Merge master into staging-next

maintainers/maintainer-list.nix

@@ -26943,6 +26943,12 @@
     github = "sinanmohd";
     githubId = 69694713;
   };
+  sinavir = {
+    name = "Sinavir";
+    email = "sinavir@sinavir.fr";
+    github = "sinavir";
+    githubId = 36380103;
+  };
   sinics = {
     name = "Zhifan";
     email = "nonno.felice69uwu@gmail.com";

nixos/doc/manual/release-notes/rl-2611.section.md

@@ -58,6 +58,8 @@
 
 - [snowflake-prometheus-exporter](https://github.com/grafana/snowflake-prometheus-exporter), a Prometheus exporter for Snowflake metrics. Available as [services.prometheus.exporters.snowflake](#opt-services.prometheus.exporters.snowflake.enable).
 
+- [Grist](https://www.getgrist.com/), a powerful spreadsheet alternative. Available as [services.grist](#opt-services.grist.enable).
+
 - [Pumpkin](https://pumpkinmc.org/), a Minecraft server implementation written entirely in Rust, focused on performance and configurability. Available as [services.pumpkin](#opt-services.pumpkin.enable).
 
 - [feishin](https://github.com/jeffvli/feishin), a modern self-hosted music player. Available as [services.feishin](#opt-services.feishin.enable).

nixos/modules/module-list.nix

@@ -1731,6 +1731,7 @@
   ./services/web-apps/goupile.nix
   ./services/web-apps/grav.nix
   ./services/web-apps/greenlight.nix
+  ./services/web-apps/grist.nix
   ./services/web-apps/grocy.nix
   ./services/web-apps/guacamole-client.nix
   ./services/web-apps/guacamole-server.nix

nixos/modules/services/networking/tailscale.nix

@@ -183,7 +183,7 @@ in
     systemd.services.tailscaled-autoconnect = mkIf (cfg.authKeyFile != null) {
       after = [ "tailscaled.service" ];
       wants = [ "tailscaled.service" ];
-      wantedBy = [ "multi-user.target" ];
+      wantedBy = [ "tailscaled.service" ];
       serviceConfig = {
         Type = "notify";
       };
@@ -240,7 +240,7 @@ in
         "tailscaled-autoconnect.service"
       ];
       wants = [ "tailscaled.service" ];
-      wantedBy = [ "multi-user.target" ];
+      wantedBy = [ "tailscaled.service" ];
       serviceConfig = {
         Type = "oneshot";
       };

nixos/modules/services/web-apps/grist.nix

@@ -0,0 +1,247 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib)
+    concatMapStringsSep
+    concatStringsSep
+    mkDefault
+    mkEnableOption
+    mkIf
+    mkOption
+    mkPackageOption
+    optional
+    types
+    ;
+
+  cfg = config.services.grist;
+in
+{
+  options.services.grist = {
+    enable = mkEnableOption "Grist";
+
+    package = mkPackageOption pkgs "grist-core" { };
+
+    enableEnterprise = mkEnableOption "Grist enterprise code";
+
+    enableRedis = mkEnableOption "Grist redis data store";
+
+    environment = mkOption {
+      type = types.submodule {
+        freeformType = types.attrsOf (types.nullOr types.str);
+
+        options = {
+          GRIST_DATA_DIR = mkOption {
+            type = types.path;
+            default = "/var/lib/grist-core/docs";
+            description = ''
+              Directory in which to store documents.
+            '';
+          };
+
+          GRIST_INST_DIR = mkOption {
+            type = types.path;
+            default = "/var/lib/grist-core";
+            description = ''
+              Path to Grist instance configuration files, for Grist server.
+            '';
+          };
+
+          GRIST_USER_ROOT = mkOption {
+            type = types.path;
+            default = "/var/lib/grist-core";
+            description = ''
+              An extra path to look for plugins in - Grist will scan for plugins in $GRIST_USER_ROOT/plugins.
+            '';
+          };
+
+          GRIST_HOST = mkOption {
+            type = types.str;
+            default = "127.0.0.1";
+            description = ''
+              Address to listen on
+            '';
+          };
+
+          GVISOR_FLAGS = mkOption {
+            type = types.listOf types.str;
+            default = [
+              "-rootless"
+            ];
+            apply = concatStringsSep " ";
+            description = ''
+              The flags that are passed on to gVisor when creating a sandbox.
+            '';
+          };
+
+          GRIST_SANDBOX_FLAVOR = mkOption {
+            type = types.nullOr types.str;
+            default = "gvisor";
+            description = ''
+              Sandbox to use for grist documents. Only "gvisor" is supported.
+            '';
+          };
+
+          GVISOR_AVAILABLE = mkOption {
+            type = types.str;
+            default = "1";
+            readOnly = true;
+            description = ''
+              Whether gvisor is available for Grist.
+            '';
+          };
+
+          TYPEORM_DATABASE = mkOption {
+            type = types.str;
+            default = "/var/lib/grist-core/db.sqlite";
+            description = ''
+              Database filename for sqlite or database name for other db types.
+            '';
+          };
+
+          TYPEORM_TYPE = mkOption {
+            type = types.enum [
+              "sqlite"
+              "postgres"
+            ];
+            default = "sqlite";
+            description = ''
+              Which database type to use for storage.
+            '';
+          };
+          GRIST_BOOT_KEY = mkOption {
+            type = types.nullOr types.str;
+            default = null;
+            description = ''
+              Grist password for first time configuration of your instance. You must remove it when your instance is configured.
+
+              If null, this will be unset.
+            '';
+          };
+          GRIST_DEFAULT_EMAIL = mkOption {
+            type = types.nullOr types.str;
+            default = null;
+            description = ''
+              The user who logs in with the email defined by
+              GRIST_DEFAULT_EMAIL is the administrator of this Grist
+              installation. When Grist runs for the first time, it will create
+              an account set to the value of GRIST_DEFAULT_EMAIL.
+
+              If null, this will be unset.
+            '';
+          };
+        };
+      };
+      default = { };
+      example = {
+        GRIST_DEFAULT_EMAIL = "example@example.com";
+      };
+      description = ''
+        Environment variables used for Grist.
+
+        See [](https://github.com/gristlabs/grist-core/#environment-variables)
+        for available environment variables.
+      '';
+    };
+
+    environmentFiles = mkOption {
+      type = types.listOf types.path;
+      default = [ ];
+      description = ''
+        Environment files for secrets.
+
+        You must at least set GRIST_SESSION_KEY there.
+      '';
+    };
+  };
+
+  config = mkIf cfg.enable {
+    assertions = [
+      {
+        assertion = cfg.environment.GRIST_SANDBOX_FLAVOR == "gvisor";
+        message = "The current Grist module only supports gVisor sandboxing";
+      }
+    ];
+
+    warnings =
+      optional (cfg.environment.GRIST_BOOT_KEY != null)
+        "GRIST_BOOT_KEY is world-readable in the Nix Store, you should remove it when your instance is configured or set it in the environment file as a secret.";
+
+    services.grist = {
+      package = mkDefault (pkgs.grist-core.override { enterpriseEdition = cfg.enableEnterprise; });
+      environment = {
+        REDIS_URL = mkIf cfg.enableRedis "redis://localhost:${builtins.toString config.services.redis.servers.grist.port}";
+        NODE_PATH = concatMapStringsSep ":" (v: "${cfg.package}/grist-core/${v}") [
+          "_build"
+          "_build/ext"
+          "_build/stubs"
+          "ext/node_modules"
+        ];
+      };
+    };
+
+    systemd.services.grist-core = {
+      description = "Grist Core";
+
+      after = [
+        "network.target"
+      ]
+      ++ optional (cfg.environment.TYPEORM_TYPE == "postgres") "postgresql.service";
+
+      wants = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+
+      path = [
+        pkgs.nodejs
+        cfg.package.pythonEnv
+        pkgs.gvisor
+        pkgs.procps
+        pkgs.glibc.bin
+      ];
+
+      inherit (cfg) environment;
+
+      serviceConfig = {
+        ExecStart = "${pkgs.nodejs}/bin/node ${cfg.package}/grist-core/_build/stubs/app/server/server.js";
+
+        DynamicUser = true;
+        Restart = "always";
+
+        StateDirectory = "grist-core";
+        WorkingDirectory = "/var/lib/grist-core";
+
+        Delegate = "yes";
+
+        ProtectHome = true;
+        ProtectSystem = "strict";
+        PrivateTmp = true;
+        PrivateDevices = true;
+        ProtectHostname = true;
+        ProtectClock = true;
+        ProtectKernelTunables = true;
+        ProtectKernelModules = true;
+        LockPersonality = true;
+        ProtectKernelLogs = true;
+        ProtectControlGroups = true;
+        NoNewPrivileges = true;
+        RestrictRealtime = true;
+        RestrictSUIDSGID = true;
+        RemoveIPC = true;
+        PrivateMounts = true;
+
+        EnvironmentFile = cfg.environmentFiles;
+      };
+    };
+    services.redis.servers = mkIf cfg.enableRedis {
+      "grist" = {
+        enable = true;
+        port = 6380;
+      };
+    };
+  };
+
+  meta.maintainers = with lib.maintainers; [ sinavir ];
+}

nixos/modules/system/boot/systemd.nix

@@ -820,6 +820,10 @@ in
     systemd.services.systemd-random-seed.restartIfChanged = false;
     systemd.services.systemd-remount-fs.restartIfChanged = false;
     systemd.services.systemd-update-utmp.restartIfChanged = false;
+    # `systemd-bless-boot good` fails once the current boot has been blessed.
+    systemd.services.systemd-bless-boot = lib.mkIf cfg.package.withBootloader {
+      restartIfChanged = false;
+    };
     systemd.targets.local-fs.unitConfig.X-StopOnReconfiguration = true;
     systemd.targets.remote-fs.unitConfig.X-StopOnReconfiguration = true;
     systemd.services.systemd-importd = lib.mkIf cfg.package.withImportd {

nixos/modules/virtualisation/qemu-vm.nix

@@ -333,7 +333,7 @@ let
         lib.mapAttrsToList (tag: share: ''
           ${lib.getExe hostPkgs.virtiofsd} \
             --socket-path="$NIX_VIRTIOFS_DIR"/"${tag}" \
-            --shared-dir="${share.source}" \
+            --shared-dir="$(readlink -f "${share.source}")" \
             ${if share.writable then "--writeback" else "--readonly"} \
             --sandbox=none \
             --seccomp=none \

nixos/tests/all-tests.nix

@@ -808,6 +808,7 @@ in
   graylog = runTest ./graylog.nix;
   greenlight = runTest ./greenlight.nix;
   greetd-no-shadow = runTest ./greetd-no-shadow.nix;
+  grist = runTest ./grist.nix;
   grocy = runTest ./grocy.nix;
   grow-partition = runTest ./grow-partition.nix;
   grub = {

nixos/tests/grist.nix

@@ -0,0 +1,107 @@
+{ pkgs, ... }:
+let
+  forwardedPort = 8484;
+  internalPort = 8484;
+in
+{
+  name = "grist smoke test";
+
+  nodes = {
+    machine =
+      { pkgs, ... }:
+      {
+        virtualisation.forwardPorts = [
+          {
+            host.port = forwardedPort;
+            guest.port = internalPort;
+          }
+        ];
+
+        networking.firewall.allowedTCPPorts = [ 8484 ];
+
+        services.grist = {
+          enable = true;
+          enableRedis = true;
+          environment = {
+            APP_HOME_URL = "http://127.0.0.1:8484";
+            GRIST_IN_SERVICE = "true";
+            GRIST_BOOT_KEY = "dummy";
+            GRIST_HOST = "0.0.0.0";
+            DEBUG = "1";
+          };
+        };
+      };
+  };
+
+  extraPythonPackages = p: [
+    p.requests
+  ];
+
+  testScript = ''
+    import requests
+    import sys
+
+    start_all()
+
+    machine.wait_for_unit("grist-core.service")
+    machine.wait_for_open_port(${builtins.toString internalPort})
+
+    url = "http://127.0.0.1:${builtins.toString forwardedPort}/o/docs/api/"
+
+    def check_answer(r):
+      if not r.ok:
+        sys.exit(1)
+      return r.json()
+
+    with subtest("Create document"):
+      r = requests.post(f"{url}docs", json = {"timezone":"Europe/Paris"})
+      doc_id = check_answer(r)
+
+    with subtest("Create table"):
+      r = requests.post(f"{url}docs/{doc_id}/tables", json={
+        "tables": [
+          {
+            "id": "double",
+            "columns": [
+              {
+                "id": "number",
+                "fields": {
+                  "type": "Numeric",
+                  "label": "Number",
+                },
+              },
+              {
+                "id": "result",
+                "fields": {
+                  "type": "Numeric",
+                  "label": "Result",
+                  "formula": "$number * 2",
+                  "isFormula": True,
+                },
+              },
+            ],
+          },
+        ],
+      })
+      table_id = check_answer(r)["tables"][0]["id"]
+
+    with subtest("Add record"):
+      r = requests.post(f"{url}docs/{doc_id}/tables/{table_id}/records", json={
+        "records": [
+          {
+            "fields": {
+              "number": 5,
+            },
+          },
+        ],
+      })
+      if len(check_answer(r)) != 1:
+        sys.exit(1)
+
+    with subtest("Read record"):
+      r = requests.get(f"{url}docs/{doc_id}/tables/{table_id}/records")
+      record = check_answer(r)["records"][0]
+      if record["fields"]["result"] != record["fields"]["number"] * 2:
+        sys.exit(1)
+  '';
+}

nixos/tests/sunshine.nix

@@ -29,6 +29,7 @@
 
       environment.systemPackages = with pkgs; [
         gxmessage
+        jq
       ];
 
     };
@@ -65,7 +66,13 @@
     moonlight.wait_for_console_text("Executing request.*pair")
 
     # respond to pairing request from sunshine
-    sunshine.succeed("curl --fail --insecure -u sunshine:sunshine -H 'Content-Type: application/json' -d '{\"pin\":\"1234\",\"name\":\"sunshine\"}' https://localhost:47990/api/pin")
+    pairing_id = sunshine.wait_until_succeeds(
+        "curl --fail --insecure -u sunshine:sunshine https://localhost:47990/api/pin | jq -er '.pairings[0].id'",
+        timeout=30,
+    ).strip()
+    sunshine.succeed(
+        f"curl --fail --insecure -u sunshine:sunshine -H 'Content-Type: application/json' -d '{{\"pairing_id\":\"{pairing_id}\",\"pin\":\"1234\",\"name\":\"sunshine\"}}' https://localhost:47990/api/pin | jq -e '.status == true'"
+    )
 
     # wait until pairing is complete
     moonlight.wait_for_console_text("Executing request.*phrase=pairchallenge")

pkgs/applications/editors/vscode/extensions/default.nix

@@ -2690,8 +2690,8 @@ let
         mktplcRef = {
           name = "vscode-todo-highlight";
           publisher = "jgclark";
-          version = "2.0.8";
-          hash = "sha256-/CctaLcG+dA2Cf69/ACeDKdRLsu/VUGbAxUbyhI0VyA=";
+          version = "2.2.5";
+          hash = "sha256-YJb0wojBdEPt/FWp+pNkAtPubVlyKdW0h2sh28/Ymmk=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/wayou.vscode-todo-highlight/changelog";

pkgs/applications/networking/cluster/helm/plugins/helm-diff.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "helm-diff";
-  version = "3.15.13";
+  version = "3.15.14";
 
   src = fetchFromGitHub {
     owner = "databus23";
     repo = "helm-diff";
     rev = "v${version}";
-    hash = "sha256-/Wu8OszNOhv1I7NA9vvwO0IB957sxnh8NGzo3cEjE/s=";
+    hash = "sha256-48AepuUBNL5yVsH1pxiSsSsNczk/hLw/0wuaO5usbtQ=";
   };
 
-  vendorHash = "sha256-lzR/vuXJgoo2VpVeV/mLTmBi9LJepGA/uxtCg3KK9LI=";
+  vendorHash = "sha256-RVwSHrzDV/FD8mXTElhflk1ghc+qrq3ikRt8QTz3Kgw=";
 
   ldflags = [
     "-s"

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -1067,11 +1067,11 @@
     "vendorHash": null
   },
   "oracle_oci": {
-    "hash": "sha256-N/0SwbH9eYbXmfRP/X534AsaQVgyUGztVkBlUOHgRGY=",
+    "hash": "sha256-OHBzkiN9YRcoq+ho7Niaw1jImgE/EVBUPUEFgjdz1wg=",
     "homepage": "https://registry.terraform.io/providers/oracle/oci",
     "owner": "oracle",
     "repo": "terraform-provider-oci",
-    "rev": "v9.1.0",
+    "rev": "v9.3.0",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

pkgs/by-name/_9/_9router/package.nix

@@ -9,11 +9,11 @@ buildNpmPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "9router";
-  version = "0.5.75";
+  version = "0.5.86";
 
   src = fetchzip {
     url = "https://registry.npmjs.org/9router/-/9router-${finalAttrs.version}.tgz";
-    hash = "sha256-4G6DXod9H6FOJ6MSWm//p4lpjT4032/7YfpsqrvdT9A=";
+    hash = "sha256-djgKrsZ19tbGQ5GEhYaMrolk7aU5wXVPClACTHYB2zI=";
   };
 
   npmDepsHash = "sha256-L1FsPonQR0CkezH6A3fQdIUwb5Tzd269CFO6NhhXbGQ=";

pkgs/by-name/ad/adhammer/package.nix

@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "adhammer";
-  version = "1.5.1";
+  version = "1.5.2";
 
   __structuredAttrs = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "icedracon";
     repo = "adhammer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9wUpvYzbXpgB2nzseLx1qHKBzyDLehrVY0PCy3dHBQM=";
+    hash = "sha256-/k2zdHBUysKopRcl34KOo7QlJu35aD+cv1Aza1XOAkE=";
   };
 
-  cargoHash = "sha256-l9Gw3HXbQ5TYN4XdwG68HU1+lr2PU+zalvjMQ6NKPXs=";
+  cargoHash = "sha256-H2wlwVPTEH7E6TT/J54IenxUoLedaBG1kkF3ebioBc8=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/ar/archon-lite/package.nix

@@ -7,11 +7,11 @@
 
 appimageTools.wrapType2 (finalAttrs: {
   pname = "archon-lite";
-  version = "9.5.0";
+  version = "9.6.80";
 
   src = fetchurl {
     url = "https://github.com/RPGLogs/Uploaders-archon-lite/releases/download/v${finalAttrs.version}/archon-lite-v${finalAttrs.version}.AppImage";
-    hash = "sha256-ZuALgVtqsYtvnSq8hkJL4A+i4UaEpk+2L3bpSEXrhRM=";
+    hash = "sha256-LiP0PAEShUWHokMJ0AjRniYZjpnEhl7SUz2tkJKnd80=";
   };
 
   extraInstallCommands = ''

pkgs/by-name/as/asdf-vm/package.nix

@@ -8,14 +8,14 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "asdf-vm";
-  version = "0.20.1";
+  version = "0.20.2";
 
   src = fetchFromGitHub {
     owner = "asdf-vm";
     repo = "asdf";
 
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UbD8z5jIZTLfQLEruprLqJx4eoTJi4fFCMWUvIPDjOs=";
+    hash = "sha256-HJRNRA98MIOEF/Q3I+cGUL8kH904j3/msI+FGDbRH7A=";
 
   };
 

pkgs/by-name/br/breseq/package.nix

@@ -19,7 +19,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "breseq";
-  version = "0.40.2";
+  version = "0.40.3";
 
   strictDeps = true;
   __structuredAttrs = true;
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "barricklab";
     repo = "breseq";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-txZiyXyhMYXWO5RGrIkqgCS7Dmh34wogKXIfrE3fmms=";
+    hash = "sha256-kdePGNxv02Ac7FSiMaK9FRb9xrpw9W89F8RR2icYtlo=";
   };
 
   buildInputs = [

pkgs/by-name/bu/buf/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "buf";
-  version = "1.72.0";
+  version = "1.73.0";
 
   src = fetchFromGitHub {
     owner = "bufbuild";
     repo = "buf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cnCwaa9vzoaqUmrFWqmHPiO/7UjeIburisIiLJZUpl4=";
+    hash = "sha256-L4d37MQL2pVpt8nV8lxWlUYqxCAkl9KRz2hmJNuOu+o=";
   };
 
-  vendorHash = "sha256-8LTi/+ODA8Tyd5mp5OeTDECjp6+bmNFFHxxCi6RtzTs=";
+  vendorHash = "sha256-3ijHv25dS62wzqw+yPxlsZ34GALNIf3Azdjm9hVenW8=";
 
   patches = [
     # Skip a test that requires networking to be available to work.

pkgs/by-name/cm/cmdstan/package.nix

@@ -12,14 +12,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cmdstan";
-  version = "2.39.0";
+  version = "2.40.0";
 
   src = fetchFromGitHub {
     owner = "stan-dev";
     repo = "cmdstan";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-7vGEqIJOFWeESq4xL2z2ZjNaVWEqqzPmGT6tpWBzrU0=";
+    hash = "sha256-sSs1QVTBTVs8rzuqpDPrVdOq7X6k2UwL9FRAwd56bRA=";
   };
 
   postPatch = ''

pkgs/by-name/co/conftest/package.nix

@@ -11,7 +11,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "conftest";
-  version = "0.69.0";
+  version = "0.70.1";
 
   __darwinAllowLocalNetworking = true; # required for tests
 
@@ -19,9 +19,9 @@ buildGoModule (finalAttrs: {
     owner = "open-policy-agent";
     repo = "conftest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kF4kako/88FxV10RZ9zNM7eq/Qlz41tEtnUnTB12KtM=";
+    hash = "sha256-2BkPRIpHHzSXi0IyteeODr9L3IEZDLr0jqfNRrEFxMA=";
   };
-  vendorHash = "sha256-vcIY3AZkl/U0l2eyWHZGHrjQyW5TWt9oPDb4BXcNUtY=";
+  vendorHash = "sha256-iZfZO52bjqPkndQtSGjoDZgxgYr8wnnVF9go9caln1s=";
 
   ldflags = [
     "-s"

pkgs/by-name/co/copybara/package.nix

@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "copybara";
-  version = "20260907";
+  version = "20260921";
 
   src = fetchurl {
     url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-RJnpzQwHz8m4LDr2RLe5XBeH7qmA+ZwVFVFXdMEwfWQ=";
+    hash = "sha256-O5MH6XUXEPKwRCLhCMzDZnuWcetz6R6iZPXzuqri93E=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/coroot/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "coroot";
-  version = "1.26.5";
+  version = "1.26.8";
 
   src = fetchFromGitHub {
     owner = "coroot";
     repo = "coroot";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2sxP/SKp+cuzGB/1OxxIBgomGxfpGcS8l8jEuUexTuA=";
+    hash = "sha256-6vnJsj3PMRsC/Mal76tWcMVIf7EmvBQj4W0OzZSEUdc=";
   };
 
   vendorHash = "sha256-QB5jz+ks9naRM7KvlxXUkMcTTtmy0SQXkfxGx/vh3W4=";

pkgs/by-name/co/corrode-scanner/package.nix

@@ -8,7 +8,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "corrode-scanner";
-  version = "0.5.2";
+  version = "0.5.3";
 
   __structuredAttrs = true;
 
@@ -16,10 +16,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "ul0gic";
     repo = "corrode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Vxad4HOrrndeDwVZUnDKP/wwrHLiw0dPK3/SJw7AyLQ=";
+    hash = "sha256-ucMNdl4TIl4TnGrkQXxO9ZNkYXrDD5Kto8NbWeT3IKI=";
   };
 
-  cargoHash = "sha256-wpel50zTaLtKVwzai9aIFzjWNLOE5mDoGF7Q+eqUO2M=";
+  cargoHash = "sha256-0iKzigRLfnepGs2DMnYEWA4FwfRUegu+i64EbE881Qs=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

pkgs/by-name/cs/csvtk/package.nix

@@ -7,7 +7,7 @@
   buildPackages,
 }:
 let
-  version = "0.37.0";
+  version = "0.38.0";
 in
 buildGoModule {
   pname = "csvtk";
@@ -17,10 +17,10 @@ buildGoModule {
     owner = "shenwei356";
     repo = "csvtk";
     tag = "v${version}";
-    hash = "sha256-dpWxLOckdA0tNhSM8wGqBag/cXmMFhonybN+W1+KBXA=";
+    hash = "sha256-5ZuMT1JMABI2DLHZ3CbYrZEqQUM6fXie+faZ416iq2o=";
   };
 
-  vendorHash = "sha256-wi7WPwCg0MoNxgCLZO1UxG4M0g/Vo/GCiCGu8c5avyU=";
+  vendorHash = "sha256-Zo8S18Gfj0PSL/qSJvpluSpVtvvLBEOgCPUCt3jFO8s=";
 
   # stale upstream test: asserts byte length, but expr-lang now returns rune count
   checkFlags = [ "-skip=TestMutate3" ];

pkgs/by-name/ed/edhm-ui/package.nix

@@ -28,13 +28,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "edhm-ui";
-  version = "3.0.71";
+  version = "3.0.72";
 
   strictDeps = true;
 
   src = fetchzip {
     url = "https://github.com/BlueMystical/EDHM_UI/releases/download/v${finalAttrs.version}/edhm-ui-v3-linux-x64.zip";
-    hash = "sha256-wMsP2VeSbo78II/tT5nBAvOIQc3lCBqy+l0F2r3ulEM=";
+    hash = "sha256-bpYNl/I2T3sNbhjqqbYXo7c8JWi9tUBBDX/aRSIz+rA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ei/eigenmath/package.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "eigenmath";
-  version = "350";
+  version = "351";
 
   src = fetchFromGitHub {
     owner = "georgeweigt";
     repo = "eigenmath";
     tag = finalAttrs.version;
-    hash = "sha256-Depc6mzPK6FEGTUo2BmXoWlyzjQDU8Hiodp5UjxKlQE=";
+    hash = "sha256-V8HNzbNg/YfE9KPPBEeXw5oOkG97AgQcBKDzAAjFvnA=";
   };
 
   checkPhase =

pkgs/by-name/fa/fastpotify/package.nix

@@ -1,98 +0,0 @@
-{
-  lib,
-  stdenv,
-  rustPlatform,
-  fetchFromGitHub,
-  pkg-config,
-  cmake,
-  makeWrapper,
-  writeShellScript,
-  alsa-lib,
-  libpulseaudio,
-  libGL,
-  libx11,
-  libxkbcommon,
-  wayland,
-  libxcursor,
-  libxi,
-  libxrandr,
-  apple-sdk_15,
-}:
-
-let
-  # projectm-sys expects CMake to install into lib/, while CMake defaults to
-  # lib64/ on NixOS. Wrap cmake to force it, matching upstream's flake.nix.
-  cmakeWithLibdir = writeShellScript "cmake-fastpotify" ''
-    if [[ "$1" == "--build" ]]; then
-      exec ${cmake}/bin/cmake "$@"
-    else
-      exec ${cmake}/bin/cmake "$@" -DCMAKE_INSTALL_LIBDIR=lib
-    fi
-  '';
-in
-rustPlatform.buildRustPackage rec {
-  pname = "fastpotify";
-  version = "0.7.1";
-
-  __structuredAttrs = true;
-
-  src = fetchFromGitHub {
-    owner = "crmne";
-    repo = "fastpotify";
-    tag = "v${version}";
-    hash = "sha256-RZEM1b7oj0dAIXKf+B4z5g8RaO9lArMk04/h++roGME=";
-  };
-
-  cargoHash = "sha256-DrwPRPGr2QBXpTKJmCSHLnOJAymwuN7SKKqEYlNTQHc=";
-
-  nativeBuildInputs = [
-    pkg-config
-    cmake
-    rustPlatform.bindgenHook
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [ makeWrapper ];
-
-  buildInputs =
-    lib.optionals stdenv.hostPlatform.isLinux [
-      alsa-lib
-      libpulseaudio
-      libGL
-      libx11
-    ]
-    ++ lib.optionals stdenv.hostPlatform.isDarwin [ apple-sdk_15 ];
-
-  env.CMAKE = "${cmakeWithLibdir}";
-
-  # The GUI dlopens its Wayland, X11 and GL libraries at run time.
-  postFixup = lib.optionalString stdenv.hostPlatform.isLinux ''
-    wrapProgram $out/bin/fastpotify \
-      --prefix LD_LIBRARY_PATH : ${
-        lib.makeLibraryPath [
-          libxkbcommon
-          wayland
-          libGL
-          libx11
-          libxcursor
-          libxi
-          libxrandr
-        ]
-      }
-  '';
-
-  postInstall = lib.optionalString stdenv.hostPlatform.isLinux ''
-    install -Dm644 packaging/applications/fastpotify.desktop \
-      $out/share/applications/fastpotify.desktop
-    install -Dm644 packaging/icons/fastpotify.svg \
-      $out/share/icons/hicolor/scalable/apps/fastpotify.svg
-  '';
-
-  meta = {
-    description = "Fast native Spotify client with local playback and Spotify Connect";
-    homepage = "https://fastpotify.rocks";
-    changelog = "https://github.com/crmne/fastpotify/releases/tag/v${version}";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ DmitrySkibitsky ];
-    mainProgram = "fastpotify";
-    platforms = lib.platforms.linux ++ lib.platforms.darwin;
-  };
-}

pkgs/by-name/fc/fcitx5-m17n/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation rec {
   pname = "fcitx5-m17n";
-  version = "5.1.7";
+  version = "5.1.8";
 
   src = fetchFromGitHub {
     owner = "fcitx";
     repo = pname;
     rev = version;
-    hash = "sha256-3OhOLmJW5LwnFv1ZJVDdPSaktp14PkMGnwjvM7cZ9iA=";
+    hash = "sha256-jjwgTC1B+9fhvj0nau/pkA4l4gAzSTCSf+a9u5Kq3jA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fl/flake-checker/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "flake-checker";
-  version = "0.2.14";
+  version = "0.2.15";
 
   src = fetchFromGitHub {
     owner = "DeterminateSystems";
     repo = "flake-checker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-MUbF2mOrcoODe26j0OaXHLk73yFhB+0/d2yPaeBEi6M=";
+    hash = "sha256-J0RAJJdpKYgMeV8+aojCRKVkXWa4PzdaAJHLjZInB4E=";
   };
 
-  cargoHash = "sha256-toC9qMq06Grh6NJZZUb7cbQdNeI7lwqDqbJO85a3zwk=";
+  cargoHash = "sha256-8iHYK8Pf1P4TlfCkFVMeco/sldzAU40jLfod1qcucPg=";
 
   meta = {
     description = "Health checks for your Nix flakes";

pkgs/by-name/fl/flatcc/package.nix

@@ -9,7 +9,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "flatcc";
-  version = "0.6.3";
+  version = "0.6.4";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "dvidelabs";
     repo = "flatcc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kDZ05r/k15peBLGG2jzyeKwrdTn3+1PWrrDUmC3SV50=";
+    hash = "sha256-J3vw7DYhaYD7QVChcNElKCYoh0cwGJj2hr5ugcIcZZw=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/fl/flintlock/package.nix

@@ -11,16 +11,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "flintlock";
-  version = "0.15.1";
+  version = "0.15.2";
 
   src = fetchFromGitHub {
     owner = "liquidmetal-dev";
     repo = "flintlock";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-lV3C9xJeyDw5fOZdxY0qn1NTIkLBBM2kNOTB/suTG9o=";
+    sha256 = "sha256-tHq5yikhDsOYw6IOugmRPVs581+inwDrvLPuOOwig3k=";
   };
 
-  vendorHash = "sha256-esOF33Yra6TbrxWyP3/9GaJ6CAO3ehAtZBPDh9xIUGQ=";
+  vendorHash = "sha256-cITGlNpWoR78R6DcFsh1mieGeNLhd9L6Ap4XB0orNUk=";
 
   subPackages = [
     "cmd/flintlock-metrics"

pkgs/by-name/fl/flux9s/package.nix

@@ -9,17 +9,17 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "flux9s";
-  version = "1.0.4";
+  version = "1.0.5";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "dgunzy";
     repo = "flux9s";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xrOz0xHQ+BLO1l6seORByTOfXEnAJiqmFBX70OGX9K4=";
+    hash = "sha256-Fue1f/I10Jtrfa2AwiC6fLHItF/KFQvLfM/Ukr3TVi4=";
   };
 
-  cargoHash = "sha256-GdzB0bHSbs7ZbrnB1SfsV2+4nA+UP6dxfPcNV6ysweY=";
+  cargoHash = "sha256-sHK4Qrl8y0B3QpGIqgdjbn7DqWozGSqFLI/tE38cQlw=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/fn/fn-cli/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "fn";
-  version = "0.6.66";
+  version = "0.6.69";
 
   src = fetchFromGitHub {
     owner = "fnproject";
     repo = "cli";
     rev = finalAttrs.version;
-    hash = "sha256-eAXBlpfGFo4hRpg+WaWtrvfPWdsVJXhDd7YK3Cb2uRE=";
+    hash = "sha256-IRySxSBCCLfjMkkbHF8tAl59rSM58394dAPYElZzIjc=";
   };
 
   vendorHash = null;

pkgs/by-name/ga/garnet/package.nix

@@ -8,13 +8,13 @@
 
 buildDotnetModule rec {
   pname = "garnet";
-  version = "2.1.7";
+  version = "2.1.8";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "garnet";
     tag = "v${version}";
-    hash = "sha256-CYOp6KR84ggZ+XCZa1cV5nGs6P+Lcoejop7QXtG0RVk=";
+    hash = "sha256-GomncmLVYQamSOMScJVaT0dlwf59cXBJ/0z1Zil11ig=";
   };
 
   projectFile = "main/GarnetServer/GarnetServer.csproj";

pkgs/by-name/ge/geteduroam-cli/package.nix

@@ -7,13 +7,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "geteduroam-cli";
-  version = "0.14";
+  version = "0.15";
 
   src = fetchFromGitHub {
     owner = "geteduroam";
     repo = "linux-app";
     tag = finalAttrs.version;
-    hash = "sha256-Zvyba8ma4a5WmV6rnfUKqQ8AsZlGGWrZsL8UZIWApTQ=";
+    hash = "sha256-j9sLlVglQbrGuFAh0gkxS2/4HR2YpBNxCsVWBQpPNag=";
   };
 
   vendorHash = "sha256-HYJ71pk1a8EaPycmbHmMnQeb42dt7M9NvK/1GYhZE0c=";

pkgs/by-name/ge/geteduroam/package.nix

@@ -17,13 +17,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "geteduroam";
-  version = "0.14";
+  version = "0.15";
 
   src = fetchFromGitHub {
     owner = "geteduroam";
     repo = "linux-app";
     tag = finalAttrs.version;
-    hash = "sha256-Zvyba8ma4a5WmV6rnfUKqQ8AsZlGGWrZsL8UZIWApTQ=";
+    hash = "sha256-j9sLlVglQbrGuFAh0gkxS2/4HR2YpBNxCsVWBQpPNag=";
   };
 
   vendorHash = "sha256-HYJ71pk1a8EaPycmbHmMnQeb42dt7M9NvK/1GYhZE0c=";

pkgs/by-name/gi/git-machete/package.nix

@@ -9,14 +9,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "git-machete";
-  version = "3.45.0";
+  version = "3.46.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "virtuslab";
     repo = "git-machete";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jbi1WZy0kkgSfhX8dU63e7OfrHtc10IbJKSR3e4pz9o=";
+    hash = "sha256-qn4MwgfBZ1yiVYKmv6wHyiJKLJXbnWTzmJVSXxeUPIA=";
   };
 
   build-system = with python3.pkgs; [ setuptools ];

pkgs/by-name/gi/github-mcp-server/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "github-mcp-server";
-  version = "1.12.1";
+  version = "1.12.2";
 
   src = fetchFromGitHub {
     owner = "github";
     repo = "github-mcp-server";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rRGHJewnE+FYaKeuseWvIrH48c1ImWyfEI6l7b+Q0Dg=";
+    hash = "sha256-UCzRYbVLmMMC1LZeThhF8G8r4sFQdLIqSa5AxrisqgE=";
   };
 
   vendorHash = "sha256-dqn9W2gOb3ZCfppzfSczDO2bvpwsGyPe4I/h6y3JL9A=";

pkgs/by-name/gi/gitoxide/package.nix

@@ -18,16 +18,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "gitoxide";
-  version = "0.58.0";
+  version = "0.59.0";
 
   src = fetchFromGitHub {
     owner = "GitoxideLabs";
     repo = "gitoxide";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NKpOMgB/p7p1tZvU929LUieDKInksCP4gZ3tkI1FIrY=";
+    hash = "sha256-TWA2SUoqEVjplEtzTApQ/HZgBkUxDeuf/GcM+qJF4fg=";
   };
 
-  cargoHash = "sha256-0hCkvVFxdVdEDB0x7pd0CnKnKWOxGzbtBO9EFj9z9f4=";
+  cargoHash = "sha256-Mx6iWy1U8/zYzrgVfbpVG73/0lYJS8juupmbbKQlNQY=";
 
   nativeBuildInputs = [
     cmake

pkgs/by-name/go/go2tv/package.nix

@@ -19,13 +19,13 @@
 
 buildGoModule rec {
   pname = "go2tv" + lib.optionalString (!withGui) "-lite";
-  version = "2.6.0";
+  version = "2.6.1";
 
   src = fetchFromGitHub {
     owner = "alexballas";
     repo = "go2tv";
     tag = "v${version}";
-    hash = "sha256-Goj+x1i2Amo1s50Yd9HDj2d2WH+5y7N3y4ngeNkBgH8=";
+    hash = "sha256-om2oqjlk/Jg1q7HTdGv41PYRXViDtQkhYa6rqe3uCfI=";
   };
 
   vendorHash = "sha256-tabupT5OF1BzMWuSNPEe7G6DF/PJWZ7WeRLNHefYvP0=";

pkgs/by-name/go/gotestwaf/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gotestwaf";
-  version = "0.5.8";
+  version = "0.5.9";
 
   src = fetchFromGitHub {
     owner = "wallarm";
     repo = "gotestwaf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PZM3+xQnoUat214UCaWtB2NmY6ju4EdfjFbXSdS3IrE=";
+    hash = "sha256-KQG47T1wd6uaJgm15vRqx1HB1jVNVIEZI90eHMlXMlg=";
   };
 
-  vendorHash = "sha256-5rLYepwuy0B92tshVInYPfKyie9n+Xjh4x8XALcRHm4=";
+  vendorHash = "sha256-tGpgQ1c5mdstq5LX5egmm/ntmjuq2R6eWphsxV5q2b8=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

pkgs/by-name/gr/grist-core/0001-nixos.patch

@@ -0,0 +1,88 @@
+diff --git a/sandbox/gvisor/run.py b/sandbox/gvisor/run.py
+index db074508..d94b3cc8 100755
+--- a/sandbox/gvisor/run.py
++++ b/sandbox/gvisor/run.py
+@@ -75,8 +75,8 @@ mounts = [             # These will be filled in more fully programmatically bel
+ binds = []
+ preserved = set()
+ env = [
+-  "PATH=/usr/local/bin:/usr/bin:/bin",
+-  "LD_LIBRARY_PATH=/usr/local/lib"      # Assumes python version in /usr/local
++  "PATH=@sandboxPath@",
++  "LD_LIBRARY_PATH=@sandboxLibPath@",
+ ] + (args.env or [])
+ settings = {
+   "ociVersion": "1.0.0",
+@@ -157,17 +157,13 @@ def preserve(*locations, short_failure=False):
+     })
+     preserved.add(location)
+ 
++
+ # Prepare the file system - blank out everything that need not be shared.
+-exceptions = ["/lib", "/lib64"]   # to be shared (read-only)
+-exceptions += ["/proc", "/sys"]   # already virtualized
++exceptions = ["/proc", "/sys"]  # already virtualized
+ 
+ # retain /bin and /usr/bin for utilities
+ start = args.start
+-if include_bash or start:
+-  exceptions.append("/bin")
+ 
+-preserve("/usr/bin")
+-preserve("/usr/local/lib")
+ 
+ # Support user-specific extra directories. This is handy if Python is
+ # somewhere weird and there is a maze of soft links to get
+@@ -176,31 +172,7 @@ extra_dirs = os.environ.get('GVISOR_EXTRA_DIRS')
+ if extra_dirs:
+   preserve(*extra_dirs.split(':'))
+ 
+-# Do not attempt to include symlink directories, they are not supported
+-# and will cause obscure failures. On debian bookworm /lib64 is a
+-# symlink and we do not appear to need it, relative to debian buster
+-# where it is a real directory.
+-if os.path.exists('/lib64') and not os.path.islink('/lib64'):
+-  preserve("/lib64")
+-if os.path.exists('/usr/lib64'):
+-  preserve("/usr/lib64")
+-preserve("/usr/lib")
+-
+-# include python3 for bash and python3
+-best_python_executable = None
+-# We expect python3 in /usr/bin or /usr/local/bin.
+-candidates = [
+-  path
+-  # Pick the most generic python if not matching python3.11.
+-  # Sorry this is delicate because of restores, mounts, symlinks.
+-  for pattern in ['python3.11', 'python3.10', 'python3.9', 'python3', 'python3*']
+-  for root in ['/usr/local', '/usr']
+-  for path in glob.glob(f'{root}/bin/{pattern}')
+-  if os.path.exists(path)
+-]
+-if not candidates:
+-  raise Exception('could not find python3')
+-best_python_executable = os.path.realpath(candidates[0])
++preserve("/nix/store")
+ 
+ # Set up any specific shares requested.
+ if args.mount:
+@@ -227,18 +199,15 @@ settings['mounts'] = sorted(tmpfs_mounts, key=lambda mount: mount["destination"]
+ # because gvisor is written in Go and doesn't use the standard library that faketime
+ # tweaks.
+ if args.faketime:
+-  preserve('/usr/lib/x86_64-linux-gnu/faketime')
+   cmd_args.append('faketime')
+   cmd_args.append('-f')
+   cmd_args.append('2020-01-01 00:00:00' if args.faketime == 'default' else args.faketime)
+-  preserve('/usr/bin/faketime')
+-  preserve('/bin/date')
+ 
+ # Pick and set an initial entry point (bash or python).
+ if start:
+   cmd_args.append(start)
+ else:
+-  cmd_args.append('bash' if include_bash else best_python_executable)
++  cmd_args.append('bash' if include_bash else "python3")
+ 
+ # Add any requested arguments for the program that will be run.
+ cmd_args += more_args

pkgs/by-name/gr/grist-core/fetch-grist-enterprise.nix

@@ -0,0 +1,54 @@
+{
+  lib,
+  stdenv,
+  cacert,
+  curl,
+
+  fetchYarnDeps,
+}:
+{
+  gristSrc,
+  version,
+  hash,
+  offlineCacheHash,
+}:
+rec {
+  src = stdenv.mkDerivation (finalAttrs: {
+    pname = "grist-enterprise-src";
+    inherit version;
+
+    src = gristSrc;
+
+    phases = [
+      "buildPhase"
+      "installPhase"
+    ];
+
+    nativeBuildInputs = [
+      curl
+      cacert
+    ];
+
+    buildPhase = ''
+      ref=$(cat $src/buildtools/.grist-ee-version)
+
+      echo "Found grist-ee version: $ref"
+
+      curl "https://grist-static.com/ext/ext-built-''${ref}.tar.gz" -o ./tarball.tar.gz
+
+    '';
+    installPhase = ''
+      mkdir -p $out
+
+      tar -xvf ./tarball.tar.gz -C $out
+    '';
+
+    outputHash = hash;
+    outputHashAlgo = if finalAttrs.outputHash == "" then "sha256" else null;
+    outputHashMode = "recursive";
+  });
+  offlineCache = fetchYarnDeps {
+    yarnLock = "${src}/ext/yarn.lock";
+    hash = offlineCacheHash;
+  };
+}

pkgs/by-name/gr/grist-core/package.nix

@@ -0,0 +1,244 @@
+{
+  lib,
+  stdenv,
+  callPackage,
+
+  fetchFromGitHub,
+  fetchYarnDeps,
+  writeScriptBin,
+
+  python3,
+  yarn,
+  nodejs,
+  node-gyp-build,
+  node-gyp,
+  node-pre-gyp,
+  fixup-yarn-lock,
+
+  yarnConfigHook,
+
+  sandboxEnv ? [ ],
+  extraPythonPackages ? p: [ ],
+
+  nixosTests,
+
+  enterpriseEdition ? false,
+
+  nix-update-script,
+}:
+stdenv.mkDerivation (
+  finalAttrs:
+  let
+    fetchGristEnterprise = callPackage ./fetch-grist-enterprise.nix { };
+
+    enterprise = fetchGristEnterprise {
+      gristSrc = finalAttrs.src;
+      inherit (finalAttrs) version;
+      hash = "sha256-7lqt+L/Qmx/3kl2zJnRsbmCSmu+iAyzpNnqI/yJD9Q8=";
+      offlineCacheHash = "sha256-oMLNZZolY9Wg4DwJyYPDL6K28aEyWcXS9ivnzCuYcS0=";
+    };
+
+    pythonEnv = python3.withPackages (
+      p:
+      extraPythonPackages p
+      ++ [
+        p.astroid
+        p.asttokens
+        p.chardet
+        p.et-xmlfile
+        p.executing
+        p.friendly-traceback
+        p.iso8601
+        p.lazy-object-proxy
+        p.openpyxl
+        p.phonenumbers
+        p.pure-eval
+        p.python-dateutil
+        p.roman
+        p.six
+        p.sortedcontainers
+        p.stack-data
+        p.typing-extensions
+        p.unittest-xml-reporting
+        p.wrapt
+      ]
+    );
+  in
+  {
+    pname = "grist-core";
+    version = "1.7.19";
+    __structuredAttrs = true;
+
+    src = fetchFromGitHub {
+      owner = "gristlabs";
+      repo = "grist-core";
+      tag = "v${finalAttrs.version}";
+      hash = "sha256-IKnSluSQnPHO+qAwWF7KR/ukIDHVVulmJqIqaMI88Lg=";
+    };
+
+    offlineCache = fetchYarnDeps {
+      yarnLock = "${finalAttrs.src}/yarn.lock";
+      hash = "sha256-E8LDY7GF9d7+iXxr4BLYRUkwQxcpVihMU6HrXJ80pic=";
+    };
+
+    env = {
+      # We have our own way to fetch enterprise code because of nix
+      GRIST_SKIP_EXT_AUTOSETUP = "1";
+
+      sandboxPath = lib.makeSearchPath "bin" ([ pythonEnv ] ++ sandboxEnv);
+      sandboxLibPath = lib.makeLibraryPath ([ pythonEnv ] ++ sandboxEnv);
+    };
+
+    strictDeps = true;
+
+    patches = [
+      # Currently, gVisor sandboxing assumes the system is following the FHS.
+      # We thus adapt the sandboxing for nixos by removing all useless mounts
+      # and adding a readonly /nix/store. In particular this implies that all
+      # grist users will be able to browse the nix-store.
+      #
+      # See https://github.com/gristlabs/grist-core/issues/2022 for more details
+      ./0001-nixos.patch
+    ];
+
+    nativeBuildInputs = [
+      yarn
+      nodejs
+      fixup-yarn-lock
+      node-gyp-build
+      node-gyp
+      node-pre-gyp
+
+      yarnConfigHook
+
+      # napi-postinstall is only used for linting dependencies and/or useless checks
+      (writeScriptBin "napi-postinstall" ''
+        #!/bin/sh
+        # noop
+        echo "$@"
+      '')
+
+      pythonEnv
+    ];
+
+    buildInputs = [ pythonEnv ];
+
+    yarnInstallFlags = [
+      "--frozen-lockfile"
+      "--force"
+      "--ignore-engines"
+      "--ignore-platform"
+      # "--ignore-scripts"
+      "--no-progress"
+      "--non-interactive"
+      "--offline"
+    ];
+
+    postPatch = ''
+      rm .yarnrc
+    '';
+
+    preConfigure = ''
+      export HOME=$(mktemp -d)
+      export npm_config_nodedir=${nodejs}
+
+      # This one is needed during install process:
+      patchShebangs buildtools/install_edition.sh
+    '';
+
+    preBuild = ''
+      patchShebangs buildtools
+    ''
+    + lib.optionalString enterpriseEdition ''
+
+      echo "Copying ext"
+      cp -r --preserve=timestamps --reflink=auto -- "${enterprise.src}/ext" ./ext
+      chmod -R u+w -- "./ext"
+
+      pushd ext
+
+      yarn config --offline set yarn-offline-mirror ${enterprise.offlineCache}
+      fixup-yarn-lock yarn.lock
+
+      yarn install $yarnInstallFlags \
+        --production=false
+
+      patchShebangs node_modules
+
+      popd
+
+      ./buildtools/dedupe-ext-types.sh
+    '';
+
+    buildPhase = ''
+      runHook preBuild
+
+      yarn --offline run build:prod
+
+      runHook postBuild
+    '';
+
+    postBuild = ''
+      rm -r ./node_modules
+      yarn install $yarnInstallFlags \
+        --production=true
+    '';
+
+    installPhase = ''
+      runHook preInstall
+
+      mkdir -p "$out/grist-core"
+
+      cp -r {_build,node_modules,sandbox,static,bower_components} "$out/grist-core"
+      ${lib.optionalString enterpriseEdition ''
+        mkdir -p "$out/grist-core/ext"
+        cp -r ext/assets "$out/grist-core/ext/"
+        cp -r ext/node_modules "$out/grist-core/ext/"
+      ''}
+
+      runHook postInstall
+    '';
+
+    postInstall = ''
+      unlink $out/grist-core/static/mocha.js
+      unlink $out/grist-core/static/sinon.js
+      unlink $out/grist-core/static/mocha.css
+
+      unlink $out/grist-core/node_modules/msgpackr/node_modules/.bin/download-msgpackr-prebuilds
+      unlink $out/grist-core/node_modules/.bin/download-msgpackr-prebuilds
+
+      unlink $out/grist-core/bower_components/bootstrap
+
+      substituteAllInPlace $out/grist-core/sandbox/gvisor/run.py
+    '';
+
+    passthru = {
+      inherit pythonEnv;
+      enterpriseSrc = enterprise.src;
+      enterpriseOfflineCache = enterprise.offlineCache;
+      tests.grist-core = nixosTests.grist;
+
+      updateScript = nix-update-script {
+        extraArgs = [
+          "--custom-dep"
+          "enterpriseSrc"
+          "--custom-dep"
+          "enterpriseOfflineCache"
+        ];
+      };
+    };
+
+    meta = {
+      maintainers = with lib.maintainers; [
+        sinavir
+      ];
+      description = ''
+        Relational spreadsheet tool that sits between databases and
+        spreadsheets.
+      '';
+      homepage = "https://github.com/gristlabs/grist-core";
+      license = if enterpriseEdition then lib.unfree else lib.licenses.asl20;
+      platforms = lib.platforms.linux;
+    };
+  }
+)

pkgs/by-name/gr/grpc-gateway/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "grpc-gateway";
-  version = "2.30.0";
+  version = "2.31.0";
 
   src = fetchFromGitHub {
     owner = "grpc-ecosystem";
     repo = "grpc-gateway";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-LoSfWF+bJ6p+XVdqauIcgESfse+F57aoADi3mYUf3lo=";
+    sha256 = "sha256-sQjeryLDvp2rw41eX4JhBquEemCBdumnpb7+c7iEiag=";
   };
 
-  vendorHash = "sha256-e0CajogxQoHPanjek6nWebV2yHFja0QHHD57SNlLQDI=";
+  vendorHash = "sha256-CpQiMBXazT5t2+apej1MqIVuJKdr+BJJcz17Utoth4Y=";
 
   ldflags = [
     "-X=main.version=${finalAttrs.version}"

pkgs/by-name/gt/gtt/package.nix

@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "gtt";
-  version = "11";
+  version = "12";
 
   src = fetchFromGitHub {
     owner = "eeeXun";
     repo = "gtt";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-sgWoeBdS8HymVjaTjJZDU3KNuYLRLdC5I9k/tNEd0GA=";
+    hash = "sha256-9bZD+uRPFReeChODNqIl2AZfLKlwmkZ1qe9NoaSWmUc=";
   };
 
   vendorHash = "sha256-6C+++HIVwOwOmlsdwXWF/ykyK9WOlq/ktIPjRslvllk=";

pkgs/by-name/hc/hcloud/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "hcloud";
-  version = "1.68.0";
+  version = "1.69.0";
 
   src = fetchFromGitHub {
     owner = "hetznercloud";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bfKsCwAcKIHhTFLC+Abzt8BfaQbKzSvEE/nuZ1WS5wM=";
+    hash = "sha256-YsfG24cbUXBred1hKZolQcUYaFCCOR2swELwiSfUheg=";
   };
 
-  vendorHash = "sha256-PZ3VrFf2grtO94iUxCnbA/oZuvP39ma6Ptd76L6cIio=";
+  vendorHash = "sha256-2vEcJr0aHLTQFIb6gsutbZfQH+u+Ed/IP9Tdqqmspuk=";
 
   ldflags = [
     "-s"

pkgs/by-name/ho/hoppscotch/package.nix

@@ -8,18 +8,18 @@
 
 let
   pname = "hoppscotch";
-  version = "26.8.0-0";
+  version = "26.8.2-0";
 
   src =
     fetchurl
       {
         aarch64-darwin = {
           url = "https://github.com/hoppscotch/releases/releases/download/v${version}/Hoppscotch_mac_aarch64.dmg";
-          hash = "sha256-oaumcSqAzzRqwFArZJ0d20FwdH5UIJ6YhT0gvwbLXzY=";
+          hash = "sha256-8wc2SkHlvss9k+agB/JKfF/tAHPxLVab6meIXslEeqs=";
         };
         x86_64-linux = {
           url = "https://github.com/hoppscotch/releases/releases/download/v${version}/Hoppscotch_linux_x64.AppImage";
-          hash = "sha256-G+TmHOM3eS48TuGRCHznI9IxzF8wN6DtVDs9xOVdzPw=";
+          hash = "sha256-pBt5S+8VdqipmRwOGQurHpZg5uHv0MJh0GbuzBFDTjg=";
         };
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");

pkgs/by-name/im/imgpkg/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "imgpkg";
-  version = "0.48.1";
+  version = "0.48.2";
 
   src = fetchFromGitHub {
     owner = "carvel-dev";
     repo = "imgpkg";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-8T8wdpGJhqhVRk6BxrDX5Ci3PvxRDXzhUDKBqBg0gPk=";
+    hash = "sha256-YNd4OApC1m8HqUFuwlePEiH1wDR1RjA5V3A/a+IGvs8=";
   };
 
   vendorHash = null;

pkgs/by-name/ip/ipatool/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "ipatool";
-  version = "2.5.0";
+  version = "2.6.0";
 
   src = fetchFromGitHub {
     owner = "majd";
     repo = "ipatool";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-yC6MSyL3b9u/mb+YJUIZTsH2dtVgE0w2K3F2LlQE9tI=";
+    hash = "sha256-FBmZ4pbm3a/M7RKVKoFslplnnbE0UK96HgCjEunhHSI=";
   };
 
   vendorHash = "sha256-/DIJ41YXPMKZgnNraBasnJ1AIgfC5OA3fLn/vFJqs/Q=";

pkgs/by-name/ka/katex/package.nix

@@ -18,20 +18,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "katex";
-  version = "0.18.7";
+  version = "0.18.9";
 
   src = fetchFromGitHub {
     owner = "katex";
     repo = "katex";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-k0qpjCG0OzjVPBfwJj8rAoTEQZhhvyn/DO+KX6dOYg4=";
+    hash = "sha256-FpR79Et5et0JH93Zn+m5xg/wAL9F8lHIS+Uly2YWJ8I=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-KCpqcjFwzhYxwTg36z/HMVAqqIMzAS8xt5hk91VYRk0=";
+    hash = "sha256-BkjPCX8W1HEIJmluXRmIPTYmkx55OlNvH52KiJuyi9w=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ku/kubectl-gadget/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubectl-gadget";
-  version = "0.56.0";
+  version = "0.56.1";
 
   src = fetchFromGitHub {
     owner = "inspektor-gadget";
     repo = "inspektor-gadget";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HyQpkaa6MfBi1JJarXRSTpYUjx/golGl1lIStHAU3YU=";
+    hash = "sha256-d5RBwb10QbHkGuZkCKG1uXSRrk2tiWetJtvpnlEP//c=";
   };
 
-  vendorHash = "sha256-mXHoMsJMwNwsnpoLDc7OLiOUZhlbcslySkyJRAC9hb8=";
+  vendorHash = "sha256-ZhXIMgyaQE4pDEhckX19H0tXRhoM5iwwD3jNymzrffU=";
 
   env.CGO_ENABLED = 0;
 

pkgs/by-name/lc/lcevcdec/package.nix

@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lcevcdec";
-  version = "4.2.1";
+  version = "4.2.2";
 
   outputs = [
     "out"
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "v-novaltd";
     repo = "LCEVCdec";
     tag = finalAttrs.version;
-    hash = "sha256-syVpcbBPpWGRZ/fRy1QKC/kCokQ9IXcteMfg883362E=";
+    hash = "sha256-U6FzNNqYX2wwfS8EdCyT6qvEb0X1YuL4QbyJWupOh4k=";
   };
 
   postPatch = ''

pkgs/by-name/le/lenovo-legion/package.nix

@@ -9,14 +9,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "lenovo-legion-app";
-  version = "0.0.26-unstable-2026-09-11";
+  version = "0.0.31-unstable-2026-09-21";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "johnfanv2";
     repo = "LenovoLegionLinux";
-    rev = "e3b2116714b639c852133a44398d03fc64fe9217";
-    hash = "sha256-pXu0ZKUeZumvFic4rTDcXJW7alTUDie6RR2gTqjY4BI=";
+    rev = "877b826306241e0f6731cfd2c67c80ed6dc02560";
+    hash = "sha256-GAPJK2+eIlpfwg8Mw13TGVCeOdVHJ40evpJbid4pD6g=";
   };
 
   sourceRoot = "${src.name}/python/legion_linux";

pkgs/by-name/li/libphonenumber/package.nix

@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libphonenumber";
-  version = "9.0.39";
+  version = "9.0.40";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "libphonenumber";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-b9N3nVCTVZgGbj+OQsxu4MLnLYbnGXfWikXQrnrRLfs=";
+    hash = "sha256-YCHKHT/GjIzJZZ7HdXtkZtVbZh4TJcCqMLkoDXOzXFk=";
   };
 
   patches = [

pkgs/by-name/li/libretroPackages/cores/beetle-psx.nix

@@ -8,13 +8,13 @@
 }:
 mkLibretroCore {
   core = "mednafen-psx" + lib.optionalString withHw "-hw";
-  version = "0-unstable-2026-09-07";
+  version = "0-unstable-2026-09-21";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "beetle-psx-libretro";
-    rev = "82d8e051d1c7741a18d930be90e458b48abaa9a1";
-    hash = "sha256-CtYOhTHnG5l5Pl67p2T5JDO7oV9qHYgBrnUBMYsh5Eo=";
+    rev = "5718ab9b829599687671503f11494ca6a0049c57";
+    hash = "sha256-hQIunB67o2XoKpNB8CQT8MNuKhaA/mLpY0JF/zC2v4Q=";
   };
 
   extraBuildInputs = lib.optionals withHw [

pkgs/by-name/md/mdns-scanner/package.nix

@@ -7,7 +7,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mdns-scanner";
-  version = "0.28.0";
+  version = "1.0.0";
 
   __structuredAttrs = true;
 
@@ -15,10 +15,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "CramBL";
     repo = "mdns-scanner";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2AefYmbWHL2t6/CNwFv1T2GZT6/HUzoGUNCVqo7/Y5c=";
+    hash = "sha256-ugFjVJaffqVJljfK8ZFQlRl6PImUHZ9tozmSvJ759iI=";
   };
 
-  cargoHash = "sha256-iMaD7xTiIyHB+K8VIojILNHLwh5NiBVPWOMwoD/C4gk=";
+  cargoHash = "sha256-dqBDI44SrEp8OhMiaSYFUPEgXxP6hKcZdWscic8cD1U=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/mo/moor/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "moor";
-  version = "2.19.1";
+  version = "2.19.2";
 
   src = fetchFromGitHub {
     owner = "walles";
     repo = "moor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-84Q0BAe3hQOaRM8LJm9jnA2D+IYbHVOV6UpSCVYRVu4=";
+    hash = "sha256-fwXWMreyB3Hr+6BMDZ4M6IPOl6FNcvVgU/c3Guf3+YU=";
   };
 
-  vendorHash = "sha256-y9NejPlFRCVhfR0A+kTQABpqAxMVmKlZizbJjI39F/k=";
+  vendorHash = "sha256-ygMUnuIqr+rIw5+nJSUFomr5VokhqVQfWs9nQHeoQ0U=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/mu/multica-cli/package.nix

@@ -11,18 +11,18 @@ buildGoModule (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   pname = "multica-cli";
-  version = "0.4.43";
+  version = "0.5.3";
 
   src = fetchFromGitHub {
     owner = "multica-ai";
     repo = "multica";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-M/Zc9Bc/IKK2Dwc9TbNGz3OCDARmQQOXRTLPYw9iLZs=";
+    hash = "sha256-4nhCKbODP0Lbdl7pNkK0/eYgbL/HMyCUZlps+DGqbHs=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/server";
 
-  vendorHash = "sha256-a3khoppmpS5o+ZJqWjcFwLKpUSXfTG9P5/4lLdBr+tY=";
+  vendorHash = "sha256-b6elV4j+7R6L29q8tbCI3MAOY8X63ndzlmCMv7jo7mM=";
 
   subPackages = [ "cmd/multica" ];
 

pkgs/by-name/na/nak/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nak";
-  version = "0.20.6";
+  version = "0.20.7";
 
   src = fetchFromGitHub {
     owner = "fiatjaf";
     repo = "nak";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-RNKKkYc6PN/BbYqwUkRWg3o3lzQHg1NONvfqGxQ6t10=";
+    hash = "sha256-4hnzi68K99rQjg3JtRND6TgM24qwD+8wVDNQT4u7eIo=";
   };
 
-  vendorHash = "sha256-J1prpdOX2wXfPOkJ/GYetW3Agz5pUeyAj4zBplz4xRw=";
+  vendorHash = "sha256-nX4kt4HhO8YKqfd6XtNAbAPznHyg5BUZUu4oZh9mabc=";
 
   ldflags = [
     "-s"

pkgs/by-name/ne/netbox/plugins/netbox-lifecycle/package.nix

@@ -11,14 +11,14 @@ buildPythonPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "netbox-lifecycle";
-  version = "1.1.9";
+  version = "1.1.10";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "DanSheps";
     repo = "netbox-lifecycle";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iCBlwhaf6IFdni7FQyRPtRJVwt04w0Jc4R0CeQlIWCY=";
+    hash = "sha256-XJRToa07iMVMg6AmA0v9OHsF75ZtS74OByKIKLzErBM=";
   };
 
   build-system = [ setuptools ];

pkgs/by-name/ne/netbox/plugins/netbox-security/package.nix

@@ -10,14 +10,14 @@ buildPythonPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "netbox-security";
-  version = "1.6.2";
+  version = "1.6.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "andy-shady-org";
     repo = "netbox-security";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/lPKasyDhfjyHWIE6PtVzpbfPdwmvLWH2P7modGKEiI=";
+    hash = "sha256-jZ9SFAI9RhOIFHiYYx5puoYJtUsMiyzzI4lH4qzMoac=";
   };
 
   build-system = [ setuptools ];

pkgs/by-name/oc/oci-cli/package.nix

@@ -31,14 +31,14 @@ in
 
 py.pkgs.buildPythonApplication (finalAttrs: {
   pname = "oci-cli";
-  version = "3.92.1";
+  version = "3.94.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "oracle";
     repo = "oci-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EpiMb7nnZo9O59rV6qRhp6DP2pmGni7UNeiJpq3Oot4=";
+    hash = "sha256-cCO3KyAYnHCqpGmqOipGnCmSHnjz3M5URbVklnJV6Yk=";
   };
 
   nativeBuildInputs = [ installShellFiles ];

pkgs/by-name/om/omnictl/package.nix

@@ -8,16 +8,16 @@
 
 buildGo127Module rec {
   pname = "omnictl";
-  version = "1.12.1";
+  version = "1.12.2";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-nERNdWZLCw/7o03MH7y+PpglA72Yf/llKvSJNQeLS1k=";
+    hash = "sha256-+91S+Hq0LiqdHDCssuLMUpmT6NFAdXBIJxhiDqBfIFs=";
   };
 
-  vendorHash = "sha256-2bHYQdNMZPNpw7DzYBSHU044dx9cWU95Cwf5zev4Aqg=";
+  vendorHash = "sha256-F8cLb1ZKVNC0lW9OINijLigErA7aglNroYAXxfEreLU=";
 
   ldflags = [
     "-s"

pkgs/by-name/pa/parted/package.nix

@@ -18,11 +18,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "parted";
-  version = "3.7";
+  version = "3.8";
 
   src = fetchurl {
     url = "mirror://gnu/parted/parted-${finalAttrs.version}.tar.xz";
-    sha256 = "sha256-AI3ldWGk88JaBkjmbtEeezC+STiJtkM0ptcPLBlR73s=";
+    sha256 = "sha256-oreBH0ew3bH3sdCqRW98EnDacHCM4jHC/gVMcZnq+mM=";
   };
 
   outputs = [

pkgs/by-name/pr/prometheus-atlas-exporter/package.nix

@@ -6,7 +6,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "atlas-exporter";
-  version = "1.0.6";
+  version = "1.1.0";
 
   __structuredAttrs = true;
 
@@ -14,10 +14,10 @@ buildGoModule (finalAttrs: {
     owner = "czerwonk";
     repo = "atlas_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xCDqu6+J2xIk+BnrR42jsDsbI+ZAr4kC+euBW0LM6Vk=";
+    hash = "sha256-6H/C/prFNfPmZD9C+kLrok/AOVgiWaY3DdjdqktHQmQ=";
   };
 
-  vendorHash = "sha256-TMpImTanecjlhCsQvIG/6TdGvs4ZAqLhX6qSO6AboMI=";
+  vendorHash = "sha256-zHLeH2ExPpvOzAfm1llAPtac49AbYmnuTdYMTUNMb1Q=";
 
   meta = {
     description = "Prometheus exporter for RIPE Atlas measurement results";

pkgs/by-name/pr/prometheus-bird-exporter/package.nix

@@ -7,7 +7,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "bird-exporter";
-  version = "1.6.2";
+  version = "1.7.0";
 
   __structuredAttrs = true;
 
@@ -15,10 +15,10 @@ buildGoModule (finalAttrs: {
     owner = "czerwonk";
     repo = "bird_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-V/ouf+NcJQhkSPYl5Ysisbs3cgOma8LlXezndDz36qw=";
+    hash = "sha256-NidsYTeYdFr+chY+3h2G4JUE3v9BX9yiv/nlfK/lyKs=";
   };
 
-  vendorHash = "sha256-xNqLRIn5SkEo9L2p1ThlsNuTboz4dxyBw9hEpew5+V8=";
+  vendorHash = "sha256-nBZDxAUBYJMIXF3Yh9Br3PI38Gn8NuI+MEV+hQsvx6Q=";
 
   passthru.tests = { inherit (nixosTests.prometheus-exporters) bird; };
 

pkgs/by-name/pr/prometheus-ping-exporter/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "ping-exporter";
-  version = "1.2.3";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "czerwonk";
     repo = "ping_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-r9+cx5mU3aW9Yf7LoRm1G8izFt3D4gMOlLGuNo4L5z0=";
+    hash = "sha256-faMYFo6QdiyLZ5v7BcsIakQ0SD4r6Jb2VQvGuWzjrmI=";
   };
 
-  vendorHash = "sha256-JKkvg09rtnc4CCUoZ5+NZEVcHh5nLFvkhaBQS4IksF4=";
+  vendorHash = "sha256-xO+86cajEkPj2+6DtShbPjspDmpb1egm76ok/2V0NMM=";
 
   meta = {
     description = "Prometheus exporter for ICMP echo requests";

pkgs/by-name/ra/rancher/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "rancher";
-  version = "2.15.1";
+  version = "2.15.2";
 
   src = fetchFromGitHub {
     owner = "rancher";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YWhfGuTbeYVpIEp9HAVgKaonL6ygsBpEDABXEoQY2sc=";
+    hash = "sha256-DHxPgHm5dzv4o8yZD6SaQ5Q+3UAZ5LJ/scT7dIXe5G8=";
   };
 
   env.CGO_ENABLED = 0;
@@ -25,7 +25,7 @@ buildGoModule (finalAttrs: {
     "-static"
   ];
 
-  vendorHash = "sha256-IS45T/H0Il8U8+ahn61KuT4SCiO/lo5UD3YzqytkOwU=";
+  vendorHash = "sha256-zy2CefEZbYu1HlfPLZtzYxpLYZ0cJko5W6ErDCukYDc=";
 
   postInstall = ''
     mv $out/bin/cli $out/bin/rancher

pkgs/by-name/ra/rates/package.nix

@@ -1,36 +0,0 @@
-{
-  lib,
-  fetchFromGitHub,
-  rustPlatform,
-  versionCheckHook,
-}:
-
-rustPlatform.buildRustPackage (finalAttrs: {
-  pname = "rates";
-  version = "0.7.0";
-
-  src = fetchFromGitHub {
-    owner = "lunush";
-    repo = "rates";
-    tag = finalAttrs.version;
-    hash = "sha256-zw2YLTrvqbGKR8Dg5W+kJTDKIfro+MNyjHXfZMXZhaw=";
-  };
-
-  cargoHash = "sha256-qfuCA1kAEbYIYI274lNrEKZNhltQP71CwtsjBr0REJs=";
-
-  nativeInstallCheckInputs = [ versionCheckHook ];
-
-  doInstallCheck = true;
-
-  meta = {
-    description = "CLI tool that brings currency exchange rates right into your terminal";
-    homepage = "https://github.com/lunush/rates";
-    changelog = "https://github.com/lunush/rates/releases/tag/${finalAttrs.version}";
-    license = with lib.licenses; [
-      asl20
-      mit
-    ];
-    maintainers = with lib.maintainers; [ fab ];
-    mainProgram = "rates";
-  };
-})

pkgs/by-name/ra/raycast/package.nix

@@ -11,15 +11,15 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "raycast";
-  version = "2.4.1.0";
+  version = "2.5.2.0";
 
   __structuredAttrs = true;
   strictDeps = true;
 
   src = fetchurl {
     name = "Raycast.dmg";
-    url = "https://x-r2.raycast-releases.com/Raycast_2.4.1.0_df416282fa_arm64.dmg";
-    hash = "sha256-W7Ca2vz4BwYFJkuyn89Jbk1hXaOmoM6I6rcGU9GGp5U=";
+    url = "https://x-r2.raycast-releases.com/Raycast_2.5.2.0_67ef5b0f31_arm64.dmg";
+    hash = "sha256-G3l4Ng0blsqWsL8T2bHRlAWZzuxh3YyFoN4/DoJEWyM=";
   };
 
   dontPatch = true;

pkgs/by-name/re/recode/package.nix

@@ -12,12 +12,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "recode";
-  version = "3.7.15";
+  version = "3.7.16";
 
   # Use official tarball, avoid need to bootstrap/generate build system
   src = fetchurl {
     url = "https://github.com/rrthomas/recode/releases/download/v${finalAttrs.version}/recode-${finalAttrs.version}.tar.gz";
-    hash = "sha256-9ZBAf8UbrbNRlz/BMz7jMRHwXsg6j5VP2M8MXjBDmAY=";
+    hash = "sha256-w9QH9U90uudjYDEgluLtRmIvAchuULCe9Fstk8j8/y0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ro/roave-backward-compatibility-check/package.nix

@@ -7,16 +7,16 @@
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "roave-backward-compatibility-check";
-  version = "8.21.0";
+  version = "8.22.0";
 
   src = fetchFromGitHub {
     owner = "Roave";
     repo = "BackwardCompatibilityCheck";
     tag = finalAttrs.version;
-    hash = "sha256-kCs9lDvbhUacOH4bEAZjm2LzHSvJnVMR9lzmt00GgTw=";
+    hash = "sha256-RRfjaqelRIsjAOl1vgXZ/OGObBjd62o8C23LNVtqkKE=";
   };
 
-  vendorHash = "sha256-68KE/ieWYST/jQMaaK5lLqBLEmI4YhYPOE4XuXNMfqM=";
+  vendorHash = "sha256-ODcA2rQVZ48VpKTW0XortUAWRZvhyCj2gbiF/GzKs+0=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

pkgs/by-name/ru/rustical/package.nix

@@ -10,17 +10,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rustical";
-  version = "0.16.2";
+  version = "0.16.4";
   __darwinAllowLocalNetworking = true;
 
   src = fetchFromGitHub {
     owner = "lennart-k";
     repo = "rustical";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fuHTgU6S+goaih0rwY1JkDTR95fcRws3o9wHJWyy8vM=";
+    hash = "sha256-JOpUK5JWHyCk/a/Uw8oi9HD8hpvWKRVRhMzhURk+W34=";
   };
 
-  cargoHash = "sha256-kaVmmroa3IADmnzdc4w/kxxloXgMsX6Xy1iAWOJoAR0=";
+  cargoHash = "sha256-30SsiWHIu/gN5080xGxLGBPECfTFkIAxr3c6sC54b0w=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/ru/rustls-ffi/package.nix

@@ -15,18 +15,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rustls-ffi";
-  version = "0.15.3";
+  version = "0.15.4";
 
   src = fetchFromGitHub {
     owner = "rustls";
     repo = "rustls-ffi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ayD9A9ZiQX3pkRJ4T+EyDsNroGuTdR2xEXcfz6D3MY8=";
+    hash = "sha256-bhh9KtL7AvRLX1W6+FKdimq+YZsIsQHFdVKf1h1i0Jo=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-5FJb6cuQMT2NWQvbxip+medxcEUtSnZaKu8QR2YFKzc=";
+    hash = "sha256-22MIs5vjWu9IbjrpbPnp4g3i+nR6v7qxQoMhfve5SDM=";
   };
 
   propagatedBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [

pkgs/by-name/se/seqkit/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "seqkit";
-  version = "2.13.0";
+  version = "2.14.0";
 
   src = fetchFromGitHub {
     owner = "shenwei356";
     repo = "seqkit";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-IZhQHB96uFQGfAqCJiT4EdkDT605EHu7eSQa/i4d3hQ=";
+    sha256 = "sha256-yKgkzhwUMD37AY3VvX+jShWosI7Eda8TRCJEi0Wz748=";
   };
 
-  vendorHash = "sha256-HDyytwFIfvDGMmcMVH0F2NAttygTUu8PS4RvKK0TzLE=";
+  vendorHash = "sha256-w2FKHUkxvkQwMDmiVVyKItPCwmVURTERIgrvvjX97CI=";
 
   meta = {
     description = "Cross-platform and ultrafast toolkit for FASTA/Q file manipulation";

pkgs/by-name/se/sesh/package.nix

@@ -8,7 +8,7 @@
 }:
 buildGo127Module (finalAttrs: {
   pname = "sesh";
-  version = "2.30.1";
+  version = "2.31.0";
   __structuredAttrs = true;
 
   nativeBuildInputs = [
@@ -20,7 +20,7 @@ buildGo127Module (finalAttrs: {
     owner = "joshmedeski";
     repo = "sesh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dPKi/QWrOb91QVm3YBX6tXjkspJYns6E9NGK0cQrmr0=";
+    hash = "sha256-SV7BSrBS3NDVFACG5vShCECJlQ4+9rIdOxmINR8J3ms=";
   };
 
   # NOTE: prevent crash when getting vendor deps/hash

pkgs/by-name/sp/spotifast/package.nix

@@ -0,0 +1,145 @@
+{
+  lib,
+  stdenv,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  cmake,
+  cacert,
+  makeWrapper,
+  icnsify,
+  nix-update-script,
+  dbus,
+  rcodesign,
+  re-plistbuddy,
+  alsa-lib,
+  libpulseaudio,
+  libGL,
+  libx11,
+  libxkbcommon,
+  wayland,
+  libxcursor,
+  libxi,
+  libxrandr,
+  apple-sdk_15,
+}:
+
+let
+  runtimeLibraries = [
+    dbus
+    libxkbcommon
+    wayland
+    libGL
+    libx11
+    libxcursor
+    libxi
+    libxrandr
+  ];
+in
+rustPlatform.buildRustPackage rec {
+  pname = "spotifast";
+  version = "0.10.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "crmne";
+    repo = "spotifast";
+    tag = "v${version}";
+    hash = "sha256-rLyzvv7eJSHbzJdwx0iuwk5MHXWHHneGTOkpUQwIGAg=";
+  };
+
+  cargoHash = "sha256-pwid4r8fy3t4g6CsAepkvT9KbExUxml6jj8c71Pv/wc=";
+
+  # projectm-sys only searches lib, while CMake may otherwise install to lib64.
+  postPatch = ''
+    substituteInPlace "$cargoDepsCopy"/source-git-*/projectm-sys-*/build.rs \
+      --replace-fail \
+      '.define("BUILD_SHARED_LIBS", build_shared_libs)' \
+      '.define("CMAKE_INSTALL_LIBDIR", "lib").define("BUILD_SHARED_LIBS", build_shared_libs)'
+  ''
+  + lib.optionalString stdenv.hostPlatform.isDarwin ''
+    substituteInPlace src/updates/macos.rs \
+      --replace-fail \
+      'Command::new("/usr/libexec/PlistBuddy")' \
+      'Command::new("${lib.getExe' re-plistbuddy "PlistBuddy"}")'
+  '';
+
+  # The proxy test needs a valid CA bundle.
+  preCheck = ''
+    export SSL_CERT_FILE="${cacert}/etc/ssl/certs/ca-bundle.crt"
+  '';
+
+  nativeBuildInputs = [
+    pkg-config
+    cmake
+    rustPlatform.bindgenHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ makeWrapper ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    rcodesign
+    icnsify
+    re-plistbuddy
+  ];
+
+  nativeCheckInputs = lib.optionals stdenv.hostPlatform.isLinux [ dbus ];
+
+  buildInputs =
+    lib.optionals stdenv.hostPlatform.isLinux [
+      alsa-lib
+      libpulseaudio
+      libGL
+      libx11
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isDarwin [ apple-sdk_15 ];
+
+  postFixup =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      wrapProgram $out/bin/fastpotify \
+        --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath runtimeLibraries}
+      wrapProgram $out/bin/spotifast \
+        --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath runtimeLibraries}
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      rcodesign sign "$out/Applications/Spotifast.app"
+    '';
+
+  postInstall =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      install -Dm644 packaging/applications/spotifast.desktop \
+        $out/share/applications/spotifast.desktop
+      install -Dm644 packaging/icons/spotifast.svg \
+        $out/share/icons/hicolor/scalable/apps/spotifast.svg
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      app="$out/Applications/Spotifast.app/Contents"
+      mkdir -p "$app/MacOS" "$app/Resources"
+      executable=Spotifast
+      identifier=rocks.spotifast.Spotifast
+      cp "$out/bin/spotifast" "$app/MacOS/$executable"
+      icnsify packaging/macos/icon-1024.png -o "$app/Resources/spotifast.icns"
+      substitute packaging/macos/Info.plist "$app/Info.plist" \
+        --replace-fail __VERSION__ "${version}" \
+        --replace-fail __BUILD__ "${lib.head (lib.splitString "-" version)}" \
+        --replace-fail __EXECUTABLE__ "$executable" \
+        --replace-fail __IDENTIFIER__ "$identifier"
+    '';
+
+  passthru.updateScript = nix-update-script { };
+
+  __darwinAllowLocalNetworking = true;
+  # CoreText's fallback test reads the system font files.
+  __impureHostDeps = lib.optionals stdenv.hostPlatform.isDarwin [
+    "/System/Library/Fonts"
+  ];
+
+  meta = {
+    description = "Fast native Spotify client with local playback and Spotify Connect";
+    homepage = "https://spotifast.rocks";
+    changelog = "https://github.com/crmne/spotifast/releases/tag/v${version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ DmitrySkibitsky ];
+    mainProgram = "spotifast";
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+  };
+}

pkgs/by-name/sq/sqldef/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "sqldef";
-  version = "3.11.21";
+  version = "3.11.24";
 
   src = fetchFromGitHub {
     owner = "sqldef";
     repo = "sqldef";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-UAv7W0LaAJ8IWF5LhmpT6UEgUm1pqY1+K18c7X6xBkY=";
+    hash = "sha256-cOadX5XhZpZswI/3XBiJkUpSJf+d3xqQGTgJ5N1yR94=";
   };
 
   proxyVendor = true;

pkgs/by-name/st/stanc/package.nix

@@ -2,39 +2,53 @@
   lib,
   fetchFromGitHub,
   ocamlPackages,
+  versionCheckHook,
 }:
 
 ocamlPackages.buildDunePackage rec {
   pname = "stanc";
-  version = "2.39.0";
+  version = "2.40.0";
 
-  minimalOCamlVersion = "4.12";
+  minimalOCamlVersion = "5.3";
 
   src = fetchFromGitHub {
     owner = "stan-dev";
     repo = "stanc3";
     tag = "v${version}";
-    hash = "sha256-ZAH9uFEZu75BC2xYGUXg62RHiADmKYBYP2Nt8bwEVRY=";
+    hash = "sha256-Xr7ulBens9qTVvkHwmGu/dDgXGInp7BJN13BKi/adko=";
   };
 
+  postPatch = ''
+    substituteInPlace src/driver/Entry.ml src/stanc/CLI.ml src/stan_math_backend/Lower_program.ml \
+      --replace-fail '%%NAME%%' 'stanc' \
+      --replace-fail '%%VERSION%%' 'v${version}'
+  '';
+
   nativeBuildInputs = with ocamlPackages; [
     cmdliner
     menhir
   ];
 
   buildInputs = with ocamlPackages; [
-    core_unix
-    menhirLib
-    ppx_deriving
-    fmt
-    yojson
     cmdliner
+    fmt
+    menhirLib
+    ppx_compare
+    ppx_deriving
+    ppx_expect_nobase
+    ppx_sexp_conv
+    sexplib0
+    yojson
   ];
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   meta = {
     homepage = "https://github.com/stan-dev/stanc3";
     description = "Stan compiler and utilities";
     license = lib.licenses.bsd3;
+    mainProgram = "stanc";
     maintainers = with lib.maintainers; [ wegank ];
     platforms = lib.platforms.unix;
   };

pkgs/by-name/su/sunshine/package.nix

@@ -47,7 +47,7 @@
   svt-av1,
   shaderc,
   vulkan-loader,
-  libappindicator,
+  qt6,
   libnotify,
   pipewire,
   miniupnpc,
@@ -69,7 +69,7 @@ let
   # a fixed-output derivation and point cmake at it via FFMPEG_PREPARED_BINARIES.
   # The tag must match the commit of the third-party/build-deps submodule pinned
   # in the Sunshine release.
-  buildDepsTag = "v2026.516.30821";
+  buildDepsTag = "v2026.910.121303";
   ffmpegArch =
     {
       x86_64-linux = "Linux-x86_64";
@@ -86,9 +86,9 @@ let
     # unlike the empty-hash trick).
     hash =
       {
-        x86_64-linux = "sha256-VT+4qP2FaizCoIBBbBkzbYw4YOvGhuBUoZxWL0IYVZo=";
-        aarch64-linux = "sha256-X5v/GsJy8G3/LHW/8s0VAS0Vegr7JhZSqYotXL/s81o=";
-        aarch64-darwin = "sha256-xkfwLJgb7uz1H7mJrQFW79w2T/T/Zv7biXlvXz5UvXc=";
+        x86_64-linux = "sha256-1S57XfkJa+qEYQLmifWyT9ul0SASFhSk1lkk2timnOY=";
+        aarch64-linux = "sha256-1HnlNem4AbcJkhZA8x5hC1/4cCqL8bJDjXNkHCI5IYw=";
+        aarch64-darwin = "sha256-jtBnSo0rn0VCnbfB90by1iBE4zvmtE86Wz2x+PolGmw=";
       }
       .${stdenv.hostPlatform.system};
   };
@@ -96,7 +96,7 @@ let
 in
 stdenv'.mkDerivation (finalAttrs: {
   pname = "sunshine";
-  version = "2026.516.143833";
+  version = "2026.914.233613";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -105,15 +105,14 @@ stdenv'.mkDerivation (finalAttrs: {
     owner = "LizardByte";
     repo = "Sunshine";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3yuhOyW1Rqz4ddZ40z2ZzpAReZQFva0SL595XrnFB60=";
+    hash = "sha256-HqbswLvX/UiY3nOwxSesBMqnFAF0zKP1ueE6PwDtTNs=";
     fetchSubmodules = true;
   };
 
-  # build webui
   ui = buildNpmPackage {
     inherit (finalAttrs) src version;
     pname = "sunshine-ui";
-    npmDepsHash = "sha256-YnNnuAdj/S5LGNytqIsmCApIec8DTWKF6VIJ7AXUctU=";
+    npmDepsHash = "sha256-/uY+zvYxQG0Yb8kygwF48YfS+Km0bcQBW4poaqkeJXs=";
 
     installPhase = ''
       runHook preInstall
@@ -168,6 +167,7 @@ stdenv'.mkDerivation (finalAttrs: {
   ++ lib.optionals isLinux [
     wayland-scanner
     shaderc # provides glslc, needed at configure time for shader compilation
+    qt6.wrapQtAppsHook
     # Avoid fighting upstream's usage of vendored ffmpeg libraries
     autoPatchelfHook
   ]
@@ -218,7 +218,8 @@ stdenv'.mkDerivation (finalAttrs: {
     svt-av1
     vulkan-loader
     pipewire
-    libappindicator
+    qt6.qtbase
+    qt6.qtsvg
     libnotify
   ]
   ++ lib.optionals cudaSupport [
@@ -295,10 +296,12 @@ stdenv'.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
-  # allow Sunshine to find libvulkan
-  postFixup = lib.optionalString cudaSupport ''
+  dontWrapQtApps = true;
+
+  postFixup = lib.optionalString isLinux ''
     wrapProgram $out/bin/sunshine \
-      --set LD_LIBRARY_PATH ${lib.makeLibraryPath [ vulkan-loader ]}
+      "''${qtWrapperArgs[@]}" \
+      ${lib.optionalString cudaSupport "--set LD_LIBRARY_PATH ${lib.makeLibraryPath [ vulkan-loader ]}"}
   '';
 
   doInstallCheck = isLinux;

pkgs/by-name/su/sunshine/updater.sh

@@ -50,7 +50,7 @@ log "src hash: $src_hash"
 log "Patching src hash in $package_nix"
 # The src fetchFromGitHub is the only one with fetchSubmodules; anchor on it so
 # we don't touch the ffmpeg or npmDepsHash entries. sed -z spans newlines.
-sed -i -zE "s#hash = \"sha256-[A-Za-z0-9+/=]+\"(\\s*fetchSubmodules = true;)#hash = \"$src_hash\"\\1#" "$package_nix"
+sed -i -zE "s#hash = \"sha256-[A-Za-z0-9+/=]+\";(\\s*fetchSubmodules = true;)#hash = \"$src_hash\";\\1#" "$package_nix"
 
 if ! grep -q "$src_hash" "$package_nix"; then
     echo "ERROR: failed to write src hash into $package_nix" >&2
@@ -84,7 +84,7 @@ log "build-deps tag: $build_deps_tag"
 prefetch_unpacked_sri() {
     local raw
     raw=$(nix-prefetch-url --unpack --type sha256 "$1")
-    nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri "$raw"
+    nix-hash --type sha256 --to-sri "$raw"
 }
 
 ffmpeg_url() {

pkgs/by-name/tr/treemd/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "treemd";
-  version = "0.9.0";
+  version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "Epistates";
     repo = "treemd";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HSLl24PEOsSmoMNbfQm866msgjfcs0QKSED9GPhmjvQ=";
+    hash = "sha256-PeuaOoYF2sWttVkQ9fUU0awAFSdaR5vIzCZR8hCMTsA=";
   };
 
-  cargoHash = "sha256-YmejEZAZrmiviXGXvLqEGHia1fHNyJaYZGg4Px18Ae0=";
+  cargoHash = "sha256-IJpPqCXY93gVD43zDHlr81FlOowTD3lzKbO9KL0GLZU=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

pkgs/by-name/tu/turtle-build/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "turtle-build";
-  version = "0.5.1";
+  version = "0.5.7";
 
   src = fetchFromGitHub {
     owner = "raviqqe";
     repo = "turtle-build";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-0WqFflD6WgCyKREOfAdx+NDrFhQlGMhNmEjf9dBdtNo=";
+    hash = "sha256-WWPrTVCVLMVH28WitTFh3OE7ig0GwSBSh9RhGfOYCG4=";
   };
 
-  cargoHash = "sha256-DCZZHkg+mk10aGpgz/XvE1hyl+qDR2KELqxxjVeP0ps=";
+  cargoHash = "sha256-537IZEfCIRyJhAD3nv6l2iuuloosJmgmwHTFueTsTEk=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

pkgs/by-name/ty/ty/package.nix

@@ -17,7 +17,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ty";
-  version = "0.0.82";
+  version = "0.0.84";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
@@ -25,7 +25,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     repo = "ty";
     tag = finalAttrs.version;
     fetchSubmodules = true;
-    hash = "sha256-7zYLPTkVXbHBluqjzUMzc0fTfpVKFRa92mNA9wR7WL0=";
+    hash = "sha256-nIk35Ih3xuGHx06Cxaiw1gkClwfQ+sW61XbbwkU/+ds=";
   };
 
   # For Darwin platforms, remove the integration test for file notifications,
@@ -39,7 +39,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoBuildFlags = [ "--package=ty" ];
 
-  cargoHash = "sha256-2I6FhTHZhEAMruPv3gOfZTgO9TYdo3/u+zzeAM1Gq4o=";
+  cargoHash = "sha256-iF+KUQMeACujyPoVRxjzslg7cmUFoYF+kXEWqIMaTqI=";
 
   nativeBuildInputs = [ installShellFiles ];
   buildInputs = [ rust-jemalloc-sys ];

pkgs/by-name/v2/v2ray-rules-dat/package.nix

@@ -5,7 +5,7 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "v2ray-rules-dat";
-  version = "202609132350";
+  version = "202609240010";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -25,11 +25,11 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   passthru = {
     geoipDat = fetchurl {
       url = "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${finalAttrs.version}/geoip.dat";
-      hash = "sha256-RTJf7hVVyL8EEVEAaUzoQpuIybs7NUirz9I2ocjqFG8=";
+      hash = "sha256-8zcM85GDG7AeHmYt+IWWFk0Tbn2fgakcALriZYfgLXI=";
     };
     geositeDat = fetchurl {
       url = "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${finalAttrs.version}/geosite.dat";
-      hash = "sha256-JpFPaZLfwNce8uMRCgFXEGixXS9K40Ogpa+8HJ5OVZA=";
+      hash = "sha256-IkeYzPr0+wm+MbY8CAeylpZBp0NQkCx2kmpsDp0zR7o=";
     };
     updateScript = ./update.sh;
   };

pkgs/by-name/ve/velocity/deps.json

@@ -19,23 +19,23 @@
    "module": "sha256-IFNqlfL+sr9DBRKMaq7Lb9idxFeYqchfJgK4qAnXUNs=",
    "pom": "sha256-Q1z/VXiZht7arXF/aPuo1UgklHhWLc2EsirU1lZvRAs="
   },
-  "com/diffplug/spotless#com.diffplug.spotless.gradle.plugin/8.9.0": {
-   "pom": "sha256-KiSidLMlcjuB1QGv6fjuNTNJK+WK2VIVukcEh39e4Y0="
+  "com/diffplug/spotless#com.diffplug.spotless.gradle.plugin/8.10.2": {
+   "pom": "sha256-FZGO3WQDFXvZlCCbPs0qEY/ulRkzKETOiokkiC69YB0="
   },
-  "com/diffplug/spotless#spotless-lib-extra/4.9.0": {
-   "jar": "sha256-HyB4zQvxKfI/aIGO8OrU6ZzrqKsAjmOKwDEbUHsBKZw=",
-   "module": "sha256-I50MaVyJBIeDyCJl4zMasKuy2R2M3KlK6mTFAn0trCs=",
-   "pom": "sha256-4wnu/KcMgWId/dV/l3tpBl8bLn/F1e5Ter3IWJqR7Js="
+  "com/diffplug/spotless#spotless-lib-extra/4.10.2": {
+   "jar": "sha256-qA1noQ+cq1Y/9COWXC6dEN7wcCiHHxzBn+H5jrY/rMQ=",
+   "module": "sha256-goyEXXK61kjlB1SI3/Pqz8hfln7/6oBrY/J1TjOiAtk=",
+   "pom": "sha256-XVE3WpaIfRYlJPw3OBdhctFFNkpLBDCGgQQZD4aKmWg="
   },
-  "com/diffplug/spotless#spotless-lib/4.9.0": {
-   "jar": "sha256-kJBhy1A+7QEskhkMHZAXa7on65jVopAG6tFoGlkG8m8=",
-   "module": "sha256-5ev03bdRVVuCANvKHdvU32eoI7dR1b71/s+m2wiZoyw=",
-   "pom": "sha256-ieleUBzLXDxf9VR8iyR3/Clbl34Nj34OULWTrue9sL4="
+  "com/diffplug/spotless#spotless-lib/4.10.2": {
+   "jar": "sha256-gDn7ywFu9ATeLZk5SGw+jlZ9VnJ8KzxhoaXNR14FEis=",
+   "module": "sha256-WIw9W9rV5vgB484/++NL8/eFKG8O+ClgwW5zUqFAOVE=",
+   "pom": "sha256-76R5U3Ncq5EyaDVHI9srlS9WSY109poBVoTEg6aPGzs="
   },
-  "com/diffplug/spotless#spotless-plugin-gradle/8.9.0": {
-   "jar": "sha256-quTS9fpQJs0gJ0xXYP0Be0mSMAMv6E39jkgquZYNN2Y=",
-   "module": "sha256-Rdxah2UCG19mXf3ilysGO5Zgt0tySYdVqUVDQ0PYAOc=",
-   "pom": "sha256-PNYQSZvqWU/zcOUC/g/oAAWXUNpyrGTsPlBnkM0hE0s="
+  "com/diffplug/spotless#spotless-plugin-gradle/8.10.2": {
+   "jar": "sha256-vR1H6Bg4/5QlGzghMxQaBiNDeQFkplidHxuQ1sQgwsk=",
+   "module": "sha256-QjNK5L1Amg3a0uy5xY9JbvWXTZU/DCpFTbqrZFqUbqw=",
+   "pom": "sha256-JMNaxsCLS5pRI8oJ1E74En5uIx93hOBjEQDcfCRYhD4="
   },
   "com/google/code/gson#gson-parent/2.11.0": {
    "pom": "sha256-issfO3Km8CaRasBzW62aqwKT1Sftt7NlMn3vE6k2e3o="
@@ -96,12 +96,12 @@
   "org/apache/commons#commons-parent/98": {
    "pom": "sha256-1AMYUn9WAz4P8HiZccw4yFaqmaaF7qEScIFOfx7an7o="
   },
-  "org/eclipse/jgit#org.eclipse.jgit-parent/7.7.0.202606012155-r": {
-   "pom": "sha256-S4qHPLaFhEH/MSUDTbVU0leSL7cIIEeVtyAZDW+05iE="
+  "org/eclipse/jgit#org.eclipse.jgit-parent/7.7.1.202607240634-r": {
+   "pom": "sha256-O/RKKe9ukBmDx7MfGQkaaEumdP6n1a3V3zF9DvoJxoc="
   },
-  "org/eclipse/jgit#org.eclipse.jgit/7.7.0.202606012155-r": {
-   "jar": "sha256-onxHjV94vD2VRh8VOmDv3xYjknUCxopFetmplaNcWnw=",
-   "pom": "sha256-owH00aR2nxrSVstU54V6Uq8n59A+UMo8UPTLZDw98SY="
+  "org/eclipse/jgit#org.eclipse.jgit/7.7.1.202607240634-r": {
+   "jar": "sha256-WRq8yElVpq0zY+yQS9p5zxRCdwbvtOBv/re8NgFQOYA=",
+   "pom": "sha256-4c9HhuyN3iB/5lh/QQ8lwsaHe+Oh3TCZ02dC3qgQUWs="
   },
   "org/eclipse/platform#org.eclipse.osgi/3.24.200": {
    "jar": "sha256-v+g/zR+gNOuamGs8tuXisY27rLZ+q9qtLaMoBOzYxlo=",
@@ -149,8 +149,8 @@
    "jar": "sha256-ZpFzNUl/mrdaNsNLPZC60ryNwlbDSyQT7NDJRn/PWX0=",
    "pom": "sha256-lob6jxaGeyq6LlwOTPxKCu7PWf5t5Bn4n3vYOP3ejnQ="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.4.20-RC3": {
-   "pom": "sha256-JomdOhV+d5xrtxGQW/oo5TB7mplLPt2/Kn/WLzeGafw="
+  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.4.20": {
+   "pom": "sha256-ehOrLYGKXekq+iMASqm67ZlnG7SFU7cJjPkg+nhcM1E="
   },
   "org/jetbrains/kotlin#kotlin-compiler-runner/2.4.0": {
    "jar": "sha256-rZYIFSdA6S2Uoni0/yyoLEv1/47yGSIOPAeutVRjjO4=",
@@ -248,8 +248,8 @@
   "org/jetbrains/kotlin/kotlin-build-tools-impl/maven-metadata": {
    "xml": {
     "groupId": "org.jetbrains.kotlin",
-    "lastUpdated": "20260902081711",
-    "release": "2.4.20-RC3"
+    "lastUpdated": "20260923071530",
+    "release": "2.5.0-Beta1"
    }
   },
   "org/jetbrains/kotlinx#kotlinx-coroutines-bom/1.8.0": {
@@ -311,20 +311,20 @@
    "module": "sha256-IFNqlfL+sr9DBRKMaq7Lb9idxFeYqchfJgK4qAnXUNs=",
    "pom": "sha256-Q1z/VXiZht7arXF/aPuo1UgklHhWLc2EsirU1lZvRAs="
   },
-  "com/diffplug/spotless#spotless-lib-extra/4.9.0": {
-   "jar": "sha256-HyB4zQvxKfI/aIGO8OrU6ZzrqKsAjmOKwDEbUHsBKZw=",
-   "module": "sha256-I50MaVyJBIeDyCJl4zMasKuy2R2M3KlK6mTFAn0trCs=",
-   "pom": "sha256-4wnu/KcMgWId/dV/l3tpBl8bLn/F1e5Ter3IWJqR7Js="
+  "com/diffplug/spotless#spotless-lib-extra/4.10.2": {
+   "jar": "sha256-qA1noQ+cq1Y/9COWXC6dEN7wcCiHHxzBn+H5jrY/rMQ=",
+   "module": "sha256-goyEXXK61kjlB1SI3/Pqz8hfln7/6oBrY/J1TjOiAtk=",
+   "pom": "sha256-XVE3WpaIfRYlJPw3OBdhctFFNkpLBDCGgQQZD4aKmWg="
   },
-  "com/diffplug/spotless#spotless-lib/4.9.0": {
-   "jar": "sha256-kJBhy1A+7QEskhkMHZAXa7on65jVopAG6tFoGlkG8m8=",
-   "module": "sha256-5ev03bdRVVuCANvKHdvU32eoI7dR1b71/s+m2wiZoyw=",
-   "pom": "sha256-ieleUBzLXDxf9VR8iyR3/Clbl34Nj34OULWTrue9sL4="
+  "com/diffplug/spotless#spotless-lib/4.10.2": {
+   "jar": "sha256-gDn7ywFu9ATeLZk5SGw+jlZ9VnJ8KzxhoaXNR14FEis=",
+   "module": "sha256-WIw9W9rV5vgB484/++NL8/eFKG8O+ClgwW5zUqFAOVE=",
+   "pom": "sha256-76R5U3Ncq5EyaDVHI9srlS9WSY109poBVoTEg6aPGzs="
   },
-  "com/diffplug/spotless#spotless-plugin-gradle/8.9.0": {
-   "jar": "sha256-quTS9fpQJs0gJ0xXYP0Be0mSMAMv6E39jkgquZYNN2Y=",
-   "module": "sha256-Rdxah2UCG19mXf3ilysGO5Zgt0tySYdVqUVDQ0PYAOc=",
-   "pom": "sha256-PNYQSZvqWU/zcOUC/g/oAAWXUNpyrGTsPlBnkM0hE0s="
+  "com/diffplug/spotless#spotless-plugin-gradle/8.10.2": {
+   "jar": "sha256-vR1H6Bg4/5QlGzghMxQaBiNDeQFkplidHxuQ1sQgwsk=",
+   "module": "sha256-QjNK5L1Amg3a0uy5xY9JbvWXTZU/DCpFTbqrZFqUbqw=",
+   "pom": "sha256-JMNaxsCLS5pRI8oJ1E74En5uIx93hOBjEQDcfCRYhD4="
   },
   "com/electronwill/night-config#core/3.9.0": {
    "jar": "sha256-zYkFIL08aAz4LnnxYHHenI82cgai+EHHd9lEKJ80Prw=",
@@ -395,10 +395,10 @@
    "module": "sha256-tfFqD2+QAKRqYrGDBrs4d3vR7PxYLEya0FySjUUbpAI=",
    "pom": "sha256-Yk7J/FOOGmGJZN+p+M+TRENWB8WORagYN456ZD1OCbM="
   },
-  "com/github/spotbugs#spotbugs-annotations/4.10.3": {
-   "jar": "sha256-P6uvCI+M0QgDzIfbpGZs+HS9zS4HrRVO0/5ANkfOPyo=",
-   "module": "sha256-7TF/ShaLEmmLtOPQkmWO8jNjZ1bR+tVQ+u+Zgztskm8=",
-   "pom": "sha256-mspJ9KHDmi33oimJmJt2iGzRnk55XmPmuPFr8A6EDPU="
+  "com/github/spotbugs#spotbugs-annotations/4.10.4": {
+   "jar": "sha256-KPpL763c5de3mwfGjnwS+ifF2SgsQilShxeXFgZmHqM=",
+   "module": "sha256-vcjtLwYX5hKp2jw1u103WryW+yOFRx856BCojKx9SO0=",
+   "pom": "sha256-uDJHXhovB3k4y797eUUPHxG9uq7hes3dinEniu5qvcw="
   },
   "com/google#google/5": {
    "pom": "sha256-4J00XnPKP7yn8+BfMN63Tp053Wt5qT/ujFEfI0F7aCg="
@@ -436,10 +436,6 @@
    "jar": "sha256-xiIXY715xPHD3H91C18poLs4s2e4ExTE9xiW40DECCU=",
    "pom": "sha256-pTMaDstUj5lCq1uTx6xDw4oh6Jd2Pd4bzb8HdPQWym8="
   },
-  "com/google/errorprone#error_prone_annotations/2.11.0": {
-   "jar": "sha256-chy5GEK0b6BWhH0QTVIlyLjh6LYiY7mTBR4eWgE3t+w=",
-   "pom": "sha256-AmHKAfLS6awq4uznXULFYyOzhfspS2vJQ/Yu9Okt3wg="
-  },
   "com/google/errorprone#error_prone_annotations/2.18.0": {
    "jar": "sha256-nmgUy3GBaYik/RsHqZOo8hu3BY1SLBYrHehJ4ZvqVK4=",
    "pom": "sha256-kgE1eX3MpZF7WlwBdkKljTQKTNG80S9W+JKlZjvXvdw="
@@ -458,12 +454,9 @@
   "com/google/errorprone#error_prone_annotations/2.48.0": {
    "pom": "sha256-GJ4JrQSJwyXpDaqp1cj0BjMGAvo2Zgm8oHy82tA6udo="
   },
-  "com/google/errorprone#error_prone_annotations/2.49.0": {
-   "jar": "sha256-OxAD5RuK5W/b18cQc+gdFoO5fmxN/1qRURZNWbdp0Tw=",
-   "pom": "sha256-YB1nPLc2zK3syKzKXUfYjTHY6Hdb5FrmvtzYsjWcnMU="
-  },
-  "com/google/errorprone#error_prone_parent/2.11.0": {
-   "pom": "sha256-goPwy0TGJKedMwtv2AuLinFaaLNoXJqVHD3oN9RUBVE="
+  "com/google/errorprone#error_prone_annotations/2.50.0": {
+   "jar": "sha256-RmdySHfx03pokgLaGR4j76dlfGLu+TzNrEBuzP5c3Qo=",
+   "pom": "sha256-caBoDSdzJLq0a+xLAPbxEcG3lKkx0NjNp5vLkkaYL5I="
   },
   "com/google/errorprone#error_prone_parent/2.18.0": {
    "pom": "sha256-R/Iumce/RmOR3vFvg3eYXl07pvW7z2WFNkSAVRPhX60="
@@ -480,8 +473,8 @@
   "com/google/errorprone#error_prone_parent/2.48.0": {
    "pom": "sha256-sz+opFyfF5SlAIwLLYOoTrKLXQEXptFW8AP58JvnQQ8="
   },
-  "com/google/errorprone#error_prone_parent/2.49.0": {
-   "pom": "sha256-cxO9siLRf/PNAq2gHD80TpoNitEhqTriaWTtKGJ5Ao0="
+  "com/google/errorprone#error_prone_parent/2.50.0": {
+   "pom": "sha256-q/RaAZ2xJbUP9VE07Cr5SuNRl2EDit8KYLm9e0uLYlQ="
   },
   "com/google/guava#failureaccess/1.0.1": {
    "jar": "sha256-oXHuTHNN0tqDfksWvp30Zhr6typBra8x64Tf2vk2yiY=",
@@ -500,9 +493,6 @@
   "com/google/guava#guava-parent/27.1-jre": {
    "pom": "sha256-02EBZcbeK02NZBhIdxe2PFK1o5xeNaVT4khz7LYOBig="
   },
-  "com/google/guava#guava-parent/31.1-jre": {
-   "pom": "sha256-RDliZ4O0StJe8F/wdiHdS7eWzE608pZqSkYf6kEw4Pw="
-  },
   "com/google/guava#guava-parent/32.0.1-jre": {
    "pom": "sha256-Q+0ONrNT9B5et1zXVmZ8ni35fO8G6xYGaWcVih0DTSo="
   },
@@ -512,6 +502,9 @@
   "com/google/guava#guava-parent/33.6.0-jre": {
    "pom": "sha256-N0vTH2Gxz2Er7pqy5NcLvfd92FpJtDH4CdT73JAfLdQ="
   },
+  "com/google/guava#guava-parent/33.7.1-jre": {
+   "pom": "sha256-QBXmFaVnR1XIjYES2LvXY+iv3lYb52xnkGme211WCPU="
+  },
   "com/google/guava#guava/21.0": {
    "jar": "sha256-lyE5cYq8ikiT+njLqM97LJA/Ncl6r0T6MDGwZplItIA=",
    "pom": "sha256-wLAWqFx4TgHKUenWS/j+gM5AKyBv6ol7AyWNXm0P+A0="
@@ -520,10 +513,6 @@
    "jar": "sha256-SlqnDMlopNE35ZmtN1U+XP7tImXowZNHbXEZA2xTb+c=",
    "pom": "sha256-vZnXUAYTGuJcmGCh1j6E42Nx8RL9sML+PV1qs46esnE="
   },
-  "com/google/guava#guava/31.1-jre": {
-   "jar": "sha256-pC7cnKt5Ljn+ObuU8/ymVe0Vf/h6iveOHWulsHxKAKs=",
-   "pom": "sha256-kZPQe/T2YBCNc1jliyfSG0TjToDWc06Y4hkWN28nDeI="
-  },
   "com/google/guava#guava/32.0.1-jre": {
    "jar": "sha256-vX+iJ1kfuFCWd9DREiz5UVjzuKn0VlP1goHYefbcSMU=",
    "pom": "sha256-QsJX9/c203ezGv7u6XirJtcwzXCvYN3nZi4YI1LiSCo="
@@ -533,6 +522,11 @@
    "module": "sha256-K69zzoOa5I5LngCD4law5Y/Dv4/Hj8P755e7yJARIW4=",
    "pom": "sha256-tFt4lEKABUMRxT2pJwgJ+0Dcq8QIzmbOVXMAmbT1fTI="
   },
+  "com/google/guava#guava/33.7.1-jre": {
+   "jar": "sha256-eW2OKKxk6DpHxMWTWo/sxGgmUKBLverXOO8PWjoObEY=",
+   "module": "sha256-wBLsy/seEqDAbtIxdczNGcig3LQ/GhaUdxWDqQbZXlY=",
+   "pom": "sha256-tbOA2yMtjZVkV/Ekpf+O00lY4HTc0gZRQEtSKYau/tw="
+  },
   "com/google/guava#listenablefuture/9999.0-empty-to-avoid-conflict-with-guava": {
    "jar": "sha256-s3KgN9QjCqV/vv/e8w/WEj+cDC24XQrO0AyRuXTzP5k=",
    "pom": "sha256-GNSx2yYVPU5VB5zh92ux/gXNuGLvmVSojLzE/zi4Z5s="
@@ -555,10 +549,6 @@
    "jar": "sha256-KZSn63jycQvT07+2ObLJTiGc7awNTQhNUW54wW3d7PY=",
    "pom": "sha256-8MmMVx6Tp8tN0Y3w+jCPCWPnoGIKwtQkTmHnCdA61r4="
   },
-  "com/google/j2objc#j2objc-annotations/1.3": {
-   "jar": "sha256-Ia8wySJnvWEiwOC00gzMtmQaN+r5VsZUDsRx1YTmSns=",
-   "pom": "sha256-X6yoJLoRW+5FhzAzff2y/OpGui/XdNQwTtvzD6aj8FU="
-  },
   "com/google/j2objc#j2objc-annotations/2.8": {
    "jar": "sha256-8CqV+hpele2z7YWf0Pt99wnRIaNSkO/4t03OKrf01u0=",
    "pom": "sha256-N/h3mLGDhRE8kYv6nhJ2/lBzXvj6hJtYAMUZ1U2/Efg="
@@ -592,9 +582,9 @@
    "jar": "sha256-9UdeY+fonl22IiNImux6Vr0wNUN3IHehfCy1TBnKOiA=",
    "pom": "sha256-W3YhZzfy2pODlTrMybpY9uc500Rnh5nm1NCCz24da9M="
   },
-  "com/puppycrawl/tools#checkstyle/10.9.3": {
-   "jar": "sha256-1X3pra1Cq2C7KXLlD4OhMcqm9iNHhPWUOjhxIAZhWR8=",
-   "pom": "sha256-qDfEUo/JqQ1oi8lQOcdSSCQPfG16GonZSDro+CWc508="
+  "com/puppycrawl/tools#checkstyle/14.1.0": {
+   "jar": "sha256-6L+lU8Y9TA3cxWohfr2pnOvHXSfdrMKz1LGiAn2uObg=",
+   "pom": "sha256-iJzP2USUZfn5ETkE4nmKmNJ02DglrFCh2hs157+VUHw="
   },
   "com/spotify#completable-futures/0.3.6": {
    "jar": "sha256-n0HBSTwY6CiJMqGDBzzjnhiGUtKsQBPt6rXHO7DYMZ8=",
@@ -621,13 +611,9 @@
    "jar": "sha256-qtv9WlJFUb7vENP4kdMFuDuyfVRwPZpN56yioS2YR+I=",
    "pom": "sha256-ffmOk+i9xqjtuGMUrIujHyYMvUoOa4b16a/JMlEu8Mc="
   },
-  "commons-beanutils#commons-beanutils/1.9.4": {
-   "jar": "sha256-fZOMgXiQKARcCMBl6UvnX8KAUnYg1b1itRnVg4UyNoo=",
-   "pom": "sha256-w1zKe2HUZ42VeMvAuQG4cXtTmr+SVEQdp4uP5g3gZNA="
-  },
-  "commons-codec#commons-codec/1.15": {
-   "jar": "sha256-s+n21jp5AQm/DQVmEfvtHPaQVYJt7+uYlKcTadJG7WM=",
-   "pom": "sha256-yG7hmKNaNxVIeGD0Gcv2Qufk2ehxR3eUfb5qTjogq1g="
+  "commons-beanutils#commons-beanutils/1.11.0": {
+   "jar": "sha256-nkS6aOyaPyEob6Kou7ADtzXA9pEBu0MUS3n0+KqnRwk=",
+   "pom": "sha256-z/nqsddRJkvXdbbj6+0WUHlMrJzYvhxBa0jjpcYTnZM="
   },
   "commons-codec#commons-codec/1.22.0": {
    "jar": "sha256-0WT+efJiwy2bGKC1stMX0cJ2U9Xpj9K5mMJL+QHHLOQ=",
@@ -646,110 +632,110 @@
    "module": "sha256-SrIVTJ83agthp6/i0djQJ+pvOQ08hyzkcKbZgqR+Wv4=",
    "pom": "sha256-70jsrBwclJAdj/ML8J16CClTQCNnLdXiVyek6Vh+oFM="
   },
-  "info/picocli#picocli/4.7.1": {
-   "jar": "sha256-DnGR++Mk+5340tIHwHtma43CW7vib1OkxS4v7OYkqXY=",
-   "pom": "sha256-+pvmlFd2A+LUy1X0UjctP2wPk+XzjuXNf7Yos3k8qbw="
+  "info/picocli#picocli/4.7.7": {
+   "jar": "sha256-+G4w//0Q0rE7jKqNSyN6fuYfL/zPWxlB3nGLdl0jW/g=",
+   "pom": "sha256-GxjTYxNN9mYx0rn3R1Bo1zQiW6OJzfkIKhvYvakNV9M="
   },
   "io/leangen/geantyref#geantyref/1.3.16": {
    "jar": "sha256-fx1ZEJLVFCtqqnz1n5TEx01X2+7wOy+CYpSfjza6xuM=",
    "pom": "sha256-JCgbY4MutO8QZOfd/b57eWquGr+IeYrb9NC5ZpurpKQ="
   },
-  "io/netty#netty-buffer/4.2.16.Final": {
-   "jar": "sha256-zDaun70LA/51XrTrRCTKU7Wc/Sl9f9R9SeWxBZvt7Ww=",
-   "pom": "sha256-vlW9UE+MhdG1OfKuDpRwniKk9K7Ts5LdUZnz1EoOQBo="
+  "io/netty#netty-buffer/4.2.18.Final": {
+   "jar": "sha256-/fI20rdqqXEGhEAf2tff+d7FbkPaXTkXLJpVul8Us2A=",
+   "pom": "sha256-3p+oFHAT9N91wou6Aw/cYqSVqDMTFLMX79AnpR6rQ8k="
   },
-  "io/netty#netty-codec-base/4.2.16.Final": {
-   "jar": "sha256-/rQQIlk42ZcN5rYkoMAx0HmAT6XMXh7G6SmPFttZmKc=",
-   "pom": "sha256-ZkVXYbAnBBnSS0CbBylN7eVw7u17Lq5bPi+Vk1sRWdc="
+  "io/netty#netty-codec-base/4.2.18.Final": {
+   "jar": "sha256-fkYSvq17qIrG95CPpyL5CtaDXqllBcnkCy+TaGwfYfM=",
+   "pom": "sha256-7PI7EwlDASnwU+fgA24ymbasKUeWaytSxkj2BL+lNto="
   },
-  "io/netty#netty-codec-compression/4.2.16.Final": {
-   "jar": "sha256-E8hWVBTdIRUoEwPvStH3zGm9d3HY0Sx9L7MTB9/ybRE=",
-   "pom": "sha256-KwI/X/Ssk3HYJ1WnuZcR7mc4nrQpGpnMNZPzcNI9S0s="
+  "io/netty#netty-codec-compression/4.2.18.Final": {
+   "jar": "sha256-nYpLmmoqFm7FpLvlGni09qcmRXxR2BSVdDx+fMufR2U=",
+   "pom": "sha256-IJcGIpJfWDjjsyyCPdxJXdWvBjyCnB4wQbZ5/aiV6KM="
   },
-  "io/netty#netty-codec-haproxy/4.2.16.Final": {
-   "jar": "sha256-utoBbTDrCtywcDvF80ORSC7QRGddER+DAmPW8+MAZ10=",
-   "pom": "sha256-c2aec//A9ebb7XFOIZyj7YNyFLlrgxQHYAeQGGgkx40="
+  "io/netty#netty-codec-haproxy/4.2.18.Final": {
+   "jar": "sha256-vwDUA4EKd/Ny9OGRavgcsdXz1LE2gnFvgh1HHR0t8Hc=",
+   "pom": "sha256-B1A3nRJrdqxaJehX0xXtB3ZkbqPTUZcwc8NjsxOWw94="
   },
-  "io/netty#netty-codec-http/4.2.16.Final": {
-   "jar": "sha256-DRb5gd6NDTBKKrGoHwpnSJIIn7qopYMQCuu0pbAEVuw=",
-   "pom": "sha256-8AXeoD9FJF3QsnAUqh8c73sSu+1aUr488RTY50ERIqQ="
+  "io/netty#netty-codec-http/4.2.18.Final": {
+   "jar": "sha256-LVB2XrWFkc41FGxUygMqJXgI0hZdiYWoUixw6hRw6Nc=",
+   "pom": "sha256-qNroD18DyIS1yAi6tsb50e/uTHwp2y/K772B6zGvRfM="
   },
-  "io/netty#netty-codec-marshalling/4.2.16.Final": {
-   "jar": "sha256-lpGBjG5ZqX5FT4OByG3+hAMCFo2YUJiieNygd4Hvx14=",
-   "pom": "sha256-1axV/Hv2JI89GCljAGR6Wm96Q4zhlMWFCvw0dHGf8Ec="
+  "io/netty#netty-codec-marshalling/4.2.18.Final": {
+   "jar": "sha256-7M+Dy70TGduHlCTEVZ1GXcQyUf4aj/dZxDILWtvPJrc=",
+   "pom": "sha256-Hg/T2LzJw+Odi2l1xz8ZsoIdNe0eICAiZSOI+sqFrec="
   },
-  "io/netty#netty-codec-protobuf/4.2.16.Final": {
-   "jar": "sha256-u2byPMtUPdhC3dqRtsjpfiIiINLvpUWfakaiKt47IXA=",
-   "pom": "sha256-TiexREeB19B1v56pdi3boTz6QvwxW9TJjvrnM9DhiBw="
+  "io/netty#netty-codec-protobuf/4.2.18.Final": {
+   "jar": "sha256-G8rt0NqU+FeUd/CEjpEMJKztix7Xw+G/8W1W/QIptRY=",
+   "pom": "sha256-yG/UZ8Cc/mxIx5R5zgCaR35stKlqrSym4OtaOwpt7Bw="
   },
-  "io/netty#netty-codec/4.2.16.Final": {
-   "jar": "sha256-QYaLzEKJVOcH45owaGzt3AvSODkdOYnQTfty1fBzWSY=",
-   "pom": "sha256-42iq3f6M+/Tl+dzdBTTN5zDe1pP5Dboq6WspfcFXchg="
+  "io/netty#netty-codec/4.2.18.Final": {
+   "jar": "sha256-Q5ZF61Bh+PUPvyevrM45TkzsxNNz4fejhIN+RmHV9DA=",
+   "pom": "sha256-F8SnaZ/CoTtwpcKbIYYcesA72CaJqChjODzH6MDNDic="
   },
-  "io/netty#netty-common/4.2.16.Final": {
-   "jar": "sha256-mCXuaKDcTNK1Pi9TJQJAGyIRutm3fosEiC2eZEhyg/8=",
-   "pom": "sha256-TWJqGdVkbPRBGRaz/pS5hwgetg2OW3/gawO4P09avCU="
+  "io/netty#netty-common/4.2.18.Final": {
+   "jar": "sha256-XZfK5WaWhYcjOWmO/hP3T+PNstzNs2ljsjUr2VrPcHA=",
+   "pom": "sha256-2HGU+APhvchLuNWpgqKLV7mdodbnHswXL1LkzQDkaRQ="
   },
-  "io/netty#netty-handler/4.2.16.Final": {
-   "jar": "sha256-olnKSW2gWsGYH5XNhWIR+JSjKAVqYSnpzXDbvV30Afc=",
-   "pom": "sha256-K3TxgB2lbN/5DgZBkWKU+78g0BwR+NXO6EAQdKhxwoU="
+  "io/netty#netty-handler/4.2.18.Final": {
+   "jar": "sha256-bVoI2d1tfQIRIC4i27FimyOmJVAzXH6AiS2h1MsRVUA=",
+   "pom": "sha256-9IDdCtarzopOxk1ZC8fy+mfw+0vKGPgRpU+kkRdvLd0="
   },
-  "io/netty#netty-parent/4.2.16.Final": {
-   "pom": "sha256-WRgTKjEV1EispZT6haJhTZuGqWk8Ti9CSpSupdkpQXI="
+  "io/netty#netty-parent/4.2.18.Final": {
+   "pom": "sha256-6rqKAefae5E+rLkVj5UprByCj5LO68W8El3akT2TaFU="
   },
-  "io/netty#netty-resolver/4.2.16.Final": {
-   "jar": "sha256-yeymqZA2SFzx0Ya0pqWVsKVMU4CDGe4DkkJw6uBMMrs=",
-   "pom": "sha256-YuLxeXHiRXTb/RQxaaegsdtXdHYZQbVawwb5fjLYnCU="
+  "io/netty#netty-resolver/4.2.18.Final": {
+   "jar": "sha256-aDc+xUTPdpuhe/LvRVFm2Y8sJg3/U27fNe9XBnqcFV8=",
+   "pom": "sha256-2HlY2fXiteYiI/jHr3mHC5a5HryPt3uEZDKYn8txr3g="
   },
-  "io/netty#netty-transport-classes-epoll/4.2.16.Final": {
-   "jar": "sha256-nytTIQ25yNJOeH7UPziWqvMNaG7ScMevuymrYzDGqiM=",
-   "pom": "sha256-vb/ZFXklc5aAVemBp4NeW2sZYu8+AFQ7W6FGL1ztVeY="
+  "io/netty#netty-transport-classes-epoll/4.2.18.Final": {
+   "jar": "sha256-NnfKmY89t0nT/bD7GxZ0+YCfT76PgZo0b0hY37FsTZU=",
+   "pom": "sha256-bRaWFnshlyVeP8cVFK9HKo0C6Xeje8MmCzTNrO5aaPg="
   },
-  "io/netty#netty-transport-classes-io_uring/4.2.16.Final": {
-   "jar": "sha256-LwsYmDSqLJRbLvll/tMByYg7RajFRAjiVlck9GUQpZ4=",
-   "pom": "sha256-KhvKEYchZGzw+glMgjDOMZlJC3emX/4wdrGWZ/5ewAc="
+  "io/netty#netty-transport-classes-io_uring/4.2.18.Final": {
+   "jar": "sha256-4ngg/maea18ZxOnQrNAUKvvicZx/Y4DmvuNX0NucWiY=",
+   "pom": "sha256-UeR3zqAN/oM7X3ZVC1aijHDyvFzNrifnMS9Rk5tJqyw="
   },
-  "io/netty#netty-transport-classes-kqueue/4.2.16.Final": {
-   "jar": "sha256-ZZm0lfaUIMskCrChqmChmi3zvHJ5FykXDgmTcnY3pok=",
-   "pom": "sha256-BJZ8VzolqZK1UmaFI1J0tTxUF3TBTkhgSjzAuo+7xZo="
+  "io/netty#netty-transport-classes-kqueue/4.2.18.Final": {
+   "jar": "sha256-vkjuW4ojKKH08hYCcDRBdWEt2VZ3h3J94Nuuy2lL61E=",
+   "pom": "sha256-Agz+nU260YBCzUrRcnO0y5xTdImE4hopdqzD45qpsJo="
   },
-  "io/netty#netty-transport-native-epoll/4.2.16.Final": {
-   "jar": "sha256-TmFq5d867+4rusNMznKQ/K7edFk/jPCnJB0DiP7yDp8=",
-   "pom": "sha256-QRVO4MBLhXd72/rfepRzUgHoyyTXYZQJxZl9OUzYd2Q="
+  "io/netty#netty-transport-native-epoll/4.2.18.Final": {
+   "jar": "sha256-Fe+7Js3nUem6tmnMUtpekJ9BYm+eBDeOLEzWEgLRNZ4=",
+   "pom": "sha256-UXLTplsVBNORKor4wEr3yte+9nALuIvJe/NK7vKJ3es="
   },
-  "io/netty#netty-transport-native-epoll/4.2.16.Final/linux-aarch_64": {
-   "jar": "sha256-ISzH2BOQ4xtYCh+5G2yNljtD52LtByxVXisJrUR26Sg="
+  "io/netty#netty-transport-native-epoll/4.2.18.Final/linux-aarch_64": {
+   "jar": "sha256-VC7ENrO8Xtbu2UZXPOCtLId2UXutuUmBfQbHKUudAj4="
   },
-  "io/netty#netty-transport-native-epoll/4.2.16.Final/linux-x86_64": {
-   "jar": "sha256-LgBUjnMZSIgdDHPuedLq11klTnUJKUBqHVlUhHWPAmc="
+  "io/netty#netty-transport-native-epoll/4.2.18.Final/linux-x86_64": {
+   "jar": "sha256-MqNAlxGC2QHOpRNYhUnPrcOSu3NC+TA3mm402FOjMfA="
   },
-  "io/netty#netty-transport-native-io_uring/4.2.16.Final": {
-   "jar": "sha256-0Iz035DxeoA0dbOIYbkVyxwmbH6LtFY6tRFk+FN5/tI=",
-   "pom": "sha256-5pMebTJsgi549gvRlXw1kkNdRQlwV4cViC/tgD2pUiI="
+  "io/netty#netty-transport-native-io_uring/4.2.18.Final": {
+   "jar": "sha256-9CqQ7emhaGCkHmDJkp1sgVm+iozloNxqgPXYQJSRFdQ=",
+   "pom": "sha256-JPud/u4vCmPeq7wY0vWXRMOphmPlaD7725uozs+sbo8="
   },
-  "io/netty#netty-transport-native-io_uring/4.2.16.Final/linux-aarch_64": {
-   "jar": "sha256-Tsoxe+Z6N5ni4S4XqLtBRBKDhCF9p7cu0bdf2Gh5FOk="
+  "io/netty#netty-transport-native-io_uring/4.2.18.Final/linux-aarch_64": {
+   "jar": "sha256-Lyy/Om3JlrS5VdpCsMaSq8pN/JPHvVsJ/u5UyU5Is5E="
   },
-  "io/netty#netty-transport-native-io_uring/4.2.16.Final/linux-x86_64": {
-   "jar": "sha256-m2xqbFD0lAQBkZttB0412lqMcjnyS9b8UwtsrJyHrEk="
+  "io/netty#netty-transport-native-io_uring/4.2.18.Final/linux-x86_64": {
+   "jar": "sha256-06jx3hjJELYpLb8hh9tgk7Jh6KdghtoOz88d7X6agKM="
   },
-  "io/netty#netty-transport-native-kqueue/4.2.16.Final": {
-   "jar": "sha256-WPsZTq1tUUTGPXH8XFsAuYV+ozOadAO3HHlU1oCaUTw=",
-   "pom": "sha256-6WV9u1HizKEFYV5hou8q+IC25LLkuk5el0S0bVqDAAg="
+  "io/netty#netty-transport-native-kqueue/4.2.18.Final": {
+   "jar": "sha256-TuZRzaxJrtrELQ0i5ybLSlePDAIob8BBFT7FiSXKyBg=",
+   "pom": "sha256-sDuJCtq1olhtDThQNSIh8RWqikhgBfUKKHh46WNoiPk="
   },
-  "io/netty#netty-transport-native-kqueue/4.2.16.Final/osx-aarch_64": {
-   "jar": "sha256-eWxQP3qAIXF3vTFfZEgmMTTuD5BCYn1f1pjHYLz5nIw="
+  "io/netty#netty-transport-native-kqueue/4.2.18.Final/osx-aarch_64": {
+   "jar": "sha256-fgq3bzk1ygNqf7GdNIIbjSLGn711oi1LNE/WVmjSMTE="
   },
-  "io/netty#netty-transport-native-kqueue/4.2.16.Final/osx-x86_64": {
-   "jar": "sha256-BaCaSrUfSI8MIvQszObAaTWvv6xRFz+uRBcEZaoHKCg="
+  "io/netty#netty-transport-native-kqueue/4.2.18.Final/osx-x86_64": {
+   "jar": "sha256-rQqEK8n4Bk3sbuPCZODyQTHr5pDpdXYWxHAEkJVtfx8="
   },
-  "io/netty#netty-transport-native-unix-common/4.2.16.Final": {
-   "jar": "sha256-QcqP4ZIIPReRe+fdzs3tTaT8HbHRZW0D0LyxTi9DEVU=",
-   "pom": "sha256-iLtMG6+R4rBUJGu5g7mqAvtmwj+w6G5aKCOHarJGbW4="
+  "io/netty#netty-transport-native-unix-common/4.2.18.Final": {
+   "jar": "sha256-ytpwI9CRNq8ShRHKlEIdadyE0PH2TJ4fEnoScbtikyo=",
+   "pom": "sha256-st/wNcZHlfOvG/5PxZ6tJzjge7lLKEOWyMF/CtP7Nd4="
   },
-  "io/netty#netty-transport/4.2.16.Final": {
-   "jar": "sha256-z6P2VMr/kGZTOF9LfdqlOdeVt49XEaYiSCsX0rc0hMA=",
-   "pom": "sha256-wUroBRmAFPeewCE4EL/oxFxaPWmUoYHyM+t2wZ6UIwo="
+  "io/netty#netty-transport/4.2.18.Final": {
+   "jar": "sha256-6sTxIGjbRInmDGUg+tZj5dhy8ENqfGQaqeCNtkmUeGM=",
+   "pom": "sha256-KEn1fDOvTXdWArsWH60nvwL7XLqS43p67bXr3lRIBHA="
   },
   "it/unimi/dsi#fastutil/8.5.19": {
    "jar": "sha256-x2emvct8tS/hMVyh9IkTiadeY7KhWmYphl13QN06jPI=",
@@ -868,25 +854,22 @@
    "jar": "sha256-3ybMWPI19HfbB/dTulo6skPr5Xidn4ns9o3WLqmmbCg=",
    "pom": "sha256-amd2O3avzZyAuV5cXiR4LRjMGw49m0VK0/h1THa3aBU="
   },
-  "net/sf/saxon#Saxon-HE/12.1": {
-   "jar": "sha256-IA8skvaHHVG8LhS3Br82TTvb8isnlgtu1rqH5BZk5VA=",
-   "pom": "sha256-0wqLQpc3MZf2YH5RpAppxVe7Ts7aweZU0bAiob/ZjYI="
+  "net/sf/saxon#Saxon-HE/12.9": {
+   "jar": "sha256-jzqSFqU3NnEyKT6su6nfBi6s6PixahhK9Z4uSDnUzUE=",
+   "pom": "sha256-+IDp0dQAyZwYkvWWTl/JIN0d7wViI1m5sFjzK1tCaXU="
   },
-  "org/antlr#antlr4-master/4.11.1": {
-   "pom": "sha256-cupd6Nq7ZhV4X9D+qqur1T3NrnD+FrzXx7lobApuAK0="
+  "org/antlr#antlr4-master/4.13.2": {
+   "pom": "sha256-Ct2gJmhYc/ZRNgF4v/xEbO7kgzCBc5466dbo8H6NkCo="
   },
-  "org/antlr#antlr4-runtime/4.11.1": {
-   "jar": "sha256-4GxlU8HMwU02BS7EsPxvE7gIz5V7Wx3D9hv0AZlq2lk=",
-   "pom": "sha256-xFbsKVkHjFkfvX72mtlACnJ5IAaNdGmJx0q4BO1oGzQ="
+  "org/antlr#antlr4-runtime/4.13.2": {
+   "jar": "sha256-3T6KE6LWab+E+42DTeNc5IdfJxV2mNIGJB7ISIqtyvc=",
+   "pom": "sha256-A84HonlsURsMlNwU/YbM3W44KMV5Z60jg94wTg0Runk="
   },
   "org/apache#apache/16": {
    "pom": "sha256-n4X/L9fWyzCXqkf7QZ7n8OvoaRCfmKup9Oyj9J50pA4="
   },
-  "org/apache#apache/19": {
-   "pom": "sha256-kfejMJbqabrCy69tAf65NMrAAsSNjIz6nCQLQPHsId8="
-  },
-  "org/apache#apache/23": {
-   "pom": "sha256-vBBiTgYj82V3+sVjnKKTbTJA7RUvttjVM6tNJwVDSRw="
+  "org/apache#apache/34": {
+   "pom": "sha256-NnGunU0GKuO7mFcxx2CIuy9vfXJU4tME7p9pC5dlEyg="
   },
   "org/apache#apache/35": {
    "pom": "sha256-6il9zRFBNui46LYwIw1Sp2wvxp9sXbJdZysYVwAHKLg="
@@ -908,11 +891,8 @@
   "org/apache/commons#commons-parent/39": {
    "pom": "sha256-h80n4aAqXD622FBZzphpa7G0TCuLZQ8FZ8ht9g+mHac="
   },
-  "org/apache/commons#commons-parent/47": {
-   "pom": "sha256-io7LVwVTv58f+uIRqNTKnuYwwXr+WSkzaPunvZtC/Lc="
-  },
-  "org/apache/commons#commons-parent/52": {
-   "pom": "sha256-ddvo806Y5MP/QtquSi+etMvNO18QR9VEYKzpBtu0UC4="
+  "org/apache/commons#commons-parent/84": {
+   "pom": "sha256-kjn7lxAdsnBw5Jg9ENM6DpHPZ2ytkb9TgVQiw1Ye+bE="
   },
   "org/apache/commons#commons-parent/98": {
    "pom": "sha256-1AMYUn9WAz4P8HiZccw4yFaqmaaF7qEScIFOfx7an7o="
@@ -921,27 +901,6 @@
    "module": "sha256-1sIlTINHuEzahMr3SRShh8Lzd+QoTo2Ls/kBUhgQqos=",
    "pom": "sha256-qkTrUr/f5h0ns+RQ0rNI2I3qo0N6tNnUmoQJU0j59vs="
   },
-  "org/apache/httpcomponents#httpcomponents-parent/12": {
-   "pom": "sha256-QgnwlZMhKYfCnWgBkXMJ3V5vcbU7Kx0ODw77mErRH6E="
-  },
-  "org/apache/httpcomponents/client5#httpclient5-parent/5.1.3": {
-   "pom": "sha256-onsUE67OkqOqR3SRX3WJ4MYXnXKNKsailddY7k+iTMU="
-  },
-  "org/apache/httpcomponents/client5#httpclient5/5.1.3": {
-   "jar": "sha256-KMdZJU9ONTGeB4u2/+p1Z2YI3BLLJDsk+zyHMlIpd/4=",
-   "pom": "sha256-GYirPRva4PUfIsg9yXuI+gdWGttiRGedi49xRs3ROq8="
-  },
-  "org/apache/httpcomponents/core5#httpcore5-h2/5.1.3": {
-   "jar": "sha256-0OeLoVqo6+d5grZgrEsJqV1uA129vqdiV33ByOKTWAc=",
-   "pom": "sha256-K8AxehSO3Jrv6j7BU1OU787T0TfWL3/1ZW0LA/lMB4Y="
-  },
-  "org/apache/httpcomponents/core5#httpcore5-parent/5.1.3": {
-   "pom": "sha256-pnU4hlrg83RLIekcpH1GEFRzfFUtH/KdpxTIYMmS1bs="
-  },
-  "org/apache/httpcomponents/core5#httpcore5/5.1.3": {
-   "jar": "sha256-8r8vLHdyFpyeMGmXGWZ60w+bRsTp14QZB96y0S2ZI/4=",
-   "pom": "sha256-f8K4BFgJ8/J6ydTZ6ZudNGIbY3HPk8cxPs2Epa8Om64="
-  },
   "org/apache/logging/log4j#log4j-api/2.26.1": {
    "jar": "sha256-8YEKRwTMzgGdArugKdwCpPKsDJl/ZHtGXn1AnBkn+CI=",
    "module": "sha256-Xtk/b7UzS/fuUpQ9GmVLw6Hz8Qdlri/Uu9OHMzvmZ4o=",
@@ -1019,20 +978,15 @@
    "jar": "sha256-ZLAmkci51OdwD47i50Lc5+osboHmYrdSLJ7jv1aMBAo=",
    "pom": "sha256-3EzUOKNkYtATwjOMjiBtECoyKgDzNynolV7iGYWcnt4="
   },
-  "org/checkerframework#checker-qual/3.27.0": {
-   "jar": "sha256-Jf2m8+su4hOf9dfTmSZn1Sbr8bD7h982/HWqNWeebas=",
-   "module": "sha256-H1L7VyqCR4PvVyPW0LejEUOz2JKpQerXur4OH/kWM30=",
-   "pom": "sha256-yXIt1Co1ywpkPGgAoo2sf8UXbYDkz2v4XBgjdzFjOrk="
-  },
   "org/checkerframework#checker-qual/3.33.0": {
    "jar": "sha256-4xYlW7/Nn+UNFlMUuFq7KzPLKmapPEkdtkjkmKgsLeE=",
    "module": "sha256-6FIddWJdQScsdn0mKhU6wWPMUFtmZEou9wX6iUn/tOU=",
    "pom": "sha256-9VqSICenj92LPqFaDYv+P+xqXOrDDIaqivpKW5sN9gM="
   },
-  "org/checkerframework#checker-qual/4.2.1": {
-   "jar": "sha256-0IMfSL9Yd4e9KaBXRpKk4sSUrMFREqQ5bHG0X1U9c8Y=",
-   "module": "sha256-6Fzv5vV2+xNDnQ6LFtlXfZEF4RnP1m4njifEYbljc+4=",
-   "pom": "sha256-LNjd0snhbkhVAH02txYymNcTUOctwr6OwG7sD5WvPGc="
+  "org/checkerframework#checker-qual/4.2.3": {
+   "jar": "sha256-+Gj3MfbjfbPhwhQNBgFkd5iZWaLRP8W+2cRnYM/9W6A=",
+   "module": "sha256-Wb5+ilSKLL3EkP0KcjFf4yfMF/fJIpZMzEURSpS8Xh4=",
+   "pom": "sha256-15F1wnQ0rROb7ahKhCBu1rnYcHRILUxQR3k6nfVTlK8="
   },
   "org/codehaus/mojo#animal-sniffer-annotations/1.17": {
    "jar": "sha256-kmVPST7P7FIILnY1Tw6/h2SNw9XOwuPDzblHwBZ0elM=",
@@ -1068,10 +1022,17 @@
   "org/eclipse/jgit#org.eclipse.jgit-parent/7.7.0.202606012155-r": {
    "pom": "sha256-S4qHPLaFhEH/MSUDTbVU0leSL7cIIEeVtyAZDW+05iE="
   },
+  "org/eclipse/jgit#org.eclipse.jgit-parent/7.7.1.202607240634-r": {
+   "pom": "sha256-O/RKKe9ukBmDx7MfGQkaaEumdP6n1a3V3zF9DvoJxoc="
+  },
   "org/eclipse/jgit#org.eclipse.jgit/7.7.0.202606012155-r": {
    "jar": "sha256-onxHjV94vD2VRh8VOmDv3xYjknUCxopFetmplaNcWnw=",
    "pom": "sha256-owH00aR2nxrSVstU54V6Uq8n59A+UMo8UPTLZDw98SY="
   },
+  "org/eclipse/jgit#org.eclipse.jgit/7.7.1.202607240634-r": {
+   "jar": "sha256-WRq8yElVpq0zY+yQS9p5zxRCdwbvtOBv/re8NgFQOYA=",
+   "pom": "sha256-4c9HhuyN3iB/5lh/QQ8lwsaHe+Oh3TCZ02dC3qgQUWs="
+  },
   "org/eclipse/platform#org.eclipse.osgi/3.24.200": {
    "jar": "sha256-v+g/zR+gNOuamGs8tuXisY27rLZ+q9qtLaMoBOzYxlo=",
    "pom": "sha256-sMVs+qxqcAh+RUJXzABLfTb7uYk9vu5N64fGISWGERY="
@@ -1105,9 +1066,9 @@
    "jar": "sha256-ZpFzNUl/mrdaNsNLPZC60ryNwlbDSyQT7NDJRn/PWX0=",
    "pom": "sha256-lob6jxaGeyq6LlwOTPxKCu7PWf5t5Bn4n3vYOP3ejnQ="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-api/2.4.20-RC3": {
-   "jar": "sha256-9nEunlFtBUp6/GyWgQZb7iUw4n8T4nl1fSc3OrZQ6gk=",
-   "pom": "sha256-SMIrIGzqzbyJ6LntcamWOpSCQlBMsvb4RolyBfdh1co="
+  "org/jetbrains/kotlin#kotlin-build-tools-api/2.4.20": {
+   "jar": "sha256-R6Yi3OcjGxkWM0tpoAvBCUrfZXfmSS+fBrPZwkUP5Fk=",
+   "pom": "sha256-6M2f/X0IhroaF5XL9KNKBmgfGEqlDyVobv/u+zwfVvU="
   },
   "org/jetbrains/kotlin#kotlin-build-tools-compat/2.4.0": {
    "jar": "sha256-H+c5emCyMKgv/cotWWFd3nrFcgzsCJIgSpgY8w6AwWw=",
@@ -1117,49 +1078,49 @@
    "jar": "sha256-UWi4ZpRfasH/y21MiM9YJJcklGnC5KTq/AvNNbWiZKk=",
    "pom": "sha256-hW1ZOVSJJ26T7bQ5DJk5feg+INJ1csUjjFbtIeQ0M9o="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-cri-impl/2.4.20-RC3": {
-   "jar": "sha256-nDHP1XJY1koJA0M3p/Vw5GiqL+tlyYbtigLWZz0KajM=",
-   "pom": "sha256-srHGKp7KC/JyDgfKoR933Y5Tu7e3q3rsXHS/0TGjCgA="
+  "org/jetbrains/kotlin#kotlin-build-tools-cri-impl/2.4.20": {
+   "jar": "sha256-J30qzI99vvNk3KM/d3uc7q9f2APwdlLCvaFOFV+DB28=",
+   "pom": "sha256-ivUu+ohu7UXFTVaLaS4zm3Ddx8dovumrnC0vlu2LsOE="
   },
   "org/jetbrains/kotlin#kotlin-build-tools-impl/2.4.0": {
    "jar": "sha256-B2wKf4TTA/HjkHdEEMhni4tYT6o/ZCQ1+T0uToHavnw=",
    "pom": "sha256-SFyj1RGqOEIH21cG4HQdx5rORdQOBIn57ylzGq+xT3w="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.4.20-RC3": {
-   "jar": "sha256-Nm0YKR9vZCMitoXn3vQy6WbUUKYbLTdNo4Is06R5H08=",
-   "pom": "sha256-JomdOhV+d5xrtxGQW/oo5TB7mplLPt2/Kn/WLzeGafw="
+  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.4.20": {
+   "jar": "sha256-aPtvJmpmRjobo925m5bl6yAqsZpcpOO1ba1e7GJkHH0=",
+   "pom": "sha256-ehOrLYGKXekq+iMASqm67ZlnG7SFU7cJjPkg+nhcM1E="
   },
   "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.4.0": {
    "jar": "sha256-wrJejByT7EFrpDJ/XjHq7A8MiEckG5NT4pS4253OVk8=",
    "pom": "sha256-9deFQBCOe7yRYiU85SxCUH6tLlMJRSE90qO3k7WQxTw="
   },
-  "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.4.20-RC3": {
-   "jar": "sha256-i15gbghSRs8/RelLxfGXAzMM1DNvgBilHtX1xB3wW0g=",
-   "pom": "sha256-yIsn5nCxdupsZGzSFfuqS5JV/IEjMyC/PokWBJKefRE="
+  "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.4.20": {
+   "jar": "sha256-z5cWFDBoP7mvltxqcBf/rh/oc3uA0S7uEfL+Pnb43tg=",
+   "pom": "sha256-Jp2YzExoZwwR5K60BOHHxvMbeCMhkI1yaLolzSNtWbI="
   },
   "org/jetbrains/kotlin#kotlin-compiler-runner/2.4.0": {
    "jar": "sha256-rZYIFSdA6S2Uoni0/yyoLEv1/47yGSIOPAeutVRjjO4=",
    "pom": "sha256-Xh7RVsuNOLYeLMxUbb2LK953g2frKY+Idb2CD7/QsPI="
   },
-  "org/jetbrains/kotlin#kotlin-compiler-runner/2.4.20-RC3": {
-   "jar": "sha256-bULYAIHZKGcPEe7Ja/GWcgyNsDrFlbY5MVCb/XIquok=",
-   "pom": "sha256-XXDhvedCv+V99TxrSYdqBcmHCjJ7lsVIaLww0dZpMwQ="
+  "org/jetbrains/kotlin#kotlin-compiler-runner/2.4.20": {
+   "jar": "sha256-zEZ8W2Pap0Qda/ty89VZ1og2zmHNv5/I4eOnbsSIPS4=",
+   "pom": "sha256-RWaUYoCXH+jWeZDug0gK9IDoRlkPMlpAlR9iZX4mpAo="
   },
   "org/jetbrains/kotlin#kotlin-daemon-client/2.4.0": {
    "jar": "sha256-9Ubws2mcSYTzIN0DCA3gXK1hBkIIuo833w0/j0p/0Uo=",
    "pom": "sha256-FDeTYnOC2QXtqT4VKijJk/YyP8S3SDcKRce63JmRShM="
   },
-  "org/jetbrains/kotlin#kotlin-daemon-client/2.4.20-RC3": {
-   "jar": "sha256-Wy46fNhjCHrrqd/CCcPzyalbVsV8nWpeewBJ5n4445g=",
-   "pom": "sha256-QkisMBxJzxMyZGwVLcV7ULNajIs50VAFkIYNeNB3sTQ="
+  "org/jetbrains/kotlin#kotlin-daemon-client/2.4.20": {
+   "jar": "sha256-iVMnVvwlj73hd88WVDg/FRJ8BI0XUlFBySLpqglp2Zc=",
+   "pom": "sha256-N8/2auNMkk8Pc4EG7rcjTnrOiA8ZneM2Lpk/SYcCWtw="
   },
   "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.4.0": {
    "jar": "sha256-ODCTr14HhDW2AEPRm/qD62GRvg9NE6KPscig86sk/mY=",
    "pom": "sha256-yzbngPyznuCaq245j5vV6if5grtuGTKXQqIOsuvcKTY="
   },
-  "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.4.20-RC3": {
-   "jar": "sha256-Dd21rvNuDtr7tybVTHKZyj0WmeeoPtijRM21Lr+tlwI=",
-   "pom": "sha256-EDhk4lBLVz7Hlw6pmfzM7qMQRk3oPbXnwBn15bplvlI="
+  "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.4.20": {
+   "jar": "sha256-7vcs+PF+bZjTPlt8fhyrMaHPX8NAhN1eVj57Hz71NDU=",
+   "pom": "sha256-ymMc58fMKo7LR9NGK0KQBMHNNIhDez9znjXq/qIDO/s="
   },
   "org/jetbrains/kotlin#kotlin-klib-commonizer-embeddable/2.4.0": {
    "jar": "sha256-IQr85Hku1iu16oPeVXm2HGnlkgGvd0ayFigHadLc9+E=",
@@ -1185,9 +1146,9 @@
    "jar": "sha256-GW6Oy/Y9r0d+NOZ8L4ce4jKue/izd0Mth20bv50nPeM=",
    "pom": "sha256-znBcUOfgr7IimKz/Cpg8226g9/4tG0c87kKzhAW8NX8="
   },
-  "org/jetbrains/kotlin#kotlin-script-runtime/2.4.20-RC3": {
-   "jar": "sha256-RT6zBKR3tszVCucJWeLWezvDfSESFGADvtl8JafMaRs=",
-   "pom": "sha256-PUoMj4LgSLz47bS4RtycKTj9uJX2rrnnC6kt2NlapMk="
+  "org/jetbrains/kotlin#kotlin-script-runtime/2.4.20": {
+   "jar": "sha256-/FoZ33i+RF2E6DUuDQEJimqBgTJKpQxve/hQM46B4bQ=",
+   "pom": "sha256-3Q44RrYabWQTAJWMxS5Gk817R70dYmUF84Oy+dI63g4="
   },
   "org/jetbrains/kotlin#kotlin-scripting-common/2.4.0": {
    "jar": "sha256-WQLlzQEE+aO9ZaoDZ5xYmNHOs2zgFlGkij22BruXraM=",
@@ -1239,24 +1200,24 @@
    "module": "sha256-wkpH3L2Sldd29EO+Qdd6wkUwlgHtBTcR3uKwJUvgLbY=",
    "pom": "sha256-gZT/eanuJKf6P3SmsXnAShhZ3ouYek8JgwVuWUUXId4="
   },
-  "org/jetbrains/kotlin#kotlin-stdlib/2.4.20-RC3": {
-   "jar": "sha256-RTEajtEgZMT40j9Uoaefcol/KpS6OaFbItc7B1AAeNs=",
-   "module": "sha256-BkO+W+hJGdS7Je7HGgfVoBshWKG4xXWb2CsSrdQP8to=",
-   "pom": "sha256-Lneqi5W77hRFtEbcc3Fnk/Q4WFX3iUelECQGfbr1MfE="
+  "org/jetbrains/kotlin#kotlin-stdlib/2.4.20": {
+   "jar": "sha256-IibeRj0wnUpVAKSBMgs96lFaaYHcrh3vUx+8FYiE4l8=",
+   "module": "sha256-r7KAUqxsPWBcD2YYFuplPgc+sDloL+01v6bNxwTAkRw=",
+   "pom": "sha256-vWmzgtuo4reuOEY3XrLxOJAX65CJhydwUa5OOs7IyTg="
   },
   "org/jetbrains/kotlin#kotlin-tooling-core/2.4.0": {
    "jar": "sha256-WeowU3LjordBd2Tc/s9kUGag2bF5KrQK/RXBzIU1tYo=",
    "pom": "sha256-eYTfzTtLw3UYauCe/rtIEviW26AFbQ3NbjbIM5aHCRs="
   },
-  "org/jetbrains/kotlin#kotlin-tooling-core/2.4.20-RC3": {
+  "org/jetbrains/kotlin#kotlin-tooling-core/2.4.20": {
    "jar": "sha256-X8XbCDgDIyhXQI7VwlvMMHxwOwS972yyw06/TbYRpiI=",
-   "pom": "sha256-mFDVo0s8eHcieXYt2/YVvwRwLZ0fGFcszVqb+xuIJUM="
+   "pom": "sha256-Kd157SvB5k9r/VzPDBM2xrbBHuKmngxYXj+tL0W1Ml0="
   },
   "org/jetbrains/kotlin/kotlin-build-tools-impl/maven-metadata": {
    "xml": {
     "groupId": "org.jetbrains.kotlin",
-    "lastUpdated": "20260902081711",
-    "release": "2.4.20-RC3"
+    "lastUpdated": "20260923071530",
+    "release": "2.5.0-Beta1"
    }
   },
   "org/jetbrains/kotlinx#kotlinx-coroutines-bom/1.8.0": {
@@ -1303,6 +1264,10 @@
    "module": "sha256-aDXWrHYqmchebDumyUK+LGmXquyY8H3t/pkX2uIr2pY=",
    "pom": "sha256-VbOL8aex2OpRjPL0866aqiNuYbvwtr0x/7SXU6BZ3V4="
   },
+  "org/junit#junit-bom/5.12.2": {
+   "module": "sha256-3nCsXZGlJlbYiQptI7ngTZm5mxoEAlMN7K1xvzGyc14=",
+   "pom": "sha256-zvgP7IZFT2gGv7DfJGabXG8y4styhTnqhZ9H39ybvBc="
+  },
   "org/junit#junit-bom/5.13.1": {
    "module": "sha256-M8B6uXJHkKblhZugfWkResUwQ5ckVFqBxBeeMnLHXeg=",
    "pom": "sha256-+mhFHqgwVy7UP/5R11tqBfel5mWmAqUfSda+AgY6ZfM="
@@ -1323,44 +1288,44 @@
    "module": "sha256-8lxAv6Usi3tCXVdqiPMQ9kMmFtYrpYkyA/on37yfAl4=",
    "pom": "sha256-CKAoVuSHyTV/mynjh0X4roBYSBEectFarQNSM48WMuE="
   },
-  "org/junit#junit-bom/6.1.2": {
-   "module": "sha256-Wc4IX9W359LEsyupmjo+Hv/0F5kZ8enWbC3m7ndVZHg=",
-   "pom": "sha256-m21qb6grPXYEiVXguweD1kx+dHEcUfG13Pw+zN0wO+I="
+  "org/junit#junit-bom/6.1.3": {
+   "module": "sha256-n11X2tz6B/ezjvz7IrBS7OGIkiod92tamORKHfencBs=",
+   "pom": "sha256-qQAAQ2EKPpDIUud5prGo63JKnzEs9ffd1XhisBDGXcg="
   },
-  "org/junit/jupiter#junit-jupiter-api/6.1.2": {
-   "jar": "sha256-5geUt9lOA8S8ocCDPPyhh2LaXqrAphsWKBy7twgQPkw=",
-   "module": "sha256-Kc96toQDnW8gsUtZ7It7+cVfYMXslKzcW7/JUqxlPQk=",
-   "pom": "sha256-DZsz2wywdKOwfwWtfN4FEU+BJvpDPVmSpwcxV/Ak5BQ="
+  "org/junit/jupiter#junit-jupiter-api/6.1.3": {
+   "jar": "sha256-VV1s8g+hcQiE3QG4bMV4U5e6c+Ia2i1LeE9fGhTcr8Q=",
+   "module": "sha256-rZkJwfqIpXmyghoJGhlsRahLzQ9PxzV5kP3HPTgByKU=",
+   "pom": "sha256-qdY0faAym/EY6YeGF+ULVTfrnsPF/NCIUmUHE4MtGsE="
   },
-  "org/junit/jupiter#junit-jupiter-engine/6.1.2": {
-   "jar": "sha256-VyJ84onthKsgUTaZfS5RF/bMaVoWt+I11Z9wzfM8PXo=",
-   "module": "sha256-imOatwugInS8Xd5PGAdown4w76QeLXF57Wr4RiwyH2s=",
-   "pom": "sha256-gVNQD2Wd3ltndY74x1KgmiWgdkKE6z7Dwipp7OiGcrw="
+  "org/junit/jupiter#junit-jupiter-engine/6.1.3": {
+   "jar": "sha256-QUVZ54u/o72y6rAJrDqx4iNprDERfCcKC9Zm2hFcXGw=",
+   "module": "sha256-Ymop8obDbQ9vNkCWRDceEqP+K/y7iB4T+CZayd6Wu3c=",
+   "pom": "sha256-BR/GXZfBXnzWRoMTaK+K/sWQsAjIBNKTr/EUx0oeJTA="
   },
-  "org/junit/jupiter#junit-jupiter-params/6.1.2": {
-   "jar": "sha256-we0hZPa6OIUYdXs48hnb41CsCYr80SbLy9Ylb7mWZq4=",
-   "module": "sha256-QQo+WUk5AQc1Y/T0iv9/huWzpdSXZoZNlrrtYmvdLpI=",
-   "pom": "sha256-yhlnj3hFczdPrizy5XowZBaIYlJ6fpuNTIwwIwgz004="
+  "org/junit/jupiter#junit-jupiter-params/6.1.3": {
+   "jar": "sha256-BcUc7bosBql3Bwc5HgBs7oJYdpN96lgLlKJlzhRdSTk=",
+   "module": "sha256-nsd5X0rrklePtNQ7anPDJP/yFsqXHzkQM1BziCx4oWc=",
+   "pom": "sha256-EPfoW1zlMBTJRrFMdQsJCXvtGJLsryzqBdEqq26Gd9I="
   },
-  "org/junit/jupiter#junit-jupiter/6.1.2": {
-   "jar": "sha256-Knh3GWVzodMvpyYxPe/93i6QzKdkZH5gUJMCCwiXNhY=",
-   "module": "sha256-Hp9TxJEn2pLPRqpgSXEzznPC/JP592xeYZCV6QQ54pg=",
-   "pom": "sha256-eC8VjmSKp41MLTEe7E5KKNrg0h3MBaUEABvvGRfYxl8="
+  "org/junit/jupiter#junit-jupiter/6.1.3": {
+   "jar": "sha256-awoUB1x0Ih3lMEfjY4YLfRn86AK+vBUt8sNcQInGw3k=",
+   "module": "sha256-ynt91FCNV6ncEFECqpP7W8lgsglWAVNLkxH5Uf+zmXk=",
+   "pom": "sha256-6//7QYYasczJid4snC0Rkk5d3e0nKLBT9fL93IQJwOE="
   },
-  "org/junit/platform#junit-platform-commons/6.1.2": {
-   "jar": "sha256-IEiUwDnTIXQ+4R59Hcg2AXDXxkOR++oSEReKZFwzqSo=",
-   "module": "sha256-WMrZ2JsGLfLPoE3s+8nmU4pFTLV/VrIdYt/AhKn6sc0=",
-   "pom": "sha256-J8XmCWAs58lLpvfrbirUsR9eGz4oKiWFeENUhf4FJdc="
+  "org/junit/platform#junit-platform-commons/6.1.3": {
+   "jar": "sha256-pHdK6SPBCVRANK6ufHYs8Bf7zdE0JAO6kOCSGYS2CMM=",
+   "module": "sha256-pvEhhhY0G1mfaqApo3aMb5VqsdMhbtclDkvl15rfzn0=",
+   "pom": "sha256-paOhrslhE7HpU1RcPYxRF/8CIMVvcpPG//fTWxzTfBQ="
   },
-  "org/junit/platform#junit-platform-engine/6.1.2": {
-   "jar": "sha256-SE6QgohGrWuI7+Imtv4BSnWUGzKyJukU2ad1iAL0b5E=",
-   "module": "sha256-MRGEHjdZrLbJbpVz0gyARDqQUCGkKs6J7+3ghrNUlTU=",
-   "pom": "sha256-t+DIvNyMk1s2MF85Je6ZCK8KwdfN/zITSCToJxITpec="
+  "org/junit/platform#junit-platform-engine/6.1.3": {
+   "jar": "sha256-Ia1606Nb7aFjh5eTF74YM6cqcdgS+aZu5LmnuvtWM0w=",
+   "module": "sha256-cPUCCttMkVdQJUmagEsmbo/C0Ceqbnj+v6NyvjqIzvU=",
+   "pom": "sha256-UZTa0l2HiYVkaknfcb2YXo0t1Ma2dlcXCTrIoxvbMuQ="
   },
-  "org/junit/platform#junit-platform-launcher/6.1.2": {
-   "jar": "sha256-hYGXISwbKswlfJ7sm0UKMZI8YcG8YeZqzwBX1Xu+V3o=",
-   "module": "sha256-p3cFlL2irKTgAw27N+5QZnYNcZs+QGJ+vlIYnFCqSfc=",
-   "pom": "sha256-8BSc2hdLfzcQBYJrbvov5QQp5Hs9FifL6SKXmo+Jv1s="
+  "org/junit/platform#junit-platform-launcher/6.1.3": {
+   "jar": "sha256-HexksfwLfEehEwKqW0032BYMBBs5bicGdwnOd1YBp7Y=",
+   "module": "sha256-YtIZijp3nFQxa76DnlFiOzpr0RHmctWG3Zo7uyIlaeY=",
+   "pom": "sha256-La87Q2C6ngc0QhDM8ptr6XA9Crxm3kEh9l2QEZ/plso="
   },
   "org/lanternpowered#lmbda/3.0.0": {
    "jar": "sha256-CBth/qofHGda+vIuHd1KbYqVK0sZw3ajhzHzT6TFGnw=",
@@ -1420,12 +1385,26 @@
    "jar": "sha256-RFCP0VdlAGiMeQsZCs3Rb+xPjHmj4LkAr9cFA88FX1U=",
    "pom": "sha256-bCx/LAJ3TMK3thn70t94c82tKXGJJuRHVLh/cNHrQ8s="
   },
+  "org/slf4j#slf4j-api/2.0.19": {
+   "jar": "sha256-6R/21yBgnnoZT/51jD7VyE55hheuB7Cg9qT+IpdBtLs=",
+   "pom": "sha256-sEpIQ+qimWaAfMlQip8lE/pWPQ0HlMsO3WqNLI9GINA="
+  },
   "org/slf4j#slf4j-bom/2.0.18": {
    "pom": "sha256-khmqtgFXUSbE5m4TMesrDGwXozCsTVoH480R1YCgwS0="
   },
+  "org/slf4j#slf4j-bom/2.0.19": {
+   "pom": "sha256-4UqasYD2AkfzR942m3pEzNWR0MR/TZa8ZEBWxPg7UaA="
+  },
   "org/slf4j#slf4j-parent/2.0.18": {
    "pom": "sha256-CziWvtrSye2Wl+3L6h2gxUzSOKcjWDqBNYqDv7eC6fo="
   },
+  "org/slf4j#slf4j-parent/2.0.19": {
+   "pom": "sha256-RSgx75b76+ZNhV3VyY7GCG10eKnlaEIsg0PG2gCydQ0="
+  },
+  "org/slf4j#slf4j-simple/2.0.18": {
+   "jar": "sha256-gmi9AYpXCbByCeDYymIho3WEuhvBK6mFuDNagsZIvdA=",
+   "pom": "sha256-Pujj8RjAy41D7iyW2Q2CXGnYSSP0muShTVM6AHAkuZk="
+  },
   "org/sonatype/oss#oss-parent/5": {
    "pom": "sha256-FnjUEgpYXYpjATGu7ExSTZKDmFg7fqthbufVqH9SDT0="
   },
@@ -1487,21 +1466,21 @@
    "jar": "sha256-hpgdL1CrFe6+GpD4Q6GV8o8L0e5SJV12pz7AtLfsec0=",
    "pom": "sha256-+jUpmw0MRzE9cDZKddILmsOoh0Q8Yyx+z1C6ffiHG+U="
   },
-  "org/xmlresolver#xmlresolver/5.1.1": {
-   "jar": "sha256-MSL4rkDERq27MDzVUldoA/2/bq77hL985D0TNlsnymg=",
-   "module": "sha256-DaZVpENW8JhTRljd56tHCwOSc8Wc9NyU7HcQYnCpzV0=",
-   "pom": "sha256-pQDlCR85eXYVDo05n+tBDIXlfXyQl9Y5gdMeL27Bbtk="
+  "org/xmlresolver#xmlresolver/5.3.3": {
+   "jar": "sha256-H+TVuS9wjc24LbzhKRngFx5rXKYsbcpiIEg2JQmP618=",
+   "module": "sha256-DeilBgQ5G2UDnI/6PxQRiSJ+x5rFMyPhPiunKIy3no4=",
+   "pom": "sha256-JhradtnmZ2AI3Kw3ek1FiXSRZrYGVZ9Z8uRepi2Ldew="
   },
-  "org/xmlresolver#xmlresolver/5.1.1/data": {
-   "jar": "sha256-uvgjj/PdgGV2SHWvLkHeiw7kWF4AsC9R7JEb1l/TwcM="
+  "org/xmlresolver#xmlresolver/5.3.3/data": {
+   "jar": "sha256-sMSHrS8+VYvo2CnJFtJFjRCspqW6+npNBSS3CEXkilw="
   },
   "org/yaml#snakeyaml/1.26": {
    "jar": "sha256-2H1gflAIhTVsA8HK5h6MLgXWl9+Hh9WroTSEwut2qEQ=",
    "pom": "sha256-xVd6BoDYqN70GDqk1q7RwBICaz2JvaZc2g4YrhYTAVc="
   },
-  "org/yaml#snakeyaml/2.6": {
-   "jar": "sha256-yPepjnOUrdoC9jFySXEOTRtMeiWqjH6s4MLupS64v4U=",
-   "pom": "sha256-J3Ow6UiWTSHjew4dzzkCXmJ7hz4M5qoqR+I8N0MD4MQ="
+  "org/yaml#snakeyaml/2.7": {
+   "jar": "sha256-LhlOukWmfe4ZpOJy9KBLGN6AVOn1mLCUOC9trgsOS14=",
+   "pom": "sha256-Wei7/UPjVBwaPibxaMleyP7gB225Gs+k147elVCfJrQ="
   },
   "space/vectrix/flare#flare-fastutil/2.0.1": {
    "jar": "sha256-pE55PB+eCzzcYITaGP2TCDNTpgC1SyDcfWgmrsZNBB8=",

pkgs/by-name/ve/velocity/package.nix

@@ -32,13 +32,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "velocity";
-  version = "4.1.2-unstable-2026-09-01";
+  version = "4.2.1-unstable-2026-09-23";
 
   src = fetchFromGitHub {
     owner = "PaperMC";
     repo = "Velocity";
-    rev = "21bbf35d1da1d8a74aad897ecb4e6915f121898d";
-    hash = "sha256-2BZPRUQc2JCk0ULO7VuEVn/ScHVY2hGneYf8/hEwO5M=";
+    rev = "fb0f21f425a36a2ebe4a7c35d233b0e6771b81f6";
+    hash = "sha256-aaMoz8BGHu5J+RkL/kPwkGUWNFE3GBSR31xsokLzkxs=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ve/versatiles/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "versatiles";
-  version = "4.13.0";
+  version = "4.14.0";
 
   src = fetchFromGitHub {
     owner = "versatiles-org";
     repo = "versatiles-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GDio5QTDl8d1/T7yISufSdoNfSSlUMdS+wfQpMzFUbc=";
+    hash = "sha256-ae74UekHp8ec8p3oVKMY1++dLM3tv/lN6T32s2LN6+o=";
   };
 
-  cargoHash = "sha256-DNWz2Ap0yrm5Jn0MTZXENOFoF/pmEEg6XJDqiJ+cpV8=";
+  cargoHash = "sha256-AhfQWahuxbCp1Ra8OFewQ77bZ3l9OImU+ySsUxNStXo=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/vh/vhs/package.nix

@@ -12,13 +12,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "vhs";
-  version = "0.12.0";
+  version = "0.12.1";
 
   src = fetchFromGitHub {
     owner = "charmbracelet";
     repo = "vhs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bugR32sWO4xM1HxcwFb1eHrXguQG4GqHDanV13zBI9I=";
+    hash = "sha256-9O9f/3B42BhhJ5LWNyHrQtaOKwVnAZR309Dvbpx3d4g=";
   };
 
   vendorHash = "sha256-ZGlXyM4oRZSCY/Ulc55NcFylHnQKqA/TXjpcWGdmhwo=";

pkgs/by-name/vi/vivify/package.nix

@@ -13,18 +13,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "vivify";
-  version = "0.14.0";
+  version = "0.15.0";
 
   src = fetchFromGitHub {
     owner = "jannis-baum";
     repo = "Vivify";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CszMG+c0bNHfXWqcI3b4iGpeFJ+FmzHDzxflPS+wEe0=";
+    hash = "sha256-ZrSqwj40fOctN6folsN2/2z+o/PyAABjGgAgp4jcDOM=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-svgEanFiBSQn0TdTuB0CnLR71lkANABEaDiKB+Vc0Rc=";
+    hash = "sha256-evi/sKbQXF90HdcVKzfSnu5PYD3UaQ7xuMsnh2TAE+U=";
   };
 
   installPhase = ''

pkgs/by-name/wa/wait4x/package.nix

@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "wait4x";
-  version = "3.7.1";
+  version = "3.7.2";
 
   src = fetchFromGitHub {
     owner = "wait4x";
     repo = "wait4x";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Cv0yjkfxJQFTcDLyAgWnjIz4mfZY1T99X1j7N6lL7zA=";
+    hash = "sha256-07+6noaevhkr9MqMFquEDpPKcNJSzHMIL2qREwX3tjM=";
   };
 
-  vendorHash = "sha256-4OlAA032PMfn03zOiQA2aw0jqUKm/US86wwSLpfrQOk=";
+  vendorHash = "sha256-qsVXm0W8R0xjlN4jvE70tmCr8WFScX7zMbtYR0LmJdg=";
 
   # Tests make network access
   doCheck = false;

pkgs/by-name/wa/walker/package.nix

@@ -20,16 +20,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "walker";
-  version = "2.17.0";
+  version = "2.17.1";
 
   src = fetchFromGitHub {
     owner = "abenz1267";
     repo = "walker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-gxHJsrJZo2qbKK47Kf/9ho3i/HhRwkL8XvPnczGPd9E=";
+    hash = "sha256-QS+ApYWt51tRsW38JrlJn718FgUyLPTRc5ElVvQGR4I=";
   };
 
-  cargoHash = "sha256-TkBdBgUa0fMN/Eddi0qycNjNgYaVECRFbrXixOEpQnc=";
+  cargoHash = "sha256-woHcuyvfoQgpg/ehWu/SZGPjBarp9pscKQuIPhh1EK4=";
 
   nativeBuildInputs = [
     gobject-introspection

pkgs/development/haskell-modules/configuration-nix.nix

@@ -222,11 +222,11 @@ builtins.intersectAttrs super {
   cuda = overrideCabal (drv: {
     extraLibraries = (drv.extraLibraries or [ ]) ++ [ pkgs.linuxPackages.nvidia_x11 ];
     configureFlags = (drv.configureFlags or [ ]) ++ [
-      "--extra-lib-dirs=${pkgs.cudatoolkit.lib}/lib"
-      "--extra-include-dirs=${pkgs.cudatoolkit}/include"
+      "--extra-lib-dirs=${pkgs.cudaPackages.cudatoolkit.lib}/lib"
+      "--extra-include-dirs=${pkgs.cudaPackages.cudatoolkit}/include"
     ];
     preConfigure = ''
-      export CUDA_PATH=${pkgs.cudatoolkit}
+      export CUDA_PATH=${pkgs.cudaPackages.cudatoolkit}
     '';
   }) super.cuda;
 
@@ -244,7 +244,7 @@ builtins.intersectAttrs super {
 
   nvvm = overrideCabal (drv: {
     preConfigure = ''
-      export CUDA_PATH=${pkgs.cudatoolkit}
+      export CUDA_PATH=${pkgs.cudaPackages.cudatoolkit}
     '';
   }) super.nvvm;
 
@@ -296,7 +296,7 @@ builtins.intersectAttrs super {
 
   cufft = overrideCabal (drv: {
     preConfigure = ''
-      export CUDA_PATH=${pkgs.cudatoolkit}
+      export CUDA_PATH=${pkgs.cudaPackages.cudatoolkit}
     '';
   }) super.cufft;
 

pkgs/development/libraries/nvidia-vaapi-driver/default.nix

@@ -13,15 +13,18 @@
   addDriverRunpath,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "nvidia-vaapi-driver";
   version = "0.0.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "elFarto";
     repo = "nvidia-vaapi-driver";
-    rev = "v${version}";
-    sha256 = "sha256-cEEPRKoWtNXk8LsDbkhNjnIY7UD1rfYbv2Q6ThG0YLg=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-cEEPRKoWtNXk8LsDbkhNjnIY7UD1rfYbv2Q6ThG0YLg=";
   };
 
   patches = [
@@ -51,8 +54,8 @@ stdenv.mkDerivation rec {
   meta = {
     homepage = "https://github.com/elFarto/nvidia-vaapi-driver";
     description = "VA-API implementation using NVIDIA's NVDEC";
-    changelog = "https://github.com/elFarto/nvidia-vaapi-driver/releases/tag/v${version}";
+    changelog = "https://github.com/elFarto/nvidia-vaapi-driver/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ nickcao ];
   };
-}
+})

pkgs/development/ocaml-modules/ppx_expect_nobase/default.nix

@@ -0,0 +1,38 @@
+{
+  lib,
+  buildDunePackage,
+  fetchFromGitHub,
+  dune-build-info,
+  ppx_inline_test_nobase,
+  ppxlib,
+  sexplib,
+}:
+
+buildDunePackage (finalAttrs: {
+  pname = "ppx_expect_nobase";
+  version = "0.17.3.2";
+
+  minimalOCamlVersion = "4.14.2";
+
+  src = fetchFromGitHub {
+    owner = "Kakadu";
+    repo = "ppx_expect_nobase";
+    tag = finalAttrs.version;
+    hash = "sha256-tLuq1O+FI8hLRuMrEZKXeDuN+QvMrqF0etkczYZTF5A=";
+  };
+
+  propagatedBuildInputs = [
+    dune-build-info
+    ppx_inline_test_nobase
+    ppxlib
+    sexplib
+  ];
+
+  meta = {
+    description = "Cram like framework for OCaml";
+    homepage = "https://github.com/Kakadu/ppx_expect_nobase";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ wegank ];
+    broken = lib.versionOlder ppxlib.version "0.37";
+  };
+})

pkgs/development/ocaml-modules/ppx_inline_test_nobase/default.nix

@@ -0,0 +1,36 @@
+{
+  lib,
+  buildDunePackage,
+  fetchFromGitHub,
+  mtime,
+  ppxlib,
+  sexplib0,
+}:
+
+buildDunePackage (finalAttrs: {
+  pname = "ppx_inline_test_nobase";
+  version = "0.17.0.3";
+
+  minimalOCamlVersion = "4.14.2";
+
+  src = fetchFromGitHub {
+    owner = "Kakadu";
+    repo = "ppx_inline_test_nobase";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Bsw+jtPfONeiRoAGYhD3Ty9Pu+pUYmg94mGY3cCqqp4=";
+  };
+
+  propagatedBuildInputs = [
+    mtime
+    ppxlib
+    sexplib0
+  ];
+
+  meta = {
+    description = "Syntax extension for writing in-line tests in ocaml code";
+    homepage = "https://github.com/Kakadu/ppx_inline_test_nobase";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ wegank ];
+    broken = lib.versionOlder ppxlib.version "0.37";
+  };
+})

pkgs/development/python-modules/ansible-compat/default.nix

@@ -23,7 +23,7 @@
 
 buildPythonPackage rec {
   pname = "ansible-compat";
-  version = "26.8.0";
+  version = "26.9.0";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -34,7 +34,7 @@ buildPythonPackage rec {
       # export-subst prevents reproducibility
       rm $out/.git_archival.txt
     '';
-    hash = "sha256-12t/iLtha5FACVpXFqrz6vIiVmtHPPqdfHogXuAe2F4=";
+    hash = "sha256-+UHBJV8gTY/Id3wKtBWF7zZsclWhIdnFnjud/AScF8s=";
   };
 
   build-system = [

pkgs/development/python-modules/boto3-stubs/default.nix

@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.43.100";
+  version = "1.43.102";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-gOCV1ilpCWpVyfHhgS7cN3FAdOZxfnCp2mk3f1QmP0A=";
+    hash = "sha256-oIUt9j6/Cv8zrU9+SSjyXWFwO/EGW0am23/m96KE2Dw=";
   };
 
   build-system = [ setuptools ];