6a54ce95ffc01d)

(cherry picked from commit 2f0303107becab26bfa1099eb370900445ecfe2a)

(cherry picked from commit 7df9103278c0c1cfcf5edb5473fc4b132c5d2db0)

(cherry picked from commit b98378bf28d97644078e1c56d10dc7819d643cbf)

(cherry picked from commit 0db1f2b20249e3402c54d24c1c56bf1b39cc5e94)

- only update to stable releases
- sort git tags to find the latest version

(cherry picked from commit 75fe7dbb27b9dc644efdeed1a7c447cfcdfc2502)

(cherry picked from commit 698ca750ea6c0557c0d8f59b4cae54676974924e)

(cherry picked from commit 13c53b2f627f8ca25cd82510d1bb7b717e0b0e26)

(cherry picked from commit a4727cf3fd63808c3f0f225b1213220339429677)

(cherry picked from commit 05238330bc089c285ab6316d7f4d2057dfe6afcd)

(cherry picked from commit efd87a9914af70c971cc0e4ad937e5d7d44138c4)

(cherry picked from commit 87fc9b9b3ba90ef84939a812101e37c6a83736ef)

(cherry picked from commit 56aac88f6f77cb60688522de6d8a376e54e43ebe)

(cherry picked from commit 3cc1030e1f4b4ff492e74f7fcfd28539d8efd4c6)

(cherry picked from commit 811a227f1b283f36e1ed77b3db37d4ab106eca36)

https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_26.html

This update includes 1 security fix.

CVEs:
CVE-2025-9478

(cherry picked from commit eb765b4d4e7f102de19f8f7d36d632c8bcb69583)

(cherry picked from commit 58e706dce4bec1b1410a3218adf667ad256d9410)

(cherry picked from commit e5825c2440735f2d89f5d281e4f9d8e1f51a3d31)

(cherry picked from commit 9d74181b4ad26c9cbd42b11520d96def78f494ff)

applyPatches needs to be used to patch the src for vendorHash to pick up
the changes to composer.json and composer.lock

(cherry picked from commit 8ff9f7c80efffa17d18bc6853eb77ca4bfb4e494)