Merge staging-next into staging

2026-10-03 21:40:12 +00:00 · 2026-08-31 00:27:59 +00:00
parent 31ec358355 3d69b581a7
commit 8aa9ef2d84
79 changed files with 874 additions and 429 deletions
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -14382,6 +14382,12 @@
    githubId = 5124422;
    name = "Julien Urraca";
  };
+  justanoobcoder = {
+    email = "syaorancode@gmail.com";
+    github = "justanoobcoder";
+    githubId = 57614330;
+    name = "Nguyen Hong Hiep";
+  };
  justanotherariel = {
    email = "ariel@ebersberger.io";
    github = "justanotherariel";
@@ -25585,6 +25591,12 @@
    githubId = 107703;
    name = "Samuel Rivas";
  };
+  samuelskovbakke = {
+    email = "samuel@skovbakke.dk";
+    github = "samuelskovbakke";
+    githubId = 25748723;
+    name = "Samuel Skovbakke";
+  };
  samueltardieu = {
    email = "nixpkgs@sam.rfc1149.net";
    github = "samueltardieu";
--- a/pkgs/applications/editors/neovim/build-neovim-plugin.nix
+++ b/pkgs/applications/editors/neovim/build-neovim-plugin.nix
@@ -44,7 +44,11 @@ let
        nativeBuildInputs = old.nativeBuildInputs or [ ] ++ [
          lua.pkgs.luarocksMoveDataFolder
        ];
-        version = "${originalLuaDrv.version}-unstable-${old.version}";
+        version =
+          if attrs ? version then
+            "${originalLuaDrv.version}-unstable-${attrs.version}"
+          else
+            originalLuaDrv.version;
        __intentionallyOverridingVersion = true;
      }
    )
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -45,13 +45,13 @@
    "vendorHash": "sha256-DTPaRkNWitoriOE0G+RctMIHAdSPK4wq410a+XxLnOY="
  },
  "aliyun_alicloud": {
-    "hash": "sha256-n7hozRcovw62f1KjH7/VncHyqD4c5w3f3RMpi7pbLcI=",
+    "hash": "sha256-YxrscU2ukv/lLi0cKeZVza694oLR/duKsPHEvyGaXNQ=",
    "homepage": "https://registry.terraform.io/providers/aliyun/alicloud",
    "owner": "aliyun",
    "repo": "terraform-provider-alicloud",
-    "rev": "v1.289.0",
+    "rev": "v1.290.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-667c573g6E6srr0UgkeiozikiemrFEAJ5sF0Zg2ahnE="
+    "vendorHash": "sha256-bJcVf4Yj70VwKn0p6RN+/dc5J+K6xFJcifVei9dK2bA="
  },
  "aminueza_minio": {
    "hash": "sha256-2NbI/ANAuCogB4H31N2k5dPpg8jqRULFdWD0+NxQD5c=",
@@ -1247,13 +1247,13 @@
    "vendorHash": "sha256-skswuFKhN4FFpIunbom9rM/FVRJVOFb1WwHeAIaEjn8="
  },
  "spacelift-io_spacelift": {
-    "hash": "sha256-9Z2X6r+r82ZrUPbWaPVTw37rRSUTIosvn/Zfv3XpqfA=",
+    "hash": "sha256-YII7lvargOUDhw+pBFcKNrSyjDHhyk3AErN9N9LFrpE=",
    "homepage": "https://registry.terraform.io/providers/spacelift-io/spacelift",
    "owner": "spacelift-io",
    "repo": "terraform-provider-spacelift",
-    "rev": "v1.53.5",
+    "rev": "v1.54.0",
    "spdx": "MIT",
-    "vendorHash": "sha256-gva4QLCNANCaDSjv84N2oFv9VlsU8oUZOUTx6nTRIcA="
+    "vendorHash": "sha256-Yg4EcYUckcnAeADgCo1U1pdsltDVrH0Uma7u9vU3nE8="
  },
  "splunk-terraform_signalfx": {
    "hash": "sha256-KoPLEVzR/MtMTrufqvxrOuVsfjCUXQ9UMbqjosAy2oc=",
--- a/pkgs/by-name/ap/aprutil/package.nix
+++ b/pkgs/by-name/ap/aprutil/package.nix
@@ -2,7 +2,6 @@
  lib,
  stdenv,
  fetchurl,
-  fetchpatch,
  makeWrapper,
  apr,
  expat,
@@ -25,26 +24,15 @@ assert ldapSupport -> openldap != null;

 stdenv.mkDerivation (finalAttrs: {
  pname = "apr-util";
-  version = "1.6.3";
+  version = "1.6.5";

  src = fetchurl {
    url = "mirror://apache/apr/apr-util-${finalAttrs.version}.tar.bz2";
-    sha256 = "sha256-pBB243EHRjJsOUUEKZStmk/KwM4Cd92P6gdv7DyXcrU=";
+    sha256 = "sha256-lt4d1vagR20tLnlkkm2MHdw7sOIQ4bGBLTulpFSjkuI=";
  };

  patches = [
    ./fix-libxcrypt-build.patch
-    # Fix incorrect Berkeley DB detection with newer versions of clang due to implicit `int` on main errors.
-    (fetchpatch {
-      url = "https://github.com/apache/apr-util/commit/2d838ff7319bd384a0b177f40ac19c4b6c81436d.patch?full_index=1";
-      hash = "sha256-/N6V5D1d9R6AVjHUwy3Ne839D3ZSsF3Hpn8W9sx1sXM=";
-      excludes = [ "CHANGES" ];
-    })
-    # Fix error with missing function prototype
-    (fetchpatch {
-      url = "https://github.com/apache/apr-util/commit/e67caa006c75181b45b761cd50294cb3c8e18f1a.patch?full_index=1";
-      hash = "sha256-fwKT7mGPHIgJ5uG/KAOOE/38FSNfow+GJgHCxcp9mgI=";
-    })
  ]
  ++ lib.optional stdenv.hostPlatform.isFreeBSD ./include-static-dependencies.patch;

--- a/pkgs/by-name/au/automatic-timezoned/package.nix
+++ b/pkgs/by-name/au/automatic-timezoned/package.nix
@@ -7,7 +7,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "automatic-timezoned";
-  version = "2.0.156";
+  version = "2.0.158";

  __structuredAttrs = true;

@@ -15,10 +15,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "maxbrunet";
    repo = "automatic-timezoned";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-s/VUlcMxveeYN9PUg7fWd9HFGbwkcYeN3s4nKhehYhY=";
+    hash = "sha256-LVkScvoYPog0u1wfRheKT15DicyKc/aIBeye3ZVjHy4=";
  };

-  cargoHash = "sha256-PcdNomx0ZwdmPWORbIayeFLWbyrmWdl9EO2P7GC25B4=";
+  cargoHash = "sha256-OS+FDdj6tfgstOQl8I/jzpEFH1AzCtzEFQASKEuN6hY=";

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;
--- a/pkgs/by-name/az/azure-mcp/package.nix
+++ b/pkgs/by-name/az/azure-mcp/package.nix
@@ -8,23 +8,23 @@
 }:

 let
-  version = "3.0.0-beta.10";
+  version = "3.0.0-beta.33";
  srcs = {
    x86_64-linux = {
      url = "https://github.com/microsoft/mcp/releases/download/Azure.Mcp.Server-${version}/Azure.Mcp.Server-linux-x64-native.zip";
-      hash = "sha256-2wrpyTVunT54dYD1ascVDRTW2AN5NpoV+q3UUt5dQSg=";
+      hash = "sha256-Zm55CQkPGvdHJDOqeh9A5wBX4HNXg/h2rhkfGRqy0Zk=";
    };
    aarch64-linux = {
      url = "https://github.com/microsoft/mcp/releases/download/Azure.Mcp.Server-${version}/Azure.Mcp.Server-linux-arm64.zip";
-      hash = "sha256-K1QRpj5/RzZx2mrmtnB5lGX9CoaAC+pRVGqqHtXWncY=";
+      hash = "sha256-UY4cYtJE74+dWpOjq9ddhhjCPRavCwvA+VqFLabIV1o=";
    };
    x86_64-darwin = {
      url = "https://github.com/microsoft/mcp/releases/download/Azure.Mcp.Server-${version}/Azure.Mcp.Server-osx-x64.zip";
-      hash = "sha256-ebT6sipbA7IdGx98kF/8GLpHL1fVSVqnmL4rEwsa43k=";
+      hash = "sha256-aLGpa+DZBKzPlAqMDv3vg7ioN8+DL7AsyhsQvVRywnw=";
    };
    aarch64-darwin = {
      url = "https://github.com/microsoft/mcp/releases/download/Azure.Mcp.Server-${version}/Azure.Mcp.Server-osx-arm64.zip";
-      hash = "sha256-33rg+fnIB/VJZbVKTP7b8829BbcDnfnaYFMOyPLFzEw=";
+      hash = "sha256-HYvRa3/G+ZJ70w8RKKIoYX9UlOorKwjMheAvHYC8uss=";
    };
  };
  unavailable = throw "azure-mcp package is not available for this platform.";
--- a/pkgs/by-name/bi/bitwig-studio6/package.nix
+++ b/pkgs/by-name/bi/bitwig-studio6/package.nix
@@ -38,12 +38,12 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "bitwig-studio6";
-  version = "6.0.11";
+  version = "6.1";

  src = fetchurl {
    name = "bitwig-studio-${finalAttrs.version}.deb";
    url = "https://www.bitwig.com/dl/Bitwig%20Studio/${finalAttrs.version}/installer_linux";
-    hash = "sha256-rnr/Z8y6klKrU2gT5/XT+sRryl/HZZZ04n565L0HPEw=";
+    hash = "sha256-dJbwn8JNHuSZ/lKQV4zoSbbthDdHl4J7hhmOZ5AdA2M=";
  };

  strictDeps = true;
--- a/pkgs/by-name/bp/bpfvet/package.nix
+++ b/pkgs/by-name/bp/bpfvet/package.nix
@@ -0,0 +1,35 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "bpfvet";
+  version = "0.2.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "boratanrikulu";
+    repo = "bpfvet";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-++vCltHBmy0JPzNjZ7qe1I9eValBcw2V+j9WRZKVAG8=";
+  };
+
+  vendorHash = "sha256-hnkmkHUS5QzhnlDXB6CF683aDBTnJC86J4//IBcJLOA=";
+
+  ldflags = [ "-s" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "BPF portability analyzer for compiled eBPF object files";
+    homepage = "https://github.com/boratanrikulu/bpfvet";
+    changelog = "https://github.com/boratanrikulu/bpfvet/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ stepbrobd ];
+    mainProgram = "bpfvet";
+  };
+})
--- a/pkgs/by-name/bu/budget-tracker-tui/package.nix
+++ b/pkgs/by-name/bu/budget-tracker-tui/package.nix
@@ -6,7 +6,7 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "budget-tracker-tui";
-  version = "1.4.1";
+  version = "1.4.2";

  __structuredAttrs = true;

@@ -14,9 +14,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "Feromond";
    repo = "budget_tracker_tui";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vNpnW9SIjuSnvNtBW8wzDNCCVpw3z/2nv9bremTMqww=";
+    hash = "sha256-kaGgZxDX3SwtU+zY1oLWeT3OYFoXau5pM+6cfW4el34=";
  };
-  cargoHash = "sha256-eMzqi2uEaLmHEQtegiT2aWOJCq0tIdywtv1rl99kyys=";
+  cargoHash = "sha256-X71AGsR4bMjD3c7hEWP3cBEqQyBa68CJKVPmjrp4M5w=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/dd/ddhx/package.nix
+++ b/pkgs/by-name/dd/ddhx/package.nix
@@ -5,13 +5,13 @@
 }:
 buildDubPackage (finalAttrs: {
  pname = "ddhx";
-  version = "0.11.0";
+  version = "0.12.0";

  src = fetchFromGitHub {
    owner = "dd86k";
    repo = "ddhx";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-mK9vGPeHjKyElXrLmGCdon3PIYpQB2VzhgvKouk/kpA=";
+    hash = "sha256-vmWO7NodB5j5ZhzdiB9H3hzXVgW5MCqlGlnp7VKnui0=";
  };

  dubLock.dependencies = { };
--- a/pkgs/by-name/de/devin-desktop/info.json
+++ b/pkgs/by-name/de/devin-desktop/info.json
@@ -1,14 +1,14 @@
 {
  "aarch64-darwin": {
-    "version": "3.7.25",
+    "version": "3.8.20",
    "vscodeVersion": "1.126.0",
-    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/7e8e528a3057dcf000527b80072c9be7ea90a08d/Devin-darwin-arm64-3.7.25.zip",
-    "sha256": "8b684fe542257bc5838e81f90d3ccb304f2535c91d387127353406977eb0353f"
+    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/2d9020110aa91587b3c3b0fcf7d1faaf601fc7b8/Devin-darwin-arm64-3.8.20.zip",
+    "sha256": "f6354300f59e1a45b83a11d4b40a915cf9e3a75c4304564ea8967c9b4ae5cd80"
  },
  "x86_64-linux": {
-    "version": "3.7.25",
+    "version": "3.8.20",
    "vscodeVersion": "1.126.0",
-    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/7e8e528a3057dcf000527b80072c9be7ea90a08d/Devin-linux-x64-3.7.25.tar.gz",
-    "sha256": "f0806d95a9f07ce5a577146262b10f99589d1c1936b8401590c5490b8467eee8"
+    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/2d9020110aa91587b3c3b0fcf7d1faaf601fc7b8/Devin-linux-x64-3.8.20.tar.gz",
+    "sha256": "cc269e129c8159f4994199b8df59054308a9c998beb22a5c443663437f09acce"
  }
 }
--- a/pkgs/by-name/dt/dtop/package.nix
+++ b/pkgs/by-name/dt/dtop/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "dtop";
-  version = "0.8.0";
+  version = "0.9.0";

  src = fetchFromGitHub {
    owner = "amir20";
    repo = "dtop";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-cqdKmVZx73ycYmkoRLqH8Hr2PCfm/j1U97DjHSnvbgQ=";
+    hash = "sha256-xjhtqO6mAP8dJ0oa3ShIiTJNtt6tN/XfJDSBXL8yvqo=";
  };

-  cargoHash = "sha256-fba8TIhWklWjC+3gbkwQHjth/3TijFZkrYiotFTfZeo=";
+  cargoHash = "sha256-V7Czo5UUTWiha7I/A8tznsqcDSZGqyDKkYamxDLJZDc=";

  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgramArg = "--version";
--- a/pkgs/by-name/dw/dwproton-bin/package.nix
+++ b/pkgs/by-name/dw/dwproton-bin/package.nix
@@ -1,5 +1,6 @@
 {
  lib,
+  stdenvNoCC,
  fetchzip,
  writeScript,
  proton-ge-bin,
@@ -9,27 +10,30 @@
 proton-ge-bin.overrideAttrs (
  finalAttrs: _: {
    inherit steamDisplayName;
+    inherit (finalAttrs.passthru.variants.${stdenvNoCC.hostPlatform.system}) src toolName;

    pname = "dwproton-bin";
    version = "dwproton-11.0-12";

-    src = fetchzip {
-      url = "https://dawn.wine/dawn-winery/dwproton/releases/download/${finalAttrs.version}/${finalAttrs.version}-x86_64.tar.xz";
-      hash = "sha256-NGyrXQcA+k87SnowFd41uq49luI32fZENTwFTma7NpI=";
+    passthru = {
+      variants = {
+        "x86_64-linux" = {
+          toolName = "${finalAttrs.version}-x86_64";
+          src = fetchzip {
+            url = "https://dawn.wine/dawn-winery/dwproton/releases/download/${finalAttrs.version}/${finalAttrs.version}-x86_64.tar.xz";
+            hash = "sha256-NGyrXQcA+k87SnowFd41uq49luI32fZENTwFTma7NpI=";
+          };
+        };
+      };
+
+      updateScript = writeScript "update-dwproton" ''
+        #!/usr/bin/env nix-shell
+        #!nix-shell -i bash -p curl jq common-updater-scripts
+        version=$(curl -sL "https://dawn.wine/api/v1/repos/dawn-winery/dwproton/tags?page=1\&limit=1" | jq -r .[0].name)
+        update-source-version dwproton-bin "$version"
+      '';
    };

-    preFixup = ''
-      substituteInPlace "$steamcompattool/compatibilitytool.vdf" \
-        --replace-fail "${finalAttrs.version}" "${steamDisplayName}"
-    '';
-
-    passthru.updateScript = writeScript "update-dwproton" ''
-      #!/usr/bin/env nix-shell
-      #!nix-shell -i bash -p curl jq common-updater-scripts
-      version=$(curl -sL "https://dawn.wine/api/v1/repos/dawn-winery/dwproton/tags?page=1\&limit=1" | jq -r .[0].name)
-      update-source-version dwproton-bin "$version"
-    '';
-
    meta = {
      description = ''
        Dawn Winery's custom Proton fork with fixes for various games.
--- a/pkgs/by-name/eu/euphonica/package.nix
+++ b/pkgs/by-name/eu/euphonica/package.nix
@@ -23,6 +23,9 @@
  desktop-file-utils,
  libxml2,
  libsecret,
+  gnome,
+  librsvg,
+  webp-pixbuf-loader,
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -51,6 +54,20 @@ stdenv.mkDerivation (finalAttrs: {

  mesonBuildType = "release";

+  # Euphonica caches album art as WebP, and gdk-pixbuf's default loaders.cache
+  # doesn't include a WebP loader, causing covers to fail to load repeatedly.
+  # https://github.com/NixOS/nixpkgs/issues/557510
+  postInstall = ''
+    export GDK_PIXBUF_MODULE_FILE="${
+      gnome._gdkPixbufCacheBuilder_DO_NOT_USE {
+        extraLoaders = [
+          librsvg
+          webp-pixbuf-loader
+        ];
+      }
+    }"
+  '';
+
  nativeBuildInputs = [
    cargo
    meson
--- a/pkgs/by-name/fa/fairywren/package.nix
+++ b/pkgs/by-name/fa/fairywren/package.nix
@@ -22,13 +22,13 @@ lib.checkListOfEnum "${pname}: colorVariants" colorVariantList colorVariants
  stdenvNoCC.mkDerivation
  {
    inherit pname;
-    version = "0-unstable-2026-08-21";
+    version = "0-unstable-2026-08-24";

    src = fetchFromGitLab {
      owner = "FreshDoctor";
      repo = "FairyWren-Icons";
-      rev = "2c392591baf49fc27b964a00d96f3c7fd240dc1f";
-      hash = "sha256-zuWa6QkwiLUZg2n0oqKB6RM3oXOliWL/w72hWXvcqwU=";
+      rev = "03779cda0f6e8cd9f9a71e9e0f0984363d901358";
+      hash = "sha256-TbDQKkuz8BpeW2zcOCRw0SDH1zZAWpyHoENEWdLWlt0=";
    };

    propagatedBuildInputs = [
--- a/pkgs/by-name/fc/fcitx5-areca/package.nix
+++ b/pkgs/by-name/fc/fcitx5-areca/package.nix
@@ -0,0 +1,60 @@
+{
+  lib,
+  stdenv,
+  cmake,
+  fcitx5,
+  fetchFromGitHub,
+  go,
+  pkg-config,
+  ninja,
+  nix-update-script,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "fcitx5-areca";
+  version = "4.0.3";
+
+  src = fetchFromGitHub {
+    owner = "xhkzeroone";
+    repo = "ArecaIME";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-tjNKRU3yTIOGxkpE2RSuTa7lLZtQvFcUQ0ELCQyinVc=";
+    fetchSubmodules = true;
+  };
+
+  strictDeps = true;
+
+  __structuredAttrs = true;
+
+  nativeBuildInputs = [
+    cmake
+    go
+    ninja
+    pkg-config
+  ];
+
+  buildInputs = [
+    fcitx5
+  ];
+
+  preConfigure = ''
+    export GOCACHE=$TMPDIR/go-cache
+    export GOPATH=$TMPDIR/go
+    export GOPROXY=off
+  '';
+
+  cmakeFlags = [
+    "-DCMAKE_BUILD_TYPE=Release"
+  ];
+
+  doCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Vietnamese input method addon for Fcitx5";
+    homepage = "https://github.com/xhkzeroone/ArecaIME";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ justanoobcoder ];
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/fe/fetch/package.nix
+++ b/pkgs/by-name/fe/fetch/package.nix
@@ -10,7 +10,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fetch";
-  version = "2.1.0";
+  version = "2.3.0";
  __structuredAttrs = true;
  strictDeps = true;

@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "areofyl";
    repo = "fetch";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-9ixx7XJcY4ktcN/lUfjvFljvHIEO2ktOebeGgL0ulHg=";
+    hash = "sha256-YEHvV07d02SzYO+lGT0Q+NkVoQNqxapBZfh44NOf/cw=";
  };

  makeFlags = [ "PREFIX=${placeholder "out"}" ];
@@ -38,8 +38,11 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://github.com/areofyl/fetch";
    changelog = "https://github.com/areofyl/fetch/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.isc;
-    maintainers = with lib.maintainers; [ ghastrum ];
+    maintainers = with lib.maintainers; [
+      ghastrum
+      samuelskovbakke
+    ];
    mainProgram = "fetch";
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.unix;
  };
 })
--- a/pkgs/by-name/fe/fetchmail/package.nix
+++ b/pkgs/by-name/fe/fetchmail/package.nix
@@ -9,11 +9,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fetchmail";
-  version = "6.6.6";
+  version = "6.6.7";

  src = fetchurl {
    url = "mirror://sourceforge/fetchmail/fetchmail-${finalAttrs.version}.tar.xz";
-    hash = "sha256-2pn4xXPE2eY/STx+JERxJq6iW1O0wHbseSZodOKbGXU=";
+    hash = "sha256-vs6KqqaOAp7tn9Vf/9Ktx91s1elXTVv5Li2SCL2XqIE=";
  };

  buildInputs = [
--- a/pkgs/by-name/fr/frigate/package.nix
+++ b/pkgs/by-name/fr/frigate/package.nix
@@ -6,6 +6,7 @@
  callPackage,
  python313Packages,
  fetchFromGitHub,
+  rustPlatform,
  fetchurl,
  ffmpeg-headless,
  sqlite-vec,
@@ -41,6 +42,30 @@ let
        };
      });

+      # transformers 4.* is not compatible with the latest tokenizers
+      tokenizers = super.tokenizers.overridePythonAttrs (
+        oldAttrs:
+        let
+          version = "0.22.1";
+          src = fetchFromGitHub {
+            owner = "huggingface";
+            repo = "tokenizers";
+            tag = "v${version}";
+            hash = "sha256-1ijP16Fw/dRgNXXX9qEymXNaamZmlNFqbfZee82Qz6c=";
+          };
+          sourceRoot = "${src.name}/bindings/python";
+        in
+        {
+          inherit version src sourceRoot;
+
+          cargoDeps = rustPlatform.fetchCargoVendor {
+            inherit (oldAttrs) pname;
+            inherit version src sourceRoot;
+            hash = "sha256-CKbnFtwsEtJ11Wnn8JFpHd7lnUzQMTwJ1DmmB44qciM=";
+          };
+        }
+      );
+
      huggingface-hub = super.huggingface-hub_0;
      transformers = super.transformers_4;
    }
--- a/pkgs/by-name/g-/g-wrap/package.nix
+++ b/pkgs/by-name/g-/g-wrap/package.nix
@@ -2,7 +2,7 @@
  fetchurl,
  lib,
  stdenv,
-  guile_2_2,
+  guile,
  guile-lib,
  libffi,
  pkg-config,
@@ -18,12 +18,23 @@ stdenv.mkDerivation (finalAttrs: {
    sha256 = "0ak0bha37dfpj9kmyw1r8fj8nva639aw5xr66wr5gd3l1rqf5xhg";
  };

+  # https://lists.gnu.org/r/guix-patches/2022-11/msg01596.html
+  postPatch = ''
+    substituteInPlace configure \
+      --replace-fail "2.2 2.0" "3.0 2.2 2.0"
+    substituteInPlace guile/g-wrap/guile-runtime.c \
+      --replace-fail "scm_class_top" 'scm_c_public_ref ("oop goops", "<top>")' \
+      --replace-fail "scm_class_method" 'scm_c_public_ref ("oop goops", "<method>")' \
+      --replace-fail "scm_class_generic" 'scm_c_public_ref ("oop goops", "<generic>")' \
+      --replace-fail "scm_memory_error(func_name)" "scm_report_out_of_memory ()"
+  '';
+
  nativeBuildInputs = [ pkg-config ];

  # Note: Glib support is optional, but it's quite useful (e.g., it's used by
  # Guile-GNOME).
  buildInputs = [
-    guile_2_2
+    guile
    glib
    guile-lib
  ];
--- a/pkgs/by-name/gi/gitlab-ci-local/package.nix
+++ b/pkgs/by-name/gi/gitlab-ci-local/package.nix
@@ -15,13 +15,13 @@

 let
  pname = "gitlab-ci-local";
-  version = "4.74.0";
+  version = "4.75.1";

  src = fetchFromGitHub {
    owner = "firecow";
    repo = "gitlab-ci-local";
    rev = version;
-    hash = "sha256-G1rtcMQ8My6whu3VLLwRc7TE42RzpBqzn3I1lK/Ts4M=";
+    hash = "sha256-2zCfLLOtFTsiW1TGujOa9JGOetlVTzY477pUa2wt2qw=";
  };

  node_modules = stdenv.mkDerivation {
@@ -57,7 +57,7 @@ let
      runHook postInstall
    '';

-    outputHash = "sha256-OS+HgVvaqy6NQ5pC4BbZwSAcYpGU2ka5VFLtEIQ9NyM=";
+    outputHash = "sha256-AqO7FeCtd5INzASBjMgSXYI1WPjqtk3Uipd5TjocYX4=";

    outputHashAlgo = "sha256";
    outputHashMode = "recursive";
--- a/pkgs/by-name/gl/glab-tui/package.nix
+++ b/pkgs/by-name/gl/glab-tui/package.nix
@@ -11,17 +11,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "glab-tui";
-  version = "0.8.4";
+  version = "0.9.0";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "rcieri";
    repo = "glab-tui";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-SJpIYrtYirbk72/XZsQ1DqicGzovrUqp99KZ+/xD01I=";
+    hash = "sha256-3Zke2A9OcnZxaFBE/u6GJ73TTAVWV8TakIwnRo6V4+Q=";
  };

-  cargoHash = "sha256-IcScQ4vY5Q1BusNSgpwF2EiykACBlFr6GZK3t0V8fV4=";
+  cargoHash = "sha256-8L8SD0wgaLATcWngzuUD67Nd5+7vt6fTTZk/2BDnkJw=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/gp/gpredict/package.nix
+++ b/pkgs/by-name/gp/gpredict/package.nix
@@ -14,13 +14,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gpredict";
-  version = "2.5.1";
+  version = "2.6";

  src = fetchFromGitHub {
    owner = "csete";
    repo = "gpredict";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-lP+QakQ+uTgBY8NNEC7DwQifh3Zi0ZKbarxNGB4onq0=";
+    hash = "sha256-OlE0NycV/4h6LA+BnRxfBo0+9yWMM4qEHrs+mVx04do=";
  };

  strictDeps = true;
--- a/pkgs/by-name/gr/grafx2/package.nix
+++ b/pkgs/by-name/gr/grafx2/package.nix
@@ -9,6 +9,7 @@
  fontconfig,
  libpng,
  libtiff,
+  libx11,
  lua5,
  pkg-config,
  zlib,
@@ -31,12 +32,13 @@ stdenv.mkDerivation (finalAttrs: {

  postPatch = ''
    substituteInPlace misc/unix/grafx2.desktop \
-      --replace "Exec=grafx2" "Exec=grafx2-sdl"
+      --replace-fail "Exec=grafx2" "Exec=grafx2-sdl"
  '';

  nativeBuildInputs = [
    installShellFiles
    pkg-config
+    SDL # for sdl-config
  ];

  buildInputs = [
@@ -46,11 +48,13 @@ stdenv.mkDerivation (finalAttrs: {
    fontconfig
    libpng
    libtiff
+    libx11
    lua5
    zlib
  ];

-  strictDeps = false; # Why??
+  strictDeps = true;
+  __structuredAttrs = true;

  makeFlags = [ "--directory=src" ];
  installFlags = [
--- a/pkgs/by-name/gu/guile-xcb/package.nix
+++ b/pkgs/by-name/gu/guile-xcb/package.nix
@@ -3,7 +3,7 @@
  stdenv,
  fetchFromGitHub,
  autoreconfHook,
-  guile_2_2,
+  guile,
  pkg-config,
  texinfo,
 }:
@@ -22,19 +22,24 @@ stdenv.mkDerivation {
    hash = "sha256-zbIsEIPwNJ1YXMZTDw2DfzufC+IZWfcWgZHbuv7bhJs=";
  };

+  postPatch = ''
+    substituteInPlace configure.ac \
+      --replace-fail "2.0 2.2" "2.0 2.2 3.0"
+  '';
+
  nativeBuildInputs = [
    autoreconfHook
-    guile_2_2
+    guile
    pkg-config
    texinfo
  ];
  buildInputs = [
-    guile_2_2
+    guile
  ];

  configureFlags = [
-    "--with-guile-site-dir=$(out)/${guile_2_2.siteDir}"
-    "--with-guile-site-ccache-dir=$(out)/${guile_2_2.siteCcacheDir}"
+    "--with-guile-site-dir=$(out)/${guile.siteDir}"
+    "--with-guile-site-ccache-dir=$(out)/${guile.siteCcacheDir}"
  ];

  makeFlags = [
@@ -46,6 +51,6 @@ stdenv.mkDerivation {
    description = "XCB bindings for Guile";
    license = lib.licenses.gpl3Plus;
    maintainers = [ ];
-    platforms = guile_2_2.meta.platforms;
+    platforms = guile.meta.platforms;
  };
 }
--- a/pkgs/by-name/me/melos/package.nix
+++ b/pkgs/by-name/me/melos/package.nix
@@ -5,12 +5,12 @@
 }:
 buildDartApplication (finalAttrs: {
  pname = "melos";
-  version = "8.2.2";
+  version = "8.3.0";
  src = fetchFromGitHub {
    owner = "invertase";
    repo = "melos";
    tag = "melos-v${finalAttrs.version}";
-    hash = "sha256-BIRk1VX8e3CEbnv5S55DsNIFWsGvSVvq53k0cKtqGKE=";
+    hash = "sha256-YqXRMobeYV5Bum8HhSBZe4mlCJw1RX7K8+4bLa++zUo=";
  };

  patches = [
--- a/pkgs/by-name/me/melos/pubspec.lock.json
+++ b/pkgs/by-name/me/melos/pubspec.lock.json
@@ -4,21 +4,21 @@
      "dependency": "transitive",
      "description": {
        "name": "_fe_analyzer_shared",
-        "sha256": "1b0e6a07425a3e460666e88bf1c949ccc7bb0116ad562ce94a1eca60fe820725",
+        "sha256": "9a3386eea899815698dd55995277cf7cb8572ee52b399a6edfb7ae2b50e5fc19",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "103.0.0"
+      "version": "105.0.0"
    },
    "analyzer": {
      "dependency": "transitive",
      "description": {
        "name": "analyzer",
-        "sha256": "61c04d0c1bfed555c681ea079519933f071a5a026578ff73c4ff0df2d3462e5e",
+        "sha256": "62993bed6eadbe9596c5c20d5c167e7bc563c5fe266657a04ddeb93bdb84f4c9",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "13.3.0"
+      "version": "14.1.0"
    },
    "ansi_styles": {
      "dependency": "transitive",
@@ -64,11 +64,11 @@
      "dependency": "transitive",
      "description": {
        "name": "build",
-        "sha256": "59f99162d27dff3620f1d21165ce802237eb4556fed563c0902403f8207a7c00",
+        "sha256": "b94f5da9ed3d081fd4ecc426c260998b5f4f4eb2f6d89b7e5472edef0b2b2a1b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.0.8"
+      "version": "4.0.10"
    },
    "built_collection": {
      "dependency": "transitive",
@@ -84,11 +84,11 @@
      "dependency": "transitive",
      "description": {
        "name": "built_value",
-        "sha256": "34e4067d30ce212937df995f03b69992eea683539ceeac7f679a1f1eba055b56",
+        "sha256": "31b24be6615ec7fcf70b3aa5a7469fe35826485e639a16dd7eb83ba30e4cc6a8",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "8.12.6"
+      "version": "8.12.7"
    },
    "charcode": {
      "dependency": "transitive",
@@ -134,11 +134,11 @@
      "dependency": "transitive",
      "description": {
        "name": "cli_util",
-        "sha256": "5909d2c6b66817222779e1eedc19e0e28b76d1df7bd9856a4792ccb9881df358",
+        "sha256": "71e43f1976c3eae2d9468a5b4d6600bf8cae61508b87f27fa1799228935d48ab",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.5.1"
+      "version": "0.5.2"
    },
    "code_builder": {
      "dependency": "transitive",
@@ -354,11 +354,11 @@
      "dependency": "transitive",
      "description": {
        "name": "mockito",
-        "sha256": "c8d040d754367108fbe482dcb79dd72b8fe60ac6727abd15b4783c5560297ee6",
+        "sha256": "6c1970612452260366064d4df80fdb3eece1ec5e52610ae34a0e51f2f3d8e64f",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.7.0"
+      "version": "5.8.1"
    },
    "mustache_template": {
      "dependency": "transitive",
@@ -384,11 +384,11 @@
      "dependency": "transitive",
      "description": {
        "name": "package_config",
-        "sha256": "f096c55ebb7deb7e384101542bfba8c52696c1b56fca2eb62827989ef2353bbc",
+        "sha256": "ffcf4cf3d6c0b74ac43708d9f56625506e8a68aa935abe9d267a7330f320eb5d",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.2.0"
+      "version": "3.0.0"
    },
    "path": {
      "dependency": "direct dev",
@@ -524,11 +524,11 @@
      "dependency": "transitive",
      "description": {
        "name": "source_gen",
-        "sha256": "ec37cc0e6694374cbef59ed79685572c870a54ede6fa30a3e420feb3adffea02",
+        "sha256": "11b6047da8e4eb6c643ccac3d0fda3f9c9e11651695f7da24a85ade8aff15a44",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.2.3"
+      "version": "4.3.0"
    },
    "source_map_stack_trace": {
      "dependency": "transitive",
@@ -544,11 +544,11 @@
      "dependency": "transitive",
      "description": {
        "name": "source_maps",
-        "sha256": "190222579a448b03896e0ca6eca5998fa810fda630c1d65e2f78b3f638f54812",
+        "sha256": "14c2945847669b44089bb1222f66873d7ff7103c58911917f2a63c5a62327898",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.10.13"
+      "version": "0.10.14"
    },
    "source_span": {
      "dependency": "transitive",
@@ -644,11 +644,11 @@
      "dependency": "transitive",
      "description": {
        "name": "vm_service",
-        "sha256": "0016aef94fc66495ac78af5859181e3f3bf2026bd8eecc72b9565601e19ab360",
+        "sha256": "5f37239c4851efcef929cea7824e76df7f2f0970aef85d66bbc430afa40e72f0",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "15.2.0"
+      "version": "15.3.0"
    },
    "watcher": {
      "dependency": "transitive",
--- a/pkgs/by-name/mi/mistral-vibe/package.nix
+++ b/pkgs/by-name/mi/mistral-vibe/package.nix
@@ -13,7 +13,7 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "mistral-vibe";
-  version = "2.24.3";
+  version = "2.24.5";
  pyproject = true;
  __structuredAttrs = true;

@@ -21,7 +21,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    owner = "mistralai";
    repo = "mistral-vibe";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gDQl5UjSOyXg3l9yD1CXhfrSbUWUDYoquVvc2K4nv14=";
+    hash = "sha256-SCajBa+3xVnW02GzfRLICBgFBMHdJra2gjIkQW/A48E=";
  };

  build-system = with python3Packages; [
@@ -101,6 +101,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
      pyyaml
      referencing
      requests
+      rfc8785
      rich
      rpds-py
      sentry-sdk
@@ -150,6 +151,9 @@ python3Packages.buildPythonApplication (finalAttrs: {
  versionCheckKeepEnvironment = [ "HOME" ];

  disabledTests = [
+    # AssertionError: assert <MCPSourceStatus.UNAVAILABLE: 'unavailable'> is <MCPSourceStatus.ENABLED: 'enabled'>
+    "test_mcp_catalog_read_refresh_toggle_remove_and_compatibility_aliases"
+
    # vibe is spawned in a sub-process and fails to import `mcp`
    # ModuleNotFoundError: No module named 'mcp'
    "test_aclose_terminates_real_subprocess"
--- a/pkgs/by-name/mt/mtail/package.nix
+++ b/pkgs/by-name/mt/mtail/package.nix
@@ -8,18 +8,18 @@

 buildGoModule (finalAttrs: {
  pname = "mtail";
-  version = "3.4.8";
+  version = "3.4.9";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "jaqx0r";
    repo = "mtail";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-zkINXj54FwVaBRdX3oBBq8LsBB1rfJcH+LnpO3JWcCQ=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-0bUC79nP2MpjbeDMyBe19Li6BqCFegNNPqtuv1DssII=";
  };

  proxyVendor = true;
-  vendorHash = "sha256-F27N5KOyCyOHPdvOXWxzcuAupLfMGPGmkBlYc06X7Zg=";
+  vendorHash = "sha256-564euO/Ns7Mju3pFv4wtzxJhblPD3/ThSK62JsZH7VA=";

  nativeBuildInputs = [
    gotools # goyacc
--- a/pkgs/by-name/ni/niks3/package.nix
+++ b/pkgs/by-name/ni/niks3/package.nix
@@ -9,14 +9,14 @@

 buildGoModule (finalAttrs: {
  pname = "niks3";
-  version = "1.10.0";
+  version = "1.10.1";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "Mic92";
    repo = "niks3";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7BlXxge4xC20vV16ze4RA0l+6xqPw59px79sO+/aGeg=";
+    hash = "sha256-0SVSQYWwiSIZhkXa/SSQcU23DHXVM5CuNodBUjJuGUs=";
  };

  vendorHash = "sha256-lql+r9+hy7XX9/aSezwweKSU/MphxvIkaT0gHf59fsc=";
--- a/pkgs/by-name/pa/paperless-ngx/frontend.nix
+++ b/pkgs/by-name/pa/paperless-ngx/frontend.nix
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
    inherit pnpm;
    inherit (finalAttrs) pname version src;
    fetcherVersion = 4;
-    hash = "sha256-Q7JA5fDtdLiuhzwISBRyUtP541jtdsNpKMrEfbvy+rg=";
+    hash = "sha256-14RMkwDGsFLBIUd7ZW0HI9mM5VunZi1n2P+JBU3oZXY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/pa/paperless-ngx/package.nix
+++ b/pkgs/by-name/pa/paperless-ngx/package.nix
@@ -70,14 +70,14 @@ let
 in
 pythonPackages.buildPythonApplication (finalAttrs: {
  pname = "paperless-ngx";
-  version = "3.0.5";
+  version = "3.1.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "paperless-ngx";
    repo = "paperless-ngx";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ByITplmCoZNt38gZXDc2DPlo5B+bjDpxsfby0TbWB5M=";
+    hash = "sha256-SipdhPxnGpCM/U0K5O59fdaKUuMLWiaXRE+XS3lpb/c=";
  };

  postPatch = ''
@@ -98,9 +98,8 @@ pythonPackages.buildPythonApplication (finalAttrs: {
    "django-filter"
    "drf-spectacular-sidecar"
    "redis"
+    "regex"
    "torch"
-    "zxing-cpp"
-    "zxing-cpp"
    # requested by maintainer
    "imap-tools"
    "ocrmypdf"
--- a/pkgs/by-name/pr/proton-ge-bin/package.nix
+++ b/pkgs/by-name/pr/proton-ge-bin/package.nix
@@ -3,18 +3,21 @@
  stdenvNoCC,
  fetchzip,
  writeScript,
+  steamDisplayName ? null,
+}:
+assert
+  steamDisplayName == null
+  || throw "proton-ge-bin: The `steamDisplayName` interface has been changed to an attribute, which is overridable using `overrideAttrs`.";
+
+stdenvNoCC.mkDerivation (finalAttrs: {
  # Can be overridden to alter the display name in steam
  # This could be useful if multiple versions should be installed together
-  steamDisplayName ? "GE-Proton",
-}:
-stdenvNoCC.mkDerivation (finalAttrs: {
-  pname = "proton-ge-bin";
-  version = "GE-Proton11-3";
+  steamDisplayName = "GE-Proton";

-  src = fetchzip {
-    url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}.tar.gz";
-    hash = "sha256-RiCmnUKeZRhPUCgm7fsROKFkAl37+/tYkA47tQtkIF4=";
-  };
+  pname = "proton-ge-bin";
+  version = "GE-Proton11-5";
+
+  inherit (finalAttrs.passthru.variants.${stdenvNoCC.hostPlatform.system}) src toolName;

  dontUnpack = true;
  dontConfigure = true;
@@ -42,24 +45,45 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  preFixup = ''
    substituteInPlace "$steamcompattool/compatibilitytool.vdf" \
-      --replace-fail "${finalAttrs.version}" "${steamDisplayName}"
+      --replace-fail "$toolName" "$steamDisplayName"
  '';

-  /*
-    We use the created releases, and not the tags, for the update script as nix-update loads releases.atom
-    that contains both. Sometimes upstream pushes the tags but the GitHub releases don't get created due to
-    CI errors. Last time this happened was on 8-33, where a tag was created but no releases were created.
-    As of 2024-03-13, there have been no announcements indicating that the CI has been fixed, and thus
-    we avoid nix-update-script and use our own update script instead.
-    See: <https://github.com/NixOS/nixpkgs/pull/294532#issuecomment-1987359650>
-  */
-  passthru.updateScript = writeScript "update-proton-ge" ''
-    #!/usr/bin/env nix-shell
-    #!nix-shell -i bash -p curl jq common-updater-scripts
-    repo="https://api.github.com/repos/GloriousEggroll/proton-ge-custom/releases"
-    version="$(curl -sL "$repo" | jq 'map(select(.prerelease == false)) | .[0].tag_name' --raw-output)"
-    update-source-version proton-ge-bin "$version"
-  '';
+  passthru = {
+    variants = {
+      "x86_64-linux" = {
+        toolName = "${finalAttrs.version}-x86_64";
+        src = fetchzip {
+          url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-x86_64.tar.gz";
+          hash = "sha256-Sbyi5zXMhPIKSotvL5LEZ2dbDoLpXRcCyuY9TsnBnus=";
+        };
+      };
+      "aarch64-linux" = {
+        toolName = "${finalAttrs.version}-aarch64";
+        src = fetchzip {
+          url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-aarch64.tar.gz";
+          hash = "sha256-fS4N2ip8IvhMfrJsfHnrq+zA/41qJd6kbLQ0+5lZ5uE=";
+        };
+      };
+    };
+
+    /*
+      We use the created releases, and not the tags, for the update script as nix-update loads releases.atom
+      that contains both. Sometimes upstream pushes the tags but the GitHub releases don't get created due to
+      CI errors. Last time this happened was on 8-33, where a tag was created but no releases were created.
+      As of 2024-03-13, there have been no announcements indicating that the CI has been fixed, and thus
+      we avoid nix-update-script and use our own update script instead.
+      See: <https://github.com/NixOS/nixpkgs/pull/294532#issuecomment-1987359650>
+    */
+    updateScript = writeScript "update-proton-ge" ''
+      #!/usr/bin/env nix-shell
+      #!nix-shell -i bash -p curl jq common-updater-scripts
+      repo="https://api.github.com/repos/GloriousEggroll/proton-ge-custom/releases"
+      version="$(curl -sL "$repo" | jq 'map(select(.prerelease == false)) | .[0].tag_name' --raw-output)"
+      for platform in ${lib.escapeShellArgs finalAttrs.meta.platforms}; do
+        update-source-version proton-ge-bin "$version" --ignore-same-version --source-key="variants.$platform.src"
+      done
+    '';
+  };

  meta = {
    description = ''
@@ -75,7 +99,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
      Scrumplex
      shawn8901
    ];
-    platforms = [ "x86_64-linux" ];
+    platforms = builtins.attrNames finalAttrs.passthru.variants;
    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
  };
 })
--- a/pkgs/by-name/pr/protonplus/package.nix
+++ b/pkgs/by-name/pr/protonplus/package.nix
@@ -17,16 +17,19 @@
  libarchive,
  libgee,
  libsoup_3,
+  sdl3,
+  libnotify,
+  appstream,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "protonplus";
-  version = "0.5.21";
+  version = "0.6.5";

  src = fetchFromGitHub {
    owner = "Vysp3r";
    repo = "protonplus";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-elc2hDAiMT15bAZW4z55K9EsTRmHeU3YBccTx2GMTIE=";
+    hash = "sha256-9KHtPG/gTtNjYCuStpb4tO3BiB09cSsTk7PpnX8o7qI=";
  };

  nativeBuildInputs = [
@@ -47,6 +50,9 @@ stdenv.mkDerivation (finalAttrs: {
    libarchive
    libgee
    libsoup_3
+    sdl3
+    libnotify
+    appstream
  ];

  passthru = {
--- a/pkgs/by-name/re/resterm/package.nix
+++ b/pkgs/by-name/re/resterm/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "resterm";
-  version = "1.2.4";
+  version = "1.5.0";

  src = fetchFromGitHub {
    owner = "unkn0wn-root";
    repo = "resterm";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vp1/yWDqx8fQp4NifjENr/x8e0TVSRlLYv7TshfwC2Y=";
+    hash = "sha256-rK6GFQKtl25TGpG7cqLHMice34/w05oxeG502W876BM=";
  };

-  vendorHash = "sha256-K6edyYLkVQwEZBAfRwgckUJI8dmo/ZxFRjEkExtyLxY=";
+  vendorHash = "sha256-My77YKJLMMnTGsaW1IoMF0nT77yN+AtIJSC7nMeP2ic=";

  # modernc.org/libc (via modernc.org/sqlite) tries to read /etc/protocols
  modPostBuild = ''
--- a/pkgs/by-name/sa/sampo/package.nix
+++ b/pkgs/by-name/sa/sampo/package.nix
@@ -9,17 +9,17 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "sampo";
-  version = "0.20.0";
+  version = "0.21.0";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "bruits";
    repo = "sampo";
    tag = "cargo-sampo-v${finalAttrs.version}";
-    hash = "sha256-cs/0+IEqVQAgg+OTnKB/Ava4J5zPs+Lp/bYNnPgAuwI=";
+    hash = "sha256-UVag/rMPaUL8cqgnVucpUbfBcog01PKZwd/Utz97Qt0=";
  };

-  cargoHash = "sha256-pfg+Oa7sGyzBd/vCK5IEiCt2g6lC5V9WeSjpCnE+/n4=";
+  cargoHash = "sha256-eKIgL4VlhC9BBuPnro9GMi6mQvDHDGsQNyGRMSCQkBw=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/sc/scenic-view/deps.json
+++ b/pkgs/by-name/sc/scenic-view/deps.json
@@ -2,119 +2,33 @@
 "!comment": "This is a nixpkgs Gradle dependency lockfile. For more details, refer to the Gradle section in the nixpkgs manual.",
 "!version": 1,
 "https://plugins.gradle.org/m2": {
-  "com/github/javaparser#javaparser-core/3.6.23": {
-   "jar": "sha256-Jd6Y4JulJ3cBiHFxQWx1BmsMkK4QyER5wIy62OwC2ko=",
-   "pom": "sha256-uS4cfUmFkaRUByoI4abESgjvT5YyH772jlPnQagyO84="
-  },
-  "com/github/javaparser#javaparser-parent/3.6.23": {
-   "pom": "sha256-RrplfMwXfcIrmXLTDq3vB+pK2Y7C2ZJ4mi2pyMaOEMY="
-  },
-  "com/github/javaparser#javaparser-symbol-solver-core/3.6.23": {
-   "jar": "sha256-xgZHY43ddl13bN0jDhzWlmT5BYVrnTUgHcpZFcHhhLM=",
-   "pom": "sha256-IxlhRqtmo5sFxOIsoQ3rcpbBvmPuI5Vpax21wO7ayiQ="
-  },
-  "com/github/javaparser#javaparser-symbol-solver-logic/3.6.23": {
-   "jar": "sha256-iUKL5AoLtSXiC5BwTUzmhE/Min2ePxCaSmIckIICKSo=",
-   "pom": "sha256-+c70XJwzh7J95a0unepGR18S5nLrMTuo2hl9n5KTuUs="
-  },
-  "com/github/javaparser#javaparser-symbol-solver-model/3.6.23": {
-   "jar": "sha256-Oyot02mnKEgZJIkaRC7gHztEFr9a84kGv+CXAEEHbRs=",
-   "pom": "sha256-l9XodywQqD1zerqsIXaufDIYN2FzS1Nshd66kOdsfV0="
-  },
  "com/google/code/findbugs#jsr305/3.0.2": {
   "jar": "sha256-dmrSoHg/JoeWLIrXTO7MOKKLn3Ki0IXuQ4t4E+ko0Mc=",
   "pom": "sha256-GYidvfGyVLJgGl7mRbgUepdGRIgil2hMeYr+XWPXjf4="
  },
-  "com/google/errorprone#error_prone_annotations/2.0.18": {
-   "jar": "sha256-y0z62HC/VjoHGZ8+vqV2Pw3sRA/NoLMYZAsf6qeIZWs=",
-   "pom": "sha256-kUQScZLW9hLCNmgl3OrrI7DVMTC4Pgvx/+EH0UcKhIc="
+  "com/google/gradle#osdetector-gradle-plugin/1.7.3": {
+   "jar": "sha256-a0aS+ROiGx+2Axae54uo8+SrKvnXYq+cqIt5EmwcCtE=",
+   "pom": "sha256-hGDJUBJ8o1mHZhYeOLT/jWO01p+4MQoW4As1E1ABDBE="
  },
-  "com/google/errorprone#error_prone_parent/2.0.18": {
-   "pom": "sha256-zxSZVSebB9TxHoF5hcEWSmnpMNc9t0QbQ6bvU7vShsQ="
+  "kr/motd/maven#os-maven-plugin/1.7.1": {
+   "jar": "sha256-9Hru+Ggh5SsrGHWJeL0EXwPXIikuMudHCCEixiKJUuA=",
+   "pom": "sha256-S3WABEIrljPdMY8p54Tx0YC9ilkgzVCvGTCGH21qVHY="
  },
-  "com/google/gradle#osdetector-gradle-plugin/1.6.1": {
-   "jar": "sha256-N/Sm2S8lh2Ls9i/XcYZSK77LXaGyDevHj4NhuFbfDac=",
-   "pom": "sha256-i4MRE6lOCXvEnh7KTTJ/0iNAVwRU1Ey7ccJSuZ5sTD8="
+  "org/beryx#badass-jlink-plugin/3.0.1": {
+   "jar": "sha256-dgjXY18yKiLff//d+IiBuTngqBDuUmoqTFPFN7/WT4Y=",
+   "module": "sha256-b3ksJpweGUNdCWcOtY12cyOFm2Hpt9YcZLPMdHK8Qgo=",
+   "pom": "sha256-OwPpihIF17Spe7jcvlkCs6AW4D+FACDzkjuIWomh2zM="
  },
-  "com/google/guava#guava-parent/23.4-jre": {
-   "pom": "sha256-EO8XbFPNj5Wd7Wr3QFFumbX8IKogHjqRmLuSGUpqOTQ="
+  "org/beryx/jlink#org.beryx.jlink.gradle.plugin/3.0.1": {
+   "pom": "sha256-MRg/jaYel0ILAf4NarvkrGfgYY5PxAEyfBu8HvoBCqw="
  },
-  "com/google/guava#guava/23.4-jre": {
-   "jar": "sha256-JmKjPwn+urUCPdv1J4DLjSpuDEmiTbgJStwOlEgBqBA=",
-   "pom": "sha256-Iuu7g72VwApr6oeMtbm7imAuoSpmRnsM+k+XtBTqXQ4="
+  "org/openjfx#javafx-plugin/0.1.0": {
+   "jar": "sha256-Xq7sB5m0QGRrDKTP2iGaMttr4rpXktAyoNpKOlw4j6s=",
+   "module": "sha256-rf+3RA0kntF8BJOD1nBp+UU7F3gncMAFtoKkNBbYNmE=",
+   "pom": "sha256-NMjfVSfrWjXl8AmjzeH3oInEzkoOclgC8uy+UDu9PLY="
  },
-  "com/google/j2objc#j2objc-annotations/1.1": {
-   "jar": "sha256-KZSn63jycQvT07+2ObLJTiGc7awNTQhNUW54wW3d7PY=",
-   "pom": "sha256-8MmMVx6Tp8tN0Y3w+jCPCWPnoGIKwtQkTmHnCdA61r4="
-  },
-  "kr/motd/maven#os-maven-plugin/1.6.0": {
-   "jar": "sha256-HNnWwIn5ZnEbx9lWSXaz/+ZRAmFqUkdoHMIwlc+90aw=",
-   "pom": "sha256-zRUfUQeKRnd7UPgoO4gqis4MCLu+F0RrP56mPIEi/Kg="
-  },
-  "org/beryx#badass-jlink-plugin/2.6.5": {
-   "jar": "sha256-WXeNmHfVtqkDyRN2ZfzzSoHFprSdPDpxt70FDJVSWrA=",
-   "pom": "sha256-ytOd1e29JuGnOxYHCShfkLTAjwmT85n2Qsley3Bs4LQ="
-  },
-  "org/beryx/jlink#org.beryx.jlink.gradle.plugin/2.6.5": {
-   "pom": "sha256-n3jKnoCItgThUQZCBW3b+WsQZ+zn/SZuZwc/y/dsW/Y="
-  },
-  "org/codehaus#codehaus-parent/4": {
-   "pom": "sha256-a4cjfejC4XQM+AYnx/POPhXeGTC7JQxVoeypT6PgFN8="
-  },
-  "org/codehaus/mojo#animal-sniffer-annotations/1.14": {
-   "jar": "sha256-IGgyC9a610TDZzqwSPZ+ML749RiZb6OAAzVWYAZpkF0=",
-   "pom": "sha256-GHnxmgWZHj7ZWRC5ZokzM5awxGeiFdxNH5ABhAS3KiY="
-  },
-  "org/codehaus/mojo#animal-sniffer-parent/1.14": {
-   "pom": "sha256-9RVQoGsUEL1JYssOcd8Lkhpgp+9Hv6nEgloUvnIxbuo="
-  },
-  "org/codehaus/mojo#mojo-parent/34": {
-   "pom": "sha256-Pjldb7xDwJo3dMrIaUzlJzmDBeo/1UktgOJa8n04Kpw="
-  },
-  "org/javamodularity#moduleplugin/1.4.0": {
-   "jar": "sha256-DsRpRPMp5s7qu+4mT39lW3VOz+qXti1zeROvm/cnWkk=",
-   "pom": "sha256-ys6MmZmVjsvuHC00/yZVxHvgOrtlFInDustCNl+e33s="
-  },
-  "org/javassist#javassist/3.23.1-GA": {
-   "jar": "sha256-0rFMCXY1IzdGJPMqCdbjH8sXQIKpet21ri1YC0dP2AY=",
-   "pom": "sha256-TBjLCfVKXn3uusVCUbXsZaXgSuRgZ/Mb3OMzwvDujJk="
-  },
-  "org/openjfx#javafx-plugin/0.0.7": {
-   "jar": "sha256-cMNMLi/MFLDiEkJuYhbX7xktB+i4fw3O8y1drZ+6tK0=",
-   "pom": "sha256-JVTXrl0EsYMJcp5LkHmy8iQKXTfr1GxrC97HZ8q/svk="
-  },
-  "org/openjfx/javafxplugin#org.openjfx.javafxplugin.gradle.plugin/0.0.7": {
-   "pom": "sha256-SybdZ/HqOekf+cyybnONJwR1DlhFYYajVz9QadOIe1U="
-  },
-  "org/ow2#ow2/1.5": {
-   "pom": "sha256-D4obEW52C4/mOJxRuE5LB6cPwRCC1Pk25FO1g91QtDs="
-  },
-  "org/ow2/asm#asm-analysis/7.0": {
-   "jar": "sha256-6YH49lDE2QC7AzZQsY4SL6axYerdX4iXjQh1H3LuhHQ=",
-   "pom": "sha256-xrVEd+nVuuHnrd/y4ky/kqr/L/CP1rwFlsOTPD+twss="
-  },
-  "org/ow2/asm#asm-commons/7.0": {
-   "jar": "sha256-/tNI7wWVjj6EajrAdKEq9feTbvPSHORKYsT6CKdxkn0=",
-   "pom": "sha256-9MaXiGzbSlskcgVKC140Nx6bSOYgvkDD7Ujh9LbVHrQ="
-  },
-  "org/ow2/asm#asm-tree/7.0": {
-   "jar": "sha256-z9egh0+d42qZnBJ/7q37/m4E1Kce6VTXrz2FPwvkimw=",
-   "pom": "sha256-05590S9P9TWgg50ZScOcdkQ1WkRwIgyUt2pcFoxXoGg="
-  },
-  "org/ow2/asm#asm-util/7.0": {
-   "jar": "sha256-dfu8pEDvRj9BwrCrGoCr5n6RCsSG2mCnhjy8tbrn4UU=",
-   "pom": "sha256-4HvOS7VdWgb0wQ2RL8ne6Km5wE7FSbu4208g2zRwb3U="
-  },
-  "org/ow2/asm#asm/7.0": {
-   "jar": "sha256-uI72ZGizyXitDJf9bpCXnlYVW0rGkIm6ekTpqn/+ms8=",
-   "pom": "sha256-g/ZbEIPVzk+Lp/lUXP6f8XgkWJyafMgsOkaVgB5PX2g="
-  },
-  "org/slf4j#slf4j-api/1.7.25": {
-   "jar": "sha256-GMSgCV1cHaa4F1kudnuyPSndL1YK1033X/OWHb3iW3k=",
-   "pom": "sha256-fNnXoLXZPf1GGhSIkbQ1Cc9AOpx/n7SQYNNVTfHIHh4="
-  },
-  "org/slf4j#slf4j-parent/1.7.25": {
-   "pom": "sha256-GPXFISDbA26I1hNviDnIMtB0vdqVx1bG9CkknS21SsY="
+  "org/openjfx/javafxplugin#org.openjfx.javafxplugin.gradle.plugin/0.1.0": {
+   "pom": "sha256-1tASf/Q2PQAXPDV6mByec+/wPDCl0Ohq2CtgVPrvqEE="
  },
  "org/sonatype/oss#oss-parent/7": {
   "pom": "sha256-tR+IZ8kranIkmVV/w6H96ne9+e9XRyL+kM5DailVlFQ="
@@ -124,54 +38,50 @@
  }
 },
 "https://repo.maven.apache.org/maven2/org": {
-  "openjfx#javafx-base/11.0.2": {
-   "jar": "sha256-Hy+IiY9U8aKeK1jKrrChEFBZigdSTyls2a72wAu5PQ8=",
-   "pom": "sha256-F/QWaIULgDukqDp+LZYDm2nwcniLvbqI4J/sgVegMpw="
+  "openjfx#javafx-base/17": {
+   "pom": "sha256-uLgDYSRg1flc6XS9XYRx1G4/aOzteCfdjUSRwDAi9yU="
  },
-  "openjfx#javafx-base/11.0.2/linux": {
-   "jar": "sha256-hMNW8TRL/TqnS1WiOgzgeLTF5qm+iFPajeQV5ez81Bs="
+  "openjfx#javafx-base/17/linux": {
+   "jar": "sha256-JDzahjaTFMNLsQvgAj88mFaCNcpN7UpZ4Hgd1kC8SWI="
  },
-  "openjfx#javafx-controls/11.0.2": {
-   "jar": "sha256-YBBsLPUqfzHsobjQipUs9Lk7Wx2FSSp1XpeggIpp/5o=",
-   "pom": "sha256-WI5hxbroHQl2C2DYz7E7ERtC09RwwKCpnaBqtq/XjQM="
+  "openjfx#javafx-controls/17": {
+   "pom": "sha256-6UfbVFcEn1pKxmiSa2QUtLCRglYerVymiyNSTg4cwD8="
  },
-  "openjfx#javafx-controls/11.0.2/linux": {
-   "jar": "sha256-wXIELPTOd/xon61lWSVrEbmcb7ic5f0bM9/DRLhqCpc="
+  "openjfx#javafx-controls/17/linux": {
+   "jar": "sha256-pa085GMw/aiPjx4/ue8E1kR2O6C2mpXkl66JTjWdrQg="
  },
-  "openjfx#javafx-fxml/11.0.2": {
-   "pom": "sha256-hqY8PXMIR6kmAEQ3YosWH88GXj0vrzSjwTjK4j3FDxg="
+  "openjfx#javafx-fxml/17": {
+   "pom": "sha256-5+IA5aFv3qbIDne2IhWyVMt9thHEy9K9jGtVeLt39oE="
  },
-  "openjfx#javafx-fxml/11.0.2/linux": {
-   "jar": "sha256-IsRLJbxYjfZiPgT6EnuLyCQj8flI6a/ySFr0pokOL5Q="
+  "openjfx#javafx-fxml/17/linux": {
+   "jar": "sha256-pkXtb3SSd3px+3c/IPO1OuIh9U0Fnl3p0dD2cmyam68="
  },
-  "openjfx#javafx-graphics/11.0.2": {
-   "jar": "sha256-3ukAoYanC66CZoRcVrA62aJOaXy1K6PaQhxgSQibNjg=",
-   "pom": "sha256-5O3+os2WNa3JLTqbp81ew6VqsbF+pKJWDRIr+97gU8g="
+  "openjfx#javafx-graphics/17": {
+   "pom": "sha256-3RVlTvq6FiyolcdAxqA7vUEu8XNwyMcOq9j6PTUer+I="
  },
-  "openjfx#javafx-graphics/11.0.2/linux": {
-   "jar": "sha256-+yCVZOUN49jQVdmzzWnUahbT7xjsVRYvwTANFAip1QI="
+  "openjfx#javafx-graphics/17/linux": {
+   "jar": "sha256-YIAnF9iwTwE25rLNS5BGiQBSVml3328MF/dT+0eJ/aY="
  },
-  "openjfx#javafx-media/11.0.2": {
-   "jar": "sha256-buLos8kx27mNmLuVqoIDP9tvQ839Vp5gYT21g0Yp0CU=",
-   "pom": "sha256-ea0fX/vvejwnrd8jvXYICIN23mLl1w/tQRKKMu0f0Ps="
+  "openjfx#javafx-media/17": {
+   "pom": "sha256-s80r/sxGux4+2+1ppm3DUyWwU46jR5V7wBUYZDXLAa8="
  },
-  "openjfx#javafx-media/11.0.2/linux": {
-   "jar": "sha256-SQgWhhxhQ6jpPDBRreX/ZcJ8h5zE0lSZmBQ3RnZDF9Y="
+  "openjfx#javafx-media/17/linux": {
+   "jar": "sha256-TYPnAXlaQMwH/zz0QxR++LbFX92p3I8EPuQNzpgse3w="
  },
-  "openjfx#javafx-swing/11.0.2": {
-   "pom": "sha256-huvlJlgb5jeG3hJxPMFL23wVAwzPacjJ7lluwyUtB7M="
+  "openjfx#javafx-swing/17": {
+   "pom": "sha256-fG8zHceUAoFdyMfTYezsP00JBVexnl2PN3okbRa+ZnI="
  },
-  "openjfx#javafx-swing/11.0.2/linux": {
-   "jar": "sha256-5WLb2tBbKGTo3F75chsMmiyxcxWdpElqJ4K4zR5lsUw="
+  "openjfx#javafx-swing/17/linux": {
+   "jar": "sha256-7EU5M0HdpRk9HsY2QUmPi//BrsapYYSkmGBsxrIUQBg="
  },
-  "openjfx#javafx-web/11.0.2": {
-   "pom": "sha256-VPT4QZplXM2lGzDG+canNTR6h9myctpnwMndXps/UcU="
+  "openjfx#javafx-web/17": {
+   "pom": "sha256-4H1UJycePdRzIi1UXkKn5ufzP+dC9cEVcGtBmfWbL5w="
  },
-  "openjfx#javafx-web/11.0.2/linux": {
-   "jar": "sha256-FWUzbTr1okARbBPkPepcPZpnSWMnuCj6EL9n6unlsa8="
+  "openjfx#javafx-web/17/linux": {
+   "jar": "sha256-u7MXQ1ubYyHlpbO2hiiwSU5wjhUtCAme1a4bQXE+1ZU="
  },
-  "openjfx#javafx/11.0.2": {
-   "pom": "sha256-vGfwPQ2VsXURSpjv/7E+RORq2eOsGe/w6OBjpudnWtg="
+  "openjfx#javafx/17": {
+   "pom": "sha256-Mc+sHCBGlsqDJZzWCcK2kks3dBR+MOM9vEX+kKHnuww="
  }
 }
 }
--- a/pkgs/by-name/sc/scenic-view/package.nix
+++ b/pkgs/by-name/sc/scenic-view/package.nix
@@ -4,7 +4,8 @@
  fetchFromGitHub,
  openjdk,
  openjfx,
-  gradle_7,
+  gradle_8,
+  fetchpatch2,
  makeDesktopItem,
  makeWrapper,
 }:
@@ -26,7 +27,8 @@ let
    sha256 = "1idfh9hxqs4fchr6gvhblhvjqk4mpl4rnpi84vn1l3yb700z7dwy";
  };

-  gradle = gradle_7;
+  # "Deprecated Gradle features were used in this build, making it incompatible with Gradle 9.0."
+  gradle = gradle_8;

  desktopItem = makeDesktopItem {
    name = "scenic-view";
@@ -44,6 +46,17 @@ let
 in
 stdenv.mkDerivation rec {
  inherit pname version src;
+
+  patches = [
+    (fetchpatch2 {
+      url = "https://github.com/JonathanGiles/scenic-view/commit/0f682bba77e9662ce860216987c94e468f5da421.patch?full_index=1";
+      hash = "sha256-ISbKexjpGfS8xaRR4GqJ0J+z8fdv8+n4VCO6/SvLGlw=";
+      excludes = [
+        "*.md"
+      ];
+    })
+  ];
+
  nativeBuildInputs = [
    gradle
    makeWrapper
@@ -71,7 +84,8 @@ stdenv.mkDerivation rec {
  desktopItems = [ desktopItem ];

  meta = {
-    broken = stdenv.hostPlatform.isDarwin;
+    broken =
+      stdenv.hostPlatform.isDarwin || (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64);
    description = "JavaFx application to visualize and modify the scenegraph of running JavaFx applications";
    mainProgram = "scenic-view";
    longDescription = ''
--- a/pkgs/by-name/si/signal-desktop/libsignal-node.nix
+++ b/pkgs/by-name/si/signal-desktop/libsignal-node.nix
@@ -15,23 +15,23 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "libsignal-node";
-  version = "0.99.3";
+  version = "0.100.0";

  src = fetchFromGitHub {
    owner = "signalapp";
    repo = "libsignal";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/DoQZv5tB1q1Zah/sr/pv5bBvM5PQsZH/OWzgkjP0Z4=";
+    hash = "sha256-ATK0wnTbT3b8lFAwXSm5j31LXywCh70iOTgUL6Pfd+Q=";
  };

-  cargoHash = "sha256-WRHlUnQSrJ5VHfeqzTp6x3fKIFlOPtusAkRJRKvdYb8=";
+  cargoHash = "sha256-OuJdAi2TbtpQlXSr7PpLuBqeHYx0l2ax5byoEZ5PGj8=";

  npmRoot = "node";
  npmDeps = fetchNpmDeps {
    name = "${finalAttrs.pname}-npm-deps";
    inherit (finalAttrs) version src;
    sourceRoot = "${finalAttrs.src.name}/${finalAttrs.npmRoot}";
-    hash = "sha256-K/iINhZBBGtquEchcwOniYNz5fNcAux6/eOY8RJUrqA=";
+    hash = "sha256-MCiZpADREPVqqkaLh/lf3vIDQOOyGZ5oWZ/FxaZA+KQ=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -45,13 +45,13 @@ let
  webrtc = callPackage ./webrtc.nix { };
  ringrtc = callPackage ./ringrtc.nix { inherit webrtc; };

-  version = "8.24.0";
+  version = "8.25.0";

  src = fetchFromGitHub {
    owner = "signalapp";
    repo = "Signal-Desktop";
    tag = "v${version}";
-    hash = "sha256-z5Z0ujG2AQvmrrdmJxOAnhi56ISSlGoI4kdMcZMpZzY=";
+    hash = "sha256-eP6EsTUnKgSh1QcAged/rr0Y/9I2P2fJnSQ1666Ddic=";
    # Emoji font files will be added in `postFetch` if `withAppleEmojis` is enabled. They
    # are fetched separately below.
    postFetch = ''
@@ -80,8 +80,11 @@ let
        pnpmWorkspaces
        ;
      inherit pnpm;
+      prePnpmInstall = ''
+        pnpm config set fetch-timeout 300000
+      '';
      fetcherVersion = 4;
-      hash = "sha256-3hwxTcxVzD5as6WcI3batU1DBKNeEDvGRn+lfSjrJBM=";
+      hash = "sha256-y3OVpWiWIUsq4mfjZqar88LCEzu0d2isTT+9DowzTFY=";
    };

    strictDeps = true;
@@ -184,14 +187,17 @@ stdenv.mkDerivation (finalAttrs: {
      patches
      ;
    inherit pnpm;
+    prePnpmInstall = ''
+      pnpm config set fetch-timeout 300000
+    '';
    fetcherVersion = 4;
-    hash = "sha256-3hwxTcxVzD5as6WcI3batU1DBKNeEDvGRn+lfSjrJBM=";
+    hash = "sha256-y3OVpWiWIUsq4mfjZqar88LCEzu0d2isTT+9DowzTFY=";
  };

  env = {
    ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
    SIGNAL_ENV = "production";
-    SOURCE_DATE_EPOCH = 1787172744;
+    SOURCE_DATE_EPOCH = 1787765339;
  };

  preBuild = ''
--- a/pkgs/by-name/si/signal-desktop/signal-sqlcipher.nix
+++ b/pkgs/by-name/si/signal-desktop/signal-sqlcipher.nix
@@ -16,13 +16,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "node-sqlcipher";
-  version = "4.0.3";
+  version = "4.0.5";

  src = fetchFromGitHub {
    owner = "signalapp";
    repo = "node-sqlcipher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-pqb/MhDZxkQDUgs/eP+cRL8b3dfN8VLJo+H8Td9mWoc=";
+    hash = "sha256-V+f6cNBHZLBKzrcDg5jMEjcs1TjpoG8mQRG2rG+aT3E=";
  };

  pnpmDeps = fetchPnpmDeps {
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
  cargoDeps = rustPlatform.fetchCargoVendor {
    name = "sqlcipher-signal-exentsion";
    inherit (finalAttrs) src cargoRoot;
-    hash = "sha256-ChIzjkjIl663lNnOd5oLM1mc5CpLBZS/l82ikyXe/Ac=";
+    hash = "sha256-RF+SHIobW5UAz0MM6c50Ewp9XignCBs6U7IhyZJixbk=";
  };

  strictDeps = true;
--- a/pkgs/by-name/st/stackwhere/package.nix
+++ b/pkgs/by-name/st/stackwhere/package.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "stackwhere";
+  version = "0.3.2";
+
+  __structuredAttrs = true;
+  __darwinAllowLocalNetworking = true;
+
+  src = fetchFromGitHub {
+    owner = "cilium";
+    repo = "stackwhere";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-g1CnWA8WNRHaGXMm+Ksi3AnkFJCy9/bjQbhYjrOlu1M=";
+  };
+
+  vendorHash = "sha256-J2X1uTkRtmdmo8Fxxql6Nu84F6MarWHFTopavUPL+RU=";
+
+  ldflags = [
+    "-s"
+    "-X=main.version=${finalAttrs.version}"
+    "-X=main.commit=${finalAttrs.version}"
+    "-X=main.date=1970-01-01T00:00:00Z"
+  ];
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool for exploring where BPF stack usage comes from";
+    homepage = "https://github.com/cilium/stackwhere";
+    changelog = "https://github.com/cilium/stackwhere/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ stepbrobd ];
+    mainProgram = "stackwhere";
+  };
+})
--- a/pkgs/by-name/st/stalwart_0_16/package.nix
+++ b/pkgs/by-name/st/stalwart_0_16/package.nix
@@ -51,7 +51,7 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "stalwart" + (lib.optionalString stalwartEnterprise "-enterprise");
-  version = "0.16.19";
+  version = "0.16.20";

  __structuredAttrs = true;

@@ -59,10 +59,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "stalwartlabs";
    repo = "stalwart";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-M6mO9z58WnvqmRcIxX9Hj2ZtY06mwlRtTXfdbXt6L00=";
+    hash = "sha256-BEWD6hxRJL5WkdRChWvx9Ubn8pSWW8Wy7fpa7oQxtGU=";
  };

-  cargoHash = "sha256-LsdGxAgBWTU7bMUrvypIVkiMDGG77qEXuD7i756YYCw=";
+  cargoHash = "sha256-zGGJeMoEJOn/BtNUysuyuPeH3hHkJdrb9jUw6ZTpDgk=";

  env = {
    # https://docs.rs/openssl/latest/openssl/#manual
--- a/pkgs/by-name/st/stave/package.nix
+++ b/pkgs/by-name/st/stave/package.nix
@@ -0,0 +1,50 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "stave";
+  version = "0.0.3";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "sufield";
+    repo = "stave";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Lq3u5/M9jJl7KLWzu4LRsB1xTn9QjOB4SrlZoF3Ye40=";
+  };
+
+  vendorHash = null;
+
+  ldflags = [
+    "-s"
+    "-X=github.com/sufield/stave/internal/version.Version=v${finalAttrs.version}"
+    "-X=github.com/sufield/stave/internal/version.Commit=${finalAttrs.src.rev}"
+    "-X=github.com/sufield/stave/internal/version.Date=1970-01-01T00:00:00Z"
+    "-X=github.com/sufield/stave/internal/version.BuiltBy=nixpkgs"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  checkFlags = [
+    "-skip=TestCapabilities_DefaultVersionFallback"
+  ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool to find compound attack paths that single-resource scanners miss";
+    homepage = "https://github.com/sufield/stave";
+    changelog = "https://github.com/sufield/stave/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "stave";
+  };
+})
--- a/pkgs/by-name/te/tether/package.nix
+++ b/pkgs/by-name/te/tether/package.nix
@@ -0,0 +1,82 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  cmake,
+  pkg-config,
+  wrapGAppsHook3,
+  avahi,
+  bluez,
+  gettext,
+  glib,
+  gtest,
+  gtk-layer-shell,
+  gtk3,
+  libnotify,
+  nlohmann_json,
+  openssl,
+  wayland,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "tether";
+  version = "0.2.18";
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  src = fetchFromGitHub {
+    owner = "zackb";
+    repo = "tether";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Ygevoa/gEt80HyRYeWmVGDIwi4Eyl8XVz/RABcGK03Q=";
+  };
+
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail '"''${PROJECT_VERSION}-unknown"' '"${finalAttrs.version}"'
+  '';
+
+  nativeBuildInputs = [
+    cmake
+    gettext
+    pkg-config
+    wrapGAppsHook3
+  ];
+
+  buildInputs = [
+    avahi
+    glib
+    gtk-layer-shell
+    gtk3
+    libnotify
+    openssl
+    wayland
+  ];
+
+  cmakeFlags = [
+    (lib.cmakeBool "FETCHCONTENT_FULLY_DISCONNECTED" true)
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_JSON" "${nlohmann_json.src}")
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_GOOGLETEST" "${gtest.src}")
+    (lib.cmakeFeature "CHROME_MESSAGING_DIR" "etc/chromium/native-messaging-hosts")
+    (lib.cmakeFeature "GOOGLE_CHROME_MESSAGING_DIR" "etc/opt/chrome/native-messaging-hosts")
+    (lib.cmakeFeature "BLUETOOTHD_PATH" "${bluez}/libexec/bluetooth/bluetoothd")
+    (lib.cmakeBool "TETHER_BUILD_EXTENSIONS" false)
+  ];
+
+  doCheck = true;
+  enableParallelChecking = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Linux + iPhone Continuity / iMessage / SMS";
+    homepage = "https://github.com/zackb/tether";
+    changelog = "https://github.com/zackb/tether/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ stepbrobd ];
+    mainProgram = "tether";
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/tg/tgpt/package.nix
+++ b/pkgs/by-name/tg/tgpt/package.nix
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "tgpt";
-  version = "2.13.0";
+  version = "2.14.0";

  src = fetchFromGitHub {
    owner = "aandrew-me";
    repo = "tgpt";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-70BbII+cK9s+5yIFmpUV3pNqiTPSWfwLbrwNvvjkXrA=";
+    hash = "sha256-w+OOPI+IadByazZ6LTZzLn8rSi/aM6mFSG+bOD2KvLQ=";
  };

  vendorHash = "sha256-oh1qKEmWoWK9fXgSfbHFgM8TWD14xNNRFw+YgqnXt00=";
--- a/pkgs/by-name/tr/tree-sitter/grammars/grammar-sources.nix
+++ b/pkgs/by-name/tr/tree-sitter/grammars/grammar-sources.nix
@@ -2637,6 +2637,18 @@
    meta.license = lib.licenses.mit;
  };

+  rocq = {
+    version = "0.2.0";
+    url = "github:aruzdh/tree-sitter-rocq";
+    hash = "sha256-RZ7BGoBrHi+2Sn727L/6LEt/jh4+WphFIh1DP4Ul1Jo=";
+    meta = {
+      license = lib.licenses.mit;
+      maintainers = with lib.maintainers; [
+        stepbrobd
+      ];
+    };
+  };
+
  ron = {
    version = "0.2.0-unstable-2024-05-05";
    url = "github:tree-sitter-grammars/tree-sitter-ron";
--- a/pkgs/by-name/un/unciv/package.nix
+++ b/pkgs/by-name/un/unciv/package.nix
@@ -12,7 +12,7 @@
  nix-update-script,
 }:
 let
-  version = "4.21.9";
+  version = "4.21.14";

  desktopItem = makeDesktopItem {
    name = "unciv";
@@ -42,7 +42,7 @@ stdenv.mkDerivation rec {

  src = fetchurl {
    url = "https://github.com/yairm210/Unciv/releases/download/${version}/Unciv.jar";
-    hash = "sha256-l9vgIWYt/5US9Ak51FgdTB6rB4HqsLlXwtx5hh/nPtE=";
+    hash = "sha256-2h1NhCS01848KPso6RBWYJNfB5PZ6tdbl3YX0eGwXzE=";
  };

  dontUnpack = true;
--- a/pkgs/by-name/un/untrunc-anthwlock/package.nix
+++ b/pkgs/by-name/un/untrunc-anthwlock/package.nix
@@ -11,13 +11,13 @@

 stdenv.mkDerivation {
  pname = "untrunc-anthwlock";
-  version = "0-unstable-2026-06-05";
+  version = "0-unstable-2026-08-20";

  src = fetchFromGitHub {
    owner = "anthwlock";
    repo = "untrunc";
-    rev = "a87f33aa36fb0e174eebad92434d2f9fc3a749da";
-    hash = "sha256-zF/HE+uToC7YJ59YrEdvb2GVByeAUiT05rxSIoBEJaA=";
+    rev = "9d86ec9ef2ffed1bf8131abe80742c0574db52b6";
+    hash = "sha256-0qAgQnTURKxoKsjx+VUK59lwdTycLZEW0RChhFGlSi8=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/uz/uzdoom/package.nix
+++ b/pkgs/by-name/uz/uzdoom/package.nix
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  alsa-lib,
  bzip2,
  cmake,
  glib,
@@ -64,6 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
    zlib
  ]
  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
    libx11
  ]
  ++ lib.optionals stdenv.hostPlatform.isDarwin [
--- a/pkgs/development/compilers/llvm/default.nix
+++ b/pkgs/development/compilers/llvm/default.nix
@@ -27,18 +27,11 @@ let
    "20.1.8".officialRelease.sha256 = "sha256-ysyB/EYxi2qE9fD5x/F2zI4vjn8UDoo1Z9ukiIrjFGw=";
    "21.1.8".officialRelease.sha256 = "sha256-pgd8g9Yfvp7abjCCKSmIn1smAROjqtfZaJkaUkBSKW0=";
    "22.1.8".officialRelease.sha256 = "sha256-SF7wFuh4kXZTytpdgX7vUZItKtRobnVICm+ixze4iG0=";
-    "23.1.0-rc1" = {
-      gitRelease = {
-        rev = "acdf320b78fcf075ddcf660b51cf18d5c0af755b";
-        rev-version = "23.1.0-rc1";
-        sha256 = "sha256-kSfy7IRgF/2HX5Fr3OS5LTXx7xm/iUx7tWb27e4wO+s=";
-      };
-      name = "23";
-    };
+    "23.1.0".officialRelease.sha256 = "sha256-Astfi1UDDcydyws3Q1sELqho/PxiNN/tvCtmCGj5FoE=";
    "24.0.0-git".gitRelease = {
-      rev = "43a704b657423a0eead02e64911b413c4afca73f";
-      rev-version = "24.0.0-unstable-2026-07-26";
-      sha256 = "sha256-wXhYrz3g5F7iwVqgIVryfRtkQ+3lKIKRDd9D8X18dEE=";
+      rev = "80a1e2125c7ec7db402925d153c0dbd6041d3004";
+      rev-version = "24.0.0-unstable-2026-08-23";
+      sha256 = "sha256-xigQSJEPp/Xdhz9b8EzwVW7YrkxWviDmYCjtQC9JDdY=";
    };
  }
  // llvmVersions;
--- a/pkgs/development/python-modules/ansi2html/default.nix
+++ b/pkgs/development/python-modules/ansi2html/default.nix
@@ -10,12 +10,12 @@

 buildPythonPackage rec {
  pname = "ansi2html";
-  version = "1.9.2";
+  version = "1.9.3";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-NFO/h1NdN7gnsFJF+qp1bbq07D1pkl41K2MZw8lVwKU=";
+    hash = "sha256-GQs/xl8FRf7GRCUn+PVRMZSUEP6XwVrEKkQfHpZyb1c=";
  };

  nativeBuildInputs = [
--- a/pkgs/development/python-modules/cwsandbox/default.nix
+++ b/pkgs/development/python-modules/cwsandbox/default.nix
@@ -22,7 +22,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "cwsandbox";
-  version = "0.23.0";
+  version = "1.7.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -30,7 +30,7 @@ buildPythonPackage (finalAttrs: {
    owner = "coreweave";
    repo = "cwsandbox-client";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-y9rsuAXmpMok0ZqdLhAfavglXh5Hz4VPy1UByYMM1WA=";
+    hash = "sha256-D8Mklp9XKRWgVf8OCBZSfX7pngfBlG3jN1DasAQkVFg=";
  };

  build-system = [
--- a/pkgs/development/python-modules/huggingface-hub/default.nix
+++ b/pkgs/development/python-modules/huggingface-hub/default.nix
@@ -41,7 +41,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "huggingface-hub";
-  version = "1.27.0";
+  version = "1.28.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -49,7 +49,7 @@ buildPythonPackage (finalAttrs: {
    owner = "huggingface";
    repo = "huggingface_hub";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-AJglCIJZPeabIjgx+qeEpKM2HhX2hr4xx4SWpghDrhE=";
+    hash = "sha256-nUdBUBLM2NivmQiumY36GfUYREl+4hRszlJEM6ryj1w=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/indevolt-api/default.nix
+++ b/pkgs/development/python-modules/indevolt-api/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "indevolt-api";
-  version = "1.8.7";
+  version = "1.8.8";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Xirt";
    repo = "indevolt-api";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8zp2v21aJGnSsr4/Qw+hb0dx8Gvc5xp4px0Ilb5U6r8=";
+    hash = "sha256-MGK8vbj+idwGCdDQPacesCDifXVp4zUolYUUTKURxKU=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/mhcgnomes/default.nix
+++ b/pkgs/development/python-modules/mhcgnomes/default.nix
@@ -17,14 +17,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "mhcgnomes";
-  version = "3.33.5";
+  version = "3.39.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "pirl-unc";
    repo = "mhcgnomes";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WcYSSgzSOFmgZEX9TZSQAITWxpIjNG1/b6t1RXjfGKs=";
+    hash = "sha256-NixJDuZ0yLasDJUnGus/6GIO5MvNwXZSAVrpnXE0gwA=";
  };

  build-system = [
--- a/pkgs/development/python-modules/mistralai/default.nix
+++ b/pkgs/development/python-modules/mistralai/default.nix
@@ -33,7 +33,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "mistralai";
-  version = "2.9.1";
+  version = "2.9.4";
  pyproject = true;
  __structuredAttrs = true;

@@ -41,7 +41,7 @@ buildPythonPackage (finalAttrs: {
    owner = "mistralai";
    repo = "client-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-liWCT2ArXdRmyB+oPwSLJRRyfossW+jfSNpWgeSfvb0=";
+    hash = "sha256-w7nU4fiduMhpuvKZMJ3JTLEg8Bvuv5L5OXeJYve3/fI=";
  };

  preBuild = ''
--- a/pkgs/development/python-modules/niquests/default.nix
+++ b/pkgs/development/python-modules/niquests/default.nix
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "niquests";
-  version = "3.21.0";
+  version = "3.21.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jawah";
    repo = "niquests";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oKxs1ivKzoCIqFnh81MwCbLfjH5JTKj/orTZNe7uiC4=";
+    hash = "sha256-HhV7gG++e6AG6oQQvedJBB+c9OcPSyDGr8hFUoqm2h0=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/pyexiv2/default.nix
+++ b/pkgs/development/python-modules/pyexiv2/default.nix
@@ -0,0 +1,66 @@
+{
+  lib,
+  stdenv,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pytestCheckHook,
+  setuptools,
+  pybind11,
+  psutil,
+  pkgs,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "pyexiv2";
+  version = "2.16.0";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "LeoHsiao1";
+    repo = "pyexiv2";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-FH5nbbh0vaErJzBl6L2HPh0SQXkQ558abTBml7nSLU8=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  buildInputs = [
+    pybind11
+    pkgs.exiv2
+  ];
+
+  preBuild = ''
+    ln -s ${lib.getLib pkgs.exiv2}/lib/libexiv2${stdenv.hostPlatform.extensions.sharedLibrary} pyexiv2/lib/libexiv2${stdenv.hostPlatform.extensions.sharedLibrary}
+  '';
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    psutil
+  ];
+
+  # Remove source to prevent it trying to import from it instead of the built package
+  preCheck = ''
+    shopt -s extglob
+    rm -r pyexiv2/!(tests)
+  '';
+
+  disabledTests = [
+    # Asserts a specific exiv2 version
+    "test_version"
+  ];
+
+  pythonImportsCheck = [
+    "pyexiv2"
+  ];
+
+  meta = {
+    description = "Python library for reading and writing image metadata, including EXIF, IPTC, XMP, ICC Profile";
+    homepage = "https://github.com/LeoHsiao1/pyexiv2";
+    changelog = "https://github.com/LeoHsiao1/pyexiv2/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ ambossmann ];
+  };
+})
--- a/pkgs/development/python-modules/pyexploitdb/default.nix
+++ b/pkgs/development/python-modules/pyexploitdb/default.nix
@@ -9,12 +9,12 @@

 buildPythonPackage (finalAttrs: {
  pname = "pyexploitdb";
-  version = "0.3.41";
+  version = "0.3.42";
  pyproject = true;

  src = fetchPypi {
    inherit (finalAttrs) pname version;
-    hash = "sha256-f+cKjQv5tMZ8yEjMeKRVIwFnvi0mmGB1C0bRv9n9a+0=";
+    hash = "sha256-Mbubia8bRPEkAU+xNFwOkJIdHsoaRxE4kchPPEatHA0=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/pyimouapi/default.nix
+++ b/pkgs/development/python-modules/pyimouapi/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "pyimouapi";
-  version = "1.3.5";
+  version = "1.4.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Imou-OpenPlatform";
    repo = "Py-Imou-Open-Api";
    tag = finalAttrs.version;
-    hash = "sha256-fcM0yIZoKkAGhags0UH6mKntgpGkuX1kzf+57okOvq4=";
+    hash = "sha256-1tP1LDrh9yLzUZfqUzckmF3Q/6aE5NbhFcU63IRJEmY=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/pyportainer/default.nix
+++ b/pkgs/development/python-modules/pyportainer/default.nix
@@ -17,14 +17,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "pyportainer";
-  version = "1.0.44";
+  version = "1.0.45";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "erwindouna";
    repo = "pyportainer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-VDyM1Ti8XNPb/HAzuIag2Z1IIZl1pH2M/4BOKdJeLoM=";
+    hash = "sha256-JQ17DT8NIqMpeNSlXUgSTB2Q4jCJpfaoYTsR8jLNDvY=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/python-crontab/default.nix
+++ b/pkgs/development/python-modules/python-crontab/default.nix
@@ -2,14 +2,14 @@
  lib,
  buildPythonPackage,
  fetchFromGitLab,
-  python-dateutil,
  pytestCheckHook,
+  python-dateutil,
  setuptools,
 }:

 buildPythonPackage (finalAttrs: {
  pname = "python-crontab";
-  version = "3.3.0";
+  version = "3.4.0";
  pyproject = true;

  __structuredAttrs = true;
@@ -18,9 +18,14 @@ buildPythonPackage (finalAttrs: {
    owner = "doctormo";
    repo = "python-crontab";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-eJXtvTRwokbewWrTArHJ2FXGDLvlkGA/5ZZR01koMW8=";
+    hash = "sha256-MVQNZDCEsX8cjDQQviTfwOarul8+CkdCvWfJMc5Sbq0=";
  };

+  postPatch = ''
+    substituteInPlace setup.py \
+      --replace-fail "= '3.3.0'," "= '${finalAttrs.version}',"
+  '';
+
  build-system = [ setuptools ];

  dependencies = [ python-dateutil ];
--- a/pkgs/development/python-modules/scikit-learn/default.nix
+++ b/pkgs/development/python-modules/scikit-learn/default.nix
@@ -16,8 +16,9 @@
  llvmPackages,
  pytestCheckHook,
  pytest-xdist,
-  pillow,
  joblib,
+  narwhals,
+  pillow,
  threadpoolctl,
 }:

@@ -25,13 +26,13 @@ buildPythonPackage rec {
  __structuredAttrs = true;

  pname = "scikit-learn";
-  version = "1.8.0";
+  version = "1.9.0";
  pyproject = true;

  src = fetchPypi {
    pname = "scikit_learn";
    inherit version;
-    hash = "sha256-m8y7O0Dj3hA1H49QaOEF0PQIOxpl+ge2Y0+8QBpih/0=";
+    hash = "sha256-iDMmaYnTpREBeKn64weDZ1Rgck0OHvsTsUkB0sZgxVc=";
  };

  postPatch = ''
@@ -39,9 +40,9 @@ buildPythonPackage rec {
      "run_command('sklearn/_build_utils/version.py', check: true).stdout().strip()," \
      "'${version}',"
    substituteInPlace pyproject.toml \
-      --replace-fail "meson-python>=0.17.1,<0.19.0" meson-python \
-      --replace-fail "numpy>=2,<2.4.0" numpy \
-      --replace-fail "scipy>=1.10.0,<1.17.0" scipy
+      --replace-fail "meson-python>=0.17.1,<0.20.0" meson-python \
+      --replace-fail "numpy>=2,<2.5.0" numpy \
+      --replace-fail "scipy>=1.10.0,<1.18.0" scipy
  '';

  buildInputs = [
@@ -64,16 +65,12 @@ buildPythonPackage rec {

  dependencies = [
    joblib
+    narwhals
    numpy
    scipy
    threadpoolctl
  ];

-  pythonRelaxDeps = [
-    "numpy"
-    "scipy"
-  ];
-
  nativeCheckInputs = [
    pytestCheckHook
    pytest-xdist
--- a/pkgs/development/python-modules/sentence-transformers/default.nix
+++ b/pkgs/development/python-modules/sentence-transformers/default.nix
@@ -34,7 +34,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "sentence-transformers";
-  version = "5.7.0";
+  version = "6.0.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -42,7 +42,7 @@ buildPythonPackage (finalAttrs: {
    owner = "huggingface";
    repo = "sentence-transformers";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0H/sgSxEcDnZkDEtAroSV9zVLfLF04AsjSV0m0Csyk0=";
+    hash = "sha256-uT/3TxhKJKeTz/xBho/YjJJPk9BdCM4PPPNiHruHg/U=";
  };

  build-system = [ setuptools ];
@@ -93,12 +93,17 @@ buildPythonPackage (finalAttrs: {
    "test_dimension_exceeds_model_dimension_raises_error"
    "test_dimensions_sorted_descending"
    "test_empty_matryoshka_dims_raises_error"
+    "test_encode_document_with_lambda_pooling"
+    "test_encode_document_with_pooling_kwarg"
+    "test_encode_document_with_pooling_shrinks_token_counts"
    "test_forward"
    "test_initialization_with_embedding_dim"
    "test_initialization_with_embedding_weights"
    "test_loading_model2vec"
+    "test_metrics_are_independent_of_corpus_chunk_size"
    "test_mine_hard_negatives_with_prompt"
    "test_model_card_base"
+    "test_model_card_renders_query_and_document_lengths"
    "test_model_card_reuse"
    "test_model_dimension_not_in_dims_warns"
    "test_mse_loss_matryoshka"
@@ -106,8 +111,14 @@ buildPythonPackage (finalAttrs: {
    "test_negative_dimension_raises_error"
    "test_pairwise_angle_sim_even_and_odd_sparse_embeddings"
    "test_paraphrase_mining"
+    "test_pooling_pools_queries_when_opted_in"
    "test_pooling_prompt_attention_mask_respects_include_prompt"
+    "test_pooling_prompt_exclusion_is_idempotent"
+    "test_pooling_respects_include_prompt"
+    "test_pooling_skips_queries"
    "test_pretrained_model"
+    "test_real_query_token_slice_with_query_expansion"
+    "test_real_query_token_slice_with_query_prompt"
    "test_router_as_middle_module"
    "test_router_backwards_compatibility"
    "test_router_encode"
@@ -141,6 +152,9 @@ buildPythonPackage (finalAttrs: {
    "test_hf_argument_parser"
    "test_hf_argument_parser_incorrect_string_arguments"

+    # `datasets` still imports `torchvision.io.VideoReader`, removed in torchvision 0.27
+    "test_formatted_train_dataset_raises_clear_error"
+    "test_max_list_length_truncates_tensor_labels_in_step"
  ]
  ++ lib.optionals (pythonAtLeast "3.14") [
    # TypeError: Pickler._batch_setitems() takes 2 positional arguments but 3 were given
@@ -152,7 +166,16 @@ buildPythonPackage (finalAttrs: {
    "test_round_robin_batch_sampler"
    "test_round_robin_batch_sampler_vallue_error"
  ]
-  ++ lib.optionals (!stdenv.hostPlatform.isAarch64 && stdenv.hostPlatform.isDarwin) [
+  ++ lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) [
+    # aarch64-linux fails cpuinfo test, because /sys/devices/system/cpu/ does not exist in the sandbox:
+    # RuntimeError: Failed to initialize cpuinfo!
+    "test_hps_collapses_spurious_ties"
+    "test_low_precision_scores_match_float32_reference"
+    "test_pairwise_scores_are_float32_for_low_precision_inputs"
+    "test_pooling_supports_low_precision_dtypes"
+    "test_scores_are_float32_for_low_precision_inputs"
+  ]
+  ++ lib.optionals (!stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64) [
    # These sparse tests also time out, on x86_64-darwin.
    "sim_sparse"
  ];
@@ -166,10 +189,12 @@ buildPythonPackage (finalAttrs: {
    "tests/cross_encoder/evaluation/test_reranking.py"
    "tests/cross_encoder/losses/test_cached_multiple_negatives_ranking.py"
    "tests/cross_encoder/losses/test_misc.py"
-    "tests/cross_encoder/losses/test_misc.py"
    "tests/cross_encoder/test_model.py"
    "tests/cross_encoder/test_model_card.py"
    "tests/cross_encoder/test_train_stsb.py"
+    "tests/multi_vector_encoder/test_evaluators.py"
+    "tests/multi_vector_encoder/test_model.py"
+    "tests/multi_vector_encoder/test_multi_process.py"
    "tests/sentence_transformer/evaluation/test_binary_classification_evaluator.py"
    "tests/sentence_transformer/losses/test_adaptive_layer.py"
    "tests/sentence_transformer/losses/test_cached_gist_embed.py"
@@ -178,13 +203,15 @@ buildPythonPackage (finalAttrs: {
    "tests/sentence_transformer/losses/test_denoising_auto_encoder.py"
    "tests/sentence_transformer/losses/test_embed_distill.py"
    "tests/sentence_transformer/losses/test_gradcache.py"
-    "tests/sentence_transformer/losses/test_gradcache.py"
    "tests/sentence_transformer/losses/test_mega_batch_margin.py"
+    "tests/sentence_transformer/losses/test_merged_forward.py"
    "tests/sentence_transformer/test_compute_embeddings.py"
    "tests/sentence_transformer/test_model.py"
    "tests/sentence_transformer/test_model_card.py"
    "tests/sentence_transformer/test_model_card_data.py"
    "tests/sparse_encoder/losses/test_cached_splade.py"
+    "tests/sparse_encoder/losses/test_merged_forward.py"
+    "tests/sparse_encoder/losses/test_sparse_distill_kl_div.py"
    "tests/sparse_encoder/modules/test_csr.py"
    "tests/sparse_encoder/modules/test_sparse_static_embedding.py"
    "tests/sparse_encoder/test_model.py"
--- a/pkgs/development/python-modules/spacy/default.nix
+++ b/pkgs/development/python-modules/spacy/default.nix
@@ -3,6 +3,7 @@
  stdenv,
  buildPythonPackage,
  fetchFromGitHub,
+  pythonAtLeast,

  # build-system
  cymem,
@@ -48,14 +49,15 @@

 buildPythonPackage (finalAttrs: {
  pname = "spacy";
-  version = "3.8.14";
+  version = "3.8.16";
  pyproject = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "explosion";
    repo = "spaCy";
    tag = "release-v${finalAttrs.version}";
-    hash = "sha256-w9cNP304H/EntpoMkXGwkxIVoThkl5HZPDK4+k4Py0Y=";
+    hash = "sha256-EFzzb9hMBjFh3hD+xId7uxkTVsg92WNiUaCKBRa0bnw=";
  };

  build-system = [
@@ -111,6 +113,9 @@ buildPythonPackage (finalAttrs: {
  disabledTestMarks = [ "slow" ];

  disabledTests = [
+    # ValueError: [E002] Can't find factory for 'assert_sents' for language English (en).
+    "test_annotating_components_from_config"
+
    # touches network
    "test_download_compatibility"
    "test_validate_compatibility_table"
@@ -124,6 +129,12 @@ buildPythonPackage (finalAttrs: {
    # AssertionError: confection has different version in setup.cfg and in requirements.txt:
    # >=1.3.2,<2.0.0 and >=1.1.0,<2.0.0 respectively
    "test_build_dependencies"
+  ]
+  ++ lib.optionals (pythonAtLeast "3.14") [
+    # AssertionError:
+    #   assert eval["nel_macro_f"] > 0
+    #   assert 0.0 > 0
+    "test_overfitting_IO_with_ner"
  ];

  pythonImportsCheck = [ "spacy" ];
--- a/pkgs/development/python-modules/spatialmath-python/default.nix
+++ b/pkgs/development/python-modules/spatialmath-python/default.nix
@@ -13,15 +13,15 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "spatialmath-python";
-  version = "1.1.16";
+  version = "1.1.17";
  pyproject = true;

  src = fetchPypi {
    pname = "spatialmath_python";
-    inherit version;
-    hash = "sha256-6y8EOxxXuqsDTAHW0wKOq4D17GjqouyJy5VyEHwzaiI=";
+    inherit (finalAttrs) version;
+    hash = "sha256-kRzJLAcKDQxa/VI34N86kiRw/H5LxNA0pl1HyAlujPg=";
  };

  build-system = [
@@ -54,11 +54,12 @@ buildPythonPackage rec {

  meta = {
    description = "Provides spatial maths capability for Python";
-    homepage = "https://pypi.org/project/spatialmath-python/";
+    homepage = "https://github.com/rai-opensource/spatialmath-python";
+    changelog = "https://github.com/rai-opensource/spatialmath-python/releases/tag/${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
      djacu
      a-camarillo
    ];
  };
-}
+})
--- a/pkgs/development/python-modules/sqlalchemy-citext/default.nix
+++ b/pkgs/development/python-modules/sqlalchemy-citext/default.nix
@@ -2,21 +2,26 @@
  lib,
  buildPythonPackage,
  fetchPypi,
+  setuptools,
  psycopg2,
  sqlalchemy,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "sqlalchemy-citext";
  version = "1.8.0";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchPypi {
-    inherit pname version;
-    sha256 = "a1740e693a9a334e7c8f60ae731083fe75ce6c1605bb9ca6644a6f1f63b15b77";
+    inherit (finalAttrs) pname version;
+    hash = "sha256-oXQOaTqaM058j2CucxCD/nXObBYFu5ymZEpvH2OxW3c=";
  };

-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
    sqlalchemy

    # not listed in `install_requires`, but is imported in citext/__init__.py
@@ -34,4 +39,4 @@ buildPythonPackage rec {
    license = lib.licenses.mit;
    maintainers = [ ];
  };
-}
+})
--- a/pkgs/development/python-modules/streamcontroller-plugin-tools/default.nix
+++ b/pkgs/development/python-modules/streamcontroller-plugin-tools/default.nix
@@ -2,21 +2,26 @@
  buildPythonPackage,
  fetchFromGitHub,
  lib,
+  setuptools,
  loguru,
  rpyc,
 }:
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "streamcontroller-plugin-tools";
  version = "2.0.0";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "StreamController";
    repo = "streamcontroller-plugin-tools";
-    rev = version;
+    tag = finalAttrs.version;
    hash = "sha256-dQZPRSzHhI3X+Pf7miwJlECGFgUfp68PtvwXAmpq5/s=";
  };

+  build-system = [ setuptools ];
+
  dependencies = [
    loguru
    rpyc
@@ -31,4 +36,4 @@ buildPythonPackage rec {
    maintainers = with lib.maintainers; [ sifmelcara ];
    platforms = lib.platforms.linux;
  };
-}
+})
--- a/pkgs/development/python-modules/stringbrewer/default.nix
+++ b/pkgs/development/python-modules/stringbrewer/default.nix
@@ -2,21 +2,26 @@
  lib,
  buildPythonPackage,
  fetchPypi,
+  setuptools,
  rstr,
  sre-yield,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "stringbrewer";
  version = "0.0.1";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchPypi {
-    inherit pname version;
+    inherit (finalAttrs) pname version;
    hash = "sha256-wtETgi+Tk1ALJzzIM6Ic5zkDbALGL0cELg8X75uepkk=";
  };

-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
    rstr
    sre-yield
  ];
@@ -31,4 +36,4 @@ buildPythonPackage rec {
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ danc86 ];
  };
-}
+})
--- a/pkgs/development/python-modules/tablib/default.nix
+++ b/pkgs/development/python-modules/tablib/default.nix
@@ -18,12 +18,12 @@

 buildPythonPackage rec {
  pname = "tablib";
-  version = "3.9.0";
+  version = "3.10.0";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-G2q9jtsPNWAeBMYWHXlmD9zeSrtKVPZsyfkFS9VdX+I=";
+    hash = "sha256-eBz6mkLejzPFKv+Ff9CgTkg95P0cU+qqmmrqxiutEd4=";
  };

  nativeBuildInputs = [ setuptools-scm ];
--- a/pkgs/development/python-modules/tokenizers/default.nix
+++ b/pkgs/development/python-modules/tokenizers/default.nix
@@ -74,29 +74,30 @@ let
    };
  };
 in
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "tokenizers";
-  version = "0.22.2";
+  version = "0.23.1";
  pyproject = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "huggingface";
    repo = "tokenizers";
-    tag = "v${version}";
-    hash = "sha256-krc+FUA5H3J7L4D1xyjyFMpjXMU8TEfwdfRT4+uvti8=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-tY1pzbcCRQVxk3Qxd4FjFZTQJicm7Iwa0qRgjUrR+rk=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit
+    inherit (finalAttrs)
      pname
      version
      src
      sourceRoot
      ;
-    hash = "sha256-anYZ7M5OvLOOHDy+sLuZlHQ/cNTk6xHksBHSHa75iY4=";
+    hash = "sha256-JUhjjDyWsl9+hsRYIfNMX68b1GU+F++KS1tHEl6OzHA=";
  };

-  sourceRoot = "${src.name}/bindings/python";
+  sourceRoot = "${finalAttrs.src.name}/bindings/python";

  nativeBuildInputs = [
    cargo
@@ -136,9 +137,10 @@ buildPythonPackage rec {

  disabledTests = [
    # Downloads data using the datasets module
+    "TestTrainFromIterators"
+    "TestUnigram"
    "test_encode_special_tokens"
    "test_splitting"
-    "TestTrainFromIterators"

    # Require downloading from huggingface
    # huggingface_hub.errors.LocalEntryNotFoundError
@@ -171,9 +173,9 @@ buildPythonPackage rec {
  meta = {
    description = "Fast State-of-the-Art Tokenizers optimized for Research and Production";
    homepage = "https://github.com/huggingface/tokenizers";
-    changelog = "https://github.com/huggingface/tokenizers/releases/tag/v${version}";
+    changelog = "https://github.com/huggingface/tokenizers/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ GaetanLepage ];
    platforms = lib.platforms.unix;
  };
-}
+})
--- a/pkgs/development/python-modules/torrequest/default.nix
+++ b/pkgs/development/python-modules/torrequest/default.nix
@@ -2,22 +2,27 @@
  lib,
  buildPythonPackage,
  fetchPypi,
+  setuptools,
  requests,
  pysocks,
  stem,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "torrequest";
  version = "0.1.0";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;

  src = fetchPypi {
-    inherit pname version;
+    inherit (finalAttrs) pname version;
    hash = "sha256-N0XU6j/9qY16A0Njx4ets3qrd72rQAlKTZNzks1NroI=";
  };

-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
    pysocks
    requests
    stem
@@ -34,4 +39,4 @@ buildPythonPackage rec {
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ applePrincess ];
  };
-}
+})
--- a/pkgs/development/python-modules/transformers/default.nix
+++ b/pkgs/development/python-modules/transformers/default.nix
@@ -79,7 +79,6 @@
  mistral-common,
  # chat_template
  jinja2,
-  jmespath,
  # quality
  ruff,
  gitpython,
@@ -94,7 +93,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "transformers";
-  version = "5.15.0";
+  version = "5.16.1";
  pyproject = true;
  __structuredAttrs = true;

@@ -102,7 +101,7 @@ buildPythonPackage (finalAttrs: {
    owner = "huggingface";
    repo = "transformers";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-DAQrsE2onVc2/MWJlGmlXFBzai5/ysAxpPEFMxDo7wI=";
+    hash = "sha256-VgBgaj4Qh2NVmJoqlrdb3hED/n1otIqDawXcALBpb2c=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/validate-pyproject-schema-store/default.nix
+++ b/pkgs/development/python-modules/validate-pyproject-schema-store/default.nix
@@ -10,7 +10,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "validate-pyproject-schema-store";
-  version = "2026.08.15";
+  version = "2026.08.29";
  pyproject = true;

  __structuredAttrs = true;
@@ -19,7 +19,7 @@ buildPythonPackage (finalAttrs: {
    owner = "henryiii";
    repo = "validate-pyproject-schema-store";
    tag = finalAttrs.version;
-    hash = "sha256-iiBTEMP+vhvOQFS500LhBuf2epEahqN+jHheHUR5kCA=";
+    hash = "sha256-v5oCEVYjd/yruYrYTDhQ4i90BB3KhpvAxCXyZWtQ/yI=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/wandb/default.nix
+++ b/pkgs/development/python-modules/wandb/default.nix
@@ -5,7 +5,7 @@
  pythonAtLeast,

  ## wandb-core
-  buildGoModule,
+  buildGo127Module,
  gitMinimal,
  writableTmpDirAsHomeHook,
  versionCheckHook,
@@ -33,8 +33,8 @@
  requests,
  sentry-sdk,
  setproctitle,
-  pythonOlder,
  typing-extensions,
+  xxhash,

  # tests
  azure-containerregistry,
@@ -80,12 +80,12 @@
 }:

 let
-  version = "0.28.2";
+  version = "0.29.0";
  src = fetchFromGitHub {
    owner = "wandb";
    repo = "wandb";
    tag = "v${version}";
-    hash = "sha256-kmgLHb+1NjStqcjMOYPPU2v2js4m8O3b2OpM6BiSbXI=";
+    hash = "sha256-5YkJB5uS9GalNKL+MPf5GVQX/jgWM62nxMVmdnzOXGs=";
  };

  wandb-xpu = rustPlatform.buildRustPackage {
@@ -143,7 +143,7 @@ let
    __darwinAllowLocalNetworking = true;
  };

-  wandb-core = buildGoModule {
+  wandb-core = buildGo127Module {
    pname = "wandb-core";
    inherit src version;

@@ -247,9 +247,8 @@ buildPythonPackage (finalAttrs: {
    requests
    sentry-sdk
    setproctitle
-  ]
-  ++ lib.optionals (pythonOlder "3.12") [
    typing-extensions
+    xxhash
  ];

  __darwinAllowLocalNetworking = true;
--- a/pkgs/os-specific/linux/nvidia-x11/default.nix
+++ b/pkgs/os-specific/linux/nvidia-x11/default.nix
@@ -71,12 +71,12 @@ rec {
  bleeding_edge = selectHighestVersion latest beta;

  production = generic {
-    version = "595.91.07";
-    sha256_64bit = "sha256-yiPIjdJLB6GRZE4eEc+3vN11NzBXSa9A+YABiwleYxM=";
-    sha256_aarch64 = "sha256-fqkN7ONFXtTeXyu2mQxorrk362Epxq3bz88hhKYQzwQ=";
-    openSha256 = "sha256-OB8Epd+qn/WywxsPiFpxEOAzlJqb6I1SyRoV3a8l71k=";
-    settingsSha256 = "sha256-QzT8Cw1luuZGP9DUje3HN/0ngiayqHURj+bqPsxlJ5w=";
-    persistencedSha256 = "sha256-3JQBaNmkwxvCXv9q8aHKas6VZM/JjLsuilC2t7ET0u0=";
+    version = "595.99.02";
+    sha256_64bit = "sha256-6HR3lYv3YwcFSTJL1a1slI66btIQ5EAFs+/4SUD24ew=";
+    sha256_aarch64 = "sha256-CCqHZTN2KNOZ4yZp2rDcuRJp9pHfRw47k4m4dWnS/2w=";
+    openSha256 = "sha256-T36x/jx8yQ8l3LFp1rZIrTfcSwbGy8YSAvXOUSptpb4=";
+    settingsSha256 = "sha256-GYCcnxfKPrTCrsmd25sMyzfC5cqJQJx0c31haooyTYM=";
+    persistencedSha256 = "sha256-VyKtF/HdHPQrHHK6opSO69M72LmnGZtauuchj9uuje8=";
  };

  new_feature = generic {
--- a/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
  owner = "pymitsubishi";
  domain = "mitsubishi";
-  version = "0.5.7";
+  version = "0.6.0";

  src = fetchFromGitHub {
    owner = "pymitsubishi";
    repo = "homeassistant-mitsubishi";
    tag = "v${version}";
-    hash = "sha256-8/zB1jbMoabd+pkIOUgY7bJ5lu2nCLkjS28Ru6bsKOw=";
+    hash = "sha256-TGRAx2c/hJVBAn2ylUXkhDdXLRsbbdhqpy035Bo6I5Y=";
  };

  dependencies = [
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -14855,6 +14855,8 @@ self: super: with self; {

  pyexiftool = callPackage ../development/python-modules/pyexiftool { };

+  pyexiv2 = callPackage ../development/python-modules/pyexiv2 { };
+
  pyexpect = callPackage ../development/python-modules/pyexpect { };

  pyexploitdb = callPackage ../development/python-modules/pyexploitdb { };