Merge staging-next into staging

2026-07-15 05:09:05 +00:00 · 2026-07-11 06:47:14 +00:00
parent bed497736d b74f0ab33c
commit 4e26cb7489
50 changed files with 772 additions and 671 deletions
--- a/lib/tests/misc.nix
+++ b/lib/tests/misc.nix
@@ -4687,7 +4687,7 @@ runTests {
  };

  testPlatformMatchNoMatch = {
-    expr = meta.platformMatch { system = "x86_64-darwin"; } "x86_64-linux";
+    expr = meta.platformMatch { system = "x86_64-freebsd"; } "x86_64-linux";
    expected = false;
  };

--- a/nixos/modules/services/x11/desktop-managers/cinnamon.nix
+++ b/nixos/modules/services/x11/desktop-managers/cinnamon.nix
@@ -116,7 +116,6 @@ in
        enablePkexecWrapper = lib.mkDefault true;
      };
      services.accounts-daemon.enable = true;
-      services.system-config-printer.enable = (mkIf config.services.printing.enable (mkDefault true));
      services.dbus.packages = with pkgs; [
        cinnamon
        cinnamon-screensaver
@@ -231,6 +230,9 @@ in
          ] config.environment.cinnamon.excludePackages
        );

+      # For printers@cinnamon.org applet
+      programs.system-config-printer.enable = (mkIf config.services.printing.enable (mkDefault true));
+
      xdg.mime.enable = true;
      xdg.icons.enable = true;

--- a/pkgs/README.md
+++ b/pkgs/README.md
@@ -183,12 +183,18 @@ To add a package to Nixpkgs:
  Examples:

  * nginx: init at 2.0.1
+  * qt6Packages.qtdeclarative: fix build
  * firefox: 54.0.1 -> 55.0

    https://www.mozilla.org/en-US/firefox/55.0/releasenotes/

 (using "→" instead of "->" is also accepted)

+For package sets with multiple versions, such as `perlPackages` (aliased to
+`perl5Packages`) and `python3Packages` (aliased to `python313Packages` at the
+time of writing), please use the unversioned attribute in your commit message
+unless the change is specific to one version.
+
 Using the `(pkg-name):` prefix is important beyond just being a convention: it queues automatic builds by CI.
 More sophisticated prefixes are also possible:

@@ -196,8 +202,8 @@ More sophisticated prefixes are also possible:
 |--------------------------------------------------------------------------|------------------------------------------------------------|
 | `vim: 1.0.0 -> 2.0.0`                                                    | `vim`                                                      |
 | `vagrant: fix dependencies for version 2.0.2`                            | `vagrant`                                                  |
-| `python3{9,10}Packages.requests: 1.0.0 -> 2.0.0`                         | `python39Packages.requests`, `python310Packages.requests`  |
-| `python312.pkgs.numpy,python313.pkgs.scipy: fix build`                   | `python312.pkgs.numpy` , `python313.pkgs.scipy`            |
+| `python3Packages.requests: 1.0.0 -> 2.0.0`                               | `python3Packages.requests`                                 |
+| `python3Packagess.{numpy,scipy}: fix build`                              | `python3Packages.numpy` , `python3Packages.scipy`          |

 When opening a PR with multiple commits, CI creates a single build job for all detected packages.
 If `passthru.tests` attributes are available, these will be built as well.
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1058,11 +1058,11 @@
    "vendorHash": null
  },
  "oracle_oci": {
-    "hash": "sha256-2mdir7UZJpDxRy5GcB27ovJrE8UQmzjS5ciYY9pKZW8=",
+    "hash": "sha256-ENFE5nK1qxZcOxIMzXiilCLxRGBg0dc3lTPODk9e99g=",
    "homepage": "https://registry.terraform.io/providers/oracle/oci",
    "owner": "oracle",
    "repo": "terraform-provider-oci",
-    "rev": "v8.20.0",
+    "rev": "v8.22.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
--- a/pkgs/by-name/aw/aws-sam-cli/package.nix
+++ b/pkgs/by-name/aw/aws-sam-cli/package.nix
@@ -11,14 +11,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "aws-sam-cli";
-  version = "1.160.0";
+  version = "1.163.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-sam-cli";
    tag = "v${version}";
-    hash = "sha256-IBxnBIgTSpPUNb/4yx3OqA7WFzudzRKgkKCFsJeyx08=";
+    hash = "sha256-ydyuQHdLWet5+HkPCmHiKqTFY8+nVOXTlPFfOckzOXE=";
  };

  build-system = with python3.pkgs; [ setuptools ];
@@ -135,6 +135,8 @@ python3.pkgs.buildPythonApplication rec {
    # Tests are failing
    "tests/unit/commands/local/lib/"
    "tests/unit/local/lambda_service/test_local_lambda_http_service.py"
+    "tests/unit/local/apigw/test_local_apigw_service.py"
+    "tests/unit/local/apigw/test_event_constructor.py"
  ];

  disabledTests = [
@@ -145,6 +147,8 @@ python3.pkgs.buildPythonApplication rec {
    "test_import_should_succeed_for_a_defined_hidden_package_540_pkg_resources_py2_warn"
    "test_updates_imageuri_when_pointing_to_local_archive"
    "test_subcommand_help_0_invoke"
+    "TestCli"
+    "TestImportModuleProxy"
  ];

  pythonImportsCheck = [ "samcli" ];
--- a/pkgs/by-name/bs/bs-manager/depotdownloader/default.nix
+++ b/pkgs/by-name/bs/bs-manager/depotdownloader/default.nix
@@ -7,19 +7,19 @@

 buildDotnetModule {
  pname = "depotdownloader";
-  version = "2.7.4-unstable-2024-12-01";
+  version = "3.4.0-unstable-2026-05-14";

  src = fetchFromGitHub {
    owner = "Iluhadesu";
    repo = "DepotDownloader";
-    rev = "a9f58e5513b72bd00b623a83e1460b3c5db49248";
-    hash = "sha256-+QfwKQJzyXqUvTn8kKP7lYHvbtRtdJ7jc/W7E87tV7w=";
+    rev = "0ab6676c51f27d3b9e63278e3c18484d4d2bf063";
+    hash = "sha256-qC9EakT1tu8NNwbmj7HmYgcIoEUlMRRHNGnKggVNDgk=";
  };

  projectFile = "DepotDownloader.sln";
  nugetDeps = ./deps.json;
-  dotnet-sdk = dotnetCorePackages.sdk_8_0;
-  dotnet-runtime = dotnetCorePackages.runtime_8_0;
+  dotnet-sdk = dotnetCorePackages.sdk_9_0;
+  dotnet-runtime = dotnetCorePackages.runtime_9_0;

  meta = {
    description = "Fork of DepotDownloader to be used by BSManager";
--- a/pkgs/by-name/bs/bs-manager/depotdownloader/deps.json
+++ b/pkgs/by-name/bs/bs-manager/depotdownloader/deps.json
@@ -11,8 +11,8 @@
  },
  {
    "pname": "Microsoft.Windows.CsWin32",
-    "version": "0.3.106",
-    "hash": "sha256-S1uQa684taPb6uh69784ebVpXoirMoX+pxBRA+Rrzlg="
+    "version": "0.3.275",
+    "hash": "sha256-sqIFj1dNatchuS9R7sk0Os6vSoSXFjm20qppvnnw78c="
  },
  {
    "pname": "Microsoft.Windows.SDK.Win32Docs",
@@ -21,38 +21,38 @@
  },
  {
    "pname": "Microsoft.Windows.SDK.Win32Metadata",
-    "version": "60.0.34-preview",
-    "hash": "sha256-KdRe73sXipzMvm2BLmwwBZGh+l9isZDC9l8WFyUR1zM="
+    "version": "63.0.31-preview",
+    "hash": "sha256-MMvQoyVT15IU93EKZ46rhP/hyx3wV452vuFnf8OTd60="
+  },
+  {
+    "pname": "Microsoft.Windows.SDK.Win32Metadata",
+    "version": "70.0.11-preview",
+    "hash": "sha256-JRcTFlzV+sDfgUKPtn0oOn25SdNivmhbS8+0HcAozu8="
  },
  {
    "pname": "Microsoft.Windows.WDK.Win32Metadata",
-    "version": "0.11.4-experimental",
-    "hash": "sha256-b3oKUKbr+3Udfl7RWzUY9BR/XWNsN+VmEkBxk6KiFo0="
+    "version": "0.13.25-experimental",
+    "hash": "sha256-eQeaRJ2PYhBSvK8TA55BHRwbd67EqJzwTZZRjQphlhc="
  },
  {
    "pname": "protobuf-net",
-    "version": "3.2.30",
-    "hash": "sha256-keRy5OWT+/tlZt3D7x+9PEdjTvEJcZdYsf/i1ZBtciE="
+    "version": "3.2.56",
+    "hash": "sha256-KjwRHyGwflQDjVaudT+NjRnfGhHb4CpCfn9hHVixI+E="
  },
  {
    "pname": "protobuf-net.Core",
-    "version": "3.2.30",
-    "hash": "sha256-GMpJNecoBfrV2VgpYOhcZnKZaLFDObNLcX2LBTThrwY="
+    "version": "3.2.56",
+    "hash": "sha256-NVvLreCvvvnS/s0syL5/L3mRpXeswP7E71C6WP9f2Dc="
  },
  {
    "pname": "SteamKit2",
-    "version": "3.0.0-beta.4",
-    "hash": "sha256-7cXlpCuUD8ZuTMtqsT5MdklkZb+XIGBdoI28anjUXtg="
-  },
-  {
-    "pname": "System.Collections.Immutable",
-    "version": "7.0.0",
-    "hash": "sha256-9an2wbxue2qrtugYES9awshQg+KfJqajhnhs45kQIdk="
+    "version": "3.3.1",
+    "hash": "sha256-f6kc15RKNxCSIlynlVHU8fBqQ7N8nG1xV3DNbBlRmvo="
  },
  {
    "pname": "System.IO.Hashing",
-    "version": "8.0.0",
-    "hash": "sha256-szOGt0TNBo6dEdC3gf6H+e9YW3Nw0woa6UnCGGGK5cE="
+    "version": "9.0.8",
+    "hash": "sha256-Jj1XwumBjBa5LJqSVTN2naQJ0FM4wwPvZS8NxGd5Hnw="
  },
  {
    "pname": "System.Security.AccessControl",
@@ -63,5 +63,10 @@
    "pname": "System.Security.Principal.Windows",
    "version": "5.0.0",
    "hash": "sha256-CBOQwl9veFkrKK2oU8JFFEiKIh/p+aJO+q9Tc2Q/89Y="
+  },
+  {
+    "pname": "ZstdSharp.Port",
+    "version": "0.8.6",
+    "hash": "sha256-rc3YWP80fykqujDsD72SXOA1tBDoy2KrvVETOC8eTx8="
  }
 ]
--- a/pkgs/by-name/ch/chameleon-cli/package.nix
+++ b/pkgs/by-name/ch/chameleon-cli/package.nix
@@ -23,14 +23,14 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "chameleon-cli";
-  version = "2.1.0-unstable-2026-05-08";
+  version = "2.2.0-unstable-2026-07-04";

  src = fetchFromGitHub {
    owner = "RfidResearchGroup";
    repo = "ChameleonUltra";
-    rev = "f06efdf81574406943142f4a14db338d2b145a15";
+    rev = "f349dbeeaa315776b272ae8fb851cc4042d55f07";
    rootDir = "software";
-    hash = "sha256-2zc9Uww1t1XJzQpI4KChe1cbqJXoewTo3vBbQKJdjfI=";
+    hash = "sha256-D8/hdOcDnkAmwQeWR+faukAISlm6ZTauf8zoSi9sCsI=";
  };

  postPatch = ''
--- a/pkgs/by-name/di/discordchatexporter-cli/deps.json
+++ b/pkgs/by-name/di/discordchatexporter-cli/deps.json
@@ -26,8 +26,8 @@
  },
  {
    "pname": "Deorcify",
-    "version": "1.1.0",
-    "hash": "sha256-R3V/9z/dP0LyhMNh+SiHD5j+XGr/DxPo4qwaKB+Fbak="
+    "version": "2.0.1",
+    "hash": "sha256-1Yl9KIEXNHHOUhmyYS65jx1AljPt7i4wvGGlxfm/XxA="
  },
  {
    "pname": "Gress",
@@ -51,8 +51,8 @@
  },
  {
    "pname": "PowerKit",
-    "version": "1.2.0",
-    "hash": "sha256-93mls5CuiOsNRqH+E+MQ/LSV7X2W8o+jOnPP1vvgdp0="
+    "version": "2.0.1",
+    "hash": "sha256-mqXd34gelLM26cAlHCBWOkAhyVlzrRKr2NH2kiGf8qk="
  },
  {
    "pname": "RazorBlade",
--- a/pkgs/by-name/di/discordchatexporter-cli/package.nix
+++ b/pkgs/by-name/di/discordchatexporter-cli/package.nix
@@ -3,19 +3,18 @@
  buildDotnetModule,
  dotnetCorePackages,
  fetchFromGitHub,
-  testers,
-  discordchatexporter-cli,
+  versionCheckHook,
 }:

-buildDotnetModule rec {
+buildDotnetModule (finalAttrs: {
  pname = "discordchatexporter-cli";
-  version = "2.47.2";
+  version = "2.47.3";

  src = fetchFromGitHub {
    owner = "tyrrrz";
    repo = "discordchatexporter";
-    rev = version;
-    hash = "sha256-2Sft+8K74vVTpNEgAJ0Y13pn+KiTUdd/5prR1aT6ET4=";
+    tag = finalAttrs.version;
+    hash = "sha256-B/2krGBYp/6qgINRyX/38tHlEy9JxmQMAIPsDNjZF5k=";
  };

  projectFile = "DiscordChatExporter.Cli/DiscordChatExporter.Cli.csproj";
@@ -33,21 +32,18 @@ buildDotnetModule rec {
    ln -s $out/bin/DiscordChatExporter.Cli $out/bin/discordchatexporter-cli
  '';

-  passthru = {
-    updateScript = ./updater.sh;
-    tests.version = testers.testVersion {
-      package = discordchatexporter-cli;
-      version = "v${version}";
-    };
-  };
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  passthru.updateScript = ./updater.sh;

  meta = {
+    changelog = "https://github.com/Tyrrrz/DiscordChatExporter/releases/tag/${finalAttrs.version}";
    description = "Tool to export Discord chat logs to a file";
    homepage = "https://github.com/Tyrrrz/DiscordChatExporter";
    license = lib.licenses.gpl3Plus;
-    changelog = "https://github.com/Tyrrrz/DiscordChatExporter/releases/tag/${version}";
-    maintainers = [ ];
-    platforms = lib.platforms.unix;
    mainProgram = "discordchatexporter-cli";
+    maintainers = with lib.maintainers; [ phanirithvij ];
+    platforms = lib.platforms.unix;
  };
-}
+})
--- a/pkgs/by-name/di/discordchatexporter-cli/updater.sh
+++ b/pkgs/by-name/di/discordchatexporter-cli/updater.sh
@@ -11,5 +11,5 @@ if [[ "$new_version" == "$old_version" ]]; then
 fi

 cd ../../../..
-update-source-version discordchatexporter-cli "$new_version"
+update-source-version discordchatexporter-cli "$new_version" --file=./pkgs/by-name/di/discordchatexporter-cli/package.nix
 $(nix-build -A discordchatexporter-cli.fetch-deps --no-out-link)
--- a/pkgs/by-name/di/discordchatexporter-desktop/deps.json
+++ b/pkgs/by-name/di/discordchatexporter-desktop/deps.json
@@ -1,252 +1,257 @@
 [
  {
    "pname": "AdvancedStringBuilder",
-    "version": "0.1.1",
-    "hash": "sha256-pLixGUct2lQnSeckSHVnIEoGfsvz3gkA914QSHdaheE="
+    "version": "0.2.0",
+    "hash": "sha256-66bPgNGU/wLpGs9mydkBBlTEJRpvfHDwWEysUsufZJY="
  },
  {
    "pname": "AngleSharp",
-    "version": "1.2.0",
-    "hash": "sha256-l8+Var9o773VL6Ybih3boaFf9sYjS7eqtLGd8DCIPsk="
+    "version": "1.4.0",
+    "hash": "sha256-xHpoMkhYSj7ejeMmI2e7ygef84QGZhttPjYOnLjITd0="
  },
  {
    "pname": "AsyncImageLoader.Avalonia",
-    "version": "3.3.0",
-    "hash": "sha256-blhfKI+vX+ojT2cOvSHu3Kp2CuxvhW/l+as88Dia4bA="
+    "version": "3.8.0",
+    "hash": "sha256-sfIxMXp9DA502O8XrYIuUe/H6UE7ma25cs6C/73XvT8="
  },
  {
    "pname": "AsyncKeyedLock",
-    "version": "7.1.4",
-    "hash": "sha256-Q1iyq3j/zLDcGdAwMzTrf/L/DN3SJAT+lpX3yBwJ2+o="
+    "version": "8.0.2",
+    "hash": "sha256-0NKdC+oxdYxS3Uz1lak5RpdTWyKYT7C3hkCdm5T0D84="
  },
  {
    "pname": "Avalonia",
-    "version": "11.2.5",
-    "hash": "sha256-DGTMzInnfvJUJWu2SXiRBercxxe1/paQkSlBHMahp4g="
+    "version": "12.0.4",
+    "hash": "sha256-sHu0eifno4DJ0Tnl3v4e3OZY1oy41OO482UfKVkQfK0="
  },
  {
    "pname": "Avalonia.Angle.Windows.Natives",
-    "version": "2.1.22045.20230930",
-    "hash": "sha256-RxPcWUT3b/+R3Tu5E5ftpr5ppCLZrhm+OTsi0SwW3pc="
+    "version": "2.1.27548.20260419",
+    "hash": "sha256-dtZ5AQl+kXPRVe/EwrfSyOMSLywuBBUCjrDIhHijhvk="
  },
  {
    "pname": "Avalonia.BuildServices",
-    "version": "0.0.31",
-    "hash": "sha256-wgtodGf644CsUZEBIpFKcUjYHTbnu7mZmlr8uHIxeKA="
-  },
-  {
-    "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.2.5",
-    "hash": "sha256-gWGIqXrac0fOnmGbovcFWv5Uj14hOyC+n0l45N7owMg="
-  },
-  {
-    "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.2.5",
-    "hash": "sha256-eGKc+UnsO5nNiUd7+n3CQW6vIWq2qpazYvYXrVTQY7s="
+    "version": "11.3.2",
+    "hash": "sha256-6wx06tjSKWQOlX2czdp6Wh0nuwVapx5qf/s8Qj5we40="
  },
  {
    "pname": "Avalonia.Desktop",
-    "version": "11.2.5",
-    "hash": "sha256-rDJ1NJM3tEqB7sRszj0AfplwkkvtE3Hvn7acrIsq+yw="
-  },
-  {
-    "pname": "Avalonia.Diagnostics",
-    "version": "11.2.5",
-    "hash": "sha256-WsAMBmNfUKMB2II3AfM8A0klfJR/vgEtRUTGpgC6F3A="
+    "version": "12.0.4",
+    "hash": "sha256-6FeeNofcrLVgMyxT8j37CxVNUHIe1BfDIeAES1SChBA="
  },
  {
    "pname": "Avalonia.FreeDesktop",
-    "version": "11.2.5",
-    "hash": "sha256-rLzsxUQS1LLLcLWkDR8SLLwLY53vUMqgiKoDWM6PjtM="
+    "version": "12.0.4",
+    "hash": "sha256-mj1icR/oMR4b6AygR3/ycq39DMuEpXHPy/fWeuwLYs8="
+  },
+  {
+    "pname": "Avalonia.FreeDesktop.AtSpi",
+    "version": "12.0.4",
+    "hash": "sha256-FgfModA3bLccR6HM91A/+0198SR4NWg8zZIA3EE4wW8="
+  },
+  {
+    "pname": "Avalonia.HarfBuzz",
+    "version": "12.0.4",
+    "hash": "sha256-tpTETc9r5b0CtXiYZEVgV57Tubqh3BS22+oq/ZU4YRQ="
  },
  {
    "pname": "Avalonia.Native",
-    "version": "11.2.5",
-    "hash": "sha256-XQQgcfbRRHPzH432M1KzkSEtLQof40yCt+KIrQREBY0="
+    "version": "12.0.4",
+    "hash": "sha256-MzirvFnZFV3qddBUgEDzf8TwbmIrH3tWujUWKOdXAzc="
  },
  {
    "pname": "Avalonia.Remote.Protocol",
-    "version": "11.2.5",
-    "hash": "sha256-Mpml6U6Fl8FUvENGQxpxuw0+pOPvoWbZXV4V1bLUS9w="
+    "version": "12.0.4",
+    "hash": "sha256-uuc61RM/WBfRmWCcBkoenLCreOxEGcF8U4t8RptrxiE="
  },
  {
    "pname": "Avalonia.Skia",
-    "version": "11.2.5",
-    "hash": "sha256-su1K1RmQ+syE6ufjrzpQR1yiUa6GEtY5QPlW0GOVKnU="
-  },
-  {
-    "pname": "Avalonia.Themes.Simple",
-    "version": "11.2.5",
-    "hash": "sha256-EjQ2XA81SS91h8oGUwVxLYewm3Lp5Sa2Lmbj0c8y8BU="
+    "version": "12.0.4",
+    "hash": "sha256-ba80KHyzW0NdoDK3iPntbi3NKEnh2c1rbrv4mu2xWcI="
  },
  {
    "pname": "Avalonia.Win32",
-    "version": "11.2.5",
-    "hash": "sha256-ljgJgXDxmHOUQ+p8z62mtaK4FTmYAI+c+6gL2lczD/8="
+    "version": "12.0.4",
+    "hash": "sha256-ZP1+man3HnJDh9vdEQBfa1W94t56BRkQ2feWqVJBm34="
  },
  {
    "pname": "Avalonia.X11",
-    "version": "11.2.5",
-    "hash": "sha256-wHEHcEvOUyIBgBtQZOIs330KajSv8DSEsJP7w4M9i4E="
+    "version": "12.0.4",
+    "hash": "sha256-r6cV/4kqiZ6lBNgN2HrYagG41JFZrOe7GZzbSelBT2g="
  },
  {
    "pname": "Cogwheel",
-    "version": "2.1.0",
-    "hash": "sha256-Gby3JWUOSgQQmTLZfiItGdjE95GoZ/Cfqfp1CsWyS5g="
+    "version": "2.1.1",
+    "hash": "sha256-1r95zm6YllPhnv7byYKGFPyBtOBEBT2+44vnQFQ3V3o="
  },
  {
    "pname": "CommunityToolkit.Mvvm",
-    "version": "8.4.0",
-    "hash": "sha256-a0D550q+ffreU9Z+kQPdzJYPNaj1UjgyPofLzUg02ZI="
+    "version": "8.4.2",
+    "hash": "sha256-jLS1vo6V+fHsJs80HYT77oJE6IEC68fIgkLpYODjWAU="
  },
  {
    "pname": "CSharpier.MsBuild",
-    "version": "0.30.6",
-    "hash": "sha256-FhXf9ggWmWzGp6vz6vJP+ly4SOeyluP6Ic3MfCz1uUA="
+    "version": "1.2.6",
+    "hash": "sha256-jvY05AmHK0MO9cbSTwAvAXf4urL+6Df2ug4IKwcleDw="
  },
  {
    "pname": "Deorcify",
-    "version": "1.1.0",
-    "hash": "sha256-R3V/9z/dP0LyhMNh+SiHD5j+XGr/DxPo4qwaKB+Fbak="
+    "version": "2.0.1",
+    "hash": "sha256-1Yl9KIEXNHHOUhmyYS65jx1AljPt7i4wvGGlxfm/XxA="
  },
  {
    "pname": "DialogHost.Avalonia",
-    "version": "0.9.2",
-    "hash": "sha256-mDF1CM06p16xtxYg7wo8oJMF0QgMsPPAeQL2d22dhyc="
+    "version": "0.12.2",
+    "hash": "sha256-5TYE2iosoba00U8GdCK6nKqOI7gOUZGBpo1XVqdwuLw="
  },
  {
    "pname": "Gress",
-    "version": "2.1.1",
-    "hash": "sha256-k5EbB4xOWoTCurtIuIx7t3obpWQKQCb7gEZQD6kLf+s="
+    "version": "2.2.0",
+    "hash": "sha256-2vzffEFC2NHH5KGXssvlR4rH+e1DrsFMHN+zQcOgyGI="
  },
  {
    "pname": "HarfBuzzSharp",
-    "version": "7.3.0.3",
-    "hash": "sha256-1vDIcG1aVwVABOfzV09eAAbZLFJqibip9LaIx5k+JxM="
+    "version": "8.3.1.3",
+    "hash": "sha256-/+ZEhjpOs8B4tMPw3vDyuQqGGZHJEWvy3WaKMaDwmrU="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.Linux",
-    "version": "7.3.0.3",
-    "hash": "sha256-HW5r16wdlgDMbE/IfE5AQGDVFJ6TS6oipldfMztx+LM="
+    "version": "8.3.1.3",
+    "hash": "sha256-feWOna/8ncvmrq7CxnDczv1facV2poZV5R+OyCtocpU="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.macOS",
-    "version": "7.3.0.3",
-    "hash": "sha256-UpAVfRIYY8Wh8xD4wFjrXHiJcvlBLuc2Xdm15RwQ76w="
+    "version": "8.3.1.3",
+    "hash": "sha256-6WKsJ/jF9pHnaWcQvaezc5AV6flu3XsOxQs7i4BGYJs="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
-    "version": "7.3.0.3",
-    "hash": "sha256-jHrU70rOADAcsVfVfozU33t/5B5Tk0CurRTf4fVQe3I="
+    "version": "8.3.1.3",
+    "hash": "sha256-arBiI82fXPjAqftqnG7Wc3BRzZ6+vKd7b58vQSWJVk0="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.Win32",
-    "version": "7.3.0.3",
-    "hash": "sha256-v/PeEfleJcx9tsEQAo5+7Q0XPNgBqiSLNnB2nnAGp+I="
+    "version": "8.3.1.3",
+    "hash": "sha256-WNUQmLWVFSwBKT9x7UdhSz9T2FA7wibvwjuPew/3yUM="
  },
  {
    "pname": "JsonExtensions",
    "version": "1.2.0",
    "hash": "sha256-vhuDDUSzDS5u9dfup0qk6j7Vc9i8Wyo7dBivpVaEpDw="
  },
+  {
+    "pname": "Markdig",
+    "version": "1.2.0",
+    "hash": "sha256-Z05n323rxztLtJdrqz6+kqKSpua/byYLk6/8lVnHbxU="
+  },
  {
    "pname": "Material.Avalonia",
-    "version": "3.9.2",
-    "hash": "sha256-CZRVo/i3qUE5Qj7H2yCrtV8ThDOfjMWTyGHLm0/Bajw="
+    "version": "3.16.1",
+    "hash": "sha256-Yfdaj2NYvLfeGXTTYo4e+4Gi8pYpI4rA0N2yLiIiCVI="
  },
  {
    "pname": "Material.Icons",
-    "version": "2.2.0",
-    "hash": "sha256-Gw2a7oXicf3yQKEgRdwBJ0DubMvf8iEkn6GtcLF9zJM="
+    "version": "3.0.2",
+    "hash": "sha256-BP1fQLsidpNpiyG87V6oNnuO8CKo8hcf6405AScb2Cs="
  },
  {
    "pname": "Material.Icons.Avalonia",
-    "version": "2.2.0",
-    "hash": "sha256-RkYaULaVMjm2HJV23gGRHomv6jI0dE/lIk1AWwkWJKA="
+    "version": "3.0.2",
+    "hash": "sha256-1FHaifgw3P/holj2QcXH+1U4Mrga5qKsUrYgkYNuXXU="
  },
  {
    "pname": "MicroCom.Runtime",
-    "version": "0.11.0",
-    "hash": "sha256-VdwpP5fsclvNqJuppaOvwEwv2ofnAI5ZSz2V+UEdLF0="
+    "version": "0.11.4",
+    "hash": "sha256-hd13T4Z9DsF1Sb56bS+SDpWjksJVzb4m/Kp37jaUhkU="
  },
  {
    "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "9.0.2",
-    "hash": "sha256-jNQVj2Xo7wzVdNDu27bLbYCVUOF8yDVrFtC3cZ9OsXo="
+    "version": "10.0.8",
+    "hash": "sha256-eKex/vpm5A4o2WV6sJyjqKPydWhekJFO6wrH0V7RyBY="
  },
  {
    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "9.0.2",
-    "hash": "sha256-WoTLgw/OlXhgN54Szip0Zpne7i/YTXwZ1ZLCPcHV6QM="
+    "version": "10.0.8",
+    "hash": "sha256-HV30fu+lF/GYkeVP+Yq/EU1FzgdMqwqlepCpvxUgugE="
  },
  {
    "pname": "Onova",
-    "version": "2.6.12",
-    "hash": "sha256-kYChxhtYxRhQ5gldSKg+jr6SoMqq6w2ezXZkBd4AtZk="
+    "version": "2.6.13",
+    "hash": "sha256-PmFGRd9bRBxAQOsNiH4nCYGnFNoDtvdepu5YP5w89N4="
  },
  {
    "pname": "Polly",
-    "version": "8.5.2",
-    "hash": "sha256-IrN06ddOIJ0VYuVefe3LvfW0kX20ATRQkEBg9CBomRA="
+    "version": "8.6.6",
+    "hash": "sha256-0BrOttCw+HQYB24Y2uMy2vo0P5/txUlhELC8FlyLKps="
  },
  {
    "pname": "Polly.Core",
-    "version": "8.5.2",
-    "hash": "sha256-PAwsWqrCieCf/7Y87fV7XMKoaY2abCQNtI+4oyyMifk="
+    "version": "8.6.6",
+    "hash": "sha256-y6/a4OWrUlRfe0J8qdhBRmYRDi6K2y+kwhEVCIUOjvU="
+  },
+  {
+    "pname": "PowerKit",
+    "version": "2.0.1",
+    "hash": "sha256-mqXd34gelLM26cAlHCBWOkAhyVlzrRKr2NH2kiGf8qk="
  },
  {
    "pname": "RazorBlade",
-    "version": "0.8.0",
-    "hash": "sha256-ARj2CczrO3oxPgNcx2OAzfCppi1TE9ZDhPBnrCkKM6M="
+    "version": "1.0.0",
+    "hash": "sha256-ieuGwqM8HHtD+llYO3CdVB+fHHvQ6QnQiajttREFOXM="
  },
  {
    "pname": "SkiaSharp",
-    "version": "2.88.9",
-    "hash": "sha256-jZ/4nVXYJtrz9SBf6sYc/s0FxS7ReIYM4kMkrhZS+24="
+    "version": "3.119.4",
+    "hash": "sha256-4ypEnTGUXAudFp61vGduHj9YmqtpiI5J1wP9wcOEwXY="
  },
  {
    "pname": "SkiaSharp.NativeAssets.Linux",
-    "version": "2.88.9",
-    "hash": "sha256-mQ/oBaqRR71WfS66mJCvcc3uKW7CNEHoPN2JilDbw/A="
+    "version": "3.119.4",
+    "hash": "sha256-+uBVQFmxEH73iI5GwgvftUhAHvenpvc5GtT63HQy1Qo="
  },
  {
    "pname": "SkiaSharp.NativeAssets.macOS",
-    "version": "2.88.9",
-    "hash": "sha256-qvGuAmjXGjGKMzOPBvP9VWRVOICSGb7aNVejU0lLe/g="
+    "version": "3.119.4",
+    "hash": "sha256-9/L1Oc5bujN6pKjW6sJcr1jL3RLt8/Mt3MmClOcwzyw="
  },
  {
    "pname": "SkiaSharp.NativeAssets.WebAssembly",
-    "version": "2.88.9",
-    "hash": "sha256-vgFL4Pdy3O1RKBp+T9N3W4nkH9yurZ0suo8u3gPmmhY="
+    "version": "3.119.4",
+    "hash": "sha256-xLfsWBsFFpv5Qg79GIMi+5CM6YDfcg//oywNlB5Y3J0="
  },
  {
    "pname": "SkiaSharp.NativeAssets.Win32",
-    "version": "2.88.9",
-    "hash": "sha256-kP5XM5GgwHGfNJfe4T2yO5NIZtiF71Ddp0pd1vG5V/4="
+    "version": "3.119.4",
+    "hash": "sha256-WlaYsbTh/cn/6YaN9odNtfpp8hpN52unGgGlQum0M5E="
  },
  {
    "pname": "Superpower",
-    "version": "3.0.0",
-    "hash": "sha256-5MNmhBDYyOs+sTH364Qdn+Ck328BAQaVC1KMQ7yK2Vw="
+    "version": "3.1.0",
+    "hash": "sha256-krsT4LFDHeCjwS0BbkgpBYggpr5Nmc1RXYyOjLqRifQ="
  },
  {
-    "pname": "System.IO.Pipelines",
-    "version": "8.0.0",
-    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
+    "pname": "ThisAssembly.Constants",
+    "version": "2.1.2",
+    "hash": "sha256-SZ1aQW/Ynt9H/gr1N3NYg4D27BBagHpF7OPqOIas6l0="
+  },
+  {
+    "pname": "ThisAssembly.Project",
+    "version": "2.1.2",
+    "hash": "sha256-IIlqnK37afpCMBdDNqsLbpX8dv6+c0mNen6pkRqDADw="
  },
  {
    "pname": "Tmds.DBus.Protocol",
-    "version": "0.20.0",
-    "hash": "sha256-CRW/tkgsuBiBJfRwou12ozRQsWhHDooeP88E5wWpWJw="
+    "version": "0.92.0",
+    "hash": "sha256-WZSB9eqSOIzsBfnpOJDIIopIhNxAH+UcZuD6W94PIN4="
  },
  {
    "pname": "WebMarkupMin.Core",
-    "version": "2.17.0",
-    "hash": "sha256-LuTotFyrjbUf9hrVqNPVs443lizPgNINbKoHT4cfjYs="
+    "version": "2.21.0",
+    "hash": "sha256-k51tTFcdL9Bwsg3gA51ZswGxDtdBFb22BAj9wbyZu1E="
  },
  {
    "pname": "YoutubeExplode",
-    "version": "6.5.3",
-    "hash": "sha256-fxmplhCjy9AMBs8uwH08OBBfo450l6qiTNdmvVqLDB8="
+    "version": "6.6.0",
+    "hash": "sha256-53mPbr8IVmJH2C3euhSz56Bl6fJt5yN0CU6vCmzUs4I="
  }
 ]
--- a/pkgs/by-name/di/discordchatexporter-desktop/package.nix
+++ b/pkgs/by-name/di/discordchatexporter-desktop/package.nix
@@ -3,27 +3,25 @@
  buildDotnetModule,
  dotnetCorePackages,
  fetchFromGitHub,
-  testers,
-  discordchatexporter-desktop,
 }:

-buildDotnetModule rec {
+buildDotnetModule (finalAttrs: {
  pname = "discordchatexporter-desktop";
-  version = "2.44.2";
+  version = "2.47.3";

  src = fetchFromGitHub {
    owner = "tyrrrz";
    repo = "discordchatexporter";
-    rev = version;
-    hash = "sha256-Dc6OSWUTFftP2tyRFoxHm+TsnSMDfx627DhmYnPie9w=";
+    tag = finalAttrs.version;
+    hash = "sha256-B/2krGBYp/6qgINRyX/38tHlEy9JxmQMAIPsDNjZF5k=";
  };

  env.XDG_CONFIG_HOME = "$HOME/.config";

  projectFile = "DiscordChatExporter.Gui/DiscordChatExporter.Gui.csproj";
  nugetDeps = ./deps.json;
-  dotnet-sdk = dotnetCorePackages.sdk_9_0;
-  dotnet-runtime = dotnetCorePackages.runtime_9_0;
+  dotnet-sdk = dotnetCorePackages.sdk_10_0;
+  dotnet-runtime = dotnetCorePackages.runtime_10_0;

  patches = [ ./settings-path.patch ];

@@ -31,20 +29,21 @@ buildDotnetModule rec {
    ln -s $out/bin/DiscordChatExporter $out/bin/discordchatexporter
  '';

-  passthru = {
-    updateScript = ./updater.sh;
-  };
+  passthru.updateScript = ./updater.sh;

  meta = {
+    changelog = "https://github.com/Tyrrrz/DiscordChatExporter/releases/tag/${finalAttrs.version}";
    description = "Tool to export Discord chat logs to a file (GUI version)";
    homepage = "https://github.com/Tyrrrz/DiscordChatExporter";
    license = lib.licenses.gpl3Plus;
-    changelog = "https://github.com/Tyrrrz/DiscordChatExporter/releases/tag/${version}";
-    maintainers = with lib.maintainers; [ willow ];
+    mainProgram = "discordchatexporter";
+    maintainers = with lib.maintainers; [
+      phanirithvij
+      willow
+    ];
    platforms = [
      "x86_64-linux"
      "aarch64-linux"
    ];
-    mainProgram = "discordchatexporter";
  };
-}
+})
--- a/pkgs/by-name/di/discordchatexporter-desktop/settings-path.patch
+++ b/pkgs/by-name/di/discordchatexporter-desktop/settings-path.patch
@@ -1,19 +1,19 @@
-diff --git a/DiscordChatExporter.Gui/Services/SettingsService.cs b/DiscordChatExporter.Gui/Services/SettingsService.cs
-index 4f69969..2716225 100644
--- a/DiscordChatExporter.Gui/Services/SettingsService.cs
-+++ b/DiscordChatExporter.Gui/Services/SettingsService.cs
-@@ -14,7 +14,13 @@ namespace DiscordChatExporter.Gui.Services;
- [INotifyPropertyChanged]
- public partial class SettingsService()
-     : SettingsBase(
-        Path.Combine(AppContext.BaseDirectory, "Settings.dat"),
-+        Path.Combine(
-+            System.IO.Path.Combine(
-+                Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData),
-+                "discordchatexporter"
-+            ),
-+            "Settings.dat"
-+        ),
-         SerializerContext.Default
-     )
- {
+diff --git a/DiscordChatExporter.Gui/StartOptions.cs b/DiscordChatExporter.Gui/StartOptions.cs
+index d17752a..8df18c8 100644
+--- a/DiscordChatExporter.Gui/StartOptions.cs
+++ b/DiscordChatExporter.Gui/StartOptions.cs
+@@ -21,7 +21,13 @@ public partial class StartOptions
+                     ? Path.EndsInDirectorySeparator(path) || Directory.Exists(path)
+                         ? Path.Combine(path, "Settings.dat")
+                         : path
+-                    : Path.Combine(AppContext.BaseDirectory, "Settings.dat"),
+                    : Path.Combine(
+                        System.IO.Path.Combine(
+                            Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData),
+                            "discordchatexporter"
+                        ),
+                        "Settings.dat"
+                    ),
+             IsAutoUpdateAllowed = !(
+                 Environment.GetEnvironmentVariable("DISCORDCHATEXPORTER_ALLOW_AUTO_UPDATE")
+                     is { } env
--- a/pkgs/by-name/di/discordchatexporter-desktop/updater.sh
+++ b/pkgs/by-name/di/discordchatexporter-desktop/updater.sh
@@ -11,5 +11,5 @@ if [[ "$new_version" == "$old_version" ]]; then
 fi

 cd ../../../..
-update-source-version discordchatexporter-desktop "$new_version"
+update-source-version discordchatexporter-desktop "$new_version" --file=./pkgs/by-name/di/discordchatexporter-desktop/package.nix
 $(nix-build -A discordchatexporter-desktop.fetch-deps --no-out-link)
--- a/pkgs/by-name/es/esptool/package.nix
+++ b/pkgs/by-name/es/esptool/package.nix
@@ -1,21 +1,22 @@
 {
  lib,
+  addBinToPathHook,
  fetchFromGitHub,
  python3Packages,
  softhsm,
  installShellFiles,
 }:

-python3Packages.buildPythonApplication rec {
+python3Packages.buildPythonApplication (finalAttrs: {
  pname = "esptool";
-  version = "5.3.0";
+  version = "5.3.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "espressif";
    repo = "esptool";
-    tag = "v${version}";
-    hash = "sha256-NRfXLf8u35/9RD1QxEuV06K3h030qXj5GM+QjvLC6FM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-oHQ6rkMnzvjtP/dg+tyc7Dw+D/WuWDqRwqePKBBnjCw=";
  };

  postPatch = ''
@@ -77,16 +78,13 @@ python3Packages.buildPythonApplication rec {
  nativeCheckInputs =
    with python3Packages;
    [
+      addBinToPathHook
      pyelftools
      pytestCheckHook
      requests
      softhsm
    ]
-    ++ lib.concatAttrValues optional-dependencies;
-
-  preCheck = ''
-    export PATH="$out/bin:$PATH"
-  '';
+    ++ lib.concatAttrValues finalAttrs.passthru.optional-dependencies;

  pytestFlags = [
    "-m"
@@ -102,16 +100,14 @@ python3Packages.buildPythonApplication rec {
    "test_esp_rfc2217_server_py"
  ];

-  postCheck = ''
+  preCheck = ''
    export SOFTHSM2_CONF=$(mktemp)
    echo "directories.tokendir = $(mktemp -d)" > "$SOFTHSM2_CONF"
    ./ci/setup_softhsm2.sh
-
-    pytest test/test_espsecure_hsm.py
  '';

  meta = {
-    changelog = "https://github.com/espressif/esptool/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/espressif/esptool/blob/${finalAttrs.src.tag}/CHANGELOG.md";
    description = "ESP8266 and ESP32 serial bootloader utility";
    homepage = "https://github.com/espressif/esptool";
    license = lib.licenses.gpl2Plus;
@@ -121,4 +117,4 @@ python3Packages.buildPythonApplication rec {
    platforms = with lib.platforms; linux ++ darwin;
    mainProgram = "esptool";
  };
-}
+})
--- a/pkgs/by-name/gh/ghostfolio/package.nix
+++ b/pkgs/by-name/gh/ghostfolio/package.nix
@@ -12,13 +12,13 @@

 buildNpmPackage (finalAttrs: {
  pname = "ghostfolio";
-  version = "3.18.0";
+  version = "3.22.0";

  src = fetchFromGitHub {
    owner = "ghostfolio";
    repo = "ghostfolio";
    tag = finalAttrs.version;
-    hash = "sha256-BSH7NQV2iTmfGE6dHQEeObQQ5CkKZxsgHAbrjElHHHE=";
+    hash = "sha256-zKXq6juvxaPJ7h/2HDzh7lREFj0ni5HsAyhEbZ09K3M=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -28,7 +28,7 @@ buildNpmPackage (finalAttrs: {
    '';
  };

-  npmDepsHash = "sha256-0Si+3zHyGoMbgEpNWdZVp+obNE0oqM8ghYDZvloJU5g=";
+  npmDepsHash = "sha256-r/LaDTd4TvoPll2w0It0cVOBniMnlZf1jg5mL9wII7I=";

  postPatch = ''
    substituteInPlace replace.build.mjs \
--- a/pkgs/by-name/ka/kanata/package.nix
+++ b/pkgs/by-name/ka/kanata/package.nix
@@ -16,16 +16,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "kanata";
-  version = "1.11.0";
+  version = "1.12.0";

  src = fetchFromGitHub {
    owner = "jtroo";
    repo = "kanata";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-7rGV0nfI/ntvByz3NQs/2Sa2q/Ml8O3XRD14Mbt5fIU=";
+    hash = "sha256-WjdmjgEMoo3QNqT4yWxaKOkfuRLdNg4Im+V1Hy5vWgY=";
  };

-  cargoHash = "sha256-Qxa90fMZ3c1+jlyxbIkC94DtSQSKFNr2V8GiLII6PNc=";
+  cargoHash = "sha256-4UBN4I35ZPPPL68LxxPna9Fs9sATCiwoTbWgHYwqOjs=";

  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
    (writeShellScriptBin "sw_vers" ''
@@ -39,6 +39,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
    install -Dm 444 assets/kanata-icon.svg $out/share/icons/hicolor/scalable/apps/kanata.svg
  '';

+  checkFlags = [
+    # these try to access /dev/uinput and won't work in the build sandbox
+    "--skip=kanata::tcp_layer_change_tests"
+  ];
+
  doInstallCheck = true;
  nativeInstallCheckInputs = [
    versionCheckHook
--- a/pkgs/by-name/ka/kanata/update.sh
+++ b/pkgs/by-name/ka/kanata/update.sh
@@ -3,7 +3,7 @@ nix-update
 importTree="(let tree = import ./.; in if builtins.isFunction tree then tree {} else tree)"
 NEW_VERSION=$(nix-instantiate --eval -E "with $importTree; kanata.version" | tr -d '"')
 karabinerDriverCrateVersion="$(curl -L "https://raw.githubusercontent.com/jtroo/kanata/refs/tags/v$NEW_VERSION/Cargo.lock" | tomlq | jq --raw-output '.package[] | select(.name |  test("karabiner-driverkit")) |.version')"
-newKarabinerDkVersion="$(curl -L "https://crates.io/api/v1/crates/karabiner-driverkit/$karabinerDriverCrateVersion/download" | tar xzvf - --strip-components=1 -O "karabiner-driverkit-$karabinerDriverCrateVersion/c_src/Karabiner-DriverKit-VirtualHIDDevice/version.json" | jq --raw-output0 .package_version)"
+newKarabinerDkVersion="$(curl -L "https://static.crates.io/crates/karabiner-driverkit/karabiner-driverkit-$karabinerDriverCrateVersion.crate" | tar xzvf - --strip-components=1 -O "karabiner-driverkit-$karabinerDriverCrateVersion/c_src/Karabiner-DriverKit-VirtualHIDDevice/version.json" | jq --raw-output0 .package_version)"
 oldDarwinVersion=$(nix-instantiate --eval -E "with $importTree; kanata.passthru.darwinDriverVersion" | tr -d '"')
 nixFile=$(nix-instantiate --eval --strict -A "kanata.meta.position" | sed -re 's/^"(.*):[0-9]+"$/\1/')
 sed -i "$nixFile" -re "s|\"$oldDarwinVersion\"|\"$newKarabinerDkVersion\"|"
--- a/pkgs/by-name/li/limine/package.nix
+++ b/pkgs/by-name/li/limine/package.nix
@@ -48,14 +48,14 @@ in
 # as bootloader for various platforms and corresponding binary and helper files.
 stdenv.mkDerivation (finalAttrs: {
  pname = "limine";
-  version = "12.4.0";
+  version = "12.4.1";

  # We don't use the Git source but the release tarball, as the source has a
  # `./bootstrap` script performing network access to download resources.
  # Packaging that in Nix is very cumbersome.
  src = fetchurl {
    url = "https://github.com/Limine-Bootloader/Limine/releases/download/v${finalAttrs.version}/limine-${finalAttrs.version}.tar.gz";
-    hash = "sha256-fDTQuY+WYhyJl5AqP4ZoJ1T7WXgCca35pXHAv/8CjlA=";
+    hash = "sha256-LcpQkn1WTYCiRvLEmk31ii1KN62jHINb0oAoiF9t5V8=";
  };

  enableParallelBuilding = true;
--- a/pkgs/by-name/me/mediainfo-gui/package.nix
+++ b/pkgs/by-name/me/mediainfo-gui/package.nix
@@ -14,11 +14,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mediainfo-gui";
-  version = "25.07";
+  version = "26.05";

  src = fetchurl {
    url = "https://mediaarea.net/download/source/mediainfo/${finalAttrs.version}/mediainfo_${finalAttrs.version}.tar.xz";
-    hash = "sha256-UI6sHKCX9Byz/DliWs6wZS/KsArNDy68vR3GgAk26X0=";
+    hash = "sha256-+FIJP5BQAi1plgbuq7OLJNpVI9AhL6tk3E5NPka1beE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/mi/minikube/package.nix
+++ b/pkgs/by-name/mi/minikube/package.nix
@@ -10,13 +10,17 @@
  withQemu ? false,
  qemu,
  makeWrapper,
+  writableTmpDirAsHomeHook,
  OVMF,
+  versionCheckHook,
 }:

 buildGoModule (finalAttrs: {
  pname = "minikube";
  version = "1.38.1";

+  __structuredAttrs = true;
+
  vendorHash = "sha256-Oy8cM/foZKC83PxqkJW+o8vVYJhszKxXs9l2eks7FN4=";

  doCheck = false;
@@ -24,8 +28,8 @@ buildGoModule (finalAttrs: {
  src = fetchFromGitHub {
    owner = "kubernetes";
    repo = "minikube";
-    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-1unwbu2pJviHXukQKalJLgrkHpjf0sRR2nCm2gKv2VU=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1unwbu2pJviHXukQKalJLgrkHpjf0sRR2nCm2gKv2VU=";
  };
  postPatch = ''
    substituteInPlace Makefile \
@@ -49,26 +53,43 @@ buildGoModule (finalAttrs: {
    pkg-config
    which
    makeWrapper
+    writableTmpDirAsHomeHook
  ];

  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [ libvirt ];

  buildPhase = ''
+    runHook preBuild
+
    make COMMIT=${finalAttrs.src.rev}
+
+    runHook postBuild
  '';

  installPhase = ''
-    install out/minikube -Dt $out/bin
+    runHook preInstall
+
+    installBin out/minikube

    wrapProgram $out/bin/minikube --set MINIKUBE_WANTUPDATENOTIFICATION false
-    export HOME=$PWD
+    ln -sv $out/bin/minikube $out/bin/kubectl

    for shell in bash zsh fish; do
      $out/bin/minikube completion $shell > minikube.$shell
      installShellCompletion minikube.$shell
    done
+
+    runHook postInstall
  '';

+  nativeInstallCheckInputs = [
+    versionCheckHook
+    writableTmpDirAsHomeHook
+  ];
+  versionCheckKeepEnvironment = [ "HOME" ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
  meta = {
    homepage = "https://minikube.sigs.k8s.io";
    description = "Tool that makes it easy to run Kubernetes locally";
--- a/pkgs/by-name/ne/nezha-theme-user/package.nix
+++ b/pkgs/by-name/ne/nezha-theme-user/package.nix
@@ -13,13 +13,13 @@ let
 in
 buildNpmPackage (finalAttrs: {
  pname = "nezha-theme-user";
-  version = "2.3.1";
+  version = "2.4.0";

  src = fetchFromGitHub {
    owner = "hamster1963";
    repo = "nezha-dash-v2";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/2G0KhlXIvVM8db4nATJHiwPsvKXh8SNE+9DpllfSTs=";
+    hash = "sha256-ikrRkYrJnTRaBk3u6Ju0csRW9K3Udydh/JFTi/GxVOs=";
  };

  postPatch = ''
@@ -37,7 +37,7 @@ buildNpmPackage (finalAttrs: {
    inherit (finalAttrs) pname version src;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-k/05ccqV72kC9E9MX+os8R0wmgIhnDYIwRNmIbedL1I=";
+    hash = "sha256-5lzMFY+PYHSQTWSewfLaspgeRq5PwWnU0ZzHYPzSMwE=";
  };
  npmConfigHook = pnpmConfigHook;

--- a/pkgs/by-name/nm/nmap-formatter/package.nix
+++ b/pkgs/by-name/nm/nmap-formatter/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "nmap-formatter";
-  version = "3.1.3";
+  version = "3.1.4";

  src = fetchFromGitHub {
    owner = "vdjagilev";
    repo = "nmap-formatter";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-sh/OsDdwgKl4l3RZwtGbEGC1DU8qsO550Up0pqUKj5U=";
+    hash = "sha256-GpJ6zEyGSYEXSPjZ0vTdSodQw4HvytPM0FcYfkvX81M=";
  };

-  vendorHash = "sha256-fHT1FxrUmDv7YG0Kin8jZkolFAvnaEhLhgAvA8tzxkI=";
+  vendorHash = "sha256-0CTtw3QXnKBeHNFdkSfQhs+TSY5nrpLi36fS3Sz6A08=";

  meta = {
    description = "Tool that allows you to convert nmap output";
--- a/pkgs/by-name/no/node-gyp/package-lock.json
+++ b/pkgs/by-name/no/node-gyp/package-lock.json
--- a/pkgs/by-name/no/node-gyp/package.nix
+++ b/pkgs/by-name/no/node-gyp/package.nix
@@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "node-gyp";
-  version = "13.0.0";
+  version = "13.0.1";

  src = fetchFromGitHub {
    owner = "nodejs";
    repo = "node-gyp";
    tag = "v${version}";
-    hash = "sha256-QURUUit1HWRQ6O3nMM1aId51B2POPO4eyPwBdbkFJKw=";
+    hash = "sha256-AoHPkoyWxpnDjCVKVVab+ml+2DF47NfmTK3mk24rMCQ=";
  };

-  npmDepsHash = "sha256-swJ8Amv/CtZAW1Weo2S5GQWHPgnF3/6cw0ZTdEyyAxA=";
+  npmDepsHash = "sha256-udF/exHe0Gy6JLrXP/47PKV5njEHRImYg0kDlHQoJbs=";

  postPatch = ''
    ln -s ${./package-lock.json} package-lock.json
--- a/pkgs/by-name/op/opencode-desktop/package.nix
+++ b/pkgs/by-name/op/opencode-desktop/package.nix
@@ -178,7 +178,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  meta = {
    description = "AI coding agent desktop client";
    homepage = "https://opencode.ai";
-    inherit (opencode.meta) platforms;
+    inherit (opencode.meta) changelog platforms;
    license = lib.licenses.mit;
    mainProgram = "opencode-desktop";
    maintainers = with lib.maintainers; [ xiaoxiangmoe ];
--- a/pkgs/by-name/op/opencode/package.nix
+++ b/pkgs/by-name/op/opencode/package.nix
@@ -16,7 +16,7 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "opencode";
-  version = "1.17.15";
+  version = "1.17.18";

  __structuredAttrs = true;
  strictDeps = true;
@@ -25,7 +25,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    owner = "anomalyco";
    repo = "opencode";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-SBAKl0bsiSUDwvi+XCCgDL2SuP7NZAqx4iGyaMZz5N4=";
+    hash = "sha256-Y0rcO6r9yqhYux8IS5oAtgzcMXfJE8I1Lre4HdJ5nBg=";
  };

  node_modules = stdenvNoCC.mkDerivation {
@@ -78,7 +78,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    # NOTE: Required else we get errors that our fixed-output derivation references store paths
    dontFixup = true;

-    outputHash = "sha256-9oSXcvvISB6WAqI6f/GBZ3i9IBwYrRQvKs82SLibJNo=";
+    outputHash = "sha256-kXdXw264JQdlNoZPv5GUyWZvb/A8h2CTRdiX79jyvys=";
    outputHashAlgo = "sha256";
    outputHashMode = "recursive";
  };
@@ -179,6 +179,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  meta = {
    description = "AI coding agent built for the terminal";
    homepage = "https://github.com/anomalyco/opencode";
+    changelog = "https://github.com/anomalyco/opencode/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
      delafthi
--- a/pkgs/by-name/po/postfix/package.nix
+++ b/pkgs/by-name/po/postfix/package.nix
@@ -78,11 +78,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "postfix";
-  version = "3.11.4";
+  version = "3.11.5";

  src = fetchurl {
    url = "http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-${finalAttrs.version}.tar.gz";
-    hash = "sha256-Im7FmhjkPid2kQBeMUlvdgi5upIQvmAKJn+yF6Smzuk=";
+    hash = "sha256-Smqz0Ok5CYn6IB/GxEYEX8cCxOFueiR8OuJhyem+5hA=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/pr/prowler/package.nix
+++ b/pkgs/by-name/pr/prowler/package.nix
@@ -7,7 +7,7 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "prowler";
-  version = "5.33.0";
+  version = "5.33.1";
  pyproject = true;

  __structuredAttrs = true;
@@ -16,7 +16,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    owner = "prowler-cloud";
    repo = "prowler";
    tag = finalAttrs.version;
-    hash = "sha256-dx4/AmV+K4YH9gqjznMNJcVv0MZ5Qt/Lelw6ErbHgt8=";
+    hash = "sha256-uecwowuP/h+o739EV7REIGLoiejJ9Jcu6bk08DMWno0=";
  };

  pythonRelaxDeps = true;
--- a/pkgs/by-name/ri/rime-wanxiang/package.nix
+++ b/pkgs/by-name/ri/rime-wanxiang/package.nix
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "rime-wanxiang";
-  version = "15.16.0";
+  version = "16.0.1";

  src = fetchFromGitHub {
    owner = "amzxyz";
    repo = "rime_wanxiang";
    tag = "v" + finalAttrs.version;
-    hash = "sha256-+7Ao0Mr+vNeMUTA5DXldQD9ruA1wVA1QcU5CUk39Q9c=";
+    hash = "sha256-4suvVDyVMlfgl/6wGx+SpXCFhojfFujI6XFBmKMUCGU=";
  };

  installPhase = ''
--- a/pkgs/by-name/sh/sherlock/package.nix
+++ b/pkgs/by-name/sh/sherlock/package.nix
@@ -48,6 +48,10 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    poetry-core
  ];

+  pythonRelaxDeps = [
+    "pandas"
+  ];
+
  installPhase = ''
    runHook preInstall

--- a/pkgs/by-name/wa/warp-terminal/versions.json
+++ b/pkgs/by-name/wa/warp-terminal/versions.json
@@ -1,14 +1,14 @@
 {
  "darwin": {
-    "hash": "sha256-QecfX4APCGk5IzGofWg7x8h7vcRuwd1QTmQ/RBZmUuk=",
-    "version": "0.2026.06.24.09.19.stable_03"
+    "hash": "sha256-Q9eCd5ojy1LCrDiUT25ceH7hHAnbTvAptiKMts2O7eY=",
+    "version": "0.2026.07.08.17.54.stable_02"
  },
  "linux_x86_64": {
-    "hash": "sha256-h/sTCbeQzxI4t+1zOdsUsZVrBDRFwa2Qof0kt9QqFrI=",
-    "version": "0.2026.06.24.09.19.stable_03"
+    "hash": "sha256-V3JOpewD6cLx+k/8pvfYQYDevoZTWEhh+Azk3fc0DR4=",
+    "version": "0.2026.07.08.17.54.stable_02"
  },
  "linux_aarch64": {
-    "hash": "sha256-XR4rCD65wYRh90shpJ212iD8goJKwSjfFW2OFZ6+VgE=",
-    "version": "0.2026.06.24.09.19.stable_03"
+    "hash": "sha256-IKzDyuVYpxQ6GdTVKifwVUvTC1cO4Q0TNHWsjtj+7e8=",
+    "version": "0.2026.07.08.17.54.stable_02"
  }
 }
--- a/pkgs/by-name/wo/worktrunk/package.nix
+++ b/pkgs/by-name/wo/worktrunk/package.nix
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "worktrunk";
-  version = "0.61.0";
+  version = "0.66.0";

  src = fetchFromGitHub {
    owner = "max-sixty";
    repo = "worktrunk";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jyj9e1E9wPxcMuWl3/nDrPTh68yNRuxMOEFmvjE3dRk=";
+    hash = "sha256-GKXTEzCya5aOh02O3yoEdA4RS/GibiHZu+wXq7rrOV0=";
  };

-  cargoHash = "sha256-iKOLHyY28CXPAdPmjVocoubOVKPoBTqA/NJ522cC8+o=";
+  cargoHash = "sha256-MjRi4WK+afrShCLXEp7pWhDiAyjKPbtqHjVIOtI3LVI=";

  cargoBuildFlags = [ "--package=worktrunk" ];

--- a/pkgs/development/libraries/webkitgtk/default.nix
+++ b/pkgs/development/libraries/webkitgtk/default.nix
@@ -85,7 +85,7 @@ in
 # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang.
 clangStdenv.mkDerivation (finalAttrs: {
  pname = "webkitgtk";
-  version = "2.52.4";
+  version = "2.52.5";
  name = "webkitgtk-${finalAttrs.version}+abi=${abiVersion}";

  outputs = [
@@ -100,19 +100,10 @@ clangStdenv.mkDerivation (finalAttrs: {

  src = fetchurl {
    url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-z0B2ocoqZHiO3KjEUtjrto1eKWXliP5Go4igFlE+3OQ=";
+    hash = "sha256-ilMamr0iFZNuioqRTAd7WGwCKLMdZS8gUoao7JDzNks=";
  };

-  patches = [
-    # Fix build with system malloc
-    # See: https://bugs.webkit.org/show_bug.cgi?id=316083
-    (fetchpatch {
-      url = "https://github.com/WebKit/WebKit/commit/a6bc685a685c8f16c919dc6310a62a26971d396e.patch";
-      hash = "sha256-X3E9SYykYomoBeAL4vS1Iuw2fPdO8fI7MvAW/kEhTMc=";
-      name = "fix-build-with-system-malloc.patch";
-    })
-  ]
-  ++ lib.optionals clangStdenv.hostPlatform.isLinux [
+  patches = lib.optionals clangStdenv.hostPlatform.isLinux [
    (replaceVars ./fix-bubblewrap-paths.patch {
      inherit (builtins) storeDir;
      inherit (addDriverRunpath) driverLink;
--- a/pkgs/development/python-modules/aiohomematic/default.nix
+++ b/pkgs/development/python-modules/aiohomematic/default.nix
@@ -19,7 +19,7 @@

 buildPythonPackage rec {
  pname = "aiohomematic";
-  version = "2026.5.11";
+  version = "2026.7.2";
  pyproject = true;

  disabled = pythonOlder "3.14";
@@ -28,7 +28,7 @@ buildPythonPackage rec {
    owner = "SukramJ";
    repo = "aiohomematic";
    tag = version;
-    hash = "sha256-Ua7/sLhL0mbZvJwx+TNfXoP+z+jE2TyCO3DqsFpPe6A=";
+    hash = "sha256-P9w6re8ZRw04v6YKSYeYwjrpYpwqGSmRNWk4J+GbwpM=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@

 buildPythonPackage (finalAttrs: {
  pname = "boto3-stubs";
-  version = "1.43.41";
+  version = "1.43.45";
  pyproject = true;

  src = fetchPypi {
    pname = "boto3_stubs";
    inherit (finalAttrs) version;
-    hash = "sha256-pXtT4D6Hh/2I3luQLYMDyfZB+8PQtCsSdR50vmQ2dds=";
+    hash = "sha256-ln1dK7msfiTyyov5D2RsLePOUgfkVyP7eU8C1I+ibkg=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/frictionless/default.nix
+++ b/pkgs/development/python-modules/frictionless/default.nix
@@ -2,7 +2,11 @@
  lib,
  buildPythonPackage,
  fetchFromGitHub,
+
+  # build-system
  hatchling,
+
+  # dependencies
  attrs,
  chardet,
  humanize,
@@ -23,7 +27,7 @@
  typing-extensions,
  validators,

-  # Optional formats
+  # optional-dependencies
  boto3,
  google-api-python-client,
  datasette,
@@ -45,38 +49,32 @@
  visidata,
  tatsu,

-  # Tests
-  pytestCheckHook,
+  # tests
+  moto,
+  openpyxl,
  pytest-lazy-fixtures,
  pytest-mock,
  pytest-timeout,
  pytest-vcr,
-  moto,
+  pytestCheckHook,
  requests-mock,
-
-  # Tests depending on excel
-  openpyxl,
  xlrd,
+  yattag,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "frictionless";
-  version = "5.18.1";
+  version = "5.19.0";
  pyproject = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "frictionlessdata";
    repo = "frictionless-py";
-    tag = "v${version}";
-    hash = "sha256-svspEHcEw994pEjnuzWf0FFaYeFZuqriK96yFAB6/gI=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-/l+IXcyraXCwdrM7pWr1hvjiIasDzNUQt+mQAXHS+jM=";
  };

-  postPatch = ''
-    substituteInPlace frictionless/conftest.py \
-      --replace-fail "from pytest_cov.embed import cleanup_on_sigterm" "" \
-      --replace-fail "cleanup_on_sigterm()" ""
-  '';
-
  build-system = [
    hatchling
  ];
@@ -182,50 +180,43 @@ buildPythonPackage rec {
  };

  nativeCheckInputs = [
-    pytestCheckHook
+    moto
+    openpyxl
    pytest-lazy-fixtures
    pytest-mock
    pytest-timeout
    pytest-vcr
-    moto
+    pytestCheckHook
    requests-mock
-
-    # We do not have all packages for the `excel` format to fully function,
-    # but it's required for some of the tests.
-    openpyxl
    xlrd
+    yattag
  ]
  # datasette is transitively broken by asgi-csrf
-  ++ lib.concatAttrValues (lib.removeAttrs optional-dependencies [ "datasette" ]);
+  ++ lib.concatAttrValues (lib.removeAttrs finalAttrs.passthru.optional-dependencies [ "datasette" ]);

  disabledTestPaths = [
    # Requires optional dependencies that have not been packaged (commented out above)
    # The tests of other unavailable formats are auto-skipped
-    "frictionless/formats/excel"
-    "frictionless/formats/spss"
-    # Console CLI tests fail due to typer/Click CliRunner output capture issues
-    # result.stdout is empty when error messages are expected
-    "frictionless/console/__spec__/test_console.py"
-    "frictionless/console/commands/__spec__/test_summary.py"
-    # We're well-ahead of requirements for duckdb and sqlalchemy
-    # https://github.com/frictionlessdata/frictionless-py/blob/be08dcf491781a565d230f47e08707e703292d85/pyproject.toml#L84
-    "frictionless/formats/sql/__spec__/duckdb/test_adapter.py"
-    "frictionless/formats/sql/__spec__/duckdb/test_parser.py"
-    "frictionless/indexer/__spec__/test_resource.py::test_resource_index_sqlite[duckdb_url]"
-    "frictionless/indexer/__spec__/test_resource.py::test_resource_index_sqlite_with_metadata[duckdb_url]"
-    "frictionless/indexer/__spec__/test_resource.py::test_resource_index_sqlite_on_progress[duckdb_url]"
+    "frictionless/formats/excel/__spec__/test_mapper.py"
+    "frictionless/formats/excel/parsers/__spec__/test_xls.py"
  ];

-  pythonImportsCheck = [
-    "frictionless"
+  disabledTests = [
+    # AssertionError: assert 'cp1258' == 'utf-8'
+    "test_resource_encoding_detection_accent"
+
+    # UnicodeDecodeError: 'utf-8' codec can't decode byte 0xa9 in position 20: invalid start byte
+    "test_remote_loader_latin1"
  ];

+  pythonImportsCheck = [ "frictionless" ];
+
  meta = {
    description = "Data management framework for Python that provides functionality to describe, extract, validate, and transform tabular data";
    homepage = "https://github.com/frictionlessdata/frictionless-py";
-    changelog = "https://github.com/frictionlessdata/frictionless-py/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/frictionlessdata/frictionless-py/blob/${finalAttrs.src.tag}/CHANGELOG.md";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ zhaofengli ];
    mainProgram = "frictionless";
  };
-}
+})
--- a/pkgs/development/python-modules/google-maps-routing/default.nix
+++ b/pkgs/development/python-modules/google-maps-routing/default.nix
@@ -15,14 +15,14 @@

 buildPythonPackage rec {
  pname = "google-maps-routing";
-  version = "3.31.3";
+  version = "0.11.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "googleapis";
    repo = "google-cloud-python";
-    tag = "google-cloud-build-v${version}";
-    hash = "sha256-qQ+8X6I8lt4OTgbvODsbdab2dYUk0wxWsbaVT2T651U=";
+    tag = "google-maps-routing-v${version}";
+    hash = "sha256-M/7uDWWz4YCfxa4gyM9BaAo10iyTMvtR2MhNpdFYnis=";
  };

  sourceRoot = "${src.name}/packages/google-maps-routing";
@@ -49,6 +49,7 @@ buildPythonPackage rec {
    pytestCheckHook
  ];

+  passthru.skipBulkUpdate = true; # picks wrong tag
  passthru.updateScript = gitUpdater { rev-prefix = "google-maps-routing-v"; };

  meta = {
--- a/pkgs/development/python-modules/llama-cloud/default.nix
+++ b/pkgs/development/python-modules/llama-cloud/default.nix
@@ -25,13 +25,13 @@

 buildPythonPackage (finalAttrs: {
  pname = "llama-cloud";
-  version = "2.10.0";
+  version = "2.11.0";
  pyproject = true;

  src = fetchPypi {
    pname = "llama_cloud";
    inherit (finalAttrs) version;
-    hash = "sha256-KzoEcyQVCM/yadbb/GkWNHrjL3csYsMSW3aFbwfMUBw=";
+    hash = "sha256-vvyYS5vxN2cMEIEAy82qd1PCxh/TYcDOL6YivkjN9c0=";
  };

  postPatch = ''
--- a/pkgs/development/python-modules/msgraph-sdk/default.nix
+++ b/pkgs/development/python-modules/msgraph-sdk/default.nix
@@ -16,14 +16,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "msgraph-sdk";
-  version = "1.58.0";
+  version = "1.59.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "microsoftgraph";
    repo = "msgraph-sdk-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-YF5cDivU3VVnIuCCyQsNY1gvCU5aazRJ6Hok97Af3nE=";
+    hash = "sha256-nZp1oMmJS7Cm3WQcZIcl5QSa1NzpdXcEsI6RxQC1jTU=";
  };

  build-system = [ flit-core ];
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -87,8 +87,8 @@ in
      "sha256-MzXtUHNFCx5jRkcU4PIh3xIs6A9jNbORcdls/3UjQIc=";

  mypy-boto3-appconfig =
-    buildMypyBoto3Package "appconfig" "1.43.37"
-      "sha256-Go9APBF3KBQKtEC14VV8afMW4wSXPF3gHVP9fQzkD6c=";
+    buildMypyBoto3Package "appconfig" "1.43.43"
+      "sha256-vptHQtETj3TU1HfzmK9G4T0kJDNaS7UWlO8nlb9WfHE=";

  mypy-boto3-appconfigdata =
    buildMypyBoto3Package "appconfigdata" "1.43.0"
@@ -331,12 +331,12 @@ in
      "sha256-Y+cDD5dq7C8tiGW37YheNcHTMxFyYCX6P6JPSjN7ttA=";

  mypy-boto3-config =
-    buildMypyBoto3Package "config" "1.43.40"
-      "sha256-fnCKbH54gAMo/XqzCFyHhZMnV431ldlDE5kbej+yzsU=";
+    buildMypyBoto3Package "config" "1.43.42"
+      "sha256-3JYcWKFk0dKJg/qn+EBvxeAO5xh5PXCU3dTEWDr1oXI=";

  mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.43.39"
-      "sha256-yu5th3IYwC4kGT/DnRy9A3MXR/XxxtpeQomeRQoD7ck=";
+    buildMypyBoto3Package "connect" "1.43.45"
+      "sha256-HLKYdoO/ueyNxBEzAj6Rgzvzvcid7PPgjrzdNxmWF5s=";

  mypy-boto3-connect-contact-lens =
    buildMypyBoto3Package "connect-contact-lens" "1.43.0"
@@ -443,8 +443,8 @@ in
      "sha256-dXNkOcMonYrBh4yzeubd+v3mW42s9XpmpfvgbtgoJgY=";

  mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.43.39"
-      "sha256-iatW0Ijl1hGkkP3tOwC49kvmO3r3BdYfvRclRw+pmbA=";
+    buildMypyBoto3Package "ec2" "1.43.45"
+      "sha256-xT9yYnd7XfKbajmSfMOjaqYF7YnzwXOe1wtb5vy/wSI=";

  mypy-boto3-ec2-instance-connect =
    buildMypyBoto3Package "ec2-instance-connect" "1.43.0"
@@ -459,8 +459,8 @@ in
      "sha256-02BUkAFhr9sT8ohkJJFPYNni0O9/UI/G0GUee/Kx5Dw=";

  mypy-boto3-ecs =
-    buildMypyBoto3Package "ecs" "1.43.38"
-      "sha256-cC5wmNdGFHsl1HBxsKcoAxEe1PBe2ps7T7rNPoH8AHs=";
+    buildMypyBoto3Package "ecs" "1.43.43"
+      "sha256-MYV6zPmiuWwBCv9Jncw5GS4E3+pX++KARj8L8W6yK04=";

  mypy-boto3-efs =
    buildMypyBoto3Package "efs" "1.43.23"
@@ -590,8 +590,8 @@ in
      "sha256-+DDeD9YWo98meLZU2Mzu5AE0S7HFg6kfxeUWUh9XcQA=";

  mypy-boto3-guardduty =
-    buildMypyBoto3Package "guardduty" "1.43.35"
-      "sha256-L0DBDIfXuZjJZRA63rZRukaXcPBHzt+H4AzeNc67xaw=";
+    buildMypyBoto3Package "guardduty" "1.43.45"
+      "sha256-i/5xOzymGSnyYznSODZCBgCZM1JRXz7R9VKU71J9yNs=";

  mypy-boto3-health =
    buildMypyBoto3Package "health" "1.43.0"
@@ -622,8 +622,8 @@ in
      "sha256-9P8m5QYikdsimepaivrYcb/tP1iThyPZWFMkyo24+bo=";

  mypy-boto3-inspector2 =
-    buildMypyBoto3Package "inspector2" "1.43.22"
-      "sha256-iA/ajBvGRV+L3/PZoauWDrkd/FVvtOv49O88xtlQBk4=";
+    buildMypyBoto3Package "inspector2" "1.43.42"
+      "sha256-MjSPOIJu0hdJ68eBwjppu/V+dM5pdAx+Ls7AiJY11Jo=";

  mypy-boto3-internetmonitor =
    buildMypyBoto3Package "internetmonitor" "1.43.0"
@@ -690,12 +690,12 @@ in
      "sha256-v5cHLJTqCyncFbrEz5dFN4PEsQ63cVKXKj6jwllUpPU=";

  mypy-boto3-iotwireless =
-    buildMypyBoto3Package "iotwireless" "1.43.0"
-      "sha256-CAn84uzip9Cd8Xr33gxAx6+iQ9hRYPO0u718BtYCr84=";
+    buildMypyBoto3Package "iotwireless" "1.43.43"
+      "sha256-qQXnIrnOoUlp+n1LgymG/BFm8IwtAJyc/YMJYRdCDpw=";

  mypy-boto3-ivs =
-    buildMypyBoto3Package "ivs" "1.43.23"
-      "sha256-GDrOFtAVGeiZKnHUs6Jyy0Rw+4qX7vujzlmw6YorfN4=";
+    buildMypyBoto3Package "ivs" "1.43.45"
+      "sha256-VAswBdekr2GBDzQviuu5s6ixvA5R0IGMEYP2dpuxdJk=";

  mypy-boto3-ivs-realtime =
    buildMypyBoto3Package "ivs-realtime" "1.43.0"
@@ -766,8 +766,8 @@ in
      "sha256-gYTCgaRwH3zKi6gg4MC8DUwXQT+jZO6lqc/vi+JUahU=";

  mypy-boto3-lambda =
-    buildMypyBoto3Package "lambda" "1.43.37"
-      "sha256-LYFV4zicevoTNNo+LrKHk2TiXyTApDG+oa7qHnNfJxw=";
+    buildMypyBoto3Package "lambda" "1.43.42"
+      "sha256-mLDdcUFNxg9ZjaL7HiGX6Dv0hEIFID8k+CLh9jq9TZs=";

  mypy-boto3-lex-models =
    buildMypyBoto3Package "lex-models" "1.43.3"
@@ -842,8 +842,8 @@ in
      "sha256-ce8c73a1ksdQpCN6cSg5KMkbVqomFNyZnaf7pag9wBg=";

  mypy-boto3-marketplace-catalog =
-    buildMypyBoto3Package "marketplace-catalog" "1.43.0"
-      "sha256-NXmJGktOefYDVoA0Ah0YDRPvgCfQDv/BwLqbQijTUdk=";
+    buildMypyBoto3Package "marketplace-catalog" "1.43.42"
+      "sha256-MPkuedDLQD9OY3lBkdQ+R+Np3y+MTOUiLZkWm2T4rTY=";

  mypy-boto3-marketplace-entitlement =
    buildMypyBoto3Package "marketplace-entitlement" "1.43.0"
@@ -898,8 +898,8 @@ in
      "sha256-13fAVct/Icy2iWt9z+fFyHLbp+7X6kZjLCtiiqC8Emc=";

  mypy-boto3-meteringmarketplace =
-    buildMypyBoto3Package "meteringmarketplace" "1.43.39"
-      "sha256-HIHcM0wk4B50OYDf9Dsb81hsfrXYnZ7WyQ9R6BBvjNk=";
+    buildMypyBoto3Package "meteringmarketplace" "1.43.42"
+      "sha256-nZDooWDZ7n0LpeO7af+io9d5V4QUSbBhK6jrRa+oXtQ=";

  mypy-boto3-mgh =
    buildMypyBoto3Package "mgh" "1.43.0"
@@ -1218,8 +1218,8 @@ in
      "sha256-Jl7i/d+dPkKuOWhWJft4YaU5EQ2OMkNyhHwOHL1mayA=";

  mypy-boto3-securityhub =
-    buildMypyBoto3Package "securityhub" "1.43.5"
-      "sha256-EHkWYodnoUT01mfovLF/+wA4IFy1Sn+H1f4vAitEMJE=";
+    buildMypyBoto3Package "securityhub" "1.43.42"
+      "sha256-cSOykgzNlSiXXnwyTF7MRWNhk4v83kabdJJ9FtIq108=";

  mypy-boto3-securitylake =
    buildMypyBoto3Package "securitylake" "1.43.0"
@@ -1290,8 +1290,8 @@ in
      "sha256-Psjh5lHoMK/89/4VGy4wkLjqmNc8sGkFOwnKTH9MhjY=";

  mypy-boto3-ssm =
-    buildMypyBoto3Package "ssm" "1.43.0"
-      "sha256-M8tlm2GCFgFB+VmPvfb/kh3JQkeob2IVKr2HCyTk/2I=";
+    buildMypyBoto3Package "ssm" "1.43.42"
+      "sha256-HVyE4b0DZMpnCC0uzAC2HAnFioMgif7aeUZHg3zm05A=";

  mypy-boto3-ssm-contacts =
    buildMypyBoto3Package "ssm-contacts" "1.43.0"
@@ -1342,8 +1342,8 @@ in
      "sha256-EGelGYE1b7seBg7WHOnY1Vumlw8iMqBAMIuUpPmIUIA=";

  mypy-boto3-synthetics =
-    buildMypyBoto3Package "synthetics" "1.43.33"
-      "sha256-vfHbGu/CUJKHLc7G5FVwvedPdsQ6d0ft5vlU25khVdQ=";
+    buildMypyBoto3Package "synthetics" "1.43.45"
+      "sha256-WEz+PMPa1ojI7uyLyMq2s5P6u19uBI/8pra73oWsyKA=";

  mypy-boto3-textract =
    buildMypyBoto3Package "textract" "1.43.0"
--- a/pkgs/development/python-modules/openccu-data/default.nix
+++ b/pkgs/development/python-modules/openccu-data/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "openccu-data";
-  version = "2026.5.0";
+  version = "2026.6.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "SukramJ";
    repo = "openccu-data";
    tag = finalAttrs.version;
-    hash = "sha256-jJNNpBeEQ1CPZP/5ssenXSmvC7FMbUUBhG1Ty/3hGvk=";
+    hash = "sha256-iG9TKQQH8wM9sEHfaSPfWwbledwCSS/OlnTZ059l774=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/openccu-loom-client/default.nix
+++ b/pkgs/development/python-modules/openccu-loom-client/default.nix
@@ -0,0 +1,52 @@
+{
+  aiohomematic,
+  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+  lib,
+  openccu-loom-types,
+  pydantic,
+  pytest-asyncio,
+  pytestCheckHook,
+  python-slugify,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "openccu-loom-client";
+  version = "2026.7.4";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "SukramJ";
+    repo = "openccu-loom-client";
+    tag = finalAttrs.version;
+    hash = "sha256-eI8fDslP4yVNamJtYTaMG7yw0liPAib0WmCUu+E9WUk=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    aiohomematic
+    aiohttp
+    openccu-loom-types
+    pydantic
+    python-slugify
+  ];
+
+  pythonImportsCheck = [ "openccu_loom_client" ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytestCheckHook
+  ];
+
+  meta = {
+    changelog = "https://github.com/SukramJ/openccu-loom-client/blob/${finalAttrs.src.tag}/changelog.md";
+    description = "Async Python REST + WebSocket client for the openccu-loom daemon";
+    homepage = "https://github.com/SukramJ/openccu-loom-client";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+})
--- a/pkgs/development/python-modules/openccu-loom-types/default.nix
+++ b/pkgs/development/python-modules/openccu-loom-types/default.nix
@@ -0,0 +1,43 @@
+{
+  buildPythonPackage,
+  datamodel-code-generator,
+  fetchFromGitHub,
+  lib,
+  pydantic,
+  pytestCheckHook,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "openccu-loom-types";
+  version = "0.1.52";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "SukramJ";
+    repo = "openccu-loom-types";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-cdQvGvOc8RZJ5riWHeRkY07RWu6z9kDYCVSC3+tWPPA=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    pydantic
+  ];
+
+  pythonImportsCheck = [ "openccu_loom_types" ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  meta = {
+    changelog = "https://github.com/SukramJ/openccu-loom-types/blob/${finalAttrs.src.tag}/changelog.md";
+    description = "Generated Pydantic / enum types for the openccu-loom REST + WebSocket contract";
+    homepage = "https://github.com/SukramJ/openccu-loom-types";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+})
--- a/pkgs/development/python-modules/reolink-aio/default.nix
+++ b/pkgs/development/python-modules/reolink-aio/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "reolink-aio";
-  version = "0.21.3";
+  version = "0.21.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "starkillerOG";
    repo = "reolink_aio";
    tag = finalAttrs.version;
-    hash = "sha256-XL6Z+1dr35XgMczUcxp4v3ejBcdgWkhUOISFA4lpjU4=";
+    hash = "sha256-qBGUhqjHur3vKhpHmOHIQUxeBn+YAIjECdm33o1c3jg=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/restrictedpython/default.nix
+++ b/pkgs/development/python-modules/restrictedpython/default.nix
@@ -9,19 +9,19 @@

 buildPythonPackage rec {
  pname = "restrictedpython";
-  version = "8.1";
+  version = "8.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "zopefoundation";
    repo = "RestrictedPython";
    tag = version;
-    hash = "sha256-UcmH1I2p+XmQm4Y5M+Ms/LMSchor6GD6V9dxippa4HI=";
+    hash = "sha256-Ck5YDtjYs7rZk+MC+eKrQVCQX1EYlxC6m4kD5+QjfjE=";
  };

  postPatch = ''
    substituteInPlace pyproject.toml \
-      --replace-fail "setuptools >= 78.1.1,< 81" setuptools
+      --replace-fail "setuptools >= 78.1.1,< 82" setuptools
  '';

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/victron-mqtt/default.nix
+++ b/pkgs/development/python-modules/victron-mqtt/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "victron-mqtt";
-  version = "2026.6.8";
+  version = "2026.7.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "tomer-w";
    repo = "victron_mqtt";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-zwdSpfI1UtH9ZDYXk/0jozt9qTs5ZaMrg5c60HBnOWo=";
+    hash = "sha256-ZU5qz+21rxHnpHlV0Vn+iiBDqW110hy/4+Emblj6gWo=";
  };

  build-system = [
--- a/pkgs/servers/home-assistant/custom-components/homematicip_local/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/homematicip_local/package.nix
@@ -8,6 +8,7 @@
  aiohomematic-test-support,
  home-assistant,
  openccu-data,
+  openccu-loom-client,
  pytest-homeassistant-custom-component,
  pytest-xdist,
  pytestCheckHook,
@@ -16,13 +17,13 @@
 buildHomeAssistantComponent rec {
  owner = "SukramJ";
  domain = "homematicip_local";
-  version = "2.7.3";
+  version = "2.8.2";

  src = fetchFromGitHub {
    owner = "SukramJ";
    repo = "custom_homematic";
    tag = version;
-    hash = "sha256-9dXvIxMMdHTOi9JbRsHbySqRUYq6dN+MzrOocq9cpdA=";
+    hash = "sha256-KCvchOYhBYJNYbc/7HvuwrXMDoxkl15ikpJPZMC4cEc=";
  };

  postPatch = ''
@@ -36,6 +37,7 @@ buildHomeAssistantComponent rec {
    aiohomematic
    aiohomematic-config
    openccu-data
+    openccu-loom-client
  ];

  nativeCheckInputs = [
@@ -54,8 +56,6 @@ buildHomeAssistantComponent rec {
  disabledTests = [
    # custom_components.homematicip_local.support.InvalidConfig: C
    "test_async_validate_config_and_get_system_information"
-    # Failed: Lingering timer after test <TimerHandle when=3043632.864116499 Store._async_schedule_callback_delayed_write() created at /nix/store/5rh57mhaihd9wff1rqnskvs8nxh9sv3z-homeassistant-2026.6.0/lib/python3.14/site-packages/homeassistant/helpers/storage.py:516>
-    "test_reauth_flow_success"
  ];

  meta = {
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -12177,6 +12177,10 @@ self: super: with self; {

  openccu-data = callPackage ../development/python-modules/openccu-data { };

+  openccu-loom-client = callPackage ../development/python-modules/openccu-loom-client { };
+
+  openccu-loom-types = callPackage ../development/python-modules/openccu-loom-types { };
+
  opencensus = callPackage ../development/python-modules/opencensus { };

  opencensus-context = callPackage ../development/python-modules/opencensus-context { };