From c62142a61fd94edbbe5f97d0f215362009da3757 Mon Sep 17 00:00:00 2001
From: qubitnano <146656568+qubitnano@users.noreply.github.com>
Date: Mon, 7 Sep 2026 15:07:21 -0400
Subject: [PATCH 01/11] bcachefs-tools: 1.39.4 -> 1.39.5

https://evilpiepirate.org/git/bcachefs-tools.git/tree/Changelog.mdwn
(cherry picked from commit c680d785fee7f7fe03b3d8eda7e46fa43aa6b456)
---
 pkgs/by-name/bc/bcachefs-tools/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/bc/bcachefs-tools/package.nix b/pkgs/by-name/bc/bcachefs-tools/package.nix
index 6a0cf473f056..65b70865adee 100644
--- a/pkgs/by-name/bc/bcachefs-tools/package.nix
+++ b/pkgs/by-name/bc/bcachefs-tools/package.nix
@@ -32,18 +32,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bcachefs-tools";
-  version = "1.39.4";
+  version = "1.39.5";
 
   src = fetchFromGitHub {
     owner = "koverstreet";
     repo = "bcachefs-tools";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cnSlmUH+1odSO1knyrXrWUf7EjY9U4n2IlxVKMczB3Y=";
+    hash = "sha256-k9JW6GMXFwphkYGcYMwA59uafNj0EV96wTnbzeuVM1w=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-Jpl4SBSX9M45zFHpckNHMdZGA5y00YfhrPwmZabWj3Q=";
+    hash = "sha256-hbh4+vpZtVpda2yVZK+fkdPXWd5+GYLbWYPfJsYtPfM=";
   };
 
   postPatch = ''

From 66227d7996af9be1b02af859d31fec4cef2a1718 Mon Sep 17 00:00:00 2001
From: Thomas Bemme <thomas.bemme@gmail.com>
Date: Sun, 6 Sep 2026 13:07:13 +0200
Subject: [PATCH 02/11] librewolf-unwrapped: 155.0-1 -> 155.0.1-1

(cherry picked from commit 677760c04b8edbdc683786c62fff6584a90d2e85)
---
 pkgs/by-name/li/librewolf-unwrapped/src.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json
index 73bd95bd9cc7..5885fcd34d29 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "155.0-1",
+  "packageVersion": "155.0.1-1",
   "source": {
-    "rev": "155.0-1",
-    "hash": "sha256-LPLkMuKnEHJ+jYF5LnitnOzHaokDdRIyxZegWKEJ2wo="
+    "rev": "155.0.1-1",
+    "hash": "sha256-UjGUEDRohgDcNYUnX7EhNvDRPHUcYuC3GsNOpJ3yYFw="
   },
   "firefox": {
-    "version": "155.0",
-    "hash": "sha512-JCkmgZJO258ElOt3p7GZlAOau8OowLowTw5HK0mpQ4OFZXI96YO8jvCOAZlx4CowFMjSQbuIxkWgamJcis4Nag=="
+    "version": "155.0.1",
+    "hash": "sha512-bRN6ejFcsdCqwaP+MUr4D+KQxJt8Lkf4aHsl1HIJJ7Kg3HGj2p119sq0eQZ9sRTKpnMtF+iIsKv86ZI4qK8POQ=="
   }
 }

From 132db6d34db3711712da1e5da023d13309692e29 Mon Sep 17 00:00:00 2001
From: Talles Coelho <talles.hoc@gmail.com>
Date: Thu, 10 Sep 2026 15:11:53 -0300
Subject: [PATCH 03/11] dbeaver-bin: 26.1.3 -> 26.2.0

Not-cherry-picked-because: x86_64-darwin is still supported on 26.05, dropped in master
---
 pkgs/by-name/db/dbeaver-bin/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/db/dbeaver-bin/package.nix b/pkgs/by-name/db/dbeaver-bin/package.nix
index 2efe46c9dfc3..8a19ea50d64b 100644
--- a/pkgs/by-name/db/dbeaver-bin/package.nix
+++ b/pkgs/by-name/db/dbeaver-bin/package.nix
@@ -19,7 +19,7 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "dbeaver-bin";
-  version = "26.1.3";
+  version = "26.2.0";
 
   src =
     let
@@ -32,10 +32,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
         aarch64-darwin = "macos-aarch64.dmg";
       };
       hash = selectSystem {
-        x86_64-linux = "sha256-cPRmReV6F+pCkrbF7d1m+bQjOaJCCFndNSThMWPGrsY=";
-        aarch64-linux = "sha256-bT1bCKzeiAMJbPa6I6fqQq7OrbkKhgDYAUEKuURHP5g=";
-        x86_64-darwin = "sha256-cT4r0QbA0mhO+fStnU7ORgvSPjNiyz3a0asins0kYaE=";
-        aarch64-darwin = "sha256-NYX651gUpEDh2O720ZKl7fUTYLFKpTJzyC/YnN4Vnys=";
+        x86_64-linux = "sha256-9QTnCnR2OqAuC2PWhCuFymRSb2gr5Fez8w4zDMEHSO0=";
+        aarch64-linux = "sha256-atqAOjnAcvyPHHdwZpKY6So1AXRKbh/5GXlKDe35WWM=";
+        x86_64-darwin = "sha256-Q8O9S2fCcnyv0pAcCHWpZDcLXDfv9eYWZDzrFFmJ98E=";
+        aarch64-darwin = "sha256-YqA6qIQp1O7zV2VQOXquddJXagEt7aDIPUtE9fvNSj8=";
       };
     in
     fetchurl {

From 7faf23b011f5fb1f67709dc06df831c4b50229ef Mon Sep 17 00:00:00 2001
From: sh0uv1 <mirantuten@yandex.com>
Date: Sat, 29 Aug 2026 18:08:18 +0000
Subject: [PATCH 04/11] ferdium: 7.1.2 -> 7.2.2

(cherry picked from commit 9cbd173d889bc769eddac1a3e017112fbb9d9c5e)
---
 .../networking/instant-messengers/ferdium/default.nix       | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/instant-messengers/ferdium/default.nix b/pkgs/applications/networking/instant-messengers/ferdium/default.nix
index 625d389b93e6..fe293b90b4a0 100644
--- a/pkgs/applications/networking/instant-messengers/ferdium/default.nix
+++ b/pkgs/applications/networking/instant-messengers/ferdium/default.nix
@@ -24,15 +24,15 @@ let
 
   hash =
     {
-      x86_64-linux = "sha256-ODQKFjBa2riJY26aPaAfLzuCyLYkB5oYSxIE28nMmwY=";
-      aarch64-linux = "sha256-CYHoTw6JUyU63iTd9tAbfWVnb48WcZgGtjthqnlAD8I=";
+      x86_64-linux = "sha256-zTJWVv7CHEH3Tg1bDqpxB+Kiraoli1jTvQ9hXn3MOWA=";
+      aarch64-linux = "sha256-uw5HzH/nZaornpRFtODpJWJotsdg0bgYnYVIcPeU/hA=";
     }
     .${system} or throwSystem;
 in
 mkFranzDerivation rec {
   pname = "ferdium";
   name = "Ferdium";
-  version = "7.1.2";
+  version = "7.2.2";
   src = fetchurl {
     url = "https://github.com/ferdium/ferdium-app/releases/download/v${version}/Ferdium-linux-${version}-${arch}.deb";
     inherit hash;

From d34d77df0bd187ec660064937ca01f91fe75f6df Mon Sep 17 00:00:00 2001
From: sh0uv1 <mirantuten@yandex.com>
Date: Wed, 9 Sep 2026 12:30:28 +0000
Subject: [PATCH 05/11] ferdium: 7.2.2 -> 7.2.3

(cherry picked from commit 19a6bed2e3250da5593eb13c72bce9e6edfa5f54)
---
 .../networking/instant-messengers/ferdium/default.nix       | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/instant-messengers/ferdium/default.nix b/pkgs/applications/networking/instant-messengers/ferdium/default.nix
index fe293b90b4a0..ae36c428908b 100644
--- a/pkgs/applications/networking/instant-messengers/ferdium/default.nix
+++ b/pkgs/applications/networking/instant-messengers/ferdium/default.nix
@@ -24,15 +24,15 @@ let
 
   hash =
     {
-      x86_64-linux = "sha256-zTJWVv7CHEH3Tg1bDqpxB+Kiraoli1jTvQ9hXn3MOWA=";
-      aarch64-linux = "sha256-uw5HzH/nZaornpRFtODpJWJotsdg0bgYnYVIcPeU/hA=";
+      x86_64-linux = "sha256-+KP107a8Tmr2qR8pH+gHuXqEqiC5ExPGXoYOqV1Urbo=";
+      aarch64-linux = "sha256-6XnuSqHOJxAURTGWfi4QUBv4ictLmjeJAoyrPg+o+Bg=";
     }
     .${system} or throwSystem;
 in
 mkFranzDerivation rec {
   pname = "ferdium";
   name = "Ferdium";
-  version = "7.2.2";
+  version = "7.2.3";
   src = fetchurl {
     url = "https://github.com/ferdium/ferdium-app/releases/download/v${version}/Ferdium-linux-${version}-${arch}.deb";
     inherit hash;

From 569ad28a1e3718dbec48fb50b9a55d68323017cf Mon Sep 17 00:00:00 2001
From: Leona Maroni <dev@leona.is>
Date: Fri, 11 Sep 2026 08:12:29 +0200
Subject: [PATCH 06/11] gitlab: 19.3.1 -> 19.3.2

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released
(cherry picked from commit 363a1390808197f6ed0ed41a04f1dd9babeaa1fc)
---
 pkgs/by-name/gi/gitaly/package.nix               |  4 ++--
 pkgs/by-name/gi/gitlab-pages/package.nix         |  4 ++--
 pkgs/by-name/gi/gitlab/data.json                 | 16 ++++++++--------
 .../gi/gitlab/gitlab-workhorse/default.nix       |  2 +-
 pkgs/by-name/gi/gitlab/rubyEnv/Gemfile           |  2 +-
 pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock      | 10 +++++-----
 pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix        |  8 ++++----
 7 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/pkgs/by-name/gi/gitaly/package.nix b/pkgs/by-name/gi/gitaly/package.nix
index b0c5e483a00d..dc227c9cdb8e 100644
--- a/pkgs/by-name/gi/gitaly/package.nix
+++ b/pkgs/by-name/gi/gitaly/package.nix
@@ -7,7 +7,7 @@
 }:
 
 let
-  version = "19.3.1";
+  version = "19.3.2";
   package_version = "v${lib.versions.major version}";
   gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";
 
@@ -21,7 +21,7 @@ let
       owner = "gitlab-org";
       repo = "gitaly";
       rev = "v${version}";
-      hash = "sha256-fr6M8Va488o8wzoZuH6eO4Pe1Abf0+DpvpXqE4WYo3M=";
+      hash = "sha256-bfRCH++tvhrGg+GGnPYFu4EF7IdAHAEu+XI0yPMWryQ=";
     };
 
     vendorHash = "sha256-r9sPLLC8d29ny/07zqJkYQiSVF3MSAHAbnYK0T5xHWU=";
diff --git a/pkgs/by-name/gi/gitlab-pages/package.nix b/pkgs/by-name/gi/gitlab-pages/package.nix
index 778e58c73359..ba174dc5f644 100644
--- a/pkgs/by-name/gi/gitlab-pages/package.nix
+++ b/pkgs/by-name/gi/gitlab-pages/package.nix
@@ -6,14 +6,14 @@
 
 buildGoModule (finalAttrs: {
   pname = "gitlab-pages";
-  version = "19.3.1";
+  version = "19.3.2";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-pages";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-4SNECjrdXv/tE6BckPGCJbTdImiJ7p4ukzTppbt1PNA=";
+    hash = "sha256-aLcgYvtb4wk21oXGVmiPcb6vG6+//mL+3N0Q/ha1ap0=";
   };
 
   vendorHash = "sha256-81Q5xtkQhJS9TQYTgXA4yi7zny6yFPTVAOHETOCyHNE=";
diff --git a/pkgs/by-name/gi/gitlab/data.json b/pkgs/by-name/gi/gitlab/data.json
index e8d03466d34a..d63e08b8df2d 100644
--- a/pkgs/by-name/gi/gitlab/data.json
+++ b/pkgs/by-name/gi/gitlab/data.json
@@ -1,17 +1,17 @@
 {
-  "version": "19.3.1",
-  "repo_hash": "sha256-DpnRcYGRyzNFkJCQEs5YxLgbNs42nXRIpPPMN4E+IrY=",
+  "version": "19.3.2",
+  "repo_hash": "sha256-z+Sd3YiRSrZuiKQmc24hgM1CPxZsKmkAYuSYSNCXrkY=",
   "yarn_hash": "sha256-o4HYadByTvPYoBVeJh5Gqeiuin+FpJcqvnXASga0bxk=",
   "frontend_islands_yarn_hash": "sha256-EvGQin+5DqqIgM36jlVkVI49WcJzVvceYnkSS9ybfcY=",
   "owner": "gitlab-org",
   "repo": "gitlab",
-  "rev": "v19.3.1-ee",
+  "rev": "v19.3.2-ee",
   "passthru": {
-    "GITALY_SERVER_VERSION": "19.3.1",
-    "GITLAB_KAS_VERSION": "19.3.1",
-    "GITLAB_PAGES_VERSION": "19.3.1",
+    "GITALY_SERVER_VERSION": "19.3.2",
+    "GITLAB_KAS_VERSION": "19.3.2",
+    "GITLAB_PAGES_VERSION": "19.3.2",
     "GITLAB_SHELL_VERSION": "14.56.1",
-    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.14.7",
-    "GITLAB_WORKHORSE_VERSION": "19.3.1"
+    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.14.13",
+    "GITLAB_WORKHORSE_VERSION": "19.3.2"
   }
 }
diff --git a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
index 44399639f3bd..36441bbcf332 100644
--- a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
@@ -10,7 +10,7 @@ in
 buildGoModule (finalAttrs: {
   pname = "gitlab-workhorse";
 
-  version = "19.3.1";
+  version = "19.3.2";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
index 884445be07b9..d0b367ba415c 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
@@ -172,7 +172,7 @@ gem 'gitlab-grape-openapi', '~> 0.3.0', feature_category: :api
 gem 'rack-cors', '~> 2.0.1', require: 'rack/cors', feature_category: :api
 
 # GraphQL API
-gem 'graphql', '2.6.3', feature_category: :api
+gem 'graphql', '~> 2.6.10', feature_category: :api
 gem 'graphql-docs', '~> 5.2.0', group: [:development, :test], feature_category: :api
 gem 'apollo_upload_server', '~> 2.1.6', feature_category: :api
 
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
index 0b5d6cebe1fc..9f56fa44bcef 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
@@ -1130,7 +1130,7 @@ GEM
       grape (>= 2.4.0)
       rack
     graphlyte (1.0.0)
-    graphql (2.6.3)
+    graphql (2.6.10)
       base64
       fiber-storage
       logger
@@ -2378,7 +2378,7 @@ GEM
       hashdiff (>= 0.4.0, < 2.0.0)
     webrick (1.9.2)
     websocket (1.2.10)
-    websocket-driver (0.8.0)
+    websocket-driver (0.8.2)
       base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
@@ -2582,7 +2582,7 @@ DEPENDENCIES
   grape-swagger-entity (~> 0.7.0)
   grape_logging (~> 3.0)
   graphlyte (~> 1.0.0)
-  graphql (= 2.6.3)
+  graphql (~> 2.6.10)
   graphql-docs (~> 5.2.0)
   grpc (~> 1.81.0)
   grpc-tools (~> 1.83.0)
@@ -3124,7 +3124,7 @@ CHECKSUMS
   grape-swagger-entity (0.7.1) sha256=082144811cdd14c15b9d9f0a27a4e3ff9c27c7081130d334a3de59953769b37d
   grape_logging (3.0.0) sha256=7b62d984ce96df15d120508668debe307e6a59ac1c511f1d9b5f3b4bea793e13
   graphlyte (1.0.0) sha256=b5af4ab67dde6e961f00ea1c18f159f73b52ed11395bb4ece297fe628fa1804d
-  graphql (2.6.3) sha256=31fe845b509fda27db38d09380f27ffc0de1c7ea2f9f3b12fa42bdde8317239b
+  graphql (2.6.10) sha256=9b7c8633767f516ff9d48a8d6305b2a00a2101c82aa871b92e69086944f9f83e
   graphql-docs (5.2.0) sha256=44d41724529f531adf9265ded7478b74b0c4b927cddc8b9f114337a73f32de08
   grpc (1.81.1) sha256=9e5772153fe13a389654e9d397a90400f0077307fb4369f79f941d96c72e89cb
   grpc (1.81.1-aarch64-linux-gnu) sha256=aa24d7253a2b15d2c3570265a2f58bb8aca0ecd2e1116b7a259d633ebf582445
@@ -3609,7 +3609,7 @@ CHECKSUMS
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
   websocket (1.2.10) sha256=2cc1a4a79b6e63637b326b4273e46adcddf7871caa5dc5711f2ca4061a629fa8
-  websocket-driver (0.8.0) sha256=ed0dba4b943c22f17f9a734817e808bc84cdce6a7e22045f5315aa57676d4962
+  websocket-driver (0.8.2) sha256=97c556b019bf3410b4961002ac501621e9322d3f8a7bc02161a09301cc4c4146
   websocket-extensions (0.1.5) sha256=1c6ba63092cda343eb53fc657110c71c754c56484aad42578495227d717a8241
   wikicloth (0.8.1) sha256=7ac8a9ca0a948cf472851e521afc6c2a6b04a8f91ef1d824ba6a61ffbd60e6ca
   wisper (2.0.1) sha256=ce17bc5c3a166f241a2e6613848b025c8146fce2defba505920c1d1f3f88fae6
diff --git a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
index 210fe0260713..1ebf7d2f76e4 100644
--- a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
@@ -4152,10 +4152,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "16r32y1xxga2z893p7rgxb3y23gwgzr814yh73djgnlza1dq9zii";
+      sha256 = "0gpqz526j2395swp3a1ar00j22m0n82n73caskwnylbzfqrqcz4v";
       type = "gem";
     };
-    version = "2.6.3";
+    version = "2.6.10";
   };
   graphql-docs = {
     dependencies = [
@@ -10573,10 +10573,10 @@ src: {
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0qj9dmkmgahmadgh88kydb7cv15w13l1fj3kk9zz28iwji5vl3gd";
+      sha256 = "0ij19k6034x0c4hw0ywa7wnk5s912r8aq0hhjss10d5z36q5dicp";
       type = "gem";
     };
-    version = "0.8.0";
+    version = "0.8.2";
   };
   websocket-extensions = {
     groups = [

From 2423731b94ec176c4a33e03dc7687ff861d8292f Mon Sep 17 00:00:00 2001
From: Leona Maroni <dev@leona.is>
Date: Fri, 11 Sep 2026 08:12:29 +0200
Subject: [PATCH 07/11] gitlab-elasticsearch-indexer: 5.14.7 -> 5.14.13

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released
https://gitlab.com/gitlab-org/gitlab-elasticsearch-indexer/-/blob/v5.14.13/CHANGELOG.md?ref_type=tags#51413-2026-09-04
(cherry picked from commit 5f2a4f5011c63a7948a37ae9c70fcd0a6a2112e9)
---
 .../gi/gitlab-elasticsearch-indexer/package.nix      | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
index 8fe4d80326c1..0e00a52b39af 100644
--- a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
+++ b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
@@ -11,17 +11,23 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "gitlab-elasticsearch-indexer";
-  version = "5.14.7";
+  version = "5.14.13";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-elasticsearch-indexer";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-1fVBCem23X8u1NQ6ph37EiXRvMpzF/8Yac+VefAe9Yg=";
+    hash = "sha256-HtsZHxdRlopndeJp0dwza9AUsjbkx17gtqnF6XnIe7o=";
   };
 
-  vendorHash = "sha256-cUHXrUd+pSMiS6iSwKKA+o1B6ZHbaQYHYPeVk1Y6wYM=";
+  # A dependency rather than an actual package to build.
+  # Can be removed once GitLab Elasticsearch Indexer upstreams their changes
+  excludedPackages = [
+    "third_party/icu"
+  ];
+
+  vendorHash = "sha256-hUArtddPPhj06A4pN8F1sUVXTfVBzlytJ977neTKw34=";
 
   buildInputs = [ icu ];
   nativeBuildInputs = [ pkg-config ];

From 873f4fb116b57f7e5fa9147f81bb9b7ed422bf9e Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Fri, 11 Sep 2026 10:47:45 +0000
Subject: [PATCH 08/11] linux_7_2: 7.2.4 -> 7.2.5

(cherry picked from commit a856a94b2cbd19392b8f34b47a2bcc56c1b7386a)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index bde07a2a15ca..59d2f93f4f7a 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -35,8 +35,8 @@
         "lts": true
     },
     "7.2": {
-        "version": "7.2.4",
-        "hash": "sha256:1p98bi0zzk3al2d0i28ms4h8vq2ps3n2prdsy69c9nip2zh0ww81",
+        "version": "7.2.5",
+        "hash": "sha256:0y1bcg3pg6zm59bjfrgh1bsy68kxjy9vvxygdzcxmn95hggz1pam",
         "lts": false
     }
 }

From 460b8a82854511f9ddb30d49fd6937dc2ce4a31b Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Fri, 11 Sep 2026 10:47:48 +0000
Subject: [PATCH 09/11] linux_6_18: 6.18.50 -> 6.18.51

(cherry picked from commit 7ba387df069e0730a0be43145ccceeae10c105a8)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 59d2f93f4f7a..982ebfb1e54a 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -30,8 +30,8 @@
         "lts": true
     },
     "6.18": {
-        "version": "6.18.50",
-        "hash": "sha256:0q842zpaqb5vi749g2lawa62p9gsb3h3p99vbrjdj4afmcfh9z6j",
+        "version": "6.18.51",
+        "hash": "sha256:04znimsjfimxxaarzaksn4jvkj1xr5ba7yh1j691ykdzb3w60bxs",
         "lts": true
     },
     "7.2": {

From c79f17227ea6bed328437e4d38827bc0b22f7f33 Mon Sep 17 00:00:00 2001
From: Tom Herbers <mail@tomherbers.de>
Date: Fri, 11 Sep 2026 09:09:39 +0200
Subject: [PATCH 10/11] kanidm_1_11: 1.11.1 -> 1.11.2

Changelog: https://github.com/kanidm/kanidm/releases/tag/v1.11.2
(cherry picked from commit 1f2ce128e45dc806fbce862cb1cd2223b95f2e32)
---
 pkgs/servers/kanidm/1_11.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/kanidm/1_11.nix b/pkgs/servers/kanidm/1_11.nix
index f32d50c1d5b1..b3c424232fd6 100644
--- a/pkgs/servers/kanidm/1_11.nix
+++ b/pkgs/servers/kanidm/1_11.nix
@@ -1,5 +1,5 @@
 import ./generic.nix {
-  version = "1.11.1";
-  hash = "sha256-IQmXHl+Gx7QLuLUCmIh919o+ziCy2q2NvVabwQwhML0=";
-  cargoHash = "sha256-DSYynKWb9jjFp3u3c6z9dFXts8ydgEho7xoFlL6cPXs=";
+  version = "1.11.2";
+  hash = "sha256-W7LkbHu2jS5pB63eTvmKsypOzL/bzm/5ssnzlpME6jc=";
+  cargoHash = "sha256-pn1g0sesG9YtFf/qUvrSHW/m+2rHEyeZGzW1V5XRT+Y=";
 }

From 27b03051d2e05ec069fdb3f0a5a2c9b3d604067f Mon Sep 17 00:00:00 2001
From: "Adam C. Stephens" <adam@valkor.net>
Date: Thu, 10 Sep 2026 22:19:13 -0400
Subject: [PATCH 11/11] hickory-dns: 0.26.2 -> 0.26.3

Changelog: https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.3
(cherry picked from commit 13fceb7ab38bb4f9e51799de3abca2720bc9a18d)
---
 pkgs/by-name/hi/hickory-dns/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/hi/hickory-dns/package.nix b/pkgs/by-name/hi/hickory-dns/package.nix
index 793837cb7a53..d02160a7d049 100644
--- a/pkgs/by-name/hi/hickory-dns/package.nix
+++ b/pkgs/by-name/hi/hickory-dns/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hickory-dns";
-  version = "0.26.2";
+  version = "0.26.3";
 
   src = fetchFromGitHub {
     owner = "hickory-dns";
     repo = "hickory-dns";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qwyMfjo3LTyvxwRlQ/4Odc3yZsSuA4cn7zj/KLCfRSs=";
+    hash = "sha256-zm8qMYqdDEZjtNC9arMzCAxPpBRRRwiHsb3lsP/cHIg=";
   };
 
-  cargoHash = "sha256-TsawTK+MaQ8isxa+/lROTgnA2u26XKjZCtRFUKLRbrw=";
+  cargoHash = "sha256-u6Uf9lhrFgWfzIXZ3DIPk2JdDTdd1qBTkqUgmSspR9c=";
 
   buildFeatures = [
     "blocklist"