Merge staging-next into staging

2026-09-29 03:10:19 +00:00 · 2026-09-20 06:14:26 +00:00
parent fc5a4e2b58 bb7535f586
commit 8da4489bc8
63 changed files with 653 additions and 693 deletions
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -11020,6 +11020,14 @@
    github = "haansn08";
    githubId = 6215916;
  };
+  hackcraft_ = {
+    name = "Hackcraft_";
+    github = "realhackcraft";
+    githubId = 65378120;
+    email = "hackcraft_@hotmail.com";
+    matrix = "@hackcraft_:matrix.org";
+    keys = [ { fingerprint = "097C C394 927D FBF9 99C3  7D62 3554 8B5F 693C 7E6B"; } ];
+  };
  hacker1024 = {
    name = "hacker1024";
    email = "hacker1024@users.sourceforge.net";
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -201,6 +201,9 @@

 - The Mullvad VPN service now has a separate toggle to enable the Mullvad VPN graphical user interface. If you have previously used Mullvad on a desktop by setting `services.mullvad-vpn.package` to `pkgs.mullvad-vpn`, you should now **unset that option**, and enable `services.mullvad-vpn.gui.enable`. The VPN will not work if `services.mullvad-vpn.package` is set to `pkgs.mullvad-vpn`, as `pkgs.mullvad-vpn` no longer contains the Mullvad Daemon; please ensure that `services.mullvad-vpn.package` is set to `pkgs.mullvad`, regardless if you plan to enable the graphical user interface or not.

+- TUI command of `tracexec` now allocates a pseudo terminal by default. Use `--no-tty` to run without one and redirect the tracee's stdin, stdout, and
+  stderr to `/dev/null`. eBPF system-wide tracing continues to run without a pseudo terminal automatically. The old `-t/--tty` parameter is removed.
+
 - A number of options for `services.llama-cpp` have been removed in favor of the structured [](#opt-services.llama-cpp.settings) option, attributes from which are used as arguments to `llama-server` executable, you can see all available options by running `llama-server --help`. Configuring model presets using Nix attribute set via `services.llama-cpp.modelsPreset` is no longer supported, please use `services.llama-cpp.settings.models-preset` with a path to an INI file containing desired options.

 - `ensure-printers.service` has been replaced with an `ExecStartPost` hook in `cups.service`. If you have made any manual modifications to this unit, you should move the modifications to `cups.service` instead.
--- a/pkgs/applications/graphics/gimp/plugins/default.nix
+++ b/pkgs/applications/graphics/gimp/plugins/default.nix
@@ -152,7 +152,7 @@ lib.makeScope pkgs.newScope (

    farbfeld = pluginDerivation {
      pname = "farbfeld";
-      version = "unstable-2019-08-12";
+      version = "0-unstable-2019-08-12";

      src = fetchFromGitHub {
        owner = "ids1024";
@@ -249,7 +249,7 @@ lib.makeScope pkgs.newScope (

    texturize = pluginDerivation {
      pname = "texturize";
-      version = "2.2+unstable=2021-12-03";
+      version = "2.2-unstable-2021-12-03";
      src = fetchFromGitHub {
        owner = "lmanul";
        repo = "gimp-texturize";
@@ -332,7 +332,7 @@ lib.makeScope pkgs.newScope (
    };

    gimplensfun = pluginDerivation {
-      version = "unstable-2018-10-21";
+      version = "0.2.4-unstable-2018-10-21";
      pname = "gimplensfun";

      src = fetchFromGitHub {
--- a/pkgs/applications/graphics/inkscape/extensions/applytransforms/default.nix
+++ b/pkgs/applications/graphics/inkscape/extensions/applytransforms/default.nix
@@ -2,23 +2,26 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  python3,
+  python3Packages,
 }:

 stdenv.mkDerivation {
  pname = "inkscape-applytransforms";
-  version = "0.pre+unstable=2021-05-11";
+  version = "0-unstable-2021-05-11";
+
+  strictDeps = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "Klowner";
    repo = "inkscape-applytransforms";
    rev = "5b3ed4af0fb66e399e686fc2b649b56db84f6042";
-    sha256 = "XWwkuw+Um/cflRWjIeIgQUxJLrk2DLDmx7K+pMWvIlI=";
+    hash = "sha256-XWwkuw+Um/cflRWjIeIgQUxJLrk2DLDmx7K+pMWvIlI=";
  };

  nativeCheckInputs = [
-    python3.pkgs.inkex
-    python3.pkgs.pytestCheckHook
+    python3Packages.inkex
+    python3Packages.pytestCheckHook
  ];

  dontBuild = true;
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -914,13 +914,13 @@
    "vendorHash": "sha256-8Zj4nrEJ38Tz0LOYtghlMnJZJnD2zJjsqawVMTEX0Wk="
  },
  "metio_migadu": {
-    "hash": "sha256-bqKoFD3/fse69y7Eqh99nBOWg/e16Kfbi6QyEU0sLxg=",
+    "hash": "sha256-C5zx1uf5VKZN/CBbcFe+GOYpso2L/ocztEBsDEL53mA=",
    "homepage": "https://registry.terraform.io/providers/metio/migadu",
    "owner": "metio",
    "repo": "terraform-provider-migadu",
-    "rev": "2026.9.3",
+    "rev": "2026.9.17",
    "spdx": "0BSD",
-    "vendorHash": "sha256-F2epQ/ln211xa6lcnuLPcA0P4DlbwTtkzwoX4wxHtRs="
+    "vendorHash": "sha256-wQPGzn9g0HUvelcQb7Ai29Zcoif6hNGOAK3sdzINPCU="
  },
  "mongey_kafka": {
    "hash": "sha256-rTa6c7jAMH027V7h/yUGVGz6TS0PDdObilxU0Vpr6FI=",
--- a/pkgs/by-name/ba/bash-preexec/package.nix
+++ b/pkgs/by-name/ba/bash-preexec/package.nix
@@ -3,10 +3,11 @@
  lib,
  fetchFromGitHub,
  bats,
+  git,
 }:

 let
-  version = "0.6.0";
+  version = "0.7.0";
 in
 stdenvNoCC.mkDerivation {
  pname = "bash-preexec";
@@ -16,10 +17,13 @@ stdenvNoCC.mkDerivation {
    owner = "rcaloras";
    repo = "bash-preexec";
    tag = version;
-    hash = "sha256-4DzbeIiUX7iXy2CeSvRC2X+XnjVk+/UiMbM/dLHx7zU=";
+    hash = "sha256-/3cZkVQQAcsl3bA7WfvxDxw13NwBr5iylUNybENjV80=";
  };

-  nativeCheckInputs = [ bats ];
+  nativeCheckInputs = [
+    bats
+    git
+  ];

  dontConfigure = true;
  doCheck = true;
@@ -35,6 +39,10 @@ stdenvNoCC.mkDerivation {
    # See https://github.com/rcaloras/bash-preexec/issues/121
    sed -i '/^@test.*IFS/,/^}/d' test/bash-preexec.bats

+    # release-script.bats executes script/release directly; its
+    # `#!/usr/bin/env bash` shebang fails in the sandbox (no /usr/bin/env).
+    patchShebangs script/release
+
    runHook postPatch
  '';

--- a/pkgs/by-name/co/conftest/package.nix
+++ b/pkgs/by-name/co/conftest/package.nix
@@ -11,7 +11,7 @@

 buildGoModule (finalAttrs: {
  pname = "conftest";
-  version = "0.63.0";
+  version = "0.69.0";

  __darwinAllowLocalNetworking = true; # required for tests

@@ -19,14 +19,14 @@ buildGoModule (finalAttrs: {
    owner = "open-policy-agent";
    repo = "conftest";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gmfzMup4fdsbdyUufxjcJRPF2faj3RUlvIn2ciyalaQ=";
+    hash = "sha256-kF4kako/88FxV10RZ9zNM7eq/Qlz41tEtnUnTB12KtM=";
  };
-  vendorHash = "sha256-pBUWM6st5FhhOki3n9NIN4/U8JB7Kq3Aph3AtQs+Ogg=";
+  vendorHash = "sha256-vcIY3AZkl/U0l2eyWHZGHrjQyW5TWt9oPDb4BXcNUtY=";

  ldflags = [
    "-s"
    "-w"
-    "-X github.com/open-policy-agent/conftest/internal/commands.version=${finalAttrs.version}"
+    "-X github.com/open-policy-agent/conftest/internal/version.Version=${finalAttrs.version}"
  ];

  nativeBuildInputs = [
@@ -57,6 +57,11 @@ buildGoModule (finalAttrs: {
    versionCheckHook
  ];

+  versionCheckKeepEnvironment = [ "XDG_DATA_HOME" ];
+  preVersionCheck = ''
+    export XDG_DATA_HOME="$(mktemp -d)"
+  '';
+
  meta = {
    description = "Write tests against structured configuration data";
    mainProgram = "conftest";
--- a/pkgs/by-name/co/context7-mcp/package.nix
+++ b/pkgs/by-name/co/context7-mcp/package.nix
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  installAgentSkills,
  makeWrapper,
  nix-update-script,
  versionCheckHook,
@@ -32,8 +33,12 @@ stdenv.mkDerivation (finalAttrs: {
    pnpm
    pnpmConfigHook
    makeWrapper
+    installAgentSkills
  ];

+  # the monorepo vendors the same skills for many agents and packages
+  dontInstallAgentSkills = true;
+
  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    inherit pnpm;
@@ -61,7 +66,7 @@ stdenv.mkDerivation (finalAttrs: {
    makeWrapper ${nodejs}/bin/node $out/bin/context7-mcp \
      --add-flags "$out/lib/context7/dist/index.js"

-    cp -r $src/skills $out
+    installSkill skills/context7-mcp

    runHook postInstall
  '';
--- a/pkgs/by-name/co/convos/package.nix
+++ b/pkgs/by-name/co/convos/package.nix
@@ -69,7 +69,7 @@ perlPackages.buildPerlPackage rec {
    # the sandbox, we replace the this out from a substitution expression
    #
    substituteInPlace t/web-register-open-to-public.t \
-      --replace '!127.0.0.1!' '!localhost!'
+      --replace-fail '!127.0.0.1!' '!localhost!'

    # Another online test fails, so remove this.
    rm t/irc-reconnect.t
@@ -86,6 +86,10 @@ perlPackages.buildPerlPackage rec {
    # Another web test fails, so we also remove this.
    rm t/web-login.t

+    # Remove tests failing due to Mojolicious CSRF behavior updates in 9.48
+    #
+    rm t/web-recover-password.t t/web-register-invite-only.t t/web-users.t
+
    # Module::Install is a runtime dependency not covered by the tests, so we add
    # a test for it.
    #
--- a/pkgs/by-name/di/dioxus-cli/package.nix
+++ b/pkgs/by-name/di/dioxus-cli/package.nix
@@ -9,7 +9,7 @@
  installShellFiles,
  makeWrapper,
  esbuild,
-  wasm-bindgen-cli_0_2_126,
+  wasm-bindgen-cli_0_2_127,
  testers,
  dioxus-cli,
  withTelemetry ? false,
@@ -81,7 +81,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
      --suffix PATH : ${
        lib.makeBinPath [
          esbuild
-          wasm-bindgen-cli_0_2_126
+          wasm-bindgen-cli_0_2_127
        ]
      }
  '';
@@ -96,6 +96,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
    ];
    maintainers = with lib.maintainers; [
      anish
+      hackcraft_
    ];
    platforms = lib.platforms.all;
    mainProgram = "dx";
--- a/pkgs/by-name/di/diskwatch/package.nix
+++ b/pkgs/by-name/di/diskwatch/package.nix
@@ -11,18 +11,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "diskwatch";
-  version = "0.5.7";
+  version = "0.5.8";

  src = fetchFromGitHub {
    owner = "matthart1983";
    repo = "diskwatch";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-RDQg3DIlfF/BIxcN8+Jg1UWnPZYp73wmfUb8DLsw9Ng=";
+    hash = "sha256-06zBqYPk9d+SOdltUcnHe703znyD+nPRcELV94D157w=";
  };

  __structuredAttrs = true;

-  cargoHash = "sha256-zgPA8YUVaN8ZqosjlSZzAxLBwMwturQdF2eZpyXlIAQ=";
+  cargoHash = "sha256-y7QCnaJI8F4FzQZ8jcLuHBqmsFeaF+R0ehX3Oa50JgE=";

  nativeCheckInputs = [ versionCheckHook ];

--- a/pkgs/by-name/ex/exoscale-cli/package.nix
+++ b/pkgs/by-name/ex/exoscale-cli/package.nix
@@ -7,20 +7,23 @@

 buildGoModule (finalAttrs: {
  pname = "exoscale-cli";
-  version = "1.93.0";
+  version = "1.99.0";

  src = fetchFromGitHub {
    owner = "exoscale";
    repo = "cli";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-8GEho1mlxqggVFwUtvpMGyJKk/E+eFN2FnCQJwK51L0=";
+    sha256 = "sha256-n7o15s2aqGGMqL6kyiIVxgJGeOUjM6WIVsEQAWOQ8b8=";
  };

  vendorHash = null;

  nativeBuildInputs = [ installShellFiles ];

-  excludedPackages = [ "internal/integ" ];
+  excludedPackages = [
+    "tests/e2e"
+    "tests/integ"
+  ];

  ldflags = [
    "-s"
--- a/pkgs/by-name/fl/fluffychat/package.nix
+++ b/pkgs/by-name/fl/fluffychat/package.nix
@@ -39,13 +39,13 @@ in
 flutter344.buildFlutterApplication (
  rec {
    pname = "fluffychat-${targetFlutterPlatform}";
-    version = "2.8.0";
+    version = "2.9.4";

    src = fetchFromGitHub {
      owner = "krille-chan";
      repo = "fluffychat";
      tag = "v${version}";
-      hash = "sha256-+2srYuGNsCvxc89gq3zHgeCHrWTid7Oqtdno/Q/9hgk=";
+      hash = "sha256-nL0zyOg3pXbgg9hkXzq6B2igmUQ5jkTVlVi7k8TLggA=";
    };

    inherit pubspecLock;
--- a/pkgs/by-name/fl/fluffychat/pubspec.lock.json
+++ b/pkgs/by-name/fl/fluffychat/pubspec.lock.json
@@ -4,41 +4,41 @@
      "dependency": "transitive",
      "description": {
        "name": "_fe_analyzer_shared",
-        "sha256": "8d7ff3948166b8ec5da0fbb5962000926b8e02f2ed9b3e51d1738905fbd4c98d",
+        "sha256": "1dd467c7e56541bea70bbd35d537e3aa12dfba81f39e2a75bb6a61fc5595985b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "93.0.0"
+      "version": "97.0.0"
    },
    "analysis_server_plugin": {
      "dependency": "transitive",
      "description": {
        "name": "analysis_server_plugin",
-        "sha256": "5f3920acbd5765764ec9ef6c5bbdd102015424281232ee4fb4f5431c87abb4eb",
+        "sha256": "0dfddfb7e765a3d4583c185a0b755f59844c862affc88d2496ceac7a1a3d3659",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.3.7"
+      "version": "0.3.11"
    },
    "analyzer": {
      "dependency": "transitive",
      "description": {
        "name": "analyzer",
-        "sha256": "de7148ed2fcec579b19f122c1800933dfa028f6d9fd38a152b04b1516cec120b",
+        "sha256": "041602214e3ec5a02ba85c08fe8e381aa25ac5367db17d03fbb6d22d851d4bba",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.0.1"
+      "version": "11.0.0"
    },
    "analyzer_plugin": {
      "dependency": "transitive",
      "description": {
        "name": "analyzer_plugin",
-        "sha256": "7df504f0c9d6891bacc9f73a5a8c5f6fe4fc49c90ec8e3379916372906ba0b32",
+        "sha256": "06d68a8c9e7302fa44c45aba77d792b6926430a47e0cf82abf6b90436a70d9f4",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.14.1"
+      "version": "0.14.5"
    },
    "ansicolor": {
      "dependency": "transitive",
@@ -84,11 +84,11 @@
      "dependency": "transitive",
      "description": {
        "name": "audio_session",
-        "sha256": "7217b229db57cc4dc577a8abb56b7429a5a212b978517a5be578704bfe5e568b",
+        "sha256": "f9e7711a0e24ca8b40f5d7ac374c3c6e55016f3157912badd18199cdbbca5c4d",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.3"
+      "version": "0.2.4"
    },
    "badges": {
      "dependency": "direct main",
@@ -284,21 +284,31 @@
      "dependency": "transitive",
      "description": {
        "name": "coverage",
-        "sha256": "5da775aa218eaf2151c721b16c01c7676fbfdd99cebba2bf64e8b807a28ff94d",
+        "sha256": "956a3de0725ca232ad353565a8290d3357592bf4250f6f298a185e2d949c5d3d",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.15.0"
+      "version": "1.15.1"
+    },
+    "crop_image": {
+      "dependency": "direct main",
+      "description": {
+        "name": "crop_image",
+        "sha256": "27cbce1685a595efee62caab81c98b49b636f765c1da86353f58f5b2bf2775d8",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.0.17"
    },
    "cross_file": {
      "dependency": "direct main",
      "description": {
        "name": "cross_file",
-        "sha256": "28bb3ae56f117b5aec029d702a90f57d285cd975c3c5c281eaca38dbc47c5937",
+        "sha256": "92c9c43c383bfa1c32079d3bc492d55d6d4318044b7b47edaff8971cbb555c51",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.3.5+2"
+      "version": "0.3.5+4"
    },
    "crypto": {
      "dependency": "transitive",
@@ -334,11 +344,11 @@
      "dependency": "direct dev",
      "description": {
        "name": "dart_code_linter",
-        "sha256": "44cce8527a2094201067b50aed97778930638cc43e8bb3cb0b40a90c36fb9c84",
+        "sha256": "83d8739948c5d1538240b80c26d94d1de648c143d7c26bfe80f4e3215e4b5096",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.1.6"
+      "version": "4.1.9"
    },
    "dart_earcut": {
      "dependency": "transitive",
@@ -384,11 +394,11 @@
      "dependency": "transitive",
      "description": {
        "name": "dbus",
-        "sha256": "d0c98dcd4f5169878b6cf8f6e0a52403a9dff371a3e2f019697accbf6f44a270",
+        "sha256": "0ce9b0a839e6dee59a37a623d2fc26a35bbbe6404213e419b0d6411023d62645",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.7.12"
+      "version": "0.7.14"
    },
    "desktop_drop": {
      "dependency": "direct main",
@@ -434,21 +444,21 @@
      "dependency": "direct main",
      "description": {
        "name": "dynamic_color",
-        "sha256": "43a5a6679649a7731ab860334a5812f2067c2d9ce6452cf069c5e0c25336c17c",
+        "sha256": "4aeb76de323e8eb660bab5557d826ad7ebbf1434a598f0c6aa8a11a9696a6757",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.8.1"
+      "version": "1.9.0"
    },
    "emoji_picker_flutter": {
      "dependency": "direct main",
      "description": {
        "name": "emoji_picker_flutter",
-        "sha256": "984d3e9b9cf3175df9a868ce4a2d9611491e80e5d3b8e2b1e8991a4998972885",
+        "sha256": "47794613fc533225bb506885e378e5b2c7097af06acbfd409a0bab444613a51e",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.4.0"
+      "version": "4.5.3"
    },
    "fake_async": {
      "dependency": "transitive",
@@ -514,11 +524,11 @@
      "dependency": "transitive",
      "description": {
        "name": "file_selector_android",
-        "sha256": "89243030ea4b3463fb402b44d5eeacc4ccb1c46a88870cb2a5080d693200c1ed",
+        "sha256": "6a26687fa65cbc28a5345c7ae6f227e89f0b47740978a4c475b1a625da7a331b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.5.2+6"
+      "version": "0.5.2+8"
    },
    "file_selector_ios": {
      "dependency": "transitive",
@@ -564,11 +574,11 @@
      "dependency": "transitive",
      "description": {
        "name": "file_selector_web",
-        "sha256": "c4c0ea4224d97a60a7067eca0c8fd419e708ff830e0c83b11a48faf566cec3e7",
+        "sha256": "73181fbc5257776d8ecaa6a94ab3c8e920ad143b9132a6d984a9271dfc6928d3",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.9.4+2"
+      "version": "0.9.5"
    },
    "file_selector_windows": {
      "dependency": "transitive",
@@ -606,11 +616,11 @@
      "dependency": "direct main",
      "description": {
        "name": "flutter_foreground_task",
-        "sha256": "fc5c01a5e1b8f7bb51d0c737714f0c50440dbdf1aeddc5f8cbba313aa6fd4856",
+        "sha256": "0dad7e6a4ac57aeb0e680e35ec7ae997f1a2b8579fdb85b16dd16e299b634f4f",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "9.2.2"
+      "version": "10.0.0"
    },
    "flutter_launcher_icons": {
      "dependency": "direct dev",
@@ -646,11 +656,11 @@
      "dependency": "direct main",
      "description": {
        "name": "flutter_local_notifications",
-        "sha256": "a0d7141f14cabcee42967470a858dfc99dd6cfb70d3cab404bacfcafa9e84e70",
+        "sha256": "1447ba911c60f2ba3f25dae1af151ec187162566b0f57e37771bf0b400f013ad",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "22.0.1"
+      "version": "22.3.0"
    },
    "flutter_local_notifications_linux": {
      "dependency": "transitive",
@@ -666,11 +676,11 @@
      "dependency": "transitive",
      "description": {
        "name": "flutter_local_notifications_platform_interface",
-        "sha256": "ff0013eae795e8dc8fad4a8992a209e64d3ba2fbd8bf5e43c36bf448f95bd814",
+        "sha256": "43c3761d916c9bd3d5c7ebbc44d82f4990329840c0c5d62ad5260cc1b5d399bd",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "12.0.0"
+      "version": "12.2.0"
    },
    "flutter_local_notifications_web": {
      "dependency": "transitive",
@@ -712,51 +722,51 @@
      "dependency": "direct main",
      "description": {
        "name": "flutter_new_badger",
-        "sha256": "d3742ace8009663db1ac6ba0377b092f479c35deb33e05514ba05cc0b0a5aaaa",
+        "sha256": "586d4ea87d687d8e2bb3e9972381b4b0bedcd0b2b9fd9d13263dfd3398740746",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.1.1"
+      "version": "2.0.0"
    },
    "flutter_plugin_android_lifecycle": {
      "dependency": "transitive",
      "description": {
        "name": "flutter_plugin_android_lifecycle",
-        "sha256": "38d1c268de9097ff59cf0e844ac38759fc78f76836d37edad06fa21e182055a0",
+        "sha256": "3854fe5e3bff0b113c658f260b90c95dea17c92db0f2addeac2e343dd9969785",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.0.34"
+      "version": "2.0.35"
    },
    "flutter_rust_bridge": {
      "dependency": "transitive",
      "description": {
        "name": "flutter_rust_bridge",
-        "sha256": "37ef40bc6f863652e865f0b2563ea07f0d3c58d8efad803cc01933a4b2ee067e",
+        "sha256": "e87d6b9ee934dcd24a128ccb2bd91905d2d5fe5c06245d6a8f5477d4907a437a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.11.1"
+      "version": "2.12.0"
    },
    "flutter_secure_storage": {
      "dependency": "direct main",
      "description": {
        "name": "flutter_secure_storage",
-        "sha256": "7686b1d6a29985dcbb808c59518226e603e3bfa7c0ddfd1a0d00e4cda77c868e",
+        "sha256": "15e8c8fe269fdf7d469b23008ab3df521c8b826ed345820532364c31bdebace6",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.3.1"
+      "version": "11.0.0"
    },
    "flutter_secure_storage_darwin": {
      "dependency": "transitive",
      "description": {
        "name": "flutter_secure_storage_darwin",
-        "sha256": "82329fa5cdf343773b1b6897dea959105a29f092454259edff92f9f6637e8149",
+        "sha256": "ac6d76a752de0cd738334eb4b21743fc4943f449f5b6e308f18838b048c02ac0",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.3.2"
+      "version": "0.4.0"
    },
    "flutter_secure_storage_linux": {
      "dependency": "transitive",
@@ -818,11 +828,11 @@
      "dependency": "direct main",
      "description": {
        "name": "flutter_vodozemac",
-        "sha256": "ef4c3580a7f2fe8eebb7602c6cba593a42b4a5e5466c372a022f77ccc14914a5",
+        "sha256": "7e893533d757501eba4aedeecb54586ac2f3fa5e4f28de3e5723b383d5293d7e",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.5.0"
+      "version": "0.7.1"
    },
    "flutter_web_auth_2": {
      "dependency": "direct main",
@@ -930,11 +940,11 @@
      "dependency": "transitive",
      "description": {
        "name": "geolocator_platform_interface",
-        "sha256": "30cb64f0b9adcc0fb36f628b4ebf4f731a2961a0ebd849f4b56200205056fe67",
+        "sha256": "cdb082e4f048b69da244117b7914cc60d2a8897546ffaa4f2529c786ded7aee2",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.2.6"
+      "version": "4.2.8"
    },
    "geolocator_web": {
      "dependency": "transitive",
@@ -1090,11 +1100,11 @@
      "dependency": "transitive",
      "description": {
        "name": "image_picker_android",
-        "sha256": "d5b3e1774af29c9ab00103afb0d4614070f924d2e0057ac867ec98800114793f",
+        "sha256": "6f3a1995eafb000333174fae92202622033b0ee7fd917a6cd3730295264df84a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.8.13+17"
+      "version": "0.8.13+19"
    },
    "image_picker_for_web": {
      "dependency": "transitive",
@@ -1426,11 +1436,11 @@
      "dependency": "direct main",
      "description": {
        "name": "matrix",
-        "sha256": "25ab47abd6a98c5c1affd1c735b83dcd01844f49c60483d679ffb9463f0a3f61",
+        "sha256": "3d6c6b6dabbcca8e16a4ebfb19baddcd54a15654909d4b6a39fbc657f6727d01",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "8.1.0"
+      "version": "10.0.1"
    },
    "meta": {
      "dependency": "transitive",
@@ -1466,11 +1476,11 @@
      "dependency": "direct main",
      "description": {
        "name": "native_imaging",
-        "sha256": "ced7acb18b80a431578c9068eb9c3ee75f8df39491e8adaf471635bac282d651",
+        "sha256": "33efb2fb86f7e04f917969a5f61618b89765dd324a3683251d32349ff6338a2b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.4.0"
+      "version": "0.5.0"
    },
    "native_toolchain_c": {
      "dependency": "transitive",
@@ -1486,11 +1496,11 @@
      "dependency": "transitive",
      "description": {
        "name": "native_toolchain_cmake",
-        "sha256": "cd4865568c57f03c7ab1f138cc5032c5f77825d27083d6f5a3e9bbb3e8014a87",
+        "sha256": "de90e8952bad0684bdcff4d674c53d961f5cd1fdcf3a0255a669a35986c4ac1d",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.5"
+      "version": "0.2.7"
    },
    "nested": {
      "dependency": "transitive",
@@ -1546,11 +1556,11 @@
      "dependency": "direct main",
      "description": {
        "name": "package_info_plus",
-        "sha256": "f5c435dc0e0d461e5b32471a870f769b6a1cc46930637efe24fbc535314e78ad",
+        "sha256": "127e1751e37ffb2ff4658beeaca77bad0c27bf5f932bd3a501c2296926d4b481",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.2.0"
+      "version": "10.2.1"
    },
    "package_info_plus_platform_interface": {
      "dependency": "transitive",
@@ -1623,7 +1633,7 @@
      "version": "2.3.1"
    },
    "path_provider_foundation": {
-      "dependency": "transitive",
+      "dependency": "direct main",
      "description": {
        "name": "path_provider_foundation",
        "sha256": "2a376b7d6392d80cd3705782d2caa734ca4727776db0b6ec36ef3f1855197699",
@@ -1636,21 +1646,21 @@
      "dependency": "transitive",
      "description": {
        "name": "path_provider_linux",
-        "sha256": "f7a1fe3a634fe7734c8d3f2766ad746ae2a2884abe22e241a8b301bf5cac3279",
+        "sha256": "58c2005f147315b11e9b4a7bc889cd5203e250cba8e3f012dae259b4972b5c16",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.2.1"
+      "version": "2.2.2"
    },
    "path_provider_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "path_provider_platform_interface",
-        "sha256": "88f5779f72ba699763fa3a3b06aa4bf6de76c8e5de842cf6f29e2e06476c2334",
+        "sha256": "484838772624c3a4b94f1e44a3e19897fee738f2d5c4ce448443b0417f7c9dda",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.1.2"
+      "version": "2.1.3"
    },
    "path_provider_windows": {
      "dependency": "transitive",
@@ -1876,11 +1886,11 @@
      "dependency": "transitive",
      "description": {
        "name": "record_linux",
-        "sha256": "305526af0560866a0cc4219aa3726ef8541f819e14bd5f65b73ffdb7dc5911be",
+        "sha256": "b7484fdaf1f6d291543b9cf615e78096662b02df68d7a4728b13f352bde58d27",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.1.0"
+      "version": "2.1.1"
    },
    "record_macos": {
      "dependency": "transitive",
@@ -1926,11 +1936,11 @@
      "dependency": "transitive",
      "description": {
        "name": "record_windows",
-        "sha256": "39ca03e7ae4df5e2512bc3c92b0ef9a7b148d9295ae8ac92df6beb4daf939d94",
+        "sha256": "9cedfacee553a02b48977a5e1d74bf08a36cc5647eba56fb83e57da20552f443",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.2.0"
+      "version": "2.2.2"
    },
    "retry": {
      "dependency": "transitive",
@@ -1966,51 +1976,51 @@
      "dependency": "transitive",
      "description": {
        "name": "screen_retriever",
-        "sha256": "570dbc8e4f70bac451e0efc9c9bb19fa2d6799a11e6ef04f946d7886d2e23d0c",
+        "sha256": "ace919117a7520c13a50a6259e60c4a0d4cbe98809468792a91b5c5adada2aa6",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.0"
+      "version": "0.2.2"
    },
    "screen_retriever_linux": {
      "dependency": "transitive",
      "description": {
        "name": "screen_retriever_linux",
-        "sha256": "f7f8120c92ef0784e58491ab664d01efda79a922b025ff286e29aa123ea3dd18",
+        "sha256": "7b52006a5ceae1f3d5af7f77188c3290d6e7d8ded16d99809bea84967c65c257",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.0"
+      "version": "0.2.2"
    },
    "screen_retriever_macos": {
      "dependency": "transitive",
      "description": {
        "name": "screen_retriever_macos",
-        "sha256": "71f956e65c97315dd661d71f828708bd97b6d358e776f1a30d5aa7d22d78a149",
+        "sha256": "a1489b99cce597c45a54b9aae1cd94c8d4705353b7e0bb2457a6e4de44e0ad8a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.0"
+      "version": "0.2.2"
    },
    "screen_retriever_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "screen_retriever_platform_interface",
-        "sha256": "ee197f4581ff0d5608587819af40490748e1e39e648d7680ecf95c05197240c0",
+        "sha256": "94a5535277510a63184ca178ce12a1449bc0b38618879aa1c18bf57369c5064a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.0"
+      "version": "0.2.2"
    },
    "screen_retriever_windows": {
      "dependency": "transitive",
      "description": {
        "name": "screen_retriever_windows",
-        "sha256": "449ee257f03ca98a57288ee526a301a430a344a161f9202b4fcc38576716fe13",
+        "sha256": "dafc6922b0bfbf1d48cf3ccbf519b4fff47bdcb820da1728ea6db675fecc9324",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.2.0"
+      "version": "0.2.2"
    },
    "scroll_to_index": {
      "dependency": "direct main",
@@ -2036,21 +2046,21 @@
      "dependency": "direct main",
      "description": {
        "name": "share_plus",
-        "sha256": "9eee8283462d91a7a1c8bdb67d08874abd75a2f8fae3bc0ca033035e375fb3d8",
+        "sha256": "34f00f9becd2743c1fb05363d624f9f70d37f7ccdcdda47450bc0b8c9d327b8c",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "13.2.0"
+      "version": "13.3.0"
    },
    "share_plus_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "share_plus_platform_interface",
-        "sha256": "7f7ae28cf400d13f811e297ff37742dba83b79e0a6f5dce14eec0248274e6ce9",
+        "sha256": "365ef7379fc22507256adda3385152942ffce08935452bc972c2e52a0bebae41",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "7.1.0"
+      "version": "7.2.0"
    },
    "shared_preferences": {
      "dependency": "direct main",
@@ -2066,11 +2076,11 @@
      "dependency": "transitive",
      "description": {
        "name": "shared_preferences_android",
-        "sha256": "e8d4762b1e2e8578fc4d0fd548cebf24afd24f49719c08974df92834565e2c53",
+        "sha256": "0634e64bd719f89c012f392938e173521f535d3ecaf66558fa94a056d22b5cc7",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.4.23"
+      "version": "2.4.27"
    },
    "shared_preferences_foundation": {
      "dependency": "transitive",
@@ -2222,41 +2232,31 @@
      "dependency": "transitive",
      "description": {
        "name": "sqflite_common",
-        "sha256": "1581ffbf7a0e333b380d6a30737d78516b826cb35beb7fb0bf8a3ea0c678b465",
+        "sha256": "5bf6a55c166e73bf651ba7ec3ed486e577620e3dc8f3a9c6a258a8031b624590",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.5.8"
+      "version": "2.5.11"
    },
    "sqflite_common_ffi": {
      "dependency": "direct main",
      "description": {
        "name": "sqflite_common_ffi",
-        "sha256": "8d7b8749a516cbf6e9057f9b480b716ad14fc4f3d3873ca6938919cc626d9025",
+        "sha256": "5ccd38136edb9beb3213f6927775d52db70dfdadcdb28dad1f625ca9f2b9824f",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.3.7+1"
-    },
-    "sqlcipher_flutter_libs": {
-      "dependency": "direct main",
-      "description": {
-        "name": "sqlcipher_flutter_libs",
-        "sha256": "dd1fcc74d5baf3c36ad53e2652b2d06c9f8747494a3ccde0076e88b159dfe622",
-        "url": "https://pub.dev"
-      },
-      "source": "hosted",
-      "version": "0.6.8"
+      "version": "2.4.2"
    },
    "sqlite3": {
      "dependency": "transitive",
      "description": {
        "name": "sqlite3",
-        "sha256": "3145bd74dcdb4fd6f5c6dda4d4e4490a8087d7f286a14dee5d37087290f0f8a2",
+        "sha256": "c73fd75df1332d76a6257f4823ae4df9c791f522b97e4a60cbcad214de1becf4",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.9.4"
+      "version": "3.5.0"
    },
    "stack_trace": {
      "dependency": "transitive",
@@ -2322,11 +2322,11 @@
      "dependency": "transitive",
      "description": {
        "name": "synchronized",
-        "sha256": "63896c27e81b28f8cb4e69ead0d3e8f03f1d1e5fc531a3e579cabed6a2c7c9e5",
+        "sha256": "93b153dcb6a26dcddee6ca087dd634b53e38c10b5aa163e8e49501a776456153",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "3.4.0+1"
+      "version": "3.4.1"
    },
    "term_glyph": {
      "dependency": "transitive",
@@ -2372,11 +2372,11 @@
      "dependency": "transitive",
      "description": {
        "name": "timezone",
-        "sha256": "784a5e34d2eb62e1326f24d6f600aaaee452eb8ca8ef2f384a59244e292d158b",
+        "sha256": "981d1020d6ef8fe1e7b3de5054e5b25579ae7c403d7734adc508ffc47668e9cb",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.11.0"
+      "version": "0.11.1"
    },
    "typed_data": {
      "dependency": "transitive",
@@ -2512,11 +2512,11 @@
      "dependency": "transitive",
      "description": {
        "name": "url_launcher_android",
-        "sha256": "17bc677f0b301615530dd1d67e0a9828cafa2d0b6b6eae4cd3679b7eac4a273c",
+        "sha256": "b413d49b73867ac08dd2f9890efd3cc11f2a0e577618d50843440a1fb3776c32",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "6.3.30"
+      "version": "6.3.32"
    },
    "url_launcher_ios": {
      "dependency": "transitive",
@@ -2582,11 +2582,11 @@
      "dependency": "transitive",
      "description": {
        "name": "uuid",
-        "sha256": "1fef9e8e11e2991bb773070d4656b7bd5d850967a2456cfc83cf47925ba79489",
+        "sha256": "9b129329f58692f6e6578329498a8fe9fbe98f090beb764ffbb8ee2eadd01dcd",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.5.3"
+      "version": "4.6.0"
    },
    "vector_math": {
      "dependency": "transitive",
@@ -2622,11 +2622,11 @@
      "dependency": "transitive",
      "description": {
        "name": "video_player_android",
-        "sha256": "5121de08444d00363efdda630a69ad4d27a208a9f7586482d4909a44a1cdbc63",
+        "sha256": "e229676f8fade3e0124482495aaa2b548872cc4018b6268adfca4868be16aa74",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.11.0"
+      "version": "2.12.0"
    },
    "video_player_avfoundation": {
      "dependency": "transitive",
@@ -2672,31 +2672,31 @@
      "dependency": "transitive",
      "description": {
        "name": "vodozemac",
-        "sha256": "bbe7dd31d7f623e2aeedb92e4b71a8b519e6109ce1e2911b5a220f6752b65cda",
+        "sha256": "7726f6c53bec7458b83820500b408a7d2d1804aae018c81bafae918d1a179313",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.5.0"
+      "version": "0.7.0"
    },
    "wakelock_plus": {
      "dependency": "direct main",
      "description": {
        "name": "wakelock_plus",
-        "sha256": "824c5bba0f800e86d32e57d3d1843c531f090005cc89d9a837933e6601093d53",
+        "sha256": "7253bca0fcf40d8413ddfcf4d2a1fa0a82475e79be25a4f2c564b695c9351486",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.6.1"
+      "version": "1.7.0"
    },
    "wakelock_plus_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "wakelock_plus_platform_interface",
-        "sha256": "b13f99e992e7ae6a152e16c5559d3c07ff445b13330192662494e614ca3e7d7b",
+        "sha256": "0618d1799f0b28bcf98255b4ee8313e6fc4d38589dc4ee5fe5840d57d1aff6da",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.5.1"
+      "version": "1.6.0"
    },
    "watcher": {
      "dependency": "transitive",
@@ -2812,21 +2812,21 @@
      "dependency": "transitive",
      "description": {
        "name": "window_manager",
-        "sha256": "7eb6d6c4164ec08e1bf978d6e733f3cebe792e2a23fb07cbca25c2872bfdbdcd",
+        "sha256": "05c231fd7b23d2380f14c5cc10b7b93d60d4fa4a2fb4e0f032de27e44b5560e9",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.5.1"
+      "version": "0.5.2"
    },
    "window_to_front": {
      "dependency": "transitive",
      "description": {
        "name": "window_to_front",
-        "sha256": "7aef379752b7190c10479e12b5fd7c0b9d92adc96817d9e96c59937929512aee",
+        "sha256": "14fad8984db4415e2eeb30b04bb77140b180e260d6cb66b26de126a8657a9241",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.0.3"
+      "version": "0.0.4"
    },
    "wkt_parser": {
      "dependency": "transitive",
--- a/pkgs/by-name/gh/gh/package.nix
+++ b/pkgs/by-name/gh/gh/package.nix
@@ -1,16 +1,16 @@
 {
  lib,
  fetchFromGitHub,
-  buildGoModule,
+  buildGo127Module,
  installShellFiles,
  stdenv,
  versionCheckHook,
  makeWrapper,
 }:

-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
  pname = "gh";
-  version = "2.100.0";
+  version = "2.101.0";

  __structuredAttrs = true;

@@ -18,10 +18,10 @@ buildGoModule (finalAttrs: {
    owner = "cli";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-9tnSQPSqllE+Ke6LKyNbnOF1drzdEwesEuPdmWD1X5c=";
+    hash = "sha256-EoKF2m5sZP+uQ5AVOKkFqSCACfkeUc7vnH8PHWCO6FE=";
  };

-  vendorHash = "sha256-ZqUs2BnasF3QBX0I2Sxh2A/CnO61Vy6gRn1hkf0n9AY=";
+  vendorHash = "sha256-4KYQBgMNc/sI0mbcXSfJ7A/77VAS6NM8TOzQ3w7AlK8=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/gn/gnome-inform7/package.nix
+++ b/pkgs/by-name/gn/gnome-inform7/package.nix
@@ -36,7 +36,7 @@ let
  ratify = (
    stdenv.mkDerivation {
      pname = "ratify";
-      version = "unstable-2021-02-21";
+      version = "0-unstable-2021-02-21";
      src = fetchFromGitHub {
        owner = "ptomato";
        repo = "ratify";
@@ -63,7 +63,7 @@ let
  chimara = (
    stdenv.mkDerivation {
      pname = "chimara";
-      version = "unstable-2021-04-06";
+      version = "0.9.1-unstable-2021-04-06";
      src = fetchFromGitHub {
        owner = "chimara";
        repo = "Chimara";
@@ -101,7 +101,7 @@ let
 in
 stdenv.mkDerivation {
  pname = "gnome-inform7";
-  version = "unstable-2021-04-06";
+  version = "6M62-unstable-2021-04-06";
  src = fetchFromGitHub {
    owner = "ptomato";
    repo = "inform7-ide";
--- a/pkgs/by-name/i3/i3-auto-layout/package.nix
+++ b/pkgs/by-name/i3/i3-auto-layout/package.nix
@@ -6,7 +6,9 @@

 rustPlatform.buildRustPackage {
  pname = "i3-auto-layout";
-  version = "unstable-2022-05-29";
+  version = "0.2-unstable-2022-03-29";
+
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "chmln";
--- a/pkgs/by-name/i3/i3lock-fancy/package.nix
+++ b/pkgs/by-name/i3/i3lock-fancy/package.nix
@@ -17,7 +17,10 @@

 stdenv.mkDerivation {
  pname = "i3lock-fancy";
-  version = "unstable-2023-04-28";
+  version = "0.2-unstable-2023-04-28";
+
+  strictDeps = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "meskarune";
--- a/pkgs/by-name/im/imnodes/package.nix
+++ b/pkgs/by-name/im/imnodes/package.nix
@@ -13,12 +13,15 @@

 stdenv.mkDerivation {
  pname = "imnodes";
-  version = "unstable-2025-06-25";
+  version = "0.5-unstable-2025-06-25";
  outputs = [
    "out"
    "dev"
  ];

+  strictDeps = true;
+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "Nelarius";
    repo = "imnodes";
--- a/pkgs/by-name/in/invoice2data/package.nix
+++ b/pkgs/by-name/in/invoice2data/package.nix
@@ -1,46 +1,40 @@
 {
  lib,
  fetchFromGitHub,
-  fetchpatch,
  ghostscript,
  imagemagick,
  poppler-utils,
  python3,
  tesseract5,
+  versionCheckHook,
 }:

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "invoice2data";
-  version = "0.4.4";
+  version = "1.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "invoice-x";
    repo = "invoice2data";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-pAvkp8xkHYi/7ymbxaT7/Jhu44j2P8emm8GyXC6IBnI=";
+    hash = "sha256-tbPl23r8j+LdlzOvP37D9SBAdeFVTx1+rAflSo+XqRM=";
  };

-  patches = [
-    # https://github.com/invoice-x/invoice2data/pull/522
-    (fetchpatch {
-      name = "clean-up-build-dependencies.patch";
-      url = "https://github.com/invoice-x/invoice2data/commit/ccea3857c7c8295ca51dc24de6cde78774ea7e64.patch";
-      hash = "sha256-BhqPW4hWG/EaR3qBv5a68dcvIMrCCT74GdDHr0Mss5Q=";
-    })
-  ];
-
  build-system = with python3.pkgs; [
    setuptools
-    setuptools-git
+    mypy
+    ast-serialize
+    click
+    pyyaml
+    regex
  ];

  dependencies = with python3.pkgs; [
-    dateparser
-    pdfminer-six
-    pillow
+    click
+    python-dateutil
    pyyaml
-    setuptools # pkg_resources is imported during runtime
+    regex
  ];

  makeWrapperArgs = [
@@ -55,8 +49,8 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    ])
  ];

-  # Tests fails even when ran manually on my ubuntu machine !!
-  doCheck = false;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;

  pythonImportsCheck = [
    "invoice2data"
--- a/pkgs/by-name/io/ios-safari-remote-debug/package.nix
+++ b/pkgs/by-name/io/ios-safari-remote-debug/package.nix
@@ -4,9 +4,11 @@
  fetchgit,
 }:

-buildGoModule rec {
+buildGoModule (finalAttrs: {
  pname = "ios-safari-remote-debug";
-  version = "unstable-2024-09-09";
+  version = "0-unstable-2024-09-09";
+
+  __structuredAttrs = true;

  src = fetchgit {
    url = "https://git.gay/besties/ios-safari-remote-debug.git";
@@ -19,12 +21,12 @@ buildGoModule rec {

  postPatch = ''
    substituteInPlace build/build.go \
-      --replace-fail 'cp.Copy("' 'cp.Copy("${placeholder "out"}/share/${pname}/'
+      --replace-fail 'cp.Copy("' 'cp.Copy("${placeholder "out"}/share/${finalAttrs.pname}/'
  '';

  postBuild = ''
-    mkdir -p $out/share/${pname}
-    cp -r injectedCode views $out/share/${pname}
+    mkdir -p $out/share/${finalAttrs.pname}
+    cp -r injectedCode views $out/share/${finalAttrs.pname}
  '';

  meta = {
@@ -34,4 +36,4 @@ buildGoModule rec {
    mainProgram = "ios-safari-remote-debug";
    maintainers = [ ];
  };
-}
+})
--- a/pkgs/by-name/ji/jitsi-meet-electron/package.nix
+++ b/pkgs/by-name/ji/jitsi-meet-electron/package.nix
@@ -17,6 +17,7 @@
  zlib,

  electron_41,
+  nix-update-script,
 }:

 let
@@ -24,13 +25,13 @@ let
 in
 buildNpmPackage rec {
  pname = "jitsi-meet-electron";
-  version = "2026.5.0";
+  version = "2026.7.0";

  src = fetchFromGitHub {
    owner = "jitsi";
    repo = "jitsi-meet-electron";
    rev = "v${version}";
-    hash = "sha256-yeYDft2d2RHNXYrmnHlBzsZ43bvBgwwsqxQr/Q+/AuQ=";
+    hash = "sha256-l0vnnIJpG5Ttt9lgWx9tsS8Vne53sGW/50CsnwPFhUQ=";
  };

  nativeBuildInputs = [
@@ -52,7 +53,7 @@ buildNpmPackage rec {
    zlib
  ];

-  npmDepsHash = "sha256-5y7q6SnA9s85+HFOhqif1N8XRO7ekGJ4nfVbWZ/diuI=";
+  npmDepsHash = "sha256-m2+knAWSSraNGNGjMFoMC9+MlOhs+XyXs90GcMx9ulw=";

  makeCacheWritable = true;

@@ -132,6 +133,8 @@ buildNpmPackage rec {
    })
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/jitsi/jitsi-meet-electron/releases/tag/${src.rev}";
    description = "Jitsi Meet desktop application powered by Electron";
--- a/pkgs/by-name/k3/k3sup/package.nix
+++ b/pkgs/by-name/k3/k3sup/package.nix
@@ -6,17 +6,20 @@
  installShellFiles,
  bash,
  openssh,
+  versionCheckHook,
 }:

 buildGoModule (finalAttrs: {
  pname = "k3sup";
  version = "0.13.13";

+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "alexellis";
    repo = "k3sup";
-    rev = finalAttrs.version;
-    sha256 = "sha256-6S8PMIRITXbS5fFexCBEekVDZwTvZ4bN9sanjiDY39M=";
+    tag = finalAttrs.version;
+    hash = "sha256-6S8PMIRITXbS5fFexCBEekVDZwTvZ4bN9sanjiDY39M=";
  };

  nativeBuildInputs = [
@@ -35,7 +38,6 @@ buildGoModule (finalAttrs: {

  ldflags = [
    "-s"
-    "-w"
    "-X github.com/alexellis/k3sup/cmd.GitCommit=ref/tags/${finalAttrs.version}"
    "-X github.com/alexellis/k3sup/cmd.Version=${finalAttrs.version}"
  ];
@@ -50,6 +52,10 @@ buildGoModule (finalAttrs: {
      --fish <($out/bin/k3sup completion fish)
  '';

+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
  meta = {
    homepage = "https://github.com/alexellis/k3sup";
    description = "Bootstrap Kubernetes with k3s over SSH";
--- a/pkgs/by-name/ko/komikku/package.nix
+++ b/pkgs/by-name/ko/komikku/package.nix
@@ -1,55 +1,57 @@
 {
  lib,
  fetchFromCodeberg,
+  blueprint-compiler,
  desktop-file-utils,
  gettext,
  glib,
  glib-networking,
+  gnome,
  gobject-introspection,
-  blueprint-compiler,
  gtk4,
+  gtksourceview5,
  libadwaita,
  libglycin,
-  webkitgtk_6_0,
+  librsvg,
  meson,
  ninja,
  pkg-config,
  python3,
-  wrapGAppsHook4,
-  librsvg,
-  gnome,
+  webkitgtk_6_0,
  webp-pixbuf-loader,
+  wrapGAppsHook4,
  nix-update-script,
 }:

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "komikku";
-  version = "50.11.0";
+  version = "51.0.0";
  pyproject = false;

  src = fetchFromCodeberg {
    owner = "valos";
    repo = "Komikku";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WO0wqDZP6rIe7B2oboJctQ302Ot2ooecqCSWOERdURg=";
+    hash = "sha256-5YEvYdkktoIEWoyTLop4tNVxG69/qPneOO0i0nW/Tfg=";
  };

  nativeBuildInputs = [
+    blueprint-compiler
+    desktop-file-utils
+    gettext
+    glib # for glib-compile-resources
+    gobject-introspection
    meson
    ninja
    pkg-config
    wrapGAppsHook4
-    gettext
-    glib # for glib-compile-resources
-    desktop-file-utils
-    gobject-introspection
-    blueprint-compiler
  ];

  buildInputs = [
    glib
    glib-networking
    gtk4
+    gtksourceview5
    libadwaita
    libglycin
    webkitgtk_6_0
@@ -59,6 +61,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    beautifulsoup4
    brotli
    colorthief
+    curl-cffi
    dateparser
    ebooklib
    emoji
@@ -68,10 +71,10 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    natsort
    piexif
    pillow
-    curl-cffi
    pygobject3
    pyjwt
    pypdf
+    pytesseract
    python-magic
    rarfile
    requests
--- a/pkgs/by-name/la/laminar/package.nix
+++ b/pkgs/by-name/la/laminar/package.nix
@@ -4,6 +4,7 @@
  fetchurl,
  fetchFromGitHub,
  cmake,
+  pkg-config,
  capnproto,
  sqlite,
  boost,
@@ -17,8 +18,8 @@ let
    sha256 = "1hm5kci2g6n5ikrvp1kpkkdzimjgylv1xicg2vnkbvd9rb56qa99";
  };
  js.ansi_up = fetchurl {
-    url = "https://raw.githubusercontent.com/drudru/ansi_up/v4.0.4/ansi_up.js";
-    sha256 = "1dx8wn38ds8d01kkih26fx1yrisg3kpz61qynjr4zil03ap0hrlr";
+    url = "https://raw.githubusercontent.com/drudru/ansi_up/v5.2.1/ansi_up.js";
+    hash = "sha256-n+tjM7z62ovMht6Zud3jfyQvgrO6cL9zdyEBakKuuRs=";
  };
  js.Chart = fetchurl {
    url = "https://cdnjs.cloudflare.com/ajax/libs/Chart.js/3.9.1/chart.min.js";
@@ -27,7 +28,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "laminar";
-  version = "1.3";
+  version = "1.4";
  outputs = [
    "out"
    "doc"
@@ -36,13 +37,14 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "ohwgiles";
    repo = "laminar";
    rev = finalAttrs.version;
-    hash = "sha256-eo5WzvmjBEe0LAfZdQ/U0XepEE2kdWKKiyE4HOi3RXk=";
+    hash = "sha256-epaiwaQkVohUEDUZNzUxWcOoJ+CxEUlJ8lX2C7e9vWo=";
  };
  patches = [ ./patches/no-network.patch ];

  # We need both binary from "capnproto" and library files.
  nativeBuildInputs = [
    cmake
+    pkg-config
    pandoc
    capnproto
  ];
--- a/pkgs/by-name/la/laminar/patches/no-network.patch
+++ b/pkgs/by-name/la/laminar/patches/no-network.patch
@@ -4,30 +4,28 @@ does so unconditionally is twice as bad.
 Required files are downloaded as separate fixed-output derivations and
 put into correct location before build phase starts.

--- laminar-1.3/CMakeLists.txt
-+++ laminar-1.3-new/CMakeLists.txt
-@@ -82,13 +82,6 @@
+--- laminar-1.4/CMakeLists.txt
+++ laminar-1.4-new/CMakeLists.txt
+@@ -119,13 +119,6 @@
     COMMAND sh -c '( echo -n "\\#define INDEX_HTML_UNCOMPRESSED_SIZE " && wc -c < "${CMAKE_SOURCE_DIR}/src/resources/index.html" ) > index_html_size.h'
     DEPENDS src/resources/index.html)
- 
+
 -# Download 3rd-party frontend JS libs...
 -file(DOWNLOAD https://cdnjs.cloudflare.com/ajax/libs/vue/2.6.12/vue.min.js
-	js/vue.min.js EXPECTED_MD5 fb192338844efe86ec759a40152fcb8e)
-file(DOWNLOAD https://raw.githubusercontent.com/drudru/ansi_up/v4.0.4/ansi_up.js
-        js/ansi_up.js EXPECTED_MD5 b31968e1a8fed0fa82305e978161f7f5)
+-    ${CMAKE_BINARY_DIR}/js/vue.min.js EXPECTED_MD5 fb192338844efe86ec759a40152fcb8e)
+-file(DOWNLOAD https://raw.githubusercontent.com/drudru/ansi_up/v5.2.1/ansi_up.js
+-    ${CMAKE_BINARY_DIR}/js/ansi_up.js EXPECTED_MD5 77202f7815d9d7f7764793d93598ba88)
 -file(DOWNLOAD https://cdnjs.cloudflare.com/ajax/libs/Chart.js/3.9.1/chart.min.js
-        js/Chart.min.js EXPECTED_MD5 7dd5ea7d2cf22a1c42b43c40093d2669)
+-    ${CMAKE_BINARY_DIR}/js/Chart.min.js EXPECTED_MD5 7dd5ea7d2cf22a1c42b43c40093d2669)
 # ...and compile them
 generate_compressed_bins(${CMAKE_BINARY_DIR} js/vue.min.js
     js/ansi_up.js js/Chart.min.js)
-@@ -139,12 +132,12 @@
-     target_link_libraries(laminar-tests ${GTEST_LIBRARIES} capnp-rpc capnp kj-http kj-async kj pthread sqlite3 z)
+@@ -199,16 +192,16 @@
+                                         Threads::Threads SQLite3::SQLite3 ZLIB::ZLIB)
 endif()
- 
-set(SYSTEMD_UNITDIR /lib/systemd/system CACHE PATH "Path to systemd unit files")
+
 -set(BASH_COMPLETIONS_DIR /usr/share/bash-completion/completions CACHE PATH "Path to bash completions directory")
 -set(ZSH_COMPLETIONS_DIR /usr/share/zsh/site-functions CACHE PATH "Path to zsh completions directory")
-+set(SYSTEMD_UNITDIR lib/systemd/system CACHE PATH "Path to systemd unit files")
 +set(BASH_COMPLETIONS_DIR usr/share/bash-completion/completions CACHE PATH "Path to bash completions directory")
 +set(ZSH_COMPLETIONS_DIR usr/share/zsh/site-functions CACHE PATH "Path to zsh completions directory")
 install(TARGETS laminard RUNTIME DESTINATION sbin)
@@ -36,4 +34,10 @@ put into correct location before build phase starts.
 +install(FILES etc/laminar.conf DESTINATION etc)
 install(FILES etc/laminarc-completion.bash DESTINATION ${BASH_COMPLETIONS_DIR} RENAME laminarc)
 install(FILES etc/laminarc-completion.zsh DESTINATION ${ZSH_COMPLETIONS_DIR} RENAME _laminarc)
- 
+
+ if (${CMAKE_SYSTEM_NAME} STREQUAL "Linux")
+-    set(SYSTEMD_UNITDIR /lib/systemd/system CACHE PATH "Path to systemd unit files")
+    set(SYSTEMD_UNITDIR lib/systemd/system CACHE PATH "Path to systemd unit files")
+     configure_file(etc/laminar.service.in laminar.service @ONLY)
+     install(FILES ${CMAKE_CURRENT_BINARY_DIR}/laminar.service DESTINATION ${SYSTEMD_UNITDIR})
+ endif()
--- a/pkgs/by-name/lg/lgogdownloader/package.nix
+++ b/pkgs/by-name/lg/lgogdownloader/package.nix
@@ -2,79 +2,69 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  boost,
  cmake,
  pkg-config,
  curl,
-  boost,
-  liboauth,
+  html-tidy,
  jsoncpp,
-  htmlcxx,
+  ninja,
+  nix-update-script,
  rhash,
  tinyxml-2,
-  help2man,
-  html-tidy,
-  qt6,
-  testers,
-
-  enableGui ? false,
+  versionCheckHook,
+  zlib,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "lgogdownloader";
-  version = "3.18";
+  version = "3.19";
+
+  __structuredAttrs = true;
+  strictDeps = true;

  src = fetchFromGitHub {
    owner = "Sude-";
    repo = "lgogdownloader";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dVEV2smZxB6+Utm9FApiFydAS3hLm4y9YZja1B/PiEk=";
+    hash = "sha256-4JHV2m5zSekWYpO0j3weH5hiG/kmciDF4Jby46ykxCI=";
  };

-  postPatch = ''
-    substituteInPlace CMakeLists.txt \
-      --replace-fail "set_property(TARGET \''${PROJECT_NAME} PROPERTY CXX_STANDARD 11)" "set_property(TARGET \''${PROJECT_NAME} PROPERTY CXX_STANDARD 17)"
-  '';
-
  nativeBuildInputs = [
    cmake
+    ninja
    pkg-config
-    help2man
-    html-tidy
-  ]
-  ++ lib.optional enableGui qt6.wrapQtAppsHook;
+  ];

  buildInputs = [
    boost
    curl
-    htmlcxx
+    html-tidy
    jsoncpp
-    liboauth
    rhash
    tinyxml-2
-  ]
-  ++ lib.optionals enableGui [
-    qt6.qtbase
-    qt6.qtwebengine
+    zlib
  ];

-  cmakeFlags = [
-    (lib.cmakeBool "USE_QT_GUI" enableGui)
-    (lib.cmakeFeature "CMAKE_CXX_STANDARD" "17")
-    (lib.cmakeFeature "CMAKE_CXX_FLAGS" "-DJSONCPP_HAS_STRING_VIEW=1")
-  ];
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  preVersionCheck = ''
+    export HOME=$TMPDIR
+  '';
+  versionCheckKeepEnvironment = [ "HOME" ];

-  passthru.tests = {
-    version = testers.testVersion { package = finalAttrs.finalPackage; };
-  };
+  passthru.updateScript = nix-update-script { };

  meta = {
-    description = "Unofficial downloader to GOG.com for Linux users. It uses the same API as the official GOGDownloader";
-    mainProgram = "lgogdownloader";
-    homepage = "https://github.com/Sude-/lgogdownloader";
+    description = "Unofficial GOG.com downloader";
+    homepage = "https://sites.google.com/site/gogdownloader/";
+    changelog = "https://github.com/Sude-/lgogdownloader/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.wtfpl;
-    # qtbase requires a sandbox profile with read access to /usr/share/icu.
-    # To prevent build failures in CI, we disable Darwin support when the GUI is enabled.
-    platforms = lib.platforms.linux ++ lib.optionals (!enableGui) lib.platforms.darwin;
-    maintainers = with lib.maintainers; [ _0x4A6F ];
+    maintainers = with lib.maintainers; [
+      _0x4A6F
+      keenanweaver
+    ];
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    mainProgram = "lgogdownloader";
  };
 })
--- a/pkgs/by-name/li/libmatroska/package.nix
+++ b/pkgs/by-name/li/libmatroska/package.nix
@@ -2,19 +2,17 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  fetchpatch,
  cmake,
  libebml,
  nix-update-script,
  pkg-config,
  testers,
  validatePkgConfig,
-  libmatroska,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "libmatroska";
-  version = "1.7.1";
+  version = "1.7.2";

  outputs = [
    "dev"
@@ -25,17 +23,9 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "Matroska-Org";
    repo = "libmatroska";
    rev = "release-${finalAttrs.version}";
-    hash = "sha256-hfu3Q1lIyMlWFWUM2Pu70Hie0rlQmua7Kq8kSIWnfHE=";
+    hash = "sha256-FedoJxUsRgKQn41PZGBaeF0O29PVQEOK20LsNMK3xHo=";
  };

-  patches = [
-    (fetchpatch {
-      name = "libmatroska-fix-cmake-4.patch";
-      url = "https://github.com/Matroska-Org/libmatroska/commit/dc80e194e93e6f0e25c8ad3e015d83aca2a99e10.patch";
-      hash = "sha256-2dKRJ6z5rOrLJ5agvXQ6k8TPi5rTMA3H1wCO2F5tBbc=";
-    })
-  ];
-
  nativeBuildInputs = [
    cmake
    pkg-config
@@ -47,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
  cmakeFlags = [ "-DBUILD_SHARED_LIBS=YES" ];

  passthru = {
-    tests.pkg-config = testers.hasPkgConfigModules { package = libmatroska; };
+    tests.pkg-config = testers.hasPkgConfigModules { package = finalAttrs.finalPackage; };
    updateScript = nix-update-script {
      extraArgs = [
        "--version-regex"
--- a/pkgs/by-name/me/meowlnir/package.nix
+++ b/pkgs/by-name/me/meowlnir/package.nix
@@ -9,19 +9,19 @@

 buildGoModule rec {
  pname = "meowlnir";
-  version = "26.08";
-  tag = "v0.2608.0";
+  version = "26.09";
+  tag = "v0.2609.0";

  src = fetchFromGitHub {
    owner = "maunium";
    repo = "meowlnir";
    inherit tag;
-    hash = "sha256-q9/pdKmJOav41P8Rm4ZzNgeEPJqui22HUbH4UBoa3tY=";
+    hash = "sha256-UM1ArJqV5TFm2XM2htDzbSCQnpAhoHe0ybsmb1oP5NY=";
  };

  buildInputs = [ olm ];

-  vendorHash = "sha256-HXXAQaBaWUjnBnoiyNZB51BnPuQg9BhlDU5x2CyCW1Y=";
+  vendorHash = "sha256-0DZTXfwG+UXXQtD3kzEYCgKmiK8U4b6GNdrEZ+nY/LU=";

  doCheck = true;
  doInstallCheck = true;
--- a/pkgs/by-name/mi/mirrord/manifest.json
+++ b/pkgs/by-name/mi/mirrord/manifest.json
@@ -1,17 +1,17 @@
 {
-  "version": "3.254.0",
+  "version": "3.261.0",
  "assets": {
    "x86_64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.254.0/mirrord_linux_x86_64",
-      "hash": "sha256-gtbS/53HDQGCXeR+xVxRIEfuLL3fJOLfQpwjhhQVdok="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.261.0/mirrord_linux_x86_64",
+      "hash": "sha256-VpAC6vaJctVv+shF3ompELQbvc0jlrLztuUGg5rVcpY="
    },
    "aarch64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.254.0/mirrord_linux_aarch64",
-      "hash": "sha256-YSfyLxNbZuiox3tV+589DN8PeP9ek4+634dP28eKMsQ="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.261.0/mirrord_linux_aarch64",
+      "hash": "sha256-Lw/6mprZqTZU/mAvS+4M+DeKVy2ZCNwlFYepwrVx19U="
    },
    "aarch64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.254.0/mirrord_mac_universal",
-      "hash": "sha256-04b8+B26RtiQ2HrVPyuaXvYEXW7XTT3191DBTrCAk/w="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.261.0/mirrord_mac_universal",
+      "hash": "sha256-2oHBpk3RIUINwB9rLDvmdsxRu2a/pOzPK+6Avaw72gs="
    }
  }
 }
--- a/pkgs/by-name/nd/ndg/package.nix
+++ b/pkgs/by-name/nd/ndg/package.nix
@@ -10,17 +10,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "ndg";
-  version = "2.10.0";
+  version = "2.10.1";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "feel-co";
    repo = "ndg";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-tgZeZOK8rpaN0QiUtWQTMrd04kWRT+EV6MdNUzZUy/4=";
+    hash = "sha256-yytpu/au9gPC9ItFvSkHBl7lbsR8W4+J5qXaVYpLyj4=";
  };

-  cargoHash = "sha256-lB/GmlFaXLfmwRMgSvFtgrsl+GFMGlUGF8SnDCD3o1I=";
+  cargoHash = "sha256-loFStzNGs0WRvf1KzS3Sw9Hd0NWds6ZRbcZqYJNpVLA=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/ni/nicotine-plus/package.nix
+++ b/pkgs/by-name/ni/nicotine-plus/package.nix
@@ -58,6 +58,7 @@ python3Packages.buildPythonApplication {
  doCheck = false;
  meta = {
    description = "Graphical client for the SoulSeek peer-to-peer system";
+    mainProgram = "nicotine";
    longDescription = ''
      Nicotine+ aims to be a pleasant, free and open source (FOSS) alternative
      to the official Soulseek client, providing additional functionality while
--- a/pkgs/by-name/op/openjfx/package.nix
+++ b/pkgs/by-name/op/openjfx/package.nix
@@ -64,42 +64,55 @@ stdenv.mkDerivation {

  inherit (source) src;

-  patches = lib.optionals (!atLeast23) (
-    if atLeast21 then
-      [
-        ./21/patches/backport-ffmpeg-7-support-jfx21.patch
-      ]
-    else
-      [
-        ./17/patches/backport-ffmpeg-6-support-jfx11.patch
-        ./17/patches/backport-ffmpeg-7-support-jfx11.patch
+  patches =
+    lib.optionals (!atLeast23) (
+      if atLeast21 then
+        [
+          ./21/patches/backport-ffmpeg-7-support-jfx21.patch
+        ]
+      else
+        [
+          ./17/patches/backport-ffmpeg-6-support-jfx11.patch
+          ./17/patches/backport-ffmpeg-7-support-jfx11.patch

-        # Build with Gradle 8
-        (fetchpatch2 {
-          # Yes, this patch taken from the jfx21u repo is intended to be
-          # applied to jfx17.
-          url = "https://github.com/openjdk/jfx21u/commit/7f704c24c2238f9d7bb744a20667a8c1337decc6.patch?full_index=1";
-          excludes = [
-            # The patch fails to apply to these files, but with the exception
-            # of build.properties (which is patched in postPatch), none of them
-            # matter.
-            "build.properties"
-            "gradle/legal/gradle.md"
-            "gradle/wrapper/gradle-wrapper.properties"
-            "gradlew"
-          ];
-          hash = "sha256-WuJtzPy0IV4xvn+i5xeDqekWO0VR2GIfsYKkEmh8KKU=";
-        })
-        # Drop GTK2 support
-        (fetchpatch2 {
-          url = "https://github.com/openjdk/jfx/commit/63635ee8160ba6507d625c44320b58e2f9bfb87a.patch?full_index=1";
-          includes = [
-            "buildSrc/linux.gradle"
-          ];
-          hash = "sha256-p2vRy8jA/JJBGCC5irV3gGbcJqChFNi+ViMeQ1wjtU0=";
-        })
-      ]
-  );
+          # Build with Gradle 8
+          (fetchpatch2 {
+            # Yes, this patch taken from the jfx21u repo is intended to be
+            # applied to jfx17.
+            url = "https://github.com/openjdk/jfx21u/commit/7f704c24c2238f9d7bb744a20667a8c1337decc6.patch?full_index=1";
+            excludes = [
+              # The patch fails to apply to these files, but with the exception
+              # of build.properties (which is patched in postPatch), none of them
+              # matter.
+              "build.properties"
+              "gradle/legal/gradle.md"
+              "gradle/wrapper/gradle-wrapper.properties"
+              "gradlew"
+            ];
+            hash = "sha256-WuJtzPy0IV4xvn+i5xeDqekWO0VR2GIfsYKkEmh8KKU=";
+          })
+          # Drop GTK2 support
+          (fetchpatch2 {
+            url = "https://github.com/openjdk/jfx/commit/63635ee8160ba6507d625c44320b58e2f9bfb87a.patch?full_index=1";
+            includes = [
+              "buildSrc/linux.gradle"
+            ];
+            hash = "sha256-p2vRy8jA/JJBGCC5irV3gGbcJqChFNi+ViMeQ1wjtU0=";
+          })
+        ]
+    )
+    ++ lib.optionals withWebKit [
+      # Building WebKit using CMake >= 4.4.0 requires patching a malformed CMake expression.
+      # https://bugs.webkit.org/show_bug.cgi?id=319196
+      # https://gitlab.kitware.com/cmake/cmake/-/work_items/26424
+      (fetchpatch2 {
+        name = "cmake4.4-linked-into-quoting.patch";
+        url = "https://aur.archlinux.org/cgit/aur.git/plain/cmake4-linked-into-quoting.patch?h=webkit2gtk&id=bcf95cb5382e16354be70b0a3c88436917588c8a";
+        stripLen = 1;
+        extraPrefix = "modules/javafx.web/src/main/native/";
+        hash = "sha256-W/sYyzrE12kEA993bfru6igiBdkyRtMiKBRjJqXN97g=";
+      })
+    ];

  nativeBuildInputs = [
    gradle_8
--- a/pkgs/by-name/os/os-agent/package.nix
+++ b/pkgs/by-name/os/os-agent/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "os-agent";
-  version = "1.13.0";
+  version = "1.14.0";

  src = fetchFromGitHub {
    owner = "home-assistant";
    repo = "os-agent";
    tag = finalAttrs.version;
-    hash = "sha256-Mi3anP+fqKTC+YS++MommXPg6IjCtSYfVL4nSPbws1U=";
+    hash = "sha256-jxG0YKw/pPrM+VEWdnrJ8jPTc8rfFKm5/Op6i3KugzA=";
  };

-  vendorHash = "sha256-Uwy2R7nQyCC1K/2ShRRvmEURWztNGepGzM4KReBtGug=";
+  vendorHash = "sha256-HMf6K0TZzi3qXibPdeYLzrGdxPHrSxft+fCDzNChu/4=";

  ldFlags = [
    "-X main.version="
--- a/pkgs/by-name/pd/pdfium/package.nix
+++ b/pkgs/by-name/pd/pdfium/package.nix
@@ -127,6 +127,8 @@ let
      "x64"
    else if platform.isAarch64 then
      "arm64"
+    else if platform.isRiscV64 then
+      "riscv64"
    else
      throw "unsupported CPU for pdfium";
  chromiumToolchain =
@@ -456,6 +458,7 @@ stdenv.mkDerivation (finalAttrs: {
    platforms = [
      "aarch64-darwin"
      "aarch64-linux"
+      "riscv64-linux"
      "x86_64-darwin"
      "x86_64-linux"
    ];
--- a/pkgs/by-name/pi/pi-coding-agent/package.nix
+++ b/pkgs/by-name/pi/pi-coding-agent/package.nix
@@ -13,16 +13,16 @@
 }:
 buildNpmPackage (finalAttrs: {
  pname = "pi-coding-agent";
-  version = "0.85.1";
+  version = "0.86.0";

  src = fetchFromGitHub {
    owner = "earendil-works";
    repo = "pi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gU8BSiqqOYt2RRuQONHHGvZeSM5KFQVrwif9bmuUXUc=";
+    hash = "sha256-HmLJPuhCoeK+aidnRoc5huCMPVAMpTbXcrETPuNCSxE=";
  };

-  npmDepsHash = "sha256-jzlsZIQzfl1FCZZ5//dHFWwMfBZQ4nRD6KB4HHifPqE=";
+  npmDepsHash = "sha256-CYVYDdDzfl1VD3EA3FDKf4iDR1Y6wwmrqwGiXJVm40w=";

  # The provider model catalog (packages/ai/src/providers/data/) is generated by
  # a network fetch (models.dev plus provider APIs) and is gitignored upstream,
@@ -31,7 +31,7 @@ buildNpmPackage (finalAttrs: {
  # under dist/providers/data/. Bump this hash alongside version.
  modelData = fetchurl {
    url = "https://registry.npmjs.org/@earendil-works/pi-ai/-/pi-ai-${finalAttrs.version}.tgz";
-    hash = "sha256-r30RmGF5RFzm/oizfVfeIvgjwP/TplyuMcVVt/XpklM=";
+    hash = "sha256-1SRIyCenLI/c+fDJbJlmcEqFJaagrhgfS9iGxYTXJ+M=";
  };

  preConfigure = ''
--- a/pkgs/by-name/pi/pika-backup/package.nix
+++ b/pkgs/by-name/pi/pika-backup/package.nix
@@ -22,7 +22,7 @@
  nix-update-script,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "pika-backup";
  version = "0.8.4";

@@ -30,12 +30,12 @@ stdenv.mkDerivation rec {
    domain = "gitlab.gnome.org";
    owner = "World";
    repo = "pika-backup";
-    tag = version;
+    tag = finalAttrs.version;
    hash = "sha256-7Nr/KmjI7zcocfsPxVsYRC+Tye9Qu7pa+14f6nAPgRk=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit pname version src;
+    inherit (finalAttrs) pname version src;
    hash = "sha256-tQz+2+6Yeqenis7QDRlmMTQIaLRE1uOC4tTRUrEeyXw=";
  };

@@ -77,10 +77,10 @@ stdenv.mkDerivation rec {
  meta = {
    description = "Simple backups based on borg";
    homepage = "https://apps.gnome.org/app/org.gnome.World.PikaBackup";
-    changelog = "https://gitlab.gnome.org/World/pika-backup/-/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://gitlab.gnome.org/World/pika-backup/-/blob/${finalAttrs.src.tag}/CHANGELOG.md";
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [ dotlambda ];
    teams = [ lib.teams.gnome-circle ];
    platforms = lib.platforms.linux;
  };
-}
+})
--- a/pkgs/by-name/ra/radarr/deps.json
+++ b/pkgs/by-name/ra/radarr/deps.json
@@ -1,14 +1,4 @@
 [
-  {
-    "pname": "Azure.Core",
-    "version": "1.50.0",
-    "hash": "sha256-8Pjz0/2wTLK5uY7G5qrxQr4CsmrjiR8gL4g6zJymj5s="
-  },
-  {
-    "pname": "Azure.Identity",
-    "version": "1.17.1",
-    "hash": "sha256-pjNnhL/sCFy+BWNMAgj+l6aGoOp4ngrFO/61RIgzBEU="
-  },
  {
    "pname": "BouncyCastle.Cryptography",
    "version": "2.6.2",
@@ -56,8 +46,8 @@
  },
  {
    "pname": "FluentAssertions",
-    "version": "6.12.1",
-    "hash": "sha256-R/Fi9eee6T8t8JECxL9+HFd8jAxRMkCg18j+fAQLNqM="
+    "version": "7.2.2",
+    "hash": "sha256-FI9qH9n0Qu8XpevIQghgMOO82VZSz9FjgnMIvymJPAI="
  },
  {
    "pname": "FluentMigrator",
@@ -134,11 +124,6 @@
    "version": "8.0.27",
    "hash": "sha256-FGqqp3fruL4r1ImEMcDRqvgl+uxkQqngkRRfXhc7EWI="
  },
-  {
-    "pname": "Microsoft.Bcl.AsyncInterfaces",
-    "version": "8.0.0",
-    "hash": "sha256-9aWmiwMJKrKr9ohD1KSuol37y+jdDxPGJct3m2/Bknw="
-  },
  {
    "pname": "Microsoft.CodeCoverage",
    "version": "17.10.0",
@@ -149,26 +134,6 @@
    "version": "4.7.0",
    "hash": "sha256-Enknv2RsFF68lEPdrf5M+BpV1kHoLTVRApKUwuk/pj0="
  },
-  {
-    "pname": "Microsoft.Data.SqlClient",
-    "version": "6.1.5",
-    "hash": "sha256-XpGL/oKQWn+FmYNmKB6CMmWbPEuCDX/xdOMqljS0vvs="
-  },
-  {
-    "pname": "Microsoft.Data.SqlClient.SNI.runtime",
-    "version": "6.0.2",
-    "hash": "sha256-CQuJfjZYoRxfc07cSzUNCOOdzmUJu0p10J+WpcG2BJ0="
-  },
-  {
-    "pname": "Microsoft.Extensions.Caching.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-xGpKrywQvU1Wm/WolYIxgHYEFfgkNGeJ+GGc5DT3phI="
-  },
-  {
-    "pname": "Microsoft.Extensions.Caching.Memory",
-    "version": "8.0.1",
-    "hash": "sha256-5Q0vzHo3ZvGs4nPBc/XlBF4wAwYO8pxq6EGdYjjXZps="
-  },
  {
    "pname": "Microsoft.Extensions.Configuration",
    "version": "8.0.0",
@@ -229,6 +194,11 @@
    "version": "8.0.2",
    "hash": "sha256-UfLfEQAkXxDaVPC7foE/J3FVEXd31Pu6uQIhTic3JgY="
  },
+  {
+    "pname": "Microsoft.Extensions.DependencyModel",
+    "version": "8.0.2",
+    "hash": "sha256-PyuO/MyCR9JtYqpA1l/nXGh+WLKCq34QuAXN9qNza9Q="
+  },
  {
    "pname": "Microsoft.Extensions.Diagnostics",
    "version": "8.0.1",
@@ -289,11 +259,6 @@
    "version": "8.0.2",
    "hash": "sha256-cHpe8X2BgYa5DzulZfq24rg8O2K5Lmq2OiLhoyAVgJc="
  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "8.0.3",
-    "hash": "sha256-5MSY1aEwUbRXehSPHYw0cBZyFcUH4jkgabddxhMiu3Q="
-  },
  {
    "pname": "Microsoft.Extensions.Logging.Configuration",
    "version": "8.0.1",
@@ -339,51 +304,6 @@
    "version": "8.0.0",
    "hash": "sha256-FU8qj3DR8bDdc1c+WeGZx/PCZeqqndweZM9epcpXjSo="
  },
-  {
-    "pname": "Microsoft.Identity.Client",
-    "version": "4.80.0",
-    "hash": "sha256-vtuXCu0ykTYJjvlSSWMjC9EGJQXZ1dqgpaMeD4FmlGQ="
-  },
-  {
-    "pname": "Microsoft.Identity.Client.Extensions.Msal",
-    "version": "4.78.0",
-    "hash": "sha256-0s9wa8HkFhnzmAz+TGxtA3qTX3dZiIoPcTWGLgY8mAg="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Abstractions",
-    "version": "7.7.1",
-    "hash": "sha256-v83O6Gb8s4wGhbRPvOA95t0LSX+MAhF6WpA6qZeK2XM="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Abstractions",
-    "version": "8.14.0",
-    "hash": "sha256-bkCuz1Wj56N+LHWLvHKLcCtIRqBK+3k5vD2qfB7xXKk="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.JsonWebTokens",
-    "version": "7.7.1",
-    "hash": "sha256-vGUx0HYrhDGQiHuIZoe4YOXx3UV9hT+a0krlPGJPQzw="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Logging",
-    "version": "7.7.1",
-    "hash": "sha256-JtQclRXgzsFBFnD+kgD59OILf7XkMD2czLupLZkc100="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Protocols",
-    "version": "7.7.1",
-    "hash": "sha256-PVS46Ut/2814hy0tdNLahG266hBmepw/fzZ9pku1PNg="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Protocols.OpenIdConnect",
-    "version": "7.7.1",
-    "hash": "sha256-zXRZLfgOG/0l8aF6mZuAVGWB3wYz5uTkTJwlucYPafw="
-  },
-  {
-    "pname": "Microsoft.IdentityModel.Tokens",
-    "version": "7.7.1",
-    "hash": "sha256-WgbdkeG0R/f+4GJeXlj1WMpFyGv7+iW1JM9Pgt95UFk="
-  },
  {
    "pname": "Microsoft.NET.Test.Sdk",
    "version": "17.10.0",
@@ -409,40 +329,30 @@
    "version": "1.6.23",
    "hash": "sha256-YD2oxM/tlNpK5xUeHF85xdqcpBzHioUSyRjpN2A7KcY="
  },
-  {
-    "pname": "Microsoft.SqlServer.Server",
-    "version": "1.0.0",
-    "hash": "sha256-mx/iqHmBMwA8Ulot0n6YFVIKsU1Tx7q4Tru7MSjbEgQ="
-  },
  {
    "pname": "Microsoft.Testing.Extensions.Telemetry",
-    "version": "1.7.3",
-    "hash": "sha256-Z6WsY2FCUbNnT5HJd7IOrfOvqknVXp6PWzTVeb0idVg="
+    "version": "2.3.3",
+    "hash": "sha256-Doo1IAwnDlbqyg2Q6p82RuYYAQ7VkJnY4Pn9MDZqCOs="
  },
  {
    "pname": "Microsoft.Testing.Extensions.TrxReport.Abstractions",
-    "version": "1.7.3",
-    "hash": "sha256-PTee04FHyTHx/gF5NLckXuVje807G51MzkPrZ1gkgCw="
+    "version": "2.3.3",
+    "hash": "sha256-YAgHS3B0LwRvIHer285QuSrYCO5FcSpAXazL5pNHB4Y="
  },
  {
    "pname": "Microsoft.Testing.Extensions.VSTestBridge",
-    "version": "1.7.3",
-    "hash": "sha256-8d+wZmucfSO7PsviHjVxYB4q6NcjgxvnCUpLePq35sM="
+    "version": "2.3.3",
+    "hash": "sha256-/UlwUEIwQyNZxdD0jNcV34ZJ20aLe2kWQTvH3LOIHes="
  },
  {
    "pname": "Microsoft.Testing.Platform",
-    "version": "1.7.3",
-    "hash": "sha256-cavX11P5o9rooqC3ZHw5h002OKRg2ZNR/VaRwpNTQYA="
+    "version": "2.3.3",
+    "hash": "sha256-sH0AyrX0ny0JgVkgRLrvPXIKB55pQWAcd5AERYSzF0o="
  },
  {
    "pname": "Microsoft.Testing.Platform.MSBuild",
-    "version": "1.7.3",
-    "hash": "sha256-cREl529UQ/c5atT8KimMgrgNdy6MrAd0sBGT8sXRRPM="
-  },
-  {
-    "pname": "Microsoft.TestPlatform.AdapterUtilities",
-    "version": "17.13.0",
-    "hash": "sha256-Vr+3Tad/h/nk7f/5HMExn3HvCGFCarehFAzJSfCBaOc="
+    "version": "2.3.3",
+    "hash": "sha256-JeU3+8OebODA2k6KSorm2P7piuQZRdS1hhJKAwdfSJA="
  },
  {
    "pname": "Microsoft.TestPlatform.ObjectModel",
@@ -451,8 +361,8 @@
  },
  {
    "pname": "Microsoft.TestPlatform.ObjectModel",
-    "version": "17.13.0",
-    "hash": "sha256-6S0fjfj8vA+h6dJVNwLi6oZhYDO/I/6hBZaq2VTW+Uk="
+    "version": "18.4.0",
+    "hash": "sha256-ERL2goDaM0vUElW25DM/5lI2WplE5E6g9mhTegY0bC8="
  },
  {
    "pname": "Microsoft.TestPlatform.TestHost",
@@ -464,6 +374,11 @@
    "version": "4.3.0",
    "hash": "sha256-mBNDmPXNTW54XLnPAUwBRvkIORFM7/j0D0I2SyQPDEg="
  },
+  {
+    "pname": "Microsoft.Win32.SystemEvents",
+    "version": "6.0.0",
+    "hash": "sha256-N9EVZbl5w1VnMywGXyaVWzT9lh84iaJ3aD48hIBk1zA="
+  },
  {
    "pname": "Microsoft.Win32.SystemEvents",
    "version": "8.0.0",
@@ -505,11 +420,6 @@
    "version": "1.6.1",
    "hash": "sha256-iNan1ix7RtncGWC9AjAZ2sk70DoxOsmEOgQ10fXm4Pw="
  },
-  {
-    "pname": "NETStandard.Library",
-    "version": "2.0.0",
-    "hash": "sha256-Pp7fRylai8JrE1O+9TGfIEJrAOmnWTJRLWE+qJBahK0="
-  },
  {
    "pname": "Newtonsoft.Json",
    "version": "13.0.1",
@@ -552,18 +462,18 @@
  },
  {
    "pname": "NUnit",
-    "version": "3.14.0",
-    "hash": "sha256-CuP/q5HovPWfAW3Cty/QxRi7VpjykJ3TDLq5TENI6KY="
+    "version": "4.5.1",
+    "hash": "sha256-+BO4kpkiPEvC4R2wyqV/QMjpKc6jcGwARyc3Bk9skPU="
  },
  {
    "pname": "NUnit3TestAdapter",
-    "version": "5.1.0",
-    "hash": "sha256-5z470sFjV67wGHaw8KfmSloIAYe81Dokp0f8I6zXsDc="
+    "version": "6.3.0",
+    "hash": "sha256-1ahawX6sXR1gg9yzhi03CWeYBeCtSsruICjWYJnVbPk="
  },
  {
    "pname": "NunitXml.TestLogger",
-    "version": "3.1.20",
-    "hash": "sha256-T6/n9S5vnmznf2P7x5Vejciq8P2P+1OCrdKE2UmWQOw="
+    "version": "8.0.0",
+    "hash": "sha256-VhaKfzBvqHoa43pFWji1iscbGCpTAj93ipnyiaV/mYU="
  },
  {
    "pname": "Polly",
@@ -797,8 +707,8 @@
  },
  {
    "pname": "Sentry",
-    "version": "4.0.2",
-    "hash": "sha256-TzsAxAYqB2SdcSl+r92+nd5obgUBW1DCFP/nXzAZE4U="
+    "version": "5.16.3",
+    "hash": "sha256-pgovl+wH7yC62tjZR873bIOnJZ4vzwfPyGgY9iFzQpU="
  },
  {
    "pname": "Servarr.FFMpegCore",
@@ -824,8 +734,8 @@
  },
  {
    "pname": "SourceGear.sqlite3",
-    "version": "3.50.4.5",
-    "hash": "sha256-yPOyLiK4QoTfE3IED0hFl1JJYjmt8RBB3fp1a1CwvqE="
+    "version": "3.53.4",
+    "hash": "sha256-PrKw/AkB++CbeDloscGwAurHh4BT/kfTCed9ImgBDZo="
  },
  {
    "pname": "Swashbuckle.AspNetCore.Annotations",
@@ -852,11 +762,6 @@
    "version": "4.3.0",
    "hash": "sha256-XqZWb4Kd04960h4U9seivjKseGA/YEIpdplfHYHQ9jk="
  },
-  {
-    "pname": "System.ClientModel",
-    "version": "1.8.0",
-    "hash": "sha256-ZWVhuw3IRk9rZXkXERhesEET2KMMzHjUH/HDI288WK8="
-  },
  {
    "pname": "System.Collections",
    "version": "4.3.0",
@@ -867,6 +772,11 @@
    "version": "4.3.0",
    "hash": "sha256-KMY5DfJnDeIsa13DpqvyN8NkReZEMAFnlmNglVoFIXI="
  },
+  {
+    "pname": "System.Collections.Immutable",
+    "version": "8.0.0",
+    "hash": "sha256-F7OVjKNwpqbUh8lTidbqJWYi476nsq9n+6k0+QVRo3w="
+  },
  {
    "pname": "System.ComponentModel",
    "version": "4.3.0",
@@ -879,13 +789,8 @@
  },
  {
    "pname": "System.Configuration.ConfigurationManager",
-    "version": "4.4.0",
-    "hash": "sha256-+8wGYllXnIxRzy9dLhZFB88GoPj8ivYXS0KUfcivT8I="
-  },
-  {
-    "pname": "System.Configuration.ConfigurationManager",
-    "version": "8.0.1",
-    "hash": "sha256-2vgU/BBFDOO2506UX6mtuBQ9c2bCShLLhoy67l7418E="
+    "version": "6.0.0",
+    "hash": "sha256-fPV668Cfi+8pNWrvGAarF4fewdPVEDwlJWvJk0y+Cms="
  },
  {
    "pname": "System.Console",
@@ -894,8 +799,8 @@
  },
  {
    "pname": "System.Data.SQLite",
-    "version": "2.0.3",
-    "hash": "sha256-2TzEFt0nJjK1g8Gi5RMII7TOpG4vi9UzvJI3JxuPnKA="
+    "version": "2.0.4",
+    "hash": "sha256-XVqprPA1mcDt/OJd6bTRCzxAofLVUfSpHd28zOWKL1k="
  },
  {
    "pname": "System.Diagnostics.Debug",
@@ -912,11 +817,6 @@
    "version": "5.0.0",
    "hash": "sha256-6mW3N6FvcdNH/pB58pl+pFSCGWgyaP4hfVtC/SMWDV4="
  },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "8.0.1",
-    "hash": "sha256-zmwHjcJgKcbkkwepH038QhcnsWMJcHys+PEbFGC0Jgo="
-  },
  {
    "pname": "System.Diagnostics.EventLog",
    "version": "6.0.0",
@@ -937,6 +837,11 @@
    "version": "4.3.0",
    "hash": "sha256-hCETZpHHGVhPYvb4C0fh4zs+8zv4GPoixagkLZjpa9Q="
  },
+  {
+    "pname": "System.Drawing.Common",
+    "version": "6.0.0",
+    "hash": "sha256-/9EaAbEeOjELRSMZaImS1O8FmUe8j4WuFUw1VOrPyAo="
+  },
  {
    "pname": "System.Drawing.Common",
    "version": "8.0.27",
@@ -962,11 +867,6 @@
    "version": "4.3.0",
    "hash": "sha256-mmJWA27T0GRVuFP9/sj+4TrR4GJWrzNIk2PDrbr7RQk="
  },
-  {
-    "pname": "System.IdentityModel.Tokens.Jwt",
-    "version": "7.7.1",
-    "hash": "sha256-6JfmtdChyt7zd/HKI+/T1HcyesEPx0NNMO/zFJ7lU2c="
-  },
  {
    "pname": "System.IO",
    "version": "4.3.0",
@@ -1007,16 +907,6 @@
    "version": "4.3.0",
    "hash": "sha256-+3pvhZY7rip8HCbfdULzjlC9FPZFpYoQxhkcuFm2wk8="
  },
-  {
-    "pname": "System.Memory",
-    "version": "4.6.3",
-    "hash": "sha256-JgeK63WMmumF6L+FH5cwJgYdpqXrSDcgTQwtIgTHKVU="
-  },
-  {
-    "pname": "System.Memory.Data",
-    "version": "8.0.1",
-    "hash": "sha256-cxYZL0Trr6RBplKmECv94ORuyjrOM6JB0D/EwmBSisg="
-  },
  {
    "pname": "System.Net.Http",
    "version": "4.3.0",
@@ -1082,6 +972,11 @@
    "version": "1.6.0",
    "hash": "sha256-JJfgaPav7UfEh4yRAQdGhLZF1brr0tUWPl6qmfNWq/E="
  },
+  {
+    "pname": "System.Reflection.Metadata",
+    "version": "8.0.0",
+    "hash": "sha256-dQGC30JauIDWNWXMrSNOJncVa1umR1sijazYwUDdSIE="
+  },
  {
    "pname": "System.Reflection.Primitives",
    "version": "4.3.0",
@@ -1137,6 +1032,11 @@
    "version": "5.0.0",
    "hash": "sha256-ueSG+Yn82evxyGBnE49N4D+ngODDXgornlBtQ3Omw54="
  },
+  {
+    "pname": "System.Security.AccessControl",
+    "version": "6.0.0",
+    "hash": "sha256-qOyWEBbNr3EjyS+etFG8/zMbuPjA+O+di717JP9Cxyg="
+  },
  {
    "pname": "System.Security.Claims",
    "version": "4.3.0",
@@ -1179,24 +1079,19 @@
  },
  {
    "pname": "System.Security.Cryptography.ProtectedData",
-    "version": "4.4.0",
-    "hash": "sha256-Ri53QmFX8I8UH0x4PikQ1ZA07ZSnBUXStd5rBfGWFOE="
-  },
-  {
-    "pname": "System.Security.Cryptography.ProtectedData",
-    "version": "4.5.0",
-    "hash": "sha256-Z+X1Z2lErLL7Ynt2jFszku6/IgrngO3V1bSfZTBiFIc="
-  },
-  {
-    "pname": "System.Security.Cryptography.ProtectedData",
-    "version": "8.0.0",
-    "hash": "sha256-fb0pa9sQxN+mr0vnXg1Igbx49CaOqS+GDkTfWNboUvs="
+    "version": "6.0.0",
+    "hash": "sha256-Wi9I9NbZlpQDXgS7Kl06RIFxY/9674S7hKiYw5EabRY="
  },
  {
    "pname": "System.Security.Cryptography.X509Certificates",
    "version": "4.3.0",
    "hash": "sha256-MG3V/owDh273GCUPsGGraNwaVpcydupl3EtPXj6TVG0="
  },
+  {
+    "pname": "System.Security.Permissions",
+    "version": "6.0.0",
+    "hash": "sha256-/MMvtFWGN/vOQfjXdOhet1gsnMgh6lh5DCHimVsnVEs="
+  },
  {
    "pname": "System.Security.Principal",
    "version": "4.3.0",
@@ -1277,6 +1172,11 @@
    "version": "4.6.2",
    "hash": "sha256-dv0ONmorkGVf0V1Vewt5UEGXdINYy1eP4xk/bZe92ao="
  },
+  {
+    "pname": "System.Windows.Extensions",
+    "version": "6.0.0",
+    "hash": "sha256-N+qg1E6FDJ9A9L50wmVt3xPQV8ZxlG1xeXgFuxO+yfM="
+  },
  {
    "pname": "System.Xml.ReaderWriter",
    "version": "4.3.0",
--- a/pkgs/by-name/ra/radarr/package.nix
+++ b/pkgs/by-name/ra/radarr/package.nix
@@ -20,7 +20,7 @@
  applyPatches,
 }:
 let
-  version = "6.3.0.10514";
+  version = "6.4.4.10685";
  # The dotnet8 compatibility patches also change `yarn.lock`, so we must pass
  # the already patched lockfile to `fetchYarnDeps`.
  src = applyPatches {
@@ -28,7 +28,7 @@ let
      owner = "Radarr";
      repo = "Radarr";
      tag = "v${version}";
-      hash = "sha256-1CAcsqhdAH2dOcOMVyIlaqEmCKDwXNUJf3SuVuJEZ7E=";
+      hash = "sha256-c7toD4EHn1EJl5l/wvKTh0HGWyIg5BW2SkV4nepvg3I=";
    };
    postPatch = ''
      mv src/NuGet.config NuGet.Config
@@ -50,7 +50,7 @@ buildDotnetModule {

  yarnOfflineCache = fetchYarnDeps {
    yarnLock = "${src}/yarn.lock";
-    hash = "sha256-FrYvTYSxUDP68a4n0isEaHxRNFL25N3LNQJVFBOLdyE=";
+    hash = "sha256-irAOf0hbhiCet1Xid4oms5bIgtujJlvzNIlxQZU4LwQ=";
  };

  ffprobe = lib.optionalDrvAttr withFFmpeg (lib.getExe' servarr-ffmpeg "ffprobe");
--- a/pkgs/by-name/s-/s-search/package.nix
+++ b/pkgs/by-name/s-/s-search/package.nix
@@ -10,13 +10,13 @@

 buildGoModule (finalAttrs: {
  pname = "s-search";
-  version = "0.8.0";
+  version = "0.8.1";

  src = fetchFromGitHub {
    owner = "zquestz";
    repo = "s";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dqmn0DgeurJpEArhvmEq5Yl5+LMNJOUDd+Jl9KwAiUU=";
+    hash = "sha256-b7xCECf5hOZZn/GQnESG4gAzAR5ByiZIZbDHB8pZ1+A=";
  };

  vendorHash = "sha256-ITK4xFT4m0AGcj2bB7mvIQ3+6qyFVZACXPjhVx5aLx4=";
--- a/pkgs/by-name/sl/sleek-todo/package.nix
+++ b/pkgs/by-name/sl/sleek-todo/package.nix
@@ -10,7 +10,7 @@
 let

  pname = "sleek-todo";
-  version = "2.0.26";
+  version = "2.0.28";

  suffixMap = {
    aarch64-darwin = "mac-arm64.dmg";
@@ -26,9 +26,9 @@ let
    url = "https://github.com/ransome1/sleek/releases/download/v${version}/sleek-${version}-${suffix}";
    sha256 =
      {
-        aarch64-darwin = "sha256-cQ5c9qs3Icl5vwSoU0tCM5QbrqftYUwlBBzDGaggyOE=";
-        aarch64-linux = "sha256-zcMUCLzIseipG15PQXsECNz/baAYBEzOGxh3hvw6pdg=";
-        x86_64-linux = "sha256-QpeWbnSJTCFXrj/sy+Ava7dk2OlHCzaiDoIM29q9r44=";
+        aarch64-darwin = "sha256-+xqn/Ffm5p4NbWmvrCp2ViG/CGtRRXcw0gE8Cs19N2Y=";
+        aarch64-linux = "sha256-ujeXAJlB1sElk7bRlZ7dbTurKzD3IGRpHxsVNmUU5Ro=";
+        x86_64-linux = "sha256-VzZwONKFl/7l6HXn387UfTllrU+x14X9vK6FN3buimU=";
      }
      .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.system}");
  };
--- a/pkgs/by-name/sv/svgcleaner/package.nix
+++ b/pkgs/by-name/sv/svgcleaner/package.nix
@@ -6,7 +6,7 @@

 rustPlatform.buildRustPackage {
  pname = "SVGCleaner";
-  version = "unstable-2021-08-30";
+  version = "0.9.5-unstable-2021-08-30";

  src = fetchFromGitHub {
    owner = "RazrFalcon";
--- a/pkgs/by-name/sy/syslinux/package.nix
+++ b/pkgs/by-name/sy/syslinux/package.nix
@@ -15,7 +15,7 @@

 stdenv.mkDerivation {
  pname = "syslinux";
-  version = "unstable-2019-02-07";
+  version = "6.04-pre2-unstable-2019-02-07";

  # This is syslinux-6.04-pre3^1; syslinux-6.04-pre3 fails to run.
  # Same issue here https://www.syslinux.org/archives/2019-February/026330.html
--- a/pkgs/by-name/te/teamviewer/package.nix
+++ b/pkgs/by-name/te/teamviewer/package.nix
@@ -20,6 +20,7 @@
  icu63,
  nss,
  minizip,
+  pipewire,
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -131,6 +132,8 @@ stdenv.mkDerivation (finalAttrs: {
        libxfixes
        dbus
        icu63
+        # dlopen'd by TeamViewer_Desktop for the Wayland ScreenCast portal
+        pipewire
      ]
    }"
  ];
--- a/pkgs/by-name/te/terraform/package.nix
+++ b/pkgs/by-name/te/terraform/package.nix
@@ -1,7 +1,7 @@
 {
  stdenv,
  lib,
-  buildGoModule,
+  buildGo127Module,
  fetchFromGitHub,
  makeWrapper,
  coreutils,
@@ -13,18 +13,18 @@
 }:

 let
-  package = buildGoModule rec {
+  package = buildGo127Module rec {
    pname = "terraform";
-    version = "1.16.1";
+    version = "1.16.3";

    src = fetchFromGitHub {
      owner = "hashicorp";
      repo = "terraform";
      rev = "v${version}";
-      hash = "sha256-0cCEQU+f6wVfcVqFoRA3hpf9Qwdxko2AraeCJQ/vkM4=";
+      hash = "sha256-XfVzSAMx/Y/gqDSXkRtGupGQB0ytBp907zHcsA0IUKw=";
    };

-    vendorHash = "sha256-w/dtggDM8sDDA5rqzsRfuZHkBThu6JVvhr13R71E/d8=";
+    vendorHash = "sha256-e3j9PSptoqUV+/CQWLcy3/0E9qhdWbXUe3f+ZB5WsHI=";

    patches = [ ./provider-path-0_15.patch ];

--- a/pkgs/by-name/ti/tinygo/0001-GNUmakefile.patch
+++ b/pkgs/by-name/ti/tinygo/0001-GNUmakefile.patch
@@ -1,8 +1,8 @@
-diff --git a/GNUmakefile b/GNUmakefile
-index f078bde5..901c8e08 100644
--- a/GNUmakefile
-+++ b/GNUmakefile
-@@ -21,11 +21,6 @@ LLVM_VERSIONS = 19 18 17 16 15
+diff --git a/make/config.mk b/make/config.mk
+index 5b592d82..86481a21 100644
+--- a/make/config.mk
+++ b/make/config.mk
+@@ -20,11 +20,6 @@ LLVM_VERSIONS = 19 18 17 16 15
 errifempty = $(if $(1),$(1),$(error $(2)))
 detect = $(shell which $(call errifempty,$(firstword $(foreach p,$(2),$(shell command -v $(p) 2> /dev/null && echo $(p)))),failed to locate $(1) at any of: $(2)))
 toolSearchPathsVersion = $(1)-$(2)
@@ -14,9 +14,12 @@ index f078bde5..901c8e08 100644
 # First search for a custom built copy, then move on to explicitly version-tagged binaries, then just see if the tool is in path with its normal name.
 findLLVMTool = $(call detect,$(1),$(abspath llvm-build/bin/$(1)) $(foreach ver,$(LLVM_VERSIONS),$(call toolSearchPathsVersion,$(1),$(ver))) $(1))
 CLANG ?= $(call findLLVMTool,clang)
-@@ -942,10 +937,9 @@ endif
- wasmtest:
- 	$(GO) test ./tests/wasm
+diff --git a/make/release.mk b/make/release.mk
+index 89dc4c9e..b43bf814 100644
+--- a/make/release.mk
+++ b/make/release.mk
+@@ -1,9 +1,8 @@
+ # Build the release tarball and the Debian package.
 
 -build/release: tinygo gen-device $(if $(filter 1,$(USE_SYSTEM_BINARYEN)),,binaryen)
 +build/release:
@@ -26,7 +29,7 @@ index f078bde5..901c8e08 100644
 	@mkdir -p build/release/tinygo/lib/CMSIS/CMSIS
 	@mkdir -p build/release/tinygo/lib/macos-minimal-sdk
 	@mkdir -p build/release/tinygo/lib/mingw-w64/mingw-w64-crt/crt
-@@ -968,7 +962,6 @@ ifneq ($(USE_SYSTEM_BINARYEN),1)
+@@ -27,7 +26,6 @@ ifneq ($(USE_SYSTEM_BINARYEN),1)
 	@cp -p  build/wasm-opt$(EXE)         build/release/tinygo/bin
 endif
 	@cp -rp lib/bdwgc/*                  build/release/tinygo/lib/bdwgc
@@ -34,12 +37,12 @@ index f078bde5..901c8e08 100644
 	@cp -rp lib/CMSIS/CMSIS/Include      build/release/tinygo/lib/CMSIS/CMSIS
 	@cp -rp lib/CMSIS/README.md          build/release/tinygo/lib/CMSIS
 	@cp -rp lib/macos-minimal-sdk/*      build/release/tinygo/lib/macos-minimal-sdk
-@@ -1060,8 +1053,7 @@ endif
+@@ -120,8 +118,7 @@ endif
 	@cp -rp lib/wasi-libc/libc-top-half/musl/src/unistd             build/release/tinygo/lib/wasi-libc/libc-top-half/musl/src
 	@cp -rp lib/wasi-libc/libc-top-half/sources                     build/release/tinygo/lib/wasi-libc/libc-top-half
 	@cp -rp lib/wasi-cli/wit                                        build/release/tinygo/lib/wasi-cli/wit
-	@cp -rp llvm-project/compiler-rt/lib/builtins build/release/tinygo/lib/compiler-rt-builtins
-	@cp -rp llvm-project/compiler-rt/LICENSE.TXT  build/release/tinygo/lib/compiler-rt-builtins
+-	@cp -rp ${LLVM_PROJECTDIR}/compiler-rt/lib/builtins build/release/tinygo/lib/compiler-rt-builtins
+-	@cp -rp ${LLVM_PROJECTDIR}/compiler-rt/LICENSE.TXT  build/release/tinygo/lib/compiler-rt-builtins
 +	@cp -rp lib/compiler-rt-builtins     build/release/tinygo/lib/compiler-rt-builtins
 	@cp -rp src                          build/release/tinygo/src
 	@cp -rp targets                      build/release/tinygo/targets
--- a/pkgs/by-name/ti/tinygo/package.nix
+++ b/pkgs/by-name/ti/tinygo/package.nix
@@ -1,11 +1,11 @@
 {
  stdenv,
  lib,
-  buildGo126Module,
+  buildGo127Module,
  fetchFromGitHub,
  makeWrapper,
-  llvmPackages_20,
-  go_1_26,
+  llvmPackages_22,
+  go_1_27,
  xar,
  binaryen,
  avrdude,
@@ -18,10 +18,10 @@
 let
  # nixpkgs typically updates default llvm and go versions faster than tinygo releases
  # which ends up breaking this build. Use fixed versions for each release.
-  buildGoModule = buildGo126Module;
-  go = go_1_26;
+  buildGoModule = buildGo127Module;
+  go = go_1_27;
  llvmMajor = lib.versions.major llvm.version;
-  inherit (llvmPackages_20)
+  inherit (llvmPackages_22)
    llvm
    clang
    compiler-rt
@@ -38,13 +38,13 @@ in

 buildGoModule (finalAttrs: {
  pname = "tinygo";
-  version = "0.41.1";
+  version = "0.42.0";

  src = fetchFromGitHub {
    owner = "tinygo-org";
    repo = "tinygo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8Zpvhx+xgC/Cjdm3zSpntLKOT4HsBU7lPWdLumWeFyw=";
+    hash = "sha256-9XIqkrq8lInPpQ7G2D5gxRs8Q+pf5ry6JMgvf6dXxds=";
    fetchSubmodules = true;
    # The public hydra server on `hydra.nixos.org` is configured with
    # `max_output_size` of 3GB. The purpose of this `postFetch` step
@@ -55,10 +55,10 @@ buildGoModule (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-OO8o/s71jZIypfYZCLT6jwUPyQJ89AKg3DfzTrbrD/A=";
+  vendorHash = "sha256-GkFyLorvYJ6pr1eNqV7AodilnJxitncnaaZDEav6jCo=";

  patches = [
-    ./0001-GNUmakefile.patch
+    ./Makefiles.patch
  ];

  nativeCheckInputs = [ binaryen ];
@@ -93,7 +93,7 @@ buildGoModule (finalAttrs: {
    mkdir -p lib/compiler-rt-builtins
    cp -a ${compiler-rt.src}/compiler-rt/lib/builtins/* lib/compiler-rt-builtins/

-    substituteInPlace GNUmakefile \
+    substituteInPlace make/release.mk \
      --replace "build/release/tinygo/bin" "$out/bin" \
      --replace "build/release/" "$out/share/"
  '';
--- a/pkgs/by-name/tr/tracexec/package.nix
+++ b/pkgs/by-name/tr/tracexec/package.nix
@@ -15,16 +15,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "tracexec";
-  version = "0.17.0";
+  version = "1.0.0";

  src = fetchFromGitHub {
    owner = "kxxt";
    repo = "tracexec";
-    rev = "ecbda651a4006789debf565376cd6f37241dec3e";
-    hash = "sha256-wP7jAGoWgvm3/4XBHr27MD8M9qwyVpuDVR96S8+I3eo=";
+    rev = "c3f95dcf7714dc731f494683ef7f74e399a22515";
+    hash = "sha256-VDmBCloMTDXxRSIOt4Pu0U6GgaOU0vp2s2zLbd4j7Ds=";
  };

-  cargoHash = "sha256-kJrWAyRcU5eEfTwaAxcN6oE5KHgBdjznWeI21/3c/UE=";
+  cargoHash = "sha256-YhSaRVgYnIcH1tHn8wPi/yeNnOzV0MvHyeZXn1s8jGA=";

  hardeningDisable = [ "zerocallusedregs" ];

@@ -63,6 +63,7 @@ rustPlatform.buildRustPackage (finalAttrs: {

    install -Dm644 LICENSE -t "$out/share/licenses/tracexec/"
    install -Dm644 THIRD_PARTY_LICENSES.HTML -t "$out/share/licenses/tracexec/"
+    install -Dm644 themes/*.toml -t "$out/share/tracexec/themes/"
  '';

  passthru.updateScript = nix-update-script { };
--- a/pkgs/by-name/tu/tuned/package.nix
+++ b/pkgs/by-name/tu/tuned/package.nix
@@ -16,7 +16,6 @@
  pkg-config,
  powertop,
  python3Packages,
-  tuna,
  util-linux,
  versionCheckHook,
  virt-what,
@@ -26,7 +25,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "tuned";
-  version = "2.27.0";
+  version = "2.28.0";

  outputs = [
    "out"
@@ -38,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "redhat-performance";
    repo = "tuned";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-PlF2T+EpveFkKPMU/6ZMXDO0q8Efzol4HJ4CX0wsBoY=";
+    hash = "sha256-WBQgtmlCbSUkeEtfYfCgf7kCCA9G+IZiWArOX9i/OH8=";
  };

  patches = [
@@ -63,6 +62,10 @@ stdenv.mkDerivation (finalAttrs: {
      $(find profiles/ -type f -executable -name '*.sh') \
      --replace-warn "/usr/share" "$out/share" \
      --replace-warn "/usr/lib" "$out/lib"
+
+    substituteInPlace tests/unit/test_functions.py \
+      --replace-fail "/bin/bash" "${stdenv.shell}" \
+      --replace-fail '"/bin/" + command' "shutil.which(command)"
  '';

  strictDeps = true;
@@ -80,10 +83,8 @@ stdenv.mkDerivation (finalAttrs: {
    dbus-python
    pygobject3
    pyinotify
-    pyperf
    python-linux-procfs
    pyudev
-    tuna
  ];

  makeFlags = [
--- a/pkgs/by-name/xn/xnviewmp/package.nix
+++ b/pkgs/by-name/xn/xnviewmp/package.nix
@@ -25,11 +25,11 @@ let
 in
 appimageTools.wrapType2 rec {
  pname = "xnviewmp";
-  version = "1.11.2";
+  version = "1.11.6";

  src = fetchurl {
-    url = "https://download.xnview.com/old_versions/XnView_MP/XnView_MP-${version}.glibc2.17-x86_64.AppImage";
-    hash = "sha256-czgleryYMhRKxnv7Qb3E03iZ4mKXaz//jz7HmuQbjIc=";
+    url = "https://download.xnview.com/old_versions/XnView_MP/XnView_MP-${version}.glibc2.34-x86_64.AppImage";
+    hash = "sha256-f3OPtekK9s3zHNHyYtvCHuR+CdzWyEoKPiAbMqrj7og=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/zl/zlint/package.nix
+++ b/pkgs/by-name/zl/zlint/package.nix
@@ -7,18 +7,18 @@

 buildGoModule (finalAttrs: {
  pname = "zlint";
-  version = "3.7.1";
+  version = "3.7.2";

  src = fetchFromGitHub {
    owner = "zmap";
    repo = "zlint";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-HgpNa1XCAaSGfzc6rMFE4NukL+WxRYxA7il2P/5DI8Q=";
+    hash = "sha256-TqQMhiNYvFalja9xXTrWhZroLbA2HqmHs65ZzxWpRfI=";
  };

  modRoot = "v3";

-  vendorHash = "sha256-NqqW5IHo15Dv1jmYSfbPtkApYIhNoDaJTxwBGwDPDjc=";
+  vendorHash = "sha256-WxaN5nr9TG0jVKd7SE+iqVZiTPQxcseUHudwkM6fd+M=";

  excludedPackages = [
    "cmd/genTestCerts"
--- a/pkgs/data/fonts/ioskeley-mono/default.nix
+++ b/pkgs/data/fonts/ioskeley-mono/default.nix
@@ -3,18 +3,19 @@
  stdenvNoCC,
  fetchzip,
  installFonts,
+
+  width ? "Normal",
+  hinted ? true,
 }:

 let
-  version = "v2.0.0";
+  version = "v2.1.0";

  mkFont =
    {
-      width,
      variant ? "",
      hash,
      isNF ? false,
-      hinted ? true,
    }:
    let
      fileName = "IoskeleyMono${if variant != "" then "-${variant}" else ""}${
@@ -24,12 +25,10 @@ let

      pname =
        let
-          wPart = "-${lib.toLower width}";
          vPart = if variant != "" then "-${variant}" else "";
          nfPart = if isNF then "-NF" else "";
-          hPart = if !hinted && !isNF then "-unhinted" else "";
        in
-        "ioskeley-mono${wPart}${vPart}${nfPart}${hPart}";
+        "ioskeley-mono${vPart}${nfPart}";
    in
    stdenvNoCC.mkDerivation {
      inherit pname version;
@@ -54,89 +53,42 @@ let
        maintainers = with lib.maintainers; [ nuexq ];
      };
    };
-
-  allWidths = [
-    "Normal"
-    "SemiCondensed"
-    "Condensed"
-  ];
-
-  mkWidths =
-    {
-      suffix ? "",
-      withHinting ? false,
-      ...
-    }@args:
-    let
-      mkWidthSet =
-        hinted:
-        map (w: {
-          name = "${lib.strings.toLower (builtins.substring 0 1 w)}${builtins.substring 1 (-1) w}${
-            if suffix != "" then "-${suffix}" else ""
-          }${if !hinted then "-unhinted" else ""}";
-
-          value = mkFont (
-            {
-              width = w;
-              inherit hinted;
-            }
-            // (removeAttrs args [
-              "suffix"
-              "withHinting"
-            ])
-          );
-        }) allWidths;
-    in
-    lib.listToAttrs (
-      if withHinting then
-        lib.concatMap (h: mkWidthSet h) [
-          true
-          false
-        ]
-      else
-        mkWidthSet true
-    );
 in
+{
+  # Standard
+  standard = mkFont {
+    hash = "sha256-1WGAPwbfSG3fpssUTnHCTVI8eKNHSHWHdfdq4JUQ9ls=";
+  };

-# Standard
-mkWidths {
-  hash = "sha256-EJDlA18XZPq7vhtpw/74n5s1NmTy0/DLu2oYB7OuvbA=";
-  withHinting = true;
-}
+  # Term
+  term = mkFont {
+    variant = "Term";
+    hash = "sha256-Ei6cRAMC9C62X8coHsTMvfPZfloiUp+A4HeT89df3pk=";
+  };

-# Term
-// mkWidths {
-  suffix = "term";
-  variant = "Term";
-  hash = "sha256-E7I7gmu9EOaCKn4JOFkCjHP/I/1wadRkZoCxVfm+b1k=";
-  withHinting = true;
-}
+  # Term Nerd Font
+  term-nf = mkFont {
+    variant = "Term";
+    isNF = true;
+    hash = "sha256-joAhNADErBErDqTrNelJ0ulGZCN/OUZ1SMYyU++7l6U=";
+  };

-// mkWidths {
-  suffix = "term-NF";
-  variant = "Term";
-  isNF = true;
-  hash = "sha256-GiMI2YTl20K+zUObcFNzgP1ivm7pH2zHWFG15gFgasg=";
-}
+  # NL
+  nl = mkFont {
+    variant = "NL";
+    hash = "sha256-3zqO7W23Zcdz7L8cO0A8oAH0PQqYUNwKiKnAmN/Ja8s=";
+  };

-# NL
-// mkWidths {
-  suffix = "NL";
-  variant = "NL";
-  hash = "sha256-dNOpQJ1VOrjcKS/UtPXKUP9W0gaxFMvH4aa+xK2hg2w=";
-  withHinting = true;
-}
+  # NL Nerd Font
+  nl-nf = mkFont {
+    variant = "NL";
+    isNF = true;
+    hash = "sha256-3eTVqMlLx/AF3aoTbQ68Qzhr5nQzWIKt4HWZZsH2yE0=";
+  };

-// mkWidths {
-  suffix = "NL-NF";
-  variant = "NL";
-  isNF = true;
-  hash = "sha256-N7mtM/aQwps77u907z8Rop3RftRGR4K8zDXFX8xWq5w=";
-}
-
-# Nerd Font Standard
-// mkWidths {
-  suffix = "NF";
-  isNF = true;
-  hash = "sha256-Nt8EaVhKvlb9BMKQe4l5iNGcPLzKba6KScIWZbcL8gA=";
+  # Nerd Font Standard
+  nf = mkFont {
+    isNF = true;
+    hash = "sha256-b0mqhLeDT+uYPYiOKB+cxc5M1TtFkICKAmlcmW3IjDg=";
+  };
 }
--- a/pkgs/development/compilers/dart/package-source-builders/flutter_vodozemac/default.nix
+++ b/pkgs/development/compilers/dart/package-source-builders/flutter_vodozemac/default.nix
@@ -20,6 +20,7 @@ let
        _0_3_0 = "sha256-eKKrcroV2yl/FV2WmgZWFPO5MPAGz0xCvpr0fgIuGZ4=";
        _0_4_1 = "sha256-eKKrcroV2yl/FV2WmgZWFPO5MPAGz0xCvpr0fgIuGZ4=";
        _0_5_0 = "sha256-eKKrcroV2yl/FV2WmgZWFPO5MPAGz0xCvpr0fgIuGZ4=";
+        _0_7_1 = "sha256-KsOyQyz9TqcmkHwuf3iA0NQU+pOOtoBVKv1AxZCjxnw=";
      }
      .${"_" + (lib.replaceStrings [ "." ] [ "_" ] version)} or (throw ''
        Unsupported version of pub 'flutter_vodozemac': '${version}'
--- a/pkgs/development/compilers/dart/package-source-builders/sqlite3/default.nix
+++ b/pkgs/development/compilers/dart/package-source-builders/sqlite3/default.nix
@@ -2,11 +2,40 @@
  stdenv,
  lib,
  writeScript,
+  fetchurl,
  sqlite,
 }:
-
 { version, src, ... }:
-
+let
+  sqlcipher =
+    let
+      system-alias = {
+        x86_64-linux = "x64.linux";
+      };
+    in
+    stdenv.mkDerivation {
+      name = "libsqlcipher.so";
+      src = fetchurl {
+        url = "https://github.com/simolus3/sqlite3.dart/releases/download/sqlite3-${version}/libsqlcipher.${
+          system-alias.${stdenv.hostPlatform.system} or (throw ''
+            Unsupported system for pub 'sqlite3' ('sqlcipher' dependency)
+            Please add the system alias mapping if it exists, note that you will also have to add used version hashes for that system below'')
+        }.so";
+        sha256 =
+          {
+            _3_5_0-x86_64-linux = "sha256-GH+3MhYXTwWD7WmEHzc8wecYcaOcCXsy93UWiEjh6Eo=";
+          }
+          .${"_" + (lib.replaceStrings [ "." ] [ "_" ] version) + "-" + stdenv.hostPlatform.system}
+            or (throw ''
+              Unsupported version of pub 'sqlite3' ('sqlcipher' dependency '${version}')
+              Please add sha256 here. If the sha256
+              is the same with existing versions, add an alias here.
+            '');
+      };
+      unpackPhase = ":";
+      installPhase = "mkdir -p $out/lib && cp $src $out/lib/libsqlcipher.so";
+    };
+in
 stdenv.mkDerivation (finalAttrs: {
  pname = "sqlite3";
  inherit version src;
@@ -15,6 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
  setupHook = writeScript "${finalAttrs.pname}-setup-hook" ''
    sqliteFixupHook() {
      runtimeDependencies+=('${lib.getLib sqlite}')
+      ${lib.optionalString (lib.versionAtLeast version "3.5.0") "runtimeDependencies+=('${lib.getLib sqlcipher}')"}
    }

    preFixupHooks+=(sqliteFixupHook)
@@ -25,6 +55,9 @@ stdenv.mkDerivation (finalAttrs: {
      ''
        substituteInPlace lib/src/hook/compile/description.dart \
          --replace-fail "return fromGitHub(LibraryType.sqlite3);" "return LookupSystem('sqlite3');"
+
+        substituteInPlace lib/src/hook/compile/description.dart \
+          --replace-fail "return fromGitHub(LibraryType.sqlcipher);" "return LookupSystem('sqlcipher');"
      ''
    else
      lib.optionalString (lib.versionAtLeast version "3.2.0") ''
--- a/pkgs/development/python-modules/clevercsv/default.nix
+++ b/pkgs/development/python-modules/clevercsv/default.nix
@@ -7,7 +7,7 @@
  setuptools,

  # dependencies
-  chardet,
+  chardet_5,
  regex,
  packaging,

@@ -37,7 +37,7 @@ buildPythonPackage rec {
  build-system = [ setuptools ];

  dependencies = [
-    chardet
+    chardet_5
    regex
    packaging
  ];
--- a/pkgs/development/python-modules/pdm-build-locked/default.nix
+++ b/pkgs/development/python-modules/pdm-build-locked/default.nix
@@ -11,14 +11,14 @@

 buildPythonPackage rec {
  pname = "pdm-build-locked";
-  version = "0.3.7";
+  version = "0.3.8";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "pdm-project";
    repo = "pdm-build-locked";
    tag = version;
-    hash = "sha256-ONDKW3KIOKnrOWD/T/W7Do/4/CfgET4TpfYcLha5mVg=";
+    hash = "sha256-zRgo62TrDM0mch4z4hDnufKhe4cLmqWMxNMheY5uL/8=";
  };

  postPatch = ''
--- a/pkgs/development/python-modules/pycrdt/Cargo.lock
+++ b/pkgs/development/python-modules/pycrdt/Cargo.lock
@@ -30,14 +30,14 @@ checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.4",
+ "syn 3.0.6",
 ]

 [[package]]
 name = "bitflags"
-version = "2.13.1"
+version = "2.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+checksum = "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"

 [[package]]
 name = "bumpalo"
@@ -47,15 +47,15 @@ checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"

 [[package]]
 name = "cfg-if"
-version = "1.0.4"
+version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"

 [[package]]
 name = "crossbeam-utils"
-version = "0.8.22"
+version = "0.8.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61803da095bee82a81bb1a452ecc25d3b2f1416d1897eb86430c6159ef717c17"
+checksum = "a31eee39dddec8330830986fcd7625edb5a24ec90ea038215273bbc3adb08ac6"

 [[package]]
 name = "dashmap"
@@ -139,9 +139,9 @@ checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"

 [[package]]
 name = "js-sys"
-version = "0.3.104"
+version = "0.3.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e0c1080212aad755ea003d18543e8768dd432c48819efd73a7bf1e39b7a5a3a"
+checksum = "ce57d20d1ea864ce2ac172ab472d409214f4fd359f0b2a2775abdf522e2af99e"
 dependencies = [
 "cfg-if",
 "wasm-bindgen",
@@ -216,7 +216,7 @@ dependencies = [

 [[package]]
 name = "pycrdt"
-version = "0.14.4"
+version = "0.14.5"
 dependencies = [
 "futures-task",
 "pyo3",
@@ -345,7 +345,7 @@ checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.4",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -372,9 +372,9 @@ dependencies = [

 [[package]]
 name = "smallvec"
-version = "1.15.2"
+version = "1.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+checksum = "ba467056f1b547ed52077911161fc86985becbc60e8e1857c8a144dab0def891"

 [[package]]
 name = "syn"
@@ -389,9 +389,9 @@ dependencies = [

 [[package]]
 name = "syn"
-version = "3.0.4"
+version = "3.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6275cddf4610d1775e6d1fe9469b2e77d0f39fd98fb7450901b821e0c53649f"
+checksum = "8593e8e72159ed2257d083c7a454a85cbf854f37a0966d8d483aff8c8a3ebcee"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -421,20 +421,20 @@ checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.4",
+ "syn 3.0.6",
 ]

 [[package]]
 name = "unicode-ident"
-version = "1.0.24"
+version = "1.0.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+checksum = "d245f478577f809a851594d02313b640fb437e0bb33866753cff937863096954"

 [[package]]
 name = "wasm-bindgen"
-version = "0.2.127"
+version = "0.2.128"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b70935747edd64d89de3efa29d73789b806c15798f8e7dca4d8ac356b50ce70"
+checksum = "aecb87a33d3b0c5e3b7aa46336eaf486cffafbd281b195e4c8b80d50df2351bf"
 dependencies = [
 "cfg-if",
 "once_cell",
@@ -445,9 +445,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-macro"
-version = "0.2.127"
+version = "0.2.128"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77775f8f3f7217702089053b94958f8f54061a3f663417df76e19cbdcca29bc1"
+checksum = "a690d511e3c1a8b3a55e33511e3c2c00c78415cd23650f32b808627f5696b9ed"
 dependencies = [
 "quote",
 "wasm-bindgen-macro-support",
@@ -455,22 +455,22 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-macro-support"
-version = "0.2.127"
+version = "0.2.128"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e11d33f857dc2fb11b8bc75aee111aa9cbeb12cd9f25efd3d4c2a3dd4e235284"
+checksum = "411e4887f0071ef2d2164a9d5fdf2d20efbef78fccd3a78b0c10a1dc5295e48a"
 dependencies = [
 "bumpalo",
 "proc-macro2",
 "quote",
- "syn 2.0.119",
+ "syn 3.0.6",
 "wasm-bindgen-shared",
 ]

 [[package]]
 name = "wasm-bindgen-shared"
-version = "0.2.127"
+version = "0.2.128"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ef64dbcc55df09c7e5a46182d181c2cfa3e925f3da937ea764728b4bbb9dcbf"
+checksum = "81941cd78d0c92026c33e5e01312845a4cb1e9af3407f9134b100dd03144103e"
 dependencies = [
 "unicode-ident",
 ]
--- a/pkgs/development/python-modules/pycrdt/default.nix
+++ b/pkgs/development/python-modules/pycrdt/default.nix
@@ -20,7 +20,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "pycrdt";
-  version = "0.14.4";
+  version = "0.14.5";
  pyproject = true;
  __structuredAttrs = true;

@@ -28,7 +28,7 @@ buildPythonPackage (finalAttrs: {
    owner = "y-crdt";
    repo = "pycrdt";
    tag = finalAttrs.version;
-    hash = "sha256-dvFOFsJHxXspuCuFnJX0Sr3zitdBtmUwLcl2lTvGacw=";
+    hash = "sha256-72MFHt3lgN1OVakI2u1E6HQTv4N4KDWeX2EYk+ddSxQ=";
  };

  postPatch = ''
--- a/pkgs/development/tools/rust/rustup/0001-dynamically-patchelf-binaries.patch
+++ b/pkgs/development/tools/rust/rustup/0001-dynamically-patchelf-binaries.patch
@@ -1,8 +1,8 @@
 diff --git a/src/dist/component/package.rs b/src/dist/component/package.rs
-index dc545d4b62..4dd8ade86e 100644
+index 28e22f8635..568097ccf0 100644
 --- a/src/dist/component/package.rs
 +++ b/src/dist/component/package.rs
-@@ -130,6 +130,7 @@
+@@ -132,6 +132,7 @@
                     } else {
                         builder.move_file(path.clone(), &src_path)?
                     }
@@ -10,7 +10,7 @@ index dc545d4b62..4dd8ade86e 100644
                 }
                 ComponentPartKind::Dir => {
                     if self.copy {
-@@ -152,6 +153,176 @@
+@@ -154,6 +155,176 @@
     }
 }
 
--- a/pkgs/development/tools/rust/rustup/default.nix
+++ b/pkgs/development/tools/rust/rustup/default.nix
@@ -25,16 +25,16 @@ in

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rustup";
-  version = "1.29.0";
+  version = "1.29.1";

  src = fetchFromGitHub {
    owner = "rust-lang";
    repo = "rustup";
    tag = finalAttrs.version;
-    hash = "sha256-jbB0nmXtc95Ac+YfmyELh6n5OTRMmeDPT4OFIlJNrZc=";
+    hash = "sha256-zL/N2Bx3HIEzrRQQVdTQ7VnSoNNbqe8FE26GcjwHSjM=";
  };

-  cargoHash = "sha256-m/KoXNJh00zYKZo7MIJsBvo4zldfKdofrUh8AItJqXI=";
+  cargoHash = "sha256-soSeDzZzIPxR9cham+0VQfI21LgLX5o/9r00xK7fNHY=";

  nativeBuildInputs = [
    makeBinaryWrapper
@@ -91,6 +91,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
    # reaches out to the network to test TLS roots, which can't be done in the
    # build sandbox
    "--skip=suite::static_roots::store_static_roots"
+    # tries to hide the cc from rustup by setting PATH to an empty directory,
+    # but this doesn't work due to how nixpkgs wraps binaries
+    "--skip=suite::cli_inst_interactive::install_warns_if_default_linker_missing"
  ];

  postInstall = ''
--- a/pkgs/tools/inputmethods/ibus-engines/ibus-cangjie/default.nix
+++ b/pkgs/tools/inputmethods/ibus-engines/ibus-cangjie/default.nix
@@ -1,7 +1,7 @@
 {
  stdenv,
  lib,
-  fetchFromGitHub,
+  fetchFromGitLab,
  gettext,
  pkg-config,
  wrapGAppsHook3,
@@ -29,13 +29,17 @@ let
 in
 stdenv.mkDerivation {
  pname = "ibus-cangjie";
-  version = "unstable-2023-07-25";
+  version = "2.4-unstable-2023-07-24";

-  src = fetchFromGitHub {
-    owner = "Cangjians";
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitLab {
+    domain = "gitlab.freedesktop.org";
+    owner = "Cangjie";
    repo = "ibus-cangjie";
    rev = "46c36f578047bb3cb2ce777217abf528649bc58d";
-    sha256 = "sha256-msVqWougc40bVXIonJA6K/VgurnDeR2TdtGKfd9rzwM=";
+    hash = "sha256-msVqWougc40bVXIonJA6K/VgurnDeR2TdtGKfd9rzwM=";
  };

  buildInputs = [
@@ -52,6 +56,7 @@ stdenv.mkDerivation {
    gettext
    gobject-introspection
    pkg-config
+    python3
    wrapGAppsHook3
  ];

@@ -69,7 +74,7 @@ stdenv.mkDerivation {
    isIbusEngine = true;
    description = "IBus engine for users of the Cangjie and Quick input methods";
    mainProgram = "ibus-setup-cangjie";
-    homepage = "https://github.com/Cangjians/ibus-cangjie";
+    homepage = "https://gitlab.freedesktop.org/cangjie/ibus-cangjie";
    license = lib.licenses.gpl3Plus;
    platforms = lib.platforms.linux;
    maintainers = [ ];
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1324,6 +1324,7 @@ mapAliases {
  lexical = throw "'lexical' has been removed because it was deprecated and archived upstream. Consider using 'beamPackages.expert' instead"; # Added 2026-02-24
  lfe = warnAlias "'lfe' is deprecated in favor of using the beamPackages sets. Use 'beam27Packages.lfe' instead." beam27Packages.lfe; # added 2026-06-15
  lfs = throw "'lfs' has been renamed to/replaced by 'dysk'"; # Converted to throw 2025-10-27
+  lgogdownloader-gui = throw "'lgogdownloader-gui' has been removed, as upstream dropped the Qt GUI in favor of browser-based authentication. Use 'lgogdownloader' instead"; # Added 2026-09-13
  libappindicator-gtk2 = throw "'libappindicator-gtk2' has been removed as it depended on the deprecated GTK 2 engine."; # Added 2026-08-10
  libappindicator-gtk3 = libappindicator; # Added 2026-08-10
  libAppleWM = libapplewm; # Added 2026-02-04
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1632,8 +1632,6 @@ with pkgs;

  lexicon = with python3Packages; toPythonApplication dns-lexicon;

-  lgogdownloader-gui = callPackage ../by-name/lg/lgogdownloader/package.nix { enableGui = true; };
-
  # Less secure variant of lowdown for use inside Nix builds.
  lowdown-unsandboxed = lowdown.override {
    enableDarwinSandbox = false;