From f93bdf7aec2fa12705c5bfc301bfe017f45ff5d6 Mon Sep 17 00:00:00 2001
From: eljamm <fedi.jamoussi@protonmail.ch>
Date: Wed, 19 Aug 2026 12:29:35 +0200
Subject: [PATCH 01/61] vacask: set OpenVAF target CPU

VACASK's device models are compiled by OpenVAF, a Verilog-A compiler.

By default, OpenVAF's `--target_cpu native` tells it to use every CPU
instruction available on the machine doing the build (e.g. AVX-512, if the
builder happens to have it). If the resulting binary is then run on a
different, older CPU that doesn't support those instructions, it crashes
with "illegal instruction" (SIGILL).

To avoid this, we detect which instruction set the CPU we're building for
actually supports and tell OpenVAF to target that instead, which keeps the
compiled models runnable on other x86_64 machines as well.

See:
  - https://codeberg.org/arpadbuermen/VACASK/src/commit/bf59752fbfdfed18dc7fe2e3e11a9c02f8de28a0/README.md#installation-from-pre-built-packages
  - https://github.com/NixOS/nixpkgs/blob/dc36b3c506df17272cdca29e85d0d0190b068981/lib/systems/architectures.nix

Assisted-by: DeepSeek V4 Flash Free
---
 pkgs/by-name/va/vacask/package.nix | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/pkgs/by-name/va/vacask/package.nix b/pkgs/by-name/va/vacask/package.nix
index df72bc92f73c..8091b2746311 100644
--- a/pkgs/by-name/va/vacask/package.nix
+++ b/pkgs/by-name/va/vacask/package.nix
@@ -16,6 +16,35 @@
   boost188,
   suitesparse,
   tomlplusplus,
+
+  # VACASK's device models are compiled by OpenVAF, a Verilog-A compiler.
+  #
+  # By default, OpenVAF's `--target_cpu native` tells it to use every CPU
+  # instruction available on the machine doing the build (e.g. AVX-512, if the
+  # builder happens to have it). If the resulting binary is then run on a
+  # different, older CPU that doesn't support those instructions, it crashes
+  # with "illegal instruction" (SIGILL).
+  #
+  # To avoid this, we detect which instruction set the CPU we're building for
+  # actually supports and tell OpenVAF to target that instead, which keeps the
+  # compiled models runnable on other x86_64 machines as well.
+  #
+  # See:
+  #   - https://codeberg.org/arpadbuermen/VACASK/src/commit/bf59752fbfdfed18dc7fe2e3e11a9c02f8de28a0/README.md#installation-from-pre-built-packages
+  #   - https://github.com/NixOS/nixpkgs/blob/dc36b3c506df17272cdca29e85d0d0190b068981/lib/systems/architectures.nix
+  openvafTargetCpu ?
+    with stdenv.hostPlatform;
+    if isx86_64 then
+      if avx512Support then
+        "x86-64-v4"
+      else if avx2Support then
+        "x86-64-v3"
+      else if sse4_2Support then
+        "x86-64-v2"
+      else
+        "x86-64"
+    else
+      "generic",
 }:
 
 let
@@ -79,6 +108,7 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeFeature "FLEX_INCLUDE_DIR" "${flex}/include")
     (lib.cmakeFeature "SuiteSparse_DIR" "${suitesparse-include}")
     (lib.cmakeFeature "TOMLPP_DIR" "${tomlplusplus}")
+    (lib.cmakeFeature "OPENVAF_OPTIONS" "--target_cpu ${openvafTargetCpu}")
   ];
 
   doCheck = true;

From 17d8e181afac068180a96037e41ccad6cc5911ac Mon Sep 17 00:00:00 2001
From: Rafael Ieda <git@ieda.me>
Date: Mon, 14 Sep 2026 06:51:47 -0300
Subject: [PATCH 02/61] git-privacy: fix build error pkg_resources is
 deprecated

---
 pkgs/by-name/gi/git-privacy/package.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pkgs/by-name/gi/git-privacy/package.nix b/pkgs/by-name/gi/git-privacy/package.nix
index ecd8ed84e55c..3cb8dfae2460 100644
--- a/pkgs/by-name/gi/git-privacy/package.nix
+++ b/pkgs/by-name/gi/git-privacy/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
   fetchFromGitHub,
+  fetchpatch,
   git,
   python3,
 }:
@@ -17,6 +18,16 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     hash = "sha256-b2RkRL8/mZwqc3xCs+oltzualhQtp/7F9POlLlT3UUU=";
   };
 
+  patches = [
+    # Fix: pkg_resources is deprecated
+    (fetchpatch {
+      name = "fix-pkg_resources-is-deprecated.patch";
+      url = "https://github.com/EMPRI-DEVOPS/git-privacy/commit/a54d7a8b9ce6a48db5383e09711059b5025bcb18.patch";
+      excludes = [ ".github/workflows/pytest.yml" ];
+      hash = "sha256-uorH+EomVS6wMoykwazSIstz43CCjU8tJLgxyINqxU4=";
+    })
+  ];
+
   build-system = with python3.pkgs; [
     setuptools
   ];

From 9bbe92aa69cff27ff245e8a61d2e9886db410188 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 19 Sep 2026 17:32:28 +0200
Subject: [PATCH 03/61] zond: init at 0-unstable-2026-09-11

CLI for Zond Engine

https://github.com/zond-rs/zond
---
 pkgs/by-name/zo/zond/package.nix | 49 ++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 pkgs/by-name/zo/zond/package.nix

diff --git a/pkgs/by-name/zo/zond/package.nix b/pkgs/by-name/zo/zond/package.nix
new file mode 100644
index 000000000000..0e0f2b9c5c30
--- /dev/null
+++ b/pkgs/by-name/zo/zond/package.nix
@@ -0,0 +1,49 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  libpcap,
+  pkg-config,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zond";
+  version = "0-unstable-2026-09-11";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "zond-rs";
+    repo = "zond";
+    # https://github.com/zond-rs/zond/issues/1
+    rev = "12bcb6181f10f27ba939aa0ebe39d3f05077758b";
+    hash = "sha256-UUby3GNU5ttyJuybw9wVpreQxcfYkOQD22j6kLgJWao=";
+  };
+
+  cargoHash = "sha256-MO+bYGHZQi0g4d+Mhz7+tF6ZxYDetL2rTievNeJkvQY=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ libpcap ];
+
+  checkFlagsArray = [
+    # Test requires raw socket/packet capture
+    "--skip=the_reason_flag_shows_the_packet_behind_a_verdict"
+  ];
+
+  __darwinAllowLocalNetworking = true;
+
+  # Some tests fail in strict sandbox on darwin
+  doCheck = !stdenv.hostPlatform.isDarwin;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "CLI for Zond Engine";
+    homepage = "https://github.com/zond-rs/zond";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "zond";
+  };
+})

From 86ba833006912bc2cadfc6e8f69b5e8d63d25c10 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 25 Sep 2026 21:55:09 +0000
Subject: [PATCH 04/61] phoenixd: 0.9.0 -> 0.9.1

---
 pkgs/by-name/ph/phoenixd/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ph/phoenixd/package.nix b/pkgs/by-name/ph/phoenixd/package.nix
index f718ba742e22..c36b9a837a70 100644
--- a/pkgs/by-name/ph/phoenixd/package.nix
+++ b/pkgs/by-name/ph/phoenixd/package.nix
@@ -11,7 +11,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "phoenixd";
-  version = "0.9.0";
+  version = "0.9.1";
 
   src =
     let
@@ -27,9 +27,9 @@ stdenv.mkDerivation (finalAttrs: {
     fetchurl {
       url = "https://github.com/ACINQ/phoenixd/releases/download/v${finalAttrs.version}/phoenixd-${finalAttrs.version}-${suffix}.zip";
       hash = selectSystem {
-        aarch64-darwin = "sha256-NQyHyQzfkdLPpQnuSP09cSZwITA9Q1ml7q2haU3qm5o=";
-        x86_64-linux = "sha256-2eVLk4E/F3GwcslsWulo/7WwUvLKHEJ2K2biy4A2Kg8=";
-        aarch64-linux = "sha256-yAbw2AWKSHKEFzU2rMupBBF2+CF/jITOWbbpfQSoizE=";
+        aarch64-darwin = "sha256-LSPejXZgqXy7W2TXizv6B2FJOAY9vB5u4/pMbYqzwlc=";
+        x86_64-linux = "sha256-zLT8+0X4OUgdEtn5zfPbHU9pZV+O9vVpy0OzRe1VIc4=";
+        aarch64-linux = "sha256-T+W/SA+/sQbA57JcrW42nEjwfBKfwRHBL2U1fjULxLw=";
       };
     };
 

From e31070ee4303c7fd2f94620bea01a11ed95cc7bb Mon Sep 17 00:00:00 2001
From: FireFly <firefly@firefly.nu>
Date: Sat, 26 Sep 2026 01:01:48 +0200
Subject: [PATCH 05/61] nixos-option: show option value more conservatively

Use safeToPretty helper for showing the option value also in the non-
recursive case.  This avoids fully erroring out when e.g. a suboption
lacks a defined value and we try to (recursively) pretty-print it.
---
 pkgs/by-name/ni/nixos-option/nixos-option.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ni/nixos-option/nixos-option.nix b/pkgs/by-name/ni/nixos-option/nixos-option.nix
index 9ffe7beb62c6..b7c892980bd5 100644
--- a/pkgs/by-name/ni/nixos-option/nixos-option.nix
+++ b/pkgs/by-name/ni/nixos-option/nixos-option.nix
@@ -125,7 +125,7 @@ let
     in
     lib.concatStringsSep "\n\n" (
       lib.concatLists [
-        (entry true "Value" (toPretty value))
+        (entry true "Value" (safeToPretty value))
         (entry (option ? default) "Default" (toPretty option.default))
         (entry (option ? type) "Type" (option.type.description))
         (entry (option ? description) "Description" (lib.removeSuffix "\n" option.description))

From b322641c859aa2e77f52027918b2a2f6e17f1c8e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 27 Sep 2026 18:20:48 +0000
Subject: [PATCH 06/61] lint-staged: 17.5.1 -> 17.6.0

---
 pkgs/by-name/li/lint-staged/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/lint-staged/package.nix b/pkgs/by-name/li/lint-staged/package.nix
index 6207c396a863..17accc7f8053 100644
--- a/pkgs/by-name/li/lint-staged/package.nix
+++ b/pkgs/by-name/li/lint-staged/package.nix
@@ -8,16 +8,16 @@
 
 buildNpmPackage rec {
   pname = "lint-staged";
-  version = "17.5.1";
+  version = "17.6.0";
 
   src = fetchFromGitHub {
     owner = "lint-staged";
     repo = "lint-staged";
     rev = "v${version}";
-    hash = "sha256-9fx514c0ZblPZaJmAGdmb2QbIodsaDS9MOoveUXwA2Q=";
+    hash = "sha256-dUZMViPdT0mjqAs5boofuJs8qSH0QPZVts7PRJrIa6k=";
   };
 
-  npmDepsHash = "sha256-y8PSiJm3U9i5XaIkC06N/vjm/+OnqAHASRAMHlOVsGU=";
+  npmDepsHash = "sha256-Utc/SknTuV706dNjVUwE6ad85O3Ud4HRVDBiKblgdw0=";
 
   dontNpmBuild = true;
 

From 7d00731c3149107d0cbe836345102aa659e76277 Mon Sep 17 00:00:00 2001
From: Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
Date: Sun, 27 Sep 2026 22:04:21 -0400
Subject: [PATCH 07/61] nixosTests.linux-builder-vz-store-gc: enable nix

The test broke after https://github.com/NixOS/nixpkgs/pull/553728
removed nix tools from test VMs by default because the test actually
relies on them being present.
---
 nixos/tests/linux-builder-vz-store-gc.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/tests/linux-builder-vz-store-gc.nix b/nixos/tests/linux-builder-vz-store-gc.nix
index 93bf0c078ca9..2686ed4f798e 100644
--- a/nixos/tests/linux-builder-vz-store-gc.nix
+++ b/nixos/tests/linux-builder-vz-store-gc.nix
@@ -7,6 +7,8 @@
   name = "linux-builder-vz-store-gc";
 
   nodes.machine = {
+    nix.enable = true;
+
     virtualisation = {
       # Match the vz-vm drive order: the read-only store image is /dev/vda,
       # followed by the writable data disk at /dev/vdb.

From a2ae4f44c026c9f2b3a0486029d762f5b3b73193 Mon Sep 17 00:00:00 2001
From: Vincent Laporte <Vincent.Laporte@gmail.com>
Date: Mon, 28 Sep 2026 11:43:20 +0200
Subject: [PATCH 08/61] =?UTF-8?q?rocqPackages.jasmin:=202026.03.1=20?=
 =?UTF-8?q?=E2=86=92=202026.03.3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pkgs/development/rocq-modules/jasmin/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/rocq-modules/jasmin/default.nix b/pkgs/development/rocq-modules/jasmin/default.nix
index a8d25735c385..c6894217ea7b 100644
--- a/pkgs/development/rocq-modules/jasmin/default.nix
+++ b/pkgs/development/rocq-modules/jasmin/default.nix
@@ -20,12 +20,13 @@
     in
     with lib.versions;
     lib.switch coq.coq-version [
-      (case (range "8.20" "9.1") "2026.03.1")
+      (case (range "8.20" "9.1") "2026.03.3")
       (case (isEq "8.19") "2025.02.2")
       (case (isEq "8.18") "2024.07.4")
     ] null;
   releaseRev = v: "v${v}";
 
+  release."2026.03.3".hash = "sha256-LY3683WHT0A3pXpszGAl8tkc7fCy5RufuPBVedBk298=";
   release."2026.03.1".hash = "sha256-CE+WbcG0lgKvaV/OSMlTp3fG+v82X41z/w7ynsM/LLg=";
   release."2026.03.0".hash = "sha256-MzdVbZhXlb9JFLsf+23yJNFiGJDBJZGbX6Ox3/U1EzA=";
   release."2025.06.1".hash = "sha256-wEL1tN0HUa1Eb7FiQOBA6sAkuonrAMdkqq8gu9/CED0=";

From c6b6e9a4fbf08d0e03f3ff0a67c1a10145cc37aa Mon Sep 17 00:00:00 2001
From: eljamm <fedi.jamoussi@protonmail.ch>
Date: Mon, 28 Sep 2026 14:11:18 +0200
Subject: [PATCH 09/61] peertube: 8.3.0 -> 8.3.1

Changelog: https://github.com/Chocobozzz/PeerTube/blob/refs/tags/v8.3.1/CHANGELOG.md
---
 pkgs/by-name/pe/peertube/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/pe/peertube/package.nix b/pkgs/by-name/pe/peertube/package.nix
index f84fc3996d9b..6349e5c23f3e 100644
--- a/pkgs/by-name/pe/peertube/package.nix
+++ b/pkgs/by-name/pe/peertube/package.nix
@@ -22,7 +22,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "peertube";
-  version = "8.3.0";
+  version = "8.3.1";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "Chocobozzz";
     repo = "PeerTube";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gHWtQRpbYV1oW7/V2dpAsiTZhV/vtCkuBF23T1Or3Qc=";
+    hash = "sha256-9Arq6gvMZV+0WcHWGwFnMjtnZzW+hWPPsHkJDwMFZCM=";
   };
 
   outputs = [
@@ -44,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-fadktAeQEjjGm06Re0gQuXUxsqEF7tWBf4KNrsF5pfI=";
+    hash = "sha256-HbscF8sjgFCICJnpWopW5VWcD67XdzKOONWn+RHZThI=";
   };
 
   nativeBuildInputs = [

From a8b4c8ac945f80abe4961526ebe3bed02349d46e Mon Sep 17 00:00:00 2001
From: Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
Date: Mon, 28 Sep 2026 08:48:26 -0400
Subject: [PATCH 10/61] nixosTests.linux-builder-vz-store-gc: add maintainers

---
 nixos/tests/linux-builder-vz-store-gc.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/tests/linux-builder-vz-store-gc.nix b/nixos/tests/linux-builder-vz-store-gc.nix
index 2686ed4f798e..604ea177de4e 100644
--- a/nixos/tests/linux-builder-vz-store-gc.nix
+++ b/nixos/tests/linux-builder-vz-store-gc.nix
@@ -1,10 +1,11 @@
-{ lib, ... }:
+{ hostPkgs, lib, ... }:
 
 {
   # Strictly speaking, this is not a precise test for VZ builder, but we don't
   # have vzvm backend for nixos tests, so we use qemu here, with config that
   # matches linux-builder-vz disk layout.
   name = "linux-builder-vz-store-gc";
+  meta.maintainers = hostPkgs.darwin.linux-builder-vz.meta.maintainers;
 
   nodes.machine = {
     nix.enable = true;

From ff697e860a28b5ca83098e1d1a5ff70bf123f35a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 28 Sep 2026 15:03:54 +0000
Subject: [PATCH 11/61] xprin: 0.2.0 -> 0.3.0

---
 pkgs/by-name/xp/xprin/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/xp/xprin/package.nix b/pkgs/by-name/xp/xprin/package.nix
index 4935d1e2b3b9..3ab5143cc964 100644
--- a/pkgs/by-name/xp/xprin/package.nix
+++ b/pkgs/by-name/xp/xprin/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "xprin";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "crossplane-contrib";
     repo = "xprin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5qRPzrMAW7gw5fv5rgR9hOrZreeWXj/UFyMQAzpCA0s=";
+    hash = "sha256-VGeX1tKERq9sTv36UeYhxqf8hG+nUczVDseT6iDnRJM=";
   };
 
-  vendorHash = "sha256-mFICxQ0WHPFxHJ5wmElqcRMOvExKWmX2XXCRQCWbXoI=";
+  vendorHash = "sha256-8trj5T6ShvHXFB3W8F++ton71F8XDn2kyoZPIdPmEyo=";
 
   subPackages = [
     "cmd/xprin"

From ff9ad2338e219a44db42f77a10c9c2ff7f41b685 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 28 Sep 2026 17:10:53 +0200
Subject: [PATCH 12/61] hexora: init at 0.3.1

Static analysis of malicious Python code

https://github.com/rushter/hexora
---
 pkgs/by-name/he/hexora/package.nix | 62 ++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 pkgs/by-name/he/hexora/package.nix

diff --git a/pkgs/by-name/he/hexora/package.nix b/pkgs/by-name/he/hexora/package.nix
new file mode 100644
index 000000000000..e4ad7d16238c
--- /dev/null
+++ b/pkgs/by-name/he/hexora/package.nix
@@ -0,0 +1,62 @@
+{
+  lib,
+  cargo,
+  fetchFromGitHub,
+  nix-update-script,
+  pkg-config,
+  python3Packages,
+  rustc,
+  rustPlatform,
+  zstd,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "hexora";
+  version = "0.3.1";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "rushter";
+    repo = "hexora";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-xBg8Rrtwgg8Obi7JOPwdRXwoQKL8skCY72vLJA/VPRk=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-Xc6CcJ6s8X7T04W2SP7XT2rKGh2TatkaCxP2sSUC+2Y=";
+  };
+
+  build-system = [
+    cargo
+    pkg-config
+    python3Packages.setuptools
+    python3Packages.setuptools-rust
+    python3Packages.wheel
+    rustPlatform.cargoSetupHook
+    rustc
+  ];
+
+  buildInputs = [ zstd ];
+
+  # Project has no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "hexora" ];
+
+  env = {
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Static analysis of malicious Python code";
+    homepage = "https://github.com/rushter/hexora";
+    changelog = "https://github.com/rushter/hexora/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "hexora";
+  };
+})

From 598578cb3bb0de5a042e28919a27836654b96fe9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 28 Sep 2026 20:40:37 +0000
Subject: [PATCH 13/61] python3Packages.homematicip: 2.17.0 -> 2.18.0

---
 pkgs/development/python-modules/homematicip/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/homematicip/default.nix b/pkgs/development/python-modules/homematicip/default.nix
index 76905233a92e..e48f96461c43 100644
--- a/pkgs/development/python-modules/homematicip/default.nix
+++ b/pkgs/development/python-modules/homematicip/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "homematicip";
-  version = "2.17.0";
+  version = "2.18.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "hahn-th";
     repo = "homematicip-rest-api";
     tag = finalAttrs.version;
-    hash = "sha256-PtqSwHEwFeryYM3e455PKsLAYqs7TVVi0N/Pbq1SHp8=";
+    hash = "sha256-I3D83Pdsdz0eWrebFgRtq/ejfJh8kN8w7Z82HJcjsjQ=";
   };
 
   build-system = [

From 175e5d3e769c410b97d642e862cd64c285e74f53 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 28 Sep 2026 21:06:23 +0000
Subject: [PATCH 14/61] tgrep: 1.0.10 -> 1.0.11

---
 pkgs/by-name/tg/tgrep/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/tg/tgrep/package.nix b/pkgs/by-name/tg/tgrep/package.nix
index 4db313978896..5c4d6de13c75 100644
--- a/pkgs/by-name/tg/tgrep/package.nix
+++ b/pkgs/by-name/tg/tgrep/package.nix
@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tgrep";
-  version = "1.0.10";
+  version = "1.0.11";
   __structuredAttrs = true;
   __darwinAllowLocalNetworking = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "microsoft";
     repo = "tgrep";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/IprzLxZR/DL9ny+wPyh/iJoxvjC+50U5w3EP560KL4=";
+    hash = "sha256-TkllXBOyxEl1NVXIRmRYOVlUqm65GRCNnoetGcR7kyE=";
   };
 
-  cargoHash = "sha256-tJ3+aWOsRS3WD9VUYGQ/emOsLPAURVg7/WnUxdTRz50=";
+  cargoHash = "sha256-xPXLkW/YeCBbRCGf4+VYLQqm4D5WkKo2yIJhkLOxO+s=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

From 6490a9729f6d3037515f3411648092d7d1b4021c Mon Sep 17 00:00:00 2001
From: saylesss88 <saylesss87@proton.me>
Date: Wed, 31 Dec 2025 21:17:24 -0500
Subject: [PATCH 15/61] maintainers: add saylesss88

---
 maintainers/maintainer-list.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 6c00b8b06f14..6a10b01676ef 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -25896,6 +25896,12 @@
     githubId = 11632726;
     name = "Arijit Basu";
   };
+  saylesss88 = {
+    email = "saylesss87@proton.me";
+    github = "saylesss88";
+    githubId = 209646716;
+    name = "T. Sawyer";
+  };
   sb0 = {
     email = "sb@m-labs.hk";
     github = "sbourdeauducq";

From 32490a192c62d98cb71e138434f1f767b8327700 Mon Sep 17 00:00:00 2001
From: saylesss88 <saylesss87@proton.me>
Date: Wed, 31 Dec 2025 21:17:40 -0500
Subject: [PATCH 16/61] mdbook-rss-feed: add the creator as co-maintainer

---
 pkgs/by-name/md/mdbook-rss-feed/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/md/mdbook-rss-feed/package.nix b/pkgs/by-name/md/mdbook-rss-feed/package.nix
index 3d7b85e20ea6..b6c89e011da6 100644
--- a/pkgs/by-name/md/mdbook-rss-feed/package.nix
+++ b/pkgs/by-name/md/mdbook-rss-feed/package.nix
@@ -38,6 +38,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
       matthiasbeyer
+      saylesss88
       pinage404
     ];
     mainProgram = "mdbook-rss-feed";

From c750c5c81f6e3856bf2695524adac73c3e615e13 Mon Sep 17 00:00:00 2001
From: Rafael Ieda <git@ieda.me>
Date: Mon, 28 Sep 2026 19:33:32 -0300
Subject: [PATCH 17/61] msedgedriver: add x86_64-darwin and updater changes to
 match backport

---
 pkgs/by-name/mi/microsoft-edge/update.sh | 5 +++--
 pkgs/by-name/ms/msedgedriver/package.nix | 2 ++
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mi/microsoft-edge/update.sh b/pkgs/by-name/mi/microsoft-edge/update.sh
index ac352ca9f7d3..78c9b7ab348b 100755
--- a/pkgs/by-name/mi/microsoft-edge/update.sh
+++ b/pkgs/by-name/mi/microsoft-edge/update.sh
@@ -215,10 +215,11 @@ update_msedgedriver() {
     # msedgedriver/package.nix
     declare -A hashes=(
         [mac64_m1]=""
+        [mac64]=""
         [linux64]=""
     )
 
-    for driver_arch in mac64_m1 linux64; do
+    for driver_arch in mac64_m1 mac64 linux64; do
         url="https://msedgedriver.microsoft.com/${version}/edgedriver_${driver_arch}.zip"
 
         new_hash="$(
@@ -238,7 +239,7 @@ update_msedgedriver() {
         "/pname = \"msedgedriver\";/,/^  meta = {/s/version = \".*\"/version = \"$version\"/" \
         "$DRIVER_NIX"
 
-    for driver_arch in mac64_m1 linux64; do
+    for driver_arch in mac64_m1 mac64 linux64; do
         sed -i \
             "/pname = \"msedgedriver\";/,/^  meta = {/s|${driver_arch} = \".*\"|${driver_arch} = \"${hashes[$driver_arch]}\"|" \
             "$DRIVER_NIX"
diff --git a/pkgs/by-name/ms/msedgedriver/package.nix b/pkgs/by-name/ms/msedgedriver/package.nix
index 376901f228c5..cd1fadbe6dd9 100644
--- a/pkgs/by-name/ms/msedgedriver/package.nix
+++ b/pkgs/by-name/ms/msedgedriver/package.nix
@@ -19,6 +19,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       driverArch =
         {
           aarch64-darwin = "mac64_m1";
+          x86_64-darwin = "mac64";
           x86_64-linux = "linux64";
         }
         .${stdenvNoCC.hostPlatform.system};
@@ -28,6 +29,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       hash =
         {
           mac64_m1 = "sha256-6nwe/vRPh5MkQLTiZNXepfFsLtILwoK925mgLCUUVNg=";
+          mac64 = "sha256-p/cnNKQub6sSEWPz2fJ+FoU7rgzeoZQMkv3PphvvHLw=";
           linux64 = "sha256-XbOQl9FyckF3Qybb+40474ImJDKahBkekPoydf/TxV0=";
         }
         .${driverArch};

From 9e6b24e57cb5291c27e84681287192790ff4f156 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 28 Sep 2026 22:39:42 +0000
Subject: [PATCH 18/61] kdePackages.kirigami-addons: 1.14.0 -> 1.14.2

---
 pkgs/kde/misc/kirigami-addons/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/kde/misc/kirigami-addons/default.nix b/pkgs/kde/misc/kirigami-addons/default.nix
index f040099047f1..fdeffab2c7d0 100644
--- a/pkgs/kde/misc/kirigami-addons/default.nix
+++ b/pkgs/kde/misc/kirigami-addons/default.nix
@@ -10,11 +10,11 @@
 }:
 mkKdeDerivation rec {
   pname = "kirigami-addons";
-  version = "1.14.0";
+  version = "1.14.2";
 
   src = fetchurl {
     url = "mirror://kde/stable/kirigami-addons/kirigami-addons-${version}.tar.xz";
-    hash = "sha256-SunvnPH8Vf71kyjSWnCyhXK29qeHOUw9KS9e03jxmEA=";
+    hash = "sha256-Hks0Atf4dEyQOwwLkH+jeTebhI3tpBO1qUDbr0cUyzI=";
   };
 
   extraNativeBuildInputs = [ qttools ];

From bd2598e4543d9e76f2516c542f3aecf02fc0b20b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 28 Sep 2026 23:02:14 +0000
Subject: [PATCH 19/61] ledger-live-desktop: 4.19.1 -> 4.21.1

---
 pkgs/by-name/le/ledger-live-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/le/ledger-live-desktop/package.nix b/pkgs/by-name/le/ledger-live-desktop/package.nix
index 534ac688a68d..50110d05f3e9 100644
--- a/pkgs/by-name/le/ledger-live-desktop/package.nix
+++ b/pkgs/by-name/le/ledger-live-desktop/package.nix
@@ -8,11 +8,11 @@
 
 let
   pname = "ledger-live-desktop";
-  version = "4.19.1";
+  version = "4.21.1";
 
   src = fetchurl {
     url = "https://download.live.ledger.com/${pname}-${version}-linux-x86_64.AppImage";
-    hash = "sha256-zPaMkbU36HwcMUHy9nrocCOJfZ4k/CXj/3gd4BZUV0M=";
+    hash = "sha256-Em+VT8sDCyKgrJxrdrAIVpbdLdSPwqoBgIRXeEj1TXY=";
   };
 
   appimageContents = appimageTools.extract {

From 7de3fb272601cf18901d4e6a126f43463006d138 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Tue, 29 Sep 2026 01:26:53 +0200
Subject: [PATCH 20/61] neovim-node-client: fix build on exotic platforms

---
 pkgs/by-name/ne/neovim-node-client/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/ne/neovim-node-client/package.nix b/pkgs/by-name/ne/neovim-node-client/package.nix
index 0a1ba9a98d14..3afc39d7c1aa 100644
--- a/pkgs/by-name/ne/neovim-node-client/package.nix
+++ b/pkgs/by-name/ne/neovim-node-client/package.nix
@@ -23,6 +23,10 @@ buildNpmPackage rec {
     hash = "sha256-Vl6VPcwDrYAC4HWeY+6eWPl/2+Mw6fkScS5fsrLlWxw=";
   };
 
+  # Prevent unrs-resolver's postinstall script from running,
+  # which tries to download binaries on exotic platforms and fails
+  npmRebuildFlags = [ "--ignore-scripts" ];
+
   buildPhase = ''
     runHook preBuild
     npm run build

From b7d9b10dcb04c0548d93d0700aade26bb18c436d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 00:44:30 +0000
Subject: [PATCH 21/61] certigo: 1.18.0 -> 1.18.1

---
 pkgs/by-name/ce/certigo/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ce/certigo/package.nix b/pkgs/by-name/ce/certigo/package.nix
index 8b48559cb5be..3a7b8f1a542e 100644
--- a/pkgs/by-name/ce/certigo/package.nix
+++ b/pkgs/by-name/ce/certigo/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "certigo";
-  version = "1.18.0";
+  version = "1.18.1";
 
   src = fetchFromGitHub {
     owner = "square";
     repo = "certigo";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-U+VbtY34lxLBHWI1BjkPxzSS6q41R9DQkGvDvSDX9WY=";
+    sha256 = "sha256-Y2m+uO/jxwWdutry859Y6IdNJpXjjkrlJ+LJrjS616Y=";
   };
 
-  vendorHash = "sha256-5DpgOb0YxZ/os23y+siCB73dUwutxXIW5RlCZqdbxao=";
+  vendorHash = "sha256-u10YSa2xFswJk/2iC7eyfQ51oTaa30/6JA5aLk5021k=";
 
   meta = {
     description = "Utility to examine and validate certificates in a variety of formats";

From 2eaf524993f9e2635e9448f84cc2e4fe54ec5c62 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 00:49:06 +0000
Subject: [PATCH 22/61] mpich: 5.0.1 -> 5.0.2

---
 pkgs/development/libraries/mpich/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/mpich/default.nix b/pkgs/development/libraries/mpich/default.nix
index 88f5673a4494..2cc3c4b360e2 100644
--- a/pkgs/development/libraries/mpich/default.nix
+++ b/pkgs/development/libraries/mpich/default.nix
@@ -46,11 +46,11 @@ assert (ch4backend.pname == "ucx" || ch4backend.pname == "libfabric");
 
 stdenv.mkDerivation rec {
   pname = "mpich";
-  version = "5.0.1";
+  version = "5.0.2";
 
   src = fetchurl {
     url = "https://www.mpich.org/static/downloads/${version}/mpich-${version}.tar.gz";
-    hash = "sha256-jBgyoT3azwcWhQafX639Hyh3op4aYoZSiSxlIRsfMyc=";
+    hash = "sha256-kowvGNNQqRRD/oAkrQHOLGAJ6cVR4Kc+eX/FZ/EZE30=";
   };
 
   patches = [

From 7041ceb0fea353fa57df8dd6afa4aa49f97ef30d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 01:27:24 +0000
Subject: [PATCH 23/61] compress-pptx: 1.3.1 -> 1.3.3

---
 pkgs/by-name/co/compress-pptx/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/co/compress-pptx/package.nix b/pkgs/by-name/co/compress-pptx/package.nix
index de14932e44a8..603c87380094 100644
--- a/pkgs/by-name/co/compress-pptx/package.nix
+++ b/pkgs/by-name/co/compress-pptx/package.nix
@@ -11,14 +11,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "compress-pptx";
-  version = "1.3.1";
+  version = "1.3.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "slhck";
     repo = "compress-pptx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+67EdAEWsRY11Pkie6AOz7Sl7MSTMGxZoQYS+M2x07Y=";
+    hash = "sha256-DTN/R8ioSp63txLB4ac8P0k3CXQN1ikr9qgYeP2dQSM=";
   };
 
   patches = [

From db6c7c764dc1a0abd94f8ef3155db4325ad109fc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 02:09:35 +0000
Subject: [PATCH 24/61] greenmask: 0.2.23 -> 0.2.24

---
 pkgs/by-name/gr/greenmask/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gr/greenmask/package.nix b/pkgs/by-name/gr/greenmask/package.nix
index 4612afc48551..af6c65f50846 100644
--- a/pkgs/by-name/gr/greenmask/package.nix
+++ b/pkgs/by-name/gr/greenmask/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "greenmask";
-  version = "0.2.23";
+  version = "0.2.24";
 
   src = fetchFromGitHub {
     owner = "GreenmaskIO";
     repo = "greenmask";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3ZY0Bj8Lest1CuyElR+Vh4+OVolcfXgvw0Xq/Wdjemg=";
+    hash = "sha256-nzhsbMQUSNW7iYsPYmhjELmjgq+2Vaa9vDmiMp2iEXg=";
   };
 
   vendorHash = "sha256-OelcviMjEEJAIYzCgGFj6uJB+GTnkf1rxqjtz8ppHjs=";

From e7da0713cd97ec7f64cc47db793188339941f0eb Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 02:27:38 +0000
Subject: [PATCH 25/61] libsecretspec-resolver: 0.21.0 -> 0.21.1

---
 pkgs/by-name/li/libsecretspec-resolver/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libsecretspec-resolver/package.nix b/pkgs/by-name/li/libsecretspec-resolver/package.nix
index 58096b372347..17526ed556c1 100644
--- a/pkgs/by-name/li/libsecretspec-resolver/package.nix
+++ b/pkgs/by-name/li/libsecretspec-resolver/package.nix
@@ -11,7 +11,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libsecretspec-resolver";
-  version = "0.21.0";
+  version = "0.21.1";
   strictDeps = true;
   __structuredAttrs = true;
 
@@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "cachix";
     repo = "secretspec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-12jIhLZhtyQwkt2vKHqjGOuKSwwevcxzp8Ii02RTMLY=";
+    hash = "sha256-8OC1WS8VWTSwUJlT/qWx9CCPmO90G2OWJxEKZGUgXqM=";
   };
 
   cmakeDir = "../libsecretspec-resolver";

From c38a75eaa87ee1a0f0c534d2a45cdfabdd2863ed Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 02:42:56 +0000
Subject: [PATCH 26/61] libsecretspec: 0.21.0 -> 0.21.1

---
 pkgs/by-name/li/libsecretspec/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/libsecretspec/package.nix b/pkgs/by-name/li/libsecretspec/package.nix
index bd9c639e718d..c939dd26415b 100644
--- a/pkgs/by-name/li/libsecretspec/package.nix
+++ b/pkgs/by-name/li/libsecretspec/package.nix
@@ -13,17 +13,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "libsecretspec";
-  version = "0.21.0";
+  version = "0.21.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "cachix";
     repo = "secretspec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-12jIhLZhtyQwkt2vKHqjGOuKSwwevcxzp8Ii02RTMLY=";
+    hash = "sha256-8OC1WS8VWTSwUJlT/qWx9CCPmO90G2OWJxEKZGUgXqM=";
   };
 
-  cargoHash = "sha256-yqBAhnHBwKbSyH8sEDo6y0xGUdKJgHd3Gsr1sTS/bRc=";
+  cargoHash = "sha256-48k3UKeT8qjRRLrf5yqmxULIynD6FgXiW063VEoTqmU=";
 
   nativeBuildInputs = [ cargo-c ];
 

From 5fdba066b928df369e5727c14c70e5ed98a424b5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 03:19:41 +0000
Subject: [PATCH 27/61] spruce: 1.35.19 -> 1.35.20

---
 pkgs/by-name/sp/spruce/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sp/spruce/package.nix b/pkgs/by-name/sp/spruce/package.nix
index 0344cc2f70ee..0ec96e387526 100644
--- a/pkgs/by-name/sp/spruce/package.nix
+++ b/pkgs/by-name/sp/spruce/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "spruce";
-  version = "1.35.19";
+  version = "1.35.20";
 
   src = fetchFromGitHub {
     owner = "geofffranks";
     repo = "spruce";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-wlquuVTVXnlo3fWLVxUn6jkxNoiKskY/Nt2/0aBE68s=";
+    hash = "sha256-kuJE25P0Jz2dL13V/1ohKIWrUB3meO/lv/llQR499Eg=";
   };
 
   vendorHash = null;

From 74ec0e5b5e36fab6b48dd4fc346b0233120d69aa Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 04:53:36 +0000
Subject: [PATCH 28/61] tail-tray: 0.2.34 -> 0.2.35

---
 pkgs/by-name/ta/tail-tray/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ta/tail-tray/package.nix b/pkgs/by-name/ta/tail-tray/package.nix
index 0baba5fbc0c8..472a3d964333 100644
--- a/pkgs/by-name/ta/tail-tray/package.nix
+++ b/pkgs/by-name/ta/tail-tray/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tail-tray";
-  version = "0.2.34";
+  version = "0.2.35";
 
   src = fetchFromGitHub {
     owner = "SneWs";
     repo = "tail-tray";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dKDEi5tGbhreCu1KdVxZB5ZdGX94+b8J0QgpbSpyixY=";
+    hash = "sha256-iv4uWeF3fHnuaqt1TWOT8rPeO5jG2a22ZzK+X+KJF90=";
   };
 
   nativeBuildInputs = with kdePackages; [

From 9333bfca11b8021294a1324568eeb3a7bda09649 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 05:24:38 +0000
Subject: [PATCH 29/61] tbls: 1.96.0 -> 1.96.1

---
 pkgs/by-name/tb/tbls/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/tb/tbls/package.nix b/pkgs/by-name/tb/tbls/package.nix
index 53f633a71b3d..f3e664cdc1fe 100644
--- a/pkgs/by-name/tb/tbls/package.nix
+++ b/pkgs/by-name/tb/tbls/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "tbls";
-  version = "1.96.0";
+  version = "1.96.1";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "tbls";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-API/Zz1PQRpKs7pU244VEZ2PlRcNR6EGI1LXSAcNDac=";
+    hash = "sha256-FOjl35IBnklln9BYpoLUnq/uRYnAXZ9CH0aLnFtdb78=";
   };
 
-  vendorHash = "sha256-v+0xdoIdBSW9Nn5CL/tmQkJsMcdINFvisO6siKgmIWk=";
+  vendorHash = "sha256-4cQYUwxwgj0iDUFfNdT6P2E63Jfsxeg2BZCdo8cJnng=";
 
   excludedPackages = [ "scripts/jsonschema" ];
 

From f616b05bbedb2cbf40ebb5a462770aae8733807f Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 27 Sep 2026 11:56:25 +1000
Subject: [PATCH 30/61] nixos/telegraf: add package maintainers

the current test maintainer also maintains the package
---
 nixos/modules/services/monitoring/telegraf.nix | 4 ++++
 nixos/tests/telegraf.nix                       | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/services/monitoring/telegraf.nix b/nixos/modules/services/monitoring/telegraf.nix
index bcdd2ece5718..8ad6830f2a60 100644
--- a/nixos/modules/services/monitoring/telegraf.nix
+++ b/nixos/modules/services/monitoring/telegraf.nix
@@ -11,6 +11,10 @@ let
   configFile = settingsFormat.generate "config.toml" cfg.extraConfig;
 in
 {
+  meta = {
+    inherit (pkgs.telegraf.meta) maintainers;
+  };
+
   ###### interface
   options = {
     services.telegraf = {
diff --git a/nixos/tests/telegraf.nix b/nixos/tests/telegraf.nix
index 68abd2f5f158..36bee01c98e3 100644
--- a/nixos/tests/telegraf.nix
+++ b/nixos/tests/telegraf.nix
@@ -1,8 +1,8 @@
 { pkgs, ... }:
 {
   name = "telegraf";
-  meta = with pkgs.lib.maintainers; {
-    maintainers = [ mic92 ];
+  meta = {
+    inherit (pkgs.telegraf.meta) maintainers;
   };
 
   containers.machine =

From 523a21fc24195c7706a39fa881b50e7be597cfb3 Mon Sep 17 00:00:00 2001
From: Pol Dellaiera <pol.dellaiera@protonmail.com>
Date: Tue, 29 Sep 2026 08:08:09 +0200
Subject: [PATCH 31/61] tgrep: fix darwin build

---
 pkgs/by-name/tg/tgrep/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/tg/tgrep/package.nix b/pkgs/by-name/tg/tgrep/package.nix
index 5c4d6de13c75..620b9adf463a 100644
--- a/pkgs/by-name/tg/tgrep/package.nix
+++ b/pkgs/by-name/tg/tgrep/package.nix
@@ -44,6 +44,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=watcher_indexes_files_in_directories_created_after_startup"
     "--skip=watcher_reconciles_forced_add_and_rm_cached_inside_an_ignored_tree"
     "--skip=native_watcher_tracks_hidden_updates_ignore_transitions_and_restart"
+    "--skip=git_metadata_stays_out_of_native_and_persisted_indexes"
   ];
 
   passthru.updateScript = nix-update-script { };

From 58737ced61fa5bc8cf55a8824027f57878d94f76 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:33:08 +0200
Subject: [PATCH 32/61] fluere: init at 0.8.1

Tool designed for network monitoring and analysis

https://github.com/SkuldNorniern/fluere
---
 pkgs/by-name/fl/fluere/package.nix | 58 ++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 pkgs/by-name/fl/fluere/package.nix

diff --git a/pkgs/by-name/fl/fluere/package.nix b/pkgs/by-name/fl/fluere/package.nix
new file mode 100644
index 000000000000..3798ca47a063
--- /dev/null
+++ b/pkgs/by-name/fl/fluere/package.nix
@@ -0,0 +1,58 @@
+{
+  lib,
+  fetchFromGitHub,
+  libgit2,
+  libpcap,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+  zlib,
+  zstd,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "fluere";
+  version = "0.8.1";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "SkuldNorniern";
+    repo = "fluere";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-311VCO+8xoWblt6zBOLd+7xmmBO7sE0KeUKO1Qwg9SI=";
+  };
+
+  cargoHash = "sha256-nMh4hO9kHCpE/+K1DNZT3UYe0iGUU6HRZUg00T6f+CM=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    libgit2
+    libpcap
+    openssl
+    zlib
+    zstd
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  env = {
+    LIBGIT2_NO_VENDOR = true;
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool designed for network monitoring and analysis";
+    homepage = "https://github.com/SkuldNorniern/fluere";
+    changelog = "https://github.com/SkuldNorniern/fluere/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "fluere";
+  };
+})

From e8a3ab709fd135cd45c9e1cd36b3b5997f2c11c8 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:35:21 +0200
Subject: [PATCH 33/61] python3Packages.tencentcloud-sdk-python: 3.1.182 ->
 3.1.183

Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/3.1.182...3.1.183

Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.1.183/CHANGELOG.md
---
 .../python-modules/tencentcloud-sdk-python/default.nix        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
index dd3ad10c813b..505821eb1a1e 100644
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.182";
+  version = "3.1.183";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = finalAttrs.version;
-    hash = "sha256-eLB77nZKECb4nDLQHYu0JtFjE15I6pPp8k4Ois7UN50=";
+    hash = "sha256-peCCsqmUG+mYes18wpzLB0DhTVqtG3t6S+W6sMkkYeM=";
   };
 
   build-system = [ setuptools ];

From d5b6bfadaa33bd941c31c9a6ae4fec7041420e78 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:09 +0200
Subject: [PATCH 34/61] python3Packages.mypy-boto3-connect: 1.43.103 ->
 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index da325f716712..e118a0775226 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -335,8 +335,8 @@ in
       "sha256-3JYcWKFk0dKJg/qn+EBvxeAO5xh5PXCU3dTEWDr1oXI=";
 
   mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.43.103"
-      "sha256-YTuqPk2igTabqCfBYBY9HEVXDwTk4V2I/rZftoacGEA=";
+    buildMypyBoto3Package "connect" "1.43.104"
+      "sha256-R/TX5Uy1ovNtkmBVX+qXAfjeYB/z/f5YMQ+gIlqujC8=";
 
   mypy-boto3-connect-contact-lens =
     buildMypyBoto3Package "connect-contact-lens" "1.43.79"

From aeba6d5487bc6b08bb0b70b44a24c8352e46549e Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:18 +0200
Subject: [PATCH 35/61] python3Packages.mypy-boto3-ec2: 1.43.100 -> 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index e118a0775226..3e9b8f054209 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -443,8 +443,8 @@ in
       "sha256-dXNkOcMonYrBh4yzeubd+v3mW42s9XpmpfvgbtgoJgY=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.43.100"
-      "sha256-DABqoQz7/al+1GnoP8EjE3Gv2DhKIc2/jYFpBhnA8Ac=";
+    buildMypyBoto3Package "ec2" "1.43.104"
+      "sha256-UnX0kzhTGa7YoOBfAfQDPGUz5A68QcIvN8we3dwpaHo=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.43.0"

From 8105afd6bc42574d98986b66c1b1e98165ed7df9 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:20 +0200
Subject: [PATCH 36/61] python3Packages.mypy-boto3-eks: 1.43.88 -> 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 3e9b8f054209..5232ea4affb0 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -467,8 +467,8 @@ in
       "sha256-11KpPRxGId76g/I4jXwMQ55kwGEQVsasgvMUXsiLbM4=";
 
   mypy-boto3-eks =
-    buildMypyBoto3Package "eks" "1.43.88"
-      "sha256-SqRuidD6RQLjGow/AXhpvYiM5+tkBBDBT6F9nAhHs6I=";
+    buildMypyBoto3Package "eks" "1.43.104"
+      "sha256-4gkAjSwpfK+HNPfUOxPS2wQIXtHhi2fmIuWQL+ndPBM=";
 
   mypy-boto3-elastic-inference =
     buildMypyBoto3Package "elastic-inference" "1.36.0"

From cc2a43ceead70ec94a32857361d1cc986bd6b2d0 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:27 +0200
Subject: [PATCH 37/61] python3Packages.mypy-boto3-fsx: 1.43.0 -> 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 5232ea4affb0..525e5f6937c3 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -555,8 +555,8 @@ in
       "sha256-C7V/8x9FgRwUaudSDWK9+VdHoR0Xcc8l4W5KzFTKzDk=";
 
   mypy-boto3-fsx =
-    buildMypyBoto3Package "fsx" "1.43.0"
-      "sha256-4roB3AEdN4zXGceUNkrmarmTThmPbS9SltvHG6kF+84=";
+    buildMypyBoto3Package "fsx" "1.43.104"
+      "sha256-FSdU6KXKHsoHGiMWHkf5PhuYMOyzZ2ldWfQkFr1rOr4=";
 
   mypy-boto3-gamelift =
     buildMypyBoto3Package "gamelift" "1.43.66"

From a96b9d4ba97e136a929da0da26897744e443f9a1 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:30 +0200
Subject: [PATCH 38/61] python3Packages.mypy-boto3-glue: 1.43.103 -> 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 525e5f6937c3..4a9365948b82 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -571,8 +571,8 @@ in
       "sha256-vMz4YKm78XMavlPUNiSVAYmAbyUBrJhUXbFrhxIvUJA=";
 
   mypy-boto3-glue =
-    buildMypyBoto3Package "glue" "1.43.103"
-      "sha256-W7dNtzxPbQ0MGXAnnO0U92YNokwfveIAYm27ftgpH/Y=";
+    buildMypyBoto3Package "glue" "1.43.104"
+      "sha256-hcNGgpHqSt3oStW1K3q4blmrMUWJirbXuBgvcAao9yQ=";
   mypy-boto3-grafana =
     buildMypyBoto3Package "grafana" "1.43.11"
       "sha256-XJOSLyL1+uEweZ9zER7IhH3DFLaLtpJKvuRIn8Ri+P4=";

From 8d6866c44b432fa7beda22f267d195949dd9dc37 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:36:32 +0200
Subject: [PATCH 39/61] python3Packages.mypy-boto3-guardduty: 1.43.97 ->
 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 4a9365948b82..1712d36315cb 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -590,8 +590,8 @@ in
       "sha256-+DDeD9YWo98meLZU2Mzu5AE0S7HFg6kfxeUWUh9XcQA=";
 
   mypy-boto3-guardduty =
-    buildMypyBoto3Package "guardduty" "1.43.97"
-      "sha256-USNbCGnD5BF9gsG6vqytRxO+kR6kEI+yIX569syS6Yw=";
+    buildMypyBoto3Package "guardduty" "1.43.104"
+      "sha256-TDkTHKBpQKWaoh7hUH/e+j2ti7SUPcIbDWrM5DKhBv4=";
 
   mypy-boto3-health =
     buildMypyBoto3Package "health" "1.43.0"

From c4a15f6e34fc0aebc6fc920281c04e68488c465b Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:37:21 +0200
Subject: [PATCH 40/61] python3Packages.mypy-boto3-ssm: 1.43.53 -> 1.43.104

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 1712d36315cb..552727dd6bd8 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1290,8 +1290,8 @@ in
       "sha256-Psjh5lHoMK/89/4VGy4wkLjqmNc8sGkFOwnKTH9MhjY=";
 
   mypy-boto3-ssm =
-    buildMypyBoto3Package "ssm" "1.43.53"
-      "sha256-8govEDWg1YthZHxvXIg+BYFSrNzNipfn0ZFkdtyOfHs=";
+    buildMypyBoto3Package "ssm" "1.43.104"
+      "sha256-Gx4Ydi5rnOr3NegWWm29eJsQ2U9W9wTvAQ0Mi77wWcw=";
 
   mypy-boto3-ssm-contacts =
     buildMypyBoto3Package "ssm-contacts" "1.43.0"

From b2ed47c8f3ea3f640d7087a6e78aa74dd8ef7c51 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 08:37:36 +0200
Subject: [PATCH 41/61] python3Packages.boto3-stubs: 1.43.103 -> 1.43.104

---
 pkgs/development/python-modules/boto3-stubs/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index 88ff2d140bed..2ec630790f7d 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.43.103";
+  version = "1.43.104";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-dvmbE8or8t09z8a0b78FGp2g7D+gzOrfwygjN1DioeA=";
+    hash = "sha256-0Yg+1KeCgrBy43vwjEz7qLIgyP6xNxaB6zU5mxiREaM=";
   };
 
   build-system = [ setuptools ];

From c55105caf67c78298a720bd9339cc173d5f80207 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 09:04:53 +0200
Subject: [PATCH 42/61] agentsploit: enable darwin support

---
 pkgs/by-name/ag/agentsploit/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/ag/agentsploit/package.nix b/pkgs/by-name/ag/agentsploit/package.nix
index c4bdc75cd5ea..07a01380434c 100644
--- a/pkgs/by-name/ag/agentsploit/package.nix
+++ b/pkgs/by-name/ag/agentsploit/package.nix
@@ -63,6 +63,8 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   passthru.updateScript = nix-update-script { };
 
+  __darwinAllowLocalNetworking = true;
+
   meta = {
     description = "Offensive security framework for AI agents and MCP servers";
     homepage = "https://github.com/agentsploit/agentsploit";

From c3e8d920912faa1d04c3034b774b7373095fa1a6 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 07:08:17 +0000
Subject: [PATCH 43/61] python3Packages.jupyter-server-ydoc: 3.0.3 -> 3.0.4

---
 .../python-modules/jupyter-server-ydoc/default.nix            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/jupyter-server-ydoc/default.nix b/pkgs/development/python-modules/jupyter-server-ydoc/default.nix
index 59ff7bc1f8a9..82001c4abf1b 100644
--- a/pkgs/development/python-modules/jupyter-server-ydoc/default.nix
+++ b/pkgs/development/python-modules/jupyter-server-ydoc/default.nix
@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "jupyter-server-ydoc";
-  version = "3.0.3";
+  version = "3.0.4";
   pyproject = true;
   __structuredAttrs = true;
 
   src = fetchPypi {
     pname = "jupyter_server_ydoc";
     inherit (finalAttrs) version;
-    hash = "sha256-ndjyC6jrkZu0wPWIMkPb4iCXJqtLfMgpM1xQWv6/nFw=";
+    hash = "sha256-8ATHnGxKzgPt/5F2u4aV+WmWYJzToCxNAZeQWikyM4c=";
   };
 
   build-system = [ hatchling ];

From b9ead1a281f07f02dd1d182b1afcfdd012e8b930 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 07:48:56 +0000
Subject: [PATCH 44/61] kubescape: 4.0.14 -> 4.0.15

---
 pkgs/by-name/ku/kubescape/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ku/kubescape/package.nix b/pkgs/by-name/ku/kubescape/package.nix
index 0a64714095a9..33e30bb943bb 100644
--- a/pkgs/by-name/ku/kubescape/package.nix
+++ b/pkgs/by-name/ku/kubescape/package.nix
@@ -9,18 +9,18 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "kubescape";
-  version = "4.0.14";
+  version = "4.0.15";
 
   src = fetchFromGitHub {
     owner = "kubescape";
     repo = "kubescape";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QdWnwjvXsABcTsf+xzIYZ7GgwukzvyPQOppm7SDCK64=";
+    hash = "sha256-4WQvIdUPkiN4buqFDJRzY2CHe6EfJcOv1tT2/IETilE=";
     fetchSubmodules = true;
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-y0iwBSUVh2pBEaiS1cGmW7F0/geGDuSdSHMmvhW5c9o=";
+  vendorHash = "sha256-dpci0KYQBuUTgGdQ95rQqahX4TtkycJ3ZcEmQXrCLu0=";
 
   subPackages = [ "." ];
 

From bcd0baf5f44eb0e37a1428c65235415dd12058ca Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 07:53:53 +0000
Subject: [PATCH 45/61] klipper: 0.13.0-unstable-2026-08-18 ->
 0.13.0-unstable-2026-09-28

---
 pkgs/servers/klipper/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/klipper/default.nix b/pkgs/servers/klipper/default.nix
index f7dc705d40bd..4d1d1359483b 100644
--- a/pkgs/servers/klipper/default.nix
+++ b/pkgs/servers/klipper/default.nix
@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "klipper";
-  version = "0.13.0-unstable-2026-08-18";
+  version = "0.13.0-unstable-2026-09-28";
 
   src = fetchFromGitHub {
     owner = "Klipper3d";
     repo = "klipper";
-    rev = "60fc7aa67a8da9abb43a2bad825d4992294ebf3f";
-    sha256 = "sha256-qs60qBwlD7A0xneNzeNcKfWc8II5rG2oj+tvuhn/aWw=";
+    rev = "7bc4d09465d31cd30fc0822e8d0abe02cc8c547f";
+    sha256 = "sha256-DcRYuS2pxM3clbmk93GZhWAFjwoDVF7ZqNBTq2fm8x0=";
   };
 
   sourceRoot = "${src.name}/klippy";

From bc0757789c775ef6b42285e5827a395204fcc58e Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 10:00:41 +0200
Subject: [PATCH 46/61] zond: 0-unstable-2026-09-11 -> 0.18.0

Diff: https://github.com/zond-rs/zond/compare/v0-unstable-2026-09-11...v0.18.0

Changelog: https://github.com/zond-rs/zond/releases/tag/v0.18.0
---
 pkgs/by-name/zo/zond/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/zo/zond/package.nix b/pkgs/by-name/zo/zond/package.nix
index 0e0f2b9c5c30..658402bceb4b 100644
--- a/pkgs/by-name/zo/zond/package.nix
+++ b/pkgs/by-name/zo/zond/package.nix
@@ -10,18 +10,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zond";
-  version = "0-unstable-2026-09-11";
+  version = "0.18.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "zond-rs";
     repo = "zond";
-    # https://github.com/zond-rs/zond/issues/1
-    rev = "12bcb6181f10f27ba939aa0ebe39d3f05077758b";
-    hash = "sha256-UUby3GNU5ttyJuybw9wVpreQxcfYkOQD22j6kLgJWao=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-onWvfTPc7GBH/mN5HPz5mIAOJFUi2l45Z2dXD0ea1xg=";
   };
 
-  cargoHash = "sha256-MO+bYGHZQi0g4d+Mhz7+tF6ZxYDetL2rTievNeJkvQY=";
+  cargoHash = "sha256-V2+7//z64mKODelryd2SEWJLrQoxPsNOT6vFBV1Yl7c=";
 
   nativeBuildInputs = [ pkg-config ];
 
@@ -42,6 +41,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   meta = {
     description = "CLI for Zond Engine";
     homepage = "https://github.com/zond-rs/zond";
+    changelog = "https://github.com/zond-rs/zond/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.agpl3Only;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "zond";

From e15cc85a76e162fe712ca1590d992ccebd2f6b4a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 10:08:47 +0200
Subject: [PATCH 47/61] turso-cli: 1.0.31 -> 1.0.32

Diff: https://github.com/tursodatabase/turso-cli/compare/v1.0.31...v1.0.32

Changelog: https://github.com/tursodatabase/turso-cli/releases/tag/v1.0.32
---
 pkgs/by-name/tu/turso-cli/package.nix | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/tu/turso-cli/package.nix b/pkgs/by-name/tu/turso-cli/package.nix
index 33ae80e60c9b..d9daac2d337c 100644
--- a/pkgs/by-name/tu/turso-cli/package.nix
+++ b/pkgs/by-name/tu/turso-cli/package.nix
@@ -4,13 +4,14 @@
   buildGoModule,
   fetchFromGitHub,
   installShellFiles,
-  writableTmpDirAsHomeHook,
-  versionCheckHook,
   nix-update-script,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
 }:
+
 buildGoModule (finalAttrs: {
   pname = "turso-cli";
-  version = "1.0.31";
+  version = "1.0.32";
 
   __structuredAttrs = true;
 
@@ -18,16 +19,16 @@ buildGoModule (finalAttrs: {
     owner = "tursodatabase";
     repo = "turso-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-B1sm1RBJneSoNYUrXTXMzB7n+UAmn6RlFtV1BZpOdZM=";
+    hash = "sha256-hRmDoyj6rdqB+P0nAS+Xxg/6gUjxJm3qetiSGn+Nuaw=";
   };
 
-  vendorHash = "sha256-4OIJVL3N2mWOw7ZDP4xFCxa9zmUTPCA8N79TVoi1lys=";
+  vendorHash = "sha256-wutbVEWWoTdgwtG6IXgCYEGn/rdmaPbLGcFeCTS2VNE=";
 
   nativeBuildInputs = [ installShellFiles ];
 
   ldflags = [
     "-s"
-    "-X github.com/tursodatabase/turso-cli/internal/cmd.version=v${finalAttrs.version}"
+    "-X=github.com/tursodatabase/turso-cli/internal/cmd.version=v${finalAttrs.version}"
   ];
 
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
@@ -40,13 +41,15 @@ buildGoModule (finalAttrs: {
   '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
+
   doInstallCheck = true;
 
   passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "CLI for Turso";
-    homepage = "https://turso.tech";
+    homepage = "https://github.com/tursodatabase/turso-cli";
+    changelog = "https://github.com/tursodatabase/turso-cli/releases/tag/${finalAttrs.src.tag}";
     mainProgram = "turso";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [

From e58c9bb7ed9ca5f80a7ba021d99ac241a9736dc0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 08:14:07 +0000
Subject: [PATCH 48/61] python3Packages.twilio: 9.11.1 -> 9.11.2

---
 pkgs/development/python-modules/twilio/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/twilio/default.nix b/pkgs/development/python-modules/twilio/default.nix
index d58dc1581647..c9ca0849c5e7 100644
--- a/pkgs/development/python-modules/twilio/default.nix
+++ b/pkgs/development/python-modules/twilio/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "twilio";
-  version = "9.11.1";
+  version = "9.11.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "twilio";
     repo = "twilio-python";
     tag = finalAttrs.version;
-    hash = "sha256-GS8Okhxd2T9BG9bFh6uZY4zPmHDYT++wpYq4A2sy1ek=";
+    hash = "sha256-RbamHPCGYGZgkipYf8Wz0D7cOB7AsGhxPRJC/BXR1qE=";
   };
 
   # https://github.com/twilio/twilio-python/pull/919

From 6789422ac6cd9f031ad3ea6d8de2256ce7b93c45 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Domen=20Ko=C5=BEar?= <domen@cachix.org>
Date: Fri, 25 Sep 2026 15:00:07 +0200
Subject: [PATCH 49/61] agentaps: init at 0.3.1

Package the v0.3.1 release and include the upstream --version flag so the installed binary can be checked with versionCheckHook.

Release notes: https://github.com/domenkozar/agentaps/blob/v0.3.1/CHANGELOG.md

Assisted-by: Codex (GPT-6)
---
 pkgs/by-name/ag/agentaps/package.nix | 89 ++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 pkgs/by-name/ag/agentaps/package.nix

diff --git a/pkgs/by-name/ag/agentaps/package.nix b/pkgs/by-name/ag/agentaps/package.nix
new file mode 100644
index 000000000000..e7f88d07a8c3
--- /dev/null
+++ b/pkgs/by-name/ag/agentaps/package.nix
@@ -0,0 +1,89 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  fetchpatch,
+  git,
+  pkg-config,
+  makeWrapper,
+  versionCheckHook,
+  fontconfig,
+  freetype,
+  libGL,
+  libxcb,
+  libxkbcommon,
+  vulkan-loader,
+  wayland,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "agentaps";
+  version = "0.3.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "domenkozar";
+    repo = "agentaps";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pHESE5ML5zeDylz07t8k1jJop/IGyIhTTffPN4dWrY0=";
+  };
+
+  cargoHash = "sha256-ko+ytnpQGLIA41+aurIcY5Rp0Aemf7Z4PFC5GdLFLvw=";
+
+  patches = [
+    # Add --version support until the next release.
+    (fetchpatch {
+      url = "https://github.com/domenkozar/agentaps/commit/1665c2792929226d675d427e0eef42cd3ede7a71.patch";
+      hash = "sha256-+wL5G6Ln9uuWxt2fRW2QPbD54Zif51hGxcNAC3Q3f84=";
+      includes = [ "src/main.rs" ];
+    })
+  ];
+
+  nativeBuildInputs = [
+    makeWrapper
+    pkg-config
+  ];
+
+  buildInputs = [
+    fontconfig
+    freetype
+    libGL
+    libxcb
+    libxkbcommon
+    vulkan-loader
+    wayland
+  ];
+
+  nativeCheckInputs = [ git ];
+
+  # The login shell test requires /bin/sh and /usr/bin/env, which are absent in the sandbox.
+  checkFlags = [ "--skip=shell_env::tests::reads_path_from_a_login_shell" ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  postFixup = ''
+    wrapProgram "$out/bin/agentaps" \
+      --suffix LD_LIBRARY_PATH : "${
+        lib.makeLibraryPath [
+          libGL
+          libxcb
+          libxkbcommon
+          vulkan-loader
+          wayland
+        ]
+      }"
+  '';
+
+  meta = {
+    description = "Desktop client for Agent Client Protocol agents";
+    homepage = "https://github.com/domenkozar/agentaps";
+    changelog = "https://github.com/domenkozar/agentaps/blob/v${finalAttrs.version}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    mainProgram = "agentaps";
+    maintainers = with lib.maintainers; [ domenkozar ];
+    platforms = lib.platforms.linux;
+  };
+})

From 2eafa6957a29a53249b658f43d49975f78780591 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Tue, 29 Sep 2026 10:22:39 +0200
Subject: [PATCH 50/61] certigo: modernize

- add changelog to meta
---
 pkgs/by-name/ce/certigo/package.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ce/certigo/package.nix b/pkgs/by-name/ce/certigo/package.nix
index 3a7b8f1a542e..e935b739957f 100644
--- a/pkgs/by-name/ce/certigo/package.nix
+++ b/pkgs/by-name/ce/certigo/package.nix
@@ -11,8 +11,8 @@ buildGoModule (finalAttrs: {
   src = fetchFromGitHub {
     owner = "square";
     repo = "certigo";
-    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-Y2m+uO/jxwWdutry859Y6IdNJpXjjkrlJ+LJrjS616Y=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Y2m+uO/jxwWdutry859Y6IdNJpXjjkrlJ+LJrjS616Y=";
   };
 
   vendorHash = "sha256-u10YSa2xFswJk/2iC7eyfQ51oTaa30/6JA5aLk5021k=";
@@ -20,6 +20,7 @@ buildGoModule (finalAttrs: {
   meta = {
     description = "Utility to examine and validate certificates in a variety of formats";
     homepage = "https://github.com/square/certigo";
+    changelog = "https://github.com/square/certigo/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = [ ];
     mainProgram = "certigo";

From 6e950e8b600222cababef2bda65f858d6cffd3de Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 08:41:44 +0000
Subject: [PATCH 51/61] surge-downloader: 0.12.1 -> 0.12.2

---
 pkgs/by-name/su/surge-downloader/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/su/surge-downloader/package.nix b/pkgs/by-name/su/surge-downloader/package.nix
index d67ee52f40d4..30162cfe1493 100644
--- a/pkgs/by-name/su/surge-downloader/package.nix
+++ b/pkgs/by-name/su/surge-downloader/package.nix
@@ -8,16 +8,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "surge-downloader";
-  version = "0.12.1";
+  version = "0.12.2";
 
   src = fetchFromGitHub {
     owner = "SurgeDM";
     repo = "Surge";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cUJwt4gRdlQvMnrEvYG7JZe/2oz4cN9k35TEur13Sks=";
+    hash = "sha256-LojzHquVeXAI8/k5qYSdGExWw/Y6sgVRNjNagRot5gY=";
   };
 
-  vendorHash = "sha256-Ei2i7dQ9s42Gg6f2iLABbTG7OQspjHoRnqIhkfcNvFo=";
+  vendorHash = "sha256-Z1eNKci0MzXvKs49kOEYXr/JEO7AJB9kHdFTyNbxkw4=";
 
   subPackages = [ "." ];
 

From 723c8c78517bf0ba61808baaf5567cd5fcb7786c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 22 Aug 2026 04:30:04 +0000
Subject: [PATCH 52/61] python3Packages.sigima: 1.1.6 -> 1.2.0

---
 pkgs/development/python-modules/sigima/default.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/sigima/default.nix b/pkgs/development/python-modules/sigima/default.nix
index 3a67da084def..a967ae74198a 100644
--- a/pkgs/development/python-modules/sigima/default.nix
+++ b/pkgs/development/python-modules/sigima/default.nix
@@ -47,15 +47,16 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "sigima";
-  version = "1.1.6";
+  version = "1.2.0";
   pyproject = true;
+  __darwinAllowLocalNetworking = true;
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "DataLab-Platform";
     repo = "Sigima";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Z4U+l2SUqGvKV8+I1/j+OfymmyFKTiBy5Rr6iiz31xY=";
+    hash = "sha256-pKI1xODYR0ZanXEI3r3UhKj2FvrBA8MWVwSpcg+GBls=";
   };
 
   build-system = [

From 8d0be9c005dbe7eb18a584c881a4c1ccb433900b Mon Sep 17 00:00:00 2001
From: Matej Focko <me@mfocko.xyz>
Date: Sun, 1 Feb 2026 19:38:32 +0100
Subject: [PATCH 53/61] maintainers: add mfocko

Signed-off-by: Matej Focko <me@mfocko.xyz>
---
 maintainers/maintainer-list.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 6889b84bbc2e..7609e2402b18 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -18773,6 +18773,13 @@
     github = "mfairley";
     githubId = 4374785;
   };
+  mfocko = {
+    name = "Matej Focko";
+    github = "mfocko";
+    githubId = 8149784;
+    email = "me@mfocko.xyz";
+    matrix = "@mfocko:fedora.im";
+  };
   mfossen = {
     email = "msfossen@gmail.com";
     github = "mfossen";

From 961974268bdd79ef45eeabf59d98a6326ad32a65 Mon Sep 17 00:00:00 2001
From: Matej Focko <me@mfocko.xyz>
Date: Sun, 1 Feb 2026 19:42:10 +0100
Subject: [PATCH 54/61] tft-cli: init at 0.0.38

Signed-off-by: Matej Focko <me@mfocko.xyz>
---
 pkgs/by-name/tf/tft-cli/package.nix | 61 +++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 pkgs/by-name/tf/tft-cli/package.nix

diff --git a/pkgs/by-name/tf/tft-cli/package.nix b/pkgs/by-name/tf/tft-cli/package.nix
new file mode 100644
index 000000000000..d821a0357625
--- /dev/null
+++ b/pkgs/by-name/tf/tft-cli/package.nix
@@ -0,0 +1,61 @@
+{
+  lib,
+  fetchFromGitLab,
+  python3Packages,
+  versionCheckHook,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "tft-cli";
+  version = "0.0.38";
+  pyproject = true;
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitLab {
+    owner = "testing-farm";
+    repo = "cli";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-guoZfFkx9VNXiJy61Cg08G/H4HIcSZ66J+US69SsioM=";
+  };
+
+  build-system = with python3Packages; [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  dependencies = with python3Packages; [
+    click
+    typer
+    dynaconf
+    colorama
+    requests
+    rich
+    ruamel-yaml
+    shellingham
+    pendulum
+    python-dotenv
+    keyring
+    cryptography
+  ];
+
+  pythonImportsCheck = [ "tft" ];
+
+  nativeCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
+  meta = {
+    homepage = "https://testing-farm.io/";
+    changelog = "https://gitlab.com/testing-farm/cli/-/releases/${finalAttrs.src.tag}";
+    description = "Command-line interface for Testing Farm";
+
+    license = lib.licenses.asl20;
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [
+      mfocko
+      thrix
+    ];
+    mainProgram = "testing-farm";
+  };
+})

From 6ab234b2589e3496edee4f6437931cc1e69d9e7a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 09:31:15 +0000
Subject: [PATCH 55/61] terraform-providers.cloudflare_cloudflare: 5.25.0 ->
 5.26.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 37a9c0e5cebc..e8fca64598a8 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -218,13 +218,13 @@
     "vendorHash": "sha256-scHNFyHn4VYm8wtuBdVCpgKCzwPhzrC3KBs1YHXPwos="
   },
   "cloudflare_cloudflare": {
-    "hash": "sha256-F/Qkcu9XHxWrVbGVqWw2/AB1CDcY4hKm5cGDDtnsxP8=",
+    "hash": "sha256-cazO/sszoutiwMYjM709aHNzKIpOzZbB/5nHDEgbm08=",
     "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
     "owner": "cloudflare",
     "repo": "terraform-provider-cloudflare",
-    "rev": "v5.25.0",
+    "rev": "v5.26.0",
     "spdx": "Apache-2.0",
-    "vendorHash": "sha256-FGt4e+WyF5Wx3jw+U+L2kdybOnnAW/AA+mBeVbRQI0Y="
+    "vendorHash": "sha256-9blJRFzwwOcdFAB93C109qqXsh2tYft1bTOldvW0a/Y="
   },
   "cloudfoundry-community_cloudfoundry": {
     "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",

From dac282efe203de7524547343fa33f8e3206bc4ec Mon Sep 17 00:00:00 2001
From: Holiu618 <165534185+Holiu618@users.noreply.github.com>
Date: Tue, 29 Sep 2026 17:42:06 +0800
Subject: [PATCH 56/61] seaweedfs: 4.47 -> 4.48

Diff: https://github.com/seaweedfs/seaweedfs/compare/4.47...4.48
---
 pkgs/by-name/se/seaweedfs/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/se/seaweedfs/package.nix b/pkgs/by-name/se/seaweedfs/package.nix
index 73f6a06105c8..c7831560491c 100644
--- a/pkgs/by-name/se/seaweedfs/package.nix
+++ b/pkgs/by-name/se/seaweedfs/package.nix
@@ -9,7 +9,7 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "seaweedfs";
-  version = "4.47";
+  version = "4.48";
 
   src = fetchFromGitHub {
     owner = "seaweedfs";
@@ -22,10 +22,10 @@ buildGoModule (finalAttrs: {
       find "$out" -name .git -print0 | xargs -0 rm -rf
       popd
     '';
-    hash = "sha256-NEDQos7TF2RsbBLdg6bf1FumIa3KxqrpDFLB0avJpC8=";
+    hash = "sha256-c+VIgtFZTYn0aeBtx6mc9HAyQhJD/ZzQCpvDYUiFjsI=";
   };
 
-  vendorHash = "sha256-xDTcGTiGQdpOdLKvLmMrkiKlkcGdEtE52jWpcC+sOm4=";
+  vendorHash = "sha256-h+M0+RBqYTOUj4ALBxQyAEJkgFnaZrBbptCYqaUJYic=";
 
   nativeBuildInputs = [ installShellFiles ];
 

From 96c8883ed66d28cde39df67c9a83191cfbe30441 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 09:55:47 +0000
Subject: [PATCH 57/61] terminal-space-program: 0.43.0 -> 0.44.3

---
 pkgs/by-name/te/terminal-space-program/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/te/terminal-space-program/package.nix b/pkgs/by-name/te/terminal-space-program/package.nix
index 65749b1aaff8..dd99a9d08c3f 100644
--- a/pkgs/by-name/te/terminal-space-program/package.nix
+++ b/pkgs/by-name/te/terminal-space-program/package.nix
@@ -7,14 +7,14 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "terminal-space-program";
-  version = "0.43.0";
+  version = "0.44.3";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jasonfen";
     repo = "terminal-space-program";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XlPwwQheWkLANeB0cY4giEaxSVoxvkbEntNb69AZha8=";
+    hash = "sha256-GhmPYIdCHuHm9nC7ZZyHYiYIGU2tJOPTY3N9zlr85os=";
   };
 
   vendorHash = "sha256-5bhIP7It6rqOFvXRBUIP6/nGz4X+dzm3/BjVeo3nw4I=";

From 0783578b3f11e2de1308ba8dfea048f9491e4571 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 09:56:29 +0000
Subject: [PATCH 58/61] yara-x: 1.20.0 -> 1.21.0

---
 pkgs/by-name/ya/yara-x/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ya/yara-x/package.nix b/pkgs/by-name/ya/yara-x/package.nix
index fd51b4b8fbfd..ceaf42b33d33 100644
--- a/pkgs/by-name/ya/yara-x/package.nix
+++ b/pkgs/by-name/ya/yara-x/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "yara-x";
-  version = "1.20.0";
+  version = "1.21.0";
 
   src = fetchFromGitHub {
     owner = "VirusTotal";
     repo = "yara-x";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TR9P4QYDxHSpAmPShiRNdNK1c4v3hGAx8mNOEhAo/HQ=";
+    hash = "sha256-OFDNOskhhX0ch0QmIV/2SHrTJUt5pEoJBin8Lu68f+w=";
   };
 
-  cargoHash = "sha256-/D4/H/+O1bCHecEO92aq05U3lPG2P/CFTWVlHekuH98=";
+  cargoHash = "sha256-mvMhxRXSq6IFZaGXn7mwe2XlkyZhgJffUoWruWC6Yj0=";
 
   env = {
     CARGO_PROFILE_RELEASE_LTO = "fat";

From 1c5a7e3f747fa1e8df0491607cb238aef8ea2b24 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 10:27:08 +0000
Subject: [PATCH 59/61] rgrc: 0.6.34 -> 0.6.35

---
 pkgs/by-name/rg/rgrc/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/rg/rgrc/package.nix b/pkgs/by-name/rg/rgrc/package.nix
index aa5160bc4bc1..4daa3d120858 100644
--- a/pkgs/by-name/rg/rgrc/package.nix
+++ b/pkgs/by-name/rg/rgrc/package.nix
@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rgrc";
-  version = "0.6.34";
+  version = "0.6.35";
 
   __structuredAttrs = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "lazywalker";
     repo = "rgrc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-awjRCCuO+3vK4CjeU8ZNJAkmfwidxpPO9MCbdowz7Hg=";
+    hash = "sha256-xoA4mtVhSPUfKEsU9bo5hFD7qPgL8LP1CggMpK+K7xI=";
   };
 
-  cargoHash = "sha256-v3PHi6qts5+VQmfEOkB/bls/Qrd/hXsW39N/H2SEyOo=";
+  cargoHash = "sha256-LpjmD+qfyNnehdBNLtSEvI41HSezA+Ht8B1UB07WSM8=";
 
   buildFeatures = [ "embed-configs" ];
   nativeBuildInputs = [ installShellFiles ];

From fde1df4615175b4b066e5a7100a9e726c48c3119 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 09:06:12 +0000
Subject: [PATCH 60/61] python3Packages.jupyter-book: 2.1.6 -> 2.1.7

---
 pkgs/development/python-modules/jupyter-book/default.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/jupyter-book/default.nix b/pkgs/development/python-modules/jupyter-book/default.nix
index d6c7434e385a..cd94bcf70589 100644
--- a/pkgs/development/python-modules/jupyter-book/default.nix
+++ b/pkgs/development/python-modules/jupyter-book/default.nix
@@ -26,19 +26,20 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "jupyter-book";
-  version = "2.1.6";
+  version = "2.1.7";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jupyter-book";
     repo = "jupyter-book";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-J0WzzKg46+0mvZ4goUPfkjO70HsAXQGv1JaoFs8JZ18=";
+    hash = "sha256-8jOPjF9tFwXmq5iWGW3V8qif7UdPPrDZW4cVjtSdbYY=";
   };
 
   npmDeps = fetchNpmDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-y0QCZhsgcdFlgsjsCZFvLOQP27e5JD0QL0uP2XmpQEs=";
+    hash = "sha256-xbDn7jDDd/nWKVvx2R6uJIaWQMSOktCeKv2EBkkzhTY=";
   };
 
   build-system = [

From 94fb316db24a184c8a0ede3537c7b97e47d5f683 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 29 Sep 2026 11:49:14 +0000
Subject: [PATCH 61/61] polysh: 1.0.4 -> 1.0.6

---
 pkgs/by-name/po/polysh/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/po/polysh/package.nix b/pkgs/by-name/po/polysh/package.nix
index 73dcd1b11c2a..53557cf57204 100644
--- a/pkgs/by-name/po/polysh/package.nix
+++ b/pkgs/by-name/po/polysh/package.nix
@@ -5,7 +5,7 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "polysh";
-  version = "1.0.4";
+  version = "1.0.6";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -13,7 +13,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "innogames";
     repo = "polysh";
     tag = "polysh-${finalAttrs.version}";
-    hash = "sha256-fmcu3lWSV5aft+gX5QjypdK5pyfdVd0HDNekiFVdlBI=";
+    hash = "sha256-t24Z5ftfQwkw9iB6T63kM/Mc9w66Szezig1e5PAlqiQ=";
   };
 
   build-system = with python3Packages; [