Merge master into staging-next

2026-06-05 21:03:40 +00:00 · 2026-03-14 00:21:49 +00:00
parent 1a58c7090c aa19b12c62
commit 23ee7d594c
165 changed files with 450 additions and 345 deletions
--- a/ci/eval/compare/test.nix
+++ b/ci/eval/compare/test.nix
@@ -6,7 +6,7 @@
  lib ? pkgs.lib,
 }:
 let
-  fun = import ./maintainers.nix;
+  fun = import ./maintainers.nix { inherit lib; };

  mockPkgs =
    {
@@ -46,7 +46,6 @@ let
    testEmpty = {
      expr = fun {
        pkgs = mockPkgs { };
-        inherit lib;
        changedFiles = [ ];
        affectedAttrPaths = [ ];
      };
@@ -59,7 +58,6 @@ let
    testNonExistentAffected = {
      expr = fun {
        pkgs = mockPkgs { };
-        inherit lib;
        changedFiles = [ "a" ];
        affectedAttrPaths = [ [ "b" ] ];
      };
@@ -74,7 +72,6 @@ let
        pkgs = mockPkgs {
          packages = [ [ "b" ] ];
        };
-        inherit lib;
        changedFiles = [ "a" ];
        affectedAttrPaths = [ [ "b" ] ];
      };
@@ -89,7 +86,6 @@ let
        pkgs = mockPkgs {
          packages = [ [ "b" ] ];
        };
-        inherit lib;
        # Also tests that subpaths work
        changedFiles = [ "b/c" ];
        affectedAttrPaths = [ [ "b" ] ];
@@ -110,7 +106,6 @@ let
          packages = [ [ "b" ] ];
          githubTeams = false;
        };
-        inherit lib;
        changedFiles = [ "b/c" ];
        affectedAttrPaths = [ [ "b" ] ];
      };
@@ -130,7 +125,6 @@ let
        pkgs = mockPkgs {
          packages = [ [ "hello" ] ];
        };
-        inherit lib;
        changedFiles = [ "pkgs/by-name/he/hello/sources.json" ];
        affectedAttrPaths = [ ];
      };
@@ -149,7 +143,6 @@ let
        pkgs = mockPkgs {
          packages = [ [ "hello" ] ];
        };
-        inherit lib;
        changedFiles = [ "pkgs/by-name/README.md" ];
        affectedAttrPaths = [ ];
      };
@@ -164,7 +157,6 @@ let
        pkgs = mockPkgs {
          packages = [ [ "hello" ] ];
        };
-        inherit lib;
        changedFiles = [
          "hello"
          "pkgs/by-name/he/hello/sources.json"
@@ -186,7 +178,6 @@ let
        pkgs = mockPkgs {
          modules = [ "a" ];
        };
-        inherit lib;
        changedFiles = [ "a" ];
        affectedAttrPaths = [ ];
      };
@@ -206,7 +197,6 @@ let
          modules = [ "a" ];
          githubTeams = false;
        };
-        inherit lib;
        changedFiles = [ "a" ];
        affectedAttrPaths = [ ];
      };
--- a/ci/github-script/lint-commits.js
+++ b/ci/github-script/lint-commits.js
@@ -145,7 +145,7 @@ async function checkCommitMessages({ github, context, core, repoPath }) {
  if (failures.size !== 0) {
    core.error(
      'Please review the guidelines at ' +
-        'https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md#commit-conventions, ' +
+        '<https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md#commit-conventions>, ' +
        'as well as the applicable area-specific guidelines linked there.',
    )
    core.setFailed('Committers: merging is discouraged.')
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -16438,12 +16438,6 @@
    githubId = 5526;
    name = "Marcus Ramberg";
  };
-  marcweber = {
-    email = "marco-oweber@gmx.de";
-    github = "MarcWeber";
-    githubId = 34086;
-    name = "Marc Weber";
-  };
  marenz = {
    email = "marenz@arkom.men";
    github = "marenz2569";
@@ -30130,6 +30124,16 @@
    githubId = 39456023;
    name = "Mike Yim";
  };
+  zevisert = {
+    email = "dev@zevisert.ca";
+    github = "zevisert";
+    githubId = 11222441;
+    name = "Zev Isert";
+    keys = [
+      { fingerprint = "BBA2 3AB2 60EA 8DD3 9889  F234 C530 8063 6561 2531"; }
+      { fingerprint = "897B 6DF1 D6FC 152C 9347  486D 042F 1F94 C62D DB03"; }
+    ];
+  };
  zfnmxt = {
    name = "zfnmxt";
    email = "zfnmxt@zfnmxt.com";
--- a/maintainers/scripts/vanity-manual-equalities.txt
+++ b/maintainers/scripts/vanity-manual-equalities.txt
@@ -2,6 +2,5 @@ viric	viriketo@gmail.com
 Pjotr Prins	pjotr.public01@thebird.nl
 Pjotr Prins	pjotr.public05@thebird.nl
 Wouter den Breejen	wbreejen
-MarcWeber	marcweber
 Ricardo Correia	Ricardo M. Correia
 ertesx@gmx.de	ertes
--- a/maintainers/team-list.nix
+++ b/maintainers/team-list.nix
@@ -712,6 +712,10 @@ with lib.maintainers;
    enableFeatureFreezePing = true;
  };

+  security-review = {
+    github = "security-review";
+  };
+
  stdenv = {
    enableFeatureFreezePing = true;
    github = "stdenv";
--- a/nixos/modules/programs/git.nix
+++ b/nixos/modules/programs/git.nix
@@ -84,6 +84,20 @@ in

        enablePureSSHTransfer = lib.mkEnableOption "Enable pure SSH transfer in server side by adding git-lfs-transfer to environment.systemPackages";
      };
+
+      attributes = lib.mkOption {
+        type = lib.types.lines;
+        default = "";
+        example = "*.pdf diff=pdf";
+        description = ''
+          Assign git attributes to files (one pattern per line):
+
+              PATTERN1 ATTR1 ATTR2 ...
+
+          Blank lines and lines beginning with # are ignored. See
+          {manpage}`gitattributes(5)` for more information.
+        '';
+      };
    };
  };

@@ -93,6 +107,10 @@ in
      environment.etc.gitconfig = lib.mkIf (cfg.config != [ ]) {
        text = lib.concatMapStringsSep "\n" lib.generators.toGitINI cfg.config;
      };
+
+      environment.etc.gitattributes = lib.mkIf (cfg.attributes != "") {
+        text = cfg.attributes + "\n";
+      };
    })
    (lib.mkIf (cfg.enable && cfg.lfs.enable) {
      environment.systemPackages = lib.mkMerge [
--- a/pkgs/applications/editors/vim/plugins/overrides.nix
+++ b/pkgs/applications/editors/vim/plugins/overrides.nix
@@ -4362,7 +4362,6 @@ assertNoAdditions {
      homepage = "https://github.com/Valloric/YouCompleteMe";
      license = lib.licenses.gpl3;
      maintainers = with lib.maintainers; [
-        marcweber
        mel
      ];
      platforms = lib.platforms.unix;
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1902,8 +1902,8 @@ let
        mktplcRef = {
          publisher = "github";
          name = "codespaces";
-          version = "1.18.5";
-          hash = "sha256-KTKGjfS+xtn6NMFCdYq1S+idoXpkME/BA4jAhSyGiHc=";
+          version = "1.18.7";
+          hash = "sha256-8zT3nFWyMmOmGxAqEjulh/K+45gUnKDgI7easR+ErpU=";
        };

        meta = {
--- a/pkgs/applications/networking/browsers/chromium/info.json
+++ b/pkgs/applications/networking/browsers/chromium/info.json
@@ -823,7 +823,7 @@
    }
  },
  "ungoogled-chromium": {
-    "version": "146.0.7680.71",
+    "version": "146.0.7680.75",
    "deps": {
      "depot_tools": {
        "rev": "42786f6e46c25c30dd58f69283ab6fcd0c959f58",
@@ -835,16 +835,16 @@
        "hash": "sha256-wFCuu4GR0N7QZCwT8UAhqH5moicYQjZ4ZLI58AM4pJ0="
      },
      "ungoogled-patches": {
-        "rev": "146.0.7680.71-1",
-        "hash": "sha256-MyVvAWmLlh0tK7LhBh08m26nizbxeDQMan8DjdHR9K0="
+        "rev": "146.0.7680.75-1",
+        "hash": "sha256-wZxGOs7cwM+ORAq4waOOpa771AYCNZvtm2ZCeh+3Wy8="
      },
      "npmHash": "sha256-ByB1Ea5tduIJZXyydeBWsoS8OPABOgwHe+dNXRssdvc="
    },
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "e00a64ead1abef9447943efede7bc26362ac3797",
-        "hash": "sha256-hZPRH4Q2PQqXDhMXHHcav+37US+7vuN176rhpcoOeq8=",
+        "rev": "d865c3fe495882da3a7c6575337a02867c4536b1",
+        "hash": "sha256-/hjpcI4GTw0bGqZ5/9gzM4Pc6/5fhk5dmdtw5EfidiY=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
@@ -1639,8 +1639,8 @@
      },
      "src/v8": {
        "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "bc343986bd4cb17e49ef15b70c4bdac710e27167",
-        "hash": "sha256-dsjddO/LCNAYLJ1XyDkJLJ9TToiy7pENlBryF1VcmtY="
+        "rev": "70253f966a7c3936f5a5ff57c6a4a4face1f16ad",
+        "hash": "sha256-8tA9nWXsiQ2Qt7pbALrhsnNFHOFLw/wlcz5OrFjYEI8="
      }
    }
  }
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -580,11 +580,11 @@
    "vendorHash": "sha256-v/XHGUEpAIpGHErv7GPqfosVLL3xaqBwZHbJKS8fkn4="
  },
  "hashicorp_google-beta": {
-    "hash": "sha256-wIAgFDHBVErm2NMiQszhnwJ6nWJA4qqDY/a6JdUrmyA=",
+    "hash": "sha256-rBThPPPO8TJbJYXJBQX8pF7Wy4V8fNzrpAgcu1B+7mE=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/google-beta",
    "owner": "hashicorp",
    "repo": "terraform-provider-google-beta",
-    "rev": "v7.22.0",
+    "rev": "v7.23.0",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-YZQMUGScsYjBkhAQ4DXYlBpAw805iKgX/iXDMTpRr6c="
  },
@@ -833,13 +833,13 @@
    "vendorHash": "sha256-duHOqjy8AthXuDX63GO3myJ9TJmV0Ts1a8OsbSOGZWI="
  },
  "launchdarkly_launchdarkly": {
-    "hash": "sha256-n3BzBSccUVNtRangTJvGNaoenoDLMhHT8sduOM2jGy0=",
+    "hash": "sha256-lcemT7kpBlZX35Sb+ujHzSdakBQkUSmYAxTVsJkRW6A=",
    "homepage": "https://registry.terraform.io/providers/launchdarkly/launchdarkly",
    "owner": "launchdarkly",
    "repo": "terraform-provider-launchdarkly",
-    "rev": "v2.26.2",
+    "rev": "v2.27.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-JRqLG+lM7emw8F0J2mVt4xHKvLG/TC/FNZiiXd0dKZY="
+    "vendorHash": "sha256-BxMhu2gcRuOlYWgx5ZOUBGdfB28+87SG1T/KAPDyei8="
  },
  "linode_linode": {
    "hash": "sha256-trwD5gL/zVa82URY3zxKYN3UM2ZjvQAXBS0O6bfTVNU=",
--- a/pkgs/applications/networking/sync/rsync/default.nix
+++ b/pkgs/applications/networking/sync/rsync/default.nix
@@ -91,6 +91,7 @@ stdenv.mkDerivation rec {
    mainProgram = "rsync";
    maintainers = [
    ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.unix;
    identifiers.cpeParts = {
      vendor = "samba";
--- a/pkgs/by-name/af/afuse/package.nix
+++ b/pkgs/by-name/af/afuse/package.nix
@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Automounter in userspace";
    homepage = "https://github.com/pcarrier/afuse";
    license = lib.licenses.gpl2Only;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
 })
--- a/pkgs/by-name/al/alchemy/package.nix
+++ b/pkgs/by-name/al/alchemy/package.nix
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "http://al.chemy.org/";
    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
    license = lib.licenses.gpl3Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
    mainProgram = "alchemy";
  };
--- a/pkgs/by-name/al/allure/package.nix
+++ b/pkgs/by-name/al/allure/package.nix
@@ -8,11 +8,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "allure";
-  version = "2.37.0";
+  version = "2.38.0";

  src = fetchurl {
    url = "https://github.com/allure-framework/allure2/releases/download/${finalAttrs.version}/allure-${finalAttrs.version}.tgz";
-    hash = "sha256-pl0n9X8HnIsazyG7qvJw2wmpwhKa/i7ohlHOsHg9glw=";
+    hash = "sha256-ApYPTQw0FONwkn7Sr2qyJBm3GoszkjnllJLpFcdXdMA=";
  };

  dontConfigure = true;
--- a/pkgs/by-name/al/alsa-plugins/package.nix
+++ b/pkgs/by-name/al/alsa-plugins/package.nix
@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
      gpl2Plus # attributes.m4 & usb_stream.h
    ];

-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/al/alterware-launcher/package.nix
+++ b/pkgs/by-name/al/alterware-launcher/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "alterware-launcher";
-  version = "0.11.5";
+  version = "0.11.6";

  src = fetchFromGitHub {
    owner = "alterware";
    repo = "alterware-launcher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-I2HlLi8f0+p1Gk7QzwNxOAOix0dxGKMmNkcXilQANzo=";
+    hash = "sha256-cJ5JRFXmy3/OKgEX/A5KOkNV3TiRXpZlgEdWJJTghhE=";
  };

-  cargoHash = "sha256-M0Y59+p0SiDiE0MM165l/5HAYc2A00S9TDcYfzdAuAw=";
+  cargoHash = "sha256-O1Amsc0DwKwe1rgElQSWME9b92WsOin3urvme7EqJYg=";

  buildInputs = [ openssl ];
  nativeBuildInputs = [ pkg-config ];
--- a/pkgs/by-name/au/aubio/package.nix
+++ b/pkgs/by-name/au/aubio/package.nix
@@ -49,7 +49,6 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://aubio.org/";
    license = lib.licenses.gpl2;
    maintainers = with lib.maintainers; [
-      marcweber
      fpletz
    ];
    platforms = lib.platforms.linux;
--- a/pkgs/by-name/au/audit/package.nix
+++ b/pkgs/by-name/au/audit/package.nix
@@ -170,6 +170,7 @@ stdenv.mkDerivation (finalAttrs: {
    changelog = "https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.2";
    license = lib.licenses.gpl2Plus;
    maintainers = with lib.maintainers; [ grimmauld ];
+    teams = [ lib.teams.security-review ];
    pkgConfigModules = [
      "audit"
      "auparse"
--- a/pkgs/by-name/bo/boehmgc/package.nix
+++ b/pkgs/by-name/bo/boehmgc/package.nix
@@ -108,6 +108,7 @@ stdenv.mkDerivation (finalAttrs: {
    changelog = "https://github.com/bdwgc/bdwgc/blob/v${finalAttrs.version}/ChangeLog";
    license = lib.licenses.boehmGC;
    maintainers = [ ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.all;
    identifiers.cpeParts =
      lib.meta.cpeFullVersionWithVendor "boehm-demers-weiser" finalAttrs.version
--- a/pkgs/by-name/bo/boolstuff/package.nix
+++ b/pkgs/by-name/bo/boolstuff/package.nix
@@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Library for operations on boolean expression binary trees";
    homepage = "http://perso.b2b2c.ca/~sarrazip/dev/boolstuff.html";
    license = lib.licenses.gpl2Only;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    mainProgram = "booldnf";
    platforms = lib.platforms.all;
  };
--- a/pkgs/by-name/ca/cacert/package.nix
+++ b/pkgs/by-name/ca/cacert/package.nix
@@ -29,6 +29,7 @@ let
      fpletz
      lukegb
    ];
+    teams = [ lib.teams.security-review ];
    license = lib.licenses.mpl20;
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "mozilla" version // {
      product = "nss";
--- a/pkgs/by-name/ca/cargo-cyclonedx/package.nix
+++ b/pkgs/by-name/ca/cargo-cyclonedx/package.nix
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-cyclonedx";
-  version = "0.5.7";
+  version = "0.5.8";

  src = fetchFromGitHub {
    owner = "CycloneDX";
    repo = "cyclonedx-rust-cargo";
    rev = "cargo-cyclonedx-${finalAttrs.version}";
-    hash = "sha256-T/9eHI2P8eCZAqMTeZz1yEi5nljQWfHrdNiU3h3h74U=";
+    hash = "sha256-TLERyZ854KVIeTYu7WT+U/K9YoUmk9bYX/fp3brLFrg=";
  };

-  cargoHash = "sha256-deczbMPeJsnmXbVB60stKhJJZRIIwjY5vExS3x3b6aU=";
+  cargoHash = "sha256-uaZ79/4AUe3zx2uuqLEO79QrzqgXaegBxtRmnmM/rOw=";

  # Test suite is broken since rustc 1.90, see:
  # https://github.com/CycloneDX/cyclonedx-rust-cargo/issues/807
--- a/pkgs/by-name/ca/cargo-mutants/package.nix
+++ b/pkgs/by-name/ca/cargo-mutants/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-mutants";
-  version = "26.2.0";
+  version = "27.0.0";

  src = fetchFromGitHub {
    owner = "sourcefrog";
    repo = "cargo-mutants";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-tBCLjZWtz3R7ak1npc9gQxjX0axl2Tlz1PMbkYUDjfk=";
+    hash = "sha256-ctbX5xoxmZzyvwJByDC7f71CLtpn8IkZTXTSdjXf25U=";
  };

-  cargoHash = "sha256-MljPZCzfnXj5s6tEINkDhvmGNAfgbNTWR7nmd+ft2Wg=";
+  cargoHash = "sha256-+z2QSvSxKIt2giQYVcSOEqHvsUuLnxE2HqkA13W9KhY=";

  # too many tests require internet access
  doCheck = false;
--- a/pkgs/by-name/cc/ccrtp/package.nix
+++ b/pkgs/by-name/cc/ccrtp/package.nix
@@ -34,7 +34,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Implementation of the IETF real-time transport protocol (RTP)";
    homepage = "https://www.gnu.org/software/ccrtp/";
    license = lib.licenses.gpl2;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/ci/cinelerra/package.nix
+++ b/pkgs/by-name/ci/cinelerra/package.nix
@@ -116,7 +116,7 @@ stdenv.mkDerivation {
    description = "Professional video editing and compositing environment (community version)";
    homepage = "http://cinelerra-cv.wikidot.com/";
    mainProgram = "cinelerracv";
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    license = lib.licenses.gpl2Only;
    # https://github.com/cinelerra-cv-team/cinelerra-cv/issues/3
    platforms = [ "x86_64-linux" ];
--- a/pkgs/by-name/ci/cirrus-cli/package.nix
+++ b/pkgs/by-name/ci/cirrus-cli/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "cirrus-cli";
-  version = "0.165.0";
+  version = "0.165.1";

  src = fetchFromGitHub {
    owner = "cirruslabs";
    repo = "cirrus-cli";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-JgbUOMG3pjrJ5lKfK23gLOqA/mgagnm5XrdlFntpnpI=";
+    hash = "sha256-zkKbA2Nftkqxh4o30pFMCcZxNeBF9jXf2GkICaXEPjE=";
  };

-  vendorHash = "sha256-3N2+FMJ4eLv37D6qqgDqG7NMPpm1Dx+Krq8zB05c8dw=";
+  vendorHash = "sha256-cpHxxAoVCHLWt9R2+tZVhIKT9SXdwiVvB1/NA9sNd3Y=";

  ldflags = [
    "-X github.com/cirruslabs/cirrus-cli/internal/version.Version=v${finalAttrs.version}"
--- a/pkgs/by-name/co/colord/package.nix
+++ b/pkgs/by-name/co/colord/package.nix
@@ -141,7 +141,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "System service to manage, install and generate color profiles to accurately color manage input and output devices";
    homepage = "https://www.freedesktop.org/software/colord/";
    license = lib.licenses.lgpl2Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    teams = [ lib.teams.freedesktop ];
    platforms = lib.platforms.linux;
  };
--- a/pkgs/by-name/cs/csound/package.nix
+++ b/pkgs/by-name/cs/csound/package.nix
@@ -84,7 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Sound design, audio synthesis, and signal processing system, providing facilities for music composition and performance on all major operating systems and platforms";
    homepage = "https://csound.com/";
    license = lib.licenses.lgpl21Plus;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
    broken = stdenv.hostPlatform.isDarwin;
  };
--- a/pkgs/by-name/cu/curlMinimal/package.nix
+++ b/pkgs/by-name/cu/curlMinimal/package.nix
@@ -285,6 +285,7 @@ stdenv.mkDerivation (finalAttrs: {
    maintainers = with lib.maintainers; [
      Scrumplex
    ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.all;
    # Fails to link against static gss
    broken = stdenv.hostPlatform.isStatic && gssSupport;
--- a/pkgs/by-name/da/datafusion-cli/package.nix
+++ b/pkgs/by-name/da/datafusion-cli/package.nix
@@ -6,17 +6,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "datafusion-cli";
-  version = "52.2.0";
+  version = "52.3.0";

  src = fetchFromGitHub {
    name = "datafusion-cli-source";
    owner = "apache";
    repo = "arrow-datafusion";
    tag = finalAttrs.version;
-    hash = "sha256-WmCklLZKuCiVYOPQOW0QLn1vTMnz4Hgm1HeuXHZe4XU=";
+    hash = "sha256-Rmhgs+sy5/j4uTT1TQ709xDKWqgUbTVJZ2aMc9AHDaM=";
  };

-  cargoHash = "sha256-wDEEoDYFx+Yb06Ufaf+zR79kluhSworoGLaa71niwEg=";
+  cargoHash = "sha256-5mOImBH0HUIY1NAVHfVTXPOa+lpBbb40RiB6b5dGLzw=";

  buildAndTestSubdir = "datafusion-cli";

--- a/pkgs/by-name/dd/ddnet/package.nix
+++ b/pkgs/by-name/dd/ddnet/package.nix
@@ -32,13 +32,13 @@

 stdenv.mkDerivation rec {
  pname = "ddnet";
-  version = "19.7";
+  version = "19.8";

  src = fetchFromGitHub {
    owner = "ddnet";
    repo = "ddnet";
    tag = version;
-    hash = "sha256-HjTkl4KOvQpAlLcUpfn5Ujr4IDfosUY2ueh0ZxE8KAs=";
+    hash = "sha256-CpzmKJ8W0uh/3x6/YSEs4SpJoSwYfCZxLDo7wvw96KU=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
@@ -130,7 +130,6 @@ stdenv.mkDerivation rec {
      cc-by-sa-30
    ];
    maintainers = with lib.maintainers; [
-      ncfavier
      Scrumplex
      sirseruju
    ];
--- a/pkgs/by-name/de/debootstrap/package.nix
+++ b/pkgs/by-name/de/debootstrap/package.nix
@@ -101,7 +101,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Tool to create a Debian system in a chroot";
    homepage = "https://wiki.debian.org/Debootstrap";
    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
    mainProgram = "debootstrap";
  };
--- a/pkgs/by-name/es/eslint_d/package.nix
+++ b/pkgs/by-name/es/eslint_d/package.nix
@@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "eslint_d";
-  version = "14.3.0";
+  version = "15.0.0";

  src = fetchFromGitHub {
    owner = "mantoni";
    repo = "eslint_d.js";
    rev = "v${version}";
-    hash = "sha256-Mu3dSgRIC2L9IImKixJfaUsltlajY0cYdXOSikNQuPo=";
+    hash = "sha256-VrKtLtFAWLtpKE0HfTzPcWCx1o7Fhm8ClveWJ64hj4U=";
  };

-  npmDepsHash = "sha256-nZ9q+Xmd8JLs+xYEO1TVbDEmQl2UwR9D9OWqVChNHhw=";
+  npmDepsHash = "sha256-O1Y0fLkwCrDoIUVeQBXV8HVq490IR5+WjXfs3qY6vrM=";

  dontNpmBuild = true;

--- a/pkgs/by-name/fe/feishin/package.nix
+++ b/pkgs/by-name/fe/feishin/package.nix
@@ -16,13 +16,13 @@
 }:
 let
  pname = "feishin";
-  version = "1.7.0";
+  version = "1.8.0";

  src = fetchFromGitHub {
    owner = "jeffvli";
    repo = "feishin";
    tag = "v${version}";
-    hash = "sha256-DVlZ1ucCr8nP/TMvS2GBxjimdm8cie155vWoYMx7gbM=";
+    hash = "sha256-sd6j3gPtNFN1hMiOMIiTICNH8mYJvO9FSXPqUFotis8=";
  };

  electron = electron_39;
@@ -43,7 +43,7 @@ buildNpmPackage {
      ;
    pnpm = pnpm_10_29_2;
    fetcherVersion = 3;
-    hash = "sha256-LeoOksMWZjhVkEjTn5sS2xuX3QxGX8O7iC/3suVwiug=";
+    hash = "sha256-XhBcZRa66QdkjXxbefzsBUdvPIEshorq1uqzoWMXuTc=";
  };

  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
@@ -79,18 +79,14 @@ buildNpmPackage {
      # electron-builder appears to build directly on top of Electron.app, by overwriting the files in the bundle.
      cp -r ${electron.dist}/Electron.app ./
      find ./Electron.app -name 'Info.plist' | xargs -d '\n' chmod +rw
-
-      # Disable code signing during build on macOS.
-      # https://github.com/electron-userland/electron-builder/blob/fa6fc16/docs/code-signing.md#how-to-disable-code-signing-during-the-build-process-on-macos
-      export CSC_IDENTITY_AUTO_DISCOVERY=false
-      sed -i "/afterSign/d" package.json
    ''
    + ''
      npm exec electron-builder -- \
        --dir \
        -c.electronDist=${if stdenv.hostPlatform.isDarwin then "./" else electron.dist} \
        -c.electronVersion=${electron.version} \
-        -c.npmRebuild=false
+        -c.npmRebuild=false \
+        ${lib.optionalString stdenv.hostPlatform.isDarwin "-c.mac.identity=null"}
    '';

  installPhase = ''
--- a/pkgs/by-name/gd/gdal/package.nix
+++ b/pkgs/by-name/gd/gdal/package.nix
@@ -318,7 +318,6 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://www.gdal.org/";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
-      marcweber
      dotlambda
    ];
    teams = [ lib.teams.geospatial ];
--- a/pkgs/by-name/gh/ghostty-bin/package.nix
+++ b/pkgs/by-name/gh/ghostty-bin/package.nix
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "ghostty-bin";
-  version = "1.3.0";
+  version = "1.3.1";

  src = fetchurl {
    url = "https://release.files.ghostty.org/${finalAttrs.version}/Ghostty.dmg";
-    hash = "sha256-U/6Y5wmCEYAIwDuf2/XfJlUip/22vfoY630NTNMdDMU=";
+    hash = "sha256-GM/ysKbO6Q7q2cfTBk6AiiUqQLryFKp1LB7LeTuPX2k=";
  };

  sourceRoot = ".";
--- a/pkgs/by-name/gh/ghostty/package.nix
+++ b/pkgs/by-name/gh/ghostty/package.nix
@@ -11,9 +11,10 @@
  glslang,
  gtk4-layer-shell,
  harfbuzz,
+  libadwaita,
  libGL,
  libx11,
-  libadwaita,
+  libxml2,
  ncurses,
  nixosTests,
  oniguruma,
@@ -30,7 +31,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "ghostty";
-  version = "1.3.0";
+  version = "1.3.1";

  outputs = [
    "out"
@@ -44,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "ghostty-org";
    repo = "ghostty";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-44bF0MtsaoF0EgUI1TbGUz4NUH6psIRMCZgZJ0GtSaU=";
+    hash = "sha256-+ddMmUe9Jjkun4qqW8XFXVgwVZdVHsGWcQzndgIlBjQ=";
  };

  deps = callPackage ./deps.nix {
@@ -64,6 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
    glib # Required for `glib-compile-schemas`
    wrapGAppsHook4
    blueprint-compiler
+    libxml2 # `xmllint`
  ];

  buildInputs = [
--- a/pkgs/by-name/gi/git/package.nix
+++ b/pkgs/by-name/gi/git/package.nix
@@ -615,6 +615,7 @@ stdenv.mkDerivation (finalAttrs: {
      philiptaron
      zivarah
    ];
+    teams = [ lib.teams.security-review ];
    mainProgram = "git";
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "git-scm" finalAttrs.version;
  };
--- a/pkgs/by-name/gl/glfw2/package.nix
+++ b/pkgs/by-name/gl/glfw2/package.nix
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Multi-platform library for creating OpenGL contexts and managing input, including keyboard, mouse, joystick and time";
    homepage = "https://glfw.sourceforge.net/";
    license = lib.licenses.zlib;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/gl/glfw3/package.nix
+++ b/pkgs/by-name/gl/glfw3/package.nix
@@ -103,7 +103,6 @@ stdenv.mkDerivation {
    homepage = "https://www.glfw.org/";
    license = lib.licenses.zlib;
    maintainers = with lib.maintainers; [
-      marcweber
      Scrumplex
      twey
    ];
--- a/pkgs/by-name/gl/glfw3/window-position.patch
+++ b/pkgs/by-name/gl/glfw3/window-position.patch
@@ -1,30 +1,37 @@
-From 807d9b0efe86e85a54cd2daf7da2ba1591b39f14 Mon Sep 17 00:00:00 2001
-From: uku <hi@uku.moe>
-Date: Sat, 27 Dec 2025 19:25:42 +0100
-Subject: [PATCH] fix: dismiss warning about window position being unavailable
+Dismiss warnings about window position being unavailable on Wayland.

 In addition to the other glfw patches, this one is required on certain
 compositors such as niri and waywall to be able to launch Minecraft at
 all.
---
- src/wl_window.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)

-diff --git a/src/wl_window.c b/src/wl_window.c
-index ad39b2e0..38f86a17 100644
+This patch expands the suppression to setting positions. This
+prevents Minecraft Forge environments from crashing on Wayland when
+strict error callbacks are used.
+
+Original get-position fix by: uku <hi@uku.moe>
+Expanded to include set-position, inspired by Prior5151's fix on AUR.
+https://aur.archlinux.org/packages/glfw-wayland-minecraft-cursorfix#comment-1013099
+
 --- a/src/wl_window.c
 +++ b/src/wl_window.c
-@@ -2293,8 +2293,8 @@ void _glfwGetWindowPosWayland(_GLFWwindow* window, int* xpos, int* ypos)
+@@ -2236,16 +2236,16 @@ void _glfwGetWindowPosWayland(_GLFWwindow* window, int* xpos, int* ypos)
     // A Wayland client is not aware of its position, so just warn and leave it
     // as (0, 0)
 
 -    _glfwInputError(GLFW_FEATURE_UNAVAILABLE,
 -                    "Wayland: The platform does not provide the window position");
 +    fprintf(stderr,
-+            "[GLFW] Wayland: The platform does not provide the window position\n");
+                    "[GLFW] Wayland: The platform does not provide the window position\n");
 }
 
 void _glfwSetWindowPosWayland(_GLFWwindow* window, int xpos, int ypos)
-- 
-2.51.2
-
+ {
+     // A Wayland client can not set its position, so just warn
+ 
+-    _glfwInputError(GLFW_FEATURE_UNAVAILABLE,
+-                    "Wayland: The platform does not support setting the window position");
+    fprintf(stderr,
+                    "[GLFW] Wayland: The platform does not support setting the window position\n");
+ }
+ 
+ void _glfwGetWindowSizeWayland(_GLFWwindow* window, int* width, int* height)
--- a/pkgs/by-name/go/google-chrome/package.nix
+++ b/pkgs/by-name/go/google-chrome/package.nix
@@ -184,11 +184,11 @@ let

  linux = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.71";
+    version = "146.0.7680.75";

    src = fetchurl {
      url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-FPn7nUUNLnMKw1phMhohi6t9AY1N8i9cSnNAQdwKuqQ=";
+      hash = "sha256-QlL1mH6RdWUacU/xnxwy8u1lPKXe8mneJSS4jqFQudw=";
    };

    # With strictDeps on, some shebangs were not being patched correctly
@@ -302,11 +302,11 @@ let

  darwin = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.72";
+    version = "146.0.7680.76";

    src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/geomnvhpdzrdrct4xeyekmx3aq_146.0.7680.72/GoogleChrome-146.0.7680.72.dmg";
-      hash = "sha256-st6vm+/ATQmpeMiJVY0PEYtN/zXhxnYRy3s2/MrfoO4=";
+      url = "http://dl.google.com/release2/chrome/adgzhtm53eqdw4h4wn64ebox7o6q_146.0.7680.76/GoogleChrome-146.0.7680.76.dmg";
+      hash = "sha256-nC8y6992wlx6DcN48glkeoZFSze1vNkbsqENmqC5nrQ=";
    };

    dontPatch = true;
--- a/pkgs/by-name/gr/grip/package.nix
+++ b/pkgs/by-name/gr/grip/package.nix
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://sourceforge.net/projects/grip/";
    license = lib.licenses.gpl2Plus;

-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
    mainProgram = "grip";
  };
--- a/pkgs/by-name/gu/gusb/package.nix
+++ b/pkgs/by-name/gu/gusb/package.nix
@@ -100,7 +100,7 @@ stdenv.mkDerivation rec {
    mainProgram = "gusbcmd";
    homepage = "https://github.com/hughsie/libgusb";
    license = lib.licenses.lgpl21;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
 }
--- a/pkgs/by-name/ha/halo/package.nix
+++ b/pkgs/by-name/ha/halo/package.nix
@@ -8,10 +8,10 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "halo";
-  version = "2.22.14";
+  version = "2.23.0";
  src = fetchurl {
    url = "https://github.com/halo-dev/halo/releases/download/v${finalAttrs.version}/halo-${finalAttrs.version}.jar";
-    hash = "sha256-8AAiR8EVG/3mHpRr85O6zRcrxu5/P+VK2+QaV9ARAJ8=";
+    hash = "sha256-RHGNeJKQKiuO3G1NVSDyevfpbQBkWep/h/D8MXf5wQs=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/in/inotify-tools/package.nix
+++ b/pkgs/by-name/in/inotify-tools/package.nix
@@ -32,7 +32,6 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://github.com/inotify-tools/inotify-tools/wiki";
    license = lib.licenses.gpl2Plus;
    maintainers = with lib.maintainers; [
-      marcweber
      pSub
    ];
    platforms = lib.platforms.linux;
--- a/pkgs/by-name/ja/jackmeter/package.nix
+++ b/pkgs/by-name/ja/jackmeter/package.nix
@@ -22,7 +22,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Console jack loudness meter";
    homepage = "https://www.aelius.com/njh/jackmeter/";
    license = lib.licenses.gpl2;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
    mainProgram = "jack_meter";
  };
--- a/pkgs/by-name/ki/kin-openapi/package.nix
+++ b/pkgs/by-name/ki/kin-openapi/package.nix
@@ -5,14 +5,14 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "kin-openapi";
-  version = "0.133.0";
-  vendorHash = "sha256-SFT4mY0TVUa/hMMe7sOVToSX8qA1OimOiNs4kBjRdBU=";
+  version = "0.134.0";
+  vendorHash = "sha256-+PE/OyZ9Y4uZV4AmzATasrFseQF3UrWQT0bKoxm3uXM=";

  src = fetchFromGitHub {
    owner = "getkin";
    repo = "kin-openapi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7KC+cHdI3zArJbSMfao8JIb3sUZJK1PQfrIiFI0zHM8=";
+    hash = "sha256-MJ6oG2CU8jzPk394iJqCZPmm3LCbF6Nz112/fJ65c5w=";
  };

  checkFlags =
--- a/pkgs/by-name/li/libcap_ng/package.nix
+++ b/pkgs/by-name/li/libcap_ng/package.nix
@@ -65,6 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
    platforms = lib.platforms.linux;
    license = lib.licenses.lgpl21;
    maintainers = with lib.maintainers; [ grimmauld ];
+    teams = [ lib.teams.security-review ];
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "libcap-ng_project" finalAttrs.version;
  };
 })
--- a/pkgs/by-name/li/libdnet/package.nix
+++ b/pkgs/by-name/li/libdnet/package.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Provides a simplified, portable interface to several low-level networking routines";
    homepage = "https://github.com/dugsong/libdnet";
    license = lib.licenses.bsd3;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/li/libgeotiff/package.nix
+++ b/pkgs/by-name/li/libgeotiff/package.nix
@@ -51,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://github.com/OSGeo/libgeotiff";
    changelog = "https://github.com/OSGeo/libgeotiff/blob/${finalAttrs.src.rev}/libgeotiff/NEWS";
    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    teams = [ lib.teams.geospatial ];
    platforms = with lib.platforms; linux ++ darwin;
  };
--- a/pkgs/by-name/li/libharu/package.nix
+++ b/pkgs/by-name/li/libharu/package.nix
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Cross platform, open source library for generating PDF files";
    homepage = "http://libharu.org/";
    license = lib.licenses.zlib;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
 })
--- a/pkgs/by-name/li/libkiwix/package.nix
+++ b/pkgs/by-name/li/libkiwix/package.nix
@@ -19,13 +19,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libkiwix";
-  version = "14.1.1";
+  version = "14.2.0";

  src = fetchFromGitHub {
    owner = "kiwix";
    repo = "libkiwix";
    rev = finalAttrs.version;
-    hash = "sha256-yZWzzu0LLUxg0CbdeKARuaFsf3UxvJJbqPRDGXWDjLI=";
+    hash = "sha256-OnSlny0gn3yTCtwdu7r/4Z7pfQDLMh5Jc2kIubL3kJ0=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/liblo/package.nix
+++ b/pkgs/by-name/li/liblo/package.nix
@@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Lightweight library to handle the sending and receiving of messages according to the Open Sound Control (OSC) protocol";
    homepage = "https://sourceforge.net/projects/liblo";
    license = lib.licenses.gpl2;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = with lib.platforms; linux ++ darwin;
  };
 })
--- a/pkgs/by-name/li/libmng/package.nix
+++ b/pkgs/by-name/li/libmng/package.nix
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Reference library for reading, displaying, writing and examining Multiple-Image Network Graphics";
    homepage = "http://www.libmng.com";
    license = lib.licenses.zlib;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix ++ lib.platforms.windows;
  };
 })
--- a/pkgs/by-name/li/libphonenumber/package.nix
+++ b/pkgs/by-name/li/libphonenumber/package.nix
@@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libphonenumber";
-  version = "9.0.25";
+  version = "9.0.26";

  src = fetchFromGitHub {
    owner = "google";
    repo = "libphonenumber";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-lNXZXcBxRKKVPyJ4/3IBmlz/i4W7J52L+dIEQVTotD0=";
+    hash = "sha256-ETfYnb9E8uAJMz1m6hOFitEbmM/2UCtD6wgPZEkO6gQ=";
  };

  patches = [
--- a/pkgs/by-name/li/libsodium/package.nix
+++ b/pkgs/by-name/li/libsodium/package.nix
@@ -56,6 +56,7 @@ stdenv.mkDerivation (finalAttrs: {
      mdaniels5757
      raskin
    ];
+    teams = [ lib.teams.security-review ];
    pkgConfigModules = [ "libsodium" ];
    platforms = lib.platforms.all;
  };
--- a/pkgs/by-name/li/lilypond/package.nix
+++ b/pkgs/by-name/li/lilypond/package.nix
@@ -141,7 +141,6 @@ stdenv.mkDerivation (finalAttrs: {
      ofl # mf/
    ];
    maintainers = with lib.maintainers; [
-      marcweber
      yurrriq
    ];
    platforms = lib.platforms.all;
--- a/pkgs/by-name/lo/logrotate/package.nix
+++ b/pkgs/by-name/lo/logrotate/package.nix
@@ -57,6 +57,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Rotates and compresses system logs";
    license = lib.licenses.gpl2Plus;
    maintainers = [ lib.maintainers.tobim ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.all;
    mainProgram = "logrotate";
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "logrotate_project" finalAttrs.version;
--- a/pkgs/by-name/lr/lrdf/package.nix
+++ b/pkgs/by-name/lr/lrdf/package.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Lightweight RDF library with special support for LADSPA plugins";
    homepage = "https://sourceforge.net/projects/lrdf/";
    license = lib.licenses.gpl2;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
 })
--- a/pkgs/by-name/mc/mcumgr-client/package.nix
+++ b/pkgs/by-name/mc/mcumgr-client/package.nix
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "mcumgr-client";
-  version = "0.0.8";
+  version = "0.0.9";

  src = fetchFromGitHub {
    owner = "vouch-opensource";
    repo = "mcumgr-client";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-adUAoFNNVsKoVFb9BJrjZiQj7ZdsqzbY4rTURS185zU=";
+    hash = "sha256-IbjWJ4AEUxIvj3gSyz7w4q0DL1q2u0q2JO8O+I5qXnY=";
  };

-  cargoHash = "sha256-+n+Z/o+DvP2ltos8DP8nTyKbn/Zr3ln6cLyKJ+yWm1M=";
+  cargoHash = "sha256-V8o89jGqjxJPVIQIh6IbnahXVMktT2gZg/5H+Sr0ogQ=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/mo/mos/package.nix
+++ b/pkgs/by-name/mo/mos/package.nix
@@ -2,21 +2,21 @@
  lib,
  stdenvNoCC,
  fetchurl,
-  undmg,
+  unzip,
  nix-update-script,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "mos";
-  version = "3.5.0";
+  version = "4.0.2";

  src = fetchurl {
-    url = "https://github.com/Caldis/Mos/releases/download/${finalAttrs.version}/Mos.Versions.${finalAttrs.version}.dmg";
-    hash = "sha256-o2H4cfMudjoQHfKeV4ORiO9/szoomFP0IP6D6ecMAI4=";
+    url = "https://github.com/Caldis/Mos/releases/download/${finalAttrs.version}/Mos.Versions.${finalAttrs.version}-20260308.2.zip";
+    hash = "sha256-1DBFRIRjR9Fcl5DtHeuwn3qZgQ+jWRujYFzjPqa3/dY=";
  };
  sourceRoot = ".";

  nativeBuildInputs = [
-    undmg
+    unzip
  ];

  installPhase = ''
--- a/pkgs/by-name/my/myks/package.nix
+++ b/pkgs/by-name/my/myks/package.nix
@@ -10,13 +10,13 @@

 buildGoModule (finalAttrs: {
  pname = "myks";
-  version = "5.9.3";
+  version = "5.10.0";

  src = fetchFromGitHub {
    owner = "mykso";
    repo = "myks";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-D1JLpDueIFMZS2RebFvlNI9eNDd1nWohzmPR8sUDXMc=";
+    hash = "sha256-9Fw3q2/mard/dbbnz6GzQeiroTlkiRwdwvC7aBh5HXA=";
  };

  vendorHash = "sha256-XMGcLYMZiCB98U5+aB/O4f5knAp46UkrH4teCPZk/bM=";
--- a/pkgs/by-name/na/namespace-cli/package.nix
+++ b/pkgs/by-name/na/namespace-cli/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "namespace-cli";
-  version = "0.0.489";
+  version = "0.0.490";

  src = fetchFromGitHub {
    owner = "namespacelabs";
    repo = "foundation";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-6xBwpxl8WfXke82kaJqPSqUPxlKccVPSGwxYyUb7LvU=";
+    hash = "sha256-RCQgvU8g3hG2kaRm2kOrP+dqrafNp6N51BP9MP+SJc8=";
  };

-  vendorHash = "sha256-X6qEXV4vRU9CA7kvJ45aaSIOPGkMa+An7kFXUyWBG9s=";
+  vendorHash = "sha256-oBBo15qY8q7X/JcJwW+PbH0zHUiYQ2FdYdkHmX8o0zQ=";

  subPackages = [
    "cmd/nsc"
--- a/pkgs/by-name/ne/neko/package.nix
+++ b/pkgs/by-name/ne/neko/package.nix
@@ -82,7 +82,6 @@ stdenv.mkDerivation (finalAttrs: {
      lib.licenses.boehmGC # boehm gc
    ];
    maintainers = with lib.maintainers; [
-      marcweber
      locallycompact
    ];
    platforms = lib.platforms.linux ++ lib.platforms.darwin;
--- a/pkgs/by-name/ne/neovim-qt/package.nix
+++ b/pkgs/by-name/ne/neovim-qt/package.nix
@@ -27,6 +27,7 @@ stdenvNoCC.mkDerivation {
          --prefix PATH : ${neovim}/bin

        # link .desktop file
+        mkdir -p $out/share
        ln -s ${unwrapped}/share/applications $out/share/applications
        ln -s ${unwrapped}/share/icons $out/share/icons
      '';
--- a/pkgs/by-name/ni/nix-scheduler-hook/package.nix
+++ b/pkgs/by-name/ni/nix-scheduler-hook/package.nix
@@ -69,7 +69,8 @@ stdenv.mkDerivation rec {
    mkdir -p $out/bin
    mv nsh $out/bin
    mkdir -p $out/lib
-    mv subprojects/restclient-cpp/librestclient_cpp.so $out/lib
+    shopt -s extglob
+    mv subprojects/restclient-cpp/librestclient_cpp.so!(*p) $out/lib
  '';

  meta = {
--- a/pkgs/by-name/no/notesnook/package.nix
+++ b/pkgs/by-name/no/notesnook/package.nix
@@ -9,7 +9,7 @@

 let
  pname = "notesnook";
-  version = "3.3.8";
+  version = "3.3.10";

  inherit (stdenv.hostPlatform) system;
  throwSystem = throw "Unsupported system: ${system}";
@@ -27,10 +27,10 @@ let
    url = "https://github.com/streetwriters/notesnook/releases/download/v${version}/notesnook_${suffix}";
    hash =
      {
-        x86_64-linux = "sha256-7gPCmC3uol5ukwu8OOhhqk9pBTgWjI14wYmM61nlg+A=";
-        aarch64-linux = "sha256-JmWt7yr/Ij01x7bTWUQ7UAwKcEf9i91fZZsHpEWRJYY=";
-        x86_64-darwin = "sha256-5Obl3YveMx38sdLIGRz3Lqi3mloruTyH/3MsNNX03TA=";
-        aarch64-darwin = "sha256-P1xqMFGAQQVq76O1RTp+3kZtzM1xGvSUpbki64KTji8=";
+        x86_64-linux = "sha256-93WUP/z4ur33idUoKlBLMrbcR40VlF/3U/mZaQMlxbA=";
+        aarch64-linux = "sha256-kprLfd7XbXs+jph/ZbdhQ8RimjEBLCdVMDR5+Y2OyJ8=";
+        x86_64-darwin = "sha256-dD9UEANS+QLjVUk1Ubi//mVdFaFp46y4aqJjIrqNts0=";
+        aarch64-darwin = "sha256-lDf+eElp6kY2nUDkFka8Z2zOBGtqgTPG9aGNsWpnGys=";
      }
      .${system} or throwSystem;
  };
--- a/pkgs/by-name/op/openjump/package.nix
+++ b/pkgs/by-name/op/openjump/package.nix
@@ -59,7 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "http://www.openjump.org/";
    license = lib.licenses.gpl2;
    mainProgram = "OpenJump";
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    teams = [ lib.teams.geospatial ];
    platforms = jre.meta.platforms;
    sourceProvenance = [ lib.sourceTypes.binaryBytecode ];
--- a/pkgs/by-name/op/openresolv/package.nix
+++ b/pkgs/by-name/op/openresolv/package.nix
@@ -43,6 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://roy.marples.name/projects/openresolv";
    license = lib.licenses.bsd2;
    maintainers = [ ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.unix;
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "openresolv_project" finalAttrs.version;
  };
--- a/pkgs/by-name/pa/panache/package.nix
+++ b/pkgs/by-name/pa/panache/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "panache";
-  version = "2.18.0";
+  version = "2.19.0";

  src = fetchFromGitHub {
    owner = "jolars";
    repo = "panache";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-VI4Ma0wSHeQc5Rofz2sIyUkHmZSBm5woMcHTEM/a9wk=";
+    hash = "sha256-OhFAbufoQ869i3BGTc7uWs3DzA4rR5lZCTmVpkaTRyg=";
  };

-  cargoHash = "sha256-iliilk0uAOwdiYqJwkbdslwxcU6WLgReN2ZDEVki6js=";
+  cargoHash = "sha256-BoOOhKOjkVGs1YAm6TWOF9b6Zcgn7f8+j3fOScdorAc=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/pa/paratest/composer.lock
+++ b/pkgs/by-name/pa/paratest/composer.lock
@@ -4,7 +4,7 @@
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
        "This file is @generated automatically"
    ],
-    "content-hash": "459c9e75712ee7b02c32a6560b975535",
+    "content-hash": "9bb8c3ee26336dcc03e24ad2fb6922e8",
    "packages": [
        {
            "name": "fidry/cpu-core-counter",
@@ -1927,16 +1927,16 @@
        },
        {
            "name": "symfony/console",
-            "version": "v8.0.6",
+            "version": "v8.0.7",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/console.git",
-                "reference": "488285876e807a4777f074041d8bb508623419fa"
+                "reference": "15ed9008a4ebe2d6a78e4937f74e0c13ef2e618a"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/488285876e807a4777f074041d8bb508623419fa",
-                "reference": "488285876e807a4777f074041d8bb508623419fa",
+                "url": "https://api.github.com/repos/symfony/console/zipball/15ed9008a4ebe2d6a78e4937f74e0c13ef2e618a",
+                "reference": "15ed9008a4ebe2d6a78e4937f74e0c13ef2e618a",
                "shasum": ""
            },
            "require": {
@@ -1993,7 +1993,7 @@
                "terminal"
            ],
            "support": {
-                "source": "https://github.com/symfony/console/tree/v8.0.6"
+                "source": "https://github.com/symfony/console/tree/v8.0.7"
            },
            "funding": [
                {
@@ -2013,7 +2013,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-02-25T16:59:43+00:00"
+            "time": "2026-03-06T14:06:22+00:00"
        },
        {
            "name": "symfony/deprecation-contracts",
@@ -3352,5 +3352,5 @@
        "ext-pcov": "*",
        "ext-posix": "*"
    },
-    "plugin-api-version": "2.6.0"
+    "plugin-api-version": "2.9.0"
 }
--- a/pkgs/by-name/pa/paratest/package.nix
+++ b/pkgs/by-name/pa/paratest/package.nix
@@ -8,17 +8,17 @@
 (php.withExtensions ({ enabled, all }: enabled ++ [ all.pcov ])).buildComposerProject2
  (finalAttrs: {
    pname = "paratest";
-    version = "7.19.1";
+    version = "7.19.2";

    src = fetchFromGitHub {
      owner = "paratestphp";
      repo = "paratest";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-DksiwFMgoPk0BNOVc9Bn22a2blzNw/63fGBT3dlK7Mg=";
+      hash = "sha256-LZZUqtCnZTH3UC6KqhTt3QOcwErowCxQO2uXXmizroc=";
    };

    composerLock = ./composer.lock;
-    vendorHash = "sha256-VdJVbAKkbWKZEJ16ZbJ/lmc6ZzPmztXjZ/LAEmRI93o=";
+    vendorHash = "sha256-pvd/2bxcmQGa4H2XBqbhb9l30sQ9+AXDP2EqKrtP5Pk=";

    passthru.updateScript = ./update.sh;

--- a/pkgs/by-name/pa/partclone/package.nix
+++ b/pkgs/by-name/pa/partclone/package.nix
@@ -61,7 +61,7 @@ stdenv.mkDerivation (finalAttrs: {
    '';
    homepage = "https://partclone.org";
    license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/pa/partimage/package.nix
+++ b/pkgs/by-name/pa/partimage/package.nix
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Opensource disk backup software";
    homepage = "https://www.partimage.org";
    license = lib.licenses.gpl2Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/pe/peergos/package.nix
+++ b/pkgs/by-name/pe/peergos/package.nix
@@ -41,12 +41,12 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "peergos";
-  version = "1.18.0";
+  version = "1.20.0";
  src = fetchFromGitHub {
    owner = "Peergos";
    repo = "web-ui";
    rev = "v${version}";
-    hash = "sha256-zE7BsbZV1KIPD0sn1rSlMxzNF+JcucG382Ek/N9vO8o=";
+    hash = "sha256-1gFOSe1xMR6OX9FkmZACNfpEIa84Pyvuz3t0stpZKdY=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/pg/pgdog/package.nix
+++ b/pkgs/by-name/pg/pgdog/package.nix
@@ -14,16 +14,16 @@ let
 in
 rustPlatform.buildRustPackage.override { inherit stdenv; } (finalAttrs: {
  pname = "pgdog";
-  version = "0.1.31";
+  version = "0.1.32";

  src = fetchFromGitHub {
    owner = "pgdogdev";
    repo = "pgdog";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-BO1EhlGAdGks5zGQddljFy8DXHISv4cMCeuC3UAw8jw=";
+    hash = "sha256-boJuzVVtTM0FKXdipKdObl4Cx+SJZ7V8ROZlCRwcYWc=";
  };

-  cargoHash = "sha256-Fkj2cyPTBTudKSh4c3dzfAz2B4ZryFiCu5y3WMXZ7Dg=";
+  cargoHash = "sha256-KOLNWEMDEs52FrqPZEAkULCleugQp4WDNdgOHKlhaIM=";

  # Hardcoded paths for C compiler and linker
  postPatch = ''
--- a/pkgs/by-name/ph/phrase-cli/package.nix
+++ b/pkgs/by-name/ph/phrase-cli/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "phrase-cli";
-  version = "2.55.2";
+  version = "2.56.0";

  src = fetchFromGitHub {
    owner = "phrase";
    repo = "phrase-cli";
    rev = finalAttrs.version;
-    sha256 = "sha256-8Gn9B+A5w80T3Yw+mg0tAI1IsdeCRe4ToNU168nP/yQ=";
+    sha256 = "sha256-i3MxJTj3FphsYfkGyIIxhuBzRdSIlfah5KyNxf0vUQE=";
  };

-  vendorHash = "sha256-dpB8m02juic883lCwLwIL9356AHpzNy9td0s/e4UeDA=";
+  vendorHash = "sha256-XJUADIbeCzbIRaPnbVeGIPImcPe3xdtBNxiAFhclWfE=";

  ldflags = [ "-X=github.com/phrase/phrase-cli/cmd.PHRASE_CLIENT_VERSION=${finalAttrs.version}" ];

--- a/pkgs/by-name/pl/plotutils/package.nix
+++ b/pkgs/by-name/pl/plotutils/package.nix
@@ -63,7 +63,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://www.gnu.org/software/plotutils/";

    license = lib.licenses.gpl2Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
  };
 })
--- a/pkgs/by-name/po/poetry/package.nix
+++ b/pkgs/by-name/po/poetry/package.nix
@@ -40,6 +40,7 @@ let
      poetry-audit-plugin = callPackage ./plugins/poetry-audit-plugin.nix { };
      poetry-plugin-export = callPackage ./plugins/poetry-plugin-export.nix { };
      poetry-plugin-up = callPackage ./plugins/poetry-plugin-up.nix { };
+      poetry-plugin-migrate = callPackage ./plugins/poetry-plugin-migrate.nix { };
      poetry-plugin-poeblix = callPackage ./plugins/poetry-plugin-poeblix.nix { };
      poetry-plugin-shell = callPackage ./plugins/poetry-plugin-shell.nix { };
    };
--- a/pkgs/by-name/po/poetry/plugins/poetry-plugin-migrate.nix
+++ b/pkgs/by-name/po/poetry/plugins/poetry-plugin-migrate.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  poetry,
+  pytest-mock,
+  pytestCheckHook,
+}:
+buildPythonPackage rec {
+  pname = "poetry-plugin-migrate";
+  version = "0.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "zyf722";
+    repo = "poetry-plugin-migrate";
+    tag = version;
+    hash = "sha256-78H4/vHp8W7h6v6OWUdx9pX4142YiNGUFZXHoxxXw1M=";
+  };
+
+  build-system = [
+    poetry-core
+  ];
+
+  buildInputs = [
+    poetry
+  ];
+
+  pythonImportsCheck = [ "poetry_plugin_migrate" ];
+
+  nativeCheckInputs = [
+    pytest-mock
+    pytestCheckHook
+  ];
+
+  meta = {
+    description = "Poetry plugin to migrate pyproject.toml from Poetry v1 to v2 (PEP-621 compliant)";
+    homepage = "https://github.com/zyf722/poetry-plugin-migrate";
+    changelog = "https://github.com/zyf722/poetry-plugin-migrate/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ zevisert ];
+  };
+}
--- a/pkgs/by-name/pr/proton-pass/darwin.nix
+++ b/pkgs/by-name/pr/proton-pass/darwin.nix
@@ -1,19 +1,21 @@
 {
  stdenv,
+  undmg,
  pname,
  version,
+  passthru,
  meta,
-  undmg,
-  fetchurl,
 }:

 stdenv.mkDerivation (finalAttrs: {
-  inherit pname version meta;
+  inherit
+    pname
+    version
+    passthru
+    meta
+    ;

-  src = fetchurl {
-    url = "https://proton.me/download/PassDesktop/darwin/universal/ProtonPass_${version}.dmg";
-    hash = "sha256-oo02IYOKZEsr0+4zimSFkutTGuS63ZvMZTeUTapZrVw=";
-  };
+  src = passthru.sources.${stdenv.hostPlatform.system};

  nativeBuildInputs = [ undmg ];

--- a/pkgs/by-name/pr/proton-pass/linux.nix
+++ b/pkgs/by-name/pr/proton-pass/linux.nix
@@ -6,13 +6,18 @@
  asar,
  lib,
  version,
-  fetchurl,
  pname,
+  passthru,
  meta,
 }:

 stdenvNoCC.mkDerivation (finalAttrs: {
-  inherit pname version meta;
+  inherit
+    pname
+    version
+    passthru
+    meta
+    ;

  nativeBuildInputs = [
    dpkg
@@ -20,10 +25,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    asar
  ];

-  src = fetchurl {
-    url = "https://proton.me/download/pass/linux/x64/proton-pass_${version}_amd64.deb";
-    hash = "sha256-i5QQ1uzQ2tSDX4I/APL60QcHh9Ovc7ciueRnz7cZUuE=";
-  };
+  src = passthru.sources.${stdenvNoCC.hostPlatform.system};

  dontConfigure = true;
  dontBuild = true;
--- a/pkgs/by-name/pr/proton-pass/package.nix
+++ b/pkgs/by-name/pr/proton-pass/package.nix
@@ -2,11 +2,48 @@
  lib,
  stdenv,
  callPackage,
+  fetchurl,
+  writeShellScript,
+  curl,
+  jq,
+  common-updater-scripts,
 }:
 let
  pname = "proton-pass";
  version = "1.34.2";

+  passthru = {
+    sources = {
+      "x86_64-linux" = fetchurl {
+        url = "https://proton.me/download/pass/linux/x64/proton-pass_${version}_amd64.deb";
+        hash = "sha256-i5QQ1uzQ2tSDX4I/APL60QcHh9Ovc7ciueRnz7cZUuE=";
+      };
+      "aarch64-darwin" = fetchurl {
+        url = "https://proton.me/download/pass/macos/ProtonPass_${version}.dmg";
+        hash = "sha256-oo02IYOKZEsr0+4zimSFkutTGuS63ZvMZTeUTapZrVw=";
+      };
+      "x86_64-darwin" = passthru.sources."aarch64-darwin";
+    };
+    updateScript = writeShellScript "update-proton-pass" ''
+      set -o errexit
+      export PATH="${
+        lib.makeBinPath [
+          curl
+          jq
+          common-updater-scripts
+        ]
+      }"
+      NEW_VERSION=$(curl --silent https://proton.me/download/PassDesktop/linux/x64/version.json | jq -r '[.Releases[] | select(.CategoryName == "Stable")] | first | .Version')
+      if [[ "${version}" = "$NEW_VERSION" ]]; then
+          echo "The new version is the same as the old version."
+          exit 0
+      fi
+      for platform in ${lib.escapeShellArgs meta.platforms}; do
+        update-source-version "proton-pass" "$NEW_VERSION" --ignore-same-version --source-key="sources.$platform"
+      done
+    '';
+  };
+
  meta = {
    description = "Desktop application for Proton Pass";
    homepage = "https://proton.me/pass";
@@ -17,11 +54,16 @@ let
      sebtm
      shunueda
    ];
-    platforms = [ "x86_64-linux" ] ++ lib.platforms.darwin;
+    platforms = builtins.attrNames passthru.sources;
    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
    mainProgram = "proton-pass";
  };
 in
 callPackage (if stdenv.hostPlatform.isDarwin then ./darwin.nix else ./linux.nix) {
-  inherit pname version meta;
+  inherit
+    pname
+    version
+    passthru
+    meta
+    ;
 }
--- a/pkgs/by-name/ps/pstoedit/package.nix
+++ b/pkgs/by-name/ps/pstoedit/package.nix
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Translates PostScript and PDF graphics into other vector formats";
    homepage = "https://sourceforge.net/projects/pstoedit/";
    license = lib.licenses.gpl2Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.unix;
    mainProgram = "pstoedit";
  };
--- a/pkgs/by-name/ra/railway/package.nix
+++ b/pkgs/by-name/ra/railway/package.nix
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "railway";
-  version = "4.30.5";
+  version = "4.31.0";

  src = fetchFromGitHub {
    owner = "railwayapp";
    repo = "cli";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-0krjgyJfQQ53ihe6FKxEGpTasCibGXe0DCxOD5IJDOI=";
+    hash = "sha256-H1ltd1nHwcoY2zVmUrpaKB3I3Q/TKI9Pd3cQWNv3jCE=";
  };

-  cargoHash = "sha256-dPWTtJPw71MYUeemS/DLL2Tu4V1F59LLmcpRAtjivOE=";
+  cargoHash = "sha256-jEupp4bZAx+jwO9k8p/qE1rY/pYrlVfGK2/x8wMyx/w=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/re/renode-dts2repl/package.nix
+++ b/pkgs/by-name/re/renode-dts2repl/package.nix
@@ -7,14 +7,14 @@

 python3.pkgs.buildPythonApplication {
  pname = "renode-dts2repl";
-  version = "0-unstable-2026-03-04";
+  version = "0-unstable-2026-03-11";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "antmicro";
    repo = "dts2repl";
-    rev = "c0417ea78616572c543b3a6e4d2d1b5f03b7d9a9";
-    hash = "sha256-gblaFhFI5N/95FW/cqUng4j6Lmlc/TVTejvwOlkIoXU=";
+    rev = "2cffc375f750066e8b60957b7ff47f223e66849f";
+    hash = "sha256-WuDt/dWWbkE5ebGfo1RttxLyc7srzjCqXRBHuxIiTBU=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ru/rubberband/package.nix
+++ b/pkgs/by-name/ru/rubberband/package.nix
@@ -49,7 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://breakfastquay.com/rubberband/";
    # commercial license available as well, see homepage. You'll get some more optimized routines
    license = lib.licenses.gpl2Plus;
-    maintainers = [ lib.maintainers.marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.all;
  };
 })
--- a/pkgs/by-name/ru/runc/package.nix
+++ b/pkgs/by-name/ru/runc/package.nix
@@ -16,13 +16,13 @@

 buildGoModule (finalAttrs: {
  pname = "runc";
-  version = "1.4.0";
+  version = "1.4.1";

  src = fetchFromGitHub {
    owner = "opencontainers";
    repo = "runc";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-XPS9qWgDyKVLYs/QqWof6ydVK1T41QD8yDpvztc3NMc=";
+    hash = "sha256-YqzRHItk8gRDBQN+lUTGdbXUf+vuDIjmErDR57Ec/54=";
  };

  vendorHash = null;
--- a/pkgs/by-name/ru/runpodctl/package.nix
+++ b/pkgs/by-name/ru/runpodctl/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "runpodctl";
-  version = "2.1.4";
+  version = "2.1.6";

  src = fetchFromGitHub {
    owner = "runpod";
    repo = "runpodctl";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-PhOMszLROYqkd8+tcHdTe4nnB3q3AJkzVNOJFP96vSA=";
+    hash = "sha256-rMMPhvhkiNRDX507h6f4ukd5mWSs09eHo5edb7ToeME=";
  };

  vendorHash = "sha256-8Cdj5ZXmfooEh+MlaROjxVsAW6rZfPW7HNy86qnvAJA=";
--- a/pkgs/by-name/se/searxng/package.nix
+++ b/pkgs/by-name/se/searxng/package.nix
@@ -13,14 +13,14 @@ in
 python.pkgs.toPythonModule (
  python.pkgs.buildPythonApplication rec {
    pname = "searxng";
-    version = "0-unstable-2026-03-02";
+    version = "0-unstable-2026-03-10";
    pyproject = true;

    src = fetchFromGitHub {
      owner = "searxng";
      repo = "searxng";
-      rev = "dd98f761ad393e9efce113bfe56cfd40aa10ed2a";
-      hash = "sha256-LSNStNZZddtWYbppPL4pNqT0oVcem/FLZFhk1DELG84=";
+      rev = "8b95b2058be41580270f1dc348847c3342ee129b";
+      hash = "sha256-5IdfqWj4zOSnkvsssSJywKXrY18DO/zPKNLAJ19Jirk=";
    };

    nativeBuildInputs = with python.pkgs; [ pythonRelaxDepsHook ];
@@ -54,7 +54,6 @@ python.pkgs.toPythonModule (
        babel
        certifi
        cloudscraper
-        fasttext-predict
        flask
        flask-babel
        httpx
--- a/pkgs/by-name/se/see-cat/package.nix
+++ b/pkgs/by-name/se/see-cat/package.nix
@@ -2,24 +2,19 @@
  lib,
  fetchFromGitHub,
  rustPlatform,
-  pkg-config,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "see-cat";
-  version = "0.8.1";
+  version = "0.9.0";

  src = fetchFromGitHub {
    owner = "guilhermeprokisch";
    repo = "see";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-VCUrPCaG2fKp9vpFLzNLcfCBu2NiwdY2+bo1pd7anZY=";
+    hash = "sha256-Ej8lk9btUcIhhgpSmnHo2n33wQtyEkmuWVFoahYgAaI=";
  };

-  cargoHash = "sha256-Yw6zRvwT+y3CFb6WwKBiMSWz8igLQ7JmyGalHdRDGL0=";
-
-  nativeBuildInputs = [
-    pkg-config
-  ];
+  cargoHash = "sha256-gADA6Ioxz8YM/SRYsT+43bKNS2Ov1XtTElDr7vx8T14=";

  meta = {
    description = "Cute cat(1) for the terminal";
--- a/pkgs/by-name/sh/shadow/package.nix
+++ b/pkgs/by-name/sh/shadow/package.nix
@@ -132,6 +132,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "Suite containing authentication-related tools such as passwd and su";
    license = lib.licenses.bsd3;
    maintainers = with lib.maintainers; [ mdaniels5757 ];
+    teams = [ lib.teams.security-review ];
    platforms = lib.platforms.linux;
    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "shadow_project" finalAttrs.version;
  };
--- a/pkgs/by-name/si/sif/package.nix
+++ b/pkgs/by-name/si/sif/package.nix
@@ -7,16 +7,16 @@

 buildGoModule {
  pname = "sif";
-  version = "0-unstable-2026-03-01";
+  version = "0-unstable-2026-03-06";

  src = fetchFromGitHub {
    owner = "vmfunc";
    repo = "sif";
-    rev = "237dfde4d1c10339efb62cc5e5ade18c0050f70c";
-    hash = "sha256-XRK4qZWAU+7JO07Kuo9hF7cGWJ+ljjnG4SHQ05nS91M=";
+    rev = "d6c52d3dd8ac6b3fb8401ae39d6d27a361e11c4f";
+    hash = "sha256-Vj7XXt1QSFxx7dIHxchbM6bXa5TYxboAWSjtLRb3OvE=";
  };

-  vendorHash = "sha256-npwwYuAEMKm61T+s604kblrcHKBWMnMs4OHfOOqREkA=";
+  vendorHash = "sha256-D7yHDOLZuH6NWQyp8lwz3JBeRgLIN/jBSDBi9dltKf4=";

  subPackages = [ "cmd/sif" ];

--- a/pkgs/by-name/si/sigsum/package.nix
+++ b/pkgs/by-name/si/sigsum/package.nix
@@ -37,7 +37,9 @@ buildGoModule (finalAttrs: {
  versionCheckProgram = "${placeholder "out"}/bin/sigsum-key";
  doInstallCheck = true;

-  passthru.updateScript = nix-update-script { };
+  passthru.updateScript = nix-update-script {
+    extraArgs = [ "--version-regex=^v(\\d+\\.\\d+\\.\\d+)$" ];
+  };

  meta = {
    description = "System for public and transparent logging of signed checksums";
--- a/pkgs/by-name/so/sonic-visualiser/package.nix
+++ b/pkgs/by-name/so/sonic-visualiser/package.nix
@@ -84,7 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
    description = "View and analyse contents of music audio files";
    homepage = "https://www.sonicvisualiser.org/";
    license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    platforms = lib.platforms.linux;
    mainProgram = "sonic-visualiser";
  };
--- a/pkgs/by-name/so/sox/package.nix
+++ b/pkgs/by-name/so/sox/package.nix
@@ -90,7 +90,7 @@ stdenv.mkDerivation {
  meta = {
    description = "Sample Rate Converter for audio";
    homepage = "https://sox.sourceforge.net/";
-    maintainers = with lib.maintainers; [ marcweber ];
+    maintainers = [ ];
    license = if enableAMR then lib.licenses.unfree else lib.licenses.gpl2Plus;
    platforms = lib.platforms.unix;
  };
--- a/pkgs/by-name/sp/spacectl/package.nix
+++ b/pkgs/by-name/sp/spacectl/package.nix
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "spacectl";
-  version = "1.18.5";
+  version = "1.19.0";

  src = fetchFromGitHub {
    owner = "spacelift-io";
    repo = "spacectl";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-KPCMOkMiJ3qYb/nykAEG36k7lNZHok5+rqG2h22MIw8=";
+    hash = "sha256-wRtS09cXtthjxt3Uo0niEAb1Xx2A9gXQZDnKKjEjpZc=";
  };

-  vendorHash = "sha256-f/09XZiaYNUZzKM0jITFdUmKt8UQy90K4PGhC6ZupCk=";
+  vendorHash = "sha256-TSsb/xoetPUyQwpwJBhTK+FtjTnAXR6WBi9GqmNFsWo=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/sp/spotube/package.nix
+++ b/pkgs/by-name/sp/spotube/package.nix
@@ -22,7 +22,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "spotube";
-  version = "5.1.0";
+  version = "5.1.1";

  src = finalAttrs.passthru.sources.${stdenv.hostPlatform.system};

@@ -87,19 +87,19 @@ stdenv.mkDerivation (finalAttrs: {
    {
      "aarch64-linux" = fetchArtifact {
        suffix = "linux-aarch64.deb";
-        hash = "sha256-b+4IeZNWgU5psqDN4F1VDvF6nSf5B7i9XG1GdOTswYU=";
+        hash = "sha256-Wn+eE8nkHXRBZYVw+sm+Nxf75nK/JJ8bnVK7YZ0O47A=";
      };
      "x86_64-linux" = fetchArtifact {
        suffix = "linux-x86_64.deb";
-        hash = "sha256-tCuOhThuyIcjJJyIpbpK+3eTCfrQMsIiNt3jZxYL5pU=";
+        hash = "sha256-jzi1HPJErDhZwt1Eu1lzG29QaAw3vL+PVRNDVBxn7ZQ=";
      };
      "x86_64-darwin" = fetchArtifact {
        suffix = "macos-universal.dmg";
-        hash = "sha256-OqFlyv9sR7yG5GqkZjfFb0xMzDeRNNzJOBap7Pa2etw=";
+        hash = "sha256-kUQdLWawtIVhzeO5NfUa435JOf7/SCVBhSKfQh3J96I=";
      };
      "aarch64-darwin" = fetchArtifact {
        suffix = "macos-universal.dmg";
-        hash = "sha256-OqFlyv9sR7yG5GqkZjfFb0xMzDeRNNzJOBap7Pa2etw=";
+        hash = "sha256-kUQdLWawtIVhzeO5NfUa435JOf7/SCVBhSKfQh3J96I=";
      };
    };

--- a/pkgs/by-name/st/stackql/package.nix
+++ b/pkgs/by-name/st/stackql/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "stackql";
-  version = "0.9.339";
+  version = "0.10.383";

  src = fetchFromGitHub {
    owner = "stackql";
    repo = "stackql";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-WuzY4Vje+Gwzf0Ep5nE5jkF1iJkFKX640ay+nqiF0Dg=";
+    hash = "sha256-ISbK7O3nupV0BgpneuI3B5xPxGDzwMaNy8wFgZPGKtE=";
  };

-  vendorHash = "sha256-H8vp2yuP2/mh8GAWTsFOpNJEXfxjyLHZq4m65iyERmw=";
+  vendorHash = "sha256-xIiBkearGbIUVHs1G+DSvf2y4qjHI5dU37GwapMTtRk=";

  ldflags = [
    "-s"
--- a/Show More
+++ b/Show More