public-inbox-{http,nntp,imap}d only need to be able to read the
repositories, so they don't need to run as the public-inbox user,
which has write permission for /var/lib/public-inbox.

Annoyingly, confinement is currently not compatible with DynamicUser,
so we can't enable both at the same time.

As far as I can tell, this is redundant with TemporaryFileSystem=/.

This caused the test driver to fail to build.

Fixes: 406de94b416 ("nixos/test-driver: add `timeout` option for `wait_for_console_text`")

sqlfluff: 2.1.0 -> 2.1.1

Revert "nixos/lib/test-driver: enable EFI variable reads at runtime"

hidapi: 0.13.1 -> 0.14.0

kodi.packages.inputstream-adaptive: 20.3.2 -> 20.3.8

sqlitecpp: 3.2.1 -> 3.3.0

Regressed in 92d15cf5f0d4a9.
These aliases are deprecated; usage blocks channel via
https://hydra.nixos.org/log/rgfflnxgnghdmfqh8id62wc6b13vrh0z-nixpkgs-release-checks.drv

osqp: 0.6.2 -> 0.6.3

mindustry-server: Fix

GNOME updates 2023-05-28

organicmaps: 2023.04.02-7 -> 2023.05.08-7

python310Packages.simple-salesforce: 1.12.3 -> 1.12.4

linuxPackages.ena: 2.8.3 -> 2.8.6 and fix build against Linux 6.3

mitmproxy2swagger: 0.9.0 -> 0.10.0

Diff: https://github.com/sqlfluff/sqlfluff/compare/refs/tags/2.1.0...2.1.1

Changelog: https://github.com/sqlfluff/sqlfluff/blob/2.1.1/CHANGELOG.md

enchant: 2.3.4 -> 2.5.0

ZHF: #230712

ZHF: #230712

nixos/test-driver: add `timeout` option for `wait_for_console_text`

nixos/lib/test-driver: enable EFI variable reads at runtime

victoriametrics: 1.89.1 -> 1.91.0

pscale: 0.144.0 -> 0.145.0

libad9361: 0.2 -> 0.3

exploitdb: 2023-05-25 -> 2023-05-27

rbspy: add an update script

nexttrace: 1.1.3 -> 1.1.5

python3Packages.keyring: disable tests that fail with Darwin sandbox

flow: 0.206.0 -> 0.207.0

qmarkdowntextedit: unstable-2022-08-24 -> unstable-2023-04-02

oculante: 0.6.63 -> 0.6.64

encpipe: init at 0.5

v2ray-geoip: 202305180042 -> 202305250042

exfatprogs: 1.2.0 -> 1.2.1

go-task: fix version

python310Packages.ibm-watson: 6.1.0 -> 7.0.0

remote-touchpad: 1.4.1 -> 1.4.2

python311Packages.bqplot: 0.12.36 -> 0.12.39

brev-cli: 0.6.227 -> 0.6.229

Upstream switched to using TypeScript in v4.4.0, which broke the patch.
This fixes that issue by migrating to building The Lounge from source,
instead of having to patch the minified JavaScript.

In some odd scenarios, `npm prune` either fails, or hangs. I have no idea
what could possibly be wrong at the moment, but let's provide an escape
hatch for packages that can still use the rest of the install hook's
functionality.

https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/compare/44.1...44.2

vimPlugins.other-nvim: init at 2022-11-15

nixpacks: 1.7.0 -> 1.9.0