Merge staging-next into staging

2026-10-03 13:30:36 +00:00 · 2025-02-22 18:04:32 +00:00
parent 51b93f39ab ea6052ffd7
commit 6a01bf9a96
160 changed files with 1150 additions and 700 deletions
--- a/maintainers/scripts/luarocks-packages.csv
+++ b/maintainers/scripts/luarocks-packages.csv
@@ -123,7 +123,6 @@ neotest,,,,,,mrcjkb
 nlua,,,,,,teto
 nui.nvim,,,,,,mrcjkb
 nvim-cmp,https://raw.githubusercontent.com/hrsh7th/nvim-cmp/main/nvim-cmp-scm-1.rockspec,,,,,
-nvim-dbee,,,,,,perchun
 nvim-nio,,,,,,mrcjkb
 nvim-web-devicons,,,,,,
 oil.nvim,,,,,,
--- a/nixos/doc/manual/release-notes/rl-2505.section.md
+++ b/nixos/doc/manual/release-notes/rl-2505.section.md
@@ -179,6 +179,8 @@

 - `ast-grep` remove `sg` command to prevent conflict with `sg` command from shadow-utils. If you need legacy sg command compatibility with old code, you can use `ast-grep.override { enableLegacySg = true; }`

+- `python3Packages.beancount` was updated to 3.1.0. Previous major version remains available as `python3Packages.beancount_2`.
+
 - `binwalk` was updated to 3.1.0, which has been rewritten in rust. The python module is no longer available.
  See the release notes of [3.1.0](https://github.com/ReFirmLabs/binwalk/releases/tag/v3.1.0) for more information.

--- a/nixos/modules/tasks/filesystems/zfs.nix
+++ b/nixos/modules/tasks/filesystems/zfs.nix
@@ -877,7 +877,7 @@ in
                                wantedBy = [ "timers.target" ];
                                timerConfig = {
                                  OnCalendar = timer snapName;
-                                  Persistent = "yes";
+                                  Persistent = lib.mkDefault "yes";
                                };
                              };
                            }) snapshotNames);
@@ -907,7 +907,7 @@ in
        after = [ "multi-user.target" ]; # Apparently scrubbing before boot is complete hangs the system? #53583
        timerConfig = {
          OnCalendar = cfgScrub.interval;
-          Persistent = "yes";
+          Persistent = lib.mkDefault "yes";
          RandomizedDelaySec = cfgScrub.randomizedDelaySec;
        };
      };
@@ -927,7 +927,7 @@ in
      };

      systemd.timers.zpool-trim.timerConfig = {
-        Persistent = "yes";
+        Persistent = lib.mkDefault "yes";
        RandomizedDelaySec = cfgTrim.randomizedDelaySec;
      };
    })
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -30,8 +30,47 @@ let
        # (if it is a function).
        discoverTests (val { inherit system pkgs; })
      else val;
+
+  /**
+    Evaluate a test and return a derivation that runs the test as its builder.
+
+    This function is deprecated in favor of runTest and runTestOn, which works
+    by passing a module instead of a specific set of arguments.
+    Benefits of runTest and runTestOn:
+    - Define values for any test option
+    - Use imports to compose tests
+    - Access the module arguments like hostPkgs and config.node.pkgs
+    - Portable to other VM hosts, specifically Darwin
+    - Faster evaluation, using a single `pkgs` instance
+
+    Changes required to migrate to runTest:
+    - Remove any `import ../make-test-python.nix` or similar calls, leaving only
+      the callback function.
+    - Convert the function header to make it a module.
+      Packages can be taken from the following. For VM host portability, use
+      - `config.node.pkgs.<name>` or `config.nodes.foo.nixpkgs.pkgs.<name>` to refer
+        to the Nixpkgs used on the VM guest(s).
+      - `hostPkgs.<name>` when invoking commands on the VM host (e.g. in Python
+        `os.system("foo")`)
+    - Since the runTest argument is a module instead of a function, arguments
+      must be passed as option definitions.
+      You may declare explicit `options` for the test parameter(s), or use the
+      less explicit `_module.args.<name>` to pass arguments to the module.
+
+      Example call with arguments:
+
+          runTest {
+            imports = [ ./test.nix ];
+            _module.args.getPackage = pkgs: pkgs.foo_1_2;
+          }
+
+    - If your test requires any definitions in `nixpkgs.*` options, set
+      `node.pkgsReadOnly = false` in the test configuration.
+   */
  handleTest = path: args:
    discoverTests (import path ({ inherit system pkgs; } // args));
+
+  /** See handleTest */
  handleTestOn = systems: path: args:
    if elem system systems then handleTest path args
    else {};
@@ -61,7 +100,9 @@ let
        if elem system systems then runTest arg
        else {};
    })
+    /** See https://nixos.org/manual/nixos/unstable/#sec-calling-nixos-tests */
    runTest
+    /** See https://nixos.org/manual/nixos/unstable/#sec-calling-nixos-tests */
    runTestOn
    ;

@@ -253,7 +294,6 @@ in {
  curl-impersonate = handleTest ./curl-impersonate.nix {};
  custom-ca = handleTest ./custom-ca.nix {};
  croc = handleTest ./croc.nix {};
-  cross-seed = runTest ./cross-seed.nix;
  cyrus-imap = runTest ./cyrus-imap.nix;
  darling = handleTest ./darling.nix {};
  darling-dmg = runTest ./darling-dmg.nix;
--- a/nixos/tests/cross-seed.nix
+++ b/nixos/tests/cross-seed.nix
@@ -1,43 +0,0 @@
-{ lib, ... }:
-let
-  apiKey = "twentyfourcharacterskey!";
-in
-{
-  name = "cross-seed";
-  meta.maintainers = with lib.maintainers; [ pta2002 ];
-
-  nodes.machine =
-    { pkgs, config, ... }:
-    let
-      cfg = config.services.cross-seed;
-    in
-    {
-      systemd.tmpfiles.settings."0-cross-seed-test"."${cfg.settings.torrentDir}".d = {
-        inherit (cfg) user group;
-        mode = "700";
-      };
-
-      services.cross-seed = {
-        enable = true;
-        settings = {
-          outputDir = "/var/lib/cross-seed/output";
-          torrentDir = "/var/lib/torrents";
-          torznab = [ ];
-          useClientTorrents = false;
-        };
-        # # We create this secret in the Nix store (making it readable by everyone).
-        # # DO NOT DO THIS OUTSIDE OF TESTS!!
-        settingsFile = (pkgs.formats.json { }).generate "secrets.json" {
-          inherit apiKey;
-        };
-      };
-    };
-
-  testScript = # python
-    ''
-      start_all()
-      machine.wait_for_unit("cross-seed.service")
-      machine.wait_for_open_port(2468)
-      machine.succeed("curl --fail -XPOST http://localhost:2468/api/search?apiKey=${apiKey}")
-    '';
-}
--- a/pkgs/applications/editors/vim/plugins/non-generated/nvim-dbee/default.nix
+++ b/pkgs/applications/editors/vim/plugins/non-generated/nvim-dbee/default.nix
@@ -0,0 +1,69 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  arrow-cpp,
+  duckdb,
+  nix-update-script,
+  stdenv,
+  vimPlugins,
+  vimUtils,
+}:
+let
+  version = "0.1.9";
+  src = fetchFromGitHub {
+    owner = "kndndrj";
+    repo = "nvim-dbee";
+    tag = "v${version}";
+    hash = "sha256-AOime4vG0NFcUvsd9Iw5SxR7WaeCsoCRU6h5+vSkt4M=";
+  };
+  dbee-bin = buildGoModule {
+    pname = "dbee-bin";
+    inherit version;
+
+    src = "${src}/dbee";
+
+    vendorHash = "sha256-U/3WZJ/+Bm0ghjeNUILsnlZnjIwk3ySaX3Rd4L9Z62A=";
+    buildInputs = [
+      arrow-cpp
+      duckdb
+    ];
+
+    # Tests attempt to access `/etc/protocols` which is forbidden in the sandbox
+    doCheck = !stdenv.hostPlatform.isDarwin;
+
+    meta.mainProgram = "dbee";
+  };
+in
+vimUtils.buildVimPlugin {
+  pname = "nvim-dbee";
+  inherit version src;
+
+  postPatch = ''
+    substituteInPlace lua/dbee/install/init.lua \
+      --replace-fail 'return vim.fn.stdpath("data") .. "/dbee/bin"' 'return "${dbee-bin}/bin"'
+  '';
+
+  preFixup = ''
+    mkdir $target/bin
+    ln -s ${lib.getExe dbee-bin} $target/bin/dbee
+  '';
+
+  passthru = {
+    updateScript = nix-update-script {
+      attrPath = "vimPlugins.nvim-dbee.dbee-lib";
+    };
+
+    # needed for the update script
+    inherit dbee-bin;
+  };
+
+  dependencies = [ vimPlugins.nui-nvim ];
+
+  meta = {
+    description = "Interactive database client for neovim";
+    homepage = "https://github.com/kndndrj/nvim-dbee";
+    changelog = "https://github.com/kndndrj/nvim-dbee/releases/tag/v${version}";
+    maintainers = with lib.maintainers; [ perchun ];
+  };
+}
--- a/pkgs/applications/editors/vim/plugins/overrides.nix
+++ b/pkgs/applications/editors/vim/plugins/overrides.nix
@@ -2267,6 +2267,8 @@ in
    dependencies = [ self.nvim-dap ];
  };

+  nvim-dbee = callPackage ./non-generated/nvim-dbee { };
+
  nvim-coverage = super.nvim-coverage.overrideAttrs {
    dependencies = with self; [
      neotest
@@ -4035,7 +4037,6 @@ in
      "neotest"
      "nui-nvim"
      "nvim-cmp"
-      "nvim-dbee"
      "nvim-nio"
      "nvim-web-devicons"
      "oil-nvim"
--- a/pkgs/applications/networking/cluster/sonobuoy/default.nix
+++ b/pkgs/applications/networking/cluster/sonobuoy/default.nix
@@ -9,11 +9,11 @@
 # SHA of ${version} for the tool's help output. Unfortunately this is needed in build flags.
 # The update script can update this automatically, the comment is used to find the line.
 let
-  rev = "cc22d58f4c8b5a155bd1778cd3702eca5ad43e05"; # update-commit-sha
+  rev = "a988242e8bbded3ef4602eda48addcfac24a1a91"; # update-commit-sha
 in
 buildGoModule rec {
  pname = "sonobuoy";
-  version = "0.57.2"; # Do not forget to update `rev` above
+  version = "0.57.3"; # Do not forget to update `rev` above

  ldflags =
    let
@@ -30,10 +30,10 @@ buildGoModule rec {
    owner = "vmware-tanzu";
    repo = "sonobuoy";
    rev = "v${version}";
-    hash = "sha256-QRHCAnZwz90ZVaZUbg7Jv1VlobbcY5mbFQbMQJfHsfU=";
+    hash = "sha256-YFItnwU08g4pVo4OOHscRmPRVXyr+R9YWYTxhSzd7iI=";
  };

-  vendorHash = "sha256-QUKdCsbxobusyaPWLMJujPgmWIT3mBajgy98BUAgPyk=";
+  vendorHash = "sha256-QjVnC6CZXuw6qLNyX9ut2g1Ws1cYO1JuT043aqqeF0Q=";

  subPackages = [ "." ];

--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1282,11 +1282,11 @@
    "vendorHash": "sha256-Cqo7aq0uBISrnpQPrmJBNACSt2mAt12I4xpf8yDd0AU="
  },
  "tencentcloud": {
-    "hash": "sha256-0MkjN9gQZqi7qmbnFyVIFvRD3bpRtfsUqyjARLtkLBA=",
+    "hash": "sha256-zTH4s6PuYarQHvtFHB0yrFmsFLuoY0PmMjVD/FKnCkM=",
    "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
    "owner": "tencentcloudstack",
    "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.81.165",
+    "rev": "v1.81.168",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
--- a/pkgs/applications/office/treesheets/default.nix
+++ b/pkgs/applications/office/treesheets/default.nix
@@ -12,13 +12,13 @@

 stdenv.mkDerivation rec {
  pname = "treesheets";
-  version = "0-unstable-2025-02-05";
+  version = "0-unstable-2025-02-20";

  src = fetchFromGitHub {
    owner = "aardappel";
    repo = "treesheets";
-    rev = "474b0cd2e779e22fc8e6de225a27ad88bc5eec65";
-    hash = "sha256-qJ30qjwV4ayTvf2XAZnAdn907YdYCb/XAhxaExDeHZI=";
+    rev = "4e4d99df2080535cf4838319a8b3526425ba7bb7";
+    hash = "sha256-zM890w0GgtW++mAhze73GaCThx7WhyucrC24yDZYq0k=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/video/mpv/scripts/manga-reader.nix
+++ b/pkgs/applications/video/mpv/scripts/manga-reader.nix
@@ -8,12 +8,12 @@
 buildLua rec {
  pname = "manga-reader";

-  version = "0-unstable-2024-07-05";
+  version = "0-unstable-2025-02-16";
  src = fetchFromGitHub {
    owner = "Dudemanguy";
    repo = "mpv-manga-reader";
-    rev = "fb06931eed4092fa74a98266cd04fa507ea63e13";
-    hash = "sha256-xtzDHv+zW/9LsLWo4Km7OQ05BVJlwqu9461i9ee94lM=";
+    rev = "68824666b669ec101835f6d7aa510896e82ec30f";
+    hash = "sha256-9PGJ2OrAcbJIBLI/XGT2HQpC3KuoYnn1ws9oB9AnHQA=";
  };
  passthru.updateScript = unstableGitUpdater { };

--- a/pkgs/by-name/ag/agate/package.nix
+++ b/pkgs/by-name/ag/agate/package.nix
@@ -11,17 +11,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "agate";
-  version = "3.3.11";
+  version = "3.3.12";

  src = fetchFromGitHub {
    owner = "mbrubeck";
    repo = "agate";
    rev = "v${version}";
-    hash = "sha256-w02vc89U0a1NmEqneHq0M5u+OKaFbTAVqJDFZgRp7l0=";
+    hash = "sha256-jc/JsGHAm+3t3PeI4HgpMPZrXr9TvzwHj13NOGUIH8c=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-xK2sEtHBYKi2aAt/Sc5qIFGAZns8Wdm24/dBCR73KmQ=";
+  cargoHash = "sha256-9G/97n7TapOlybjU1eqbWbXHd9+/v8Xm2IV/M7XuJMM=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/ag/agorakit/package.nix
+++ b/pkgs/by-name/ag/agorakit/package.nix
@@ -7,13 +7,13 @@

 php.buildComposerProject2 (finalAttrs: {
  pname = "agorakit";
-  version = "1.9.2";
+  version = "1.9.3";

  src = fetchFromGitHub {
    owner = finalAttrs.pname;
    repo = finalAttrs.pname;
    tag = finalAttrs.version;
-    sha256 = "sha256-6T7AksvBxUpv8TkPicnlCE5KZS/ydPB5Bq1MJcWoZds=";
+    sha256 = "sha256-mBBl/8nXG3FsMeecbERLyY2tGFhh+5nS8A4nd7HI+8c=";
  };

  installPhase = ''
@@ -26,7 +26,7 @@ php.buildComposerProject2 (finalAttrs: {
    runHook postInstall
  '';

-  vendorHash = "sha256-EepkEMqzRJUqw4PrPclY9BM4AGlQZJpYLWjIyaX15PA=";
+  vendorHash = "sha256-PBymOrvorGfByTBVu/r+kBxQya5qIlu07mfu4ttT7xs=";
  composerStrictValidation = false;

  meta = {
--- a/pkgs/by-name/am/amazon-cloudwatch-agent/package.nix
+++ b/pkgs/by-name/am/amazon-cloudwatch-agent/package.nix
@@ -11,16 +11,16 @@

 buildGoModule rec {
  pname = "amazon-cloudwatch-agent";
-  version = "1.300052.0";
+  version = "1.300053.0";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "amazon-cloudwatch-agent";
    tag = "v${version}";
-    hash = "sha256-YxmWh14efLSo6G8pujXzKmXYROhIAHYTczzY5tMgbLE=";
+    hash = "sha256-nM/QwyYhE8QTa3wpNJ1KZ9nWJjLeBkMHufOS58OWGmE=";
  };

-  vendorHash = "sha256-EyhT1gfrd189jqcEQ97CSKziKrT2bBeQ9pWIEK039Io=";
+  vendorHash = "sha256-UIwFUXEMtxPVHrioptYjslSm0qTBCyVR9OudkBR01tg=";

  # See the list in https://github.com/aws/amazon-cloudwatch-agent/blob/v1.300049.1/Makefile#L68-L77.
  subPackages = [
--- a/pkgs/by-name/au/auth0-cli/package.nix
+++ b/pkgs/by-name/au/auth0-cli/package.nix
@@ -5,16 +5,16 @@

 buildGoModule rec {
  pname = "auth0-cli";
-  version = "1.9.0";
+  version = "1.9.1";

  src = fetchFromGitHub {
    owner = "auth0";
    repo = "auth0-cli";
    tag = "v${version}";
-    hash = "sha256-hX4KzDIR0CLcEoY5XOcSmSVn/ORW8JsGZrUQYTh5L/k=";
+    hash = "sha256-ynB4N9XbApvs7XdHeY23eZrrwNZc9hENbE/60ZVuWt8=";
  };

-  vendorHash = "sha256-GVaazikFySK+qDGRSA2n7q5amqgUVvPY5VRFh5JXEiI=";
+  vendorHash = "sha256-S/K65q6glfHZslns1A2zplefC1kGzd9OCNMdvH8CZGM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/aw/aws-nuke/package.nix
+++ b/pkgs/by-name/aw/aws-nuke/package.nix
@@ -10,16 +10,16 @@

 buildGoModule rec {
  pname = "aws-nuke";
-  version = "3.47.1";
+  version = "3.48.1";

  src = fetchFromGitHub {
    owner = "ekristen";
    repo = "aws-nuke";
    tag = "v${version}";
-    hash = "sha256-5vOCfLHW2TLx9t1hado3+JqvRaPqJOR5ZaQP2x1Xcl8=";
+    hash = "sha256-DpLxETXnY7u7YrFaODpfziwxIq5BlOswzznsuFXGS9Q=";
  };

-  vendorHash = "sha256-811gUe7L/1Y5HTRgywjzBe7b9VjWt6GjbuyBOORaOCI=";
+  vendorHash = "sha256-YLk560F2YBwWsWFhQ8KsUuW/kIAlWBkihynREppQ+40=";

  overrideModAttrs = _: {
    preBuild = ''
--- a/pkgs/by-name/be/beanprice/package.nix
+++ b/pkgs/by-name/be/beanprice/package.nix
@@ -6,14 +6,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "beanprice";
-  version = "1.2.1-unstable-2024-06-19";
+  version = "2.0.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "beancount";
    repo = "beanprice";
-    rev = "e894c9182f4d16f9a46ccb87bdaeca1a7dede040";
-    hash = "sha256-l96W77gldE06Za8fj84LADGCqlYeWlHKvWQO+oLy1gI=";
+    tag = "v${version}";
+    hash = "sha256-+bqYnTzZByJlCPUhThM2B9UjgdWzjF21Yiw3fQAZ6k4=";
  };

  build-system = with python3Packages; [ setuptools ];
@@ -31,9 +31,10 @@ python3Packages.buildPythonApplication rec {
    regex
  ];

-  pythonImportsCheck = [ "beancount" ];
+  pythonImportsCheck = [ "beanprice" ];

  meta = {
+    broken = lib.versionOlder python3Packages.beancount.version "3";
    homepage = "https://github.com/beancount/beanprice";
    description = "Price quotes fetcher for Beancount";
    longDescription = ''
--- a/pkgs/by-name/ca/cargo-deb/package.nix
+++ b/pkgs/by-name/ca/cargo-deb/package.nix
@@ -8,17 +8,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-deb";
-  version = "2.11.1";
+  version = "2.11.2";

  src = fetchFromGitHub {
    owner = "kornelski";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-5XAlgXWYZiq5Y2dXw0CtzObORII1baMo7yuLwlh8s4A=";
+    hash = "sha256-I8b14fB/m5fYPLIpXnhYGsLaKXs7F9NW2mjHxng6AHU=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-t+7EcvlJ9f/6Uja3c3HTnrR9hoyLjUxtCqfkHWqSv08=";
+  cargoHash = "sha256-o9VN1D3OoqochtpNApE5N+g7xw/QOTbzwSKVPwzzDow=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/ca/cargo-public-api/package.nix
+++ b/pkgs/by-name/ca/cargo-public-api/package.nix
@@ -11,15 +11,15 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-public-api";
-  version = "0.44.0";
+  version = "0.44.1";

  src = fetchCrate {
    inherit pname version;
-    hash = "sha256-DInUd9r2ABvehc/SoJI9VmbfllbYNwwORWSTfsL9EwE=";
+    hash = "sha256-eKTFLvyP/RhQJJPswfzCjxKGE+fXSPfVrEQBMcK3ytU=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-CcDoGAt3CMDO7NFyx+0Jk2RRvQT+vFWUu0vz40Ogpgo=";
+  cargoHash = "sha256-KT7tAisaIjhiLdt1Nkk6lg5hVqRt9fZWP74VHICWThM=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/ce/certinfo-go/package.nix
+++ b/pkgs/by-name/ce/certinfo-go/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "certinfo-go";
-  version = "0.1.36";
+  version = "0.1.40";

  src = fetchFromGitHub {
    owner = "paepckehh";
    repo = "certinfo";
    tag = "v${version}";
-    hash = "sha256-ySXp5dPdGhBEbo9uvCsINCufhm9j/dIX0Jn+Ou73NjM=";
+    hash = "sha256-YPylhWHPr2Sxi5i0A32cgIWEh1VpAoDEmOHu/Cs/uDg=";
  };

-  vendorHash = "sha256-wrz33FSBz4Kg9aYCj7/Pq07bP73MV9iSQKc3X39OkHc=";
+  vendorHash = "sha256-e+FUVFiW46lQ6Ha1cl6D+MRnpRh8rzeRiacItVh5MGE=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ch/changie/package.nix
+++ b/pkgs/by-name/ch/changie/package.nix
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "changie";
-  version = "1.19.1";
+  version = "1.21.1";

  src = fetchFromGitHub {
    owner = "miniscruff";
    repo = "changie";
    rev = "v${version}";
-    hash = "sha256-FZR3KWBCulTbE1Rn6T1neJsjbps0HBPSzzZ57lngB/8=";
+    hash = "sha256-zLRMH5TxEz/fspMOPAMTEqO19fj9PZsRh6zddbTqSXM=";
  };

-  vendorHash = "sha256-2SkHId5BDAv525PISLjlrP862Z2fJDN4L839rz8rWaw=";
+  vendorHash = "sha256-LWf10MM9SBU9sHb59c6ILlsHs8E8ETYAR34296aeHlI=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/ch/chirpstack-concentratord/package.nix
+++ b/pkgs/by-name/ch/chirpstack-concentratord/package.nix
@@ -10,17 +10,17 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "chirpstack-concentratord";
-  version = "4.4.6";
+  version = "4.4.7";

  src = fetchFromGitHub {
    owner = "chirpstack";
    repo = "chirpstack-concentratord";
    rev = "v${version}";
-    hash = "sha256-O5QevCYFZEJzZcLM3wh9b+RvbkFwLlvIcFhVbhVDOXU=";
+    hash = "sha256-RFjBeFGK0HzRPeCCU5Un3c3XSg8hmXo+7DWP6tfsDgw=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-73BYFUbfiOaYtw4G+WNbiCGPR1L59PqGWhqsrOp06QU=";
+  cargoHash = "sha256-phTYdiVxeC6eOBzz6RvgrSN56+RRcXUiktxNzy/qLY0=";

  buildInputs = [
    libloragw-2g4
--- a/pkgs/by-name/cl/cliqr/package.nix
+++ b/pkgs/by-name/cl/cliqr/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "cliqr";
-  version = "0.1.25";
+  version = "0.1.26";

  src = fetchFromGitHub {
    owner = "paepckehh";
    repo = "cliqr";
    tag = "v${version}";
-    hash = "sha256-iPNI92kCNFXRiV5NV7Yj0gznwNeFoW02yh6QLrkBYO0=";
+    hash = "sha256-JM5sWVby8dSFz2YtNXgU9z5fc6EI5nnxmpQN/71kdjI=";
  };

  vendorHash = null;
--- a/pkgs/by-name/cl/clj-kondo/package.nix
+++ b/pkgs/by-name/cl/clj-kondo/package.nix
@@ -7,11 +7,11 @@

 buildGraalvmNativeImage rec {
  pname = "clj-kondo";
-  version = "2025.01.16";
+  version = "2025.02.20";

  src = fetchurl {
    url = "https://github.com/clj-kondo/${pname}/releases/download/v${version}/${pname}-${version}-standalone.jar";
-    sha256 = "sha256-3MWDrtEWBOxhZ3iD/7buszEMNHgbjY0k973VUOMBgu8=";
+    sha256 = "sha256-oTa/WA1ieukgHf8GX5oE1D2lTZ2KjFPty3aVWUb64Ck=";
  };

  graalvmDrv = graalvmPackages.graalvm-ce;
--- a/pkgs/by-name/cr/cross-seed/package.nix
+++ b/pkgs/by-name/cr/cross-seed/package.nix
@@ -2,7 +2,6 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
-  nixosTests,
 }:

 buildNpmPackage rec {
@@ -18,8 +17,6 @@ buildNpmPackage rec {

  npmDepsHash = "sha256-hqQi0kSPm9SKEoLu6InvRMPxbQ+CBpKVPJhhOdo2ZII=";

-  passthru.tests.cross-seed = nixosTests.cross-seed;
-
  meta = {
    description = "Fully-automatic torrent cross-seeding with Torznab";
    homepage = "https://cross-seed.org";
--- a/pkgs/by-name/cr/crossplane-cli/package.nix
+++ b/pkgs/by-name/cr/crossplane-cli/package.nix
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "crossplane-cli";
-  version = "1.18.2";
+  version = "1.19.0";

  src = fetchFromGitHub {
    owner = "crossplane";
    repo = "crossplane";
    rev = "v${version}";
-    hash = "sha256-G4Kve77BoQ/RphvggLHIVV+hhkjmTS3q1nQWnDhAjHA=";
+    hash = "sha256-HSTECDo6jPa9yXziWxPnOvtCC0Xai6yG2orAn1AfAGw=";
  };

-  vendorHash = "sha256-yUaCmiY+qPUfUi2/+c9deSa2atPRWtZ03jHHQ2HmjTM=";
+  vendorHash = "sha256-0Oefkc/T8ukPvbVgnvI+2rUAectTxawm/XR1KG04LpM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/dl/dl-librescore/package.nix
+++ b/pkgs/by-name/dl/dl-librescore/package.nix
@@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "dl-librescore";
-  version = "0.35.20";
+  version = "0.35.29";

  src = fetchFromGitHub {
    owner = "LibreScore";
    repo = "dl-librescore";
    rev = "v${version}";
-    hash = "sha256-XS/bq43FpnSbcrQeFZ0SD/EgQU1mp1KIVcGFgD5wgX0=";
+    hash = "sha256-DwDlGTFdqAAsEWrhnieuaeYQ0N8COB/7b49xPJackJQ=";
  };

-  npmDepsHash = "sha256-RV1xKCqLuSThOPCU9HDI5sCWunQ75PVbnbO3vt+ogSw=";
+  npmDepsHash = "sha256-5Uc83VdqMwQaTSmzwpBh7x4IKoVPd9MYDXkDvR1fz6Q=";

  # see https://github.com/LibreScore/dl-librescore/pull/32
  # TODO can be removed with next update
--- a/pkgs/by-name/dm/dmlive/package.nix
+++ b/pkgs/by-name/dm/dmlive/package.nix
@@ -10,21 +10,19 @@
  nodejs,
 }:

-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage {
  pname = "dmlive";
-  version = "5.5.4";
+  version = "5.5.7-unstable-2025-01-25";

  src = fetchFromGitHub {
    owner = "THMonster";
-    repo = pname;
-    rev = "688ddda12ed70a7ad25ede63e948e1cba143a307"; # no tag
-    hash = "sha256-M7IZ2UzusWovyhigyUXasmSEz4J79gnFyivHVUqfUKg=";
+    repo = "dmlive";
+    rev = "79b4d9430fca3ebb86c57ee506989f620ea68a21"; # no tag
+    hash = "sha256-0DDKKd4IZj+3AyVMG4FXjCbvvMg5iDCiF1B6nB8n3lU=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-eHbnAOMWfGSVYrLqhfoZ4tXHy6GXKzB7sHN8ZQwE//0=";
-
-  OPENSSL_NO_VENDOR = true;
+  cargoHash = "sha256-UwKQivYZyXYADbwf4VA1h2y7YzpxefUgDYQG+NaLMwE=";

  nativeBuildInputs = [
    pkg-config
@@ -36,7 +34,7 @@ rustPlatform.buildRustPackage rec {
  ];

  postInstall = ''
-    wrapProgram "$out/bin/dmlive" --prefix PATH : "${
+    wrapProgram "$out/bin/dmlive" --suffix PATH : "${
      lib.makeBinPath [
        mpv
        ffmpeg
@@ -45,6 +43,8 @@ rustPlatform.buildRustPackage rec {
    }"
  '';

+  env.OPENSSL_NO_VENDOR = true;
+
  meta = {
    description = "Tool to play and record videos or live streams with danmaku";
    homepage = "https://github.com/THMonster/dmlive";
--- a/pkgs/by-name/do/dotslash/package.nix
+++ b/pkgs/by-name/do/dotslash/package.nix
@@ -9,15 +9,15 @@

 rustPlatform.buildRustPackage rec {
  pname = "dotslash";
-  version = "0.5.0";
+  version = "0.5.2";

  src = fetchCrate {
    inherit pname version;
-    hash = "sha256-QrqcUc0RJXrahWHGgJbJwD3wufa2829NNHqiZx9V+sU=";
+    hash = "sha256-Djoi3x6FZZORnnE5Ly8VibfdzVNPef45JvL83fAJqAQ=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-f2kNv+mu1TeR1sGkmSiRiqQDxnNA5EkLAFSqinVNFYQ=";
+  cargoHash = "sha256-PLiVHq5GrCf/C8AxZyKmWPr47PvU6HxpBad8dxJXhHs=";
  doCheck = false; # http tests

  passthru = {
--- a/pkgs/by-name/ev/evtx/package.nix
+++ b/pkgs/by-name/ev/evtx/package.nix
@@ -6,17 +6,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "evtx";
-  version = "0.8.4";
+  version = "0.8.5";

  src = fetchFromGitHub {
    owner = "omerbenamram";
    repo = "evtx";
    tag = "v${version}";
-    hash = "sha256-ljEuFsLOwydLbx1DprJdBTL3cjFkhmuwr34da8LzG88=";
+    hash = "sha256-qDJc8QL1nlbV9iIXZYh38N1giz6uEZtt/hjaZWE6JbE=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-SbWKDC2vfsOQfZERHdzQ3BE1ks9/a+5BJU4X3TPBxXw=";
+  cargoHash = "sha256-aHc4u2sW2TIK2P/P9MdR0lgTKbY1ruevCRxghW/dii0=";

  postPatch = ''
    # CLI tests will fail in the sandbox
--- a/pkgs/by-name/fa/fastfetch/package.nix
+++ b/pkgs/by-name/fa/fastfetch/package.nix
@@ -45,13 +45,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "fastfetch";
-  version = "2.36.1";
+  version = "2.37.0";

  src = fetchFromGitHub {
    owner = "fastfetch-cli";
    repo = "fastfetch";
    tag = finalAttrs.version;
-    hash = "sha256-gvhhYZ6wp3t+GNL8lyKaC6IHZXxu+CQo40rsJARNKY0=";
+    hash = "sha256-wcDMr0I4Y2iSR5gsJ4ATe2T4CHV+hHXEKScUpB9ncMs=";
  };

  outputs = [
--- a/pkgs/by-name/fa/fava/package.nix
+++ b/pkgs/by-name/fa/fava/package.nix
@@ -6,12 +6,12 @@

 python3Packages.buildPythonApplication rec {
  pname = "fava";
-  version = "1.29";
+  version = "1.30.1";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-UZZ142FchYXqPtHb6EWnKjV+xtJ0Gvu+SovTH6+kVn8=";
+    hash = "sha256-69Wx9/H7nLDPZP9LOUnDJngY9YTCcr+oQ0E6+xeIWPE=";
  };

  postPatch = ''
@@ -24,11 +24,12 @@ python3Packages.buildPythonApplication rec {
  dependencies = with python3Packages; [
    babel
    beancount
+    beangulp
+    beanquery
    cheroot
    click
    flask
    flask-babel
-    jaraco-functools
    jinja2
    markdown2
    ply
@@ -39,17 +40,22 @@ python3Packages.buildPythonApplication rec {

  nativeCheckInputs = [ python3Packages.pytestCheckHook ];

+  env = {
+    # Disable some tests when building with beancount2
+    SNAPSHOT_IGNORE = lib.versions.major python3Packages.beancount.version == "2";
+  };
+
  preCheck = ''
    export HOME=$TEMPDIR
  '';

-  meta = with lib; {
+  meta = {
    description = "Web interface for beancount";
    mainProgram = "fava";
    homepage = "https://beancount.github.io/fava";
    changelog = "https://beancount.github.io/fava/changelog.html";
-    license = licenses.mit;
-    maintainers = with maintainers; [
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
      bhipple
      sigmanificient
    ];
--- a/pkgs/by-name/fl/flyctl/package.nix
+++ b/pkgs/by-name/fl/flyctl/package.nix
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "flyctl";
-  version = "0.3.75";
+  version = "0.3.85";

  src = fetchFromGitHub {
    owner = "superfly";
    repo = "flyctl";
    rev = "v${version}";
-    hash = "sha256-uNJzJpeJpDNDgnBIzveK2dKVdRpEWFW912c/vZgeXQo=";
+    hash = "sha256-mWKQyOQnPHGAB8+QSICnglWKIL2kkwVub5Kdb9KNu6M=";
  };

-  vendorHash = "sha256-ylz8O/HW1rtOCI6/YzIT/byYmSdMkSrF0AX7nIzALTU=";
+  vendorHash = "sha256-w8jw0pyZHcY/mzzs5r8NiL3IcjCwTwlwuWIqG4VY4oc=";

  subPackages = [ "." ];

--- a/pkgs/by-name/gi/github-desktop/package.nix
+++ b/pkgs/by-name/gi/github-desktop/package.nix
@@ -25,18 +25,18 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "github-desktop";
-  version = "3.4.2";
+  version = "3.4.13";

  src =
    let
      urls = {
        "x86_64-linux" = {
          url = "https://github.com/shiftkey/desktop/releases/download/release-${finalAttrs.version}-linux${rcversion}/GitHubDesktop-linux-amd64-${finalAttrs.version}-linux${rcversion}.deb";
-          hash = "sha256-qY5rCvOgf1/Z00XZ6yAn6zKdUZ+6l4PCthPU44XLKhc=";
+          hash = "sha256-i1V3dhx5AMrCiWtfvB2I9a6ki2zncUNyYr4qZqs42Yc=";
        };
        "aarch64-linux" = {
          url = "https://github.com/shiftkey/desktop/releases/download/release-${finalAttrs.version}-linux${rcversion}/GitHubDesktop-linux-arm64-${finalAttrs.version}-linux${rcversion}.deb";
-          hash = "sha256-VbPjTz4xYGaVO3uOG6lQNQrVEmx3+H/+y8+r0O55aUg=";
+          hash = "sha256-SN4qtEI4q/AAgfUaBiM5eWyCK5Kr77CrTHsIAmvEceU=";
        };
      };
    in
--- a/pkgs/by-name/gl/glance/package.nix
+++ b/pkgs/by-name/gl/glance/package.nix
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "glance";
-  version = "0.7.1";
+  version = "0.7.3";

  src = fetchFromGitHub {
    owner = "glanceapp";
    repo = "glance";
    rev = "v${version}";
-    hash = "sha256-Ef3Kf7rYmkWqOUpde7P46IRs1x/+jMW3lmN13hfTCNs=";
+    hash = "sha256-kQ4XVO6sotsIjIhkECn6FYik3ITYOZcDKyzk3I8JvkU=";
  };

  vendorHash = "sha256-lURRHlZoxbuW1SXxrxy2BkMndcEllGFmVCB4pXBad8Q=";
--- a/pkgs/by-name/go/go-judge/package.nix
+++ b/pkgs/by-name/go/go-judge/package.nix
@@ -5,16 +5,16 @@

 buildGoModule rec {
  pname = "go-judge";
-  version = "1.8.7";
+  version = "1.8.9";

  src = fetchFromGitHub {
    owner = "criyle";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-Qjo9cJwgfULjVsD05H6tlIJHLaNJGjpcLJqQuxoLS8I=";
+    hash = "sha256-mYbE3QTnWrdfoqtI+RjXI+Vt7EjM7eHYBkTHfjURL6o=";
  };

-  vendorHash = "sha256-vkjpD3IbERW/l9ieVncC/9ulrNGyextXx7/f9CTKmqg=";
+  vendorHash = "sha256-47h/qN2vWTTrzoE7sEywYq8uGbyR04agbjiA+aEoQIQ=";

  tags = [ "nomsgpack" ];

--- a/pkgs/by-name/go/go-secdump/package.nix
+++ b/pkgs/by-name/go/go-secdump/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "go-secdump";
-  version = "0.4.0";
+  version = "0.5.0";

  src = fetchFromGitHub {
    owner = "jfjallid";
    repo = "go-secdump";
    tag = version;
-    hash = "sha256-HZAt/lSe13OjCjpJMNCvWoenhCMc2YGoys0S1eiLeKo=";
+    hash = "sha256-v/IqOjohlGs6MQX2BevboysqW6Lzz0NupDH6sb1TG7Q=";
  };

-  vendorHash = "sha256-hqbLfhUJSSWCdt+f1Z9Pn4TYEWytqAZxwWpqxlrlN9o=";
+  vendorHash = "sha256-H9oFvnyigjwEs24XGGH5mtDMMCo846y0nFIlsrbvLMk=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/go/golden-cheetah-bin/linux.nix
+++ b/pkgs/by-name/go/golden-cheetah-bin/linux.nix
@@ -30,7 +30,7 @@ appimageTools.wrapType2 rec {
    mkdir -p $out/share/pixmaps
    cp ${appimageContents}/GoldenCheetah.desktop $out/share/applications/
    substituteInPlace $out/share/applications/GoldenCheetah.desktop --replace-fail \
-      "Exec=GoldenCheetah" "Exec=QT_PLUGIN_PATH= GoldenCheetah"
+      "Exec=GoldenCheetah" "Exec=env QT_PLUGIN_PATH= GoldenCheetah"
    cp ${appimageContents}/gc.png $out/share/pixmaps/
  '';
  meta = {
--- a/pkgs/by-name/gr/grpc-gateway/package.nix
+++ b/pkgs/by-name/gr/grpc-gateway/package.nix
@@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "grpc-gateway";
-  version = "2.26.0";
+  version = "2.26.1";

  src = fetchFromGitHub {
    owner = "grpc-ecosystem";
    repo = "grpc-gateway";
    tag = "v${version}";
-    sha256 = "sha256-Vg47U57gHau7t5a1TEQuTKRUtn90gbrTETO+ngd8Bzc=";
+    sha256 = "sha256-9P7bWhW3GZmvJeyOtrCM//riLkTkm+r+u3qq+J3h0YQ=";
  };

-  vendorHash = "sha256-8YxAPvTP9o7ns4Gjs1WdqFColyZg7LoYolGQmNdCvTs=";
+  vendorHash = "sha256-x3uOAhQYG2Jd3WdTlTWylWeTdPJ18gqiOqpLOd3Lqw4=";

  ldflags = [
    "-X=main.version=${version}"
--- a/pkgs/by-name/ha/halo/package.nix
+++ b/pkgs/by-name/ha/halo/package.nix
@@ -8,10 +8,10 @@
 }:
 stdenv.mkDerivation rec {
  pname = "halo";
-  version = "2.20.14";
+  version = "2.20.15";
  src = fetchurl {
    url = "https://github.com/halo-dev/halo/releases/download/v${version}/halo-${version}.jar";
-    hash = "sha256-42prPQTrjTgfHiwcpIKHpuiQLw4xhZ3wK1PkVLaC4OQ=";
+    hash = "sha256-/gecHb+MCfHs9ncGkneqTFbkPG/VvwnHNT0saip/rvk=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/he/heptabase/package.nix
+++ b/pkgs/by-name/he/heptabase/package.nix
@@ -5,10 +5,10 @@
 }:
 let
  pname = "heptabase";
-  version = "1.52.0";
+  version = "1.53.1";
  src = fetchurl {
    url = "https://github.com/heptameta/project-meta/releases/download/v${version}/Heptabase-${version}.AppImage";
-    hash = "sha256-r0fpP50CIhEm+TOIWy9lsuM+uXZkjH7kAkfuH4RqHt0=";
+    hash = "sha256-CRV+ihjaGz+I2CdZVbASGTUbOjSb8TXcrBb8dvR/hDc=";
  };

  appimageContents = appimageTools.extractType2 { inherit pname version src; };
--- a/pkgs/by-name/ig/ignite-cli/package.nix
+++ b/pkgs/by-name/ig/ignite-cli/package.nix
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "ignite-cli";
-  version = "28.7.0";
+  version = "28.8.0";

  src = fetchFromGitHub {
    repo = "cli";
    owner = "ignite";
    rev = "v${version}";
-    hash = "sha256-/gBykwBlZsHUWCJ01rdluU10xuEEmPmCfzSWlO6znW8=";
+    hash = "sha256-vLb3whalkOsP4CotTQjqNtHjHDCjTjZD7KSjKDWu2G0=";
  };

-  vendorHash = "sha256-ks9wZUIwN0dOcXxxRk1Amxd0TPJBbLfKC9lzV4IMdjk=";
+  vendorHash = "sha256-Efz2IzW/7NiaagzUpr37BGhiU8WcFvRIa61E91hwqGk=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/im/imsprog/package.nix
+++ b/pkgs/by-name/im/imsprog/package.nix
@@ -14,13 +14,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "imsprog";
-  version = "1.4.5";
+  version = "1.5.1";

  src = fetchFromGitHub {
    owner = "bigbigmdm";
    repo = "IMSProg";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6UWCcHHHkZsbrhew1fI/1KaGdjRK/mlq9Q72WnU1lbU=";
+    hash = "sha256-cgMjXfquftiGngIYjSnC/HkWRmb15kyLNzp+ekWXM+I=";
  };

  strictDeps = true;
--- a/pkgs/by-name/je/jellyfin-tui/package.nix
+++ b/pkgs/by-name/je/jellyfin-tui/package.nix
@@ -11,17 +11,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "jellyfin-tui";
-  version = "1.1.1";
+  version = "1.1.2";

  src = fetchFromGitHub {
    owner = "dhonus";
    repo = "jellyfin-tui";
    tag = "v${version}";
-    hash = "sha256-rJI4XREBeiJfusUdIFGZ6zrvS93BC946uaUJTq6ceuo=";
+    hash = "sha256-AkFMH6MpHEN0v5n5ClnfYZ1R8HPbXu1ZrJ60em/QqrE=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-3gtEcfOV7kXstvzrmX0/WxHj2OikvLDHDT4rhcmpnGc=";
+  cargoHash = "sha256-wT+Lldgaksb1KNJxMepXsoGh3l7pLubSS8JeyRwowY8=";

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [
--- a/pkgs/by-name/je/jetbrains-toolbox/package.nix
+++ b/pkgs/by-name/je/jetbrains-toolbox/package.nix
@@ -1,38 +1,41 @@
-{ stdenv
-, lib
-, fetchzip
-, copyDesktopItems
-, makeWrapper
-, runCommand
-, appimageTools
-, icu
-, genericUpdater
-, writeShellScript
+{
+  stdenv,
+  lib,
+  fetchzip,
+  copyDesktopItems,
+  makeWrapper,
+  runCommand,
+  appimageTools,
+  icu,
+  genericUpdater,
+  writeShellScript,
+  jq,
 }:
 let
  pname = "jetbrains-toolbox";
-  version = "2.5.1.34629";
+  version = "2.5.3.37797";

  src = fetchzip {
    url = "https://download.jetbrains.com/toolbox/jetbrains-toolbox-${version}.tar.gz";
-    hash = "sha256-YaMlvgktoa738grHarJX2Uh5PZ7qHuASyJBcUhMssEI=";
+    hash = "sha256-BMSVigKiR7HgBqaebKvBk0OnyqiYQk562IIzN/6xu2I=";
    stripRoot = false;
  };

-  appimageContents = runCommand "${pname}-extracted"
-    {
-      nativeBuildInputs = [ appimageTools.appimage-exec ];
-    }
-    ''
-      appimage-exec.sh -x $out ${src}/jetbrains-toolbox-${version}/jetbrains-toolbox
+  appimageContents =
+    runCommand "${pname}-extracted"
+      {
+        nativeBuildInputs = [ appimageTools.appimage-exec ];
+      }
+      ''
+        appimage-exec.sh -x $out ${src}/jetbrains-toolbox-${version}/jetbrains-toolbox

-      # JetBrains ship a broken desktop file. Despite registering a custom
-      # scheme handler for jetbrains:// URLs, they never mark the command as
-      # being suitable for passing URLs to. Ergo, the handler never receives
-      # its payload. This causes various things to break, including login.
-      # Reported upstream at: https://youtrack.jetbrains.com/issue/TBX-11478/
-      sed -Ei '/^Exec=/s/( %U)?$/ %U/' $out/jetbrains-toolbox.desktop
-    '';
+        # JetBrains ship a broken desktop file. Despite registering a custom
+        # scheme handler for jetbrains:// URLs, they never mark the command as
+        # being suitable for passing URLs to. Ergo, the handler never receives
+        # its payload. This causes various things to break, including login.
+        # Reported upstream at: https://youtrack.jetbrains.com/issue/TBX-11478/
+        sed -Ei '/^Exec=/s/( %U)?$/ %U/' $out/jetbrains-toolbox.desktop
+      '';

  appimage = appimageTools.wrapAppImage {
    inherit pname version;
@@ -40,9 +43,17 @@ let
  };
 in
 stdenv.mkDerivation {
-  inherit pname version src appimage;
+  inherit
+    pname
+    version
+    src
+    appimage
+    ;

-  nativeBuildInputs = [ makeWrapper copyDesktopItems ];
+  nativeBuildInputs = [
+    makeWrapper
+    copyDesktopItems
+  ];

  installPhase = ''
    runHook preInstall
@@ -50,7 +61,7 @@ stdenv.mkDerivation {
    install -Dm644 ${appimageContents}/.DirIcon $out/share/icons/hicolor/scalable/apps/jetbrains-toolbox.svg
    makeWrapper ${appimage}/bin/jetbrains-toolbox $out/bin/jetbrains-toolbox \
      --append-flags "--update-failed" \
-      --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath [icu]}
+      --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath [ icu ]}

    runHook postInstall
  '';
@@ -63,15 +74,15 @@ stdenv.mkDerivation {
  passthru.updateScript = genericUpdater {
    versionLister = writeShellScript "jetbrains-toolbox-versionLister" ''
      curl -Ls 'https://data.services.jetbrains.com/products?code=TBA&release.type=release' \
-        | jq -r '.[] | .releases | flatten[] | .build'
+        | ${lib.getExe jq} -r '.[] | .releases | flatten[] | .build'
    '';
  };

-  meta = with lib; {
+  meta = {
    description = "Jetbrains Toolbox";
    homepage = "https://jetbrains.com/";
-    license = licenses.unfree;
-    maintainers = with maintainers; [ AnatolyPopov ];
+    license = lib.licenses.unfree;
+    maintainers = with lib.maintainers; [ AnatolyPopov ];
    platforms = [ "x86_64-linux" ];
    mainProgram = "jetbrains-toolbox";
  };
--- a/pkgs/by-name/ju/jumppad/package.nix
+++ b/pkgs/by-name/ju/jumppad/package.nix
@@ -6,15 +6,15 @@

 buildGoModule rec {
  pname = "jumppad";
-  version = "0.16.0";
+  version = "0.16.1";

  src = fetchFromGitHub {
    owner = "jumppad-labs";
    repo = "jumppad";
    rev = version;
-    hash = "sha256-zJS27lguSHvJge/iRwFhm9GtK0t3VQUt+uFZdjgkaeU=";
+    hash = "sha256-2xJsTkgvBYbbKGLr24Mpgcpd3AJkuePi+FXnbZJP2wg=";
  };
-  vendorHash = "sha256-kn7rI5XwpqHeK7mA4FT67tLo2edb+dyD+rveVrGIjIo=";
+  vendorHash = "sha256-dxMCkLrE97fpRI60PqWoo/+HKDbTLKmMNtegDigQPAI=";

  subPackages = [ "." ];

--- a/pkgs/by-name/ka/kamp/package.nix
+++ b/pkgs/by-name/ka/kamp/package.nix
@@ -6,17 +6,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "kamp";
-  version = "0.2.2";
+  version = "0.2.3";

  src = fetchFromGitHub {
    owner = "vbauerster";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-JZe8z6OYJ+I0+dcq+sCoQPzlz6eB4z98jWj8MDXdODY=";
+    hash = "sha256-coBKVqSqYBpf0PdWKIODnbfQxbOyp5Di45+O66ZGK1Q=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-QGTa2emaz3Nzoe3UuvbKCoopOoKD29RSWPG5wvPe+RE=";
+  cargoHash = "sha256-+Jc3+3sN+muUk7yGZ0sDWR0xAwffZN14X0mcyF4EY20=";

  postInstall = ''
    install scripts/* -Dt $out/bin
--- a/pkgs/by-name/ka/karmor/package.nix
+++ b/pkgs/by-name/ka/karmor/package.nix
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "karmor";
-  version = "1.3.0";
+  version = "1.3.1";

  src = fetchFromGitHub {
    owner = "kubearmor";
    repo = "kubearmor-client";
    rev = "v${version}";
-    hash = "sha256-IXU9SP6JYOlYTHGtTZn33geFOX0byWMY3oDe9sy9MA4=";
+    hash = "sha256-XZ/FGZK6whh32sO7TuBooPRB1u2I0p5aDePcZ5AaY/8=";
  };

-  vendorHash = "sha256-VXzlhkpWbHgkJvrZ7xANzoHKqtF2TOCauOOVJJ3wLvc=";
+  vendorHash = "sha256-HH3U1reZXG9w7uwnXbY33hsKlPCxbVb2yvw4KmBfOa0=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/kd/kdlfmt/package.nix
+++ b/pkgs/by-name/kd/kdlfmt/package.nix
@@ -6,17 +6,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "kdlfmt";
-  version = "0.0.11";
+  version = "0.0.13";

  src = fetchFromGitHub {
    owner = "hougesen";
    repo = "kdlfmt";
    rev = "v${version}";
-    hash = "sha256-OldgEAGvwXBnLIEVI/jGXV9lFp/Ua+n8cQqSWETn3T4=";
+    hash = "sha256-bBb+uWU8RuLRmosBaOdx9yZkWhARTn3ObxwART8wTE0=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-IauoW98JMgegKqoQeRfwmUf75rNS8xwIQ/zL0HKTe8Q=";
+  cargoHash = "sha256-g3GjAwnY9khwnTVoUEWJuY95YCNyRedGXISQtpguI8g=";

  meta = {
    description = "Formatter for kdl documents";
--- a/pkgs/by-name/ku/kubebuilder/package.nix
+++ b/pkgs/by-name/ku/kubebuilder/package.nix
@@ -13,16 +13,16 @@

 buildGoModule rec {
  pname = "kubebuilder";
-  version = "4.5.0";
+  version = "4.5.1";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "kubebuilder";
    rev = "v${version}";
-    hash = "sha256-tkBSyLtorD4yMaDq8DIn5Nbl6TbBeRlRO44nR/22iNI=";
+    hash = "sha256-KXT7rW4HH9sSidqofp86tHClfpRQPnMo1K1LzfDyL3I=";
  };

-  vendorHash = "sha256-xZF4t5SMe3iKH+Hr1xhVHWiwTpxEJ3kWlR0QB4RSNhk=";
+  vendorHash = "sha256-rcL79JLZfuvFraqrRWQKrGuUfnRh1IxGidZ/vMeBrZM=";

  subPackages = [ "cmd" ];

--- a/pkgs/by-name/la/labwc-menu-generator/package.nix
+++ b/pkgs/by-name/la/labwc-menu-generator/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "labwc-menu-generator";
-  version = "0.1.0-unstable-2024-09-19";
+  version = "0.1.0-unstable-2025-02-12";

  src = fetchFromGitHub {
    owner = "labwc";
    repo = "labwc-menu-generator";
-    rev = "ebb8240bfd39ab2ffbe98d5cfe26f9c1b678822d";
-    hash = "sha256-4WGBrqY30wVXmnjZ5QPhfNfauvnxqrTE6DFuITfTI4M=";
+    rev = "a6e96b496aff6b54bcdaacfcd24720d46d6a683a";
+    hash = "sha256-Ju/lH7mZuIsulkQ5lpgfBl9BUs0mAOobS9aBuVlMIqI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/la/latexminted/package.nix
+++ b/pkgs/by-name/la/latexminted/package.nix
@@ -8,12 +8,12 @@

 python3Packages.buildPythonApplication rec {
  pname = "latexminted";
-  version = "0.3.2";
+  version = "0.4.0";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-lxqu39RkSdBcSuLbuMmjrD9kiKHZ2yBjLZkJhSUpsSI=";
+    hash = "sha256-JI44VGAuSDDUBm7hH6huYdzXeMU2q1ZCixwJNTxBHHo=";
  };

  build-system = with python3Packages; [
--- a/pkgs/by-name/la/lazygit/package.nix
+++ b/pkgs/by-name/la/lazygit/package.nix
@@ -7,13 +7,13 @@
 }:
 buildGoModule rec {
  pname = "lazygit";
-  version = "0.46.0";
+  version = "0.47.1";

  src = fetchFromGitHub {
    owner = "jesseduffield";
    repo = pname;
    tag = "v${version}";
-    hash = "sha256-KUJ6+GPtQ5wNbbmCnOopifdxHTo67Y9kW3zwm6f9bXc=";
+    hash = "sha256-UZG4D2lMw6v1yo4qDHGTuxH7ieyq3k/2hraYaLqjkW4=";
  };

  vendorHash = null;
--- a/pkgs/by-name/lk/lk-jwt-service/package.nix
+++ b/pkgs/by-name/lk/lk-jwt-service/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "lk-jwt-service";
-  version = "0.1.1";
+  version = "0.1.2";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "lk-jwt-service";
    tag = "v${version}";
-    hash = "sha256-RbfJdAhLz2wfTC17i533U25TIUtJEkHTgqJC2R+j1uM=";
+    hash = "sha256-Jkme+jQgWYSdnOxrYcIh0M6KmwlmpaUGK1vMU3WfdVo=";
  };

-  vendorHash = "sha256-7wruthAqC9jVpAhPiIDdqAB51l38fLHEhl2QOaBJiL0=";
+  vendorHash = "sha256-AGkwjzdTjfDA8K6ko24QSSxbTQeFGpu9sv5m8ZCmNJI=";

  meta = with lib; {
    description = "Minimal service to issue LiveKit JWTs for MatrixRTC";
--- a/pkgs/by-name/lo/lockbook/package.nix
+++ b/pkgs/by-name/lo/lockbook/package.nix
@@ -7,17 +7,17 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "lockbook";
-  version = "0.9.18";
+  version = "0.9.20";

  src = fetchFromGitHub {
    owner = "lockbook";
    repo = "lockbook";
    tag = version;
-    hash = "sha256-NHupo4YhkTI1RBts8p/0vaUeTxgvSJGF/igvlGbccw4=";
+    hash = "sha256-nIh5xgdtaUvc5RbS24GGUHxY41lnL2xdkDs0TD/N2Gw=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-AY4ZeCf31BOjjCMxwcHeyv8OwAAGbjKgAfYwIckYNXU=";
+  cargoHash = "sha256-CuUg5QT1s5TJd409O9YD3A3bMNUnfY6MrCIUrzS50j8=";

  doCheck = false; # there are no cli tests
  cargoBuildFlags = [
--- a/pkgs/by-name/me/melonDS/package.nix
+++ b/pkgs/by-name/me/melonDS/package.nix
@@ -27,13 +27,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "melonDS";
-  version = "1.0rc-unstable-2025-01-17";
+  version = "1.0rc-unstable-2025-02-21";

  src = fetchFromGitHub {
    owner = "melonDS-emu";
    repo = "melonDS";
-    rev = "15c3faa26e879bdcff615558ded6dd886681ccae";
-    hash = "sha256-X9UqAAsACc3vVaWKNvT+swZXygIvaWOgFRUFzSAMjGM=";
+    rev = "63b468927e1c744e21057ccb4c5677f52502b442";
+    hash = "sha256-LylUfcgYC3CZTycfq/qqEAZ4ajrj90bUSXAkA9SbMqE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/me/mergiraf/package.nix
+++ b/pkgs/by-name/me/mergiraf/package.nix
@@ -11,18 +11,18 @@

 rustPlatform.buildRustPackage rec {
  pname = "mergiraf";
-  version = "0.5.0";
+  version = "0.5.1";

  src = fetchFromGitea {
    domain = "codeberg.org";
    owner = "mergiraf";
    repo = "mergiraf";
    rev = "refs/tags/v${version}";
-    hash = "sha256-BUZnchpwvBQ84xaw/p0IQO/QOBUs+8gN6dpvPjhszhc=";
+    hash = "sha256-CiZG0O5F2sidInSFUtB1q5GSfTIjX9xUr52y0TZ5tDs=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-90GNH526dqsu7GsRz857/SV7SWndwiSHIzS/UJgc8AA=";
+  cargoHash = "sha256-32DXHg0xVfUID8/jFNm3gowjOwCOsXH9sXDGM5yK7sA=";

  nativeCheckInputs = [
    git
--- a/pkgs/by-name/mi/microsoft-edge/package.nix
+++ b/pkgs/by-name/mi/microsoft-edge/package.nix
@@ -168,11 +168,11 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "microsoft-edge";
-  version = "132.0.2957.140";
+  version = "133.0.3065.69";

  src = fetchurl {
    url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_${finalAttrs.version}-1_amd64.deb";
-    hash = "sha256-AOeqQB/NiWs1ETGmKX7/ucAwF6JODhhxNvwkf9ing0w=";
+    hash = "sha256-IrMCmqigNzlKWaHiawmL+rJaArMMYOc9kt6CyTcdfRc=";
  };

  # With strictDeps on, some shebangs were not being patched correctly
--- a/pkgs/by-name/mi/migrate-to-uv/package.nix
+++ b/pkgs/by-name/mi/migrate-to-uv/package.nix
@@ -11,19 +11,19 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "migrate-to-uv";
-  version = "0.6.0";
+  version = "0.7.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "mkniewallner";
    repo = "migrate-to-uv";
    tag = version;
-    hash = "sha256-d3whOoDzCZWs9tO5t13jNKgsZe3fV3Eas3M+CJKbHno=";
+    hash = "sha256-e5fwBrCzU4FUKm0UxrzNGQUwQKF2RqW9Tfd0rz3iBFs=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit src pname version;
-    hash = "sha256-RQlShKbv3XqG2uVqRF2FIrGg3j49LPFI1YpZ6uhCWp4=";
+    hash = "sha256-HajsE8PxfmFCkXKj0uSvR2zYUHu5tJIxUM+ipWBLrX4=";
  };

  build-system = [
--- a/pkgs/by-name/nm/nmap-formatter/package.nix
+++ b/pkgs/by-name/nm/nmap-formatter/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "nmap-formatter";
-  version = "3.0.2";
+  version = "3.0.4";

  src = fetchFromGitHub {
    owner = "vdjagilev";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-tB3FPb0k7jJ8RECsT3eLGjVpHqNclOvlh1MgoV6bbwo=";
+    hash = "sha256-eWrFeADjPUioKuGcC3f/y2ocBwOHa5KN81YjF2dbgoc=";
  };

-  vendorHash = "sha256-PKoe4rpwPy3omfRRhN70iEJJ/sHliIwxPUHGxRJqrf4=";
+  vendorHash = "sha256-zYXT5+TLx+Z9WtgDabaUqBdRiaa+tyeQYwENfnv8ARo=";

  meta = with lib; {
    description = "Tool that allows you to convert nmap output";
--- a/pkgs/by-name/nu/nu_scripts/package.nix
+++ b/pkgs/by-name/nu/nu_scripts/package.nix
@@ -6,13 +6,13 @@

 stdenvNoCC.mkDerivation rec {
  pname = "nu_scripts";
-  version = "0-unstable-2025-02-03";
+  version = "0-unstable-2025-02-17";

  src = fetchFromGitHub {
    owner = "nushell";
    repo = pname;
-    rev = "b45fd953c171bda74d8e201ce6822570467c1d68";
-    hash = "sha256-V+mCYfABDh2K/wVYX00ZtcxeSZOJe+9TlDLeoxaXJpM=";
+    rev = "a8919f9c01ec4ece1cef8a08f3d6df32d616ea95";
+    hash = "sha256-nbucy8iy0ADNDEIuQ1cdN7Yl9oV9ZF64vgGXKqh0K64=";
  };

  installPhase = ''
--- a/pkgs/by-name/nu/nuclei-templates/package.nix
+++ b/pkgs/by-name/nu/nuclei-templates/package.nix
@@ -6,13 +6,13 @@

 stdenvNoCC.mkDerivation rec {
  pname = "nuclei-templates";
-  version = "10.1.2";
+  version = "10.1.3";

  src = fetchFromGitHub {
    owner = "projectdiscovery";
    repo = "nuclei-templates";
    tag = "v${version}";
-    hash = "sha256-Avg7IKL85skqV2DHgyYa6lt0eE4gZBZkPcVOyoaAJhg=";
+    hash = "sha256-dgjQeeu54hoNlq+WA8M0RO8vLUX6v9rougbpalXfydc=";
  };

  installPhase = ''
--- a/pkgs/by-name/oc/oci-cli/package.nix
+++ b/pkgs/by-name/oc/oci-cli/package.nix
@@ -1,27 +1,15 @@
 {
  lib,
  fetchFromGitHub,
-  fetchPypi,
  python3,
  installShellFiles,
+  nix-update-script,
 }:

 let
  py = python3.override {
    self = py;
    packageOverrides = self: super: {
-
-      click = super.click.overridePythonAttrs (oldAttrs: rec {
-        version = "7.1.2";
-
-        src = fetchPypi {
-          pname = "click";
-          inherit version;
-          hash = "sha256-0rUlXHxjSbwb0eWeCM0SrLvWPOZJ8liHVXg6qU37axo=";
-        };
-        disabledTests = [ "test_bytes_args" ]; # https://github.com/pallets/click/commit/6e05e1fa1c2804
-      });
-
      jmespath = super.jmespath.overridePythonAttrs (oldAttrs: rec {
        version = "0.10.0";
        src = oldAttrs.src.override {
@@ -31,27 +19,25 @@ let
        };
        doCheck = false;
      });
-
    };
  };
 in
-with py.pkgs;

-buildPythonApplication rec {
+py.pkgs.buildPythonApplication rec {
  pname = "oci-cli";
-  version = "3.14.0";
+  version = "3.51.8";
  format = "setuptools";

  src = fetchFromGitHub {
    owner = "oracle";
    repo = pname;
-    rev = "v${version}";
-    hash = "sha256-yooEZuSIw2EMJVyT/Z/x4hJi8a1F674CtsMMGkMAYLg=";
+    tag = "v${version}";
+    hash = "sha256-p+X6kJDjuDaOLgZ9KwrZJgAqORKLxPrXwQ4X+JZb1W4=";
  };

  nativeBuildInputs = [ installShellFiles ];

-  propagatedBuildInputs = [
+  propagatedBuildInputs = with py.pkgs; [
    arrow
    certifi
    click
@@ -68,14 +54,19 @@ buildPythonApplication rec {
    terminaltables
  ];

-  postPatch = ''
-    substituteInPlace setup.py \
-      --replace "cryptography>=3.2.1,<=37.0.2" "cryptography" \
-      --replace "pyOpenSSL>=17.5.0,<=22.0.0" "pyOpenSSL" \
-      --replace "PyYAML>=5.4,<6" "PyYAML" \
-      --replace "prompt-toolkit==3.0.29" "prompt-toolkit" \
-      --replace "terminaltables==3.1.0" "terminaltables" \
-      --replace "oci==2.78.0" "oci"
+  pythonRelaxDeps = [
+    "PyYAML"
+    "cryptography"
+    "oci"
+    "prompt-toolkit"
+    "pyOpenSSL"
+    "terminaltables"
+  ];
+
+  # Propagating dependencies leaks them through $PYTHONPATH which causes issues
+  # when used in nix-shell.
+  postFixup = ''
+    rm $out/nix-support/propagated-build-inputs
  '';

  postInstall = ''
@@ -96,13 +87,14 @@ buildPythonApplication rec {
      --zsh oci.zsh
  '';

-  # https://github.com/oracle/oci-cli/issues/187
-  doCheck = false;
+  doCheck = true;

  pythonImportsCheck = [
-    " oci_cli "
+    "oci_cli"
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = with lib; {
    description = "Command Line Interface for Oracle Cloud Infrastructure";
    homepage = "https://docs.cloud.oracle.com/iaas/Content/API/Concepts/cliconcepts.htm";
@@ -110,6 +102,9 @@ buildPythonApplication rec {
      asl20 # or
      upl
    ];
-    maintainers = with maintainers; [ ilian ];
+    maintainers = with maintainers; [
+      adamcstephens
+      ilian
+    ];
  };
 }
--- a/pkgs/by-name/op/openfga-cli/package.nix
+++ b/pkgs/by-name/op/openfga-cli/package.nix
@@ -7,7 +7,7 @@

 let
  pname = "openfga-cli";
-  version = "0.6.3";
+  version = "0.6.4";
 in

 buildGoModule {
@@ -17,10 +17,10 @@ buildGoModule {
    owner = "openfga";
    repo = "cli";
    rev = "v${version}";
-    hash = "sha256-PHUXwDZta+utlUkkb4XRnhTgFlwMgOTD1/iboP+LMqY=";
+    hash = "sha256-EIfVu6RnfIlHDKa5Kfy9cZ9ntg4Mdaz0SaDcCVHi01Q=";
  };

-  vendorHash = "sha256-hTt9Ut7+4LX+4SqC64feRGm6gLmrKswYt/XNqpTlQzo=";
+  vendorHash = "sha256-l6gZ8E7WYeJq8crxzKAP8q4L9aoXkjad64XUZfToE14=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/op/openfortivpn-webview-qt/package.nix
+++ b/pkgs/by-name/op/openfortivpn-webview-qt/package.nix
@@ -6,13 +6,13 @@
 }:
 stdenv.mkDerivation rec {
  pname = "openfortivpn-webview-qt";
-  version = "1.1.2";
+  version = "1.2.3";

  src = fetchFromGitHub {
    owner = "gm-vm";
    repo = "openfortivpn-webview";
    rev = "v${version}-electron";
-    hash = "sha256-BNotbb2pL7McBm0SQwcgEvjgS2GId4HVaxWUz/ODs6w=";
+    hash = "sha256-jGDCFdqRfnYwUgVs3KO1pDr52JgkYVRHi2KvABaZFl4=";
  };
  sourceRoot = "source/openfortivpn-webview-qt";

--- a/pkgs/by-name/op/openorienteering-mapper/package.nix
+++ b/pkgs/by-name/op/openorienteering-mapper/package.nix
@@ -31,6 +31,11 @@ stdenv.mkDerivation rec {
      url = "https://github.com/OpenOrienteering/mapper/commit/bc52aa567e90a58d6963b44d5ae1909f3f841508.patch";
      hash = "sha256-pQzw2EfVay+0GOtIbh1KJOkILcj5LRMzmMYy9q+abK4=";
    })
+    # https://github.com/OpenOrienteering/mapper/pull/2337
+    (fetchpatch {
+      url = "https://github.com/OpenOrienteering/mapper/commit/d1f214ee2abf140ae3615a2995f08c19ad81418a.patch";
+      hash = "sha256-eJZpHdFPW7A69aazI+WRSK9N87d4A6x973hMYTHdw5I=";
+    })
  ];

  postPatch = ''
--- a/pkgs/by-name/op/opnborg/package.nix
+++ b/pkgs/by-name/op/opnborg/package.nix
@@ -5,16 +5,16 @@
 }:
 buildGoModule rec {
  pname = "opnborg";
-  version = "0.1.63";
+  version = "0.1.64";

  src = fetchFromGitHub {
    owner = "paepckehh";
    repo = "opnborg";
    rev = "v${version}";
-    hash = "sha256-t/bcqHsRLE4Mxoe/0pziIHHrPf2ijUkYjr1vq8C1ZzQ=";
+    hash = "sha256-v1+hN77l3Y7IyxoZWJqN96odpzKGQ0fiXfLRFgqy+IQ=";
  };

-  vendorHash = "sha256-kFO4Ju1EbUEc/CZpujmJpM1R1vRI5J4s6UIa2+IhTKE=";
+  vendorHash = "sha256-J4CKwjOkjBb2v/H3x+TTatW7dL7gZYYV8yAvz2pvjTE=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ot/ots/package.nix
+++ b/pkgs/by-name/ot/ots/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "ots";
-  version = "0.2.0";
+  version = "0.3.1";

  src = fetchFromGitHub {
    owner = "sniptt-official";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-Oxs2ytf0rY9QYzVaLUkqyX15oWjas3ukSkq9D1TYbDE=";
+    hash = "sha256-GOCuH9yiVs3N3sHCCoSGaQkaaJs4NY/klNBRWjZGLE4=";
  };

-  vendorHash = "sha256-qYk8T0sYIO0wJ0R0j+0VetCy11w8usIRRdBm/Z6grJE=";
+  vendorHash = "sha256-fLElExANWdPCCqpCAofqp0kba/FsQEHEhlxOFaC/kZw=";

  ldflags = [
    "-X main.version=${version}"
--- a/pkgs/by-name/pi/picotool/package.nix
+++ b/pkgs/by-name/pi/picotool/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "picotool";
-  version = "2.1.0";
+  version = "2.1.1";

  src = fetchFromGitHub {
    owner = "raspberrypi";
    repo = "picotool";
    tag = finalAttrs.version;
-    hash = "sha256-aGhh19/dl6o/3hbmKJGVh22qSHeCqxST2PoWzxmc7KQ=";
+    hash = "sha256-WA17FXSUGylzUcbvzgAGCeds+XeuSvDlgFBJD10ERVY=";
  };

  postPatch = ''
--- a/pkgs/by-name/pr/proton-pass/package.nix
+++ b/pkgs/by-name/pr/proton-pass/package.nix
@@ -9,11 +9,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "proton-pass";
-  version = "1.29.2";
+  version = "1.29.3";

  src = fetchurl {
    url = "https://proton.me/download/pass/linux/x64/proton-pass_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-swq4zDcBephqqtabg36eDSWubo0LDpScUxB30RnzGHQ=";
+    hash = "sha256-d+aU/pv1MRs4W4LKB9AM27A5B3PJYFfjKmsmzqWUAUg=";
  };

  dontConfigure = true;
--- a/pkgs/by-name/pr/protonmail-desktop/package.nix
+++ b/pkgs/by-name/pr/protonmail-desktop/package.nix
@@ -9,7 +9,7 @@
 }:
 let
  mainProgram = "proton-mail";
-  version = "1.6.1";
+  version = "1.7.0";

 in
 stdenv.mkDerivation {
@@ -18,7 +18,7 @@ stdenv.mkDerivation {

  src = fetchurl {
    url = "https://proton.me/download/mail/linux/${version}/ProtonMail-desktop-beta.deb";
-    sha256 = "sha256-ajN7f3SmqUfgJGksPVRuc1qR2FjEQaY+y/rpn7Hs71I=";
+    sha256 = "sha256-hwaK8okaixTuVVXfEyb3+71V5dQl0NvCVOfg1a274f8=";
  };

  dontConfigure = true;
--- a/pkgs/by-name/qu/qucsator-rf/package.nix
+++ b/pkgs/by-name/qu/qucsator-rf/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation rec {
  pname = "qucsator-rf";
-  version = "1.0.3";
+  version = "1.0.4";

  src = fetchFromGitHub {
    owner = "ra3xdh";
    repo = "qucsator_rf";
    rev = version;
-    hash = "sha256-IvB4CTvK6x4wwUXMoXIqBku1Hh9em6ITTpwFllYsTEg=";
+    hash = "sha256-01GQmakwLzaNnPZvtYYtt5WJmYF3EytlAA0Xy1/AAsU=";
  };

  # Upstream forces NO_DEFAULT_PATH on APPLE
--- a/pkgs/by-name/re/remnote/package.nix
+++ b/pkgs/by-name/re/remnote/package.nix
@@ -6,10 +6,10 @@
 }:
 let
  pname = "remnote";
-  version = "1.18.39";
+  version = "1.18.46";
  src = fetchurl {
    url = "https://download2.remnote.io/remnote-desktop2/RemNote-${version}.AppImage";
-    hash = "sha256-YDRXXS0nNiPdchcCUiKD0pE4duE0LFzdZ5GkYcddsD8=";
+    hash = "sha256-fZWhv5P2Qft/UXbB6iUywYZZqUMwnZlU6mPidAuU8gI=";
  };
  appimageContents = appimageTools.extractType2 { inherit pname version src; };
 in
--- a/pkgs/by-name/re/renode-dts2repl/package.nix
+++ b/pkgs/by-name/re/renode-dts2repl/package.nix
@@ -7,14 +7,14 @@

 python3.pkgs.buildPythonApplication {
  pname = "renode-dts2repl";
-  version = "0-unstable-2025-01-31";
+  version = "0-unstable-2025-02-19";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "antmicro";
    repo = "dts2repl";
-    rev = "fb9a4a69a79701ffc40672ac85001a75c39d02f3";
-    hash = "sha256-Ud6GQgPw5nMW5crHZWSRur0EWuKfWd60OvVizslWQ4U=";
+    rev = "68f90546ca0cb3c16864ac0569f560b869d81ca4";
+    hash = "sha256-e8FeqKxqJDGNdTye4W1yxQi0hxK1RYZWCRdoJ1RbEXk=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/rz/rzls/deps.json
+++ b/pkgs/by-name/rz/rzls/deps.json
@@ -13,9 +13,9 @@
  },
  {
    "pname": "MessagePack",
-    "version": "2.5.168",
-    "hash": "sha256-TMfB4TN7oVaxkgYAuldRsKHinUuNei3BHx5ALpVsLrI=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack/2.5.168/messagepack.2.5.168.nupkg"
+    "version": "2.5.187",
+    "hash": "sha256-3sBINhdkGdKPKTKxE4YuLGFHg6stAEHUIboR1g7eXgA=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack/2.5.187/messagepack.2.5.187.nupkg"
  },
  {
    "pname": "MessagePack.Annotations",
@@ -23,6 +23,12 @@
    "hash": "sha256-1M21eURvGq+6lKzagskvaBA4UZeoSHglWOrasNYyH5I=",
    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack.annotations/2.5.168/messagepack.annotations.2.5.168.nupkg"
  },
+  {
+    "pname": "MessagePack.Annotations",
+    "version": "2.5.187",
+    "hash": "sha256-SQCJa6u8coWMptbR9iQJLjoi/YkT9t0kJNbojh9vUPw=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack.annotations/2.5.187/messagepack.annotations.2.5.187.nupkg"
+  },
  {
    "pname": "MessagePackAnalyzer",
    "version": "2.5.124",
@@ -67,39 +73,39 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.Common",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-AgP1zKvJ8J3hetNPz79gHrMZv1WaY5pDR55oNIpZsEs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.common/4.13.0-3.24610.5/microsoft.codeanalysis.common.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-tD30LTDtdbZM+OFqoRcTIkq/7/NRLj6QtuBKyowb1TM=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.common/4.14.0-1.25071.1/microsoft.codeanalysis.common.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-Xm/kI4c0Re1k3zsMcgdeE9NfzsAjpqXUCfIf3HPjm7I=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp/4.13.0-3.24610.5/microsoft.codeanalysis.csharp.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-6B7nZJsQcJNeFRXqlA6Os9zWu73CdUjf8cahK+yH9Jo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp/4.14.0-1.25071.1/microsoft.codeanalysis.csharp.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp.Features",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-ZMlKLA6t13FVOQ9vC0w9uGApDDts/iOoKMuSqp8MwSM=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.features/4.13.0-3.24610.5/microsoft.codeanalysis.csharp.features.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-tqcuteFNfq9kvQAdtAX8H3aK4GwWntif+zq7XZKsyRQ=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.features/4.14.0-1.25071.1/microsoft.codeanalysis.csharp.features.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp.Workspaces",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-vzY1JaZRjaFismBK8pMSlMFkjQ0khIx4aaJ0RW2OdcE=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.workspaces/4.13.0-3.24610.5/microsoft.codeanalysis.csharp.workspaces.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-nToT0bn1sthq46xIghAr77+owVqw44BjM12OS9gu95U=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.workspaces/4.14.0-1.25071.1/microsoft.codeanalysis.csharp.workspaces.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.EditorFeatures.Common",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-sVvV8lu0QyK992E6xmJWGbrqQ5uX6KcXZDHCMRwGM+8=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.editorfeatures.common/4.13.0-3.24610.5/microsoft.codeanalysis.editorfeatures.common.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-pHY+LtqFYnWe0jwJfzXp0kivdRqsJ5p36HPWRPqVXzM=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.editorfeatures.common/4.14.0-1.25071.1/microsoft.codeanalysis.editorfeatures.common.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.EditorFeatures.Text",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-NLPcg6tt0AXJBhODegWF+ulKwfJM+O+T2gbVozWymYk=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.editorfeatures.text/4.13.0-3.24610.5/microsoft.codeanalysis.editorfeatures.text.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-FOW9q5oqGWKZjyT/Z5eef3k9RvSUt6B1uAtYXBHbhhY=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.editorfeatures.text/4.14.0-1.25071.1/microsoft.codeanalysis.editorfeatures.text.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Elfie",
@@ -109,27 +115,27 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.ExternalAccess.Razor",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-Rpl+z2Kl5BBySiT0Tbf09GSEQIGViy2Ky5JgqXnu2+k=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.externalaccess.razor/4.13.0-3.24610.5/microsoft.codeanalysis.externalaccess.razor.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-paDw5XJQOolKknGN2cjmEiKxfh+zovZPB5M/sbt0chA=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.externalaccess.razor/4.14.0-1.25071.1/microsoft.codeanalysis.externalaccess.razor.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Features",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-AxWjsIEYJaZq/9j4XFzW9eYj8QnC6h1uewARMCAK1Wk=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.features/4.13.0-3.24610.5/microsoft.codeanalysis.features.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-G6cFY9VknJZGUyPQtUb83WTeKEz+JLQVK+o9AgEoNpI=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.features/4.14.0-1.25071.1/microsoft.codeanalysis.features.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.InteractiveHost",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-DoaRukIQi2t+Kv4mKFvF/Mk5kTjvltxRX/c8CypMiJs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.interactivehost/4.13.0-3.24610.5/microsoft.codeanalysis.interactivehost.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-p2IwDtD/t5WyJcNm/WIqLQ/SkIEXjLWf1WXBoht+DA8=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.interactivehost/4.14.0-1.25071.1/microsoft.codeanalysis.interactivehost.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.LanguageServer.Protocol",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-POGSZDxftOZJ9XGKvfTfTp2F4DLB30cWPksWog4Bno8=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.languageserver.protocol/4.13.0-3.24610.5/microsoft.codeanalysis.languageserver.protocol.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-wqpDUy5GEdCbZ7A8B5PxZTjIJ2MAn0o8BZTOixNj7hs=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.languageserver.protocol/4.14.0-1.25071.1/microsoft.codeanalysis.languageserver.protocol.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.PublicApiAnalyzers",
@@ -139,27 +145,27 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.Remote.Workspaces",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-mQyI2hiLiHhkBtK45gQNTKtdpAf+yrsSK2M6XIc20b4=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.remote.workspaces/4.13.0-3.24610.5/microsoft.codeanalysis.remote.workspaces.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-Ur5FjO1Jv0qcVCnLNYMr/tQyCuf1pcJN+aNstDF+HIg=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.remote.workspaces/4.14.0-1.25071.1/microsoft.codeanalysis.remote.workspaces.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Scripting.Common",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-A8g4H+HmM1D5c7t9i3tfFN6yvEJhY20y4vvTNgbfNYo=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.scripting.common/4.13.0-3.24610.5/microsoft.codeanalysis.scripting.common.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-veMoTh30PG51UgOxUXSA+Hj3Ec41p+oAiwsfhzvzG9E=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.scripting.common/4.14.0-1.25071.1/microsoft.codeanalysis.scripting.common.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Workspaces.Common",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-UJ3iG5Igw11ghPDkob2CL8hzd28DRQy8dQc5qau61sc=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.workspaces.common/4.13.0-3.24610.5/microsoft.codeanalysis.workspaces.common.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-vssvo63p7SDIfvp31vP5TDLBc5o+iVTzD5uWTyYIB8Q=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.workspaces.common/4.14.0-1.25071.1/microsoft.codeanalysis.workspaces.common.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CommonLanguageServerProtocol.Framework",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-gVB98pDClohKvdB/Hc2opdjawsdzXbzs8i89SFCQpyQ=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.commonlanguageserverprotocol.framework/4.13.0-3.24610.5/microsoft.commonlanguageserverprotocol.framework.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-4ZB7z+Zj+2dYscmf21NItGlDHCt1A16ObSh3z9EYJFo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.commonlanguageserverprotocol.framework/4.14.0-1.25071.1/microsoft.commonlanguageserverprotocol.framework.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.CSharp",
@@ -211,9 +217,9 @@
  },
  {
    "pname": "Microsoft.Net.Compilers.Toolset",
-    "version": "4.13.0-3.24610.5",
-    "hash": "sha256-1JXtZ9rxlbZVI2YYqlAdlGkva+8wsiu70RAP3hLi49k=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.net.compilers.toolset/4.13.0-3.24610.5/microsoft.net.compilers.toolset.4.13.0-3.24610.5.nupkg"
+    "version": "4.14.0-1.25071.1",
+    "hash": "sha256-GnCjO60j5EljNweEBsAcSkwc38tQI5cpH9HyHfsHqLE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.net.compilers.toolset/4.14.0-1.25071.1/microsoft.net.compilers.toolset.4.14.0-1.25071.1.nupkg"
  },
  {
    "pname": "Microsoft.NET.StringTools",
@@ -479,12 +485,6 @@
    "hash": "sha256-am72p6KsOmqko/LTvF0KacbAHhFo8YnoogWdZiDOhvo=",
    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.visualstudio.utilities.internal/16.3.42/microsoft.visualstudio.utilities.internal.16.3.42.nupkg"
  },
-  {
-    "pname": "Microsoft.VisualStudio.Utilities.Internal",
-    "version": "16.3.73",
-    "hash": "sha256-zwk4jWuCw2ANhG00TnwT9JE7n/h2EQkYKeq6o966ilo=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.visualstudio.utilities.internal/16.3.73/microsoft.visualstudio.utilities.internal.16.3.73.nupkg"
-  },
  {
    "pname": "Microsoft.VisualStudio.Utilities.Internal",
    "version": "16.3.90",
--- a/pkgs/by-name/rz/rzls/package.nix
+++ b/pkgs/by-name/rz/rzls/package.nix
@@ -25,11 +25,11 @@ buildDotnetModule {
  src = fetchFromGitHub {
    owner = "dotnet";
    repo = "razor";
-    rev = "dd64bf78c16a7e8fa1900da060100e9338383dea";
-    hash = "sha256-C5/Mc5HxxAVGLO6IPhyyBNLcjvjmF8sKg1KpIdN0/KQ=";
+    rev = "aaaf768fe6cbff602331e20f98e6d4a657dea398";
+    hash = "sha256-NjjCGg7RBglOi/+pH6MtWdhEpLHzqgUep+LnmdIzbaM=";
  };

-  version = "9.0.0-preview.25052.3";
+  version = "9.0.0-preview.25073.1";
  projectFile = "src/Razor/src/rzls/rzls.csproj";
  useDotnetFromEnv = true;
  nugetDeps = ./deps.json;
--- a/pkgs/by-name/si/siyuan/package.nix
+++ b/pkgs/by-name/si/siyuan/package.nix
@@ -35,20 +35,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "siyuan";
-  version = "3.1.20";
+  version = "3.1.22";

  src = fetchFromGitHub {
    owner = "siyuan-note";
    repo = "siyuan";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-i02WcXN6IKD4N0z8qMKBvxpzI3rrlWRVSH+7cvlRndw=";
+    hash = "sha256-t7BJBip28xPT4/iNL/zTKzFCcQOt0E4IAT00l/iX6TM=";
  };

  kernel = buildGo123Module {
    name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
    inherit (finalAttrs) src;
    sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-YYQYHgb1MX0siYzxc9A2tK4htbCD8OH28tQv3QA1exQ=";
+    vendorHash = "sha256-iO4Qtt0+nHpiYz0gSq+z3XWRp8TBJU8psI0Hz4ofZGA=";

    patches = [
      (replaceVars ./set-pandoc-path.patch {
@@ -89,7 +89,7 @@ stdenv.mkDerivation (finalAttrs: {
      src
      sourceRoot
      ;
-    hash = "sha256-HwfOGwT9aB844QxqEDjnEJOFaL98yORZtzyHfU8kKW4=";
+    hash = "sha256-GW/shXuaETg/8+d0T876mh5pKJHS4slfakObj8zrNXc=";
  };

  sourceRoot = "${finalAttrs.src.name}/app";
--- a/pkgs/by-name/su/sudachi-rs/package.nix
+++ b/pkgs/by-name/su/sudachi-rs/package.nix
@@ -24,8 +24,13 @@ rustPlatform.buildRustPackage rec {
      --replace '"resources"' '"${placeholder "out"}/share/resources"'
  '';

+  cargoPatches = [
+    # https://github.com/WorksApplications/sudachi.rs/issues/299
+    ./update-outdated-lockfile.patch
+  ];
+
  useFetchCargoVendor = true;
-  cargoHash = "sha256-/VKveTtB8BbWgRBEzWBjrSrW84uFcz08cz6tZTuMMeE=";
+  cargoHash = "sha256-lUP/9s4W0JehxeCjMmq6G22KMGdDNnq1YlobeLQn2AE=";

  # prepare the resources before the build so that the binary can find sudachidict
  preBuild = ''
--- a/pkgs/by-name/su/sudachi-rs/update-outdated-lockfile.patch
+++ b/pkgs/by-name/su/sudachi-rs/update-outdated-lockfile.patch
@@ -0,0 +1,126 @@
+diff --git a/Cargo.lock b/Cargo.lock
+index 31a5ee3..d72e154 100644
+--- a/Cargo.lock
+++ b/Cargo.lock
+@@ -289,7 +289,7 @@ dependencies = [
+ 
+ [[package]]
+ name = "default_input_text"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "sudachi",
+ ]
+@@ -432,14 +432,14 @@ checksum = "49f1f14873335454500d59611f1cf4a4b0f786f9ac11f4312a78e4cf2566695b"
+ 
+ [[package]]
+ name = "join_katakana_oov"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "sudachi",
+ ]
+ 
+ [[package]]
+ name = "join_numeric"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "sudachi",
+ ]
+@@ -593,9 +593,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "pyo3"
+-version = "0.22.6"
+version = "0.23.4"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "f402062616ab18202ae8319da13fa4279883a2b8a9d9f83f20dbade813ce1884"
+checksum = "57fe09249128b3173d092de9523eaa75136bf7ba85e0d69eca241c7939c933cc"
+ dependencies = [
+  "cfg-if",
+  "indoc",
+@@ -611,9 +611,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "pyo3-build-config"
+-version = "0.22.6"
+version = "0.23.4"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "b14b5775b5ff446dd1056212d778012cbe8a0fbffd368029fd9e25b514479c38"
+checksum = "1cd3927b5a78757a0d71aa9dff669f903b1eb64b54142a9bd9f757f8fde65fd7"
+ dependencies = [
+  "once_cell",
+  "target-lexicon",
+@@ -621,9 +621,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "pyo3-ffi"
+-version = "0.22.6"
+version = "0.23.4"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "9ab5bcf04a2cdcbb50c7d6105de943f543f9ed92af55818fd17b660390fc8636"
+checksum = "dab6bb2102bd8f991e7749f130a70d05dd557613e39ed2deeee8e9ca0c4d548d"
+ dependencies = [
+  "libc",
+  "pyo3-build-config",
+@@ -631,9 +631,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "pyo3-macros"
+-version = "0.22.6"
+version = "0.23.4"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "0fd24d897903a9e6d80b968368a34e1525aeb719d568dba8b3d4bfa5dc67d453"
+checksum = "91871864b353fd5ffcb3f91f2f703a22a9797c91b9ab497b1acac7b07ae509c7"
+ dependencies = [
+  "proc-macro2",
+  "pyo3-macros-backend",
+@@ -643,9 +643,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "pyo3-macros-backend"
+-version = "0.22.6"
+version = "0.23.4"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "36c011a03ba1e50152b4b394b479826cad97e7a21eb52df179cd91ac411cbfbe"
+checksum = "43abc3b80bc20f3facd86cd3c60beed58c3e2aa26213f3cda368de39c60a27e4"
+ dependencies = [
+  "heck",
+  "proc-macro2",
+@@ -794,7 +794,7 @@ dependencies = [
+ 
+ [[package]]
+ name = "simple_oov"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "sudachi",
+ ]
+@@ -807,7 +807,7 @@ checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+ 
+ [[package]]
+ name = "sudachi"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "aho-corasick",
+  "bitflags",
+@@ -835,7 +835,7 @@ dependencies = [
+ 
+ [[package]]
+ name = "sudachi-cli"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "cfg-if",
+  "clap",
+@@ -855,7 +855,7 @@ dependencies = [
+ 
+ [[package]]
+ name = "sudachipy"
+-version = "0.6.9"
+version = "0.6.11-a1"
+ dependencies = [
+  "pyo3",
+  "scopeguard",
--- a/pkgs/by-name/su/surrealdb/package.nix
+++ b/pkgs/by-name/su/surrealdb/package.nix
@@ -13,17 +13,17 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "surrealdb";
-  version = "2.2.0";
+  version = "2.2.1";

  src = fetchFromGitHub {
    owner = "surrealdb";
    repo = "surrealdb";
    tag = "v${version}";
-    hash = "sha256-gsIeoxSfbHHSdpPn6xAB/t5w3cLtpu6MjTuf5xsI6wI=";
+    hash = "sha256-MzVyzhZ9BNxavlyj3E1D9Mo2/o6Yue21FdhpT8ziXwE=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-Y2KtlFmN/Lp33GEe3RP4zFzmld3vYnKA6T4+YIgbFBE=";
+  cargoHash = "sha256-Uza2Ujg8EKGJrzitch71qIevgUv+n3YCtkMLHIAgPr4=";

  # error: linker `aarch64-linux-gnu-gcc` not found
  postPatch = ''
--- a/pkgs/by-name/te/termius/package.nix
+++ b/pkgs/by-name/te/termius/package.nix
@@ -16,8 +16,8 @@

 stdenv.mkDerivation rec {
  pname = "termius";
-  version = "9.13.1";
-  revision = "213";
+  version = "9.14.0";
+  revision = "214";

  src = fetchurl {
    # find the latest version with
@@ -27,7 +27,7 @@ stdenv.mkDerivation rec {
    # and the sha512 with
    # curl -H 'X-Ubuntu-Series: 16' https://api.snapcraft.io/api/v1/snaps/details/termius-app | jq '.download_sha512' -r
    url = "https://api.snapcraft.io/api/v1/snaps/download/WkTBXwoX81rBe3s3OTt3EiiLKBx2QhuS_${revision}.snap";
-    hash = "sha512-GF5ZC4t3f54Rwqet9g4McB0h+sBg/+VpZ57IKVKC25T442gAEkdhTwQdqf2kJ+V74PsqdpZJk61rh21EusOi5w==";
+    hash = "sha512-jnQXsmKrdL7OldmzSzriD6U8lMgme0Ya9aA/OPuc74DkRM9SJkI09XaXz03pZLVDKlWByAN9f+j1P0s5fvbkdA==";
  };

  desktopItem = makeDesktopItem {
--- a/pkgs/by-name/ti/tickrs/package.nix
+++ b/pkgs/by-name/ti/tickrs/package.nix
@@ -11,17 +11,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "tickrs";
-  version = "0.14.10";
+  version = "0.14.11";

  src = fetchFromGitHub {
    owner = "tarkah";
    repo = pname;
    tag = "v${version}";
-    hash = "sha256-6iMThVLIkFoNa7Z0MuyhUNGCwFtCfmG7jHvDfrEZE2I=";
+    hash = "sha256-0jpElAj4TDC52BEjfnGHYiro6MT6Jzcb0evvmroxLn8=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-ZlU+PVkias3VuP1Bss6TTR84pzh1weJfbwQpCZ1ZaNs=";
+  cargoHash = "sha256-Ii9Fn6J5qpqigH7oWIfOX+JKkzQ2BNpeNg1sF+ONCrM=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/ti/tigerbeetle/package.nix
+++ b/pkgs/by-name/ti/tigerbeetle/package.nix
@@ -10,14 +10,14 @@ let
  platform =
    if stdenvNoCC.hostPlatform.isDarwin then "universal-macos" else stdenvNoCC.hostPlatform.system;
  hash = builtins.getAttr platform {
-    "universal-macos" = "sha256-Rrm/vTOT8y9e7wFsM+J3SwHoyd2t9VMUVcUFfjBssjU=";
-    "x86_64-linux" = "sha256-fgs4YiK7egvKmLev2e7dTu1zdz6O61+HzOmyt5ke8cE=";
-    "aarch64-linux" = "sha256-J2JFV4TFGX1XDQ+7AAJ8dREmPoNcErzpcUFkhWk/YVs=";
+    "universal-macos" = "sha256-kvI88/BudL5mnXfEM1RrwblS15374s+P7jOKZ/wehbc=";
+    "x86_64-linux" = "sha256-FK98LW0Xyp6PUdmVZgN3y5ueC9nKQ2nwWKbOpBDNia0=";
+    "aarch64-linux" = "sha256-+jeHG28zlaRqR3GhxHJTZ6x2X3CjBJs4ZnxXkzAG+tM=";
  };
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "tigerbeetle";
-  version = "0.16.26";
+  version = "0.16.28";

  src = fetchzip {
    url = "https://github.com/tigerbeetle/tigerbeetle/releases/download/${finalAttrs.version}/tigerbeetle-${platform}.zip";
--- a/pkgs/by-name/tl/tlsinfo/package.nix
+++ b/pkgs/by-name/tl/tlsinfo/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "tlsinfo";
-  version = "0.1.41";
+  version = "0.1.43";

  src = fetchFromGitHub {
    owner = "paepckehh";
    repo = "tlsinfo";
    tag = "v${version}";
-    hash = "sha256-II5/UDWVeEoupM1Ijty2A9M/qwWA2/b4Y68lTkxnJ9o=";
+    hash = "sha256-3H/1UlktRVnCd95OFkOqPp6gciGZCOBpj0UFfO+tyJg=";
  };

-  vendorHash = "sha256-IyinAjgK4vm+TkSGQq+XnY9BESsNvXgz84BRzNyZtJY=";
+  vendorHash = "sha256-yFb4Z8i3b6lPQ4NOszEI2k5s5dmE7Z7YGSFZuExXZ4I=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ur/url-parser/package.nix
+++ b/pkgs/by-name/ur/url-parser/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "url-parser";
-  version = "2.1.2";
+  version = "2.1.3";

  src = fetchFromGitHub {
    owner = "thegeeklab";
    repo = "url-parser";
    tag = "v${version}";
-    hash = "sha256-IGA+T0Qv3l32UmWciCH2J5G+YGWu0plqSG7yfEtuswM=";
+    hash = "sha256-eAfe23aATve9d9Nhxi49ZatpbfzeZLnfPZN+ZV/tD1I=";
  };

  vendorHash = "sha256-Znt8C7B+tSZnzq+3DaycEu0VtkltKhODG9sB5aO99rc=";
--- a/pkgs/by-name/v2/v2ray/package.nix
+++ b/pkgs/by-name/v2/v2ray/package.nix
@@ -16,18 +16,18 @@

 buildGoModule rec {
  pname = "v2ray-core";
-  version = "5.27.0";
+  version = "5.29.1";

  src = fetchFromGitHub {
    owner = "v2fly";
    repo = "v2ray-core";
    rev = "v${version}";
-    hash = "sha256-3cwVkhWWiqnmjPE0OIlo3FPS1G809HgnzYMamd2edLA=";
+    hash = "sha256-gDIbv0KeYsd6BZ/De/ATT74TKLImaoMjAAfL1EAn7vc=";
  };

  # `nix-update` doesn't support `vendorHash` yet.
  # https://github.com/Mic92/nix-update/pull/95
-  vendorHash = "sha256-f9S6X6NVJ9ZE00UPqmOsFZZSZmVwuJvy6vbF80jSABk=";
+  vendorHash = "sha256-D8xOFgnlMSUFeUgRsVWyRbCtKnCLgRJ4e+FlHbaOZKA=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/we/webcord/package.nix
+++ b/pkgs/by-name/we/webcord/package.nix
@@ -11,16 +11,16 @@

 buildNpmPackage rec {
  pname = "webcord";
-  version = "4.10.3";
+  version = "4.10.4";

  src = fetchFromGitHub {
    owner = "SpacingBat3";
    repo = "WebCord";
    tag = "v${version}";
-    hash = "sha256-ga94CBc87q1U06Bm6ju304CHrIlFRLcIwNJx3GB2S+w=";
+    hash = "sha256-rBOQutAPmNiw9bJ3nYSddbAwSqYHAlSNHpkMvxzmUnA=";
  };

-  npmDepsHash = "sha256-h14sYaUeXb57kjxSSiXyvDjaswWi1qPAU/x1xQz3BaY=";
+  npmDepsHash = "sha256-CjXEwFRGVjJv+kuyq9IZHdiYKJ6lbSDZnIxBer3qnOI=";

  makeCacheWritable = true;

--- a/pkgs/by-name/ze/zed-editor/0002-linux-linker.patch
+++ b/pkgs/by-name/ze/zed-editor/0002-linux-linker.patch
@@ -0,0 +1,19 @@
+diff --git a/.cargo/config.toml b/.cargo/config.toml
+index 07cbc23195..b3c4d43e0f 100644
+--- a/.cargo/config.toml
+++ b/.cargo/config.toml
+@@ -5,14 +5,6 @@ rustflags = ["-C", "symbol-mangling-version=v0", "--cfg", "tokio_unstable"]
+ [alias]
+ xtask = "run --package xtask --"
+ 
+-[target.x86_64-unknown-linux-gnu]
+-linker = "clang"
+-rustflags = ["-C", "link-arg=-fuse-ld=mold"]
+-
+-[target.aarch64-unknown-linux-gnu]
+-linker = "clang"
+-rustflags = ["-C", "link-arg=-fuse-ld=mold"]
+-
+ [target.aarch64-apple-darwin]
+ rustflags = ["-C", "link-args=-Objc -all_load"]
+ 
--- a/pkgs/by-name/ze/zed-editor/package.nix
+++ b/pkgs/by-name/ze/zed-editor/package.nix
@@ -96,7 +96,7 @@ let
 in
 rustPlatform.buildRustPackage rec {
  pname = "zed-editor";
-  version = "0.174.5";
+  version = "0.174.6";

  outputs = [ "out" ] ++ lib.optional buildRemoteServer "remote_server";

@@ -104,7 +104,7 @@ rustPlatform.buildRustPackage rec {
    owner = "zed-industries";
    repo = "zed";
    tag = "v${version}";
-    hash = "sha256-zy0YiCPvLK8jRYldxuPaUfN2/VSPKgqCBu3ZQxZ/mT4=";
+    hash = "sha256-X/xGOJBKXRiCfcAyZ0Tiedk9WCnjwA8Ra4TMPf/sYbU=";
  };

  patches = [
@@ -113,6 +113,12 @@ rustPlatform.buildRustPackage rec {
    # Until https://github.com/zed-industries/zed/issues/19971 is fixed,
    # we also skip any crate for which the license cannot be determined.
    ./0001-generate-licenses.patch
+
+    # Upstream delegates linking on Linux to clang to make use of mold,
+    # but builds fine with our standard linker.
+    # This patch removes their linker override from the cargo config.
+    ./0002-linux-linker.patch
+
    # See https://github.com/zed-industries/zed/pull/21661#issuecomment-2524161840
    "script/patches/use-cross-platform-livekit.patch"
  ];
@@ -124,7 +130,7 @@ rustPlatform.buildRustPackage rec {
  '';

  useFetchCargoVendor = true;
-  cargoHash = "sha256-qxLowOIQ0j4ilzCdfiMQQIMfeQHvl5J8GyNJLeJ1GE4=";
+  cargoHash = "sha256-EXlV+QFaIErre7Bi06e7V8VKo5SuLdqJQDvQujmBP8o=";

  nativeBuildInputs =
    [
--- a/pkgs/development/interpreters/jruby/default.nix
+++ b/pkgs/development/interpreters/jruby/default.nix
@@ -15,11 +15,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "jruby";
-  version = "9.4.11.0";
+  version = "9.4.12.0";

  src = fetchurl {
    url = "https://s3.amazonaws.com/jruby.org/downloads/${finalAttrs.version}/jruby-bin-${finalAttrs.version}.tar.gz";
-    hash = "sha256-z0BnvcOmq1GMeGWI4khq3AR7nOoLlqQyGLA6xlHSbhE=";
+    hash = "sha256-BcXSA9aZDJJnHMQvV9L6HBCDu/0W+nAj3FhIzbjwqi4=";
  };

  nativeBuildInputs = [ makeBinaryWrapper ];
--- a/pkgs/development/libraries/astal/buildAstalModule.nix
+++ b/pkgs/development/libraries/astal/buildAstalModule.nix
@@ -39,7 +39,7 @@ let
      cleanArgs args
      // {
        pname = "astal-${name}";
-        version = "0-unstable-2025-02-06";
+        version = "0-unstable-2025-02-20";

        __structuredAttrs = true;
        strictDeps = true;
@@ -47,8 +47,8 @@ let
        src = fetchFromGitHub {
          owner = "Aylur";
          repo = "astal";
-          rev = "173e35fb3b4e2e219524e1232e93683283e8fe81";
-          hash = "sha256-lVxK8StUBzK7xx68/JoXBbzKrYvD/Yub4vvJ9COnbrs=";
+          rev = "3620d51bc6c23ada1bd4b7c9cf1c458c138e68df";
+          hash = "sha256-h6RFLln99Br7o0TmtKE+vd6F2PQiGBIrRobf4Ld2wRA=";
        };

        sourceRoot = "${finalAttrs.src.name}/${sourceRoot}";
--- a/pkgs/development/lua-modules/aliases.nix
+++ b/pkgs/development/lua-modules/aliases.nix
@@ -42,4 +42,5 @@ mapAliases {
  nlua-nvim = throw "nlua-nvim was removed, use neodev-nvim instead"; # added 2023-12-16
  nvim-client = throw "nvim-client was removed because it is now part of neovim"; # added 2023-12-17
  toml = throw "toml was removed because broken. You can use toml-edit instead"; # added 2024-06-25
+  nvim-dbee = throw "nvim-dbee was removed because broken. You can use vimPlugins.nvim-dbee instead"; # added 2024-06-25
 }
--- a/pkgs/development/lua-modules/generated-packages.nix
+++ b/pkgs/development/lua-modules/generated-packages.nix
@@ -2933,30 +2933,6 @@ buildLuarocksPackage {
  };
 }) {};

-nvim-dbee = callPackage({ buildLuarocksPackage, fetchurl, fetchzip, luaOlder, nui-nvim }:
-buildLuarocksPackage {
-  pname = "nvim-dbee";
-  version = "0.1.9-1";
-  knownRockspec = (fetchurl {
-    url    = "mirror://luarocks/nvim-dbee-0.1.9-1.rockspec";
-    sha256 = "1lmzy6ivnwvhzclkfbcswj2mznrpc4i8s3ivdrc78rr86i49mvpg";
-  }).outPath;
-  src = fetchzip {
-    url    = "https://github.com/kndndrj/nvim-dbee/archive/v0.1.9.zip";
-    sha256 = "10xplksglyd8af8q1cl2lxcpn52b766g87gva9fd3l66idxsds00";
-  };
-
-  disabled = luaOlder "5.1";
-  propagatedBuildInputs = [ nui-nvim ];
-
-  meta = {
-    homepage = "https://github.com/kndndrj/nvim-dbee";
-    description = "Interactive database client for neovim";
-    maintainers = with lib.maintainers; [ perchun ];
-    license.fullName = "GPL-3.0";
-  };
-}) {};
-
 nvim-nio = callPackage({ buildLuarocksPackage, fetchurl, fetchzip, luaOlder }:
 buildLuarocksPackage {
  pname = "nvim-nio";
--- a/pkgs/development/octave-modules/nurbs/default.nix
+++ b/pkgs/development/octave-modules/nurbs/default.nix
@@ -6,11 +6,11 @@

 buildOctavePackage rec {
  pname = "nurbs";
-  version = "1.4.3";
+  version = "1.4.4";

  src = fetchurl {
    url = "mirror://sourceforge/octave/${pname}-${version}.tar.gz";
-    sha256 = "16r05av75nvmkz1knf0nv0gj4fcjjf3jnyf94bdgxf84wahncim7";
+    sha256 = "sha256-QfF1tu9z/FQWNDirRs5OP3IRJOGkkR2lnHELn3ItknY=";
  };

  meta = with lib; {
--- a/pkgs/development/python-modules/airgradient/default.nix
+++ b/pkgs/development/python-modules/airgradient/default.nix
@@ -17,7 +17,7 @@

 buildPythonPackage rec {
  pname = "airgradient";
-  version = "0.9.1";
+  version = "0.9.2";
  pyproject = true;

  disabled = pythonOlder "3.11";
@@ -26,7 +26,7 @@ buildPythonPackage rec {
    owner = "airgradienthq";
    repo = "python-airgradient";
    tag = "v${version}";
-    hash = "sha256-al0DLsub3xLU1BWLNn0cMI87O0mcQJ0Y4Boj2Xwk1r0=";
+    hash = "sha256-llhdLqVueATKCb4wyPYjnsdOpbbE2BnUU0PH0jwHPMU=";
  };

  build-system = [ poetry-core ];
--- a/pkgs/development/python-modules/beancount/2.nix
+++ b/pkgs/development/python-modules/beancount/2.nix
@@ -0,0 +1,70 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  isPy3k,
+  beautifulsoup4,
+  bottle,
+  chardet,
+  python-dateutil,
+  google-api-python-client,
+  google-auth-oauthlib,
+  lxml,
+  oauth2client,
+  ply,
+  pytest,
+  python-magic,
+  requests,
+}:
+
+buildPythonPackage rec {
+  version = "2.3.6";
+  format = "setuptools";
+  pname = "beancount";
+
+  disabled = !isPy3k;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-gB+Tvta1fS4iQ2aIxInVob8fduIQ887RhoB1fmDTR1o=";
+  };
+
+  # Tests require files not included in the PyPI archive.
+  doCheck = false;
+
+  propagatedBuildInputs = [
+    beautifulsoup4
+    bottle
+    chardet
+    python-dateutil
+    google-api-python-client
+    google-auth-oauthlib
+    lxml
+    oauth2client
+    ply
+    python-magic
+    requests
+    # pytest really is a runtime dependency
+    # https://github.com/beancount/beancount/blob/v2/setup.py#L81-L82
+    pytest
+  ];
+
+  # beancount cannot be directly bumped to 3.x
+  # e.g. https://github.com/NixOS/nixpkgs/issues/380197
+  passthru.skipBulkUpdate = true;
+
+  meta = with lib; {
+    homepage = "https://github.com/beancount/beancount";
+    description = "Double-entry bookkeeping computer language";
+    longDescription = ''
+      A double-entry bookkeeping computer language that lets you define
+      financial transaction records in a text file, read them in memory,
+      generate a variety of reports from them, and provides a web interface.
+    '';
+    license = licenses.gpl2Only;
+    maintainers = with maintainers; [
+      sharzy
+      polarmutex
+    ];
+  };
+}
--- a/pkgs/development/python-modules/beancount/default.nix
+++ b/pkgs/development/python-modules/beancount/default.nix
@@ -1,70 +1,68 @@
 {
  lib,
+  bison,
  buildPythonPackage,
-  fetchPypi,
-  isPy3k,
-  beautifulsoup4,
-  bottle,
-  chardet,
+  click,
+  fetchFromGitHub,
+  flex,
+  gnupg,
+  meson,
+  meson-python,
+  pytestCheckHook,
  python-dateutil,
-  google-api-python-client,
-  google-auth-oauthlib,
-  lxml,
-  oauth2client,
-  ply,
-  pytest,
-  python-magic,
-  requests,
+  regex,
 }:

 buildPythonPackage rec {
-  version = "2.3.6";
-  format = "setuptools";
+  version = "3.1.0";
  pname = "beancount";
+  pyproject = true;

-  disabled = !isPy3k;
-
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-gB+Tvta1fS4iQ2aIxInVob8fduIQ887RhoB1fmDTR1o=";
+  src = fetchFromGitHub {
+    owner = "beancount";
+    repo = "beancount";
+    tag = version;
+    hash = "sha256-ogjBW/NGlMmhYlzcx3EWWoVi+OOEv2Wm49tzwMiNb8A=";
  };

-  # Tests require files not included in the PyPI archive.
-  doCheck = false;
-
-  propagatedBuildInputs = [
-    beautifulsoup4
-    bottle
-    chardet
-    python-dateutil
-    google-api-python-client
-    google-auth-oauthlib
-    lxml
-    oauth2client
-    ply
-    python-magic
-    requests
-    # pytest really is a runtime dependency
-    # https://github.com/beancount/beancount/blob/v2/setup.py#L81-L82
-    pytest
+  build-system = [
+    meson
+    meson-python
  ];

-  # beancount cannot be directly bumped to 3.x
-  # e.g. https://github.com/NixOS/nixpkgs/issues/380197
-  passthru.skipBulkUpdate = true;
+  dependencies = [
+    click
+    python-dateutil
+    regex
+  ];

-  meta = with lib; {
+  nativeBuildInputs = [
+    bison
+    flex
+  ];
+
+  nativeCheckInputs = [
+    gnupg
+    pytestCheckHook
+  ];
+
+  preCheck = ''
+    # avoid local paths, relative imports wont resolve correctly
+    mv beancount tests
+  '';
+
+  pythonImportsCheck = [ "beancount" ];
+
+  meta = {
    homepage = "https://github.com/beancount/beancount";
+    changelog = "https://github.com/beancount/beancount/releases/tag/${src.tag}";
    description = "Double-entry bookkeeping computer language";
    longDescription = ''
      A double-entry bookkeeping computer language that lets you define
      financial transaction records in a text file, read them in memory,
      generate a variety of reports from them, and provides a web interface.
    '';
-    license = licenses.gpl2Only;
-    maintainers = with maintainers; [
-      sharzy
-      polarmutex
-    ];
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ alapshin ];
  };
 }
--- a/pkgs/development/python-modules/beangulp/default.nix
+++ b/pkgs/development/python-modules/beangulp/default.nix
@@ -0,0 +1,58 @@
+{
+  lib,
+  beancount,
+  beautifulsoup4,
+  buildPythonPackage,
+  chardet,
+  click,
+  fetchFromGitHub,
+  lxml,
+  petl,
+  python-magic,
+  pytestCheckHook,
+  setuptools,
+}:
+
+buildPythonPackage rec {
+  pname = "beangulp";
+  version = "0.2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "beancount";
+    repo = "beangulp";
+    tag = "v${version}";
+    hash = "sha256-h7xLHwEyS+tOI7v6Erp12VfVnxOf4930++zghhC3in4=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    beancount
+    beautifulsoup4
+    chardet
+    click
+    lxml
+    python-magic
+  ];
+
+  nativeCheckInputs = [
+    petl
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [
+    "beangulp"
+  ];
+
+  meta = {
+    homepage = "https://github.com/beancount/beangulp";
+    description = "Importers framework for Beancount";
+    longDescription = ''
+      Beangulp provides a framework for importing transactions into a Beancoount
+      ledger from account statements and other documents and for managing documents.
+    '';
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ alapshin ];
+  };
+}
--- a/pkgs/development/python-modules/beanquery/default.nix
+++ b/pkgs/development/python-modules/beanquery/default.nix
@@ -7,18 +7,20 @@
  python-dateutil,
  pytestCheckHook,
  setuptools,
-  tatsu,
+  tatsu-lts,
 }:
-buildPythonPackage rec {
+buildPythonPackage {
  pname = "beanquery";
-  version = "0.1.0";
+  version = "0.1.0-unstable-2025-01-10";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "beancount";
    repo = "beanquery";
-    tag = "v${version}";
-    hash = "sha256-1+KTUvnqPceRbzY1OZwOSQdK7f78K9kSwtQfI1SUIa8=";
+    # Pinned at commit where tatsu dependency replaced with tatsu-lts
+    # Later snapsot versions break fava build due to API changes at beanquery/shell.py
+    rev = "e77a67996a54eef2e9d77b6352c74a40164e281d";
+    hash = "sha256-XYfKAscm55lY4YjIGTQ6RMFnCPWemfszpheGQ9qjMiM=";
  };

  build-system = [ setuptools ];
@@ -27,15 +29,12 @@ buildPythonPackage rec {
    beancount
    click
    python-dateutil
-    tatsu
+    tatsu-lts
  ];

-  pythonRelaxDeps = [ "tatsu" ];
-
  nativeCheckInputs = [ pytestCheckHook ];

  pythonImportsCheck = [
-    "beancount"
    "beanquery"
  ];

--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -359,7 +359,7 @@

 buildPythonPackage rec {
  pname = "boto3-stubs";
-  version = "1.36.23";
+  version = "1.36.26";
  pyproject = true;

  disabled = pythonOlder "3.7";
@@ -367,7 +367,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "boto3_stubs";
    inherit version;
-    hash = "sha256-4JAW8G2vd5TRGBWJG5YvWIxRPF9e5sCrLARcN195jJo=";
+    hash = "sha256-TZz758a1XaxdRQmi5E3xJjvppoTHcj0pe6/7X1eQmKE=";
  };

  build-system = [ setuptools ];
--- a/Show More
+++ b/Show More