Merge master into staging-next

2026-08-26 02:05:02 +00:00 · 2026-08-17 00:10:50 +00:00
parent b01b41b5f7 8d2097f66c
commit 412f06df20
238 changed files with 4876 additions and 1648 deletions
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -8798,6 +8798,12 @@
    githubId = 330292;
    name = "Evan Richter";
  };
+  evanwporter = {
+    email = "evanwporter@gmail.com";
+    github = "evanwporter";
+    githubId = 115374841;
+    name = "Evan Porter";
+  };
  evax = {
    email = "nixos@evax.fr";
    github = "evax";
--- a/maintainers/team-list.nix
+++ b/maintainers/team-list.nix
@@ -402,6 +402,7 @@ with lib.maintainers;
      GaetanLepage
      natsukium
      thomasjm
+      haansn08
    ];
    scope = "Maintain Jupyter and related packages.";
    shortName = "Jupyter";
@@ -710,7 +711,6 @@ with lib.maintainers;

  sage = {
    members = [
-      timokau
      raskin
      collares
    ];
--- a/nixos/modules/virtualisation/nixos-containers.nix
+++ b/nixos/modules/virtualisation/nixos-containers.nix
@@ -524,8 +524,8 @@ let
    tmpfs = null;
  };

-  # Parses an IPv4 address with an optional prefix
-  ipv4FromString =
+  # Parses an IP address with an optional prefix
+  ipFromString =
    str:
    let
      segments = lib.splitString "/" str;
@@ -610,10 +610,10 @@ in
                                networking.interfaces = lib.mkIf config.privateNetwork (
                                  lib.mkMerge [
                                    (lib.mkIf (config.localAddress != null) {
-                                      eth0.ipv4.addresses = [ (ipv4FromString config.localAddress) ];
+                                      eth0.ipv4.addresses = [ (ipFromString config.localAddress) ];
                                    })
                                    (lib.mkIf (config.localAddress6 != null) {
-                                      eth0.ipv6.addresses = [ (lib.network.ipv6.fromString config.localAddress6) ];
+                                      eth0.ipv6.addresses = [ (ipFromString config.localAddress6) ];
                                    })
                                  ]
                                );
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -16353,6 +16353,20 @@ final: prev: {
    meta.hydraPlatforms = [ ];
  };

+  slang-server-nvim = buildVimPlugin {
+    pname = "slang-server.nvim";
+    version = "0-unstable-2026-06-22";
+    src = fetchFromGitHub {
+      owner = "hudson-trading";
+      repo = "slang-server.nvim";
+      rev = "fedf769c407b4f36335f758d2c152ccae21a928b";
+      hash = "sha256-+Xb0tqhql3/yObLQ/yNtPfYTw9HEy2nWaQp+Or/YZ0Q=";
+    };
+    meta.homepage = "https://github.com/hudson-trading/slang-server.nvim/";
+    meta.license = getLicenseFromSpdxId "MIT";
+    meta.hydraPlatforms = [ ];
+  };
+
  slimline-nvim = buildVimPlugin {
    pname = "slimline.nvim";
    version = "2.10.0";
--- a/pkgs/applications/editors/vim/plugins/overrides.nix
+++ b/pkgs/applications/editors/vim/plugins/overrides.nix
@@ -4153,6 +4153,10 @@ assertNoAdditions {
    };
  });

+  slang-server-nvim = super.slang-server-nvim.overrideAttrs {
+    dependencies = [ self.nui-nvim ];
+  };
+
  slimline-nvim = super.slimline-nvim.overrideAttrs {
    nvimSkipModules = [
      # Component modules read the user-supplied slimline.config at require time.
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -1166,6 +1166,7 @@ https://github.com/folke/sidekick.nvim/,,
 https://github.com/AndrewRadev/sideways.vim/,,
 https://github.com/skim-rs/skim.vim/,,
 https://github.com/mopp/sky-color-clock.vim/,,
+https://github.com/hudson-trading/slang-server.nvim/,,
 https://github.com/sschleemilch/slimline.nvim/,,
 https://github.com/kovisoft/slimv/,,
 https://github.com/danielfalk/smart-open.nvim/,,
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1362,8 +1362,8 @@ let
        mktplcRef = {
          publisher = "discloud";
          name = "discloud";
-          version = "2.29.8";
-          hash = "sha256-dvyIdixtmg5ZTo/REB/E5QlHJu2xZ+Ui5qwJegoHTfk=";
+          version = "2.29.10";
+          hash = "sha256-t1FbUeFw5WMKyb/qwVJBpILB8z4wtWH/BOnMVEDg0pU=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/discloud.discloud/changelog";
@@ -1688,6 +1688,22 @@ let
        };
      };

+      ExodiusStudios.comment-anchors = buildVscodeMarketplaceExtension {
+        mktplcRef = {
+          publisher = "ExodiusStudios";
+          name = "comment-anchors";
+          version = "1.10.4";
+          hash = "sha256-FvfjPpQsgCsnY1BylhLCM/qDQChf9/iTr3cKkCGfMVI=";
+        };
+        meta = {
+          description = "Place anchor tags within comments for easy file and workspace navigation.";
+          downloadPage = "https://marketplace.visualstudio.com/items?itemName=exodiusstudios.comment-anchors";
+          homepage = "https://github.com/StarlaneStudios/vscode-comment-anchors";
+          license = lib.licenses.mit;
+          maintainers = with lib.maintainers; [ logn ];
+        };
+      };
+
      fabiospampinato.vscode-open-in-github = buildVscodeMarketplaceExtension {
        mktplcRef = {
          name = "vscode-open-in-github";
--- a/pkgs/applications/emulators/libretro/cores/atari800.nix
+++ b/pkgs/applications/emulators/libretro/cores/atari800.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore rec {
  core = "atari800";
-  version = "0-unstable-2026-07-15";
+  version = "0-unstable-2026-08-15";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "libretro-atari800";
-    rev = "9d3bcf283502512052e21c6f1453fbdf7aa3122b";
-    hash = "sha256-uLMQWi+Z21irwkFBArlHNXILintSWF7PfGy5bgKmAhQ=";
+    rev = "cd721790a0aa0e0772810949abcf5bd699c15371";
+    hash = "sha256-aNAvnd1fTPuecCcTdLK8EJ6GjWdO3Dc5sLA8sRxqRAE=";
  };

  makefile = "Makefile";
--- a/pkgs/applications/emulators/libretro/cores/bsnes.nix
+++ b/pkgs/applications/emulators/libretro/cores/bsnes.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "bsnes";
-  version = "0-unstable-2026-07-19";
+  version = "0-unstable-2026-08-12";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "bsnes-libretro";
-    rev = "9c1285dda7dd6bb9a9951d37bcee8794ada640e6";
-    hash = "sha256-hu4Odi+6A8OrpsNbWZI5JrBkFI1brsqp08fyOySFyr8=";
+    rev = "6d19eef5835a792e241e33194b4c1e9b75405b88";
+    hash = "sha256-zR0ZDmASY/KTTce9bbbyKV6LmWEGY668eZlCC/nrg/g=";
  };

  makefile = "Makefile";
--- a/pkgs/applications/emulators/libretro/cores/freeintv.nix
+++ b/pkgs/applications/emulators/libretro/cores/freeintv.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "freeintv";
-  version = "0-unstable-2026-04-20";
+  version = "0-unstable-2026-08-11";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "freeintv";
-    rev = "428915baf2bfc032fc03e645f4f8f9c6c3144979";
-    hash = "sha256-S8sGHS56fQaSuoUllupYdieSLFzsUE3tmM7DUssA+NY=";
+    rev = "ef3e0fe322bec62a7f916c0bb0834c08c348d0b4";
+    hash = "sha256-VS0uB2afgDaZUww7iY9QcBJ+iA3haLQrjpNvhzFj1QA=";
  };

  makefile = "Makefile";
--- a/pkgs/applications/emulators/libretro/cores/fuse.nix
+++ b/pkgs/applications/emulators/libretro/cores/fuse.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "fuse";
-  version = "0-unstable-2026-04-20";
+  version = "0-unstable-2026-08-12";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "fuse-libretro";
-    rev = "bce196fb774835fe65b3e5b821887a4ccf657167";
-    hash = "sha256-N66LaveZ4P66LRYpP1KwkLKT1dvG/s7JPfDyRraVkc8=";
+    rev = "2a5f1d43fec729063203605c39cc40f2957c47a1";
+    hash = "sha256-10Xr4bygSfORx4apDCGJFrni9dzBn0dCCb4ogm4GxyY=";
  };

  meta = {
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -191,13 +191,13 @@
    "vendorHash": "sha256-jK7JuARpoxq7hvq5+vTtUwcYot0YqlOZdtDwq4IqKvk="
  },
  "clevercloud_clevercloud": {
-    "hash": "sha256-rCeKsS60qvckrgGX2B2OkkZHy6vDXd9ChmKgP2JextE=",
+    "hash": "sha256-maiL06qwhjIjNxyHRRke4x0YrrPB61xFf2Cafl4s5+0=",
    "homepage": "https://registry.terraform.io/providers/clevercloud/clevercloud",
    "owner": "CleverCloud",
    "repo": "terraform-provider-clevercloud",
-    "rev": "v2.0.1",
+    "rev": "v2.1.0",
    "spdx": "Apache-2.0",
-    "vendorHash": "sha256-b27UcoNuaX3PxNlJLdU9njCl5JymBQhxD6rq8yT3gi4="
+    "vendorHash": "sha256-R3w7olc94QJuMk62bfvuM9aU+KlmNTUhojl/j9gmHjk="
  },
  "cloudamqp_cloudamqp": {
    "hash": "sha256-n78nZ01ley9ueYBZ7+bi0BLJ/RIc66HHjcmhFwDem3E=",
@@ -571,22 +571,22 @@
    "vendorHash": "sha256-fnw0mG2kkeALZAyylgpGWyAdcybA77KL5MrobkZBhUU="
  },
  "hashicorp_external": {
-    "hash": "sha256-/uBQaDqZBNmIOkwYD+zOPo7ZHiHKDZO2MmD0q52KM4k=",
+    "hash": "sha256-SiTFDI5s/wSyGd1iKe3cHYlyoPueT+nc3DqpcG7zkg4=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/external",
    "owner": "hashicorp",
    "repo": "terraform-provider-external",
-    "rev": "v2.4.0",
+    "rev": "v2.4.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-sPQR+LDZRMXygLUd9xj6/bI+8DhAPKbkytlTzmrEOBU="
+    "vendorHash": "sha256-gv54RqpkWri5yL40ajcLnqzF0XvMEzFoFEEV2/g1paE="
  },
  "hashicorp_google": {
-    "hash": "sha256-rKwsETOAtmzID3FqtI5CJ1CO+YgL8uL9PwyuV0hZuHc=",
+    "hash": "sha256-GWC0PIYMAhI9KO2j5yI7W7v0el8u9d1qqUyaWq/sodo=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/google",
    "owner": "hashicorp",
    "repo": "terraform-provider-google",
-    "rev": "v7.43.0",
+    "rev": "v7.44.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-neR/S8EYCwQky1U6EfMjmyCVJPqhckhqdc9As2Nsn1I="
+    "vendorHash": "sha256-gy+Tn9L2NYRYnmYGcb2jqTTXJDzMqHtm2EgSQZunbjg="
  },
  "hashicorp_google-beta": {
    "hash": "sha256-Intcf0AMcQVC1CGbMNS7NGKN9bFTSOkB36YsI3YbvAU=",
--- a/pkgs/applications/networking/znc/default.nix
+++ b/pkgs/applications/networking/znc/default.nix
@@ -24,11 +24,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "znc";
-  version = "1.10.1";
+  version = "1.10.2";

  src = fetchurl {
    url = "https://znc.in/releases/archive/znc-${finalAttrs.version}.tar.gz";
-    hash = "sha256-Tm52hR2/JgYYWXK1PsXeytaP5TtjpW5N+LizwKbEaAA=";
+    hash = "sha256-W3Vh87EAI01YrklG6sAmKrMF0nXAlOZK5yPkXQe+CKs=";
  };

  postPatch = ''
--- a/pkgs/by-name/al/alienarena/package.nix
+++ b/pkgs/by-name/al/alienarena/package.nix
@@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "alienarena";
-  version = "7.71.7";
+  version = "7.72.1";

  src = fetchFromGitHub {
    owner = "alienarena";
    repo = "alienarena";
    rev = version;
-    hash = "sha256-ri0p/0onI5DU7kDxwdFxRyT1LQLVe89VNEYPXPgilOs=";
+    hash = "sha256-GRvscAOYPY9wah9jweDSlWKT1oY4ZY0Bh79v4W/qKk8=";
  };

  nativeBuildInputs = [ pkg-config ];
--- a/pkgs/by-name/al/alsa-tools/package.nix
+++ b/pkgs/by-name/al/alsa-tools/package.nix
@@ -5,6 +5,7 @@
  alsa-lib,
  fltk_1_3,
  gtk3,
+  gtk4,
  makeWrapper,
  pkg-config,
  psmisc,
@@ -12,11 +13,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "alsa-tools";
-  version = "1.2.14";
+  version = "1.2.15";

  src = fetchurl {
    url = "mirror://alsa/tools/alsa-tools-${finalAttrs.version}.tar.bz2";
-    hash = "sha256-+u9v3TnsecmlRz3GOqG2Mxv3ZkqdRSoKgZjOxwFsvG8=";
+    hash = "sha256-gASY01IzZy72f0v3TMbh034f5wwFQOLS4GLyMZ57Xfc=";
  };

  nativeBuildInputs = [
@@ -28,6 +29,7 @@ stdenv.mkDerivation (finalAttrs: {
    alsa-lib
    fltk_1_3
    gtk3
+    gtk4
    psmisc
  ];

--- a/pkgs/by-name/am/amazon-ssm-agent/package.nix
+++ b/pkgs/by-name/am/amazon-ssm-agent/package.nix
@@ -43,13 +43,13 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "amazon-ssm-agent";
-  version = "3.3.4515.0";
+  version = "3.3.5068.0";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "amazon-ssm-agent";
    tag = finalAttrs.version;
-    hash = "sha256-FEYziTgYIzX8tm/zgVDi2Tvbxn+lBnXAAqqO+LhlQYM=";
+    hash = "sha256-gZDYspw/SnE2lMCjfQbkdWldsc5vi9dGMQ4KX643j3g=";
  };

  vendorHash = null;
--- a/pkgs/by-name/am/amiberry/package.nix
+++ b/pkgs/by-name/am/amiberry/package.nix
@@ -21,13 +21,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "amiberry";
-  version = "8.1.6";
+  version = "8.3.0";

  src = fetchFromGitHub {
    owner = "BlitterStudio";
    repo = "amiberry";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-XUq7L2udZDH78UHeZBjbiERRwEwv8+JfxpPnThOGV6k=";
+    hash = "sha256-8kkI+xINpV58riZxwJOycy0sJ0lmcMc5OFLOUkSrKiE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ar/ares-cli/package.nix
+++ b/pkgs/by-name/ar/ares-cli/package.nix
@@ -8,18 +8,18 @@

 buildNpmPackage rec {
  pname = "ares-cli";
-  version = "3.2.4";
+  version = "3.2.5";
  src = fetchFromGitHub {
    owner = "webos-tools";
    repo = "cli";
    rev = "v${version}";
-    hash = "sha256-dM8o/mK8AbQNCE6UrSWyOkL5c3G25j3NfoDYJ6X7irg=";
+    hash = "sha256-NWTDAgMGX+dPOIM8B7clx9sAYdWh+3VciWjTu1Qc39M=";
  };

  nodejs = nodejs_22;

  dontNpmBuild = true;
-  npmDepsHash = "sha256-18sZW5yBDkEUlDgAERAsUQCOUOaBao6+wHOM9TCAlms=";
+  npmDepsHash = "sha256-9nksCIrEltYdV5CeNUfIMgh5oMvzuelfOwdgzVoq1LE=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/as/asyncapi/package.nix
+++ b/pkgs/by-name/as/asyncapi/package.nix
@@ -7,16 +7,16 @@

 buildNpmPackage (finalAttrs: {
  pname = "asyncapi";
-  version = "6.0.0";
+  version = "6.0.2";

  src = fetchFromGitHub {
    owner = "asyncapi";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-AvEzwUMXZZRexlcYbD4iW2GYmndN0usFxYJclXst57g=";
+    hash = "sha256-SMjxuMI2PL8NG4MaC8jLMMzNAt6Bry1zeZYj7FZMEnY=";
  };

-  npmDepsHash = "sha256-f+1KRqPIufMoSv6pa7CAd8fvG8uigNjr6QE6leVCtUI=";
+  npmDepsHash = "sha256-BqLXJX3rkaY+bKaR8sYAUSe1LgkugsAZ3iFCBuCseeo=";

  env.PUPPETEER_SKIP_DOWNLOAD = "true";

--- a/pkgs/by-name/at/atkmm_2_36/package.nix
+++ b/pkgs/by-name/at/atkmm_2_36/package.nix
@@ -13,11 +13,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "atkmm";
-  version = "2.36.3";
+  version = "2.36.4";

  src = fetchurl {
    url = "mirror://gnome/sources/atkmm/${lib.versions.majorMinor finalAttrs.version}/atkmm-${finalAttrs.version}.tar.xz";
-    sha256 = "sha256-bsJk6qDE3grbcgLGABcL3pp/vk1Ga/vpQOr3+qpsWXQ=";
+    sha256 = "sha256-Gc0HWO11LLifW/AiR2Y9+tCSbZNRmEog48bPfaYlUqw=";
  };

  outputs = [
--- a/pkgs/by-name/at/atuin/package.nix
+++ b/pkgs/by-name/at/atuin/package.nix
@@ -1,39 +1,54 @@
 {
  lib,
-  stdenv,
  fetchFromGitHub,
  installShellFiles,
-  rustPlatform,
-  nixosTests,
  nix-update-script,
+  nixosTests,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  stdenv,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "atuin";
-  version = "18.18.1";
+  version = "18.19.0";

  src = fetchFromGitHub {
    owner = "atuinsh";
    repo = "atuin";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dPdD9U1CwuGbd1K/ljYwgTlAl9sSzt+dSuxLijLlyBQ=";
+    hash = "sha256-P+57HkZ2Xl2sFBNw8zaaX91DF47DVQQswXAziu5h4NM=";
  };

-  cargoHash = "sha256-t8UK0/WBGleU1qbTUITl+hj1wXsEqIyreZJFBGxAMkg=";
+  cargoHash = "sha256-15H0BwkJZ8Khu6H9K31VBxYRy8b/KhK32/b5kaxmRjw=";
+
+  postPatch = ''
+    substituteInPlace crates/atuin-pty-proxy/tests/{fd_pressure,subscriber}.rs \
+      --replace-fail "/bin/cat" "cat"
+  '';

  # atuin's default features include 'check-updates', which do not make sense
  # for distribution builds. List all other default features.
+  # see https://github.com/atuinsh/atuin/blob/main/crates/atuin/Cargo.toml#L42
  buildNoDefaultFeatures = true;
  buildFeatures = [
    "ai"
    "client"
    "clipboard"
    "daemon"
-    "hex"
+    "pty-proxy"
    "sync"
  ];

-  nativeBuildInputs = [ installShellFiles ];
+  nativeBuildInputs = [
+    installShellFiles
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+  ];

  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
    installShellCompletion --cmd atuin \
--- a/pkgs/by-name/ba/backblaze-b2/package.nix
+++ b/pkgs/by-name/ba/backblaze-b2/package.nix
@@ -11,14 +11,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "backblaze-b2";
-  version = "4.7.0";
+  version = "4.7.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Backblaze";
    repo = "B2_Command_Line_Tool";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-canG8uEgPukNJiFk+SoSANkKvOBFBZ8lV3lH0tnEzrY=";
+    hash = "sha256-vAz+gCNiEyobrjl2tnQRALkw7nTZUDZIx3GG57iSUAs=";
  };

  nativeBuildInputs = with python3Packages; [
--- a/pkgs/by-name/ba/barrage/package.nix
+++ b/pkgs/by-name/ba/barrage/package.nix
@@ -8,11 +8,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "barrage";
-  version = "1.0.7";
+  version = "1.0.8";

  src = fetchurl {
    url = "mirror://sourceforge/lgames/barrage-${finalAttrs.version}.tar.gz";
-    hash = "sha256-cGYrG7A4Ffh51KyR+UpeWu7A40eqxI8g4LefBIs18kg=";
+    hash = "sha256-9mdC7JiZPGnjj9+h4jezIY2AL0X096MxzTwlwH1zYT8=";
  };

  postPatch = ''
--- a/pkgs/by-name/be/betteralign/package.nix
+++ b/pkgs/by-name/be/betteralign/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "betteralign";
-  version = "0.14.3";
+  version = "0.14.4";

  src = fetchFromGitHub {
    owner = "dkorunic";
    repo = "betteralign";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7agSAqKz0DBTzBT/cjDR7gVP09G1yk/2ldqSpj+HxB8=";
+    hash = "sha256-sofvg2bHXbIamGo2o33K+DybKMbIGvm4Nd0/exjHOEE=";

    # Trick for getting accurate commit, source date and timestamp for ldflags
    # Required by upstream https://github.com/dkorunic/betteralign/blob/346baa9c9dd024bfe55302c9d7d0ca46b2734c1c/.goreleaser.yml
@@ -28,7 +28,7 @@ buildGoModule (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-K2n418V0LBM3Q9UcWS59v915RgiCnhQ5pNRy9P9OBTg=";
+  vendorHash = "sha256-GHOHbNFV1ta/VaXsvbrwogfdjXIhSH3kdHLHLSDNkq4=";

  env.CGO_ENABLED = 0;

--- a/pkgs/by-name/bi/bign-handheld-thumbnailer/package.nix
+++ b/pkgs/by-name/bi/bign-handheld-thumbnailer/package.nix
@@ -16,18 +16,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "bign-handheld-thumbnailer";
-  version = "1.2.0";
+  version = "1.2.1";

  src = fetchFromGitHub {
    owner = "MateusRodCosta";
    repo = "bign-handheld-thumbnailer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+iWf5ybCUHlZz3Ybw3bwLKzlsmiVwep2alVDvL9bG2A=";
+    hash = "sha256-RlqwAd1L5r3IQEQe1jY4oFKy615w5N1nB74V6DFTbxw=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-vfTbfg1CAbc//UZtI5trw6znqnNGy6AiCSQNE68vch8=";
+    hash = "sha256-VPsmZeZfWOTt2O2E0h7UA4rVRCt4nCD8+7N0G2UrxgI=";
  };

  strictDeps = true;
--- a/pkgs/by-name/bn/bngblaster/package.nix
+++ b/pkgs/by-name/bn/bngblaster/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "bngblaster";
-  version = "0.9.34";
+  version = "0.9.38";

  src = fetchFromGitHub {
    owner = "rtbrick";
    repo = "bngblaster";
    rev = finalAttrs.version;
-    hash = "sha256-XkJyNybA0/zjYaz5S1yr6IOVnBOqdXcqRu7bCGpv3CA=";
+    hash = "sha256-fz/hS47pCw01dRF7DaPpnZMv2QQBD1hgES4eVGXe/LI=";
  };

  nativeBuildInputs = [ cmake ];
--- a/pkgs/by-name/bo/boinc/package.nix
+++ b/pkgs/by-name/bo/boinc/package.nix
@@ -28,14 +28,14 @@

 stdenv.mkDerivation rec {
  pname = "boinc";
-  version = "8.2.13";
+  version = "8.2.15";

  src = fetchFromGitHub {
    name = "${pname}-${version}-src";
    owner = "BOINC";
    repo = "boinc";
    rev = "client_release/${lib.versions.majorMinor version}/${version}";
-    hash = "sha256-BzP3yDGAhJ1DtrxLEc3s27EwJilMVi6A1NoTv0NwH9c=";
+    hash = "sha256-cgRjlTTgjTwsrNoLRed61BwrSCTSQLEGNmmoyLXTm7g=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/bu/bun/package.nix
+++ b/pkgs/by-name/bu/bun/package.nix
@@ -76,8 +76,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
        hash = "sha256-cLrkGzkIsKEg4eWMXIrzDnSvrjuNEbDT/djnh937SyI=";
      };
      "x86_64-linux" = fetchurl {
-        url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-linux-x64.zip";
-        hash = "sha256-ecB3H6i5LDOq5B4VoODTB+qZ0OLwAxfHHGxTI3p44lo=";
+        url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-linux-x64-baseline.zip";
+        hash = "sha256-nYokKSpwaAkCBdqsCloiP19pc29Sh+N7+I07QDHtx1A=";
      };
    };
    updateScript = writeShellScript "update-bun" ''
--- a/pkgs/by-name/ca/caelestia-cli/package.nix
+++ b/pkgs/by-name/ca/caelestia-cli/package.nix
@@ -0,0 +1,93 @@
+{
+  lib,
+  python3,
+  fetchFromGitHub,
+  installShellFiles,
+  swappy,
+  libnotify,
+  slurp,
+  wl-clipboard,
+  cliphist,
+  xdg-utils,
+  dart-sass,
+  grim,
+  fuzzel,
+  gpu-screen-recorder,
+  dconf,
+  killall,
+}:
+
+python3.pkgs.buildPythonApplication rec {
+  pname = "caelestia-cli";
+  __structuredAttrs = true;
+  version = "1.1.2";
+
+  src = fetchFromGitHub {
+    owner = "caelestia-dots";
+    repo = "cli";
+    tag = "v${version}";
+    hash = "sha256-cCP6RAEh6JliKFmvtgi97uIG1dH0lIIuDNAdrdX+1U0=";
+  };
+
+  pyproject = true;
+
+  build-system = with python3.pkgs; [
+    hatch-vcs
+    hatchling
+  ];
+
+  dependencies = with python3.pkgs; [
+    materialyoucolor
+    pillow
+  ];
+
+  pythonImportsCheck = [ "caelestia" ];
+
+  nativeBuildInputs = [ installShellFiles ];
+
+  runtimeDeps = [
+    swappy
+    libnotify
+    slurp
+    wl-clipboard
+    cliphist
+    xdg-utils
+    dart-sass
+    grim
+    fuzzel
+    gpu-screen-recorder
+    dconf
+    killall
+  ];
+
+  makeWrapperArgs = [
+    "--suffix"
+    "PATH"
+    ":"
+    "${lib.makeBinPath runtimeDeps}"
+  ];
+
+  env.SETUPTOOLS_SCM_PRETEND_VERSION = version;
+
+  postPatch = ''
+    substituteInPlace src/caelestia/subcommands/{shell.py,screenshot.py} \
+        --replace-fail '"qs", "-c", "caelestia"' '"caelestia-shell"'
+
+    substituteInPlace src/caelestia/subcommands/toggle.py \
+        --replace-fail 'discord' 'discord' \
+        --replace-fail '["todoist"]' '["todoist.desktop"]'
+  '';
+
+  postInstall = ''
+    installShellCompletion completions/caelestia.fish
+  '';
+
+  meta = {
+    description = "The main control script for the Caelestia dotfiles";
+    homepage = "https://github.com/caelestia-dots/cli";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "caelestia";
+    maintainers = with lib.maintainers; [ rachalaraj ];
+    platforms = lib.platforms.linux;
+  };
+}
--- a/pkgs/by-name/ca/caelestia-shell/package.nix
+++ b/pkgs/by-name/ca/caelestia-shell/package.nix
@@ -0,0 +1,215 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  fetchFromGitHub,
+  makeWrapper,
+  makeFontsConf,
+  fish,
+  ddcutil,
+  brightnessctl,
+  networkmanager,
+  lm_sensors,
+  swappy,
+  wl-clipboard,
+  libqalculate,
+  bash,
+  hyprland,
+  material-symbols,
+  rubik,
+  nerd-fonts,
+  qt6,
+  quickshell,
+  aubio,
+  libcava,
+  fftw,
+  pipewire,
+  xkeyboard-config,
+  cmake,
+  ninja,
+  pkg-config,
+  caelestia-cli,
+  debug ? false,
+  withCli ? true,
+}:
+let
+  version = "2.3.0";
+  rev = "94d5eb9e6fe9c6b1f69e663d9ed410a441e2d67f";
+
+  m3shapes_src = fetchFromGitHub {
+    owner = "soramanew";
+    repo = "m3shapes";
+    rev = "bdc327b29f95394a732baf3c9b19658ba23755b6";
+    hash = "sha256-kfHyzZaPHgqZML48OA+5JwBOsLdQJ2ci/aGPShvUB4Y=";
+  };
+
+  runtimeDeps = [
+    fish
+    ddcutil
+    brightnessctl
+    networkmanager
+    lm_sensors
+    swappy
+    wl-clipboard
+    libqalculate
+    bash
+    hyprland
+  ]
+  ++ lib.optional withCli caelestia-cli;
+
+  fontconfig = makeFontsConf {
+    fontDirectories = [
+      material-symbols
+      rubik
+      nerd-fonts.caskaydia-cove
+    ];
+  };
+
+  cmakeBuildType = if debug then "Debug" else "RelWithDebInfo";
+
+  cmakeVersionFlags = [
+    (lib.cmakeFeature "VERSION" version)
+    (lib.cmakeFeature "GIT_REVISION" rev)
+    (lib.cmakeFeature "DISTRIBUTOR" "nixpkgs")
+  ];
+
+  m3shapesFlag = lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_M3SHAPES_EXTERNAL" "${m3shapes_src}";
+
+  shellSrc = fetchurl {
+    url = "https://github.com/caelestia-dots/shell/releases/download/v${version}/caelestia-shell-v${version}.tar.gz";
+    hash = "sha256-EjPnMXxonYAewJW1/XKQUC5fbqIU7xSwI3XTW1VC544=";
+  };
+
+  extras = stdenv.mkDerivation {
+    inherit cmakeBuildType;
+    name = "caelestia-extras";
+    src = shellSrc;
+
+    nativeBuildInputs = [
+      cmake
+      ninja
+    ];
+
+    cmakeFlags = [
+      (lib.cmakeFeature "ENABLE_MODULES" "extras")
+      (lib.cmakeFeature "INSTALL_LIBDIR" "${placeholder "out"}/lib")
+    ]
+    ++ cmakeVersionFlags;
+  };
+
+  plugin = stdenv.mkDerivation {
+    inherit cmakeBuildType;
+    name = "caelestia-qml-plugin";
+    src = shellSrc;
+
+    nativeBuildInputs = [
+      cmake
+      ninja
+      pkg-config
+    ];
+    buildInputs = [
+      qt6.qtbase
+      qt6.qtdeclarative
+      qt6.qtshadertools
+      libqalculate
+      pipewire
+      aubio
+      libcava
+      fftw
+      lm_sensors
+    ];
+
+    dontWrapQtApps = true;
+    cmakeFlags = [
+      (lib.cmakeFeature "ENABLE_MODULES" "plugin")
+      (lib.cmakeFeature "INSTALL_QMLDIR" qt6.qtbase.qtQmlPrefix)
+    ]
+    ++ cmakeVersionFlags;
+  };
+
+  m3shapesModule = stdenv.mkDerivation {
+    inherit cmakeBuildType;
+    name = "caelestia-m3shapes";
+    src = shellSrc;
+
+    nativeBuildInputs = [
+      cmake
+      ninja
+    ];
+    buildInputs = [
+      qt6.qtbase
+      qt6.qtdeclarative
+    ];
+
+    dontWrapQtApps = true;
+    cmakeFlags = [
+      (lib.cmakeFeature "ENABLE_MODULES" "m3shapes")
+      (lib.cmakeFeature "INSTALL_QMLDIR" qt6.qtbase.qtQmlPrefix)
+      m3shapesFlag
+    ]
+    ++ cmakeVersionFlags;
+  };
+
+in
+stdenv.mkDerivation {
+  inherit version cmakeBuildType;
+  pname = "caelestia-shell";
+  __structuredAttrs = true;
+  strictDeps = true;
+  src = shellSrc;
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+    makeWrapper
+    qt6.wrapQtAppsHook
+  ];
+  buildInputs = [
+    quickshell
+    extras
+    plugin
+    m3shapesModule
+    xkeyboard-config
+    qt6.qtbase
+    qt6.qtimageformats
+  ];
+
+  cmakeFlags = [
+    (lib.cmakeFeature "ENABLE_MODULES" "shell")
+    (lib.cmakeFeature "INSTALL_QSCONFDIR" "${placeholder "out"}/share/caelestia-shell")
+  ]
+  ++ cmakeVersionFlags;
+
+  postPatch = ''
+    substituteInPlace assets/pam.d/fprint \
+      --replace-fail pam_fprintd.so /run/current-system/sw/lib/security/pam_fprintd.so
+    substituteInPlace assets/pam.d/howdy \
+      --replace-fail pam_howdy.so /run/current-system/sw/lib/security/pam_howdy.so
+  '';
+
+  postInstall = ''
+    makeWrapper ${quickshell}/bin/qs $out/bin/caelestia-shell \
+      --prefix PATH : "${lib.makeBinPath runtimeDeps}" \
+      --prefix QT_PLUGIN_PATH : "${lib.getLib qt6.qtimageformats}/${qt6.qtbase.qtPluginPrefix}" \
+      --set FONTCONFIG_FILE "${fontconfig}" \
+      --set CAELESTIA_LIB_DIR ${extras}/lib \
+      --set CAELESTIA_XKB_RULES_PATH ${xkeyboard-config}/share/xkeyboard-config-2/rules/base.lst \
+      --add-flags "-p $out/share/caelestia-shell"
+
+    mkdir -p $out/lib
+    ln -s ${extras}/lib/* $out/lib/
+  '';
+
+  passthru = {
+    inherit plugin extras m3shapesModule;
+  };
+
+  meta = {
+    description = "Fluid, morphing shell for your Linux desktop";
+    homepage = "https://github.com/caelestia-dots/shell";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "caelestia-shell";
+    maintainers = with lib.maintainers; [ rachalaraj ];
+    platforms = lib.platforms.linux;
+  };
+}
--- a/pkgs/by-name/ca/calcure/package.nix
+++ b/pkgs/by-name/ca/calcure/package.nix
@@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "calcure";
-  version = "3.2.1";
+  version = "3.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "anufrievroman";
    repo = "calcure";
    tag = finalAttrs.version;
-    hash = "sha256-YFX70gtNcIXG5XIuMlz47nmtjt/2oHzi6cajcj+DAyQ=";
+    hash = "sha256-c5CeQ7pKsWGqnvhK6wInUcauG23IS2L4WhthoB9BcGY=";
  };

  nativeBuildInputs = with python3.pkgs; [
--- a/pkgs/by-name/ca/cava/package.nix
+++ b/pkgs/by-name/ca/cava/package.nix
@@ -5,6 +5,7 @@
  autoreconfHook,
  autoconf-archive,
  alsa-lib,
+  darwinMinVersionHook,
  fftw,
  iniparser,
  libGL,
@@ -22,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cava";
-  version = "0.10.7";
+  version = "1.0.0";

  src = fetchFromGitHub {
    owner = "karlstav";
    repo = "cava";
    tag = finalAttrs.version;
-    hash = "sha256-eOGUDGGlja5Cq8XTJFRqyP6qyaoxOJm09vZrlk4KS9k=";
+    hash = "sha256-0vQWobnt9pAZTJc45Lgcfad72BE8DUPGQ5/YwMSmU98=";
  };

  buildInputs = [
@@ -42,6 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
    alsa-lib
  ]
  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    (darwinMinVersionHook "14.2")
    portaudio
  ]
  ++ lib.optionals withSDL2 [
--- a/pkgs/by-name/ce/ceph-csi/package.nix
+++ b/pkgs/by-name/ce/ceph-csi/package.nix
@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ceph-csi";
-  version = "3.16.2";
+  version = "3.17.0";

  src = fetchFromGitHub {
    owner = "ceph";
    repo = "ceph-csi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jdBBRSkmNgwYzNUDY9Aarp0HNHsUcSNkZD+Fvv8drHQ=";
+    hash = "sha256-P3JBfInv7o3ecLHq1D6I+rL0LUaaMsmP2uiRRoBIVMc=";
  };

  preConfigure = ''
--- a/pkgs/by-name/ch/chirp/package.nix
+++ b/pkgs/by-name/ch/chirp/package.nix
@@ -11,14 +11,14 @@

 python3Packages.buildPythonApplication {
  pname = "chirp";
-  version = "0.4.0-unstable-2026-05-07";
+  version = "0.4.0-unstable-2026-05-18";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "kk7ds";
    repo = "chirp";
-    rev = "a89815c5c1575d7ab2c4bfae2ce153611f64e804";
-    hash = "sha256-nreWF3eyFuokRWm2SyOsf1tq7J1q2ox1vKqsjJSiUlQ=";
+    rev = "36add258760361a7922c80e919d598cefa414f3c";
+    hash = "sha256-Kjpradtp0sEWjAzoXvhiVJ9eY0TliGSOvdHFAKcDm9Q=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ci/circumflex/package.nix
+++ b/pkgs/by-name/ci/circumflex/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "circumflex";
-  version = "4.3";
+  version = "5.0";

  src = fetchFromGitHub {
    owner = "bensadeh";
    repo = "circumflex";
    tag = finalAttrs.version;
-    hash = "sha256-VyUJ7qiaodLTdfGyh3/tLGfNVZCAxImxOuz4ztaaqtg=";
+    hash = "sha256-JjwtLMMKQ5L99IEqFqq80QsBPt/lfJiE0ck4M+nmgbo=";
  };

-  vendorHash = "sha256-4YL0N8wA8igveYfeL4uZDY5YD1InW0iD3WWq1E/vIJs=";
+  vendorHash = "sha256-0YsQ//6bPP9I0OAHmTHQSSpCqqvE2A+2hPoUz5SEuQI=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/co/cockatrice/package.nix
+++ b/pkgs/by-name/co/cockatrice/package.nix
@@ -11,13 +11,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "cockatrice";
-  version = "2026-02-22-Release-2.10.3";
+  version = "2026-05-08-Release-3.0.0";

  src = fetchFromGitHub {
    owner = "Cockatrice";
    repo = "Cockatrice";
    rev = finalAttrs.version;
-    sha256 = "sha256-GQVdn6vUW0B9vSk7ZvSDqMNhLNe86C+/gE1n6wfQIMw=";
+    sha256 = "sha256-jLHGWtHbJTQ5Gefrnd8aUq1K3f2QzyE4YU5bW//gH4Y=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/co/coldsnap/package.nix
+++ b/pkgs/by-name/co/coldsnap/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "coldsnap";
-  version = "0.10.0";
+  version = "0.11.0";

  src = fetchFromGitHub {
    owner = "awslabs";
    repo = "coldsnap";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-QQWH8cWBskXOmiZygvkNDyBX4WdsgnA0/ec6/UnmwIA=";
+    hash = "sha256-KYP0CQ4t5ytw8vT9kOZsNjl5KY0DzBTiWp2G+oYt1SU=";
  };

-  cargoHash = "sha256-U5MinzKQYTHRXM3WndkMEbvoT9tPwIIB3QxEOwWA3zE=";
+  cargoHash = "sha256-clZ1HNABg8dVOcuRI1GmFfyFYZqiB/M1OWBpuiZrg08=";

  buildInputs = [ openssl ];
  nativeBuildInputs = [ pkg-config ];
--- a/pkgs/by-name/co/copybara/package.nix
+++ b/pkgs/by-name/co/copybara/package.nix
@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "copybara";
-  version = "20260629";
+  version = "20260727";

  src = fetchurl {
    url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-Dm5hySUhVfWwg9lAgXiB/fZnedr/R0VlG44hi6Ms+Vc=";
+    hash = "sha256-dMoq8dmDqI0GBje/w10eMtaJInk7xrEGPE1bSle8A0Y=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/cr/createrepo_c/package.nix
+++ b/pkgs/by-name/cr/createrepo_c/package.nix
@@ -23,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "createrepo_c";
-  version = "1.2.3";
+  version = "1.2.4";

  src = fetchFromGitHub {
    owner = "rpm-software-management";
    repo = "createrepo_c";
    tag = finalAttrs.version;
-    hash = "sha256-0+TnRLrQM3/rfLTkj5zHlXRXq/4n4OvkZgIRC5+XGS4=";
+    hash = "sha256-qd2XEVKt5oxB3+czaUP05poJcN+mdK3p3pvuLAVDmFA=";
  };

  postPatch = ''
--- a/pkgs/by-name/dd/ddns-go/package.nix
+++ b/pkgs/by-name/dd/ddns-go/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "ddns-go";
-  version = "6.17.1";
+  version = "6.17.5";

  src = fetchFromGitHub {
    owner = "jeessy2";
    repo = "ddns-go";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-F5QErTVE4wjNMyJHSQN3MFTiTLdgy5ADf+UUZ8acF14=";
+    hash = "sha256-OglGot/0QWn95kVIPuUvvXANRUYOXgd92rT891/8GGY=";
  };

-  vendorHash = "sha256-3jIWxjjPeEj02OQkXLvcqLJH+PjuEtL2zhfUAOtQJio=";
+  vendorHash = "sha256-FX+qhBx4MeQUDtCI7mNXwOxZT5T3oAvPtiVLY5qR+ok=";

  ldflags = [
    "-X main.version=${finalAttrs.version}"
--- a/pkgs/by-name/dh/dhewm3/package.nix
+++ b/pkgs/by-name/dh/dhewm3/package.nix
@@ -19,13 +19,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dhewm3";
-  version = "1.5.4";
+  version = "1.5.5";

  src = fetchFromGitHub {
    owner = "dhewm";
    repo = "dhewm3";
    rev = finalAttrs.version;
-    sha256 = "sha256-losqnxnjRPOczjrRPyyOxCeg9TNScXLcXADgo9Bxm5k=";
+    sha256 = "sha256-sC6XNEYqTFC49y+Pn6y3mS1/g9XbZaDl/6TOmGkdtFM=";
  };

  # Add libGLU libGL linking
--- a/pkgs/by-name/di/discordo/package.nix
+++ b/pkgs/by-name/di/discordo/package.nix
@@ -11,16 +11,16 @@

 buildGoModule (finalAttrs: {
  pname = "discordo";
-  version = "0-unstable-2026-05-12";
+  version = "0-unstable-2026-08-08";

  src = fetchFromGitHub {
    owner = "ayn2op";
    repo = "discordo";
-    rev = "af65e21854ccb4cb39cafebfd6afbd5f4858a9f0";
-    hash = "sha256-0Eiil0gaLlgQRcLIa2XbBF95+pGNGzAIiFRJ7X0r/W0=";
+    rev = "be5aebdd14f09d0ddf4260557ff4fd38d0cb6bdb";
+    hash = "sha256-OEfR63EJTQ2nwyG2KDtRwFX4+zNKuD33ro6pEmi844c=";
  };

-  vendorHash = "sha256-g/kGDK0QKZZAGczrXtVskqpsbES+MZGiuqycJ8YO6DA=";
+  vendorHash = "sha256-B2L26bSAwOTuJk3cerhfYecEr/1AZNwqnoifJavFj24=";

  env.CGO_ENABLED = 1;

--- a/pkgs/by-name/dm/dmtcp/package.nix
+++ b/pkgs/by-name/dm/dmtcp/package.nix
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dmtcp";
-  version = "4.1.0";
+  version = "4.1.1";

  src = fetchFromGitHub {
    owner = "dmtcp";
    repo = "dmtcp";
    tag = finalAttrs.version;
-    hash = "sha256-5laifZ/8oYJrNO5JOggCbPKmA9XiHEC79C/hk+0TdeQ=";
+    hash = "sha256-p+KvZM9/ZE4qRuRs7Ay3oJWl5eMdncig0li2ITVPsyA=";
  };

  dontDisableStatic = true;
--- a/pkgs/by-name/dn/dnscontrol/package.nix
+++ b/pkgs/by-name/dn/dnscontrol/package.nix
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "dnscontrol";
-  version = "4.45.0";
+  version = "4.46.0";

  src = fetchFromGitHub {
    owner = "DNSControl";
    repo = "dnscontrol";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-P3krRUpoNEVNtTREy+YsE8A9pHelaSBbjo/A1mgKIjc=";
+    hash = "sha256-pckjHak61FyPV6YikUwvIAVP2NeLMUtGqn0utXaly4w=";
  };

-  vendorHash = "sha256-DV0JBu95O6s1xt7v8qo9jZUzqF7tnf0/fBgwVWfVIIU=";
+  vendorHash = "sha256-MhF/ZUPj3slDD9Pn3j4Gy0WT3iGHlF7o7sMjo6DS+y8=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/do/doctl/package.nix
+++ b/pkgs/by-name/do/doctl/package.nix
@@ -9,7 +9,7 @@

 buildGoModule (finalAttrs: {
  pname = "doctl";
-  version = "1.160.1";
+  version = "1.166.0";

  vendorHash = null;

@@ -42,7 +42,7 @@ buildGoModule (finalAttrs: {
    owner = "digitalocean";
    repo = "doctl";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-M+DBJfUXymlzY9DJeyHl3SPaCIKCT2iN/I4rd3uyQbQ=";
+    hash = "sha256-m4KJ/WzmnLuL4/6RQV1sPUEc+PdKDNkTL2+HBGgN5x8=";
  };

  meta = {
--- a/pkgs/by-name/do/doomretro/package.nix
+++ b/pkgs/by-name/do/doomretro/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "doomretro";
-  version = "5.8.2";
+  version = "6.3";

  src = fetchFromGitHub {
    owner = "bradharding";
    repo = "doomretro";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-tFRDfiHsRNrhmKHYpV88G2W5Ww7r8D9Neu/zbln0DGc=";
+    hash = "sha256-BxDuZ3GUlkZMcWTQocHMLccuYfOedtWFkRy12odgsn0=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/dr/drawio/package.nix
+++ b/pkgs/by-name/dr/drawio/package.nix
@@ -14,14 +14,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "drawio";
-  version = "30.2.6";
+  version = "31.1.8";

  src = fetchFromGitHub {
    owner = "jgraph";
    repo = "drawio-desktop";
    rev = "v${finalAttrs.version}";
    fetchSubmodules = true;
-    hash = "sha256-hn+Lrsn+aNZqVFcyLinuJjUiQgai0o4F5d5cT9CvtLA=";
+    hash = "sha256-tVGBZ+zMl/co0l5oOp78GJG0kexgaiPx7f03WaNHxoY=";
  };

  # `@electron/fuses` tries to run `codesign` and fails. Disable and use autoSignDarwinBinariesHook instead
@@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {

  offlineCache = fetchNpmDeps {
    src = finalAttrs.src;
-    hash = "sha256-PnYUy0Arxo5uTYyYfUEkbd4u7oIOHkEc0/ufp0umBhE=";
+    hash = "sha256-Yh8j7KDzsWpGIpYM/NuikPoNDiodJZZUTNqFOThmOXQ=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/dr/druid/package.nix
+++ b/pkgs/by-name/dr/druid/package.nix
@@ -20,11 +20,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "apache-druid";
-  version = "36.0.0";
+  version = "37.0.0";

  src = fetchurl {
    url = "mirror://apache/druid/${finalAttrs.version}/apache-druid-${finalAttrs.version}-bin.tar.gz";
-    hash = "sha256-5KYbGtpq7bp3sSqYGaA+RS4WfZYF/XHBKvilkHS5tJA=";
+    hash = "sha256-xeYCvm70NWQ79fWCcTU5JXmMgYwj15qsB3ZjOMnKDdA=";
  };

  dontBuild = true;
--- a/pkgs/by-name/ec/eclib/package.nix
+++ b/pkgs/by-name/ec/eclib/package.nix
@@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: {
  # sage tests to run:
  # src/sage/interfaces/mwrank.py
  # src/sage/libs/eclib
-  # ping @timokau for more info
+  # ping the sage team for more info
  src = fetchurl {
    # all releases for this project appear on its GitHub releases page
    # by definition! other distros sometimes update whenever they see
--- a/pkgs/by-name/fc/fcron/package.nix
+++ b/pkgs/by-name/fc/fcron/package.nix
@@ -16,11 +16,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fcron";
-  version = "3.4.0";
+  version = "3.4.1";

  src = fetchurl {
    url = "http://fcron.free.fr/archives/fcron-${finalAttrs.version}.src.tar.gz";
-    sha256 = "sha256-9Of8VTzdcP9LO2rJE4s7fP+rkZi4wmbZevCodQbg4bU=";
+    sha256 = "sha256-dXF+ORbLzvvN5Y57/VFRUNdfdjI4Wy22vdL7wkKJ7NU=";
  };

  buildInputs = [ perl ];
--- a/pkgs/by-name/ff/ffizer/package.nix
+++ b/pkgs/by-name/ff/ffizer/package.nix
@@ -10,7 +10,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "ffizer";
-  version = "2.13.10";
+  version = "2.13.12";

  buildFeatures = [ "cli" ];

@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "ffizer";
    repo = "ffizer";
    rev = finalAttrs.version;
-    hash = "sha256-BaTqkfNiRLHgg3In/5zh4u5ThD+wfW7R3tjy/qsPVag=";
+    hash = "sha256-gL8LiTrsVOqb/HOiwhmMLrsFBlN7BbS5QyC6VPNoGBM=";
  };

-  cargoHash = "sha256-QbT6QxYP6ykDKtEWfFva16ms7b2wNOS+TrvPJV9ys2A=";
+  cargoHash = "sha256-dVClzX57kRtc5O0DzIGGhmV8ySH0DjffJiIbxHt+bxY=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/fi/filezilla/package.nix
+++ b/pkgs/by-name/fi/filezilla/package.nix
@@ -23,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "filezilla";
-  version = "3.70.5";
+  version = "3.70.6";

  src = fetchurl {
    # Upstream download link was made unstable on purpose
    # See https://trac.filezilla-project.org/ticket/13186
    url = "https://sources.archlinux.org/other/filezilla/filezilla-${finalAttrs.version}.tar.xz";
-    hash = "sha256-d8FsJfsdlNUSlLAe/SDT5cwRmESFfktDmCrKa4mO5dY=";
+    hash = "sha256-PdJCWpf5bbjMiyEuG2BdeVEljj2jJ5yQEHq/SmqJyD8=";
  };

  configureFlags = [
--- a/pkgs/by-name/fi/firecracker/package.nix
+++ b/pkgs/by-name/fi/firecracker/package.nix
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "firecracker";
-  version = "1.15.1";
+  version = "1.16.1";

  src = fetchFromGitHub {
    owner = "firecracker-microvm";
    repo = "firecracker";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-H3dj11Q0MgLST1TWJ5rmfPePxjXrXOYI2Xf/3uUdICU=";
+    hash = "sha256-hr3fYejqtEl+ZcWbrkQNv9f9fw+S7DyAlpqaV0dTBa0=";
  };

-  cargoHash = "sha256-N2WYnFTlz4NUAU/tjy18SPvxdDVDIIaqgu44e6unOHs=";
+  cargoHash = "sha256-txBUI+vZrymKVw4hxmRiUKLKUt42p8bUXPl3FIv3CYc=";

  # For aws-lc-sys@0.22.0: use external bindgen.
  env.AWS_LC_SYS_EXTERNAL_BINDGEN = "true";
--- a/pkgs/by-name/fi/fission/package.nix
+++ b/pkgs/by-name/fi/fission/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "fission";
-  version = "1.22.0";
+  version = "1.27.0";

  src = fetchFromGitHub {
    owner = "fission";
    repo = "fission";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-5+TyOBHHDhHtAJUtrcWUCRbewGODsut/w3chrmL+dis=";
+    hash = "sha256-bPGdUllKBkAA1cURBzuVjggHN1Phdyx7Hu6/HdqTg6c=";
  };

-  vendorHash = "sha256-y5h1lMq99gWhB9T5e8b2t9USgKc2pv+FMgl9wva8t28=";
+  vendorHash = "sha256-OIu08Wl5hcTTvMzfCcYz4JUqqhlTIDwxtdgbA5mXoRA=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/fl/flmsg/add-missing-pthread-include.patch
+++ b/pkgs/by-name/fl/flmsg/add-missing-pthread-include.patch
@@ -0,0 +1,13 @@
+font_browser.cxx uses pthread_create and pthread_t, but never includes <pthread.h>
+The header is likely pulled from a different header that includes it; however, on stricter/newer compilers it will fail (It needs the header to be explicity included in the file it is called in)
+
+--- a/src/widgets/font_browser.cxx
+++ b/src/widgets/font_browser.cxx
+@@ -33,6 +33,7 @@
+ #include <string>
+ #include <cstdio>
+ #include <stdint.h>
+#include <pthread.h>
+
+ #include <FL/Fl.H>
+ #include <FL/Fl_Color_Chooser.H>
--- a/pkgs/by-name/fl/flmsg/package.nix
+++ b/pkgs/by-name/fl/flmsg/package.nix
@@ -5,17 +5,22 @@
  fltk_1_3,
  libjpeg,
  pkg-config,
+  versionCheckHook,
 }:

 stdenv.mkDerivation (finalAttrs: {
-  version = "4.0.23";
+  version = "4.0.24";
  pname = "flmsg";
-
  src = fetchurl {
    url = "mirror://sourceforge/fldigi/flmsg-${finalAttrs.version}.tar.gz";
-    sha256 = "sha256-3eR0wrzkNjlqm5xW5dtgihs33cVUmZeS0/rf+xnPeRY=";
+    sha256 = "sha256-kzQHmND5zK/Hy40Z0RRstnJ5x5cjxDax0l2idjmeBpQ=";
  };

+  #This has been reported to upstream via email : w1hkj@w1hkj.com
+  patches = [
+    ./add-missing-pthread-include.patch
+  ];
+
  buildInputs = [
    fltk_1_3
    libjpeg
@@ -25,6 +30,9 @@ stdenv.mkDerivation (finalAttrs: {
    pkg-config
  ];

+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
  meta = {
    description = "Digital modem message program";
    homepage = "https://sourceforge.net/projects/fldigi/";
--- a/pkgs/by-name/fl/fluent-bit/package.nix
+++ b/pkgs/by-name/fl/fluent-bit/package.nix
@@ -29,13 +29,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fluent-bit";
-  version = "5.0.7";
+  version = "5.1.0";

  src = fetchFromGitHub {
    owner = "fluent";
    repo = "fluent-bit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-5X6qiwoRc7FTJSGjWYhhef9N8gaxrc9dwD8Z/8woIUo=";
+    hash = "sha256-VXLHuyOxKWiMaYSRObu/I8kFbmUx8pGa4oKMGaEItbg=";
  };

  # The source build documentation covers some dependencies and CMake options.
--- a/pkgs/by-name/fr/freefilesync/package.nix
+++ b/pkgs/by-name/fr/freefilesync/package.nix
@@ -38,7 +38,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "freefilesync";
-  version = "14.10";
+  version = "14.11";

  src = fetchurl {
    url = "https://freefilesync.org/download/FreeFileSync_${finalAttrs.version}_Source.zip";
@@ -47,7 +47,7 @@ stdenv.mkDerivation (finalAttrs: {
      rm -f "$out"
      tryDownload "$url" "$out"
    '';
-    hash = "sha256-tjyJ4+sc4nZxP7NQnBlISODsqDHKSKfpw8P8RixZj80=";
+    hash = "sha256-fn6lKM6QFIsTQ1YcpuNXCa9oK96hUx8hDJhVSjRmGcM";
  };

  sourceRoot = ".";
--- a/pkgs/by-name/fr/frescobaldi/package.nix
+++ b/pkgs/by-name/fr/frescobaldi/package.nix
@@ -9,14 +9,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "frescobaldi";
-  version = "4.0.6";
+  version = "4.0.7";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "frescobaldi";
    repo = "frescobaldi";
    tag = "v${version}";
-    hash = "sha256-IgvjKj0+8oNbuZ91n4O16kGXBS7rS63HQUNQnJcOis8=";
+    hash = "sha256-tCFK6UHLxDwouqyMbGPLXMtHsMdZ9SURGHV5GJm7z/4=";
  };

  dependencies = with python3Packages; [
--- a/pkgs/by-name/fu/fuse-emulator/package.nix
+++ b/pkgs/by-name/fu/fuse-emulator/package.nix
@@ -18,11 +18,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fuse-emulator";
-  version = "1.6.0";
+  version = "1.9.0";

  src = fetchurl {
    url = "mirror://sourceforge/fuse-emulator/fuse-${finalAttrs.version}.tar.gz";
-    sha256 = "sha256-Oo/t8v/pR8VxVhusVaWa2tTFkzj3TkSbfnpn2coEcJY=";
+    sha256 = "sha256-NGGMQZ4hXhauRYTyJ+iZ5OVb4d25D7AzgMkQrBbKs4o=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/fz/fzssh/package.nix
+++ b/pkgs/by-name/fz/fzssh/package.nix
@@ -19,14 +19,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fzssh";
-  version = "1.2.1";
+  version = "1.3.0";
  __structuredAttrs = true;

  src = fetchurl {
    # Upstream download link was made unstable on purpose
    # See https://trac.filezilla-project.org/ticket/13186
    url = "https://sources.archlinux.org/other/packages/fzssh/fzssh-${finalAttrs.version}.tar.xz";
-    hash = "sha256-oFj1meahLF00t0hu4Ra4zvfG5sq/6xchd5xDjGHx/h0=";
+    hash = "sha256-hkWCsgNyZYi1oW2GFB/5Wrd9I5l2L+u+H97ZLk8EeZY=";
  };

  strictDeps = true;
--- a/pkgs/by-name/ga/gapless/package.nix
+++ b/pkgs/by-name/ga/gapless/package.nix
@@ -16,14 +16,14 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "gapless";
-  version = "4.6";
+  version = "4.6.2";

  src = fetchFromGitLab {
    domain = "gitlab.gnome.org";
    owner = "neithern";
    repo = "g4music";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-UzOmf0it0vazKo4PhAhaobJFZc5YKBLq7bcexatROOA=";
+    hash = "sha256-ciEjJp0SS89+UUqEAV+Aqe4OZS5kFoySRhO8f6UmCQI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/gh/ghorg/package.nix
+++ b/pkgs/by-name/gh/ghorg/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "ghorg";
-  version = "1.11.12";
+  version = "1.11.14";

  src = fetchFromGitHub {
    owner = "gabrie30";
    repo = "ghorg";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-KOXUbjaw1TL6Q/fRXTU5fFkxgs1jJ5GcKbn7VVbAipY=";
+    sha256 = "sha256-YLnUF/tnE/WJ9beFNaLrVnrjZN7L/hzsLilEqHl1+L4=";
  };

  doCheck = false;
--- a/pkgs/by-name/gi/gibo/package.nix
+++ b/pkgs/by-name/gi/gibo/package.nix
@@ -11,16 +11,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "gibo";
-  version = "3.0.21";
+  version = "3.0.22";

  src = fetchFromGitHub {
    owner = "simonwhitaker";
    repo = "gibo";
    tag = "v${finalAttrs.version}";
-    sha256 = "sha256-XPJy5dDQllnffz8BxJ6BYoFZCf7/x8a/6K6o0mRmKsI=";
+    sha256 = "sha256-oI/+bsYI7AgIbJ/FwhMrzAXqq7e45tTO6EueVXI3/+I=";
  };

-  vendorHash = "sha256-JMViyQHqq2bkKuOcw+lbjkomoRv0kIqxMfE1Uu7rgfs=";
+  vendorHash = "sha256-/geO0XxT53Cw/s2TlvxkLfR/w8c724Z4UMrpTPcEDFM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/gi/git-pw/package.nix
+++ b/pkgs/by-name/gi/git-pw/package.nix
@@ -9,7 +9,7 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "git-pw";
-  version = "2.7.1";
+  version = "2.8.1";
  pyproject = true;

  env.PBR_VERSION = finalAttrs.version;
@@ -18,7 +18,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    owner = "getpatchwork";
    repo = "git-pw";
    tag = finalAttrs.version;
-    hash = "sha256-Ce+Nc2NZ42dIpeLg8OutD8ONxj1XRiNodGbTWlkK9qw=";
+    hash = "sha256-r9jdGweNiWSynjTy9HeZI93Bcnh7VOU0OpMZY7bSRWQ=";
  };

  nativeBuildInputs = with python3.pkgs; [
--- a/pkgs/by-name/gi/git-quick-stats/package.nix
+++ b/pkgs/by-name/gi/git-quick-stats/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "git-quick-stats";
-  version = "2.8.0";
+  version = "2.11.0";

  src = fetchFromGitHub {
    repo = "git-quick-stats";
    owner = "git-quick-stats";
    rev = finalAttrs.version;
-    sha256 = "sha256-YVvlrlNRDDci7fH9LW4NxZcIkakVgvKe9FhJ2gCfoXg=";
+    sha256 = "sha256-QWWIRhQ7OYtNoaApb+6B80NASngsjcZL7whpQF2Lpus=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/gi/github-desktop/package.nix
+++ b/pkgs/by-name/gi/github-desktop/package.nix
@@ -29,19 +29,19 @@

 let
  inherit (stdenv.hostPlatform.node) arch platform;
-  cacheRootHash = "sha256-2LV8hZCuX96h1KYYcL6b6XGC3uGcH5IQM4D61R7Em/U=";
-  cacheAppHash = "sha256-zX4V9mg7ljQ1AKl1fgATPVrFpx1a6jsyiLzN2VixpFE=";
+  cacheRootHash = "sha256-0NUihkzc4oO9qDpg3IXkltihk6YgYQT8Vfl53iEypQI=";
+  cacheAppHash = "sha256-cKJm9zIHBacmQ/iyNUhCBYp5vGsUakck/J4qdUFbQ7U=";
 in

 stdenv.mkDerivation (finalAttrs: {
  pname = "github-desktop";
-  version = "3.6.3";
+  version = "3.6.4";

  src = fetchFromGitHub {
    owner = "desktop";
    repo = "desktop";
    tag = "release-${finalAttrs.version}";
-    hash = "sha256-HzfecIgPp/Hof5djWkKrrZD83Z0Afr1iC2WbzQrOyyI=";
+    hash = "sha256-VTbgC/kFse6NuO/A9MLCDftvwS+dKlFM+0Dtoaco5ew=";
    fetchSubmodules = true;
    postCheckout = "git -C $out rev-parse HEAD > $out/.gitrev";
  };
--- a/pkgs/by-name/gn/gnu-smalltalk/package.nix
+++ b/pkgs/by-name/gn/gnu-smalltalk/package.nix
@@ -11,7 +11,6 @@
  readline,
  gmp,
  gnutls,
-  gtk2,
  cairo,
  SDL,
  sqlite,
@@ -63,14 +62,13 @@ stdenv.mkDerivation (finalAttrs: {
    readline
    gmp
    gnutls
-    gtk2
    cairo
    SDL
    sqlite
  ]
  ++ lib.optional emacsSupport emacs;

-  configureFlags = lib.optional (!emacsSupport) "--without-emacs";
+  configureFlags = [ "--enable-gtk=no" ] ++ lib.optionals (!emacsSupport) [ "--without-emacs" ];

  hardeningDisable = [ "format" ];

--- a/pkgs/by-name/go/gotify-desktop/package.nix
+++ b/pkgs/by-name/go/gotify-desktop/package.nix
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gotify-desktop";
-  version = "1.4.2";
+  version = "1.5.0";

  src = fetchFromGitHub {
    owner = "desbma";
    repo = "gotify-desktop";
    rev = finalAttrs.version;
-    sha256 = "sha256-BD8BqG+YheAGvHWrI1/PqCs6T3O3OwXodZq3gvgh1LU=";
+    sha256 = "sha256-bKLqe02/KnSjeho7SYAiN2k3YY4XMpjLCZfWJngTIOQ=";
  };

-  cargoHash = "sha256-CHo3TYNpXdU3g7vKEwmubPKy+COSZ9Ay77nW8IlK9H4=";
+  cargoHash = "sha256-IgenG3xPxo4JRzQ/F3pxrYM4KiPU0TfFYc32TDT8rag=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/gp/gping/package.nix
+++ b/pkgs/by-name/gp/gping/package.nix
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gping";
-  version = "1.20.1";
+  version = "1.20.4";

  src = fetchFromGitHub {
    owner = "orf";
    repo = "gping";
    tag = "gping-v${finalAttrs.version}";
-    hash = "sha256-whHbGZnxOQ/ISyWMl6miuogppZahgXxO3XmhcP6ymIo=";
+    hash = "sha256-m26GtfRhgib13g+3/cXLwIdMKr3CofaMKFFCFKa8OI4=";
  };

-  cargoHash = "sha256-F0QBL7tCCdjnavClqrw8yYxFrY8y4f8h/gcHSpEqBiM=";
+  cargoHash = "sha256-CFJ7X0hJG6Whd9vMHo5Au93LueXiAHHEo9dPOKSmD+k=";

  patches = [
    (fetchpatch {
--- a/pkgs/by-name/gu/gut/package.nix
+++ b/pkgs/by-name/gu/gut/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "gut";
-  version = "0.3.2";
+  version = "0.3.3";

  src = fetchFromGitHub {
    owner = "julien040";
    repo = "gut";
    rev = finalAttrs.version;
-    hash = "sha256-3A6CwGIZGnTFkMRxDdDg/WpUQezNmGjjSz4Rj/6t1GI=";
+    hash = "sha256-h2lrmFfWENPD8i5kyDDtmN3hwliLPvVePhFdMfq46z8=";
  };

-  vendorHash = "sha256-EL+fsh603ydZfc3coI8VXkvAStQ0fwzBsJIOztB/VHc=";
+  vendorHash = "sha256-yO1+lNKVsPipyTBVKItmOKClMBdHphReSVP8KnQITJM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ha/hamrs-pro/package.nix
+++ b/pkgs/by-name/ha/hamrs-pro/package.nix
@@ -8,23 +8,23 @@

 let
  pname = "hamrs-pro";
-  version = "2.47.1";
+  version = "2.52.0";

  throwSystem = throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}";

  srcs = {
    x86_64-linux = fetchurl {
      url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-linux-x86_64.AppImage";
-      hash = "sha256-JcckonAYM4HE8yTvzJHJ3pX+H4jOPaUQXaYmWUAg8AY=";
+      hash = "sha256-Zh/6F2vHGz8Aih4ld34ylKT5y5IuPbgnoAj8V6Z5lsk=";
    };

    aarch64-linux = fetchurl {
      url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-linux-arm64.AppImage";
-      hash = "sha256-5WUQBFyvMHZyyIH2aImCRUYdzou8BadaH/M4+5DeQdo=";
+      hash = "sha256-beOod63aKwfd1NrS7Or1p4KH5+KMdJ4AGo0mqIGDq9g=";
    };
    aarch64-darwin = fetchurl {
      url = "https://hamrs-dist.s3.amazonaws.com/hamrs-pro-${version}-mac-arm64.dmg";
-      hash = "sha256-/9UamFxEJ9NkswgsI8mcfher9nFpVt5Vk0QYFpRXRB4=";
+      hash = "sha256-M8JohJkY1U5NQHCiMg82pPhSH/bf1Hah+9jye9P8EzE=";
    };
  };

--- a/pkgs/by-name/ha/haveged/package.nix
+++ b/pkgs/by-name/ha/haveged/package.nix
@@ -6,13 +6,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "haveged";
-  version = "1.9.21";
+  version = "1.9.26";

  src = fetchFromGitHub {
    owner = "jirka-h";
    repo = "haveged";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-ldJsB09xgACCI9ne10gxr2T2f20aVPXJXea32hoCYP8=";
+    hash = "sha256-mt3lQYCTiZSDf8toogAxx9VGewSMwyhdalLe0W2C+DQ=";
  };

  strictDeps = true;
--- a/pkgs/by-name/he/hebcal/package.nix
+++ b/pkgs/by-name/he/hebcal/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "hebcal";
-  version = "5.9.4";
+  version = "5.15.0";

  src = fetchFromGitHub {
    owner = "hebcal";
    repo = "hebcal";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6SyK5BKVMGcqEFy3tbPBPqmZYp9/DD8A3VUNpAsihEM=";
+    hash = "sha256-tLusgxpTXgmaWystWjp5aexKxmvjnCkNEN3+XjaGYTc=";
  };

  vendorHash = null;
--- a/pkgs/by-name/he/heidisql/package.nix
+++ b/pkgs/by-name/he/heidisql/package.nix
@@ -0,0 +1,157 @@
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  fpc,
+  lazarus-qt6,
+  qt6Packages,
+  autoPatchelfHook,
+  writableTmpDirAsHomeHook,
+  mariadb-connector-c,
+  libpq,
+  sqlite,
+  freetds,
+  firebird,
+  writers,
+  copyDesktopItems,
+  makeDesktopItem,
+  gitUpdater,
+}:
+
+stdenv.mkDerivation (
+  finalAttrs:
+  let
+    makeDbConnector =
+      {
+        package,
+        library,
+        path ? "lib",
+      }:
+      {
+        inherit package library;
+        path = "${lib.getLib package}/${path}";
+      };
+
+    dbConnectors = [
+      (makeDbConnector {
+        package = mariadb-connector-c;
+        library = "libmariadb.so";
+        path = "lib/mariadb";
+      })
+      (makeDbConnector {
+        package = libpq;
+        library = "libpq.so";
+      })
+      (makeDbConnector {
+        package = sqlite;
+        library = "libsqlite3.so";
+      })
+      (makeDbConnector {
+        package = freetds;
+        library = "libsybdb.so";
+      })
+      (makeDbConnector {
+        package = firebird;
+        library = "libfbclient.so";
+      })
+    ];
+
+    customScript = writers.writeBashBin "heidisql-ldconfig" (
+      lib.concatStringsSep "\n" (
+        map (
+          x: "printf '\t%s (libc6,x86-64) => %s/%s\n' \"${x.library}\" \"${x.path}\" \"${x.library}\""
+        ) dbConnectors
+      )
+    );
+  in
+  {
+    pname = "heidisql";
+    version = "12.20";
+
+    strictDeps = true;
+    __structuredAttrs = true;
+
+    src = fetchFromGitHub {
+      owner = "HeidiSQL";
+      repo = "HeidiSQL";
+      tag = "v${finalAttrs.version}";
+      hash = "sha256-Ol5JPf1+R47+tennlFsCk/XExH3lQbtQ3dVsxaU6kpU=";
+    };
+
+    nativeBuildInputs = [
+      fpc
+      lazarus-qt6
+      qt6Packages.wrapQtAppsHook
+      autoPatchelfHook
+      writableTmpDirAsHomeHook
+      copyDesktopItems
+    ];
+
+    buildInputs = [
+      qt6Packages.qtbase
+      qt6Packages.libqtpas
+    ]
+    ++ (map (x: x.package) dbConnectors);
+
+    postPatch = ''
+      substituteInPlace source/dbconnection.pas \
+        --replace-fail "/sbin/ldconfig" "$out/bin/heidisql-ldconfig"
+    '';
+
+    buildPhase = ''
+      lazbuild \
+        --lazarusdir=${lazarus-qt6}/share/lazarus \
+        --widgetset=qt6 \
+        --build-mode=Release \
+        heidisql.lpi
+    '';
+
+    installPhase = ''
+      runHook preInstall
+
+      install -D out/heidisql $out/bin/heidisql
+      install -D ${customScript}/bin/heidisql-ldconfig $out/bin/heidisql-ldconfig
+      install -D res/mainicon.png $out/share/icons/hicolor/48x48/apps/heidisql.png
+
+      install -D LICENSE $out/share/licenses/heidisql/LICENSE
+      install -D LICENSE-openssl $out/share/licenses/heidisql/LICENSE-openssl
+      install -D license.txt $out/share/licenses/heidisql/license.txt
+
+      mkdir -p $out/share/heidisql/{ini,locale}
+      install -D extra/ini/* $out/share/heidisql/ini/.
+      install -D extra/locale/* $out/share/heidisql/locale/.
+
+      runHook postInstall
+    '';
+
+    desktopItems = [
+      (makeDesktopItem {
+        name = "heidisql";
+        desktopName = "HeidiSQL";
+        comment = "A lightweight client for managing MariaDB, MySQL, SQL Server, PostgreSQL, SQLite, Interbase and Firebird, written in Delphi and Lazarus/FreePascal";
+        icon = "heidisql";
+        exec = "heidisql";
+        terminal = false;
+        categories = [
+          "Qt"
+          "Development"
+        ];
+      })
+    ];
+
+    passthru.updateScript = gitUpdater {
+      ignoredVersions = "[v0-9.]*-Windows$";
+      allowedVersions = "v[0-9]*.[0-9]*";
+      rev-prefix = "v";
+    };
+
+    meta = {
+      mainProgram = "heidisql";
+      description = "A lightweight client for managing MariaDB, MySQL, SQL Server, PostgreSQL, SQLite, Interbase and Firebird, written in Delphi and Lazarus/FreePascal";
+      homepage = "https://www.heidisql.com/";
+      platforms = [ "x86_64-linux" ];
+      license = lib.licenses.gpl2;
+      maintainers = with lib.maintainers; [ leoflo ];
+    };
+  }
+)
--- a/pkgs/by-name/hi/highlight/package.nix
+++ b/pkgs/by-name/hi/highlight/package.nix
@@ -15,7 +15,7 @@
 let
  self = stdenv.mkDerivation (finalAttrs: {
    pname = "highlight";
-    version = "4.20";
+    version = "4.21";

    strictDeps = true;
    __structuredAttrs = true;
@@ -24,7 +24,7 @@ let
      owner = "saalen";
      repo = "highlight";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-fMIyMR9RA60hdy1eniJkvLHK+WJPuVehWMyS9Lt6iQ4=";
+      hash = "sha256-lIfaiVM6M6RN4DeTGTdASNavFljyDRpts3a+N6I2gJY=";
    };

    enableParallelBuilding = true;
@@ -78,6 +78,7 @@ let
      description = "Source code highlighting tool";
      mainProgram = "highlight";
      homepage = "http://www.andre-simon.de/doku/highlight/en/highlight.php";
+      changelog = "https://gitlab.com/saalen/highlight/-/blob/${finalAttrs.src.tag}/ChangeLog.adoc?ref_type=tags#user-content-highlight-${lib.versions.major finalAttrs.version}-${lib.versions.minor finalAttrs.version}";
      platforms = lib.platforms.unix;
      maintainers = [ ];
    };
--- a/pkgs/by-name/hq/hqplayer-desktop/package.nix
+++ b/pkgs/by-name/hq/hqplayer-desktop/package.nix
@@ -1,120 +1,162 @@
 {
-  stdenv,
  alsa-lib,
  autoPatchelfHook,
  dpkg,
  evince,
  fetchurl,
  flac,
+  gccForLibs,
+  imagemagick,
+  kdePackages,
  lib,
  libmicrohttpd,
  libogg,
  libusb-compat-0_1,
  llvmPackages,
  mpfr,
+  stdenvNoCC,
+  undmg,
  wavpack,
-  kdePackages,
-  imagemagick,
 }:

 let
-  version = "5.16.2-43";
+  latestDebianCodename = "trixie";
+  latestUbuntuCodename = "noble";
+  version = "6.0.2-3";
+  majorVersion = lib.versions.major version;
+  compactVersion = with lib.versions; "${major version}${minor version}${patch version}";
  srcs = {
    aarch64-linux = fetchurl {
-      url = "https://signalyst.com/bins/trixie/hqplayer5desktop_${version}_arm64.deb";
-      hash = "sha256-dmnDbFf1obuBvKSMIGFiI7fXi/5YRP23625Y+UEj+Wo=";
+      url = "https://signalyst.com/bins/${latestDebianCodename}/hqplayer${majorVersion}desktop_${version}_arm64.deb";
+      hash = "sha256-remml9wtBrJXiSA96rBjf0tbVJquskq2o+kmeAxI84M=";
    };
    x86_64-linux = fetchurl {
-      url = "https://signalyst.com/bins/noble/hqplayer5desktop_${version}_amd64.deb";
-      hash = "sha256-WUqfMUQSVb+MSc0GyhuEMM9H6fJP/NcmpFAX46BCiPI=";
+      url = "https://signalyst.com/bins/${latestUbuntuCodename}/hqplayer${majorVersion}desktop_${version}_amd64.deb";
+      hash = "sha256-Lx0E7lM7lLl44s7+T17JJmjKzdKmXJbD5iXDBJelT24=";
+    };
+    aarch64-darwin = fetchurl {
+      url = "https://signalyst.com/bins/HQPlayer${majorVersion}Desktop-arm64-${compactVersion}.dmg";
+      hash = "sha256-H2F75NltbzfxC/zrVwMKALvx2ar+S0is0Nk8lsRx+Fc=";
    };
  };
 in
-stdenv.mkDerivation {
-  pname = "hqplayer-desktop";
-  inherit version;
+stdenvNoCC.mkDerivation (
+  {
+    pname = "hqplayer-desktop";
+    inherit version;

-  src =
-    srcs.${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
+    src = with stdenvNoCC.hostPlatform; srcs.${system} or (throw "Unsupported system: ${system}");

-  nativeBuildInputs = [
-    autoPatchelfHook
-    dpkg
-    kdePackages.wrapQtAppsHook
-    imagemagick
-  ];
+    meta = {
+      homepage = "https://www.signalyst.com";
+      description = "High-end upsampling multichannel software HD-audio player";
+      license = lib.licenses.unfree;
+      sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+      platforms = builtins.attrNames srcs;
+      maintainers = with lib.maintainers; [
+        lovesegfault
+        yiyu
+      ];
+    };
+  }
+  // (
+    if stdenvNoCC.hostPlatform.isDarwin then
+      {
+        nativeBuildInputs = [ undmg ];

-  buildInputs = [
-    alsa-lib
-    flac
-    stdenv.cc.cc.lib
-    libmicrohttpd
-    libogg
-    libusb-compat-0_1
-    llvmPackages.openmp
-    mpfr
-    kdePackages.qtcharts
-    kdePackages.qtdeclarative
-    kdePackages.qtwayland
-    kdePackages.qtwebengine
-    kdePackages.qtwebview
-    wavpack
-  ];
+        setSourceRoot = ''
+          sourceRoot=HQPlayer${majorVersion}Desktop.app
+        '';

-  dontPatch = true;
-  dontConfigure = true;
-  dontBuild = true;
+        installPhase = ''
+          runHook preInstall

-  installPhase = ''
-    runHook preInstall
+          mkdir --parents "$out"/Applications
+          cp --recursive . "$_"/"$sourceRoot"

-    # main executable
-    mkdir -p "$out"/bin
-    mv ./usr/bin/* "$out"/bin
+          runHook postInstall
+        '';
+      }
+    else
+      {
+        nativeBuildInputs = [
+          autoPatchelfHook
+          dpkg
+          imagemagick
+          kdePackages.wrapQtAppsHook
+        ];

-    # documentation
-    mkdir -p "$doc/share/doc/hqplayer-desktop" "$doc/share/applications"
-    mv ./usr/share/doc/hqplayer5desktop/* "$doc/share/doc/hqplayer-desktop"
-    mv ./usr/share/applications/hqplayer5desktop-manual.desktop "$doc/share/applications"
+        buildInputs = [
+          alsa-lib
+          flac
+          libmicrohttpd
+          libogg
+          libusb-compat-0_1
+          llvmPackages.openmp
+          mpfr
+          gccForLibs
+          wavpack
+        ]
+        ++ (with kdePackages; [
+          qtcharts
+          qtdeclarative
+          qtwayland
+          qtwebengine
+          qtwebview
+        ]);

-    # desktop files
-    mkdir -p "$out/share/applications"
-    mv ./usr/share/applications/* "$out/share/applications"
+        # doc has dependencies on evince that is not required by main app
+        outputs = [
+          "out"
+          "doc"
+        ];

-    # icons
-    mkdir -p $out/share/icons/hicolor/96x96/apps
-    install -D ./usr/share/pixmaps/hqplayer5client.png -t $out/share/icons/hicolor/128x128/apps
-    install -D ./usr/share/pixmaps/hqplayer5desktop.png -t $out/share/icons/hicolor/128x128/apps
-    magick ./usr/share/pixmaps/hqplayer5desktop-manual.png -resize 96x96 $out/share/icons/hicolor/96x96/apps/hqplayer5desktop-manual.png
-    runHook postInstall
-  '';
+        installPhase = ''
+          runHook preInstall

-  # doc has dependencies on evince that is not required by main app
-  outputs = [
-    "out"
-    "doc"
-  ];
+          install -D usr/bin/* --target-directory="$out"/bin

-  postInstall = ''
-    for desktopFile in $out/share/applications/hqplayer5{client,desktop}.desktop; do
-      substituteInPlace "$desktopFile" \
-        --replace /usr/bin "$out"/bin
-    done
-    substituteInPlace "$doc/share/applications/hqplayer5desktop-manual.desktop" \
-        --replace /usr/share/doc/hqplayer5desktop "$doc/share/doc/hqplayer-desktop" \
-        --replace evince "${evince}/bin/evince"
-  '';
+          # The binary links against libomp.so.5, which is not provided by
+          # `llvmPackages.openmp`; provide it as a symlink so that
+          # `autoPatchelfHook` can resolve it.
+          mkdir -p "$out"/lib
+          ln --symbolic \
+            ${lib.getLib llvmPackages.openmp}/lib/libomp.so \
+            "$out"/lib/libomp.so.5
+          addAutoPatchelfSearchPath "$out"/lib

-  postFixup = ''
-    patchelf --replace-needed libomp.so.5 libomp.so $out/bin/.hqplayer5*-wrapped
-  '';
+          # documentation
+          install -Dm644 usr/share/doc/hqplayer${majorVersion}desktop/* \
+            --target-directory="$doc"/share/doc/hqplayer-desktop
+          gunzip "$doc"/share/doc/hqplayer-desktop/*.gz
+          install -Dm644 \
+            usr/share/applications/hqplayer${majorVersion}desktop-manual.desktop \
+            --target-directory="$doc"/share/applications

-  meta = {
-    homepage = "https://www.signalyst.com";
-    description = "High-end upsampling multichannel software HD-audio player";
-    license = lib.licenses.unfree;
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    platforms = builtins.attrNames srcs;
-    maintainers = with lib.maintainers; [ lovesegfault ];
-  };
-}
+          # desktop files
+          install -Dm644 usr/share/applications/* \
+            --target-directory="$out"/share/applications
+
+          # icons
+          install -Dm644 usr/share/pixmaps/hqplayer${majorVersion}{client,desktop}.png \
+            --target-directory="$out"/share/icons/hicolor/128x128/apps
+          mkdir --parents "$out"/share/icons/hicolor/96x96/apps
+          magick mogrify -path "$_" -resize 96x96 \
+            usr/share/pixmaps/hqplayer${majorVersion}desktop-manual.png
+
+          for desktopFile in \
+            "$out"/share/applications/hqplayer${majorVersion}{client,desktop}.desktop; do
+            substituteInPlace "$desktopFile" \
+              --replace-fail /usr/bin "$out"/bin
+          done
+
+          substituteInPlace "$doc"/share/applications/hqplayer${majorVersion}desktop-manual.desktop \
+            --replace-fail /usr/share/doc/hqplayer${majorVersion}desktop "$doc"/share/doc/hqplayer-desktop \
+            --replace-fail .pdf.gz .pdf \
+            --replace-fail evince ${lib.getExe evince}
+
+          runHook postInstall
+        '';
+      }
+  )
+)
--- a/pkgs/by-name/ht/htop/package.nix
+++ b/pkgs/by-name/ht/htop/package.nix
@@ -19,13 +19,13 @@ assert systemdSupport -> stdenv.hostPlatform.isLinux;

 stdenv.mkDerivation (finalAttrs: {
  pname = "htop" + lib.optionalString withVimKeys "-vim";
-  version = "3.5.2";
+  version = "3.5.3";

  src = fetchFromGitHub {
    owner = "htop-dev";
    repo = "htop";
    tag = finalAttrs.version;
-    hash = "sha256-YKv0ski+lT4nMsGou0KmvXTbyG4DZYSq4+TU7Ts2qfo=";
+    hash = "sha256-8Lm8TLWsJCX2rg5J16RPjnnUvjGPOm6BWGp1aMfyHhM=";
  };

  patches = lib.optional withVimKeys (fetchpatch2 {
--- a/pkgs/by-name/ht/httm/package.nix
+++ b/pkgs/by-name/ht/httm/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "httm";
-  version = "0.50.0";
+  version = "0.50.2";

  src = fetchFromGitHub {
    owner = "kimono-koans";
    repo = "httm";
    rev = finalAttrs.version;
-    hash = "sha256-+19Xu42Tp0WkhdmhfFOAbSrTZ3SSQRgbOQwZY8KrFJg=";
+    hash = "sha256-MqJ2b7JuYVWXv53DlCWulP95d1YCUN+Psx8wKgengX0=";
  };

-  cargoHash = "sha256-HdYBWbyl5FSOf/hgtXV3BbjpXfrM/6EJpDese5hBNzk=";
+  cargoHash = "sha256-1tQFLmAilezEiRsv6JnKJfp5AHd8DshpcOiEi+9VpRs=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/id/idescriptor/package.nix
+++ b/pkgs/by-name/id/idescriptor/package.nix
@@ -1,157 +1,126 @@
 {
  lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchpatch,
-  buildGoModule,
-  nix-update-script,
-  copyDesktopItems,
-  makeDesktopItem,
-  cargo,
-  cmake,
-  corrosion,
-  pkg-config,
-  avahi-compat,
-  ffmpeg,
-  libheif,
-  libimobiledevice,
-  libimobiledevice-glue,
-  libplist,
-  go,
-  qrencode,
-  libssh,
-  libtatsu,
-  libusbmuxd,
-  libusb1,
-  libzip,
-  openssl,
-  pugixml,
-  qt6,
-  lxqt,
  rustPlatform,
-  rustc,
+  fetchFromGitHub,
+  nix-update-script,
+  cmake,
+  pkg-config,
+  avahi,
+  avahi-compat,
+  coreutils,
+  ffmpeg,
+  fuse3,
+  glib,
+  gst_all_1,
+  ifuse,
+  libheif,
+  libplist,
+  libssh2,
+  openssl,
+  polkit,
+  qt6,
+  util-linux,
 }:
-stdenv.mkDerivation (finalAttrs: {
+
+let
+  gstPluginsGoodQt6 = gst_all_1.gst-plugins-good.override {
+    qt6Support = true;
+  };
+  gstPlugins = with gst_all_1; [
+    gstreamer
+    gst-plugins-base
+    gstPluginsGoodQt6
+    gst-plugins-bad
+    gst-plugins-ugly
+    gst-libav
+  ];
+  runtimePrograms = [
+    coreutils
+    fuse3
+    ifuse
+    polkit
+    util-linux
+  ];
+
+  qtEnv = qt6.env "qt6-idescriptor" [ qt6.qtdeclarative ];
+in
+rustPlatform.buildRustPackage (finalAttrs: {
  pname = "idescriptor";
-  version = "0.5.0";
+  version = "0.6.1";

  src = fetchFromGitHub {
    owner = "iDescriptor";
    repo = "iDescriptor";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-AN3CVR9WWa9cG6C6q+hiDyTomT+RebHC1ghr6XyEtAo=";
+    hash = "sha256-d2edq6NMDf4wgvKi29S+LpxCxyunDTwMOm90WmB6O1Y=";
    fetchSubmodules = true;
  };

-  patches = [
-    (fetchpatch {
-      url = "https://github.com/iDescriptor/iDescriptor/commit/fc73e3146dc4884cf9bc1f7879574ac832cc21e6.patch";
-      hash = "sha256-WqEpSY/fhbsMv0bgU2Ak5japUdohaN7zsNG1BbxJnKs=";
-    })
-  ];
-
-  cargoRoot = "src/rust";
-
  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit (finalAttrs) src cargoRoot;
-    hash = "sha256-PJhMb+lMiu8ubOYVX8YVkQzeQMbBO+i6NQhvuyrCujk=";
+    inherit (finalAttrs) src;
+    hash = "sha256-QQcl/l6a4v75QE5xtOu8uWOyg0HD0juRyFl+s8GgEt4=";
  };

-  ipatool-go-modules =
-    (buildGoModule {
-      pname = "ipatool-go";
-      inherit (finalAttrs) version src;
-      modRoot = "lib/ipatool-go";
-      vendorHash = "sha256-SGdyyZU8Ze/1lJS4tKbHyfCv2yYleGcqoyA9Uzb8r/k=";
-      proxyVendor = true;
-      doCheck = false;
-      env.GOWORK = "off";
-    }).goModules;
+  buildFeatures = [ "package_manager" ];
+
+  env = {
+    IDESCRIPTOR_PACKAGE_MANAGER_MESSAGE = "Please update iDescriptor with the Nix profile or system configuration that installed it.";
+    QT_INCLUDE_PATH = "${qtEnv}/include";
+    QT_LIBRARY_PATH = "${qtEnv}/lib";
+  };

  nativeBuildInputs = [
-    cargo
    cmake
-    copyDesktopItems
    pkg-config
-    go
    qt6.wrapQtAppsHook
-    rustPlatform.cargoSetupHook
-    rustc
  ];

  buildInputs = [
+    avahi
    avahi-compat
-    corrosion
    ffmpeg
+    glib
    libheif
-    libimobiledevice
-    libimobiledevice-glue
    libplist
-    qrencode
-    libssh
-    libtatsu
-    libusbmuxd
-    libusb1
-    libzip
+    libssh2
    openssl
-    pugixml
+    qt6.qt5compat
    qt6.qtbase
+    qt6.qtdeclarative
    qt6.qtlocation
    qt6.qtmultimedia
    qt6.qtpositioning
    qt6.qtserialport
+    qt6.qtshadertools
    qt6.qtsvg
-    qt6.qttools
-    qt6.qtwayland
-    lxqt.qtermwidget
-  ];
-
-  cxx-qt-cmake = fetchFromGitHub {
-    owner = "kdab";
-    repo = "cxx-qt-cmake";
-    tag = "0.8.1";
-    hash = "sha256-kXSIU71iHn+SSGikGoNeMbBpSrDJ6hwhnHslmskm8nY=";
-  };
-
-  cmakeFlags = [
-    "-DPACKAGE_MANAGER_MANAGED=ON"
-    "-DPACKAGE_MANAGER_HINT=nixpkgs"
-    "-DFETCHCONTENT_SOURCE_DIR_CXXQT=${finalAttrs.cxx-qt-cmake}"
-  ];
-
-  preConfigure = ''
-    export GOCACHE=$TMPDIR/go-cache
-    export GOPATH=$TMPDIR/go
-    export GOPROXY=file://${finalAttrs.ipatool-go-modules}
-    export GOSUMDB=off
-  '';
+  ]
+  ++ gstPlugins;

  postInstall = ''
-    install -Dm644 -t $out/lib/udev/rules.d ${./99-idevice.rules}
+    ln -s "$out/bin/idescriptor" "$out/bin/iDescriptor"

-    install -Dm644 $src/resources/icons/app-icon/icon.png \
-      $out/share/icons/hicolor/256x256/apps/idescriptor.png
+    install -Dm644 ${./99-idevice.rules} $out/lib/udev/rules.d/99-idevice.rules
+
+    install -Dm644 io.github.idescriptor.iDescriptor.desktop \
+      $out/share/applications/io.github.idescriptor.iDescriptor.desktop
+    install -Dm644 io.github.idescriptor.iDescriptor.metainfo.xml \
+      $out/share/metainfo/io.github.idescriptor.iDescriptor.metainfo.xml
+
+    for size in 16 32 256 512; do
+      install -Dm644 \
+        packaging/shared/resources/app-icon/icon-$size.png \
+        $out/share/icons/hicolor/''${size}x''${size}/apps/io.github.idescriptor.iDescriptor.png
+    done
  '';

-  desktopItems = [
-    (makeDesktopItem {
-      name = "iDescriptor";
-      exec = "iDescriptor";
-      icon = "idescriptor";
-      desktopName = "iDescriptor";
-      comment = "Cross-platform iDevice management tool";
-      categories = [
-        "System"
-        "Utility"
-      ];
-    })
-  ];
+  preFixup = ''
+    qtWrapperArgs+=(
+      --prefix PATH : ${lib.makeBinPath runtimePrograms}
+      --prefix GST_PLUGIN_SYSTEM_PATH_1_0 : ${lib.makeSearchPath "lib/gstreamer-1.0" gstPlugins}
+    )
+  '';

-  passthru = {
-    updateScript = nix-update-script { };
-
-    goModules = finalAttrs.ipatool-go-modules;
-  };
+  passthru.updateScript = nix-update-script { };

  meta = {
    homepage = "https://github.com/iDescriptor/iDescriptor";
@@ -160,6 +129,6 @@ stdenv.mkDerivation (finalAttrs: {
    license = lib.licenses.agpl3Only;
    platforms = lib.platforms.linux;
    maintainers = with lib.maintainers; [ amadejkastelic ];
-    mainProgram = "iDescriptor";
+    mainProgram = "idescriptor";
  };
 })
--- a/pkgs/by-name/ii/iio-niri/package.nix
+++ b/pkgs/by-name/ii/iio-niri/package.nix
@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "iio-niri";
-  version = "2.3.1";
+  version = "2.3.2";

  src = fetchFromGitHub {
    owner = "Zhaith-Izaliel";
    repo = "iio-niri";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6kIHZuHZYDsjY0q8V99jdDkNHwNtvrq77sxGI5SLzSs=";
+    hash = "sha256-ljoEzw4to+Sgq/nDLKFrKtK1GjZFwzuItZ0afwd9RE0=";
  };

-  cargoHash = "sha256-gXqAUvZ0FjU7SrCmw0CpNtELPwmI0fFpJpe3wrBuqsY=";
+  cargoHash = "sha256-U2vYP0IsJl4KWhQ36wt4XEfuzziHH8a4MBh9HuXQO58=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/iw/iwe/package.nix
+++ b/pkgs/by-name/iw/iwe/package.nix
@@ -8,16 +8,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "iwe";
-  version = "0.1.3";
+  version = "0.19.1";

  src = fetchFromGitHub {
    owner = "iwe-org";
    repo = "iwe";
    tag = "iwe-v${finalAttrs.version}";
-    hash = "sha256-2mFCujePThwqOnXNF9x1Hyv9KRme44gtTcy8frziNXo=";
+    hash = "sha256-rNhOwq9Hk+59MgS2lPL9UfsiJnaMJmDXZKAGZWpJhv4=";
  };

-  cargoHash = "sha256-8l7cTW8riEa1nFjftc5lnEQcY9gz4dYli9FQBZ5SFT8=";
+  cargoHash = "sha256-MGtm68g2msoCkceAn4ewp3x9hD8r9TEQAX/h1niQVb8=";

  cargoBuildFlags = [
    "--package=iwe"
--- a/pkgs/by-name/ja/jawiki-all-titles-in-ns0/package.nix
+++ b/pkgs/by-name/ja/jawiki-all-titles-in-ns0/package.nix
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation {
  pname = "jawiki-all-titles-in-ns0";
-  version = "0-unstable-2026-04-01";
+  version = "0-unstable-2026-08-01";

  src = fetchFromGitHub {
    owner = "musjj";
    repo = "jawiki-archive";
-    rev = "d8dff4562d79e33fbd1292cb4f5a857402735d21";
-    hash = "sha256-/0D0+txyR6wTJjW9xLevKUReM8y1bhUAJSdgkLMVjYI=";
+    rev = "9d043ec108e2bd63a0f5971826e14b9888d18399";
+    hash = "sha256-rCPD/Y82dvAiCVt2XmX1WwcujIpacCU/Pcyn4zUWg0I=";
  };

  installPhase = ''
--- a/pkgs/by-name/jq/jql/package.nix
+++ b/pkgs/by-name/jq/jql/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "jql";
-  version = "8.0.10";
+  version = "8.1.2";

  src = fetchFromGitHub {
    owner = "yamafaktory";
    repo = "jql";
    tag = "jql-v${finalAttrs.version}";
-    hash = "sha256-QKdLKib9cz5TjU3+tKaB+1jD9H7bYXidzruldTO6iuw=";
+    hash = "sha256-zmeewj6ToDV2oQw82JU4wXPVhlF+HhUHOcZeM58Sfzw=";
  };

-  cargoHash = "sha256-krhy+CLoQyXeYyLHuNYVleSPtEAFKrdf24zDBCGID2Q=";
+  cargoHash = "sha256-PVboGsE8ucpTlNqF/7aD2UaxbzFQPPh3+Eo1shRWNeA=";

  nativeInstallCheckInputs = [
    versionCheckHook
--- a/pkgs/by-name/ki/kirimoto/package.nix
+++ b/pkgs/by-name/ki/kirimoto/package.nix
@@ -5,12 +5,12 @@
 }:

 let
-  version = "4.7.2";
+  version = "4.7.3";
  pname = "kirimoto";

  src = fetchurl {
    url = "https://github.com/GridSpace/grid-apps/releases/download/${version}/KiriMoto-linux-x86_64.AppImage";
-    hash = "sha256-kf0dy/VelirxBHq0e593c/PM0hurvJqOh1VkDndzNFA=";
+    hash = "sha256-XPF9JbBM2Hoxyed+2tYyb4FU6/a8bCoKnyTuTG7/iXE=";
  };

  appimageContents = appimageTools.extract { inherit pname version src; };
--- a/pkgs/by-name/ki/kitex/package.nix
+++ b/pkgs/by-name/ki/kitex/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "kitex";
-  version = "0.16.1";
+  version = "0.16.2";

  src = fetchFromGitHub {
    owner = "cloudwego";
    repo = "kitex";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-61VZ+eqAfxra5dEJ1MDwmLDuykEoVT07rPbMXcqZ/7o=";
+    hash = "sha256-RlKdOpe1VhSLPBghBDcC+pi4sodwrNg4vNMGe9A9uYM=";
  };

-  vendorHash = "sha256-xsyfOuovG7LHcRMrtkT02DOp/L96M309QMiPLE24y9k=";
+  vendorHash = "sha256-aKZvMS6dm8EqZgelZ4eCgM7dAob99rEJSURX/Lz2UyU=";

  subPackages = [ "tool/cmd/kitex" ];

--- a/pkgs/by-name/lb/lbreakouthd/package.nix
+++ b/pkgs/by-name/lb/lbreakouthd/package.nix
@@ -11,11 +11,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "lbreakouthd";
-  version = "1.2.2";
+  version = "1.2.3";

  src = fetchurl {
    url = "mirror://sourceforge/lgames/lbreakouthd-${finalAttrs.version}.tar.gz";
-    hash = "sha256-b3zLZJ8lsPNK65d0NjwlP49/xAqaFUOw8dONGkuBpN4=";
+    hash = "sha256-7/youW5Kh9+8ksoVcPTjBuP8w07/90UeyhG0ty0VGcg=";
  };

  # On macOS with a case-insensitive filesystem, "sdl.h" shadows <SDL.h>
--- a/pkgs/by-name/li/libcouchbase/package.nix
+++ b/pkgs/by-name/li/libcouchbase/package.nix
@@ -10,13 +10,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libcouchbase";
-  version = "3.3.18";
+  version = "3.3.19";

  src = fetchFromGitHub {
    owner = "couchbase";
    repo = "libcouchbase";
    rev = finalAttrs.version;
-    sha256 = "sha256-+6RrApyml/FPv8pRjmwY1yuZIX1YXNKqdeNjP1y4cbU=";
+    sha256 = "sha256-DE1hSHgxaRH1Kh0dQFlxBkGGp0jmwZdaExxyZnv+abo=";
  };

  cmakeFlags = [ "-DLCB_NO_MOCK=ON" ];
--- a/pkgs/by-name/li/libfilezilla/package.nix
+++ b/pkgs/by-name/li/libfilezilla/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libfilezilla";
-  version = "0.55.5";
+  version = "0.56.1";

  src = fetchurl {
    # Upstream download link was made unstable on purpose
    # See https://trac.filezilla-project.org/ticket/13186
    url = "https://sources.archlinux.org/other/libfilezilla/libfilezilla-${finalAttrs.version}.tar.xz";
-    hash = "sha256-SQwDLvB8WOurdpe3xRAk3XceovgPxM3JKQjDSDV+BT4=";
+    hash = "sha256-rL8r36LFpLHy/zaCs9UsuaZUIv1fPh+WR9iEahB7cck=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/libkrun-efi/package.nix
+++ b/pkgs/by-name/li/libkrun-efi/package.nix
@@ -20,13 +20,13 @@
  withGpu ? true,
 }:
 let
-  version = "1.19.3";
+  version = "1.19.4";

  src = fetchFromGitHub {
    owner = "libkrun";
    repo = "libkrun";
    tag = "v${version}";
-    hash = "sha256-mDko5fRcjnb3BI6cINr4gm6DiCghUlkIn1ZiQeHxyaE=";
+    hash = "sha256-X/VGKOfbLN/3rj1Af7HEprfJB99Mh3UwfikXtS1dkXI=";
  };

  virglrenderer = stdenv.mkDerivation (finalAttrs: {
@@ -100,7 +100,7 @@ stdenv.mkDerivation (finalAttrs: {

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit src;
-    hash = "sha256-PE8xO8T5TFuGnL+95Y1BAz9EdJVUrxgVtVssAgStW+8=";
+    hash = "sha256-ZNSpsxCzCUKkjsDt7Sd5HcfqiQ13kaZSo7w/Vy6HXtY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/libmamba/package.nix
+++ b/pkgs/by-name/li/libmamba/package.nix
@@ -22,13 +22,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libmamba";
-  version = "2.6.2";
+  version = "2.9.0";

  src = fetchFromGitHub {
    owner = "mamba-org";
    repo = "mamba";
    tag = finalAttrs.version;
-    hash = "sha256-qvUo2OD+vh5oXF/ckz9vJyiQ9wpEbTrC+C4oYXOGFAU=";
+    hash = "sha256-Eh+EUI9TmnVjxgGp4yZhwzqa4WPr+fJzddIEqmAegIM=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/libmsquic/package.nix
+++ b/pkgs/by-name/li/libmsquic/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libmsquic";
-  version = "2.5.8";
+  version = "2.5.9";

  src = fetchFromGitHub {
    owner = "microsoft";
    repo = "msquic";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-IOPKIjJVZUBU13YkL7C7c9Y6cA9L62FYRKvFiXWTeLE=";
+    hash = "sha256-UAemZnjXniBApXmJmgMtL1pSsaVSnekNzWh01xsTffY=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/li/libpulsar/package.nix
+++ b/pkgs/by-name/li/libpulsar/package.nix
@@ -31,13 +31,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "libpulsar";
-  version = "4.1.0";
+  version = "4.2.0";

  src = fetchFromGitHub {
    owner = "apache";
    repo = "pulsar-client-cpp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+gGddndiRot2kW7KGuKfWA85mh8e+9PetnEBQvfZB1I=";
+    hash = "sha256-iCmik8lyZ4S1VSsDWWLo6pjgCbjXKIriB2QG6DHFFtQ=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix
+++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix
@@ -36,7 +36,7 @@ let

  pname = "librewolf-bin-unwrapped";

-  version = "152.0.5-1";
+  version = "153.0.4-1";
 in

 stdenv.mkDerivation {
@@ -46,8 +46,8 @@ stdenv.mkDerivation {
    url = "https://codeberg.org/api/packages/librewolf/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz";
    hash =
      {
-        x86_64-linux = "sha256-9Y0n3UHRK9WgKhKFIMB3CLmh1Gp5aHoIiKxlKNKe5gc=";
-        aarch64-linux = "sha256-x9vUXaEtjnY6+mOLbLiXmBr5c7ZmEYRTJK9fDIpfgVs=";
+        x86_64-linux = "sha256-KPv44+F1ofq7L2Ja6XM4AtIutICSfJz6R7XvkvlH5Y0=";
+        aarch64-linux = "sha256-OVR4ivYSdCKIGKYf80FL9WKSFIB6eHura/rMv9Z6asE=";
      }
      .${stdenv.hostPlatform.system} or throwSystem;
  };
--- a/pkgs/by-name/li/libspectrum/package.nix
+++ b/pkgs/by-name/li/libspectrum/package.nix
@@ -13,11 +13,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libspectrum";
-  version = "1.6.0";
+  version = "1.6.3";

  src = fetchurl {
    url = "mirror://sourceforge/fuse-emulator/libspectrum-${finalAttrs.version}.tar.gz";
-    sha256 = "sha256-rH7jqYEQjk85hikTe4Cd6L4w5qbglFNryNLhQxPMwKo=";
+    sha256 = "sha256-+kpeaMGrWGDc35n1SG7mMTmV2+MOhBYOn2mdD423fXY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/lipo-go/package.nix
+++ b/pkgs/by-name/li/lipo-go/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "lipo-go";
-  version = "0.9.4";
+  version = "0.10.0";

  src = fetchFromGitHub {
    owner = "konoui";
    repo = "lipo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WLk6heSnXZjZ6PZWEiUXxx8M5t8EgjpEsTRLeCTzcr8=";
+    hash = "sha256-V1KlgCNKvxnY/B8cmiWFdXzHH6k6VmhNMIta3nckXtA=";
  };
  vendorHash = "sha256-7M6CRxJd4fgYQLJDkNa3ds3f7jOp3dyloOZtwMtCBQk=";

--- a/pkgs/by-name/ll/lla/package.nix
+++ b/pkgs/by-name/ll/lla/package.nix
@@ -11,13 +11,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "lla";
-  version = "0.5.4";
+  version = "0.5.7";

  src = fetchFromGitHub {
    owner = "chaqchase";
    repo = "lla";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-pNm3IBt5Wlk3TMqIehJKhEdEw6i+PY+w4IPYh4pS9Qo=";
+    hash = "sha256-XpnnKNTZMsbHBM6+zV04XZ29y3o4OzyJKM5ZBjuNsCQ=";
  };

  nativeBuildInputs = [
@@ -33,7 +33,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
  # Do not vendor Oniguruma
  env.RUSTONIG_SYSTEM_LIBONIG = true;

-  cargoHash = "sha256-gGa0NNcnUwnrBXHp609ShdmcyjjK7/dZ5T0MNYXz6z8=";
+  cargoHash = "sha256-g241vUK6rO53yoEKnOt3UpqtOZfvp6ajb9JzWJfd+Qw=";

  cargoBuildFlags = [ "--workspace" ];

--- a/pkgs/by-name/ll/llmfit/package.nix
+++ b/pkgs/by-name/ll/llmfit/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "llmfit";
-  version = "1.1.8";
+  version = "1.1.9";

  src = fetchFromGitHub {
    owner = "AlexsJones";
    repo = "llmfit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6mARQqRsPtsN0WAp4oKqG1jl062BqDJ1D9AZBLomel8=";
+    hash = "sha256-DCJ6TtPza/pA8cbYiVBiK2iyOB2gwSIZsJuL2GeB810=";
  };

-  cargoHash = "sha256-iUh9VBtDfuil96av1I5XlO/mZ/Q9HccBJitBfJ+i69A=";
+  cargoHash = "sha256-sKfG6kiqkCZ5vlG71cjR7aMNBGe7RoZCiQogYDywMC4=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/ma/maim/package.nix
+++ b/pkgs/by-name/ma/maim/package.nix
@@ -22,13 +22,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "maim";
-  version = "5.8.1";
+  version = "5.8.2";

  src = fetchFromGitHub {
    owner = "naelstrof";
    repo = "maim";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-bbjV3+41cxAlKCEd1/nvnZ19GhctWOr5Lu4X+Vg3EAk=";
+    hash = "sha256-V2+yw747t2w3AgxJaRfRvwaEpRGUB+Bl7G2QpLP764E=";
  };

  # TODO: drop -DCMAKE_POLICY_VERSION_MINIMUM once maim adds CMake 4 support
--- a/pkgs/by-name/ma/mango/package.nix
+++ b/pkgs/by-name/ma/mango/package.nix
@@ -19,7 +19,7 @@
  enableXWayland ? true,
  meson,
  ninja,
-  scenefx_0_5,
+  scenefx,
  wlroots_0_20,
  libGL,
 }:
@@ -54,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
    wayland
    wayland-protocols
    wlroots_0_20
-    scenefx_0_5
+    scenefx
    libGL
  ]
  ++ lib.optionals enableXWayland [
--- a/Show More
+++ b/Show More