Merge master into staging-next

doc/styleguide.md

@@ -22,7 +22,7 @@ Write for someone who knows a great deal — up to but not including this projec
 
 If specific knowledge is required, mention it at the start of the page.
 
-### Show, Don't Tell
+### Show, don't tell
 
 The fastest path to understanding is a working example.
 People learn by doing, not by reading about doing.
@@ -34,7 +34,7 @@ People learn by doing, not by reading about doing.
 - Cover edge cases or variations
 - Link to further information instead of including it
 
-### Grammar and Style
+### Grammar and style
 
 **Sentence structure:**
 
@@ -54,7 +54,7 @@ Users care about *detecting hardware*, not *the tool that does it*.
 
 > This command detects your hardware and saves the configuration.
 
-### Content Organization
+### Content organization
 
 Lead with value. State what the reader will accomplish before explaining how.
 
@@ -83,7 +83,7 @@ Use **progressive disclosure**. Introduce concepts only when needed.
 3. Explain concepts if needed
 4. Provide advanced options separately or link to the reference
 
-### No Meta-commentary
+### No meta-commentary
 
 Don't describe what the documentation does. Just do it.
 
@@ -99,7 +99,7 @@ Don't describe what the documentation does. Just do it.
 
 > Set up a web server:
 
-### Code Examples
+### Code examples
 
 **Keep examples focused:**
 
@@ -132,7 +132,7 @@ Paste code examples directly and without further alteration.
 }
 ```
 
-### Lead with Practical Examples
+### Lead with practical examples
 
 Don't front-load theory. Readers want to accomplish something first, then understand why it works.
 
@@ -168,7 +168,7 @@ Users learn the NixOS module system by seeing patterns first.
 - Link deeper concepts instead of inlining them
 - Link to `nix.dev` for optional learning
 
-### General Rules
+### General rules
 
 - Abbreviate keys like `ssh-ed25519 AAAAC3NzaC…`
 - Abbreviate IP addresses like `192.168.XXX.XXX`
@@ -202,7 +202,7 @@ Use sentence case. A reader scanning only headings should understand the page.
 > Configure networking
 > Add a user to the system
 
-### Imperative Mood, Voice, and Person
+### Imperative mood, voice, and person
 
 Use imperative mood for instructions. Address the reader as "you", not "the user". Use active voice; in other words, make the subject do the action.
 
@@ -232,7 +232,7 @@ Use present tense for descriptions. Future tense makes documentation feel tentat
 > This creates a new folder.
 > Running this command installs the package.
 
-### Be Confident
+### Be confident
 
 State facts. Don't hedge with "should," "might," "typically," or "usually" unless the behavior genuinely varies.
 
@@ -246,7 +246,7 @@ State facts. Don't hedge with "should," "might," "typically," or "usually" unles
 > This creates the configuration file.
 > The service starts automatically.
 
-### Avoid Nominalizations
+### Avoid nominalizations
 
 A nominalization is a verb turned into a noun, often by adding *-tion*, *-meant*, or *-ance* (e.g. "explanation", "selection"). The fix: find the hidden verb and use it directly.
 
@@ -260,7 +260,7 @@ A nominalization is a verb turned into a noun, often by adding *-tion*, *-meant*
 > Select from the list.
 > Explain the error.
 
-### Plain Words
+### Plain words
 
 Technical precision for technical terms; plain language for everything else.
 
@@ -272,7 +272,7 @@ Technical precision for technical terms; plain language for everything else.
 - "set up" not "establish"
 - "find out" not "ascertain"
 
-### Filler Words and Weak Phrases
+### Filler words and weak phrases
 
 Cut words and phrases that add length without meaning.
 
@@ -298,7 +298,7 @@ Delete on sight:
 
 Every word must earn its place.
 
-### Writing Procedures
+### Writing procedures
 
 One instruction per sentence. Don't pack multiple actions into one sentence.
 
@@ -322,7 +322,7 @@ Don't bury the negative. Key limitations should be prominent, not a footnote aft
 
 > This service does not support multiple instances.
 
-### Consistent Terminology
+### Consistent terminology
 
 Pick a term and stick to it. Don't swap synonyms to avoid repetition. In technical documentation, repetition is clarity.
 
@@ -361,7 +361,7 @@ Only link when the destination is directly relevant, not for generic background
 
 > See `[database schema](url)` for the full table structure.
 
-### UI Language
+### UI language
 
 Match UI element names exactly: wording, casing, and spacing (even if a label seems oddly worded).
 

maintainers/github-teams.json

@@ -445,8 +445,7 @@
     "id": 4020424,
     "maintainers": {
       "Mic92": 96200,
-      "kalbasit": 87115,
-      "katexochen": 49727155
+      "kalbasit": 87115
     },
     "members": {
       "mfrw": 4929861,

nixos/tests/all-tests.nix

@@ -656,10 +656,6 @@ in
     imports = [ ./firefox.nix ];
     _module.args.firefoxPackage = pkgs.firefox-esr;
   };
-  firefox-esr-140 = runTest {
-    imports = [ ./firefox.nix ];
-    _module.args.firefoxPackage = pkgs.firefox-esr-140;
-  };
   firefox-esr-153 = runTest {
     imports = [ ./firefox.nix ];
     _module.args.firefoxPackage = pkgs.firefox-esr-153;

pkgs/applications/editors/vscode/extensions/default.nix

@@ -547,8 +547,8 @@ let
         mktplcRef = {
           name = "vscode-bazel";
           publisher = "bazelbuild";
-          version = "0.14.0";
-          sha256 = "sha256-JrXx/ICXQPlAKh7m6+eWWQ2bP1Nfls4PbW426PNJVBc=";
+          version = "0.15.0";
+          sha256 = "sha256-A4d62d5g0IDsMPeIDZA4e7LibIin0ZQ3QXPRX0mndB0=";
         };
         meta = {
           description = "Bazel support for Visual Studio Code";
@@ -1023,8 +1023,8 @@ let
         mktplcRef = {
           name = "coder-remote";
           publisher = "coder";
-          version = "1.16.3";
-          hash = "sha256-8wPhSUBez7NEaUUr9osnS4gIbkpOj0gRjA1j7l558aM=";
+          version = "1.16.4";
+          hash = "sha256-uQrtTY+iKljPuRhH5Jg4Aro3pZKm3z4xtcWNTclyn/w=";
         };
         meta = {
           description = "Extension for Visual Studio Code to open any Coder workspace in VS Code with a single click";
@@ -1391,8 +1391,8 @@ let
         mktplcRef = {
           name = "competitive-programming-helper";
           publisher = "DivyanshuAgrawal";
-          version = "2026.9.1789051951";
-          hash = "sha256-Et8v+Yl51tKTGoKx8rOMW3VscFkfIKwwqcLyw9fmI90=";
+          version = "2026.9.1789578855";
+          hash = "sha256-9WQ+FvOTMB/jiPbmp9qE2i7yubRS4czskJJIvKvtEyM=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/DivyanshuAgrawal.competitive-programming-helper/changelog";
@@ -1427,8 +1427,8 @@ let
         mktplcRef = {
           name = "dotenv-vscode";
           publisher = "dotenv";
-          version = "0.28.1";
-          hash = "sha256-Ye3T/u/2mmezAi1ErtJBX7M/3rAb7Mc3wvMGJaX3r5s=";
+          version = "1.5.7";
+          hash = "sha256-urwvY5sa15HwIE0hhcogSq+G2yhc8TeB6vheNjgxw6I=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/dotenv.dotenv-vscode/changelog";
@@ -4193,8 +4193,8 @@ let
         mktplcRef = {
           name = "sas-lsp";
           publisher = "SAS";
-          version = "1.20.0";
-          hash = "sha256-s2CAzAXMXdmCyOoMmyHjz5GRPHi5riDf/Og3SVrW7QI=";
+          version = "1.21.0";
+          hash = "sha256-bQQ+bRMsm1F8kiNqudWOp8Tmtmp6aMBtznaPOfCjV6g=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/SAS.sas-lsp/changelog";

pkgs/applications/editors/vscode/extensions/leanprover.lean4/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "lean4";
     publisher = "leanprover";
-    version = "0.0.239";
-    hash = "sha256-6XqjmClUzmyz1nkp/bLv5+F9cj7ZCp4+uAGIJgLDi+o=";
+    version = "0.0.240";
+    hash = "sha256-ixkQoXTHsHRB6wf5vmkJ0p8i1NrNyM6U595NY1CvbBE=";
   };
 
   meta = {

pkgs/applications/networking/browsers/firefox/packages/firefox-esr-140.nix

@@ -1,50 +0,0 @@
-{
-  lib,
-  callPackage,
-  fetchurl,
-  nixosTests,
-  buildMozillaMach,
-}:
-
-buildMozillaMach rec {
-  pname = "firefox";
-  version = "140.16.0esr";
-  applicationName = "Firefox ESR";
-  src = fetchurl {
-    url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "fabf5b481594a9a860b6ae379d2ee89ba291b807c94334ee15bad1fe862edb47c22e890d892e33d6a6ec57fce4ab12aa9c9c6fa4a501b881ecc6211ac04bd9a0";
-  };
-
-  meta = {
-    changelog = "https://www.firefox.com/en-US/firefox/${lib.removeSuffix "esr" version}/releasenotes/";
-    description = "Web browser built from Firefox source tree";
-    homepage = "http://www.mozilla.com/en-US/firefox/";
-    maintainers = with lib.maintainers; [ hexa ];
-    platforms = lib.platforms.unix;
-    maxSilent = 14400; # 4h, double the default of 7200s (c.f. #129212, #129115)
-    license = lib.licenses.mpl20;
-    mainProgram = "firefox";
-    identifiers = {
-      cpeParts = {
-        product = "firefox";
-        sw_edition = "esr";
-        update = "*";
-        vendor = "mozilla";
-        version = lib.removeSuffix "esr" version;
-      };
-      purlParts = {
-        type = "generic";
-        spec = "firefox@${lib.removeSuffix "esr" version}";
-      };
-    };
-    broken = true; # doesn't build on glibc 2.44
-  };
-  tests = {
-    inherit (nixosTests) firefox-esr-140;
-  };
-  updateScript = callPackage ../update.nix {
-    attrPath = "firefox-esr-140-unwrapped";
-    versionPrefix = "140";
-    versionSuffix = "esr";
-  };
-}

pkgs/applications/networking/browsers/firefox/packages/firefox-esr-153.nix

@@ -8,11 +8,11 @@
 
 buildMozillaMach rec {
   pname = "firefox";
-  version = "153.3.0esr";
+  version = "153.4.0esr";
   applicationName = "Firefox ESR";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "56a5e092f0aba91febf01d227e8068520513f632d09c5ffbad4cbb2de307d9066425f353a1b7fcf5648733e02a9b17cfc9aaed5e39d7562a6b143b1c9827a668";
+    sha512 = "79e1f2a0f8c4d156c80b8f4c580aa944600d49cc811f961a3eca251113241638991fda94ccb74a44df9030f643586c41686861333288f13793e621a262a1b131";
   };
 
   meta = {

pkgs/applications/networking/browsers/firefox/packages/firefox.nix

@@ -9,10 +9,10 @@
 
 buildMozillaMach rec {
   pname = "firefox";
-  version = "156.0.1";
+  version = "157.0";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "80a32a79268b672206f5477ca6bfde620cb7419b27aac090e01f06df06990ee0bbd81bb5c4aa78ac1d0edb26b133b1c6fa11cb6522445eccd70c82e719a24d5b";
+    sha512 = "d0c1788102904fe83bfbeecdbdfbd4033743e9bb791ff7063ca4a2a72146c722e0c87fb7531b32be9491f5b1529960364197150c27742e0aea3cefcd13ed0dde";
   };
 
   meta = {

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -1076,11 +1076,11 @@
     "vendorHash": null
   },
   "ovh_ovh": {
-    "hash": "sha256-AXcyieBEDZpjM3cdLl4rUvL9bX9hButOUhg8JZ+JYjk=",
+    "hash": "sha256-Jtm25nSw0aIcy4UGMGFECVGtU2h16Ev9ruVk09Fo0a8=",
     "homepage": "https://registry.terraform.io/providers/ovh/ovh",
     "owner": "ovh",
     "repo": "terraform-provider-ovh",
-    "rev": "v2.20.0",
+    "rev": "v2.21.0",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

pkgs/applications/networking/netmaker/default.nix

@@ -17,16 +17,16 @@
 
 buildGoModule rec {
   pname = "netmaker";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "gravitl";
     repo = "netmaker";
     rev = "v${version}";
-    hash = "sha256-Zt6bQgmummfaC0cbW2GgSlu2TatHHrd8UEY/CZsJoDU=";
+    hash = "sha256-buPgYC9556KkdWC3pwyN5Mf9wJrYaJYwyuyeg9bvE94=";
   };
 
-  vendorHash = "sha256-m+z0bzE/XMb8YHX4Q6UtPfeG0B2OSp9azMhVX51ECgM=";
+  vendorHash = "sha256-9pWcY4PaLLwFD0dg5Rn8c20yc3EucRvjin6zVdELn8A=";
 
   inherit subPackages;
 

pkgs/build-support/build-mozilla-mach/default.nix

@@ -511,8 +511,10 @@ buildStdenv.mkDerivation {
   ++ lib.optionals (!buildStdenv.hostPlatform.isDarwin && lib.versionAtLeast version "141") [
     "--with-onnx-runtime=${lib.getLib onnxruntime}/lib"
   ]
-  ++ [
+  ++ lib.optionals (lib.versionOlder version "157") [
     (enableFeature withFFmpeg "ffmpeg")
+  ]
+  ++ [
     (enableFeature withGSSAPI "negotiateauth")
     (enableFeature withJemalloc "jemalloc")
 

pkgs/by-name/ap/apftool-rs/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "apftool-rs";
-  version = "1.2.5";
+  version = "1.2.6";
 
   src = fetchFromGitHub {
     owner = "suyulin";
     repo = "afptool-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bu6iaKGoaj+EKLJ7ulYdKyKSQuaX++zXnyiwBNUKz3Q=";
+    hash = "sha256-5cNxwkL1oHWMcZus27yNeC/pT7DCWJ+GDUY16NZ/0yE=";
   };
 
-  cargoHash = "sha256-/AJ5UCrh3RYklrfQ7zb1N9n2rXsdPrvH+QGYnKGU1dc=";
+  cargoHash = "sha256-4Zvu+5BKYO5EWllbYgp31ZRPL0SBqDN0QOMjQUFZyUM=";
 
   meta = {
     description = "About Tools for Rockchip image unpack tool";

pkgs/by-name/aw/await/package.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "await";
-  version = "2.7.0";
+  version = "2.8.0";
 
   src = fetchFromGitHub {
     owner = "slavaGanzin";
     repo = "await";
     tag = finalAttrs.version;
-    hash = "sha256-dtFwlGFjuaUdbggcFviLTnv2zBY6ktK8BASiz4XUeoE=";
+    hash = "sha256-j8MuqU/Fv/bFJeNNkgMlWwmXlWGai9d54AeOyMhJ89I=";
   };
 
   nativeBuildInputs = [ installShellFiles ];

pkgs/by-name/bo/boilr/package.nix

@@ -39,16 +39,16 @@ let
 in
 rustPlatform.buildRustPackage.override { stdenv = clangStdenv; } rec {
   pname = "BoilR";
-  version = "1.9.6";
+  version = "1.10.1";
 
   src = fetchFromGitHub {
     owner = "PhilipK";
     repo = "BoilR";
     tag = "v.${version}";
-    hash = "sha256-qCY/I3ACrs5mWpgN+xmWi42rF9Mzqxxce2DIA+R1RNs=";
+    hash = "sha256-1//4P/Elx/bScyU9iAIc5ToNHSda1RapVnmv0KVklC0=";
   };
 
-  cargoHash = "sha256-9B2NcFO/Bj553yaOMi7oBZJTFtCQmBnJkU9nK+vjThU=";
+  cargoHash = "sha256-jclZq45yeOJ9F/tnJ9KhLAvkREER45qB08n0md0SHn0=";
 
   nativeBuildInputs = [
     perl

pkgs/by-name/ca/cargo-generate/package.nix

@@ -56,7 +56,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=hooks_and_rhai::it_fails_when_a_system_command_returns_non_zero_exit_code"
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    "--skip=git::utils::should_canonicalize"
+    "--skip=utils::tests::should_canonicalize"
   ];
 
   env = {

pkgs/by-name/ca/cargo-guppy/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-guppy";
-  version = "0.18.0";
+  version = "0.19.1";
 
   src = fetchFromGitHub {
     owner = "guppy-rs";
     repo = "guppy";
     tag = "guppy-${finalAttrs.version}";
-    hash = "sha256-y/5t1Mr0CvT/wNwZ696Uahiei3rpyAF8XOMSbQbh06w=";
+    hash = "sha256-MJyp66Q99rWZda4HNtGg4qsiiFVQuotrZ2F+dUKxvm4=";
   };
 
-  cargoHash = "sha256-tTX8cGY+6aL8MvZUgfKtMC8d+FKqAOpm5y6O9L3Gr5A=";
+  cargoHash = "sha256-ogAcGIF1IgfTTZtRdD/caguB2o5R7EcJy22YMa/aKts=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/cd/cdk8s-cli/package.nix

@@ -12,18 +12,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cdk8s-cli";
-  version = "2.207.58";
+  version = "2.207.62";
 
   src = fetchFromGitHub {
     owner = "cdk8s-team";
     repo = "cdk8s-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VWI8h1vD3upIAebp1wbPdr74/yRc3FJoIGbWvnMAQyw=";
+    hash = "sha256-1nWXAUm8kHXkbmsWnTQA+y5iy+Vbv+adxS+iXW1LM+M=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-tiisWp33e60vZFdVjbkGkWSEyiHck3eR7vR5iwzN2H8=";
+    hash = "sha256-QTHyL2foJFxxqjbqlfh/dRlxonK3m6CMSPnHWirEwhA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/cocoon/package.nix

@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "cocoon";
-  version = "0.11.3";
+  version = "0.11.4";
 
   src = fetchFromGitHub {
     owner = "haileyok";
     repo = "cocoon";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+Qpv8cZmAkhIZFM4fCT4oXBYHlXzqFDRMRErjjZG67A=";
+    hash = "sha256-6J0NKA5xiTBBhV/482/zycnpb0k49Ee9fJZjlXh1Qz0=";
   };
 
   ldflags = [
@@ -23,7 +23,7 @@ buildGoModule (finalAttrs: {
     "-X main.Version=${finalAttrs.version}"
   ];
 
-  vendorHash = "sha256-BFnZlUT4/jVdTC7bccKXLa9KiHaUM11J76DcFuBI7Ts=";
+  vendorHash = "sha256-ciMSqlkDyS3xt0TexDDPeRVE99Y4xUuINzvPZcI9+Is=";
 
   passthru = {
     tests = lib.optionalAttrs stdenvNoCC.hostPlatform.isLinux { inherit (nixosTests) cocoon; };

pkgs/by-name/co/code-cursor/sources.json

@@ -1,18 +1,18 @@
 {
-  "version": "3.21.9",
+  "version": "3.22.7",
   "vscodeVersion": "1.128.0",
   "sources": {
     "x86_64-linux": {
-      "url": "https://downloads.cursor.com/production/9998796a6096ce83d83a9332bfe7473b985db750/linux/x64/Cursor-3.21.9-x86_64.AppImage",
-      "hash": "sha256-+CwdR4EHuDyHq3UwHs54iY9xuQ9coG6gWopURYFfppg="
+      "url": "https://downloads.cursor.com/production/37076c6c3f9e253c0fa2305197e45befd13a2268/linux/x64/Cursor-3.22.7-x86_64.AppImage",
+      "hash": "sha256-eXBlkQAtu9/dWeq0cf5jgkHc8D0yc7foICDwZBvrxF0="
     },
     "aarch64-linux": {
-      "url": "https://downloads.cursor.com/production/9998796a6096ce83d83a9332bfe7473b985db750/linux/arm64/Cursor-3.21.9-aarch64.AppImage",
-      "hash": "sha256-33HIt8qjYaUTFkXCkpW6odZhfkDeWwfLjL3HqJRYWWA="
+      "url": "https://downloads.cursor.com/production/37076c6c3f9e253c0fa2305197e45befd13a2268/linux/arm64/Cursor-3.22.7-aarch64.AppImage",
+      "hash": "sha256-Qxp5lcNS2i9zZPNgVdmuRt0xehQTtA9MoH+imdmp6f0="
     },
     "aarch64-darwin": {
-      "url": "https://downloads.cursor.com/production/9998796a6096ce83d83a9332bfe7473b985db750/darwin/arm64/Cursor-darwin-arm64.dmg",
-      "hash": "sha256-xil/4NSrOME8oCRYsyjT3BVS5F7t5bDjdastsikEI3w="
+      "url": "https://downloads.cursor.com/production/37076c6c3f9e253c0fa2305197e45befd13a2268/darwin/arm64/Cursor-darwin-arm64.dmg",
+      "hash": "sha256-k1Lim9ULFWBO8+v+nSz5fdTaXcjiTeDgAnWVDbx2dVs="
     }
   }
 }

pkgs/by-name/cp/cpm-cmake/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "cpm-cmake";
-  version = "0.42.3";
+  version = "0.43.2";
 
   src = fetchFromGitHub {
     owner = "cpm-cmake";
     repo = "cpm.cmake";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-zNjcUbgz9ZQMbddTOis7BLeJqHmWqvEYTko4Z5PiHn8=";
+    hash = "sha256-ZmGM2UziK3zB4uszfJYhYvJGSDD7aF+F32yi+1ETebU=";
   };
 
   postPatch = ''

pkgs/by-name/dd/ddccontrol-db/package.nix

@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ddccontrol-db";
-  version = "20260915";
+  version = "20260922";
 
   src = fetchFromGitHub {
     owner = "ddccontrol";
     repo = "ddccontrol-db";
     tag = finalAttrs.version;
-    sha256 = "sha256-n538zzL8lRln6eLCJDivwh90RO2RZ7lykEDLVKV3Sa0=";
+    sha256 = "sha256-i5d/zvJVZpQ9EUXPbiT398hdfjC6jbES0UIM0Un3BQY=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/do/dorion/package.nix

@@ -35,19 +35,19 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dorion";
-  version = "6.13.1";
+  version = "6.13.2";
 
   src = fetchFromGitHub {
     owner = "SpikeHD";
     repo = "Dorion";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YyNDzxr+cHC3PL47mblhGH/syCUfxhVUB92rb1GsEbU=";
+    hash = "sha256-+NG2uOGoJ4oAcsyI7F0gmhXEjuw+QJOskAANk0ynx0c=";
   };
 
   cargoRoot = "src-tauri";
   buildAndTestSubdir = finalAttrs.cargoRoot;
 
-  cargoHash = "sha256-OsoDyaSCrun2hJHNhiqQ9wq1ydE9Zdx9bN9784aEYrw=";
+  cargoHash = "sha256-V8FHnZLz4K9sShqJbYgiFwXYmTawosKulUGgTvu7Gqo=";
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;

pkgs/by-name/eg/egctl/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "egctl";
-  version = "1.9.1";
+  version = "1.9.2";
 
   src = fetchFromGitHub {
     owner = "envoyproxy";
     repo = "gateway";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PszV+N0RqH06kDYvEwd1rhj8XS2+lnKZA2+fOMA2vwA=";
+    hash = "sha256-ujYgHKsXyUvq7fbq44QMvJwRopJpMQy3A2zEgTeQYNY=";
   };
 
-  vendorHash = "sha256-BJBNe5+ztc3WJ1RIvsbLGl0T4znlVNNg+AToXY16ixM=";
+  vendorHash = "sha256-bKwwecHenIx1GQi8IthZKM3QxRetPXdlzDzv+d3jDl0=";
   # Fix case-insensitive conflicts producing platform-dependent checksums
   # https://github.com/microsoft/go-mssqldb/issues/234
   proxyVendor = true;

pkgs/by-name/en/enpass-cli/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "enpass-cli";
-  version = "1.12.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "HazCod";
     repo = "enpass-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UwoJmANh2Gvz7FMydeP2uiflciAeQrUMGmXdOMpRFvw=";
+    hash = "sha256-cVPPBuluUvPnPAlF+OEMYOOTSdPGbJmI1iSRlYqveFQ=";
   };
 
-  vendorHash = "sha256-tgOo756kNKGvY87ioX81WngeNlRBVdAEL7PXbIdNS3Y=";
+  vendorHash = "sha256-U9tnzok21yCFPDZprsvqq0NaO07qPS0L+IgVtF2hpvM=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/fl/flatpak-builder-tools/package.nix

@@ -7,12 +7,12 @@
   enableDeno ? false,
 }:
 let
-  version = "0-unstable-2026-09-12";
+  version = "0-unstable-2026-09-21";
   src = fetchFromGitHub {
     owner = "flatpak";
     repo = "flatpak-builder-tools";
-    rev = "de2225a6dee4818c1339b3cdbf29f90c471fcb7e";
-    hash = "sha256-ih1Bq7MWHP6Vw1+mFoFE5rQpeDLKhldcfHTwQiyEM9I=";
+    rev = "41c20aa10819cdb2a4f3ca171758a96d1955c018";
+    hash = "sha256-h9FAazZz+oOaipXeO1guP3pNMFzs05cYmu+PqCnc39w=";
   };
 in
 buildEnv {

pkgs/by-name/ge/gelly/package.nix

@@ -19,16 +19,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "gelly";
-  version = "1.13.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "Fingel";
     repo = "gelly";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SYkyAMWoeI/tvtTYesz4ErZeGPeW2wY7zusHzLamtPw=";
+    hash = "sha256-yzZ8rHm7NHvleLs63b9BKST1VrLDOL3nfmjdNAHjLMo=";
   };
 
-  cargoHash = "sha256-ojCwBWe+fmWT/xs3M/EP+iJJgu1dFomocEGYmv1k7nM=";
+  cargoHash = "sha256-wUEya5nNFtEt4yQ9oS9fbgtUoIFwdCXIUZ7Rf7uZBTU=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/gi/git-town/package.nix

@@ -13,13 +13,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "git-town";
-  version = "24.0.0";
+  version = "24.1.0";
 
   src = fetchFromGitHub {
     owner = "git-town";
     repo = "git-town";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Es2FextJFPV3SVIIuZOv7EjUHwFar3C5wBMlWlhMu1M=";
+    hash = "sha256-GY/aec9agBahpTUtss+1/PCab4CJSFGd9hG3dSZLWXw=";
   };
 
   vendorHash = null;

pkgs/by-name/he/hebcal/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "hebcal";
-  version = "5.15.0";
+  version = "5.16.0";
 
   src = fetchFromGitHub {
     owner = "hebcal";
     repo = "hebcal";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tLusgxpTXgmaWystWjp5aexKxmvjnCkNEN3+XjaGYTc=";
+    hash = "sha256-toQezD8k9loMg2jsbe04dfgTL/WVGfeTZaUobyM1+vw=";
   };
 
   vendorHash = null;

pkgs/by-name/ia/iana-etc/package.nix

@@ -30,7 +30,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   meta = {
     homepage = "https://github.com/Mic92/iana-etc";
     description = "IANA protocol and port number assignments (/etc/protocols and /etc/services)";
-    platforms = lib.platforms.unix;
+    platforms = lib.platforms.all;
     license = lib.licenses.mit;
   };
 })

pkgs/by-name/in/infrastructure-agent/package.nix

@@ -6,16 +6,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "infrastructure-agent";
-  version = "1.80.3";
+  version = "1.80.4";
 
   src = fetchFromGitHub {
     owner = "newrelic";
     repo = "infrastructure-agent";
     rev = finalAttrs.version;
-    hash = "sha256-P/xfFstMs/6l82JKZCauFeTsM516YyyP55mBVMRNP+U=";
+    hash = "sha256-hyIVtO11kLc80XCCOzzilc82U+sd/lFPDqIEIdq7mmA=";
   };
 
-  vendorHash = "sha256-eAPW4hTYwyINrOlc+q2cFuGuU6xph34qx/TARazPnXg=";
+  vendorHash = "sha256-4n1mTT5DH2+wWcLPXSLNP1I6FYeE4jezMWmexZcnkOo=";
 
   ldflags = [
     "-s"

pkgs/by-name/in/intel-oneapi-toolkit/stdenv.nix

@@ -30,7 +30,12 @@ let
       chmod +x $out/bin/clang
     '';
 
-    passthru.isClang = true;
+    passthru = {
+      isClang = true;
+      langC = true;
+      # cc-wrapper adds libstdc++ include paths only when this is set.
+      langCC = true;
+    };
 
     # icpx rejects these flags for the SPIR-V device target (spir64-unknown-unknown).
     hardeningUnsupportedFlags = [

pkgs/by-name/jo/joypixels/package.nix

@@ -23,18 +23,19 @@ let
       fontFile = "joypixels-android.ttf";
     };
 
-  joypixels-free-license = {
-    spdxId = "LicenseRef-JoyPixels-Free";
+  joypixels-free-license = lib.licenses.mkLicense {
+    shortName = "JoyPixels-Free";
     fullName = "JoyPixels Free License Agreement";
     url = "https://cdn.joypixels.com/free-license.pdf";
     free = false;
   };
 
-  joypixels-license-appendix = with systemSpecific; {
-    spdxId = "LicenseRef-JoyPixels-NixOS-Appendix";
-    fullName = "JoyPixels ${capitalized} License Appendix";
-    url = "https://cdn.joypixels.com/distributions/${systemTag}/appendix/joypixels-license-appendix.pdf";
+  joypixels-license-appendix = lib.licenses.mkLicense {
+    shortName = "JoyPixels-NixOS-Appendix";
+    fullName = "JoyPixels ${systemSpecific.capitalized} License Appendix";
+    url = "https://cdn.joypixels.com/distributions/${systemSpecific.systemTag}/appendix/joypixels-license-appendix.pdf";
     free = false;
+    redistributable = true;
   };
 
   throwLicense = throw ''
@@ -101,20 +102,7 @@ stdenv.mkDerivation rec {
     '';
     homepage = "https://www.joypixels.com/fonts";
     hydraPlatforms = [ ]; # Just a binary file download, nothing to cache.
-    license =
-      let
-        free-license = joypixels-free-license;
-        appendix = joypixels-license-appendix;
-      in
-      with systemSpecific;
-      {
-        spdxId = "LicenseRef-JoyPixels-Free-with-${capitalized}-Appendix";
-        fullName = "${free-license.fullName} with ${appendix.fullName}";
-        url = free-license.url;
-        appendixUrl = appendix.url;
-        free = false;
-        redistributable = true;
-      };
+    license = lib.licenses.WITH joypixels-free-license joypixels-license-appendix;
     maintainers = with lib.maintainers; [
       toonn
       jtojnar

pkgs/by-name/ke/kew/package.nix

@@ -34,13 +34,13 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "kew";
-  version = "4.3.6";
+  version = "4.3.8";
 
   src = fetchFromGitHub {
     owner = "ravachol";
     repo = "kew";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Gp/A1UrbzjUFT2Og5OjaO1sHEcIYRkKSMluGdUBUA5g=";
+    hash = "sha256-BpfMOzTcXKM1xOX8O1GZWfQfX57OABIhbPDKTy3JaO4=";
   };
 
   postPatch = ''

pkgs/by-name/ku/kubernix/package.nix

@@ -2,17 +2,20 @@
   lib,
   fetchFromGitHub,
   rustPlatform,
+  versionCheckHook,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kubernix";
   version = "0.4.1";
 
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "saschagrunert";
     repo = "kubernix";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-LO6WXXNkUf1rkjRuSHRWtfHtCL9oj+36cewrRc/KLdw=";
+    hash = "sha256-LO6WXXNkUf1rkjRuSHRWtfHtCL9oj+36cewrRc/KLdw=";
   };
 
   cargoHash = "sha256-l1LMqGh7DGZAJdSRsbCqr1/5pA9rZYN8nJ3cMRuSR+Q=";
@@ -20,6 +23,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # Tests require network access
   doCheck = false;
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   meta = {
     description = "Single dependency Kubernetes clusters for local testing, experimenting and development";
     mainProgram = "kubernix";

pkgs/by-name/la/lazyworktree/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "lazyworktree";
-  version = "1.50.0";
+  version = "1.50.1";
 
   src = fetchFromGitHub {
     owner = "chmouel";
     repo = "lazyworktree";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UZ6sentKl0XkqdWOQhj/3sb6ArFfoboBD/vjGb9mVro=";
+    hash = "sha256-JLATYk1lGmMljMdfHnL6HOByRpxsMtj/SiUN4y2mQJg=";
   };
 
-  vendorHash = "sha256-1k0BBXmWeP4trSKhSmz2m25H1qmYlusj1evrK+4qLrQ=";
+  vendorHash = "sha256-Y46/ewBZqxLgxsFtAt2lh+jIwwLnNiso7tY4tj5nqec=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/le/lens/package.nix

@@ -8,16 +8,16 @@
 let
 
   pname = "lens-desktop";
-  version = "2026.9.20601";
+  version = "2026.9.181013";
 
   sources = {
     x86_64-linux = {
       url = "https://api.k8slens.dev/binaries/Lens-${version}-latest.x86_64.AppImage";
-      hash = "sha512-21OGo4uXHjcvGNNiiy6hWm+tEJc4yFaYvVfXK89oH5oSrEpIacNlZ8I95tI0yjJQsuZEHBN9wBD+Zm6WgO4hFg==";
+      hash = "sha512-Y4JGfC/Lxk5Xea+6dffRhVMk2pNzReQPgXGB9wpoPPX5KCDV5LGVmywhtIrMSsUHnDlx3h2qHY6ez3wQkehXMw==";
     };
     aarch64-darwin = {
       url = "https://api.k8slens.dev/binaries/Lens-${version}-latest-arm64.dmg";
-      hash = "sha512-kCL3jZHB644fRlwbmqNkusvC9k9EAi6EWsH8bEc9isGC4vwShkYw5Fu7U53nT6nh6wxba5aDMk9ZJWA3tB8Tgw==";
+      hash = "sha512-qA+5XKC62c9vNySZEqofwm6Dl0KKMIFS85en3oNVklnIpti7CxjINAiXDDu9+8EtffDjjbP7dRQpsZsEqx9iHQ==";
     };
   };
 

pkgs/by-name/li/libedgetpu/package.nix

@@ -60,7 +60,7 @@ stdenv.mkDerivation {
   ];
 
   buildInputs = [
-    abseil-cpp
+    (abseil-cpp.override { cxxStandard = "17"; })
     libusb1
     flatbuffers_23_5_26
   ];

pkgs/by-name/li/libfastjson/package.nix

@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libfastjson";
-  version = "1.2304.0";
+  version = "1.2609.0";
 
   src = fetchFromGitHub {
     owner = "rsyslog";
     repo = "libfastjson";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-WnM6lQjHz0n5BwWWZoDBavURokcaROXJW46RZen9vj4=";
+    hash = "sha256-X2V9yeObar7yE4dss/tW+l3QMnbI4lVl8KdZng1cSQ0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/li/libkrun/package.nix

@@ -35,13 +35,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "libkrun" + lib.optionalString (variant != null) "-${variant}";
-  version = "1.19.0";
+  version = "1.19.5";
 
   src = fetchFromGitHub {
     owner = "libkrun";
     repo = "libkrun";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-g4u34sGdgv6mRRry9b5TAXSx+pmVwCNSD3YNtr6qRxo=";
+    hash = "sha256-VUV9zlegS4IIJI0fbzkxc6Lz5jvr3S3n4nEnVgF3YMQ=";
   };
 
   outputs = [
@@ -51,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-rxdaqEKDDMxFwRuX6kLhqGyFXJTz+Bx4mJJhYL5nPgU=";
+    hash = "sha256-lLdeTZbDQEp+e2urEmsVOzQG0KTNicv/31DFhYeFxFo=";
   };
 
   # Make sure libkrunfw can be found by dlopen()

pkgs/by-name/li/liblouis/package.nix

@@ -14,7 +14,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "liblouis";
-  version = "3.38.0";
+  version = "3.39.0";
 
   outputs = [
     "out"
@@ -29,7 +29,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "liblouis";
     repo = "liblouis";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-OmYMldo2id2HKAM0Hxi6r86khSUnzu22CkJhGBhaaL8=";
+    hash = "sha256-ovDQ8wGOr2vw87DcVCI/RqA7jbZOhFB6Uc9IM2IKPDk=";
   };
 
   strictDeps = true;

pkgs/by-name/li/libopenshot-audio/package.nix

@@ -17,13 +17,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libopenshot-audio";
-  version = "1.0.0";
+  version = "1.0.1";
 
   src = fetchFromGitHub {
     owner = "OpenShot";
     repo = "libopenshot-audio";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-xpMs3RkPCFvHE/F1bUxWbOh3ZWnHw8h04YtxlbP0PCs=";
+    hash = "sha256-t7yj9iVS0y5zO/1Fu7QYO8pEPyCz5uZhrm3A/SfzKzA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/li/libretroPackages/cores/bsnes.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "bsnes";
-  version = "0-unstable-2026-09-04";
+  version = "0-unstable-2026-09-19";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "bsnes-libretro";
-    rev = "260f5234410d0899f8446882c63d17f891b686e0";
-    hash = "sha256-4wRwgH5JqhI+5U2E0VJbGxeOGoVu4w8szoocWpUDsaI=";
+    rev = "05439f96121d2b9d7ad7a5fc1f29d7eebdcc8c43";
+    hash = "sha256-ayvg/oBDr2atxRIQuMVcj2XKeQdJe8VeU7aZSqHwz5Q=";
   };
 
   makefile = "Makefile";

pkgs/by-name/li/libretroPackages/cores/fceumm.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "fceumm";
-  version = "0-unstable-2026-08-22";
+  version = "0-unstable-2026-09-26";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "libretro-fceumm";
-    rev = "236ccdfc911e84c60fea6b9d0699c2d440a8de14";
-    hash = "sha256-BCue1mINcrIjc+45T/JpTyxhW669pUl5HgzoMPbaDj8=";
+    rev = "7a542dab1e87679921962a9f056186eca425c0c2";
+    hash = "sha256-hW+6G55jatvPswkJuWvuFcQUwo2mO8bWboUXhZgdz24=";
   };
 
   meta = {

pkgs/by-name/li/libretroPackages/cores/flycast.nix

@@ -8,13 +8,13 @@
 }:
 mkLibretroCore {
   core = "flycast";
-  version = "0-unstable-2026-09-15";
+  version = "0-unstable-2026-09-26";
 
   src = fetchFromGitHub {
     owner = "flyinghead";
     repo = "flycast";
-    rev = "8933f9fe0ccd3f7cbe2e77717ea3a6db8b472129";
-    hash = "sha256-6XBCWmyVRSbfAbaxvFpe6/39kPYrqvefsjebXZu7yuY=";
+    rev = "ea087b9140ff5a3b1809e090da0f8d644ee2db95";
+    hash = "sha256-jZBnVX4x9v5hEpK7gzZTk9Qs2EeVqREQle57kPjuWUE=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/li/libretroPackages/cores/fmsx.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "fmsx";
-  version = "0-unstable-2026-09-06";
+  version = "0-unstable-2026-09-26";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "fmsx-libretro";
-    rev = "ee14f0df43765e399ca018ad2c2b3eaaf96785e7";
-    hash = "sha256-EKGFUo+AmS2sho9FDWD5Pxa/SWeBVrAK/5jqWsMfSrk=";
+    rev = "4de11755ce4f196ac1c8a7bb20bb4eccbc87a7d4";
+    hash = "sha256-yv/NizFz6m7j6PVY+S6egN9837Dq8YGZ3AWk3sRdOmg=";
   };
 
   makefile = "Makefile";

pkgs/by-name/li/libretroPackages/cores/swanstation.nix

@@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
   core = "swanstation";
-  version = "0-unstable-2026-08-11";
+  version = "0-unstable-2026-09-17";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "swanstation";
-    rev = "7f69c199ed88d5723f71dd3a6e9c1b7a45b535a6";
-    hash = "sha256-16ZdvG/N31vCC/kI8INH1PkmdfzHhQ2pnrUrzblCayg=";
+    rev = "b6c30a7b270a3f68ac41f268eafdfa678d17dea2";
+    hash = "sha256-b/vrvb23QOkZJb6GIpNxwYu5SpJ0s1NjdSAFJlcQMk0=";
   };
 
   extraNativeBuildInputs = [ cmake ];

pkgs/by-name/ma/mackerel-agent/package.nix

@@ -10,20 +10,20 @@
 
 buildGoModule (finalAttrs: {
   pname = "mackerel-agent";
-  version = "0.87.0";
+  version = "0.87.1";
 
   src = fetchFromGitHub {
     owner = "mackerelio";
     repo = "mackerel-agent";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-4a1rOfm4hDwIQBiLJVzwbognv7iPzZOKDSBcqX4cR5E=";
+    sha256 = "sha256-USuRyit/XEuvdzKweNBat09qwXn+rtsxzqND7KvHUTU=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
   nativeCheckInputs = lib.optionals (!stdenv.hostPlatform.isDarwin) [ net-tools ];
   buildInputs = lib.optionals (!stdenv.hostPlatform.isDarwin) [ iproute2 ];
 
-  vendorHash = "sha256-Je8yd551MXmx/VQl1Qu1P8i3GvDiJKr1aK2b5OotZrM=";
+  vendorHash = "sha256-gTeH3aGKdfyxfl9zY5i5RP2gZCXT9eFSpqr1U9XXWy4=";
 
   subPackages = [ "." ];
 

pkgs/by-name/ma/macos-defaults/package.nix

@@ -6,16 +6,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "macos-defaults";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "dsully";
     repo = "macos-defaults";
     tag = finalAttrs.version;
-    hash = "sha256-dSZjMuw7ott0dgiYo0rqekEvScmrX6iG7xHaPAgo1/E=";
+    hash = "sha256-SIar0QceNQs2tEYIcwwG2u+2Aq3IieOm4sIEX6hXilk=";
   };
 
-  cargoHash = "sha256-xSg6WAkFPS8B1G4WqMW77egCMmOEo3rK2EKcrDYaBjA=";
+  cargoHash = "sha256-0jB9lpguS40n1CrfJsnyZQvfnprC8pCx27xu1RRjaqI=";
 
   checkFlags = [
     # accesses home dir

pkgs/by-name/ma/mango/package.nix

@@ -27,13 +27,13 @@ stdenv.mkDerivation (finalAttrs: {
   __structuredAttrs = true;
   strictDeps = true;
   pname = "mango";
-  version = "0.17.3";
+  version = "0.17.4";
 
   src = fetchFromGitHub {
     owner = "mangowm";
     repo = "mango";
     tag = finalAttrs.version;
-    hash = "sha256-o7azS0ibaWG4MGGZ+JZDsJe4JpCoPX78lTRuH+jioU4=";
+    hash = "sha256-aDjYwXuX+TKZya7UCNgv+O/chCYIbATHpAOKl9xaNdk=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ma/markdownlint-cli2/package.nix

@@ -8,16 +8,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "markdownlint-cli2";
-  version = "0.23.2";
+  version = "0.23.3";
 
   src = fetchFromGitHub {
     owner = "DavidAnson";
     repo = "markdownlint-cli2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nWKkQdzwm+jLoZYs25USsdbRwXj++aS1tif2ro4FsBI=";
+    hash = "sha256-LqnTcSu700XfDoBw5Lp18gZFBrOg6mXOBg3uc3RLV98=";
   };
 
-  npmDepsHash = "sha256-cUwSR+B1MA6wciAemCxevT1VrtSEGzPUpBKzZzMul2E=";
+  npmDepsHash = "sha256-h1QyvmdgwykNyyKT9YyfcMe5K1uL86TSlY8ihXENHng=";
 
   postPatch = ''
     rm -f .npmrc

pkgs/by-name/md/mdbook-rss-feed/package.nix

@@ -14,17 +14,17 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mdbook-rss-feed";
-  version = "1.10.2";
+  version = "2.0.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "saylesss88";
     repo = "mdbook-rss-feed";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-eJ4gYozRVgGvwRuMuYnCeeW/yxa3PWF7aN39vyGVr2s=";
+    hash = "sha256-1NQ9prk+MvTj7vMJelCfHhs/0/HiHk0/tQURPVjtYh4=";
   };
 
-  cargoHash = "sha256-6/hla7JdBrmcXkdGQJ98REYp0y1Q2PCGRj1DK6ML+Ms=";
+  cargoHash = "sha256-4qZQ2EH+GBb08GwNnTDAZsjVK6EPKUqL/+wrMH88D4c=";
 
   inherit buildFeatures;
 

pkgs/by-name/mi/miller/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "miller";
-  version = "6.21.0";
+  version = "6.22.0";
 
   src = fetchFromGitHub {
     owner = "johnkerl";
     repo = "miller";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-E/O+uzYaiHBxCOZ0VCmpNlJZDaEBKlCtKAXgm5iY/ps=";
+    sha256 = "sha256-VIdX7yO45jjaYApNCays4knwLIjRG8GNkWeNGXKIs6M=";
   };
 
   outputs = [
@@ -20,7 +20,7 @@ buildGoModule (finalAttrs: {
     "man"
   ];
 
-  vendorHash = "sha256-22RaVj9z7hrXKoKtEDjjUL1gYObhFRvstTIRtDtyD5U=";
+  vendorHash = "sha256-9ioeIPtEWmC3vY3rIPdRl3+0a2cKpH7VhmLVi7ioQK8=";
 
   postInstall = ''
     mkdir -p $man/share/man/man1

pkgs/by-name/mo/mochi/package.nix

@@ -12,14 +12,14 @@
 
 let
   pname = "mochi";
-  version = "26.8.2";
+  version = "26.9.2";
 
   linux = appimageTools.wrapType2 rec {
     inherit pname version meta;
 
     src = fetchurl {
       url = "https://download.mochi.cards/releases/Mochi-${version}.AppImage";
-      hash = "sha256-4UHdao4mj7BjS2wMZv9f1+gKjgsihbMvpHmqI6Pvhq4=";
+      hash = "sha256-uhsmIhuub3cKiOozfdVbD3yuHfEx+bWypt66kMIROCg=";
     };
 
     appimageContents = appimageTools.extract { inherit pname version src; };
@@ -42,7 +42,7 @@ let
 
     src = fetchurl {
       url = "https://download.mochi.cards/releases/Mochi-${version}-arm64.dmg";
-      hash = "sha256-xmQNM0uk0FQYnJ+afxsD6GoR6H7tfE9tBk2Gt2O0HGc=";
+      hash = "sha256-DqniDFVgGlKQn8sdddzT2fzR7TN87gBL97ZcU0pRrHw=";
     };
 
     sourceRoot = ".";

pkgs/by-name/mp/mpris-scrobbler/package.nix

@@ -17,13 +17,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mpris-scrobbler";
-  version = "0.5.9";
+  version = "0.5.10";
 
   src = fetchFromGitHub {
     owner = "mariusor";
     repo = "mpris-scrobbler";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-iXyqVktwvxFqK+1GyEOUTra5Jb2ex5b4eOm1eeYKYf4=";
+    sha256 = "sha256-8QSYiM8kbAq5q7pgM800AdwT0rp2Z7NGWbjlURYVz7o=";
   };
 
   postPatch = ''

pkgs/by-name/np/npc/package.nix

@@ -8,7 +8,7 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "npc";
-  version = "1.0.0";
+  version = "1.0.1";
 
   __structuredAttrs = true;
 
@@ -16,10 +16,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "samestep";
     repo = "npc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qgg1WwxcpqxmK+xchIWbGQ/EXUJdYje9++CziTFnmtA=";
+    hash = "sha256-zimu94nLhfOa7kKBqpkOlGYvKN6NOIq4dr3qHQXHMG8=";
   };
 
-  cargoHash = "sha256-cxkVBKqFmlHjUrmx2jbGmGgrrZLpVmi/o6HzDKckudQ=";
+  cargoHash = "sha256-HqQu/Gt5S9iBgHCFPLFlCOGzPM121Ai4HKhh/h49rZA=";
 
   env = {
     GIT_BIN = lib.getExe git;

pkgs/by-name/oa/oauth2c/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "oauth2c";
-  version = "1.21.0";
+  version = "1.21.1";
 
   src = fetchFromGitHub {
     owner = "SecureAuthCorp";
     repo = "oauth2c";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-IYZYdx8oe5L7zB6HwtSOWXe+JveMWiORLN+j8h3pQug=";
+    hash = "sha256-pZ7TgmjNMUJSLvKBu4eo8HbGIjtoHHjXhdyMsW/Nkjo=";
   };
 
   vendorHash = "sha256-H5iRmX6Wcef7IVOY5NQ+jX9zyJCzZ34Haf7cIflK5GY=";

pkgs/by-name/ol/ollama/package.nix

@@ -111,12 +111,12 @@ let
   # vendored in-tree. Pre-stage the pin (tracks upstream's
   # `LLAMA_CPP_VERSION` file) so the FetchContent step uses our copy
   # instead of trying to clone over the network in the sandbox.
-  llamaCppVersion = "b10969";
+  llamaCppVersion = "b11081";
   llamaCppSrc = fetchFromGitHub {
     owner = "ggml-org";
     repo = "llama.cpp";
     tag = llamaCppVersion;
-    hash = "sha256-kEkmOPM475O625g3AkQc+sXSHQSHqE7cacoV7KJv+08=";
+    hash = "sha256-yI/oNTMzOO9Cu0xVp0YYbbgvlwTggJAPJMooDfVnMvU=";
   };
 
   wrapperOptions = [
@@ -152,13 +152,13 @@ let
 in
 goBuild (finalAttrs: {
   pname = "ollama";
-  version = "0.34.3";
+  version = "0.34.4";
 
   src = fetchFromGitHub {
     owner = "ollama";
     repo = "ollama";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+3T1hOak7X+s7glIQVMwy2yTAwLbiPJt4IzcLVfOdfE=";
+    hash = "sha256-Wg1lVSJjN67TSIX75Xp/QyiuCW+HirpdJZIm92J0j6o=";
   };
 
   vendorHash = "sha256-45FfI47tNHBPYOBLRrwuhADCUtkjAhlFrExlEy9piMI=";

pkgs/by-name/op/openlibm/package.nix

@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "openlibm";
-  version = "0.8.7";
+  version = "0.8.8";
 
   src = fetchFromGitHub {
     owner = "JuliaMath";
     repo = "openlibm";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-fSEszCJ1PXkSydTLk8KAyu7zffUrKf+7a1ZDf3Wl/lE=";
+    sha256 = "sha256-vBy7VhYPmmaIbDN6SAXkbbM2xDh1XiIqEnYpnzop+Zg=";
   };
 
   nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [

pkgs/by-name/pc/pcloud/package.nix

@@ -41,13 +41,13 @@
 
 let
   pname = "pcloud";
-  version = "2.2.1";
-  code = "XZopbc5ZpqOBs9mkVRk4zDHD7TjDJpQBcfzk";
+  version = "2.3.0";
+  code = "XZrYdRJZLS6RF4kf6Jy6GFr4jqkc4S34Rlgy";
 
   # Archive link's codes: https://www.pcloud.com/release-notes/linux.html
   src = fetchzip {
     url = "https://api.pcloud.com/getpubzip?code=${code}&filename=pcloud-${version}.zip";
-    hash = "sha256-/T2AcvK2pxu+/f1ehheSE4CaXMobzdbA+AJ6SKQowVw=";
+    hash = "sha256-aeZHTtqw7ml8k1GZt013WG3GFVXfIzGhEDdBKMkzpj4=";
   };
 
 in

pkgs/by-name/pl/plakar/package.nix

@@ -11,7 +11,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "plakar";
-  version = "1.1.6";
+  version = "1.1.7";
 
   # to avoid having all the Test(Get|Set|Validate)Service.* tests fail on darwin
   __darwinAllowLocalNetworking = true;
@@ -22,10 +22,10 @@ buildGoModule (finalAttrs: {
     owner = "PlakarKorp";
     repo = "plakar";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AnVhWvfE2H5GfsgZyS14nla4vWZy7iIlD3lBP+LAJvA=";
+    hash = "sha256-cbfPWNlTcpQsjd3a1aE+wXos5EN8b96fpA2Cz+qzyR4=";
   };
 
-  vendorHash = "sha256-s/4vTHFFfOuGnVc3FK0B5aa9kRATr356/mGydw4cMng=";
+  vendorHash = "sha256-RQ1HhWL33Zi5n8G6RerLLgE2YJk/7HD4k1yiK+sQTBU=";
 
   # Remove in next next release
   patches = [
@@ -35,13 +35,14 @@ buildGoModule (finalAttrs: {
       includes = [ "subcommands/backup/backup.go" ];
       hash = "sha256-9uxkXpuWs758xlu3afANB14hqhVut7agvIeOlcm+98k=";
     })
+    (fetchpatch {
+      name = "api-add-test-helpers.patch";
+      url = "https://github.com/PlakarKorp/plakar/commit/e4153a448174e9d9df9f446560e303d89c48dd10.patch";
+      includes = [ "api/helpers_test.go" ];
+      hash = "sha256-XsP83iWMFyFFVSjcXsckk3QMLLoJcrVCmvPCe3BlNIQ=";
+    })
   ];
 
-  # broken test introduce in 1.1.6
-  postPatch = ''
-    rm login/completion_code_test.go
-  '';
-
   nativeBuildInputs = [
     installShellFiles
     makeBinaryWrapper

pkgs/by-name/po/poco/package.nix

@@ -20,12 +20,12 @@
 stdenv.mkDerivation rec {
   pname = "poco";
 
-  version = "1.15.3";
+  version = "1.15.4";
 
   src = fetchFromGitHub {
     owner = "pocoproject";
     repo = "poco";
-    hash = "sha256-mUONqjbKHvdsTM6zk9/QLEr1lVV6f9I/shLW2B8iqMk=";
+    hash = "sha256-IpBwGwPY873EqWXOYFOBiuNrJBu1r+dBTOByHZ9Lnhg=";
     tag = "poco-${version}-release";
   };
 

pkgs/by-name/po/poetry/plugins/poetry-plugin-export.nix

@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "poetry-plugin-export";
-  version = "1.10.0";
+  version = "1.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "python-poetry";
     repo = "poetry-plugin-export";
     tag = version;
-    hash = "sha256-JFP44lMmJyS55dvMtxKvqctJ2Dt1NUJ+V4un/FHkIWw=";
+    hash = "sha256-/6N/30SK8qdztm7/FrwVqkolVIDxVTt9xxJdC9RcnOg=";
   };
 
   build-system = [

pkgs/by-name/pr/protonup-rs/package.nix

@@ -6,7 +6,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "protonup-rs";
-  version = "0.15.0";
+  version = "0.15.1";
 
   __structuredAttrs = true;
 
@@ -14,10 +14,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "auyer";
     repo = "protonup-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fEDrWc3IXRuEV8bqtU366Dw9WiQ9+YMC9ByDYeUy//s=";
+    hash = "sha256-b4ZYHoJoGayt2jTFMBaLP8UrVqKQDNXzM9/kLbkSgaA=";
   };
 
-  cargoHash = "sha256-bbt+EJfhIf95LFDzZXKsAi14RwqEy+IOGCtrsjqOUOU=";
+  cargoHash = "sha256-j4eWSQUIsH4E45NgMLIWA+IpyBLh3IJwLoXIr8wSEaY=";
 
   checkFlags = [
     # Requires internet access

pkgs/by-name/py/pybugz/package.nix

@@ -6,14 +6,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pybugz";
-  version = "0.14";
+  version = "0.15";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "williamh";
     repo = "pybugz";
     tag = finalAttrs.version;
-    hash = "sha256-rhiCQPSh987QEM4aMd3R/7e6l+pm2eJDE7f5LckIuho=";
+    hash = "sha256-NwIZYcm+9+wsToIHf1bHotZm5lA0y2OeTGSmREzj17s=";
   };
 
   build-system = [ python3Packages.flit-core ];

pkgs/by-name/rb/rbspy/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rbspy";
-  version = "0.51.0";
+  version = "0.53.0";
 
   src = fetchFromGitHub {
     owner = "rbspy";
     repo = "rbspy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xxp1MBoStZS6UAU7psZ5jl9dSQuSTa+sB8Miil8r/Ao=";
+    hash = "sha256-lrTy7AADpwzIj5TO+4tQ+SpDCxi85GQKCVNUU0HOuwo=";
   };
 
-  cargoHash = "sha256-y/8vWSILNOdmC14B2jwPuznSRK907mSFGmqL16Y0/rA=";
+  cargoHash = "sha256-6VJP9YQI46SlMq0k0k+LtUitHS7/kxA/O9jIVrUAmvg=";
 
   doCheck = true;
 

pkgs/by-name/re/readsb/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "readsb";
-  version = "3.16.16";
+  version = "3.16.17";
 
   src = fetchFromGitHub {
     owner = "wiedehopf";
     repo = "readsb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-n5iFF/uWHYzl9CXYHxHNXdtKo2fiFRf374WdMqh23JU=";
+    hash = "sha256-iEnD2ivfkSwyCr18yYEuRv/8Vc7Tzt4Iq71ZmbgTHwE=";
   };
 
   strictDeps = true;

pkgs/by-name/re/retext/package.nix

@@ -10,7 +10,6 @@
   # available.
   enchantAspellDicts ? with aspellDicts; [
     en
-    en-computers
   ],
 }:
 

pkgs/by-name/sa/sacad/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sacad";
-  version = "3.0.1";
+  version = "3.0.2";
 
   src = fetchFromGitHub {
     owner = "desbma";
     repo = "sacad";
     tag = finalAttrs.version;
-    hash = "sha256-dzVppb6Lg/yjLrPAwII/GMy+56jzaWn0WS7vRZOXkgU=";
+    hash = "sha256-ViiIDkew1C2leADGbGldtKfAenafABP2UUlMzaj4ixA=";
   };
 
-  cargoHash = "sha256-tySgM7j26vztPOGkIq1kQeZn6YwDbk9mt3SEg94SW2o=";
+  cargoHash = "sha256-39xtrZbTZPsNQ7rvgftaH6kSPF/qjQMzwuAmbj47j08=";
 
   # Tests require internet connection.
   doCheck = false;

pkgs/by-name/si/signalbackup-tools/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "signalbackup-tools";
-  version = "20260822";
+  version = "20260927";
 
   src = fetchFromGitHub {
     owner = "bepaald";
     repo = "signalbackup-tools";
     tag = finalAttrs.version;
-    hash = "sha256-R67QaKN5fitaz1bVbdoHXm9XNsPW918b102rk6vRRgs=";
+    hash = "sha256-XkRlSsyHVBgEOfuHlpD9lSPBfY0W3/FozBufWUvg8go=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/si/sioyek/package.nix

@@ -15,13 +15,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "sioyek";
-  version = "2.0.0-unstable-2026-08-18";
+  version = "2.0.0-unstable-2026-09-24";
 
   src = fetchFromGitHub {
     owner = "ahrm";
     repo = "sioyek";
-    rev = "d0b2c1915ececf8394c355b9e4dcdd675154f5d0";
-    hash = "sha256-Mun68PZXpSuU8xzo0wmBbQgGwGoLPkfDhgz6dKxeIDI=";
+    rev = "f4609bfbfd53aaa9bb0ca70744df54ebf768fddf";
+    hash = "sha256-XgH2h4QaVjypAteR290PswTibNMUY9b5xYGM+rUr5mo=";
   };
 
   buildInputs = [

pkgs/by-name/sk/skate/package.nix

@@ -6,17 +6,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "skate";
-  version = "1.0.1";
+  version = "1.1.0";
 
   src = fetchFromGitHub {
     owner = "charmbracelet";
     repo = "skate";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Ihzcto41ltV5LQjLP9AF5XGl5b6QDbgZ/q4BMzfrDC8=";
+    hash = "sha256-BswVm5YH8TR0svPFWsIiNHLIQGqdXfysjy0KwZZ6Io8=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-H0j0za/+pNEYQAfTvLcECU7jt+2HJMJRcK+n/GbLNO0=";
+  vendorHash = "sha256-kIENDHcO/aLEfzJv1dCDSb0NmZf0/khIn0qqlxiFS1c=";
 
   ldflags = [
     "-s"

pkgs/by-name/st/stalwart-cli/package.nix

@@ -40,7 +40,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ];
     mainProgram = "stalwart-cli";
     maintainers = with lib.maintainers; [
-      giomf
       debtquity
     ];
   };

pkgs/by-name/st/stump/package.nix

@@ -20,13 +20,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stump";
-  version = "0.1.7";
+  version = "0.1.10";
 
   src = fetchFromGitHub {
     owner = "stumpapp";
     repo = "stump";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ERERTzoh0RoWtVNrOejiyFu7ZmSVgUVGFaTsj36Je48=";
+    hash = "sha256-MV9vhY15JgiCDN5J62AjI2uSkcM+cYjlT5hocxQXSOA=";
   };
 
   frontend = stdenv.mkDerivation (_: {
@@ -35,7 +35,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
     yarnOfflineCache = fetchYarnDeps {
       yarnLock = finalAttrs.src + "/yarn.lock";
-      hash = "sha256-x5aZLRhNmoxcrMOQNvNDfuJCfc0ezYazVGm17v3CwqE=";
+      hash = "sha256-eKp7rRuo1kk8Nq7mK9JwvliUdaV8L03SoKAqXGQfWLg=";
     };
 
     nativeBuildInputs = [
@@ -60,7 +60,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   __structuredAttrs = true;
 
-  cargoHash = "sha256-4qCxyoo1WyurXLEw5Nq291Tglds0Lg1LGHfgZxsoZBQ=";
+  cargoHash = "sha256-eKS4Cax2HCPpeyjuHRFJy42I8KTwhv1oNH4jKaN+2dQ=";
 
   cargoBuildFlags = [
     "--package"

pkgs/by-name/su/superfile/package.nix

@@ -6,53 +6,61 @@
   nix-update-script,
   writableTmpDirAsHomeHook,
   exiftool,
+  zoxide,
 }:
-let
-  version = "1.3.3";
-  tag = "v${version}";
-in
-buildGoModule {
+
+buildGoModule (finalAttrs: {
   pname = "superfile";
-  inherit version;
+  version = "1.6.0";
 
   src = fetchFromGitHub {
     owner = "yorukot";
     repo = "superfile";
-    inherit tag;
-    hash = "sha256-A1SWsBcPtGNbSReslp5L3Gg4hy3lDSccqGxFpLfVPrk=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-JETdQ42vGPnpviCAR29BSdBTG+huWRr5syN5NysnAlo=";
   };
 
-  vendorHash = "sha256-sqt0BzJW1nu6gYAhscrXlTAbwIoUY7JAOuzsenHpKEI=";
+  vendorHash = "sha256-d2Yo8fWJ2fj7RJrnktljY6TkEPq6Tnbdh2BM4DIAr0E=";
 
   ldflags = [
     "-s"
     "-w"
   ];
 
-  nativeBuildInputs = [ exiftool ];
+  # TestLayout test does not support parallel testing
+  enableParallelBuilding = false;
+
+  __structuredAttrs = true;
+
+  nativeBuildInputs = [
+    exiftool
+    zoxide
+  ];
 
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
 
-  # Upstream notes that this could be flaky, and it consistently fails for me.
-  checkFlags = [
-    "-skip=^TestReturnDirElement/Sort_by_Date$"
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    # Only failing on nix darwin. I suspect this is due to the way
-    # darwin handles file permissions.
-    "-skip=^TestCompressSelectedFiles"
-  ];
+  preCheck = ''
+    mkdir -p $HOME/.local/share/superfile
+
+    # TestLayout expects at least one entry
+    touch "$HOME/test-file"
+
+    # TestFileDelete/Move_to_trash needs .Trash available
+    ${lib.optionalString stdenv.hostPlatform.isDarwin ''
+      mkdir -p "$HOME/.Trash"
+    ''}
+  '';
 
   passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Pretty fancy and modern terminal file manager";
     homepage = "https://github.com/yorukot/superfile";
-    changelog = "https://github.com/yorukot/superfile/blob/${tag}/changelog.md";
+    changelog = "https://github.com/yorukot/superfile/blob/${finalAttrs.src.tag}/changelog.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       redyf
     ];
     mainProgram = "superfile";
   };
-}
+})

pkgs/by-name/tt/ttf_bitstream_vera/package.nix

@@ -21,10 +21,5 @@ stdenvNoCC.mkDerivation rec {
     runHook postInstall
   '';
 
-  meta.license = {
-    shortName = "bitstream-vera";
-    fullName = "Bitstream Vera Fonts Copyright";
-    free = false; # Cannot be sold by itself
-    redistributable = true;
-  };
+  meta.license = lib.licenses.bitstreamVera;
 }

pkgs/by-name/un/unnaturalscrollwheels/package.nix

@@ -7,11 +7,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "unnaturalscrollwheels";
-  version = "1.4.0";
+  version = "1.4.2";
 
   src = fetchurl {
     url = "https://github.com/ther0n/UnnaturalScrollWheels/releases/download/${finalAttrs.version}/UnnaturalScrollWheels-${finalAttrs.version}.dmg";
-    hash = "sha256-KJQnV/XWM+JpW3O29nyGo64Jte6Gw3I54bXfFSAkUrc=";
+    hash = "sha256-t1w+XrsT+UBT5ZPTP04QGTJ9fLYDQiFL6uZaq3hD64g=";
   };
   sourceRoot = ".";
 

pkgs/by-name/us/usql/package.nix

@@ -11,13 +11,13 @@
 
 buildGo126Module (finalAttrs: {
   pname = "usql";
-  version = "0.21.5";
+  version = "0.21.6";
 
   src = fetchFromGitHub {
     owner = "xo";
     repo = "usql";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ikDmV5OoiiUTolIxkiPG0UIcgrDJrR3Xq7MHU4GthsM=";
+    hash = "sha256-GBCu2zPQNRMuP6uispht9Cuff+e1lpQuu+qG1Ndzc9M=";
   };
 
   buildInputs = [

pkgs/by-name/va/vastai/package.nix

@@ -18,7 +18,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "vastai";
-  version = "1.5.6";
+  version = "1.8.2";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -26,7 +26,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "vast-ai";
     repo = "vast-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ovxFLPBPHJi/DMauS0Yuk9HWfcS+K/gJTAwPf/MLdoA=";
+    hash = "sha256-vkw1DKITaFW/TzLmabn+07LS6/qsL9JrYZFGGHkPUnw=";
   };
 
   patches = [

pkgs/by-name/vp/vpxtool/package.nix

@@ -8,17 +8,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "vpxtool";
-  version = "0.34.1";
+  version = "0.34.6";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "francisdb";
     repo = "vpxtool";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-RnsoN/i/xvmeQ5tyNdkjn77WKGcVLS/seb3PamTLzVc=";
+    hash = "sha256-rO70j+St4T8/ki405VqeGwmP73/prymEw79np7pIuSg=";
   };
 
-  cargoHash = "sha256-E+YxfnUdzNaiJlmIWNPX8Sf5m9M2xvrgpmjwWth0aZo=";
+  cargoHash = "sha256-PD9yyJ1yos0qywsGj8HapWkneOxG/0TesVATudasjTE=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

pkgs/by-name/wa/wally-cli/package.nix

@@ -19,11 +19,12 @@ buildGoModule (finalAttrs: {
   src = fetchFromGitHub {
     owner = "zsa";
     repo = "wally-cli";
-    rev = "${finalAttrs.version}-linux";
-    sha256 = "NuyQHEygy4LNqLtrpdwfCR+fNy3ZUxOClVdRen6AXMc=";
+    # The newer of two 2.0.1 tags; fixes flashing on darwin.
+    tag = "${finalAttrs.version}-osx";
+    hash = "sha256-8CJreOB+I07oj9dnJIKNnyoekcBy9tmo5qBwYq3qY4E=";
   };
 
-  vendorHash = "sha256-HffgkuKmaOjTYi+jQ6vBlC50JqqbYiikURT6TCqL7e0=";
+  vendorHash = "sha256-m2QuNd0/cfAdFdVzctG+E7t/OsslcufXyh6HX2i1KKg=";
 
   meta = {
     description = "Tool to flash firmware to mechanical keyboards";

pkgs/by-name/zo/zotero/package.nix

@@ -15,7 +15,7 @@
   pkg-config,
   pango,
   giflib,
-  firefox-esr-140-unwrapped,
+  firefox-esr-153-unwrapped,
   makeDesktopItem,
   copyDesktopItems,
   libGL,
@@ -253,10 +253,10 @@ buildNpmPackage (finalAttrs: {
       mkdir -p app/xulrunner/
     ''
     + lib.optionalString stdenv.hostPlatform.isDarwin ''
-      cp -r "${firefox-esr-140-unwrapped}/Applications/Firefox ESR.app" app/xulrunner/Firefox.app
+      cp -r "${firefox-esr-153-unwrapped}/Applications/Firefox ESR.app" app/xulrunner/Firefox.app
     ''
     + lib.optionalString (!stdenv.hostPlatform.isDarwin) ''
-      cp -r "${firefox-esr-140-unwrapped}/lib/firefox" "app/xulrunner/firefox-${stdenv.hostPlatform.parsed.kernel.name}-${
+      cp -r "${firefox-esr-153-unwrapped}/lib/firefox" "app/xulrunner/firefox-${stdenv.hostPlatform.parsed.kernel.name}-${
         lib.replaceString "aarch64" "arm64" stdenv.hostPlatform.parsed.cpu.name
       }"
     ''

pkgs/development/libraries/aspell/dictionaries.nix

@@ -5,6 +5,7 @@
   aspell,
   which,
   writeScript,
+  config,
 }:
 
 /*
@@ -226,7 +227,7 @@ let
     );
 
 in
-rec {
+{
 
   ### Languages
 
@@ -1082,65 +1083,8 @@ rec {
     sha256 = "15k7gaxrnqnssdyk9l6g27dq317dqp9jz5yzafd25ri01g6mb8iz";
     meta.license = lib.licenses.lgpl21Only;
   };
-
-  ### Jargons
-
-  en-computers = buildTxtDict {
-    shortName = "en-computers";
-    fullName = "English Computer Jargon";
-    version = "0";
-
-    src = fetchurl {
-      url = "https://mrsatterly.com/computer.dic";
-      sha256 = "1vzk7cdvcm9r1c6mgxpabrdcpvghdv9mjmnf6iq5wllcif5nsw2b";
-    };
-
-    langInputs = [ en ];
-
-    buildPhase = ''
-      runHook preBuild
-      cat $src | aspell-affix en-computers --dont-validate-words --lang=en
-      runHook postBuild
-    '';
-    installPhase = "aspell-install en-computers";
-
-    meta = {
-      homepage = "https://mrsatterly.com/spelling.html";
-      license = lib.licenses.wtfpl; # as a comment the source file
-    };
-  };
-
-  en-science = buildTxtDict {
-    shortName = "en-science";
-    fullName = "English Scientific Jargon";
-    version = "0-unstable-2015-07-27";
-
-    src1 = fetchurl {
-      url = "https://web.archive.org/web/20180806094650if_/http://jpetrie.net/wp-content/uploads/custom_scientific_US.txt";
-      hash = "sha256-I5d/jf/5v9Nptu2H9qfvMBzSwJYoQOTEzJfQTxKoWN8=";
-    };
-
-    src2 = fetchurl {
-      url = "https://web.archive.org/web/20180131231829if_/http://jpetrie.net/wp-content/uploads/custom_scientific_UK.txt";
-      hash = "sha256-oT4nUiev5q4QjHeuF8jNVBcyyHE9fdH9+uDMkZsOWp8=";
-    };
-
-    langInputs = [ en ];
-
-    buildPhase = ''
-      runHook preBuild
-      cat $src1 | aspell-plain en_US-science --dont-validate-words --lang=en
-      cat $src2 | aspell-plain en_GB-science --dont-validate-words --lang=en
-      runHook postBuild
-    '';
-    installPhase = "aspell-install en_US-science en_GB-science";
-
-    meta = {
-      homepage = "https://web.archive.org/web/20210425104207/http://www.jpetrie.net/scientific-word-list-for-spell-checkersspelling-dictionaries/";
-      # no license is given so we have to assume it is unfree
-      license = lib.licenses.unfree;
-    };
-
-  };
-
+}
+// lib.optionalAttrs config.allowAliases {
+  en-computers = throw "'aspellDicts.en-computers' has been removed as upstream url pointed to a gambling website."; # Added 2026-09-28
+  en-science = throw "'aspellDicts.en-science' has been removed as upstream was removed."; # Added 2026-09-28
 }

pkgs/development/libraries/nss/latest.nix

@@ -5,8 +5,8 @@
 #       Example: nix-shell ./maintainers/scripts/update.nix --argstr package cacert
 
 import ./generic.nix {
-  version = "3.129";
-  hash = "sha256-cy7+nCVtogr1onk8/8OQcQZUm2AH2azNsUmVFg4ym7k=";
+  version = "3.130";
+  hash = "sha256-+VONkBLHqJzIufh7VCvZfGUJflOAzBemhS3z3aB8cqY=";
   filename = "latest.nix";
   versionRegex = "NSS_(\\d+)_(\\d+)(?:_(\\d+))?_RTM";
 }

pkgs/development/lua-modules/generated-packages.nix

@@ -1140,15 +1140,15 @@ final: prev: {
     }:
     buildLuarocksPackage {
       pname = "fzf-lua";
-      version = "0.0.2700-1";
+      version = "0.0.2701-1";
       knownRockspec =
         (fetchurl {
-          url = "mirror://luarocks/fzf-lua-0.0.2700-1.rockspec";
-          sha256 = "05cvz50763yk0dkrhkh5f8wjk0mckhv8ri77bmfmlgysz0hv9ir9";
+          url = "mirror://luarocks/fzf-lua-0.0.2701-1.rockspec";
+          sha256 = "0ligp083swi8zfj6s8syc4i3fyiiv95nh1bnzfpd4j1hfs4ljnac";
         }).outPath;
       src = fetchzip {
-        url = "https://github.com/ibhagwan/fzf-lua/archive/13bb178a299f7493dd64427a58e61904c4b58ecb.zip";
-        sha256 = "0pl1ysj952jswxckcl21laa573gf2zmqcj5mfymx26z2pg2imyzx";
+        url = "https://github.com/ibhagwan/fzf-lua/archive/78b85d2a522b1e6a2d154216b3e532a1df1ad6d7.zip";
+        sha256 = "1hgl34ama6756y6dlczv1zlqji0sz54s8j12nmrvygggdfgzmrcr";
       };
 
       disabled = luaOlder "5.1";

pkgs/development/python-modules/appium-python-client/default.nix

@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "appium-python-client";
-  version = "6.0.6";
+  version = "6.0.7";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "appium";
     repo = "python-client";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NRka/iDw0oimgD95EqSV6FHRJnQJfNwD2sp81yX27vg=";
+    hash = "sha256-mJQ0IY1o80iD2GeEWaidZiXdvZX41F02/GItOwhwhFU=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/aws-secretsmanager-caching/default.nix

@@ -12,13 +12,13 @@
 
 buildPythonPackage rec {
   pname = "aws-secretsmanager-caching";
-  version = "1.1.3";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "aws_secretsmanager_caching";
     inherit version;
-    hash = "sha256-9tbsnUPg2+T21d6982tMtpHRWpZ7NYsldfXZGXSmwP8=";
+    hash = "sha256-sDS6cVSgt9l1/SXhu5gFkiSUtv0GMunhF+GruGjzoGs=";
   };
 
   postPatch = ''

pkgs/development/python-modules/awslambdaric/default.nix

@@ -16,14 +16,14 @@
 }:
 buildPythonPackage rec {
   pname = "awslambdaric";
-  version = "4.0.4";
+  version = "4.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-lambda-python-runtime-interface-client";
     tag = version;
-    sha256 = "sha256-898GsNint4B2s2uOLRz0BZRFsA+oEe6Z7gYdBY9e5xI=";
+    sha256 = "sha256-TePJeZ9SzJPjZ+oNOQXfQ2Eh133ihdHS6Rc/kJr5lgE=";
   };
 
   propagatedBuildInputs = [

pkgs/development/python-modules/azure-mgmt-privatedns/default.nix

@@ -9,15 +9,15 @@
   typing-extensions,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "azure-mgmt-privatedns";
-  version = "1.2.0";
+  version = "2.0.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "azure_mgmt_privatedns";
-    inherit version;
-    hash = "sha256-NCMYcvAblPYZXY7lQo4XRpJS7QTqCCjVIyXr578KEgs=";
+    inherit (finalAttrs) version;
+    hash = "sha256-4GTSIhFTgkk8dr4QluTYMA6zGp70XBmKoZGZM8uQoSQ=";
   };
 
   build-system = [ setuptools ];
@@ -40,8 +40,8 @@ buildPythonPackage rec {
   meta = {
     description = "Microsoft Azure DNS Private Zones Client Library for Python";
     homepage = "https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/network/azure-mgmt-privatedns";
-    changelog = "https://github.com/Azure/azure-sdk-for-python/blob/azure-mgmt-privatedns_${version}/sdk/network/azure-mgmt-privatedns/CHANGELOG.md";
+    changelog = "https://github.com/Azure/azure-sdk-for-python/blob/azure-mgmt-privatedns_${finalAttrs.version}/sdk/network/azure-mgmt-privatedns/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = [ ];
   };
-}
+})

pkgs/development/python-modules/denon-rs232/default.nix

@@ -12,7 +12,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "denon-rs232";
-  version = "4.2.2";
+  version = "4.2.3";
   pyproject = true;
 
   disabled = pythonOlder "3.12";
@@ -21,7 +21,7 @@ buildPythonPackage (finalAttrs: {
     owner = "home-assistant-libs";
     repo = "denon-rs232";
     tag = finalAttrs.version;
-    hash = "sha256-DqlJWgREneOFS4OFEgeJTyF4osgPYw1GO6I6sZVA6J4=";
+    hash = "sha256-3GgXbhNVmMNZycgSoqqoFVWZp3pRCwy0V1Dagt8TpC8=";
   };
 
   build-system = [ uv-build ];

pkgs/development/python-modules/exa-py/default.nix

@@ -24,7 +24,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "exa-py";
-  version = "2.21.0";
+  version = "2.23.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -33,7 +33,7 @@ buildPythonPackage (finalAttrs: {
     owner = "exa-labs";
     repo = "exa-py";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PKle41FWfs5L4S+HY4iP6WLAVc3GonXLjbGk9mmFsW8=";
+    hash = "sha256-ovoHj41F/7BXX0gUoRbnZ9I+nhp4XfSdhNTJoKt0R4k=";
   };
 
   build-system = [

pkgs/development/python-modules/glyphslib/default.nix

@@ -17,7 +17,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "glyphslib";
-  version = "6.14.0";
+  version = "6.15.0";
 
   pyproject = true;
 
@@ -25,7 +25,7 @@ buildPythonPackage (finalAttrs: {
     owner = "googlefonts";
     repo = "glyphsLib";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1x6axp25QIqBgRq586hUlKC1ueOL4PU79nOgtd7W1l4=";
+    hash = "sha256-R1A3Uw7uozFbJ/PVRR1L8DU9bugzhkuW2rxohdN/G5w=";
   };
 
   build-system = [ setuptools-scm ];

pkgs/development/python-modules/google-cloud-dlp/default.nix

@@ -14,13 +14,13 @@
 
 buildPythonPackage rec {
   pname = "google-cloud-dlp";
-  version = "3.38.0";
+  version = "3.39.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_dlp";
     inherit version;
-    hash = "sha256-BcdlhL62CzBcE9xRMhp9Aebj7DHd8QXxjVDy+DT3toQ=";
+    hash = "sha256-dabUewER8SFoc4QYyGy1V71IqxYpzUsnNyRNUfgZH04=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/graphemeu/default.nix

@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "graphemeu";
-  version = "0.10.0";
+  version = "0.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "timendum";
     repo = "grapheme";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qDspbeOmlfQ4VLPdKEuxNPYilKjwUcAJiEOMfx9fFlI=";
+    hash = "sha256-NheVptk7qP7beUd9iFQExaoj4rO7l4ZgI4aS5H7ZS5M=";
   };
 
   build-system = [

pkgs/development/python-modules/ingredient-parser-nlp/default.nix

@@ -14,14 +14,14 @@
 }:
 buildPythonPackage rec {
   pname = "ingredient-parser-nlp";
-  version = "2.7.0";
+  version = "2.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "strangetom";
     repo = "ingredient-parser";
     tag = version;
-    hash = "sha256-WodKuK4CaBipKxLQyOgQ0sFfTDzS/F0URgkoQaFNoNc=";
+    hash = "sha256-oIHuk3xU65kewoTdxdnaTFL0uJt2bDOyXn+nT7Jc60c=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/jellyfin-apiclient-python/default.nix

@@ -10,16 +10,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "jellyfin-apiclient-python";
-  version = "1.18.0";
+  version = "1.19.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jellyfin";
     repo = "jellyfin-apiclient-python";
-    tag = "v${version}";
-    hash = "sha256-5xiKtV/nRvrRXHjLizY7vOV9bamk1elQmPt55QtA8xc=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ZyeHkiDWf93B7sSlDqugQZ5H6HxK16DK+NAZIry+EuY=";
   };
 
   build-system = [ setuptools ];
@@ -38,7 +38,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python API client for Jellyfin";
     homepage = "https://github.com/jellyfin/jellyfin-apiclient-python";
+    changelog = "https://github.com/jellyfin/jellyfin-apiclient-python/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ jojosch ];
   };
-}
+})

pkgs/development/python-modules/jh2/default.nix

@@ -11,20 +11,20 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "jh2";
-  version = "5.0.13";
+  version = "5.0.15";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jawah";
     repo = "h2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zlc0R+DeE9bd5daD7sUrGHXU3NR5tRiiFvBrccSKCTI=";
+    hash = "sha256-fwLrH/tTYUSss5OkjlIzfegKJjkgCN1JeEW3igwvOzE=";
     fetchSubmodules = true;
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-BPTgGc/qH101ZBlqiqwBe5KXXpnpDGe5K6GLqG99GSI=";
+    hash = "sha256-CtyFRhDfnjIvRMJvg8Ppu7nZjePMP7VFtPXoR4I/LB8=";
   };
 
   build-system = [

pkgs/development/python-modules/mail-parser/default.nix

@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mail-parser";
-  version = "4.5.0";
+  version = "4.6.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "SpamScope";
     repo = "mail-parser";
     tag = finalAttrs.version;
-    hash = "sha256-nOoDe3k2q/PpnzGpcsY/NcTIMvt1QjSmP7NqKnlwJyY=";
+    hash = "sha256-tN0QVdiyina1PZqsuYBFW/GgD2pFkpKcvqcqKEEtHnI=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/mammoth/default.nix

@@ -11,16 +11,16 @@
   gitUpdater,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "mammoth";
-  version = "1.12.2";
+  version = "1.13.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mwilliamson";
     repo = "python-mammoth";
-    tag = version;
-    hash = "sha256-0I03noHNSa02yg3biVdgs9kBS/DdeOTPC5UzKV0S7m0=";
+    tag = finalAttrs.version;
+    hash = "sha256-F8lgtxlvM44qvHTv5wK6CKGepV6Jh+SWUoWEzdnLkEI=";
   };
 
   postPatch = ''
@@ -32,8 +32,6 @@ buildPythonPackage rec {
 
   dependencies = [ cobble ];
 
-  pythonImportsCheck = [ "mammoth" ];
-
   nativeCheckInputs = [
     funk
     pytestCheckHook
@@ -45,13 +43,15 @@ buildPythonPackage rec {
     export PATH=$out/bin:$PATH
   '';
 
+  pythonImportsCheck = [ "mammoth" ];
+
   passthru.updateScript = gitUpdater { };
 
   meta = {
     description = "Convert Word documents (.docx files) to HTML";
     homepage = "https://github.com/mwilliamson/python-mammoth";
-    changelog = "https://github.com/mwilliamson/python-mammoth/blob/${src.tag}/NEWS";
+    changelog = "https://github.com/mwilliamson/python-mammoth/blob/${finalAttrs.src.tag}/NEWS";
     license = lib.licenses.bsd2;
     maintainers = [ ];
   };
-}
+})