Merge staging-next into staging

nixos/doc/manual/installation/upgrading.chapter.md

@@ -41,8 +41,22 @@ supported stable release.
 When you first install NixOS, you're automatically subscribed to the
 NixOS channel that corresponds to your installation source. For
 instance, if you installed from a 26.05 ISO, you will be subscribed to
-the `nixos-26.05` channel. To see which NixOS channel you're subscribed
-to, run the following as root:
+the `nixos-26.05` channel.
+
+Commands below are prefixed with `#` and have to be run as root in a
+login shell:
+
+```ShellSession
+$ sudo -i
+```
+
+Without `sudo`:
+
+```ShellSession
+$ su -
+```
+
+To see which NixOS channel you're subscribed to, run:
 
 ```ShellSession
 # nix-channel --list | grep nixos
@@ -84,9 +98,15 @@ by running
 which is equivalent to the more verbose `nix-channel --update nixos; nixos-rebuild switch`.
 
 ::: {.note}
-Channels are set per user. This means that running `nix-channel --add`
-as a non root user (or without sudo) will not affect
-configuration in `/etc/nixos/configuration.nix`
+Channels are set per user. `nix-channel` reads and writes
+`$HOME/.nix-channels`, so it acts on the channels of whoever owns the
+current `$HOME`. A login shell sets `$HOME` to `/root`, which is why the
+commands above act on root's channels — the ones
+`/etc/nixos/configuration.nix` uses.
+
+Plain `sudo` and `su` keep your own `$HOME`. `nix-channel --list` then
+lists your own channels, and prints nothing when you have none.
+`nix-channel --add` adds the channel for your user alone.
 :::
 
 ::: {.warning}

nixos/doc/manual/preface.md

@@ -7,5 +7,5 @@ Additional information regarding the Nix package manager and the Nixpkgs project
 If you encounter problems, please report them on the [`Discourse`](https://discourse.nixos.org), the [Matrix room](https://matrix.to/#/%23nix:nixos.org), or on the [`#nixos` channel on Libera.Chat](irc://irc.libera.chat/#nixos). Alternatively, consider [contributing to this manual](#chap-contributing). Bugs should be reported in [NixOS’ GitHub issue tracker](https://github.com/NixOS/nixpkgs/issues).
 
 ::: {.note}
-Commands prefixed with `#` have to be run as root, either requiring to login as root user or temporarily switching to it using `sudo` for example.
+Commands prefixed with `#` have to be run as root.
 :::

nixos/modules/programs/gpu-screen-recorder.nix

@@ -10,6 +10,11 @@ let
   package = cfg.package.override {
     inherit (config.security) wrapperDir;
   };
+
+  uiPackage = cfg.ui.package.override {
+    gpu-screen-recorder = package;
+    inherit (config.security) wrapperDir;
+  };
 in
 {
   options = {
@@ -24,19 +29,47 @@ in
           wrappers for promptless recording.
         '';
       };
+
+      ui = {
+        enable = lib.mkEnableOption "the GPU Screen Recorder overlay UI";
+        package = lib.mkPackageOption pkgs "gpu-screen-recorder-ui" { };
+        notifPackage = lib.mkPackageOption pkgs "gpu-screen-recorder-notification" { };
+      };
     };
   };
 
-  config = lib.mkIf cfg.enable {
-    environment.systemPackages = [ cfg.package ];
+  config = lib.mkIf cfg.enable (
+    lib.mkMerge [
+      {
+        environment.systemPackages = [ cfg.package ];
 
-    security.wrappers."gsr-kms-server" = {
-      owner = "root";
-      group = "root";
-      capabilities = "cap_sys_admin+ep";
-      source = lib.getExe' package "gsr-kms-server";
-    };
-  };
+        security.wrappers."gsr-kms-server" = {
+          owner = "root";
+          group = "root";
+          capabilities = "cap_sys_admin+ep";
+          source = lib.getExe' package "gsr-kms-server";
+        };
+      }
 
-  meta.maintainers = with lib.maintainers; [ timschumi ];
+      (lib.mkIf cfg.ui.enable {
+        environment.systemPackages = [
+          cfg.ui.package
+          cfg.ui.notifPackage
+        ];
+
+        security.wrappers."gsr-global-hotkeys" = {
+          owner = "root";
+          group = "root";
+          capabilities = "cap_setuid+ep";
+          source = lib.getExe' uiPackage "gsr-global-hotkeys";
+        };
+      })
+    ]
+  );
+
+  meta.maintainers = with lib.maintainers; [
+    timschumi
+    AhmedAmr
+    keenanweaver
+  ];
 }

nixos/modules/services/misc/gitlab/default.nix

@@ -1208,6 +1208,8 @@ in
     services.postgresql = optionalAttrs databaseActuallyCreateLocally {
       enable = true;
       ensureUsers = singleton { name = cfg.databaseUsername; };
+      # With the PostgreSQL update to 17.6, the default was no longer enough.
+      settings.max_locks_per_transaction = lib.mkDefault 128;
     };
 
     # Enable rotation of log files

nixos/modules/services/networking/pihole-ftl-setup-script.nix

@@ -41,7 +41,7 @@ in
   any_failed=0
 
   addList() {
-    local payload="$1" result type error
+    local payload="$1" result type id error
 
     echo "Adding list: $payload"
     type=$($jq -r '.type' <<< "$payload")
@@ -49,17 +49,25 @@ in
 
     error="$($jq '.error' <<< "$result")"
     if [[ "$error" != "null" ]]; then
-        echo "Error: $error"
-        any_failed=1
+      if $jq -e '
+        .error.key == "database_error"
+        and .error.hint == "The item is already present"
+      ' <<< "$result" > /dev/null; then
+        echo "List already present"
         return
+      fi
+
+      echo "Error: $error"
+      any_failed=1
+      return
     fi
 
     id="$($jq '.lists.[].id?' <<< "$result")"
     if [[ "$id" == "null" ]]; then
-        any_failed=1
-        error="$($jq '.processed.errors.[].error' <<< "$result")"
-        echo "Error: $error"
-        return
+      any_failed=1
+      error="$($jq '.processed.errors.[].error' <<< "$result")"
+      echo "Error: $error"
+      return
     fi
 
     echo "Added list ID $id: $result"

pkgs/applications/editors/vscode/extensions/rangav.vscode-thunder-client/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "vscode-thunder-client";
     publisher = "rangav";
-    version = "2.41.0";
-    hash = "sha256-c5oEaRMeTEWT0dtd6bzWMumhTEchOsLDXp+D76orL+k=";
+    version = "2.41.1";
+    hash = "sha256-BLR5z5KttJt1wQOqDVyPRRNagoBihAeEdbBnHps7yhg=";
   };
 
   meta = {

pkgs/by-name/al/alsa-ucm-conf-asahi/package.nix

@@ -9,13 +9,13 @@
 let
   alsa-ucm-conf-asahi = stdenvNoCC.mkDerivation (finalAttrs: {
     pname = "alsa-ucm-conf-asahi";
-    version = "9";
+    version = "10";
 
     src = fetchFromGitHub {
       owner = "AsahiLinux";
       repo = "alsa-ucm-conf-asahi";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-F+NiEP4EKLUVV2oHSVY+fkXlzXcLyywNOolUy9DO8sI=";
+      hash = "sha256-2A5HiaXRplAOi4M6qrihH8GyTT8+ANWs9DyCZhgE8pc=";
     };
 
     installPhase = ''

pkgs/by-name/am/amazon-ecr-credential-helper/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "amazon-ecr-credential-helper";
-  version = "0.11.0";
+  version = "0.12.0";
 
   src = fetchFromGitHub {
     owner = "awslabs";
     repo = "amazon-ecr-credential-helper";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-rsAhDX10eGnmWy6HYoIWn1k64yiC3AcWjCDancBe/VA=";
+    sha256 = "sha256-tx5aaz4b4IlXYpHPnMtaZLLLM4UnJnKqYd/zUOgwruc=";
   };
 
   vendorHash = null;

pkgs/by-name/an/ananicy-cpp/package.nix

@@ -2,6 +2,7 @@
   lib,
   clangStdenv,
   fetchFromGitLab,
+  fetchpatch,
   cmake,
   pkg-config,
   spdlog,
@@ -29,6 +30,11 @@ clangStdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./match-wrappers.patch
+    (fetchpatch {
+      name = "fix-cstring-include.patch";
+      url = "https://gitlab.com/ananicy-cpp/ananicy-cpp/-/merge_requests/43.diff";
+      hash = "sha256-drBUVh+N3KedJttzQIIA1s+38ngK9BgZFOdpxqBWV0E=";
+    })
   ];
 
   strictDeps = true;

pkgs/by-name/an/annotator/package.nix

@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "annotator";
-  version = "2.0.2";
+  version = "2.0.3";
 
   src = fetchFromGitHub {
     owner = "phase1geo";
     repo = "annotator";
     tag = finalAttrs.version;
-    hash = "sha256-nJxms/df5OnASbdj4a2IjHyRT5PA2EaKHkBoQsyv8T8=";
+    hash = "sha256-sDrm3e2LuCyxopNoMRn3anXnrHVJzvDeqBNvEE//4rM=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ar/arduino-ide/package.nix

@@ -7,11 +7,11 @@
 
 let
   pname = "arduino-ide";
-  version = "2.3.7";
+  version = "2.3.10";
 
   src = fetchurl {
     url = "https://github.com/arduino/arduino-ide/releases/download/${version}/arduino-ide_${version}_Linux_64bit.AppImage";
-    hash = "sha256-m4RYtjJMZ01M1qwKc70Gkey9QLQ4Gk59rwpunm4TY2g=";
+    hash = "sha256-echZChdEwiDXLL7Q6pHG4qf0WUKSaZsvszZOvXE81WY=";
   };
 
   appimageContents = appimageTools.extract { inherit pname version src; };

pkgs/by-name/ar/argonaut/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "argonaut";
-  version = "2.16.0";
+  version = "2.17.2";
 
   src = fetchFromGitHub {
     owner = "darksworm";
     repo = "argonaut";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-F67DyH0aJ4SmlCIj1i65yB5rFXZB0j5BREssS3V3WZQ=";
+    hash = "sha256-zx/9dpnrOTVVv3Fif//w7agqWtoKo00YrltlJn6axAs=";
   };
 
-  vendorHash = "sha256-4AmciHL4CGtEwDAs7eAtjfWlzjoCLXAN2HEatev8gZg=";
+  vendorHash = "sha256-b9Xq7CTEvdwtNtgF9PRKp2HkVNzxm6z+yCmH5ny9Hfc=";
   proxyVendor = true;
   subPackages = [ "cmd/app" ];
   ldflags = [

pkgs/by-name/as/asahi-audio/package.nix

@@ -9,13 +9,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "asahi-audio";
-  version = "4.0";
+  version = "4.1";
 
   src = fetchFromGitHub {
     owner = "AsahiLinux";
     repo = "asahi-audio";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Tp+yL7SbzowYcCrfI7UU+5GeIJtyBMuE7KhcYmA1+hw=";
+    hash = "sha256-4UOng1M/nVE/2OkKf+kqCdea4mUCvktW2M0x5Um4CPI=";
   };
 
   makeFlags = [

pkgs/by-name/as/asciigraph/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "asciigraph";
-  version = "0.7.3";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "guptarohit";
     repo = "asciigraph";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+4aGkumO42cloHWV8qEEJ5bj8TTdtfXTWGFCgCRE4Mg=";
+    hash = "sha256-VRF7wAiFQSL1PLmV0k2NjzuEKwprnS028FM0loTpmaI=";
   };
 
   vendorHash = null;

pkgs/by-name/av/avbroot/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "avbroot";
-  version = "3.29.0";
+  version = "3.33.0";
 
   src = fetchFromGitHub {
     owner = "chenxiaolong";
     repo = "avbroot";
     tag = "v${version}";
-    hash = "sha256-/c3jYaNGQP4mZA2/MJFWBgaXpTmylgrF3555qdhtr2E=";
+    hash = "sha256-79Cu/JqD3bA25jBES8BXzTfmW2255iv58KL/omUUxKg=";
   };
 
-  cargoHash = "sha256-H39Gi2Y3T9PA78ARkJ3i6qHWJSzV/a+TGwXOicEduKQ=";
+  cargoHash = "sha256-FQ/uuRtkjRPJrNQ3H4UDEJ2XC08ghIH6/vYUhz1j7aI=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/aw/aws-signing-helper/package.nix

@@ -6,15 +6,15 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "aws-signing-helper";
-  version = "1.7.3";
+  version = "1.8.4";
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "rolesanywhere-credential-helper";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-6EtWOcSFSxvOkDXf1/OL6IoHv25+FMGGCbh/vjzkH6U=";
+    hash = "sha256-cGzQ2rek0EA3ZaPfFOePhkYdKYj4cWZ1b40LAddf5TY=";
   };
-  vendorHash = "sha256-acr1A+Yj+azdTaGHlNVW1ADMEFTpAVhUAP1yWkUpJ38=";
+  vendorHash = "sha256-rYoBYPHWixvM2iGn/jf4Op7/xkBnV0zKYSJtDnI3ulQ=";
 
   checkPhase = ''
     runHook preCheck

pkgs/by-name/ba/bazel-kazel/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "bazel-kazel";
-  version = "0.2.5";
+  version = "0.2.6";
 
   src = fetchFromGitHub {
     owner = "kubernetes";
     repo = "repo-infra";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-Y9VOlFrFmJQCQuwf3UztHGuJqmq/lSibTbI3oGjtNuE=";
+    sha256 = "sha256-m3DoReEtgkRaAfj6fcPFBaUgng4E4wFLU2Lsaug46PU=";
   };
 
   vendorHash = "sha256-1+7Mx1Zh1WolqTpWNe560PRzRYaWVUVLvNvUOysaW5I=";

pkgs/by-name/bc/bcompare/package.nix

@@ -15,19 +15,19 @@
 
 let
   pname = "bcompare";
-  version = "5.2.0.31950";
+  version = "5.2.4.32425";
 
   throwSystem = throw "Unsupported system: ${stdenv.hostPlatform.system}";
 
   srcs = {
     x86_64-linux = fetchurl {
       url = "https://www.scootersoftware.com/files/bcompare-${version}_amd64.deb";
-      sha256 = "sha256-CCSRNGWIYVKAoQVVJ8McDUtc45nK0S4CdamcT5uVlQM=";
+      sha256 = "sha256-gXmz7ZgTLPNzqckzKV7r+B8V0oS10/GQNTM0/0EYs3s=";
     };
 
     aarch64-darwin = fetchurl {
       url = "https://www.scootersoftware.com/files/BCompareOSX-${version}.zip";
-      sha256 = "sha256-R+G2Zlr074i2W4GaEDweK0c0q8tnzjs6M0N106WVAlg=";
+      sha256 = "sha256-CzAARAKDBSORI/zCELEdA8VRdWXHq+sMHGPkr3wV+G8=";
     };
   };
 

pkgs/by-name/bf/bfs/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bfs";
-  version = "4.1";
+  version = "4.1.4";
 
   src = fetchFromGitHub {
     repo = "bfs";
     owner = "tavianator";
     tag = finalAttrs.version;
-    hash = "sha256-+hGxdsk9MU5MVvvx3C2cqomboNxD0UZ5y7t84fAwfqs=";
+    hash = "sha256-gENWuxZh4dOaKUyrb53dn/ai7F2L3gyYj8kuha0JaLo=";
   };
 
   buildInputs = [

pkgs/by-name/ca/cables/package.nix

@@ -7,11 +7,11 @@
 
 let
   pname = "cables";
-  version = "0.10.2";
+  version = "0.10.6";
 
   src = fetchurl {
     url = "https://github.com/cables-gl/cables_electron/releases/download/v${version}/cables-${version}-linux-x64.AppImage";
-    sha256 = "sha256-pUwvUeHXXfa5sOhbL5oiVyotskul6v1c0GryjW1Jof0=";
+    sha256 = "sha256-Pk6rtWzIWzAlp5WwI7cKAjAlhjqLZJUO+39v44ZD93k=";
   };
 
   appimageContents = appimageTools.extract {

pkgs/by-name/ca/cargo-sonar/package.nix

@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-sonar";
-  version = "1.5.0";
+  version = "1.6.0";
 
   src = fetchFromGitLab {
     owner = "woshilapin";
     repo = "cargo-sonar";
     tag = finalAttrs.version;
-    hash = "sha256-OcJG4UlxJvk888LKbXOFT/AaORzFrp/2dPR2ix3u2xY=";
+    hash = "sha256-c0P6lU26ofiAd/ALjbJbLai1gynGHIk9qmyzlanGwFw=";
   };
 
-  cargoHash = "sha256-zjDJzHRIKa81sHDJMAXhOsW4IeFf2DBfyEAqQJQUjEk=";
+  cargoHash = "sha256-roLHT+YPDB+HfF0MScloTSq2G69dADSXSuzUphLivWk=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

pkgs/by-name/cf/cf-terraforming/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "cf-terraforming";
-  version = "0.24.0";
+  version = "0.28.0";
 
   src = fetchFromGitHub {
     owner = "cloudflare";
     repo = "cf-terraforming";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-jj8bU6n5dpuF9Gg+xh/JXYWODR1C+Q3Lq9oaKJRnm7E=";
+    sha256 = "sha256-JyGDD09vqIzutwaJJCqv7mRPQlzmyUWtV/BZtirn/SE=";
   };
 
-  vendorHash = "sha256-JrHt7Av305bwl/RUf2ORz/lRVnoZfUVE4T400DQwjl0=";
+  vendorHash = "sha256-wBInMV1XSaO3/NvTNZq5C5o4TJgq18KXHHc4HOCMSVY=";
   ldflags = [
     "-X github.com/cloudflare/cf-terraforming/internal/app/cf-terraforming/cmd.versionString=${finalAttrs.version}"
   ];

pkgs/by-name/ch/checkstyle/package.nix

@@ -8,17 +8,17 @@
 }:
 
 maven.buildMavenPackage (finalAttrs: {
-  version = "13.9.0";
+  version = "13.10.0";
   pname = "checkstyle";
 
   src = fetchFromGitHub {
     owner = "checkstyle";
     repo = "checkstyle";
     tag = "checkstyle-${finalAttrs.version}";
-    hash = "sha256-1ddajDPf32fauHA3zFTMa6s/cJqrhTI1z4E2GOWRxn4=";
+    hash = "sha256-RJ0ALYE+X2wUdFB4WpGIKYYeRau7AHr5m2Qk3amiXX4=";
   };
 
-  mvnHash = "sha256-T5zXmanif0ttB1srKzYeoXAQQqhRfAUW2V7v7N/I79k=";
+  mvnHash = "sha256-NWTabR7E3aXkLaERZmolOoWPzERnOT/1q7+DW815p9U=";
 
   nativeBuildInputs = [
     maven

pkgs/by-name/ci/cirrus-cli/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "cirrus-cli";
-  version = "0.165.1";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "cirruslabs";
     repo = "cirrus-cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-zkKbA2Nftkqxh4o30pFMCcZxNeBF9jXf2GkICaXEPjE=";
+    hash = "sha256-Bh1fLHmd5iCMHMJHgBaeZ8zQ9Fjl5Q4jpk1GUyrhiic=";
   };
 
-  vendorHash = "sha256-cpHxxAoVCHLWt9R2+tZVhIKT9SXdwiVvB1/NA9sNd3Y=";
+  vendorHash = "sha256-RcgU3DR7ndF7YDCNQaeDh/EpCMs9JQhbpKP7dwB2ilI=";
 
   ldflags = [
     "-X github.com/cirruslabs/cirrus-cli/internal/version.Version=v${finalAttrs.version}"

pkgs/by-name/cj/cjs/package.nix

@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cjs";
-  version = "140.0";
+  version = "140.1";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "cjs";
     tag = finalAttrs.version;
-    hash = "sha256-zbYcKzTuDLnFEVeSXgoZDUK8Wx3gysGSqZyXjKrBStI=";
+    hash = "sha256-KGcu7QkocH1FeO5Dt2GBC1Y+xYk7OqgvAF7DAJHzn/I=";
   };
 
   outputs = [

pkgs/by-name/cl/clouddrive2/package.nix

@@ -11,15 +11,15 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "clouddrive2";
-  version = "1.0.13";
+  version = "1.0.14";
 
   src = fetchurl {
     url = "https://github.com/cloud-fs/cloud-fs.github.io/releases/download/v${finalAttrs.version}/clouddrive-2-${os}-${arch}-${finalAttrs.version}.tgz";
     hash =
       {
-        x86_64-linux = "sha256-5WFJyFZnAm3k9D8Sf/rbCFKUTqYZyCpsNi9Rp+8UoxQ=";
-        aarch64-linux = "sha256-DEkWHezR54hQESTWZqHEHZaSlnT5ItlXa05sCiIVlac=";
-        aarch64-darwin = "sha256-EwWm3CG9eLCM1/D4FaJYe3Ter9zebYLjkktB2nt/wSI=";
+        x86_64-linux = "sha256-0Q+7y1c4kx7J+8Ji8nxgl1AewVVumE8FME7ev/gai3s=";
+        aarch64-linux = "sha256-lLwJD5Xr8X10eJnMZjvJjioTcuPHvp1MgJc6o5QHdak=";
+        aarch64-darwin = "sha256-eJyIt2tOXXjgC6fXuxpTQyTTs0QzzA2ityQJyYpPRU0=";
       }
       .${stdenv.hostPlatform.system} or (throw "unsupported system ${stdenv.hostPlatform.system}");
   };

pkgs/by-name/co/coc-nginx/package.nix

@@ -36,13 +36,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "coc-nginx";
-  version = "0.5.0";
+  version = "0.5.1";
 
   src = fetchFromGitHub {
     owner = "yaegassy";
     repo = "coc-nginx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9dca1YUQZCbzmGe+9qVJABCWZCGUUZDvtznMQEP/CCQ=";
+    hash = "sha256-J2Xt09bF8jdeVC739vxaEfJh5kUfU4mB7gnSHVNQrro=";
   };
 
   yarnOfflineCache = fetchYarnDeps {

pkgs/by-name/co/coc-pyright/package.nix

@@ -7,17 +7,17 @@
 
 buildNpmPackage {
   pname = "coc-pyright";
-  version = "0-unstable-2026-02-10";
+  version = "0-unstable-2026-08-07";
 
   src = fetchFromGitHub {
     owner = "fannheyward";
     repo = "coc-pyright";
     # No tagged releases, this commit corresponds to the latest release of the package.
-    rev = "4bcc312b40fecbf7cad50d7c75579a1eedae337b";
-    hash = "sha256-rh3d3IlX9EKxJamJ1ldbsjOQ4n6+WLt+Lgh24sQfRBQ=";
+    rev = "66eca10f2575c051f1bc84386220b1df9427175b";
+    hash = "sha256-VJc9ss7ARsk3qUiW6Ox11ustjKzVamjhrTeAdB7VmaA=";
   };
 
-  npmDepsHash = "sha256-e7S8TS+ZvTGmTYChgYhicoHoESIT4fjkby1FO9D/ZNY=";
+  npmDepsHash = "sha256-SNPtiVwnfDNMrBUBAzRK6X1oFN5khw1N1SOmmCmzOgs=";
 
   passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
 

pkgs/by-name/co/collector/package.nix

@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "collector";
-  version = "0-unstable-2026-02-04";
+  version = "0-unstable-2026-04-17";
 
   src = fetchFromGitHub {
     owner = "mijorus";
     repo = "collector";
-    rev = "c5d0f547f6eb31f1f17490cf412d9bcaf7c30d43";
-    hash = "sha256-ow228VINpSlIv1fVc/YqD7ZT84hNCOFFG0FAXQVDtRs=";
+    rev = "c40da4053d0274cfc3d99d0a1a3ad0935a664a34";
+    hash = "sha256-qAOcVGy9ExeitllGOZTqHQ1QnPK+2u4tPmhnwXUqHH0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/conntrack-tools/package.nix

@@ -18,11 +18,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "conntrack-tools";
-  version = "1.4.8";
+  version = "1.4.9";
 
   src = fetchurl {
     url = "https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-${finalAttrs.version}.tar.xz";
-    hash = "sha256-BnZ39MX2VkgZ547TqdSomAk16pJz86uyKkIOowq13tY=";
+    hash = "sha256-wVr+SIqNQIydbWHpfb0Z88WRlC9iwT32RTqWHKQjHK4=";
   };
 
   buildInputs = [

pkgs/by-name/co/consul-template/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "consul-template";
-  version = "0.41.4";
+  version = "0.42.1";
 
   src = fetchFromGitHub {
     owner = "hashicorp";
     repo = "consul-template";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-YZ6PZh9ZFEaanTkvQ6I35ubRxSKB/dMq8JXLPf5Ym4I=";
+    hash = "sha256-J/dUlF7FBo+WLMA6ff0WlqD1oqsmPI2W8ebW1eNTUX4=";
   };
 
-  vendorHash = "sha256-IfOaJlcMNRWxC0XNZYU/5Lz3ILlMWSfzFXwLu3gLKOc=";
+  vendorHash = "sha256-wmbv/YrjRweTsaA/3mXKx2L8yNdoSRXRVyEcaraJ/nw=";
 
   # consul-template tests depend on vault and consul services running to
   # execute tests so we skip them here

pkgs/by-name/co/converseen/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "converseen";
-  version = "0.15.1.3";
+  version = "0.15.2.7";
 
   src = fetchFromGitHub {
     owner = "Faster3ck";
     repo = "Converseen";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3cHj7wnNAvFsVyvt5lQAhtFn6AjgiR08MIGchmj8fac=";
+    hash = "sha256-TS6aCq1tH/0+im2pEYe2a+0KChKHhXJoTu0MjHoZJdQ=";
   };
 
   strictDeps = true;

pkgs/by-name/co/cornucopia/package.nix

@@ -8,17 +8,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cornucopia";
-  version = "1.0.0";
+  version = "1.0.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "cornucopia-rs";
     repo = "cornucopia";
     tag = "cornucopia-v${finalAttrs.version}";
-    hash = "sha256-qlhdBI8XadU2dMbBEGRzWbZMdCkzt5u5ywfcvuIEYC8=";
+    hash = "sha256-dmIodvHxnSgjLXFIzP6Oo2e/EOqkuT3JjMKZn0ka200=";
   };
 
-  cargoHash = "sha256-Tm951lRd53Mzw9UwpDHQ11KRhk0Mj/XaGXcKqSE43cM=";
+  cargoHash = "sha256-kuxjjCNrjbmlbB6sCa9NHCV5ooC1SwqbasIe0Igottc=";
 
   cargoBuildFlags = [ "--package=cornucopia" ];
 

pkgs/by-name/co/coroot-node-agent/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "coroot-node-agent";
-  version = "1.32.0";
+  version = "1.35.5";
 
   src = fetchFromGitHub {
     owner = "coroot";
     repo = "coroot-node-agent";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-qrIcbJcxVw6LgvpihFlDP3AYT0S5ILHJf+pko94t3/8=";
+    hash = "sha256-j/JSv7XOfRhxjJmjU9Fd3F4+ujhlIf7XBi8AD8GqMTs=";
   };
 
-  vendorHash = "sha256-I7KxBM3cLF4zrZb6AQSCmg3cR1MrTPzTNHUHN9YP3P0=";
+  vendorHash = "sha256-kP3IP4LZXJ5olm5uE9RtqCtvX3KfvOsscrZqo4I0fRA=";
 
   buildInputs = [ systemdLibs ];
 

pkgs/by-name/d2/d2/package.nix

@@ -20,16 +20,16 @@ assert lib.assertMsg (
 
 buildGoModule (finalAttrs: {
   pname = "d2";
-  version = "0.7.1";
+  version = "0.8.1";
 
   src = fetchFromGitHub {
     owner = "d2lang";
     repo = "d2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ZRAvMcJKQmvcBbT2foKDYS0gTeqOZqFu3V3iXIbfLsQ=";
+    hash = "sha256-4RYKm8wq+KxzLQbd3sIEZLTy7xBtlWhJCHfggvkktXo=";
   };
 
-  vendorHash = "sha256-UZDk2upJ0xTSAg/DpRHCzdAOLnaeI0WLMJ6jNt8elKI=";
+  vendorHash = "sha256-4IhAb3UeqSGX9jTdhWonf7lEBhUlUrrVt31NyfSoQF8=";
 
   excludedPackages = [ "./e2etests" ];
 

pkgs/by-name/da/darkly/package.nix

@@ -10,13 +10,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "darkly";
-  version = "0.5.32";
+  version = "0.5.38";
 
   src = fetchFromGitHub {
     owner = "Bali10050";
     repo = "Darkly";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bW0untIUe6QMygBPABCMyrnaZCo8E4pKRQGZgLO9aGI=";
+    hash = "sha256-u12imjPk4ZhOen/PgnLiNPML+5NmuKO0Ja4wQKU/Y8E=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/de/devenv/package.nix

@@ -24,16 +24,16 @@
 }:
 
 let
-  version = "2.2.1";
+  version = "2.2.2";
   devenvNixVersion = "2.34";
-  devenvNixRev = "f33db89fd6db6edc337d93212f6628ab6d25f407";
+  devenvNixRev = "59407321a92f7d34d4a53e38959294007c0bc37a";
 
   devenvNixSrc = fetchFromGitHub {
     name = "devenv-nix-${devenvNixVersion}-source";
     owner = "cachix";
     repo = "nix";
     rev = devenvNixRev;
-    hash = "sha256-JSD8lPe5kalvPKx5X+inX8ZZdGLeXkAbd3Jiv7UDf+I=";
+    hash = "sha256-WcqKvA7f7TGrlDVd69T1UXUqVXJ+wfoRbO+mg5L7/Rc=";
   };
 
   nix_components = (nixVersions.nixComponents_git.overrideSource devenvNixSrc).overrideScope (
@@ -49,11 +49,11 @@ rustPlatform.buildRustPackage {
   src = fetchFromGitHub {
     owner = "cachix";
     repo = "devenv";
-    tag = "v2.2.1";
-    hash = "sha256-S4baMekJYJGWDCo1yOYxZkmgBlAruQ5MLi+h3Zo8als=";
+    tag = "v2.2.2";
+    hash = "sha256-UXA2rr/JNIrbTrhPcmbC2y4Uit8NzeAMZAlUfBQ45uw=";
   };
 
-  cargoHash = "sha256-2SQbXhDOoXQ33RYB5ik2rSdP3LxNR77lp/B9R1abUl0=";
+  cargoHash = "sha256-w7RUfoY2HoPdHQzn+qfTl0StoiJLkCN5UtxXLNAfbrM=";
 
   env = {
     RUSTFLAGS = "--cfg tracing_unstable";

pkgs/by-name/do/doublecmd/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "doublecmd";
-  version = "1.2.4";
+  version = "1.2.8";
 
   src = fetchFromGitHub {
     owner = "doublecmd";
     repo = "doublecmd";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VmiL3B4BmbKhk0eWmlKuPuPv6OsUk7DbFNoYGdcpeBM=";
+    hash = "sha256-2WjzjBgM2GP2UlRT603X5825Iro41XL1roDJ0kbswd4=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/dp/dput-ng/package.nix

@@ -5,7 +5,7 @@
   nix-update-script,
 }:
 let
-  version = "1.44";
+  version = "1.46";
 in
 python3.pkgs.buildPythonApplication {
   pname = "dput-ng";
@@ -17,7 +17,7 @@ python3.pkgs.buildPythonApplication {
     owner = "debian";
     repo = "dput-ng";
     tag = "debian/${version}";
-    hash = "sha256-3MdxyTRnoK5SUJzY5DTzfOiurcbtxujhiNpMABNLxgY=";
+    hash = "sha256-7A9crJpdQKj8TlSfIQ41PxtR6hcIdGo2sIaQnXGiXvg=";
   };
 
   postPatch = ''

pkgs/by-name/ex/exo/package.nix

@@ -231,5 +231,9 @@ python3Packages.buildPythonApplication (finalAttrs: {
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ GaetanLepage ];
     mainProgram = "exo";
+    knownVulnerabilities = [
+      # https://github.com/NixOS/nixpkgs/issues/538886
+      "CVE-2026-14738"
+    ];
   };
 })

pkgs/by-name/fa/fanbox-dl/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "fanbox-dl";
-  version = "0.28.1";
+  version = "0.29.1";
 
   src = fetchFromGitHub {
     owner = "hareku";
     repo = "fanbox-dl";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-vXKiShP8RdIT8pRhDkO5K3fBVHQZ9nXv5GAhZaEXj8E=";
+    hash = "sha256-Cv4m0zVXqsp+OyYh3viXrJpoxOuQdGIWt1MNwxwwt7A=";
   };
 
-  vendorHash = "sha256-uhNitrJeFuFG2XyQrc1JBbExoU6Ln6AFRO2Bgb1+N5M=";
+  vendorHash = "sha256-926PY/byA23wkugkdHLjiGmRgezzEiy4wiGpIXlWsNM=";
 
   # pings websites during testing
   doCheck = false;

pkgs/by-name/fe/fennel-ls/package.nix

@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "fennel-ls";
-  version = "0.2.3";
+  version = "0.2.4";
 
   src = fetchFromSourcehut {
     owner = "~xerool";
     repo = "fennel-ls";
     rev = finalAttrs.version;
-    hash = "sha256-BU0SkdBjq8kicvACIo3N2gf1UvTmzA3FKSt39Lxp3rs=";
+    hash = "sha256-RIkwL/nF0LwQZOXlUidyQVfRWuFBO5TobNTZrUFuJ64=";
   };
   buildInputs = [
     lua

pkgs/by-name/gh/ghost-cli/package.nix

@@ -11,18 +11,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ghost-cli";
-  version = "1.28.6";
+  version = "1.29.1";
 
   src = fetchFromGitHub {
     owner = "TryGhost";
     repo = "Ghost-CLI";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GUdo2qn+5YOefCSHlH+jv+gSZWlT8POzQlaN0+Yxuhk=";
+    hash = "sha256-Zwm1v5xY3jq5krbGFVmA6qmVsYY5RdMEnHcefzKj6V4=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-B39MyCn4P8iqT/y2wPeHKJgYWzgB4I81usmzC0PH3qU=";
+    hash = "sha256-MpgTPBQ/VCwWzCN/a/y1TJyB6rSjwAIKu/RbBXE6fos=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gi/git-credential-email/package.nix

@@ -26,13 +26,13 @@ let
 in
 python3Packages.buildPythonApplication (finalAttrs: {
   inherit pname;
-  version = "5.6.2";
+  version = "5.9.1";
 
   src = fetchFromGitHub {
     owner = "AdityaGarg8";
     repo = "git-credential-email";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pW13tOPOyS5EorR1C/WEpJpu2ilCA4s8N7GkXoyPv7U=";
+    hash = "sha256-QcPsd9iAzxF04+GuHe4gVJoJPtSyj/nHQ/PpNYyc72w=";
   };
 
   dependencies =

pkgs/by-name/gn/gnome-commander/package.nix

@@ -19,14 +19,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-commander";
-  version = "1.18.5";
+  version = "1.18.6";
 
   src = fetchFromGitLab {
     domain = "gitlab.gnome.org";
     owner = "GNOME";
     repo = "gnome-commander";
     tag = finalAttrs.version;
-    hash = "sha256-op9EeBj6axgIPvpwoG3aQF3DOQUVGMlBGHhuXsdG+AU=";
+    hash = "sha256-nn4vKmMR6JS/HEHS8VOX7bM7z0WJlHM2+V7s+UvWQrA=";
   };
 
   # hard-coded schema paths

pkgs/by-name/gn/gnote/package.nix

@@ -20,11 +20,11 @@
 
 stdenv.mkDerivation rec {
   pname = "gnote";
-  version = "49.2";
+  version = "50.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnote/${lib.versions.major version}/gnote-${version}.tar.xz";
-    hash = "sha256-lC8CsXIFff4HbdBNDwNlLqafNjg3Lsbrn8p3CBYEp7U=";
+    hash = "sha256-vtc0VUrPMXuSK3RiNprlLbzNzV9NInFMJnxeMFW9mLI=";
   };
 
   buildInputs = [

pkgs/by-name/go/go-task/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "go-task";
-  version = "3.48.0";
+  version = "3.52.0";
 
   src = fetchFromGitHub {
     owner = "go-task";
     repo = "task";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-t6u2SSPDh+zj8M5aJfP3mYgSgBMNDEMNhMWEkr86M0U=";
+    hash = "sha256-JgqvcSZng3GcHZ1G9zYvlPFkrtdPVLtPM7RxlcEEEZA=";
   };
 
-  vendorHash = "sha256-v8OY4JkDaY8Xl20JvU8JbAXD43BaGrM5UmiJHnHaxek=";
+  vendorHash = "sha256-Q3fgeWD4KhL1CvhedyIX5BnRyWGlACKJVPg4rcWaIls=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/go/gomi/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "gomi";
-  version = "1.6.2";
+  version = "1.6.4";
 
   src = fetchFromGitHub {
     owner = "babarot";
     repo = "gomi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ino7jUd9JvX6afvS6ouPHxU42GYfF696m+OS5CSvx5g=";
+    hash = "sha256-25nwTqPGxGsDe2LutcZwIxswqhrV3ASD0l73UfYZV9Y=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -24,12 +24,12 @@ buildGoModule (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-Lt2SA3IHD8wDxv5bScU37hqStnfxVYQQZS6ajr7PhJM=";
+  vendorHash = "sha256-NoiwYqDS+a5s9wOMT5setVjvFDZDFDDkvA2nyRi1XVQ=";
 
   subPackages = [ "." ];
 
   # Add version information fetched from the repository to ldflags.
-  # https://github.com/babarot/gomi/blob/v1.6.2/.goreleaser.yaml#L20-L22
+  # https://github.com/babarot/gomi/blob/v1.6.4/.goreleaser.yaml#L20-L22
   ldflags = [
     "-X main.version=v${finalAttrs.version}"
   ];

pkgs/by-name/gp/gpu-screen-recorder-notification/package.nix

@@ -0,0 +1,79 @@
+{
+  fetchgit,
+  gitUpdater,
+  gsettings-desktop-schemas,
+  lib,
+  libglvnd,
+  libx11,
+  libxext,
+  libxkbcommon,
+  libxrandr,
+  libxrender,
+  makeWrapper,
+  meson,
+  ninja,
+  pango,
+  pkg-config,
+  stdenv,
+  wayland-scanner,
+  wayland,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "gpu-screen-recorder-notification";
+  version = "1.3.4";
+
+  src = fetchgit {
+    url = "https://repo.dec05eba.com/gpu-screen-recorder-notification";
+    tag = finalAttrs.version;
+    hash = "sha256-rGredPrTda6/3pG4+0k6fHr4fRSVCRvTC/+sRFytrWo=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+    makeWrapper
+    wayland-scanner
+  ];
+
+  depsBuildBuild = [ pkg-config ];
+
+  buildInputs = [
+    libglvnd
+    pango
+    libx11
+    libxrandr
+    libxrender
+    libxkbcommon
+    libxext
+    wayland
+    gsettings-desktop-schemas
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  mesonBuildType = "release";
+
+  postInstall = ''
+    wrapProgram "$out/bin/gsr-notify" \
+      --prefix XDG_DATA_DIRS : "${gsettings-desktop-schemas}/share/gsettings-schemas/${gsettings-desktop-schemas.name}" \
+      --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ libglvnd ]}"
+  '';
+
+  passthru.updateScript = gitUpdater { };
+
+  meta = {
+    description = "Notification in the style of ShadowPlay";
+    homepage = "https://git.dec05eba.com/gpu-screen-recorder-notification/about";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "gsr-notify";
+    maintainers = with lib.maintainers; [
+      AhmedAmr
+      keenanweaver
+    ];
+    platforms = lib.platforms.linux;
+    sourceProvenance = with lib.sourceTypes; [ fromSource ];
+  };
+})

pkgs/by-name/gp/gpu-screen-recorder-ui/package.nix

@@ -0,0 +1,120 @@
+{
+  dbus,
+  desktop-file-utils,
+  fetchgit,
+  gitUpdater,
+  gpu-screen-recorder,
+  gpu-screen-recorder-notification,
+  gsettings-desktop-schemas,
+  lib,
+  libcap,
+  libdrm,
+  libglvnd,
+  libpulseaudio,
+  libx11,
+  libxcomposite,
+  libxcursor,
+  libxext,
+  libxfixes,
+  libxi,
+  libxkbcommon,
+  libxrandr,
+  libxrender,
+  linuxHeaders,
+  makeWrapper,
+  meson,
+  ninja,
+  pango,
+  pkg-config,
+  stdenv,
+  wayland-scanner,
+  wayland,
+  wrapperDir ? "/run/wrappers/bin",
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "gpu-screen-recorder-ui";
+  version = "1.13.5";
+
+  src = fetchgit {
+    url = "https://repo.dec05eba.com/gpu-screen-recorder-ui";
+    tag = finalAttrs.version;
+    hash = "sha256-ObIN8qD+34nXZv6v6vLK3f6bezVSXqOd0xPGci52awU=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+    makeWrapper
+    desktop-file-utils
+    wayland-scanner
+  ];
+
+  depsBuildBuild = [ pkg-config ];
+
+  buildInputs = [
+    libx11
+    libxrandr
+    libxrender
+    libxkbcommon
+    libxcomposite
+    libxfixes
+    libxext
+    libxi
+    libxcursor
+    libglvnd
+    libpulseaudio
+    libdrm
+    dbus
+    linuxHeaders
+    wayland
+    pango
+    libcap
+    gsettings-desktop-schemas
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  mesonBuildType = "release";
+
+  mesonFlags = [
+    # must be handled in the nixos module as extra file permissions are stripped in the nix store
+    (lib.mesonBool "capabilities" false)
+  ];
+
+  postInstall =
+    let
+      gpu-screen-recorder-wrapped = gpu-screen-recorder.override {
+        inherit wrapperDir;
+      };
+    in
+    ''
+      wrapProgram "$out/bin/gsr-ui" \
+        --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ libglvnd ]}" \
+        --prefix XDG_DATA_DIRS : "${gsettings-desktop-schemas}/share/gsettings-schemas/${gsettings-desktop-schemas.name}" \
+        --prefix PATH : "${wrapperDir}" \
+        --suffix PATH : "${
+          lib.makeBinPath [
+            gpu-screen-recorder-wrapped
+            gpu-screen-recorder-notification
+          ]
+        }"
+    '';
+
+  passthru.updateScript = gitUpdater { };
+
+  meta = {
+    description = "Fullscreen overlay UI for GPU Screen Recorder in the style of ShadowPlay";
+    homepage = "https://git.dec05eba.com/gpu-screen-recorder-ui/about";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "gsr-ui";
+    maintainers = with lib.maintainers; [
+      AhmedAmr
+      keenanweaver
+    ];
+    platforms = lib.platforms.linux;
+    sourceProvenance = with lib.sourceTypes; [ fromSource ];
+  };
+})

pkgs/by-name/gu/guile-goblins/package.nix

@@ -12,11 +12,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "guile-goblins";
-  version = "0.17.0";
+  version = "0.18.0";
 
   src = fetchurl {
     url = "https://spritely.institute/files/releases/guile-goblins/guile-goblins-${finalAttrs.version}.tar.gz";
-    hash = "sha256-IFZEB/HbBx1EDAO8+0xB/UB3iyogyzKbE+pbfbWrU5o=";
+    hash = "sha256-KrgWQOV9PpfoSi0KcxDrZdzxR1AD9PODpSfhylEART4=";
   };
 
   strictDeps = true;

pkgs/by-name/gw/gwyddion/package.nix

@@ -31,10 +31,10 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gwyddion";
-  version = "2.70";
+  version = "2.71";
   src = fetchurl {
     url = "mirror://sourceforge/gwyddion/gwyddion-${finalAttrs.version}.tar.xz";
-    hash = "sha256-lC9OBBlFqFC8MtBRk6EVrIpRGKb4Qa+m1N6lEPmRP1k=";
+    hash = "sha256-LfchvvzL5NXuK6Vksy5pNB+M4d5jfiBFg4oJotRrXbo=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ha/habitat/package.nix

@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "habitat";
-  version = "1.6.1245";
+  version = "2.1.23";
 
   src = fetchFromGitHub {
     owner = "habitat-sh";
     repo = "habitat";
     rev = finalAttrs.version;
-    hash = "sha256-n2ylJSCXPnnPHadfZaRS/3vxtnvkXhiTzCyObK7hmEk=";
+    hash = "sha256-mV7v9Vy9txlHA46xIlccRu0+lS2VYY2N3R3dxfvE7NY=";
   };
 
-  cargoHash = "sha256-JMIAHupv3da71j5ID5ZR0mD7ZLLj4ktIs0aQrdWi3jU=";
+  cargoHash = "sha256-SF3Cuwew/0TpipwJsnI1Kbup7hTDb7rVowqQL2ML990=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/ha/harmonia/package.nix

@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "harmonia";
-  version = "3.1.0";
+  version = "3.2.0";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -19,10 +19,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "nix-community";
     repo = "harmonia";
     tag = "harmonia-v${finalAttrs.version}";
-    hash = "sha256-fm8PBugKnw72/dAXsRj84jf4EZK1BcVEdEWgtojIuA0=";
+    hash = "sha256-eA0bEXk1T82oZCaX4HS9aZpwE9locw0pA3I1qf4yoEs=";
   };
 
-  cargoHash = "sha256-qp4frhNsWDma8uYcRe3BXmfIu6btYb8IaoXhk4oI4qM=";
+  cargoHash = "sha256-gHsLr2P900Pa236N4fNlJ0w9Pu10Yb0F18zufHuU/b0=";
 
   doCheck = false;
 

pkgs/by-name/ha/harsh/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "harsh";
-  version = "0.14.1";
+  version = "0.14.5";
 
   src = fetchFromGitHub {
     owner = "wakatara";
     repo = "harsh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Dyq6/Soc6J8rmqwvRtgz/H/l9gtSkEb6Ep/CxUteln4=";
+    hash = "sha256-C3er23ibNCZB1eQSAHPpGBrlJk7DiYD6WTAAEU4JElk=";
   };
 
-  vendorHash = "sha256-yMiw/D1poesgkvJa4jUclityEfhBxhLUTffBnkoWLHw=";
+  vendorHash = "sha256-0Nux4EIYscqem1xAbdj0hAP3MNmSM55pJ3xr/fEd3Ns=";
 
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
 

pkgs/by-name/he/healthchecks/package.nix

@@ -15,14 +15,14 @@ let
 in
 py.pkgs.buildPythonApplication rec {
   pname = "healthchecks";
-  version = "4.1.1";
+  version = "4.3";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "healthchecks";
     repo = "healthchecks";
     tag = "v${version}";
-    sha256 = "sha256-5+D2EjBuqadtAK10y7GManeFRwSk46Ovip9vT9cJW9E=";
+    sha256 = "sha256-8S7hIUFSr88jNEwGM4mSQAv+EdH/ynT9MvATabmtp5s=";
   };
 
   propagatedBuildInputs = with py.pkgs; [

pkgs/by-name/hf/hfst/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hfst";
-  version = "3.16.2";
+  version = "3.17.2";
 
   src = fetchFromGitHub {
     owner = "hfst";
     repo = "hfst";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Vp9rSQYNK991fCoEcW7tpVxCOemW2RFt0LujLGHFGVQ=";
+    hash = "sha256-6XtDz0pyB34fyCAEHAT8NX+mnRfYSsiYBif/iURMCs0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ho/hockeypuck/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "hockeypuck";
-  version = "2.3.2";
+  version = "2.3.3";
 
   src = fetchFromGitHub {
     owner = "hockeypuck";
     repo = "hockeypuck";
     rev = finalAttrs.version;
-    sha256 = "sha256-m1PI6YRFf2ZKvtsGtmTcERiB/7aZdhAcQODREb2K7ro=";
+    sha256 = "sha256-1AOvtAvx2OFxjJE5YhZwqdm9G8mWgS0hKPdTctU2MV4=";
   };
 
   modRoot = "src/hockeypuck/";

pkgs/by-name/ht/http-nu/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "http-nu";
-  version = "0.9.0";
+  version = "0.17.2";
 
   src = fetchFromGitHub {
     owner = "cablehead";
     repo = "http-nu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Tnu5Ophc20+fhAfqfRgfuJVdWojBBPThNPNlcefDVrs=";
+    hash = "sha256-6lwc0cMTdBOY5tpBfM4RDczXFbkDppNNftQ5snPrJZA=";
   };
 
-  cargoHash = "sha256-J1zGm5F+as/B7lXbiZVBWD4/axfRBFSDL0MEUOQ09GI=";
+  cargoHash = "sha256-RkwvHB6IanfAoQVdeDqdRR+mvClj7KZufpy+kXGN/yE=";
 
   nativeBuildInputs = lib.optionals stdenvNoCC.hostPlatform.isDarwin [
     rustPlatform.bindgenHook

pkgs/by-name/ic/ico/package.nix

@@ -9,11 +9,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "ico";
-  version = "1.0.6";
+  version = "1.0.7";
 
   src = fetchurl {
     url = "mirror://xorg/individual/app/ico-${finalAttrs.version}.tar.xz";
-    hash = "sha256-OPNp1DHnUygP3nD6SJzJTOIE+fjqvS9J/H0yr6afRAU=";
+    hash = "sha256-VqltZCnDh+VK7CO1IvVISH1duClgkvIbsom2eEUGmRU=";
   };
 
   strictDeps = true;

pkgs/by-name/im/imsprog/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "imsprog";
-  version = "1.8.2";
+  version = "1.8.6";
 
   src = fetchFromGitHub {
     owner = "bigbigmdm";
     repo = "IMSProg";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VV4qlMd4hj37AIRSMY/EzbJEz3gRLb9Q38ujwQddi0M=";
+    hash = "sha256-wYzhOQfkuXgc3fxYlkx284gu5gIYUH5SppM02WD1YWI=";
   };
 
   strictDeps = true;

pkgs/by-name/im/imv/package.nix

@@ -45,6 +45,7 @@
   libnsbmp,
   libwebp,
   qoi,
+  bashNonInteractive,
 }:
 
 let
@@ -126,6 +127,7 @@ stdenv.mkDerivation (finalAttrs: {
     libxkbcommon
     pango
     inih
+    bashNonInteractive
   ]
   ++ windowSystems."${withWindowSystem}"
   ++ map (b: backends."${b}") withBackends;

pkgs/by-name/iq/iqtree/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "iqtree";
-  version = "3.0.1";
+  version = "3.1.3";
 
   src = fetchFromGitHub {
     owner = "iqtree";
     repo = "iqtree3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6Zy/u7YSCoqkLwq6xOoFMFDInGYREea1gS+PzSP4F8Q=";
+    hash = "sha256-fWTqgx0TL1uSrO2Iix1wLgz4ft7+qELBXw+l9Rf2M3M=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/it/itgmania/themes/itg3encore.nix

@@ -6,13 +6,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "itg3encore";
-  version = "0-unstable-2026-07-26";
+  version = "0-unstable-2026-08-10";
 
   src = fetchFromGitHub {
     owner = "DarkBahamut162";
     repo = "itg3encore";
-    rev = "16e27737c5f09b1ca41c9ed356870a65bc436359";
-    hash = "sha256-GJZsScQEnuP/ZnNx9vkm4A+6PgG9l4bfvXbbhRwSS2M=";
+    rev = "5427331ee20e496092680400481165c503d2123e";
+    hash = "sha256-Hvqxhpdqxo32uXkuFGUqlNk8517ughE0mGBs1L9PsHY=";
   };
 
   postInstall = ''

pkgs/by-name/ke/ketch/package.nix

@@ -7,7 +7,7 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "ketch";
-  version = "0.12.0";
+  version = "0.14.0";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -16,7 +16,7 @@ buildGoModule (finalAttrs: {
     owner = "1broseidon";
     repo = "ketch";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qp4EwQBrN0ic/gUAvBAirz03kL7Vjhs1LbKBd+uXmHA=";
+    hash = "sha256-SBf9PYBcZ+odOLLdafI6dRczpyYZSYP5zo/0PAEWAiU=";
   };
 
   vendorHash = "sha256-Kk7fY27y1ziJEMpwRUoGfslGYYQdayLDuuRvNyfiAy8=";

pkgs/by-name/ki/kics/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kics";
-  version = "2.1.19";
+  version = "2.1.21";
 
   src = fetchFromGitHub {
     owner = "Checkmarx";
     repo = "kics";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cgB7qq53QMNm36UH5HZEE15iwcjhaB9A/a1gBGSFQ2M=";
+    hash = "sha256-dVgUHsUX2xgO9HGhBFid7s8T+2Ky4R/jB8/dNR3jQ/4=";
   };
 
-  vendorHash = "sha256-TlIrCtnJxB9LI+VT9d+cUcGI1tsuDfWwLiNpa8seK+4=";
+  vendorHash = "sha256-+/M0pIEr8SFjIlL6wCAy6c0X3cL4djRT3fQNy+PdfGs=";
 
   subPackages = [ "cmd/console" ];
 

pkgs/by-name/kr/kraft/package.nix

@@ -15,13 +15,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kraft";
-  version = "0.12.5";
+  version = "0.12.15";
 
   src = fetchFromGitHub {
     owner = "unikraft";
     repo = "kraftkit";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-/ReHXxvn/6dDJVxk5BOvxSZrlkDkZEfr+qM5raf2a3A=";
+    hash = "sha256-UpCAvGKhWBE4SR8dQpl0FexhID2k15Xu4KROCfPPPXw=";
   };
 
   nativeBuildInputs = [
@@ -39,7 +39,7 @@ buildGoModule (finalAttrs: {
     yajl
   ];
 
-  vendorHash = "sha256-1rdpyOJVeyzYT0WHJbeqO3aH15FN1/9iQ9bEsjWwn4c=";
+  vendorHash = "sha256-TM9wzh4F+7EJhwNUEKBJv9MbPfYPvT3BYJ69UJJ9ieE=";
 
   ldflags = [
     "-s"

pkgs/by-name/ku/kube-bench/package.nix

@@ -10,7 +10,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "kube-bench";
-  version = "0.15.0";
+  version = "0.16.0";
 
   __darwinAllowLocalNetworking = true; # required for tests
 
@@ -18,10 +18,10 @@ buildGoModule (finalAttrs: {
     owner = "aquasecurity";
     repo = "kube-bench";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PxCybf+lNo+ys8t8dTLZUVaovsg63DR3eeiv71w+N4M=";
+    hash = "sha256-k/OGcKYNmNljzMTZ8x+PdCa/Dow0ywPTIj6uq+QRUe4=";
   };
 
-  vendorHash = "sha256-GpUCOd2FR+D4hKdvrulfw4HknohfWnsWzdJI6tb0nhA=";
+  vendorHash = "sha256-+rjtQ0Fe9tHVn3O2RKXqvsERYVlwRdRMczEihIHI0Fw=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/ku/kube-router/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kube-router";
-  version = "2.7.1";
+  version = "2.8.1";
 
   src = fetchFromGitHub {
     owner = "cloudnativelabs";
     repo = "kube-router";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-1Cg/1XxJWIyx/xzDsh9WZG/CBpe/D1qvwGybgfH/06c=";
+    hash = "sha256-lTc3uo30byCu+Bm/Yy9OTgx1KLGncIEiQ9iweLIFC0k=";
   };
 
-  vendorHash = "sha256-s7In0uv8C+H1xkQxfjnH4+PXO3NPZU/NYdg00EVH4us=";
+  vendorHash = "sha256-XdCqwOfOUAjiNeNNto/x2KqjfdW/mjzSIiHNAdLfFiw=";
 
   env.CGO_ENABLED = 0;
 

pkgs/by-name/ku/kubeseal/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubeseal";
-  version = "0.36.0";
+  version = "0.38.4";
 
   src = fetchFromGitHub {
     owner = "bitnami";
     repo = "sealed-secrets";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-r+PjrHewqNIjj1ZYGEvAns4cSsg7mQXoR8/et6SJzhs=";
+    sha256 = "sha256-cg9YEY78miw8BRX9CCIeWqdAeJDsFSr6VvgRJFYzREU=";
   };
 
-  vendorHash = "sha256-poYkK62v0faGZnyYWQtUdf0eWTyWf+R/r1/+Wc8EeOA=";
+  vendorHash = "sha256-1RATVZIeWZFceLttnqnDgXHyUsjRvkHAnsypABW/WDE=";
 
   subPackages = [ "cmd/kubeseal" ];
 

pkgs/by-name/ku/kubetui/package.nix

@@ -6,20 +6,20 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kubetui";
-  version = "1.12.1";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "sarub0b0";
     repo = "kubetui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tLnZLZUYaV5o91wO95arZfkDtnSxui+3TLFCe+uAVdY=";
+    hash = "sha256-cjOfWipo1z5cfScW8EEBzjGdfmZeWvsO6TBXOuveW58=";
   };
 
   checkFlags = [
     "--skip=workers::kube::store::tests::kubeconfigからstateを生成"
   ];
 
-  cargoHash = "sha256-En58/bR1UEqUlkIoyU9iEm/UzB2m7mhdAqWp44sU2z4=";
+  cargoHash = "sha256-1FTckTIqBM4ckyB7YlgzM0GcoahMDnVBrAl1/P67TJ8=";
 
   meta = {
     homepage = "https://github.com/sarub0b0/kubetui";

pkgs/by-name/ku/kubie/package.nix

@@ -9,18 +9,18 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kubie";
-  version = "0.26.1";
+  version = "0.28.0";
 
   src = fetchFromGitHub {
     rev = "v${finalAttrs.version}";
     owner = "kubie-org";
     repo = "kubie";
-    sha256 = "sha256-eSzNCH0MiGvLKHrSXFSXQq4lN5tfmr0NcuGaN96Invs=";
+    sha256 = "sha256-WVmr/P+7gr1efTruoRfRRFIAxH2TnG8xun7PaApXYOo=";
   };
 
   buildNoDefaultFeatures = true;
 
-  cargoHash = "sha256-nXzIXMpCtibTN4rsPQFtSSjCQzylWWQZixwbH680ue0=";
+  cargoHash = "sha256-XKXULsdB4t5CPZVrkoT5H8Aj0AFhhnF31bR4s4dqe3A=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/ku/kubo/package.nix

@@ -10,7 +10,7 @@
 
 buildGoModule rec {
   pname = "kubo";
-  version = "0.40.1"; # When updating, also check if the repo version changed and adjust repoVersion below
+  version = "0.43.0"; # When updating, also check if the repo version changed and adjust repoVersion below
   rev = "v${version}";
 
   passthru.repoVersion = "18";
@@ -18,7 +18,7 @@ buildGoModule rec {
   # Kubo makes changes to its source tarball that don't match the git source.
   src = fetchurl {
     url = "https://github.com/ipfs/kubo/releases/download/${rev}/kubo-source.tar.gz";
-    hash = "sha256-O6mSFDKj1DdTMGhg5Q6L0hiLW9CUyUq9uyFz9Xjmm4s=";
+    hash = "sha256-vP/F7ZIdOVkDN16PoE8OiPFP/xbCxARq6EyyurA9hFY=";
   };
 
   # tarball contains multiple files/directories

pkgs/by-name/li/libcoap/package.nix

@@ -15,13 +15,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "libcoap";
-  version = "4.3.5a";
+  version = "4.3.5b";
   src = fetchFromGitHub {
     repo = "libcoap";
     owner = "obgm";
     rev = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-mLVGIG2JkWMlnZOlLxFTZVGM0nF6q2PKJoEo0s4Vq54=";
+    hash = "sha256-QPRyySqUu3ZYcuhoJ7g49di66ZhVqYJacDP3wJgDEtY=";
   };
   nativeBuildInputs = [
     automake

pkgs/by-name/li/libtickit/package.nix

@@ -9,7 +9,7 @@
   unibilium,
 }:
 let
-  version = "0.4.5";
+  version = "0.4.6";
 in
 stdenv.mkDerivation {
   pname = "libtickit";
@@ -19,7 +19,7 @@ stdenv.mkDerivation {
     owner = "leonerd";
     repo = "libtickit";
     rev = "v${version}";
-    hash = "sha256-q8JMNFxmnyOiUso4nXLZjJIBFYR/EF6g45lxVeY0f1s=";
+    hash = "sha256-5KGAPECXIi3V0oF7Gw2KjIIBhfKDDm1PE2k4+ooGmfM=";
   };
 
   patches = [

pkgs/by-name/lu/lunacy/package.nix

@@ -20,11 +20,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lunacy";
-  version = "12.3";
+  version = "14.1";
 
   src = fetchurl {
     url = "https://lcdn.icons8.com/setup/Lunacy_${finalAttrs.version}.deb";
-    hash = "sha256-Sa6LnB+YGkHpNpETjGHYUChCFu6Ginz+VQO8dPKVRBE=";
+    hash = "sha256-riOlvd3ZxdCw5pe5v0R0jqVMpOFOiVfqxmgh8YqnPd0=";
   };
 
   buildInputs = [

pkgs/by-name/ma/maven/build-maven-package.nix

@@ -112,7 +112,8 @@ let
             runHook postBuild
           '';
 
-          # keep only *.{pom,jar,sha1,nbm} and delete all ephemeral files with lastModified timestamps inside
+          # Preserve .meta because Tycho needs p2-artifacts.properties for offline builds.
+          # Maven Resolver's cached prefix indexes are volatile, so remove them and their checksums.
           installPhase = ''
             runHook preInstall
 
@@ -121,7 +122,7 @@ let
               -o -name resolver-status.properties \
               -o -name _remote.repositories \) \
               -delete
-            rm -rf $out/.m2/.meta
+            rm -f "$out"/.m2/.meta/prefixes-*.txt{,.*}
 
             runHook postInstall
           '';

pkgs/by-name/mc/mcap-cli/package.nix

@@ -8,7 +8,7 @@
   nix-update-script,
 }:
 let
-  version = "0.0.61";
+  version = "0.0.62";
 in
 buildGoModule {
 
@@ -20,7 +20,7 @@ buildGoModule {
     repo = "mcap";
     owner = "foxglove";
     rev = "releases/mcap-cli/v${version}";
-    hash = "sha256-PR0w/D5XwLaRP9vkRt8f9huG75lPTIwyhcegjlY1pno=";
+    hash = "sha256-lVTL+pa+gTPQWj7+RmaJUIdfOlPhlGtHujBalR+GDsI=";
   };
 
   vendorHash = "sha256-Q1TjUlS7+fV2HBQk108c+o/9IRpDc9C8jzBk048Mkig=";

pkgs/by-name/md/mdsf/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mdsf";
-  version = "0.11.1";
+  version = "0.12.1";
 
   src = fetchFromGitHub {
     owner = "hougesen";
     repo = "mdsf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UfLgrukVYqkUKBI7CNLIkANO1md6ArrbSIh+f0F3bek=";
+    hash = "sha256-f1hNGTAQoriCWL5g6b5MXej2Qc4pVAEf3k/J9eyHjVQ=";
   };
 
-  cargoHash = "sha256-dohbFCxoPPXZa6mKkDNmdkqH3T52hHiRTDgQJTJHfYU=";
+  cargoHash = "sha256-VjiJn9kvl+WtWKx7nvmw2ukAiEsO3hVCRSoR2XqjIO4=";
 
   # many tests fail for various reasons of which most depend on the build sandbox
   doCheck = false;

pkgs/by-name/me/media-downloader/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "media-downloader";
-  version = "5.4.9";
+  version = "5.6.5";
 
   src = fetchFromGitHub {
     owner = "mhogomchungu";
     repo = "media-downloader";
     rev = finalAttrs.version;
-    hash = "sha256-afQ3Tra7hUjrG3vs4XBfmvSOBrhG7k5fkEMDr6WF+Fo=";
+    hash = "sha256-2Nn/XBU5mnrbITtwygAD1saZXRm1/2Y1mOL0SZkV6bA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/mg/mgrep/package.nix

@@ -15,13 +15,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "mgrep";
-  version = "0.1.10";
+  version = "0.1.13";
 
   src = fetchFromGitHub {
     owner = "mixedbread-ai";
     repo = "mgrep";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Njs0h2Roqm9xK8TV7BqrR5EwpK+ONNl3ct1fHU0UZEY=";
+    hash = "sha256-uLAK4Mf0ghJmm6dHxooVuvMrZ16K9XZtedF5Cr/2DiM=";
   };
 
   pnpmDeps = fetchPnpmDeps {

pkgs/by-name/mi/millet/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "millet";
-  version = "0.14.9";
+  version = "0.15.2";
 
   src = fetchFromGitHub {
     owner = "azdavis";
     repo = "millet";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Ffna9qsCTRHnUstgCDZxHweHteYVA/xiAtOkzCw2ltI=";
+    hash = "sha256-MHAvurglG26nRvvAknqZPROSICI/ttQm0MLPsoQyw2Y=";
   };
 
-  cargoHash = "sha256-eQobRfvVdL68FeV/P/BL824sHEibC5eQoPeo6m6XJcI=";
+  cargoHash = "sha256-sJi+R67SfDshs37/uibtRHs8D3NRTUSQKfePgTWo5b4=";
 
   postPatch = ''
     rm .cargo/config.toml

pkgs/by-name/mi/mindustry/package.nix

@@ -257,9 +257,7 @@ stdenv.mkDerivation {
     ];
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [
-      chkno
       fgaz
-      thekostins
       indium114
     ];
     platforms = lib.platforms.all;

pkgs/by-name/mo/moor/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "moor";
-  version = "2.16.2";
+  version = "2.16.3";
 
   src = fetchFromGitHub {
     owner = "walles";
     repo = "moor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KSS9639wke24T4k4Xlcf0sbMswScWY1Uipq0dWt5MV8=";
+    hash = "sha256-z1fGeeCkcPmvQEK+WK/W0kj/w57YqT06yEbQf5gEgGY=";
   };
 
-  vendorHash = "sha256-19g9mzt2YHpwuCeroR6vUEhfsHoo4B0Zkm/goPccZqI=";
+  vendorHash = "sha256-01FIkLojyCvjMjW4qe6mPP63hz5rYeVATyL0dW+F/Ek=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/mo/mosdepth/package.nix

@@ -7,13 +7,13 @@
 
 buildNimPackage (finalAttrs: {
   pname = "mosdepth";
-  version = "0.3.13";
+  version = "0.3.14";
 
   src = fetchFromGitHub {
     owner = "brentp";
     repo = "mosdepth";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-UjyfJSykAbE2RhRsixNx2JwCINMdSmukF5oW9OalyeA=";
+    hash = "sha256-QnUobAXf0Nc7817+4pmDtYOoQgnIjQ7UburTl6JwMGw=";
   };
 
   lockFile = ./lock.json;

pkgs/by-name/nb/nbfc-linux/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nbfc-linux";
-  version = "0.5.2";
+  version = "0.5.3";
 
   src = fetchFromGitHub {
     owner = "nbfc-linux";
     repo = "nbfc-linux";
     tag = finalAttrs.version;
-    hash = "sha256-468/dFRjEgyJ0AW98wKq04WKZ4sZyzswBASSF6hyjVY=";
+    hash = "sha256-x2boeFlTDnoVnazzQkCukZxZBFIW2rLjglarflNy334=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ng/ngt/package.nix

@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "NGT";
-  version = "2.6.0";
+  version = "2.7.2";
 
   src = fetchFromGitHub {
     owner = "NGT-labs";
     repo = "NGT";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-dAJ8Xz7Cgmajac43G/3JWj1gwlG2z1RaN7R49IsbMnc=";
+    sha256 = "sha256-E09LxLDX/amwNlt0TgMS1sB4VjdK6iPIadCPP6Pq2Vc=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/nu/numcpp/package.nix

@@ -9,13 +9,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "numcpp";
-  version = "2.16.0";
+  version = "2.16.1";
 
   src = fetchFromGitHub {
     owner = "dpilger26";
     repo = "NumCpp";
     tag = "Version_${finalAttrs.version}";
-    hash = "sha256-r1NHutP2b5hq8v/TXyk3WQ7hVmWHVaJPZ200NbC2HLk=";
+    hash = "sha256-sCN2zXsBFm7jdcHweYJ3u0BE90FFwV5msHrSYc1dJfA=";
   };
 
   patches = [ ./pytest-CMakeLists.patch ];

pkgs/by-name/oc/oci-cli/package.nix

@@ -31,14 +31,14 @@ in
 
 py.pkgs.buildPythonApplication (finalAttrs: {
   pname = "oci-cli";
-  version = "3.90.1";
+  version = "3.90.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "oracle";
     repo = "oci-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PrtmgkrV1uNNM3TEYqbpIHxXyo7iv9vYY7JTmyKA1wc=";
+    hash = "sha256-FpLbJQGuajT72XSRpBYRpwqggqebuiRXID9x7ucZrng=";
   };
 
   nativeBuildInputs = [ installShellFiles ];

pkgs/by-name/oc/ocserv/package.nix

@@ -23,13 +23,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ocserv";
-  version = "1.4.0";
+  version = "1.4.1";
 
   src = fetchFromGitLab {
     owner = "openconnect";
     repo = "ocserv";
     tag = finalAttrs.version;
-    hash = "sha256-u6gk1foCmx88iw7vMB9If0zHpd1xpzGsfHx2SxgXSX0=";
+    hash = "sha256-CaMUQd4J4g9gPWfJyUqO+IVFE1O3LjiODxFkDXSm9io=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ol/olvid/package.nix

@@ -62,14 +62,14 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "olvid";
-  version = "2.7.0";
+  version = "3.1.1";
 
   dontUnpack = true;
   dontWrapGApps = true;
 
   src = fetchurl {
     url = "https://static.olvid.io/linux/${repo}-${finalAttrs.version}.tar.gz";
-    hash = "sha256-5qpsi31Z2aDIlEZ/lhsj8VjxSwfVvAOiwPbSWcRdby0=";
+    hash = "sha256-kdx4xUQcDvXKMvrM/9LwuiJRlfrZehxpv0rrd4H13l0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/op/openpace/package.nix

@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "openpace";
-  version = "1.1.3";
+  version = "1.1.4";
 
   src = fetchFromGitHub {
     owner = "frankmorgner";
     repo = "openpace";
     tag = finalAttrs.version;
-    hash = "sha256-KsgCTHvbqxNOcf9HWgXGxagpIjHEcQ5Kryjq71F8XRk=";
+    hash = "sha256-S3YlVeovjcew72nrydBhd1A1scpk5tSw3CPIKm4aBaU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/op/openspec/package.nix

@@ -13,7 +13,7 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "openspec";
-  version = "1.7.0";
+  version = "1.8.0";
   __structuredAttrs = true;
   strictDeps = true;
 
@@ -21,14 +21,14 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     owner = "Fission-AI";
     repo = "OpenSpec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-mkwQQRjc/kWwhTj0pfJj264wIoL9FHb3B8flevyM8bs=";
+    hash = "sha256-somG/01vz+TfFs/X2GOXYwG4WShOZUWz2Za9l/RGHSM=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-riT2qV8FUKdF4PI7Zcw7nZw6ZR9u4/qpeDKZ5oFPuH4=";
+    hash = "sha256-l/0tc/9pzjwHcjGT9/exBZTiHhRJpUFuiam2+fQYcbw=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/os/osv-scanner/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "osv-scanner";
-  version = "2.3.3";
+  version = "2.5.0";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "osv-scanner";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XUNtSLokTp7fq25vAb1hVg2eCtok+pe/nIWKMu4tVlI=";
+    hash = "sha256-5QKGLUiY2SJxFr+O1g/hsMlLPGv+72ZUW6uIqY9o1Pk=";
   };
 
-  vendorHash = "sha256-tSvKKX4P3XzHMF7jYnupZ5Fd9DUfIHT9a1bOHhB2gMs=";
+  vendorHash = "sha256-k55OVmeWjLlYzYE+G/HYewci1ppx+EY5SmoTFT9O7nw=";
 
   subPackages = [
     "cmd/osv-scanner"

pkgs/by-name/pa/paper-age/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "paper-age";
-  version = "1.4.0";
+  version = "1.5.0";
 
   src = fetchFromGitHub {
     owner = "matiaskorhonen";
     repo = "paper-age";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-wKhq7AtplQ+Yl5/pVaBY2gLu3KklPXqUEd6cVabHtVo=";
+    hash = "sha256-Du5GYk2iWMuUGQ1F6pubDNyMngXpO2ZSk/KpZvHqpcI=";
   };
 
-  cargoHash = "sha256-LcGTnWgccTjrfDGKsnArxtSksr8lMG392HhYKVy1Lew=";
+  cargoHash = "sha256-Ba0Hp3g3aKr7f6RidxFcES2DExuq/jHH5Gg3bcIoH8k=";
 
   meta = {
     description = "Easy and secure paper backups of secrets";

pkgs/by-name/pa/pattypan/package.nix

@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "pattypan";
-  version = "22.03";
+  version = "26.02";
 
   src = fetchFromGitHub {
     owner = "yarl";
     repo = "pattypan";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-wMQrBg+rEV1W7NgtWFXZr3pAxpyqdbEBKLNwDDGju2I=";
+    hash = "sha256-d4OF2ayL56R6j2js44e3tOUY5kNqWSM2L4VQw0f6OoY=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/pj/pjsip/package.nix

@@ -13,13 +13,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "pjsip";
-  version = "2.16";
+  version = "2.17";
 
   src = fetchFromGitHub {
     owner = "pjsip";
     repo = "pjproject";
     tag = finalAttrs.version;
-    hash = "sha256-WDKkC/M8khhPaRLsAh6FXoUSTgCBK+RAFpEcB9+MBHc=";
+    hash = "sha256-n7J7+l+DVNSHZdmoBTYN6Lx++3CXwtUwvgzPiR2+Teg=";
   };
 
   postPatch = ''

pkgs/by-name/pr/prek/package.nix

@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "prek";
-  version = "0.4.12";
+  version = "0.4.13";
 
   src = fetchFromGitHub {
     owner = "j178";
     repo = "prek";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FOGycyjldrn0VN22fIv/NUmVxZ2S0GOl70/PzcdazDU=";
+    hash = "sha256-zxsSQ6omRF94AeiRDGZ9jFt8jSwJpkAW5aWHh2t42Mc=";
   };
 
-  cargoHash = "sha256-tGfi5kdw1LQciOeUwceAql7In+ggyatsRC7T0+by9e8=";
+  cargoHash = "sha256-cNTmqG1ZbdOX8FIZZalEjxpCqTaHC4NslqOO8+M9kYU=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/py/pyroscope/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "pyroscope";
-  version = "2.1.0";
+  version = "2.2.1";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "pyroscope";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-7bY3qmN05m/OxFyDxdwlxsvYrwzhdbkX0XhGqOzCZSA=";
+    hash = "sha256-aIFadpHYL/80v8OqEjkKCoVyK+nZkKSzrji2JAaPVhc=";
   };
 
-  vendorHash = "sha256-UGWfrnpTgzR09T5jDL24d/Bs8+HBWi4g1YzZyy7ULWY=";
+  vendorHash = "sha256-qiLdFuLDcs/6rbLzgpZCSgJqppwCZyddIbdzmrBHDjk=";
   proxyVendor = true;
 
   subPackages = [