Merge master into staging-next

2026-07-25 01:50:40 +00:00 · 2026-07-25 00:32:53 +00:00
parent f6055e87bf a016e17772
commit 00d0b792cc
104 changed files with 630 additions and 790 deletions
--- a/.github/workflows/bot.yml
+++ b/.github/workflows/bot.yml
@@ -88,7 +88,7 @@ jobs:
          GH_TOKEN: ${{ steps.app-token.outputs.token || github.token }}
        run: gh api /rate_limit | jq

-      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
+      - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
        name: Labels from touched files
        if: |
          github.event_name == 'pull_request_target' &&
@@ -98,7 +98,7 @@ jobs:
          configuration-path: .github/labeler.yml # default
          sync-labels: true

-      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
+      - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
        name: Labels from touched files (no sync)
        if: |
          github.event_name == 'pull_request_target' &&
@@ -108,7 +108,7 @@ jobs:
          configuration-path: .github/labeler-no-sync.yml
          sync-labels: false

-      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
+      - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
        name: Labels from touched files (development branches)
        # Development branches like staging-next, haskell-updates and python-updates get special labels.
        # This is to avoid the mass of labels there, which is mostly useless - and really annoying for
--- a/ci/pinned.json
+++ b/ci/pinned.json
@@ -9,9 +9,9 @@
      },
      "branch": "nixpkgs-unstable",
      "submodules": false,
-      "revision": "421eebfd0ec7bccd4abe826ce62d7e6e83129493",
-      "url": "https://github.com/NixOS/nixpkgs/archive/421eebfd0ec7bccd4abe826ce62d7e6e83129493.tar.gz",
-      "hash": "sha256:1lxfhfgiv1sz2v7fg43gny57sa6wf59n98q7ldsyb2p06f4sal7w"
+      "revision": "7525d999cd850b9a488817abc89c75dc733acf17",
+      "url": "https://github.com/NixOS/nixpkgs/archive/7525d999cd850b9a488817abc89c75dc733acf17.tar.gz",
+      "hash": "sha256-4IHyyLgLBdKefkljdKod4IMn023pQiDXAWJA187cmdY="
    }
  },
  "version": 8
--- a/nixos/modules/programs/regreet.nix
+++ b/nixos/modules/programs/regreet.nix
@@ -15,14 +15,13 @@ in
      description = ''
        Enable ReGreet, a clean and customizable greeter for greetd.

-        To use ReGreet, {option}`services.greetd` has to be enabled and
-        {option}`services.greetd.settings.default_session` should contain the
-        appropriate configuration to launch
-        {option}`config.programs.regreet.package`. For examples, see the
-        [ReGreet Readme](https://github.com/rharish101/ReGreet#set-as-default-session).
+        By default enables {option}`services.greetd` and configures a
+        {command}`default_session` to launch ReGreet using the
+        {command}`cage` compositor.

-        A minimal configuration that launches ReGreet in {command}`cage` is
-        enabled by this module by default.
+        See the
+        [ReGreet Readme](https://github.com/rharish101/ReGreet#set-as-default-session)
+        for other examples.
      '';
    };

@@ -48,8 +47,8 @@ in
        [ "-s" "-d" "-m" "last" ]
      '';
      description = ''
-        Additional arguments to be passed to
-        [cage](https://github.com/cage-kiosk/cage).
+        Arguments to be passed to [cage](https://github.com/cage-kiosk/cage)
+        when using it as the default compositor.
      '';
    };

--- a/nixos/modules/rename.nix
+++ b/nixos/modules/rename.nix
@@ -403,6 +403,11 @@ in
      as the underlying package isn't being maintained. Working alternatives are
      libinput and synaptics.
    '')
+    (mkRemovedOptionModule [ "services" "xserver" "windowManager" "afterstep" ] ''
+      The services.xserver.windowManager.afterstep module and the corresponding
+      package have been removed from Nixpkgs because they were unmaintained
+      upstream.
+    '')
    (mkRemovedOptionModule [ "services" "xserver" "windowManager" "ragnarwm" ] ''
      The services.xserver.windowManager.ragnarwm module has been removed
      because the corresponding package was removed from nixpkgs.
--- a/nixos/modules/services/display-managers/greetd.nix
+++ b/nixos/modules/services/display-managers/greetd.nix
@@ -1,6 +1,7 @@
 {
  config,
  lib,
+  utils,
  pkgs,
  ...
 }:
@@ -76,9 +77,37 @@ in
    services.greetd.settings.default_session.user = lib.mkDefault "greeter";

    security.pam.services.greetd = {
-      allowNullPassword = true;
-      startSession = true;
-      enableGnomeKeyring = lib.mkDefault config.services.gnome.gnome-keyring.enable;
+      useDefaultRules = false;
+      rules = {
+        auth = utils.pam.autoOrderRules [
+          {
+            name = "login";
+            control = "substack";
+            modulePath = "login";
+          }
+        ];
+        account = utils.pam.autoOrderRules [
+          {
+            name = "login";
+            control = "include";
+            modulePath = "login";
+          }
+        ];
+        password = utils.pam.autoOrderRules [
+          {
+            name = "login";
+            control = "substack";
+            modulePath = "login";
+          }
+        ];
+        session = utils.pam.autoOrderRules [
+          {
+            name = "login";
+            control = "include";
+            modulePath = "login";
+          }
+        ];
+      };
    };

    # This prevents nixos-rebuild from killing greetd by activating getty again
--- a/nixos/modules/services/display-managers/ly.nix
+++ b/nixos/modules/services/display-managers/ly.nix
@@ -100,9 +100,37 @@ in

    security.pam.services = {
      ly = {
-        startSession = true;
-        unixAuth = true;
-        enableGnomeKeyring = lib.mkDefault config.services.gnome.gnome-keyring.enable;
+        useDefaultRules = false;
+        rules = {
+          auth = utils.pam.autoOrderRules [
+            {
+              name = "login";
+              control = "substack";
+              modulePath = "login";
+            }
+          ];
+          account = utils.pam.autoOrderRules [
+            {
+              name = "login";
+              control = "include";
+              modulePath = "login";
+            }
+          ];
+          password = utils.pam.autoOrderRules [
+            {
+              name = "login";
+              control = "substack";
+              modulePath = "login";
+            }
+          ];
+          session = utils.pam.autoOrderRules [
+            {
+              name = "login";
+              control = "include";
+              modulePath = "login";
+            }
+          ];
+        };
      };
    }
    // optionalAttrs dmcfg.autoLogin.enable {
--- a/nixos/modules/services/x11/window-managers/afterstep.nix
+++ b/nixos/modules/services/x11/window-managers/afterstep.nix
@@ -1,30 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-with lib;
-
-let
-  cfg = config.services.xserver.windowManager.afterstep;
-in
-{
-  ###### interface
-  options = {
-    services.xserver.windowManager.afterstep.enable = mkEnableOption "afterstep";
-  };
-
-  ###### implementation
-  config = mkIf cfg.enable {
-    services.xserver.windowManager.session = singleton {
-      name = "afterstep";
-      start = ''
-        ${pkgs.afterstep}/bin/afterstep &
-        waitPID=$!
-      '';
-    };
-    environment.systemPackages = [ pkgs.afterstep ];
-  };
-}
--- a/nixos/modules/services/x11/window-managers/default.nix
+++ b/nixos/modules/services/x11/window-managers/default.nix
@@ -8,7 +8,6 @@ in
 {
  imports = [
    ./2bwm.nix
-    ./afterstep.nix
    ./berry.nix
    ./bspwm.nix
    ./cwm.nix
--- a/nixos/modules/system/boot/resolved.nix
+++ b/nixos/modules/system/boot/resolved.nix
@@ -30,8 +30,9 @@ let

  dnsmasqResolve = config.services.dnsmasq.enable && config.services.dnsmasq.resolveLocalQueries;

-  transformSettings = settings: {
-    Resolve = lib.mapAttrs (
+  transformSettings =
+    settings:
+    lib.mapAttrs (
      key: value:
      # concat lists for options that should result in space-separated values
      if
@@ -45,10 +46,9 @@ let
        concatStringsSep " " value
      else
        value
-    ) settings.Resolve;
-  };
+    ) settings;

-  resolvedConf = settingsToSections (transformSettings cfg.settings);
+  resolvedConf = settingsToSections { Resolve = transformSettings cfg.settings.Resolve; };
 in
 {
  imports = [
--- a/pkgs/applications/editors/vscode/extensions/dbaeumer.vscode-eslint/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/dbaeumer.vscode-eslint/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "vscode-eslint";
    publisher = "dbaeumer";
-    version = "3.0.24";
-    hash = "sha256-ZQVzpSSLf3tpO4QtLjbCOje3L5/EqzT9A9IOssl6e54=";
+    version = "3.0.34";
+    hash = "sha256-ynCPFzne4YS4WNjQSmGky+e2IaE3SLxj6FkjKyLPcAs=";
  };

  meta = {
--- a/pkgs/applications/networking/browsers/chromium/info.json
+++ b/pkgs/applications/networking/browsers/chromium/info.json
@@ -837,7 +837,7 @@
    }
  },
  "ungoogled-chromium": {
-    "version": "150.0.7871.181",
+    "version": "150.0.7871.186",
    "deps": {
      "depot_tools": {
        "rev": "f4fadaf6a5ba1bced9d3d9021060667b563bf583",
@@ -849,16 +849,16 @@
        "hash": "sha256-/1A+DkzAQj2zGPe/A/G0Z3VrYJXUxq4Hd/+d/o5p3G8="
      },
      "ungoogled-patches": {
-        "rev": "150.0.7871.181-1",
-        "hash": "sha256-ifqEnOcvi49cFOYan8ShiwteXYnFrLPclrIBZiE1rGY="
+        "rev": "150.0.7871.186-1",
+        "hash": "sha256-kL9xE/w0W4Wf+z9qX5EFLGMYWQ3Hvyzhy7PtF59a/Sk="
      },
      "npmHash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg="
    },
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "24b04c927b23c39cf9c5227cc8dc6f64a744c8e9",
-        "hash": "sha256-F52wmxyNPEV26v8YgAz+MRhyEGyV7YUX+/wj95H4Lf0=",
+        "rev": "0fcdce5f4fdec8d442d7df760cb541f1ca6e446d",
+        "hash": "sha256-6coAYewN8RC5kx0PmmiV6mXQhLqWF3BZP320PmOcPvw=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -45,11 +45,11 @@
    "vendorHash": "sha256-031RZo1EqWrt79NvdrrZ9FW/E+mfwkGmr7wyMYX4SHg="
  },
  "aliyun_alicloud": {
-    "hash": "sha256-G52l+5WlcxSNflx0ioD0jEKI1GBWe5D4qW8VH8k6uTA=",
+    "hash": "sha256-es2ti8tSgShwUWYtZ7OEff88LLiAnK4B/Hq9PaNEEOc=",
    "homepage": "https://registry.terraform.io/providers/aliyun/alicloud",
    "owner": "aliyun",
    "repo": "terraform-provider-alicloud",
-    "rev": "v1.285.0",
+    "rev": "v1.286.0",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-sZeXHTrMUUPllPzvpbFjwA5FjFJXnO1k5h9B5i8U+vs="
  },
@@ -445,13 +445,13 @@
    "vendorHash": "sha256-FcxAh8EOvnT8r1GHu0Oj2C5Jgbr2WPwD7/vY4/qIvTA="
  },
  "gitlabhq_gitlab": {
-    "hash": "sha256-BMOFi/g0W6xo/Kfqw8oqsMeeU3aXyWAKSgF9lIS4AbA=",
+    "hash": "sha256-eTtmEW3sdCkpojxshhdQq+8qNTYjzin5TmCGil/3F5E=",
    "homepage": "https://registry.terraform.io/providers/gitlabhq/gitlab",
    "owner": "gitlabhq",
    "repo": "terraform-provider-gitlab",
-    "rev": "v19.1.0",
+    "rev": "v19.2.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-9aoJGVTC9t76auYy8K3QSWGzSAq9aTxemKNc3aCLjRY="
+    "vendorHash": "sha256-uEXZEYlQZ24h4IffJQEmqqrmHbiRSKVGJ1OCv4k1zVQ="
  },
  "go-gandi_gandi": {
    "hash": "sha256-fsCtmwyxkXfOtiZG27VEb010jglK35yr4EynnUWlFog=",
@@ -905,13 +905,13 @@
    "vendorHash": "sha256-t4dbDJNjEQ6/u+/6zqk2Sdd3LVn/L2BCJujpiLdGc58="
  },
  "metio_migadu": {
-    "hash": "sha256-Aef1H/L2EFeU9mhecOnlPAbJbt3XfBL0Wz67IqxCI10=",
+    "hash": "sha256-qeN2Zlx4qSrjb7qxjDf4v3uG1GR/faTiCNKD/HZkoyw=",
    "homepage": "https://registry.terraform.io/providers/metio/migadu",
    "owner": "metio",
    "repo": "terraform-provider-migadu",
-    "rev": "2026.7.2",
+    "rev": "2026.7.23",
    "spdx": "0BSD",
-    "vendorHash": "sha256-wUX2smEhKUftBCRi7ANq8NpHXpB+EmlVshrhI2ltY2I="
+    "vendorHash": "sha256-rwIHdtVVWygfxadoJigGBIUV0xoQ6vqDsHJgjYQ2RBM="
  },
  "mongey_kafka": {
    "hash": "sha256-rTa6c7jAMH027V7h/yUGVGz6TS0PDdObilxU0Vpr6FI=",
--- a/pkgs/applications/video/obs-studio/plugins/droidcam-obs/default.nix
+++ b/pkgs/applications/video/obs-studio/plugins/droidcam-obs/default.nix
@@ -12,13 +12,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "droidcam-obs";
-  version = "2.5.0";
+  version = "2.5.1";

  src = fetchFromGitHub {
    owner = "dev47apps";
    repo = "droidcam-obs-plugin";
    tag = finalAttrs.version;
-    hash = "sha256-JPAQoGZFzTIdBQ7GpCPaYUVPkkcBdCRFkVPU+nyRa7Q=";
+    hash = "sha256-T7CQrjQK5OV1bgqa2il9snsK7nScuVhV06NuX2SoIeI=";
  };

  preBuild = ''
--- a/pkgs/by-name/af/afterstep/fix-build-with-c23.patch
+++ b/pkgs/by-name/af/afterstep/fix-build-with-c23.patch
@@ -1,81 +0,0 @@
-From 081d9c3284075c65b70837079bd67621c3b64da7 Mon Sep 17 00:00:00 2001
-From: Moraxyc <i@qaq.li>
-Date: Sun, 28 Dec 2025 00:39:49 +0800
-Subject: [PATCH] fix build with c23
-
---
- libAfterBase/fs.c       | 2 +-
- src/ASDocGen/ASDocGen.c | 2 +-
- src/Ident/Ident.c       | 2 +-
- src/afterstep/dirtree.c | 2 +-
- src/afterstep/menus.h   | 2 +-
- 5 files changed, 5 insertions(+), 5 deletions(-)
-
-diff --git a/libAfterBase/fs.c b/libAfterBase/fs.c
-index 731bfd3..954bfd6 100644
--- a/libAfterBase/fs.c
-+++ b/libAfterBase/fs.c
-@@ -818,7 +818,7 @@ my_scandir (char *dirname, struct direntry *(*namelist[]),
- 	}
- 	/* Optionally sort the list */
- 	if (dcomp)
-		qsort (*namelist, n, sizeof (struct direntry *), (int (*)())dcomp);
-+		qsort (*namelist, n, sizeof (struct direntry *), (int (*)(const void *, const void *))dcomp);
- 
- 	/* Return the count of the entries */
- 	return n;
-diff --git a/src/ASDocGen/ASDocGen.c b/src/ASDocGen/ASDocGen.c
-index 31d7a70..9a86219 100644
--- a/src/ASDocGen/ASDocGen.c
-+++ b/src/ASDocGen/ASDocGen.c
-@@ -667,7 +667,7 @@ write_options_keywords(const char *source_dir, const char *syntax_dir, SyntaxDef
- 	sorted_list = safecalloc( max_i, sizeof(TermDef*));
- 	for (i = 0; i < max_i; i++)
- 		sorted_list[i] = &(syntax->terms[i]) ; 
-	qsort(sorted_list, max_i, sizeof(TermDef*), (int (*)())sort_terms_by_alpha );
-+	qsort(sorted_list, max_i, sizeof(TermDef*), (int (*)(const void *, const void *))sort_terms_by_alpha );
- 	for (i = 0; i < max_i; i++)
- 	{	
- 		SyntaxDef *sub_syntax = sorted_list[i]->sub_syntax ; 
-diff --git a/src/Ident/Ident.c b/src/Ident/Ident.c
-index 1497d06..d6ddad6 100644
--- a/src/Ident/Ident.c
-+++ b/src/Ident/Ident.c
-@@ -89,7 +89,7 @@ void HandleEvents();
- void DispatchEvent (ASEvent * event);
- void process_message (send_data_type type, send_data_type *body);
- 
-Window make_ident_window();
-+Window make_ident_window(int width, int height);
- void fill_window_data();
- void display_window_data();
- void add_property( const char *name, const char *value, unsigned long value_encoding, Bool span_cols );
-diff --git a/src/afterstep/dirtree.c b/src/afterstep/dirtree.c
-index 46ce782..48f7e30 100644
--- a/src/afterstep/dirtree.c
-+++ b/src/afterstep/dirtree.c
-@@ -675,7 +675,7 @@ void dirtree_sort (dirtree_t * tree)
- 	list = (dirtree_t **) safemalloc (n * sizeof (dirtree_t *));
- 	for (n = 0, t = tree->child; t != NULL; t = t->next, n++)
- 		list[n] = t;
-	qsort (list, n, sizeof (dirtree_t *), (int (*)())dirtree_compar);
-+	qsort (list, n, sizeof (dirtree_t *), (int (*)(const void *, const void *))dirtree_compar);
- 	tree->child = list[0];
- 	for (i = 1; i < n; i++)
- 		list[i - 1]->next = list[i];
-diff --git a/src/afterstep/menus.h b/src/afterstep/menus.h
-index 98b2ad3..bb2a5b1 100644
--- a/src/afterstep/menus.h
-+++ b/src/afterstep/menus.h
-@@ -95,7 +95,7 @@ MenuData* FindPopup( const char* name, int quiet );
- 
- void DeleteMenuItem( MenuDataItem* item );
- 
-MenuData *CreateMenuData();
-+MenuData *CreateMenuData(char *name);
- MenuData *NewMenuData (char *name);
- void DeleteMenuData (MenuData * menu);
- 
-- 
-2.51.2
-
--- a/pkgs/by-name/af/afterstep/package.nix
+++ b/pkgs/by-name/af/afterstep/package.nix
@@ -1,101 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchpatch,
-  dbus,
-  fltk_1_3,
-  gtk2,
-  libice,
-  libsm,
-  libtiff,
-  pkg-config,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "afterstep";
-  version = "2.2.12";
-
-  src = fetchFromGitHub {
-    owner = "afterstep";
-    repo = "afterstep";
-    rev = finalAttrs.version;
-    hash = "sha256-j1ADTRZ3Mxv9VNZWhWCFMnM/CJfkphdrgbw9Ca3bBw0=";
-  };
-
-  patches = [
-    (fetchpatch {
-      url = "https://salsa.debian.org/debian/afterstep/raw/master/debian/patches/44-Fix-build-with-gcc-5.patch";
-      hash = "sha256-RNLB6PuFVA1PsYt2VwLyLyvY2OO3oIl1xk+0/6nwN+4=";
-    })
-
-    # Fix pending upstream inclusion for binutils-2.36 support:
-    #  https://github.com/afterstep/afterstep/pull/7
-    (fetchpatch {
-      name = "binutils-2.36.patch";
-      url = "https://github.com/afterstep/afterstep/commit/5e9e897cf8c455390dd6f5b27fec49707f6b9088.patch";
-      hash = "sha256-aGMTyojzXEHGjO9lMT6dwLl01Fd333BUuCIX0FU9ac4=";
-    })
-
-    # fix build with c23
-    #   fs.c:821:66: error: passing argument 4 of 'qsort' from incompatible pointer type [-Wincompatible-pointer-types]
-    #   Ident.c:326:1: error: conflicting types for 'make_ident_window'; have 'Window(int,  int)' {aka 'long unsigned int(int,  int)'}
-    #   menuitem.c:85:11: error: conflicting types for 'CreateMenuData'; have 'MenuData *(char *)'
-    ./fix-build-with-c23.patch
-  ];
-
-  postPatch = ''
-    # Causes fatal ldconfig cache generation attempt on non-NixOS Linux
-    for mkfile in autoconf/Makefile.common.lib.in libAfter{Base,Image}/Makefile.in; do
-      substituteInPlace $mkfile \
-        --replace-fail 'test -w /etc' 'false'
-    done
-  '';
-
-  nativeBuildInputs = [
-    pkg-config
-  ];
-
-  buildInputs = [
-    dbus
-    fltk_1_3
-    gtk2
-    libice
-    libsm
-    libtiff
-  ];
-
-  outputs = [
-    "out"
-    "man"
-  ];
-
-  strictDeps = true;
-
-  preConfigure = ''
-    # A strange type of bug: dbus is not immediately found by pkg-config
-    export NIX_CFLAGS_COMPILE="$NIX_CFLAGS_COMPILE $(pkg-config dbus-1 --cflags)"
-  '';
-
-  # Parallel build fails due to missing dependencies between private libraries:
-  #   ld: cannot find ../libAfterConf/libAfterConf.a: No such file or directory
-  # Let's disable parallel builds until it's fixed upstream:
-  #   https://github.com/afterstep/afterstep/issues/8
-  enableParallelBuilding = false;
-
-  meta = {
-    homepage = "http://www.afterstep.org/";
-    description = "NEXTStep-inspired window manager";
-    longDescription = ''
-      AfterStep is a window manager for the Unix X Window System. Originally
-      based on the look and feel of the NeXTStep interface, it provides end
-      users with a consistent, clean, and elegant desktop. The goal of AfterStep
-      development is to provide for flexibility of desktop configuration,
-      improving aestetics, and efficient use of system resources.
-    '';
-    license = lib.licenses.gpl2Plus;
-    maintainers = [ ];
-    mainProgram = "afterstep";
-    platforms = lib.platforms.linux;
-  };
-})
--- a/pkgs/by-name/an/anubis/package.nix
+++ b/pkgs/by-name/an/anubis/package.nix
@@ -75,6 +75,8 @@ buildGoModule (finalAttrs: {
    export DONT_USE_NETWORK=1
  '';

+  __darwinAllowLocalNetworking = true;
+
  passthru = {
    tests = { inherit (nixosTests) anubis; };
    updateScript = nix-update-script { extraArgs = [ "--version-regex=^v(\\d+\\.\\d+\\.\\d+)$" ]; };
--- a/pkgs/by-name/as/assh/package.nix
+++ b/pkgs/by-name/as/assh/package.nix
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "assh";
-  version = "2.17.2";
+  version = "2.17.3";

  src = fetchFromGitHub {
    repo = "assh";
    owner = "moul";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/w4RluA7py6d75S04czNsgHpmR5rmAUZx8OnZfu9oNg=";
+    hash = "sha256-CH6QM/dy5fKo7Tq2ekrc06iqjJDZl8JHMG7jalho7BI=";
  };

-  vendorHash = "sha256-EA39KqAN9SHPU362j6/j6okvT+eZb2R4unMA0bB+bVg=";
+  vendorHash = "sha256-ENCJNgMLTZDlKL0DIt48F1G8TYo2blPdsFH6v8dNC8w=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/au/autoprefixer/package.nix
+++ b/pkgs/by-name/au/autoprefixer/package.nix
@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "autoprefixer";
-  version = "10.5.3";
+  version = "10.5.4";

  src = fetchFromGitHub {
    owner = "postcss";
    repo = "autoprefixer";
    tag = finalAttrs.version;
-    hash = "sha256-hjckcgWojItp2gseQI18zzxizjw/HxQPiTb/JegSCcs=";
+    hash = "sha256-616VFB6qJiNfsDsaxR4Y+xoqKDrBOtKgWfGMeiaDeGQ=";
  };

  nativeBuildInputs = [
@@ -30,7 +30,7 @@ stdenv.mkDerivation (finalAttrs: {
    inherit (finalAttrs) pname version src;
    pnpm = pnpm_10;
    fetcherVersion = 4;
-    hash = "sha256-diOgX9lXKOwCx9V737mmmtrhqDg5beXJH/PjlJHFpto=";
+    hash = "sha256-+EPzrG2vt2FRIwcJqwwiYPevQFCNAbX7kgFlY+vLbqE=";
  };

  installPhase = ''
--- a/pkgs/by-name/az/aztfexport/package.nix
+++ b/pkgs/by-name/az/aztfexport/package.nix
@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "aztfexport";
-  version = "0.19.0";
+  version = "0.20.0";

  src = fetchFromGitHub {
    owner = "Azure";
    repo = "aztfexport";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-97lahgEsth2YUeqTe8J58brykpFV0lG6KwB7FJgODAE=";
+    hash = "sha256-wHI/osu2Jq85zCgh1HfOTuO81mYtQJcSbvlDnXd7Duc=";
  };

-  vendorHash = "sha256-4u40PdRT3E+BZ8bIrnIgRnJkpws6EPK5DRyXu9oY7hc=";
+  vendorHash = "sha256-QDpoOlu1qGNK0ennplusXBgeQWZP3EH7aSStllP8uzw=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/az/azurehound/package.nix
+++ b/pkgs/by-name/az/azurehound/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "azurehound";
-  version = "2.12.2";
+  version = "3.0.0";

  src = fetchFromGitHub {
    owner = "SpecterOps";
    repo = "AzureHound";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-w8PmSt+QvU0HELkgdYLfIUgK3R5vCYzlPbMyrHztiPw=";
+    hash = "sha256-4uc4XSjvuMUSeCsJl9uHBFIaeG1KZ1xDaACXnXkp7v0=";
  };

  vendorHash = "sha256-WF46wXaNU/Em0KpF6hkuuJ+7K1IKLGqpNS/HxpxX5WY=";
--- a/pkgs/by-name/bi/bitwarden-desktop/dont-auto-setup-biometrics.patch
+++ b/pkgs/by-name/bi/bitwarden-desktop/dont-auto-setup-biometrics.patch
@@ -1,8 +1,8 @@
-diff --git a/apps/desktop/src/key-management/biometrics/os-biometrics-linux.service.ts b/apps/desktop/src/key-management/biometrics/os-biometrics-linux.service.ts
-index 791b4d6f88..dfee0bbf8d 100644
--- a/apps/desktop/src/key-management/biometrics/os-biometrics-linux.service.ts
-+++ b/apps/desktop/src/key-management/biometrics/os-biometrics-linux.service.ts
-@@ -115,7 +115,7 @@ export default class OsBiometricsServiceLinux implements OsBiometricService {
+diff --git a/apps/desktop/src/key-management/biometrics/native-v2/os-biometrics-linux.service.ts b/apps/desktop/src/key-management/biometrics/native-v2/os-biometrics-linux.service.ts
+index 110db23ec79..dfaf600bcdf 100644
+--- a/apps/desktop/src/key-management/biometrics/native-v2/os-biometrics-linux.service.ts
+++ b/apps/desktop/src/key-management/biometrics/native-v2/os-biometrics-linux.service.ts
+@@ -83,7 +83,7 @@ export default class OsBiometricsServiceLinux implements OsBiometricService {
     // The user needs to manually set up the polkit policy outside of the sandbox
     // since we allow access to polkit via dbus for the sandboxed clients, the authentication works from
     // the sandbox, once the policy is set up outside of the sandbox.
@@ -10,4 +10,4 @@ index 791b4d6f88..dfee0bbf8d 100644
 +    return false;
   }
 
-   async osBiometricsSetup(): Promise<void> {
+   async runSetup(): Promise<void> {
--- a/pkgs/by-name/bi/bitwarden-desktop/package.nix
+++ b/pkgs/by-name/bi/bitwarden-desktop/package.nix
@@ -5,14 +5,14 @@
  copyDesktopItems,
  dart-sass,
  darwin,
-  electron_39,
+  electron_41,
  fetchFromGitHub,
  gnome-keyring,
  jq,
  makeDesktopItem,
  makeWrapper,
  nix-update-script,
-  nodejs_22,
+  nodejs_24,
  pkg-config,
  rustc,
  rustPlatform,
@@ -22,17 +22,17 @@

 let
  icon = "bitwarden";
-  electron = electron_39;
+  electron = electron_41;
 in
 buildNpmPackage (finalAttrs: {
  pname = "bitwarden-desktop";
-  version = "2026.6.1";
+  version = "2026.7.0";

  src = fetchFromGitHub {
    owner = "bitwarden";
    repo = "clients";
    tag = "desktop-v${finalAttrs.version}";
-    hash = "sha256-ee+C58Y5pZWEmqbRO/w7rdY+e6gy4EL7Sn0S1AxGMXI=";
+    hash = "sha256-E4glf4G70BuT0GYu1kEb5Z9B76ElIlDPe1rdGSdmCzo=";
  };

  patches = [
@@ -64,7 +64,7 @@ buildNpmPackage (finalAttrs: {
    rm -r apps/cli
  '';

-  nodejs = nodejs_22;
+  nodejs = nodejs_24;

  makeCacheWritable = true;
  npmFlags = [
@@ -74,7 +74,7 @@ buildNpmPackage (finalAttrs: {

  npmWorkspace = "apps/desktop";
  npmDepsFetcherVersion = 3;
-  npmDepsHash = "sha256-C5GLei/WWetd4qLv7obBJWbQR9LBy+Sqdbjko3/W7VY=";
+  npmDepsHash = "sha256-8wjt5wnJG4S4EeGWGxbo6Bwt76GIqrSiwqwwwQ17Y5Y=";

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs)
@@ -84,7 +84,7 @@ buildNpmPackage (finalAttrs: {
      cargoRoot
      patches
      ;
-    hash = "sha256-xyK3+z2yfCG9K5XAB6LNEeyqMRknONi6ZfY/3oko7Z8=";
+    hash = "sha256-PLfR+yS+MtscRRuyLaK/qIWJVDoefhOobev1fpNeHNo=";
  };
  cargoRoot = "apps/desktop/desktop_native";

@@ -197,7 +197,7 @@ buildNpmPackage (finalAttrs: {
    # Extract the polkit policy file from the multiline string in the source code.
    # This may break in the future but its better than copy-pasting it manually.
    mkdir -p $out/share/polkit-1/actions/
-    pushd apps/desktop/src/key-management/biometrics
+    pushd apps/desktop/src/key-management/biometrics/native-v2
    awk '/const polkitPolicy = `/{gsub(/^.*`/, ""); print; str=1; next} str{if (/`;/) str=0; gsub(/`;/, ""); print}' os-biometrics-linux.service.ts > $out/share/polkit-1/actions/com.bitwarden.Bitwarden.policy
    popd

--- a/pkgs/by-name/bu/bumpp/package.nix
+++ b/pkgs/by-name/bu/bumpp/package.nix
@@ -15,20 +15,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "bumpp";
-  version = "11.1.0";
+  version = "12.0.0";

  src = fetchFromGitHub {
    owner = "antfu-collective";
    repo = "bumpp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-LzFusuzFpbqh/gNV0c0vhoKE17CzTPJUppdpdKaGOFs=";
+    hash = "sha256-9o3eUZ4cCusvV+IwQbLqbEI4NhTKkcwgqv4Mqe/VxZ4=";
  };

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    inherit pnpm;
    fetcherVersion = 3;
-    hash = "sha256-KYTz/SO4rV+c57G8dv4ExCZrunA0xvgCNk8Td4HbCig=";
+    hash = "sha256-Em3HvH5nCiyxgaPQvenqAnOraYnvQNxLVdHQd1lz3+o=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ca/cargo-update/package.nix
+++ b/pkgs/by-name/ca/cargo-update/package.nix
@@ -16,14 +16,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-update";
-  version = "22.0.0";
+  version = "22.1.0";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-7SjJ+v+6PzwV8dTXxSVxKrj4/yUlyGVJtt0A+WaWNc8=";
+    hash = "sha256-0iXO+cmW1vfKc9sPTnw132fZlqTMfInVCIgT8NLrhwM=";
  };

-  cargoHash = "sha256-xRjPnZPewo/5pCDUem8+9Ko0XJ1p5HJtLLmErtZQb8w=";
+  cargoHash = "sha256-6yE4zdGosZhXhT3Q3mh/1h33OXqXrAWhZ0b18qaI1vs=";

  nativeBuildInputs = [
    cmake
--- a/pkgs/by-name/cd/cdncheck/package.nix
+++ b/pkgs/by-name/cd/cdncheck/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "cdncheck";
-  version = "1.2.44";
+  version = "1.2.45";

  src = fetchFromGitHub {
    owner = "projectdiscovery";
    repo = "cdncheck";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8Lte+arj2nqEU8WmaX4bf/WOJV6bdMLskm0BqSyBOuE=";
+    hash = "sha256-TR7ogxaJ9Vee6bpqWKu75Yf8KWo8bPTBKwIecGkN68I=";
  };

  vendorHash = "sha256-iJ1agL7sZ3ZKbW1wMA+qi8FgHdPa6gZLQ5BBPKJTNaQ=";
--- a/pkgs/by-name/ci/cine/package.nix
+++ b/pkgs/by-name/ci/cine/package.nix
@@ -19,14 +19,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "cine";
-  version = "1.7.0";
+  version = "1.7.4";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "diegopvlk";
    repo = "Cine";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WBzdBZ7WL6HAd26tJtTaw39jAtdNYNiNmYHhVr+JBtM=";
+    hash = "sha256-D25/wz9nsxi9Y1D8hnb3S1kNfdUfPM4ojyLovDkUEI4=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/dd/ddccontrol/package.nix
+++ b/pkgs/by-name/dd/ddccontrol/package.nix
@@ -2,36 +2,51 @@
  lib,
  stdenv,
  fetchFromGitHub,
+
+  # nativeBuildInputs
  autoreconfHook,
  intltool,
+  pkg-config,
+  rustPlatform,
+  cargo,
+  rustc,
+
+  # buildInputs
  libxml2,
  pciutils,
-  pkg-config,
-  gtk2,
+  gtk3,
  ddccontrol-db,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "ddccontrol";
-  version = "1.0.3";
+  version = "3.2.0";

  src = fetchFromGitHub {
    owner = "ddccontrol";
    repo = "ddccontrol";
    tag = finalAttrs.version;
-    sha256 = "sha256-qyD6i44yH3EufIW+LA/LBMW20Tejb49zvsDfv6YFD6c=";
+    sha256 = "sha256-8VqnmWLXt6rXapAqvzvtDQ9XjQ7H6s7pLqPhQ6Zflc4=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-UN308Tt9LCRLBSswem06UupjdIFntt6SqpTxteY5O78=";
  };

  nativeBuildInputs = [
    autoreconfHook
    intltool
    pkg-config
+    rustPlatform.cargoSetupHook
+    cargo
+    rustc
  ];

  buildInputs = [
    libxml2
    pciutils
-    gtk2
+    gtk3
    ddccontrol-db
  ];

@@ -40,13 +55,14 @@ stdenv.mkDerivation (finalAttrs: {
  ];

  prePatch = ''
-    substituteInPlace configure.ac              \
-      --replace                                 \
-      "\$""{datadir}/ddccontrol-db"             \
+    substituteInPlace configure.ac \
+      --replace-fail \
+      "\$""{datadir}/ddccontrol-db" \
      "${ddccontrol-db}/share/ddccontrol-db"
-
-    substituteInPlace src/ddcpci/Makefile.am    \
-       --replace "chmod 4711" "chmod 0711"
+    substituteInPlace src/lib/Makefile.am \
+      --replace-fail \
+      'DDCONTROL_DATADIR="$(datadir)/ddccontrol-db"' \
+      'DDCONTROL_DATADIR="${ddccontrol-db}/share/ddccontrol-db"'
  '';

  preConfigure = ''
@@ -56,6 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
  meta = {
    description = "Program used to control monitor parameters by software";
    homepage = "https://github.com/ddccontrol/ddccontrol";
+    mainProgram = "ddccontrol";
    license = lib.licenses.gpl2Plus;
    platforms = lib.platforms.linux;
    maintainers = with lib.maintainers; [
--- a/pkgs/by-name/de/devin-desktop/info.json
+++ b/pkgs/by-name/de/devin-desktop/info.json
@@ -1,14 +1,14 @@
 {
  "aarch64-darwin": {
-    "version": "3.4.27",
+    "version": "3.5.17",
    "vscodeVersion": "1.110.1",
-    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/0d4bf12ed4a7597cb8ae9016fe8474468aad98a2/Devin-darwin-arm64-3.4.27.zip",
-    "sha256": "c42b0671c246ef295807e822809cb82dfe65831d4879d68f25334f754babec8d"
+    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/2c489dfc762456657db8662309c0d5e76e886397/Devin-darwin-arm64-3.5.17.zip",
+    "sha256": "bca8cc6154f99f5153cd5b508899d8db64be795a96856a14f1d052b7d8091edd"
  },
  "x86_64-linux": {
-    "version": "3.4.27",
+    "version": "3.5.17",
    "vscodeVersion": "1.110.1",
-    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/0d4bf12ed4a7597cb8ae9016fe8474468aad98a2/Devin-linux-x64-3.4.27.tar.gz",
-    "sha256": "80850124b31331f63c24a201d1317bdacdfb438fb2bcc9b31c9b7a6391391619"
+    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/2c489dfc762456657db8662309c0d5e76e886397/Devin-linux-x64-3.5.17.tar.gz",
+    "sha256": "e7ce36c4baacc617a4d89b0e2fb4403f83b328fefd897aec1be5e31038be4e91"
  }
 }
--- a/pkgs/by-name/di/dia/fix-build-with-poppler-26-06.patch
+++ b/pkgs/by-name/di/dia/fix-build-with-poppler-26-06.patch
@@ -0,0 +1,33 @@
+From 2373861a858fb6ee7d50870ae66a59f05c6cd4bd Mon Sep 17 00:00:00 2001
+From: Nadzeya Hutsko <nadzeya@ubuntu.com>
+Date: Wed, 22 Jul 2026 20:46:52 +0200
+Subject: [PATCH] Fix build with Poppler >= 26.06
+
+poppler 26.06 changed the Page box accessors to return a const reference
+instead of a pointer. Take the address of the result, guarded by a
+version check so older poppler still builds
+---
+ plug-ins/pdf/pdf-import.cpp | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/plug-ins/pdf/pdf-import.cpp b/plug-ins/pdf/pdf-import.cpp
+index 3af268646..35fc6d9e3 100644
+--- a/plug-ins/pdf/pdf-import.cpp
+++ b/plug-ins/pdf/pdf-import.cpp
+@@ -93,8 +93,13 @@ public :
+                       (Annot *annot, void *user_data) G_GNUC_UNUSED,
+                   void   *annotDisplayDecideCbkData   G_GNUC_UNUSED)
+   {
+#if POPPLER_VERSION_MAJOR > 26 || (POPPLER_VERSION_MAJOR == 26 && POPPLER_VERSION_MINOR >= 6)
+    const PDFRectangle *mediaBox = &page->getMediaBox();
+    const PDFRectangle *clipBox = &page->getCropBox ();
+#else
+     const PDFRectangle *mediaBox = page->getMediaBox();
+     const PDFRectangle *clipBox = page->getCropBox ();
+#endif
+ 
+     if (page->isOk()) {
+       real w1 = (clipBox->x2 - clipBox->x1);
+-- 
+GitLab
+
--- a/pkgs/by-name/di/dia/package.nix
+++ b/pkgs/by-name/di/dia/package.nix
@@ -50,16 +50,21 @@ let
 in
 stdenv.mkDerivation {
  pname = "dia";
-  version = "unstable-2025-10-26";
+  version = "0.97.2-unstable-2026-07-24";

  src = fetchFromGitLab {
    domain = "gitlab.gnome.org";
    owner = "GNOME";
    repo = "dia";
-    rev = "efdf829e8afdbbeb371820932769e35415ebe886";
-    hash = "sha256-VFFU5iJnVJdZ2tkNszZ2ooBD+GiCL6MqanzpEWIJerk=";
+    rev = "ad68cc378b7a187706bc2648c48b44d16fb80819";
+    hash = "sha256-ejjSc9GGXD5GsbeRps1T20xifJuzWA1yq/G7jk797Cw=";
  };

+  patches = [
+    # https://gitlab.gnome.org/GNOME/dia/-/merge_requests/146
+    ./fix-build-with-poppler-26-06.patch
+  ];
+
  postPatch = ''
    # Fix build with poppler 25.10.0
    substituteInPlace plug-ins/pdf/pdf-import.cpp \
--- a/pkgs/by-name/fo/forecast/package.nix
+++ b/pkgs/by-name/fo/forecast/package.nix
@@ -16,13 +16,13 @@

 rustPlatform.buildRustPackage {
  pname = "forecast";
-  version = "0-unstable-2026-07-12";
+  version = "0-unstable-2026-07-17";

  src = fetchFromGitHub {
    owner = "cosmic-utils";
    repo = "forecast";
-    rev = "0de1b7502979eb3704445c98ce8dbb7969e109da";
-    hash = "sha256-9IZDDIhZY+YC0SOie5z0Ed5UAvBcf+soZ0RRz8sr71w=";
+    rev = "22a7de05c4bdaa4a4fa33f51091eb681d021f90e";
+    hash = "sha256-z0WYytAEZ1PaO5yyh+iDbJOSPZmnKV503HUZTpQPUXw=";
  };

  cargoHash = "sha256-F5AlYm9bzJJUrDiY712dbwpCR3lzvQNFKXHzIDG+TVQ=";
--- a/pkgs/by-name/ga/gale/package.nix
+++ b/pkgs/by-name/ga/gale/package.nix
@@ -38,13 +38,13 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gale";
-  version = "1.13.4";
+  version = "1.19.0";

  src = fetchFromGitHub {
    owner = "Kesomannen";
    repo = "gale";
    tag = finalAttrs.version;
-    hash = "sha256-ZCHknOp6ll9q6OBW/5/mNcu0d0zZj1rkCjPiumjMVzk=";
+    hash = "sha256-VufV/Z1XODQKwbEpMrw0xNMdMl8D1t3bPIfdwRhQI9I=";
  };

  pnpmDeps = fetchPnpmDeps {
@@ -56,7 +56,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
      ;
    pnpm = pnpm_10;
    fetcherVersion = 3;
-    hash = "sha256-bCGiYVmoWjpwneTQUwetna7u29BMIv48qWgZ2gd93hQ=";
+    hash = "sha256-/IR+34cdnCt9WpYdMaT92YIC/2JjEe/mZdeQewdWTek=";
  };

  postPatch = ''
@@ -70,7 +70,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
  cargoRoot = "src-tauri";
  buildAndTestSubdir = finalAttrs.cargoRoot;

-  cargoHash = "sha256-kAPTiGHWO/eBapPcH8xItOFeZYC0URzLYdl2GMQ50Ls=";
+  cargoHash = "sha256-4WSWvMQIYPzfxjDyuQI37ymxJhMVGxmxYDVSoknIzmg=";
+
+  checkFlags = [
+    "--skip=config::bepinex::tests::check_from_string" # Fails a left == right check, even with left and right data being identical
+  ];

  nativeBuildInputs = [
    jq
--- a/pkgs/by-name/gs/gsender/package.nix
+++ b/pkgs/by-name/gs/gsender/package.nix
@@ -5,12 +5,12 @@
 }:

 let
-  version = "1.6.2";
+  version = "1.6.3";
  pname = "gsender";

  src = fetchurl {
    url = "https://github.com/Sienci-Labs/gsender/releases/download/v${version}/gSender-${version}-Linux-Intel-64Bit.AppImage";
-    hash = "sha256-DZBTnvbxh2n4KVhbbe7JG0/q+wNQVEkHN8w4+5RuQGw=";
+    hash = "sha256-xWsRSzJm5aA13qCBI2MRzauvPqoOBtxqtGb3gLAa3sI=";
  };

  appimageContents = appimageTools.extractType2 { inherit pname version src; };
--- a/pkgs/by-name/il/iloader/package.nix
+++ b/pkgs/by-name/il/iloader/package.nix
@@ -22,13 +22,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
  __structuredAttrs = true;

  pname = "iloader";
-  version = "2.2.6";
+  version = "2.2.7";

  src = fetchFromGitHub {
    owner = "nab138";
    repo = "iloader";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-zSl08bhJ/OrdcvvL1ciybxgnLqrg4IinmcGXrsPQYyQ=";
+    sha256 = "sha256-DLs9jNnkykAdFSaDZCfLmUl+oYja7kxWlV5Db2TQQE8=";
  };

  nodeModules = stdenv.mkDerivation {
@@ -71,7 +71,7 @@ rustPlatform.buildRustPackage (finalAttrs: {

  cargoRoot = "src-tauri";
  buildAndTestSubdir = "src-tauri";
-  cargoHash = "sha256-6nDqIikItl5SuHN2o/iQREiOkY+bYkP7akShOEtY9JY=";
+  cargoHash = "sha256-92C6xeEVLtjCSqkJBrCOaMjBJj7yIuRM3zRtkurnBT4=";

  doCheck = false;

--- a/pkgs/by-name/in/invidious/package.nix
+++ b/pkgs/by-name/in/invidious/package.nix
@@ -3,7 +3,6 @@
  callPackage,
  crystal,
  fetchFromGitHub,
-  fetchpatch2,
  librsvg,
  pkg-config,
  libxml2,
@@ -42,15 +41,6 @@ crystal.buildCrystalPackage rec {
    inherit (versions.invidious) hash;
  };

-  patches = [
-    # Remove with the first release containing this commit.
-    (fetchpatch2 {
-      name = "CVE-2026-58447.patch";
-      url = "https://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45.patch?full_index=1";
-      hash = "sha256-0pf6eu0ckQ2gYHLr2tEDy+1dvAhVjepG26kuxuHbZl8=";
-    })
-  ];
-
  postPatch =
    let
      # Replacing by the value (templates) of the variables ensures that building
--- a/pkgs/by-name/in/invidious/versions.json
+++ b/pkgs/by-name/in/invidious/versions.json
@@ -1,9 +1,9 @@
 {
  "invidious": {
-    "hash": "sha256-xJZjEnSeMnDo37ohtSAI2ucaPPv+nBYdrslHUCL/Pd8=",
-    "version": "2.20260626.0",
-    "date": "2026.06.27",
-    "commit": "ad0bd928"
+    "hash": "sha256-QV3fN0wwbtds5hoQfPu56rlULe2/xu0Kw9wAS9fszKQ=",
+    "version": "2.20260723.0",
+    "date": "2026.07.23",
+    "commit": "5953859e"
  },
  "videojs": {
    "hash": "sha256-jED3zsDkPN8i6GhBBJwnsHujbuwlHdsVpVqa1/pzSH4="
--- a/pkgs/by-name/jm/jmol/package.nix
+++ b/pkgs/by-name/jm/jmol/package.nix
@@ -31,7 +31,7 @@ let
  };
 in
 stdenv.mkDerivation (finalAttrs: {
-  version = "16.4.11";
+  version = "16.4.15";
  pname = "jmol";

  src =
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
    in
    fetchurl {
      url = "mirror://sourceforge/jmol/Jmol/Version%20${baseVersion}/Jmol%20${finalAttrs.version}/Jmol-${finalAttrs.version}-binary.tar.gz";
-      hash = "sha256-kDt6XF5axy9DhygLZcImV37plkq/xDqi2aL2wKV9wh4=";
+      hash = "sha256-JdkeJRjlNsjWYbn5WRe2np+vV2W0TumtZy72/ofkpG8=";
    };

  patchPhase = ''
--- a/pkgs/by-name/jw/jwx/package.nix
+++ b/pkgs/by-name/jw/jwx/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "jwx";
-  version = "4.1.0";
+  version = "4.2.0";

  src = fetchFromGitHub {
    owner = "lestrrat-go";
    repo = "jwx";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+u2PR1L66cua6iGer9qYlnPpfYt1j9cZ0PSrWntpYp0=";
+    hash = "sha256-sX4z0JhINss0kE42F3rSMyVvBUWH1OVli0UKFiqfZbU=";
  };

-  vendorHash = "sha256-dxC00wr51c48yxdCUWsL44RMmk+pBmqXkUQqjP90GNU=";
+  vendorHash = "sha256-lX03CF9WhcDGgvYhHlG+XaXIeinEWRTwzO8mmnyBzBM=";

  sourceRoot = "${finalAttrs.src.name}/cmd/jwx";

--- a/pkgs/by-name/ka/kamailio/package.nix
+++ b/pkgs/by-name/ka/kamailio/package.nix
@@ -22,11 +22,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "kamailio";
-  version = "6.0.5";
+  version = "6.1.3";

  src = fetchurl {
    url = "https://www.kamailio.org/pub/kamailio/${finalAttrs.version}/src/kamailio-${finalAttrs.version}_src.tar.gz";
-    hash = "sha256-LEpl8MTkNULs0EJCO2/IKe4Vqwmlauf0QbdCfWvOGzA=";
+    hash = "sha256-49s9IWb0TY892Q2wkGP3C1W77M4pWr1/McNNi53XlyE=";
  };

  buildInputs = [
--- a/pkgs/by-name/ka/kapow/package.nix
+++ b/pkgs/by-name/ka/kapow/package.nix
@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "kapow";
-  version = "1.7.0";
+  version = "1.7.1";

  src = fetchFromGitHub {
    owner = "gottcode";
    repo = "kapow";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-IWkvAXDcWodrV23/wv3GEQXWdNcaIZDsU3LUtxsD+cA=";
+    hash = "sha256-gBr1CmOpwJOqolY6HA4fv7YCaFSeRmxbJeVkZCau9QE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ka/kawkab-mono-font/package.nix
+++ b/pkgs/by-name/ka/kawkab-mono-font/package.nix
@@ -3,16 +3,16 @@
  stdenvNoCC,
  fetchzip,
 }:
-
-stdenvNoCC.mkDerivation {
+let
  pname = "kawkab-mono";
-  version = "20151015";
-
+  version = "0.501";
  src = fetchzip {
-    url = "https://makkuk.com/kawkab-mono/downloads/kawkab-mono-0.1.zip";
-    stripRoot = false;
-    hash = "sha256-arZTzXj7Ba5G4WF3eZVGNaONhOsYVPih9iBgsN/lg14=";
+    url = "https://github.com/aiaf/kawkab-mono/releases/download/v${version}/kawkab-mono-${version}.zip";
+    hash = "sha256-cDpQGTu3XzLrDtInAZtnCw6BymX7fupbbr7L4bd7kN8=";
  };
+in
+stdenvNoCC.mkDerivation {
+  inherit pname version src;

  installPhase = ''
    runHook preInstall
@@ -23,8 +23,11 @@ stdenvNoCC.mkDerivation {
  '';

  meta = {
-    description = "Arab fixed-width font";
+    description = "Monospaced Arabic typeface designed for code and text-editing";
    homepage = "https://makkuk.com/kawkab-mono/";
+    downloadPage = "https://github.com/aiaf/kawkab-mono";
+    changelog = "https://github.com/aiaf/kawkab-mono/releases/tag/v${version}";
    license = lib.licenses.ofl;
+    maintainers = with lib.maintainers; [ talal ];
  };
 }
--- a/pkgs/by-name/ki/kitty/package.nix
+++ b/pkgs/by-name/ki/kitty/package.nix
@@ -50,14 +50,14 @@
 with python3Packages;
 buildPythonApplication rec {
  pname = "kitty";
-  version = "0.48.0";
+  version = "0.48.1";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "kovidgoyal";
    repo = "kitty";
    tag = "v${version}";
-    hash = "sha256-+x3saXQw+6BzBYfwwur0DiTaJZVNgOYKJ4UVzeScbtk=";
+    hash = "sha256-h4dE99FET26iTgEFrmeXcFDw6DLl8dQjGep0NJ7jMzk=";
  };

  goModules =
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "152.0.6-1",
+  "packageVersion": "153.0-3",
  "source": {
-    "rev": "152.0.6-1",
-    "hash": "sha256-O5s1t/ZZVYL/9ik4zyi/kKAQEbSERO6vD1NJzEUmnU4="
+    "rev": "153.0-3",
+    "hash": "sha256-kRa+IOicrS2xWO2k3m52qBmmazGSj3Ybuke6UQwQJgg="
  },
  "firefox": {
-    "version": "152.0.6",
-    "hash": "sha512-xNh3g31wB/thHDjUnZtt07xMXJypALVOci4UDOfs0JJPabXO3H+MH+YC5+/h1xWbAZ3ieZnikjXNYxghuxPmsA=="
+    "version": "153.0",
+    "hash": "sha512-oa9YZuHJpzKBgSPy8EG/1Zk9CT6W3XQ7WDMS+xHSs51CnfdQ+ewi3tZLWKIJux7KvHqvcwV9emTHNJ5NoEPWbQ=="
  }
 }
--- a/pkgs/by-name/ma/mactop/package.nix
+++ b/pkgs/by-name/ma/mactop/package.nix
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "mactop";
-  version = "2.1.3";
+  version = "2.1.5";

  src = fetchFromGitHub {
    owner = "metaspartan";
    repo = "mactop";
    tag = "v${version}";
-    hash = "sha256-rWALbjy7s6X3hegcUxoR0XUXKFZGnWRWV5OeXtN3BjU=";
+    hash = "sha256-uIHqnHkqdQGZceruvHdXacS5vD2tgN1KPY4v6k7s5Vc=";
  };

  vendorHash = "sha256-TF66wg8nyAb/kZ80XLaD7H39EehZQ896DS6Ce3+P8Lk=";
--- a/pkgs/by-name/ma/markitdown/package.nix
+++ b/pkgs/by-name/ma/markitdown/package.nix
@@ -0,0 +1,5 @@
+{ python3Packages }:
+
+(python3Packages.toPythonApplication python3Packages.markitdown).overrideAttrs (_: {
+  __structuredAttrs = true;
+})
--- a/pkgs/by-name/ma/matrix-authentication-service/package.nix
+++ b/pkgs/by-name/ma/matrix-authentication-service/package.nix
@@ -16,6 +16,7 @@
  nix-update-script,
  versionCheckHook,
  buildPackages,
+  nixosTests,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
@@ -101,12 +102,15 @@ rustPlatform.buildRustPackage (finalAttrs: {

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;
-  passthru.updateScript = nix-update-script {
-    extraArgs = [
-      # avoid unstable pre‐releases
-      "--version-regex"
-      "^v([0-9.]+)$"
-    ];
+  passthru = {
+    tests = { inherit (nixosTests) matrix-authentication-service; };
+    updateScript = nix-update-script {
+      extraArgs = [
+        # avoid unstable pre‐releases
+        "--version-regex"
+        "^v([0-9.]+)$"
+      ];
+    };
  };

  meta = {
--- a/pkgs/by-name/ne/nerva/package.nix
+++ b/pkgs/by-name/ne/nerva/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "nerva";
-  version = "1.42.6";
+  version = "1.48.1";

  src = fetchFromGitHub {
    owner = "praetorian-inc";
    repo = "nerva";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-TNl+/ikQWsS4hBU5m+zkfVg+KF5YwsZ6Ge3YNarbvmE=";
+    hash = "sha256-pgelLgRPJVGRq2UqP7EEHpAkSkuhmoPpwsMQKgtNOEk=";
  };

  vendorHash = "sha256-Z0MSD+1/1VzrJ+pz5x0JvxrCxtJe59ckaTqHK/+TVN8=";
--- a/pkgs/by-name/op/openobserve/package.nix
+++ b/pkgs/by-name/op/openobserve/package.nix
@@ -50,13 +50,13 @@ rustPlatform.buildRustPackage (
  in
  {
    pname = "openobserve";
-    version = "0.91.1";
+    version = "0.91.3";

    src = fetchFromGitHub {
      owner = "openobserve";
      repo = "openobserve";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-4Oe1YRblkJg9aNG/aLvP89zrHIysA67GP7GN7oCTdd8=";
+      hash = "sha256-XPldg4q6PeBDHV0W9tkWg7tdbp7rLDCRP8ux0a1jqec=";
    };

    patches = [
--- a/pkgs/by-name/op/openscad-unstable/package.nix
+++ b/pkgs/by-name/op/openscad-unstable/package.nix
@@ -57,13 +57,13 @@ let
 in
 clangStdenv.mkDerivation rec {
  pname = "openscad-unstable";
-  unstable_date = "2026-02-25";
+  unstable_date = "2026-07-20";
  version = "2021.01-unstable-${unstable_date}";
  src = fetchFromGitHub {
    owner = "openscad";
    repo = "openscad";
-    rev = "ae3a780de777bcb96d41631818551650bc79650d";
-    hash = "sha256-jCiCB3tbM0dyIC2gvQarzwjfYI9mnREkMI+0R3EaGPM=";
+    rev = "e4fdec49730103274a4e21c2390b9a12882f01aa";
+    hash = "sha256-9bPz6iVbUHeFp2uQiVVFYze24IN4skesP45TBBbr8Vk=";
    fetchSubmodules = true; # Only really need sanitizers-cmake and MCAD and manifold
  };

@@ -125,7 +125,6 @@ clangStdenv.mkDerivation rec {
    "-DOPENSCAD_VERSION='${builtins.replaceStrings [ "-" ] [ "." ] unstable_date}-unstable'"
    "-DCMAKE_UNITY_BUILD=OFF" # broken compile with unity
    # IPO
-    "-DCMAKE_EXE_LINKER_FLAGS=-fuse-ld=lld"
    "-DCMAKE_INTERPROCEDURAL_OPTIMIZATION=ON"

    # The sources enable this for only apple. We turn it off globally anyway to stay
--- a/pkgs/by-name/po/pocketbase/package.nix
+++ b/pkgs/by-name/po/pocketbase/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "pocketbase";
-  version = "0.39.8";
+  version = "0.39.9";

  src = fetchFromGitHub {
    owner = "pocketbase";
    repo = "pocketbase";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-ZStu568NCfNo46NNsuAi0i8Oph0bL5L2v+Zny3WqdIY=";
+    hash = "sha256-owOE7rEP2junyzLsECv+Qf4z6mq2dJu5R0XR0oCIMo8=";
  };

-  vendorHash = "sha256-88GNxiHZzDJp8Xj0Il3D3gT8NaVAyyd+gcGmFAzfKp8=";
+  vendorHash = "sha256-jA/MazIBK2iJUI7fd/oRsXyC4HSnfh7iyB5xHLnZRYs=";

  # This is the released subpackage from upstream repo
  subPackages = [ "examples/base" ];
--- a/pkgs/by-name/po/pods/package.nix
+++ b/pkgs/by-name/po/pods/package.nix
@@ -23,18 +23,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "pods";
-  version = "3.1.0";
+  version = "3.1.1";

  src = fetchFromGitHub {
    owner = "marhkb";
    repo = "pods";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-GMFrcWFozRR0G0+7g5JJyMkWzPY79cVF4Go1Wd/4HtA=";
+    hash = "sha256-tI3ZFR4DYdcIH+MYpRgjRXnbL0HOVcPG3x7mrMWwGOY=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-P0teC048Z61pMrl5cvlvrGaPcccxTki/AIthyzQusGI=";
+    hash = "sha256-g1xk4Haz8Q04ASOpfoiRC36oaszl3pqkLV0rgiJgGN4=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/pr/proto/package.nix
+++ b/pkgs/by-name/pr/proto/package.nix
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "proto";
-  version = "0.58.2";
+  version = "0.59.0";

  src = fetchFromGitHub {
    owner = "moonrepo";
    repo = "proto";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-fITyBLT4SyQ7q3zMJ2JpunsBjdZtgiGA19g09PKQcL8=";
+    hash = "sha256-iA/dE4ekd83hkOVewFYk7pe8TVBT4smT8XWavIiMtY8=";
  };

-  cargoHash = "sha256-tK/nb6g8fjhdCciI5mgq+mvUBwXPsak1VNk8pcWlQrk=";
+  cargoHash = "sha256-ZL8uykBCmzUaGwVj5kTpxqv6oYAsRGRUBmTF51fkwQ0=";

  buildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
    libiconv
--- a/pkgs/by-name/pu/pulumi-bin/data.nix
+++ b/pkgs/by-name/pu/pulumi-bin/data.nix
@@ -1,12 +1,12 @@
 # DO NOT EDIT! This file is generated automatically by update.sh
 { }:
 {
-  version = "3.253.0";
+  version = "3.254.0";
  pulumiPkgs = {
    x86_64-linux = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.253.0-linux-x64.tar.gz";
-        sha256 = "1b6ini1p2232wq0lh9fzj251377zlpdl8qx4jmrwgrl02991w5ik";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.254.0-linux-x64.tar.gz";
+        sha256 = "08jc6q347isbd09hmp76qdva4h77w2yhl1vd8lcckgqf7c4pq5mj";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-linux-amd64.tar.gz";
@@ -17,48 +17,48 @@
        sha256 = "04c46mdgnm51wbdn68sbr1005wa0r7i9k7swd87j541qrws54csk";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.104.0-linux-amd64.tar.gz";
-        sha256 = "1hkg2h7q5g4swjm07wfjfww7y3ssbm3ffi38vdy0p6xs1aamcn4q";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.105.0-linux-amd64.tar.gz";
+        sha256 = "1cp0x63hwpsii6kqw1wkyg2qxjry13jmcq0aq844c8m3fvvx024c";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.4-linux-amd64.tar.gz";
-        sha256 = "1h7fk2c83d6qxb2n3mvmdpmxk7b67mwkg6zv1isjmdfmkxiz84ir";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-linux-amd64.tar.gz";
+        sha256 = "0cypa7hgq41vcffix6s7ssc5y6qam9id1bgmnqxjvhb3az4hlyvw";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.48.0-linux-amd64.tar.gz";
-        sha256 = "0ja9jm9giz231ip8mi0phnfm50hz991kwgnp94yiq25hmk3h5ifl";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.49.0-linux-amd64.tar.gz";
+        sha256 = "0s0bb32j3kk0klnpdhqnz0ybz1542p6jczndlwzafj03nrv1i946";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.35.0-linux-amd64.tar.gz";
-        sha256 = "1bwbdm21a5kr2z6jd36idn78yas9ysgg29d14wqjjwhqb0hw3pkq";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.39.0-linux-amd64.tar.gz";
+        sha256 = "1kx9arfflwy5683m44bp881mg4423b9460lxgwydfyjq2gwi874c";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-linux-amd64.tar.gz";
        sha256 = "1h1yrkxd2w8vc2kj097mb7jzv21948vp6kv0x7p5bgcbgpyh69qp";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.15.0-linux-amd64.tar.gz";
-        sha256 = "0hx94wf890a8cz9k66q4p89w9330axb1a3lg2g6j5lbxhrp2bvac";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.16.0-linux-amd64.tar.gz";
+        sha256 = "1n9dcga0rsvfyd1m44p5kp2rfay6dn30l80v8idsq9i6r6aigbwn";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azure-v6.39.0-linux-amd64.tar.gz";
        sha256 = "13crj1h932vf9ch4m3yphm701dqc86j8pmi4ymjlg0yzfm6b8xwb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.17.0-linux-amd64.tar.gz";
-        sha256 = "1qkx0kmgx50pz06m6rpz58iilx7b94w1dvz17j0mrr4vdmkbldid";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-linux-amd64.tar.gz";
+        sha256 = "0y0l71d638zl4853fd42j6ldxv1xwiwn4v7x6wbcfaz0djx94x4l";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.0-linux-amd64.tar.gz";
-        sha256 = "0xbx66jaknq7n8s77s1zkv3jdacqv4pnxfnlg424vlk04laar6q0";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-linux-amd64.tar.gz";
+        sha256 = "1jyq8pwcifq6y86m0wq6dv2l7jbgin6kdp6man29405ss5l2qhx9";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v5.8.0-linux-amd64.tar.gz";
        sha256 = "0lv8bsm05rw1xv5m8wscanq1crrphhrdah8nd28vww3akr36af2q";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.75.0-linux-amd64.tar.gz";
-        sha256 = "0lccw7i98d43v0pipabb7i67588jllil2s882fjlvj3afk7njqza";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.76.0-linux-amd64.tar.gz";
+        sha256 = "1jymfc0sv6pqb5a0irxr0vyh7qvz0ki5gyzmnwpyk5pjm670i7q7";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-linux-amd64.tar.gz";
@@ -69,28 +69,28 @@
        sha256 = "0hnardid0kbzy65dmn7vz8ddy5hq78nf2871zz6srf2hfyiv7qa4";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.3.1-linux-amd64.tar.gz";
-        sha256 = "0qgyrfy24bsny0l0kyb4dwyfrpk0a8bh7cl0c11gjh7idwazrn9p";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.4.0-linux-amd64.tar.gz";
+        sha256 = "0xikj493rqgd38dvzgwzj70pzch0rsss4khgxsaqbxwv9v7ssirg";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.30.0-linux-amd64.tar.gz";
        sha256 = "1dq271jcbqi705w691yrfnk09qwj3d5zghz058hsv6b7zmjzp5mf";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.0-linux-amd64.tar.gz";
-        sha256 = "0vsaqqc21kn46pc4pkli2zqh9xmbp4b23rgl5c10100mkjn516bq";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-linux-amd64.tar.gz";
+        sha256 = "07gxsrldf77c46cshrawc6v860xplgnnh8dn4r18i24gnksd5xh1";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.0.0-linux-amd64.tar.gz";
-        sha256 = "0x6zj6cxcv0r0sd71bkx9cav2d68yipyk2m3ngaz2180rjml7pqd";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-linux-amd64.tar.gz";
+        sha256 = "02v3ykw1095a9kgw2gzwvp0s1nk8vlgljx2rxcmbpyj6bxbh5x39";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-google-native-v0.32.0-linux-amd64.tar.gz";
        sha256 = "1zra1ck64gs4nwqf62ksfmpbx24lxw6vsgi47j4v8q051m89fgq3";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.0-linux-amd64.tar.gz";
-        sha256 = "030rn7smyfq1j5lgrx50psqbabdjiqr7qmrq965aydjwb2kfs8lx";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.1-linux-amd64.tar.gz";
+        sha256 = "19ljpp33x4jsy25lg1gj4v18wzk75w8bb96crhm24x448rvibwag";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-kubernetes-v4.33.0-linux-amd64.tar.gz";
@@ -101,24 +101,24 @@
        sha256 = "18s9p81kqf89807wm77g8s6dvh99wpaxd5f064k1kdypb6snbp6p";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.8.0-linux-amd64.tar.gz";
-        sha256 = "0ql5y5n82lr0850hg33w7jh7v8b5qc0j4lk47vjdkfxg87s8f36k";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-linux-amd64.tar.gz";
+        sha256 = "0213b8pbijwnx1zh9qvcacg9djx47biv79ylcyi77sya9vl7pbwn";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.0-linux-amd64.tar.gz";
-        sha256 = "1j6clq6h9j0n8xl9bx1apay138569sgv5x5byl9zvp4cyfxri6gr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.1-linux-amd64.tar.gz";
+        sha256 = "0ksm9fgx9cp3fpsg5g96lwxs49kjkaylqjpg2dbzcm6czj73xbwh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.0-linux-amd64.tar.gz";
-        sha256 = "060vr8rd6c1rm92x5cn97ijk5f2mq730mvw25n79smli90yk3d7y";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.1-linux-amd64.tar.gz";
+        sha256 = "1sibbv3zxzffgk44cy7vml3d0ccncqqzid63rsbzgvjl0z0zcr09";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.17.0-linux-amd64.tar.gz";
-        sha256 = "0sq70hajgwjcg7nlx82kh7xzx657gwxfqycndbmj0wpwmzpngdzg";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.18.0-linux-amd64.tar.gz";
+        sha256 = "1nixw8mpg82v4zc8fab1xn4i52fikfjmmqk2g1wgwbqy5a47qarp";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.0-linux-amd64.tar.gz";
-        sha256 = "07lqjsz8d7cn52zfawhxj6k9n6g1a220kcckdfnf6135h26w75h0";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.1-linux-amd64.tar.gz";
+        sha256 = "024726qg7kz76ika61mblf6s45fbzbq5zgz661qpfycib7ps48na";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-snowflake-v2.18.0-linux-amd64.tar.gz";
@@ -137,16 +137,16 @@
        sha256 = "0203qf994hjablrl6nm51f6j69z469q46rm1d15gvxsgi17g23sx";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.0-linux-amd64.tar.gz";
-        sha256 = "1j034cch58whw4zf0vggbhm32is6qw2bjfp8zfjna490rbba6xlf";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.1-linux-amd64.tar.gz";
+        sha256 = "02ww9272mfrfw7f4n2rldfjj9p5qc9rcazli71g6rzrklx2r1f6p";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.10.0-linux-amd64.tar.gz";
-        sha256 = "03cgllyqi4sn2m3109d2qcdrg4zi7q7s0ijnglb0pikf54rckj5f";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-linux-amd64.tar.gz";
+        sha256 = "0w524zqy7xprgv0al7k0ki36ypbvj80bk6y5dx0xvlgl4h1ha4m3";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.0-linux-amd64.tar.gz";
-        sha256 = "038jpbd3id3lbfqkbp0cxmpj8grf2ym5vaf7khvbjb4ydpglvkg1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-linux-amd64.tar.gz";
+        sha256 = "1grvj9n3zfm6sbjlak0v2p2fphv3j7bnv8vq4ysdr4849yy2jh17";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vsphere-v4.17.0-linux-amd64.tar.gz";
@@ -163,8 +163,8 @@
    ];
    aarch64-linux = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.253.0-linux-arm64.tar.gz";
-        sha256 = "1skpnnrh4inw20p2ldji4a75vm7v2igkdck3q4k944vngbb78w3x";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.254.0-linux-arm64.tar.gz";
+        sha256 = "03z3fmvgdx4nkfsykdqlxylij5sp40rd1wjcdbg3zj307ybrn9dz";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-linux-arm64.tar.gz";
@@ -175,48 +175,48 @@
        sha256 = "1j6nckrzndcdjyzmmv63z351wcqlflmrp5dr342lbpdc0889yk4y";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.104.0-linux-arm64.tar.gz";
-        sha256 = "0s6h6l77jkz38bifcb61sfx1bqwdyf4ayi7f0m0idcji5b28anpr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.105.0-linux-arm64.tar.gz";
+        sha256 = "007slzw6y0a5s4azb7s2kp0qfkahy2v2ybd9lw2yrigd4cf02110";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.4-linux-arm64.tar.gz";
-        sha256 = "1dnkx3qhh2ln6gps8z7gwknb6cjzl0v5ximvz91gqz1i8pshvqz4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-linux-arm64.tar.gz";
+        sha256 = "1nmbcaa4kdm39zzds29rgq07bnch3pnnb5275yyhw8lx6gqwkkb4";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.48.0-linux-arm64.tar.gz";
-        sha256 = "16ckjw8375yrz92wm0dgdp1yamswikr9gbrigad2f3yf6crmlyia";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.49.0-linux-arm64.tar.gz";
+        sha256 = "10r6d6mk1j7dv9j6qmhr5873kjdj9vqyapqd1sf6qfv2f7yfgj46";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.35.0-linux-arm64.tar.gz";
-        sha256 = "0hmwjbg8l32vgy8ydl5makl1l6x9frz6abg3yah597flwdy8afgd";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.39.0-linux-arm64.tar.gz";
+        sha256 = "1pna2nh491bdis85jhlafbi8ffa46zcrbmbq9f9ih5x644m2c9vj";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-linux-arm64.tar.gz";
        sha256 = "06bkdfipmgjq1ahfmpjzsfz73kkasxwajciym9y1gmlb62zq75ac";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.15.0-linux-arm64.tar.gz";
-        sha256 = "0660ml58rak26im6fc6vr7mj943xpn7fnrysg7h8a6yi2rs31vb1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.16.0-linux-arm64.tar.gz";
+        sha256 = "150m8xbjaap20kym39vbsk26jzficc0n13d7i50zgv00n9dj34z5";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azure-v6.39.0-linux-arm64.tar.gz";
        sha256 = "1zwqw37zvv5yqdy95vs7dvq8x6a34glfy5sg336rgz36mnrbs2fb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.17.0-linux-arm64.tar.gz";
-        sha256 = "1s53h8nj6y9pd3hxygs30nwa708pi3sqgndw96l8hi2b4xckw1pv";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-linux-arm64.tar.gz";
+        sha256 = "01l38jr81yvr8j3vdp5r7qdbj56432y0xmsvc1cnr24snf2hhq0i";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.0-linux-arm64.tar.gz";
-        sha256 = "0jgqk4sp7rkapxfi3gs5z74rrrs050bqs6kggpfz32v6sp5514z1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-linux-arm64.tar.gz";
+        sha256 = "04qf0ypr4x1ndrcna2fm9hxn323z1dczgf2nc0v16fznr94hfsps";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v5.8.0-linux-arm64.tar.gz";
        sha256 = "1gsi703xf1zl508wsrwpcgnj0g6g81fjdqhgc4shd7sk1iykjnd3";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.75.0-linux-arm64.tar.gz";
-        sha256 = "1n3hkniyzd14sijcbhd9kl7nvq6gfmmg42q4knp4vwjrf26dv86a";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.76.0-linux-arm64.tar.gz";
+        sha256 = "02xhc5kq0wc5m0w64v118s2h3y46vkr8gzc6k5cvn266mf21ig7i";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-linux-arm64.tar.gz";
@@ -227,28 +227,28 @@
        sha256 = "111pia2f5xwkwaqs6p90ri29l5b3ivmahsa1bji4fwyyjyp22h4r";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.3.1-linux-arm64.tar.gz";
-        sha256 = "1viavidp6g7s2pyczic4iq5p7pakg3g7994yfx03nar76sv94rgp";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.4.0-linux-arm64.tar.gz";
+        sha256 = "17wzipyz3nid2bckqiw1959f0xmyns8vglfbr2m1if14fsyabpva";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.30.0-linux-arm64.tar.gz";
        sha256 = "09v3mpdscgsjpd3h1g8q2fk7amh5z7iindszf0wf8zml4qcg187v";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.0-linux-arm64.tar.gz";
-        sha256 = "0r119cbrv54k026jsg8z7hyd10asi6ff6jyd5ckxzni6rawm1yzf";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-linux-arm64.tar.gz";
+        sha256 = "1ilhfgy32icxcwdj3xi6zvancf0bx8nc9kpxd10m7pcc449mhwnn";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.0.0-linux-arm64.tar.gz";
-        sha256 = "1yxipxylrmdp9mmwdvx99p8bjp5kn7hswvk38lafapyal5j2qfkv";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-linux-arm64.tar.gz";
+        sha256 = "0rq23zf8vg3pn1rg4sm0gii2qv3yvp54gb0138cs56yg6s9m06yr";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-google-native-v0.32.0-linux-arm64.tar.gz";
        sha256 = "0d8m2krbzxjhfm82dgf8p4vm3kk9gk98l798q4ayjrddqqb4mxq4";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.0-linux-arm64.tar.gz";
-        sha256 = "0w0caqipdipj56qqv2vkcn5srbb6h1xv741d53v5863ax1hgp0w3";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.1-linux-arm64.tar.gz";
+        sha256 = "182yd88v6x5pgbiisjmvmivv0vmr4ympy6ij8j07y1zi2x3bsa5l";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-kubernetes-v4.33.0-linux-arm64.tar.gz";
@@ -259,24 +259,24 @@
        sha256 = "16gwcr4j5fwmsxkcvna1wkx1hjxzyiycv4b4fwysd5y7myh4zsnb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.8.0-linux-arm64.tar.gz";
-        sha256 = "1m5bw0cj07hmzk84mbfjwl7gyqqjlsyimfzbs3aqmdl7pqw7ibc4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-linux-arm64.tar.gz";
+        sha256 = "1ags036pqs7xgiahpa6i1qgx2xxsicb8dk4dpycrwaj1b299zcxh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.0-linux-arm64.tar.gz";
-        sha256 = "1zzvlsksm3599zx61rm1yr51rhglj56jd74h012h7ksnfkrg12sx";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.1-linux-arm64.tar.gz";
+        sha256 = "06xnmzjhvrim6wmpnjq6c16sf5ixm8pqj5wc9srvvbayjg1aagi8";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.0-linux-arm64.tar.gz";
-        sha256 = "1py1gip6l3rgkyp0py9bny3kpzakwf3jygmbhywb3krzmjzl1hly";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.1-linux-arm64.tar.gz";
+        sha256 = "0r9jl1fdz75a78mw188admd81kcbrb9bcc8pn93mb1qwn3iwlww5";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.17.0-linux-arm64.tar.gz";
-        sha256 = "0gzjkvbwbrvnyx2amdw1p05abg196n96v6vniryi92ql3k40cp10";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.18.0-linux-arm64.tar.gz";
+        sha256 = "1b4l1krbn6ndi5x5yfl5r9f6mq6rgv0bglvxgifj5c9n9g554hvb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.0-linux-arm64.tar.gz";
-        sha256 = "1d6j1hqy0w3w4jssyp3w7xdkg8501vljra8299giiv0cycmhd3w8";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.1-linux-arm64.tar.gz";
+        sha256 = "0x6h3zg44y1amk7a2y3n8a54qbgdzir57akmwqg0zddq5jbrcbpi";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-snowflake-v2.18.0-linux-arm64.tar.gz";
@@ -295,16 +295,16 @@
        sha256 = "0bi1i8ysx2way6gix1bxixdiipk6w0wqp3xh8vvzw8s61ax4awsa";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.0-linux-arm64.tar.gz";
-        sha256 = "0k5h1xc602r9lhwlh6priq75i8mvsalwn7lgyknc7lg4kgvc4f82";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.1-linux-arm64.tar.gz";
+        sha256 = "0afxnkk2vmyhy52mbn3mv6bq7fdx3hk1gn6qhsf2h4gd7x7qr6vh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.10.0-linux-arm64.tar.gz";
-        sha256 = "0ww2y1gnnx4rbblvrbjlm6zj2as8zwgcifqqimcar2178x755a39";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-linux-arm64.tar.gz";
+        sha256 = "0wigb7qqm2kjx6jgqn26wa6f0jw07nis3phzkp21q4dciqg0fwnr";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.0-linux-arm64.tar.gz";
-        sha256 = "1nfv4cfnpwyk5fbd2znk1x3cz9p45bc5069mvvxv47cc5fn176d5";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-linux-arm64.tar.gz";
+        sha256 = "0v7y0jnssmiafbh73xzsganfz16y5dpdais56jzzlxzja0wa84p6";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vsphere-v4.17.0-linux-arm64.tar.gz";
@@ -321,8 +321,8 @@
    ];
    aarch64-darwin = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.253.0-darwin-arm64.tar.gz";
-        sha256 = "0glfsanndr725r4dr0cjj24yhd529kczp6ksy2dan4b4387d1l8j";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.254.0-darwin-arm64.tar.gz";
+        sha256 = "1qs0dqbr1vaalajr68brk1hn83cls011j1qr2ah3vkshxvr5br8z";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-darwin-arm64.tar.gz";
@@ -333,48 +333,48 @@
        sha256 = "16b7i6fyd6b2axgv60ld9a6pj6gy2mh3nqml33sc024adrlssyn2";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.104.0-darwin-arm64.tar.gz";
-        sha256 = "1mqzky6ilc14jsdxpzjyx9ldhiiid2akmhj3wqw2mjqlcmz4sxvd";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-alicloud-v3.105.0-darwin-arm64.tar.gz";
+        sha256 = "1i792m76dlmaqmchzbrnd0m4ls1wq4jc61q63yacm2zj63yk6g5h";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.4-darwin-arm64.tar.gz";
-        sha256 = "0q5i2mx7isdgiqscqkswnqgrg25xm4wf2nqxcpmr91bvwc5rrjsi";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-darwin-arm64.tar.gz";
+        sha256 = "1yank4slw1r2c7dilvzbpjjshx2kynnsizdb0n2qidpfsz5v2pk1";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.48.0-darwin-arm64.tar.gz";
-        sha256 = "03ymhjv30xyi3nsw40mz7saazaw7xw20l2bnmia37nnn5336qlhd";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.49.0-darwin-arm64.tar.gz";
+        sha256 = "1w22miq3594mz4dqnv2i5sicb76ii380ybr5afmmirvi3xy38z76";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.35.0-darwin-arm64.tar.gz";
-        sha256 = "0m5xbg919vvmhv6v644wivfgaq4mzsfbf7bdq001z4065v6im2sg";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.39.0-darwin-arm64.tar.gz";
+        sha256 = "0sp53if3d38zx11mdmp4n207p2dc41ra4539naamxp414ssigp25";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-darwin-arm64.tar.gz";
        sha256 = "17rfxhnfkdwkpnv1kfzl427s6ysaggdy6z37d4h5cxpl6d6kf8nr";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.15.0-darwin-arm64.tar.gz";
-        sha256 = "0rzjlcwq1gpp7v9a4xcfwcc09g9ry6c8d7s00jiy8ix5cfzmwv10";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuredevops-v3.16.0-darwin-arm64.tar.gz";
+        sha256 = "0pyxkwzx9j5sfh996wpdx5nw5mrl76a3s7030hpdqn1fizn0kqhv";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azure-v6.39.0-darwin-arm64.tar.gz";
        sha256 = "01cfgmb13ylbi2dk7ng8mda6lsrjgaccyrffjp6jhfp245fj97pb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.17.0-darwin-arm64.tar.gz";
-        sha256 = "0la2l0c5chif0j681k4dgnav8qd0bdfbc01x7w0wpa1cvp5a7g49";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-darwin-arm64.tar.gz";
+        sha256 = "0lyhpx5hdj2qnhssin9ghhx5vrz7pa9sikaylgkbmfbv4s14lmx6";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.0-darwin-arm64.tar.gz";
-        sha256 = "1ly07rsqrrxqcbgwf0a0dhjgv16bbsanc56k04yhvsq1i4cis8v3";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-darwin-arm64.tar.gz";
+        sha256 = "0phyk41226nvm3dkfi9z3r10b99p8pln4gsli49ls4r6wgg3jaxx";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-datadog-v5.8.0-darwin-arm64.tar.gz";
        sha256 = "0833vlgcy3jcnnlhb94wr1fn1j1r4sjqlwhxsqldkd53w1x0rxqs";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.75.0-darwin-arm64.tar.gz";
-        sha256 = "16nv45p1gfbyjxcvmw9w28yzk9vygd5w1l2ifhax27g63zwzb7yk";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.76.0-darwin-arm64.tar.gz";
+        sha256 = "1qkfag4zs0fhjh2vr9qca5cyvr2gybd36hgqy7k6nyr3hfrrn7f4";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-darwin-arm64.tar.gz";
@@ -385,28 +385,28 @@
        sha256 = "12bzicm43l7yvh02v5fx3z8v46l9i7a9f677735xi5rjbmd2an4c";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.3.1-darwin-arm64.tar.gz";
-        sha256 = "1dsr4d1i1rrq6801x1mmqgqg5rw2fibvqid5gbv9gyb73vkaafkn";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.4.0-darwin-arm64.tar.gz";
+        sha256 = "0vkp0kchr3zl58ddxl4573ll9zdxjrm2cb5y4d728va7dzjsmpl4";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.30.0-darwin-arm64.tar.gz";
        sha256 = "1vzaypv5wqa9vdggcv5m7kkxcmbwim100j85jsbylkhnf8lg5sq3";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.0-darwin-arm64.tar.gz";
-        sha256 = "05kzpbg75j47ls6y7a9pqgn4yqis7yp2fsd9ix2laywmkd9rqhv5";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-darwin-arm64.tar.gz";
+        sha256 = "0bkx2qf8p815k50fg8rzhxz0bzcqf32hniv7abbwfqpykyxjvgqf";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.0.0-darwin-arm64.tar.gz";
-        sha256 = "0rmw56k5ray15aciq3y5km40dlyq7zp10jpbf6s0z4nfg9479ni1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-darwin-arm64.tar.gz";
+        sha256 = "026rvz64mpf9vr1r76lsj28rzbi3jbpm6w28brbny1d0rpdfsb41";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-google-native-v0.32.0-darwin-arm64.tar.gz";
        sha256 = "0caz4kgnnrmdr7n571xc7yqscac9jnjwwpjzbnvx4ib6a91wvsdn";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.0-darwin-arm64.tar.gz";
-        sha256 = "1mfv6qlzm6l94j12pfy1dni5w9laix3s5fak7csmpwywnyf82dgx";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-hcloud-v1.39.1-darwin-arm64.tar.gz";
+        sha256 = "16rnj91ws7v61pmpyc7yi8lvwrc4y6pg6gk0ykwydrlgw8vrf9bv";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-kubernetes-v4.33.0-darwin-arm64.tar.gz";
@@ -417,24 +417,24 @@
        sha256 = "1xf9k1aqqrpq6apjgmqs4l276w5qzg2337ixcp3f12z8l476yv40";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.8.0-darwin-arm64.tar.gz";
-        sha256 = "1idhx267y78hl33vc7w196fyq4bjqjgicrgd8bbls6vh0z0k9zhk";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-darwin-arm64.tar.gz";
+        sha256 = "1dnx16pj5q8pnz2k7cgvppbwps171jqrcd1l3dsh05jrhvhh6z0r";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.0-darwin-arm64.tar.gz";
-        sha256 = "1x81na0bj8x2mxy789n944ibf21wlzpqmv1h5i4h9nfm07jqz8d9";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mysql-v3.3.1-darwin-arm64.tar.gz";
+        sha256 = "0vnhz4zq8y2rz58bji3yl96bsl3gzav4ck6f80j096s1dp48zqch";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.0-darwin-arm64.tar.gz";
-        sha256 = "1y33bybcdmjc39xhnggf06zrffamcdxnjvqiqg8110ps5wxqjzmc";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-openstack-v5.5.1-darwin-arm64.tar.gz";
+        sha256 = "1if9k9wz9k5k0a37p08fkfqr6yimxbh8z69bfczl0b2rj5ibkbs5";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.17.0-darwin-arm64.tar.gz";
-        sha256 = "0yzvqn2i55y1q5wl1hykdvwv0zj957ascm731d4a6fs54gbnv174";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-postgresql-v3.18.0-darwin-arm64.tar.gz";
+        sha256 = "1hp5rkbi32342z97ly68hr0rq2gqdk26qi9cfwg5x49c7x8wa26d";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.0-darwin-arm64.tar.gz";
-        sha256 = "1ccyxmkzmj5qah2z912vks548bbrhiifa65h0dm5bkihyjk1bi95";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-random-v4.21.1-darwin-arm64.tar.gz";
+        sha256 = "1dn4ci1ghy6kfv7jgrmnacyajia41glrw9kd46i3x5861apam3xl";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-snowflake-v2.18.0-darwin-arm64.tar.gz";
@@ -453,16 +453,16 @@
        sha256 = "0bjp4076cbkvdcjj3jcvy4r50zdv74vwbzq706i31rz1c121dm3x";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.0-darwin-arm64.tar.gz";
-        sha256 = "1hajg5iaxhl4dk4v67clk5957sd2pznxaj8h3475vmq7vpzxfpwi";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-tls-v5.5.1-darwin-arm64.tar.gz";
+        sha256 = "17a9hjb4yslw6367q7ixcmazrcnzzs2887pkc001kk7h8h1qgx1w";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.10.0-darwin-arm64.tar.gz";
-        sha256 = "1h8izm6mbvvjj3ybxdskaanh4f3pws3wrl46y4biwkb2b9g71wqp";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-darwin-arm64.tar.gz";
+        sha256 = "10447krdfm4fqn04n2sd6m4fscy3vgbkgzbfaymmxqqvdxc04lm8";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.0-darwin-arm64.tar.gz";
-        sha256 = "09aza2hkn6ckr3anzif82ka370g7mqcj4s796lcak15pp93c0q9b";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-darwin-arm64.tar.gz";
+        sha256 = "1dyfwqf28hj3a77lsbll86wd0fgmlashiqp6rm9r2sg74hmkggyk";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vsphere-v4.17.0-darwin-arm64.tar.gz";
--- a/pkgs/by-name/pu/pure-maps/package.nix
+++ b/pkgs/by-name/pu/pure-maps/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation rec {
  pname = "pure-maps";
-  version = "3.4.2";
+  version = "3.5.1";

  src = fetchFromGitHub {
    owner = "rinigus";
    repo = "pure-maps";
    rev = version;
-    hash = "sha256-UkPZ5Wy/05srZv1r5GLoT5hFQVLfYF6Q2rQDFoILlQ0=";
+    hash = "sha256-kPkkGoS/jikAQe6DYeWoEDmLU8iENXNDJwkY0f4UvO0=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/pz/pzip/package.nix
+++ b/pkgs/by-name/pz/pzip/package.nix
@@ -1,38 +0,0 @@
-{
-  lib,
-  buildGoModule,
-  fetchFromGitHub,
-  unzip,
-}:
-
-buildGoModule (finalAttrs: {
-  pname = "pzip";
-  version = "0.2.0";
-
-  src = fetchFromGitHub {
-    owner = "ybirader";
-    repo = "pzip";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-bb2TSSyA7TwgoV53M/7WkNcTq8F0EjCA7ObHfnGL9l0=";
-  };
-
-  vendorHash = "sha256-MRZlv4eN1Qbu+QXr//YexTDYSK4pCXAPO7VvGqZhjho=";
-
-  nativeBuildInputs = [
-    unzip
-  ];
-
-  ldflags = [
-    "-s"
-    "-w"
-  ];
-
-  meta = {
-    description = "Fast concurrent zip archiver and extractor";
-    homepage = "https://github.com/ybirader/pzip";
-    changelog = "https://github.com/ybirader/pzip/releases/tag/${finalAttrs.src.rev}";
-    license = lib.licenses.asl20;
-    maintainers = [ ];
-    mainProgram = "pzip";
-  };
-})
--- a/pkgs/by-name/qd/qdl/package.nix
+++ b/pkgs/by-name/qd/qdl/package.nix
@@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "qdl";
-  version = "2.7";
+  version = "2.7.1";

  src = fetchFromGitHub {
    owner = "linux-msm";
    repo = "qdl";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oZ/1Pe81VOAmZiywSC2jC1OcDtaH84GAuo8AqiE77d4=";
+    hash = "sha256-r7DVfuTjuhkhLCXJdgzLuh34nIsoEroGzIaFQJ3oHAA=";
  };

  patches = [
--- a/pkgs/by-name/qt/qtalarm/package.nix
+++ b/pkgs/by-name/qt/qtalarm/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "qtalarm";
-  version = "3.0.2";
+  version = "3.1.0";

  src = fetchFromGitHub {
    owner = "CountMurphy";
    repo = "QTalarm";
    tag = finalAttrs.version;
-    hash = "sha256-rf1Vd5npCu6HVPunRfV2yFIWiSJ686iU3gXcT8g4VUQ=";
+    hash = "sha256-9g6WzOn9yCOnu14nLwsR15E6rmLBOEtDZKnZzz6HS6Y=";
  };

  buildInputs = [
--- a/pkgs/by-name/re/reticulum-group-chat/package.nix
+++ b/pkgs/by-name/re/reticulum-group-chat/package.nix
@@ -8,7 +8,7 @@

 buildGoModule (finalAttrs: {
  pname = "reticulum-group-chat";
-  version = "1.11.0";
+  version = "1.12.0";
  __structuredAttrs = true;
  __darwinAllowLocalNetworking = true;

@@ -16,7 +16,7 @@ buildGoModule (finalAttrs: {
    owner = "thatSFguy";
    repo = "reticulum-group-chat";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-LWHYIKnkEPrlDIEruP2ctuMQGnrL1uofOWAsZ4E5guw=";
+    hash = "sha256-9v9dUVkoq9lcgM9NCxfRx+4rExiqtCavxx2Pq13os4k=";
  };

  vendorHash = "sha256-qMmEi7OYv2xzYOoeBWQ0omeIrcTyhxylw2qvv9kd9dk=";
--- a/pkgs/by-name/rt/rtk/package.nix
+++ b/pkgs/by-name/rt/rtk/package.nix
@@ -24,6 +24,12 @@ rustPlatform.buildRustPackage (finalAttrs: {

  cargoHash = "sha256-XKUKdhxfnwUCOx9slqx4oUFa09HcosPLVh5Xkh87oSk=";

+  # Rust 1.97's dead_code_pub_in_binary analysis exposes dead code in test builds.
+  # Fixed upstream on develop after 0.43.0:
+  # https://github.com/rtk-ai/rtk/commit/73b8cb3069297374a3de58552b9fe4aa2cda3a41
+  # TODO: Remove RUSTFLAGS when updating rtk to the next release.
+  env.RUSTFLAGS = "--cap-lints warn";
+
  nativeBuildInputs = [
    makeWrapper
    pkg-config
--- a/pkgs/by-name/sa/saunafs/package.nix
+++ b/pkgs/by-name/sa/saunafs/package.nix
@@ -23,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "saunafs";
-  version = "5.10.1";
+  version = "5.11.0";

  src = fetchFromGitHub {
    owner = "leil-io";
    repo = "saunafs";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-b7sf6dMstxEoI7n4nqw4AKEcFvAPX+nLOgXf5jQTmqE=";
+    hash = "sha256-73d8FG/qOTF0nYKETFl0YTXkyd5NuTRh9pr9uNR3i9o=";
  };

  patches = [
--- a/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
+++ b/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "sdl_gamecontrollerdb";
-  version = "0-unstable-2026-06-26";
+  version = "0-unstable-2026-07-23";

  src = fetchFromGitHub {
    owner = "mdqinc";
    repo = "SDL_GameControllerDB";
-    rev = "513c72e34569e0f471dde7aa26eecb23946c3ef7";
-    hash = "sha256-IZ6BYtxFRu8Kt+Ege3xf+E9dlMBHXFWvdvYdKEFAIM8=";
+    rev = "fa9c1fb9df83bdabb9f699eadac66adc9759b14d";
+    hash = "sha256-t8fTiPT0g08QbPJGnlppJEe64ZHGNyV8fv0Za471DD8=";
  };

  dontBuild = true;
--- a/pkgs/by-name/sk/skaffold/package.nix
+++ b/pkgs/by-name/sk/skaffold/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "skaffold";
-  version = "2.23.0";
+  version = "2.24.0";

  src = fetchFromGitHub {
    owner = "GoogleContainerTools";
    repo = "skaffold";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-mFJOveUkOJC7bIzxrjQgDKhCf0WvOTgSDqBSIVgZZzw=";
+    hash = "sha256-d8KZmx43OhaBq4S1WexlUm//RwOlId3yGNIJBM9ASxY=";
  };

  vendorHash = null;
--- a/pkgs/by-name/sk/skeema/package.nix
+++ b/pkgs/by-name/sk/skeema/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "skeema";
-  version = "1.14.0";
+  version = "1.14.1";

  src = fetchFromGitHub {
    owner = "skeema";
    repo = "skeema";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-xcGHzsVV3rn8l7oYu+RD4njyI1KW/fU9iGdwZW7W5PA=";
+    hash = "sha256-enp51IdhRNcbUBf/+RAJktrltPz7aGISFssMcqbu6Gc=";
  };

  vendorHash = null;
--- a/pkgs/by-name/te/terraform-mcp-server/package.nix
+++ b/pkgs/by-name/te/terraform-mcp-server/package.nix
@@ -6,16 +6,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "terraform-mcp-server";
-  version = "1.0.0";
+  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "hashicorp";
    repo = "terraform-mcp-server";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0+TjwCDiuNAM6MkGTxw7cigwp1EaDmSFkyMYS+XwC1E=";
+    hash = "sha256-SFCvVPohsFbodUbsjWhvmpp3DuzrR+f7M298QX4tOVc=";
  };

-  vendorHash = "sha256-6azUKwzkVg68SvuVlse5ljB2H49tRUWgDasLjEl8KKw=";
+  vendorHash = "sha256-zHcu4zntwPDs+bBTFNZxCDwn/mfBgrACEsElTTGPssA=";

  ldflags = [
    "-X main.version=${finalAttrs.version}"
--- a/pkgs/by-name/ti/tilem/gcc14-fix.patch
+++ b/pkgs/by-name/ti/tilem/gcc14-fix.patch
@@ -1,13 +0,0 @@
-diff --git a/gui/macro.c b/gui/macro.c
-index ae8db8b..226d48f 100644
--- a/gui/macro.c
-+++ b/gui/macro.c
-@@ -86,7 +86,7 @@ void tilem_macro_add_action(TilemMacro* macro, int type, char * value) {
- 	macro->actions = tilem_macro_actions_new(macro, n + 1);
- 
- 	/* Then we need to save the action */	
-	macro->actions[n] =  g_new(char, strlen(value)); /* FIXME : gcc says : "assignment from incompatible pointer type" ??? */
-+	macro->actions[n] =  g_new(TilemMacroAtom, 1); /* FIXME : gcc says : "assignment from incompatible pointer type" ??? */
- 	macro->actions[n]->value = g_strdup(value);
- 	macro->actions[n]->type = type;
- 	macro->n++;
--- a/pkgs/by-name/ti/tilem/gcc15-fix.patch
+++ b/pkgs/by-name/ti/tilem/gcc15-fix.patch
@@ -1,12 +0,0 @@
-Fix call to zero-argument tilem_macro_new(), which GCC 15 rejects because the declaration takes no parameters.
--- a/gui/macro.c
-+++ b/gui/macro.c
-@@ -70,7 +70,7 @@
- 	tilem_macro_finalize(emu->macro);
- 
- 	/* Then allocate a new one */	
-	emu->macro = tilem_macro_new(emu);
-+	emu->macro = tilem_macro_new();
- }
- 
- /* Add an action to the macro. The action could be :
--- a/pkgs/by-name/ti/tilem/package.nix
+++ b/pkgs/by-name/ti/tilem/package.nix
@@ -1,43 +1,59 @@
 {
  stdenv,
-  fetchurl,
+  fetchFromGitHub,
+  gnused,
  lib,
+  nix-update,
  pkg-config,
+  writeShellScript,
  glib,
-  gtk2,
+  gtk3,
+  wrapGAppsHook3,
  libticonv,
  libtifiles2,
  libticables2,
  libticalcs2,
 }:

-stdenv.mkDerivation (finalAttrs: {
+stdenv.mkDerivation {
  pname = "tilem";
-  version = "2.0";
-  src = fetchurl {
-    url = "mirror://sourceforge/tilem/tilem-${finalAttrs.version}.tar.bz2";
-    sha256 = "1ba38xzhp3yf21ip3cgql6jzy49jc34sfnjsl4syxyrd81d269zw";
+  version = "2.1-unstable-2025-11-06";
+
+  src = fetchFromGitHub {
+    owner = "kuba160";
+    repo = "tilem-gtk3";
+    rev = "64b9a38a4460abf52bf09ab28dffdc3784f002a3";
+    hash = "sha256-FYJMS2GIUbW89VrYbZM1+DLUGu86HxtScSWN0CLtNDo=";
  };
-  nativeBuildInputs = [ pkg-config ];
+
+  nativeBuildInputs = [
+    pkg-config
+    wrapGAppsHook3
+  ];
  buildInputs = [
    glib
-    gtk2
+    gtk3
    libticonv
    libtifiles2
    libticables2
    libticalcs2
  ];
-  patches = [
-    ./gcc14-fix.patch
-    ./gcc15-fix.patch
-  ];
+
  env.NIX_CFLAGS_COMPILE = toString [ "-lm" ];
+
+  passthru.updateScript = writeShellScript "update-tilem" ''
+    ${lib.getExe nix-update} "$UPDATE_NIX_ATTR_PATH" --version=branch
+    ${lib.getExe gnused} -i -E \
+      's/version = "0-unstable-([0-9-]+)";/version = "2.1-unstable-\1";/' \
+      pkgs/by-name/ti/tilem/package.nix
+  '';
+
  meta = {
-    homepage = "http://lpg.ticalc.org/prj_tilem/";
+    homepage = "https://github.com/kuba160/tilem-gtk3";
    description = "Emulator and debugger for Texas Instruments Z80-based graphing calculators";
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [ siraben ];
    platforms = lib.platforms.linux ++ lib.platforms.darwin;
    mainProgram = "tilem2";
  };
-})
+}
--- a/pkgs/by-name/tr/trufflehog/package.nix
+++ b/pkgs/by-name/tr/trufflehog/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "trufflehog";
-  version = "3.95.9";
+  version = "3.96.0";

  src = fetchFromGitHub {
    owner = "trufflesecurity";
    repo = "trufflehog";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CeKZA7d11Kdecjv2aInrK4NQ+C7c/ae8qQmircemTb4=";
+    hash = "sha256-4KsgBDQj2S6J+RT913bthuKIYLX8X+Jz4B0wYJB96Zg=";
  };

-  vendorHash = "sha256-KVocEbpKYN/PE1Dnx4KO4V8AGEfYoNMKWZsAtXhLXv4=";
+  vendorHash = "sha256-QHs0ilr/dq6WvtTi7JUIZPZsdUj8BPxR2n4htbYQYS8=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/ug/ugs/package.nix
+++ b/pkgs/by-name/ug/ugs/package.nix
@@ -19,11 +19,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "ugs";
-  version = "2.1.18";
+  version = "2.1.24";

  src = fetchzip {
    url = "https://github.com/winder/Universal-G-Code-Sender/releases/download/v${finalAttrs.version}/UniversalGcodeSender.zip";
-    hash = "sha256-GRoQ9Wg+OyjhBjjRiNVZlMQ6pukvj9i3p9UA+7B/Tww=";
+    hash = "sha256-YDoH2romuozMWDBhZu5vW+XHHzqLJi3qYedQX2gzsGM=";
  };

  dontUnpack = true;
--- a/pkgs/by-name/uu/uutils-procps/package.nix
+++ b/pkgs/by-name/uu/uutils-procps/package.nix
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "uutils-procps";
-  version = "0.0.1-unstable-2026-07-10";
+  version = "0.0.1-unstable-2026-07-22";

  src = fetchFromGitHub {
    owner = "uutils";
    repo = "procps";
-    rev = "43414458b44617824ef44a0c5791839c3ab98f28";
-    hash = "sha256-Eh8fzCsBIaOmz7Apm0HrBCx446s0ZHjCDQ9FlM2b/gQ=";
+    rev = "610131519ff76cd2ebddd17441c2daf1e3653ffa";
+    hash = "sha256-D1aPex36SJ307SGKQV+zOnjfihTvSsRuNQKdM6lEzAQ=";
  };

-  cargoHash = "sha256-yffq2oZ53eNiey/u6kUbXeir0UJZ9LqCm/ysO86qwe0=";
+  cargoHash = "sha256-uR43hwO+cIxLO4PFrF13MUUxLF+ISCy94ZmHwbVrS7Q=";

  cargoBuildFlags = [ "--workspace" ];

--- a/pkgs/by-name/vp/vpl-gpu-rt/package.nix
+++ b/pkgs/by-name/vp/vpl-gpu-rt/package.nix
@@ -10,7 +10,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "vpl-gpu-rt";
-  version = "26.1.6";
+  version = "26.3.0";

  outputs = [
    "out"
@@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "intel";
    repo = "vpl-gpu-rt";
    rev = "intel-onevpl-${finalAttrs.version}";
-    hash = "sha256-E8CQC2jHSo2ZHp8drXXTgcOOHru3kDJtoLNKwm++YG8=";
+    hash = "sha256-7hHeQ5oo6e+rCOSH05TGCUPWR6eO/RUidiTQTF9Ga6Q=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/we/werf/package.nix
+++ b/pkgs/by-name/we/werf/package.nix
@@ -10,17 +10,17 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "werf";
-  version = "2.73.1";
+  version = "2.73.2";

  src = fetchFromGitHub {
    owner = "werf";
    repo = "werf";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-LqFZA8QCQxoEh49f+EHxYdPhFUbqUYnGeDVd/X+hODU=";
+    hash = "sha256-OadbfQ0onCAFtPuDkgxxdNoqAElHbMHoNTqSAXEEAcQ=";
  };

  proxyVendor = true;
-  vendorHash = "sha256-Ot2P417uqtdpxBd46NelxThF4Ca7krIInVfJ4OxnTRI=";
+  vendorHash = "sha256-twmFBZ+uDk/43N5Fy7hq3OWjG1eKaSswgqj11pLhY5Y=";

  nativeBuildInputs = [ installShellFiles ];
  buildInputs =
--- a/pkgs/by-name/zl/zluda/package.nix
+++ b/pkgs/by-name/zl/zluda/package.nix
@@ -16,13 +16,13 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "zluda";
-  version = "6-preview.63";
+  version = "6";

  src = fetchFromGitHub {
    owner = "vosen";
    repo = "ZLUDA";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-AZGSO6aV1T3elsVDJxFylhzYjkhkIy1QFtTdH4u4Lrw=";
+    hash = "sha256-5+ip6YGIgGH892UzcP/3vHoxRD0YpUNTkryNDg9gojs=";
    fetchSubmodules = true;
    fetchLFS = true;
  };
@@ -51,18 +51,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
    clang
  ];

-  cargoHash = "sha256-2YAlc8HW+aqfRzLSXw/I++DM4/JneE7UNmV6BVZb4VM=";
+  cargoHash = "sha256-q5DagH0USWZNni0UrwHzeHe4LpaOCHU0ffOek7PUz50=";

  # Tests require a GPU and segfault in the sandbox
  doCheck = false;

  # xtask doesn't support passing --target, but nix hooks expect the folder structure from when it's set
  env.CARGO_BUILD_TARGET = stdenv.hostPlatform.rust.cargoShortTarget;
-  # Future packagers:
-  # This is a fix for https://github.com/NixOS/nixpkgs/issues/390469. Ideally
-  # ZLUDA should configure this automatically. Therefore, on every new update,
-  # please try removing this line and see if ZLUDA builds.
-  env.CMAKE_BUILD_TYPE = "Release";

  preConfigure = ''
    # disable test written for windows only: https://github.com/vosen/ZLUDA/blob/774f4bcb37c39f876caf80ae0d39420fa4bc1c8b/zluda_inject/tests/inject.rs#L55
--- a/pkgs/development/haskell-modules/configuration-common.nix
+++ b/pkgs/development/haskell-modules/configuration-common.nix
@@ -2534,12 +2534,12 @@ with haskellLib;
        doJailbreak
        # 2022-12-02: Hackage release lags behind actual releases: https://github.com/PostgREST/postgrest/issues/2275
        (overrideSrc rec {
-          version = "14.14";
+          version = "14.15";
          src = pkgs.fetchFromGitHub {
            owner = "PostgREST";
            repo = "postgrest";
            rev = "v${version}";
-            hash = "sha256-iAyGu0yKXpSg0uFgGvD1UGc35yDMLYQ/fHoRERiKJMU=";
+            hash = "sha256-6V2qZv7dAkhsddIF9gw/zFwk4x2VprLxmQyNEmGxLIs=";
          };
        })
      ];
--- a/pkgs/development/libraries/mapbox-gl-qml/default.nix
+++ b/pkgs/development/libraries/mapbox-gl-qml/default.nix
@@ -10,13 +10,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mapbox-gl-qml";
-  version = "3.0.0";
+  version = "3.2.2";

  src = fetchFromGitHub {
    owner = "rinigus";
    repo = "mapbox-gl-qml";
    tag = finalAttrs.version;
-    hash = "sha256-csk3Uo+AdP1R/T/9gWyWmYFIKuen2jy8wYN3GJznyRE=";
+    hash = "sha256-HE36UJgdXZalPpEXShus+C3jSFQr/WmmKZdK65CH1zY=";
  };

  nativeBuildInputs = [
--- a/pkgs/development/python-modules/azure-eventhub/default.nix
+++ b/pkgs/development/python-modules/azure-eventhub/default.nix
@@ -10,14 +10,14 @@

 buildPythonPackage rec {
  pname = "azure-eventhub";
-  version = "5.15.0";
+  version = "5.15.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Azure";
    repo = "azure-sdk-for-python";
    tag = "azure-eventhub_${version}";
-    hash = "sha256-zpj1DUeFCXgVw44LcBCYtuFcQtA9BnrDKAxKSYzu4ts=";
+    hash = "sha256-+Qx7sPdm1jwB0RYsN2dwB+GJJjqPMQsl8TI2GFCRWKA=";
  };

  sourceRoot = "${src.name}/sdk/eventhub/azure-eventhub";
--- a/pkgs/development/python-modules/croniter/default.nix
+++ b/pkgs/development/python-modules/croniter/default.nix
@@ -1,43 +1,68 @@
 {
  lib,
  buildPythonPackage,
-  fetchPypi,
-  setuptools,
+  fetchFromGitHub,
+  hatchling,
+  packaging,
  pytestCheckHook,
+  python,
  python-dateutil,
  pytz,
+  trove-classifiers,
  tzlocal,
+  versionCheckHook,
+  which,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "croniter";
-  version = "6.0.0";
+  version = "6.2.4";
  pyproject = true;

-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-N8UEsxOVYRSpg+ziwrB3kLHxCU/p2BzJRzkhR0glVXc=";
+  src = fetchFromGitHub {
+    owner = "pallets-eco";
+    repo = "croniter";
+    tag = "${finalAttrs.version}";
+    hash = "sha256-Ff6fHFBOBQmrf8OLPNuhHjRqyPuS1sStd5hWh4oI0cI=";
  };

-  nativeBuildInputs = [ setuptools ];
-
-  propagatedBuildInputs = [
-    python-dateutil
-    pytz
+  build-system = [
+    hatchling
+    packaging
+    trove-classifiers
  ];

+  dependencies = [ python-dateutil ];
+
  nativeCheckInputs = [
    pytestCheckHook
+    pytz
    tzlocal
  ];

+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "hatchling==1.30.1" "hatchling>=1.30.1"
+  '';
+
  pythonImportsCheck = [ "croniter" ];

+  nativeInstallCheckInputs = [
+    versionCheckHook
+    which
+  ];
+
+  versionCheckProgramArg = "${placeholder "out"}/${python.sitePackages}";
+
+  preInstallCheck = ''
+    versionCheckProgram="$(which ls)"
+  '';
+
  meta = {
    description = "Library to iterate over datetime object with cron like format";
    homepage = "https://github.com/kiorky/croniter";
-    changelog = "https://github.com/kiorky/croniter/blob/${version}/CHANGELOG.rst";
+    changelog = "https://github.com/kiorky/croniter/blob/${finalAttrs.version}/CHANGELOG.rst";
    license = lib.licenses.mit;
    maintainers = [ ];
  };
-}
+})
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "iamdata";
-  version = "0.1.202607231";
+  version = "0.1.202607241";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "cloud-copilot";
    repo = "iam-data-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-zrn/q2Q83nsxXKbH8HlcXRhZbAAEwWEfV3Kq2nf5KxM=";
+    hash = "sha256-RM86dBzksKDdj2ka2HSspc/ZxVhtsMTJY8C2TYG1Q3M=";
  };

  __darwinAllowLocalNetworking = true;
--- a/pkgs/development/python-modules/langfuse/default.nix
+++ b/pkgs/development/python-modules/langfuse/default.nix
@@ -27,6 +27,10 @@ buildPythonPackage (finalAttrs: {

  build-system = [ poetry-core ];

+  pythonRelaxDeps = [
+    "wrapt"
+  ];
+
  dependencies = [
    backoff
    httpx
--- a/pkgs/development/python-modules/losant-rest/default.nix
+++ b/pkgs/development/python-modules/losant-rest/default.nix
@@ -10,14 +10,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "losant-rest";
-  version = "2.2.0";
+  version = "2.2.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Losant";
    repo = "losant-rest-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-nAc+zTqgIdLw/NVWoprP+Kqkbu17N1DMgzo2iu7w8aM=";
+    hash = "sha256-KNi3caxuD1jiW3fHT5dcuM/4SfLVgi770MfDfCmkiFk=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/mitsubishi-comfort/default.nix
+++ b/pkgs/development/python-modules/mitsubishi-comfort/default.nix
@@ -11,14 +11,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "mitsubishi-comfort";
-  version = "0.4.0";
+  version = "0.5.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "nikolairahimi";
    repo = "mitsubishi-comfort";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/JP9I5QZYRgQelsJzRyawsCO3xNc/lQu4m5j8CNDX5A=";
+    hash = "sha256-UzQxUeIqoBTTp2xaNHI1XWh29sLuZ5WESRIEUwV46x8=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/modal/default.nix
+++ b/pkgs/development/python-modules/modal/default.nix
@@ -39,7 +39,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "modal";
-  version = "1.5.2";
+  version = "1.5.3";
  pyproject = true;

  __structuredAttrs = true;
@@ -48,7 +48,7 @@ buildPythonPackage (finalAttrs: {
    owner = "modal-labs";
    repo = "modal-client";
    tag = "py/v${finalAttrs.version}";
-    hash = "sha256-YWSf5xsap5zfy1KbAyamFmjEIe7qpRcj6TfuWf/Tu68=";
+    hash = "sha256-XVY+RzedSMVug+mZ6pioO5qYbR6gUaD5QJIENIPWgx8=";
  };
  sourceRoot = "${finalAttrs.src.name}/py";

--- a/pkgs/development/python-modules/mypyllant/default.nix
+++ b/pkgs/development/python-modules/mypyllant/default.nix
@@ -24,16 +24,16 @@
  requests,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "mypyllant";
-  version = "0.9.17";
+  version = "0.9.18";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "signalkraft";
    repo = "myPyllant";
-    tag = "v${version}";
-    hash = "sha256-C6/rCpY4Pn8j8dNo1mlz2GRzMBeMo9CZMitlmtuBRE0=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-wLdyajxakYvO27DOmWNk9QnGdprdKnQNZHKPFQg0yM8=";
  };

  build-system = [
@@ -66,8 +66,8 @@ buildPythonPackage rec {
  meta = {
    description = "Python library to interact with the API behind the myVAILLANT app";
    homepage = "https://github.com/signalkraft/myPyllant";
-    changelog = "https://github.com/signalkraft/myPyllant/releases/tag/${src.tag}";
+    changelog = "https://github.com/signalkraft/myPyllant/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ urbas ];
  };
-}
+})
--- a/pkgs/development/python-modules/napari-nifti/default.nix
+++ b/pkgs/development/python-modules/napari-nifti/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage rec {
  pname = "napari-nifti";
-  version = "0.0.17";
+  version = "0.0.19";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "MIC-DKFZ";
    repo = "napari-nifti";
    tag = "v${version}";
-    hash = "sha256-JDyJMg6rsGkfEHBwqKc2L6oRO5Y1MJJlEjUuuqp7URQ=";
+    hash = "sha256-pj2olQ0znppG0xE/fpFNIGXx0nzN+lAgGdEOtrzS7Vc=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/ngff-zarr/default.nix
+++ b/pkgs/development/python-modules/ngff-zarr/default.nix
@@ -43,7 +43,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "ngff-zarr";
-  version = "0.37.1";
+  version = "0.39.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -51,7 +51,7 @@ buildPythonPackage (finalAttrs: {
    owner = "fideus-labs";
    repo = "ngff-zarr";
    tag = "py-v${finalAttrs.version}";
-    hash = "sha256-73bduVeH+o7uirhwFcFpU33NUAOZe//GCVYMl6OYgC8=";
+    hash = "sha256-ukr/P1I9Y6eu7yP6LyUcxAG02vNvmI3OhVKiibSi2Rs=";
  };

  sourceRoot = "${finalAttrs.src.name}/py/";
--- a/pkgs/development/python-modules/publicsuffixlist/default.nix
+++ b/pkgs/development/python-modules/publicsuffixlist/default.nix
@@ -11,12 +11,12 @@

 buildPythonPackage (finalAttrs: {
  pname = "publicsuffixlist";
-  version = "1.0.2.20260722";
+  version = "1.0.2.20260724";
  pyproject = true;

  src = fetchPypi {
    inherit (finalAttrs) pname version;
-    hash = "sha256-eQvXqMOPZpmtMirDStUmKmr5wk1GlNrGTRz5WPCzavw=";
+    hash = "sha256-2aTYMWvVFZpPmsN8Hp4Fc2ViC2u0b59QsigzT6mdR+g=";
  };

  postPatch = ''
--- a/pkgs/development/python-modules/pylint-odoo/default.nix
+++ b/pkgs/development/python-modules/pylint-odoo/default.nix
@@ -8,14 +8,14 @@
 }:
 buildPythonPackage rec {
  pname = "pylint-odoo";
-  version = "10.0.7";
+  version = "10.0.8";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "OCA";
    repo = "pylint-odoo";
    tag = "v${version}";
-    hash = "sha256-xwtIaZTQcS/Q96r3nLeIT3e8B5Z4zpipA56GwIIBLLA=";
+    hash = "sha256-dCc3jwZOWlwMG0jn1d2rAK4oFQlqTMmvYu9ucR/ORfU=";
  };

  pythonRelaxDeps = [
--- a/pkgs/development/python-modules/pypugjs/default.nix
+++ b/pkgs/development/python-modules/pypugjs/default.nix
@@ -16,14 +16,14 @@

 buildPythonPackage rec {
  pname = "pypugjs";
-  version = "6.0.3";
+  version = "7.0.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "kakulukia";
    repo = "pypugjs";
    tag = "v${version}";
-    hash = "sha256-7w+YTNBxDQ8UZdvX3JfBQc9HQR3zNTGsEp+OR/LWcmU=";
+    hash = "sha256-L4vE0INrSsjtMQ2Psx2YUDdfMoetGd1rFgmeP5bSUVo=";
  };

  build-system = [
--- a/pkgs/development/python-modules/python-duco-connectivity/default.nix
+++ b/pkgs/development/python-modules/python-duco-connectivity/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "python-duco-connectivity";
-  version = "0.8.0";
+  version = "0.11.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ronaldvdmeer";
    repo = "python-duco-connectivity";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-b0tjx/0GCHJxWDJmRcMwfLGWMphyfocdQNyojWyaVZo=";
+    hash = "sha256-+DCZdJxxsl8XkQczfTS5zTuoyHAHnsZqzmhtAZOZN+E=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/temescal/default.nix
+++ b/pkgs/development/python-modules/temescal/default.nix
@@ -2,20 +2,26 @@
  lib,
  buildPythonPackage,
  fetchPypi,
+  setuptools,
  pycryptodome,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "temescal";
  version = "0.5";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchPypi {
-    inherit pname version;
+    pname = "temescal";
+    inherit (finalAttrs) version;
    hash = "sha256-MfTftheNj8zI3iXIIJU+jy9xikvX9eO58LA0NCMJBnY=";
  };

-  propagatedBuildInputs = [ pycryptodome ];
+  build-system = [ setuptools ];
+
+  dependencies = [ pycryptodome ];

  # Module has no tests
  doCheck = false;
@@ -28,4 +34,4 @@ buildPythonPackage rec {
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ fab ];
  };
-}
+})
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "tencentcloud-sdk-python";
-  version = "3.1.139";
+  version = "3.1.140";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "TencentCloud";
    repo = "tencentcloud-sdk-python";
    tag = finalAttrs.version;
-    hash = "sha256-8873lECA5GoBQU963ub0W3OyEk0rJddO785O8EsGmCs=";
+    hash = "sha256-VEIEWfubjhvMDP/Hywd3bIlTexsAZZf0mtkq20MiCWw=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/termstyle/default.nix
+++ b/pkgs/development/python-modules/termstyle/default.nix
@@ -1,25 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchPypi,
-}:
-
-buildPythonPackage rec {
-  pname = "termstyle";
-  version = "0.1.11";
-  format = "setuptools";
-
-  src = fetchPypi {
-    inherit pname version;
-    sha256 = "ef74b83698ea014112040cf32b1a093c1ab3d91c4dd18ecc03ec178fd99c9f9f";
-  };
-
-  # Only manual tests
-  doCheck = false;
-
-  meta = {
-    description = "Console colouring for python";
-    homepage = "https://pypi.org/project/python-termstyle/";
-    license = lib.licenses.bsdOriginal;
-  };
-}
--- a/pkgs/development/python-modules/textblob/default.nix
+++ b/pkgs/development/python-modules/textblob/default.nix
@@ -9,12 +9,12 @@

 buildPythonPackage rec {
  pname = "textblob";
-  version = "0.20.0";
+  version = "0.20.1";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-rpvvOhbOy0quPplcyMb+mKnSpv/dWJkNzWjoF+jWa54=";
+    hash = "sha256-+9GjMHUy6d3bj1AoSHRVngECDnm1/lrkwdpwmp4gh+o=";
  };

  build-system = [ flit-core ];
--- a/pkgs/development/python-modules/textdistance/default.nix
+++ b/pkgs/development/python-modules/textdistance/default.nix
@@ -2,28 +2,42 @@
  lib,
  buildPythonPackage,
  fetchPypi,
+  setuptools,
+  pytestCheckHook,
+  hypothesis,
+  numpy,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "textdistance";
  version = "4.6.3";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchPypi {
-    inherit pname version;
+    pname = "textdistance";
+    inherit (finalAttrs) version;
    hash = "sha256-1tq8ULTqgyzc8OHmAhvQx/zZreFViI15u2o8Mfzi3G8=";
  };

-  # There aren't tests
-  doCheck = false;
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    hypothesis
+    numpy
+  ];
+
+  disabledTestPaths = [ "tests/test_external.py" ];

  pythonImportsCheck = [ "textdistance" ];

  meta = {
    description = "Python library for comparing distance between two or more sequences";
    homepage = "https://github.com/life4/textdistance";
-    changelog = "https://github.com/life4/textdistance/releases/tag/${version}";
+    changelog = "https://github.com/life4/textdistance/releases/tag/${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = [ ];
  };
-}
+})
--- a/pkgs/development/python-modules/yalexs-ble/default.nix
+++ b/pkgs/development/python-modules/yalexs-ble/default.nix
@@ -15,14 +15,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "yalexs-ble";
-  version = "3.4.0";
+  version = "3.4.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Yale-Libs";
    repo = "yalexs-ble";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-sNWLyg+ltwFu14QjoboA6r9zR+5jDHIy+F22Q7+GdoY=";
+    hash = "sha256-/3OH8MkAs4c5fFP1ickIeurt9SZot03I/ehLpoLr7nY=";
  };

  build-system = [ poetry-core ];
--- a/pkgs/development/python-modules/zadnegoale/default.nix
+++ b/pkgs/development/python-modules/zadnegoale/default.nix
@@ -1,48 +0,0 @@
-{
-  lib,
-  aiohttp,
-  aioresponses,
-  buildPythonPackage,
-  fetchFromGitHub,
-  dacite,
-  orjson,
-  pytest-asyncio,
-  pytest-error-for-skips,
-  pytestCheckHook,
-}:
-
-buildPythonPackage rec {
-  pname = "zadnegoale";
-  version = "0.7.0";
-  format = "setuptools";
-
-  src = fetchFromGitHub {
-    owner = "bieniu";
-    repo = "zadnegoale";
-    tag = version;
-    hash = "sha256-ij8xou8LXC4/BUTApIV6xSgb7ethwLyrHNJvBgxSBYM=";
-  };
-
-  propagatedBuildInputs = [
-    aiohttp
-    dacite
-    orjson
-  ];
-
-  nativeCheckInputs = [
-    aioresponses
-    pytest-asyncio
-    pytest-error-for-skips
-    pytestCheckHook
-  ];
-
-  pythonImportsCheck = [ "zadnegoale" ];
-
-  meta = {
-    description = "Python wrapper for getting allergen concentration data from Żadnego Ale servers";
-    homepage = "https://github.com/bieniu/zadnegoale";
-    changelog = "https://github.com/bieniu/zadnegoale/releases/tag/${version}";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ fab ];
-  };
-}
--- a/pkgs/development/python-modules/zwave-js-server-python/default.nix
+++ b/pkgs/development/python-modules/zwave-js-server-python/default.nix
@@ -11,14 +11,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "zwave-js-server-python";
-  version = "0.72.0";
+  version = "0.73.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "home-assistant-libs";
    repo = "zwave-js-server-python";
    tag = finalAttrs.version;
-    hash = "sha256-SgAKtmyTG36S/Au7uv1U3MLXcINqQql6XEGWAEEHyw0=";
+    hash = "sha256-xIElSGx6NOKEB5XDgXi6Cf5+XFW2i1riu7RPDHgmIt4=";
  };

  build-system = [ setuptools ];
--- a/pkgs/servers/home-assistant/custom-components/mypyllant/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/mypyllant/package.nix
@@ -16,16 +16,16 @@
  pytestCheckHook,
 }:

-buildHomeAssistantComponent rec {
+buildHomeAssistantComponent (finalAttrs: {
  owner = "signalkraft";
  domain = "mypyllant";
-  version = "0.9.18";
+  version = "0.9.19";

  src = fetchFromGitHub {
    owner = "signalkraft";
    repo = "mypyllant-component";
-    tag = "v${version}";
-    hash = "sha256-7huCAslbm5CLzArYMzSGkKPHlQoX6Qc0WLuv7e6OYLQ=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-7+KHmsgfGPIIWu+TTumswcaEoyQF9KvBVAKNGtNhZuQ=";
  };

  dependencies = [
@@ -44,9 +44,9 @@ buildHomeAssistantComponent rec {

  meta = {
    description = "Unofficial Home Assistant integration for interacting with myVAILLANT";
-    changelog = "https://github.com/signalkraft/mypyllant-component/releases/tag/${src.tag}";
+    changelog = "https://github.com/signalkraft/mypyllant-component/releases/tag/${finalAttrs.src.tag}";
    homepage = "https://github.com/signalkraft/mypyllant-component";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ urbas ];
  };
-}
+})
--- a/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix
+++ b/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix
@@ -2,8 +2,8 @@

 grafanaPlugin {
  pname = "victoriametrics-logs-datasource";
-  version = "0.29.0";
-  zipHash = "sha256-zTZRUCWGwJ02/hewJEPclfEWlTYQU0jUUDyxuRkyRHA=";
+  version = "0.30.1";
+  zipHash = "sha256-1dp3TNV+XyFojzzaPrWqwVk1OjLE7b2L7jrwE+J8uZE=";
  meta = {
    description = "Grafana datasource for VictoriaLogs";
    license = lib.licenses.asl20;
--- a/pkgs/servers/sql/postgresql/ext/pgmq.nix
+++ b/pkgs/servers/sql/postgresql/ext/pgmq.nix
@@ -7,13 +7,13 @@

 postgresqlBuildExtension (finalAttrs: {
  pname = "pgmq";
-  version = "1.11.1";
+  version = "1.12.0";

  src = fetchFromGitHub {
    owner = "pgmq";
    repo = "pgmq";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-BPOrQ7HcgTaTJIRzWUCG3iJN3mUjwIxa/wPxvJ1l4o4=";
+    hash = "sha256-yyE5XcwmVC2j4tXx5je6+BvsKD96JVZ/mY5xRyeq8gc=";
  };

  sourceRoot = "${finalAttrs.src.name}/pgmq-extension";
--- a/Show More
+++ b/Show More