diff --git a/nixos/doc/manual/release-notes/rl-2505.section.md b/nixos/doc/manual/release-notes/rl-2505.section.md
index 8bea08ecd164..2a063c5b4a9c 100644
--- a/nixos/doc/manual/release-notes/rl-2505.section.md
+++ b/nixos/doc/manual/release-notes/rl-2505.section.md
@@ -161,6 +161,8 @@ Alongside many enhancements to NixOS modules and general system improvements, th
 
 - [immich-public-proxy](https://github.com/alangrainger/immich-public-proxy), a proxy for sharing Immich albums without exposing the Immich API. Available as [services.immich-public-proxy](#opt-services.immich-public-proxy.enable).
 
+- [Omada Software Controller](https://www.tp-link.com/us/business-networking/omada-sdn-controller/omada-software-controller), a professional and free on-premises controller for the Omada Software Defined Networking (SDN) platform, provides centralized management of Omada access points, switches and routers. Available as [services.omada](#opt-services.omada.enable).
+
 - [Zipline](https://zipline.diced.sh/), a ShareX/file upload server that is easy to use, packed with features, and with an easy setup. Available as [services.zipline](#opt-services.zipline.enable).
 
 - [GlitchTip](https://glitchtip.com/), an open source Sentry API compatible error tracking platform. Available as [services.glitchtip](#opt-services.glitchtip.enable).
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index 60fd740db2e1..5da42f9db010 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -1383,6 +1383,7 @@
   ./services/networking/ofono.nix
   ./services/networking/oidentd.nix
   ./services/networking/oink.nix
+  ./services/networking/omada.nix
   ./services/networking/onedrive.nix
   ./services/networking/openconnect.nix
   ./services/networking/openvpn.nix
diff --git a/nixos/modules/programs/wayland/dms-shell.nix b/nixos/modules/programs/wayland/dms-shell.nix
index b24253b57c23..6cf4c40a53b0 100644
--- a/nixos/modules/programs/wayland/dms-shell.nix
+++ b/nixos/modules/programs/wayland/dms-shell.nix
@@ -29,15 +29,13 @@ let
   builtInRemovedMsg = "This is now built-in in DMS and doesn't need additional dependencies.";
 
   optionalPackages =
-    optionals cfg.enableSystemMonitoring [ pkgs.dgop ]
-    ++ optionals cfg.enableVPN [
+    optionals cfg.enableVPN [
       pkgs.glib
       pkgs.networkmanager
     ]
     ++ optional cfg.enableDynamicTheming pkgs.matugen
     ++ optional cfg.enableAudioWavelength pkgs.cava
-    ++ optional cfg.enableCalendarEvents pkgs.khal
-    ++ optional cfg.enableClipboardPaste pkgs.wtype;
+    ++ optional cfg.enableCalendarEvents pkgs.khal;
 in
 {
   imports = [
@@ -47,6 +45,8 @@ in
       path ++ [ "enableSystemSound" ]
     ) "qtmultimedia is now included on dms-shell package.")
     (lib.mkRemovedOptionModule (path ++ [ "enableClipboard" ]) builtInRemovedMsg)
+    (lib.mkRemovedOptionModule (path ++ [ "enableSystemMonitoring" ]) builtInRemovedMsg)
+    (lib.mkRemovedOptionModule (path ++ [ "enableClipboardPaste" ]) builtInRemovedMsg)
   ];
 
   options.programs.dms-shell = {
@@ -86,17 +86,6 @@ in
       };
     };
 
-    enableSystemMonitoring = mkOption {
-      type = types.bool;
-      default = true;
-      description = ''
-        Whether to install dependencies required for system monitoring widgets.
-        This includes process list viewers and system resource monitors.
-
-        Requires: dgop
-      '';
-    };
-
     enableVPN = mkOption {
       type = types.bool;
       default = true;
@@ -141,17 +130,6 @@ in
       '';
     };
 
-    enableClipboardPaste = mkOption {
-      type = types.bool;
-      default = true;
-      description = ''
-        Whether to install dependencies required for pasting directly from the clipboard history support.
-        This enables pressing Shift+Return for pasting entries from the clipboard history.
-
-        Requires: wtype
-      '';
-    };
-
     quickshell = {
       package = mkPackageOption pkgs "quickshell" { };
     };
diff --git a/nixos/modules/services/display-managers/dms-greeter.nix b/nixos/modules/services/display-managers/dms-greeter.nix
index cb6a4126ff9c..53996b3f064f 100644
--- a/nixos/modules/services/display-managers/dms-greeter.nix
+++ b/nixos/modules/services/display-managers/dms-greeter.nix
@@ -44,19 +44,17 @@ let
       makeBinPath [
         cfg.quickshell.package
         compositorPkg
+        pkgs.glib # provides gdbus, used by the fprintd hardware probe and portal reads
       ]
     }
     ${
       escapeShellArgs (
         [
-          "sh"
-          "${cfg.package}/share/quickshell/dms/Modules/Greetd/assets/dms-greeter"
+          "${cfg.package}/bin/dms-greeter"
           "--cache-dir"
           cacheDir
           "--command"
           cfg.compositor.name
-          "-p"
-          "${cfg.package}/share/quickshell/dms"
         ]
         ++ lib.optionals (cfg.compositor.customConfig != "") [
           "-C"
@@ -114,21 +112,7 @@ in
   options.services.displayManager.dms-greeter = {
     enable = mkEnableOption "DankMaterialShell greeter";
 
-    package = mkOption {
-      type = types.package;
-      default = if cfgDms.enable then cfgDms.package else pkgs.dms-shell;
-      defaultText = literalExpression ''
-        if config.programs.dms-shell.enable
-        then config.programs.dms-shell.package
-        else pkgs.dms-shell;
-      '';
-      description = ''
-        The DankMaterialShell package to use for the greeter.
-
-        Defaults to the package from `programs.dms-shell` if it is enabled,
-        otherwise defaults to `pkgs.dms-shell`.
-      '';
-    };
+    package = lib.mkPackageOption pkgs "dms-greeter" { };
 
     compositor = {
       name = mkOption {
diff --git a/nixos/modules/services/networking/omada.nix b/nixos/modules/services/networking/omada.nix
new file mode 100644
index 000000000000..1be5da82f465
--- /dev/null
+++ b/nixos/modules/services/networking/omada.nix
@@ -0,0 +1,140 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.services.omada;
+in
+
+{
+  options = {
+    services.omada = {
+      enable = lib.mkEnableOption "Enable the Omada Software Controller service.";
+
+      package = lib.mkPackageOption pkgs "omada-software-controller" { };
+
+      user = lib.mkOption {
+        type = lib.types.str;
+        default = "omada";
+        description = ''
+          User under which the Omada Software Controller service runs.
+        '';
+      };
+
+      group = lib.mkOption {
+        type = lib.types.str;
+        default = "omada";
+        description = ''
+          Group under which the Omada Software Controller service runs.
+        '';
+      };
+
+      dataDir = lib.mkOption {
+        type = lib.types.path;
+        default = "/var/lib/omada";
+        description = ''
+          The path where the Omada Software Controller stores all data. This path must
+          be in sync with the omada-software-controller package (where it is hardcoded
+          during the build in accordance with its own `dataDir` argument).
+        '';
+      };
+
+      openFirewallDevicePorts = lib.mkOption {
+        type = lib.types.bool;
+        default = false;
+        description = ''
+          Whether to open the firewall ports required for Omada devices to communicate
+          with the Omada Software Controller (discovery, adoption, management, etc.).
+        '';
+      };
+
+      openFirewallWebPorts = lib.mkOption {
+        type = lib.types.bool;
+        default = false;
+        description = ''
+          Whether to open the firewall ports of the web interface (8043, 8088).
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    users.groups.${cfg.group} = { };
+
+    users.users.${cfg.user} = {
+      description = "Omada Software Controller user";
+      group = cfg.group;
+      home = cfg.dataDir;
+      createHome = true;
+      isSystemUser = true;
+    };
+
+    systemd.tmpfiles.settings."10-omada" =
+      lib.genAttrs
+        (map (dir: "${cfg.dataDir}/${dir}") [
+          "data"
+          "logs"
+          "properties"
+          "work"
+        ])
+        (_: {
+          d = {
+            user = cfg.user;
+            group = cfg.group;
+          };
+        });
+
+    systemd.services.omada = {
+      wantedBy = [ "multi-user.target" ];
+      after = [ "network.target" ];
+      description = "Omada Software Controller";
+
+      serviceConfig = {
+        ExecStart = "${lib.getExe cfg.package} start";
+        ExecStop = "${lib.getExe cfg.package} stop";
+        # The control script asks for confirmation (y/n) before starting when
+        # it detects that MongoDB was upgraded across major versions. Answer it,
+        # otherwise its read loop would spin forever on an EOF stdin.
+        StandardInput = "data";
+        StandardInputText = "y";
+        Type = "forking";
+        TimeoutSec = 300;
+        RuntimeDirectory = "omada";
+        RuntimeDirectoryMode = "0755";
+        PIDFile = "/run/omada/omada.pid";
+        WorkingDirectory = cfg.dataDir;
+        StateDirectory = baseNameOf cfg.dataDir;
+        User = cfg.user;
+        Group = cfg.group;
+        Environment = [
+          "OMADA_USER=${cfg.user}"
+        ];
+        Restart = "on-failure";
+      };
+    };
+
+    networking.firewall = {
+      allowedUDPPorts = lib.optionals cfg.openFirewallDevicePorts [
+        19810 # discovery port
+        29810 # discovery port
+      ];
+      allowedTCPPorts =
+        lib.optionals cfg.openFirewallDevicePorts [
+          29811 # management port
+          29812 # adoption port
+          29813 # upgrade port
+          29814 # management port
+          29815 # transfer port
+          29816 # rtty port
+          29817 # device management port
+        ]
+        ++ lib.optionals cfg.openFirewallWebPorts [
+          8043 # web port (HTTPS)
+          8088 # web port (HTTP)
+        ];
+    };
+  };
+}
diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index f1dfba671d2e..f4da70d0ee3c 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -15,7 +15,8 @@
 # Example callTest that just extracts the derivation from the test:
 #   callTest = t: t.test;
 let
-  inherit (pkgs.lib)
+  inherit (pkgs) lib;
+  inherit (lib)
     isAttrs
     isFunction
     mapAttrs
@@ -98,13 +99,25 @@ let
     featureFlags.minimalModules = { };
   };
   evalMinimalConfig = module: nixosLib.evalModules { modules = [ module ]; };
+
+  /**
+    On platforms where NixOS does not run natively, nixosTests is still available
+    as a convenience for running VM tests. This makes them easier to use, and it
+    sidesteps the question of nested virtualisation.
+
+    `runTest` already includes similar logic as part of its [public] interface.
+
+    [public]: https://nixos.org/manual/nixos/stable/#sec-call-nixos-test-outside-nixos
+  */
+  inherit (pkgs) pkgsLinux;
+
   evalSystem =
     module:
     import ../lib/eval-config.nix {
       system = null;
       modules = [
         ../modules/misc/nixpkgs/read-only.nix
-        { nixpkgs.pkgs = pkgs; }
+        { nixpkgs.pkgs = pkgsLinux; }
         module
       ];
     };
@@ -223,8 +236,7 @@ in
   accountsservice = runTest ./accountsservice.nix;
   acl = pkgs.callPackage ./acl.nix { };
   acme = import ./acme/default.nix {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit runTest lib;
   };
   acme-dns = runTest ./acme-dns.nix;
   activation = pkgs.callPackage ../modules/system/activation/test.nix { };
@@ -430,7 +442,7 @@ in
   cloudcompare = import ./cloudcompare.nix { inherit pkgs runTest; };
   cloudlog = runTest ./cloudlog.nix;
   cntr = import ./cntr.nix {
-    inherit (pkgs) lib;
+    inherit lib;
     runTest = runTestOn [
       "aarch64-linux"
       "x86_64-linux"
@@ -609,18 +621,15 @@ in
   ergochat = runTest ./ergochat.nix;
   ersatztv = runTest ./ersatztv.nix;
   espanso = import ./espanso.nix {
-    inherit (pkgs) lib;
-    inherit runTest;
+    inherit lib runTest;
   };
   esphome = runTest ./esphome.nix;
-  etc = pkgs.callPackage ../modules/system/etc/test.nix { inherit evalMinimalConfig; };
+  etc = pkgsLinux.callPackage ../modules/system/etc/test.nix { inherit evalMinimalConfig; };
   etcd = import ./etcd/default.nix { inherit pkgs runTest; };
   etebase-server = runTest ./etebase-server.nix;
   etesync-dav = runTest ./etesync-dav.nix;
   evcc = runTest ./evcc.nix;
-  extra-initrd = import ./extra-initrd.nix {
-    inherit runTest pkgs;
-  };
+  extra-initrd = import ./extra-initrd.nix { inherit runTest; };
   facter = runTest ./facter;
   fail2ban = runTest ./fail2ban.nix;
   fakeroute = runTest ./fakeroute.nix;
@@ -693,11 +702,11 @@ in
   fontconfig-default-fonts = runTest ./fontconfig-default-fonts.nix;
   forgejo = import ./forgejo.nix {
     inherit runTest;
-    forgejoPackage = pkgs.forgejo;
+    forgejoPackage = pkgsLinux.forgejo;
   };
   forgejo-lts = import ./forgejo.nix {
     inherit runTest;
-    forgejoPackage = pkgs.forgejo-lts;
+    forgejoPackage = pkgsLinux.forgejo-lts;
   };
   freenet = runTest ./freenet.nix;
   freescout = import ./freescout {
@@ -724,11 +733,11 @@ in
   gancio = runTest ./gancio.nix;
   garage_1 = import ./garage {
     inherit runTest;
-    package = pkgs.garage_1;
+    package = pkgsLinux.garage_1;
   };
   garage_2 = import ./garage {
     inherit runTest;
-    package = pkgs.garage_2;
+    package = pkgsLinux.garage_2;
   };
   gatus = runTest ./gatus.nix;
   gemstash = import ./gemstash.nix { inherit pkgs runTest; };
@@ -742,8 +751,9 @@ in
   git-pages-modular = runTest ./git-pages.nix;
   gitdaemon = runTest ./gitdaemon.nix;
   gitea = import ./gitea.nix {
-    inherit pkgs runTest;
-    inherit (pkgs) lib;
+    inherit (pkgsLinux) gitea;
+    inherit runTest;
+    inherit lib;
   };
   gitea-actions-runner = runTest ./gitea-actions-runner.nix;
   github-runner = runTest ./github-runner.nix;
@@ -802,8 +812,7 @@ in
   guix = handleTest ./guix { };
   gvisor = runTest ./gvisor.nix;
   h2o = import ./web-servers/h2o {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit lib runTest;
   };
   hadoop = import ./hadoop {
     inherit handleTestOn;
@@ -929,11 +938,13 @@ in
   jibri = runTest ./jibri.nix;
   jirafeau = runTest ./jirafeau.nix;
   jitsi-meet = runTest ./jitsi-meet.nix;
-  jool = import ./jool.nix { inherit pkgs runTest; };
+  jool = import ./jool.nix {
+    pkgs = pkgsLinux;
+    inherit runTest;
+  };
   jotta-cli = runTest ./jotta-cli.nix;
   k3s = import ./rancher {
-    inherit pkgs;
-    inherit (pkgs) lib;
+    inherit lib pkgs;
     runTest = runTestOn [
       "aarch64-linux"
       "x86_64-linux"
@@ -987,8 +998,7 @@ in
   kthxbye = runTest ./kthxbye.nix;
   kubernetes = handleTestOn [ "x86_64-linux" ] ./kubernetes { };
   kubo = import ./kubo {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit lib runTest;
   };
   kvrocks = runTest ./kvrocks.nix;
   labgrid = runTest ./labgrid.nix;
@@ -1105,8 +1115,7 @@ in
   mediamtx = runTest ./mediamtx.nix;
   mediatomb = runTest ./mediatomb.nix;
   mediawiki = import ./mediawiki.nix {
-    inherit (pkgs) lib;
-    inherit runTest;
+    inherit lib runTest;
   };
   meilisearch = runTest ./meilisearch.nix;
   memcached = runTest ./memcached.nix;
@@ -1129,7 +1138,7 @@ in
   mobilizon = runTest ./mobilizon.nix;
   mod_perl = runTest ./mod_perl.nix;
   modular-service-etc = runTest ./modular-service-etc/test.nix;
-  modularService = pkgs.callPackage ../modules/system/service/systemd/test.nix {
+  modularService = pkgsLinux.callPackage ../modules/system/service/systemd/test.nix {
     inherit evalSystem;
   };
   moduleStateRevisions = pkgs.callPackage ./moduleStateRevisions.nix { };
@@ -1160,8 +1169,7 @@ in
   morph-browser = discoverTests (import ./morph-browser.nix);
   mosquitto = runTest ./mosquitto.nix;
   movim = import ./web-apps/movim {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit lib runTest;
   };
   mpd = runTest ./mpd.nix;
   mpv = runTest ./mpv.nix;
@@ -1262,7 +1270,7 @@ in
   nginx-status-page = runTest ./nginx-status-page.nix;
   nginx-tmpdir = runTest ./nginx-tmpdir.nix;
   nginx-unix-socket = runTest ./nginx-unix-socket.nix;
-  nginx-variants = import ./nginx-variants.nix { inherit pkgs runTest; };
+  nginx-variants = import ./nginx-variants.nix { inherit runTest; };
   nifi = runTestOn [ "x86_64-linux" ] ./web-apps/nifi.nix;
   nimdow = runTest ./nimdow.nix;
   nipap = runTest ./web-apps/nipap.nix;
@@ -1366,6 +1374,7 @@ in
   ollama-cuda = runTestOn [ "x86_64-linux" "aarch64-linux" ] ./ollama-cuda.nix;
   ollama-rocm = runTestOn [ "x86_64-linux" "aarch64-linux" ] ./ollama-rocm.nix;
   ollama-vulkan = runTestOn [ "x86_64-linux" "aarch64-linux" ] ./ollama-vulkan.nix;
+  omada = runTestOn [ "x86_64-linux" ] ./omada.nix;
   ombi = runTest ./ombi.nix;
   omnom = runTest ./omnom;
   oncall = runTest ./web-apps/oncall.nix;
@@ -1432,8 +1441,7 @@ in
   patroni = handleTestOn [ "x86_64-linux" ] ./patroni.nix { };
   pcsclite = runTest ./pcsclite.nix;
   pdfding = import ./web-apps/pdfding {
-    inherit (pkgs) lib;
-    inherit runTest;
+    inherit lib runTest;
   };
   pdns-recursor = runTest ./pdns-recursor.nix;
   pdudaemon = runTest ./pdudaemon.nix;
@@ -1501,7 +1509,10 @@ in
       { };
   postfix-tlspol = runTest ./postfix-tlspol.nix;
   postgres-websockets = runTest ./postgres-websockets.nix;
-  postgresql = import ./postgresql { inherit runTest pkgs; };
+  postgresql = import ./postgresql {
+    inherit runTest;
+    pkgs = pkgsLinux;
+  };
   postgrest = runTest ./postgrest.nix;
   power-profiles-daemon = runTest ./power-profiles-daemon.nix;
   powerdns = runTest ./powerdns.nix;
@@ -1539,8 +1550,7 @@ in
   privoxy = runTest ./privoxy.nix;
   prometheus = import ./prometheus { inherit runTest; };
   prometheus-exporters = import ./prometheus-exporters.nix {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit lib runTest;
   };
   prosody = runTest ./xmpp/prosody.nix;
   prosody-mysql = handleTest ./xmpp/prosody-mysql.nix { };
@@ -1580,8 +1590,7 @@ in
   rathole = runTest ./rathole.nix;
   rauc = runTest ./rauc.nix;
   reaction = import ./reaction {
-    inherit (pkgs) lib;
-    inherit runTest;
+    inherit lib runTest;
   };
   readarr = runTest ./readarr.nix;
   readeck = runTest ./readeck.nix;
@@ -1602,8 +1611,7 @@ in
   retroarch = runTest ./retroarch.nix;
   ringboard = runTest ./ringboard.nix;
   rke2 = import ./rancher {
-    inherit pkgs;
-    inherit (pkgs) lib;
+    inherit lib pkgs;
     runTest = runTestOn [
       "aarch64-linux"
       "x86_64-linux"
@@ -1731,8 +1739,7 @@ in
   sunshine = runTest ./sunshine.nix;
   suricata = runTest ./suricata.nix;
   suwayomi-server = import ./suwayomi-server.nix {
-    inherit runTest;
-    inherit (pkgs) lib;
+    inherit lib runTest;
   };
   svnserve = runTest ./svnserve.nix;
   swap-file-btrfs = runTest ./swap-file-btrfs.nix;
@@ -1773,19 +1780,18 @@ in
   system-services-compliance = recurseIntoAttrs (
     import ./system-services-compliance.nix {
       inherit
-        pkgs
         evalSystem
         runTest
         callTest
         ;
+      pkgs = pkgsLinux;
     }
   );
   systemd = runTest ./systemd.nix;
   systemd-analyze = runTest ./systemd-analyze.nix;
   systemd-binfmt = handleTestOn [ "x86_64-linux" ] ./systemd-binfmt.nix { };
   systemd-boot = import ./systemd-boot.nix {
-    inherit runTest runTestOn;
-    inherit (pkgs) lib;
+    inherit lib runTest runTestOn;
   };
   systemd-bpf = runTest ./systemd-bpf.nix;
   systemd-capsules = runTest ./systemd-capsules.nix;
@@ -1971,7 +1977,7 @@ in
   v2ray = runTest ./v2ray.nix;
   varnish80 = runTest {
     imports = [ ./varnish.nix ];
-    _module.args.package = pkgs.varnish80;
+    _module.args.package = pkgsLinux.varnish80;
   };
   vault = runTest ./vault.nix;
   vault-agent = runTest ./vault-agent.nix;
@@ -1989,7 +1995,7 @@ in
   vikunja = runTest ./vikunja.nix;
   vinyl-cache_9 = runTest {
     imports = [ ./vinyl-cache.nix ];
-    _module.args.package = pkgs.vinyl-cache_9;
+    _module.args.package = pkgsLinux.vinyl-cache_9;
   };
   virtualbox = handleTestOn [ "x86_64-linux" ] ./virtualbox.nix { };
   vm-variant = handleTest ./vm-variant.nix { };
@@ -2014,16 +2020,15 @@ in
   whoogle-search = runTest ./whoogle-search.nix;
   wiki-js = runTest ./wiki-js.nix;
   windmill = import ./windmill {
-    inherit pkgs runTest;
-    inherit (pkgs) lib;
+    inherit runTest;
   };
   wine = import ./wine.nix {
     inherit pkgs runTest;
     inherit (pkgs) lib;
   };
   wireguard = import ./wireguard {
-    inherit pkgs runTest;
-    inherit (pkgs) lib;
+    pkgs = pkgsLinux;
+    inherit runTest lib;
   };
   without-nix = runTest ./without-nix.nix;
   wmderland = runTest ./wmderland.nix;
@@ -2031,7 +2036,7 @@ in
   workout-tracker = runTest ./workout-tracker.nix;
   wpa_supplicant = import ./wpa_supplicant.nix { inherit pkgs runTest; };
   wrappers = runTest ./wrappers.nix;
-  writefreely = import ./web-apps/writefreely.nix { inherit pkgs runTest; };
+  writefreely = import ./web-apps/writefreely.nix { inherit runTest; };
   wstunnel = runTest ./wstunnel.nix;
   xandikos = runTest ./xandikos.nix;
   xautolock = runTest ./xautolock.nix;
@@ -2049,8 +2054,7 @@ in
   yarr = runTest ./yarr.nix;
   yb = pkgs.callPackage ./yb.nix { inherit (pkgs.yb.passthru) ybPivHarnessTests testFixtures; };
   ydotool = import ./ydotool.nix {
-    inherit (pkgs) lib;
-    inherit runTest;
+    inherit lib runTest;
   };
   yggdrasil = runTest ./yggdrasil.nix;
   your_spotify = runTest ./your_spotify.nix;
diff --git a/nixos/tests/calibre-server.nix b/nixos/tests/calibre-server.nix
index ce4c92cc96bf..77b92709042d 100644
--- a/nixos/tests/calibre-server.nix
+++ b/nixos/tests/calibre-server.nix
@@ -1,7 +1,6 @@
 {
   pkgs,
   runTest,
-  ...
 }:
 
 let
diff --git a/nixos/tests/certmgr.nix b/nixos/tests/certmgr.nix
index 44d4af92017a..9f5cc2a1cb7c 100644
--- a/nixos/tests/certmgr.nix
+++ b/nixos/tests/certmgr.nix
@@ -1,4 +1,4 @@
-{ runTest, pkgs, ... }:
+{ runTest, pkgs }:
 
 let
   authKey = pkgs.writeText "auth-key" "1234ABCD";
diff --git a/nixos/tests/etcd/default.nix b/nixos/tests/etcd/default.nix
index 16e605550136..348047b3ed6c 100644
--- a/nixos/tests/etcd/default.nix
+++ b/nixos/tests/etcd/default.nix
@@ -1,7 +1,6 @@
 {
   pkgs,
   runTest,
-  ...
 }:
 
 let
diff --git a/nixos/tests/extra-initrd.nix b/nixos/tests/extra-initrd.nix
index 20da3ad8d11b..9fd7084d1345 100644
--- a/nixos/tests/extra-initrd.nix
+++ b/nixos/tests/extra-initrd.nix
@@ -1,7 +1,4 @@
-{
-  runTest,
-  ...
-}:
+{ runTest }:
 let
   common =
     { config, pkgs, ... }:
diff --git a/nixos/tests/gitea.nix b/nixos/tests/gitea.nix
index 4fd0d16ece41..a8a223fa1eca 100644
--- a/nixos/tests/gitea.nix
+++ b/nixos/tests/gitea.nix
@@ -1,5 +1,5 @@
 {
-  pkgs,
+  gitea,
   lib,
   runTest,
   ...
@@ -28,10 +28,18 @@ let
   ];
   makeGiteaTest =
     type:
-    lib.nameValuePair type (runTest {
-      name = "${pkgs.gitea.pname}-${type}";
+    runTest {
+      imports = [
+        module
+      ];
+      name = "${gitea.pname}-${type}";
+      nodes.server.services.gitea.settings.database = { inherit type; };
+    };
+  module =
+    { config, ... }:
+    {
       meta = {
-        inherit (pkgs.gitea.meta) maintainers;
+        inherit (gitea.meta) maintainers;
       };
 
       nodes = {
@@ -42,7 +50,6 @@ let
             services = {
               gitea = {
                 enable = true;
-                database = { inherit type; };
                 package = pkgs.gitea;
                 metricsTokenFile = (pkgs.writeText "metrics_secret" "fakesecret").outPath;
                 settings = {
@@ -70,7 +77,7 @@ let
 
       testScript =
         let
-          inherit (import ./ssh-keys.nix pkgs) snakeOilPrivateKey snakeOilPublicKey;
+          inherit (import ./ssh-keys.nix config.node.pkgs) snakeOilPrivateKey snakeOilPublicKey;
         in
         /* python */ ''
           GIT_SSH_COMMAND = "ssh -i $HOME/.ssh/privk -o StrictHostKeyChecking=no"
@@ -98,7 +105,7 @@ let
 
           server.succeed(
               "su -l gitea -c 'gpg --homedir /var/lib/gitea/data/home/.gnupg "
-              + "--import ${toString (pkgs.writeText "gitea.key" signingPrivateKey)}'"
+              + "--import ${toString (config.node.pkgs.writeText "gitea.key" signingPrivateKey)}'"
           )
 
           assert "BEGIN PGP PUBLIC KEY BLOCK" in server.succeed("curl http://localhost:3000/api/v1/signing-key.gpg")
@@ -150,7 +157,7 @@ let
                              + 'http://localhost:3000/metrics '
                              + '| grep gitea_accesses')
         '';
-    });
+    };
 in
 
-lib.listToAttrs (map makeGiteaTest supportedDbTypes)
+lib.genAttrs supportedDbTypes makeGiteaTest
diff --git a/nixos/tests/hadoop/default.nix b/nixos/tests/hadoop/default.nix
index aef5bd79e359..2d19c94bd6ca 100644
--- a/nixos/tests/hadoop/default.nix
+++ b/nixos/tests/hadoop/default.nix
@@ -1,4 +1,4 @@
-{ handleTestOn, package, ... }:
+{ handleTestOn, package }:
 
 {
   all = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./hadoop.nix {
diff --git a/nixos/tests/limine/default.nix b/nixos/tests/limine/default.nix
index debce99b0fd8..dc3bfdcae30c 100644
--- a/nixos/tests/limine/default.nix
+++ b/nixos/tests/limine/default.nix
@@ -1,6 +1,5 @@
 {
   runTest,
-  ...
 }:
 {
   additionalFiles = runTest ./additional-files.nix;
diff --git a/nixos/tests/nginx-http3.nix b/nixos/tests/nginx-http3.nix
index 5a301f3a06b5..02283a3c5601 100644
--- a/nixos/tests/nginx-http3.nix
+++ b/nixos/tests/nginx-http3.nix
@@ -1,4 +1,4 @@
-{ pkgs, runTest, ... }:
+{ pkgs, runTest }:
 let
   hosts = ''
     192.168.2.101 acme.test
diff --git a/nixos/tests/nginx-variants.nix b/nixos/tests/nginx-variants.nix
index 482c95e89f0c..9511f6612b10 100644
--- a/nixos/tests/nginx-variants.nix
+++ b/nixos/tests/nginx-variants.nix
@@ -1,4 +1,4 @@
-{ pkgs, runTest, ... }:
+{ runTest }:
 builtins.listToAttrs (
   map
     (packageName: {
diff --git a/nixos/tests/nixos-test-driver/options-doc-regression.nix b/nixos/tests/nixos-test-driver/options-doc-regression.nix
index 72ef8abe863d..10d985fbf138 100644
--- a/nixos/tests/nixos-test-driver/options-doc-regression.nix
+++ b/nixos/tests/nixos-test-driver/options-doc-regression.nix
@@ -21,7 +21,6 @@
 
 {
   pkgs,
-  ...
 }:
 let
   evalConfig = import ../../lib/eval-config.nix;
diff --git a/nixos/tests/omada.nix b/nixos/tests/omada.nix
new file mode 100644
index 000000000000..6ab756782720
--- /dev/null
+++ b/nixos/tests/omada.nix
@@ -0,0 +1,33 @@
+{ lib, ... }:
+
+let
+  port = 8088;
+in
+
+{
+  name = "omada";
+  meta.maintainers = with lib.maintainers; [ pathob ];
+
+  nodes.machine = {
+    # The controller (Java) plus the MongoDB it launches need more than the
+    # default 1 GiB of memory.
+    virtualisation.memorySize = 2048;
+
+    services.omada = {
+      enable = true;
+    };
+  };
+
+  testScript = ''
+    def omada_is_up(_) -> bool:
+        status, _ = machine.execute("curl --fail http://localhost:${toString port}")
+        return status == 0
+
+    machine.start()
+    machine.wait_for_unit("omada.service")
+    machine.wait_for_open_port(${toString port})
+
+    with machine.nested("Waiting for UI to work"):
+        retry(omada_is_up)
+  '';
+}
diff --git a/nixos/tests/rancher/default.nix b/nixos/tests/rancher/default.nix
index 82ddc2a292e8..5bd7a9dd9b2e 100644
--- a/nixos/tests/rancher/default.nix
+++ b/nixos/tests/rancher/default.nix
@@ -4,7 +4,6 @@
   lib,
   # service/package name to test
   rancherDistro,
-  ...
 }:
 let
   allPackages = lib.filterAttrs (
diff --git a/nixos/tests/systemd-boot.nix b/nixos/tests/systemd-boot.nix
index 32cd0fe74bd0..93e58b8eabf2 100644
--- a/nixos/tests/systemd-boot.nix
+++ b/nixos/tests/systemd-boot.nix
@@ -2,7 +2,6 @@
   runTest,
   runTestOn,
   lib,
-  ...
 }:
 
 let
diff --git a/nixos/tests/varnish.nix b/nixos/tests/varnish.nix
index f86c94689145..2458fdbf5135 100644
--- a/nixos/tests/varnish.nix
+++ b/nixos/tests/varnish.nix
@@ -1,5 +1,7 @@
-{ pkgs, package, ... }:
+{ config, package, ... }:
 let
+  pkgs = config.node.pkgs;
+
   testPath = pkgs.hello;
 
   # Same stateDir logic as in nixos/modules/services/web-servers/varnish/default.nix
diff --git a/nixos/tests/vinyl-cache.nix b/nixos/tests/vinyl-cache.nix
index 6e9d351f1f6f..f2a52ae507d3 100644
--- a/nixos/tests/vinyl-cache.nix
+++ b/nixos/tests/vinyl-cache.nix
@@ -1,10 +1,11 @@
 {
-  pkgs,
+  config,
   package,
   lib,
   ...
 }:
 let
+  pkgs = config.node.pkgs;
   testPath = pkgs.hello;
 in
 {
diff --git a/nixos/tests/web-apps/writefreely.nix b/nixos/tests/web-apps/writefreely.nix
index fe9889e75332..86fb284f1dde 100644
--- a/nixos/tests/web-apps/writefreely.nix
+++ b/nixos/tests/web-apps/writefreely.nix
@@ -1,7 +1,4 @@
-{
-  runTest,
-  ...
-}:
+{ runTest }:
 
 let
   writefreelyTest =
diff --git a/nixos/tests/windmill/default.nix b/nixos/tests/windmill/default.nix
index 3d432f19dd4b..c4e1eafffc27 100644
--- a/nixos/tests/windmill/default.nix
+++ b/nixos/tests/windmill/default.nix
@@ -1,4 +1,4 @@
-{ runTest, ... }:
+{ runTest }:
 {
   apiIntegration = runTest ./api-integration.nix;
 }
diff --git a/pkgs/applications/networking/browsers/chromium/common.nix b/pkgs/applications/networking/browsers/chromium/common.nix
index f290f2c6f8af..1f68c5a4ac91 100644
--- a/pkgs/applications/networking/browsers/chromium/common.nix
+++ b/pkgs/applications/networking/browsers/chromium/common.nix
@@ -450,7 +450,10 @@ let
 
     patches = [
       ./patches/cross-compile.patch
+    ]
+    ++ lib.optionals (!chromiumVersionAtLeast "153") [
       # Optional patch to use SOURCE_DATE_EPOCH in compute_build_timestamp.py (should be upstreamed):
+      # Stopped applying with M153 due to formatting.
       ./patches/no-build-timestamps.patch
     ]
     ++ lib.optionals (packageName == "chromium") [
@@ -589,7 +592,7 @@ let
         hash = "sha256-jR0G9z2R8VGl2tkB3u0368RyWM1J6qYXqNWwKkYd5zU=";
       })
     ]
-    ++ lib.optionals (chromiumVersionAtLeast "151" && lib.versionOlder llvmVersion "23") [
+    ++ lib.optionals (versionRange "151" "153" && lib.versionOlder llvmVersion "23") [
       # Revert CL 7911761 to help the patch below to apply cleanly.
       (fetchpatch {
         name = "chromium-151-revert-Fix-is_wasm-compile-for-supersize.patch";
@@ -600,12 +603,16 @@ let
         hash = "sha256-musbcTi2XMnJXW79gG+kr9qcYJZ25fv6MeIeId/nAwI=";
       })
     ]
-    ++ lib.optionals (chromiumVersionAtLeast "149" && lib.versionOlder llvmVersion "23") [
+    ++ lib.optionals (versionRange "149" "153" && lib.versionOlder llvmVersion "23") [
       # clang++: error: unknown argument: '-fdiagnostics-show-inlining-chain'
       # clang++: error: unknown argument: '-fsanitize-ignore-for-ubsan-feature=array-bounds'
       # clang++: error: unknown argument: '-fsanitize-ignore-for-ubsan-feature=return'
       ./patches/chromium-149-llvm-22.patch
     ]
+    ++ lib.optionals (chromiumVersionAtLeast "153" && lib.versionOlder llvmVersion "23") [
+      # Rebased variant of the patch above
+      ./patches/chromium-153-llvm-22.patch
+    ]
     ++ lib.optionals (chromiumVersionAtLeast "149" && stdenv.hostPlatform.isAarch64) [
       # [43731/56364] CXX obj/media/gpu/sandbox/sandbox/hardware_video_decoding_sandbox_hook_linux.o
       # FAILED: [code=1] obj/media/gpu/sandbox/sandbox/hardware_video_decoding_sandbox_hook_linux.o
@@ -688,10 +695,44 @@ let
       # by https://github.com/Ahrotahn (ungoogled-chromium, BSD-3-Clause)
       ./patches/ungoogled-chromium-152-crubit.patch
     ]
-    ++ lib.optionals (chromiumVersionAtLeast "152" && lib.versionOlder llvmVersion "23") [
+    ++ lib.optionals (versionRange "152" "153" && lib.versionOlder llvmVersion "23") [
       # error: unknown argument: '-fno-lifetime-safety-inference'
       # error: unknown argument: '-fno-experimental-lifetime-safety-tu-analysis'
       ./patches/chromium-152-dawn-llvm-22.patch
+    ]
+    ++ lib.optionals (chromiumVersionAtLeast "153") [
+      (fetchpatch {
+        name = "chromium-153-revert-DEPS-use-DEPS-provided-python-instead-of-a-system-one.patch";
+        # https://chromium-review.googlesource.com/c/chromium/src/+/8160801
+        url = "https://chromium.googlesource.com/chromium/src/+/ce8851b40f37e74adcb7813256930792f35b8039^!?format=TEXT";
+        decode = "base64 -d";
+        revert = true;
+        includes = [ ".gn" ];
+        hash = "sha256-xrtu5YhxJtBFlKpQCqRR1BBkJyiN/DW+aUCVB1zZVHI=";
+      })
+    ]
+    ++ lib.optionals (chromiumVersionAtLeast "153") [
+      (fetchpatch {
+        name = "chromium-153-revert-Migrate-OpenType-format-check-bindings-to-Crubit.patch";
+        # https://chromium-review.googlesource.com/c/chromium/src/+/8244248
+        url = "https://chromium.googlesource.com/chromium/src/+/493e6c3911e33cc356856bafbffc6cf95521266b^!?format=TEXT";
+        decode = "base64 -d";
+        revert = true;
+        hash = "sha256-+5lddQSOJz7XTZanDl3/lqQ7CQhnCVzvUMpxvE3Sz2c=";
+      })
+    ]
+    ++ lib.optionals (chromiumVersionAtLeast "153") [
+      (fetchpatch {
+        name = "chromium-153-revert-devtools-frontend-Remove-TSGO-flag.patch";
+        # https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/8193297
+        url = "https://chromium.googlesource.com/devtools/devtools-frontend/+/2691b4ae139d2e7b6244f05139a0b85082c7473c^!?format=TEXT";
+        decode = "base64 -d";
+        stripLen = 1;
+        extraPrefix = "third_party/devtools-frontend/src/";
+        revert = true;
+        hash = "sha256-Dip5axpXSJbdGmtS7t81nLCvjRPBSkAuJA4Lo6MFKLw=";
+      })
+
     ];
 
     postPatch =
@@ -968,6 +1009,10 @@ let
         use_pulseaudio = true;
         link_pulseaudio = true;
       }
+      // lib.optionalAttrs (chromiumVersionAtLeast "153") {
+        use_typescript_go = false;
+        devtools_use_typescript_go = false;
+      }
       // lib.optionalAttrs ungoogled (lib.importTOML ./ungoogled-flags.toml)
       // (extraAttrs.gnFlags or { })
     );
diff --git a/pkgs/applications/networking/browsers/chromium/info.json b/pkgs/applications/networking/browsers/chromium/info.json
index b8fff62700cd..8e37c9414e24 100644
--- a/pkgs/applications/networking/browsers/chromium/info.json
+++ b/pkgs/applications/networking/browsers/chromium/info.json
@@ -1,59 +1,59 @@
 {
   "chromium": {
-    "version": "152.0.7977.82",
+    "version": "153.0.8010.36",
     "chromedriver": {
-      "version": "152.0.7977.83",
-      "hash_darwin": "sha256-cx8v6bu6MuSU+LHOGmxcOWNhH7tZFaegHfcMv+RSZGg=",
-      "hash_darwin_aarch64": "sha256-OM3ogo/Z76H8E8F9RhbcLwjSEgWNxdBJxngDI/nHhkI="
+      "version": "153.0.8010.37",
+      "hash_darwin": "sha256-IMyEnUmK3slNB/QDZ+vtUyzHyU0AB+L6+BMbpCRluYA=",
+      "hash_darwin_aarch64": "sha256-cd1ZWatLQFIkPtCdVacrxFaFfj3rjG9qJ7kGlL3C6OA="
     },
     "deps": {
       "depot_tools": {
-        "rev": "38c391feba5fb96812f9028da12413ffc39df394",
-        "hash": "sha256-yOd+k4GJ/unOVCm2Fj1oDHOMKV87CuBO/z0li3owNQk="
+        "rev": "6411ed52842756261c66b6b8ece6b53ade2570f1",
+        "hash": "sha256-x08CgrvsdaP0+MY8ea0H8jWjgc7/B+ipRhpCLm41lBQ="
       },
       "gn": {
-        "version": "0-unstable-2026-07-23",
-        "rev": "641ace93dd9560e75e7add0d08f77b446fbb3b78",
-        "hash": "sha256-ovLx6KaORdXqnWgbsGEty10k2CHuCmTk3yEqy5//ovk="
+        "version": "0-unstable-2026-08-14",
+        "rev": "e8a8e0932a5e42a99e5896aa58e3b8290f4e5b8c",
+        "hash": "sha256-qvQ13Ws2tb4i2Hdu34kBHivYPAn8w06zjLdQgK4BIJg="
       },
       "npmHash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg="
     },
     "DEPS": {
       "src": {
         "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "d04cdb24d67b081f6cf80200ffc5233f44b61109",
-        "hash": "sha256-JiYTfMJBtUWMUSicQdSCXNUtgjLGeaMj4vCNpMvYACk=",
+        "rev": "507c6ee3e2f3b2ca0e660547e5b9ea4820c67f4c",
+        "hash": "sha256-q29a3PWQ7wMG4/JL9EyCK7EaDCeG+4Q/ruemOvvgeZM=",
         "recompress": true
       },
       "src/third_party/clang-format/script": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/clang/tools/clang-format.git",
-        "rev": "6eddfb5ec5f92127a531eda66c568d3a11e7ec11",
-        "hash": "sha256-Cm6BOOlEyD0kdYxMSmk6Fj1Dnfs3zCzXsm+BOXgBme0="
+        "rev": "70510081984cfcdb14a15b3e08dfe9776dc7ed37",
+        "hash": "sha256-IC5Dy3elgEezXmRyDbafx5i+V9wiDLMmnpi7O7BucdE="
       },
       "src/third_party/compiler-rt/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/compiler-rt.git",
-        "rev": "e1c9323385b40780f574f440a8a9ad83855712b0",
-        "hash": "sha256-oxGL+ct1z5S9wduYINjiZrjJx1HlAJjyMPEoDyhIfvo="
+        "rev": "0ccff08262472b88b5d5d193342d84ba4f6fa3fa",
+        "hash": "sha256-+HdvQVqX5F0ylUccsk3H4nx6TEwMr53HCyAlKC4IQPk="
       },
       "src/third_party/libc++/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxx.git",
-        "rev": "b16984ce99c702355a5b2b4c52574e82cec41fb9",
-        "hash": "sha256-ZVgUAi5rYj17N3nAEvLQXZLCxnmvxIo2RpJ3geTSyWQ="
+        "rev": "97b436da4c33663581d394f4ee0a5977fc38c2f4",
+        "hash": "sha256-HMvG9asIDID5KHhQdScfVYx/7iU9+5o1BjOXf0Ev7JY="
       },
       "src/third_party/libc++abi/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxxabi.git",
-        "rev": "8f11bb1d4438d0239d0dfc1bd9456a9f31629dda",
-        "hash": "sha256-L5CUvhpOLS+NBNGssCv0pY9rsDFuAI0LlPjXQRfy62A="
+        "rev": "fc1897a2c12aa27e703c3ed48b62eba8abf4ce19",
+        "hash": "sha256-oH39u1eOso+gV3hHMJ9DFM8FzSbYMFJmWKVbOyX0VoU="
       },
       "src/third_party/libunwind/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libunwind.git",
-        "rev": "b2ff0e6b9ac002918d7a9ce982eee88dcc27a450",
-        "hash": "sha256-VK9w68Im896xi4cymhtfvh7xdRJZB78YEvUYyxqBu48="
+        "rev": "0790de42df7835816d95ce62c598f9fef5ef4e6c",
+        "hash": "sha256-XbJ5wvqLsRqkZzcvtE0XZjs0XLREaed1N8/nQF4esyw="
       },
       "src/third_party/llvm-libc/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libc.git",
-        "rev": "3ea89f4304312567e31a8eb45e0737577e65b676",
-        "hash": "sha256-g8ZtRI0yazHgli0/TMz/SeAJ5SoMZdir+/29GFQAczM="
+        "rev": "20fd93c3ba54634c545ae2045fb207e7e58bb648",
+        "hash": "sha256-KlYMGfOIIIFwsZPxXKPCA06PJW2+hO84ql5uow2ONRY="
       },
       "src/chrome/test/data/perf/canvas_bench": {
         "url": "https://chromium.googlesource.com/chromium/canvas_bench.git",
@@ -72,8 +72,8 @@
       },
       "src/docs/website": {
         "url": "https://chromium.googlesource.com/website.git",
-        "rev": "e9dfa88cee41c025709e79164ceb0758cfe76a67",
-        "hash": "sha256-mWAwegdaC7LEOYN5Y/xcJBv4R9dInK4VW35/U8rn7Wg="
+        "rev": "ebebad7d52ad3d28f5a21a75561e9bc2b496e472",
+        "hash": "sha256-QZ+SA3FYN0bbfmmLOKLqbxWW1oGN+IigsJrz8ZtTXRI="
       },
       "src/media/cdm/api": {
         "url": "https://chromium.googlesource.com/chromium/cdm.git",
@@ -82,8 +82,8 @@
       },
       "src/net/third_party/quiche/src": {
         "url": "https://quiche.googlesource.com/quiche.git",
-        "rev": "1ba0d99a5c2fec4f4dbb7f98f251b05dcf4e2968",
-        "hash": "sha256-odzVQD9WyldgAv8QRvXABKaSLy1DL6DRhdVQSer4HVM="
+        "rev": "2c4a124642f095f995cd2e9e2fe10decc08df662",
+        "hash": "sha256-5lcY8lJ+nwRrNe9oycRE4C9FzmkqlWyBL4J/YYSiWiQ="
       },
       "src/testing/libfuzzer/fuzzers/wasm_corpus": {
         "url": "https://chromium.googlesource.com/v8/fuzzer_wasm_corpus.git",
@@ -92,8 +92,8 @@
       },
       "src/third_party/angle": {
         "url": "https://chromium.googlesource.com/angle/angle.git",
-        "rev": "7df613367a1d4ca9aea9ece344d4580d32d132a9",
-        "hash": "sha256-bYGok5QvWJoCfliRPQqrDz0ttKf1r9HoFxoC4qwdI3o="
+        "rev": "fca5efdfeff5daf430bc4458375c8d6b7e457400",
+        "hash": "sha256-IoHQfdjZ6TV03VVzHZcxhPqGmNYNhKZrPG4BvQQfC7c="
       },
       "src/third_party/angle/third_party/glmark2/src": {
         "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2",
@@ -107,18 +107,13 @@
       },
       "src/third_party/angle/third_party/VK-GL-CTS/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/VK-GL-CTS",
-        "rev": "3b7cbad78e93bcda20ccf68efae2d71695dd0f65",
-        "hash": "sha256-bPgrkZ3my/tl+H2/YuAxmn83svPSw4l6lnz8zGHQtuk="
+        "rev": "0b04c470ed78569b0b778ece1262d88455ab2b00",
+        "hash": "sha256-PuB0CciB7Gp5f68f5lGxg7f3avOYIFTOJQ1ZKRkuUHc="
       },
       "src/third_party/anonymous_tokens/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/anonymous-tokens.git",
-        "rev": "e07c92bc81cfd4203e6158cac115fc44c27b31b8",
-        "hash": "sha256-NY/RkTCl/7KBJuIS6pa3sjdgyccWDrSfrUwBqWgL/4I="
-      },
-      "src/third_party/aria-practices/src": {
-        "url": "https://chromium.googlesource.com/external/github.com/w3c/aria-practices.git",
-        "rev": "7b134ce6d19497cce8a67db4a9f59980baf853dc",
-        "hash": "sha256-POnvoO1KfzJj4CbcMPI0pUTRk5EtHLTOyKKmJCZdXOc="
+        "rev": "de00da44e56cf44f15d7aefe69e122e743e5a019",
+        "hash": "sha256-pV0ltk+MOZSgg92w2VYy2PCK8RLwkoG4hLWpeMxdMvk="
       },
       "src/third_party/readability/src": {
         "url": "https://chromium.googlesource.com/external/github.com/mozilla/readability.git",
@@ -127,28 +122,28 @@
       },
       "src/third_party/content_analysis_sdk/src": {
         "url": "https://chromium.googlesource.com/external/github.com/chromium/content_analysis_sdk.git",
-        "rev": "2a8191af30a4d1f591e2f758e595bdeea139e93a",
-        "hash": "sha256-EoEyau3eFcfnftdUSQuLiikIEwVZR7E4Th+qkCdk7kU="
+        "rev": "0a0e7ea516249e786d5a8884552bbd6e163d89cb",
+        "hash": "sha256-dRK4RDkoYcpmRKap6W6lUlP9yyzXj7c/DJlug1mjazc="
       },
       "src/third_party/dav1d/libdav1d": {
         "url": "https://chromium.googlesource.com/external/github.com/videolan/dav1d.git",
-        "rev": "54706fc6bc0cdecab7e9593974a4039cc038fca7",
-        "hash": "sha256-L3a9MmPWJlxmRa19glWDLvkXHev5oiM5/fxtKOBPMxI="
+        "rev": "52b9d3d3ec525f5a20849145fa0e879d585f4911",
+        "hash": "sha256-WVsYrZcVQMCmfjFPFKzh5JZJY46+DnUquin9lsQclWI="
       },
       "src/third_party/dawn": {
         "url": "https://dawn.googlesource.com/dawn.git",
-        "rev": "ab8827bc57b176eeaa89f71324130c02d4d41145",
-        "hash": "sha256-Xd1FsdIBO6hzNECnNnXR0306woHl5/L+5WZ/pxTlYfA="
+        "rev": "225a7ba1bcb997d26de3e894e04fb341638e8c5a",
+        "hash": "sha256-/ic1j1gu2wl5wCLCESfEcsLAPU5Dmsx8oKFb6RhYzg4="
       },
       "src/third_party/dawn/third_party/glfw3/src": {
         "url": "https://chromium.googlesource.com/external/github.com/glfw/glfw",
-        "rev": "463cf73610d911e8eff95ae345143137cf610be4",
-        "hash": "sha256-+WG+0KALV10B+1hOJzyiU4azlJIej/F5DtqtSkEN040="
+        "rev": "92dcf4ce74f2e2554a98fea09be7c705c17daa5a",
+        "hash": "sha256-8Hu8KQIw9SVRuQPzUbl907Xw+ImdX0bkBnqkA4DDmo4="
       },
       "src/third_party/dawn/third_party/directx-shader-compiler/src": {
         "url": "https://chromium.googlesource.com/external/github.com/microsoft/DirectXShaderCompiler",
-        "rev": "1f8a14aecd4f2f25991fa9f7aad6c320fea91409",
-        "hash": "sha256-nesLgajCiFHwb2TKwzlCERFb6wOkwqpMT5z6nzj2Q9Y="
+        "rev": "4b537fd7a7f83373000dea9a3d1d308bf47c3d45",
+        "hash": "sha256-bRctHtMo0S4PoSoXJ8XV5D61+trCVBQ+L5kD3huj+ik="
       },
       "src/third_party/dawn/third_party/directx-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/microsoft/DirectX-Headers",
@@ -157,8 +152,8 @@
       },
       "src/third_party/dawn/third_party/OpenGL-Registry/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/OpenGL-Registry",
-        "rev": "9d527dbc81bb76e35ba284fe385ed8a5ddb90cbc",
-        "hash": "sha256-vNXA115a0tDvs7cyLobu/9cgCAPFrEYHUFVM8A/AX88="
+        "rev": "e8f7cd0e35ac8d6f5667a021ff83d04b1fec41ef",
+        "hash": "sha256-5muDTFLFRdz24czuBM9x7QIjJdRj3gzJEItP5A8Xypw="
       },
       "src/third_party/dawn/third_party/EGL-Registry/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/EGL-Registry",
@@ -167,13 +162,13 @@
       },
       "src/third_party/dawn/third_party/webgpu-cts": {
         "url": "https://chromium.googlesource.com/external/github.com/gpuweb/cts",
-        "rev": "499044af47ec2717e06e644d0943e6fcdb3f3538",
-        "hash": "sha256-M8TWqKdqoiZ01vbDpcRyPWIOaBPCPdSSflxcIpbYjFA="
+        "rev": "2959e1c3959aa55cd3f02726995ae68159d0e064",
+        "hash": "sha256-Z8hszmUjsRupyLk6LTit1R2rZyYfOakTJ75niMwl/Xs="
       },
       "src/third_party/dawn/third_party/webgpu-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/webgpu-native/webgpu-headers",
-        "rev": "b3f67b89929c133403fd95638be4ef96b56ddca0",
-        "hash": "sha256-pLsvlbh1BCEtfQNejm2XilpelZmNg1/NuLq0agIGqQI="
+        "rev": "01addc4ba8a2915a061b7095a6768b512071ab96",
+        "hash": "sha256-E8SldE2oDNgkWX1CL1NoNSuZQvN6ffKDesWLovI+EGs="
       },
       "src/third_party/disarm/src": {
         "url": "https://chromium.googlesource.com/external/github.com/aengelke/disarm.git",
@@ -202,13 +197,13 @@
       },
       "src/third_party/boringssl/src": {
         "url": "https://boringssl.googlesource.com/boringssl.git",
-        "rev": "572a4c68475d284b34675f45ddbb9c158ef3c2ae",
-        "hash": "sha256-gW+Ksd/boITK5ZTDIwhIgPAdPQNi8MvP7ru6qMdtorI="
+        "rev": "defe5810ee8be430bcdeccf46a199bec0e93abdb",
+        "hash": "sha256-u+rYY4gO9oKrkKxSMl/2AnxtdfP2ca+yb+08rvL4qIY="
       },
       "src/third_party/breakpad/breakpad": {
         "url": "https://chromium.googlesource.com/breakpad/breakpad.git",
-        "rev": "69e9aada412e81575a95d0d94f4592fe1b8dfc15",
-        "hash": "sha256-v0Qw8nlXR6Dnkbt7I0Fe7HKv9mtf/9h0xl4HaCHPJjA="
+        "rev": "418aacd617897c19d960ec3e649f42ea95a6363a",
+        "hash": "sha256-/lUMLXbjhSzQYQuSBFKdrit2jiAv1oM4bhTyvpN5+bI="
       },
       "src/third_party/cast_core/public/src": {
         "url": "https://chromium.googlesource.com/cast_core/public",
@@ -217,8 +212,8 @@
       },
       "src/third_party/catapult": {
         "url": "https://chromium.googlesource.com/catapult.git",
-        "rev": "d810008022eeaefcbea50393ea5baa0930b27047",
-        "hash": "sha256-H2CpevfSmr6suNHkkO97u0Nmu1n3g9v36ea+M8JPpZo="
+        "rev": "1d18f6e11082de030c45fd55b556d15e3aa628a8",
+        "hash": "sha256-q2LYVudrEEudWHdoN6UagcoR3l9cx682IvfdB4GZMB8="
       },
       "src/third_party/ced/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/compact_enc_det.git",
@@ -242,8 +237,8 @@
       },
       "src/third_party/cpuinfo/src": {
         "url": "https://chromium.googlesource.com/external/github.com/pytorch/cpuinfo.git",
-        "rev": "ea6b9f1bb6e1001d8b21574d5bc78ddef62e499d",
-        "hash": "sha256-/QsOjDik0TnH3FnK7LOwsJkvX+O+2DRFX4eF3MxD3fc="
+        "rev": "66ee79c038d70dad9f08705b2c9b3e58f6d8f512",
+        "hash": "sha256-A+kTj3GthwmO2kKeG3gG/zjvvt45OmuEvAtRLzwfEyM="
       },
       "src/third_party/crc32c/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/crc32c.git",
@@ -252,34 +247,39 @@
       },
       "src/third_party/cros_system_api": {
         "url": "https://chromium.googlesource.com/chromiumos/platform2/system_api.git",
-        "rev": "54e5484f94e59fdc31e7821293692a8bb47f88a3",
-        "hash": "sha256-TUW8y9as37owHYgg4mTs9ZUmZ4G+N1Njtrs6eyY5MDU="
+        "rev": "faf06f1112b67fead7dbd81cd9f769f1c9c22726",
+        "hash": "sha256-wdZzNbmtuUu/NhQz2eaNiSeUYiO6jtZ5RYUDQavrhdw="
       },
       "src/third_party/crossbench": {
         "url": "https://chromium.googlesource.com/crossbench.git",
-        "rev": "eb6e4790f4fc6f2f66a20aba07de9a58985db46b",
-        "hash": "sha256-kEMKNDP57Q3m2eBjb0McScZTxrFpLTIE/9dSAupTOJ4="
+        "rev": "98b5ff69cfec93bbdb98695850e7a15cc82101de",
+        "hash": "sha256-SwjdB0nvdbfnKhCNPhjRpK70P3B5RfDx6KHb6Zjn0YM="
       },
       "src/third_party/crossbench-web-tests": {
         "url": "https://chromium.googlesource.com/chromium/web-tests.git",
-        "rev": "92d748acb154cb58c76ad1d509378d5aa8669755",
-        "hash": "sha256-vh6uX1jXhxDgqfXnme/nh8W+O4Qq+Fx33lSQ08LNunM="
+        "rev": "b9000ed38c9a012d961d72918b4b33000309bb06",
+        "hash": "sha256-3OZeEcJaxMFHUK5JzbhkHdFn1kBWDYsc9GgHCDHUKgg="
       },
       "src/third_party/depot_tools": {
         "url": "https://chromium.googlesource.com/chromium/tools/depot_tools.git",
-        "rev": "38c391feba5fb96812f9028da12413ffc39df394",
-        "hash": "sha256-yOd+k4GJ/unOVCm2Fj1oDHOMKV87CuBO/z0li3owNQk="
+        "rev": "6411ed52842756261c66b6b8ece6b53ade2570f1",
+        "hash": "sha256-x08CgrvsdaP0+MY8ea0H8jWjgc7/B+ipRhpCLm41lBQ="
       },
       "src/third_party/devtools-frontend/src": {
         "url": "https://chromium.googlesource.com/devtools/devtools-frontend",
-        "rev": "04db1f5240b636511ec4e9058a78f8274a7f65ee",
-        "hash": "sha256-vZxKC/QD2dHNnVm9OZI1Bo0Jdnn+AJhFpXYSXXF7JsA="
+        "rev": "511172b786248e29d7493bf954faa57f834dc5b3",
+        "hash": "sha256-jKXBklk5bjhwmJ9DlKmuI33y17JglrZuHejufeTm4t4="
       },
       "src/third_party/dom_distiller_js/dist": {
         "url": "https://chromium.googlesource.com/chromium/dom-distiller/dist.git",
         "rev": "199de96b345ada7c6e7e6ba3d2fa7a6911b8767d",
         "hash": "sha256-yuEBD2XQlV3FGI/i7lTmJbCqzeBiuG1Qow8wvsppGJw="
       },
+      "src/third_party/ds_store/src": {
+        "url": "https://chromium.googlesource.com/external/github.com/dmgbuild/ds_store.git",
+        "rev": "5cf0b73afdaf6592666364c354501b51c5ce606e",
+        "hash": "sha256-o9oI002FqQHe15yZbv4I7bHMr1NkFghKnLaZKNHZswQ="
+      },
       "src/third_party/dragonbox/src": {
         "url": "https://chromium.googlesource.com/external/github.com/jk-jeon/dragonbox.git",
         "rev": "beeeef91cf6fef89a4d4ba5e95d47ca64ccb3a44",
@@ -287,8 +287,8 @@
       },
       "src/third_party/eigen3/src": {
         "url": "https://chromium.googlesource.com/external/gitlab.com/libeigen/eigen.git",
-        "rev": "d53ac33805ba0a23fa139adaf24227fb6707e6fa",
-        "hash": "sha256-+s/4HVUzKJR5OVcoxwiEzB8F89lov24g0HBPg3tp9Xs="
+        "rev": "76a7c53018c33cd39e0effeb697fa3295bbd3179",
+        "hash": "sha256-R5VxpUMkWwr41wYDA+8Z72aSg0q7+8PX9R7PFRanllg="
       },
       "src/third_party/farmhash/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/farmhash.git",
@@ -307,8 +307,8 @@
       },
       "src/third_party/ffmpeg": {
         "url": "https://chromium.googlesource.com/chromium/third_party/ffmpeg.git",
-        "rev": "2b68d2babae73714846961fb0ee47e3b3d2e39a9",
-        "hash": "sha256-Bl8lAM5sHLZ9BHSIaWr5+P/8s014SXsgSmdLya5gd64="
+        "rev": "53fa34a23be9054d25ac2500dbdae9a0e570bb5c",
+        "hash": "sha256-yQE2hS6iClqZQqXXRkzjrYZQh9PIkHhLOeQ8V/j7eKU="
       },
       "src/third_party/flac": {
         "url": "https://chromium.googlesource.com/chromium/deps/flac.git",
@@ -337,8 +337,8 @@
       },
       "src/third_party/freetype/src": {
         "url": "https://chromium.googlesource.com/chromium/src/third_party/freetype2.git",
-        "rev": "656cb777798fa420a13faba3758779e9ed6c4798",
-        "hash": "sha256-i1X/ETNJTAL3A5pOiUcZRYpqjhPvZIm8FG1HMQreW6g="
+        "rev": "9e9d3b73f31367dbb4261f93c727a277f6632c77",
+        "hash": "sha256-NoXERTcn2SIddhYFtAdRlnikNtVR9GB48aMJqCRwP3E="
       },
       "src/third_party/fxdiv/src": {
         "url": "https://chromium.googlesource.com/external/github.com/Maratyszcza/FXdiv.git",
@@ -347,18 +347,13 @@
       },
       "src/third_party/harfbuzz/src": {
         "url": "https://chromium.googlesource.com/external/github.com/harfbuzz/harfbuzz.git",
-        "rev": "28f4dc622fef010dab12f4275ac195b5d4a4a704",
-        "hash": "sha256-wqycfs0TITlLu0iJICjAqSX82u8LGrr/NaZ+pgPvycs="
+        "rev": "dfdc088c4d7c5d31dd5b13070b919b51f6c21ea8",
+        "hash": "sha256-DNWpvXkuTMc89lZTTrVWPMj9YQCw80gxOCh2Gmnlw70="
       },
       "src/third_party/ink/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/ink.git",
-        "rev": "e781093cb91ad22a666f1880f5122fe2ed30ecfd",
-        "hash": "sha256-j9FIfGrrNEQB3wI2zMvjUksLBEdx8yrVf1NAbJSyjAI="
-      },
-      "src/third_party/instrumented_libs": {
-        "url": "https://chromium.googlesource.com/chromium/third_party/instrumented_libraries.git",
-        "rev": "e8cb570a9a2ee9128e2214c73417ad2a3c47780b",
-        "hash": "sha256-5cb9qhSEzb941pF5HH0Br+x9wEH7MiGwQttvErb2mZo="
+        "rev": "a4349e28c716c7baf0aba80d7602476ff9e65662",
+        "hash": "sha256-hgYJYb/6zwnW6vnuOmfzsFZD2x1a07jn9PO9OXY3hGI="
       },
       "src/third_party/emoji-segmenter/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/emoji-segmenter.git",
@@ -392,18 +387,18 @@
       },
       "src/third_party/icu": {
         "url": "https://chromium.googlesource.com/chromium/deps/icu.git",
-        "rev": "d578f2e8b7bd5938e21cfb6bf15c079e0aa5b738",
-        "hash": "sha256-DsktUjKFFbeSqlFZTBqbZgvuJLOKvssCym2M3tcOJtw="
+        "rev": "8cc91d9b6ab9991802fd208ee03a69714fd0251c",
+        "hash": "sha256-vIkKJ5YaSLJZCZ821hCDgceZQC/9JKPZbIHBEZpOUes="
       },
       "src/third_party/nlohmann_json/src": {
         "url": "https://chromium.googlesource.com/external/github.com/nlohmann/json.git",
-        "rev": "3565f40229515411177c196ec912a06307802ed6",
-        "hash": "sha256-kngBPCN5i+5kzJ95pJ5vY2RLa9P4JYs4e+7Qn3QWsc4="
+        "rev": "55f93686c01528224f448c19128836e7df245f72",
+        "hash": "sha256-cECvDOLxgX7Q9R3IE86Hj9JJUxraDQvhoyPDF03B2CY="
       },
       "src/third_party/jsoncpp/source": {
         "url": "https://chromium.googlesource.com/external/github.com/open-source-parsers/jsoncpp.git",
-        "rev": "edc01ab10f52135ec80e3589b6b4e0a9c65b27fd",
-        "hash": "sha256-mdQo7AiS3DzTF8CqCRT9oL60AzGLQCFng7KUFaFEBIM="
+        "rev": "60de77f915ab08499032d6e5a63e05e974f85d01",
+        "hash": "sha256-mAIscGzXFVQxP8C2znDR6y/IXkGxq+p0gxdanJeyFME="
       },
       "src/third_party/leveldatabase/src": {
         "url": "https://chromium.googlesource.com/external/leveldb.git",
@@ -412,13 +407,13 @@
       },
       "src/third_party/libFuzzer/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/compiler-rt/lib/fuzzer.git",
-        "rev": "3f386be62e362fa50284ebd24262966f1a93798e",
-        "hash": "sha256-vQBWi+4ynPBhZma/2+ApbhT9tbOCd8U+QrabC8GnqKQ="
+        "rev": "5811dc57603eac1fa0e76addedb77f72f62bfa2d",
+        "hash": "sha256-NfhWg32W2GB3zlDYX+4nrYFeka92tfg3XiGQO5vLDPo="
       },
       "src/third_party/fuzztest/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/fuzztest.git",
-        "rev": "239bf6cc1ffcbad7d5c96e3b836b474654cbf96c",
-        "hash": "sha256-h268YPbMTgr5zd0bhTh1Xj/BcCxBhDD60o6+oelW/BQ="
+        "rev": "8bc765afc32fa8210cfe827ff4c94ab7db1c518b",
+        "hash": "sha256-J0HpOSEizCK23tr0D6+n3tFiKds2kEhfVIYhRNawiLw="
       },
       "src/third_party/domato/src": {
         "url": "https://chromium.googlesource.com/external/github.com/googleprojectzero/domato.git",
@@ -432,13 +427,13 @@
       },
       "src/third_party/libaom/source/libaom": {
         "url": "https://aomedia.googlesource.com/aom.git",
-        "rev": "d08a82575de50dc99f3b3d324e7b8304836fe0ef",
-        "hash": "sha256-32WklYoVgBiMxnY+2nOckwmKjZBKZtgwKBmStoO8y/Q="
+        "rev": "7a210280be0986d63abae0661b71d0c342560b9d",
+        "hash": "sha256-fQ/zyAYCwZDAJfU6+7KmGcBe5iiBy1N9iZPPeHNhkcY="
       },
       "src/third_party/crabbyavif/src": {
         "url": "https://chromium.googlesource.com/external/github.com/webmproject/CrabbyAvif.git",
-        "rev": "61f5abadda7b179f90e557fed6ae7a3d78bd8231",
-        "hash": "sha256-N9YwO68d3CXPje43fWs9CoO5Sc3wIULta7n8cp+2Efs="
+        "rev": "a843d6269faf338da244b981cfeb7601007b4e6c",
+        "hash": "sha256-k8cFaQ5Y+Cglhk07IdQrhw+PZ5Ilu/nhnbYU9WnOX8k="
       },
       "src/third_party/nearby/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/nearby-connections.git",
@@ -452,8 +447,8 @@
       },
       "src/third_party/jetstream/main": {
         "url": "https://chromium.googlesource.com/external/github.com/WebKit/JetStream.git",
-        "rev": "b7babdf323e64e69bd2f6c376189c15825f5c73a",
-        "hash": "sha256-s6UMdUYWZqk/MbhyCi2zdQNgni98gGsYxcuUh/5AUy0="
+        "rev": "7769b693502fa80f28a97bbfacd3296e0513acc5",
+        "hash": "sha256-jh1FTtuS2NVPCmHrSG72lMITbsZlQj7VH2fh0l3NjLM="
       },
       "src/third_party/jetstream/v2.2": {
         "url": "https://chromium.googlesource.com/external/github.com/WebKit/JetStream.git",
@@ -522,8 +517,8 @@
       },
       "src/third_party/libphonenumber/src": {
         "url": "https://chromium.googlesource.com/external/libphonenumber.git",
-        "rev": "eee81630a337b9045c6db4577cf60bb1a2c6cbd1",
-        "hash": "sha256-voK+aAFzFGTXg6UVprNiD5Mbh6hW75EKbtzqIjPsxI0="
+        "rev": "17c9061a3af14f2e10907d73df92601b27785713",
+        "hash": "sha256-3p1NYvD5k5jOhxAJiOdijlsO3ca7YaQMQ5iCurbNp24="
       },
       "src/third_party/libprotobuf-mutator/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/libprotobuf-mutator.git",
@@ -547,8 +542,8 @@
       },
       "src/third_party/libvpx/source/libvpx": {
         "url": "https://chromium.googlesource.com/webm/libvpx.git",
-        "rev": "ade52487a37ef76a0f209bd39bea9fe67d6db4c4",
-        "hash": "sha256-Ke28x3c0Ssg2GFfHmFlfW8fex3jSuBcN0e6PXzH0b5g="
+        "rev": "8729fc25eaaace0736e6a2e1da3cd307f75446fc",
+        "hash": "sha256-sBTu4Rx1xkJIYoAc7jcrXcZbeDyfTrglyzag80lo0o4="
       },
       "src/third_party/libwebm/source": {
         "url": "https://chromium.googlesource.com/webm/libwebm.git",
@@ -562,18 +557,23 @@
       },
       "src/third_party/libyuv": {
         "url": "https://chromium.googlesource.com/libyuv/libyuv.git",
-        "rev": "26e56be0f984af3dae4d0c0ab7a0bac8ac20e1b0",
-        "hash": "sha256-Ievf2MXM7VX9+R85N3i2W+1jZSbt5mvy1SCNc0iqJYw="
+        "rev": "a0fa6329391922faca64955c1a7bf635ab87d833",
+        "hash": "sha256-8h+PCcocc4fZZWUZ4h1vCtTX4m91FCar6yJ2addm43g="
       },
       "src/third_party/lss": {
         "url": "https://chromium.googlesource.com/linux-syscall-support.git",
         "rev": "29164a80da4d41134950d76d55199ea33fbb9613",
         "hash": "sha256-89CdA7vBYudbko0nAIyHcpHMXqFZHC05kwRIUmeEWGo="
       },
+      "src/third_party/mac_alias/src": {
+        "url": "https://chromium.googlesource.com/external/github.com/dmgbuild/mac_alias.git",
+        "rev": "caa30be84fa49efd0675c3864a18ae6ffac9f6db",
+        "hash": "sha256-phO7L5/cHoQTHxCq4465UZ0v43AV6U7enVIX3qOOM/I="
+      },
       "src/third_party/material_color_utilities/src": {
         "url": "https://chromium.googlesource.com/external/github.com/material-foundation/material-color-utilities.git",
-        "rev": "6fd88eb3e95ba1d457842e2a2bf847d06b3a018a",
-        "hash": "sha256-il8qvhd9JDhu3Z03bTcYD30e7Lw9+WKzWZ71ncKPTSk="
+        "rev": "f05459ea2170f3be610f89a4ddeee8843c2deb61",
+        "hash": "sha256-EQozefgSHR9SM7So2oRgsu1tSPeeZkwjS7HxJYKgWjo="
       },
       "src/third_party/minigbm/src": {
         "url": "https://chromium.googlesource.com/chromiumos/platform/minigbm.git",
@@ -592,8 +592,8 @@
       },
       "src/third_party/neon_2_sse/src": {
         "url": "https://chromium.googlesource.com/external/github.com/intel/ARM_NEON_2_x86_SSE.git",
-        "rev": "ed59be8546632d5126ff69c87122ae5de20ffe4f",
-        "hash": "sha256-ydHSMPJS+axvW7KIR/9SLWNFq/lP67dpg9Yt7shLCng="
+        "rev": "183fc88bcb90dbfaefba33a292eae8a5ce94bd67",
+        "hash": "sha256-B81CNMxUdb4q2aHTmM7qBALIOawXS6SYBOIxtskKVuM="
       },
       "src/third_party/openh264/src": {
         "url": "https://chromium.googlesource.com/external/github.com/cisco/openh264",
@@ -602,8 +602,8 @@
       },
       "src/third_party/openscreen/src": {
         "url": "https://chromium.googlesource.com/openscreen",
-        "rev": "9732a5d77a01f05e7c4e8c79104d27f4f2358f9f",
-        "hash": "sha256-j3veVCbmV94YKBpVrtf4DGETWYXieW9lLNJZqLAs1MY="
+        "rev": "11e4e00008df90ce2914335869fbfbd572d24c77",
+        "hash": "sha256-FLyNF/F8d+kbqhrl+O6RAiRBwX8ok+4uxB7P0U/zT40="
       },
       "src/third_party/openscreen/src/buildtools": {
         "url": "https://chromium.googlesource.com/chromium/src/buildtools",
@@ -612,18 +612,18 @@
       },
       "src/third_party/openscreen/src/third_party/tinycbor/src": {
         "url": "https://chromium.googlesource.com/external/github.com/intel/tinycbor.git",
-        "rev": "d393c16f3eb30d0c47e6f9d92db62272f0ec4dc7",
-        "hash": "sha256-fMKBFUSKmODQyg4hKIa1hwnEKIV6WBbY1Gb8DOSnaHA="
+        "rev": "9441b2ca882f95849c93de03f2c754196db13154",
+        "hash": "sha256-MzMEB46pNRmIEbc/Vn1/bLyIlvPfxP+y76r+pk570j8="
       },
       "src/third_party/pdfium": {
         "url": "https://pdfium.googlesource.com/pdfium.git",
-        "rev": "8f3e90282ef137adf7d380079c3178b24407104a",
-        "hash": "sha256-4OhJcWZJ3UC/Mf4DJNzLLYQtrw0y0suO/wy0d1GYP4w="
+        "rev": "ae277bf214480d77ac74852969146655bf728a11",
+        "hash": "sha256-23Bl4gnmj7AJ539nFehZuknvlD+CQFUFavQmzNUuRFk="
       },
       "src/third_party/perfetto": {
         "url": "https://chromium.googlesource.com/external/github.com/google/perfetto.git",
-        "rev": "9c7ce42050379be8c24a270f395e00c7347965cb",
-        "hash": "sha256-wbHdFhzbOP98IOQnXyUWDQtjt/nOD4VABSyvErhLBI4="
+        "rev": "da65f7e907e0caf473ddec16e15427465f503d05",
+        "hash": "sha256-DWbdXAaIPKxvpr5D+shklo192TG/YxOQMCZ7KE8wJHI="
       },
       "src/third_party/protobuf-javascript/src": {
         "url": "https://chromium.googlesource.com/external/github.com/protocolbuffers/protobuf-javascript",
@@ -662,8 +662,8 @@
       },
       "src/third_party/search_engines_data/resources": {
         "url": "https://chromium.googlesource.com/external/search_engines_data.git",
-        "rev": "cf814b5cc732a437b4ee636f1c7907f8f1ced51a",
-        "hash": "sha256-koTwcthcJn3a4XH+rY+E3z4uvWbv+1yuX9qkcqu5t5A="
+        "rev": "b9f48dc46a8172cbdd9c3923bd5a85c04458e49f",
+        "hash": "sha256-hLY4ge+lfx6ftlr+lbH+PLF5q0bx2z99hpe9IfGr/S0="
       },
       "src/third_party/sframe/src": {
         "url": "https://chromium.googlesource.com/external/github.com/cisco/sframe",
@@ -672,8 +672,8 @@
       },
       "src/third_party/skia": {
         "url": "https://skia.googlesource.com/skia.git",
-        "rev": "0873ec164a06966b90ae0d43ef783cfb180084ae",
-        "hash": "sha256-LbSs+UNakFipC2t9TSbZVreylVXHf1PsbK6z2qJh6QI="
+        "rev": "4f574af2444846ceca4d277a8095c5d4229d175f",
+        "hash": "sha256-HrpA4labNWXPWj/yiS9O8KjdQPwJOllmR5r66TwCjB0="
       },
       "src/third_party/smhasher/src": {
         "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -687,8 +687,8 @@
       },
       "src/third_party/sqlite/src": {
         "url": "https://chromium.googlesource.com/chromium/deps/sqlite.git",
-        "rev": "0a5fe1b18a5b651b6c4c90d397e3d0b8061f73fb",
-        "hash": "sha256-y+lJK8Qi22KUcYyY62x9xCXej85on9e0FxySaMNSYPY="
+        "rev": "ba8c54c83337618a9f15dd368a267e46b672fc84",
+        "hash": "sha256-0I1kNRIMsBLH7u+l005YAfdOlPsiK+2/PFlHi6Kaj5w="
       },
       "src/third_party/swiftshader": {
         "url": "https://swiftshader.googlesource.com/SwiftShader.git",
@@ -702,23 +702,23 @@
       },
       "src/third_party/tflite/src": {
         "url": "https://chromium.googlesource.com/external/github.com/tensorflow/tensorflow.git",
-        "rev": "7bedf2e94aff6ca62150d74fd40aa63cb73c6583",
-        "hash": "sha256-Uv1SbtjalHt7XLAcvOfiycgepDrEK8/JdpD3GPK1MNo="
+        "rev": "a387c0a471a69c0c9068334e73d184e1e0ce579f",
+        "hash": "sha256-REahts/Z20Yy000uyrtpvCs6cshboy8PY3mW4xz9xm0="
       },
       "src/third_party/litert/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google-ai-edge/LiteRT.git",
-        "rev": "1ae23176dd5d3a43e35961d8236d5adda7f8c0a1",
-        "hash": "sha256-xcCqZA8BKZG/TV/fAUAWPOoZwSQkRDATlhE6A05PyX0="
+        "rev": "2add6f4eda319e204c7c021ec871503a0fa766fc",
+        "hash": "sha256-zV+1VfylQfn3yUs99JYsPXFW1OSnQohR8O9Oy4dURJg="
       },
       "src/third_party/vulkan-deps": {
         "url": "https://chromium.googlesource.com/vulkan-deps",
-        "rev": "9bf18397113dbdc7adf4f76408df7f79d4ad141a",
-        "hash": "sha256-ol8SSAFHrEfsKWUmg64klpFFXIlZU4gyibENmzZD454="
+        "rev": "89c8e85edb61327644aca41e27641b43711bc783",
+        "hash": "sha256-r6ttlYFgrJcsHXb9Rdro4/KIQyPfv8ViueSaPRux7YM="
       },
       "src/third_party/glslang/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/glslang",
-        "rev": "8292684e941bf22583b257bd9dfe47daccacb665",
-        "hash": "sha256-1D971MPCHr8vnj31IFUwe1s+X3UAabxYUQ1Cd/VyqDA="
+        "rev": "5d69854866df654a898a32d93cff20a181ac82ed",
+        "hash": "sha256-DWvwxPD2T9Ojwg3sRKWuTlt36kqBk0wn5ii7PoXvd5E="
       },
       "src/third_party/spirv-cross/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Cross",
@@ -727,38 +727,38 @@
       },
       "src/third_party/spirv-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Headers",
-        "rev": "29981f65241605e08b0ede4cfeb999fe3b723c6a",
-        "hash": "sha256-tGY4H3+5p9M5LBK/xxRdMT9CX+qq3e7fPkaftnpjU9I="
+        "rev": "0d25db97cb9b8f725e4c95e4553001710e7fc39d",
+        "hash": "sha256-HvdKHnraSSWBriVgiNfhnC60moYRseDb3aRxxoANX1I="
       },
       "src/third_party/spirv-tools/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Tools",
-        "rev": "a665e21f3061f34064b39937cf00fe8d8769f4ef",
-        "hash": "sha256-4m/xdMk/r4C5zdU/CZzdoXtRN0MWs8pN5QUPI5Ej3+w="
+        "rev": "e39e5c5838bc4b4162c349f2a2e5f163efe5432f",
+        "hash": "sha256-lNBakr+4dRpdjbw204vjarZyz9PLCsFSW/4iFboknCI="
       },
       "src/third_party/vulkan-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Headers",
-        "rev": "d314eae73fdc90847bb8304a86ee7c6a8ee023b6",
-        "hash": "sha256-YU51vfV/8vQqVTngS2SRHKXpgxU/5IJ+jAT5pcYUcpw="
+        "rev": "0b7f383797fa7be53ae28213e001ae60668ee511",
+        "hash": "sha256-hRAu7Gj7t38huQSKceL6eq5LSjto8pByxmZgkiQIX3o="
       },
       "src/third_party/vulkan-loader/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Loader",
-        "rev": "59a70594de4559fd3aed73fe8ac2d6c48ca002d4",
-        "hash": "sha256-M/gm3fkCcFZJyslWCO/v2DzuavTOfvvKvx+0bNihEqs="
+        "rev": "83ddfc5ec5ca64ddd1055cefa1559c568101075a",
+        "hash": "sha256-LqklBLCWg04Qet0CtffTQwqBvkeu2Py8DM8eNuideNo="
       },
       "src/third_party/vulkan-tools/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Tools",
-        "rev": "286299bb6b732e4b22771cfb9d7d421542d40501",
-        "hash": "sha256-kbySCu2c5nh6icnPQV6qplfg1gHFnGPEYOG6G6TG8EU="
+        "rev": "99140cef98b4ea135141e0040d84c17a1543e5e3",
+        "hash": "sha256-lETdemR3/hkPULaDpnrH8mEnL+CBKiXb9YQE1cdG260="
       },
       "src/third_party/vulkan-utility-libraries/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Utility-Libraries",
-        "rev": "e9585c3e3d41ab608ee3b098ce4721d357308fc8",
-        "hash": "sha256-WcSiUe3vB7zUO0vpqcVJkKqhnZXz76ApWaoMO49efXg="
+        "rev": "245b48c522b5375c0acd5377d52bef5e4917f31e",
+        "hash": "sha256-1h5iWfG+6dOhS6JX4mCyAHbbBe6Nnge775614Atwi1c="
       },
       "src/third_party/vulkan-validation-layers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-ValidationLayers",
-        "rev": "11079f041fa85ec27c40c4ef2d63531138a2ab98",
-        "hash": "sha256-1lG6shUQRKXtojLHwfZD6gDz5yVnNoVp6BHMyUz70Co="
+        "rev": "6d4c4f8b14241307a822f21bb9453b2380b66117",
+        "hash": "sha256-fk0IXwY5LJk0WNQHERtq3Yt7KpwBLppkHFgoH47RHpo="
       },
       "src/third_party/vulkan_memory_allocator": {
         "url": "https://chromium.googlesource.com/external/github.com/GPUOpen-LibrariesAndSDKs/VulkanMemoryAllocator.git",
@@ -767,8 +767,8 @@
       },
       "src/third_party/wayland/src": {
         "url": "https://chromium.googlesource.com/external/anongit.freedesktop.org/git/wayland/wayland.git",
-        "rev": "736d12ac67c20c60dc406dc49bb06be878501f86",
-        "hash": "sha256-5iG0HaPXJCEo027TuyXlJQNGluTaAPlvwQDFbiYOEJQ="
+        "rev": "87cc8a8728a923fc57938faa81ba0e74f34ecdc7",
+        "hash": "sha256-dnaXYcVfc4DfNRsAEL316eSTen9tpf+nuQbActege4E="
       },
       "src/third_party/wayland-protocols/src": {
         "url": "https://chromium.googlesource.com/external/anongit.freedesktop.org/git/wayland/wayland-protocols.git",
@@ -797,8 +797,8 @@
       },
       "src/third_party/webgpu-cts/src": {
         "url": "https://chromium.googlesource.com/external/github.com/gpuweb/cts.git",
-        "rev": "499044af47ec2717e06e644d0943e6fcdb3f3538",
-        "hash": "sha256-M8TWqKdqoiZ01vbDpcRyPWIOaBPCPdSSflxcIpbYjFA="
+        "rev": "2959e1c3959aa55cd3f02726995ae68159d0e064",
+        "hash": "sha256-Z8hszmUjsRupyLk6LTit1R2rZyYfOakTJ75niMwl/Xs="
       },
       "src/third_party/webpagereplay": {
         "url": "https://chromium.googlesource.com/webpagereplay.git",
@@ -807,13 +807,13 @@
       },
       "src/third_party/webpagereplay/third_party/clang-format/script": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/clang/tools/clang-format.git",
-        "rev": "6eddfb5ec5f92127a531eda66c568d3a11e7ec11",
-        "hash": "sha256-Cm6BOOlEyD0kdYxMSmk6Fj1Dnfs3zCzXsm+BOXgBme0="
+        "rev": "70510081984cfcdb14a15b3e08dfe9776dc7ed37",
+        "hash": "sha256-IC5Dy3elgEezXmRyDbafx5i+V9wiDLMmnpi7O7BucdE="
       },
       "src/third_party/webrtc": {
         "url": "https://webrtc.googlesource.com/src.git",
-        "rev": "6f37672d358475cd17544121a12494da454d85fb",
-        "hash": "sha256-c0h6bD8zNZbacnOgRei+yVB+5+AvfglW+eQDNZU945M="
+        "rev": "9ea5afcad008b940468c2a15aec339592cf5a935",
+        "hash": "sha256-y0W8g4STp/9vJJQ6ZBt4Pssl9kFLEF1WChxDD+sm68E="
       },
       "src/third_party/wuffs/src": {
         "url": "https://skia.googlesource.com/external/github.com/google/wuffs-mirror-release-c.git",
@@ -827,8 +827,8 @@
       },
       "src/third_party/xnnpack/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/XNNPACK.git",
-        "rev": "09c4a9137f3a19b053dc45724a62f4f73ec7746a",
-        "hash": "sha256-eoS9qQ1hOJJBw6RQ2mTyRQb/AaAj8XnFbtqPpAb99y4="
+        "rev": "eccfcfe85b347d8f48015ecdf9fa7db1a9ef61cb",
+        "hash": "sha256-BqbqC2PUcvTdz3IxxkySHxzpfNp1uI7dFLMx50JbXMc="
       },
       "src/third_party/libei/src": {
         "url": "https://chromium.googlesource.com/external/gitlab.freedesktop.org/libinput/libei.git",
@@ -837,18 +837,18 @@
       },
       "src/third_party/zstd/src": {
         "url": "https://chromium.googlesource.com/external/github.com/facebook/zstd.git",
-        "rev": "5233c58e6ca0b1c4c6b353ad79649191ed195bdc",
-        "hash": "sha256-vEl0s7Mjh+5rciOMxm99PNWiamtCk+sTN4lRYKCIZ+8="
+        "rev": "5c7b7bad26808e6b40ac3b3d0075466e27738a9d",
+        "hash": "sha256-dncfOdwIDcMGT5VvzpzMBAbLkE4e6vAPeZBlEmoWcCc="
       },
       "src/v8": {
         "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "4323497a6a73839e6d5260f6acd7ec0212cb3321",
-        "hash": "sha256-HUg4GGtYL4xGk/xw0QXxNZAnsFVcznklWGQaqhZj9QM="
+        "rev": "f343157cebb388bfa416baccb5d35507e6fe8cc7",
+        "hash": "sha256-zSCyFQpDMNygmV6N4TajL8VB5+VRynrMPV/wAiWsJO4="
       },
       "src/agents/shared": {
         "url": "https://chromium.googlesource.com/chromium/agents.git",
-        "rev": "559f135fc214d637f85174c6be7010804e31f1e5",
-        "hash": "sha256-/PhF9Pc8wPx+TLABd3yD218TfEatBySazVci1Wc+9e4="
+        "rev": "e64987d3ea47f5f5d00c66de617aec591d1c0bcf",
+        "hash": "sha256-LEVJVFhLptUEXDqGt6n9GybLOTfl3uAc2+ifvoD5kiU="
       }
     }
   },
diff --git a/pkgs/applications/networking/browsers/chromium/patches/chromium-153-llvm-22.patch b/pkgs/applications/networking/browsers/chromium/patches/chromium-153-llvm-22.patch
new file mode 100644
index 000000000000..41caa79a972f
--- /dev/null
+++ b/pkgs/applications/networking/browsers/chromium/patches/chromium-153-llvm-22.patch
@@ -0,0 +1,30 @@
+diff --git a/build/config/compiler/BUILD.gn b/build/config/compiler/BUILD.gn
+index 8153e68ce90a14613f268f5c950c7e020e29aa2f..5d27ffb088590944302577a3f154ecf4d15606bf 100644
+--- a/build/config/compiler/BUILD.gn
++++ b/build/config/compiler/BUILD.gn
+@@ -590,7 +590,7 @@ config("compiler") {
+     cflags += [ "-fcolor-diagnostics" ]
+     if (!is_wasm) {
+       if (!is_win) {
+-        cflags += [ "-fdiagnostics-show-inlining-chain" ]
++        cflags += [ ]
+       } else {
+         # Combine after https://github.com/llvm/llvm-project/pull/192241
+         cflags += [ "/clang:-fdiagnostics-show-inlining-chain" ]
+@@ -1590,7 +1590,7 @@ config("clang_warning_suppression") {
+ # See also: https://crbug.com/40891132#comment10
+ ubsan_hardening("c_array_bounds") {
+   sanitizer = "array-bounds"
+-  condition = !(is_asan && target_cpu == "x86")
++  condition = false
+ 
+   # Because we've enabled array-bounds sanitizing we also want to suppress
+   # the related warning about "unsafe-buffer-usage-in-static-sized-array",
+@@ -1604,6 +1604,7 @@ ubsan_hardening("c_array_bounds") {
+ # `NOTREACHED()` at the end of such functions.
+ ubsan_hardening("return") {
+   sanitizer = "return"
++  condition = false
+ }
+ 
+ config("rustc_revision") {
diff --git a/pkgs/by-name/_3/_3proxy/package.nix b/pkgs/by-name/_3/_3proxy/package.nix
index 72c98b5bf3e7..58031c66fc51 100644
--- a/pkgs/by-name/_3/_3proxy/package.nix
+++ b/pkgs/by-name/_3/_3proxy/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "3proxy";
-  version = "0.9.6";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "3proxy";
     repo = "3proxy";
     tag = finalAttrs.version;
-    sha256 = "sha256-0rCXz/vKFF5rvBXyvtt9DH0Jz+1i7rIylh07FqKBrZM=";
+    sha256 = "sha256-JRoSCmoTIXHsUWZt9OyDVp1Veuy2w1ZPFe0rUGdJv0k=";
   };
 
   # They use 'install -s', that calls the native strip instead of the cross.
diff --git a/pkgs/by-name/ad/adscan/package.nix b/pkgs/by-name/ad/adscan/package.nix
index adc55c63f4f2..4a8bab6b8e86 100644
--- a/pkgs/by-name/ad/adscan/package.nix
+++ b/pkgs/by-name/ad/adscan/package.nix
@@ -7,7 +7,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "adscan";
-  version = "11.2.0";
+  version = "12.0.0";
   pyproject = true;
 
   __structuredAttrs = true;
@@ -16,7 +16,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "ADScanPro";
     repo = "adscan";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GMvuCdr9gA3cs5L31PHHls5uHos7VdjS9XblM6F1Z3I=";
+    hash = "sha256-vx71s/7N/r1nBheTfUxtSSOY+yNzjyLrO7Ow4Xod34U=";
   };
 
   pythonRelaxDeps = [ "credsweeper" ];
diff --git a/pkgs/by-name/ag/agenix-cli/package.nix b/pkgs/by-name/ag/agenix-cli/package.nix
index 0de863247c48..bcd8ed13ecdd 100644
--- a/pkgs/by-name/ag/agenix-cli/package.nix
+++ b/pkgs/by-name/ag/agenix-cli/package.nix
@@ -9,11 +9,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
   pname = "agenix-cli";
   version = "0.1.2";
 
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "cole-h";
     repo = "agenix-cli";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-eJp6t8h8uOP0YupYn8x6VAAmUbVrXypxNMGx4SK/6d8=";
+    hash = "sha256-eJp6t8h8uOP0YupYn8x6VAAmUbVrXypxNMGx4SK/6d8=";
   };
 
   cargoHash = "sha256-2xTkCdWKQVg8Sp0LDkC/LH9GYBXNpxdoLX30Ndz0muM=";
diff --git a/pkgs/by-name/al/alfis/package.nix b/pkgs/by-name/al/alfis/package.nix
index 9eb7da829490..984927ed597c 100644
--- a/pkgs/by-name/al/alfis/package.nix
+++ b/pkgs/by-name/al/alfis/package.nix
@@ -5,25 +5,31 @@
   fetchFromGitHub,
   pkg-config,
   makeWrapper,
-  libayatana-appindicator,
-  webkitgtk_4_1,
-  xdotool,
+  fontconfig,
+  libGL,
+  libx11,
+  libxcursor,
+  libxi,
+  libxkbcommon,
+  libxrandr,
+  wayland,
+  xdg-utils,
   zenity,
   withGui ? true,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "alfis";
-  version = "0.8.11";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "Revertron";
     repo = "Alfis";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zZ8xltFgdPAfx+jtnnyLzzoC4r/L4oVjt59YemoDtgE=";
+    hash = "sha256-guB9yGT+aliRORJE4iYKB2RAFuQOFkdzI0RCf0Y1pKI=";
   };
 
-  cargoHash = "sha256-zqeWNf1fOGJFvRFU8ABm4s2QCfo4loNCPC1Zj19XE1U=";
+  cargoHash = "sha256-BYKVRD7H2uEE0oxyAn21tb0a6Qkx6nwrImh/Nk8zZDM=";
 
   nativeBuildInputs = [
     pkg-config
@@ -31,12 +37,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
   ];
 
   buildInputs = lib.optionals (withGui && stdenv.hostPlatform.isLinux) [
-    webkitgtk_4_1
-    xdotool
+    fontconfig
   ];
 
   buildNoDefaultFeatures = true;
-  buildFeatures = [ "doh" ] ++ lib.optional withGui "webgui";
+  buildFeatures = [ "doh" ] ++ lib.optional withGui "gui";
 
   checkFlags = [
     # these want internet access, disable them
@@ -44,14 +49,25 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=dns::client::tests::test_udp_client"
   ];
 
-  postPatch = lib.optionalString stdenv.hostPlatform.isLinux ''
-    substituteInPlace $cargoDepsCopy/*/libappindicator-sys-*/src/lib.rs \
-      --replace-fail "libayatana-appindicator3.so.1" "${libayatana-appindicator}/lib/libayatana-appindicator3.so.1"
-  '';
-
   postInstall = lib.optionalString (withGui && stdenv.hostPlatform.isLinux) ''
     wrapProgram $out/bin/alfis \
-      --prefix PATH : ${lib.makeBinPath [ zenity ]}
+      --prefix PATH : ${
+        lib.makeBinPath [
+          xdg-utils
+          zenity
+        ]
+      } \
+      --prefix LD_LIBRARY_PATH : ${
+        lib.makeLibraryPath [
+          libGL
+          libx11
+          libxcursor
+          libxi
+          libxkbcommon
+          libxrandr
+          wayland
+        ]
+      }
   '';
 
   meta = {
diff --git a/pkgs/by-name/at/atmos/package.nix b/pkgs/by-name/at/atmos/package.nix
index 8a353d6406e1..75732d20534a 100644
--- a/pkgs/by-name/at/atmos/package.nix
+++ b/pkgs/by-name/at/atmos/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "atmos";
-  version = "1.227.0";
+  version = "1.228.0";
 
   src = fetchFromGitHub {
     owner = "cloudposse";
     repo = "atmos";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wFM7jLBEqKFCBSUIghTXbxPmlKHr/ZxAZN1izuTq7Co=";
+    hash = "sha256-ufYto9s6tFwJVcV5dcY06POU6wTxEVFGhzaoykoVwTI=";
   };
 
-  vendorHash = "sha256-Gs90dEuk2uq2MbT/05g4x73FPOmZhJjWBxLmxe37vlg=";
+  vendorHash = "sha256-G/Ef5I95nBnsY4QWdjA6ly28q8zVhx17MW1fmspI5nw=";
 
   env.CGO_ENABLED = 0; # Compiles a pure statically linked Go binary.
 
diff --git a/pkgs/by-name/au/audiowaveform/package.nix b/pkgs/by-name/au/audiowaveform/package.nix
index b03ab73e9b9f..6e9bbc5631c7 100644
--- a/pkgs/by-name/au/audiowaveform/package.nix
+++ b/pkgs/by-name/au/audiowaveform/package.nix
@@ -54,7 +54,7 @@ stdenv.mkDerivation rec {
       Waveform data can be used to produce a visual rendering of the audio, similar in appearance to audio editing applications.
     '';
     homepage = "https://github.com/bbc/audiowaveform";
-    changelog = "https://github.com/bbc/audiowaveform/blob/${version}/ChangeLog";
+    changelog = "https://github.com/bbc/audiowaveform/blob/${version}/CHANGELOG.md";
     license = lib.licenses.gpl3Plus;
     platforms = lib.platforms.all;
     maintainers = with lib.maintainers; [ edbentley ];
diff --git a/pkgs/by-name/ba/babashka-unwrapped/package.nix b/pkgs/by-name/ba/babashka-unwrapped/package.nix
index f7f2d70642af..db741db7ab61 100644
--- a/pkgs/by-name/ba/babashka-unwrapped/package.nix
+++ b/pkgs/by-name/ba/babashka-unwrapped/package.nix
@@ -10,11 +10,11 @@
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "babashka-unwrapped";
-  version = "1.13.219";
+  version = "1.13.220";
 
   src = fetchurl {
     url = "https://github.com/babashka/babashka/releases/download/v${finalAttrs.version}/babashka-${finalAttrs.version}-standalone.jar";
-    sha256 = "sha256-cVcfEt7OVKHG3I9ZSEk6mU5ULKAXJYsEEBD2D4SUZxc=";
+    sha256 = "sha256-0fpvbrEJU89mMo9A9IM7kAqiGCdnexrEslGtjt+iBxg=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ba/babashka/clojure-tools.nix b/pkgs/by-name/ba/babashka/clojure-tools.nix
index 19c32f4af7ab..eb35f8d1c2bb 100644
--- a/pkgs/by-name/ba/babashka/clojure-tools.nix
+++ b/pkgs/by-name/ba/babashka/clojure-tools.nix
@@ -7,10 +7,10 @@
 }:
 clojure.overrideAttrs (previousAttrs: {
   pname = "babashka-clojure-tools";
-  version = "1.12.5.1654";
+  version = "1.12.5.1664";
 
   src = fetchurl {
     url = previousAttrs.src.url;
-    hash = "sha256-3IbMVrw3L87we9h/RGk+60thz19ENHiDh4Nk0Dtfs0I=";
+    hash = "sha256-d91oaJSAdK3Mk+g6eW+OjxWhqSvLG5AC1xX9IhDkdvM=";
   };
 })
diff --git a/pkgs/by-name/cl/cloudquery/package.nix b/pkgs/by-name/cl/cloudquery/package.nix
index 0d31291d2dea..0023300194da 100644
--- a/pkgs/by-name/cl/cloudquery/package.nix
+++ b/pkgs/by-name/cl/cloudquery/package.nix
@@ -9,19 +9,19 @@
 
 buildGoModule (finalAttrs: {
   pname = "cloudquery";
-  version = "6.41.1";
+  version = "6.42.2";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "cloudquery";
     repo = "cloudquery";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-7NM9EFkvQRXp0gHvK1/9EhAoPrNf/g0yCXaVtEMGloQ=";
+    hash = "sha256-cwswUZHatYFABjZsIsl2yImXO0Wkkn4QTdCirqA3SsA=";
   };
 
   modRoot = "cli";
 
-  vendorHash = "sha256-uAe+zbRtMfFU1CH5D9wzlO7Sx/ckkziQIxecgwDM+Kk=";
+  vendorHash = "sha256-B4zR2UML2VuxSQBs/1KvoZc7tiMlr/wF3EpiBJge4Y4=";
 
   subPackages = [
     "."
diff --git a/pkgs/by-name/co/codex-acp/librusty_v8.nix b/pkgs/by-name/co/codex-acp/librusty_v8.nix
deleted file mode 100644
index 58ee83b3833e..000000000000
--- a/pkgs/by-name/co/codex-acp/librusty_v8.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-# auto-generated file -- DO NOT EDIT!
-{
-  lib,
-  stdenv,
-  fetchurl,
-}:
-
-fetchurl {
-  name = "librusty_v8-146.4.0";
-  url = "https://github.com/denoland/rusty_v8/releases/download/v146.4.0/librusty_v8_release_${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
-  hash =
-    {
-      x86_64-linux = "sha256-5ktNmeSuKTouhGJEqJuAF4uhA4LBP7WRwfppaPUpEVM=";
-      aarch64-linux = "sha256-2/FlsHyBvbBUvARrQ9I+afz3vMGkwbW0d2mDpxBi7Ng=";
-      aarch64-darwin = "sha256-v+LJvjKlbChUbw+WWCXuaPv2BkBfMQzE4XtEilaM+Yo=";
-    }
-    .${stdenv.hostPlatform.system}
-      or (throw "librusty_v8 146.4.0 is not available for ${stdenv.hostPlatform.system}");
-  meta = {
-    version = "146.4.0";
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-  };
-}
diff --git a/pkgs/by-name/co/codex-acp/package.nix b/pkgs/by-name/co/codex-acp/package.nix
index 3d622c372f75..3d339e1f95a2 100644
--- a/pkgs/by-name/co/codex-acp/package.nix
+++ b/pkgs/by-name/co/codex-acp/package.nix
@@ -1,74 +1,59 @@
 {
   lib,
-  stdenv,
-  callPackage,
+  buildNpmPackage,
+  codex,
   fetchFromGitHub,
-  rustPlatform,
-  pkg-config,
-  openssl,
-  libcap,
-  bubblewrap,
-  librusty_v8 ? callPackage ./librusty_v8.nix { },
+  makeBinaryWrapper,
+  nix-update-script,
+  versionCheckHook,
 }:
-let
-  # codex-acp 0.13.0 pins openai/codex rust-v0.128.0 in Cargo.lock.
-  codexRev = "e4310be51f617f5e60382038fa9cbf53a2429ca4";
-  codexHash = "sha256-v2W0eslPOPHxHX76+bnkE/f4y+MnQuopeOoAC5X16TA=";
-  codexSrc = fetchFromGitHub {
-    owner = "openai";
-    repo = "codex";
-    rev = codexRev;
-    hash = codexHash;
-  };
-in
-rustPlatform.buildRustPackage (finalAttrs: {
+
+buildNpmPackage (finalAttrs: {
   pname = "codex-acp";
-  version = "0.13.0";
+  version = "1.10.0";
 
   src = fetchFromGitHub {
-    owner = "zed-industries";
+    owner = "agentclientprotocol";
     repo = "codex-acp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8Mz3xPhGSjaucZ9c0etGOe4JJC8vJhGFOnAhkwXmhyY=";
+    hash = "sha256-D8uYd30NRXQYUSBFCi66Oq0iRZXpl8P7nWv2m3+KBig=";
   };
 
-  cargoHash = "sha256-kneMay6MGXhHA0q/usKsLFs/YKmdSHmrgSthzhaPgbk=";
+  npmDepsHash = "sha256-df1/kPiZFBEq9Um26Qbo9XaYj2J8BOXQmunCQWquDTo=";
 
-  # fetchCargoVendor only keeps the individual git crate subtrees. Older Codex
-  # crates included this workspace-root file from codex-core.
-  postPatch = ''
-    if [ -e ${codexSrc}/codex-rs/node-version.txt ]; then
-      cp ${codexSrc}/codex-rs/node-version.txt "$cargoDepsCopy/source-git-0/node-version.txt"
-    fi
+  nativeBuildInputs = [ makeBinaryWrapper ];
+
+  postInstall = ''
+    # Use the source-built Nixpkgs package instead of npm's bundled Codex binaries.
+    rm -r $out/lib/node_modules/@agentclientprotocol/codex-acp/node_modules/@openai/codex*
+    rm $out/lib/node_modules/@agentclientprotocol/codex-acp/node_modules/.bin/codex
+    wrapProgram $out/bin/codex-acp \
+      --set-default CODEX_PATH ${lib.getExe codex}
   '';
 
-  env = {
-    RUSTY_V8_ARCHIVE = librusty_v8;
-  }
-  // lib.optionalAttrs stdenv.hostPlatform.isLinux {
-    CODEX_BWRAP_SOURCE_DIR = "${bubblewrap.src}";
-  };
+  doCheck = true;
 
-  nativeBuildInputs = [
-    pkg-config
-  ];
+  checkPhase = ''
+    runHook preCheck
+    npm test
+    runHook postCheck
+  '';
 
-  buildInputs = [
-    openssl
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [
-    libcap
-  ];
+  postCheck = ''
+    rm -r node_modules/.vite
+  '';
 
-  doCheck = false;
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
 
-  passthru.updateScript = ./update.sh;
+  passthru.updateScript = nix-update-script { };
 
   meta = {
-    description = "An ACP-compatible coding agent powered by Codex";
-    homepage = "https://github.com/zed-industries/codex-acp";
-    changelog = "https://github.com/zed-industries/codex-acp/releases/tag/v${finalAttrs.version}";
+    description = "ACP adapter for Codex CLI";
+    homepage = "https://github.com/agentclientprotocol/codex-acp";
+    changelog = "https://github.com/agentclientprotocol/codex-acp/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ tpansino ];
     platforms = [
       "x86_64-linux"
       "aarch64-linux"
diff --git a/pkgs/by-name/co/codex-acp/update.sh b/pkgs/by-name/co/codex-acp/update.sh
deleted file mode 100755
index aa434ded6b25..000000000000
--- a/pkgs/by-name/co/codex-acp/update.sh
+++ /dev/null
@@ -1,208 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -i bash -p bash cacert common-updater-scripts coreutils curl gnutar jq nix-update
-
-set -euo pipefail
-
-PACKAGE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-NIXPKGS_ROOT="$(realpath "$PACKAGE_DIR/../../../..")"
-PACKAGE_NIX="$PACKAGE_DIR/package.nix"
-LIBRUSTY_V8_NIX="$PACKAGE_DIR/librusty_v8.nix"
-ATTR_PATH=codex-acp
-OWNER="zed-industries"
-REPO="codex-acp"
-
-github_api_get() {
-  local url="$1"
-  local curl_args=(
-    --fail
-    --silent
-    --show-error
-    -H "Accept: application/vnd.github+json"
-  )
-
-  if [[ -n "${GITHUB_TOKEN:-}" ]]; then
-    curl_args+=(-H "Authorization: Bearer ${GITHUB_TOKEN}")
-  fi
-
-  curl "${curl_args[@]}" "$url"
-}
-
-normalize_version() {
-  local version="$1"
-  echo "${version#v}"
-}
-
-prefetch_sri() {
-  local url="$1"
-  local unpack="${2:-false}"
-  local raw_hash
-  local args=(--type sha256)
-
-  if [[ "$unpack" == "true" ]]; then
-    args+=(--unpack)
-  fi
-
-  raw_hash="$(nix-prefetch-url "${args[@]}" "$url")"
-  nix hash convert --to sri --hash-algo sha256 "$raw_hash"
-}
-
-parse_release_metadata() {
-  local cargo_lock="$1"
-  local codex_metadata codex_tag codex_rev v8_version
-
-  codex_metadata="$(
-    sed -nE 's|.*git\+https://github\.com/openai/codex\?tag=([^#"]+)#([0-9a-f]+).*|\1 \2|p' "$cargo_lock" \
-      | head -n1
-  )"
-  if [[ -z "$codex_metadata" ]]; then
-    echo "Could not find pinned openai/codex dependency in Cargo.lock" >&2
-    return 1
-  fi
-  read -r codex_tag codex_rev <<<"$codex_metadata"
-  if [[ -z "$codex_tag" || -z "$codex_rev" ]]; then
-    echo "Could not parse pinned openai/codex dependency in Cargo.lock" >&2
-    return 1
-  fi
-
-  v8_version="$(
-    awk '
-      /^\[\[package\]\]$/ { in_pkg = 1; is_v8 = 0; next }
-      in_pkg && /^name = "v8"$/ { is_v8 = 1; next }
-      in_pkg && is_v8 && /^version = "/ {
-        gsub(/^version = "/, "")
-        gsub(/"$/, "")
-        print
-        exit
-      }
-    ' "$cargo_lock"
-  )"
-  if [[ -z "$v8_version" ]]; then
-    echo "Could not find v8 package version in Cargo.lock" >&2
-    return 1
-  fi
-
-  printf '%s\n%s\n%s\n' "$codex_tag" "$codex_rev" "$v8_version"
-}
-
-update_codex_pins() {
-  local tmp
-  tmp="$(mktemp)"
-
-  awk \
-    -v latest_version="$latest_version" \
-    -v codex_tag="$CODEX_TAG" \
-    -v codex_rev="$CODEX_REV" \
-    -v codex_hash="$CODEX_HASH" '
-    /# codex-acp [^ ]+ pins openai\/codex rust-v[0-9.]+ in Cargo.lock\./ {
-      comment_count++
-      sub(/# codex-acp [^ ]+ pins openai\/codex rust-v[0-9.]+ in Cargo.lock\./, "# codex-acp " latest_version " pins openai/codex " codex_tag " in Cargo.lock.")
-    }
-    /codexRev = "[0-9a-f]+";/ {
-      rev_count++
-      sub(/codexRev = "[0-9a-f]+";/, "codexRev = \"" codex_rev "\";")
-    }
-    /codexHash = "sha256-[^"]+";/ {
-      hash_count++
-      sub(/codexHash = "sha256-[^"]+";/, "codexHash = \"" codex_hash "\";")
-    }
-    { print }
-    END {
-      if (comment_count != 1) {
-        print "Failed to update codex pin comment in package.nix" > "/dev/stderr"
-        exit 1
-      }
-      if (rev_count != 1) {
-        print "Failed to update codexRev in package.nix" > "/dev/stderr"
-        exit 1
-      }
-      if (hash_count != 1) {
-        print "Failed to update codexHash in package.nix" > "/dev/stderr"
-        exit 1
-      }
-    }
-  ' "$PACKAGE_NIX" >"$tmp"
-
-  mv "$tmp" "$PACKAGE_NIX"
-}
-
-write_librusty_v8_nix() {
-  cat >"$LIBRUSTY_V8_NIX" <<EOF
-# auto-generated file -- DO NOT EDIT!
-{
-  lib,
-  stdenv,
-  fetchurl,
-}:
-
-fetchurl {
-  name = "librusty_v8-${V8_VERSION}";
-  url = "https://github.com/denoland/rusty_v8/releases/download/v${V8_VERSION}/librusty_v8_release_\${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
-  hash =
-    {
-      x86_64-linux = "${V8_HASH_X86_64_LINUX}";
-      aarch64-linux = "${V8_HASH_AARCH64_LINUX}";
-      aarch64-darwin = "${V8_HASH_AARCH64_DARWIN}";
-    }
-    .\${stdenv.hostPlatform.system}
-    or (throw "librusty_v8 ${V8_VERSION} is not available for \${stdenv.hostPlatform.system}");
-  meta = {
-    version = "${V8_VERSION}";
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-  };
-}
-EOF
-}
-
-cd "$NIXPKGS_ROOT"
-
-current_version="$(nix eval --raw -f . "${ATTR_PATH}.version")"
-latest_version="${CODEX_ACP_LATEST_VERSION_OVERRIDE:-}"
-if [[ -z "$latest_version" ]]; then
-  latest_version="$(github_api_get "https://api.github.com/repos/${OWNER}/${REPO}/releases/latest" | jq --raw-output '.tag_name')"
-fi
-latest_version="$(normalize_version "$latest_version")"
-
-echo "latest  version: $latest_version"
-echo "current version: $current_version"
-
-if [[ "$latest_version" == "$current_version" ]]; then
-  echo "codex-acp is already up to date"
-  exit 0
-fi
-
-tmpdir="$(mktemp -d)"
-trap 'rm -rf "$tmpdir"' EXIT
-
-source_tarball="$tmpdir/codex-acp-${latest_version}.tar.gz"
-source_root="$tmpdir/codex-acp-${latest_version}"
-
-curl --fail --silent --show-error --location \
-  "https://github.com/${OWNER}/${REPO}/archive/refs/tags/v${latest_version}.tar.gz" \
-  --output "$source_tarball"
-tar -xzf "$source_tarball" -C "$tmpdir"
-
-mapfile -t release_metadata < <(parse_release_metadata "$source_root/Cargo.lock")
-CODEX_TAG="${release_metadata[0]}"
-CODEX_REV="${release_metadata[1]}"
-V8_VERSION="${release_metadata[2]}"
-export CODEX_REV
-
-echo "pinned codex tag: $CODEX_TAG"
-echo "pinned codex rev: $CODEX_REV"
-echo "pinned v8 version: $V8_VERSION"
-
-src_hash="$(prefetch_sri "https://github.com/${OWNER}/${REPO}/archive/refs/tags/v${latest_version}.tar.gz" true)"
-CODEX_HASH="$(prefetch_sri "https://github.com/openai/codex/archive/${CODEX_REV}.tar.gz" true)"
-export CODEX_HASH
-
-V8_HASH_X86_64_LINUX="$(prefetch_sri "https://github.com/denoland/rusty_v8/releases/download/v${V8_VERSION}/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz")"
-V8_HASH_AARCH64_LINUX="$(prefetch_sri "https://github.com/denoland/rusty_v8/releases/download/v${V8_VERSION}/librusty_v8_release_aarch64-unknown-linux-gnu.a.gz")"
-V8_HASH_AARCH64_DARWIN="$(prefetch_sri "https://github.com/denoland/rusty_v8/releases/download/v${V8_VERSION}/librusty_v8_release_aarch64-apple-darwin.a.gz")"
-export V8_VERSION V8_HASH_X86_64_LINUX V8_HASH_AARCH64_LINUX V8_HASH_AARCH64_DARWIN
-
-update-source-version "$ATTR_PATH" "$latest_version" "$src_hash" --ignore-same-version
-update_codex_pins
-write_librusty_v8_nix
-nix-update "$ATTR_PATH" --version skip
-
-echo "updated codex-acp to $latest_version"
diff --git a/pkgs/by-name/co/comma/package.nix b/pkgs/by-name/co/comma/package.nix
index ba5f9c4c26ed..ce5265eada53 100644
--- a/pkgs/by-name/co/comma/package.nix
+++ b/pkgs/by-name/co/comma/package.nix
@@ -13,7 +13,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "comma";
-  version = "2.4.1";
+  version = "2.4.2";
 
   __structuredAttrs = true;
 
@@ -21,10 +21,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "nix-community";
     repo = "comma";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XZB0zx4wyNzy0LggAmh2gT2aEWAqVI9NljRoOkeK0c8=";
+    hash = "sha256-5Q1CQn7kw619KWVVCJTN8HhOdVTy7DgenbmHJodhR4g=";
   };
 
-  cargoHash = "sha256-lY5HwWZm9X0xusLcC6MciAgSWEskNElrjhe9fexR6g8=";
+  cargoHash = "sha256-LQZ//9r1kmnb3TwhwYHdCny/U5hp1+QMziDC31l/zSM=";
 
   nativeBuildInputs = [ installShellFiles ];
 
@@ -64,15 +64,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
         --bash <(${emulator} $out/bin/comma --print-completions bash) \
         --fish <(${emulator} $out/bin/comma --print-completions fish) \
         --zsh <(${emulator} $out/bin/comma --print-completions zsh)
-
-      # TODO: Add , to other shells too
-      cat >>$out/share/zsh/site-functions/_comma <<'EOF'
-        if [ "$funcstack[1]" = "_comma" ]; then
-            _comma "$@"
-        else
-            compdef _comma ,
-        fi
-      EOF
     '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
diff --git a/pkgs/by-name/cu/cuda-oxide/package.nix b/pkgs/by-name/cu/cuda-oxide/package.nix
new file mode 100644
index 000000000000..136b049a8d31
--- /dev/null
+++ b/pkgs/by-name/cu/cuda-oxide/package.nix
@@ -0,0 +1,64 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  autoAddDriverRunpath,
+  cudaPackages,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "cuda-oxide";
+  version = "0.2.1";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "NVlabs";
+    repo = "cuda-oxide";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-dOa/ScWgEQre0f9MgxFVLRtuNcqr2JC61XP7FsHAP2A=";
+  };
+
+  cargoHash = "sha256-3JmDEO4DC9Xhgdoa0xnpUE9nJailezqoTUk6FA7BKeI=";
+
+  nativeBuildInputs = [
+    autoAddDriverRunpath
+    cudaPackages.cuda_nvcc
+    rustPlatform.bindgenHook
+  ];
+
+  env = {
+    # requires nightly features
+    RUSTC_BOOTSTRAP = true;
+
+    # Adding `cudaPackages.cuda_cudart` allows compilation to succeed, but cargo-oxide errors at runtime:
+    #   cargo-oxide: error while loading shared libraries: libcuda.so.1: cannot open shared object file: No such file or directory
+    CUDA_HOME = (lib.getLib cudaPackages.cuda_cudart).outPath;
+
+    NIX_LDFLAGS = "-L${lib.getOutput "stubs" cudaPackages.cuda_cudart}/lib/stubs"; # fixes -lcuda not found
+  };
+
+  cargoBuildFlags = [
+    "--package=cargo-oxide"
+  ];
+  cargoTestFlags = finalAttrs.cargoBuildFlags;
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Experimental Rust-to-CUDA compiler that lets you write (SIMT) GPU kernels in safe(ish), idiomatic Rust";
+    homepage = "https://github.com/NVlabs/cuda-oxide";
+    changelog = "https://github.com/NVlabs/cuda-oxide/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [
+      GaetanLepage
+      ethancedwards8
+    ];
+    teams = with lib.teams; [ cuda ];
+    mainProgram = "cargo-oxide";
+  };
+})
diff --git a/pkgs/by-name/dm/dms-greeter/package.nix b/pkgs/by-name/dm/dms-greeter/package.nix
new file mode 100644
index 000000000000..a4e0b917e843
--- /dev/null
+++ b/pkgs/by-name/dm/dms-greeter/package.nix
@@ -0,0 +1,64 @@
+{
+  lib,
+  stdenvNoCC,
+  buildGoModule,
+  fetchFromGitHub,
+  installShellFiles,
+  nix-update-script,
+}:
+buildGoModule (finalAttrs: {
+  pname = "dms-greeter";
+  version = "1.6.0";
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  src = fetchFromGitHub {
+    owner = "AvengeMedia";
+    repo = "dank-greeter";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-XAd81SHwl7zChwpl+PXjePzV9bejy9e2WataOZJ+ioA=";
+    fetchSubmodules = true;
+  };
+
+  vendorHash = "sha256-Ort6y6BTKfuMRjDpTjY5tnCE5VAS4CItwo1U5dAvHpw=";
+
+  modRoot = "core";
+  subPackages = [ "cmd/dms-greeter" ];
+
+  tags = [ "withshell" ];
+
+  # Bakes the quickshell UI into the binary
+  preBuild = ''
+    make sync-shell
+  '';
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X main.Version=${finalAttrs.version}"
+  ];
+
+  nativeBuildInputs = [
+    installShellFiles
+  ];
+
+  postInstall = lib.optionalString (stdenvNoCC.buildPlatform.canExecute stdenvNoCC.hostPlatform) ''
+    installShellCompletion --cmd dms-greeter \
+      --bash <($out/bin/dms-greeter completion bash) \
+      --fish <($out/bin/dms-greeter completion fish) \
+      --zsh <($out/bin/dms-greeter completion zsh)
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Greetd-based greeter for the Dank Material Linux suite";
+    homepage = "https://github.com/AvengeMedia/dank-greeter";
+    platforms = lib.platforms.linux;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ johnrtitor ];
+    teams = [ lib.teams.danklinux ];
+    mainProgram = "dms-greeter";
+  };
+})
diff --git a/pkgs/by-name/dm/dms-shell/package.nix b/pkgs/by-name/dm/dms-shell/package.nix
index 4df1740c2c12..1132c9257267 100644
--- a/pkgs/by-name/dm/dms-shell/package.nix
+++ b/pkgs/by-name/dm/dms-shell/package.nix
@@ -4,11 +4,12 @@
   fetchFromGitHub,
   installShellFiles,
   makeWrapper,
-  procps,
   nix-update-script,
-  bashNonInteractive,
+  coreutils,
   fprintd,
   kdePackages,
+  pam,
+  pam_u2f,
   qt6,
 }:
 
@@ -28,18 +29,21 @@ buildGoModule (
   in
   {
     pname = "dms-shell";
-    version = "1.5.3";
+    version = "1.6.1";
 
     src = fetchFromGitHub {
       owner = "AvengeMedia";
       repo = "DankMaterialShell";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-aTNuC9NDBnYAeEtFsleeUwmGX3AZlKOutbl+LQRPkmQ=";
+      fetchSubmodules = true;
+      hash = "sha256-q8ciRRLhTMKsGl7OPU8v5sqToY64Fm61SeIHYOAEyjI=";
     };
 
     sourceRoot = "${finalAttrs.src.name}/core";
 
-    vendorHash = "sha256-nvxFHQhOfBGl3h51fgYDb39K0NCj+H8mAEyKr1qOwJQ=";
+    vendorHash = "sha256-Ls6Dquwt0fzDCEjZ6FfTsZTXDI8408mFdByv/OWHVgI=";
+
+    tags = [ "withshell" ];
 
     ldflags = [
       "-s"
@@ -54,17 +58,38 @@ buildGoModule (
       makeWrapper
     ];
 
-    postInstall = ''
-      mkdir -p $out/share/quickshell/dms
-      cp -r ${finalAttrs.src}/quickshell/. $out/share/quickshell/dms/
+    preBuild = ''
+      chmod -R u+w ../quickshell
 
+      substituteInPlace ../quickshell/assets/pam/fprint \
+        --replace-fail pam_fprintd.so ${fprintd}/lib/security/pam_fprintd.so \
+        --replace-fail pam_deny.so ${pam}/lib/security/pam_deny.so \
+        --replace-fail pam_permit.so ${pam}/lib/security/pam_permit.so
+
+      substituteInPlace ../quickshell/assets/pam/u2f \
+        --replace-fail pam_u2f.so ${pam_u2f}/lib/security/pam_u2f.so \
+        --replace-fail pam_deny.so ${pam}/lib/security/pam_deny.so \
+        --replace-fail pam_permit.so ${pam}/lib/security/pam_permit.so
+
+      substituteInPlace ../quickshell/assets/pam/other \
+        --replace-fail pam_deny.so ${pam}/lib/security/pam_deny.so
+
+      make sync-shell
+    '';
+
+    postInstall = ''
       install -D ${finalAttrs.src}/assets/dms-open.desktop \
         $out/share/applications/dms-open.desktop
+      install -D ${finalAttrs.src}/assets/com.danklinux.dms.desktop \
+        $out/share/applications/com.danklinux.dms.desktop
+      install -D ${finalAttrs.src}/assets/com.danklinux.dms.notepad.desktop \
+        $out/share/applications/com.danklinux.dms.notepad.desktop
       install -D ${finalAttrs.src}/core/assets/danklogo.svg \
         $out/share/hicolor/scalable/apps/danklogo.svg
 
       wrapProgram $out/bin/dms \
-        --add-flags "-c $out/share/quickshell/dms" \
+        --run 'export DMS_ORIG_NIXPKGS_QT6_QML_IMPORT_PATH="''${NIXPKGS_QT6_QML_IMPORT_PATH:-}"' \
+        --run 'export DMS_ORIG_QT_PLUGIN_PATH="''${QT_PLUGIN_PATH:-}"' \
         --prefix "NIXPKGS_QT6_QML_IMPORT_PATH" ":" "${qmlImportPath}" \
         --prefix "QT_PLUGIN_PATH" ":" "${qtPluginPath}"
 
@@ -73,13 +98,7 @@ buildGoModule (
 
       substituteInPlace $out/lib/systemd/user/dms.service \
         --replace-fail /usr/bin/dms $out/bin/dms \
-        --replace-fail /usr/bin/pkill ${procps}/bin/pkill
-
-      substituteInPlace $out/share/quickshell/dms/Modules/Greetd/assets/dms-greeter \
-        --replace-fail /bin/bash ${bashNonInteractive}/bin/bash
-
-      substituteInPlace $out/share/quickshell/dms/assets/pam/fprint \
-        --replace-fail pam_fprintd.so ${fprintd}/lib/security/pam_fprintd.so
+        --replace-fail /bin/kill ${coreutils}/bin/kill
 
       installShellCompletion --cmd dms \
         --bash <($out/bin/dms completion bash) \
diff --git a/pkgs/by-name/du/dutctl/package.nix b/pkgs/by-name/du/dutctl/package.nix
index a2e62718095a..6f4da80cd92b 100644
--- a/pkgs/by-name/du/dutctl/package.nix
+++ b/pkgs/by-name/du/dutctl/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "dutctl";
-  version = "1.0.0-alpha.2-unstable-2026-08-25";
+  version = "1.0.0-alpha.3-unstable-2026-09-09";
 
   src = fetchFromGitHub {
     owner = "BlindspotSoftware";
     repo = "dutctl";
-    rev = "c402b399acc1c6425ce9afe8b02e10e6c2c2f382";
-    hash = "sha256-OoVaZU95tE4zY4z5Yin2c5ezfRsP8WTc7eCuXpGOC2A=";
+    rev = "231342b09d8314e4f92360f3e0ae3769ecb94e17";
+    hash = "sha256-orjt8xF34gSdXKdwVt5DdzyqoLxKQieCn7Blow2TA0Y=";
   };
 
-  vendorHash = "sha256-jg5UNZ15OZsLfGG0LXouNvBwQ2NX+dzP0cQBHAdgUds=";
+  vendorHash = "sha256-Hrye9URJ1WW1qQIDxSqgfvMzfhZMeQrffsoGbGU5HmY=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/fa/faust-physicalmodeling/package.nix b/pkgs/by-name/fa/faust-physicalmodeling/package.nix
index 36c3a79e16a5..7c37b8a697b4 100644
--- a/pkgs/by-name/fa/faust-physicalmodeling/package.nix
+++ b/pkgs/by-name/fa/faust-physicalmodeling/package.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "faust-physicalmodeling";
-  version = "2.85.9";
+  version = "2.88.0";
 
   src = fetchFromGitHub {
     owner = "grame-cncm";
     repo = "faust";
     rev = finalAttrs.version;
-    sha256 = "sha256-dK7UPoPpbiQNQCrcaJc/U3U3eOoIUcHK/WQeTDg4vqE=";
+    sha256 = "sha256-UdMvmcuMYcsP9G9AAlv0OmO6XRbPFNQLCqsf0q/BU4w=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/fl/floorp-bin-unwrapped/sources.json b/pkgs/by-name/fl/floorp-bin-unwrapped/sources.json
index fe02058647c0..567896e3c5f0 100644
--- a/pkgs/by-name/fl/floorp-bin-unwrapped/sources.json
+++ b/pkgs/by-name/fl/floorp-bin-unwrapped/sources.json
@@ -1,17 +1,17 @@
 {
-  "version": "12.17.0",
+  "version": "12.17.2",
   "sources": {
     "aarch64-linux": {
-      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.0/floorp-linux-aarch64.tar.xz",
-      "sha256": "7b36eed9e20e5d040a39b1167c6146f683c5883d703018125539fb9e54feb9da"
+      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.2/floorp-linux-aarch64.tar.xz",
+      "sha256": "21a47c35a45e208fbf350f1123a0222451dd90b0b6239b0bf46f27b2250a6c0b"
     },
     "x86_64-linux": {
-      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.0/floorp-linux-x86_64.tar.xz",
-      "sha256": "9b2c1bbe985f02a009d8b5294ced411ddf2ff1c9c3b5d83e857635222693c890"
+      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.2/floorp-linux-x86_64.tar.xz",
+      "sha256": "2f59e332766d8ca5e966cc655450a0f1d3cf6e286f9f52172f8bd3caa7858ffc"
     },
     "aarch64-darwin": {
-      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.0/floorp-macOS-universal.dmg",
-      "sha256": "b35781bc14496ffe6b00792a5d3b18dc1a74617600f7ff553624cfcf3c22ce4f"
+      "url": "https://github.com/Floorp-Projects/Floorp/releases/download/v12.17.2/floorp-macOS-universal.dmg",
+      "sha256": "7086e8817196e2dde6fb89555b18453e5f201eeeaff4ab6807c15ba49a8dac3e"
     }
   }
 }
diff --git a/pkgs/by-name/gi/gitkraken/package.nix b/pkgs/by-name/gi/gitkraken/package.nix
index 6bd20b3f79f1..b4a1d5737cd4 100644
--- a/pkgs/by-name/gi/gitkraken/package.nix
+++ b/pkgs/by-name/gi/gitkraken/package.nix
@@ -56,19 +56,19 @@
 
 let
   pname = "gitkraken";
-  version = "12.4.0";
+  version = "12.4.1";
 
   throwSystem = throw "Unsupported system: ${stdenv.hostPlatform.system}";
 
   srcs = {
     x86_64-linux = fetchzip {
       url = "https://api.gitkraken.dev/releases/production/linux/x64/${version}/gitkraken-amd64.tar.gz";
-      hash = "sha256-G7ZKY3ViTGgQy9iiprMgr5p442sauI4eeV2RnCmTLDQ=";
+      hash = "sha256-vudaXmTqCdRzkVzw3MyzfGSGGM9xfDO0Wims0vxM4yw=";
     };
 
     aarch64-darwin = fetchzip {
       url = "https://api.gitkraken.dev/releases/production/darwin/arm64/${version}/GitKraken-v${version}.zip";
-      hash = "sha256-AbT9kx/NOBCSd5HWodqYDH3MzfFoGwOVC/Uqel2BeRM=";
+      hash = "sha256-T2AlXHW1eQvlJ7zFndg0sy4X4fITdPhTePk27utYAe0=";
     };
   };
 
diff --git a/pkgs/by-name/jo/joplin-cli/missing-hashes.json b/pkgs/by-name/jo/joplin-cli/missing-hashes.json
index a11727f8d572..02ab02f9a084 100644
--- a/pkgs/by-name/jo/joplin-cli/missing-hashes.json
+++ b/pkgs/by-name/jo/joplin-cli/missing-hashes.json
@@ -1,100 +1,102 @@
 {
-  "@esbuild/aix-ppc64@npm:0.25.11": "9964f44a050e85ae14f09e91d1c52a6bbc2cb4bb8ec0c6212cf16b534ee7cf4db10541d76717e539fe9baabab5b958cacab35ca5a75ee741fca6a98b1214c6ba",
-  "@esbuild/aix-ppc64@npm:0.25.12": "b2cc7e0cd348bc315907f6ce090ee545d4157a19fc44327ff0262ba9296f0fad19c57dd679b1b526a0a18f34f1971b128e15b41bca794c74a9b2c32238fdd537",
-  "@esbuild/android-arm64@npm:0.25.11": "1c828162eea068aa87ce90e8c645a7cf06bbdb574ef6966c798e6dd19effe806bf2b3a76924512de96eb4f7eb07019496df81076fe9fe6f86b17f4495f8df65d",
-  "@esbuild/android-arm64@npm:0.25.12": "f770937988ec42e289277abc03800ccf88902684dbda3013a8ab274bb9eca36d35619a75f0f0510e225bdb4c7cf9a426218c7d2641a98fed74287a52d60d8865",
-  "@esbuild/android-arm@npm:0.25.11": "62320d829b3c4a9a12bf265575bec35cd77e5b8061387d9b4eb719644601952b2a6175369f3317c2c929adcb4e12c64e1dbe5730727efbc7c6f693c42a64b571",
-  "@esbuild/android-arm@npm:0.25.12": "7a5d507aa717d85470c595e11f3c03fbf4f0bffdd10d30f49e1a3f14c2553191f156b214eacd6911fa36719faef23c28be7d88ac876ec300995987964ea16e99",
-  "@esbuild/android-x64@npm:0.25.11": "8ea7c869010508342a2d533f995a8a880201cad221b7958271e141b51144166a2338a1436d1174896a5feeb9f5b65f7071df31dee42024c8634785470a13e704",
-  "@esbuild/android-x64@npm:0.25.12": "cd459b0433b0541bae9ffafd274c57529125719a5b78f4ee92aa9f8a1f54b002a18d889bee19084a503c114412269ef4e740d21b4a2de811ec2a076e96b35f48",
-  "@esbuild/darwin-arm64@npm:0.25.11": "2e359aeb42055775025c69dda944bdb31abfde322d551ee0545951d45b26c364e867671bb76e1217f5a978dab4144e1d416a7a5ba6dd46b7a052e1abf55cef9e",
-  "@esbuild/darwin-arm64@npm:0.25.12": "067f4588b9b64c93742c4a8cec35282dd076583006ce8089aae3095fcae5b606a2f60d86caf0527be6009be234178fb83d360af82698e2017a6f9fb9345e084d",
-  "@esbuild/darwin-x64@npm:0.25.11": "67dfd14d907eef9fdb5385423a5ca0a0ecdbd1cae57afd2d88c46b28ce4aa3c870953f72bfa5d7d729d9d30ce1d794358cb2877556e202ba21c90f6771da70d0",
-  "@esbuild/darwin-x64@npm:0.25.12": "c29947d07adacadcb29092860b69d1b668d9c5abfaf525e2a7f3ece61c3f4e72a95c1c66ad0e80fbf31d01210ae4e8330d4ae6d9c6c9ad2b8aa159eb115f9a8d",
-  "@esbuild/freebsd-arm64@npm:0.25.11": "b6e3460f7961081f7bacab932e3554c4a1b69fe3b975fbf68f1bd2cdfc1d33387431cabac55d086d85e849142c174ae89862d5a76a967a02fe15ae34985c094e",
-  "@esbuild/freebsd-arm64@npm:0.25.12": "c51691aeb04e41c554a59cbb5ab8d917446f352aeec70e3d5a7f25409e9115ff2db930589052df3e7d60f03eff4c298bda89db62f2408d1a49b6a70e69c5d4a0",
-  "@esbuild/freebsd-x64@npm:0.25.11": "acf0d2fc2eec50cbf08957bda48aa1763ca3272c8a9cd159c08ec999283a0333fcc9949a591106459d189ece05a4e5fbd0de675e28849eb3e97bc7811c636c74",
-  "@esbuild/freebsd-x64@npm:0.25.12": "9b84c48176350811690751c34d1513005290641923a161f96cb433cbcbb8c072ecb92cef39ba641f48032071f74c6119e5f081b5788242109426c54f3ef1a01e",
-  "@esbuild/linux-arm64@npm:0.25.11": "56bc997008d38d920f2606e8f85db6f8ac081ea542b2fa4a0361e47b0cc8db982863cc5805a207bdd6eb54e50aec9f1c89003fe85e487e2a3a8415fbe1ba387b",
-  "@esbuild/linux-arm64@npm:0.25.12": "1e9cc29569890f5944e7dbe2e597eb19d76e85fe07aef6253129b16800ccb5b33a79cea17873d7debdf681d34adf77e06ae99742fe06cab095f3db441b741b1e",
-  "@esbuild/linux-arm@npm:0.25.11": "7f7199f53638c12266ce2da4d137f8406c5c526ee4ca357f0d6532dba6688b6ef8487e3dcc0ad211372cc6623a7c1d9d340b4fe6e1971759cc0e629e29e44f1c",
-  "@esbuild/linux-arm@npm:0.25.12": "fcf091d6a51834c9a942ee33b568342990c7fa29d2ff338ce628a41bc415696d09bca7ef502c2b04518973010f73ab3d13e37096030db9c8d393ab29408f104b",
-  "@esbuild/linux-ia32@npm:0.25.11": "d7376cb7ea30bc2c4fd2d6fc55c5b246de23dff03f356cfd06e183f01930e54fefb8d55cfd1583836e3d96e05ac082e55df27cbe6b0e7c3bc7ad73e2078d3550",
-  "@esbuild/linux-ia32@npm:0.25.12": "ccd563c3189e5f651b479dd80d3bebd9d5c4747ce7448bb80266c804c3141eb3514b8c70445d77301899c54c1ff8c74614f8423704fde475a5c67efe86713235",
-  "@esbuild/linux-loong64@npm:0.25.11": "4c7348077a29b23e4b7363ffe9eb8bd53a3c2217c1fd3095368e5a36e4a7f464099c6615cb048686a55ed43f8a0aa2d98394d50f1fc9e961fcf3b0b2644e7a7c",
-  "@esbuild/linux-loong64@npm:0.25.12": "6df2710d99d84006ad8151a9ca26861dbb97524a15e61f56eb1a5a76786865ad03be838fe3d414a72b239262364964528f3136c2965b3c442c7ed85090b145c4",
-  "@esbuild/linux-mips64el@npm:0.25.11": "9ec8b282a71c3d9bebd9b70e8b6bcc3580e08a6cacecc4bf5dc93e74494297f729f60b348d6debf5ee0a11ca67fcc2813418c29e83944dd40aafd76de23de3b5",
-  "@esbuild/linux-mips64el@npm:0.25.12": "883bd8c4afd70b8e372db8a6bdb429d419ae30253a63987ff824994958d8431b6e51ead05e6372b2a233e025ea57f6f65b04ebaff8308e39acf54bfa73a5cae2",
-  "@esbuild/linux-ppc64@npm:0.25.11": "9ed9b349aa6fa95f17426e0acc519b9bd03a9fe3e62cfaf2cb2d735714503b37e60d07a761459565e67e0128d2791a25bc7a44086a2972e2f6b7dbe7273f0675",
-  "@esbuild/linux-ppc64@npm:0.25.12": "71f8544a3b99b4c95d49604b66d144e9617ae9925914c1bd5bc6731d15d4e48e7f8e9bffd85835e1c93a88c3537b53f3e99b500e4dd2533af9483055b02f9d38",
-  "@esbuild/linux-riscv64@npm:0.25.11": "89a0c51f44e1060eee55bf0d0c83c8c9adb4728d3b3c54aac12aecf275209ef6f819d8a3bdcec6809140cfc52cb9f27be5388b77fec1be0647d2b7bd45293779",
-  "@esbuild/linux-riscv64@npm:0.25.12": "fe8048262c5c6a040c047a9b7ab8547b0e7a32ce50f622ea8dadc3ec22065676efbc9b36896ca96959f77839757319633a2d05af5f2de7b32389a03b80f027f1",
-  "@esbuild/linux-s390x@npm:0.25.11": "571961c33a3be1978cd03593b34763754bd16d74c90a99b12762f51689876868d0f198fc9e99fa9b8e4bac9cac29e69684d818f13e6698b839b8f33556b1ea22",
-  "@esbuild/linux-s390x@npm:0.25.12": "e5c023be1dfd75c915453763f944db8ab3da4f60a00c2b0e6f3b9349bc6c51e5ac5ce928db56e8f316e910213adf2172efd1b37abe070f6cda0c28583d770bab",
-  "@esbuild/linux-x64@npm:0.25.11": "9fcbdd1585fa81dffded52d7fcabbfa05f53c8ab4506faa40407e76bded0695bb133c8b9c948b9017a7221bdd44873bbbf3b1b7730fc25c41a00c6ac51b00c78",
-  "@esbuild/linux-x64@npm:0.25.12": "8b2c7f5e00c40058f5c150df267cd303eae5907822f196902cd8e64af70475e800a7f132ac6388aa2b77b877d6314147e67f3fb67d97c867adccd54a2a6caaf6",
-  "@esbuild/netbsd-arm64@npm:0.25.11": "97ff59146f35116013dd31984d90d6bacfbaf5a9de31ff723d0e3b7cdcc841e4670b680958d52d85a319f8c0e0aa7a85c97d9ad66943e7b8fa01f26a7386cec2",
-  "@esbuild/netbsd-arm64@npm:0.25.12": "19bc5a1295697aa8787929472323494302d117ea1e592f17cfae443525c1e5917a5f77e6582fc1ec9de3a11a9e296bc12749c6b12cde0aab10695b5c25f29f73",
-  "@esbuild/netbsd-x64@npm:0.25.11": "eec02d5c6088af1ae5063872a27ca3bba9397a6d4219cda25c902cb6f0a5dc47ebc96ba1ee634240eb583eadc7eb817d3a73dbba30f5cab22834692406fd13d2",
-  "@esbuild/netbsd-x64@npm:0.25.12": "8eb2ff51aa39b43a021e4b51411789b6299fd0dc38b3896719684333e32fd42ed4508ab67dcc88435631e5333573a4848dbfeec12569de46c2318dcdb39ad3ab",
-  "@esbuild/openbsd-arm64@npm:0.25.11": "288dfb9660bc77e9905c02047240b63e3788bb6661d6b9c1112b8975fb2438022c90e111cfcf3be46916d2eb4d336e167b73471fbf20a64bab84af0e01d8efdb",
-  "@esbuild/openbsd-arm64@npm:0.25.12": "5ff26a012d0d35673bc3800d28f284a62c310801a68c55b2d1ed8a7e09ef7568117fb8ab2d7ec7a6e7d73ce6a9e05150ee07335fc6447ba98658469b9da1cb2e",
-  "@esbuild/openbsd-x64@npm:0.25.11": "ec1c3b213cad6b32c7bb61b40d06826a75cd4d20cfee02c6fe4e2a28af9693b58a2a9284633587f5e6e7e9688b273ed0cf9dacd9391ff6de8151d76f3fb86d12",
-  "@esbuild/openbsd-x64@npm:0.25.12": "41dce65493548bc0dc411a6175e9fb109a93bbbf370ef444d1459698226ad2a3096ab7edd420c27eb3d15e6bbd0bc79357bd7c0a59c5527ace0fefac181638f8",
-  "@esbuild/openharmony-arm64@npm:0.25.11": "017c7d5bad7660370420f2c0d89bd5065754059a7156ed63393c47a721995e522af1ff0220ff06918084b197959be85721225ab811d81f4e7832db500662bc72",
-  "@esbuild/openharmony-arm64@npm:0.25.12": "b3e0502067e760e5b92d3180e20372cbb2dba8267fbb56206d50bdeccd8895feb408020b98c3f17054eea0f1fba365385850cb91d1f79a25dfa3751032278825",
-  "@esbuild/sunos-x64@npm:0.25.11": "a568798708a07aeeea6c181260d9e7977474024e9bdcb58f9178a193ea6304ec5e507a1677020b58ef86b0fac2aa04e167efe70560c10d6e4e142b85938293b8",
-  "@esbuild/sunos-x64@npm:0.25.12": "50ed9767e00ff74a1d98d94c5fe6027bc5e9e095a64735d1d0676ec72adc4b15b0095e97f5ac71602f2c5fcdcf3e9f6cfe005315e998d9d3e12ca93a2076b639",
-  "@esbuild/win32-arm64@npm:0.25.11": "ce1fa9a36f1dc2a37885cc71c474ad1cfe529994646943df21df56b929e2bf8bf29002c69d99ebe9aea301c9e326cf7318e5f58a6cb723763164186954c5b4d3",
-  "@esbuild/win32-arm64@npm:0.25.12": "4969d20da28a0c783ada6116724f51a542fad81dab043c4f6f9b7c8f4a68be558f03beb29d75bd550ab6e63f720535ebacb9ce1760099be7a63d4e1ec8351e2b",
-  "@esbuild/win32-ia32@npm:0.25.11": "ac33cfdc945fd76ec9f5ad5934d2cc7d3947c7c2eaa1748e5c34455a4d4be6fb194a58bd7d58d421d775ff09398d95faf5fb3e715f58eb42967dbc73ba1b31d3",
-  "@esbuild/win32-ia32@npm:0.25.12": "60ce7d21c5e01c8b0c8c2c4660ff6d890a32b1acf09f5499f950a86bc5c6da17eee760c6bb7a720a0429f7633bbb38b2db517e444408d8a6ff6fc76157310980",
-  "@esbuild/win32-x64@npm:0.25.11": "6a96eca639f98d5d2437820fe0640e5a8fd5ec1429b1d9e8d224bb24eb779ee017872d9ea0ec70851f5e5d9e9065f5484b899119103deb5ef655e5f9b890f9b9",
-  "@esbuild/win32-x64@npm:0.25.12": "bbdc69d57d85a6b8af85731c0979186aba54eb34c8d1de5eab4aa1d8fd45e3b38b5426c287cedf43228bb0794a741d9b2c55284c7db7d79335bc33dc389e7bb3",
+  "@esbuild/aix-ppc64@npm:0.27.3": "539f78a1f2a829dc4592f85eff391cd86e9d83120d3f8292ce03cf4a36222d861d55e677187eac4207aef7c52792ab03c2154a9be7fdea6b72b915d7996acb12",
+  "@esbuild/aix-ppc64@npm:0.27.7": "848d1a798fb9ea6aa902c9138aaf6b45d889df39a1ff737300ea9968af3afee1000f611bc00187f5bda096d300fb25f4f883c57a2dc7296e40295f2470aa57b3",
+  "@esbuild/android-arm64@npm:0.27.3": "f2be31446948ec99ff86817969eb76dce68101a1a1b30a18b86339694acb4ee587fb905c6df11c8aeeb392ecfcb5d3b4ab308481cd8636d7ad8a19837bceeb47",
+  "@esbuild/android-arm64@npm:0.27.7": "21a57ee237e1503d92c2f818c1dbf7d6f772b100fd0dfa95ea0d24be718c0c6952e915ad1f47bcc3496bb807a0a254d35d6baadc48531b684d2236f57023f1e6",
+  "@esbuild/android-arm@npm:0.27.3": "0cc5c0528a730222fedade89709b22e7d150099c95a3db3f0415eea80b71daa0152afa7cce743d5cba83be2cc07bcecb6c86e43cf40182a2f973910f1119dc29",
+  "@esbuild/android-arm@npm:0.27.7": "46a246245a024680c8b5051425fc724c846b7d36ac952cd312e71194bae07fd712aa6fa8ddd7fa648a18d665eb0bcfaf111726af7b676465cb181dff7e6a0848",
+  "@esbuild/android-x64@npm:0.27.3": "7b9d499a2b0f71347ede1dd24a0823b05584d40c22df7f7182bc6797d81e4b793860f1a8d88c8aad77228771c7efd79cf7f4368de859313dd7ffc88c8fc5fc28",
+  "@esbuild/android-x64@npm:0.27.7": "95c858fe95b716aabcb71a0dab9162d46859c0deb713189730ce6c2a2bc27efed2341b2d27aacc092dee7544df7b25035a12d65f30481b5b03a8358707e1a6f3",
+  "@esbuild/darwin-arm64@npm:0.27.3": "1fd905581c49d39033d77c5289238f3c5ba79d216f753154edecdf88217bb0616ecfd08a7436694c17f102e510152289e9ef3df19fb246e78970010811aeec05",
+  "@esbuild/darwin-arm64@npm:0.27.7": "281897d55b71e222394f08ee519999f673778c26ac78e4dacc67262e449b9284e852dccac8d6293fd611e0a37d0c798f2ea18c65573ed251d5e04dcb01121f0d",
+  "@esbuild/darwin-x64@npm:0.27.3": "7bfd1b7d9738e4c47638fa27e609aa5e3d6241ebf5bbb57d8e554df486a7dae7736f06abbd772538bb4c9175254f9a4462a4cb6042db7920cc86a00658f60e62",
+  "@esbuild/darwin-x64@npm:0.27.7": "a6c320cda3c7c176d678c00367823259b7efc0f8638393bd0e45b4f950af15be887558c82e2d74ed9fb492a4b04f36afc1c3a3b9774aeaaa08fbf96aac6e3524",
+  "@esbuild/freebsd-arm64@npm:0.27.3": "b695e9ff1a8fb610352e3622e6c02fbaf96ac790e0635909d42df353ea7951bec172ae2f9fd0b5a9c7e4d4e9f34ed6c2fc301d6e029b4be37f87c9d5ef1e5a3a",
+  "@esbuild/freebsd-arm64@npm:0.27.7": "8b546929340ebb3daf5b47ca24db6d6fdcf3c14a733c41ddd8ae960834a5aa60b22b341049aef39badfdfaad0081a8706d085ba892e2b23163d1d1ff52ca1dc3",
+  "@esbuild/freebsd-x64@npm:0.27.3": "74993f1805d59dd66d97b68164a45c8d101c4875f759f8de08578820c9c2cfbbea11376d13406848bc4410305d12c204f5989282d9c2212031d29b26b1606bef",
+  "@esbuild/freebsd-x64@npm:0.27.7": "5a4c0ccbde7fe7a6de14c8789d1f20f4cadc7980e531b090b137774b56f360ba3c50f5612f01980ab9071ae50e1bb007f44c1b04b68fd84ba07113472081e021",
+  "@esbuild/linux-arm64@npm:0.27.3": "7701dcfa15b4110d174c32f81f5e7bc423144606c159bbd96aeae22f5d29f6e930c1626ab182128858618fe9b670913a318269f7786ac790f7b95897a7436061",
+  "@esbuild/linux-arm64@npm:0.27.7": "741871bea9ce0a136367707cc509254fef167c5bf968706de6bff7db96ee7c672f02231cb69965e17ca0aedbd99d533275f5a695a3069cb3df0a9d2cd877847f",
+  "@esbuild/linux-arm@npm:0.27.3": "b8de103a21f34ac63c069802f7fb86fbe70d88839aa07f77ec4fa1fa68e203bc3b698bab1a3e64a5a5357afc55ea5a6591bccf1ee96a8798beabf0abaaf50ec5",
+  "@esbuild/linux-arm@npm:0.27.7": "c2ee4ae5f6e13f8e882da4a369cc5d672ae8bf7613e35e22b54df3999e0d5aaef6d704c7dcbc473708eaeee202dd8e892c37e791bbc50a509b23ae845d18b689",
+  "@esbuild/linux-ia32@npm:0.27.3": "d5c2d5791bb3bfe13f7c62b6e062a58fedcfaf33244ffd7a3c18b05a8607d012831872a48b8afef902aeb0023edbbce2320e827b1f0ef21ac2529d34f7ef9dc7",
+  "@esbuild/linux-ia32@npm:0.27.7": "0933a68b0bdee3dd0fcd99da92c0472deb6d6225c454b88a3609e1b1ea7648b36f6b83be8a8cf41edc1f0d666b76006e270a66c7520050d278d7d73df171e86b",
+  "@esbuild/linux-loong64@npm:0.27.3": "7523b1e49ca98a14bab3ce0de9f26d79f469afbe569aba5fc7c4d468823ea3796bb19b38e2d55a2920478e0ae5aafaab2323426ac145ae88a978ec9fa82e7f55",
+  "@esbuild/linux-loong64@npm:0.27.7": "9609e94b603a8a68bcd60325626d0bd35cce37e75994729d4ea264fa865db201da64c3216004656d94b1edeb8587150b1c47a1eef8ee1af9dc0d3cd6baa5ab2a",
+  "@esbuild/linux-mips64el@npm:0.27.3": "daf1951b8ae5931c37a2b82d44ed0d19a4bc5f9edf4ac7f41fc436e08cc8822b7750080874fb212aea5b28774667d36b81e88185e39aa50acf5ada6e7287a672",
+  "@esbuild/linux-mips64el@npm:0.27.7": "74ac0fe0b857b926af9057d5fa9634fc4b0b61a6fcd9c13cc2917e0e66638e2f724b8fd82024f97d524ff54ae17d0a52a0569078639aa9907f5287514aa046b1",
+  "@esbuild/linux-ppc64@npm:0.27.3": "e289278d7e6a41088038621a3e339858f11712cd447b9668342e42fefe8ba58045b129e9234c11f0e5844367881253b3962be0d0066171d82b159092a3352c31",
+  "@esbuild/linux-ppc64@npm:0.27.7": "7d75e59ad798631b7b7f77471fc9f545e0e6d2959a52d57b77e92d4aba81c5c57dea558d22539edc6aca92ac72112f93381e163b996df193cb5c9a1da4b4230d",
+  "@esbuild/linux-riscv64@npm:0.27.3": "0921281dac5758ef133b709347baa1c9ad42987b3ce484385e7bd4a0fd75771fd73ec544b489e4d30a6b2d469e7b824b3951a9131ce6f5caeedd4babd4525dbb",
+  "@esbuild/linux-riscv64@npm:0.27.7": "6dca2a182f59d43057ef40b93788dfb265c3b9fff4738aa613d87c7c709d9c308f18c282b7cfc2a1c770fa4db78d3529dc50b8a9f30e415661d993b021b2cdcb",
+  "@esbuild/linux-s390x@npm:0.27.3": "b06641158448a323f0c63c6afc823587e8cacc55c06b2229c0c239240be410d3a4657081b1ab963ae596f041e2598772a006cd064e777acb96404dc73223f498",
+  "@esbuild/linux-s390x@npm:0.27.7": "870de4b9ff155cf5cf2ccd7b3587a6b4170550a31b621ea11dc134cd48af95f4a30f4ce868d249967eade6b3dd66e7a0af0d542c6fbba0dbc473fd0f5d3299b0",
+  "@esbuild/linux-x64@npm:0.27.3": "b786c43d1afa131175965096a97aaff889a311c25d015f12e04161055a80a8e7988f4fb86644b33fa19aa817c2e4183ba30edd6caa22d900876ad5043ffad9a3",
+  "@esbuild/linux-x64@npm:0.27.7": "47fce66247eda2d4721c1e615f7169eb7bf6e4b6105eab7271391ce933e7d350d3d4a581b3b8a61573f70b6663268eb514e624875dc514dc56dec3a37cf7cbe3",
+  "@esbuild/netbsd-arm64@npm:0.27.3": "6c501350c00974bf6677b4285c47ca23f2662ac6b3d8fc62a88eb777d5b0daec5ca39cbb1df01f275cea2a9cccfe5bc4b48813be1f588e717578324956609b61",
+  "@esbuild/netbsd-arm64@npm:0.27.7": "bbe0d0529fb73fd38c2cf9ebc1d1dcd5a2586b263cc4f6300d37008955f45310e842d63153e361a4447d4ca0f0a0691d62013fe60b09e4e0cd53f428ef2266f3",
+  "@esbuild/netbsd-x64@npm:0.27.3": "01b6b1ef88577cb8e742b2ac94bac6d461c078a30d8cccf9ea4e7bcf625a4e39d4d350b743b6ed93b29deae34431d1eabba48ea3bce76af15fa273aca9189ad0",
+  "@esbuild/netbsd-x64@npm:0.27.7": "246ed4df55788aacd2d9146f51ea7fcf4715e73d32ca1b0fcb42c316fdbf21d8de03bb304205dc707942442899529e834466894faa0aa3fa40454f5622648fc6",
+  "@esbuild/openbsd-arm64@npm:0.27.3": "c997893f91748ff1a646cc8401fc35326d847ebe76be5b50426ff6ddc5511400860d5cbb3e8236bdb20e6a19cc0d19f83b419432f6a425f324314a4415b7a48e",
+  "@esbuild/openbsd-arm64@npm:0.27.7": "d99927053a0f8be5158da8ecde7e8a08dd0ea580ca93f006971730979681e3738f83ada4d6564a57cdd6f412e40e5a750a92f424807aa12f97c2ead52617ad41",
+  "@esbuild/openbsd-x64@npm:0.27.3": "b2e73df0c2cedbb6183b23462a6892e9e746fa65177143c109c722bb36087084435940b0f916c680563abb3228f0fc14d625350ff35795961ec32ce64e74183f",
+  "@esbuild/openbsd-x64@npm:0.27.7": "1480ff755c727d056e5f37e1d2be83d36b137c9f3595911aaf1659160c2cbfea846bded0557017aaefd79a0322be5e381b168ebff3eec4af684198835504b051",
+  "@esbuild/openharmony-arm64@npm:0.27.3": "5eb1e2950d0452421b3070cfa142acbdb2ed583bd655e8c4c09ef1b1a995ed85dfad8edbc311814b9ce2a4b90825ae504e160800257d18bb37eea814504d4abc",
+  "@esbuild/openharmony-arm64@npm:0.27.7": "6aa1fd102bdfa99b3c27f558f6b5d493b47f34260cc10967c47d44b86018a307377e0c70ef51b8886c592f2a0057710a8ad7781716b0eb059d0b0657b4f7ddec",
+  "@esbuild/sunos-x64@npm:0.27.3": "28886f25d896fdf59ff797eff3a8a793fad42a0e86ae7a3cd6d9e8881b77898429ae81a38b26f29d142d0bd297a1bb004011ed281e5a4cfff0c1045d380a5fd1",
+  "@esbuild/sunos-x64@npm:0.27.7": "66bff01f90a97b989c6e6fbe6f8df77a0e5b40b57b8c4d8e6c407635546eb05553de570cd4e0d4624a5a6be8a61d7e9c6e7d8bc238f8f5773a4231361c0e8745",
+  "@esbuild/win32-arm64@npm:0.27.3": "5112e928732d7859b2eec7060b9ede4996b0a4da406a884124d3245d806be88759b572da22c251994cbfba4e447cebc4ba48f47b4f2ae2a749fd703b43d34a93",
+  "@esbuild/win32-arm64@npm:0.27.7": "eb7008345c82bbd4be30bb27ae4e17346cb5014801e9d50058984e7c5e4cb509d6eae82db3c04aab16b72d3829908b32151117222c107962fe3fb0e317e55951",
+  "@esbuild/win32-ia32@npm:0.27.3": "09a9676d6e8b704085fb760108118363a6be3f30cfb33bafd86bd73ea448a97f8f123855f0c242ed5523adb297da955519b0e01fd2cc669fb0073bd45207d09d",
+  "@esbuild/win32-ia32@npm:0.27.7": "b6a44b5b6bf670cbe86de063335f03faa308d5b3eabbca1f5078bba9674ea42d3d6ad9fb9601fb0c7abba65d4b4a467f20473aedb856c9544c20166c75538029",
+  "@esbuild/win32-x64@npm:0.27.3": "756af0c445c9566174a2b1d1097183e334dd9f3fdec77eb429921ff2d9f46f002648eadbe35392af2962e87f7d6ed5aa62669a2042c97b7134102809c30c53ab",
+  "@esbuild/win32-x64@npm:0.27.7": "4b91237b01e7e1a5083d2df524bb2ddb13da334197681fd33ad05975c073ccc901ea6b9395453276557608e5858cc032ed12807cc156c29f4ce7d2c63e04d5a0",
   "@img/sharp-darwin-arm64@npm:0.34.3": "952e9e9c34291502e7c21258d2874539a3953a5da8df52c8e2c459f673a76179eddd48c3b7563773db7bb36b2b241d781b98a667fac4b30c1f49c1cc9fdf9b7f",
-  "@img/sharp-darwin-arm64@npm:0.34.4": "d33346f79a11ebb802d52277e514e627f023de473b0e264f771a407d197874b07642fbf29c8eb38e22f73e117822e429a4567cc053185b8cf24f8496b7b1d574",
+  "@img/sharp-darwin-arm64@npm:0.34.5": "0f872f02a49c87c1c844c9715a1c1e4449fab30c85711d948767d41ea1eba1cc7be8268b582d95513e66cff090ab520e4104dcf30cc6f598ee429b40e890eeec",
   "@img/sharp-darwin-x64@npm:0.34.3": "57ccfecf25b6e21b3df16694a959200ee6d00ac150bf4c5e3787bedfa8f944cbc95c7130fb6d66b207a0bd987e30f302b67de35a7481909b9bc175581da1be6f",
-  "@img/sharp-darwin-x64@npm:0.34.4": "343994f22dac5e529f0c5bff4751f61cf691678f8663fa213c2a98d8842508b6c15f12e711a3c1749e66f363b52536a4d9a5149e040fa7fad6e7c5b6c23e7532",
+  "@img/sharp-darwin-x64@npm:0.34.5": "a9c0b03ad1d1c3ce549770e0655a6ad87a6e80633d65f9a009a2e19d1f5fe7b79c3ec946412f16ce302db3dfe759a35007e60e1f7042cb3e2291b49ba8d58a6a",
   "@img/sharp-libvips-darwin-arm64@npm:1.2.0": "77a6a47fe9cbc1e6d1c66fd3f617bc64a8b710ed7cb44eee64409d49456dba054495e5ef8de3442e655ad11263ed19df554e9c33c2976e3226c121d826188587",
-  "@img/sharp-libvips-darwin-arm64@npm:1.2.3": "a2bcd73ca2774a6c09a94200ea4ef96fc514b7af8fe2acf8d623e591569d05c4e703acfd48fee2b5fbfd1f338b11d1b0f253ea1214950e3201a999f564555392",
+  "@img/sharp-libvips-darwin-arm64@npm:1.2.4": "5076747c32a07caaf86e026f84a07378bd34eec6a6bc8843e5c09fc99e22f89e383d88824c0f527070efc33fb04569fa3f867038138faf8d76af1e4ecc0fc962",
   "@img/sharp-libvips-darwin-x64@npm:1.2.0": "334c823aa129365e7f71b3467fb3c37e7a0065d7cf192b08b2bf85d400a568da42cb236dd238ff35670f296ec5b81f08415e11c257e1c8b8df680923c3acd72a",
-  "@img/sharp-libvips-darwin-x64@npm:1.2.3": "38c7888fadfd59cc4da606d40ad2482eeb26992b4bb82fb1d8ed950379ecfa5c4c060d1d152cb0e78d8e9bd933ebb5e478ff1ef60a362e743e8b82f78fda9dd0",
+  "@img/sharp-libvips-darwin-x64@npm:1.2.4": "607213511370a700fda3ece08eb0a061a09483b595b75ce5e115c9d95efb6793d1e8e90d79873a9f526378f06f5fe5f3a8f0006cf76f7c7907985c8d4539f376",
   "@img/sharp-libvips-linux-arm64@npm:1.2.0": "c8e7d5641ed6d1a406d08b45536fa6a9e221024bad1b3b6e7e16942500c5ca3f5ae444ac141a61ed9b43f6f7e73ee66bf973e24a90fd94dfcf83d4617492c085",
-  "@img/sharp-libvips-linux-arm64@npm:1.2.3": "fcb603357a32067ca1f5ab9f66526465df839aefe5dbb3d180331907efe5167bb33b84806f2ebd60932f76f291d1736ea3eaf3b57330d2beaa1ac1bc5de8a872",
+  "@img/sharp-libvips-linux-arm64@npm:1.2.4": "e078ef44f936609cb2b5fc01433e6c8f3babd5ab69fcc5f006504eb4664efa791438ea61e44c8f236eef55ba6ddb7bc41dc9b8b264fe689ff35fac428ce356a0",
   "@img/sharp-libvips-linux-arm@npm:1.2.0": "9a854fff624303ed4bfdc7e936af47b3c6b07e486d0b366c8881306d49766b8e972c5a26fa53288b00f4b92a019b374bb66106c9d34f6fb23489cde5b861d2e3",
-  "@img/sharp-libvips-linux-arm@npm:1.2.3": "79e895b29a1fe84a19a9c6989062df62343d11877de6c2e44899afa0db74f109608cdd56632a615c47a82558a0203e04d87daab1861a18e6669f280dedc89bd6",
+  "@img/sharp-libvips-linux-arm@npm:1.2.4": "493a3d34f9ec5a2aa71cada3c2b0cc2428659cc2aaaf4d7b7f6065648da560cb62e1febd4d49fc48f814787dc431a2c7e94992a2e2334dc409b73ec658cd0c43",
   "@img/sharp-libvips-linux-ppc64@npm:1.2.0": "bd4e956d5f01efc158e992047460be6b8cddb9f89cdd02f4e377a178da1703ed12125f161ec2eeb99de9d11232333bf501bf5e70b85e0e6f94f1cddf7d5fc954",
-  "@img/sharp-libvips-linux-ppc64@npm:1.2.3": "208b361d28bec6be0ed261aa4aefb3ad484192081db62eb8ec84c3c09a1e224d8ca07718f97da10c709da45bfb57065cd6409a1473a30b684c0ff87a2bfb07f8",
+  "@img/sharp-libvips-linux-ppc64@npm:1.2.4": "d746268a804ff66f363823840ea84a91c2c24e0f28438812c66f659b29305efee2219f1bfd7569944e02b0783044c275000c13b4180c4b07af3786bd1991567c",
+  "@img/sharp-libvips-linux-riscv64@npm:1.2.4": "3bfb408d0e333593247aff9cbbcafa8bace4714a54a742d3b18a73dc506a1176c56fed63cc682c34ac27704e207e6a53a1c9c955395abcc4ef8af8ca12b4e09b",
   "@img/sharp-libvips-linux-s390x@npm:1.2.0": "6ed6d891c2ddae07fff09290b24c1ee3531264dcdb0d0d461279fa2168c196490874f84d5b5fa045a3063e76957fee0bfa765860db486779e3acb68ab743400d",
-  "@img/sharp-libvips-linux-s390x@npm:1.2.3": "fba082c5acbcc22086ce1137643b01add900ae26081550229ced8f827c8b7f80a4d1def8f850e47c8586d5c9f962e21ec77aceb4236d4c3ead3649e324ea77c4",
+  "@img/sharp-libvips-linux-s390x@npm:1.2.4": "79cd9764df0e845779cbc80ebf8eb0571080bce69d935fa8cd9a28a3aa5c4601c0e762ac83b6b8df0050ab54048098f692087265f64b16efc61de0818c2eea1b",
   "@img/sharp-libvips-linux-x64@npm:1.2.0": "2a80a045237e56c5f4ec2b5c4febe9d95066beadff06bd936439f34bdd615205346dbbf996b5b4d1e43af6a128cdfd4b1a76d6fb36d9eb62f61a7248fb242728",
-  "@img/sharp-libvips-linux-x64@npm:1.2.3": "77a22e988472bf4154aff18b94ccbf9799c723033315bfa590ba630c7b94fbb5b1d6430e461b3431dfaf1f17d7249ca2a287075a4d8ef6029e74e1d7034153e4",
+  "@img/sharp-libvips-linux-x64@npm:1.2.4": "da642063f7a8f7e2c26e0b5734c1a39e7f4ca0d4521d9c6c65d81112146c4ecb846e73602fa145cf2106cd8f426d84010bb3f0baf4a9cf41db1b7deb3b47f353",
   "@img/sharp-libvips-linuxmusl-arm64@npm:1.2.0": "4225b0af93ec3a600f81930bb0ac70671cb76917a033f5ac6033252a79dd04c54b1d1bf602f79877efd07d9382106d8b2058b7c9a2bfcb7beabb6861eab0879a",
-  "@img/sharp-libvips-linuxmusl-arm64@npm:1.2.3": "be2a7f0e3f2ca126e1cab2e759c6e11ab97bedd127ef8800d5ab974889f3850132a92466b2c33ba96d4143926f12e127b03ac62b3f98176036150dd7925ad621",
+  "@img/sharp-libvips-linuxmusl-arm64@npm:1.2.4": "e0ca7280827d433d10655ea1491543be98994e75a7b33b158faa7b4f6c866462d2abed253378b2534b9fab351a0961f23baaf16b4e7441131df0e3d47068507c",
   "@img/sharp-libvips-linuxmusl-x64@npm:1.2.0": "d2a47388c6d1ff90bd85fa0a93f8bf9c5855c2834736bdd78d47d12689e3bcd41c695788c6bef9a8e1c5156951a675e22dc51a0ddf35a7d56c96cae3e9f55688",
-  "@img/sharp-libvips-linuxmusl-x64@npm:1.2.3": "e69b64ab8964de1958cd4f0818c97d84004db1ca9c1e6ea69505fb9fcf76e1cf3bd1188f859ceadcefe94f08d3d2fcfe61deb9c04684f1b2d07d5a9b5732fbf0",
+  "@img/sharp-libvips-linuxmusl-x64@npm:1.2.4": "876e3bde360cc6966bc3a703dd316f570b031085722c9c8bf27bb31050e30c8a10ef4a8fe2e66fefa0f4482db62044c47a1df25874c6330467e12a6983bb32d2",
   "@img/sharp-linux-arm64@npm:0.34.3": "a4ec64134484037e6a1583b11e39a16afb95eff963bf9c52deb17557b0a35dbc509325368040b04939e859f3b9531d64e6405fe54d13b3633628a4f77bfd8672",
-  "@img/sharp-linux-arm64@npm:0.34.4": "54d68128604bfffb9288d6350d45d9b8ea2008999979a780e216325f69881e5fad69b14ad7730800a6171fda408b0b03fd62ceff665ebb914df92c578529daec",
+  "@img/sharp-linux-arm64@npm:0.34.5": "933c217e432ae7280bee1ef2bc0b5f3225b5ff3cfed19c25607ed7ed909b16cfa4a59c14089dd020e9b789ffd544df09e9b471281a049c926cd337509fa35241",
   "@img/sharp-linux-arm@npm:0.34.3": "fe4106211c93c566d3712302c081391435caaeb6ecd41e88e94e3e9780d0f27934a02a871d6280625944f625350c4f81871d92210ff6ae5511318248a4ba3ebe",
-  "@img/sharp-linux-arm@npm:0.34.4": "2a4be8d21d873989964ab09c8e8cfaa686bad95f78233b1f94e2732a6d3bb13a26c87b2be17c53bb25796c42c287bc2fd9d0af782c42b8ef3941087781db8296",
+  "@img/sharp-linux-arm@npm:0.34.5": "c20e85339d0e4e2116094293d9c1171407faa7a7b60d579cdc4af06d7b2ad4ff4976374593a2e525a08df4fc9df0dd9e80822a38764f07bc8d63e8d988ffa165",
   "@img/sharp-linux-ppc64@npm:0.34.3": "0671ccb3a25e53a665d50b2b52cd779b57a07f642686bbb7311c288c44b2d861cd1eacf6bd6883421c73cc5efc8fa8536280dd48fde9a6de8d287e4a99c9ab69",
-  "@img/sharp-linux-ppc64@npm:0.34.4": "b44ab26aecbd5d4ac3898b183d556ada921d0fca08040ceb93d4c4135665c78b99b0f2c91757b31615667e4f2cccb68c75e4c757c14acaa0e26192d8bb849d46",
+  "@img/sharp-linux-ppc64@npm:0.34.5": "8ded427067577bdd686534a0db30833d43b0c232c17d232d6608f0635f364241a6078ccdbbf54f5a48b773c95a05906a5ba20cc589c86959eb0e6329902c7cb4",
+  "@img/sharp-linux-riscv64@npm:0.34.5": "764ff0baa4275a4fd9376012893ca64b6cde601a208be216d38e2c6db3977d6f3e91e12342c7cb1cd3038b7108f8778bcfba85afaf097689907a4b932e79dc7a",
   "@img/sharp-linux-s390x@npm:0.34.3": "a5e2c3c14faa997616caf0a9296302c58b9565bb24f156dae7ad1770f5f984919fb34a0d1f59f0112205db060e8bc665842fd27621147786893619c51b81af45",
-  "@img/sharp-linux-s390x@npm:0.34.4": "e04058ed75450258e72d63aaa9238bcd74ee641f055d1d0f7a425369944760103c8b3688eeec4da86df587306f1b4eb40ba7d9d078ccb2289ae117e1222a96f6",
+  "@img/sharp-linux-s390x@npm:0.34.5": "a4e7cae17ebf95dd53e9dd845ae3e73c783f6c7da4a5aeddf7922dda09822c55327e892d2c8888dba097e666b97254b04df3cca99aeb9eb9fc57d73b20cc6b86",
   "@img/sharp-linux-x64@npm:0.34.3": "83a82d1a97b975b64be0ed6fd35fe87609ffcbfb7a068a7ea0e67dba7ecd71f32382b86a024bcfda8aceb4ed1628f4ee4a567c4e157e9cd3c9fafa0b225fe6c2",
-  "@img/sharp-linux-x64@npm:0.34.4": "83e1b91dc63c4b126ff8d711fc9ffbd60de437be342d7e440ad304688ebf166cfd32b539c51720b96b0dd02ef639a267236db2902d10ffa85d4f8ee8c82a986d",
+  "@img/sharp-linux-x64@npm:0.34.5": "2f4fc06e1d3544bf41296f2776b531d5aa0ab618e129cd928514a803e4a01202b8453c0321f7999619033c687571a7f50da454ff5ca04d41f31a7796a38e9a8b",
   "@img/sharp-linuxmusl-arm64@npm:0.34.3": "53f9f3f673441b21ea0a8d6d95b7ba8f051d4c2d2d4c4cb0fd83bb7593a56f854b255a1b706ddd376f8003adc6431b602afbb8a1ffe0850896147b24912a9504",
-  "@img/sharp-linuxmusl-arm64@npm:0.34.4": "db0ef92e6d5283276baa42a7fb1a485f2ef837a69bd68a7a88b44464f0dbc929fd6c1da0af6bc4523d7ed492183181c7815330a83fe5da289b7f1b5bd71f571e",
+  "@img/sharp-linuxmusl-arm64@npm:0.34.5": "2bd993173f42ab72df423f968b28cbd037e82f78cd469c3b6a7f4317e164f41f04cb9b106e35337e392a1fc4848aece67f0a765b346691133d7ad71146ef97ea",
   "@img/sharp-linuxmusl-x64@npm:0.34.3": "ebd702f0f88121b31e87db93a87839085605a02826aba5207e9ad4fed89471daf0e32276ef3e13dc289e53042baaa8244bd43c0768c0733e3a4fce02fdf30dab",
-  "@img/sharp-linuxmusl-x64@npm:0.34.4": "ee69e9edde1e250b55f05c7c838f0b8ecbb0b579ea3c2269a1d757b61ca22fdb49b91518358cca3bcedd09139abd907116335c314388fba8b58812e7ef7cc41a",
+  "@img/sharp-linuxmusl-x64@npm:0.34.5": "00a5c641a144ad177d3ece569da6c05d891ab6a5c6e0f0f7ef4f74ab132c72f20b07927e5ae9c9afe090d44cf36be2170b4dc1831d0976533c693091995bb486",
   "@img/sharp-wasm32@npm:0.34.3": "3a64ba7dec1883eaae60925d77b04322a81d9c2d39359fa021677252df7da3be72f469a298cf2470f7350553eb30ee84e874d7032b06fa91ce27a81e1ec5f6c7",
-  "@img/sharp-wasm32@npm:0.34.4": "630eb7a14d22f573cc7498c4bb0fcb3b1b5809b6d335af007c495d827273fbfafd5d9821f83a95341095772cbc5e7e1efd484b36463e969fe15be5594b6046b3",
+  "@img/sharp-wasm32@npm:0.34.5": "7c1ed71bd821c1ddb2aac32f128d4b173af97a33274f9e386c49ccedc31bd273ae0bf564626f068a61c8bb0de1f84a4b9211c7fd79a62d8170479a1887bc935c",
   "@img/sharp-win32-arm64@npm:0.34.3": "9328ef81ef6df02a8f83123f59c0addea7dd12681af3068e677ac274ed238321dd5522f2e4157b1a53ee0bc27ea22733263dddf5d4b65d2c5a2533ffb724f81e",
-  "@img/sharp-win32-arm64@npm:0.34.4": "29ea26d197d79010835518878ba5844d708ea0062b01b0365629a3c9d41bf55b620a835831057672b4c7de7eae360896662581ad96b2e701f8fb0063d3463a47",
+  "@img/sharp-win32-arm64@npm:0.34.5": "07146b037ae4cdc7592b983bcee7b1c0199fa0fe14f9e3430a8ec6c46c056ba9bca0ee89d18e1aac4f43331dcaf464fe82bebf34e08d5bd1541ebd2d6345e518",
   "@img/sharp-win32-ia32@npm:0.34.3": "cf08bf95ff895c831bd74c7c4567d6c4ac20100e0d1badd0a9f7100486f3f416022222e29fcbae79b379defd1f0bc13adccc16c119fd4705d00c11c35ca9988a",
-  "@img/sharp-win32-ia32@npm:0.34.4": "25923d688df7081a222e49afa703db6d20999ddaeb705da0b50fcf3996cc747c3e2b68a56bf5c0ea9b60760ffee3885d958a547c4416f37497a40360e560c4e9",
+  "@img/sharp-win32-ia32@npm:0.34.5": "d5887234959a32c9072043e8f14589ceec867f9fb0b440a5849750c2f0e79614962f566c44763ce560c52cd1e0d086ffac6299f91711477f1316d83f8b2151c1",
   "@img/sharp-win32-x64@npm:0.34.3": "07078e460f2749ad6422135193bacdfea1f223fab9f8442b5c0cbecb6d3e92070dd0a968219ff386a03930ec4104162627ffcad5b362ec8dc0247848deb52bbc",
-  "@img/sharp-win32-x64@npm:0.34.4": "84d7e0100131837cf4aff5da0f1a69e2d2b0f79b85011f978f2bc0b4985f947439141139ff82927231e594929c7381107af6d6123a98b4bc027d7ecf2105b1cf",
+  "@img/sharp-win32-x64@npm:0.34.5": "e10ab4421a46eecab0af903761679f27f91dde01ed4d533af4d77101d17e4f16b28628e91bbbcae63ec051606103f3cde21fd5055330130217277cb13242e7af",
   "@parcel/watcher-android-arm64@npm:2.5.1": "e9c94ede3bd5c5d999d117d22ac8032a17f8ebc72db3eff04ccb2b4e6718db19f24bf29a66a610e03f4ee95e2cd7b2d30c15b1845eb897b971fec75dbdd76141",
   "@parcel/watcher-darwin-arm64@npm:2.5.1": "0cab55a55c128ac5742388fc8dbfeb9877018509943801ce8a52b57bb6dca24189d025d38684b1e482cb7816368a52c6434dfe45d3997e2fd2509276f48774ea",
   "@parcel/watcher-darwin-x64@npm:2.5.1": "bf07b8ca9a435fb885fb0ca6565204d2f2098d7f632faf26a6478bb39f538c73b50afca17c193dc189a80a864d85e40f924ec7f21a0e7ad7d0de6f97f7154134",
@@ -122,14 +124,15 @@
   "@rollup/rollup-win32-x64-msvc@npm:4.2.0": "13cba2a14f7864986f3331c327a137ad95cf366411c0b6d3f66593bb6ea04d0058e12bd0a09fde72bbfb8660a554f0b66d90754e21add3c99d899e2bd7dfe1d1",
   "dmg-license@npm:1.0.11": "36c0a7b030801b91216affa9b2bb00caa345b2327f298accb2263a80a0320ca305f90b99da68007d187c830c543410d58a0a2bbc229e8d169b0e1d1652ff42aa",
   "iconv-corefoundation@npm:1.1.7": "0189733ef51a9f481379202cb1919f2677efc44aa014ba662a6fd99e47993e350eab0ff724ed18cda8011c9b78c4702b2d374f732955f1def3fd2a14a29d25c0",
-  "lightningcss-darwin-arm64@npm:1.27.0": "c27ba2fc3014cf2a5133ff6dd822ec80545223fd8878fc61a8b20b523c5b608fb2efab7ee2c2af4503a0c597691a0f162355e3fc017417779f7d7a878161f679",
-  "lightningcss-darwin-x64@npm:1.27.0": "8bbf7233a9cb347dde7a68d4322dfebafaa9d410f749cd55d2306988a095b915d6e272cc5a0bc5bb97c9680d6b7e31e6c8fa188449e34fce85889e0a245a4bfa",
-  "lightningcss-freebsd-x64@npm:1.27.0": "eec3c171d92838720707ccd894af1f503f3be7fae679b735f4a54070f8c8b5bc4cea4c119b578994a9c9a70ce138445a807d0af8ad37e54959bb4998753dbd17",
-  "lightningcss-linux-arm-gnueabihf@npm:1.27.0": "ade725375521f2689f8b372c1d9cae71581eb66f35df6edcf39ed0869f6662c77fe2a91b5392c0a516f00fd60725ce03ad0f9d47574db8d74a841f0906b8090f",
-  "lightningcss-linux-arm64-gnu@npm:1.27.0": "96eadcb0863534f5951e37916b64364fda21592a32d93252503ac8839f0d00eeea7d7bdd8bd4b686b8108550c23e32a8a1bb3738e63c1a7b01406c349da0676c",
-  "lightningcss-linux-arm64-musl@npm:1.27.0": "f0426dffc5c1943781673177f3340e85a7de2a193244cb877d33e7ec262c019bb7b862b33ffeb14b10494306f7c48885ee93068e88b9260fff2668e98a97a4ab",
-  "lightningcss-linux-x64-gnu@npm:1.27.0": "bb1b5713ddc9d8d711b527bcce47ce3e7fd91f2058c317ad5df09cded4142a85362ee71c353dd3b332497fc32a431a22f7762ce01464ff008b2a7cf2607d3dd3",
-  "lightningcss-linux-x64-musl@npm:1.27.0": "ec9b11bb0d70b929335f735486f8dd8fa6fc22eb95b71545b735b480b9e2b5287a24976735c2c5f4c9c50af07fb5cfdc02b65eceb6ec10256e7c9c637dedee9a",
-  "lightningcss-win32-arm64-msvc@npm:1.27.0": "1814c0d0464c21e808a2909ebbee7e12c42fd81ecd480e7c4e31769c555f238c720087af4383fff14862764f52bf4250cd566c6c45c3d6633bee126ef3355bc3",
-  "lightningcss-win32-x64-msvc@npm:1.27.0": "be733309737e4c4ed3dff33ec9e80bbc2d269d07bfa3742dd30d9055adfdc2e22be4d484475a7ea7cb7940c17f001cdf64856e157ef9b7c1d2c9342041e9eae4"
+  "lightningcss-android-arm64@npm:1.30.2": "823d5aa547e473e18832b47b575313dcfd9146697d53481c79b10dbbe45c62a7352f4da77f836b0c0e6a233545bb3456bece543f39e7d8ee6ef75b4d345af2fd",
+  "lightningcss-darwin-arm64@npm:1.30.2": "23fd135ab0a081aec174a835b15218c5ad9ed4486823a1b8ddd8ca1795876e032201385cf6e3acd548a235d5f527e19ad213ca1c5fa0ef31d333d43d4f67fee8",
+  "lightningcss-darwin-x64@npm:1.30.2": "4151c2744332798bcc83dea10c8da81a18c7dbc2d12c53a95149d7a5d24409b32f80eb42dd5933f109fe4c5715e25cfe6df3d21158191fdd682a99cc62f28b93",
+  "lightningcss-freebsd-x64@npm:1.30.2": "98ecc151f46ef03cd60360d10f1bc4cba8d2a3b8305d94600d74daffe90dbe917e391f9d362e49c1a25c28cc1235a76003c7bc8981373ef4dd51e39ab979c039",
+  "lightningcss-linux-arm-gnueabihf@npm:1.30.2": "42c4750f7aeb5b0bee3997ec12b067bd3612039d94f690e2d31257ef2956852909a041ea0408ac503dbc84c3535f27918ef86741e1b6434338b59deec830394c",
+  "lightningcss-linux-arm64-gnu@npm:1.30.2": "9be6f50eb851e60d5b0c6c035c3ff484f072815a7a5ed39df61a74219d63d85ed211adcc33f25d83d275205d6bc1536ceb1bb17b03246c1363cd0673d0fe9bcc",
+  "lightningcss-linux-arm64-musl@npm:1.30.2": "c095939a3c85f1854e6af85093481a7f75a97e2778b430b16fe7f8ffaef0b953f78078e9a15aba7ad45f695f1a394feff12e2dc798b4e606ae81714cc3d69c91",
+  "lightningcss-linux-x64-gnu@npm:1.30.2": "bc4959398f65fc60df2a2a011c2381029d9f92ed7a2a1930393bbef5515d3f18bd2885a4063f48031435595c22ddd10923c5e2ecbf53d086b18a3b65e10cfd47",
+  "lightningcss-linux-x64-musl@npm:1.30.2": "2db0a94df42f23a051bac68ad0d4322f45bc0f47290810cbb012fc2292c42201ff1eae5ec0f83178da6f232ab4cc24a2fcaaf46b0867861966d9823610e352ac",
+  "lightningcss-win32-arm64-msvc@npm:1.30.2": "307a014ddc51c6773be0b63db3ce3a09ff32c9093bd2e365689de0a07a45288a310154397f5dd6dfd6a5de726ebd4dec597482dd1bd4bfeeb65f5bff09d52ea0",
+  "lightningcss-win32-x64-msvc@npm:1.30.2": "4c1b0406dad571a9754bf45becfd38af9d43eee94c93d8df881f862bc2597f72dc91dec0788aa67261cca79732c75afcd777e8786984a9e98d0d1fb66ced1a05"
 }
diff --git a/pkgs/by-name/jo/joplin-cli/package.nix b/pkgs/by-name/jo/joplin-cli/package.nix
index d38bd270fe3f..0195e1d41745 100644
--- a/pkgs/by-name/jo/joplin-cli/package.nix
+++ b/pkgs/by-name/jo/joplin-cli/package.nix
@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "joplin-cli";
-  version = "3.6.2";
+  version = "3.7.1";
 
   src = fetchFromGitHub {
     owner = "laurent22";
@@ -25,7 +25,7 @@ stdenv.mkDerivation (finalAttrs: {
       # there's a file with a weird name that causes a hash mismatch on darwin
       rm $out/packages/app-cli/tests/support/photo*
     '';
-    hash = "sha256-nWMUvAseKoTOv5ui9uYDUiGlvO+8nNV4ux7JbsnrM5U=";
+    hash = "sha256-4o8mao7wAqDzwQgJ4QY+DPs9rtsnga6LLnq744l7HVM=";
   };
 
   patches = [
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
       patches
       postPatch
       ;
-    hash = "sha256-mdDVYLJ4ZN7zJJdf/2Wh+or+p1uJPTrMCyDYWwc04YM=";
+    hash = "sha256-CHjvFu6r5zak19dqtRkcGkPhPoKgt1nkBVa71ZcvdgE=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/jo/joplin-cli/yarn-4.14-support.patch b/pkgs/by-name/jo/joplin-cli/yarn-4.14-support.patch
index dfcc07f08841..7fecbbdf1031 100644
--- a/pkgs/by-name/jo/joplin-cli/yarn-4.14-support.patch
+++ b/pkgs/by-name/jo/joplin-cli/yarn-4.14-support.patch
@@ -5,7 +5,7 @@ diff --git a/.yarnrc.yml b/.yarnrc.yml
  compressionLevel: mixed
  enableGlobalCache: false
  
--yarnPath: .yarn/releases/yarn-4.9.2.cjs
+-yarnPath: .yarn/releases/yarn-4.12.0.cjs
 +approvedGitRepositories:
 +  - "**"
 +
diff --git a/pkgs/by-name/ky/kyverno/package.nix b/pkgs/by-name/ky/kyverno/package.nix
index 22d146b1b261..c91b2123442e 100644
--- a/pkgs/by-name/ky/kyverno/package.nix
+++ b/pkgs/by-name/ky/kyverno/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kyverno";
-  version = "1.19.0";
+  version = "1.19.1";
 
   src = fetchFromGitHub {
     owner = "kyverno";
     repo = "kyverno";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-7uzpUyrqe+nvPp5qI0k7+6uFStr+oJNgEJXsuv+nPLs=";
+    hash = "sha256-3sFvqB3/18NJWViJynhk5urJ4rdHWrXQkzwNrjIE9iA=";
   };
 
   ldflags = [
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
     "-X github.com/kyverno/kyverno/pkg/version.BuildTime=1970-01-01_00:00:00"
   ];
 
-  vendorHash = "sha256-oAZG0UThURyQgENhpSX/jxaA36/iRPkbYCGYilhIQpc=";
+  vendorHash = "sha256-ytBg7lmOs8Txe2cyaN5FKPxv7GkRi5x2/XRv8EXxPAY=";
 
   subPackages = [ "cmd/cli/kubectl-kyverno" ];
 
diff --git a/pkgs/by-name/li/libphonenumber/package.nix b/pkgs/by-name/li/libphonenumber/package.nix
index e2d007f4275c..4430611e8cf4 100644
--- a/pkgs/by-name/li/libphonenumber/package.nix
+++ b/pkgs/by-name/li/libphonenumber/package.nix
@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libphonenumber";
-  version = "9.0.38";
+  version = "9.0.39";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "libphonenumber";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Usln8w9OyACsYBDn85kTUmsombrkaRc3qRt2oKMs+0k=";
+    hash = "sha256-b9N3nVCTVZgGbj+OQsxu4MLnLYbnGXfWikXQrnrRLfs=";
   };
 
   patches = [
diff --git a/pkgs/by-name/li/libretroPackages/cores/freechaf.nix b/pkgs/by-name/li/libretroPackages/cores/freechaf.nix
new file mode 100644
index 000000000000..25e6bbf3325d
--- /dev/null
+++ b/pkgs/by-name/li/libretroPackages/cores/freechaf.nix
@@ -0,0 +1,26 @@
+{
+  lib,
+  fetchFromGitHub,
+  mkLibretroCore,
+}:
+mkLibretroCore {
+  core = "freechaf";
+  version = "0-unstable-2026-04-20";
+
+  src = fetchFromGitHub {
+    owner = "libretro";
+    repo = "FreeChaF";
+    rev = "76c7a84f1f7e80f3e6f2bba96fe100cb24e99124";
+    hash = "sha256-gLmDO2yzZbdcD82IUT6NWR0umUExtBqnAK+ltBxGPiM=";
+    fetchSubmodules = true;
+  };
+
+  makefile = "Makefile";
+
+  meta = {
+    description = "Fairchild Channel F emulator core for libretro";
+    homepage = "https://github.com/libretro/FreeChaF";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ kaistarkk ];
+  };
+}
diff --git a/pkgs/by-name/li/libretroPackages/cores/gearcoleco.nix b/pkgs/by-name/li/libretroPackages/cores/gearcoleco.nix
new file mode 100644
index 000000000000..9b96f85a77c7
--- /dev/null
+++ b/pkgs/by-name/li/libretroPackages/cores/gearcoleco.nix
@@ -0,0 +1,35 @@
+{
+  lib,
+  fetchFromGitHub,
+  gitMinimal,
+  mkLibretroCore,
+}:
+
+mkLibretroCore {
+  core = "gearcoleco";
+  version = "1.6.6";
+
+  src = fetchFromGitHub {
+    owner = "drhelius";
+    repo = "Gearcoleco";
+    tag = "1.6.6";
+    hash = "sha256-4zxHejYWlmVpeLxlTpbYSA34ICUBjiEXrH0WyWygdj8=";
+  };
+
+  sourceRoot = "source/platforms/libretro";
+  makefile = "Makefile";
+
+  extraNativeBuildInputs = [ gitMinimal ];
+
+  postPatch = ''
+    # The libretro Makefile writes object files outside sourceRoot.
+    chmod -R u+w ../../src ../shared/dependencies/miniz
+  '';
+
+  meta = {
+    description = "ColecoVision emulator core for libretro";
+    homepage = "https://github.com/drhelius/Gearcoleco";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ kaistarkk ];
+  };
+}
diff --git a/pkgs/by-name/li/libretroPackages/cores/jaxe.nix b/pkgs/by-name/li/libretroPackages/cores/jaxe.nix
new file mode 100644
index 000000000000..996e6a6d222d
--- /dev/null
+++ b/pkgs/by-name/li/libretroPackages/cores/jaxe.nix
@@ -0,0 +1,24 @@
+{
+  lib,
+  fetchFromGitHub,
+  mkLibretroCore,
+}:
+mkLibretroCore {
+  core = "jaxe";
+  version = "0-unstable-2026-04-02";
+
+  src = fetchFromGitHub {
+    owner = "kurtjd";
+    repo = "jaxe";
+    rev = "581befc5d7273abc20ea1b137744f414aa70592c";
+    hash = "sha256-jJPg4qRxraz9wycAiWNgwXXZMF2qG8hQv7Bfexkwyqs=";
+    fetchSubmodules = true;
+  };
+
+  meta = {
+    description = "CHIP-8, S-CHIP, and XO-CHIP emulator core for libretro";
+    homepage = "https://github.com/kurtjd/jaxe";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ kaistarkk ];
+  };
+}
diff --git a/pkgs/by-name/li/libretroPackages/cores/pd777.nix b/pkgs/by-name/li/libretroPackages/cores/pd777.nix
new file mode 100644
index 000000000000..fa27ae3bf448
--- /dev/null
+++ b/pkgs/by-name/li/libretroPackages/cores/pd777.nix
@@ -0,0 +1,33 @@
+{
+  lib,
+  fetchFromGitHub,
+  gitMinimal,
+  mkLibretroCore,
+}:
+mkLibretroCore {
+  core = "pd777";
+  version = "0-unstable-2026-06-19";
+
+  src = fetchFromGitHub {
+    owner = "mittonk";
+    repo = "PD777";
+    rev = "118c8f893073f2e59eba6eb9fd1dd34d36318605";
+    hash = "sha256-j52fWDJ5V0+9IsFT2lhdrkNWe/oaUrGUsLiki84CRXM=";
+  };
+
+  sourceRoot = "source/source/libretro";
+
+  extraNativeBuildInputs = [ gitMinimal ];
+
+  postPatch = ''
+    # The libretro Makefile writes object files outside sourceRoot.
+    chmod -R u+w ../core
+  '';
+
+  meta = {
+    description = "Epoch Cassette Vision emulator core for libretro";
+    homepage = "https://github.com/mittonk/PD777";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ kaistarkk ];
+  };
+}
diff --git a/pkgs/by-name/li/libretroPackages/cores/theodore.nix b/pkgs/by-name/li/libretroPackages/cores/theodore.nix
new file mode 100644
index 000000000000..37a2636edf2d
--- /dev/null
+++ b/pkgs/by-name/li/libretroPackages/cores/theodore.nix
@@ -0,0 +1,25 @@
+{
+  lib,
+  fetchFromGitHub,
+  mkLibretroCore,
+}:
+mkLibretroCore {
+  core = "theodore";
+  version = "0-unstable-2026-04-03";
+
+  src = fetchFromGitHub {
+    owner = "Zlika";
+    repo = "theodore";
+    rev = "121ae2513d3ee29f0aaf765a64dc086d57e7a4c7";
+    hash = "sha256-dEBjoxtX59J4pHMbLLlcJTh/R0458B9XkfvYHSGX89Q=";
+  };
+
+  makefile = "Makefile";
+
+  meta = {
+    description = "Thomson MO/TO emulator core for libretro";
+    homepage = "https://github.com/Zlika/theodore";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ kaistarkk ];
+  };
+}
diff --git a/pkgs/by-name/li/libretroPackages/packages.nix b/pkgs/by-name/li/libretroPackages/packages.nix
index cb762108f18c..0a8296d5d411 100644
--- a/pkgs/by-name/li/libretroPackages/packages.nix
+++ b/pkgs/by-name/li/libretroPackages/packages.nix
@@ -74,6 +74,8 @@ lib.makeScope newScope (self: {
 
   fmsx = self.callPackage ./cores/fmsx.nix { };
 
+  freechaf = self.callPackage ./cores/freechaf.nix { };
+
   freeintv = self.callPackage ./cores/freeintv.nix { };
 
   fuse = self.callPackage ./cores/fuse.nix { };
@@ -82,6 +84,8 @@ lib.makeScope newScope (self: {
 
   genesis-plus-gx = self.callPackage ./cores/genesis-plus-gx.nix { };
 
+  gearcoleco = self.callPackage ./cores/gearcoleco.nix { };
+
   gpsp = self.callPackage ./cores/gpsp.nix { };
 
   gw = self.callPackage ./cores/gw.nix { };
@@ -90,6 +94,8 @@ lib.makeScope newScope (self: {
 
   hatari = self.callPackage ./cores/hatari.nix { };
 
+  jaxe = self.callPackage ./cores/jaxe.nix { };
+
   mame = self.callPackage ./cores/mame.nix { };
 
   mame2000 = self.callPackage ./cores/mame2000.nix { };
@@ -136,6 +142,8 @@ lib.makeScope newScope (self: {
 
   parallel-n64 = self.callPackage ./cores/parallel-n64.nix { };
 
+  pd777 = self.callPackage ./cores/pd777.nix { };
+
   pcsx2 = self.callPackage ./cores/pcsx2.nix { };
 
   pcsx-rearmed = self.callPackage ./cores/pcsx-rearmed.nix { };
@@ -185,6 +193,8 @@ lib.makeScope newScope (self: {
 
   tgbdual = self.callPackage ./cores/tgbdual.nix { };
 
+  theodore = self.callPackage ./cores/theodore.nix { };
+
   thepowdertoy = self.callPackage ./cores/thepowdertoy.nix { };
 
   tic80 = self.callPackage ./cores/tic80.nix { };
diff --git a/pkgs/by-name/li/linecast/package.nix b/pkgs/by-name/li/linecast/package.nix
index e175cf7a426d..5117bd85955b 100644
--- a/pkgs/by-name/li/linecast/package.nix
+++ b/pkgs/by-name/li/linecast/package.nix
@@ -8,7 +8,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "linecast";
-  version = "2.2.0";
+  version = "2.3.3";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -16,7 +16,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "ashuttl";
     repo = "linecast";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NjuA/WNUi+4NcPiFr3R0Nl163IHQwaMHfK71QTSAYsk=";
+    hash = "sha256-4ddHtUpmRw/ed56WwjTrZL/3W6sKqUYbzAN3lL7XAy8=";
   };
 
   build-system = [
diff --git a/pkgs/by-name/mc/mcp-searxng/package.nix b/pkgs/by-name/mc/mcp-searxng/package.nix
index 25622992ef84..63d05a36eb7e 100644
--- a/pkgs/by-name/mc/mcp-searxng/package.nix
+++ b/pkgs/by-name/mc/mcp-searxng/package.nix
@@ -6,7 +6,7 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "mcp-searxng";
-  version = "2.1.0";
+  version = "2.2.0";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -15,10 +15,10 @@ buildNpmPackage (finalAttrs: {
     owner = "ihor-sokoliuk";
     repo = "mcp-searxng";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Zq6oKXxmo+jaiSCGOsEB76y4xTEqU+WC1eQVFzsazXQ=";
+    hash = "sha256-VLEsHFhWHfjfKXDi0UHNpYcFF+G59x3vpu7dQN00xKk=";
   };
 
-  npmDepsHash = "sha256-YIH/5RIdF/iSnUT+rWFUCKiwn3oPr1GJsgYvriJt0co=";
+  npmDepsHash = "sha256-WK28hNI3/YC60LtggH0clcaq61aR3gvsuZeDLUZpGj0=";
 
   meta = {
     description = "Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client";
diff --git a/pkgs/by-name/mu/music-assistant/package.nix b/pkgs/by-name/mu/music-assistant/package.nix
index f588e525b18f..d0815bb8a239 100644
--- a/pkgs/by-name/mu/music-assistant/package.nix
+++ b/pkgs/by-name/mu/music-assistant/package.nix
@@ -241,6 +241,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
   disabledTests = lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) [
     # RuntimeError: failed to initialize QNNPACK
     "test_beat_detection"
+    "test_digital_silence_yields_finite_spectral_centroid"
     "test_extended_analysis_fields"
     "test_finalize_returns_audio_analysis_data"
     "test_finalize_returns_none_on_early_exit"
diff --git a/pkgs/by-name/nw/nwjs/package.nix b/pkgs/by-name/nw/nwjs/package.nix
index 220af28a79d9..6a194eb08635 100644
--- a/pkgs/by-name/nw/nwjs/package.nix
+++ b/pkgs/by-name/nw/nwjs/package.nix
@@ -24,7 +24,6 @@
   libuuid,
   libxcb,
   libxkbcommon,
-  makeWrapper,
   libgbm,
   nspr,
   nss,
@@ -49,8 +48,6 @@
 }:
 
 let
-  bits = if stdenv.hostPlatform.is64bit then "x64" else "ia32";
-
   nwEnv = buildEnv {
     name = "nwjs-env";
     paths = [
@@ -102,7 +99,7 @@ let
     ];
   };
 
-  version = "0.102.1";
+  version = "0.115.0";
 in
 stdenv.mkDerivation {
   pname = "nwjs";
@@ -111,19 +108,27 @@ stdenv.mkDerivation {
   src =
     let
       flavor = if sdk then "sdk-" else "";
-    in
-    fetchurl {
-      url = "https://dl.nwjs.io/v${version}/nwjs-${flavor}v${version}-linux-${bits}.tar.gz";
+
+      arch =
+        if stdenv.hostPlatform.is64bit then
+          "x64"
+        else if stdenv.hostPlatform.isAarch64 then
+          "arm64"
+        else
+          throw "nwjs: unsupported architecture.";
+
       # TODO: Write an update script to update all 4 hashes.
       # nixpkgs-update: no auto update
-      hash =
-        {
-          "sdk-ia32" = "sha256-uzDbEq2vNC+fm95Co3lnQX7mrUXsIDWFoa0osWCn3EM=";
-          "sdk-x64" = "sha256-jWw5kXYGxu7oen8fK2Q58QPhiBRC6H2ibGXkeUFW2pI=";
-          "ia32" = "sha256-oODdSKNlOPSLD9vAqRwYcAgH6mumyOB5Fp6G9ifSgok=";
-          "x64" = "sha256-WhHV+xj2ngEz+i1ipBhwZD9b0EF/hdi8gMBZw5qYRGA=";
-        }
-        ."${flavor + bits}";
+      hashes = {
+        "sdk-arm64" = "sha256-yhAQNZ4eMAZIouD+twxfWPgL91b8pRR7YzVODwu0npg=";
+        "sdk-x64" = "sha256-H1yRI+xR/7+TDQ6xaswrvqhJcObO9ZVm6qXIDT5FTQc=";
+        "arm64" = "sha256-RF2QCVIRKd00heZKyzirCr7ePLjlGza19u8CN4fcxT0=";
+        "x64" = "sha256-XlGTxRWd7jwmCXrgSG8q/0tciW21p8f1wr8a4n8rmNk=";
+      };
+    in
+    fetchurl {
+      url = "https://dl.nwjs.io/v${version}/nwjs-${flavor}v${version}-linux-${arch}.tar.gz";
+      hash = hashes."${flavor + arch}";
     };
 
   nativeBuildInputs = [
@@ -168,15 +173,16 @@ stdenv.mkDerivation {
     description = "App runtime based on Chromium and node.js";
     homepage = "https://nwjs.io/";
     platforms = [
-      "i686-linux"
+      "aarch64-linux"
       "x86_64-linux"
     ];
+    changelog = "https://github.com/nwjs/nw.js/blob/nw-v${version}/CHANGELOG.md";
     sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
-    maintainers = [ lib.maintainers.mikaelfangel ];
+    maintainers = with lib.maintainers; [
+      mikaelfangel
+      eljamm
+    ];
     mainProgram = "nw";
     license = lib.licenses.mit;
-    knownVulnerabilities = [
-      "Uses Chrome 139.0.7258.128, known to have many vulnerabilities."
-    ];
   };
 }
diff --git a/pkgs/by-name/om/omada-software-controller/control-script.patch b/pkgs/by-name/om/omada-software-controller/control-script.patch
new file mode 100644
index 000000000000..a554e0e5745c
--- /dev/null
+++ b/pkgs/by-name/om/omada-software-controller/control-script.patch
@@ -0,0 +1,46 @@
+--- a/bin/control.sh
++++ b/bin/control.sh
+@@ -13,10 +13,9 @@
+ ### END INIT INFO
+
+-export XDG_CONFIG_HOME=/opt/tplink/EAPController/data/chromium
+-
+ NAME="omada"
+ DESC="Omada Network Application"
+
+ OMADA_HOME=$(dirname $(dirname $(readlink -f $0)))
++export XDG_CONFIG_HOME="${OMADA_HOME}/data/chromium"
+ LOG_DIR="${OMADA_HOME}/logs"
+ WORK_DIR="${OMADA_HOME}/work"
+@@ -32,5 +31,5 @@
+ STARTUP_INFO_PATH="${OMADA_HOME}/data/startupInfo"
+ # Define the file path to save the previous MongoDB version
+-LAST_VERSION_FILE="/opt/tplink/EAPController/data/check-mongo/LAST_MAIN_VERSION.info"
++LAST_VERSION_FILE="${OMADA_HOME}/data/check-mongo/LAST_MAIN_VERSION.info"
+ # Define a legal sequence for upgrading major versions (in order, without skipping levels)
+ VALID_VERSIONS=("3.0" "3.2" "3.4" "3.6" "4.0" "4.2" "4.4" "5.0" "6.0" "7.0" "8.0")
+@@ -39,5 +38,5 @@
+ OMADA_GROUP=$(id -gn ${OMADA_USER})
+
+-PID_FILE="/var/run/${NAME}.pid"
++PID_FILE="/run/omada/omada.pid"
+
+ help() {
+@@ -162,7 +161,4 @@
+ }
+
+-# root permission check
+-check_root_perms
+-
+ # JSVC - for running java apps as services
+ JSVC=$(command -v jsvc)
+@@ -251,4 +247,9 @@
+     fi
+
++    # copy default config files if they don't exist yet and make them user-writable
++    cp -rn ${OMADA_HOME}/defaults/data/* ${OMADA_HOME}/data
++    cp -rn ${OMADA_HOME}/defaults/properties/* ${OMADA_HOME}/properties
++    chmod -R +w ${OMADA_HOME}/{data,properties}
++
+     # Check if there are any cross version issues with MongoDB during startup compared to the previous startup
+     judge_mongo_version
diff --git a/pkgs/by-name/om/omada-software-controller/package.nix b/pkgs/by-name/om/omada-software-controller/package.nix
new file mode 100644
index 000000000000..05f31d09f568
--- /dev/null
+++ b/pkgs/by-name/om/omada-software-controller/package.nix
@@ -0,0 +1,149 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  makeWrapper,
+  writeScriptBin,
+  bash,
+  coreutils,
+  curl,
+  jsvc,
+  mongodb-ce,
+  jdk_headless,
+  procps,
+  which,
+  testers,
+  writeShellScript,
+  common-updater-scripts,
+  pup,
+  gnugrep,
+  gnused,
+  dataDir ? "/var/lib/omada",
+}:
+
+let
+  # Use the prebuilt MongoDB Community Edition to avoid building MongoDB from source.
+  mongodb = mongodb-ce;
+
+  # The 'arch' command is required during runtime with is equivalent to 'uname -m':
+  arch = writeScriptBin "arch" "${lib.getExe' coreutils "uname"} -m";
+
+  jsvcWithSameJdkVersion = jsvc.override {
+    jdk = jdk_headless;
+    jre = jdk_headless;
+  };
+in
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "omada-software-controller";
+  version = "6.3.0.45";
+
+  src = fetchurl {
+    url = "https://static.tp-link.com/upload/software/2026/202609/20260904/Omada_Network_Application_v6.3.0.45_linux_x64_20260903171900.tar.gz";
+    hash = "sha256-2t9+GH+ishiSo/Jkda4VNg9B1k9XinDwgB0q4Z2p62o=";
+  };
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  patches = [
+    ./control-script.patch
+  ];
+
+  nativeBuildInputs = [
+    makeWrapper
+  ];
+
+  buildInputs = [
+    bash
+  ];
+
+  runtimeDeps = [
+    arch
+    bash
+    coreutils
+    curl
+    jdk_headless
+    jsvcWithSameJdkVersion
+    procps
+    which
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/defaults
+    cp -r ./* $out
+    patchShebangs $out
+
+    # Move away the persistable data and property directories, storing them as defaults
+    mv $out/data $out/defaults/data
+    mv $out/properties $out/defaults/properties
+
+    # Remove other persistable directories and the interactive (un)install scripts
+    rm -rf $out/{logs,work}
+    rm -f $out/{install.sh,uninstall.sh}
+
+    # Create links for all persisteable directories to the dataDir
+    ln -s ${dataDir}/logs $out/logs
+    ln -s ${dataDir}/work $out/work
+    ln -s ${dataDir}/data $out/data
+    ln -s ${dataDir}/properties $out/properties
+
+    # Create link for mongod binary in expected location
+    ln -s ${mongodb}/bin/mongod $out/bin/mongod
+
+    # Create wrapped executables with different names
+    makeWrapper $out/bin/control.sh $out/bin/omada \
+      --prefix PATH : "${lib.makeBinPath finalAttrs.runtimeDeps}"
+    makeWrapper $out/bin/control.sh $out/bin/tpeap \
+      --prefix PATH : "${lib.makeBinPath finalAttrs.runtimeDeps}"
+
+    runHook postInstall
+  '';
+
+  passthru = {
+    tests.version = testers.testVersion {
+      package = finalAttrs.finalPackage;
+      command = "omada version";
+      version = "v${finalAttrs.version}";
+    };
+
+    updateScript = writeShellScript "update-${finalAttrs.pname}" ''
+      set -o errexit
+      export PATH="${
+        lib.makeBinPath [
+          common-updater-scripts
+          curl
+          gnugrep
+          gnused
+          pup
+        ]
+      }:$PATH"
+      NEW_DOWNLOAD_URL=$(curl -s "https://www.tp-link.com/us/support/download/omada-software-controller/" \
+        | pup 'table.download-resource-table tbody tr:first-child th:nth-child(2) a attr{href}' \
+        | grep -P '.*Omada_.*_v[^_]*_linux_x64.*\.tar\.gz' \
+        | head -n 1)
+      NEW_VERSION=$(echo "$NEW_DOWNLOAD_URL" \
+        | sed -n 's/.*_v\([^_]*\)_linux_x64.*\.tar\.gz/\1/p')
+      if [[ "${finalAttrs.version}" = "$NEW_VERSION" ]]; then
+          echo "The new version is same as the old version."
+          exit 0
+      fi
+      NIX_HASH=$(nix hash to-sri sha256:$(nix-prefetch-url $NEW_DOWNLOAD_URL))
+      update-source-version "omada-software-controller" "$NEW_VERSION" "$NIX_HASH" "$NEW_DOWNLOAD_URL"
+    '';
+  };
+
+  meta = with lib; {
+    description = "Omada Software Controller";
+    homepage = "https://www.tp-link.com/us/business-networking/omada-sdn-controller/omada-software-controller/";
+    downloadPage = "https://www.tp-link.com/us/support/download/omada-software-controller/";
+    license = licenses.unfree;
+    maintainers = with maintainers; [ pathob ];
+    platforms = [
+      "x86_64-linux"
+    ];
+    mainProgram = "omada";
+  };
+})
diff --git a/pkgs/by-name/op/opencode/package.nix b/pkgs/by-name/op/opencode/package.nix
index 4a5a01f1eb88..316bd5233cbb 100644
--- a/pkgs/by-name/op/opencode/package.nix
+++ b/pkgs/by-name/op/opencode/package.nix
@@ -4,7 +4,7 @@
   bun,
   darwin,
   fetchFromGitHub,
-  makeBinaryWrapper,
+  makeWrapper,
   models-dev,
   nodejs,
   nix-update-script,
@@ -116,7 +116,7 @@ stdenv.mkDerivation (finalAttrs: {
     bun
     nodejs
     installShellFiles
-    makeBinaryWrapper
+    makeWrapper
     writableTmpDirAsHomeHook
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
@@ -136,7 +136,7 @@ stdenv.mkDerivation (finalAttrs: {
   env.MODELS_DEV_API_JSON = "${models-dev}/dist/_api.json";
   env.OPENCODE_DISABLE_MODELS_FETCH = true;
   env.OPENCODE_VERSION = finalAttrs.version;
-  env.OPENCODE_CHANNEL = "stable";
+  env.OPENCODE_CHANNEL = "prod";
 
   buildPhase = ''
     runHook preBuild
@@ -166,7 +166,39 @@ stdenv.mkDerivation (finalAttrs: {
          ]
        )
      } \
-    --set OPENCODE_DISABLE_AUTOUPDATE true
+    --set OPENCODE_DISABLE_AUTOUPDATE true \
+    --run '
+      # NOTE: Once this workaround is removed we should switch back to using
+      # makeBinaryWrapper here.
+
+      # nixpkgs previously built OpenCode with OPENCODE_CHANNEL=stable. "stable"
+      # is no longer an upstream channel, so it caused OpenCode to store its database
+      # as opencode-stable.db. After switching to the upstream production channel,
+      # OpenCode would normally use opencode.db instead, making existing sessions
+      # appear to be lost. Keep using the legacy database until the user migrates
+      # it, unless they explicitly configured OPENCODE_DB or disabled this workaround.
+
+      data_home="''${XDG_DATA_HOME:-$HOME/.local/share}"
+      legacy="$data_home/opencode/opencode-stable.db"
+      canonical="$data_home/opencode/opencode.db"
+
+      if [ -z "''${OPENCODE_DB:-}" ] \
+        && [ -z "''${NIXPKGS_OPENCODE_DISABLE_LEGACY_DB_WORKAROUND:-}" ] \
+        && [ -e "$legacy" ] \
+        && [ ! -e "$canonical" ]; then
+        export OPENCODE_DB="opencode-stable.db"
+
+        # Only show migration guidance when stderr is attached to a terminal.
+        # Non-interactive uses such as `opencode web`, services, or scripts
+        # should continue starting normally with the legacy database selected.
+        if [ -t 2 ]; then
+          echo "Detected legacy nixpkgs OpenCode database at $legacy." >&2
+          echo "Continuing to use it for compatibility." >&2
+          echo "See https://github.com/NixOS/nixpkgs/pull/558549 for migration instructions." >&2
+          echo "Set NIXPKGS_OPENCODE_DISABLE_LEGACY_DB_WORKAROUND=1 to disable this workaround." >&2
+        fi
+      fi
+    '
 
     install -Dm644 ${models-dev.jsonschema} $out/share/model-schema.json
     install -Dm644 config.json $out/share/config.json
diff --git a/pkgs/by-name/qs/qsv/package.nix b/pkgs/by-name/qs/qsv/package.nix
index f449260a4b37..3f95e0725e7b 100644
--- a/pkgs/by-name/qs/qsv/package.nix
+++ b/pkgs/by-name/qs/qsv/package.nix
@@ -33,7 +33,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "qsv";
-  version = "21.1.0";
+  version = "22.0.1";
 
   inherit buildFeatures;
 
@@ -41,10 +41,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "dathere";
     repo = "qsv";
     rev = finalAttrs.version;
-    hash = "sha256-Qfrt0HA9VqHE7RpqOZ1XZ7MZ9xoLaTccAgfxOOezSMs=";
+    hash = "sha256-lZ1iC+lnPgJqcKV9RDia/ndVBJjWUV8Z3L6k9hjAe3M=";
   };
 
-  cargoHash = "sha256-yPDfOq8JTDMI0g/ao5SLnCA5hw6SJaA/LekI7uPVdDk=";
+  cargoHash = "sha256-QdNOXmTIZ5CF73u1fMkkVa+ulUfD/looiBvbiM9TBfo=";
 
   buildInputs = [
     file
diff --git a/pkgs/by-name/sh/shattered-pixel-dungeon/package.nix b/pkgs/by-name/sh/shattered-pixel-dungeon/package.nix
index 3ca5ff778b5b..3c40875ef32c 100644
--- a/pkgs/by-name/sh/shattered-pixel-dungeon/package.nix
+++ b/pkgs/by-name/sh/shattered-pixel-dungeon/package.nix
@@ -6,13 +6,13 @@
 
 callPackage ./generic.nix rec {
   pname = "shattered-pixel-dungeon";
-  version = "3.3.8";
+  version = "4.0.0";
 
   src = fetchFromGitHub {
     owner = "00-Evan";
     repo = "shattered-pixel-dungeon";
     tag = "v${version}";
-    hash = "sha256-FRYuMjDk6UzmLeaR4MoONXYvNng7uC1xkxbDSiI3gnU=";
+    hash = "sha256-/hqnFY7HEK8yQz1hVMyh/2CnO1zIOyOLwTDUM6jkSKk=";
   };
 
   patches = [ ];
diff --git a/pkgs/by-name/to/tor-browser/package.nix b/pkgs/by-name/to/tor-browser/package.nix
index ff55543a820c..fab4eec69ba8 100644
--- a/pkgs/by-name/to/tor-browser/package.nix
+++ b/pkgs/by-name/to/tor-browser/package.nix
@@ -102,7 +102,7 @@ let
     ++ lib.optionals mediaSupport [ ffmpeg_7 ]
   );
 
-  version = "15.0.21";
+  version = "15.0.22";
 
   sources = {
     x86_64-linux = fetchurl {
@@ -112,7 +112,7 @@ let
         "https://tor.eff.org/dist/torbrowser/${version}/tor-browser-linux-x86_64-${version}.tar.xz"
         "https://tor.calyxinstitute.org/dist/torbrowser/${version}/tor-browser-linux-x86_64-${version}.tar.xz"
       ];
-      hash = "sha256-kd1QoBi3Y5bDvrbc3yY/dFnaqsL7JelZ6AdFsVv8NZ8=";
+      hash = "sha256-wizrBGx5zl57M7obg3iUr9Y7P/H8ckwCPbVL2BNWZFc=";
     };
 
     i686-linux = fetchurl {
@@ -122,7 +122,7 @@ let
         "https://tor.eff.org/dist/torbrowser/${version}/tor-browser-linux-i686-${version}.tar.xz"
         "https://tor.calyxinstitute.org/dist/torbrowser/${version}/tor-browser-linux-i686-${version}.tar.xz"
       ];
-      hash = "sha256-LWoAry/tJFvIlE0sDsUesHY+ziYnjqz4K8YEHIjrE0Y=";
+      hash = "sha256-1J82ddE8DqVSOnS4yI4ayLyx3MBP++TOonLulGsBz4E=";
     };
   };
 
diff --git a/pkgs/by-name/tu/tuple/sources.nix b/pkgs/by-name/tu/tuple/sources.nix
index 225738a4f233..13ab5c0a51de 100644
--- a/pkgs/by-name/tu/tuple/sources.nix
+++ b/pkgs/by-name/tu/tuple/sources.nix
@@ -1,5 +1,5 @@
 # Generated by ./update.sh - do not update manually!
-# Last updated: 2026-08-29
+# Last updated: 2026-09-10
 { fetchurl, fetchzip }:
 {
   aarch64-darwin = {
@@ -10,17 +10,17 @@
     };
   };
   aarch64-linux = {
-    version = "0-unstable-2026-08-27";
+    version = "0-unstable-2026-09-07";
     src = fetchurl {
-      url = "https://tuple-client-releases.s3.amazonaws.com/linux/v2026_08_27.7/arm64/tuple";
-      hash = "sha256-Y+DzYQe+2tixRkfDZmFmIJlT8+EJSCtpcjc/YhFZMCo=";
+      url = "https://tuple-client-releases.s3.amazonaws.com/linux/v2026_09_07.2/arm64/tuple";
+      hash = "sha256-hliSdzbMKxvikM5fSXfmNgUCx6GPOli2H9MiR4G15DE=";
     };
   };
   x86_64-linux = {
-    version = "0-unstable-2026-08-27";
+    version = "0-unstable-2026-09-07";
     src = fetchurl {
-      url = "https://tuple-client-releases.s3.amazonaws.com/linux/v2026_08_27.7/x86_64/tuple";
-      hash = "sha256-b53rnAQ6XKwFRBlIIXrvTgMoFGz38AO34sl33uoszeQ=";
+      url = "https://tuple-client-releases.s3.amazonaws.com/linux/v2026_09_07.2/x86_64/tuple";
+      hash = "sha256-0bBcYagjvtO8Z3mpVE3s8pE7tnDpw12DJKUsbXDcH6c=";
     };
   };
 }
diff --git a/pkgs/by-name/un/unciv/package.nix b/pkgs/by-name/un/unciv/package.nix
index e14c3c466641..638e43097885 100644
--- a/pkgs/by-name/un/unciv/package.nix
+++ b/pkgs/by-name/un/unciv/package.nix
@@ -12,7 +12,7 @@
   nix-update-script,
 }:
 let
-  version = "4.21.14";
+  version = "4.21.19";
 
   desktopItem = makeDesktopItem {
     name = "unciv";
@@ -42,7 +42,7 @@ stdenv.mkDerivation rec {
 
   src = fetchurl {
     url = "https://github.com/yairm210/Unciv/releases/download/${version}/Unciv.jar";
-    hash = "sha256-2h1NhCS01848KPso6RBWYJNfB5PZ6tdbl3YX0eGwXzE=";
+    hash = "sha256-1ZM5wOWhAsCMA+t/FvBqudDVQHdC/2td4AvqZoimVjI=";
   };
 
   dontUnpack = true;
diff --git a/pkgs/by-name/x4/x42-avldrums/package.nix b/pkgs/by-name/x4/x42-avldrums/package.nix
index 0b102c57b791..76233ff8b043 100644
--- a/pkgs/by-name/x4/x42-avldrums/package.nix
+++ b/pkgs/by-name/x4/x42-avldrums/package.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "x42-avldrums";
-  version = "0.7.5";
+  version = "0.7.6";
 
   src = fetchFromGitHub {
     owner = "x42";
     repo = "avldrums.lv2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9I/6zHISoH8+4NpASSyu6A5dSGtj+m7kc9NGp6KuIsI=";
+    hash = "sha256-RslFCp5kuYcfQ/QNGITHkwit9Hk0Jr2/2ssmiVKwaWs=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/x4/x42-plugins/package.nix b/pkgs/by-name/x4/x42-plugins/package.nix
index 53cb08ea3909..2e067e0419d5 100644
--- a/pkgs/by-name/x4/x42-plugins/package.nix
+++ b/pkgs/by-name/x4/x42-plugins/package.nix
@@ -19,11 +19,11 @@
 
 stdenv.mkDerivation rec {
   pname = "x42-plugins";
-  version = "20260829";
+  version = "20260908";
 
   src = fetchurl {
     url = "https://gareus.org/misc/x42-plugins/${pname}-${version}.tar.xz";
-    hash = "sha256-nQktYESMsVmFonk2gsys5sPDjLe+frEaRjUHqDj6Ulg=";
+    hash = "sha256-1dRqzDnrH+Zocx+XfVciIsmQy+5FQdMkncNFdfj7tcA=";
   };
 
   nativeBuildInputs = [ pkg-config ];
diff --git a/pkgs/development/python-modules/executorch/default.nix b/pkgs/development/python-modules/executorch/default.nix
index 315d097ff144..6d9ce706758d 100644
--- a/pkgs/development/python-modules/executorch/default.nix
+++ b/pkgs/development/python-modules/executorch/default.nix
@@ -4,6 +4,7 @@
   pkgs,
   buildPythonPackage,
   fetchFromGitHub,
+  pythonAtLeast,
 
   # nativeBuildInputs
   gitMinimal,
@@ -259,6 +260,11 @@ buildPythonPackage.override { inherit (torch) stdenv; } (finalAttrs: {
     # RuntimeError: Failed to compile /build/tmplb6i266d/data.json to /build/tmplb6i266d/data.pte
     "test_flatbuffer_paths_match"
   ]
+  ++ lib.optionals (pythonAtLeast "3.14") [
+    # ValueError: badly formed help string
+    "test_with_config"
+    "test_with_config_and_cli"
+  ]
   ++ lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isx86_64) [
     # RuntimeError: Error in dlopen:
     # /tmp/AP8CBk/vision_encoder/data/aotinductor/model/chm6ca425mbz7jdmmwcbnyrm6x6tedrfmaoyr4vee625vxhjibbt.wrapper.so:
diff --git a/pkgs/development/python-modules/llama-index-readers-json/default.nix b/pkgs/development/python-modules/llama-index-readers-json/default.nix
index ade561a75b9e..277b5a89ea77 100644
--- a/pkgs/development/python-modules/llama-index-readers-json/default.nix
+++ b/pkgs/development/python-modules/llama-index-readers-json/default.nix
@@ -8,13 +8,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "llama-index-readers-json";
-  version = "0.5.0";
+  version = "0.6.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_readers_json";
     inherit (finalAttrs) version;
-    hash = "sha256-315Uzbm3CuRJQpAwnrLxQ6zr0e1pCmM3JKMV6KhrEs8=";
+    hash = "sha256-RMyp4abnR3nRGd+35/zpTh3h8EjnzGKs0zOrwHjBeTE=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix b/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
index efd52356b985..31e2dd8220c8 100644
--- a/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
+++ b/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
@@ -9,13 +9,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "llama-index-vector-stores-milvus";
-  version = "1.1.0";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_vector_stores_milvus";
     inherit (finalAttrs) version;
-    hash = "sha256-xoelq9/IEFJ541Vs22i6dg6MWxLyV2EChs6OQHPhMJw=";
+    hash = "sha256-xwcAPLwRstC36b6dZzBDTNQS5xjKB/uG1Eka5CFLrBA=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/pgmpy/default.nix b/pkgs/development/python-modules/pgmpy/default.nix
index bb4a5e1432d9..14c529fc2d41 100644
--- a/pkgs/development/python-modules/pgmpy/default.nix
+++ b/pkgs/development/python-modules/pgmpy/default.nix
@@ -4,6 +4,9 @@
   buildPythonPackage,
   fetchFromGitHub,
 
+  # build-system
+  setuptools,
+
   # dependencies
   google-generativeai,
   huggingface-hub,
@@ -33,6 +36,7 @@ buildPythonPackage (finalAttrs: {
   pname = "pgmpy";
   version = "1.1.2";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "pgmpy";
@@ -41,6 +45,10 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-qZoyeUaRsatWUiFoL1VaRqApjM/AFS8xqTjVBcUpYas=";
   };
 
+  build-system = [
+    setuptools
+  ];
+
   dependencies = [
     google-generativeai
     huggingface-hub
@@ -140,6 +148,18 @@ buildPythonPackage (finalAttrs: {
     "test_forward_sample"
     "test_rejection_sample_basic"
   ]
+  ++ lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) [
+    # Failures due to numeric precision differences on aarch64-linux
+    "test_fisher_z_residual"
+    "test_generalized_cov_approx"
+    "test_hotelling_approx"
+    "test_hotelling_no_cond"
+    "test_pearsonr_residual"
+    "test_roys_approx"
+    "test_roys_no_cond"
+    "test_wilks_approx"
+    "test_wilks_no_cond"
+  ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     # Failures due to numeric precision differences on Darwin
     "test_generalized_cov_approx"
diff --git a/pkgs/development/python-modules/transformers/default.nix b/pkgs/development/python-modules/transformers/default.nix
index f61f96a0886e..89dadbe00427 100644
--- a/pkgs/development/python-modules/transformers/default.nix
+++ b/pkgs/development/python-modules/transformers/default.nix
@@ -93,7 +93,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "transformers";
-  version = "5.16.1";
+  version = "5.17.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -101,7 +101,7 @@ buildPythonPackage (finalAttrs: {
     owner = "huggingface";
     repo = "transformers";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VgBgaj4Qh2NVmJoqlrdb3hED/n1otIqDawXcALBpb2c=";
+    hash = "sha256-zPVsX4i4Qe7yMW3gmTysPsIvXZ4cQWU0gITA/1vSlEw=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/tools/electron/binary/info.json b/pkgs/development/tools/electron/binary/info.json
index beb0b94cdd8b..fcfca4d54f2b 100644
--- a/pkgs/development/tools/electron/binary/info.json
+++ b/pkgs/development/tools/electron/binary/info.json
@@ -31,31 +31,31 @@
     },
     "42": {
         "hashes": {
-            "aarch64-darwin": "c9456e59279ffc891013dd3890214297f63b1b65ce6b3a748b8c9caf43853f56",
-            "aarch64-linux": "6d257ea7a680c7a206b05396843b4180a080294f3690fc7b02c605ad1704127a",
-            "armv7l-linux": "1e4c3af68002a764ce94fe1f5630716b79a39d61e8851f303907134b9719595f",
+            "aarch64-darwin": "829a921e166f92c3486a56b2bc3b4b09e3fb9a28dee331f4d5766258528343ec",
+            "aarch64-linux": "b07e75414c8c24559451c1c901e16da9de8ae842d08cf472fd5f0ebc12e99344",
+            "armv7l-linux": "5923b738636711fde602ee0e5830cce9a22be9d16bc93f882720a3dedb088460",
             "headers": "14vvshfrkfw57xh0nlw3q0m2571ckcmzvnz9k88hd881fzqhydra",
-            "x86_64-linux": "11551af0a5460ad6f6e1a606b3efdd6129747810f41f5e21253979dd84193db2"
+            "x86_64-linux": "eea46e83e275fe38be7bd8068ea65750954d3c52330dd98719c09ddd4f60735f"
         },
-        "version": "42.11.1"
+        "version": "42.11.3"
     },
     "43": {
         "hashes": {
-            "aarch64-darwin": "5e3967f5f31b30b05edb4b825b31feb9709664ac3eeab76a6e74daa6e09b351c",
-            "aarch64-linux": "345bb33d44a6c1d85721d2479f49b9843ca74870dbeaf59569dafaa0a9f2ce78",
-            "armv7l-linux": "a7ff1ee90df9a0aaa49c58a40127d551126b33dee4aa59524f3722ecd889e009",
-            "headers": "00zs0r975cwv87xf9j67zyqy2cl1fc559mjind4isz44g8w97ms8",
-            "x86_64-linux": "633a5ae0c2f35c8ef32126fc4a8ce428e39a5f6834a46a9215a342c74a076532"
+            "aarch64-darwin": "5183a2b15d013517386edd9f1ea8e3402755f6c3ea17893f92acb20052f3a2e7",
+            "aarch64-linux": "e8b4ef7acdfb3f254463f832dded44c17cb8c65f790d0377e8c04f91bbeeb3a4",
+            "armv7l-linux": "121f21827d46d329fd1d6c9d1c45cefc7af436bd51b97b24cc0b4253b6e02e6f",
+            "headers": "1lfm4byj4yw6va7mkj34q1qwdha8x88ns3c605jl0x4k1kfm3xpd",
+            "x86_64-linux": "3075c82d0749e136bca77563d4dd24e881714d17d98241fafd02320da5d6e237"
         },
-        "version": "43.5.1"
+        "version": "43.6.0"
     },
     "44": {
         "hashes": {
-            "aarch64-darwin": "076d79742986e1b100b69ebecc691cb07368045e54c9087cef631b8622b76a80",
-            "aarch64-linux": "74b6f18bc29c0d52cf8e963c45d476800419097c6f3d53b27c5df335207e52bb",
-            "headers": "0jz1ybp3y9dmv1v39jixf8nnhypi18kjibr763wz44m1adx7q9x3",
-            "x86_64-linux": "d65286d812719f2b4c1a1b806a80f288a1058c89c7b058dae1e03ab25e499446"
+            "aarch64-darwin": "49b91ef265c603c8888500f807484b63816069c30f87ba2b403e7c87f0f45035",
+            "aarch64-linux": "c11fde221c08e9bffdb3336579f09bd934a009862f509af5033616876741be24",
+            "headers": "0pns4rylzr1a330cjmmcgyvdh19glhrgp2723gpi08xq027anrh8",
+            "x86_64-linux": "8b49b9efdd73c0f467edc3c1cd5678392c384ccf224f34ff54179f736e2f384b"
         },
-        "version": "44.0.0"
+        "version": "44.3.0"
     }
 }
diff --git a/pkgs/development/tools/electron/chromedriver/info.json b/pkgs/development/tools/electron/chromedriver/info.json
index ef1927603ca6..d19298d7fea8 100644
--- a/pkgs/development/tools/electron/chromedriver/info.json
+++ b/pkgs/development/tools/electron/chromedriver/info.json
@@ -31,31 +31,31 @@
     },
     "42": {
         "hashes": {
-            "aarch64-darwin": "61c9a592ac1245771981c04333e75ea53be72a94fc7685db9e1949dc0ccfa2dd",
-            "aarch64-linux": "e1acc5d4c8f906f325a6a83914a441bc96796c0d0513810566dc743d2bb5b448",
-            "armv7l-linux": "fd3f3d9e1602eaa2ff7573c6133af85719e984bd4e4c965d1b522c61a666333a",
+            "aarch64-darwin": "ccb254d7be31327137ba0ca7550b4ab3881fc5392e91fcc70fe30887dda7dc87",
+            "aarch64-linux": "c490ddc2f45125dd610707c5cdcfec107d5da872fce72954179948e4afc74842",
+            "armv7l-linux": "634afe67b72ca4a853c9848861a07d9896bf9c6a02c354e35cbf72c6f3df07e2",
             "headers": "14vvshfrkfw57xh0nlw3q0m2571ckcmzvnz9k88hd881fzqhydra",
-            "x86_64-linux": "59db172479dae441b643bbf5d4f52ff69e1b1d1c40c14075e8d01b10fc501e0c"
+            "x86_64-linux": "655911685cdcaf74210ded16dd1dc3785555b6160a5916a929fb9a843e36ee82"
         },
-        "version": "42.11.1"
+        "version": "42.11.3"
     },
     "43": {
         "hashes": {
-            "aarch64-darwin": "01eeb928cd9789fd0c9e138c4287d327806b45c7408188a7767327eaff4e08ad",
-            "aarch64-linux": "691305033a9812314c5cb75cd3a21113fac7334af7b0eb47b9e7df5cdd94183c",
-            "armv7l-linux": "72bd1a046b7009dd78a523ded55dc7349c2b984b1e601b4bcd5198e3edcc2f4b",
-            "headers": "00zs0r975cwv87xf9j67zyqy2cl1fc559mjind4isz44g8w97ms8",
-            "x86_64-linux": "662e9ecc009ea8143a944162e4ab06484aedf9e19cc1582743a3e70f9d5b65e6"
+            "aarch64-darwin": "b3117435ab234ba667ef94cf067abe9a3e0801858bf8f73e4e55e047168f9789",
+            "aarch64-linux": "1f2a73c9093a0ff2fe7fc88af940c7b93995e6f592fadbe3b2fcb524f311b081",
+            "armv7l-linux": "f930411e9c33954cc5ce299286464a145e7338099c3ee6f644bf88230d737d42",
+            "headers": "1lfm4byj4yw6va7mkj34q1qwdha8x88ns3c605jl0x4k1kfm3xpd",
+            "x86_64-linux": "2c5a54f26c6d18f9b4585a39195c5b371326094ecb0b788102b64d370ee7e342"
         },
-        "version": "43.5.1"
+        "version": "43.6.0"
     },
     "44": {
         "hashes": {
-            "aarch64-darwin": "2ae9243bfc24fdb3827200b3f76951dac28bf1145e636ee203730ad6e96989c7",
-            "aarch64-linux": "589c9c395ea373602a48a1329ded0f23e5457d7d5c2d088fb05f89c603cb7d20",
-            "headers": "0jz1ybp3y9dmv1v39jixf8nnhypi18kjibr763wz44m1adx7q9x3",
-            "x86_64-linux": "d7d2c5e90b987d9c1eb917ad4438731d17f1e2f4414fbaa9ed0d3f48f0b3d105"
+            "aarch64-darwin": "4ddb6a5f9c5f5c2bd3897aa36a63a161ef350e4f38bd118acfa924ad6e98f75f",
+            "aarch64-linux": "cecf416116f2273461e10b0f14eaa2318e6b66e44b6bbe7439866ce1bf6bc4e7",
+            "headers": "0pns4rylzr1a330cjmmcgyvdh19glhrgp2723gpi08xq027anrh8",
+            "x86_64-linux": "53167b1bdf4c7887b29b228c0b5f3f43704d9c8917859c42fe98da97cf03e444"
         },
-        "version": "44.0.0"
+        "version": "44.3.0"
     }
 }
diff --git a/pkgs/development/tools/electron/info.json b/pkgs/development/tools/electron/info.json
index 8dde8989f347..76e2003d314f 100644
--- a/pkgs/development/tools/electron/info.json
+++ b/pkgs/development/tools/electron/info.json
@@ -56,10 +56,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-/DOYo0wiJ0M8N9FbLb4JGE1GEeV2xw9eFlxgwTIZ2Wo=",
+                    "hash": "sha256-bnjzowPqh0+lbuAxxm3nFCzQ6gQtG7Qzuq03u58hs90=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v42.11.1"
+                    "tag": "v42.11.3"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -1367,7 +1367,7 @@
             }
         },
         "electron_yarn_data": {
-            "hash": "sha256-VovBpWz7O+6lAwHsk4fP/VUs2SPiaiKya59fe4+b5Fw=",
+            "hash": "sha256-fVqQdwstENinc1XTRar5d4CnO5BLb9U2+Z6jOSzAIsk=",
             "missing_hashes": {
                 "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                 "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -1411,7 +1411,7 @@
         },
         "modules": "146",
         "node": "24.19.0",
-        "version": "42.11.1"
+        "version": "42.11.3"
     },
     "43": {
         "chrome": "150.0.7871.250",
@@ -1478,10 +1478,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-Ei/8x4SvIkfwJys0hNCmUD+JaZdmYHUbFYncz65S4CE=",
+                    "hash": "sha256-SLK6HCWzRGZRSkENI2lacq04E1yBxtthChsDAmAOgXg=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v43.5.1"
+                    "tag": "v43.6.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -1823,10 +1823,10 @@
             },
             "src/third_party/electron_node": {
                 "args": {
-                    "hash": "sha256-wronyuFX5JzPJgMKWh8FaBx/hG6jopj/OdwyBxRhPGM=",
+                    "hash": "sha256-X7aZh0QOm79anmh77QRiHGRSi8TERuWnWXrcPqDYPjY=",
                     "owner": "nodejs",
                     "repo": "node",
-                    "tag": "v24.19.0"
+                    "tag": "v24.20.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -2797,7 +2797,7 @@
             }
         },
         "electron_yarn_data": {
-            "hash": "sha256-Y2TE5iMVUgXqqKojb90yzcCfFAhEy7STB53yYQQanPM=",
+            "hash": "sha256-0ECf2IVgznQNlVMiHqAJCt8lBXXsFIJUekaFnVS+cJ4=",
             "missing_hashes": {
                 "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                 "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -2840,11 +2840,11 @@
             }
         },
         "modules": "148",
-        "node": "24.19.0",
-        "version": "43.5.1"
+        "node": "24.20.0",
+        "version": "43.6.0"
     },
     "44": {
-        "chrome": "152.0.7977.54",
+        "chrome": "152.0.7977.78",
         "chromium": {
             "deps": {
                 "gn": {
@@ -2853,15 +2853,15 @@
                     "version": "0-unstable-2026-07-23"
                 }
             },
-            "version": "152.0.7977.54"
+            "version": "152.0.7977.78"
         },
         "chromium_npm_hash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg=",
         "deps": {
             "src": {
                 "args": {
-                    "hash": "sha256-rra0dGs2nBEBMyIRtefVZD0A++sNa1mK3QZkUH76GV8=",
+                    "hash": "sha256-+++z44EqfZH44EKiaqChyFAwRtkJaS/fdydjE+Hktco=",
                     "postFetch": "rm -rf $(find $out/third_party/blink/web_tests ! -name BUILD.gn -mindepth 1 -maxdepth 1); rm -r $out/content/test/data; rm -rf $out/courgette/testdata; rm -r $out/extensions/test/data; rm -r $out/media/test/data; ",
-                    "tag": "152.0.7977.54",
+                    "tag": "152.0.7977.78",
                     "url": "https://chromium.googlesource.com/chromium/src.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -2908,10 +2908,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-F3o4zDDA75HyeoJVTpv/zWzsl6FpfINvnFjRdOHKQJ8=",
+                    "hash": "sha256-Gu54g5p/RZGZXsMSK8yKGoT5xYTK5zvBrM69AEQjwb0=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v44.0.0"
+                    "tag": "v44.3.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -2941,8 +2941,8 @@
             },
             "src/third_party/angle": {
                 "args": {
-                    "hash": "sha256-wM2cyXeOlQLgleuYirckIIc8QFw7HY7LyC8QRmaovFc=",
-                    "rev": "e68ad989e7b507ceb28ec1b2a272b20a289be60f",
+                    "hash": "sha256-3ZCIFT7j944HWPOiADQa88TQZctLej5vbrBFA/FwyHw=",
+                    "rev": "736ed80c7552a4b267bd54a282b971aa4555cb3e",
                     "url": "https://chromium.googlesource.com/angle/angle.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -3141,8 +3141,8 @@
             },
             "src/third_party/dawn": {
                 "args": {
-                    "hash": "sha256-YMgRmVMXo1Ra5M034zij/ik/1aHpb3veK4VWsKHIwhI=",
-                    "rev": "571752c9cb3ed36a3194854374984427794c4dda",
+                    "hash": "sha256-Xd1FsdIBO6hzNECnNnXR0306woHl5/L+5WZ/pxTlYfA=",
+                    "rev": "ab8827bc57b176eeaa89f71324130c02d4d41145",
                     "url": "https://dawn.googlesource.com/dawn.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -3213,8 +3213,8 @@
             },
             "src/third_party/devtools-frontend/src": {
                 "args": {
-                    "hash": "sha256-5HF5Xa8pMgYWiNnY9mj0xyjceETUjbMY7Ms/t8GEI9s=",
-                    "rev": "e5ca7f51140bc98ac0bfea5bc14411cb6e398e32",
+                    "hash": "sha256-vZxKC/QD2dHNnVm9OZI1Bo0Jdnn+AJhFpXYSXXF7JsA=",
+                    "rev": "04db1f5240b636511ec4e9058a78f8274a7f65ee",
                     "url": "https://chromium.googlesource.com/devtools/devtools-frontend"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -3261,10 +3261,10 @@
             },
             "src/third_party/electron_node": {
                 "args": {
-                    "hash": "sha256-Pecc7wFTAcQmeCsXN6RGTuO1Wqyei+ChbpsJ7yBRHJI=",
+                    "hash": "sha256-X7aZh0QOm79anmh77QRiHGRSi8TERuWnWXrcPqDYPjY=",
                     "owner": "nodejs",
                     "repo": "node",
-                    "tag": "v24.18.1"
+                    "tag": "v24.20.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -3671,8 +3671,8 @@
             },
             "src/third_party/libyuv": {
                 "args": {
-                    "hash": "sha256-EaivUnUzPNWP0mFgTcNBjqzGMkLfxhxThtWHYhzrcdw=",
-                    "rev": "b56492e2dfc064f65ef27fed9c45d9bbfc2e2ad2",
+                    "hash": "sha256-Ievf2MXM7VX9+R85N3i2W+1jZSbt5mvy1SCNc0iqJYw=",
+                    "rev": "26e56be0f984af3dae4d0c0ab7a0bac8ac20e1b0",
                     "url": "https://chromium.googlesource.com/libyuv/libyuv.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -4243,15 +4243,15 @@
             },
             "src/v8": {
                 "args": {
-                    "hash": "sha256-uelbLFdcEbsVzgM+zL8IOw3O5BkA5dLWhZ0iicdM5KY=",
-                    "rev": "8ec91943739dc102471544c77ec9c864f185af5b",
+                    "hash": "sha256-ZHEmeSe8r226gjazm91GYqlfbM9a5yi8KnFv4iAWFKE=",
+                    "rev": "3de6ffffbfdcf265e9f11a5c9d1cfb4d486d7550",
                     "url": "https://chromium.googlesource.com/v8/v8.git"
                 },
                 "fetcher": "fetchFromGitiles"
             }
         },
         "electron_yarn_data": {
-            "hash": "sha256-QyoDHWl1v0CKn7yHEGukm2GWPiGtb9vTQBEBcsJzqwI=",
+            "hash": "sha256-Qxv2r3kAYGwB0tVDoZeLqv2exBNdRCABFFrJXQ+X2jE=",
             "missing_hashes": {
                 "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                 "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -4294,7 +4294,7 @@
             }
         },
         "modules": "149",
-        "node": "24.18.1",
-        "version": "44.0.0"
+        "node": "24.20.0",
+        "version": "44.3.0"
     }
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/bintrans.nix b/pkgs/os-specific/bsd/freebsd/pkgs/bintrans.nix
index d10426e26ca1..4600a199a9a5 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/bintrans.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/bintrans.nix
@@ -1,5 +1,10 @@
-{ mkDerivation }:
+{
+  lib,
+  mkDerivation,
+}:
 mkDerivation {
   path = "usr.bin/bintrans";
   MK_TESTS = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/config.nix b/pkgs/os-specific/bsd/freebsd/pkgs/config.nix
index f7ba273ed558..223c3b396307 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/config.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/config.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   bsdSetupHook,
   freebsdSetupHook,
@@ -32,4 +33,6 @@ mkDerivation {
     libnv
     libsbuf
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/ctfconvert.nix b/pkgs/os-specific/bsd/freebsd/pkgs/ctfconvert.nix
index d1a0cb695a41..d1a3fcea72e1 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/ctfconvert.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/ctfconvert.nix
@@ -34,4 +34,5 @@ mkDerivation {
   ];
 
   meta.license = lib.licenses.cddl;
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/ctfmerge.nix b/pkgs/os-specific/bsd/freebsd/pkgs/ctfmerge.nix
index 2803df747350..2449f6eebeb7 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/ctfmerge.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/ctfmerge.nix
@@ -32,4 +32,5 @@ mkDerivation {
   ];
 
   meta.license = lib.licenses.cddl;
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/elfcopy.nix b/pkgs/os-specific/bsd/freebsd/pkgs/elfcopy.nix
index 2cd0aeac2b83..a38ddc245eb3 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/elfcopy.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/elfcopy.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   compatIfNeeded,
   libelf,
@@ -24,4 +25,6 @@ mkDerivation {
 
   # since we built libpe and co separate they are not internal and thus not pie...?
   MK_PIE = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/file2c.nix b/pkgs/os-specific/bsd/freebsd/pkgs/file2c.nix
index ff35d97afe36..98d63ac2278c 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/file2c.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/file2c.nix
@@ -1,6 +1,11 @@
-{ mkDerivation }:
+{
+  lib,
+  mkDerivation,
+}:
 
 mkDerivation {
   path = "usr.bin/file2c";
   MK_TESTS = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/gencat.nix b/pkgs/os-specific/bsd/freebsd/pkgs/gencat.nix
index ea701b6404ec..cb44a3cdff40 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/gencat.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/gencat.nix
@@ -1,3 +1,10 @@
-{ mkDerivation }:
+{
+  lib,
+  mkDerivation,
+}:
 
-mkDerivation { path = "usr.bin/gencat"; }
+mkDerivation {
+  path = "usr.bin/gencat";
+
+  meta.platforms = lib.platforms.unix;
+}
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/install.nix b/pkgs/os-specific/bsd/freebsd/pkgs/install.nix
index d8dbf2ffa18b..6e5bc19cdc60 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/install.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/install.nix
@@ -70,4 +70,6 @@ mkDerivation {
     "man"
     "test"
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/kldxref.nix b/pkgs/os-specific/bsd/freebsd/pkgs/kldxref.nix
index 4119b0690cee..b23bce4032b5 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/kldxref.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/kldxref.nix
@@ -26,4 +26,6 @@ mkDerivation {
   postPatch = ''
     sed -i 's/FTS_PHYSICAL/FTS_LOGICAL/' $BSDSRCDIR/usr.sbin/kldxref/kldxref.c
   '';
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libdwarf.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libdwarf.nix
index cbd3bda91925..4bd0e792ad20 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libdwarf.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libdwarf.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   m4,
   compatIfNeeded,
@@ -21,4 +22,6 @@ mkDerivation {
     libelf
   ];
   MK_TESTS = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libelf.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libelf.nix
index 0afedf611112..e56fc5fbfe5a 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libelf.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libelf.nix
@@ -41,4 +41,6 @@ mkDerivation {
   preBuild = lib.optionalString stdenv.hostPlatform.isFreeBSD ''
     export NIX_CFLAGS_COMPILE="$NIX_CFLAGS_COMPILE -B${csu}/lib"
   '';
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libelftc.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libelftc.nix
index 44a26482bc83..4e28e891a43a 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libelftc.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libelftc.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   libelf,
   compatIfNeeded,
@@ -19,4 +20,6 @@ mkDerivation {
   '';
 
   alwaysKeepStatic = true;
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libmd.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libmd.nix
index f6f0598d849a..d14d8365b242 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libmd.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libmd.nix
@@ -70,6 +70,8 @@ mkDerivation (
             cp "$f" "$man/share/man/$f"
           done
         '';
+
+    meta.platforms = lib.platforms.unix;
   }
   // lib.optionalAttrs bootstrapInstallation {
     nativeBuildInputs = [
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libnetbsd/package.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libnetbsd/package.nix
index 4cd030ebe02e..db844d26ad34 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libnetbsd/package.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libnetbsd/package.nix
@@ -28,4 +28,6 @@ mkDerivation {
   ++ lib.optional (stdenv.hostPlatform == stdenv.buildPlatform) "INSTALL=boot-install";
 
   alwaysKeepStatic = true;
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libnv.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libnv.nix
index 6ce61e5a68c7..f1cc7d6d835d 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libnv.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libnv.nix
@@ -1,4 +1,7 @@
-{ mkDerivation }:
+{
+  lib,
+  mkDerivation,
+}:
 
 mkDerivation {
   path = "lib/libnv";
@@ -7,4 +10,6 @@ mkDerivation {
     "sys/sys"
   ];
   MK_TESTS = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libpe.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libpe.nix
index 1abdef936041..dad231089719 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libpe.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libpe.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
 }:
 mkDerivation {
@@ -13,4 +14,6 @@ mkDerivation {
   '';
 
   alwaysKeepStatic = true;
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libsbuf.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libsbuf.nix
index f8e729d2d76e..7ae988dab880 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libsbuf.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libsbuf.nix
@@ -1,7 +1,12 @@
-{ mkDerivation }:
+{
+  lib,
+  mkDerivation,
+}:
 
 mkDerivation {
   path = "lib/libsbuf";
   extraPaths = [ "sys/kern" ];
   env.MK_TESTS = "no";
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/libspl.nix b/pkgs/os-specific/bsd/freebsd/pkgs/libspl.nix
index 0f8e5b812fea..21e576d37871 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/libspl.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/libspl.nix
@@ -19,5 +19,6 @@ mkDerivation {
 
   meta = {
     license = lib.licenses.cddl;
+    platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/lorder.nix b/pkgs/os-specific/bsd/freebsd/pkgs/lorder.nix
index 25e7f491a1c9..acc2f0d34ac7 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/lorder.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/lorder.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   bsdSetupHook,
   freebsdSetupHook,
@@ -22,4 +23,6 @@ mkDerivation {
     "out"
     "man"
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/makeMinimal.nix b/pkgs/os-specific/bsd/freebsd/pkgs/makeMinimal.nix
index 069e74474852..c3f01f34b570 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/makeMinimal.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/makeMinimal.nix
@@ -65,4 +65,6 @@ mkDerivation {
   '';
 
   extraPaths = make.extraPaths;
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/mkDerivation.nix b/pkgs/os-specific/bsd/freebsd/pkgs/mkDerivation.nix
index 1325fcb4c663..aec5608a1d2c 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/mkDerivation.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/mkDerivation.nix
@@ -114,6 +114,7 @@ lib.makeOverridable (
           artemist
         ];
         license = lib.licenses.bsd2;
+        platforms = lib.platforms.freebsd;
       }
       // attrs.meta or { };
     }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/mkcsmapper.nix b/pkgs/os-specific/bsd/freebsd/pkgs/mkcsmapper.nix
index 80804123852e..05e840df9849 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/mkcsmapper.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/mkcsmapper.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   stdenv,
   mkDerivation,
   byacc,
@@ -17,4 +18,6 @@ mkDerivation {
     byacc
     flex
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/mkesdb.nix b/pkgs/os-specific/bsd/freebsd/pkgs/mkesdb.nix
index 9c0ec2892802..62d5df5177e1 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/mkesdb.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/mkesdb.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   byacc,
   flex,
@@ -13,4 +14,6 @@ mkDerivation {
     byacc
     flex
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/mtree.nix b/pkgs/os-specific/bsd/freebsd/pkgs/mtree.nix
index 746d6a1d958c..c5a1fdfcdbb8 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/mtree.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/mtree.nix
@@ -42,4 +42,6 @@ mkDerivation {
       )
     }"
   '';
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/rpcgen/package.nix b/pkgs/os-specific/bsd/freebsd/pkgs/rpcgen/package.nix
index 49b2ef805bc1..9d54326bc240 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/rpcgen/package.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/rpcgen/package.nix
@@ -23,4 +23,6 @@ mkDerivation {
     # the problem is fixed properly in glibc.
     ./rpcgen-glibc-hack.patch
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/tsort.nix b/pkgs/os-specific/bsd/freebsd/pkgs/tsort.nix
index 8ccf12f846b3..794c300dd3a4 100644
--- a/pkgs/os-specific/bsd/freebsd/pkgs/tsort.nix
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/tsort.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkDerivation,
   bsdSetupHook,
   freebsdSetupHook,
@@ -24,4 +25,6 @@ mkDerivation {
     mandoc
     groff
   ];
+
+  meta.platforms = lib.platforms.unix;
 }
diff --git a/pkgs/servers/http/nginx/modules/vod/package.nix b/pkgs/servers/http/nginx/modules/vod/package.nix
index 29ac8fdf85c3..0d5aad2b843d 100644
--- a/pkgs/servers/http/nginx/modules/vod/package.nix
+++ b/pkgs/servers/http/nginx/modules/vod/package.nix
@@ -12,13 +12,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "vod";
-  version = "1.9.1";
+  version = "1.9.2";
 
   src = fetchFromGitHub {
     owner = "dio-az";
     repo = "nginx-vod-module";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-18LA3Thiz4EnVkRp6j5BuTyIcd0zXgyyvW6yuzm7vRs=";
+    hash = "sha256-5j9GDXhENS1zgAXMoGB8PJvr5FwOxtsSi5H5dMjfN6w=";
   };
 
   postPatch = ''