Merge master into staging-next

nixos/modules/services/misc/paperless.nix

@@ -70,7 +70,9 @@ let
     if [[ "$USER" != ${cfg.user} ]]; then
       ${
         if config.security.sudo.enable then
-          "sudo='exec ${config.security.wrapperDir}/sudo -u ${cfg.user} -E'"
+          "sudo='exec ${config.security.wrapperDir}/sudo -u ${cfg.user} -g ${cfg.group} ${
+            lib.optionalString enableRedis " -g " + redisServer.group
+          } -E'"
         else
           ">&2 echo 'Aborting, paperless-manage must be run as user `${cfg.user}`!'; exit 2"
       }
@@ -121,7 +123,7 @@ let
     RestrictNamespaces = true;
     RestrictRealtime = true;
     RestrictSUIDSGID = true;
-    SupplementaryGroups = lib.optional enableRedis redisServer.user;
+    SupplementaryGroups = lib.optional enableRedis redisServer.group;
     SystemCallArchitectures = "native";
     SystemCallFilter = [
       "@system-service"
@@ -270,7 +272,29 @@ in
     user = lib.mkOption {
       type = lib.types.str;
       default = defaultUser;
-      description = "User under which Paperless runs.";
+      description = ''
+        User under which Paperless runs
+
+        ::: {.note}
+        If left as the default value this user will automatically be
+        created on system activation, otherwise you are responsible for
+        ensuring the group exists before the paperless service starts.
+        :::
+      '';
+    };
+
+    group = lib.mkOption {
+      type = lib.types.str;
+      default = defaultUser;
+      description = ''
+        Primary group under which Paperless runs
+
+        ::: {.note}
+        If left as the default value this group will automatically be
+        created on system activation, otherwise you are responsible for
+        ensuring the group exists before the redis service starts.
+        :::
+      '';
     };
 
     package = lib.mkPackageOption pkgs "paperless-ngx" { } // {

nixos/modules/services/networking/legit.nix

@@ -52,6 +52,7 @@ in
         for possible values.
       '';
       type = types.submodule {
+        freeformType = yaml.type;
         options.repo = {
           scanPath = mkOption {
             type = types.path;
@@ -60,7 +61,12 @@ in
           };
           readme = mkOption {
             type = types.listOf types.str;
-            default = [ ];
+            default = [
+              "readme"
+              "README"
+              "readme.md"
+              "README.md"
+            ];
             description = "Readme files to look for.";
           };
           mainBranch = mkOption {
@@ -80,14 +86,14 @@ in
         options.dirs = {
           templates = mkOption {
             type = types.path;
-            default = "${pkgs.legit-web}/lib/legit/templates";
-            defaultText = literalExpression ''"''${pkgs.legit-web}/lib/legit/templates"'';
+            default = "${cfg.package}/lib/legit/templates";
+            defaultText = literalExpression ''"''${config.services.legit.package}/lib/legit/templates"'';
             description = "Directories where template files are located.";
           };
           static = mkOption {
             type = types.path;
-            default = "${pkgs.legit-web}/lib/legit/static";
-            defaultText = literalExpression ''"''${pkgs.legit-web}/lib/legit/static"'';
+            default = "${cfg.package}/lib/legit/static";
+            defaultText = literalExpression ''"''${config.services.legit.package}/lib/legit/static"'';
             description = "Directories where static files are located.";
           };
         };

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -851,13 +851,13 @@
     "vendorHash": "sha256-d8RQfuLRNGTUzA2Ygy3QEis5j5Ape5kmcnZSs77c84M="
   },
   "linode_linode": {
-    "hash": "sha256-vWVU8LNXhBwiZ+Ky/Le05uPMxAlNja7zhVTIwBYmTD4=",
+    "hash": "sha256-kTrLbAnd0YVzlIFGGZhAkLs7N73wM1LvxYG3NCZSHog=",
     "homepage": "https://registry.terraform.io/providers/linode/linode",
     "owner": "linode",
     "repo": "terraform-provider-linode",
-    "rev": "v4.2.0",
+    "rev": "v4.3.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-r5T8kmvCb2iBUJqw5m7hrr+ET7U9kIBUbsvEVqZlgrE="
+    "vendorHash": "sha256-NkXMVJG8ZQOvJNMlrOYrfyp61n7cktFzDQ9oqI+x7xI="
   },
   "loafoe_htpasswd": {
     "hash": "sha256-1HCvAGWsYlcYCA8iOmBb/AawxHPLuoxxQWLzNy0x79M=",

pkgs/by-name/cn/cnspec/package.nix

@@ -6,18 +6,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "cnspec";
-  version = "13.32.1";
+  version = "13.33.0";
 
   src = fetchFromGitHub {
     owner = "mondoohq";
     repo = "cnspec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-f4Cx525MsVrpXDTxDJeG0ddsaFb2aqGWhZCm20pD8lU=";
+    hash = "sha256-z6fsoxNGUDwnpKrkQs2Uv6T4SmONAwsJpcF/Dh+2QuE=";
   };
 
   proxyVendor = true;
 
-  vendorHash = "sha256-cxFhSCIiNOrnicgqR1OC7vuEDQbQeEuCamb08elA++Y=";
+  vendorHash = "sha256-TRkZws8/rCuyE/T1uj0P9ZPD6QONzdacHkkD2exQxUY=";
 
   subPackages = [ "apps/cnspec" ];
 

pkgs/by-name/da/dalfox/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dalfox";
-  version = "3.2.0";
+  version = "3.2.1";
 
   src = fetchFromGitHub {
     owner = "hahwul";
     repo = "dalfox";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YLM//zRdwnlIL+lZH3HyxwstViLm9o+XykT/e/iz6CQ=";
+    hash = "sha256-TnLp3UNCGaLttD0cM5GNbNE01YbKL8eqMbzYDWp1OYY=";
   };
 
-  cargoHash = "sha256-hhvmvnPYo6L0VreP8SKoiz2Xp9spgXuZL54DGxyzHY4=";
+  cargoHash = "sha256-RiKloPQHChkbV9MgxeAp0bjIY/uKuhuORtihlBLc+EY=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/en/ent/package.nix

@@ -31,7 +31,7 @@ stdenv.mkDerivation {
     description = "Pseudorandom Number Sequence Test Program";
     homepage = "https://www.fourmilab.ch/random/";
     platforms = lib.platforms.all;
-    license = lib.licenses.publicDomain;
+    license = lib.licenses.cc-by-sa-40;
     mainProgram = "ent";
   };
 }

pkgs/by-name/fa/faugus-launcher/package.nix

@@ -23,14 +23,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "faugus-launcher";
-  version = "2.0.6";
+  version = "2.1.0";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "Faugus";
     repo = "faugus-launcher";
     tag = finalAttrs.version;
-    hash = "sha256-pq5qgerFXZJQNVaNYTOSQjkpr3zKHFFxAH3d/ybCqJI=";
+    hash = "sha256-Va5cPUPBfnmaTZhJhdSLBgtW4mUBM9/H6+vUrNbUiSg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fr/free5gc-amf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-amf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "amf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oH01ySslrVhreFIYcEGs3jBZy37wylwhtz8f4VjSlgk=";
+    hash = "sha256-u6YTolYFNOdTtugUacw+4AJhAcBBvsd8FgS8Go8bwLU=";
   };
 
-  vendorHash = "sha256-plUoCtHK8/cuYmPosV7ISIlqZGJZUJ4L0Fd0cWV+3zo=";
+  vendorHash = "sha256-j2ND8E8SL6E5XGW/6H0cYkgSaRjvOl8klWazuqqlD4Y=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-ausf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-ausf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "ausf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-S96QhcerwA2c/fW7J0C4HlcQVeSHrob4VCKOSd4iUpo=";
+    hash = "sha256-2z8T4ir6MIdugkE/o0RBSPv03EG5Ak2XiGPanvFGZ0Y=";
   };
 
-  vendorHash = "sha256-8oATdtM8pA8KKgPHFCqsEM0Lo93ZBkoTqLRPfHywCOY=";
+  vendorHash = "sha256-WTD8xPEGCGUIGRy5tUrfVlhBpEhE/4C5gC5ILJ++ePE=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-bsf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-bsf";
-  version = "1.0.2";
+  version = "1.0.4";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "bsf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LIsLaAt3EZMUJBIVErFUP/DLrJnFhu+8WJMiKAgxUYE=";
+    hash = "sha256-W96T31iIGEuQqaTNqEtMxviPd054bpDNMXyfF+JlCb0=";
   };
 
-  vendorHash = "sha256-2T6Al3/Z7TCRIAk96ygT9LOe2hmqsyPfKuXqjW8LGig=";
+  vendorHash = "sha256-Xj3cwrAwtTM62SvLZ0Dq7KCBYdPRXuRPOo7+917+Rzk=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-chf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-chf";
-  version = "1.2.3";
+  version = "1.2.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "chf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rKAig3y7rGDoUpMoB5k58eIf+w7S3PhTsxObzLmUrmM=";
+    hash = "sha256-a1EsTS8PKJjJWVha50paHgKOEapumYV2SjXPUVw2aDM=";
   };
 
-  vendorHash = "sha256-/7GH6f4+Ao183AWxJIv6cndhoVE6Dnishgl8ER0knsQ=";
+  vendorHash = "sha256-irPwy7v1OfceRx7i7XMyaHANUZLMMisLqdxxGnPWEe4=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-n3iwf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-n3iwf";
-  version = "1.3.3";
+  version = "1.3.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "n3iwf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BFr+d8YQNXcHcOgYZxuh+IFJ9/nMxEEDtTgbzhiFKCY=";
+    hash = "sha256-9J7Ig/UBIz27elgcPgrIkaJcEyKpR+T3DosU30BMc80=";
   };
 
-  vendorHash = "sha256-tvMyRV/a40ubPoT1uGxZ1g2q4qJ3K9fof7Xt5IN8vC4=";
+  vendorHash = "sha256-Jov/K0gvi8R7vZ4sHkJ5eINM74L7nn421544WhwBxUc=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-nef/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-nef";
-  version = "1.2.3";
+  version = "1.2.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "nef";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FaLL+RMAub8weCzE68UL6ZpjMf2GRfoekt1X2QjtVEw=";
+    hash = "sha256-5cUle41UhaNNFcFg5IwOXVDbIJoHQ2Fql6flS3NZjLk=";
   };
 
-  vendorHash = "sha256-GS86eLcF0hlnnMPFsKGfhsUDcnjMQVq30oe0KxEbAzQ=";
+  vendorHash = "sha256-qzy6ul1qnp830JdIxucFFvJjngRbZIpwcN56stiz1NA=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-nrf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-nrf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "nrf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NACwoa5ulIkEPtbHO5sFIyTPu5CDlj+AOCedMgNx3z4=";
+    hash = "sha256-qGWyHytZwGxBXNTD+OMNAS+shqz0codvbTU9721M4BI=";
   };
 
-  vendorHash = "sha256-xfrDXKcAJvYYjplBTXS7SezQX9rLhRomNXilFYVUyLM=";
+  vendorHash = "sha256-JLBt43TmS1GlqHpt0DEOp+pZL8qYyL7ybP24+WhTOY8=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-nssf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-nssf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "nssf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ggX4SwQFEYJj8NrlEaQ4I5o+xzJdUQDWAfAMHnNunRU=";
+    hash = "sha256-qnbpmvqWlK9KLGVYa3fk0+ISG5lg9eswie2zFR+uTKA=";
   };
 
-  vendorHash = "sha256-HqLxGpW15vHRNLyc6lwaFD5J9TVoqFqH+hFFiivgITQ=";
+  vendorHash = "sha256-/0iGKMuAwE6XJjJl8c1SlVJSO6o+a43fbKhqBEWadco=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-pcf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-pcf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "pcf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nxs29ikm/NQTnVc2ANzZxMqC9Usui4E+0GrL5taO9aM=";
+    hash = "sha256-ufgdoy3/a/mG0g58lmtVycfZPZizxWdIZ1HxlXuau6M=";
   };
 
-  vendorHash = "sha256-m1IqVKnsT7vWJMWHGrA4QB3aXIkGsIJQQ7NAGT/Th38=";
+  vendorHash = "sha256-4PLqeiMDM89L3IoS/UgsQyh3iiWbRyUDJuwk5oaSTMI=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-smf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-smf";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "smf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-V5Z0AZMloCRgsCI0j8j9dnb2a+gKhu3M29Po3wY0RMk=";
+    hash = "sha256-izw+XoSqdP+MpSrzjSZ36FY0bkifaSbWGqXWVB/R7+o=";
   };
 
-  vendorHash = "sha256-8sVuhlLN00TxTaQFtETvsuAIoW3yjy/CBGF4PQp2XQ4=";
+  vendorHash = "sha256-bJT3ymL1BV9eEK8q2BmCyGeKB4E0iuJ/ocTSfWmO0mA=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-tngf/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-tngf";
-  version = "1.1.3";
+  version = "1.1.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "tngf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rWSx4FCAA1QL7F66swPdhDcDr60TrtMnXhTlVBRR2OY=";
+    hash = "sha256-KUajR5eQh1QNC6LqKXhG2G4Zd2uJJrpyITEUBlax+xE=";
   };
 
-  vendorHash = "sha256-C0zs4+ypC0LI5tkjrs5ajiWnoArHvdOoXj1iaNqSXM0=";
+  vendorHash = "sha256-dsFnlB0SvZaUZfOifYHAZMusWj9CgJR6mi1ZpMeNyw8=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-udm/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-udm";
-  version = "1.4.3";
+  version = "1.4.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "udm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sxksDLI3xV/vz48F9s3TUga6hORaqRTwIiCzeNS0Ijs=";
+    hash = "sha256-FwuKpZ8nrPnZMWqUJE/FRdx0yGA+MWC4VqhSZWFc0Fo=";
   };
 
-  vendorHash = "sha256-dl9rNeh4NurAcTFsca2189ReFdg8e5sMjvVGfe8EMWc=";
+  vendorHash = "sha256-BY//bZHISOsfN+ji5PK/bZ7zQkEXVUEdav11L/V0NW0=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/fr/free5gc-udr/package.nix

@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "free5gc-udr";
-  version = "1.4.3";
+  version = "1.4.4";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "free5gc";
     repo = "udr";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ZfZ9amkKSL+C6ArUmZ+ckj7w++qI1/nlJmPHtsxFaf4=";
+    hash = "sha256-P3uk6qoFHs4IT1PZSi1PToxOkiKPMRLcoShAIpcf1Oo=";
   };
 
-  vendorHash = "sha256-LCUT9bkUr7telvQMvg/ZgsLu6352DOP3iy9cBhDjsj8=";
+  vendorHash = "sha256-/cRgN1fB4az0HI2wYPClBJu8m5zC6XHqW+ACWtgbxmU=";
 
   ldflags = [
     "-X github.com/free5gc/util/version.VERSION=v${finalAttrs.version}"

pkgs/by-name/gl/glow/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "glow";
-  version = "2.1.2";
+  version = "3.0.0";
 
   src = fetchFromGitHub {
     owner = "charmbracelet";
     repo = "glow";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-8E3hDbZlROMPn6F2jx1KMavlBUsCnrpGdJeEaYt5bcU=";
+    hash = "sha256-JgFJwfLzw1DS5I2x75B0IFsotJF3W9ZDHVgl+VJXFps=";
   };
 
-  vendorHash = "sha256-o5Z2ABRw6v4wFXp+KxgdKQn5/Lk5LG73VTiDOA/kBIs=";
+  vendorHash = "sha256-hxPwlWbmIFcKTtvmryFcYZbagLNFMGbkPMkXKRf95q8=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/go/govulncheck/package.nix

@@ -8,13 +8,13 @@
 
 buildGoLatestModule (finalAttrs: {
   pname = "govulncheck";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "vuln";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6gPOteVgKe9ARGkS2wseorG3X0+ep/PD5qAA+59klWs=";
+    hash = "sha256-uQornCj2aTs0YgyGguvB4seGgzx4KN48O4ApcipRM+o=";
   };
 
   patches = [
@@ -24,7 +24,7 @@ buildGoLatestModule (finalAttrs: {
     })
   ];
 
-  vendorHash = "sha256-n3U2vX6ByF61oz6BWjMk0Ehwz3W/zMuUNM2+T0rbxPw=";
+  vendorHash = "sha256-dfujBBu/6+hDAeMVI1ngSJ8b4lKP486x2RBALvp+3Q0=";
 
   subPackages = [
     "cmd/govulncheck"

pkgs/by-name/hk/hk/package.nix

@@ -15,7 +15,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hk";
-  version = "1.54.0";
+  version = "1.55.0";
 
   __structuredAttrs = true;
 
@@ -23,10 +23,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "jdx";
     repo = "hk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vP8kRzBoF1oXg4s7p3wqZN3WMY6i1Ist5x4xlmdccjk=";
+    hash = "sha256-2rZhRdEvt5cAC5TrWQocgMIWhuNnCBBpjKIDE5IGNUc=";
   };
 
-  cargoHash = "sha256-NV6CuXEXrqnMvrULM57xBOiARhoFZ8rZvUfZPk8N9Ng=";
+  cargoHash = "sha256-g5/F6pfvThY7S0NB0WDlpFguFBU/pH25T8dQH1WVgQA=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/in/intune-portal/package.nix

@@ -29,11 +29,11 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "intune-portal";
-  version = "1.2605.16-noble";
+  version = "1.2607.4-noble";
 
   src = fetchurl {
     url = "https://packages.microsoft.com/ubuntu/24.04/prod/pool/main/i/intune-portal/intune-portal_${version}_amd64.deb";
-    hash = "sha256-lPwOwxtsI40jeiLNKvWEz858QMOwGfxvhi7nFiidgLE=";
+    hash = "sha256-bBhWI8U+QCynHaXJBtEGsZH7leW2AdavRJE7r5EcG9M=";
   };
 
   nativeBuildInputs = [ dpkg ];

pkgs/by-name/js/jsonschema-cli/package.nix

@@ -9,15 +9,15 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "jsonschema-cli";
-  version = "0.49.5";
+  version = "0.49.9";
 
   src = fetchCrate {
     pname = "jsonschema-cli";
     inherit (finalAttrs) version;
-    hash = "sha256-ahxoy2xBlHaeoCOedVJkj570y15kihSUKhpq2txRRb8=";
+    hash = "sha256-6uyWY7eO5DUtIm1MGvltARIykD8kXuujiCv32UJkiLE=";
   };
 
-  cargoHash = "sha256-OTf2E+O/PuDiULRLtf19jGjpB5sjTzk6i4sk8XYLI5A=";
+  cargoHash = "sha256-kBK7GgVNrPAxnBs76NqMTW2RT1kemr9UCDO7q+pZW30=";
 
   preCheck = ''
     export SSL_CERT_FILE=${cacert}/etc/ssl/certs/ca-bundle.crt

pkgs/by-name/ka/kalker/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kalker";
-  version = "2.2.2";
+  version = "2.2.3";
 
   src = fetchFromGitHub {
     owner = "PaddiM8";
     repo = "kalker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-jpWGR69Xxiv8yjQ5I7TTxOS8Hotsyxt1Dr676zWjvAE=";
+    hash = "sha256-AuQtGgzAKA/AcfruZ6XK4d6qNr9/+sTAEgvh83R+zo8=";
   };
 
-  cargoHash = "sha256-LEP2ebthwtpPSRmJt0BW/T/lB6EE+tylyVv+PDt8UoQ=";
+  cargoHash = "sha256-xxZYk4anjGRzbYlzm5UPhjCEXwbYp3NM6ilWfNoVnFM=";
 
   buildInputs = [
     gmp

pkgs/by-name/kp/kpx/package.nix

@@ -8,7 +8,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "kpx";
-  version = "1.13.0";
+  version = "1.13.1";
 
   __structuredAttrs = true;
 
@@ -16,7 +16,7 @@ buildGoModule (finalAttrs: {
     owner = "momiji";
     repo = "kpx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-D5SfWE/58L9G2miwx+hmcGCTCq6kHMOEnZ/4z0bMVzs=";
+    hash = "sha256-vsvSux1Gc9DvFnSPX06bfGuNc6Vj005pieQcS47qXDg=";
   };
 
   vendorHash = null;

pkgs/by-name/le/legit-web/package.nix

@@ -22,8 +22,8 @@ buildGoModule (finalAttrs: {
     mkdir -p $out/lib/legit/templates
     mkdir -p $out/lib/legit/static
 
-    cp -r $src/templates/* $out/lib/legit/templates
-    cp -r $src/static/* $out/lib/legit/static
+    cp -r templates/* $out/lib/legit/templates
+    cp -r static/* $out/lib/legit/static
   '';
 
   passthru.tests = { inherit (nixosTests) legit; };

pkgs/by-name/ma/makemkv/package.nix

@@ -4,7 +4,7 @@
   curl,
   expat,
   fetchurl,
-  ffmpeg,
+  ffmpeg_8,
   lib,
   stdenv,
   qt5,
@@ -58,7 +58,7 @@ stdenv.mkDerivation (
     ];
     buildInputs = [
       expat
-      ffmpeg
+      ffmpeg_8
       openssl
       qt5.qtbase
       zlib

pkgs/by-name/ne/netbird-dashboard/package.nix

@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "netbird-dashboard";
-  version = "2.90.9";
+  version = "2.91.0";
 
   src = fetchFromGitHub {
     owner = "netbirdio";
     repo = "dashboard";
     rev = "v${version}";
-    hash = "sha256-cDA1Tbw3yiaeYHN9Pnbz1vxxCK45W6V7k3Bh/Lz/VLA=";
+    hash = "sha256-IqqFd4xlcSlWG/N/0aS1SKMizGU6ymEF8V1yteRl9Wg=";
   };
 
-  npmDepsHash = "sha256-A6zXrOPdxLepi7XPn67YsY673iFOAgJqCEynn4SYco8=";
+  npmDepsHash = "sha256-KWEVpESs71ng9uGbgP1xHihFhRONDE81wx6y3O4BoAY=";
   npmFlags = [ "--legacy-peer-deps" ];
 
   installPhase = ''

pkgs/by-name/ne/netbird/package.nix

@@ -73,13 +73,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "netbird-${componentName}";
-  version = "0.76.3";
+  version = "0.77.0";
 
   src = fetchFromGitHub {
     owner = "netbirdio";
     repo = "netbird";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ebzv1s1r9RPmaysthlRX6isYWDCpSegnp04QKRaGWs0=";
+    hash = "sha256-w72ylRblfC20X4h1E7vuycWziLfWE+cCHuIaf7czFb8=";
   };
 
   overrideModAttrs = final: prev: {
@@ -93,7 +93,7 @@ buildGoModule (finalAttrs: {
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-36XD5NxkDoEwfFeZwHmqVJBy2RonaU1g1Sjy8GgZAD4=";
+  vendorHash = "sha256-kbVBjQUZUp9VZ67Ug4VWtmp2qZw5hLtxLg8utyNCNGg=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/ne/nezha-agent/package.nix

@@ -8,16 +8,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "nezha-agent";
-  version = "2.3.1";
+  version = "2.3.3";
 
   src = fetchFromGitHub {
     owner = "nezhahq";
     repo = "agent";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Gpk1KWAumWF31MXMM7UytBaChOiPgsqC6PhdqSocpA4=";
+    hash = "sha256-cSjioxBFbokyPwFhPhzpMUUIHAOaJtVsbyBrUiAt99Y=";
   };
 
-  vendorHash = "sha256-RGaU55R8si4N6CBr582ooZcOmVwQX3zneCi/q4GnZiw=";
+  vendorHash = "sha256-Cwg3xi0kmEwrOOJPbthqwA5yHZKGyEZaNFAlKSwaeAo=";
 
   ldflags = [
     "-s"

pkgs/by-name/ni/nixpkgs-openjdk-updater/nixpkgs-openjdk-updater/pyproject.toml

@@ -28,7 +28,7 @@ line-length = 80
 
 [tool.ruff.lint]
 select = ["ALL"]
-ignore = ["COM812", "D203", "D213", "ISC001", "T201", "S607"]
+ignore = ["COM812", "CPY001", "D203", "D213", "ISC001", "T201", "S607"]
 allowed-confusables = ["’"]
 
 [tool.ruff.format]

pkgs/by-name/op/openmeters/package.nix

@@ -18,16 +18,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "openmeters";
-  version = "1.12.0";
+  version = "1.13.0";
 
   src = fetchFromGitHub {
     owner = "httpsworldview";
     repo = "openmeters";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9TLWZKtqhRn4ciFjVchlKB6EYe6M6f+6E8gcOPXfH2Y=";
+    hash = "sha256-yxSEe6NL/vcP1pnPdd8pVdg4TtnoWORQf+5RK7LPaV8=";
   };
 
-  cargoHash = "sha256-0B/Xl+0OV6UCJNYCnCO5keDYruWhboaic+cIVXt0nsU=";
+  cargoHash = "sha256-/dQE1g6756zK3s1v74jYqo+MwMNleNlRDAIeiBOex7I=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/py/pyright/package-lock.json

@@ -31,16 +31,16 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/cross-spawn": {
@@ -131,9 +131,9 @@
       "license": "MIT"
     },
     "node_modules/lru-cache": {
-      "version": "11.5.1",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.1.tgz",
-      "integrity": "sha512-RPimw/7aMdv2oqRrxKwvZXcPfwBrn/JZ2xYcY9Hus/6LaS3VOAKVWKWgNLCFSiOm1ESXinjsDlidVU7JlnCN2A==",
+      "version": "11.5.2",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.2.tgz",
+      "integrity": "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "engines": {
@@ -141,13 +141,13 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "brace-expansion": "^5.0.5"
+        "brace-expansion": "^5.0.8"
       },
       "engines": {
         "node": "18 || 20 || >=22"

pkgs/by-name/py/pyright/package.nix

@@ -7,13 +7,13 @@
 }:
 
 let
-  version = "1.1.411";
+  version = "1.1.412";
 
   src = fetchFromGitHub {
     owner = "Microsoft";
     repo = "pyright";
     tag = version;
-    hash = "sha256-MamU2Mx7BSH+NVXHnKEzCbXHmWmo7V8c7BPjz6+0pAY=";
+    hash = "sha256-V2sQp/LA43NjCdtr2/drZ1LMgm4u2tcf4EjdhWVLXHw=";
   };
 
   patchedPackageJSON =
@@ -32,7 +32,7 @@ let
     pname = "pyright-root";
     inherit version src;
     sourceRoot = "${src.name}"; # required for update.sh script
-    npmDepsHash = "sha256-EQlF3zBNnEvVGLC6btSkXGRPJHoR+Jz23ay2X9nYZSg=";
+    npmDepsHash = "sha256-0w/CYFfAaEK6LKZZc9+nt5zUmxCqCcJfSZRAroOhJOA=";
     dontNpmBuild = true;
     postPatch = ''
       cp ${patchedPackageJSON} ./package.json
@@ -49,7 +49,7 @@ let
     pname = "pyright-internal";
     inherit version src;
     sourceRoot = "${src.name}/packages/pyright-internal";
-    npmDepsHash = "sha256-h0ZPqVpMMnhfqP+471xzKVhWTgyuyMcfIAcrnBJZsr4=";
+    npmDepsHash = "sha256-skTnHcET5ujyKTEqh3oyiBwHF6yvaY8c/ccOnwQQKJ0=";
     dontNpmBuild = true;
     installPhase = ''
       runHook preInstall
@@ -63,7 +63,7 @@ buildNpmPackage rec {
   inherit version src;
 
   sourceRoot = "${src.name}/packages/pyright";
-  npmDepsHash = "sha256-mVcK3FzHccBnWzUgrczhwTPhVxyR56E5i8l2GJGYlLo=";
+  npmDepsHash = "sha256-rgENiJVYKMSZimWzlvaaiC6Z5/OEdk4W47gkjcuv0nw=";
 
   postPatch = ''
     chmod +w ../../

pkgs/by-name/rk/rkik/package.nix

@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rkik";
-  version = "2.1.0";
+  version = "2.2.2";
 
   src = fetchFromGitHub {
     owner = "aguacero7";
     repo = "rkik";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-RueOfDzWgWkrQC0PqsyCewsU/8cC0HLpi+OFHi+qz6c=";
+    hash = "sha256-BQRUlOAqIVTcluNEka2DaQyzCKGrYuNiXEAYgPMpy44=";
   };
 
-  cargoHash = "sha256-qT5P28TkClb3hY+5vYb/MJ5gyt/EONs94ct93uw2YPM=";
+  cargoHash = "sha256-1rfs0/mFcoSrAMx9nNqBPVtUlZt+m9ZQwL4/bXQiZS4=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/ty/typical/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "typical";
-  version = "0.15.0";
+  version = "0.16.0";
 
   src = fetchFromGitHub {
     owner = "stepchowfun";
     repo = "typical";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-gcaOQhEyCiU2kXWZRymGca0Mq+TOBGDR4v/5sFOaDz0=";
+    hash = "sha256-+CQIvZC6pv+0cENReRFgP/5lrJr+60A6Lm18mIVvCYc=";
   };
 
-  cargoHash = "sha256-cRlxyh8a+lJLc/YkOYYXkCEi8D3KJHlm5a01rhWk3VQ=";
+  cargoHash = "sha256-ROp8TJm9J7InHwsKBmYJ5+h8dpad74vgrWWga5Pb3eo=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/development/compilers/swift/compiler/default.nix

@@ -120,7 +120,17 @@ let
       + ''
         substituteInPlace $out/nix-support/cc-cflags \
           --replace-fail " -resource-dir=$out/resource-root" ""
-      '';
+      ''
+      +
+        lib.optionalString
+          (targetPlatform.isLinux && targetPlatform.isx86 && lib.versionAtLeast (lib.getVersion clang) "19.1")
+          ''
+            # Swift bundles Clang 16, which predates -mtls-dialect=gnu2
+            # support (added in Clang 19.1). The cc-wrapper adds it based
+            # on the system Clang version, so strip it here.
+            substituteInPlace $out/nix-support/add-local-cc-cflags-before.sh \
+              --replace-fail "'-mtls-dialect=gnu2'" ""
+          '';
   });
 
   # Build a tool used during the build to create a custom clang wrapper, with

pkgs/development/compilers/swift/wrapper/default.nix

@@ -42,6 +42,20 @@ stdenv.mkDerivation (
               "-resource-dir=$out/resource-root" \
               "-resource-dir=${lib.getLib swift}/lib/swift/clang"
         ''
+        +
+          lib.optionalString
+            (
+              stdenv.targetPlatform.isLinux
+              && stdenv.targetPlatform.isx86
+              && lib.versionAtLeast (lib.getVersion clang) "19.1"
+            )
+            ''
+              # Swift bundles Clang 16, which predates -mtls-dialect=gnu2
+              # support (added in Clang 19.1). The cc-wrapper adds it based
+              # on the system Clang version, so strip it here.
+              substituteInPlace $out/nix-support/add-local-cc-cflags-before.sh \
+                --replace-fail "'-mtls-dialect=gnu2'" ""
+            ''
         # We need the libc++ headers corresponding to the LLVM version of
         # Swift’s Clang.
         + lib.optionalString (clang.libcxx != null) ''

pkgs/development/python-modules/env-canada/default.nix

@@ -20,14 +20,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "env-canada";
-  version = "0.18.0";
+  version = "0.19.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "michaeldavie";
     repo = "env_canada";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Aep3rOfguBxAjfjLZ28yLVA51ht9pCfMyjRx9udmscc=";
+    hash = "sha256-tjZdYUWaNqpJ6cYgFw0ezbV08nUbB95nhHw0MhYyYf4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/evohome-async/default.nix

@@ -21,14 +21,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "evohome-async";
-  version = "2.0.1";
+  version = "2.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "zxdavb";
     repo = "evohome-async";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6J61wNwNg87dFFxvvh0aFNJp3g9BzAcOmwTIZFOBvkM=";
+    hash = "sha256-1wWUYhDj8lO8q8YF251z9uQDQTozTf5kIUjrNLrNdQA=";
   };
 
   build-system = [

pkgs/development/python-modules/huggingface-hub/default.nix

@@ -41,7 +41,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "huggingface-hub";
-  version = "1.26.0";
+  version = "1.27.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -49,7 +49,7 @@ buildPythonPackage (finalAttrs: {
     owner = "huggingface";
     repo = "huggingface_hub";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-JF0hWsDO0ERiTwFJ9pu1ImuD+ggWySg/zeU/c++GEXE=";
+    hash = "sha256-AJglCIJZPeabIjgx+qeEpKM2HhX2hr4xx4SWpghDrhE=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/langchain-core/default.nix

@@ -37,7 +37,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "langchain-core";
-  version = "1.5.1";
+  version = "1.5.4";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -45,7 +45,7 @@ buildPythonPackage (finalAttrs: {
     owner = "langchain-ai";
     repo = "langchain";
     tag = "langchain-core==${finalAttrs.version}";
-    hash = "sha256-EO4L4/bf6F1SInw3Iv6JvJcn5W7v9HQZJ8O6a3JY8QA=";
+    hash = "sha256-5aH12hWxnYlRYIa3UT5Z8JycL5ipRNg9KS9h4H2uKA4=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/libs/core";

pkgs/development/python-modules/mautrix/default.nix

@@ -25,14 +25,14 @@
 
 buildPythonPackage rec {
   pname = "mautrix";
-  version = "0.21.0";
+  version = "0.21.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mautrix";
     repo = "python";
     tag = "v${version}";
-    hash = "sha256-4nEjKIWzXd0e/cLL4py9SS+/YIcGHq2f+cCTEY2ENmE=";
+    hash = "sha256-7N6WiIvBWWSK+cNLtKOryUiJG3aILFy3RqfmkbKbY70=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/microsoft-kiota-abstractions/default.nix

@@ -14,14 +14,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "microsoft-kiota-abstractions";
-  version = "1.11.7";
+  version = "1.11.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "kiota-python";
     tag = "microsoft-kiota-abstractions-v${finalAttrs.version}";
-    hash = "sha256-Fd9XSO3H1Au8y+Acft5to7hi7QNwWcmP0/NeWZlufjg=";
+    hash = "sha256-KF3KRcD8KP7MFtw5SgP84UVxNxOnW/VzEGmM92V16GE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/packages/abstractions/";

pkgs/development/python-modules/microsoft-kiota-http/default.nix

@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "microsoft-kiota-http";
-  version = "1.11.7";
+  version = "1.11.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "kiota-python";
     tag = "microsoft-kiota-http-v${finalAttrs.version}";
-    hash = "sha256-Fd9XSO3H1Au8y+Acft5to7hi7QNwWcmP0/NeWZlufjg=";
+    hash = "sha256-KF3KRcD8KP7MFtw5SgP84UVxNxOnW/VzEGmM92V16GE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/packages/http/httpx/";

pkgs/development/python-modules/microsoft-kiota-serialization-form/default.nix

@@ -13,14 +13,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "microsoft-kiota-serialization-form";
-  version = "1.11.7";
+  version = "1.11.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "kiota-python";
     tag = "microsoft-kiota-serialization-form-v${finalAttrs.version}";
-    hash = "sha256-Fd9XSO3H1Au8y+Acft5to7hi7QNwWcmP0/NeWZlufjg=";
+    hash = "sha256-KF3KRcD8KP7MFtw5SgP84UVxNxOnW/VzEGmM92V16GE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/packages/serialization/form/";

pkgs/development/python-modules/openinference-semantic-conventions/default.nix

@@ -10,7 +10,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "openinference-semantic-conventions";
-  version = "0.1.31";
+  version = "0.1.32";
   pyproject = true;
 
   __structuredAttrs = true;
@@ -19,7 +19,7 @@ buildPythonPackage (finalAttrs: {
     owner = "Arize-ai";
     repo = "openinference";
     tag = "python-openinference-semantic-conventions-v${finalAttrs.version}";
-    hash = "sha256-ewOmAqNrJrMKsOgreqCJ7OFwJz15D+CB9uyzrCCuHVk=";
+    hash = "sha256-rEF7Ijx3Zo3NHywFJFa5+QpXZjIWOvkQBie+54v/f8A=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python/${finalAttrs.pname}";

pkgs/development/python-modules/pebble/default.nix

@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pebble";
-  version = "5.2.0";
+  version = "5.2.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "noxdafox";
     repo = "pebble";
     tag = finalAttrs.version;
-    hash = "sha256-U6siydeKf/Ekqq2qHZj/ro2VQix2dRaP80d5CPQnRKU=";
+    hash = "sha256-B2TFhBA0TgN+maqH+eELR2tdGUoPq1t31t2NM+K22vQ=";
   };
 
   build-system = [

pkgs/development/python-modules/pyvmomi/default.nix

@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "pyvmomi";
-  version = "9.0.0.0";
+  version = "9.1.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "vmware";
     repo = "pyvmomi";
     tag = "v${version}";
-    hash = "sha256-4r0UtLR1dhhNQ+Lx12JiEozDAjMxPly+RR0LWRg/A4E=";
+    hash = "sha256-r7knotP4vRX7LA3dsdUoCjzj6Z3TjMLEBs7BnRWSl0A=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/textual-textarea/default.nix

@@ -47,13 +47,6 @@ buildPythonPackage (finalAttrs: {
     pytestCheckHook
   ];
 
-  disabledTests = [
-    # AssertionError: assert None == 'word'
-    # https://github.com/tconbeer/textual-textarea/issues/312
-    "test_autocomplete"
-    "test_autocomplete_with_types"
-  ];
-
   pythonImportsCheck = [ "textual_textarea" ];
 
   meta = {

pkgs/development/python-modules/transformers/default.nix

@@ -94,7 +94,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "transformers";
-  version = "5.14.1";
+  version = "5.15.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -102,7 +102,7 @@ buildPythonPackage (finalAttrs: {
     owner = "huggingface";
     repo = "transformers";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BmjfFETKt01Z7fYgL83KOSPthZBu19yU5IdITCrpEv0=";
+    hash = "sha256-DAQrsE2onVc2/MWJlGmlXFBzai5/ysAxpPEFMxDo7wI=";
   };
 
   build-system = [ setuptools ];

pkgs/os-specific/linux/zfs/2_4.nix

@@ -18,6 +18,7 @@ callPackage ./generic.nix args {
   # this package should point to the latest release.
   version = "2.4.3";
 
+  # if adding a patch here, check if it also needs to be applied to zfs_unstable
   extraPatches = [
     # https://github.com/openzfs/zfs/issues/18366
     # dedup data corruption fix unreleased as of OpenZFS 2.4.3
@@ -25,6 +26,12 @@ callPackage ./generic.nix args {
       url = "https://github.com/openzfs/zfs/commit/6fb72fda0f60d9efb591e320f83f78b19ec451cc.patch?full_index=1";
       hash = "sha256-UuSVmO61Ux5S3F+JAtRnHyeVS4EFobDTKBuD5s8PI+k=";
     })
+    # backport kernel memory corruption fix
+    # https://github.com/openzfs/zfs/issues/18787
+    (fetchpatch {
+      url = "https://github.com/openzfs/zfs/commit/223b8bc446851e5e796e5446ac24d03bbf468f43.patch?full_index=1";
+      hash = "sha256-I29A+NLYLzy7cMC8FQpBdSYbjFu/kscgTW8mAauPVf4=";
+    })
   ];
 
   tests = {

pkgs/os-specific/linux/zfs/unstable.nix

@@ -1,6 +1,7 @@
 {
   callPackage,
   nixosTests,
+  fetchpatch,
   ...
 }@args:
 
@@ -19,6 +20,22 @@ callPackage ./generic.nix args {
   version = "2.4.3";
   # rev = "";
 
+  # if adding a patch here, check if it also needs to be applied to the stable branches
+  extraPatches = [
+    # https://github.com/openzfs/zfs/issues/18366
+    # dedup data corruption fix unreleased as of OpenZFS 2.4.3
+    (fetchpatch {
+      url = "https://github.com/openzfs/zfs/commit/6fb72fda0f60d9efb591e320f83f78b19ec451cc.patch?full_index=1";
+      hash = "sha256-UuSVmO61Ux5S3F+JAtRnHyeVS4EFobDTKBuD5s8PI+k=";
+    })
+    # backport kernel memory corruption fix
+    # https://github.com/openzfs/zfs/issues/18787
+    (fetchpatch {
+      url = "https://github.com/openzfs/zfs/commit/223b8bc446851e5e796e5446ac24d03bbf468f43.patch?full_index=1";
+      hash = "sha256-I29A+NLYLzy7cMC8FQpBdSYbjFu/kscgTW8mAauPVf4=";
+    })
+  ];
+
   tests = {
     inherit (nixosTests.zfs) unstable;
   };