Merge master into staging-next

2026-09-29 19:30:11 +00:00 · 2026-09-20 12:12:07 +00:00
parent bb7535f586 2ee98fc133
commit 79dca5c171
62 changed files with 1383 additions and 393 deletions
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -4003,6 +4003,12 @@
    github = "bohanubis";
    githubId = 77834479;
  };
+  BohdanTkachenko = {
+    email = "bohdan@tkachenko.dev";
+    github = "BohdanTkachenko";
+    githubId = 929598;
+    name = "Bohdan Tkachenko";
+  };
  bohreromir = {
    github = "bohreromir";
    githubId = 40412303;
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -422,6 +422,7 @@ in
  cgit = runTest ./cgit.nix;
  charliecloud = runTest ./charliecloud.nix;
  chhoto-url = runTest ./chhoto-url.nix;
+  chipass = runTest ./chipass.nix;
  chromadb = runTest ./chromadb.nix;
  chromium = (handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./chromium.nix { }).stable or { };
  chrony = runTestOn [ "aarch64-linux" "x86_64-linux" ] ./chrony.nix;
--- a/nixos/tests/chipass.nix
+++ b/nixos/tests/chipass.nix
@@ -0,0 +1,93 @@
+{ pkgs, ... }:
+
+{
+  name = "chipass";
+  meta = with pkgs.lib.maintainers; {
+    maintainers = [ provokateurin ];
+    timeout = 1800;
+  };
+
+  nodes.machine =
+    { ... }:
+
+    {
+      imports = [
+        ./common/user-account.nix
+        ./common/x11.nix
+      ];
+
+      services.xserver.enable = true;
+      programs.dconf.enable = true;
+
+      # for better OCR
+      environment.etc."icewm/prefoverride".text = ''
+        ColorActiveTitleBar = "rgb:FF/FF/FF"
+      '';
+
+      # Regression test for https://github.com/NixOS/nixpkgs/issues/163482
+      qt = {
+        enable = true;
+        platformTheme = "gnome";
+        style = "adwaita-dark";
+      };
+
+      test-support.displayManager.auto.user = "alice";
+      environment.systemPackages = with pkgs; [
+        chipass
+        xdotool
+      ];
+    };
+
+  enableOCR = true;
+
+  testScript =
+    { nodes, ... }:
+    let
+      aliceDo = cmd: ''machine.succeed("su - alice -c '${cmd}' >&2 &");'';
+    in
+    ''
+      with subtest("Ensure X starts"):
+          start_all()
+          machine.wait_for_x()
+
+      with subtest("Can create database and entry with CLI"):
+          ${aliceDo "ChiPass-cli db-create --set-key-file foo.keyfile foo.kdbx"}
+          ${aliceDo "ChiPass-cli add --no-password -k foo.keyfile foo.kdbx bar"}
+
+      with subtest("Ensure ChiPass starts"):
+          # start ChiPass window
+          ${aliceDo "ChiPass >&2 &"}
+
+          machine.wait_for_text("ChiPass ${pkgs.chipass.version}")
+          machine.screenshot("ChiPass")
+
+      with subtest("Can open existing database"):
+          machine.send_key("ctrl-o")
+          machine.sleep(5)
+          # Regression #163482: chipass did not crash
+          machine.succeed("ps -e | grep ChiPass")
+          machine.wait_for_text("Open database")
+          machine.send_key("ret")
+
+          # Wait for the enter password screen to appear.
+          machine.wait_for_text("/home/alice/foo.kdbx")
+
+          # Click on "I have key file" button to open keyfile dialog
+          machine.send_key("tab")
+          machine.send_key("tab")
+          machine.send_key("tab")
+          machine.send_key("ret")
+
+          # Select keyfile
+          machine.wait_for_text("Select key file")
+          machine.send_chars("/home/alice/foo.keyfile")
+          machine.send_key("ret")
+
+          # Open database
+          machine.wait_for_text("foo.kdbx \\[Locked] - ChiPass")
+          machine.send_key("ret")
+
+          # Database is unlocked (doesn't have "[Locked]" in the title anymore)
+          machine.wait_for_text("foo.kdbx - ChiPass")
+    '';
+}
--- a/nixos/tests/grafana/basic.nix
+++ b/nixos/tests/grafana/basic.nix
@@ -118,7 +118,6 @@ in
        sqlite.succeed(
            "curl -sSfN -u testadmin:snakeoilpwd http://[::1]:3000/api/org/users | grep admin\@localhost"
        )
-        sqlite.shutdown()

    with subtest("Successful API query as admin user with sqlite db listening on socket"):
        socket.wait_for_unit("grafana.service")
@@ -129,7 +128,6 @@ in
        socket.succeed(
            "curl -sSfN -u testadmin:snakeoilpwd http://[::1]/api/org/users | grep admin\@localhost"
        )
-        socket.shutdown()

    with subtest("Successful API query as admin user with postgresql db"):
        postgresql.wait_for_unit("grafana.service")
@@ -139,7 +137,6 @@ in
        postgresql.succeed(
            "curl -sSfN -u testadmin:snakeoilpwd http://[::1]:3000/api/org/users | grep admin\@localhost"
        )
-        postgresql.shutdown()

    with subtest("Successful API query as admin user with mysql db"):
        mysql.wait_for_unit("grafana.service")
@@ -149,6 +146,5 @@ in
        mysql.succeed(
            "curl -sSfN -u testadmin:snakeoilpwd http://[::1]:3000/api/org/users | grep admin\@localhost"
        )
-        mysql.shutdown()
  '';
 }
--- a/pkgs/applications/editors/vim/plugins/overrides.nix
+++ b/pkgs/applications/editors/vim/plugins/overrides.nix
@@ -21,10 +21,13 @@
  dailies,
  dasht,
  deno,
+  distant,
  direnv,
  fzf,
+  fzy,
  gawk,
  git,
+  glow,
  helm-ls,
  himalaya,
  htop,
@@ -32,7 +35,9 @@
  khard,
  kulala-core,
  languagetool,
+  llm-ls,
  libgit2,
+  manix,
  llvmPackages,
  neovim-unwrapped,
  nix,
@@ -45,6 +50,7 @@
  slang-server,
  sqlite,
  sshfs,
+  sops,
  stylish-haskell,
  tabnine,
  tmux,
@@ -58,6 +64,7 @@
  xwininfo,
  xxd,
  ycmd,
+  yq,
  zenity,
  zoxide,
  zsh,
@@ -1371,6 +1378,10 @@ assertNoAdditions {
    '';
  });

+  distant-nvim = super.distant-nvim.overrideAttrs {
+    runtimeDeps = [ distant ];
+  };
+
  dotnet-nvim = super.dotnet-nvim.overrideAttrs {
    dependencies = with self; [
      telescope-nvim
@@ -1678,6 +1689,10 @@ assertNoAdditions {
    };
  });

+  glow-nvim = super.glow-nvim.overrideAttrs {
+    runtimeDeps = [ glow ];
+  };
+
  go-nvim = super.go-nvim.overrideAttrs {
    dependencies = with self; [
      nvim-treesitter
@@ -2366,6 +2381,10 @@ assertNoAdditions {
    '';
  };

+  llm-nvim = super.llm-nvim.overrideAttrs {
+    runtimeDeps = [ llm-ls ];
+  };
+
  lsp-format-modifications-nvim = super.lsp-format-modifications-nvim.overrideAttrs {
    dependencies = [ self.plenary-nvim ];
  };
@@ -3070,6 +3089,13 @@ assertNoAdditions {
    ];
  };

+  neovim-fuzzy = super.neovim-fuzzy.overrideAttrs {
+    runtimeDeps = [
+      fzy
+      ripgrep
+    ];
+  };
+
  neovim-project = super.neovim-project.overrideAttrs {
    dependencies = with self; [
      plenary-nvim
@@ -3397,6 +3423,13 @@ assertNoAdditions {
    };
  });

+  nvim-jqx = super.nvim-jqx.overrideAttrs {
+    runtimeDeps = [
+      jq
+      yq
+    ];
+  };
+
  nvim-julia-autotest = super.nvim-julia-autotest.overrideAttrs (old: {
    meta = old.meta // {
      license = lib.licenses.agpl3Only;
@@ -3524,6 +3557,10 @@ assertNoAdditions {
    ];
  };

+  nvim-sops = super.nvim-sops.overrideAttrs {
+    runtimeDeps = [ sops ];
+  };
+
  nvim-teal-maker = super.nvim-teal-maker.overrideAttrs {
    postPatch = ''
      substituteInPlace lua/tealmaker/init.lua \
@@ -4562,6 +4599,10 @@ assertNoAdditions {
    ];
  };

+  telescope-manix = super.telescope-manix.overrideAttrs {
+    runtimeDeps = [ manix ];
+  };
+
  telescope-media-files-nvim = super.telescope-media-files-nvim.overrideAttrs {
    dependencies = with self; [
      telescope-nvim
--- a/pkgs/applications/office/libreoffice/26.8-add-dir-prereq.patch
+++ b/pkgs/applications/office/libreoffice/26.8-add-dir-prereq.patch
@@ -0,0 +1,43 @@
+From 747a5383ea0a7bbd413ba38754094493d9dbad57 Mon Sep 17 00:00:00 2001
+From: Andras Timar <andras.timar@collabora.com>
+Date: Thu, 23 Apr 2026 23:10:21 +0200
+Subject: [PATCH] gbuild: add .dir order-only prereq to UnpackedTarball version target
+
+Follow-up to b15dd2d51de5 "gbuild: rebuild UnpackedTarget when
+tarball changes". That commit made the new .version target the
+earliest thing in the unpack dep chain (UnpackedTarget.target ->
+UnpackedTarball.preparation -> UnpackedTarball.version), but forgot
+to give it the same order-only .dir prereq that .preparation and
+.target already have. On a from-scratch build (e.g. the Flatpak
+sandbox that starts with an empty workdir/) the .version recipe
+runs first, and `printf \$(UNPACKED_TARBALL) > \$@` fails with
+ENOENT because workdir/UnpackedTarball/ does not exist yet:
+
+  /bin/sh: line 1: .../workdir/UnpackedTarball/boost.version:
+    No such file or directory
+  make[1]: *** [solenv/gbuild/UnpackedTarball.mk:169:
+    .../workdir/UnpackedTarball/boost.version] Error 1
+
+Signed-off-by: Andras Timar <andras.timar@collabora.com>
+Change-Id: Ia6a16650711e9894e0e03a687f16adc204506be3
+Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/1474
+Tested-by: Jenkins CPCI <releng@collaboraoffice.com>
+Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
+(cherry picked from commit 73bf8e51886b86878db3ceb99833f84ad326f483)
+Reviewed-on: https://gerrit.libreoffice.org/c/core/+/207067
+Reviewed-by: Julien Nabet <serval2412@yahoo.fr>
+Tested-by: Jenkins
+---
+
+diff --git a/solenv/gbuild/UnpackedTarball.mk b/solenv/gbuild/UnpackedTarball.mk
+index bce659b..cfdb7686 100644
+--- a/solenv/gbuild/UnpackedTarball.mk
+++ b/solenv/gbuild/UnpackedTarball.mk
+@@ -209,6 +209,7 @@
+ 
+ $(call gb_UnpackedTarball_get_preparation_target,$(1)) : $(gb_Module_CURRENTMAKEFILE) \
+ 	$(call gb_UnpackedTarball_get_version_target,$(1))
+$(call gb_UnpackedTarball_get_version_target,$(1)) :| $(dir $(call gb_UnpackedTarball_get_target,$(1))).dir
+ $(call gb_UnpackedTarball_get_preparation_target,$(1)) :| $(dir $(call gb_UnpackedTarball_get_target,$(1))).dir
+ $(call gb_UnpackedTarball_get_target,$(1)) :| $(dir $(call gb_UnpackedTarball_get_target,$(1))).dir
+ $(call gb_UnpackedTarball_get_final_target,$(1)) : $(call gb_UnpackedTarball_get_target,$(1))
--- a/pkgs/applications/office/libreoffice/default.nix
+++ b/pkgs/applications/office/libreoffice/default.nix
@@ -429,6 +429,9 @@ stdenv.mkDerivation (finalAttrs: {
    })

    ./fix-unpack-collabora.patch
+  ]
+  ++ lib.optionals (lib.versionAtLeast version "26.8" && lib.versionOlder version "26.8.999") [
+    ./26.8-add-dir-prereq.patch
  ];

  postPatch = ''
--- a/pkgs/by-name/ad/adscan/package.nix
+++ b/pkgs/by-name/ad/adscan/package.nix
@@ -7,7 +7,7 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "adscan";
-  version = "12.0.0";
+  version = "13.0.0";
  pyproject = true;

  __structuredAttrs = true;
@@ -16,7 +16,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    owner = "ADScanPro";
    repo = "adscan";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vx71s/7N/r1nBheTfUxtSSOY+yNzjyLrO7Ow4Xod34U=";
+    hash = "sha256-FcsxW30xmAODVvi7YUPwp+0+ETA/W4e/JrA5jZ+RXE8=";
  };

  pythonRelaxDeps = [ "credsweeper" ];
--- a/pkgs/by-name/an/angle/package.nix
+++ b/pkgs/by-name/an/angle/package.nix
@@ -16,6 +16,7 @@
  wayland,
  pciutils,
  libGL,
+  vulkan-loader,
  apple-sdk_15,
  fixDarwinDylibNames,
  xcbuild,
@@ -182,6 +183,12 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  postInstall = lib.optionalString stdenv.hostPlatform.isLinux ''
+    # Use nixpkgs' Vulkan loader so NixOS graphics drivers are found.
+    ln -sfn ${lib.getLib vulkan-loader}/lib/libvulkan.so.1 \
+      "$out/lib/libvulkan.so.1"
+  '';
+
  postFixup = lib.optionalString stdenv.hostPlatform.isDarwin ''
    install_name_tool \
        -change ./libGLESv2.dylib \
--- a/pkgs/by-name/an/antigravity-hub/package.nix
+++ b/pkgs/by-name/an/antigravity-hub/package.nix
@@ -0,0 +1,172 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  alsa-lib,
+  asar,
+  at-spi2-atk,
+  at-spi2-core,
+  atk,
+  autoPatchelfHook,
+  cairo,
+  copyDesktopItems,
+  cups,
+  dbus,
+  expat,
+  glib,
+  gsettings-desktop-schemas,
+  gtk3,
+  libGL,
+  libgbm,
+  libnotify,
+  libpulseaudio,
+  libsecret,
+  libx11,
+  libxcb,
+  libxcomposite,
+  libxdamage,
+  libxext,
+  libxfixes,
+  libxkbcommon,
+  libxrandr,
+  makeDesktopItem,
+  makeShellWrapper,
+  nspr,
+  nss,
+  pango,
+  pipewire,
+  systemd,
+  wrapGAppsHook3,
+}:
+
+let
+  sources = {
+    x86_64-linux = {
+      arch = "x64";
+      hash = "sha256-/C4q9JpFrv7pVYvOVqqku94A1WDTVDV68bg0qd1DzTM=";
+    };
+    aarch64-linux = {
+      arch = "arm";
+      hash = "sha256-cgSbIH0cF5qFJKTc8TxPhtjLulmdhF/cRX3g9/ES6Rg=";
+    };
+  };
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "antigravity-hub";
+  version = "2.12.2";
+
+  src =
+    let
+      source =
+        sources.${stdenv.hostPlatform.system}
+          or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
+    in
+    fetchurl {
+      url = "https://storage.googleapis.com/antigravity-public/antigravity-hub/${finalAttrs.version}-${finalAttrs.passthru.buildId}/linux-${source.arch}/Antigravity.tar.gz";
+      inherit (source) hash;
+    };
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    asar
+    autoPatchelfHook
+    copyDesktopItems
+    makeShellWrapper
+    wrapGAppsHook3
+  ];
+
+  buildInputs = [
+    alsa-lib
+    at-spi2-atk
+    at-spi2-core
+    atk
+    cairo
+    cups
+    dbus
+    expat
+    glib
+    gsettings-desktop-schemas
+    gtk3
+    libgbm
+    libx11
+    libxcb
+    libxcomposite
+    libxdamage
+    libxext
+    libxfixes
+    libxkbcommon
+    libxrandr
+    nspr
+    nss
+    pango
+    systemd
+  ];
+
+  # Loaded with dlopen() by the main binary, so autoPatchelfHook cannot discover them.
+  runtimeDependencies = map lib.getLib [
+    libnotify
+    libpulseaudio
+    libsecret
+    pipewire
+  ];
+  # The bundled ANGLE libraries (libEGL.so, libGLESv2.so) dlopen() the system GL
+  # libraries. runtimeDependencies only applies to executables, so extend the
+  # RUNPATH of every patched ELF file instead.
+  appendRunpaths = [ "${lib.getLib libGL}/lib" ];
+
+  # The wrapper is created in postFixup to add the Wayland flags.
+  dontWrapGApps = true;
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "antigravity-hub";
+      desktopName = "Antigravity";
+      comment = "Manage multiple autonomous agents across independent projects";
+      exec = "antigravity %U";
+      icon = "antigravity";
+      categories = [ "Development" ];
+      mimeTypes = [ "x-scheme-handler/antigravity" ];
+      startupWMClass = "Antigravity";
+    })
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/share/antigravity
+    cp -r . $out/share/antigravity
+
+    asar extract-file resources/app.asar icon.png
+    install -Dm644 icon.png $out/share/icons/hicolor/512x512/apps/antigravity.png
+
+    runHook postInstall
+  '';
+
+  # wrapGAppsHook3 provides makeBinaryWrapper, which cannot expand the shell
+  # variables in --add-flags, hence makeShellWrapper.
+  postFixup = ''
+    makeShellWrapper $out/share/antigravity/antigravity $out/bin/antigravity \
+      "''${gappsWrapperArgs[@]}" \
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations}}"
+  '';
+
+  passthru = {
+    # Download URLs embed a build ID next to the version, e.g. `2.12.2-6298742303883264`.
+    buildId = "6298742303883264";
+    updateScript = ./update.sh;
+  };
+
+  meta = {
+    description = "Desktop environment for managing multiple autonomous agents across independent projects";
+    homepage = "https://antigravity.google";
+    changelog = "https://antigravity.google/changelog";
+    downloadPage = "https://antigravity.google/download";
+    license = lib.licenses.unfree;
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+    platforms = lib.attrNames sources;
+    mainProgram = "antigravity";
+    maintainers = with lib.maintainers; [ BohdanTkachenko ];
+  };
+})
--- a/pkgs/by-name/an/antigravity-hub/update.sh
+++ b/pkgs/by-name/an/antigravity-hub/update.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p bash common-updater-scripts curl jq nix yq-go
+
+set -euo pipefail
+
+packageFile=pkgs/by-name/an/antigravity-hub/package.nix
+manifestUrl=https://antigravity-hub-auto-updater-974169037036.us-central1.run.app/manifest/latest-x64-linux.yml
+
+# Download URLs embed a build ID next to the version, e.g.
+# https://storage.googleapis.com/antigravity-public/antigravity-hub/2.12.2-6298742303883264/linux-x64/Antigravity.AppImage
+manifest=$(curl -sSfL "$manifestUrl")
+read -r latestVersion latestUrl < <(yq '.version + " " + .files[0].url' <<<"$manifest")
+latestBuildId=$(cut -d/ -f6 <<<"$latestUrl" | cut -d- -f2)
+
+currentVersion=$(nix-instantiate --eval --raw -E "with import ./. {}; antigravity-hub.version")
+if [[ "$currentVersion" == "$latestVersion" ]]; then
+    echo "antigravity-hub is up-to-date: $currentVersion"
+    exit 0
+fi
+
+# Bump the version and build ID first so that src.url evaluates to the new downloads.
+sed -i \
+    -e "s/version = \"$currentVersion\";/version = \"$latestVersion\";/" \
+    -e "s/buildId = \"[0-9]*\";/buildId = \"$latestBuildId\";/" \
+    "$packageFile"
+
+for system in x86_64-linux aarch64-linux; do
+    url=$(nix-instantiate --eval --raw --system "$system" -E "with import ./. {}; antigravity-hub.src.url")
+    hash=$(nix store prefetch-file --json "$url" | jq -r .hash)
+    update-source-version antigravity-hub "$latestVersion" "$hash" --system="$system" --ignore-same-version
+done
--- a/pkgs/by-name/as/aseprite/package.nix
+++ b/pkgs/by-name/as/aseprite/package.nix
@@ -34,14 +34,14 @@

 clangStdenv.mkDerivation (finalAttrs: {
  pname = "aseprite";
-  version = "1.3.18.3";
+  version = "1.3.18.5";

  src = fetchFromGitHub {
    owner = "aseprite";
    repo = "aseprite";
    tag = "v${finalAttrs.version}";
    fetchSubmodules = true;
-    hash = "sha256-pMjBFJ1nhSNLITDS4oliD2DPMey6JBWplIqdcOtZfqM=";
+    hash = "sha256-8BLbAX+wif4vJySv11/NGzGrwRIsK3tvKhpkX2Zoci0=";
  };

  asepriteStrings = fetchFromGitHub {
--- a/pkgs/by-name/at/atmos/package.nix
+++ b/pkgs/by-name/at/atmos/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "atmos";
-  version = "1.228.0";
+  version = "1.229.0";

  src = fetchFromGitHub {
    owner = "cloudposse";
    repo = "atmos";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ufYto9s6tFwJVcV5dcY06POU6wTxEVFGhzaoykoVwTI=";
+    hash = "sha256-N/IFSgMg1w1uH7p7TBahBpIHjSww0MZSEf5mt3r6DzQ=";
  };

-  vendorHash = "sha256-G/Ef5I95nBnsY4QWdjA6ly28q8zVhx17MW1fmspI5nw=";
+  vendorHash = "sha256-J5TNPXzEz4gaNi2mEqkQ+t1JzmocbRRLwUwzLgAZU40=";

  env.CGO_ENABLED = 0; # Compiles a pure statically linked Go binary.

--- a/pkgs/by-name/aw/aws-cdk-cli/missing-hashes.json
+++ b/pkgs/by-name/aw/aws-cdk-cli/missing-hashes.json
@@ -51,16 +51,16 @@
  "@esbuild/win32-ia32@npm:0.28.2": "51d216d2a9cdc1ae2407ac88c4ea02be5b5cc9c618cfd846946b5691f9513de762e6a718222c3de02b14426b4939e040c98de7d424994837bed6ecbb1347b9ff",
  "@esbuild/win32-x64@npm:0.28.1": "8d658b74ed9b7494b3799093551d4c928a7916865ed42d00a135156cbd08612b53072e9e424f0687c10a93a444d30d6b0294b6a1d5fdba78078d706646ba558f",
  "@esbuild/win32-x64@npm:0.28.2": "b109c1080e6ff5fcd9da0c61a6915d296837702234609b737284c01c38cc3a245caa351702da27114ae9cd17c4a577a5674375c4138269f63a578e46f6686066",
-  "@nx/nx-darwin-arm64@npm:22.7.8": "bc5e8ec97a136e6fd83fe76d0ab88689d4e17b89b57bec271b37802453522cc43fcd87eb3c4cf5096b566e579004f088d08824d75215a45498fef045edc5562f",
-  "@nx/nx-darwin-x64@npm:22.7.8": "b7020ed4326892493d0cd0aa1239612e16c1f60272ae2ed7f3a5b2b3d2baa936554f96bcaceb2feeb1e7050cf2c043ab8749cb2d3350b92c08435347fbfcd66e",
-  "@nx/nx-freebsd-x64@npm:22.7.8": "6fa3b5386476a80a6f16bd386299d60f4ec333ac05eb6fae8d75d116a380cfc32b901feeaf88e153100db56f66aefdf8a5875abfc3d5e895e916de7a9b0a283e",
-  "@nx/nx-linux-arm-gnueabihf@npm:22.7.8": "6b474dcddc19dc859d86d0e8a9bed595016b94b795c1ecc1fbdea66eecc8d5896114bb646e5ca7252b616691a69e4b988ebf08b3bfc03923c1f39c80cc3deca2",
-  "@nx/nx-linux-arm64-gnu@npm:22.7.8": "46a6c08a47142a8ed1d2b3b784fdefb3813bba4921dc8246b973cfdf772386b4a950cb5e1b6ac10007c2df1b256c8de30bb289d7aa745cd57a147998a96de55e",
-  "@nx/nx-linux-arm64-musl@npm:22.7.8": "6dacc2727bc4e584f10e4b6936b0a89b3fdca7e7740211a42d05fa39229e69a8a7539b7514a7557e9a196116ce359a1469e67a5bf9f4934194e373fa84570ee6",
-  "@nx/nx-linux-x64-gnu@npm:22.7.8": "1f4e93f41bf9048b5dbec67a9dcd3e3d23b3c521daa80ae735b9aff32dced72331418eb92866e5716ddfbc6a9c34b9205fe1259205c38d1fa2e9396bd0e00fcc",
-  "@nx/nx-linux-x64-musl@npm:22.7.8": "5de518e71c4627d6c79aed7be304cebe6a9c8cb00b6c5971872f185a3785a078621ef12e54efdf9410d492b75ffb30751c8eba587a8109585c8f43341220cfc4",
-  "@nx/nx-win32-arm64-msvc@npm:22.7.8": "7818ecb3b9b4e3f0d9dd297f9346bdf519989cf330f882d5ec4d80367713c2f47565d7965fcd4e38e5b5cccfc09882215a1f98583e77f966966fed37b6aea1cb",
-  "@nx/nx-win32-x64-msvc@npm:22.7.8": "da4c071aa2e6379dd0b5d50d0b33c813ed15e03379d3531b817e26d99f58d6a185c313535100ed63ef8ae2b9a0cc6f1636c12fff9c66df76080dde6ad3144408",
+  "@nx/nx-darwin-arm64@npm:22.7.12": "3fac1bb023b814ba59d2b9e8eca1bfccfa3b8aa664e521bb951cc70d7d04c5d27ab47ff9ac80e1031c7a77be4c8c8968a16bfcc8fb420faf8bfd7bdf29c474c0",
+  "@nx/nx-darwin-x64@npm:22.7.12": "2f1a4883363987b2b88801614a12135dede75daab5169db799e89f03eca07a7dbf315cedd453b84b3187fc046057b4e5e314d964a357899646b289bf3f0044b5",
+  "@nx/nx-freebsd-x64@npm:22.7.12": "f4951a67bea2087516f1718a241cf18c9dd0ff64d3b59c622a0ca2116684818d60c923fb592f7dfc8065dcb8ee63ec230a991fbbd1b3fc5da1422010f66bd964",
+  "@nx/nx-linux-arm-gnueabihf@npm:22.7.12": "246f7ca87c0a126634cb06e3cdb897b036e08bfdc05f72a55d80a8f1820731dbd50b37cdceb01ca6a694e12640fc52deff73597a3194e28bd30eb0203eb289a4",
+  "@nx/nx-linux-arm64-gnu@npm:22.7.12": "f8cd4759aee34e413947fa443474f2cafa9f0d569b93f25e4137ffac03352066884ba4965d8cefd5bf30ce2e0aa6fbf8e6cc34cbb86342de39a81edf345210db",
+  "@nx/nx-linux-arm64-musl@npm:22.7.12": "680bd1d9962f0fe13a9ba9eea67d14f9129eb17cae21b6360d324c8231d3e540c935774457572e26235b21636caea913edf77d58d2ca8a4cefc93a9783fd90dd",
+  "@nx/nx-linux-x64-gnu@npm:22.7.12": "99d2a0b40053e3839ca8690b158881706afaa3df3185e37d885c36bf50f5bb1b64ba0b8a3614823c976966bf383b772787345b0a9c4b2824916b4432c585ea0a",
+  "@nx/nx-linux-x64-musl@npm:22.7.12": "0ff07a8f199078479964c9f34712460d3ed854ca7f202f76cd58ec09aec453f0badd90990d65da2d432bdabb3e9d39679f55b3bfb8fbafdca50ae759aac02a73",
+  "@nx/nx-win32-arm64-msvc@npm:22.7.12": "c8db814a3e7d0571a6f9c56d869465b8dce5c046887e0420d726144042a2ce24c400b842a67d949c359ef3a57317025ce8b42cdc315495537356449aab77433e",
+  "@nx/nx-win32-x64-msvc@npm:22.7.12": "c64017c135be8d5534afaf8df1cdb3d8812c212b644e8839df84d3dae0a08af97987c494b19295a53121554e3512670a1784866b36672f13e6cd4bb0bd33190c",
  "@unrs/resolver-binding-android-arm-eabi@npm:1.11.1": "04dd38b694c1680bfec192b499e188700398a414886a08a8a7c72815db56ac147df03d88c73ff6fff7ac3e0a01dc41978054b3622b49463e0d684c5168557fcc",
  "@unrs/resolver-binding-android-arm64@npm:1.11.1": "763626adc34dd2b4af677b5ced6493e7b2b1935351a5c9137f1c9561d11faf97b94015e6876e57e85c33ff563564314c92c0882a4780a57f2225cbbd779a695d",
  "@unrs/resolver-binding-darwin-arm64@npm:1.11.1": "03b477fdfec55dbabe488fe0962417bddaa38b028d2670053469f1d24163907b097aac15b565f6974449bee398a38d5e3e1525f2b515ce57e243149021b7aa2f",
--- a/pkgs/by-name/aw/aws-cdk-cli/package.nix
+++ b/pkgs/by-name/aw/aws-cdk-cli/package.nix
@@ -17,19 +17,19 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "aws-cdk-cli";
-  version = "2.1139.0";
+  version = "2.1142.0";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-cdk-cli";
    tag = "cdk@v${finalAttrs.version}";
-    hash = "sha256-1dZdTtZgur0R6Z1QtkVkpNvfddLX7ipj+H14vnGPdWw=";
+    hash = "sha256-6CYUcMXwP2yNsIix+2ECTX1k9nMZ3R3JeIsIjTNoYvk=";
  };

  missingHashes = ./missing-hashes.json;
  offlineCache = yarn-berry.fetchYarnBerryDeps {
    inherit (finalAttrs) src missingHashes;
-    hash = "sha256-TOKWnH/haTxj4pEpfvYU9J+HKkP2ocyawnTMJd92ROE=";
+    hash = "sha256-lTT7hO0dZxrUlmah7d9UQEIAt/STLoH0xZ3oxx2Vh5I=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ch/chipass/chromium-native-messaging-host.json
+++ b/pkgs/by-name/ch/chipass/chromium-native-messaging-host.json
@@ -0,0 +1,9 @@
+{
+    "name": "org.keepassxc.keepassxc_browser",
+    "description": "ChiPass integration with native messaging support",
+    "path": "@out@/bin/ChiPass-proxy",
+    "type": "stdio",
+    "allowed_origins": [
+        "chrome-extension://oboonakemofpalcgghocfoadofidjkkk/"
+    ]
+}
--- a/pkgs/by-name/ch/chipass/firefox-native-messaging-host.json
+++ b/pkgs/by-name/ch/chipass/firefox-native-messaging-host.json
@@ -0,0 +1,9 @@
+{
+    "name": "org.keepassxc.keepassxc_browser",
+    "description": "ChiPass integration with native messaging support",
+    "path": "@out@/bin/ChiPass-proxy",
+    "type": "stdio",
+    "allowed_extensions": [
+        "keepassxc-browser@keepassxc.org"
+    ]
+}
--- a/pkgs/by-name/ch/chipass/package.nix
+++ b/pkgs/by-name/ch/chipass/package.nix
@@ -0,0 +1,170 @@
+{
+  lib,
+  stdenv,
+  fetchFromCodeberg,
+
+  appstream,
+  asciidoctor,
+  botan3,
+  cmake,
+  libargon2,
+  libusb1,
+  libxtst,
+  minizip,
+  nix-update-script,
+  pcsclite,
+  pkg-config,
+  qrencode,
+  qt6Packages,
+  readline,
+  wrapGAppsHook3,
+  zlib,
+  zxcvbn-c,
+
+  withChiPassBrowser ? true,
+  withChiPassBrowserPasskeys ? true,
+  withChiPassFDOSecrets ? true,
+  withChiPassKeeShare ? true,
+  withChiPassNetworking ? true,
+  withChiPassSSHAgent ? true,
+  withChiPassX11 ? true,
+  withChiPassYubiKey ? true,
+
+  nixosTests,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "chipass";
+  version = "2026.09.0";
+
+  src = fetchFromCodeberg {
+    owner = "ChiPass";
+    repo = "ChiPass";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-6nA7NziEgiQolhx5cGdyZZTJ5JcKWz9WQOiJ3JiZ6UQ=";
+  };
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  env = lib.optionalAttrs stdenv.cc.isClang {
+    NIX_CFLAGS_COMPILE = toString [
+      "-Wno-old-style-cast"
+      "-Wno-error"
+      "-D__BIG_ENDIAN__=${if stdenv.hostPlatform.isBigEndian then "1" else "0"}"
+    ];
+  };
+
+  # Upstream develops against a build of PCSC from Xcode.
+  # The types are incompatible with nixpkgs pcsclite.
+  # https://github.com/NixOS/nixpkgs/issues/520227
+  postPatch = ''
+    substituteInPlace src/keys/drivers/YubiKeyInterfacePCSC.cpp \
+      --replace-fail "typedef uint32_t RETVAL;" "typedef int32_t RETVAL;"
+  '';
+
+  cmakeFlags = [
+    (lib.cmakeFeature "CHIPASS_BUILD_TYPE" "Release")
+    (lib.cmakeBool "CHIPASS_WITH_GUI_TESTS" true)
+    (lib.cmakeBool "CHIPASS_WITH_UPDATE_CHECK" false)
+    (lib.cmakeOptionType "list" "CHIPASS_DESKTOP_TYPES" (
+      lib.concatStringsSep ";" ([ "Wayland" ] ++ lib.optional withChiPassX11 "X11")
+    ))
+    (lib.cmakeBool "CHIPASS_WITH_BROWSER" withChiPassBrowser)
+    (lib.cmakeBool "CHIPASS_WITH_BROWSER_PASSKEYS" withChiPassBrowserPasskeys)
+    (lib.cmakeBool "CHIPASS_WITH_KEESHARE" withChiPassKeeShare)
+    (lib.cmakeBool "CHIPASS_WITH_NETWORKING" withChiPassNetworking)
+    (lib.cmakeBool "CHIPASS_WITH_SSHAGENT" withChiPassSSHAgent)
+    (lib.cmakeBool "CHIPASS_WITH_FDOSECRETS" withChiPassFDOSecrets)
+    (lib.cmakeBool "CHIPASS_WITH_YUBIKEY" withChiPassYubiKey)
+  ];
+
+  doCheck = true;
+  checkPhase =
+    let
+      disabledTests = lib.concatStringsSep "|" [
+        # flaky
+        "cli"
+        "gui"
+        "guipixmaps"
+        "guibrowser"
+        "guifdosecrets"
+      ];
+    in
+    ''
+      runHook preCheck
+
+      export LC_ALL="en_US.UTF-8"
+      export QT_QPA_PLATFORM=offscreen
+      export QT_PLUGIN_PATH="${qt6Packages.qtbase}/${qt6Packages.qtbase.qtPluginPrefix}"
+
+      make test ARGS+="-E '${disabledTests}' --output-on-failure"
+
+      runHook postCheck
+    '';
+
+  nativeBuildInputs = [
+    appstream
+    asciidoctor
+    cmake
+    pkg-config
+    qt6Packages.qttools
+    qt6Packages.wrapQtAppsHook
+    wrapGAppsHook3
+  ];
+
+  dontWrapGApps = true;
+  preFixup = ''
+    qtWrapperArgs+=("''${gappsWrapperArgs[@]}")
+  '';
+
+  postInstall = (
+    # See https://github.com/keepassxreboot/keepassxc/blob/cd7a53abbbb81e468efb33eb56eefc12739969b8/src/browser/NativeMessageInstaller.cpp#L317
+    # See https://github.com/keepassxreboot/keepassxc/blob/cd7a53abbbb81e468efb33eb56eefc12739969b8/utils/keepassxc-snap-helper.sh#L48-L58
+    lib.optionalString withChiPassBrowser ''
+      mkdir -p "$out/lib/mozilla/native-messaging-hosts"
+      substituteAll "${./firefox-native-messaging-host.json}" "$out/lib/mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json"
+
+      mkdir -p "$out/etc/chromium/native-messaging-hosts"
+      substituteAll "${./chromium-native-messaging-host.json}" "$out/etc/chromium/native-messaging-hosts/org.keepassxc.keepassxc_browser.json"
+    ''
+  );
+
+  buildInputs = [
+    botan3
+    libargon2
+    libusb1
+    libxtst
+    minizip
+    pcsclite
+    qrencode
+    qt6Packages.qt5compat
+    qt6Packages.qtbase
+    qt6Packages.qtsvg
+    readline
+    zlib
+    zxcvbn-c
+  ];
+
+  passthru = {
+    tests = {
+      inherit (nixosTests) chipass;
+    };
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "A cross-platform password manager for people with extremely high demands on secure personal data management";
+    longDescription = ''
+      ChiPass is a modern, secure, and open-source password manager that stores and manages your most sensitive information. You can run ChiPass on Windows, macOS, and Linux systems. ChiPass is for people with extremely high demands of secure personal data management. It saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions. For easy identification and management, user-defined titles and icons can be specified for entries. In addition, entries are sorted into customizable groups. An integrated search function allows you to use advanced patterns to easily find any entry in your database. A customizable, fast, and easy-to-use password generator utility allows you to create passwords with any combination of characters or easy to remember passphrases.
+    '';
+    homepage = "https://chipass.org";
+    changelog = "https://codeberg.org/ChiPass/ChiPass/src/tag/v${finalAttrs.version}/CHANGELOG.md";
+    license = lib.licenses.gpl2Plus;
+    mainProgram = "ChiPass";
+    maintainers = with lib.maintainers; [
+      provokateurin
+    ];
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/da/databricks-cli/package.nix
+++ b/pkgs/by-name/da/databricks-cli/package.nix
@@ -9,7 +9,7 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "databricks-cli";
-  version = "1.16.0";
+  version = "1.17.0";

  __structuredAttrs = true;

@@ -17,10 +17,10 @@ buildGoModule (finalAttrs: {
    owner = "databricks";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-zb+hKKMscCOX4yJBwLmBFln5FFZIiwvZPf/80kP21g4=";
+    hash = "sha256-HWk3vw0DT8Jsjv9fM8jcQdJUDwEjjZEAYn7EP3V/OSQ=";
  };

-  vendorHash = "sha256-v4ntZgT89NV1wzMEMuRjeLmQql+fQ+XcMkidAVsxwXE=";
+  vendorHash = "sha256-eDFlN1dql+ojOSyP7huhzzyaH9o1tvdjHD4WxP//NwA=";

  subPackages = [ "." ];

--- a/pkgs/by-name/fn/fnox/package.nix
+++ b/pkgs/by-name/fn/fnox/package.nix
@@ -5,18 +5,20 @@
  rustPlatform,
  perl,
  pkg-config,
-  testers,
  dbus,
  udev,
-  nix-update-script,
  cacert,
+  versionCheckHook,
+  nix-update-script,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
-  __structuredAttrs = true;
  pname = "fnox";
  version = "1.34.1";

+  __structuredAttrs = true;
+  __darwinAllowLocalNetworking = true;
+
  src = fetchFromGitHub {
    owner = "jdx";
    repo = "fnox";
@@ -39,10 +41,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
  nativeCheckInputs = [ cacert ];
  env.SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

-  passthru = {
-    tests.version = testers.testVersion { package = finalAttrs.finalPackage; };
-    updateScript = nix-update-script { };
-  };
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };

  checkFlags = [
    # requires a D-Bus session unavailable in the sandbox
--- a/pkgs/by-name/fo/forgejo-mcp/package.nix
+++ b/pkgs/by-name/fo/forgejo-mcp/package.nix
@@ -8,17 +8,17 @@

 buildGoModule (finalAttrs: {
  pname = "forgejo-mcp";
-  version = "2.33.0";
+  version = "3.0.1";

  # Plain git fetch: upstream's Forgejo instance has source-archive
  # downloads disabled, so fetchFromForgejo (tarball-based) cannot be used.
  src = fetchgit {
    url = "https://git.b4mad.industries/agentic-forges/forgejo-mcp.git";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-yC2qBZLC0ArAwVULzFo5A7LlBRqLEhCZsFCW7o+7YSU=";
+    hash = "sha256-Cq99Bj9I9oXM00fL9IBGq/EKj7Jv/fODffohR8APeik=";
  };

-  vendorHash = "sha256-WoeTy80iC3j9LoekCF7f0yZ9GIQyl6Gx+KGvHABW7OM=";
+  vendorHash = "sha256-Za1lwQQr+qeMIokRLSn2ywRg+5GxMS4KEg+99P1YHy0=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/go/google-lighthouse/package.nix
+++ b/pkgs/by-name/go/google-lighthouse/package.nix
@@ -13,18 +13,18 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "google-lighthouse";
-  version = "13.4.1";
+  version = "13.5.0";

  src = fetchFromGitHub {
    owner = "GoogleChrome";
    repo = "lighthouse";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+6UVMZTJbTJGFZaXA9yqIByrvZ8oiLKIK+p/24/41UU=";
+    hash = "sha256-mSh460ZyaQqgVzorryZivig5JTH9DKf8H/N8vk9rGeg=";
  };

  yarnOfflineCache = fetchYarnDeps {
    yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-pHXPurgGRoVI1WDSywAFWOSSuAhH0iFGDl2BPy1X0HI=";
+    hash = "sha256-7rIlDrP8kZB/jnQaaNPunxkEeZsW6Y1usRKM9sM7sC0=";
  };

  yarnBuildScript = "build-report";
--- a/pkgs/by-name/gp/gpm/package.nix
+++ b/pkgs/by-name/gp/gpm/package.nix
@@ -16,19 +16,18 @@

 stdenv.mkDerivation {
  pname = "gpm";
-  version = "unstable-2020-06-17";
+  version = "1.20.7-unstable-2020-06-17";
+
+  strictDeps = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "telmich";
    repo = "gpm";
    rev = "e82d1a653ca94aa4ed12441424da6ce780b1e530";
-    sha256 = "0ndn6dwc87slvyqp2cnbb02a6hkjwb6zjhs6viysykv06hq7ihy6";
+    hash = "sha256-xsN4MDRgT6993EZD+c3ickKjBFjLMnGx31QfxHgztlk=";
  };

-  postPatch = ''
-    substituteInPlace src/prog/gpm-root.y --replace __sigemptyset sigemptyset
-  '';
-
  nativeBuildInputs = [
    automake
    autoconf
@@ -45,7 +44,7 @@ stdenv.mkDerivation {
    (fetchpatch {
      # pull request telmich/gpm#42
      url = "https://github.com/kaction/gpm/commit/217b4fe4c9b62298a4e9a54c1f07e3b52b013a09.patch";
-      sha256 = "1f74h12iph4z1dldbxk9imcq11805c3ai2xhbsqvx8jpjrcfp19q";
+      hash = "sha256-OIXrWJZXor6xXrCLqAYrAIWAWY1p9tVoC5/AG0WA5Lg=";
    })

    # Pull fix pending upstream inclusion to fix parallel installation:
@@ -53,7 +52,7 @@ stdenv.mkDerivation {
    (fetchpatch {
      name = "parallel-install.patch";
      url = "https://github.com/telmich/gpm/commit/a88fb82a7afe96e872bb31c554e9ad5888f5a451.patch";
-      sha256 = "0g1jhz9bjw7vqjv922xkhs8xkjxdqh11nj38jj3c8nv5lcil76nx";
+      hash = "sha256-3ZpDI6NlW8SGlGhIGwLErcvZkYazC5G2xPtwudKHMjw=";
    })
  ];
  preConfigure = ''
--- a/pkgs/by-name/ho/home-assistant-matter-hub/package.nix
+++ b/pkgs/by-name/ho/home-assistant-matter-hub/package.nix
@@ -14,13 +14,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "home-assistant-matter-hub";
-  version = "2.0.56";
+  version = "2.0.57";

  src = fetchFromGitHub {
    owner = "RiDDiX";
    repo = "home-assistant-matter-hub";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ht6SPLbWIqSF/Ahc4y2Wpbm4DcbZ79PobqaFlncmdZo=";
+    hash = "sha256-3Pi069urd/FAT0eWz2tpcx/JbP/90iTcoswdAZt1viQ=";
  };

  # The bundled cli.js imports transitive dependencies (e.g. @noble/curves)
@@ -38,7 +38,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
      ;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-1FR6pJ28ryFxh1q7W8/JhBoyLkXiw0vNxqwRU1R+lmw=";
+    hash = "sha256-h4oQ01Bmj9bbm2YY7t/lJukIgJ99YQwRqyERHZlBXj4=";
  };

  __structuredAttrs = true;
--- a/pkgs/by-name/ia/iamb/0001-increase-recursion-limit-to-fix-matrix-sdk-sqlite.patch
+++ b/pkgs/by-name/ia/iamb/0001-increase-recursion-limit-to-fix-matrix-sdk-sqlite.patch
@@ -1,25 +0,0 @@
-From 979dcc049c1d8b8b537ddf42133dba38ef17ee7f Mon Sep 17 00:00:00 2001
-From: azban <me@azban.net>
-Date: Sat, 21 Mar 2026 11:23:30 -0600
-Subject: [PATCH] increase recursion limit to fix matrix-sdk-sqlite
-
-This is a temporary fix for build errors in the matrix-sdk-sqlite dependency. A more durable fix should be checked for in https://github.com/matrix-org/matrix-rust-sdk/issues/6254.
---
- src/main.rs | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/src/main.rs b/src/main.rs
-index 0a316c7..794f838 100644
--- a/src/main.rs
-+++ b/src/main.rs
-@@ -15,6 +15,7 @@
- #![allow(clippy::needless_return)]
- #![allow(clippy::result_large_err)]
- #![allow(clippy::bool_assert_comparison)]
-+#![recursion_limit = "256"]
- use std::collections::VecDeque;
- use std::convert::TryFrom;
- use std::fmt::Display;
-- 
-2.51.2
-
--- a/pkgs/by-name/ia/iamb/package.nix
+++ b/pkgs/by-name/ia/iamb/package.nix
@@ -3,27 +3,25 @@
  rustPlatform,
  fetchFromGitHub,
  installShellFiles,
-  writableTmpDirAsHomeHook,
  versionCheckHook,
  nix-update-script,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "iamb";
-  version = "0.0.11";
+  version = "0.0.12";
+
+  __structuredAttrs = true;
+  strictDeps = true;

  src = fetchFromGitHub {
    owner = "ulyssa";
    repo = "iamb";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-nvEOtV1Y5K9E1Lj+bPnQ6k1AneDM9OT3RbV3Urm/1Qs=";
+    hash = "sha256-66DN5tIqR5ppTVDqo3xoG3gl6rZrnikLsls/hqXAhb8=";
  };

-  patches = [
-    ./0001-increase-recursion-limit-to-fix-matrix-sdk-sqlite.patch
-  ];
-
-  cargoHash = "sha256-uWYNFNoCiqw6gYuHZWmZmZVs7lKNvhzjwEyxgcbvv+8=";
+  cargoHash = "sha256-gtkloBKCFdKskKmHw0YWX/x13I/ZyUHycm/7ZrRQCBI=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/ke/keybase-gui/package.nix
+++ b/pkgs/by-name/ke/keybase-gui/package.nix
@@ -41,18 +41,18 @@
 }:

 let
-  versionSuffix = "20250428154451.19f9cfeddb";
+  versionSuffix = "20260603142455.f60f2ff97e";
 in

 stdenv.mkDerivation (finalAttrs: {
  pname = "keybase-gui";
-  version = "6.5.1"; # Find latest version and versionSuffix from https://prerelease.keybase.io/deb/dists/stable/main/binary-amd64/Packages
+  version = "6.6.3"; # Find latest version and versionSuffix from https://prerelease.keybase.io/deb/dists/stable/main/binary-amd64/Packages

  src = fetchurl {
    url = "https://s3.amazonaws.com/prerelease.keybase.io/linux_binaries/deb/keybase_${
      finalAttrs.version + "-" + versionSuffix
    }_amd64.deb";
-    hash = "sha256-PCKi1lavGwLbCoMTMG4h6PJTIzwRAu542eYqDDKzU4Y=";
+    hash = "sha256-4OqjEc2kLJpJ7FC7WR0DAfsmsrvoKHrm4RtBdGpkti4=";
  };

  strictDeps = true;
@@ -145,7 +145,7 @@ stdenv.mkDerivation (finalAttrs: {
    chmod +x $out/bin/keybase-gui

    substituteInPlace $out/share/applications/keybase.desktop \
-      --replace run_keybase $out/bin/keybase-gui
+      --replace-fail run_keybase $out/bin/keybase-gui
  '';

  meta = {
@@ -163,8 +163,5 @@ stdenv.mkDerivation (finalAttrs: {
    ];
    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
    license = lib.licenses.bsd3;
-    knownVulnerabilities = [
-      "Uses Electron 28, EOL on 05 Dec 2023. Has many known CVEs"
-    ];
  };
 })
--- a/pkgs/by-name/ke/keybase/package.nix
+++ b/pkgs/by-name/ke/keybase/package.nix
@@ -8,7 +8,7 @@

 buildGoModule (finalAttrs: {
  pname = "keybase";
-  version = "6.5.1";
+  version = "6.6.3";

  modRoot = "go";
  subPackages = [
@@ -22,9 +22,9 @@ buildGoModule (finalAttrs: {
    owner = "keybase";
    repo = "client";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-B3vedsxQM4FDZVpkMKR67DF7FtaTPhGIJ1e2lViKYzg=";
+    hash = "sha256-TRDJINzuObgn6JWZ9CoHWxKO23I9sceDlB4MmnqlOvw=";
  };
-  vendorHash = "sha256-uw1tiaYoMpMXCYt5bPL5OBbK09PJmAQYQDrDwuPShxU=";
+  vendorHash = "sha256-OGavtp0vYqK0D4P+ypVyEF8GsvDvfIDQXsjlKmpKJJ4=";

  strictDeps = true;
  structuredAttrs = true;
--- a/pkgs/by-name/la/ladybird/build-information-source-archive.patch
+++ b/pkgs/by-name/la/ladybird/build-information-source-archive.patch
@@ -0,0 +1,17 @@
+Source archives have no Git index to enumerate. Write an empty depfile in
+that case; CMake still tracks the generator and build configuration itself.
+Keep Git dependency tracking unchanged for checkouts, including worktrees.
+
+--- a/Meta/Generators/generate-build-information.py
+++ b/Meta/Generators/generate-build-information.py
+@@ -146,6 +146,10 @@
+ 
+ 
+ def write_depfile(source, output, target):
+    if not (source / ".git").exists():
+        output.write_text(f"{escape_depfile_path(target)}:\n")
+        return
+
+     tracked_files = subprocess.check_output(["git", "-C", str(source), "ls-files", "-z"]).split(b"\0")
+ 
+     dependencies = (
--- a/pkgs/by-name/la/ladybird/darwin-build.patch
+++ b/pkgs/by-name/la/ladybird/darwin-build.patch
@@ -0,0 +1,71 @@
+Link LibGfx's direct CoreText calls explicitly and use Nix dependencies
+instead of searching the host's Homebrew installation.
+
+Defer bundle signing until postFixup, after Nix has finished modifying it.
+Provide a default CA bundle to both curl and the RequestServer sandbox
+when no certificate file was supplied explicitly.
+
+--- a/Libraries/LibGfx/CMakeLists.txt
+++ b/Libraries/LibGfx/CMakeLists.txt
+@@ -97,6 +97,7 @@
+ endif()
+
+ if (APPLE)
+    target_link_libraries(LibGfx PRIVATE "-framework CoreText")
+     target_link_libraries(LibCore PUBLIC "-framework Metal")
+     target_link_libraries(LibCore PUBLIC "-framework Accelerate")
+ endif()
+--- a/Meta/CMake/compile_options.cmake
+++ b/Meta/CMake/compile_options.cmake
+@@ -210,7 +210,6 @@
+ endif()
+
+ if (APPLE)
+-    list(APPEND CMAKE_PREFIX_PATH /opt/homebrew)
+     add_cxx_link_options(LINKER:-dead_strip)
+ endif()
+
+--- a/UI/CMakeLists.txt
+++ b/UI/CMakeLists.txt
+@@ -32,10 +32,6 @@
+         # This makes the bundle in the build directory *NOT* relocatable
+         add_custom_command(TARGET ${target_name} POST_BUILD
+             COMMAND "${CMAKE_COMMAND}" -E create_symlink "${CMAKE_LIBRARY_OUTPUT_DIRECTORY}" "${bundle_dir}/Contents/lib"
+-        )
+-
+-        add_custom_command(TARGET ${target_name} POST_BUILD
+-            COMMAND codesign -s - -v -f --entitlements "${LADYBIRD_ENTITLEMENTS_FILE}" "${bundle_dir}"
+         )
+     endif()
+
+@@ -111,17 +107,6 @@
+ if (APPLE)
+     set_helper_process_properties(WebDriver)
+
+-    # WebDriver links into the bundle after ladybird has signed it — and that leaves the seal stale until something
+-    # later relinks ladybird. Sign once more with everything in place.
+-    set(bundle_signed_stamp "${CMAKE_CURRENT_BINARY_DIR}/ladybird_bundle_signed.stamp")
+-    add_custom_command(
+-        OUTPUT "${bundle_signed_stamp}"
+-        COMMAND codesign -s - -v -f --entitlements "${LADYBIRD_ENTITLEMENTS_FILE}" "$<TARGET_BUNDLE_DIR:ladybird>"
+-        COMMAND "${CMAKE_COMMAND}" -E touch "${bundle_signed_stamp}"
+-        DEPENDS ladybird WebDriver "${LADYBIRD_ENTITLEMENTS_FILE}"
+-        VERBATIM
+-    )
+-    add_custom_target(sign_ladybird_bundle ALL DEPENDS "${bundle_signed_stamp}")
+ endif()
+
+ if(NOT CMAKE_SKIP_INSTALL_RULES)
+--- a/Services/RequestServer/main.cpp
+++ b/Services/RequestServer/main.cpp
+@@ -69,6 +69,10 @@
+     if (wait_for_debugger)
+         Core::Process::wait_for_debugger_and_break();
+
+    // Pass the default CA bundle through the sandbox allowlist as well as to curl.
+    if (certificates.is_empty())
+        certificates.append("@NIX_CA_BUNDLE@");
+
+     // FIXME: Update RequestServer to support multiple custom root certificates.
+     if (!certificates.is_empty())
+         RequestServer::set_default_certificate_path(certificates.first());
--- a/pkgs/by-name/la/ladybird/package.nix
+++ b/pkgs/by-name/la/ladybird/package.nix
@@ -1,30 +1,41 @@
 {
  lib,
  stdenv,
+  apple-sdk_26,
+  darwinMinVersionHook,
+  cacert,
  fetchFromGitHub,
-  fetchpatch,
-  unicode-emoji,
-  unicode-character-database,
-  unicode-idna,
-  publicsuffix-list,
+  fetchzip,
+  pdfjs,
  chromium-hsts-preload-list,
  cmake,
+  gitMinimal,
  ninja,
  pkg-config,
  curlFull, # Websocket support
  libavif,
  angle, # libEGL
-  libjxl,
+  brotli,
+  cpptrace,
+  glib,
+  glslang,
+  harfbuzz,
+  libdrm,
+  libGL,
+  libjpeg_turbo,
+  libpng,
+  libpsl,
+  libxml2,
  libedit,
  libpulseaudio,
  libwebp,
-  libxcrypt,
  mimalloc,
  openssl,
  perl,
  python3,
  qt6Packages,
  woff2,
+  wuffs,
  cargo,
  fast-float,
  ffmpeg,
@@ -32,6 +43,8 @@
  fontconfig,
  rustPlatform,
  rustc,
+  rcodesign,
+  makeWrapper,
  simdutf,
  skia,
  nixosTests,
@@ -42,24 +55,52 @@
  sdl3,
  icu78,
  simdjson,
+  sqlite,
+  vulkan-headers,
+  vulkan-loader,
+  vulkan-memory-allocator,
+  zlib,
 }:

+let
+  # The integration patch shipped by Ladybird targets this PDF.js version.
+  pdfjsForLadybird = pdfjs.overrideAttrs (
+    final: _prev: {
+      version = "5.6.205";
+      src = fetchzip {
+        url = "https://github.com/mozilla/pdf.js/releases/download/v${final.version}/pdfjs-${final.version}-dist.zip";
+        hash = "sha256-JMmxoT68PNJ/MmlMwVNYcHerorklLv5YY6C55xjn73w=";
+        stripRoot = false;
+      };
+    }
+  );
+in
 stdenv.mkDerivation (finalAttrs: {
  pname = "ladybird";
-  version = "0-unstable-2026-06-05";
+  version = "0-unstable-2026-09-18";

  src = fetchFromGitHub {
    owner = "LadybirdBrowser";
    repo = "ladybird";
-    rev = "02b205361dd239e134f434e484b609d1fa5f1938";
-    hash = "sha256-+CVJjrL1kqT2A7r89F+riiHpMa39rcggqG9SByidUY4=";
+    rev = "b90af890b56cbd51c452d929fe71abcb8adaa36f";
+    hash = "sha256-CfSC0zEn1VUZaoBHi4a91n/QLTdpapygVf9c/v44X9E=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-n0ACVH8NXwe7SIaGFoJ20WIGGR3XjcuLTwPSKGJpT5s=";
+    hash = "sha256-UshQ0YBl5TLbrEanqsNVeXgONYEux2bgBhI4ISby0Qc=";
  };

+  patches = [
+    # https://github.com/LadybirdBrowser/ladybird/issues/11772
+    ./build-information-source-archive.patch
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # https://github.com/LadybirdBrowser/ladybird/issues/11875
+    # https://github.com/LadybirdBrowser/ladybird/issues/11891
+    ./darwin-build.patch
+  ];
+
  postPatch = ''
    sed -i '/iconutil/d' UI/CMakeLists.txt

@@ -67,28 +108,28 @@ stdenv.mkDerivation (finalAttrs: {
      's/find_package\(ICU 78\.[0-9]+ EXACT REQUIRED COMPONENTS data i18n uc\)/find_package(ICU ${icu78.version} EXACT REQUIRED COMPONENTS data i18n uc)/ or die "ICU dependency not found\n"' \
      Meta/CMake/check_for_dependencies.cmake

+    # Install the same PDF viewer assets and integration patch as the vcpkg build.
+    cp -r ${pdfjsForLadybird}/share/pdf.js pdfjs
+    chmod -R u+w pdfjs
+    patch -d pdfjs -p1 < Meta/CMake/vcpkg/overlay-ports/pdfjs/0001-ladybird-embed.patch
+    substituteInPlace UI/cmake/ResourceFiles.cmake \
+      --replace-fail 'if (NOT "''${VCPKG_INSTALLED_DIR}" STREQUAL "" AND NOT "''${VCPKG_TARGET_TRIPLET}" STREQUAL "")' 'if (TRUE)' \
+      --replace-fail '"''${VCPKG_INSTALLED_DIR}/''${VCPKG_TARGET_TRIPLET}/share/pdfjs"' '"''${LADYBIRD_SOURCE_DIR}/pdfjs"'
+
    # Don't set absolute paths in RPATH
    substituteInPlace Meta/CMake/lagom_install_options.cmake \
      --replace-fail "\''${CMAKE_INSTALL_BINDIR}" "bin" \
      --replace-fail "\''${CMAKE_INSTALL_LIBDIR}" "lib"
+  ''
+  + lib.optionalString stdenv.hostPlatform.isDarwin ''
+    substituteInPlace Services/RequestServer/main.cpp \
+      --replace-fail '@NIX_CA_BUNDLE@' '${cacert}/etc/ssl/certs/ca-bundle.crt'
  '';

  preConfigure = ''
-    # Setup caches for LibUnicode, LibTLS and LibGfx
-    # Note that the versions of the input data packages must match the
-    # expected version in the package's CMake.
-
+    # HSTS preload data is the only remaining downloaded data cache.
    mkdir -p build/Caches
-
-    cp -r ${unicode-character-database}/share/unicode build/Caches/UCD
-    chmod +w build/Caches/UCD
-    cp ${unicode-emoji}/share/unicode/emoji/emoji-test.txt build/Caches/UCD
-    cp ${unicode-idna}/share/unicode/idna/IdnaMappingTable.txt build/Caches/UCD
-    echo -n ${unicode-character-database.version} > build/Caches/UCD/version.txt
-    chmod -w build/Caches/UCD
-
-    mkdir build/Caches/PublicSuffix
-    cp ${publicsuffix-list}/share/publicsuffix/public_suffix_list.dat build/Caches/PublicSuffix
+    cmakeFlagsArray+=("-DLADYBIRD_CACHE_DIR=$PWD/build/Caches")

    mkdir build/Caches/HSTSPreload
    cp ${chromium-hsts-preload-list}/share/chromium-hsts-preload-list/transport_security_state_static.json build/Caches/HSTSPreload
@@ -97,6 +138,7 @@ stdenv.mkDerivation (finalAttrs: {
  nativeBuildInputs = [
    cargo
    cmake
+    gitMinimal
    ninja
    perl
    pkg-config
@@ -104,57 +146,93 @@ stdenv.mkDerivation (finalAttrs: {
    rustPlatform.cargoSetupHook
    rustc
    qt6Packages.wrapQtAppsHook
-    libtommath
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ glslang ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    makeWrapper
+    rcodesign
  ];

  buildInputs = [
    curlFull
+    brotli
+    cpptrace
    fast-float
    ffmpeg
    fmt
    fontconfig
+    harfbuzz
    libavif
    angle # libEGL
-    libjxl
+    libGL
+    libjpeg_turbo
+    libpng
+    libpsl
+    libtommath
+    libxml2
    libedit
    libwebp
-    libxcrypt
-    mimalloc
+    (mimalloc.overrideAttrs {
+      # Ladybird uses heap APIs removed in mimalloc 3.
+      version = "2.2.7";
+      src = fetchFromGitHub {
+        owner = "microsoft";
+        repo = "mimalloc";
+        tag = "v2.2.7";
+        hash = "sha256-z9qMOTcGkURblZChXDGfQ58hrql52lG6EE1NQmxxuj0=";
+      };
+    })
    openssl
    qt6Packages.qtbase
-    qt6Packages.qtmultimedia
+    qt6Packages.qtpositioning
    sdl3
    simdutf
    (skia.overrideAttrs (prev: {
+      # Ladybird also uses Skia's color management API directly.
      gnFlags = prev.gnFlags ++ [
-        # https://github.com/LadybirdBrowser/ladybird/commit/af3d46dc06829dad65309306be5ea6fbc6a587ec
-        # https://github.com/LadybirdBrowser/ladybird/commit/4d7b7178f9d50fff97101ea18277ebc9b60e2c7c
-        # Remove when/if this gets upstreamed in skia.
-        "extra_cflags+=[\"-DSKCMS_API=[[gnu::visibility(\\\"default\\\")]]\"]"
-      ];
-      # Ladybird depends on the vcpkg-packaged version of skia,
-      # which includes this patch that exposes deprecated interfaces.
-      patches = prev.patches or [ ] ++ [
-        (fetchpatch {
-          url = "https://github.com/microsoft/vcpkg/raw/64e1fbee7d9f40eab5d112aaff648c4dcffe9e47/ports/skia/skpath-enable-edit-methods.patch";
-          hash = "sha256-r5+HqSjACINn8igXqBANQsq0K+fn+Ut8L2VRs40FkTM=";
-        })
+        "extra_cflags+=[\"-DSKCMS_DLL\"]"
      ];
    }))
+    (wuffs.overrideAttrs (prev: {
+      # Ladybird includes the stable 0.3 single-file library.
+      version = "0.3.4";
+      vendorHash = "sha256-CRzsGHE3K/WWPX0A3B1CvvEdADlxdIhaT5fOtaA3LPo=";
+      src = fetchFromGitHub {
+        owner = "google";
+        repo = "wuffs";
+        tag = "v0.3.4";
+        hash = "sha256-XiaHus+bZ4jAk2zwinzz7VzyThCNlx36Auqyw2OH5rM=";
+      };
+      postInstall =
+        lib.replaceStrings
+          [ "release/c/wuffs-unsupported-snapshot.c" "wuffs-v0.4.c" ]
+          [ "release/c/wuffs-v0.3.c" "wuffs-v0.3.c" ]
+          prev.postInstall;
+    }))
    woff2
    icu78
    simdjson
+    sqlite
+    zlib
  ]
  ++ lib.optionals stdenv.hostPlatform.isLinux [
    libpulseaudio.dev
+    glib
+    libdrm
    qt6Packages.qtwayland
+    vulkan-headers
+    vulkan-loader
+    vulkan-memory-allocator
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    apple-sdk_26
+    (darwinMinVersionHook "14.0")
  ];

  cmakeFlags = [
    # Takes an enormous amount of resources, even with mold
    (lib.cmakeBool "ENABLE_LTO_FOR_RELEASE" false)
    # Disable network operations
-    "-DLADYBIRD_CACHE_DIR=Caches"
    "-DENABLE_NETWORK_DOWNLOADS=OFF"
    # Ladybird requires icu 78, but without this flag the default icu
    # from other dependencies gets picked up instead.
@@ -169,11 +247,19 @@ stdenv.mkDerivation (finalAttrs: {
  # ld: [...]/OESVertexArrayObject.cpp.o: undefined reference to symbol 'glIsVertexArrayOES'
  # ld: [...]/libGL.so.1: error adding symbols: DSO missing from command line
  # https://github.com/LadybirdBrowser/ladybird/issues/371#issuecomment-2616415434
-  env.NIX_LDFLAGS = "-lGL -lfontconfig";
+  env.NIX_LDFLAGS = lib.optionalString stdenv.hostPlatform.isLinux "-lGL " + "-lfontconfig";

  postInstall = lib.optionalString stdenv.hostPlatform.isDarwin ''
    mkdir -p $out/Applications $out/bin
    mv $out/bundle/Ladybird.app $out/Applications
+    makeWrapper "$out/Applications/Ladybird.app/Contents/MacOS/Ladybird" "$out/bin/Ladybird"
+  '';
+
+  # Sign the complete bundle after stripping and other fixups, preserving entitlements.
+  postFixup = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    rcodesign sign \
+      --entitlements-xml-file ${finalAttrs.src}/Meta/Entitlements.plist \
+      "$out/Applications/Ladybird.app"
  '';

  # Only Ladybird and WebContent need wrapped, if Qt is enabled.
@@ -219,9 +305,5 @@ stdenv.mkDerivation (finalAttrs: {
      "aarch64-darwin"
    ];
    mainProgram = "Ladybird";
-    broken = stdenv.hostPlatform.isDarwin;
-    knownVulnerabilities = [
-      "CVE-2026-58592"
-    ];
  };
 })
--- a/pkgs/by-name/la/lazynmap/package.nix
+++ b/pkgs/by-name/la/lazynmap/package.nix
@@ -0,0 +1,40 @@
+{
+  lib,
+  fetchFromGitHub,
+  makeWrapper,
+  nix-update-script,
+  nmap,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "lazynmap";
+  version = "0.1.3";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "ruiiiijiiiiang";
+    repo = "lazynmap";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-gMD3t3lh2c9+l1ZhtWC+RJccLeMrcUpMKIEw5gD9phY=";
+  };
+
+  cargoHash = "sha256-7MDMwkswqk7L8C+Rz3J8G/lygUCbAOf/sSN95OQuB3o=";
+
+  nativeBuildInputs = [ makeWrapper ];
+
+  postFixup = ''
+    wrapProgram $out/bin/lazynmap --prefix PATH : ${lib.makeBinPath [ nmap ]}
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool to build complex nmap commands with a TUI";
+    homepage = "https://github.com/ruiiiijiiiiang/lazynmap";
+    changelog = "https://github.com/ruiiiijiiiiang/lazynmap/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "lazynmap";
+  };
+})
--- a/pkgs/by-name/li/libnvidia-container/0003-nvc-fix-struct-declaration.patch
+++ b/pkgs/by-name/li/libnvidia-container/0003-nvc-fix-struct-declaration.patch
@@ -1,23 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Moritz Sanft <58110325+msanft@users.noreply.github.com>
-Date: Fri, 20 Dec 2024 16:38:55 +0100
-Subject: [PATCH] nvc: fix struct declaration
-
---
- src/nvcgo.c | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
-diff --git a/src/nvcgo.c b/src/nvcgo.c
-index 2e090c9bef83e165dfb722ab27e3287407466173..643504cd485fbe4a89d5959a1adfb69ff6748576 100644
--- a/src/nvcgo.c
-+++ b/src/nvcgo.c
-@@ -33,7 +33,8 @@
- void nvcgo_program_1(struct svc_req *, register SVCXPRT *);
- 
- static struct nvcgo_ext {
-        struct nvcgo;
-+        struct rpc rpc;
-+        struct libnvcgo api;
-         bool initialized;
-         void *dl_handle;
- } global_nvcgo_context;
--- a/pkgs/by-name/li/libnvidia-container/package.nix
+++ b/pkgs/by-name/li/libnvidia-container/package.nix
@@ -55,9 +55,6 @@ stdenv.mkDerivation (finalAttrs: {
    (replaceVars ./0002-nvc-nvidia-docker-compatible-binary-lookups.patch {
      inherit (addDriverRunpath) driverLink;
    })
-
-    # fix bogus struct declaration
-    ./0003-nvc-fix-struct-declaration.patch
  ];

  postPatch = ''
@@ -117,7 +114,10 @@ stdenv.mkDerivation (finalAttrs: {
  '';

  env = {
-    NIX_CFLAGS_COMPILE = toString [ "-I${lib.getInclude libtirpc}/include/tirpc" ];
+    NIX_CFLAGS_COMPILE = toString [
+      "-I${lib.getInclude libtirpc}/include/tirpc"
+      "-DWITH_TIRPC"
+    ];
    CGO_ENABLED = "1"; # Needed for cross-compilation
    GOFLAGS = "-trimpath"; # Don't include paths to Go stdlib to resulting binary
    inherit (go) GOARCH GOOS;
@@ -145,10 +145,8 @@ stdenv.mkDerivation (finalAttrs: {
  makeFlags = [
    "WITH_LIBELF=yes"
    "prefix=$(out)"
-    # we can't use the WITH_TIRPC=yes flag that exists in the Makefile for the
-    # same reason we patch out the static library use of libtirpc so we set the
-    # define in CFLAGS
-    "CFLAGS=-DWITH_TIRPC"
+    # We can't use WITH_TIRPC=yes because we don't build static libtirpc.
+    # NIX_CFLAGS_COMPILE sets the required define instead.
  ];

  postInstall =
--- a/pkgs/by-name/nv/nvidia-container-toolkit/package.nix
+++ b/pkgs/by-name/nv/nvidia-container-toolkit/package.nix
@@ -2,25 +2,23 @@
  lib,
  glibc,
  fetchFromGitHub,
-  makeWrapper,
  buildGoModule,
  autoAddDriverRunpath,
 }:

 let
-  # From https://gitlab.com/nvidia/container-toolkit/container-toolkit/-/blob/03cbf9c6cd26c75afef8a2dd68e0306aace80401/Makefile#L54
+  # From https://github.com/NVIDIA/nvidia-container-toolkit/blob/03cbf9c6cd26c75afef8a2dd68e0306aace80401/Makefile#L54
  cliVersionPackage = "github.com/NVIDIA/nvidia-container-toolkit/internal/info";
 in
 buildGoModule (finalAttrs: {
  pname = "nvidia-container-toolkit";
-  version = "1.19.1";
+  version = "1.20.1";

  src = fetchFromGitHub {
    owner = "NVIDIA";
    repo = "nvidia-container-toolkit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0ivgJA5JY/17FIoOrOvUF7NjMMu7aXfh39sMQcabCm8=";
-
+    hash = "sha256-DGu2T9RU4D9y7EfGe/7NxHUzV5b672ql1fdqXf185Dk=";
  };

  outputs = [
@@ -59,19 +57,16 @@ buildGoModule (finalAttrs: {
  ];

  # Based on upstream's Makefile:
-  # https://gitlab.com/nvidia/container-toolkit/container-toolkit/-/blob/03cbf9c6cd26c75afef8a2dd68e0306aace80401/Makefile#L64
+  # https://github.com/NVIDIA/nvidia-container-toolkit/blob/03cbf9c6cd26c75afef8a2dd68e0306aace80401/Makefile#L64
  ldflags = [
-    "-extldflags=-Wl,-z,lazy" # May be redunandant, cf. `man ld`: "Lazy binding is the default".
+    "-extldflags=-Wl,-z,lazy" # required with the incomplete NVML stub library.
    "-s" # "disable symbol table"
-
-    # "-X name=value"
    "-X ${cliVersionPackage}.version=${finalAttrs.version}"
    "-X ${cliVersionPackage}.gitCommit=${finalAttrs.src.rev}"
  ];

  nativeBuildInputs = [
    autoAddDriverRunpath
-    makeWrapper
  ];

  checkFlags =
@@ -82,7 +77,7 @@ buildGoModule (finalAttrs: {
        "TestDuplicateHook"
      ];
    in
-    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
+    [ "-skip=^(${lib.concatStringsSep "|" skippedTests})$" ];

  postInstall = ''
    mkdir -p $tools/bin
@@ -90,7 +85,7 @@ buildGoModule (finalAttrs: {
  '';

  meta = {
-    homepage = "https://gitlab.com/nvidia/container-toolkit/container-toolkit";
+    homepage = "https://github.com/NVIDIA/nvidia-container-toolkit";
    description = "NVIDIA Container Toolkit";
    mainProgram = "nvidia-ctk";
    license = lib.licenses.asl20;
--- a/pkgs/by-name/nx/nxc-rs/package.nix
+++ b/pkgs/by-name/nx/nxc-rs/package.nix
@@ -0,0 +1,67 @@
+{
+  lib,
+  fetchFromGitHub,
+  krb5,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  sqlite,
+  versionCheckHook,
+  zlib,
+  zstd,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "nxc-rs";
+  version = "0.4.8";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "thrive-spectrexq";
+    repo = "nxc-rs";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-h0OUv5CrGomXv9Yf4MkSFCOOl4YZ0Yy62mTkrqNUa8c=";
+  };
+
+  cargoHash = "sha256-HKQCs1feFE1stHf3fiNAu8eZLd1WcWw6GnnbrDv+al4=";
+
+  nativeBuildInputs = [
+    krb5
+    pkg-config
+    rustPlatform.bindgenHook
+  ];
+
+  buildInputs = [
+    krb5
+    openssl
+    sqlite
+    zlib
+    zstd
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  env = {
+    LIBSQLITE3_SYS_USE_PKG_CONFIG = true;
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  checkFlagsArray = [
+    # Test requires raw socket/packet capture
+    "--skip=providers::tests::test_provider_debug_redacts_keys"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Network Execution Toolkit";
+    homepage = "https://github.com/thrive-spectrexq/nxc-rs";
+    changelog = "https://github.com/thrive-spectrexq/nxc-rs/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.bsd2;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "nxc";
+  };
+})
--- a/pkgs/by-name/pd/pdfjs/package.nix
+++ b/pkgs/by-name/pd/pdfjs/package.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchzip,
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "pdfjs";
+  version = "6.3.289";
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchzip {
+    url = "https://github.com/mozilla/pdf.js/releases/download/v${finalAttrs.version}/pdfjs-${finalAttrs.version}-dist.zip";
+    hash = "sha256-v8LoUEOgG8t1Al4vpKrXZ3D4HEDXd4bqRUFqUbN63qk=";
+    stripRoot = false;
+  };
+
+  dontBuild = true;
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out/share/pdf.js
+    cp -r build web LICENSE $out/share/pdf.js/
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "JavaScript PDF reader and viewer";
+    homepage = "https://mozilla.github.io/pdf.js/";
+    sourceProvenance = [ lib.sourceTypes.binaryBytecode ];
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ schembriaiden ];
+    platforms = lib.platforms.all;
+  };
+})
--- a/pkgs/by-name/pe/perplexity-mcp/package.nix
+++ b/pkgs/by-name/pe/perplexity-mcp/package.nix
@@ -7,16 +7,16 @@

 buildNpmPackage (finalAttrs: {
  pname = "perplexity-mcp";
-  version = "0-unstable-2026-07-30";
+  version = "0-unstable-2026-08-27";

  src = fetchFromGitHub {
    owner = "perplexityai";
    repo = "modelcontextprotocol";
-    rev = "df5e29a5a17c694b5de144c7a3ac56d3377bc079";
-    hash = "sha256-U+nrAYQdENZ9Aw6H7/rU0cXXUj0+35Srj8wwgM7AcnE=";
+    rev = "c73c8561bbc2d9eb666334a53c311b50f4f4cf76";
+    hash = "sha256-zOYRSTK5N79l3jAEnPMuBrYDMyD5zm0QKEopqwlV7/E=";
  };

-  npmDepsHash = "sha256-GHdBn7PA7+eV3+3sUX18f2dawK79X/o68IqzBv6SB0I=";
+  npmDepsHash = "sha256-eKLKHkoXcmk1OdPkgIQjPKBFXEwnV7nKeE98weE25+0=";

  passthru = {
    updateScript = nix-update-script {
--- a/pkgs/by-name/ps/pshash/package.nix
+++ b/pkgs/by-name/ps/pshash/package.nix
@@ -5,12 +5,12 @@
 }:
 haskellPackages.mkDerivation rec {
  pname = "pshash";
-  version = "0.1.20.4";
+  version = "0.1.21.0";
  src = fetchFromGitHub {
    owner = "thornoar";
    repo = "pshash";
    tag = "v${version}";
-    hash = "sha256-zH7clQ1ZqMB71UGBb8nvR8o4WZRAe9UzL27FjOx47O8=";
+    hash = "sha256-EQBd1X0TpIjGPl7S7Vp15oK2L3LpAXoIrM1ezUWiRQA=";
  };

  postPatch = ''
--- a/pkgs/by-name/re/reknife/package.nix
+++ b/pkgs/by-name/re/reknife/package.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "reknife";
+  version = "1.8.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "bl4ckr0ss3";
+    repo = "knife";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-oloigIVxFpi3DEK4FaAEOzNeho/xWb/NU44Zez/eMmQ=";
+  };
+
+  cargoHash = "sha256-eIK4PyzdGV8TSvKa1XUVbtHWU7ZlPMiba/N0DYu7ps8=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool for reverse engineering binaries";
+    homepage = "https://github.com/bl4ckr0ss3/knife";
+    changelog = "https://github.com/bl4ckr0ss3/knife/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "knife";
+  };
+})
--- a/pkgs/by-name/rg/rgrc/package.nix
+++ b/pkgs/by-name/rg/rgrc/package.nix
@@ -10,7 +10,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rgrc";
-  version = "0.6.30";
+  version = "0.6.34";

  __structuredAttrs = true;

@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "lazywalker";
    repo = "rgrc";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ZQzXd3xjhjTPLG6zmr3MfaAJu8eGPvs8/7U4CX7v2f8=";
+    hash = "sha256-awjRCCuO+3vK4CjeU8ZNJAkmfwidxpPO9MCbdowz7Hg=";
  };

-  cargoHash = "sha256-JA+gY4eKKv5yOijyVoQ9ubYd5Xf1UrKEO31RYLoTPEE=";
+  cargoHash = "sha256-v3PHi6qts5+VQmfEOkB/bls/Qrd/hXsW39N/H2SEyOo=";

  buildFeatures = [ "embed-configs" ];
  nativeBuildInputs = [ installShellFiles ];
--- a/pkgs/by-name/ri/ripwire/package.nix
+++ b/pkgs/by-name/ri/ripwire/package.nix
@@ -10,7 +10,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ripwire";
-  version = "0.5.0";
+  version = "0.6.1";
  __structuredAttrs = true;
  strictDeps = true;

@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "redhat-et";
    repo = "ripwire";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JB2xwEfDhljHo9tpxmpDkIFvjBdLwkhe7w2KnNrcN+Q=";
+    hash = "sha256-2a4J9lS0rdJyhkXkpQSkFrSf+NsMyeI2mJJNIYvgA8Y=";
  };

  # Unvendor tree-sitter
@@ -35,6 +35,8 @@ stdenv.mkDerivation (finalAttrs: {
  preConfigure = lib.optionalString stdenv.hostPlatform.isDarwin ''
    prependToVar cmakeFlags "-DCMAKE_C_COMPILER_AR=$(command -v $AR)"
    prependToVar cmakeFlags "-DCMAKE_C_COMPILER_RANLIB=$(command -v $RANLIB)"
+    prependToVar cmakeFlags "-DCMAKE_CXX_COMPILER_AR=$(command -v $AR)"
+    prependToVar cmakeFlags "-DCMAKE_CXX_COMPILER_RANLIB=$(command -v $RANLIB)"
  '';

  cmakeFlags = [
--- a/pkgs/by-name/se/seconlay/package.nix
+++ b/pkgs/by-name/se/seconlay/package.nix
@@ -12,17 +12,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "seconlay";
-  version = "0-unstable-2026-07-13";
+  version = "0-unstable-2026-09-01";

  src = fetchFromGitLab {
    group = "alasca.cloud";
    owner = "scl";
    repo = "scl-management";
-    rev = "0157c1bb0d8711f1b9903db4207e5da30db1e16a";
-    hash = "sha256-ZywfeqTln++Zz6/ygImzwuZG28lzmLqqIoqL+U6KNo4=";
+    rev = "6959d2c87e2625bfc36d70d4e8b92d5ea6409118";
+    hash = "sha256-0AvNMe1yq1AWmDvoWi3x4gXQ5Y3Ho+n3alQ+dc8rlHM=";
  };

-  cargoHash = "sha256-aX5HL/zDdrQ+V4vCYZrqlO2vNWuvF4GW2P30jtbv1tE=";
+  cargoHash = "sha256-njFKZScbr+owYMsqvDwdDnwd4hzxHcPqPoElF0U1u7c=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/si/sipp/package.nix
+++ b/pkgs/by-name/si/sipp/package.nix
@@ -7,6 +7,7 @@
  cmake,
  openssl,
  lksctp-tools,
+  fetchpatch,
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -20,6 +21,25 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-1JKKD3rEddCzXrbNpbzvhFXlTlkTXlP7vmRXvlGzkgI=";
  };

+  # TODO: Remove this patches once SIPP releases a version newer than 3.7.7.
+  patches = [
+    (fetchpatch {
+      name = "CVE-2026-90780.patch";
+      url = "https://github.com/SIPp/sipp/commit/8ddfb43359703e665041a955543e07f504f80232.patch";
+      hash = "sha256-MYzy6C5yOwEJ7lo+GDdfTRlJ1t4ABtnm7ha+gAwoARo=";
+    })
+    (fetchpatch {
+      name = "CVE-2026-90779.patch";
+      url = "https://github.com/SIPp/sipp/commit/09916a92de768ab08056a78e4731f9edc3853e1c.patch";
+      hash = "sha256-MJe6SMT3yNzbep9/eC4ELCqxMKwe/v9ZkB4q/R0dpUg=";
+    })
+    (fetchpatch {
+      name = "CVE-2026-90778.patch";
+      url = "https://github.com/SIPp/sipp/commit/d913c75c4ac55fe6d2b79c6dc23d8aa36dbc5283.patch";
+      hash = "sha256-SEufhy4qB8PTWVwr5TE783P0yWjZk2/jcBGlqtJIbXc=";
+    })
+  ];
+
  postPatch = ''
    echo '#define SIPP_VERSION VERSION' > include/version.h
    echo '#define VERSION "v${finalAttrs.version}"' >> include/version.h
--- a/pkgs/by-name/sk/skia/package.nix
+++ b/pkgs/by-name/sk/skia/package.nix
@@ -30,14 +30,15 @@ stdenv.mkDerivation (finalAttrs: {
  pname = "skia";
  # Version from https://skia.googlesource.com/skia/+/refs/heads/main/RELEASE_NOTES.md
  # or https://chromiumdash.appspot.com/releases
-  # plus date of the tip of the corresponding chrome/m$version branch
-  version = "144-unstable-2025-12-02";
+  # plus the date of the selected commit on the corresponding chrome/m$version branch
+  version = "148-unstable-2026-04-14";

  src = fetchgit {
    url = "https://skia.googlesource.com/skia.git";
-    # Tip of the chrome/m$version branch
-    rev = "ee20d565acb08dece4a32e3f209cdd41119015ca";
-    hash = "sha256-0LiFK/8873gei70iVhNGRlcFeGIp7tjDEfxTBz1LYv8=";
+    # Revision used by Ladybird's vcpkg baseline:
+    # https://github.com/microsoft/vcpkg/blob/7f3781e19cc7d4e4882a4caec01668c6f7b5c163/ports/skia/portfile.cmake
+    rev = "e7c90ecca9444fe09598f1630ab7cee2c0ee027a";
+    hash = "sha256-2+fxWqkNBStoN6l5Y3xMqkwvh69sCU6A//wz8fMnmjY=";
  };

  patches = [
@@ -120,6 +121,7 @@ stdenv.mkDerivation (finalAttrs: {
    ]
    ++ lib.optionals enableVulkan [
      "skia_use_vulkan=true"
+      "extra_cflags+=[\"-DSK_USE_EXTERNAL_VULKAN_HEADERS\"]"
    ]
    ++ lib.optionals stdenv.hostPlatform.isDarwin [
      "skia_use_fontconfig=true"
--- a/pkgs/by-name/te/termscp/package.nix
+++ b/pkgs/by-name/te/termscp/package.nix
@@ -13,16 +13,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "termscp";
-  version = "1.1.1";
+  version = "1.2.0";

  src = fetchFromGitHub {
    owner = "veeso";
    repo = "termscp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Alp0/f0OqLD7UeJwDhr2OIuk1TPXLQPAVUsZOQzo5jI=";
+    hash = "sha256-Rrb8ae+wpyHrRr4UHrUc7N+ytvI2OKmXmCWcnJOebJU=";
  };

-  cargoHash = "sha256-7xD+86v0ITBKF8js4UKwoTJFHa20wt6PDqkazShBtvc=";
+  cargoHash = "sha256-Var5ZnwX9OyCh+G6/5JF1K/IJR7nQ5508+B1akfsito=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/tx/txtpbfmt/package.nix
+++ b/pkgs/by-name/tx/txtpbfmt/package.nix
@@ -7,13 +7,13 @@

 buildGoModule {
  pname = "txtpbfmt";
-  version = "0-unstable-2026-08-03";
+  version = "0-unstable-2026-09-16";

  src = fetchFromGitHub {
    owner = "protocolbuffers";
    repo = "txtpbfmt";
-    rev = "1fd8a60d1ffc4b3893ee1b4b8d7a4bf7c15489a0";
-    hash = "sha256-AvLCcgY5cQy8ZOzD7u76T40IJ2owX+P36L+w495bqGE=";
+    rev = "6e6d8ebdba957f6f62c4afbba7d0518606c509c0";
+    hash = "sha256-eKF0SUiYzhrfJDYNeuqIywFzd70pGqKLCx5TTfjAzng=";
  };

  vendorHash = "sha256-aeYa7a/oKH2dxXHRkkqyh7f04citRDGQxAaKQTJst4o=";
--- a/pkgs/by-name/zu/zulip/package.nix
+++ b/pkgs/by-name/zu/zulip/package.nix
@@ -4,35 +4,38 @@
  fetchFromGitHub,
  fetchPnpmDeps,
  nodejs,
-  pnpm_11,
+  pnpm_12,
  pnpmConfigHook,
  python3,
-  electron_42,
+  electron_44,
  makeDesktopItem,
  makeBinaryWrapper,
  copyDesktopItems,
 }:

 let
-  electron = electron_42;
-  pnpm = pnpm_11;
+  electron = electron_44;
+  pnpm = pnpm_12;
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "zulip";
-  version = "5.12.4";
+  version = "5.13.1";

  src = fetchFromGitHub {
    owner = "zulip";
    repo = "zulip-desktop";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0TQKQfjfA1Nn/xvtHF0t6i+whLkyu1kVwuZ62Z0AZgk=";
+    hash = "sha256-bYN63EQo+c0SIz3BBIwkAS1QqS7+sg7JdpoOekVYq5Q=";
  };

+  __structuredAttrs = true;
+  strictDeps = true;
+
  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-D9Ge0Ao1fnVA1hk+K1ScZ3iCnl1+iqUtZSG5ACO2H2M=";
+    hash = "sha256-7F1mRrNgU9Ki7yfkz46LXgw10bY5roJP12oo4wSg91s=";
  };

  nativeBuildInputs = [
@@ -91,6 +94,9 @@ stdenv.mkDerivation (finalAttrs: {
  meta = {
    description = "Desktop client for Zulip Chat";
    homepage = "https://zulip.com";
+    donationPage = "https://zulip.com/help/support-zulip-project";
+    downloadPage = "https://github.com/zulip/zulip-desktop";
+    changelog = "https://github.com/zulip/zulip-desktop/blob/v${finalAttrs.version}/changelog.md";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ andersk ];
    platforms = lib.platforms.linux;
--- a/pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch
+++ b/pkgs/development/python-modules/django-cacheops/Support-Python-3.14-pickle-changes.patch
@@ -0,0 +1,33 @@
+From 938f8ba11c0676a1b9090c1cf788321ec24979e6 Mon Sep 17 00:00:00 2001
+From: Steve Kowalik <steven@wedontsleep.org>
+Date: Fri, 29 May 2026 12:00:23 +1000
+Subject: [PATCH] Support Python 3.14 pickle changes
+
+pickle.dump() and friends in Python 3.14 will now raise PicklingError
+rather than AttributeError when they encounter something that can not be
+pickled, extend test_385 to handle both exceptions.
+---
+ tests/tests.py | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/tests/tests.py b/tests/tests.py
+index f99f8e26..5ad67a55 100644
+--- a/tests/tests.py
+++ b/tests/tests.py
+@@ -2,6 +2,7 @@
+ from functools import reduce
+ import operator
+ import re
+from pickle import PicklingError
+ import platform
+ import unittest
+ from unittest import mock
+@@ -659,7 +660,7 @@ def test_366(self):
+     def test_385(self):
+         Client.objects.create(name='Client Name')
+ 
+-        with self.assertRaisesRegex(AttributeError, "local object"):
+        with self.assertRaisesRegex((AttributeError, PicklingError), "local object"):
+             Client.objects.filter(name='Client Name').cache().first()
+ 
+         invalidate_model(Client)
--- a/pkgs/development/python-modules/django-cacheops/default.nix
+++ b/pkgs/development/python-modules/django-cacheops/default.nix
@@ -1,7 +1,8 @@
 {
  lib,
  buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
+  fetchpatch,
  django,
  funcy,
  redis,
@@ -18,17 +19,24 @@
  setuptools,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "django-cacheops";
  version = "7.2";
  pyproject = true;

-  src = fetchPypi {
-    pname = "django_cacheops";
-    inherit version;
-    hash = "sha256-y8EcwDISlaNkTie8smlA8Iy5wucdPuUGy8/wvdoanzM=";
+  src = fetchFromGitHub {
+    owner = "Suor";
+    repo = "django-cacheops";
+    tag = finalAttrs.version;
+    hash = "sha256-o0QPBfoYZzBPMjDQt8ck2Tkx3qInyfnN88buire0yc4=";
  };

+  patches = [
+    # Fixes failure with python3.14 pickle changes
+    # https://github.com/Suor/django-cacheops/pull/511
+    ./Support-Python-3.14-pickle-changes.patch
+  ];
+
  pythonRelaxDeps = [ "funcy" ];

  build-system = [ setuptools ];
@@ -59,8 +67,8 @@ buildPythonPackage rec {
  meta = {
    description = "Slick ORM cache with automatic granular event-driven invalidation for Django";
    homepage = "https://github.com/Suor/django-cacheops";
-    changelog = "https://github.com/Suor/django-cacheops/blob/${version}/CHANGELOG";
+    changelog = "https://github.com/Suor/django-cacheops/blob/${finalAttrs.version}/CHANGELOG";
    license = lib.licenses.bsd3;
    maintainers = with lib.maintainers; [ onny ];
  };
-}
+})
--- a/pkgs/development/python-modules/fnllm/default.nix
+++ b/pkgs/development/python-modules/fnllm/default.nix
@@ -8,6 +8,7 @@
  hatchling,
  httpx,
  json-repair,
+  numpy,
  openai,
  polyfactory,
  pydantic,
@@ -48,6 +49,7 @@ buildPythonPackage (finalAttrs: {
      azure-identity
      azure-storage-blob
    ];
+    numpy = [ numpy ];
    openai = [
      openai
      tiktoken
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "iamdata";
-  version = "0.1.202609191";
+  version = "0.1.202609201";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "cloud-copilot";
    repo = "iam-data-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jf0Y5FOwr1eGTiqgSyWo9VekoRVhL/VFR0VB54JmTMo=";
+    hash = "sha256-BikB+Oq8jH0XmECWRfEZL42hVIUhPMD45so5MjpENPw=";
  };

  __darwinAllowLocalNetworking = true;
--- a/pkgs/development/python-modules/moyopy/default.nix
+++ b/pkgs/development/python-modules/moyopy/default.nix
@@ -16,7 +16,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "moyopy";
-  version = "0.18.0";
+  version = "0.19.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -24,7 +24,7 @@ buildPythonPackage (finalAttrs: {
    owner = "spglib";
    repo = "moyo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vCVyQqR1haJuvcRpgerMIvWmAP7TGaNoP71WPDzg6lA=";
+    hash = "sha256-4nekU6i89TCSbi+FIT2su28sX4byEiIpdtHr+RP4Kgk=";
  };

  sourceRoot = "${finalAttrs.src.name}/moyopy";
@@ -47,7 +47,7 @@ buildPythonPackage (finalAttrs: {
      sourceRoot
      cargoRoot
      ;
-    hash = "sha256-nByEmLE6gbFq/3uClS+pb6CUZZ7CR2BeqWwLd2/VEKE=";
+    hash = "sha256-sYeHaEEPjw6ectOtvK4Swhz9HUOzTgWZhp6PVprx3SA=";
  };

  build-system = [
--- a/pkgs/development/python-modules/numpyro/default.nix
+++ b/pkgs/development/python-modules/numpyro/default.nix
@@ -30,7 +30,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "numpyro";
-  version = "0.21.0";
+  version = "0.22.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -38,14 +38,9 @@ buildPythonPackage (finalAttrs: {
    owner = "pyro-ppl";
    repo = "numpyro";
    tag = finalAttrs.version;
-    hash = "sha256-4NA1m2N0AZy3ausAZc6+PPw175joGC7WwfZr0Ri0uK8=";
+    hash = "sha256-aUd3u/fEMMSTPFyRJgalVTETG561AgJmGhJl2C3lMSw=";
  };

-  patches = [
-    # Account for jax 0.11 hoisting tracing-time constants into `jaxpr.invars`
-    ./jax-0.11-provenance-consts.patch
-  ];
-
  build-system = [ setuptools ];

  dependencies = [
@@ -103,6 +98,7 @@ buildPythonPackage (finalAttrs: {

    # AssertionError due to tolerance issues
    "test_bijective_transforms"
+    "test_constrain_fn_two_batch_dims"
    "test_cpu"
    "test_entropy_categorical"
    "test_gaussian_model"
--- a/pkgs/development/python-modules/numpyro/jax-0.11-provenance-consts.patch
+++ b/pkgs/development/python-modules/numpyro/jax-0.11-provenance-consts.patch
@@ -1,17 +0,0 @@
-diff --git a/numpyro/ops/provenance.py b/numpyro/ops/provenance.py
-index 2f94be0..4ae4a1b 100644
--- a/numpyro/ops/provenance.py
-+++ b/numpyro/ops/provenance.py
-@@ -77,6 +77,12 @@ def eval_provenance(fn, **kwargs):
-         aval_kwargs[n] = jax.tree.map(lambda _: frozenset({n}), v)
-     provenance_inputs, _ = jax.tree.flatten(((), aval_kwargs))
- 
-+    # Since jax 0.11, `trace_to_jaxpr_dynamic` hoists the tracing-time constants into
-+    # `jaxpr.invars` (prepended to the actual arguments) instead of `jaxpr.constvars`.
-+    # Those constants do not depend on any input, hence an empty provenance.
-+    num_consts = len(jaxpr.invars) - len(provenance_inputs)
-+    provenance_inputs = [frozenset()] * num_consts + provenance_inputs
-+
-     provenance_outputs = track_deps_jaxpr(jaxpr, provenance_inputs)
-     return jax.tree.unflatten(out_tree(), provenance_outputs)
- 
--- a/pkgs/development/python-modules/setupmeta/default.nix
+++ b/pkgs/development/python-modules/setupmeta/default.nix
@@ -23,6 +23,11 @@ buildPythonPackage (finalAttrs: {
    hash = "sha256-ONl+hFvMkUmPbzbeduCrqidGrKZvbWE0wTvaZMhs64w=";
  };

+  postPatch = ''
+    substituteInPlace setup.py \
+      --replace-fail 'args["versioning"] = "dev"' 'args["version"] = "${finalAttrs.version}"'
+  '';
+
  preBuild = ''
    export PYGRADLE_PROJECT_VERSION=${finalAttrs.version};
  '';
--- a/pkgs/development/python-modules/tantivy/default.nix
+++ b/pkgs/development/python-modules/tantivy/default.nix
@@ -15,7 +15,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "tantivy";
-  version = "0.26.0";
+  version = "0.26.2";
  pyproject = true;
  __structuredAttrs = true;

@@ -23,12 +23,12 @@ buildPythonPackage (finalAttrs: {
    owner = "quickwit-oss";
    repo = "tantivy-py";
    tag = finalAttrs.version;
-    hash = "sha256-VmymAxkGPFwqmsy5Y9d1/vBGUUU3xeSEteJLQIMt0FY=";
+    hash = "sha256-yxRwN4rR9RQKvXxPcg1bTOfmtt9bV4y8dMn54qKuUi8=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-RXpwDEd7RmsSySMHZJy0wH56cp+tNgimjMNSNE55Zv4=";
+    hash = "sha256-uzhP5DoAiZ9cUuxmE9l805q26XHZh70eREFqpxHEIWg=";
  };

  nativeBuildInputs = [
--- a/pkgs/development/python-modules/telnetlib3/default.nix
+++ b/pkgs/development/python-modules/telnetlib3/default.nix
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "telnetlib3";
-  version = "5.0.0";
+  version = "5.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jquast";
    repo = "telnetlib3";
    tag = finalAttrs.version;
-    hash = "sha256-Gp76iTxzGGyLPhkJ1PaT9UZqD9jpfQdnB76XElyiV+8=";
+    hash = "sha256-l7tu68mCAOikD9G1OY9c6RvYC155+bBdHt5VbVIe97s=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/xiaomi-ble/default.nix
+++ b/pkgs/development/python-modules/xiaomi-ble/default.nix
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "xiaomi-ble";
-  version = "1.16.1";
+  version = "1.17.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Bluetooth-Devices";
    repo = "xiaomi-ble";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-odbWilY8pRX+NplzuLn2904nR3KDmaYb6gdVHW+p3LA=";
+    hash = "sha256-wzl2E3LOPALnj40luIE16Kxj+2qHx3iNzmaGL4umxvE=";
  };

  build-system = [ poetry-core ];
--- a/pkgs/servers/nextcloud/packages/33.json
+++ b/pkgs/servers/nextcloud/packages/33.json
@@ -1,9 +1,9 @@
 {
  "bookmarks": {
-    "hash": "sha256-eNMD82GUlOTp3/Y6u/Bg2pUmKayQv/jPbSAZtlAELtE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.6/bookmarks-16.2.6.tar.gz",
-    "version": "16.2.6",
-    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
+    "hash": "sha256-Oirgd5ffDvvWG4yoZB/3r7+npLqNqe8joZfJBTxqFXE=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.7/bookmarks-16.2.7.tar.gz",
+    "version": "16.2.7",
+    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *",
    "homepage": "https://github.com/nextcloud/bookmarks",
    "licenses": [
      "agpl"
@@ -40,9 +40,9 @@
    ]
  },
  "contacts": {
-    "hash": "sha256-KuPtvZDtzESrjC0xcmYeXRlIIFqgpNPnEvxm0lATKfc=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.8.1/contacts-v8.8.1.tar.gz",
-    "version": "8.8.1",
+    "hash": "sha256-BvXaSNcIhM72D6r4uzaosuwip7zbCuz0lwppNhRWKFQ=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.9.0/contacts-v8.9.0.tar.gz",
+    "version": "8.9.0",
    "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
    "homepage": "https://github.com/nextcloud/contacts#readme",
    "licenses": [
@@ -70,9 +70,9 @@
    ]
  },
  "dav_push": {
-    "hash": "sha256-OafUgG58+LsxibS/9aZjiOkdQcBV34xE6cmO9IkHMUo=",
-    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.2/dav_push.tar.gz",
-    "version": "1.0.2",
+    "hash": "sha256-Lb0yNGIzmB/Lt9YVqDru5c5aPYeY1d1ODuVsoDEnW9A=",
+    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.3/dav_push.tar.gz",
+    "version": "1.0.3",
    "description": "In proprietary environments, changes in events and contacts are nowadays usually pushed to other clients so that they can update their views almost in real-time.\n\nWebDAV however (and in this context, especially CalDAV and CardDAV) doesn't currently support push notifications of clients when a collection has changed. So clients have to periodically ask the server for changes. This causes unnecessary delays and battery usage.\n\nThe WebDAV-Push standard, which is currently in development, wants to solve this problem with an open protocol, too.\n\nThis is the server part of these efforts to draft a standard and provide a working implementation (server + client) in order to demonstrate it.\n\n\nThe current WebDAV-Push draft is provided by [@bitfireAT](https://github.com/bitfireAT).\n          \nThis Nextcloud extension has been developed by [@verdigado](https://github.com/verdigado).",
    "homepage": "",
    "licenses": [
@@ -90,9 +90,9 @@
    ]
  },
  "drawio": {
-    "hash": "sha256-0Y4nFeZcgfgNnEdgEZeJbVYNsM7prdjdCzFeUieUQbc=",
-    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.3.8/drawio-v4.3.8.tar.gz",
-    "version": "4.3.8",
+    "hash": "sha256-OsNNda1TjQZ8TRGdRkKBtCTBlYosfvEU3h0dUv6omBw=",
+    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.3.9/drawio-v4.3.9.tar.gz",
+    "version": "4.3.9",
    "description": "Integrates the diagrams.net diagram editor with Nextcloud. Users can create and edit .drawio diagrams and .dwb whiteboards directly within the Nextcloud file manager.\n\n**Features:**\n\n- Create and edit diagrams and whiteboards from the Nextcloud \"+\" menu\n- Click any .drawio or .dwb file to open the editor inline\n- Autosave with optimistic conflict detection\n- Inline diagram previews in Text, Collectives, Talk, Notes, and Deck\n- Supports public share links (read-only and editable)\n- Offline mode for privacy-sensitive deployments\n- Configurable editor URL for self-hosted diagrams.net instances",
    "homepage": "https://github.com/arnowelzel/drawio-nextcloud",
    "licenses": [
@@ -120,9 +120,9 @@
    ]
  },
  "files_linkeditor": {
-    "hash": "sha256-C0JWqDDnaG9eYOzaTGeEk6gIhOlXhc1A9dH0uFNo5uA=",
-    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.26/files_linkeditor.tar.gz",
-    "version": "1.1.26",
+    "hash": "sha256-eMPzDIv7xXoP5pSRf17paIngimuX8zqxLMJSc7ws+G8=",
+    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.27/files_linkeditor.tar.gz",
+    "version": "1.1.27",
    "description": "### External web links in Nextcloud!\n* ✍️ **create and edit** .URL and .webloc links in the file view\n* 🌍 **open links** by clicking them and confirming you want to go to the external site\n* 📤 **works in public shares** so you can share links easily with others\n* 🔄 **sync your links** as .URL and .webloc are web links as created on most operating systems.\n\n_[View changelog](https://github.com/te-online/files_linkeditor/blob/main/CHANGELOG.md)_",
    "homepage": "https://github.com/te-online/files_linkeditor",
    "licenses": [
@@ -130,9 +130,9 @@
    ]
  },
  "files_mindmap": {
-    "hash": "sha256-1+RlKQqPZcuaQdzzKVnI9eioYxSN7vbMgWzUuaSYpNM=",
-    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.1/files_mindmap-v0.1.1.tar.gz",
-    "version": "0.1.1",
+    "hash": "sha256-v2IfK9vQ7GnanPS/haOt9adFBNoBvHaX6C/lpmMpJ1Y=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.2/files_mindmap-v0.1.2.tar.gz",
+    "version": "0.1.2",
    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
    "homepage": "https://github.com/nextcloud/files_mindmap",
    "licenses": [
@@ -150,9 +150,9 @@
    ]
  },
  "forms": {
-    "hash": "sha256-f+LNscBPLdFI1t0VivnivlcG0HIWrqlQk7pYDcfGWIA=",
-    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.3.6/forms-v5.3.6.tar.gz",
-    "version": "5.3.6",
+    "hash": "sha256-/fjUsXViNBHkxcR/DpflTrcP2Xuiv44/gu+PKUQ3ihk=",
+    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.4.0/forms-v5.4.0.tar.gz",
+    "version": "5.4.0",
    "description": "**Simple surveys and questionnaires, self-hosted!**\n\n- **📝 Simple design:** No mass of options, only the essentials. Works well on mobile of course.\n- **📊 View & export results:** Results are visualized and can also be exported as CSV in the same format used by Google Forms.\n- **🔒 Data under your control!** Unlike in Google Forms, Typeform, Doodle and others, the survey info and responses are kept private on your instance.\n- **🧑‍💻 Connect to your software:** Easily integrate Forms into your service with our full-fledged [REST-API](https://github.com/nextcloud/forms/blob/main/docs/API_v3.md).\n- **🙋 Get involved!** We have lots of stuff planned like more question types, collaboration on forms, [and much more](https://github.com/nextcloud/forms/milestones)!",
    "homepage": "https://github.com/nextcloud/forms",
    "licenses": [
@@ -160,9 +160,9 @@
    ]
  },
  "gpoddersync": {
-    "hash": "sha256-V4iJr1p5uqxdrvE50bjyNTiHdsZATewaBXKQ8Ma0dHg=",
-    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.17.0/gpoddersync.tar.gz",
-    "version": "3.17.0",
+    "hash": "sha256-doqFGmJvUqXXHiuR52pIzyU6efso9QexghfZSh2/6v8=",
+    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.18.0/gpoddersync.tar.gz",
+    "version": "3.18.0",
    "description": "Expose GPodder API to sync podcast consumer apps like AntennaPod",
    "homepage": "https://github.com/thrillfall/nextcloud-gpodder",
    "licenses": [
@@ -180,9 +180,9 @@
    ]
  },
  "guests": {
-    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
-    "version": "4.9.0",
+    "hash": "sha256-FVsiiFpKecrVqQMYXFPyyIt4zDc+KL2TGpafwx33i/c=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.10.0/guests-v4.10.0.tar.gz",
+    "version": "4.10.0",
    "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
    "homepage": "https://github.com/nextcloud/guests/",
    "licenses": [
@@ -230,9 +230,9 @@
    ]
  },
  "mail": {
-    "hash": "sha256-WNrLQWrH36G3EcelwV1QLKLV+fC0UlOgWX6znSnq+IE=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.11.5/mail-v5.11.5.tar.gz",
-    "version": "5.11.5",
+    "hash": "sha256-EtH7wjaYlYp6muuWHfKHHWLBQrDBTgsbrSt9FoLbH/s=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.12.0/mail-v5.12.0.tar.gz",
+    "version": "5.12.0",
    "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
    "homepage": "https://github.com/nextcloud/mail#readme",
    "licenses": [
@@ -280,19 +280,19 @@
    ]
  },
  "notes": {
-    "hash": "sha256-2jYvtaV0tFzA4Q9Op/gVR8w90Qv5FvnZtZA1jB7Y4QE=",
-    "url": "https://github.com/nextcloud-releases/notes/releases/download/v6.0.2/notes-v6.0.2.tar.gz",
-    "version": "6.0.2",
+    "hash": "sha256-A8ST9FyxelAFoNzpHE5ZspTvkdRSDD70SiHV5h5BlSY=",
+    "url": "https://github.com/nextcloud-releases/notes/releases/download/v6.1.0/notes-v6.1.0.tar.gz",
+    "version": "6.1.0",
    "description": "The Notes app is a distraction free notes taking app for [Nextcloud](https://www.nextcloud.com/). It provides categories for better organization and supports formatting using [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax. Notes are saved as files in your Nextcloud, so you can view and edit them with every Nextcloud client. Furthermore, a separate [REST API](https://github.com/nextcloud/notes/blob/master/docs/api/README.md) allows for an easy integration into apps ([Android](https://github.com/nextcloud/notes-android), [iOS](https://github.com/nextcloud/notes-ios), as well as [3rd-party apps](https://github.com/nextcloud/notes/wiki#3rd-party-clients) which allow convenient access to your Nextcloud notes). Further features include marking notes as favorites.",
    "homepage": "https://github.com/nextcloud/notes",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
    ]
  },
  "oidc": {
-    "hash": "sha256-3EjIMQYI4oy4z9Iug3beCsuIK3h2eloKGB+UVdjeQiA=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.2.2/oidc-2.2.2.tar.gz",
-    "version": "2.2.2",
+    "hash": "sha256-zfdZSUwV8VZ5qq7rwN/G4cSfTbuutaK+yJ6g8556yOQ=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.3.1/oidc-2.3.1.tar.gz",
+    "version": "2.3.1",
    "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
    "homepage": "https://github.com/H2CK/oidc",
    "licenses": [
@@ -310,19 +310,19 @@
    ]
  },
  "onlyoffice": {
-    "hash": "sha256-QaohaMbw7bncBqreb5W8XngzqqwqALnsGgT494xfr/E=",
-    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v10.1.2/onlyoffice.tar.gz",
-    "version": "10.1.2",
+    "hash": "",
+    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v10.2.0/onlyoffice.tar.gz",
+    "version": "10.2.0",
    "description": "The ONLYOFFICE app for Nextcloud brings powerful document editing and collaboration tools directly to your Nextcloud environment. With this integration, you can seamlessly create, edit, and co-author text documents, spreadsheets, presentations, and PDFs, as well as build and fill out PDF forms.\n\nCollaborate with your team in real time, make use of Track Changes, version history, comments, integrated chat, and more. Work together on files with federated cloud sharing. Flexible access permissions allow you to control who can view, edit, or comment, ensuring secure role-based collaboration tailored to your needs. Documents can also be protected with watermarks, password settings, and encryption for added security.\n\nThe app offers support for over 50 file formats, including DOCX, XLSX, PPTX, PDF, RTF, TXT, CSV, ODT, ODS, ODP, EPUB, FB2, HTML, HWP, HWPX, Pages, Numbers, Keynote, etc. Seamless desktop and mobile app integration means you'll have access to your Nextcloud files wherever you go.\n\nFurthermore, you can seamlessly connect any AI assistant, including local ones, directly to the editors to work faster and more efficient. This allows you to leverage various AI models for tasks like chatbot interactions, translations, OCR, and more.\n\nWhether you’re working with internal teams or external collaborators, the ONLYOFFICE app for Nextcloud enhances productivity, simplifies workflows, and ensures your files remain secure.",
    "homepage": "https://www.onlyoffice.com",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-only"
    ]
  },
  "pantry": {
-    "hash": "sha256-enZ1i/BVnsx/d++Hx3DU3kzljJW9zr/rblz7/u+GrNQ=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.31.1/pantry-v0.31.1.tar.gz",
-    "version": "0.31.1",
+    "hash": "sha256-jJKOGlbj6fzDpLMFH6JT3ePwddcC4tQMFlDfipb3iRk=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.32.0/pantry-v0.32.0.tar.gz",
+    "version": "0.32.0",
    "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Shopping mode** turns your lists into a store-by-store trip — pick the lists and the route, check items off as you walk, see which housemates are out shopping, and finish with a priced review that lands in your shopping history.\n- **Barcode scanning** prefills an item from a product's EAN or UPC. Scan with the camera or type the code in, and Pantry looks up the name, category and photo for you to review.\n- **Custom fields** attach your own information to checklist items — an expiry date, an aisle number, a size, a yes/no flag. Define a field once for the house or a single list; date fields can send a reminder before they come due.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile, watch and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619)) | Wear OS ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry)) | [Windows](https://pantry.casraf.dev/docs/getting-started/apps#desktop) | [Linux](https://pantry.casraf.dev/docs/getting-started/apps#desktop)\n\n**Website:** [pantry.casraf.dev](https://pantry.casraf.dev) | **Documentation:** [pantry.casraf.dev/docs](https://pantry.casraf.dev/docs)",
    "homepage": "https://pantry.casraf.dev",
    "licenses": [
@@ -330,9 +330,9 @@
    ]
  },
  "phonetrack": {
-    "hash": "sha256-KHrJ2a2YU5hJHc+BOGdnaWdkWHHZO2C9tgUTgWSKvJ0=",
-    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.3/phonetrack-1.3.3.tar.gz",
-    "version": "1.3.3",
+    "hash": "sha256-aKny+yFvDxI/dg1xXI0lkKk7ijEOwtkWUfDuGaiYbyg=",
+    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.5/phonetrack-1.3.5.tar.gz",
+    "version": "1.3.5",
    "description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mobile device's locations.\n\n🗺 It receives information from mobile phone's logging apps and displays it dynamically on a map.\n\n🌍 Help us to translate this app on [PhoneTrack Crowdin project](https://crowdin.com/project/phonetrack).\n\n⚒ Check out other ways to help in the [contribution guidelines](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CONTRIBUTING.md).\n\nHow to use PhoneTrack :\n\n- Create a tracking session.\n- Give the logging link\\* to the mobile devices. Choose the [logging method](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#logging-methods) you prefer.\n- Watch the session's devices location in real time (or not) in PhoneTrack or share it with public pages.\n\n(\\*) Don't forget to set the device name in the link (rather than in the logging app settings). Replace \"yourname\" with the desired device name.\nSetting the device name in logging app settings only works with Owntracks, Traccar and OpenGTS.\n\nOn PhoneTrack main page, while watching a session, you can :\n\n- 📍 Display location history\n- ⛛ Filter points\n- ✎ Manually edit/add/delete points\n- ✎ Edit devices (rename, change colour/shape, move to another session)\n- ⛶ Define geofencing zones for devices\n- ⚇ Define proximity alerts for device pairs\n- 🖧 Share a session to other Nextcloud users or with a public link (read-only)\n- 🔗 Generate public share links with optional restrictions (filters, device name, last positions only, geofencing simplification)\n- 🖫 Import/export a session in GPX format (one file with one track per device or one file per device)\n- 🗠 Display sessions statistics\n- 🔒 [Reserve a device name](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#device-name-reservation) to make sure only authorized user can log with this name\n- 🗓 Toggle session auto export and auto purge (daily/weekly/monthly)\n- ◔ Choose what to do when point number quota is reached (block logging or delete oldest point)\n\nPublic page and public filtered page work like main page except there is only one session displayed, everything is read-only and there is no need to be logged in.\n\nThis app is under development.\n\n## Install\n\nSee the [AdminDoc](https://gitlab.com/eneiluj/phonetrack-oc/wikis/admindoc) for installation details.\n\nCheck [CHANGELOG](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CHANGELOG.md#change-log) file to see what's new and what's coming in next release.\n\nCheck [AUTHORS](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/AUTHORS.md#authors) file to see complete list of authors.\n\n## Known issues\n\n- PhoneTrack **now works** with Nextcloud group restriction activated. See [admindoc](https://github.com/julien-nc/phonetrack/blob/main/doc/admin.md#issue-with-phonetrack-restricted-to-some-groups-in-nextcloud).\n\nAny feedback will be appreciated.\n\n\n\n## Donation\n\nI develop this app during my free time.\n\n* [Donate with Paypal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=66PALMY8SF5JE) (you don't need a paypal account)\n* [Donate with Liberapay : ![Donate using Liberapay](https://liberapay.com/assets/widgets/donate.svg)](https://liberapay.com/eneiluj/donate)",
    "homepage": "https://github.com/julien-nc/phonetrack",
    "licenses": [
@@ -340,9 +340,9 @@
    ]
  },
  "polls": {
-    "hash": "sha256-ufV7hjBCAI0aqXT7b3K78RSnus2v7qqg3EpG4i+THTY=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.2.1/polls-v9.2.1.tar.gz",
-    "version": "9.2.1",
+    "hash": "sha256-5hujPtXyOaB7l3/UWq4A2lZhxYCWs2/tEAb2GUyYVKY=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.3.0/polls-v9.3.0.tar.gz",
+    "version": "9.3.0",
    "description": "A polls app, similar to Doodle/DuD-Poll with the possibility to restrict access (members, certain groups/users, hidden and public).",
    "homepage": "https://github.com/nextcloud/polls",
    "licenses": [
@@ -380,13 +380,13 @@
    ]
  },
  "registration": {
-    "hash": "sha256-mXsG5SfMrOp/G/4w9dbcwk41bLRUyrzWGTkoNeE0E88=",
-    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.0.0/registration-v3.0.0.tar.gz",
-    "version": "3.0.0",
+    "hash": "sha256-YDSq95WVm6WYwHNcqDWz+QwrvlhbqyCuf6RkD+mcAes=",
+    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.1.0/registration-v3.1.0.tar.gz",
+    "version": "3.1.0",
    "description": "User registration\n\nThis app allows users to register a new account.\n\n# Features\n\n- Add users to a given group\n- Allow-list with email domains (including wildcard) to register with\n- Administrator will be notified via email for new user creation or require approval\n- Supports Nextcloud's Client Login Flow v1 and v2 - allowing registration in the mobile Apps and Desktop clients\n\n# Web form registration flow\n\n1. User enters their email address\n2. Verification link is sent to the email address\n3. User clicks on the verification link\n4. User is lead to a form where they can choose their username and password\n5. New account is created and is logged in automatically",
    "homepage": "https://github.com/nextcloud/registration",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
    ]
  },
  "repod": {
@@ -430,9 +430,9 @@
    ]
  },
  "tables": {
-    "hash": "sha256-wn2NPeAiihTnYjuX2rA2Ybu/sFszhwoIo0CPTyfoDjg=",
-    "url": "https://github.com/nextcloud-releases/tables/releases/download/v2.3.0/tables-v2.3.0.tar.gz",
-    "version": "2.3.0",
+    "hash": "sha256-E12Ax2B74LEfiwRTF1/bkFYBH5iksvcxre5ZqzC1T8M=",
+    "url": "https://github.com/nextcloud-releases/tables/releases/download/v2.3.1/tables-v2.3.1.tar.gz",
+    "version": "2.3.1",
    "description": "Manage data the way you need it.\n\nWith this app you are able to create your own tables with individual columns. You can start with a template or from scratch and add your wanted columns.\nYou can choose from the following column types:\n- Text line or rich text\n- Link to urls or other nextcloud resources\n- Numbers\n- Progress bar\n- Stars rating\n- Yes/No tick\n- Date and/or time\n- (Multi) selection\n- Users, groups and teams\n\nShare your tables and views with users and groups within your cloud.\n\nHave a good time and manage whatever you want.",
    "homepage": "https://github.com/nextcloud/tables",
    "licenses": [
@@ -520,9 +520,9 @@
    ]
  },
  "whiteboard": {
-    "hash": "sha256-GV5dCxn7t+F2vSyJur/VUUrvAiSv5dDvI5ME6EBGof4=",
-    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v1.5.9/whiteboard-v1.5.9.tar.gz",
-    "version": "1.5.9",
+    "hash": "sha256-OCRziJb63ffrnc5HWcKz9/ipW4jBpA9ba7343OeiUqs=",
+    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v2.0.0/whiteboard-v2.0.0.tar.gz",
+    "version": "2.0.0",
    "description": "The official whiteboard app for Nextcloud. It allows users to create and share whiteboards with other users and collaborate in real-time.\n\n**Whiteboard requires a separate collaboration server to work.** Please see the [documentation](https://github.com/nextcloud/whiteboard?tab=readme-ov-file#backend) on how to install it.\n\n- 🎨 Drawing shapes, writing text, connecting elements\n- 📝 Real-time collaboration\n- 🖼️ Add images with drag and drop\n- 📊 Easily add mermaid diagrams\n- ✨ Use the Smart Picker to embed other elements from Nextcloud\n- 📦 Image export\n- 💪 Strong foundation: We use Excalidraw as our base library",
    "homepage": "https://github.com/nextcloud/whiteboard",
    "licenses": [
--- a/pkgs/servers/nextcloud/packages/34.json
+++ b/pkgs/servers/nextcloud/packages/34.json
@@ -1,9 +1,9 @@
 {
  "bookmarks": {
-    "hash": "sha256-eNMD82GUlOTp3/Y6u/Bg2pUmKayQv/jPbSAZtlAELtE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.6/bookmarks-16.2.6.tar.gz",
-    "version": "16.2.6",
-    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
+    "hash": "sha256-Oirgd5ffDvvWG4yoZB/3r7+npLqNqe8joZfJBTxqFXE=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.7/bookmarks-16.2.7.tar.gz",
+    "version": "16.2.7",
+    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *",
    "homepage": "https://github.com/nextcloud/bookmarks",
    "licenses": [
      "agpl"
@@ -40,9 +40,9 @@
    ]
  },
  "contacts": {
-    "hash": "sha256-KuPtvZDtzESrjC0xcmYeXRlIIFqgpNPnEvxm0lATKfc=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.8.1/contacts-v8.8.1.tar.gz",
-    "version": "8.8.1",
+    "hash": "sha256-BvXaSNcIhM72D6r4uzaosuwip7zbCuz0lwppNhRWKFQ=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.9.0/contacts-v8.9.0.tar.gz",
+    "version": "8.9.0",
    "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
    "homepage": "https://github.com/nextcloud/contacts#readme",
    "licenses": [
@@ -70,9 +70,9 @@
    ]
  },
  "dav_push": {
-    "hash": "sha256-OafUgG58+LsxibS/9aZjiOkdQcBV34xE6cmO9IkHMUo=",
-    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.2/dav_push.tar.gz",
-    "version": "1.0.2",
+    "hash": "sha256-Lb0yNGIzmB/Lt9YVqDru5c5aPYeY1d1ODuVsoDEnW9A=",
+    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.3/dav_push.tar.gz",
+    "version": "1.0.3",
    "description": "In proprietary environments, changes in events and contacts are nowadays usually pushed to other clients so that they can update their views almost in real-time.\n\nWebDAV however (and in this context, especially CalDAV and CardDAV) doesn't currently support push notifications of clients when a collection has changed. So clients have to periodically ask the server for changes. This causes unnecessary delays and battery usage.\n\nThe WebDAV-Push standard, which is currently in development, wants to solve this problem with an open protocol, too.\n\nThis is the server part of these efforts to draft a standard and provide a working implementation (server + client) in order to demonstrate it.\n\n\nThe current WebDAV-Push draft is provided by [@bitfireAT](https://github.com/bitfireAT).\n          \nThis Nextcloud extension has been developed by [@verdigado](https://github.com/verdigado).",
    "homepage": "",
    "licenses": [
@@ -80,9 +80,9 @@
    ]
  },
  "deck": {
-    "hash": "sha256-2KcGPN1iJdGdwogzpxcFBsrG9eQpoCDiO82MLYMVvDk=",
-    "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.18.4/deck-v1.18.4.tar.gz",
-    "version": "1.18.4",
+    "hash": "sha256-2v7GY1/zr1D7b3MzAGTvYVORC+L6Q00u2/gEMmMSIlM=",
+    "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.18.5/deck-v1.18.5.tar.gz",
+    "version": "1.18.5",
    "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in Markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your Markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
    "homepage": "https://github.com/nextcloud/deck",
    "licenses": [
@@ -90,9 +90,9 @@
    ]
  },
  "drawio": {
-    "hash": "sha256-0Y4nFeZcgfgNnEdgEZeJbVYNsM7prdjdCzFeUieUQbc=",
-    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.3.8/drawio-v4.3.8.tar.gz",
-    "version": "4.3.8",
+    "hash": "sha256-OsNNda1TjQZ8TRGdRkKBtCTBlYosfvEU3h0dUv6omBw=",
+    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.3.9/drawio-v4.3.9.tar.gz",
+    "version": "4.3.9",
    "description": "Integrates the diagrams.net diagram editor with Nextcloud. Users can create and edit .drawio diagrams and .dwb whiteboards directly within the Nextcloud file manager.\n\n**Features:**\n\n- Create and edit diagrams and whiteboards from the Nextcloud \"+\" menu\n- Click any .drawio or .dwb file to open the editor inline\n- Autosave with optimistic conflict detection\n- Inline diagram previews in Text, Collectives, Talk, Notes, and Deck\n- Supports public share links (read-only and editable)\n- Offline mode for privacy-sensitive deployments\n- Configurable editor URL for self-hosted diagrams.net instances",
    "homepage": "https://github.com/arnowelzel/drawio-nextcloud",
    "licenses": [
@@ -120,9 +120,9 @@
    ]
  },
  "files_linkeditor": {
-    "hash": "sha256-C0JWqDDnaG9eYOzaTGeEk6gIhOlXhc1A9dH0uFNo5uA=",
-    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.26/files_linkeditor.tar.gz",
-    "version": "1.1.26",
+    "hash": "sha256-eMPzDIv7xXoP5pSRf17paIngimuX8zqxLMJSc7ws+G8=",
+    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.27/files_linkeditor.tar.gz",
+    "version": "1.1.27",
    "description": "### External web links in Nextcloud!\n* ✍️ **create and edit** .URL and .webloc links in the file view\n* 🌍 **open links** by clicking them and confirming you want to go to the external site\n* 📤 **works in public shares** so you can share links easily with others\n* 🔄 **sync your links** as .URL and .webloc are web links as created on most operating systems.\n\n_[View changelog](https://github.com/te-online/files_linkeditor/blob/main/CHANGELOG.md)_",
    "homepage": "https://github.com/te-online/files_linkeditor",
    "licenses": [
@@ -130,9 +130,9 @@
    ]
  },
  "files_mindmap": {
-    "hash": "sha256-1+RlKQqPZcuaQdzzKVnI9eioYxSN7vbMgWzUuaSYpNM=",
-    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.1/files_mindmap-v0.1.1.tar.gz",
-    "version": "0.1.1",
+    "hash": "sha256-v2IfK9vQ7GnanPS/haOt9adFBNoBvHaX6C/lpmMpJ1Y=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.2/files_mindmap-v0.1.2.tar.gz",
+    "version": "0.1.2",
    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
    "homepage": "https://github.com/nextcloud/files_mindmap",
    "licenses": [
@@ -150,9 +150,9 @@
    ]
  },
  "forms": {
-    "hash": "sha256-f+LNscBPLdFI1t0VivnivlcG0HIWrqlQk7pYDcfGWIA=",
-    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.3.6/forms-v5.3.6.tar.gz",
-    "version": "5.3.6",
+    "hash": "sha256-/fjUsXViNBHkxcR/DpflTrcP2Xuiv44/gu+PKUQ3ihk=",
+    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.4.0/forms-v5.4.0.tar.gz",
+    "version": "5.4.0",
    "description": "**Simple surveys and questionnaires, self-hosted!**\n\n- **📝 Simple design:** No mass of options, only the essentials. Works well on mobile of course.\n- **📊 View & export results:** Results are visualized and can also be exported as CSV in the same format used by Google Forms.\n- **🔒 Data under your control!** Unlike in Google Forms, Typeform, Doodle and others, the survey info and responses are kept private on your instance.\n- **🧑‍💻 Connect to your software:** Easily integrate Forms into your service with our full-fledged [REST-API](https://github.com/nextcloud/forms/blob/main/docs/API_v3.md).\n- **🙋 Get involved!** We have lots of stuff planned like more question types, collaboration on forms, [and much more](https://github.com/nextcloud/forms/milestones)!",
    "homepage": "https://github.com/nextcloud/forms",
    "licenses": [
@@ -160,9 +160,9 @@
    ]
  },
  "gpoddersync": {
-    "hash": "sha256-V4iJr1p5uqxdrvE50bjyNTiHdsZATewaBXKQ8Ma0dHg=",
-    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.17.0/gpoddersync.tar.gz",
-    "version": "3.17.0",
+    "hash": "sha256-doqFGmJvUqXXHiuR52pIzyU6efso9QexghfZSh2/6v8=",
+    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.18.0/gpoddersync.tar.gz",
+    "version": "3.18.0",
    "description": "Expose GPodder API to sync podcast consumer apps like AntennaPod",
    "homepage": "https://github.com/thrillfall/nextcloud-gpodder",
    "licenses": [
@@ -180,9 +180,9 @@
    ]
  },
  "guests": {
-    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
-    "version": "4.9.0",
+    "hash": "sha256-FVsiiFpKecrVqQMYXFPyyIt4zDc+KL2TGpafwx33i/c=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.10.0/guests-v4.10.0.tar.gz",
+    "version": "4.10.0",
    "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
    "homepage": "https://github.com/nextcloud/guests/",
    "licenses": [
@@ -230,9 +230,9 @@
    ]
  },
  "mail": {
-    "hash": "sha256-WNrLQWrH36G3EcelwV1QLKLV+fC0UlOgWX6znSnq+IE=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.11.5/mail-v5.11.5.tar.gz",
-    "version": "5.11.5",
+    "hash": "sha256-EtH7wjaYlYp6muuWHfKHHWLBQrDBTgsbrSt9FoLbH/s=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.12.0/mail-v5.12.0.tar.gz",
+    "version": "5.12.0",
    "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
    "homepage": "https://github.com/nextcloud/mail#readme",
    "licenses": [
@@ -280,19 +280,19 @@
    ]
  },
  "notes": {
-    "hash": "sha256-2jYvtaV0tFzA4Q9Op/gVR8w90Qv5FvnZtZA1jB7Y4QE=",
-    "url": "https://github.com/nextcloud-releases/notes/releases/download/v6.0.2/notes-v6.0.2.tar.gz",
-    "version": "6.0.2",
+    "hash": "sha256-A8ST9FyxelAFoNzpHE5ZspTvkdRSDD70SiHV5h5BlSY=",
+    "url": "https://github.com/nextcloud-releases/notes/releases/download/v6.1.0/notes-v6.1.0.tar.gz",
+    "version": "6.1.0",
    "description": "The Notes app is a distraction free notes taking app for [Nextcloud](https://www.nextcloud.com/). It provides categories for better organization and supports formatting using [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax. Notes are saved as files in your Nextcloud, so you can view and edit them with every Nextcloud client. Furthermore, a separate [REST API](https://github.com/nextcloud/notes/blob/master/docs/api/README.md) allows for an easy integration into apps ([Android](https://github.com/nextcloud/notes-android), [iOS](https://github.com/nextcloud/notes-ios), as well as [3rd-party apps](https://github.com/nextcloud/notes/wiki#3rd-party-clients) which allow convenient access to your Nextcloud notes). Further features include marking notes as favorites.",
    "homepage": "https://github.com/nextcloud/notes",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
    ]
  },
  "oidc": {
-    "hash": "sha256-3EjIMQYI4oy4z9Iug3beCsuIK3h2eloKGB+UVdjeQiA=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.2.2/oidc-2.2.2.tar.gz",
-    "version": "2.2.2",
+    "hash": "sha256-zfdZSUwV8VZ5qq7rwN/G4cSfTbuutaK+yJ6g8556yOQ=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.3.1/oidc-2.3.1.tar.gz",
+    "version": "2.3.1",
    "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
    "homepage": "https://github.com/H2CK/oidc",
    "licenses": [
@@ -310,19 +310,19 @@
    ]
  },
  "onlyoffice": {
-    "hash": "sha256-QaohaMbw7bncBqreb5W8XngzqqwqALnsGgT494xfr/E=",
-    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v10.1.2/onlyoffice.tar.gz",
-    "version": "10.1.2",
+    "hash": "",
+    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v10.2.0/onlyoffice.tar.gz",
+    "version": "10.2.0",
    "description": "The ONLYOFFICE app for Nextcloud brings powerful document editing and collaboration tools directly to your Nextcloud environment. With this integration, you can seamlessly create, edit, and co-author text documents, spreadsheets, presentations, and PDFs, as well as build and fill out PDF forms.\n\nCollaborate with your team in real time, make use of Track Changes, version history, comments, integrated chat, and more. Work together on files with federated cloud sharing. Flexible access permissions allow you to control who can view, edit, or comment, ensuring secure role-based collaboration tailored to your needs. Documents can also be protected with watermarks, password settings, and encryption for added security.\n\nThe app offers support for over 50 file formats, including DOCX, XLSX, PPTX, PDF, RTF, TXT, CSV, ODT, ODS, ODP, EPUB, FB2, HTML, HWP, HWPX, Pages, Numbers, Keynote, etc. Seamless desktop and mobile app integration means you'll have access to your Nextcloud files wherever you go.\n\nFurthermore, you can seamlessly connect any AI assistant, including local ones, directly to the editors to work faster and more efficient. This allows you to leverage various AI models for tasks like chatbot interactions, translations, OCR, and more.\n\nWhether you’re working with internal teams or external collaborators, the ONLYOFFICE app for Nextcloud enhances productivity, simplifies workflows, and ensures your files remain secure.",
    "homepage": "https://www.onlyoffice.com",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-only"
    ]
  },
  "pantry": {
-    "hash": "sha256-enZ1i/BVnsx/d++Hx3DU3kzljJW9zr/rblz7/u+GrNQ=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.31.1/pantry-v0.31.1.tar.gz",
-    "version": "0.31.1",
+    "hash": "sha256-jJKOGlbj6fzDpLMFH6JT3ePwddcC4tQMFlDfipb3iRk=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.32.0/pantry-v0.32.0.tar.gz",
+    "version": "0.32.0",
    "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Shopping mode** turns your lists into a store-by-store trip — pick the lists and the route, check items off as you walk, see which housemates are out shopping, and finish with a priced review that lands in your shopping history.\n- **Barcode scanning** prefills an item from a product's EAN or UPC. Scan with the camera or type the code in, and Pantry looks up the name, category and photo for you to review.\n- **Custom fields** attach your own information to checklist items — an expiry date, an aisle number, a size, a yes/no flag. Define a field once for the house or a single list; date fields can send a reminder before they come due.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile, watch and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619)) | Wear OS ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry)) | [Windows](https://pantry.casraf.dev/docs/getting-started/apps#desktop) | [Linux](https://pantry.casraf.dev/docs/getting-started/apps#desktop)\n\n**Website:** [pantry.casraf.dev](https://pantry.casraf.dev) | **Documentation:** [pantry.casraf.dev/docs](https://pantry.casraf.dev/docs)",
    "homepage": "https://pantry.casraf.dev",
    "licenses": [
@@ -330,9 +330,9 @@
    ]
  },
  "phonetrack": {
-    "hash": "sha256-KHrJ2a2YU5hJHc+BOGdnaWdkWHHZO2C9tgUTgWSKvJ0=",
-    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.3/phonetrack-1.3.3.tar.gz",
-    "version": "1.3.3",
+    "hash": "sha256-aKny+yFvDxI/dg1xXI0lkKk7ijEOwtkWUfDuGaiYbyg=",
+    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.5/phonetrack-1.3.5.tar.gz",
+    "version": "1.3.5",
    "description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mobile device's locations.\n\n🗺 It receives information from mobile phone's logging apps and displays it dynamically on a map.\n\n🌍 Help us to translate this app on [PhoneTrack Crowdin project](https://crowdin.com/project/phonetrack).\n\n⚒ Check out other ways to help in the [contribution guidelines](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CONTRIBUTING.md).\n\nHow to use PhoneTrack :\n\n- Create a tracking session.\n- Give the logging link\\* to the mobile devices. Choose the [logging method](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#logging-methods) you prefer.\n- Watch the session's devices location in real time (or not) in PhoneTrack or share it with public pages.\n\n(\\*) Don't forget to set the device name in the link (rather than in the logging app settings). Replace \"yourname\" with the desired device name.\nSetting the device name in logging app settings only works with Owntracks, Traccar and OpenGTS.\n\nOn PhoneTrack main page, while watching a session, you can :\n\n- 📍 Display location history\n- ⛛ Filter points\n- ✎ Manually edit/add/delete points\n- ✎ Edit devices (rename, change colour/shape, move to another session)\n- ⛶ Define geofencing zones for devices\n- ⚇ Define proximity alerts for device pairs\n- 🖧 Share a session to other Nextcloud users or with a public link (read-only)\n- 🔗 Generate public share links with optional restrictions (filters, device name, last positions only, geofencing simplification)\n- 🖫 Import/export a session in GPX format (one file with one track per device or one file per device)\n- 🗠 Display sessions statistics\n- 🔒 [Reserve a device name](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#device-name-reservation) to make sure only authorized user can log with this name\n- 🗓 Toggle session auto export and auto purge (daily/weekly/monthly)\n- ◔ Choose what to do when point number quota is reached (block logging or delete oldest point)\n\nPublic page and public filtered page work like main page except there is only one session displayed, everything is read-only and there is no need to be logged in.\n\nThis app is under development.\n\n## Install\n\nSee the [AdminDoc](https://gitlab.com/eneiluj/phonetrack-oc/wikis/admindoc) for installation details.\n\nCheck [CHANGELOG](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CHANGELOG.md#change-log) file to see what's new and what's coming in next release.\n\nCheck [AUTHORS](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/AUTHORS.md#authors) file to see complete list of authors.\n\n## Known issues\n\n- PhoneTrack **now works** with Nextcloud group restriction activated. See [admindoc](https://github.com/julien-nc/phonetrack/blob/main/doc/admin.md#issue-with-phonetrack-restricted-to-some-groups-in-nextcloud).\n\nAny feedback will be appreciated.\n\n\n\n## Donation\n\nI develop this app during my free time.\n\n* [Donate with Paypal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=66PALMY8SF5JE) (you don't need a paypal account)\n* [Donate with Liberapay : ![Donate using Liberapay](https://liberapay.com/assets/widgets/donate.svg)](https://liberapay.com/eneiluj/donate)",
    "homepage": "https://github.com/julien-nc/phonetrack",
    "licenses": [
@@ -340,9 +340,9 @@
    ]
  },
  "polls": {
-    "hash": "sha256-ufV7hjBCAI0aqXT7b3K78RSnus2v7qqg3EpG4i+THTY=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.2.1/polls-v9.2.1.tar.gz",
-    "version": "9.2.1",
+    "hash": "sha256-5hujPtXyOaB7l3/UWq4A2lZhxYCWs2/tEAb2GUyYVKY=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.3.0/polls-v9.3.0.tar.gz",
+    "version": "9.3.0",
    "description": "A polls app, similar to Doodle/DuD-Poll with the possibility to restrict access (members, certain groups/users, hidden and public).",
    "homepage": "https://github.com/nextcloud/polls",
    "licenses": [
@@ -380,13 +380,13 @@
    ]
  },
  "registration": {
-    "hash": "sha256-mXsG5SfMrOp/G/4w9dbcwk41bLRUyrzWGTkoNeE0E88=",
-    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.0.0/registration-v3.0.0.tar.gz",
-    "version": "3.0.0",
+    "hash": "sha256-YDSq95WVm6WYwHNcqDWz+QwrvlhbqyCuf6RkD+mcAes=",
+    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.1.0/registration-v3.1.0.tar.gz",
+    "version": "3.1.0",
    "description": "User registration\n\nThis app allows users to register a new account.\n\n# Features\n\n- Add users to a given group\n- Allow-list with email domains (including wildcard) to register with\n- Administrator will be notified via email for new user creation or require approval\n- Supports Nextcloud's Client Login Flow v1 and v2 - allowing registration in the mobile Apps and Desktop clients\n\n# Web form registration flow\n\n1. User enters their email address\n2. Verification link is sent to the email address\n3. User clicks on the verification link\n4. User is lead to a form where they can choose their username and password\n5. New account is created and is logged in automatically",
    "homepage": "https://github.com/nextcloud/registration",
    "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
    ]
  },
  "repod": {
@@ -430,9 +430,9 @@
    ]
  },
  "tables": {
-    "hash": "sha256-wn2NPeAiihTnYjuX2rA2Ybu/sFszhwoIo0CPTyfoDjg=",
-    "url": "https://github.com/nextcloud-releases/tables/releases/download/v2.3.0/tables-v2.3.0.tar.gz",
-    "version": "2.3.0",
+    "hash": "sha256-E12Ax2B74LEfiwRTF1/bkFYBH5iksvcxre5ZqzC1T8M=",
+    "url": "https://github.com/nextcloud-releases/tables/releases/download/v2.3.1/tables-v2.3.1.tar.gz",
+    "version": "2.3.1",
    "description": "Manage data the way you need it.\n\nWith this app you are able to create your own tables with individual columns. You can start with a template or from scratch and add your wanted columns.\nYou can choose from the following column types:\n- Text line or rich text\n- Link to urls or other nextcloud resources\n- Numbers\n- Progress bar\n- Stars rating\n- Yes/No tick\n- Date and/or time\n- (Multi) selection\n- Users, groups and teams\n\nShare your tables and views with users and groups within your cloud.\n\nHave a good time and manage whatever you want.",
    "homepage": "https://github.com/nextcloud/tables",
    "licenses": [
@@ -520,9 +520,9 @@
    ]
  },
  "whiteboard": {
-    "hash": "sha256-GV5dCxn7t+F2vSyJur/VUUrvAiSv5dDvI5ME6EBGof4=",
-    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v1.5.9/whiteboard-v1.5.9.tar.gz",
-    "version": "1.5.9",
+    "hash": "sha256-OCRziJb63ffrnc5HWcKz9/ipW4jBpA9ba7343OeiUqs=",
+    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v2.0.0/whiteboard-v2.0.0.tar.gz",
+    "version": "2.0.0",
    "description": "The official whiteboard app for Nextcloud. It allows users to create and share whiteboards with other users and collaborate in real-time.\n\n**Whiteboard requires a separate collaboration server to work.** Please see the [documentation](https://github.com/nextcloud/whiteboard?tab=readme-ov-file#backend) on how to install it.\n\n- 🎨 Drawing shapes, writing text, connecting elements\n- 📝 Real-time collaboration\n- 🖼️ Add images with drag and drop\n- 📊 Easily add mermaid diagrams\n- ✨ Use the Smart Picker to embed other elements from Nextcloud\n- 📦 Image export\n- 💪 Strong foundation: We use Excalidraw as our base library",
    "homepage": "https://github.com/nextcloud/whiteboard",
    "licenses": [
--- a/pkgs/servers/nextcloud/packages/35.json
+++ b/pkgs/servers/nextcloud/packages/35.json
@@ -1,4 +1,14 @@
 {
+  "bookmarks": {
+    "hash": "sha256-YdFpK2RSNkIzOuiveHmlidsaxWjm1fS++pFkO9pWsCM=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v17.0.0/bookmarks-17.0.0.tar.gz",
+    "version": "17.0.0",
+    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *",
+    "homepage": "https://github.com/nextcloud/bookmarks",
+    "licenses": [
+      "agpl"
+    ]
+  },
  "calendar": {
    "hash": "sha256-Z8d3puqXRAnp0ijCP8YPK+jmddN2UxtrGxJfLwNlc40=",
    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.4/calendar-v6.5.4.tar.gz",
@@ -59,6 +69,16 @@
      "agpl"
    ]
  },
+  "dav_push": {
+    "hash": "sha256-Lb0yNGIzmB/Lt9YVqDru5c5aPYeY1d1ODuVsoDEnW9A=",
+    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.3/dav_push.tar.gz",
+    "version": "1.0.3",
+    "description": "In proprietary environments, changes in events and contacts are nowadays usually pushed to other clients so that they can update their views almost in real-time.\n\nWebDAV however (and in this context, especially CalDAV and CardDAV) doesn't currently support push notifications of clients when a collection has changed. So clients have to periodically ask the server for changes. This causes unnecessary delays and battery usage.\n\nThe WebDAV-Push standard, which is currently in development, wants to solve this problem with an open protocol, too.\n\nThis is the server part of these efforts to draft a standard and provide a working implementation (server + client) in order to demonstrate it.\n\n\nThe current WebDAV-Push draft is provided by [@bitfireAT](https://github.com/bitfireAT).\n          \nThis Nextcloud extension has been developed by [@verdigado](https://github.com/verdigado).",
+    "homepage": "",
+    "licenses": [
+      "agpl"
+    ]
+  },
  "deck": {
    "hash": "sha256-SUauPg95OdjN1sOnLzXMyScD0sWmlFhtZc4C1yTT6qg=",
    "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.19.0/deck-v1.19.0.tar.gz",
@@ -69,6 +89,16 @@
      "agpl"
    ]
  },
+  "drawio": {
+    "hash": "sha256-OsNNda1TjQZ8TRGdRkKBtCTBlYosfvEU3h0dUv6omBw=",
+    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.3.9/drawio-v4.3.9.tar.gz",
+    "version": "4.3.9",
+    "description": "Integrates the diagrams.net diagram editor with Nextcloud. Users can create and edit .drawio diagrams and .dwb whiteboards directly within the Nextcloud file manager.\n\n**Features:**\n\n- Create and edit diagrams and whiteboards from the Nextcloud \"+\" menu\n- Click any .drawio or .dwb file to open the editor inline\n- Autosave with optimistic conflict detection\n- Inline diagram previews in Text, Collectives, Talk, Notes, and Deck\n- Supports public share links (read-only and editable)\n- Offline mode for privacy-sensitive deployments\n- Configurable editor URL for self-hosted diagrams.net instances",
+    "homepage": "https://github.com/arnowelzel/drawio-nextcloud",
+    "licenses": [
+      "agpl"
+    ]
+  },
  "end_to_end_encryption": {
    "hash": "sha256-qfLYRPig+ZkvmHyVfjFRSafUEJrF1q/qU4XqbIf5xp4=",
    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.4/end_to_end_encryption-v2.2.4.tar.gz",
@@ -100,9 +130,9 @@
    ]
  },
  "files_mindmap": {
-    "hash": "sha256-1+RlKQqPZcuaQdzzKVnI9eioYxSN7vbMgWzUuaSYpNM=",
-    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.1/files_mindmap-v0.1.1.tar.gz",
-    "version": "0.1.1",
+    "hash": "sha256-v2IfK9vQ7GnanPS/haOt9adFBNoBvHaX6C/lpmMpJ1Y=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.2/files_mindmap-v0.1.2.tar.gz",
+    "version": "0.1.2",
    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
    "homepage": "https://github.com/nextcloud/files_mindmap",
    "licenses": [
@@ -129,6 +159,16 @@
      "AGPL-3.0-or-later"
    ]
  },
+  "gpoddersync": {
+    "hash": "sha256-doqFGmJvUqXXHiuR52pIzyU6efso9QexghfZSh2/6v8=",
+    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.18.0/gpoddersync.tar.gz",
+    "version": "3.18.0",
+    "description": "Expose GPodder API to sync podcast consumer apps like AntennaPod",
+    "homepage": "https://github.com/thrillfall/nextcloud-gpodder",
+    "licenses": [
+      "agpl"
+    ]
+  },
  "groupfolders": {
    "hash": "sha256-OUnmpFlHGICQwXDGmDquEaHWYTTsMX/+e3YJBi867PM=",
    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v23.0.1/groupfolders-v23.0.1.tar.gz",
@@ -240,9 +280,9 @@
    ]
  },
  "oidc": {
-    "hash": "sha256-s8ghs4gHsP/ljG3Rkcw7fqObhaenv/7Tla/8qg/CtZo=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.3.0/oidc-2.3.0.tar.gz",
-    "version": "2.3.0",
+    "hash": "sha256-zfdZSUwV8VZ5qq7rwN/G4cSfTbuutaK+yJ6g8556yOQ=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.3.1/oidc-2.3.1.tar.gz",
+    "version": "2.3.1",
    "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
    "homepage": "https://github.com/H2CK/oidc",
    "licenses": [
@@ -259,6 +299,16 @@
      "agpl"
    ]
  },
+  "onlyoffice": {
+    "hash": "",
+    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v10.2.0/onlyoffice.tar.gz",
+    "version": "10.2.0",
+    "description": "The ONLYOFFICE app for Nextcloud brings powerful document editing and collaboration tools directly to your Nextcloud environment. With this integration, you can seamlessly create, edit, and co-author text documents, spreadsheets, presentations, and PDFs, as well as build and fill out PDF forms.\n\nCollaborate with your team in real time, make use of Track Changes, version history, comments, integrated chat, and more. Work together on files with federated cloud sharing. Flexible access permissions allow you to control who can view, edit, or comment, ensuring secure role-based collaboration tailored to your needs. Documents can also be protected with watermarks, password settings, and encryption for added security.\n\nThe app offers support for over 50 file formats, including DOCX, XLSX, PPTX, PDF, RTF, TXT, CSV, ODT, ODS, ODP, EPUB, FB2, HTML, HWP, HWPX, Pages, Numbers, Keynote, etc. Seamless desktop and mobile app integration means you'll have access to your Nextcloud files wherever you go.\n\nFurthermore, you can seamlessly connect any AI assistant, including local ones, directly to the editors to work faster and more efficient. This allows you to leverage various AI models for tasks like chatbot interactions, translations, OCR, and more.\n\nWhether you’re working with internal teams or external collaborators, the ONLYOFFICE app for Nextcloud enhances productivity, simplifies workflows, and ensures your files remain secure.",
+    "homepage": "https://www.onlyoffice.com",
+    "licenses": [
+      "AGPL-3.0-only"
+    ]
+  },
  "pantry": {
    "hash": "sha256-jJKOGlbj6fzDpLMFH6JT3ePwddcC4tQMFlDfipb3iRk=",
    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.32.0/pantry-v0.32.0.tar.gz",
@@ -279,6 +329,16 @@
      "agpl"
    ]
  },
+  "polls": {
+    "hash": "sha256-5hujPtXyOaB7l3/UWq4A2lZhxYCWs2/tEAb2GUyYVKY=",
+    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.3.0/polls-v9.3.0.tar.gz",
+    "version": "9.3.0",
+    "description": "A polls app, similar to Doodle/DuD-Poll with the possibility to restrict access (members, certain groups/users, hidden and public).",
+    "homepage": "https://github.com/nextcloud/polls",
+    "licenses": [
+      "agpl"
+    ]
+  },
  "qownnotesapi": {
    "hash": "sha256-6J2o1EBZq1XOBsKAQCBFArsXg07Bvt5h+uL1zp9ddlc=",
    "url": "https://github.com/pbek/qownnotesapi/releases/download/v26.8.0/qownnotesapi-nc.tar.gz",