Merge master into staging-nixos

2026-08-27 02:34:53 +00:00 · 2026-08-20 18:08:59 +00:00
parent 6d1792e9dc fa10bdff7e
commit 931aaee45b
162 changed files with 826 additions and 2267 deletions
--- a/doc/release-notes/rl-2611.section.md
+++ b/doc/release-notes/rl-2611.section.md
@@ -101,6 +101,8 @@

 - `pdns` has been updated from `5.0.x` to `5.1.x`. Please be sure to review the [Upgrade Notes](https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0) before upgrading. Namely LUA record updates are no longer allowed by default, and the embedded webserver no longer includes a `access-control-allow-origin: *` header by default.

+- LibreOffice upstream switched from Fresh/Still stable branches to a single Stable branch; `libreoffice` and `libreoffice-qt` work as before, but more specific aliases like `libreoffice-fresh` should be replaced.
+
 - `davmail` no longer supports building with GTK 2, and the `preferGtk3` override flag has been removed as GTK 3 is always used.

 - Support for the legacy U‐Boot image format has been removed from the Linux kernel builders, as it is deprecated upstream and no longer used by any platform in Nixpkgs.
--- a/nixos/doc/manual/release-notes/rl-2511.section.md
+++ b/nixos/doc/manual/release-notes/rl-2511.section.md
@@ -464,7 +464,7 @@

 - `services.pds` has been renamed to `services.bluesky-pds`.

- `services.pfix-srsd` now automatically integrates with the local Postfix instance, when enabled. This behavior can disabled using the [services.pfix-srsd.configurePostfix](#opt-services.pfix-srsd.configurePostfix) option.
+- `services.pfix-srsd` now automatically integrates with the local Postfix instance, when enabled. This behavior can disabled using the `services.pfix-srsd.configurePostfix` option.

 - `services.postsrsd` now automatically integrates with the local Postfix instance, when enabled. This behavior can disabled using the [services.postsrsd.configurePostfix](#opt-services.postsrsd.configurePostfix) option.

--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -184,6 +184,8 @@

 - `services.komodo-periphery` has been updated to support version 2.0.0. Some options have been renamed to match the new configuration structure; compatibility aliases are provided for the renamed options. The `passkeys` and `outbound.onboardingKey` options have been removed; use `passkeyFiles`, `auth.privateKey`/`auth.corePublicKeys`, or `outbound.onboardingKeyFile` instead. New outbound mode configuration is available under `outbound.*`.

+- `services.pfix-srsd` and the supporting `pfixtools` package have been removed, as the project is dormant and does not support pcre2.  `services.postsrsd` is the recommended replacement for Sender Rewriting Scheme support with Postfix.
+
 - Package `overseerr` has been removed as the `overseerr` and `jellyseerr` projects were merged under `seerr`.

 - `slskd` has been updated to v0.25.0, which renames the `global` option to `transfers`. Please review the [changelog](https://github.com/slskd/slskd/releases#release-0.25.0).
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -804,7 +804,6 @@
  ./services/mail/offlineimap.nix
  ./services/mail/opendkim.nix
  ./services/mail/opensmtpd.nix
-  ./services/mail/pfix-srsd.nix
  ./services/mail/postfix-tlspol.nix
  ./services/mail/postfix.nix
  ./services/mail/postgrey.nix
--- a/nixos/modules/programs/atuin.nix
+++ b/nixos/modules/programs/atuin.nix
@@ -60,7 +60,7 @@ in
      description = ''
        Configuration written to {file}`/etc/atuin/config.toml`.

-        See <https://docs.atuin.sh/configuration/config/> for the full list
+        See <https://docs.atuin.sh/latest/configuration/config/> for the full list
        of options.
      '';
    };
@@ -99,7 +99,7 @@ in
        {file}`/etc/atuin/themes/theme-name.toml`
        where the name of each attribute is the theme-name

-        See <https://docs.atuin.sh/guide/theming/> for the full list
+        See <https://docs.atuin.sh/latest/guide/theming/> for the full list
        of options.
      '';
      default = { };
--- a/nixos/modules/rename.nix
+++ b/nixos/modules/rename.nix
@@ -320,6 +320,9 @@ in
      The Javascript version of Parsoid configured through this module does not work with modern MediaWiki versions,
      and has been deprecated by upstream, so it has been removed. MediaWiki comes with a new PHP-based parser built-in, so there is no need for this module.
    '')
+    (mkRemovedOptionModule [ "services" "pfix-srsd" ] ''
+      The pfixtools project is dormant and does not support pcre2.  `services.postsrsd` is the recommended replacement for Sender Rewriting Scheme support with Postfix.
+    '')
    (mkRemovedOptionModule [ "services" "pingvin-share" ] ''
      The `pingvin-share.backend` package was broken and the project was archived upstream, so it was removed from nixpkgs.
    '')
--- a/nixos/modules/services/mail/pfix-srsd.nix
+++ b/nixos/modules/services/mail/pfix-srsd.nix
@@ -1,81 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-let
-  cfg = config.services.pfix-srsd;
-in
-{
-
-  ###### interface
-
-  options = {
-
-    services.pfix-srsd = {
-      enable = lib.mkOption {
-        default = false;
-        type = lib.types.bool;
-        description = "Whether to run the postfix sender rewriting scheme daemon.";
-      };
-
-      domain = lib.mkOption {
-        description = "The domain for which to enable srs";
-        type = lib.types.str;
-        example = "example.com";
-      };
-
-      secretsFile = lib.mkOption {
-        description = ''
-          The secret data used to encode the SRS address.
-          to generate, use a command like:
-          `for n in $(seq 5); do dd if=/dev/urandom count=1 bs=1024 status=none | sha256sum | sed 's/  -$//' | sed 's/^/          /'; done`
-        '';
-        type = lib.types.path;
-        default = "/var/lib/pfix-srsd/secrets";
-      };
-
-      configurePostfix = lib.mkOption {
-        type = lib.types.bool;
-        default = true;
-        description = ''
-          Whether to configure the required settings to use pfix-srsd in the local Postfix instance.
-        '';
-      };
-    };
-  };
-
-  ###### implementation
-
-  config = lib.mkMerge [
-    (lib.mkIf (cfg.enable && cfg.configurePostfix && config.services.postfix.enable) {
-      services.postfix.settings.main = {
-        sender_canonical_maps = [ "tcp:127.0.0.1:10001" ];
-        sender_canonical_classes = [ "envelope_sender" ];
-        recipient_canonical_maps = [ "tcp:127.0.0.1:10002" ];
-        recipient_canonical_classes = [ "envelope_recipient" ];
-      };
-    })
-
-    (lib.mkIf cfg.enable {
-      environment = {
-        systemPackages = [ pkgs.pfixtools ];
-      };
-
-      systemd.services.pfix-srsd = {
-        description = "Postfix sender rewriting scheme daemon";
-        before = [ "postfix.service" ];
-        #note that we use requires rather than wants because postfix
-        #is unable to process (almost) all mail without srsd
-        requiredBy = [ "postfix.service" ];
-        serviceConfig = {
-          Type = "forking";
-          PIDFile = "/run/pfix-srsd.pid";
-          ExecStart = "${pkgs.pfixtools}/bin/pfix-srsd -p /run/pfix-srsd.pid -I ${config.services.pfix-srsd.domain} ${config.services.pfix-srsd.secretsFile}";
-        };
-      };
-    })
-  ];
-}
--- a/nixos/modules/services/mail/postfix.nix
+++ b/nixos/modules/services/mail/postfix.nix
@@ -1296,6 +1296,5 @@ in
      [ "services" "postfix" "settings" "main" "smtp_tls_security_level" ]
      (config: lib.mkIf config.services.postfix.useDane "dane")
    )
-    (lib.mkRenamedOptionModule [ "services" "postfix" "useSrs" ] [ "services" "pfix-srsd" "enable" ])
  ];
 }
--- a/nixos/modules/services/misc/atuin.nix
+++ b/nixos/modules/services/misc/atuin.nix
@@ -74,7 +74,7 @@ in
        default = null;
        description = ''
          Environment file, used to set any secret ATUIN_* environment variables, such as ATUIN_DB_URI containing a password.
-          See https://docs.atuin.sh/cli/self-hosting/server-setup/#configuration for available environment variables.
+          See <https://docs.atuin.sh/latest/self-hosting/server-setup/#configuration> for available environment variables.
        '';
      };
    };
--- a/nixos/modules/system/boot/systemd/nspawn.nix
+++ b/nixos/modules/system/boot/systemd/nspawn.nix
@@ -55,10 +55,14 @@ let
      "LinkJournal"
      "Ephemeral"
      "AmbientCapability"
+      "SuppressSync"
+      "PrivateUsersDelegate"
+      "RestrictAddressFamilies"
    ])
    (assertValueOneOf "Boot" boolValues)
    (assertValueOneOf "ProcessTwo" boolValues)
    (assertValueOneOf "NotifyReady" boolValues)
+    (assertValueOneOf "SuppressSync" boolValues)
  ];

  checkFiles = checkUnitConfig "Files" [
@@ -74,6 +78,7 @@ let
      "BindUser"
      "Inaccessible"
      "PrivateUsersOwnership"
+      "BindUserShell"
    ])
    (assertValueOneOf "ReadOnly" boolValues)
    (assertValueOneOf "Volatile" (boolValues ++ [ "state" ]))
@@ -97,6 +102,7 @@ let
      "Bridge"
      "Zone"
      "Port"
+      "NamespacePath"
    ])
    (assertValueOneOf "Private" boolValues)
    (assertValueOneOf "VirtualEthernet" boolValues)
--- a/nixos/tests/scx/default.nix
+++ b/nixos/tests/scx/default.nix
@@ -20,6 +20,7 @@
      flow.configuration.services.scx.scheduler = "scx_flow";
      forge.configuration.services.scx.scheduler = "scx_forge";
      lavd.configuration.services.scx.scheduler = "scx_lavd";
+      mlfq.configuration.services.scx.scheduler = "scx_mlfq";
      p2dq.configuration.services.scx.scheduler = "scx_p2dq";
      pandemonium.configuration.services.scx.scheduler = "scx_pandemonium";
      rlfifo.configuration.services.scx.scheduler = "scx_rlfifo";
@@ -40,6 +41,7 @@
      "flow",
      "forge",
      "lavd",
+      "mlfq",
      "p2dq",
      "pandemonium",
      "rlfifo",
--- a/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
@@ -21,22 +21,22 @@ vscode-utils.buildVscodeMarketplaceExtension (finalAttrs: {
      sources = {
        "x86_64-linux" = {
          arch = "linux-x64";
-          hash = "sha256-tnYZJ2Lx6AerYLhm5+2bNEpkNWRauDynJiA7T4wvveU=";
+          hash = "sha256-OkUNFovJqm/F65O9p47lPgne0mjXqMKVPpjSbP2vsHo=";
        };
        "aarch64-linux" = {
          arch = "linux-arm64";
-          hash = "sha256-VNZr3WXNqFA8MYdwFwTjN2QoyRZCgKlKtMso7oocWvE=";
+          hash = "sha256-oPEwnli4L0FB0G5aJFxqadfSfzfar5FAvR5B03PjQog=";
        };
        "aarch64-darwin" = {
          arch = "darwin-arm64";
-          hash = "sha256-w9afYKBwYitjqu1ORRtEfwZri3FAg7sQ+0p3nTimHzM=";
+          hash = "sha256-WHZojtsjbDwo+VwCUhj6jJVmhT/WiPlE7WRr8DUq170=";
        };
      };
    in
    {
      name = "claude-code";
      publisher = "anthropic";
-      version = "2.1.235";
+      version = "2.1.237";
    }
    // sources.${stdenvNoCC.hostPlatform.system}
      or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
--- a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    publisher = "google";
    name = "colab";
-    version = "0.8.1";
-    hash = "sha256-QKGE6heSrSCm7X0YSOQy6SQeD50AZPS28UYWSWYdJxs=";
+    version = "0.9.0";
+    hash = "sha256-e2w9aZD6GedPXPcTc8j5itYHuL2A4zG+gwhFH+43iDw=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "windows-ai-studio";
    publisher = "ms-windows-ai-studio";
-    version = "1.6.7";
-    hash = "sha256-87ioUa5bpqSlerMvgqSWiWB2xPbb8lje8MChSPV/mKw=";
+    version = "1.6.8";
+    hash = "sha256-UrflXIUTgoMc8D1oyxdmTw6LQz2lLFarEAB/PW1wM5w=";
  };

  meta = {
--- a/pkgs/applications/emulators/libretro/cores/play.nix
+++ b/pkgs/applications/emulators/libretro/cores/play.nix
@@ -14,13 +14,13 @@
 }:
 mkLibretroCore {
  core = "play";
-  version = "0-unstable-2026-07-11";
+  version = "0-unstable-2026-08-11";

  src = fetchFromGitHub {
    owner = "jpd002";
    repo = "Play-";
-    rev = "50aedca2639521bc498ace0b2be1ea012801a86a";
-    hash = "sha256-ywqwy8HwxigRG/2GfvfpewNjTIeunXH9NtyAH5iUfa8=";
+    rev = "04bde0df87ee7c0e2f0151b51bb2cc22c88541da";
+    hash = "sha256-D9GDf3/y6Et93IRUL4V7o7jBhiSHKGCJDpDbIicDHy4=";
    fetchSubmodules = true;
  };

--- a/pkgs/applications/networking/browsers/chromium/common.nix
+++ b/pkgs/applications/networking/browsers/chromium/common.nix
@@ -656,6 +656,28 @@ let
      # which is annoying, so let's make it use Go from $PATH for
      # both (all) architectures instead.
      ./patches/chromium-151-dawn-use-Go-from-PATH.patch
+    ]
+    ++ lib.optionals (chromiumVersionAtLeast "151.0.7922.169" && !ungoogled) [
+      # Don't show misleading Terms of Service dialog on first run that literally says [^1]
+      #
+      # > This Space Intentionally Blank
+      # >
+      # > In official builds this space will show the terms of service.
+      #
+      # "official builds" refers to offical Google Chrome builds, not Chromium, for which we
+      # explicitly set is_official_build=true as gn flag. If this does ever change to something
+      # actually worthwhile, we can drop this revert and update our VM test to handle this dialog.
+      # Exclude ungoogled-chromium, as it ships its own variant of this patch.
+      # [^1]: https://chromium.googlesource.com/chromium/src/+/151.0.7922.169/components/resources/terms/terms_chromium.txt
+      (fetchpatch {
+        name = "chromium-151-revert-Show-Linux-first-run-terms-of-service-dialog-by-default.patch";
+        # https://chromium-review.googlesource.com/c/chromium/src/+/8257374
+        url = "https://chromium.googlesource.com/chromium/src/+/ae9b17ac975d4b10af762e9344083d858f1347ce^!?format=TEXT";
+        decode = "base64 -d";
+        revert = true;
+        includes = [ "chrome/browser/first_run/first_run.h" ];
+        hash = "sha256-d1Zm2flZPG++ROF4CCawn9U8T7/qgZFMHTXArqIShTk=";
+      })
    ];

    postPatch =
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -787,13 +787,13 @@
    "vendorHash": "sha256-mnKXYT0GfIS+ODzBCS9l4rLF1ugadesmpgdOgj74nLg="
  },
  "jianyuan_sentry": {
-    "hash": "sha256-V0+vbeECEaeOwr8a1HohdClZKwVkjHSxbhu86Bl9ZKE=",
+    "hash": "sha256-Mths66WPu6LVclZx+oC6sN3HNnjTGSfitDgWzl0JIbI=",
    "homepage": "https://registry.terraform.io/providers/jianyuan/sentry",
    "owner": "jianyuan",
    "repo": "terraform-provider-sentry",
-    "rev": "v0.15.4",
+    "rev": "v0.15.5",
    "spdx": "MIT",
-    "vendorHash": "sha256-qSLy0iPPiJ9EdpU1D879bICDKwJfDA+JnxCepsvGVbA="
+    "vendorHash": "sha256-ncLndxP/0V+BjpOCd57+069+JIAM2deDPpZftRwm+E8="
  },
  "joneshf_openwrt": {
    "hash": "sha256-z78IceF2VJtiQpVqC+rTUDsph73LZawIK+az3rEhljA=",
@@ -905,13 +905,13 @@
    "vendorHash": "sha256-8Zj4nrEJ38Tz0LOYtghlMnJZJnD2zJjsqawVMTEX0Wk="
  },
  "metio_migadu": {
-    "hash": "sha256-LS3G1jw6LRVrN8h96ogCzW13877U5OHZ7KQMZCVCYw0=",
+    "hash": "sha256-YzSCkHzbLzxhjh+ZNn5lxG7gpeLPYwICHBHy7JKFUKQ=",
    "homepage": "https://registry.terraform.io/providers/metio/migadu",
    "owner": "metio",
    "repo": "terraform-provider-migadu",
-    "rev": "2026.8.6",
+    "rev": "2026.8.20",
    "spdx": "0BSD",
-    "vendorHash": "sha256-mv0LZx3MjfmsQ5QaaVlklFaGcgoJ/bfaZwyVEig/HZY="
+    "vendorHash": "sha256-pLUxFGVrSCIeDNe4gZEl3KoHKE6dqNvzGEZQTOBaM3Q="
  },
  "mongey_kafka": {
    "hash": "sha256-rTa6c7jAMH027V7h/yUGVGz6TS0PDdObilxU0Vpr6FI=",
--- a/pkgs/applications/office/libreoffice/default.nix
+++ b/pkgs/applications/office/libreoffice/default.nix
@@ -150,8 +150,8 @@
  withHelp ? true,
  withJava ? true,
  kdeIntegration ? false,
-  variant ? "fresh",
-  debugLogging ? variant == "still",
+  variant ? "stable",
+  debugLogging ? variant == "stable",
  qt6,
  kdePackages,
  symlinkJoin,
@@ -178,8 +178,7 @@
 }:

 assert builtins.elem variant [
-  "fresh"
-  "still"
+  "stable"
  "collabora"
  "collabora-coda"
 ];
@@ -287,26 +286,6 @@ let
    ];
  };

-  # required for libreoffice-still version 25.8.5.2
-  liborcus_0_20 = liborcus.overrideAttrs {
-    version = "0.20.1";
-
-    src = fetchFromGitLab {
-      owner = "orcus";
-      repo = "orcus";
-      rev = "0.20.1";
-      hash = "sha256-+YTK0EPgGHN4yKurJjuWWrAHzgtbc1dOvtppcvuRei4=";
-    };
-
-    buildInputs = [
-      boost188
-      libixion
-      mdds
-      python3
-      zlib
-    ];
-  };
-
  importVariant = f: import (./. + "/src-${variant}/${f}");
  # Update these files with:
  # nix-shell maintainers/scripts/update.nix --argstr package libreoffice-$VARIANT.unwrapped
@@ -399,11 +378,20 @@ stdenv.mkDerivation (finalAttrs: {
    # Don't detect Qt paths from qmake, so our patched-in onese are used
    ./dont-detect-qt-paths-from-qmake.patch

+  ]
+  ++ lib.optionals (variant != "stable") [
+    # Fix build with Poppler 26.01
+    (fetchpatch2 {
+      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/libreoffice-still/-/raw/25.8.7-2/fix_build_with_poppler_26.01.0.patch";
+      hash = "sha256-5JTTvJFIV5MG0Gz7y46wAr3q9tWdSVoZ9TJQlMJVqBc=";
+    })
+
    # Fix build with Poppler 26.02
    (fetchpatch2 {
      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/libreoffice-still/-/raw/25.8.7-2/fix_build_with_poppler_26.02.0.patch";
      hash = "sha256-IInhSoqTemDITB+AtkvVa9eGbodTbUGSpMMpC9N/mmg=";
    })
+
    # Fix build with Poppler 26.04
    (fetchpatch2 {
      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/libreoffice-still/-/raw/25.8.7-2/fix_build_with_poppler_26.04.0.patch";
@@ -420,13 +408,6 @@ stdenv.mkDerivation (finalAttrs: {
      hash = "sha256-j66IsrzaqQ55MRVzhlw25guuoDtxx1D4XeJsBhgWP2c=";
    })
  ]
-  ++ lib.optionals (variant != "fresh") [
-    # Fix build with Poppler 26.01
-    (fetchpatch2 {
-      url = "https://gitlab.archlinux.org/archlinux/packaging/packages/libreoffice-still/-/raw/25.8.7-2/fix_build_with_poppler_26.01.0.patch";
-      hash = "sha256-5JTTvJFIV5MG0Gz7y46wAr3q9tWdSVoZ9TJQlMJVqBc=";
-    })
-  ]
  ++ lib.optionals (variant != "collabora" && variant != "collabora-coda") [
    # Revert part of https://github.com/LibreOffice/core/commit/6f60670877208612b5ea320b3677480ef6508abb that broke zlib linking
    ./readd-explicit-zlib-link.patch
@@ -608,10 +589,7 @@ stdenv.mkDerivation (finalAttrs: {
      mdds_2_1
      md4c
    ]
-    ++ optionals (variant == "still") [
-      liborcus_0_20
-    ]
-    ++ optionals (variant == "fresh") [
+    ++ optionals (variant == "stable") [
      fast-float
      liborcus
      md4c
--- a/pkgs/applications/office/libreoffice/skip-broken-tests-stable.patch
+++ b/pkgs/applications/office/libreoffice/skip-broken-tests-stable.patch
--- a/pkgs/applications/office/libreoffice/skip-broken-tests-still.patch
+++ b/pkgs/applications/office/libreoffice/skip-broken-tests-still.patch
@@ -1,253 +0,0 @@
--- a/sc/qa/extras/vba-macro-test.cxx
-+++ b/sc/qa/extras/vba-macro-test.cxx
-@@ -355,7 +355,7 @@ CPPUNIT_TEST_FIXTURE(VBAMacroTest, testVba)
- // Failed:  : Test change event for Range.FillRight:
- // Tests passed: 4
- // Tests failed: 4
-#if !defined(_WIN32)
-+#if 0 // flaky, see above
-         { u"Ranges-3.xls"_ustr,
-           u"vnd.sun.Star.script:VBAProject.testMacros.test?language=Basic&location=document"_ustr },
- #endif
--- a/sc/qa/unit/tiledrendering/tiledrendering.cxx
-+++ b/sc/qa/unit/tiledrendering/tiledrendering.cxx
-@@ -2954,6 +2954,7 @@ CPPUNIT_TEST_FIXTURE(ScTiledRenderingTest, testCommentCellCopyPaste)
- 
- CPPUNIT_TEST_FIXTURE(ScTiledRenderingTest, testInvalidEntrySave)
- {
-+    return; // hangs (forever?)
-     loadFromFile(u"validity.xlsx");
- 
-     // .uno:Save modifies the original file, make a copy first
-@@ -3212,6 +3213,7 @@ CPPUNIT_TEST_FIXTURE(ScTiledRenderingTest, testUndoReorderingMulti)
-
-  CPPUNIT_TEST_FIXTURE(ScTiledRenderingTest, testGetViewRenderState)
- {
-+    return; // fails on aarch64
-     // Add a pair of schemes, last added is the default
-     svtools::EditableColorConfig aColorConfig;
-     aColorConfig.AddScheme(u"Dark"_ustr);   
--- a/sc/qa/unit/ucalc_formula.cxx
-+++ b/sc/qa/unit/ucalc_formula.cxx
-@@ -1507,6 +1507,8 @@ CPPUNIT_TEST_FIXTURE(TestFormula, testFormulaAnnotateTrimOnDoubleRefs)
- 
- CPPUNIT_TEST_FIXTURE(TestFormula, testFormulaRefUpdate)
- {
-+    return; // fails consistently on nixpkgs?
-+
-     m_pDoc->InsertTab(0, u"Formula"_ustr);
- 
-     sc::AutoCalcSwitch aACSwitch(*m_pDoc, true); // turn auto calc on.
--- a/sw/qa/extras/tiledrendering/tiledrendering.cxx
-+++ b/sw/qa/extras/tiledrendering/tiledrendering.cxx
-@@ -447,6 +447,8 @@ CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testSearchAll)
- 
- CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testSearchAllNotifications)
- {
-+    return; // flaky on GTK
-+
-     createDoc("search.odt");
-     SwWrtShell* pWrtShell = getSwDocShell()->GetWrtShell();
-     setupLibreOfficeKitViewCallback(pWrtShell->GetSfxViewShell());
-@@ -970,6 +972,8 @@ namespace {
- 
- CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testMissingInvalidation)
- {
-+    return; // flaky on GTK
-+
-     // Create two views.
-     SwXTextDocument* pXTextDocument = createDoc("dummy.fodt");
-     ViewCallback aView1;
-@@ -1003,6 +1007,8 @@ CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testMissingInvalidation)
- 
- CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testViewCursors)
- {
-+    return; // flaky on GTK
-+
-     SwXTextDocument* pXTextDocument = createDoc("dummy.fodt");
-     ViewCallback aView1;
-     SfxLokHelper::createView();
-@@ -3197,6 +3203,8 @@ CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testRedlineNotificationDuringSave)
- 
- CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testHyperlink)
- {
-+    return; // flaky on GTK
-+
-     comphelper::LibreOfficeKit::setViewIdForVisCursorInvalidation(true);
-     SwXTextDocument* pXTextDocument = createDoc("hyperlink.odt");
-     SwWrtShell* pWrtShell = pXTextDocument->GetDocShell()->GetWrtShell();
-@@ -3407,6 +3415,8 @@ static void lcl_extractHandleParameters(std::string_view selection, sal_Int32& i
- 
- CPPUNIT_TEST_FIXTURE(SwTiledRenderingTest, testMoveShapeHandle)
- {
-+    return; // flaky on GTK
-+
-     createDoc("shape.fodt");
- 
-     SwWrtShell* pWrtShell = getSwDocShell()->GetWrtShell();
--- a/sdext/qa/unit/pdfimport.cxx	2025-03-22 14:46:52.202082763 +0100
-+++ b/sdext/qa/unit/pdfimport.cxx	2025-03-22 14:49:22.947719369 +0100
-@@ -785,6 +785,7 @@
- 
-         void testTdf104597_textrun()
-         {
-+            return; // apparently geometry-sensitive ?
- #if HAVE_FEATURE_POPPLER
-             rtl::Reference<pdfi::PDFIRawAdaptor> xAdaptor(new pdfi::PDFIRawAdaptor(OUString(), getComponentContext()));
-             xAdaptor->setTreeVisitorFactory(createDrawTreeVisitorFactory());
--- a/vcl/qa/cppunit/pdfexport/pdfexport2.cxx	2025-03-22 14:51:45.421728759 +0100
-+++ b/vcl/qa/cppunit/pdfexport/pdfexport2.cxx	2025-03-22 14:51:59.684729699 +0100
-@@ -5721,6 +5721,7 @@
- 
- CPPUNIT_TEST_FIXTURE(PdfExportTest2, testTdf164106SplitReorderedClusters)
- {
-+    return; // Unsure where the extra objects on the page come from
-     aMediaDescriptor[u"FilterName"_ustr] <<= u"writer_pdf_Export"_ustr;
-     saveAsPDF(u"tdf164106.fodt");
- 
--- a/sw/qa/extras/layout/layout3.cxx
-+++ b/sw/qa/extras/layout/layout3.cxx
-@@ -1388,6 +1388,8 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter3, testTdf158658c)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter3, testTdf155177)
- {
-+    return; // flaky
-+
-     createSwDoc("tdf155177-1-min.odt");
-
-     uno::Reference<beans::XPropertySet> xStyle(
--- a/sw/qa/extras/layout/layout4.cxx
-+++ b/sw/qa/extras/layout/layout4.cxx
-@@ -1518,6 +1518,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf104209VertRTL)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408LTR)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // Verify that line breaking a first bidi portion correctly underflows in LTR text
-     createSwDoc("tdf56408-ltr.fodt");
-     auto pXmlDoc = parseLayoutDump();
-@@ -1532,6 +1533,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408LTR)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408RTL)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // Verify that line breaking a first bidi portion correctly underflows in RTL text
-     createSwDoc("tdf56408-rtl.fodt");
-     auto pXmlDoc = parseLayoutDump();
-@@ -1546,6 +1548,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408RTL)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408NoUnderflow)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // The fix for tdf#56408 introduced a change to line breaking between text with
-     // direction changes. This test verifies behavior in the trivial case, when a
-     // break opportunity exists at the direction change boundary.
-@@ -1562,6 +1565,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408NoUnderflow)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf56408AfterFieldCrash)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // Verify there is no crash/assertion for underflow after a number field
-     createSwDoc("tdf56408-after-field.fodt");
- }
-@@ -1619,6 +1623,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf164907_rowHeightAtLeast)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf157829LTR)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // Verify that line breaking inside a bidi portion triggers underflow to previous bidi portions
-     createSwDoc("tdf157829-ltr.fodt");
-     auto pXmlDoc = parseLayoutDump();
-@@ -1633,6 +1638,7 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf157829LTR)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter4, TestTdf157829RTL)
- {
-+    return; // fails due to missing font: Noto Sans Hebrew
-     // Verify that line breaking inside a bidi portion triggers underflow to previous bidi portions
-     createSwDoc("tdf157829-rtl.fodt");
-     auto pXmlDoc = parseLayoutDump();
--- a/sw/qa/extras/layout/layout5.cxx
-+++ b/sw/qa/extras/layout/layout5.cxx
-@@ -1544,6 +1544,8 @@ CPPUNIT_TEST_FIXTURE(SwLayoutWriter5, testTdf144450)
- 
- CPPUNIT_TEST_FIXTURE(SwLayoutWriter5, testTdf166152)
- {
-+    return; // fails due to missing font: Noto Sans
-+
-     createSwDoc("tdf166152.fodt");
- 
-     auto* pWrtShell = getSwDocShell()->GetWrtShell();
--- a/unoxml/qa/unit/rdftest.cxx
-+++ b/unoxml/qa/unit/rdftest.cxx
-@@ -962,6 +962,7 @@ CPPUNIT_TEST_FIXTURE(RDFStreamTest, testTdf123293)
-
- CPPUNIT_TEST_FIXTURE(RDFStreamTest, testDocumentMetadataAccess)
- {
-+    return; // fails on aarch64
-     loadFromURL(u"private:factory/swriter"_ustr);
-
-     uno::Reference<rdf::XDocumentMetadataAccess> xDocumentMetadataAccess(mxComponent,
--- a/vcl/qa/cppunit/pdfexport/pdfexport2.cxx
-+++ b/vcl/qa/cppunit/pdfexport/pdfexport2.cxx
-@@ -6077,6 +6077,7 @@ CPPUNIT_TEST_FIXTURE(PdfExportTest2, testTdf162750SmallCapsLigature)
- 
- CPPUNIT_TEST_FIXTURE(PdfExportTest2, testTdf164106SplitReorderedClusters)
- {
-+    return; // fails due to missing font: Noto Sans
-     saveAsPDF(u"tdf164106.fodt");
- 
-     auto pPdfDocument = parsePDFExport();
--- i/sc/qa/extras/scsolverobj.cxx
-+++ w/sc/qa/extras/scsolverobj.cxx
-@@ -74,6 +74,7 @@ void ScSolverSettingsObj::testCellRangeAddress(const uno::Any& rExpected, const
- // Creates a model using the XSolverSettings API checks if it is accessible via the API
- void ScSolverSettingsObj::testXSolverSettings()
- {
-+    return;
-     uno::Reference<sheet::XSpreadsheetDocument> xDoc(mxComponent, uno::UNO_QUERY_THROW);
-     uno::Reference<container::XIndexAccess> xIndex(xDoc->getSheets(), uno::UNO_QUERY_THROW);
-     uno::Reference<sheet::XSpreadsheet> xSheet(xIndex->getByIndex(0), uno::UNO_QUERY_THROW);
-diff --git i/vcl/qa/cppunit/pdfexport/pdfexport2.cxx w/vcl/qa/cppunit/pdfexport/pdfexport2.cxx
-index b9c560f422b5..e415b1fcc807 100644
--- i/vcl/qa/cppunit/pdfexport/pdfexport2.cxx
-+++ w/vcl/qa/cppunit/pdfexport/pdfexport2.cxx
-@@ -6320,6 +6320,7 @@ CPPUNIT_TEST_FIXTURE(PdfExportTest2, testTextBoxRuby)
-
- CPPUNIT_TEST_FIXTURE(PdfExportTest2, testTdf166044ContFootnoteOnlyOnePgNum)
- {
-+    return; // fails due to missing font: Noto Sans Lao
-     saveAsPDF(u"tdf166044-cont-footnote-one-pgnum.fodt");
-
-     auto pPdfDocument = parsePDFExport();
-diff --git a/svgio/qa/cppunit/data/tdf160386.svg b/svgio/qa/cppunit/data/tdf160386.svg
-index 1644b0d15514..cf429508bcd4 100644
--- a/svgio/qa/cppunit/data/tdf160386.svg
-+++ b/svgio/qa/cppunit/data/tdf160386.svg
-@@ -8,7 +8,6 @@
-     <text systemLanguage="en">Hello!</text>
-     <text systemLanguage="es">Hola!</text>
-     <text systemLanguage="fr">Bonjour!</text>
-    <text systemLanguage="ja">こんにちは</text>
-     <text systemLanguage="ru">Привет!</text>
-     <text>☺</text>
-   </switch>
-diff --git i/sc/qa/unit/subsequent_export_test2.cxx w/sc/qa/unit/subsequent_export_test2.cxx
-index 956838656b28..70b38e4d59ba 100644
--- i/sc/qa/unit/subsequent_export_test2.cxx
-+++ w/sc/qa/unit/subsequent_export_test2.cxx
-@@ -100,6 +100,7 @@ CPPUNIT_TEST_FIXTURE(ScExportTest2, testRefStringXLSX)
- 
- CPPUNIT_TEST_FIXTURE(ScExportTest2, testRefStringConfigXLSX)
- {
-+    return;
-     // this doc is configured with CalcA1 ref syntax
-     createScDoc("xlsx/empty.xlsx");
- 
-@@ -137,6 +138,7 @@ CPPUNIT_TEST_FIXTURE(ScExportTest2, testRefStringConfigXLSX)
- 
- CPPUNIT_TEST_FIXTURE(ScExportTest2, testRefStringUnspecified)
- {
-+    return;
-     createScDoc();
- 
-     ScDocument* pDoc = getScDoc();
--- a/pkgs/applications/office/libreoffice/src-fresh/help.nix
+++ b/pkgs/applications/office/libreoffice/src-fresh/help.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "0s15v57xn936mwxrksfc2xy5pfr7jphfiw8ihhij3sxjq4qr49ys";
-  url = "https://download.documentfoundation.org/libreoffice/src/26.2.1/libreoffice-help-26.2.1.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-fresh/main.nix
+++ b/pkgs/applications/office/libreoffice/src-fresh/main.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "0a7wx3slnnbvql59dihby5gb57xbdxm29qiw1dqkfapvfdgj5khq";
-  url = "https://download.documentfoundation.org/libreoffice/src/26.2.1/libreoffice-26.2.1.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-fresh/translations.nix
+++ b/pkgs/applications/office/libreoffice/src-fresh/translations.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "0hwim8sz9kf802svnv1py4fw4pv9n0ilk5k1r2801r843vlxsy2c";
-  url = "https://download.documentfoundation.org/libreoffice/src/26.2.1/libreoffice-translations-26.2.1.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-fresh/version.nix
+++ b/pkgs/applications/office/libreoffice/src-fresh/version.nix
@@ -1 +0,0 @@
-"26.2.1.2"
--- a/pkgs/applications/office/libreoffice/src-stable/deps.nix
+++ b/pkgs/applications/office/libreoffice/src-stable/deps.nix
@@ -1,10 +1,10 @@
 [
  {
-    name = "libabw-0.1.3.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libabw-0.1.3.tar.xz";
-    sha256 = "e763a9dc21c3d2667402d66e202e3f8ef4db51b34b79ef41f56cacb86dcd6eed";
+    name = "libabw-0.1.4.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libabw-0.1.4.tar.xz";
+    sha256 = "fa2685a3440da6e03a66a778480d93cb95f6064e4541e58e37397680760fd6a0";
    md5 = "";
-    md5name = "e763a9dc21c3d2667402d66e202e3f8ef4db51b34b79ef41f56cacb86dcd6eed-libabw-0.1.3.tar.xz";
+    md5name = "fa2685a3440da6e03a66a778480d93cb95f6064e4541e58e37397680760fd6a0-libabw-0.1.4.tar.xz";
  }
  {
    name = "phc-winner-argon2-20190702.tar.gz";
@@ -56,11 +56,11 @@
    md5name = "445ed8208a6e4823de1226a74ca319d3600e83f6369f99b14265006599c32ccb-cairo-1.18.4.tar.xz";
  }
  {
-    name = "libcdr-0.1.8.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libcdr-0.1.8.tar.xz";
-    sha256 = "ced677c8300b29c91d3004bb1dddf0b99761bf5544991c26c2ee8f427e87193c";
+    name = "libcdr-0.1.9.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libcdr-0.1.9.tar.xz";
+    sha256 = "f7bb6abdd7f226820f288a93dd8d07759833c0250d9e202af90f9b312c4665a3";
    md5 = "";
-    md5name = "ced677c8300b29c91d3004bb1dddf0b99761bf5544991c26c2ee8f427e87193c-libcdr-0.1.8.tar.xz";
+    md5name = "f7bb6abdd7f226820f288a93dd8d07759833c0250d9e202af90f9b312c4665a3-libcdr-0.1.9.tar.xz";
  }
  {
    name = "clucene-core-2.3.3.4.tar.gz";
@@ -84,11 +84,11 @@
    md5name = "e64b5fff88e04959154adbd5fb83331d91f2e04ac06454671cdfcbdff172b158-fast_float-8.2.2.tar.gz";
  }
  {
-    name = "libcmis-0.6.2.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libcmis-0.6.2.tar.xz";
-    sha256 = "1b5c2d7258ff93eb5f9958ff0e4dfd7332dc75a071bb717dde2217a26602a644";
+    name = "libcmis-0.6.3.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libcmis-0.6.3.tar.xz";
+    sha256 = "5adb3781f374adf491103b2cb2dc290085150c9b7d097baf56d8ac35df84e792";
    md5 = "";
-    md5name = "1b5c2d7258ff93eb5f9958ff0e4dfd7332dc75a071bb717dde2217a26602a644-libcmis-0.6.2.tar.xz";
+    md5name = "5adb3781f374adf491103b2cb2dc290085150c9b7d097baf56d8ac35df84e792-libcmis-0.6.3.tar.xz";
  }
  {
    name = "CoinMP-1.8.4.tgz";
@@ -105,18 +105,18 @@
    md5name = "89c5c6665337f56fd2db36bc3805a5619709d51fb136e51937072f63fcc717a7-cppunit-1.15.1.tar.gz";
  }
  {
-    name = "curl-8.14.1.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/curl-8.14.1.tar.xz";
-    sha256 = "f4619a1e2474c4bbfedc88a7c2191209c8334b48fa1f4e53fd584cc12e9120dd";
+    name = "curl-8.21.0.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/curl-8.21.0.tar.xz";
+    sha256 = "aa1b66a70eace83dc624508745646c08ae561de512ab403adffb93ac87fc72e6";
    md5 = "";
-    md5name = "f4619a1e2474c4bbfedc88a7c2191209c8334b48fa1f4e53fd584cc12e9120dd-curl-8.14.1.tar.xz";
+    md5name = "aa1b66a70eace83dc624508745646c08ae561de512ab403adffb93ac87fc72e6-curl-8.21.0.tar.xz";
  }
  {
-    name = "libe-book-0.1.3.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libe-book-0.1.3.tar.xz";
-    sha256 = "7e8d8ff34f27831aca3bc6f9cc532c2f90d2057c778963b884ff3d1e34dfe1f9";
+    name = "libe-book-0.1.4.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libe-book-0.1.4.tar.xz";
+    sha256 = "104b7e791b6632745898e9b6a0037b7540235771a4d8c3bde2c764466ad912f1";
    md5 = "";
-    md5name = "7e8d8ff34f27831aca3bc6f9cc532c2f90d2057c778963b884ff3d1e34dfe1f9-libe-book-0.1.3.tar.xz";
+    md5name = "104b7e791b6632745898e9b6a0037b7540235771a4d8c3bde2c764466ad912f1-libe-book-0.1.4.tar.xz";
  }
  {
    name = "libepoxy-1.5.10.tar.gz";
@@ -147,11 +147,11 @@
    md5name = "032b71cb597edd92a0b270b916188281bc35be55296b263f6817b29adbcb1709-libetonyek-0.1.13.tar.xz";
  }
  {
-    name = "expat-2.7.4.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/expat-2.7.4.tar.xz";
-    sha256 = "9e9cabb457c1e09de91db2706d8365645792638eb3be1f94dbb2149301086ac0";
+    name = "expat-2.8.2.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/expat-2.8.2.tar.xz";
+    sha256 = "3ad89b8588e6644bd4e49981480d48b21289eebbcd4f0a1a4afb1c29f99b6ab4";
    md5 = "";
-    md5name = "9e9cabb457c1e09de91db2706d8365645792638eb3be1f94dbb2149301086ac0-expat-2.7.4.tar.xz";
+    md5name = "3ad89b8588e6644bd4e49981480d48b21289eebbcd4f0a1a4afb1c29f99b6ab4-expat-2.8.2.tar.xz";
  }
  {
    name = "Firebird-3.0.7.33374-0.tar.bz2";
@@ -161,11 +161,11 @@
    md5name = "acb85cedafa10ce106b1823fb236b1b3e5d942a5741e8f8435cc8ccfec0afe76-Firebird-3.0.7.33374-0.tar.bz2";
  }
  {
-    name = "fontconfig-2.17.1.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/fontconfig-2.17.1.tar.xz";
-    sha256 = "9f5cae93f4fffc1fbc05ae99cdfc708cd60dfd6612ffc0512827025c026fa541";
+    name = "fontconfig-2.18.0.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/fontconfig-2.18.0.tar.xz";
+    sha256 = "e7064a4725431ddba06ff8b971ec5a4b422e23b0169ce215747beedcb30e9073";
    md5 = "";
-    md5name = "9f5cae93f4fffc1fbc05ae99cdfc708cd60dfd6612ffc0512827025c026fa541-fontconfig-2.17.1.tar.xz";
+    md5name = "e7064a4725431ddba06ff8b971ec5a4b422e23b0169ce215747beedcb30e9073-fontconfig-2.18.0.tar.xz";
  }
  {
    name = "crosextrafonts-20130214.tar.gz";
@@ -406,18 +406,18 @@
    md5name = "4302809cf4b95b481bec53de87484d919b391c90a518d065f6c775fd435a5393-Lunasima-2.009.zip";
  }
  {
-    name = "libfreehand-0.1.2.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libfreehand-0.1.2.tar.xz";
-    sha256 = "0e422d1564a6dbf22a9af598535425271e583514c0f7ba7d9091676420de34ac";
+    name = "libfreehand-0.1.3.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libfreehand-0.1.3.tar.xz";
+    sha256 = "a431d78767e5aa27ade7c6d1b7a11a9f1848cb4b9260bf0a6a44689553ecccfe";
    md5 = "";
-    md5name = "0e422d1564a6dbf22a9af598535425271e583514c0f7ba7d9091676420de34ac-libfreehand-0.1.2.tar.xz";
+    md5name = "a431d78767e5aa27ade7c6d1b7a11a9f1848cb4b9260bf0a6a44689553ecccfe-libfreehand-0.1.3.tar.xz";
  }
  {
-    name = "freetype-2.14.1.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/freetype-2.14.1.tar.xz";
-    sha256 = "32427e8c471ac095853212a37aef816c60b42052d4d9e48230bab3bdf2936ccc";
+    name = "freetype-2.14.3.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/freetype-2.14.3.tar.xz";
+    sha256 = "36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f";
    md5 = "";
-    md5name = "32427e8c471ac095853212a37aef816c60b42052d4d9e48230bab3bdf2936ccc-freetype-2.14.1.tar.xz";
+    md5name = "36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f-freetype-2.14.3.tar.xz";
  }
  {
    name = "frozen-1.2.0.tar.gz";
@@ -441,11 +441,11 @@
    md5name = "bfc17f5bd1b178c8649fdd918956d277080f33df006a2dc40acdecdce68c50dd-gpgme-1.24.3.tar.bz2";
  }
  {
-    name = "graphite2-minimal-1.3.14.tgz";
-    url = "https://dev-www.libreoffice.org/src/graphite2-minimal-1.3.14.tgz";
-    sha256 = "b8e892d8627c41888ff121e921455b9e2d26836978f2359173d19825da62b8fc";
+    name = "graphite2-minimal-1.3.15.tgz";
+    url = "https://dev-www.libreoffice.org/src/graphite2-minimal-1.3.15.tgz";
+    sha256 = "10cfc69a6f859ce875b9708d170b8222eba76cdb89b6dbb4ee1e375bc7242409";
    md5 = "";
-    md5name = "b8e892d8627c41888ff121e921455b9e2d26836978f2359173d19825da62b8fc-graphite2-minimal-1.3.14.tgz";
+    md5name = "10cfc69a6f859ce875b9708d170b8222eba76cdb89b6dbb4ee1e375bc7242409-graphite2-minimal-1.3.15.tgz";
  }
  {
    name = "harfbuzz-12.3.2.tar.xz";
@@ -462,18 +462,18 @@
    md5name = "17410483b5b5f267aa18b7e00b65e6e0-hsqldb_1_8_0.zip";
  }
  {
-    name = "hunspell-1.7.2.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/hunspell-1.7.2.tar.gz";
-    sha256 = "11ddfa39afe28c28539fe65fc4f1592d410c1e9b6dd7d8a91ca25d85e9ec65b8";
+    name = "hunspell-1.7.3.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/hunspell-1.7.3.tar.gz";
+    sha256 = "433274dac0619cb00c2e18b43a3dd3a9d50da5b5613fa9b5c21781e35dd76bc1";
    md5 = "";
-    md5name = "11ddfa39afe28c28539fe65fc4f1592d410c1e9b6dd7d8a91ca25d85e9ec65b8-hunspell-1.7.2.tar.gz";
+    md5name = "433274dac0619cb00c2e18b43a3dd3a9d50da5b5613fa9b5c21781e35dd76bc1-hunspell-1.7.3.tar.gz";
  }
  {
-    name = "hyphen-2.8.8.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/5ade6ae2a99bc1e9e57031ca88d36dad-hyphen-2.8.8.tar.gz";
-    sha256 = "304636d4eccd81a14b6914d07b84c79ebb815288c76fe027b9ebff6ff24d5705";
-    md5 = "5ade6ae2a99bc1e9e57031ca88d36dad";
-    md5name = "5ade6ae2a99bc1e9e57031ca88d36dad-hyphen-2.8.8.tar.gz";
+    name = "hyphen-2.8.9.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/442b985e604f8143a5a0e7bacd6b2e40-hyphen-2.8.9.tar.gz";
+    sha256 = "783743daf477de8c4d16e3c74b4d2827377017718d8e17e2d9440210246f6abe";
+    md5 = "442b985e604f8143a5a0e7bacd6b2e40";
+    md5name = "442b985e604f8143a5a0e7bacd6b2e40-hyphen-2.8.9.tar.gz";
  }
  {
    name = "IAccessible2-1.3+git20231013.3d8c7f0.tar.gz";
@@ -483,18 +483,18 @@
    md5name = "0e279003f5199f80031c6dcd08f79d6f65a0505139160e7df0d09b226bff4023-IAccessible2-1.3+git20231013.3d8c7f0.tar.gz";
  }
  {
-    name = "icu4c-78.2-sources.tgz";
-    url = "https://dev-www.libreoffice.org/src/icu4c-78.2-sources.tgz";
-    sha256 = "3e99687b5c435d4b209630e2d2ebb79906c984685e78635078b672e03c89df35";
+    name = "icu4c-78.3-sources.tgz";
+    url = "https://dev-www.libreoffice.org/src/icu4c-78.3-sources.tgz";
+    sha256 = "3a2e7a47604ba702f345878308e6fefeca612ee895cf4a5f222e7955fabfe0c0";
    md5 = "";
-    md5name = "3e99687b5c435d4b209630e2d2ebb79906c984685e78635078b672e03c89df35-icu4c-78.2-sources.tgz";
+    md5name = "3a2e7a47604ba702f345878308e6fefeca612ee895cf4a5f222e7955fabfe0c0-icu4c-78.3-sources.tgz";
  }
  {
-    name = "icu4c-78.2-data.zip";
-    url = "https://dev-www.libreoffice.org/src/icu4c-78.2-data.zip";
-    sha256 = "582968cf174c9498b2046b4f4e7f786def5f18222bd8d98432d7a29399c38c70";
+    name = "icu4c-78.3-data.zip";
+    url = "https://dev-www.libreoffice.org/src/icu4c-78.3-data.zip";
+    sha256 = "9d8b3899096aeb83e4e21ef8a40fec9e03b28db18c48452efac882ce25a91e27";
    md5 = "";
-    md5name = "582968cf174c9498b2046b4f4e7f786def5f18222bd8d98432d7a29399c38c70-icu4c-78.2-data.zip";
+    md5name = "9d8b3899096aeb83e4e21ef8a40fec9e03b28db18c48452efac882ce25a91e27-icu4c-78.3-data.zip";
  }
  {
    name = "Java-WebSocket-1.6.0.tar.gz";
@@ -581,25 +581,25 @@
    md5name = "39bb3fcea1514f1369fcfc87542390fd-sacjava-1.3.zip";
  }
  {
-    name = "libjpeg-turbo-3.1.3.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/libjpeg-turbo-3.1.3.tar.gz";
-    sha256 = "3a13a5ba767dc8264bc40b185e41368a80d5d5f945944d1dbaa4b2fb0099f4e5";
+    name = "libjpeg-turbo-3.1.4.1.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/libjpeg-turbo-3.1.4.1.tar.gz";
+    sha256 = "ecae8008e2cc9ade2f2c1bb9d5e6d4fb73e7c433866a056bd82980741571a022";
    md5 = "";
-    md5name = "3a13a5ba767dc8264bc40b185e41368a80d5d5f945944d1dbaa4b2fb0099f4e5-libjpeg-turbo-3.1.3.tar.gz";
+    md5name = "ecae8008e2cc9ade2f2c1bb9d5e6d4fb73e7c433866a056bd82980741571a022-libjpeg-turbo-3.1.4.1.tar.gz";
  }
  {
-    name = "language-subtag-registry-2025-08-25.tar.bz2";
-    url = "https://dev-www.libreoffice.org/src/language-subtag-registry-2025-08-25.tar.bz2";
-    sha256 = "9b008d21f97bbf37c5aefd07805ff5500524bccbe8c39d623e184b1ed425ff39";
+    name = "language-subtag-registry-2026-06-14.tar.bz2";
+    url = "https://dev-www.libreoffice.org/src/language-subtag-registry-2026-06-14.tar.bz2";
+    sha256 = "e74af13fd11fbcb24a5910d0f50e45d8505d86267bde2bb2d1d45aed966bc3bb";
    md5 = "";
-    md5name = "9b008d21f97bbf37c5aefd07805ff5500524bccbe8c39d623e184b1ed425ff39-language-subtag-registry-2025-08-25.tar.bz2";
+    md5name = "e74af13fd11fbcb24a5910d0f50e45d8505d86267bde2bb2d1d45aed966bc3bb-language-subtag-registry-2026-06-14.tar.bz2";
  }
  {
-    name = "lcms2-2.18.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/lcms2-2.18.tar.gz";
-    sha256 = "ee67be3566f459362c1ee094fde2c159d33fa0390aa4ed5f5af676f9e5004347";
+    name = "lcms2-2.19.1.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/lcms2-2.19.1.tar.gz";
+    sha256 = "bfc54f7bab59fbc921012014a8032e4cba4abd46db47d46b76416a8c0b2815c8";
    md5 = "";
-    md5name = "ee67be3566f459362c1ee094fde2c159d33fa0390aa4ed5f5af676f9e5004347-lcms2-2.18.tar.gz";
+    md5name = "bfc54f7bab59fbc921012014a8032e4cba4abd46db47d46b76416a8c0b2815c8-lcms2-2.19.1.tar.gz";
  }
  {
    name = "libassuan-3.0.2.tar.bz2";
@@ -623,11 +623,11 @@
    md5name = "cf5091fa8e7dcdbe667335eb90a2cfdd0a3fe8f8c7c8d1ece44d9d055736a06a-libeot-0.01.tar.bz2";
  }
  {
-    name = "libexttextcat-3.4.7.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libexttextcat-3.4.7.tar.xz";
-    sha256 = "df0a59d413a5b202573d8d4f5159e33a8538da4f8e8e60979facc64d6290cebd";
+    name = "libexttextcat-3.4.8.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libexttextcat-3.4.8.tar.xz";
+    sha256 = "93eb89fd4fc8f565806354e100e778b3ac9a24e5fc04c24e6a83fb1e9b6c9d59";
    md5 = "";
-    md5name = "df0a59d413a5b202573d8d4f5159e33a8538da4f8e8e60979facc64d6290cebd-libexttextcat-3.4.7.tar.xz";
+    md5name = "93eb89fd4fc8f565806354e100e778b3ac9a24e5fc04c24e6a83fb1e9b6c9d59-libexttextcat-3.4.8.tar.xz";
  }
  {
    name = "libffi-3.5.2.tar.gz";
@@ -637,11 +637,11 @@
    md5name = "f3a3082a23b37c293a4fcd1053147b371f2ff91fa7ea1b2a52e335676bac82dc-libffi-3.5.2.tar.gz";
  }
  {
-    name = "libgpg-error-1.59.tar.bz2";
-    url = "https://dev-www.libreoffice.org/src/libgpg-error-1.59.tar.bz2";
-    sha256 = "a19bc5087fd97026d93cb4b45d51638d1a25202a5e1fbc3905799f424cfa6134";
+    name = "libgpg-error-1.61.tar.bz2";
+    url = "https://dev-www.libreoffice.org/src/libgpg-error-1.61.tar.bz2";
+    sha256 = "7a85413f2bc354f4f8aa832b718af122e48965e9e0eb9012ee659c13c6385c93";
    md5 = "";
-    md5name = "a19bc5087fd97026d93cb4b45d51638d1a25202a5e1fbc3905799f424cfa6134-libgpg-error-1.59.tar.bz2";
+    md5name = "7a85413f2bc354f4f8aa832b718af122e48965e9e0eb9012ee659c13c6385c93-libgpg-error-1.61.tar.bz2";
  }
  {
    name = "liblangtag-0.6.8.tar.bz2";
@@ -672,11 +672,11 @@
    md5name = "e4ab7009bf0629fd11982d4c2aa83964cf244cffba7347ecd39019a9e38c4564-libwebp-1.6.0.tar.gz";
  }
  {
-    name = "xmlsec1-1.3.9.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/xmlsec1-1.3.9.tar.gz";
-    sha256 = "a631c8cd7a6b86e6adb9f5b935d45a9cf9768b3cb090d461e8eb9d043cf9b62f";
+    name = "xmlsec1-1.3.12.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/xmlsec1-1.3.12.tar.gz";
+    sha256 = "24045199af12d93fe5fdbbbf7e386e823e4842071e9432e2b90ac108b889a923";
    md5 = "";
-    md5name = "a631c8cd7a6b86e6adb9f5b935d45a9cf9768b3cb090d461e8eb9d043cf9b62f-xmlsec1-1.3.9.tar.gz";
+    md5name = "24045199af12d93fe5fdbbbf7e386e823e4842071e9432e2b90ac108b889a923-xmlsec1-1.3.12.tar.gz";
  }
  {
    name = "libxml2-2.14.6.tar.xz";
@@ -700,25 +700,25 @@
    md5name = "26b3e95ddf3d9c077c480ea45874b3b8-lp_solve_5.5.tar.gz";
  }
  {
-    name = "lxml-6.0.2.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/lxml-6.0.2.tar.gz";
-    sha256 = "cd79f3367bd74b317dda655dc8fcfa304d9eb6e4fb06b7168c5cf27f96e0cd62";
+    name = "lxml-6.1.1.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/lxml-6.1.1.tar.gz";
+    sha256 = "ba96ae44888e0185281e937633a743ea90d5a196c6000f82565ebb0580012d40";
    md5 = "";
-    md5name = "cd79f3367bd74b317dda655dc8fcfa304d9eb6e4fb06b7168c5cf27f96e0cd62-lxml-6.0.2.tar.gz";
+    md5name = "ba96ae44888e0185281e937633a743ea90d5a196c6000f82565ebb0580012d40-lxml-6.1.1.tar.gz";
  }
  {
-    name = "xz-5.8.2.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/xz-5.8.2.tar.gz";
-    sha256 = "ce09c50a5962786b83e5da389c90dd2c15ecd0980a258dd01f70f9e7ce58a8f1";
+    name = "xz-5.8.3.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/xz-5.8.3.tar.gz";
+    sha256 = "3d3a1b973af218114f4f889bbaa2f4c037deaae0c8e815eec381c3d546b974a0";
    md5 = "";
-    md5name = "ce09c50a5962786b83e5da389c90dd2c15ecd0980a258dd01f70f9e7ce58a8f1-xz-5.8.2.tar.gz";
+    md5name = "3d3a1b973af218114f4f889bbaa2f4c037deaae0c8e815eec381c3d546b974a0-xz-5.8.3.tar.gz";
  }
  {
-    name = "mariadb-connector-c-3.3.18-src.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/mariadb-connector-c-3.3.18-src.tar.gz";
-    sha256 = "292c0f2e6ce5cb6f1217f3a53c72f792e55fb20393e00924b11943e2f9f6e9d5";
+    name = "mariadb-connector-c-3.3.19-src.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/mariadb-connector-c-3.3.19-src.tar.gz";
+    sha256 = "30dcc69a3a2f40092a8352008fdd757d7403b086d6393e2af0d1aea95b2356ba";
    md5 = "";
-    md5name = "292c0f2e6ce5cb6f1217f3a53c72f792e55fb20393e00924b11943e2f9f6e9d5-mariadb-connector-c-3.3.18-src.tar.gz";
+    md5name = "30dcc69a3a2f40092a8352008fdd757d7403b086d6393e2af0d1aea95b2356ba-mariadb-connector-c-3.3.19-src.tar.gz";
  }
  {
    name = "mdds-3.1.0.tar.xz";
@@ -742,32 +742,32 @@
    md5name = "f118aa910fc0a137cc2dd0122232dbf82153d9a12fb5b0f5bb64896f6a157abf-meson-1.8.3.tar.gz";
  }
  {
-    name = "libmspub-0.1.4.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libmspub-0.1.4.tar.xz";
-    sha256 = "ef36c1a1aabb2ba3b0bedaaafe717bf4480be2ba8de6f3894be5fd3702b013ba";
+    name = "libmspub-0.1.5.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libmspub-0.1.5.tar.xz";
+    sha256 = "3671095f5a10bee8a755052a30576952c5b16d8b0f2ba9f2fb998338c18cb119";
    md5 = "";
-    md5name = "ef36c1a1aabb2ba3b0bedaaafe717bf4480be2ba8de6f3894be5fd3702b013ba-libmspub-0.1.4.tar.xz";
+    md5name = "3671095f5a10bee8a755052a30576952c5b16d8b0f2ba9f2fb998338c18cb119-libmspub-0.1.5.tar.xz";
  }
  {
-    name = "libmwaw-0.3.22.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libmwaw-0.3.22.tar.xz";
-    sha256 = "a1a39ffcea3ff2a7a7aae0c23877ddf4918b554bf82b0de5d7ce8e7f61ea8e32";
+    name = "libmwaw-0.3.23.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libmwaw-0.3.23.tar.xz";
+    sha256 = "ac3590f691a2904eb8c7dc8b757b8a29f125f592449e421459ae8fa928b399eb";
    md5 = "";
-    md5name = "a1a39ffcea3ff2a7a7aae0c23877ddf4918b554bf82b0de5d7ce8e7f61ea8e32-libmwaw-0.3.22.tar.xz";
+    md5name = "ac3590f691a2904eb8c7dc8b757b8a29f125f592449e421459ae8fa928b399eb-libmwaw-0.3.23.tar.xz";
  }
  {
-    name = "mythes-1.2.5.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/mythes-1.2.5.tar.xz";
-    sha256 = "19279f70707bbe5ffa619f2dc319f888cec0c4a8d339dc0a21330517bd6f521d";
+    name = "mythes-1.2.6.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/mythes-1.2.6.tar.xz";
+    sha256 = "97bd2ba5738aebdba1bc31f30f1be42f1404386c94105ad5990d839a1311c8a5";
    md5 = "";
-    md5name = "19279f70707bbe5ffa619f2dc319f888cec0c4a8d339dc0a21330517bd6f521d-mythes-1.2.5.tar.xz";
+    md5name = "97bd2ba5738aebdba1bc31f30f1be42f1404386c94105ad5990d839a1311c8a5-mythes-1.2.6.tar.xz";
  }
  {
-    name = "nss-3.119.1-with-nspr-4.38.2.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/nss-3.119.1-with-nspr-4.38.2.tar.gz";
-    sha256 = "1e86aacdce66c3bdd38bb011e617a3c93013ed6f802102365a589d6f686efe4b";
+    name = "nss-3.124-with-nspr-4.39.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/nss-3.124-with-nspr-4.39.tar.gz";
+    sha256 = "362de77e31a16e64be500a22980448c7f08e98dd8ab85c29d0c5e41d4df68d1c";
    md5 = "";
-    md5name = "1e86aacdce66c3bdd38bb011e617a3c93013ed6f802102365a589d6f686efe4b-nss-3.119.1-with-nspr-4.38.2.tar.gz";
+    md5name = "362de77e31a16e64be500a22980448c7f08e98dd8ab85c29d0c5e41d4df68d1c-nss-3.124-with-nspr-4.39.tar.gz";
  }
  {
    name = "libodfgen-0.1.8.tar.xz";
@@ -798,18 +798,18 @@
    md5name = "37206cf981e8409d048b59ac5839621ea107ff49af72beb9d7769a2f41da8d90-onlineupdate-c003be8b9727672e7d30972983b375f4c200233f-2.tar.xz";
  }
  {
-    name = "openldap-2.6.12.tgz";
-    url = "https://dev-www.libreoffice.org/src/openldap-2.6.12.tgz";
-    sha256 = "1716ad779e85d743694c3e3b05277fb71b6a5eadca43c7a958aa62683b22208e";
+    name = "openldap-2.6.13.tgz";
+    url = "https://dev-www.libreoffice.org/src/openldap-2.6.13.tgz";
+    sha256 = "d693b49517a42efb85a1a364a310aed16a53d428d1b46c0d31ef3fba78fcb656";
    md5 = "";
-    md5name = "1716ad779e85d743694c3e3b05277fb71b6a5eadca43c7a958aa62683b22208e-openldap-2.6.12.tgz";
+    md5name = "d693b49517a42efb85a1a364a310aed16a53d428d1b46c0d31ef3fba78fcb656-openldap-2.6.13.tgz";
  }
  {
-    name = "openssl-3.5.5.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/openssl-3.5.5.tar.gz";
-    sha256 = "b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89";
+    name = "openssl-3.5.7.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/openssl-3.5.7.tar.gz";
+    sha256 = "a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8";
    md5 = "";
-    md5name = "b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89-openssl-3.5.5.tar.gz";
+    md5name = "a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8-openssl-3.5.7.tar.gz";
  }
  {
    name = "liborcus-0.21.0.tar.xz";
@@ -854,25 +854,25 @@
    md5name = "a098c33924754ad43f981b740f6d576c70f9ed1006e12221b1845431ebce1239-pixman-0.46.4.tar.xz";
  }
  {
-    name = "libpng-1.6.55.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libpng-1.6.55.tar.xz";
-    sha256 = "d925722864837ad5ae2a82070d4b2e0603dc72af44bd457c3962298258b8e82d";
+    name = "libpng-1.6.58.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libpng-1.6.58.tar.xz";
+    sha256 = "28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775";
    md5 = "";
-    md5name = "d925722864837ad5ae2a82070d4b2e0603dc72af44bd457c3962298258b8e82d-libpng-1.6.55.tar.xz";
+    md5name = "28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775-libpng-1.6.58.tar.xz";
  }
  {
-    name = "tiff-4.7.1.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/tiff-4.7.1.tar.xz";
-    sha256 = "b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba";
+    name = "tiff-4.7.2.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/tiff-4.7.2.tar.xz";
+    sha256 = "4996f0c4f93094719b1ca5c6279b20e588773ba8a247533e486416fb662ddb88";
    md5 = "";
-    md5name = "b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba-tiff-4.7.1.tar.xz";
+    md5name = "4996f0c4f93094719b1ca5c6279b20e588773ba8a247533e486416fb662ddb88-tiff-4.7.2.tar.xz";
  }
  {
-    name = "poppler-26.01.0.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/poppler-26.01.0.tar.xz";
-    sha256 = "1cb944a4b88847f5fb6551683bc799db59f04990f5d8be07aba2acbf38601089";
+    name = "poppler-26.06.0.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/poppler-26.06.0.tar.xz";
+    sha256 = "4cb4e5a3dc8cb5eec751c8a23c8ba19f61f96dedc0cd07d2aee6b0c8e2cf6ba4";
    md5 = "";
-    md5name = "1cb944a4b88847f5fb6551683bc799db59f04990f5d8be07aba2acbf38601089-poppler-26.01.0.tar.xz";
+    md5name = "4cb4e5a3dc8cb5eec751c8a23c8ba19f61f96dedc0cd07d2aee6b0c8e2cf6ba4-poppler-26.06.0.tar.xz";
  }
  {
    name = "poppler-data-0.4.12.tar.gz";
@@ -882,18 +882,18 @@
    md5name = "c835b640a40ce357e1b83666aabd95edffa24ddddd49b8daff63adb851cdab74-poppler-data-0.4.12.tar.gz";
  }
  {
-    name = "postgresql-15.15.tar.bz2";
-    url = "https://dev-www.libreoffice.org/src/postgresql-15.15.tar.bz2";
-    sha256 = "5753aaeb8b09cbf61016f78aa69bf5cbdf01b43263f010cbf168c82896213aaa";
+    name = "postgresql-15.18.tar.bz2";
+    url = "https://dev-www.libreoffice.org/src/postgresql-15.18.tar.bz2";
+    sha256 = "11df0df97fe3ea4ba9a791faaf39cee1d2fe571e78885b5b55d8517d27c323b4";
    md5 = "";
-    md5name = "5753aaeb8b09cbf61016f78aa69bf5cbdf01b43263f010cbf168c82896213aaa-postgresql-15.15.tar.bz2";
+    md5name = "11df0df97fe3ea4ba9a791faaf39cee1d2fe571e78885b5b55d8517d27c323b4-postgresql-15.18.tar.bz2";
  }
  {
-    name = "Python-3.12.12.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/Python-3.12.12.tar.xz";
-    sha256 = "fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4";
+    name = "Python-3.12.13.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/Python-3.12.13.tar.xz";
+    sha256 = "c08bc65a81971c1dd5783182826503369466c7e67374d1646519adf05207b684";
    md5 = "";
-    md5name = "fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4-Python-3.12.12.tar.xz";
+    md5name = "c08bc65a81971c1dd5783182826503369466c7e67374d1646519adf05207b684-Python-3.12.13.tar.xz";
  }
  {
    name = "python.3.12.8.nupkg";
@@ -903,11 +903,11 @@
    md5name = "406856be971d957e0bee7a5cefe20a5ec78d70a495e9e33cd0e53d31faec049d-python.3.12.8.nupkg";
  }
  {
-    name = "libqxp-0.0.2.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libqxp-0.0.2.tar.xz";
-    sha256 = "e137b6b110120a52c98edd02ebdc4095ee08d0d5295a94316a981750095a945c";
+    name = "libqxp-0.0.3.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libqxp-0.0.3.tar.xz";
+    sha256 = "4687a9cc96c32d7406e5072c4da150fca696c563e5cde62b024f82fa53d32332";
    md5 = "";
-    md5name = "e137b6b110120a52c98edd02ebdc4095ee08d0d5295a94316a981750095a945c-libqxp-0.0.2.tar.xz";
+    md5name = "4687a9cc96c32d7406e5072c4da150fca696c563e5cde62b024f82fa53d32332-libqxp-0.0.3.tar.xz";
  }
  {
    name = "raptor2-2.0.16.tar.gz";
@@ -931,18 +931,18 @@
    md5name = "e5be03eda13ef68aabab6e42aa67715e-redland-1.0.17.tar.gz";
  }
  {
-    name = "librevenge-0.0.5.tar.bz2";
-    url = "https://dev-www.libreoffice.org/src/librevenge-0.0.5.tar.bz2";
-    sha256 = "5892ca6796f7a2a93d580832e907e849b19d980b40d326a283b18877ab6de0c5";
+    name = "librevenge-0.0.6.tar.bz2";
+    url = "https://dev-www.libreoffice.org/src/librevenge-0.0.6.tar.bz2";
+    sha256 = "52a65e904d255dbdd97a8b7bb28d6574e14f999eb01416aff004502406d0904d";
    md5 = "";
-    md5name = "5892ca6796f7a2a93d580832e907e849b19d980b40d326a283b18877ab6de0c5-librevenge-0.0.5.tar.bz2";
+    md5name = "52a65e904d255dbdd97a8b7bb28d6574e14f999eb01416aff004502406d0904d-librevenge-0.0.6.tar.bz2";
  }
  {
-    name = "md4c-release-0.5.2.tar.gz";
-    url = "https://dev-www.libreoffice.org/src/md4c-release-0.5.2.tar.gz";
-    sha256 = "55d0111d48fb11883aaee91465e642b8b640775a4d6993c2d0e7a8092758ef21";
+    name = "md4c-release-0.5.3.tar.gz";
+    url = "https://dev-www.libreoffice.org/src/md4c-release-0.5.3.tar.gz";
+    sha256 = "353c346f376b87c954a13f3415ede2d51264cc61dc5abcd38ff1d2aa0d059b9e";
    md5 = "";
-    md5name = "55d0111d48fb11883aaee91465e642b8b640775a4d6993c2d0e7a8092758ef21-md4c-release-0.5.2.tar.gz";
+    md5name = "353c346f376b87c954a13f3415ede2d51264cc61dc5abcd38ff1d2aa0d059b9e-md4c-release-0.5.3.tar.gz";
  }
  {
    name = "rhino-1.7.15.1.zip";
@@ -959,18 +959,18 @@
    md5name = "45ae58e84fa2d1e261bfc980e1c5b7bbfaf83887e3813795bd343d3786f4d0bc-skia-m142-f4ed99d2443962782cf5f8b4dd27179f131e7cbe.tar.xz";
  }
  {
-    name = "sqlite-amalgamation-3510200.zip";
-    url = "https://dev-www.libreoffice.org/src/sqlite-amalgamation-3510200.zip";
-    sha256 = "6e2a845a493026bdbad0618b2b5a0cf48584faab47384480ed9f592d912f23ec";
+    name = "sqlite-amalgamation-3530300.zip";
+    url = "https://dev-www.libreoffice.org/src/sqlite-amalgamation-3530300.zip";
+    sha256 = "646421e12aac110282ef8cc68f1a62d4bb15fc7b8f09da0b53e29ee690500431";
    md5 = "";
-    md5name = "6e2a845a493026bdbad0618b2b5a0cf48584faab47384480ed9f592d912f23ec-sqlite-amalgamation-3510200.zip";
+    md5name = "646421e12aac110282ef8cc68f1a62d4bb15fc7b8f09da0b53e29ee690500431-sqlite-amalgamation-3530300.zip";
  }
  {
-    name = "libstaroffice-0.0.7.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libstaroffice-0.0.7.tar.xz";
-    sha256 = "f94fb0ad8216f97127bedef163a45886b43c62deac5e5b0f5e628e234220c8db";
+    name = "libstaroffice-0.0.8.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libstaroffice-0.0.8.tar.xz";
+    sha256 = "bbca92882e96c55bd1527670866d6bc7529ccb12786da55a2398b60a063378da";
    md5 = "";
-    md5name = "f94fb0ad8216f97127bedef163a45886b43c62deac5e5b0f5e628e234220c8db-libstaroffice-0.0.7.tar.xz";
+    md5name = "bbca92882e96c55bd1527670866d6bc7529ccb12786da55a2398b60a063378da-libstaroffice-0.0.8.tar.xz";
  }
  {
    name = "twaindsm_2.4.1.orig.tar.gz";
@@ -980,11 +980,11 @@
    md5name = "82c818be771f242388457aa8c807e4b52aa84dc22b21c6c56184a6b4cbb085e6-twaindsm_2.4.1.orig.tar.gz";
  }
  {
-    name = "libvisio-0.1.10.tar.xz";
-    url = "https://dev-www.libreoffice.org/src/libvisio-0.1.10.tar.xz";
-    sha256 = "9e9eff75112d4d92d92262ad7fc2599c21e26f8fc5ba54900efdc83c0501e472";
+    name = "libvisio-0.1.11.tar.xz";
+    url = "https://dev-www.libreoffice.org/src/libvisio-0.1.11.tar.xz";
+    sha256 = "2a6efd40b6d9dbcb70fba3be53112366882ba97b57151df3698dfa478c8d8dd3";
    md5 = "";
-    md5name = "9e9eff75112d4d92d92262ad7fc2599c21e26f8fc5ba54900efdc83c0501e472-libvisio-0.1.10.tar.xz";
+    md5name = "2a6efd40b6d9dbcb70fba3be53112366882ba97b57151df3698dfa478c8d8dd3-libvisio-0.1.11.tar.xz";
  }
  {
    name = "libwpd-0.10.3.tar.xz";
--- a/pkgs/applications/office/libreoffice/src-stable/help.nix
+++ b/pkgs/applications/office/libreoffice/src-stable/help.nix
@@ -0,0 +1,5 @@
+{ fetchurl, ... }:
+fetchurl {
+  sha256 = "00qphj40xxxkclf8ba5abc5jbhm9qh5ig6ns448y221lnlpf1yvk";
+  url = "https://download.documentfoundation.org/libreoffice/src/26.2.5/libreoffice-help-26.2.5.2.tar.xz";
+}
--- a/pkgs/applications/office/libreoffice/src-stable/main.nix
+++ b/pkgs/applications/office/libreoffice/src-stable/main.nix
@@ -0,0 +1,5 @@
+{ fetchurl, ... }:
+fetchurl {
+  sha256 = "1slzcq7m9kgqpqk7l7rfy2l5qsanfpzwi8gbv2wxk8fi3zp8biwf";
+  url = "https://download.documentfoundation.org/libreoffice/src/26.2.5/libreoffice-26.2.5.2.tar.xz";
+}
--- a/pkgs/applications/office/libreoffice/src-stable/translations.nix
+++ b/pkgs/applications/office/libreoffice/src-stable/translations.nix
@@ -0,0 +1,5 @@
+{ fetchurl, ... }:
+fetchurl {
+  sha256 = "1dvz0sykfj624mzyspg99k7bx9ynz25cpjlp68lj3aqdzvgdpwa4";
+  url = "https://download.documentfoundation.org/libreoffice/src/26.2.5/libreoffice-translations-26.2.5.2.tar.xz";
+}
--- a/pkgs/applications/office/libreoffice/src-stable/version.nix
+++ b/pkgs/applications/office/libreoffice/src-stable/version.nix
@@ -0,0 +1 @@
+"26.2.5.2"
--- a/pkgs/applications/office/libreoffice/src-still/deps.nix
+++ b/pkgs/applications/office/libreoffice/src-still/deps.nix
--- a/pkgs/applications/office/libreoffice/src-still/help.nix
+++ b/pkgs/applications/office/libreoffice/src-still/help.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "1wn5qv1xblv8bff9zf484xi76ycsjswm93p4v09n42j10ai9qhxn";
-  url = "https://download.documentfoundation.org/libreoffice/src/25.8.5/libreoffice-help-25.8.5.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-still/main.nix
+++ b/pkgs/applications/office/libreoffice/src-still/main.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "1bwiqwr98jhjlxphw8q0zlbrfn6ihk0s3izanskjm1lqs27xqqvz";
-  url = "https://download.documentfoundation.org/libreoffice/src/25.8.5/libreoffice-25.8.5.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-still/translations.nix
+++ b/pkgs/applications/office/libreoffice/src-still/translations.nix
@@ -1,5 +0,0 @@
-{ fetchurl, ... }:
-fetchurl {
-  sha256 = "0im4g4gxx4zvv0csdcmzinm0vp8lxpz57dlclhnbxkasnh1y9vji";
-  url = "https://download.documentfoundation.org/libreoffice/src/25.8.5/libreoffice-translations-25.8.5.2.tar.xz";
-}
--- a/pkgs/applications/office/libreoffice/src-still/version.nix
+++ b/pkgs/applications/office/libreoffice/src-still/version.nix
@@ -1 +0,0 @@
-"25.8.5.2"
--- a/pkgs/applications/office/libreoffice/update.sh
+++ b/pkgs/applications/office/libreoffice/update.sh
@@ -9,11 +9,9 @@ echoerr got fname $fname
 shift

 variant="$1"
-# See comment near version_major variable
-if [[ $variant == fresh ]]; then
-    head_tail=head
-elif [[ $variant == still ]]; then
-    head_tail=tail
+# not doing anything but checking correctness right now
+if [[ $variant == stable ]]; then
+    true
 elif [[ $variant == collabora ]]; then
    true
 elif [[ $variant == collabora-coda ]]; then
@@ -31,16 +29,16 @@ mkdir -p "$(dirname $fname)/src-$variant"
 cd "$(dirname $fname)/src-$variant"

 case $variant in
-(fresh|still)
+(stable)
    # The pup command prints both fresh and still versions one after another, and
    # we use either head -1 or tail -1 to get the right version, per the if elif
    # above.
-    version_major="$(curl --silent https://www.libreoffice.org/download/download-libreoffice/ |\
-        pup '.dl_version_number text{}' | $head_tail -1)"
-    echoerr got from website ${variant}_version $version_major
+    version_major="$(curl --silent https://www.libreoffice.org/download/ |\
+        pup '.version_heading' 'text{}' | xargs)"
+    echoerr got from website ${variant}_version "[[$version_major]]"
    baseurl=https://download.documentfoundation.org/libreoffice/src/$version_major
    tarballs=($(curl --silent $baseurl/ |\
-        pup 'table json{}' |\
+        pup 'table' 'json{}' |\
        jq --raw-output '.. | .href? | strings' |\
        grep "$version_major.*.tar.xz$"))

--- a/pkgs/applications/office/libreoffice/wrapper.nix
+++ b/pkgs/applications/office/libreoffice/wrapper.nix
@@ -131,6 +131,11 @@ let
 in
 runCommand "${unwrapped.name}-wrapped"
  {
+
+    # Not sure if meaningful for runCommand, but nixpkgs-vet demands this anyway
+    __structuredAttrs = true;
+    strictDeps = true;
+
    inherit (unwrapped) meta pname version;
    paths = [ unwrapped ];
    nativeBuildInputs = [
--- a/pkgs/by-name/ai/airwindows/package.nix
+++ b/pkgs/by-name/ai/airwindows/package.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation {
  pname = "airwindows";
-  version = "0-unstable-2026-08-02";
+  version = "0-unstable-2026-08-16";

  src = fetchFromGitHub {
    owner = "airwindows";
    repo = "airwindows";
-    rev = "5c8aae0c97ad547561056738a7c1d4d579113ffb";
-    hash = "sha256-kVUhTTFWYTw5U1P/q6Ypk2PxOvpVDS0Ze4tyGF0ZjJI=";
+    rev = "1a6b436df99cbfced21a8850305bb1135a4efb4f";
+    hash = "sha256-x+Yj+kqYFlk4f7jilZJWVqRw5DtmoHpqE8HXWUqmziA=";
  };

  # we patch helpers because honestly im spooked out by where those variables
--- a/pkgs/by-name/al/all-the-package-names/package.nix
+++ b/pkgs/by-name/al/all-the-package-names/package.nix
@@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "all-the-package-names";
-  version = "2.0.2529";
+  version = "2.0.2538";

  src = fetchFromGitHub {
    owner = "nice-registry";
    repo = "all-the-package-names";
    tag = "v${version}";
-    hash = "sha256-W9SKlCc7m3O10PDF6lFp+Bjn9nxqnidIA+YM9qC2c5E=";
+    hash = "sha256-TYby3jGpaK1KKuZWwUSGm90527EyJvpm7i5arhwXWI8=";
  };

-  npmDepsHash = "sha256-sE666gta+O49t2e8Cr8KS3srPKkfTyWFt+8IFOZaRd0=";
+  npmDepsHash = "sha256-rdHghCJtEPjNuNXqpdP39xChRgVYtMB4mNmzcYyxKGI=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/an/ansible-navigator/package.nix
+++ b/pkgs/by-name/an/ansible-navigator/package.nix
@@ -8,13 +8,13 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "ansible-navigator";
-  version = "26.6.0";
+  version = "26.8.0";
  pyproject = true;

  src = fetchPypi {
    inherit (finalAttrs) version;
    pname = "ansible_navigator";
-    hash = "sha256-WyazCoFg4uPx0jLAG8u19l4dr806pQFzbYFadJwYfTM=";
+    hash = "sha256-V5UyoCrLr4iZvDeFQUIcXSxTWP1G3TmCJUdhWQIpn+Q=";
  };

  build-system = with python3Packages; [
--- a/pkgs/by-name/at/atmos/package.nix
+++ b/pkgs/by-name/at/atmos/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "atmos";
-  version = "1.225.0";
+  version = "1.226.0";

  src = fetchFromGitHub {
    owner = "cloudposse";
    repo = "atmos";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-PP2yOYwNnvk08QJtNSvpF/ZEQIrh1dQlMH9CUf6Ozr8=";
+    hash = "sha256-OAQ/LRzk49br+5qtHf/3v+L6WtK4itm7cSaYXwspbTo=";
  };

-  vendorHash = "sha256-1lyBg1slFnCCdmP749Ub7Hjx1zFvNaZaMVwOnSuqG/M=";
+  vendorHash = "sha256-Gs90dEuk2uq2MbT/05g4x73FPOmZhJjWBxLmxe37vlg=";

  env.CGO_ENABLED = 0; # Compiles a pure statically linked Go binary.

--- a/pkgs/by-name/aw/aws-lambda-rie/package.nix
+++ b/pkgs/by-name/aw/aws-lambda-rie/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "aws-lambda-runtime-interface-emulator";
-  version = "1.35";
+  version = "1.36";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-lambda-runtime-interface-emulator";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-tO7ru3sdCWbdALcOmxQny7ak96utgABUvIaGThZRedw=";
+    sha256 = "sha256-bI+UZuaRuBwUgDGSb/SnBTzUR+iNPHWdVHHpzT29SIs=";
  };

  vendorHash = "sha256-+7BuDaN1ns63cQOMKuRMjBo9GnLrmsubx/KppUsyheY=";
--- a/pkgs/by-name/az/azure-storage-azcopy/package.nix
+++ b/pkgs/by-name/az/azure-storage-azcopy/package.nix
@@ -6,18 +6,18 @@

 buildGoModule (finalAttrs: {
  pname = "azure-storage-azcopy";
-  version = "10.32.6";
+  version = "10.32.7";

  src = fetchFromGitHub {
    owner = "Azure";
    repo = "azure-storage-azcopy";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-BTbPye3ATHqALvVgEhlMKsKbAVxy61FMVPOhHkFaubI=";
+    hash = "sha256-q1JqGrP7ufjtAC2vLrnO15127g1f2O3JQ3ihqWj8xp0=";
  };

  subPackages = [ "." ];

-  vendorHash = "sha256-adSxTxf38E9ttVcBXECUXJmMTZRQwG6Tq3rsTWh3rhc=";
+  vendorHash = "sha256-FU9/aeom1LIlnrkfbs2D/Y7ZmI1FPlKF/SbBxlbmiM4=";

  doCheck = false;

--- a/pkgs/by-name/be/better-commits/package.nix
+++ b/pkgs/by-name/be/better-commits/package.nix
@@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "better-commits";
-  version = "1.24.0";
+  version = "1.26.0";

  src = fetchFromGitHub {
    owner = "Everduin94";
    repo = "better-commits";
    tag = "v${version}";
-    hash = "sha256-OzQ6/ShE5V49hOvTbG2v6J/orDCulgaAQnU6S9w/Ayw=";
+    hash = "sha256-jlyZD6ceqLQS02ttz8pU2aMj8eT1cTuJx91rr73U/8Y=";
  };

-  npmDepsHash = "sha256-1ASVbn8MqWDiDKx+vYs2DNv9GuvHg4Acv8Kuj7JVBHE=";
+  npmDepsHash = "sha256-y7jj9kAmubZJQJeviItLhkZ/2YHrgD+Lh+cTeTgwFN0=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/ca/cargo-feature-combinations/package.nix
+++ b/pkgs/by-name/ca/cargo-feature-combinations/package.nix
@@ -9,16 +9,16 @@ rustPlatform.buildRustPackage (finalAttrs: {
  __structuredAttrs = true;

  pname = "cargo-feature-combinations";
-  version = "0.4.3";
+  version = "0.5.0";

  src = fetchFromGitHub {
    owner = "romnn";
    repo = "cargo-feature-combinations";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-UvKEXWBT2W4wsjlKUTeyF2A8NIqLnfpjQRKJpCqszp8=";
+    hash = "sha256-0rAo6zH/SRe2cV2H2koYJ0Pe0Y8pqVFIhCl3CzS8wnA=";
  };

-  cargoHash = "sha256-wDd7910GjQwSPk44HwF9LhqNlgUwAEC9D2J0essIT1o=";
+  cargoHash = "sha256-Ihy1qRrZPmBIi9yDHS+wNxx2CATxtaIbxSuRz94RGUE=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/ca/cargo-llvm-lines/package.nix
+++ b/pkgs/by-name/ca/cargo-llvm-lines/package.nix
@@ -6,16 +6,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-llvm-lines";
-  version = "0.4.46";
+  version = "0.4.48";

  src = fetchFromGitHub {
    owner = "dtolnay";
    repo = "cargo-llvm-lines";
    tag = finalAttrs.version;
-    hash = "sha256-Pyl3IGPMjw48mjOh/P4FffP7r+Yd0bJodyKSSGK/kCQ=";
+    hash = "sha256-Cd0qjad+aQieaEdKByUU80zdL8JmCg+sSkLLInSu6Cw=";
  };

-  cargoHash = "sha256-/8Ch74qXamQIgi1uR5huK+EnqpvGfIpYaVygu7NgihI=";
+  cargoHash = "sha256-RwmYWcuIx4uKtCczJkSE0Mj5TTi22V8ll9aAVcXKmcE=";

  meta = {
    description = "Count the number of lines of LLVM IR across all instantiations of a generic function";
--- a/pkgs/by-name/ca/cargo-tally/package.nix
+++ b/pkgs/by-name/ca/cargo-tally/package.nix
@@ -6,14 +6,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-tally";
-  version = "1.0.76";
+  version = "1.0.77";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-b9AhyeVcx8Z8apj+P0CEHOTDcAcxwK0I6gNVOjlprBs=";
+    hash = "sha256-bkikJU5qyq+6+PYCJrEmdZHIsPGz4prOt6g69hOIZ8o=";
  };

-  cargoHash = "sha256-RTRL56xEj0WxgQAw58DNimk6SWTSMR1lKdT87pxWIvs=";
+  cargoHash = "sha256-hVkQdWOhM/R0hcrtzvlSFtw51jSRKNPmhDCNUbiK3rI=";

  meta = {
    description = "Graph the number of crates that depend on your crate over time";
--- a/pkgs/by-name/cl/claude-code/manifest.json
+++ b/pkgs/by-name/cl/claude-code/manifest.json
@@ -1,53 +1,51 @@
 {
-  "version": "2.1.235",
-  "commit": "ba01fa45e3d1d888c1c23caed775ddd06192448b",
-  "buildDate": "2026-08-18T01:48:25Z",
+  "version": "2.1.237",
+  "commit": "45590910f0b746ddad3fe7d8135c5c29b33ccf88",
+  "buildDate": "2026-08-19T22:55:17Z",
  "platforms": {
    "darwin-arm64": {
      "binary": "claude",
-      "checksum": "83b8f806f6f2eea316cfe246628e6c23374711d868f1fd0409db551b877b7748",
-      "size": 313334608
+      "checksum": "338901351d4ff17495738c67fc3e12a32c1b506738ac5e012eb782d3d8b5be43",
+      "size": 317110288
    },
    "darwin-x64": {
      "binary": "claude",
-      "checksum": "325a2dbc166ba8361a913ce588dce4a236789502060239acea52072bb51a54f1",
-      "size": 321995248
+      "checksum": "9f00789754a7b95febc6d4e37a3b6523d4d9c4c2333a2ce4bd596ad82186224e",
+      "size": 325793008
    },
    "linux-arm64": {
      "binary": "claude",
-      "checksum": "cff9592faa292db0f6ac21874f151b8c3d44e23bf0ab9fd1bcca95edc3469549",
-      "size": 328063208
+      "checksum": "a701cfb6bb4703abc6f3ce47508c878ca8158ebdbeacd5c35c7d510c7bc70177",
+      "size": 331864296
    },
    "linux-x64": {
      "binary": "claude",
-      "checksum": "bfcf0ae2dbf94b2b6a106074aabf3938b9a10889c3b678e4cb5a00c03274d5d5",
-      "size": 330946864
+      "checksum": "73975167f0108693cf6fd6614994781657ebb8456ebef5d247458734abfb3916",
+      "size": 334715184
    },
    "linux-arm64-musl": {
      "binary": "claude",
-      "checksum": "c852a47a50db72560a779240a0a9b86ef38cc1453ab5268228f6519e0eb231de",
-      "size": 321208088
+      "checksum": "60d832e81dd5076333e9f91286f660f2aaacc630079863599555caa8fe134eba",
+      "size": 325009176
    },
    "linux-x64-musl": {
      "binary": "claude",
-      "checksum": "6aae801d8f9d31d372e2152cab17d582941d94be03cfcd63328bb4436f0e0385",
-      "size": 325074912
+      "checksum": "b2c81ba8f2b0086b2536a56bf074bbf643043c2bd1aeea6ac8905709ae296168",
+      "size": 328843232
    },
    "win32-x64": {
      "binary": "claude.exe",
-      "checksum": "6786fa5d75a64260de09a3b5f88cd4644dc4292e45a38a4df93dc7eb4d0df3fb",
-      "size": 326528672
+      "checksum": "406167231b3636e55a01d0ce93567256c61e7973489e645883302f14808ae668",
+      "size": 330167456
    },
    "win32-arm64": {
      "binary": "claude.exe",
-      "checksum": "8709594f6daebfef9a03ab56401600cfd1d0a980c640daf30d6de6f7cf3f42fe",
-      "size": 314428576
+      "checksum": "35978113ca98721cbf14c3abac90482d467419b9669d849c89d91c5664a5f95d",
+      "size": 318066848
    }
  },
  "sdkCompat": {
    "testedWrapperVersions": [
-      "0.3.197",
-      "0.3.198",
      "0.3.199",
      "0.3.200",
      "0.3.201",
--- a/pkgs/by-name/cl/clj-kondo/package.nix
+++ b/pkgs/by-name/cl/clj-kondo/package.nix
@@ -2,6 +2,7 @@
  lib,
  buildGraalvmNativeImage,
  fetchurl,
+  versionCheckHook,
 }:

 buildGraalvmNativeImage (finalAttrs: {
@@ -16,8 +17,16 @@ buildGraalvmNativeImage (finalAttrs: {
  extraNativeImageBuildArgs = [
    "-H:+ReportExceptionStackTraces"
    "--no-fallback"
+    # GraalVM >= 25.1 removed @AutomaticFeature discovery, so the bundled
+    # graal-build-time feature no longer runs and the binary crashes at
+    # startup. Register it explicitly. Remove once a release carrying
+    # https://github.com/clj-kondo/clj-kondo/pull/2949 is packaged.
+    "--features=InitAtBuildTimeFeature"
  ];

+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
  meta = {
    description = "Linter for Clojure code that sparks joy";
    homepage = "https://github.com/clj-kondo/clj-kondo";
--- a/pkgs/by-name/co/cobang/package.nix
+++ b/pkgs/by-name/co/cobang/package.nix
@@ -18,14 +18,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "cobang";
-  version = "2.7.1";
+  version = "2.7.2";
  pyproject = false; # Built with meson

  src = fetchFromGitHub {
    owner = "hongquan";
    repo = "CoBang";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-DQxbZQyzCN1N3/TmRSlakuyNJKagvjdVKVEXG+tP4sA=";
+    hash = "sha256-7otVlXrw6UiAKXM0MbeYyU3iPTj4Y9MClzuC+/uU9v0=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/co/containerlab/package.nix
+++ b/pkgs/by-name/co/containerlab/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "containerlab";
-  version = "0.76.1";
+  version = "0.78.0";

  src = fetchFromGitHub {
    owner = "srl-labs";
    repo = "containerlab";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-1BE3PZvXUYSMvs65MS5kT3xp0P7pPjTXJKq6dEcmKqw=";
+    hash = "sha256-e2TaBoC4kzwron1FXeb78V7BkYujdjgfZ8DNBhrL6Tw=";
  };

-  vendorHash = "sha256-x9G80vupcewg0FtIAnWSTQiPPWDIvfjqSpmmjAradwA=";
+  vendorHash = "sha256-kRBYjxirApj91hNBz3a+NyRm8SqRTVeQQCz+JFsKY0U=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/co/convertx/package.nix
+++ b/pkgs/by-name/co/convertx/package.nix
@@ -145,7 +145,10 @@ stdenvNoCC.mkDerivation {
    description = "Self-hosted online file converter";
    homepage = "https://github.com/C4illin/ConvertX/tree/main";
    license = lib.licenses.agpl3Only;
-    platforms = lib.platforms.linux;
+    platforms = [
+      "x86_64-linux"
+      "aarch64-linux"
+    ];
    changelog = "https://github.com/C4illin/ConvertX/blob/main/CHANGELOG.md";
    mainProgram = "convertx";
    maintainers = with lib.maintainers; [
--- a/pkgs/by-name/co/cook-cli/package.nix
+++ b/pkgs/by-name/co/cook-cli/package.nix
@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cook-cli";
-  version = "0.33.0";
+  version = "0.33.1";

  src = fetchFromGitHub {
    owner = "cooklang";
    repo = "cookcli";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-8gJlXxdZJpXe/50wzN8fT/M5JscC/mIdE3a74e+S2as=";
+    hash = "sha256-nqPOdJgQhTWLTfQvMAz31xk9DVUzmmXcBbfDFKepKvk=";
  };

-  cargoHash = "sha256-fWD7rYPMdSJwsQ24o0cuZCqIggN+iXHAfRjx65YbXq8=";
+  cargoHash = "sha256-xeIwdU1JU8ByYUKpSPW1GKGEX8mqfg+4TgsLS3xVc5U=";

  # Build without the self-updating feature
  buildNoDefaultFeatures = true;
--- a/pkgs/by-name/co/copilot-language-server/package.nix
+++ b/pkgs/by-name/co/copilot-language-server/package.nix
@@ -13,11 +13,11 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "copilot-language-server";
-  version = "1.530.0";
+  version = "1.533.0";

  src = fetchzip {
    url = "https://github.com/github/copilot-language-server-release/releases/download/${finalAttrs.version}/copilot-language-server-js-${finalAttrs.version}.zip";
-    hash = "sha256-dnlkzbJpoQHm7ua1wEBu9FWorrbzLK97ezM0hX/EN2Q=";
+    hash = "sha256-E0KA39Gc7ISeNxeUz/vjPxPD/3ugLZ1Nxa4OP1bqKpw=";
    stripRoot = false;
  };

--- a/pkgs/by-name/co/coroot/package.nix
+++ b/pkgs/by-name/co/coroot/package.nix
@@ -11,13 +11,13 @@

 buildGoModule (finalAttrs: {
  pname = "coroot";
-  version = "1.24.4";
+  version = "1.24.5";

  src = fetchFromGitHub {
    owner = "coroot";
    repo = "coroot";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-2I+oRcw5mcoJtJhA9Q4BTkVGl+q3HBjGzv4RHRA1S48=";
+    hash = "sha256-FueDATEkS9P4ySeq4vP3f1QjdIdo175deb80KLOQk6Q=";
  };

  vendorHash = "sha256-P7EXBRG6OYIwaoObqpKBK2n0f6QYphr+DRNLbfysotA=";
--- a/pkgs/by-name/dd/ddns-go/package.nix
+++ b/pkgs/by-name/dd/ddns-go/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "ddns-go";
-  version = "6.17.5";
+  version = "6.17.6";

  src = fetchFromGitHub {
    owner = "jeessy2";
    repo = "ddns-go";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-OglGot/0QWn95kVIPuUvvXANRUYOXgd92rT891/8GGY=";
+    hash = "sha256-AZuwKI5nwDBunt+ddShbRJQoc68DA8bwXlSAa/7k0DU=";
  };

-  vendorHash = "sha256-FX+qhBx4MeQUDtCI7mNXwOxZT5T3oAvPtiVLY5qR+ok=";
+  vendorHash = "sha256-gM9DFy4tkYAm/M0UotodIrhUn5v+aTPx8dseMz4DB4Y=";

  ldflags = [
    "-X main.version=${finalAttrs.version}"
--- a/pkgs/by-name/de/devin-desktop/info.json
+++ b/pkgs/by-name/de/devin-desktop/info.json
@@ -1,14 +1,14 @@
 {
  "aarch64-darwin": {
-    "version": "3.7.16",
+    "version": "3.7.25",
    "vscodeVersion": "1.126.0",
-    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/355c3c9ee32dad08f605d5ee8f9a7e6786316d4c/Devin-darwin-arm64-3.7.16.zip",
-    "sha256": "a5f8ff8e467dfae13ab11a3ccf0550ba7ddffd29efdfa6013949e84cfb14d766"
+    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/7e8e528a3057dcf000527b80072c9be7ea90a08d/Devin-darwin-arm64-3.7.25.zip",
+    "sha256": "8b684fe542257bc5838e81f90d3ccb304f2535c91d387127353406977eb0353f"
  },
  "x86_64-linux": {
-    "version": "3.7.16",
+    "version": "3.7.25",
    "vscodeVersion": "1.126.0",
-    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/355c3c9ee32dad08f605d5ee8f9a7e6786316d4c/Devin-linux-x64-3.7.16.tar.gz",
-    "sha256": "7ce94e6a720a476b91a6a24c6618a7c670c9b4f76b8bb91f7c84b2c63bcf6435"
+    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/7e8e528a3057dcf000527b80072c9be7ea90a08d/Devin-linux-x64-3.7.25.tar.gz",
+    "sha256": "f0806d95a9f07ce5a577146262b10f99589d1c1936b8401590c5490b8467eee8"
  }
 }
--- a/pkgs/by-name/el/eliza/package.nix
+++ b/pkgs/by-name/el/eliza/package.nix
@@ -7,12 +7,12 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "eliza";
-  version = "0-unstable-2026-08-10";
+  version = "0-unstable-2026-08-17";
  src = fetchFromGitHub {
    owner = "anthay";
    repo = "ELIZA";
-    rev = "8d97abbf24b182295f76506b6f8d92f6c1f2d075";
-    hash = "sha256-THl1hpQ0mLkU/EddcbQuH7XjRLDoNfFOmkfY4qhjQZk=";
+    rev = "0d34ebc234090a417755afe8fe4a31f75e2e55bf";
+    hash = "sha256-hhyeVmtf9bkqzH5ORBkpgHrSBsHIKb1i/xK7tb3zt4M=";
  };

  doCheck = true;
--- a/pkgs/by-name/er/ergo/package.nix
+++ b/pkgs/by-name/er/ergo/package.nix
@@ -9,11 +9,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ergo";
-  version = "6.0.3";
+  version = "6.0.4";

  src = fetchurl {
    url = "https://github.com/ergoplatform/ergo/releases/download/v${finalAttrs.version}/ergo-${finalAttrs.version}.jar";
-    sha256 = "sha256-SALN41UGI+Y5pdCfRdJXki4BgVxbH+ZL2v0uvGnsZ8c=";
+    sha256 = "sha256-PeFQiRx+oE9cbNSPjVPU5/q7Ib+ZnFoXiattnszXT4c=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/ev/evcc/package.nix
+++ b/pkgs/by-name/ev/evcc/package.nix
@@ -17,16 +17,16 @@
 }:

 let
-  version = "0.313.3";
+  version = "0.314.2";

  src = fetchFromGitHub {
    owner = "evcc-io";
    repo = "evcc";
    tag = version;
-    hash = "sha256-mf8Jf+JtbcTQ227Dp0oRKBRpNKg2Gv+jkPsi36+Uogw=";
+    hash = "sha256-tqbalQxR6iH0xl5PTCmHTs4wYOI9Kca+IIqcyxo32c0=";
  };

-  vendorHash = "sha256-QJsdBqa/JHaBig4bRtU3LqlYwh/BHnP3vg8YM3reuDY=";
+  vendorHash = "sha256-+EXNCUsgYJ3LKgcljX+VQriUYSghVTNLgwbrdZ2Htdc=";

  commonMeta = {
    license = lib.licenses.mit;
@@ -40,7 +40,7 @@ buildGo126Module rec {

  npmDeps = fetchNpmDeps {
    inherit src;
-    hash = "sha256-2BBHdp3WVJReXfKpM0Hl1AT4vx1584BFbqdPMBGNYB4=";
+    hash = "sha256-lTcZIFBEqB22N71y8Bl9J/5vUejbz8nEszzRhwyfGBI=";
  };

  nativeBuildInputs = [
@@ -74,6 +74,8 @@ buildGo126Module rec {
  ];

  preBuild = ''
+    export PATH="$PWD/node_modules/.bin:$PATH"
+    export SSL_CERT_FILE="${cacert}/etc/ssl/certs/ca-bundle.crt"
    make ui
  '';

--- a/pkgs/by-name/fl/flexget/package.nix
+++ b/pkgs/by-name/fl/flexget/package.nix
@@ -7,14 +7,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "flexget";
-  version = "3.20.5";
+  version = "3.20.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Flexget";
    repo = "Flexget";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-B8YFJB1iSKO1XnTdEGU6Az3dset2MmZPmPvlFjAq8qo=";
+    hash = "sha256-VIHOT8dvr3lIQgkkCZg/d5KF5Kf12cfRfW0r4di2Sj0=";
  };

  pythonRelaxDeps = true;
--- a/pkgs/by-name/fo/forgejo/lts.nix
+++ b/pkgs/by-name/fo/forgejo/lts.nix
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "15.0.6";
-  hash = "sha256-kWmBs/qAiBlmVcSwBM+rXapDbC8IpJtKfQRVPLH4geI=";
-  npmDepsHash = "sha256-wPta+potJJeOac7TyMk3BZg6su6mgHCEgesrsr7SCR4=";
-  vendorHash = "sha256-Kx+mP3GKfEOlsy5bkF7QYDebkrV+FHr37aQC4th/XJM=";
+  version = "15.0.7";
+  hash = "sha256-RzrOnnxHUKWfiQnF2TSDkMa2AZfqBhWVAjw26/B3ZgM=";
+  npmDepsHash = "sha256-VFkOYYznOXXis8mE4njTcLbh36AnW4wQgMLcvyCTSKY=";
+  vendorHash = "sha256-7KqezBwhcbOhX426HTOcOOIzscuqWJLmkgpMYuBRVr8=";
  lts = true;
  nixUpdateExtraArgs = [
    "--override-filename"
--- a/pkgs/by-name/fo/forgejo/package.nix
+++ b/pkgs/by-name/fo/forgejo/package.nix
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "16.0.2";
-  hash = "sha256-cJWX77ROA9I1Y6/IEoGhm6wc2ScgKkMclpEyd4lHqew=";
-  npmDepsHash = "sha256-SS9Yb4fEY9C+ddk2Omf4+v1w6Ff2ArJZd1p5XGRN2EU=";
-  vendorHash = "sha256-iLzYUo+oTSiJbqp7NygfaUxZxeXYuQm1/9oTk5+n0dk=";
+  version = "16.0.3";
+  hash = "sha256-G2kp2k/ivqxXG68+piBczXujtj3f/fLr+DnHoiMKOB4=";
+  npmDepsHash = "sha256-QwZ8X0pVxs5u4jMOqy3VGcBGVqqDKpLCMPmwoECVwEg=";
+  vendorHash = "sha256-0nvMy0oyVIy2qBngg1eu0UAGBEuoCGzDdsBYUuU/A48=";
  lts = false;
  nixUpdateExtraArgs = [
    "--override-filename"
--- a/pkgs/by-name/fo/fosrl-gerbil/package.nix
+++ b/pkgs/by-name/fo/fosrl-gerbil/package.nix
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "gerbil";
-  version = "1.4.3";
+  version = "1.5.0";

  src = fetchFromGitHub {
    owner = "fosrl";
    repo = "gerbil";
    tag = finalAttrs.version;
-    hash = "sha256-9bKpuMAhQlhK8+IB6L3pEw4WU/1I3YXa0HDBhWPNOAo=";
+    hash = "sha256-3OzkSQRvyBgtdb8eInAC75F1EcTzAplP1PIQzTpO4j0=";
  };

  vendorHash = "sha256-bTUUGVn4vKEoxd95iCGw9AFrRZmYSs5eQc8Lan+wSDw=";
--- a/pkgs/by-name/fo/fosrl-pangolin/package.nix
+++ b/pkgs/by-name/fo/fosrl-pangolin/package.nix
@@ -36,7 +36,7 @@ in

 buildNpmPackage (finalAttrs: {
  pname = "pangolin";
-  version = "1.21.0";
+  version = "1.21.1";

  __structuredAttrs = true;
  enableParallelBuilding = true;
@@ -45,12 +45,12 @@ buildNpmPackage (finalAttrs: {
    owner = "fosrl";
    repo = "pangolin";
    tag = finalAttrs.version;
-    hash = "sha256-LR4UO2xrTLKmemDVsJWtEQoV2bDy6U2ahxTtA+SDymI=";
+    hash = "sha256-zfXHev0bN3KVkoiSQ+2WQCgmcCtWi3dib6EiaYmthTo=";
  };

  nodejs = nodejs_22;
  npmDepsFetcherVersion = 2;
-  npmDepsHash = "sha256-EBectG1zNdUb30SlhAzy9rCwF/mYHAV4HZTRbk2CbDY=";
+  npmDepsHash = "sha256-9wPn2nSD9VxMyHywrG52WrChsrJ/ctnKGlMZZEymP6A=";

  nativeBuildInputs = [
    esbuild
@@ -64,11 +64,11 @@ buildNpmPackage (finalAttrs: {

  # upstream inconsistently updates this
  # so leaving this here in case it's needed
-  postPatch = ''
-    substituteInPlace server/lib/consts.ts --replace-fail \
-      'export const APP_VERSION = "${lib.versions.majorMinor finalAttrs.version + ".0"}";' \
-      'export const APP_VERSION = "${finalAttrs.version}";'
-  '';
+  # postPatch = ''
+  #   substituteInPlace server/lib/consts.ts --replace-fail \
+  #     'export const APP_VERSION = "${lib.versions.majorMinor finalAttrs.version + ".0"}";' \
+  #     'export const APP_VERSION = "${finalAttrs.version}";'
+  # '';

  preBuild = ''
    npm run set:${db false}
--- a/pkgs/by-name/ga/gammu/package.nix
+++ b/pkgs/by-name/ga/gammu/package.nix
@@ -24,7 +24,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gammu";
-  version = "1.44.0";
+  version = "1.44.1";

  __structuredAttrs = true;

@@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "gammu";
    repo = "gammu";
    rev = finalAttrs.version;
-    sha256 = "sha256-1ZdsEd0uHB0nzOJ+780lLrJ84kZCHcv3CixuL6Utiow=";
+    sha256 = "sha256-1y49DZMz9avKI2QSuwOLslwrgA76+eaTmpwMLS5O4zk=";
  };

  patches = [
--- a/pkgs/by-name/go/golangci-lint/package.nix
+++ b/pkgs/by-name/go/golangci-lint/package.nix
@@ -4,7 +4,7 @@
  # rather than buildGoLatestModule.
  # This can be bumped when the release notes of golangci-lint detail support for
  # new version of go.
-  buildGo126Module,
+  buildGo127Module,
  buildPackages,
  fetchFromGitHub,
  installShellFiles,
@@ -12,18 +12,18 @@
  stdenv,
 }:

-buildGo126Module (finalAttrs: {
+buildGo127Module (finalAttrs: {
  pname = "golangci-lint";
-  version = "2.12.2";
+  version = "2.13.1";

  src = fetchFromGitHub {
    owner = "golangci";
    repo = "golangci-lint";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-qR7fp1x2S+EwEAcplRHTvA3jWwLr/XSiYKSZtAwkrNU=";
+    hash = "sha256-8nWHSMAwIILfKMPfxWKMimxWt9N+kUsZEAaoAOPbRBE=";
  };

-  vendorHash = "sha256-AG5wtLwWLz55bdp1oi3cW+9O3yj1W1P7MV9zxym7Pb4=";
+  vendorHash = "sha256-yZRqfht5rY2yyoZNtYttE57sB7EYjk71yrKw8dLYzNk=";

  subPackages = [ "cmd/golangci-lint" ];

--- a/pkgs/by-name/gu/gum/package.nix
+++ b/pkgs/by-name/gu/gum/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "gum";
-  version = "0.17.0";
+  version = "2.0.0";

  src = fetchFromGitHub {
    owner = "charmbracelet";
    repo = "gum";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-TbheGevUrUKwT97JayW7rfAEgAfRnpOvHyvAxt27sIg=";
+    hash = "sha256-M1eLi/Jc8QCc6Mai3Nc42MXRnl5ucafQMiOFL3kLoz4=";
  };

-  vendorHash = "sha256-9vHlQuJA5g5sonfxe+whXDdkROuE3lZzOPYq74tJZtE=";
+  vendorHash = "sha256-gvTQQOkCVIyKE27dgeQAPM4ZBV2XZnjRtqmEwPbY3Gc=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/ha/harbor-cli/package.nix
+++ b/pkgs/by-name/ha/harbor-cli/package.nix
@@ -3,8 +3,8 @@
  stdenv,
  buildGoModule,
  fetchFromGitHub,
-  testers,
  installShellFiles,
+  versionCheckHook,
  writableTmpDirAsHomeHook,
 }:

@@ -12,6 +12,8 @@ buildGoModule (finalAttrs: {
  pname = "harbor-cli";
  version = "0.0.26";

+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "goharbor";
    repo = "harbor-cli";
@@ -33,7 +35,6 @@ buildGoModule (finalAttrs: {

  ldflags = [
    "-s"
-    "-w"
    "-X github.com/goharbor/harbor-cli/cmd/harbor/internal/version.Version=${finalAttrs.version}"
  ];

@@ -46,10 +47,13 @@ buildGoModule (finalAttrs: {
      --zsh <($out/bin/harbor completion zsh)
  '';

-  passthru.tests.version = testers.testVersion {
-    package = finalAttrs.finalPackage;
-    command = "HOME=\"$(mktemp -d)\" harbor version";
-  };
+  nativeInstallCheckInputs = [
+    versionCheckHook
+    writableTmpDirAsHomeHook
+  ];
+  versionCheckKeepEnvironment = [ "HOME" ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;

  meta = {
    homepage = "https://github.com/goharbor/harbor-cli";
--- a/pkgs/by-name/he/helmfile/package.nix
+++ b/pkgs/by-name/he/helmfile/package.nix
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "helmfile";
-  version = "1.7.3";
+  version = "1.7.4";

  src = fetchFromGitHub {
    owner = "helmfile";
    repo = "helmfile";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-St7MTDWoc/Ue5meAMe6Krbi4Csp2Kz5KqfUuFmjanbE=";
+    hash = "sha256-/igJVn3d9rsclr87z3q6BklE9+QzZ1NDRVRZhF3OQIc=";
  };

-  vendorHash = "sha256-ngIAwWMicW4nqBqd0CIlOI3ocHfJPHbwnkIT0ADZzHk=";
+  vendorHash = "sha256-X3y6a5YcBAHuOxYKHj8dGRt8841lZBrA91e0nFjdR7o=";

  proxyVendor = true; # darwin/linux hash mismatch

--- a/pkgs/by-name/ht/httplib/package.nix
+++ b/pkgs/by-name/ht/httplib/package.nix
@@ -9,13 +9,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "httplib";
-  version = "0.53.0";
+  version = "0.53.1";

  src = fetchFromGitHub {
    owner = "yhirose";
    repo = "cpp-httplib";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-0WyV3/yscOJsYkTXqloXoeL8DoPVxev3Qqou7XMpuGA=";
+    hash = "sha256-0qcBtQkE7b4o5M5zio6Ji/8HEt4qEI218h11uppNIdE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/kl/kloak/package.nix
+++ b/pkgs/by-name/kl/kloak/package.nix
@@ -17,13 +17,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "kloak";
-  version = "0.8.9-1";
+  version = "0.9.0-1";

  src = fetchFromGitHub {
    owner = "Whonix";
    repo = "kloak";
    tag = finalAttrs.version;
-    hash = "sha256-PzKaOaGDzn+1rbfW1daY/DcAwNflJ+nMaBdtiVSQJf0=";
+    hash = "sha256-nDeTxfb+dqLgF6ToKvo+8wTVkP4AVbaA9qhINJtEbas=";
  };

  strictDeps = true;
--- a/pkgs/by-name/ko/komodo/package.nix
+++ b/pkgs/by-name/ko/komodo/package.nix
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "komodo";
-  version = "2.3.1";
+  version = "2.3.2";

  src = fetchFromGitHub {
    owner = "moghtech";
    repo = "komodo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-nEST1Mp/WJJ+GtsC9cX10w3thywe3dHNrQV5iLPXMIQ=";
+    hash = "sha256-UGzxRgNtt1BoWvQR0kcvieKVEN2b0Kws1BmO13gnnVo=";
  };

-  cargoHash = "sha256-krFHWiHgdBL2jIr0YsBrNG4+NaaoaSVf6q65jWiQGsg=";
+  cargoHash = "sha256-iQolR+V38TTWYaW8NdQCsp/OR7jh/C+Q/0ZgFVxRZqY=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/li/libmowgli/package.nix
+++ b/pkgs/by-name/li/libmowgli/package.nix
@@ -7,13 +7,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libmowgli";
-  version = "2.1.3-unstable-2024-04-01";
+  version = "2.1.3-unstable-2026-08-12";

  src = fetchFromGitHub {
    owner = "atheme";
    repo = "libmowgli-2";
-    rev = "878f7e931b55d36e2e1b27807f7a620cbb0577d8";
-    hash = "sha256-Ik0GDsC0vEFNW/s10u+kNubqVh95ZqXb2I5W9iyU1z4=";
+    rev = "35d10d758d5aec35c9265640969e5d1dd32f975b";
+    hash = "sha256-6jGGUhwFN9zb+oAuVBzW6GbeNn3iaNm3QxfTsUvBM2w=";
  };

  passthru.updateScript = nix-update-script {
--- a/pkgs/by-name/li/liferea/package.nix
+++ b/pkgs/by-name/li/liferea/package.nix
@@ -26,11 +26,11 @@

 stdenv.mkDerivation rec {
  pname = "liferea";
-  version = "1.16.12";
+  version = "1.16.14";

  src = fetchurl {
    url = "https://github.com/lwindolf/${pname}/releases/download/v${version}/${pname}-${version}.tar.bz2";
-    hash = "sha256-9UDYvUuIhaz31vgq37KFtsfH3B2IzszzMaa/VSN8JW8=";
+    hash = "sha256-/zux42TNR453/XCep9/BJgObEXwT5Lq0dAVbucET1Og=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/lightdm/package.nix
+++ b/pkgs/by-name/li/lightdm/package.nix
@@ -39,7 +39,7 @@ assert !(withQt5 && withQt6);

 stdenv.mkDerivation (finalAttrs: {
  pname = "lightdm";
-  version = "1.33.0";
+  version = "1.33.1";

  outputs = [
    "out"
@@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "ubuntu";
    repo = "lightdm";
    tag = finalAttrs.version;
-    hash = "sha256-/OgG3jtqxCl3tAXHs+LaAkEAAun+bsUm5pZBffv1AWg=";
+    hash = "sha256-/p5/V2KNRkm1cP9/Ld3crfAxAdHYc2mFyNl1rV6QXr0=";
  };

  nativeBuildInputs = [
@@ -127,12 +127,6 @@ stdenv.mkDerivation (finalAttrs: {

    substituteInPlace src/shared-data-manager.c \
      --replace-fail /bin/rm ${busybox}/bin/rm
-
-    # Fix switching users
-    # https://github.com/ubuntu/lightdm/pull/454
-    substituteInPlace src/lightdm.c --replace-fail \
-      "gboolean can_multi_session = login1_seat_get_can_multi_session (login1_seat);" \
-      "gboolean can_multi_session = TRUE;"
  '';

  postInstall = ''
--- a/pkgs/by-name/li/likwid/package.nix
+++ b/pkgs/by-name/li/likwid/package.nix
@@ -10,11 +10,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "likwid";
-  version = "5.5.1";
+  version = "5.5.2";

  src = fetchurl {
    url = "https://ftp.fau.de/pub/likwid/likwid-${finalAttrs.version}.tar.gz";
-    hash = "sha256-JceDDmOyA5b8/DsWrnnDm0IgqG03bOt81pSbX/mR23g=";
+    hash = "sha256-FRjj1PPxUxTr7SjdGjzTCazaK8CcLWk6r6E/DisXip8=";
  };

  nativeBuildInputs = [ perl ];
--- a/pkgs/by-name/li/linkding/package.nix
+++ b/pkgs/by-name/li/linkding/package.nix
@@ -14,7 +14,7 @@
  uwsgi,
 }:
 let
-  version = "1.46.1";
+  version = "1.46.2";

  python = python3.override {
    self = python;
@@ -77,7 +77,7 @@ python.pkgs.buildPythonApplication (finalAttrs: {
    owner = "sissbruecker";
    repo = "linkding";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-1tXWbcG4lKquI02nYw+CVKJWyCWbD3m5/ieRgbhtQnE=";
+    hash = "sha256-d/APoPxlrsvBqWGOSYLzLPfCgZd4PRPNh/zxcFnvCRA=";
  };

  __structuredAttrs = true;
--- a/pkgs/by-name/ma/mark/package.nix
+++ b/pkgs/by-name/ma/mark/package.nix
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "mark";
-  version = "16.8.11";
+  version = "16.12.0";

  src = fetchFromGitHub {
    owner = "kovetskiy";
    repo = "mark";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-xPMzfYZWwys9Hp3PTVzBtBg99cx4k78r/EDHi3PX2xE=";
+    sha256 = "sha256-KSxMcHizvTQh3AuJ0NV7GQhBgpBIZwrbeI945PFzQJE=";
  };

-  vendorHash = "sha256-AhXMLBMn0MzBPZa7K2RO+Uk33X/KCe6ZoKAIOmuw+l0=";
+  vendorHash = "sha256-EELqh6C8SZdyCJfHDqOEY5bhP5G6jlOUhpDaK93fmTA=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/me/melange/package.nix
+++ b/pkgs/by-name/me/melange/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "melange";
-  version = "0.58.0";
+  version = "0.59.1";

  src = fetchFromGitHub {
    owner = "chainguard-dev";
    repo = "melange";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-gv6Y+VImdXICrqt2YDr4ROoL6xJSuRE1XyAasSM3dW4=";
+    hash = "sha256-i6JneJj/zg3lyVMqi1ojOgSzBHAIWmGBzgEpvIXW9r8=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-cyhegU/jGLVRidAEAq2XY9agjmMr28u7Hf9cZ67um1g=";
+  vendorHash = "sha256-mV4n+6RIf81abnYCaPevgqJfhkC7UMSRnn8JJQHTe4w=";

  subPackages = [ "." ];

--- a/pkgs/by-name/mi/micronaut/package.nix
+++ b/pkgs/by-name/mi/micronaut/package.nix
@@ -9,11 +9,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "micronaut";
-  version = "5.1.0";
+  version = "5.1.1";

  src = fetchzip {
    url = "https://github.com/micronaut-projects/micronaut-starter/releases/download/v${finalAttrs.version}/micronaut-cli-${finalAttrs.version}.zip";
-    hash = "sha256-eJ3iCQKIpUUgsgqbD6HzH3xs/crYnaaUbzWDWFhSPbA=";
+    hash = "sha256-hLjvf9BBpcSME/Ed1OEm5rDv9Q47gOiGGmUMAtZIYng=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/mu/multi-scrobbler/package.nix
+++ b/pkgs/by-name/mu/multi-scrobbler/package.nix
@@ -9,18 +9,18 @@

 buildNpmPackage (finalAttrs: {
  pname = "multi-scrobbler";
-  version = "0.16.2";
+  version = "0.16.4";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "FoxxMD";
    repo = "multi-scrobbler";
    tag = finalAttrs.version;
-    hash = "sha256-R+CwL+Kp3C5wg1LFt0XlksMtRFt+7YItR3t4QPpND6w=";
+    hash = "sha256-Inzenh6wnv65ZrfdcSEfqXXhW96TabyNvla37zfxtJQ=";
  };

  npmDepsFetcherVersion = 2;
-  npmDepsHash = "sha256-aqwiOajXjB6FbHzhXxTSpSxDBWkdYj9O+I1XqoEWgbE=";
+  npmDepsHash = "sha256-/oQbIxmTRnpfZruMykwv7tQabchYgUgun5tFAoctTRQ=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/mu/musicfree-desktop/package.nix
+++ b/pkgs/by-name/mu/musicfree-desktop/package.nix
@@ -7,7 +7,7 @@
  copyDesktopItems,
  makeWrapper,
  nix-update-script,
-  electron,
+  electron_41,
  python3,
  nodejs,
  vips,
@@ -16,7 +16,9 @@
  xcodebuild,
  zip,
 }:
-
+let
+  electron = electron_41;
+in
 buildNpmPackage (finalAttrs: {
  pname = "musicfree-desktop";
  version = "0.0.8";
--- a/pkgs/by-name/ne/nexttrace/package.nix
+++ b/pkgs/by-name/ne/nexttrace/package.nix
@@ -7,15 +7,15 @@

 buildGoModule (finalAttrs: {
  pname = "nexttrace";
-  version = "1.7.1";
+  version = "1.7.2";

  src = fetchFromGitHub {
    owner = "nxtrace";
    repo = "NTrace-core";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-yjG/nXnZs5ks80Q5Qq9TsN57nuSrPvp/jlYV3FXJqMk=";
+    sha256 = "sha256-+e+TwqieJt9Piqwdp+v23PbBxQVAtdJ7xuUgo0+p/oY=";
  };
-  vendorHash = "sha256-u5UTl3zNlnv0qk/Z60h1csp44ypn1V6i/aAThtTn3eg=";
+  vendorHash = "sha256-CrdQ7xvzBoo2jeEY4GQWzeQ1bjE6TEq6n0Atc238EuU=";

  buildInputs = [ libpcap ];

--- a/pkgs/by-name/nu/nushell/plugins/desktop_notifications/package.nix
+++ b/pkgs/by-name/nu/nushell/plugins/desktop_notifications/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "nu_plugin_desktop_notifications";
-  version = "0.114.1";
+  version = "0.115.0";

  src = fetchFromGitHub {
    owner = "FMotalleb";
    repo = "nu_plugin_desktop_notifications";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/41DHPv9UKHUY551UppiauEiwoB0qQnkSrl6pHytwLs=";
+    hash = "sha256-6J6CNc5NDBk5PgIbjUHjgzUXZuLX3Ws/FKtXjyxoqHo=";
  };

-  cargoHash = "sha256-csBlo1Gly1LbvMxfmydmLlzhQh7ul2haLr7IAq/GlbI=";
+  cargoHash = "sha256-yQqUm3pQn4U+9U37c/XajZIvosbbraMJTujhdFi6xRI=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/nu/nushell/plugins/hcl/package.nix
+++ b/pkgs/by-name/nu/nushell/plugins/hcl/package.nix
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "nu_plugin_hcl";
-  version = "0.114.1";
+  version = "0.115.0";

  src = fetchFromGitHub {
    owner = "Yethal";
    repo = "nu_plugin_hcl";
    tag = finalAttrs.version;
-    hash = "sha256-qhrKEArTI7DeSBJqdzSkZiQmkDtnPAn4KkZ7djH3wmY=";
+    hash = "sha256-F/JYk9dvxii3EzWr4WlrJxJvZ5rQwIFcG8KW28SpsGA=";
  };

-  cargoHash = "sha256-+Vayvr53jxs2bRGa/8TWmRdcOEzIYsrY8dg1Z0Dgbm0=";
+  cargoHash = "sha256-qpIREWBy6hX5svk0SEQUeZe0HvNa11E6sh6QtS4mMCs=";

  nativeBuildInputs = [ pkg-config ] ++ lib.optionals stdenv.cc.isClang [ rustPlatform.bindgenHook ];

--- a/pkgs/by-name/oh/oh-my-zsh/package.nix
+++ b/pkgs/by-name/oh/oh-my-zsh/package.nix
@@ -19,14 +19,14 @@
 }:

 stdenv.mkDerivation rec {
-  version = "2026-08-09";
+  version = "2026-08-16";
  pname = "oh-my-zsh";

  src = fetchFromGitHub {
    owner = "ohmyzsh";
    repo = "ohmyzsh";
-    rev = "97b27bb2ec0701330b18c2d3e340b22e742b3fa8";
-    sha256 = "sha256-iREQC7ySFaU138Ua4Wr/sUQMglizzp+G/fuvDr0+Gts=";
+    rev = "97e11051e2f8053b1d694788d1cb4b0dbb1e2365";
+    sha256 = "sha256-Fn6R7zlXiicUE8PtFfqoHY3iQrXZeKCBHxtSYHW3fBQ=";
  };

  strictDeps = true;
--- a/pkgs/by-name/pa/par2cmdline/package.nix
+++ b/pkgs/by-name/pa/par2cmdline/package.nix
@@ -7,13 +7,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "par2cmdline";
-  version = "0.8.1";
+  version = "1.3.0";

  src = fetchFromGitHub {
    owner = "Parchive";
    repo = "par2cmdline";
    rev = "v${finalAttrs.version}";
-    sha256 = "11mx8q29cr0sryd11awab7y4mhqgbamb1ss77rffjj6in8pb4hdk";
+    sha256 = "sha256-TEWfkjyjqG5cRsVkckIoIo/+/LwhwH1GVivX6Dpvpxw=";
  };

  nativeBuildInputs = [ autoreconfHook ];
--- a/pkgs/by-name/pd/pdfding/package.nix
+++ b/pkgs/by-name/pd/pdfding/package.nix
@@ -12,12 +12,12 @@ let
 in
 python.pkgs.buildPythonPackage (finalAttrs: {
  pname = "pdfding";
-  version = "1.12.0";
+  version = "1.13.0";
  src = fetchFromGitHub {
    owner = "mrmn2";
    repo = "PdfDing";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-LcZa9BxP99lI7Hqt3seyBeFNn4oLtR31yjq3Ap/IwUE=";
+    hash = "sha256-HMoCmPlT40o6oitUw/X582dXie/5iglpnXQs4VEbp1g=";
  };
  pyproject = true;

@@ -138,6 +138,7 @@ python.pkgs.buildPythonPackage (finalAttrs: {
    "django-allauth"
    "gunicorn"
    "huey"
+    "markdown"
    "nh3"
    "psycopg2-binary"
    "pypdf"
--- a/pkgs/by-name/pf/pfixtools/0001-Fix-build-with-unbound-1.6.1.patch
+++ b/pkgs/by-name/pf/pfixtools/0001-Fix-build-with-unbound-1.6.1.patch
@@ -1,54 +0,0 @@
-From bf269dda3c81bb9eaa244b3015d426de38c85ccf Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Carles=20Pag=C3=A8s?= <page@ruiec.cat>
-Date: Fri, 3 Mar 2017 09:59:09 +0100
-Subject: [PATCH] Fix build with unbound 1.6.1
-
-From their changelog: Fix to rename ub_callback_t to ub_callback_type, because POSIX reserves _t typedefs
---
- postlicyd/dns.c       | 2 +-
- postlicyd/dns.h       | 2 +-
- postlicyd/spf-proto.c | 2 +-
- 3 files changed, 3 insertions(+), 3 deletions(-)
-
-diff --git a/postlicyd/dns.c b/postlicyd/dns.c
-index d8409c2..97f1c4d 100644
--- a/postlicyd/dns.c
-+++ b/postlicyd/dns.c
-@@ -123,7 +123,7 @@ static int dns_handler(client_t *event, void *config)
- }
- 
- bool dns_resolve(const char *hostname, dns_rrtype_t type,
-                 ub_callback_t callback, void *data)
-+                 ub_callback_type callback, void *data)
- {
-     if (_G.ctx == NULL) {
-         _G.ctx = ub_ctx_create();
-diff --git a/postlicyd/dns.h b/postlicyd/dns.h
-index d84de3b..905b924 100644
--- a/postlicyd/dns.h
-+++ b/postlicyd/dns.h
-@@ -89,7 +89,7 @@ typedef void (*dns_result_callback_f)(dns_result_t *result, void *data);
-  */
- __attribute__((nonnull(1,3,4)))
- bool dns_resolve(const char *hostname, dns_rrtype_t type,
-                 ub_callback_t callback, void *data);
-+                 ub_callback_type callback, void *data);
- 
- /** Fetch the DNS record of the given type.
-  */
-diff --git a/postlicyd/spf-proto.c b/postlicyd/spf-proto.c
-index 31cb0a5..79a2d83 100644
--- a/postlicyd/spf-proto.c
-+++ b/postlicyd/spf-proto.c
-@@ -279,7 +279,7 @@ static bool spf_validate_domain(const char* restrict domain)
- }
- 
- static bool spf_query(spf_t *spf, const char* query, dns_rrtype_t rtype,
-                      ub_callback_t cb)
-+                      ub_callback_type cb)
- {
-     buffer_reset(&_G.query_buffer);
-     buffer_addstr(&_G.query_buffer, query);
-- 
-2.12.0
-
--- a/pkgs/by-name/pf/pfixtools/package.nix
+++ b/pkgs/by-name/pf/pfixtools/package.nix
@@ -1,84 +0,0 @@
-{
-  stdenv,
-  lib,
-  fetchFromGitHub,
-  git,
-  gperf,
-  pcre,
-  unbound,
-  libev,
-  tokyocabinet,
-  pkg-config,
-  bash,
-  libsrs2,
-}:
-
-let
-  version = "0.9";
-
-  pfixtoolsSrc = fetchFromGitHub {
-    owner = "Fruneau";
-    repo = "pfixtools";
-    rev = "pfixtools-${version}";
-    sha256 = "1vmbrw686f41n6xfjphfshn96vl07ynvnsyjdw9yfn9bfnldcjcq";
-  };
-
-  srcRoot = pfixtoolsSrc.name;
-
-  libCommonSrc = fetchFromGitHub {
-    owner = "Fruneau";
-    repo = "libcommon";
-    rev = "b07e6bdea3d24748e0d39783d7d817096d10cc67";
-    sha256 = "14fxldp29j4vmfmhfgwwi37pj8cz0flm1aykkxlbgakz92d4pm35";
-  };
-
-in
-
-stdenv.mkDerivation {
-  pname = "pfixtools";
-  inherit version;
-
-  src = pfixtoolsSrc;
-
-  patches = [ ./0001-Fix-build-with-unbound-1.6.1.patch ];
-
-  nativeBuildInputs = [ pkg-config ];
-  buildInputs = [
-    git
-    gperf
-    pcre
-    unbound
-    libev
-    tokyocabinet
-    bash
-    libsrs2
-  ];
-
-  postUnpack = ''
-    cp -Rp ${libCommonSrc}/* ${srcRoot}/common;
-    chmod -R +w ${srcRoot}/common;
-  '';
-
-  postPatch = ''
-    substituteInPlace postlicyd/policy_tokens.sh \
-                      --replace /bin/bash ${bash}/bin/bash;
-
-    substituteInPlace postlicyd/*_tokens.sh \
-      --replace "unsigned int" "size_t"
-  '';
-
-  env.NIX_CFLAGS_COMPILE = "-Wno-error=unused-result -Wno-error=nonnull-compare -Wno-error=format-truncation";
-
-  makeFlags = [
-    "DESTDIR=$(out)"
-    "prefix="
-  ];
-
-  meta = {
-    description = "Collection of postfix-related tools";
-    license = lib.licenses.bsd3;
-    homepage = "https://github.com/Fruneau/pfixtools";
-    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ jerith666 ];
-  };
-}
--- a/pkgs/by-name/pi/pipenv-poetry-migrate/package.nix
+++ b/pkgs/by-name/pi/pipenv-poetry-migrate/package.nix
@@ -18,10 +18,12 @@ python3Packages.buildPythonApplication (finalAttrs: {

  build-system = [ python3Packages.poetry-core ];

-  pythonRelaxDeps = [ "typer" ];
+  pythonRelaxDeps = [
+    "typer"
+    "tomlkit"
+  ];

  dependencies = with python3Packages; [
-    setuptools # for pkg_resources
    tomlkit
    typer
  ];
--- a/pkgs/by-name/pl/plezy/git-hashes.json
+++ b/pkgs/by-name/pl/plezy/git-hashes.json
@@ -3,7 +3,7 @@
  "auto_updater_macos": "sha256-787cMkeT2BlfwVcy4y46XkWioNqLKJgQ/CCxQvERa+A=",
  "auto_updater_platform_interface": "sha256-787cMkeT2BlfwVcy4y46XkWioNqLKJgQ/CCxQvERa+A=",
  "auto_updater_windows": "sha256-787cMkeT2BlfwVcy4y46XkWioNqLKJgQ/CCxQvERa+A=",
-  "background_downloader": "sha256-y37tzAxOwql1193E+aTJOIi2B0gXLxL3azghEYzcRGA=",
+  "background_downloader": "sha256-x1Z+Nlyvy+cc1EdRUikqZMDjVKdGHe7FOH2Yx9K0zhE=",
  "connectivity_plus": "sha256-sVUG5/6GF0Eu47BgUCkgbGi8w1ip5o0yQS00NnNjAGs=",
  "os_media_controls": "sha256-UkrBz52dkdlSJ+UJwC2E7RhuSOcXzJx+dVo0JcW8pEY="
 }
--- a/pkgs/by-name/pl/plezy/package.nix
+++ b/pkgs/by-name/pl/plezy/package.nix
@@ -27,13 +27,13 @@

 let
  pname = "plezy";
-  version = "2.13.0";
+  version = "2.16.0";

  src = fetchFromGitHub {
    owner = "edde746";
    repo = "plezy";
    tag = version;
-    hash = "sha256-pSGHB2sN/iySd3WKskvZeBo9H9M3YrsLtfw1LoW15tA=";
+    hash = "sha256-i4QJ8o8zOivUKarXgEmKJeX5XyYTyaqxjevD6nwMjII=";
  };

  simdutf = fetchurl {
@@ -146,7 +146,7 @@ let

    src = fetchurl {
      url = "https://github.com/edde746/plezy/releases/download/${version}/plezy-macos.dmg";
-      hash = "sha256-BF9jKIOzQYpQnJUXD8d2e2GSgIc6ZsjZaqceAc01QI0=";
+      hash = "sha256-h1aBFYEP1ie6v9BZZ/vH0b+fQL047tMZz3tASwnkcWI=";
    };

    nativeBuildInputs = [
--- a/pkgs/by-name/pl/plezy/pubspec.lock.json
+++ b/pkgs/by-name/pl/plezy/pubspec.lock.json
@@ -118,12 +118,12 @@
      "dependency": "direct main",
      "description": {
        "path": ".",
-        "ref": "021e2075260e324b7440a5c81b57bf0242d35020",
-        "resolved-ref": "021e2075260e324b7440a5c81b57bf0242d35020",
+        "ref": "12ef3ff758709e3ceab8eccd6d43e0dea1c68ca1",
+        "resolved-ref": "12ef3ff758709e3ceab8eccd6d43e0dea1c68ca1",
        "url": "https://github.com/edde746/background_downloader"
      },
      "source": "git",
-      "version": "9.5.5"
+      "version": "9.5.6"
    },
    "boolean_selector": {
      "dependency": "transitive",
--- a/pkgs/by-name/pr/prometheus-knot-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-knot-exporter/package.nix
@@ -7,13 +7,13 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "knot-exporter";
-  version = "3.5.6";
+  version = "3.5.7";
  pyproject = true;

  src = fetchPypi {
    pname = "knot_exporter";
    inherit version;
-    hash = "sha256-jCBi/PHMizG/OkwuoCbkud5w+pgGumHwwGd8W5C4zXc=";
+    hash = "sha256-4QWsq79AGOE435D2EFzX6Xif11YMbaxWNv5Ljfiqa6M=";
  };

  build-system = [
--- a/pkgs/by-name/pr/prometheus-mongodb-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-mongodb-exporter/package.nix
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "mongodb_exporter";
-  version = "0.52.0";
+  version = "0.53.0";

  src = fetchFromGitHub {
    owner = "percona";
    repo = "mongodb_exporter";
    rev = "v${version}";
-    hash = "sha256-sf9I5RTlciXcoNOo5UTiLcr3N1c93xqFozbLQke/fFY=";
+    hash = "sha256-JmUWxiLKRd7ogXduCAuHCq0QayQxeoYlWXrzS/ZxWeQ=";
  };

-  vendorHash = "sha256-swxJxgZccgcfuixcjzQHBu/b0dlFvhfcE4IS6xDdZI8=";
+  vendorHash = "sha256-o4ts3K+wWCO+WnyBsN1GFiEh2MG3l3C5pMxkTvhj4hU=";

  buildInputs = lib.optionals withGssapi [ krb5 ];

--- a/pkgs/by-name/pr/prometheus-zfs-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-zfs-exporter/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "zfs_exporter";
-  version = "2.4.0";
+  version = "2.4.1";

  src = fetchFromGitHub {
    owner = "pdf";
    repo = "zfs_exporter";
    rev = "v" + version;
-    hash = "sha256-66JVDE9PAQzE6frdlsCk2Gt9FECEK91ezAXYjucr9zs=";
+    hash = "sha256-gFczOwkFjhL+jss8n7eONWUeCzh/l94LLRgxFeoUZFs=";
  };

  vendorHash = "sha256-8AUo6sfdKME5x89CvabMDxBOzq3f/+//du/+N+cvpWA=";
--- a/pkgs/by-name/pu/pulumi-bin/data.nix
+++ b/pkgs/by-name/pu/pulumi-bin/data.nix
@@ -1,12 +1,12 @@
 # DO NOT EDIT! This file is generated automatically by update.sh
 { }:
 {
-  version = "3.256.0";
+  version = "3.258.0";
  pulumiPkgs = {
    x86_64-linux = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.256.0-linux-x64.tar.gz";
-        sha256 = "1snaj7x6qbpf02nn3viiigx1xyvqmx686s0jjq3gxxs8v96gsjpy";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.258.0-linux-x64.tar.gz";
+        sha256 = "0yb4ikm5p468qrngcy8wi4arxhwla5maxivb707y9v1z4kh2vkxn";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-linux-amd64.tar.gz";
@@ -21,16 +21,16 @@
        sha256 = "1cp0x63hwpsii6kqw1wkyg2qxjry13jmcq0aq844c8m3fvvx024c";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-linux-amd64.tar.gz";
-        sha256 = "0cypa7hgq41vcffix6s7ssc5y6qam9id1bgmnqxjvhb3az4hlyvw";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.6-linux-amd64.tar.gz";
+        sha256 = "0444a7avsvvnd37yfhp3036srzyjff1vx7g7ihmflwxzkvl3hkvh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.50.0-linux-amd64.tar.gz";
-        sha256 = "08fnb4dk0gfca7i44dh0751kjz6590pmxc92wvqarw11wz56g2z0";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.51.0-linux-amd64.tar.gz";
+        sha256 = "13bka5zi970knhdny226kdwd3qf48by3ib1vgfcn7yi8lzsfw6zg";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.40.0-linux-amd64.tar.gz";
-        sha256 = "1zfy86j3khc3q9kczrf55liv7z0hdqsh0rydxsfm3vnn0dy0759b";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.42.0-linux-amd64.tar.gz";
+        sha256 = "1px6479hb9lxzjzvgd599kr3652l7gjn4vn7vkzbg5nx3sray59a";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-linux-amd64.tar.gz";
@@ -45,8 +45,8 @@
        sha256 = "13crj1h932vf9ch4m3yphm701dqc86j8pmi4ymjlg0yzfm6b8xwb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-linux-amd64.tar.gz";
-        sha256 = "0y0l71d638zl4853fd42j6ldxv1xwiwn4v7x6wbcfaz0djx94x4l";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.19.0-linux-amd64.tar.gz";
+        sha256 = "1x000jvb807c9an1g0sh5sp1dasll568d6l2alh28kgi4pals253";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-linux-amd64.tar.gz";
@@ -57,8 +57,8 @@
        sha256 = "1zxmwaixy9hifz981avanqpsh88wcyygy0ybcqnggfbsil5dk9cr";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.0-linux-amd64.tar.gz";
-        sha256 = "1mk40lb0jkdvwsds4bwvfj0y0fn0p3xmcllsp0nalvcra356f15z";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.1-linux-amd64.tar.gz";
+        sha256 = "1h3j295s2y89yz7af6962hgy6y588d69bkiahgfhwkcix3xhxkxc";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-linux-amd64.tar.gz";
@@ -69,16 +69,16 @@
        sha256 = "0hnardid0kbzy65dmn7vz8ddy5hq78nf2871zz6srf2hfyiv7qa4";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.5.0-linux-amd64.tar.gz";
-        sha256 = "0azwk840kbfwvzikjhhq3pplkr98v8ahh3p9ws0q5jvz7q9lz3xx";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.6.0-linux-amd64.tar.gz";
+        sha256 = "0d616czllvqbjmp4ksk2v9kl8b47l57443bxc76p5yk4jkqx4szl";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.32.1-linux-amd64.tar.gz";
-        sha256 = "0vg8qjpfwx6iwkxxrahl7v4c00146hy73hk2z02akjb3y09d6nss";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.34.0-linux-amd64.tar.gz";
+        sha256 = "1wy5k6l72aqywm66gmsxhfmvrf3i0sxx86y37lkiw2dp4q7vc0wq";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-linux-amd64.tar.gz";
-        sha256 = "07gxsrldf77c46cshrawc6v860xplgnnh8dn4r18i24gnksd5xh1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.15.0-linux-amd64.tar.gz";
+        sha256 = "0zzfkgis3kda2yvx1asx9nz3dr5f708761pcl1kyapkwmcrrijaj";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-linux-amd64.tar.gz";
@@ -97,8 +97,8 @@
        sha256 = "09j62fdkmsn1kzqyqcbs2sykx58db13nw3mlsmdm9pnnkskh02p5";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.2.0-linux-amd64.tar.gz";
-        sha256 = "17fcpgadvs0402aqhyqrni77gq5fwzxxmf69pd73d8frg9bwkqyv";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.3.0-linux-amd64.tar.gz";
+        sha256 = "1pavlwkrq4ps5dy7i3mn2h7pzzr6bxv19q5h6v3bscbzvf39jagi";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-linux-amd64.tar.gz";
@@ -125,8 +125,8 @@
        sha256 = "1nivfz44b4gqp4qiv0f3p9vkh5is4paz12wynw5309jzkg7mypc6";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.135.1-linux-amd64.tar.gz";
-        sha256 = "004qrwn8028a8qcdfxiwkq1l6py6wiwqjfgv1pc0x7l2x48mxh0l";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.137.0-linux-amd64.tar.gz";
+        sha256 = "1f35wm1hvhlchjq5hmwg5xiybfc0bfd26d2npm554m7lkw2j3c0q";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-sumologic-v1.0.11-linux-amd64.tar.gz";
@@ -141,8 +141,8 @@
        sha256 = "02ww9272mfrfw7f4n2rldfjj9p5qc9rcazli71g6rzrklx2r1f6p";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-linux-amd64.tar.gz";
-        sha256 = "0w524zqy7xprgv0al7k0ki36ypbvj80bk6y5dx0xvlgl4h1ha4m3";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.12.0-linux-amd64.tar.gz";
+        sha256 = "09f6dqbjkln3nva8g6dqn1hv7hq0p03bas65yanvnayqkyr4sr3d";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-linux-amd64.tar.gz";
@@ -163,8 +163,8 @@
    ];
    aarch64-linux = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.256.0-linux-arm64.tar.gz";
-        sha256 = "04aph6qr2vrb7i29apar564gj5v5zf8bbvk9hxxi9nclr37w9c55";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.258.0-linux-arm64.tar.gz";
+        sha256 = "1wb9wdndvp7gaacb489hzx1qf522i6843vj352r2icqaqwc8g4n5";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-linux-arm64.tar.gz";
@@ -179,16 +179,16 @@
        sha256 = "007slzw6y0a5s4azb7s2kp0qfkahy2v2ybd9lw2yrigd4cf02110";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-linux-arm64.tar.gz";
-        sha256 = "1nmbcaa4kdm39zzds29rgq07bnch3pnnb5275yyhw8lx6gqwkkb4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.6-linux-arm64.tar.gz";
+        sha256 = "1jwjfv3yv2vcxsxrrabvlwz7zy00nmjrszxybrxvmymkm0wpqh43";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.50.0-linux-arm64.tar.gz";
-        sha256 = "0q7781wfmnjnkwgfc17ag3v9ral85qzssh318car75iqqn6vkyz6";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.51.0-linux-arm64.tar.gz";
+        sha256 = "1yns6xka6cx9s3mivs7k33g8l39k1lv66skqhljf5ahm19np5gdi";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.40.0-linux-arm64.tar.gz";
-        sha256 = "1ym9i8kapia8l22s5ycsgfmnghqcmlz5kkdkb5lhw4w5l212c8mg";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.42.0-linux-arm64.tar.gz";
+        sha256 = "115pg8irbqlfkjcp3d8jvk3mnwbj2l6mnh3s7401lgvpfm2as1sa";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-linux-arm64.tar.gz";
@@ -203,8 +203,8 @@
        sha256 = "1zwqw37zvv5yqdy95vs7dvq8x6a34glfy5sg336rgz36mnrbs2fb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-linux-arm64.tar.gz";
-        sha256 = "01l38jr81yvr8j3vdp5r7qdbj56432y0xmsvc1cnr24snf2hhq0i";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.19.0-linux-arm64.tar.gz";
+        sha256 = "1lnp6fyvi0ip9ga4sgrwq6fk7lblmpmqp32l8a3adj0c89p84h6b";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-linux-arm64.tar.gz";
@@ -215,8 +215,8 @@
        sha256 = "1ly50rv1g8g0qhknd95v1sq60ikf0j99nbfihj8yifm2v95nwqxf";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.0-linux-arm64.tar.gz";
-        sha256 = "05pyah88i3mc2gvha603sbqm6bsfnyh2pj4891v29q8kwh40zzs4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.1-linux-arm64.tar.gz";
+        sha256 = "1byn551bqxvbsayj52jnq85qg538m91vyk5n3s4jcjqx308kiqd4";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-linux-arm64.tar.gz";
@@ -227,16 +227,16 @@
        sha256 = "111pia2f5xwkwaqs6p90ri29l5b3ivmahsa1bji4fwyyjyp22h4r";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.5.0-linux-arm64.tar.gz";
-        sha256 = "1jmlcckfp34f2b7dk70cbmnyjbaaigvzzxzhkq1l5cpv5nzlss58";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.6.0-linux-arm64.tar.gz";
+        sha256 = "1jx0rm1zfv8b717akj3w5is9aqr9mx5cbazp3qkb79vd8q9s8ki8";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.32.1-linux-arm64.tar.gz";
-        sha256 = "13sn4qq5wai538wl1ykklgbp13qa7zbsrnpjsfshri6q8xql29nr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.34.0-linux-arm64.tar.gz";
+        sha256 = "1zvlh94fxwbfg0gyml7s1xmybn8777pg4623rgyrkigpz8vc6g90";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-linux-arm64.tar.gz";
-        sha256 = "1ilhfgy32icxcwdj3xi6zvancf0bx8nc9kpxd10m7pcc449mhwnn";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.15.0-linux-arm64.tar.gz";
+        sha256 = "00lyfnyd1n5ilpva4ya15rpjfnwhqaxp3ck03rksx7jk14yjgi9g";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-linux-arm64.tar.gz";
@@ -255,8 +255,8 @@
        sha256 = "1ab0pl2i1bphy8y5ws82s23l3iz99dmfsz6n09b0yb8wwzwzcphj";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.2.0-linux-arm64.tar.gz";
-        sha256 = "132l4n0prl4mlnpkpw24g1qihjqicgwrfy80x6ii4flghfllxipa";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.3.0-linux-arm64.tar.gz";
+        sha256 = "1hadl5w1yq700a6dkb23caglmn2prpgbjgjppq3d035qlz2f9xjq";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-linux-arm64.tar.gz";
@@ -283,8 +283,8 @@
        sha256 = "03j9idkd5afaafczb61v1c1k843y1xhg8rk2kfigk3z69f8asz1k";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.135.1-linux-arm64.tar.gz";
-        sha256 = "1ip0dx6c516ag1hvks7mcq7rn7h6aqp40dw58j9bw4q26kgyh5jk";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.137.0-linux-arm64.tar.gz";
+        sha256 = "1lv7h5n2a7dg53q1phnvclg6pm3xmhijgrsbilkfcga957g76j67";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-sumologic-v1.0.11-linux-arm64.tar.gz";
@@ -299,8 +299,8 @@
        sha256 = "0afxnkk2vmyhy52mbn3mv6bq7fdx3hk1gn6qhsf2h4gd7x7qr6vh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-linux-arm64.tar.gz";
-        sha256 = "0wigb7qqm2kjx6jgqn26wa6f0jw07nis3phzkp21q4dciqg0fwnr";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.12.0-linux-arm64.tar.gz";
+        sha256 = "155qrdwmfz2hd9kv1h3pmlsbqi7fddvmx0zpqah5a9ah5sz932hn";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-linux-arm64.tar.gz";
@@ -321,8 +321,8 @@
    ];
    aarch64-darwin = [
      {
-        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.256.0-darwin-arm64.tar.gz";
-        sha256 = "0nsvy3jf34r1km7gr3lvss95162cvz7dv2d4n32h1vq71kcdb3ns";
+        url = "https://get.pulumi.com/releases/sdk/pulumi-v3.258.0-darwin-arm64.tar.gz";
+        sha256 = "1gwmls2sz11zkv7m8b0hdjpac0z9pybf88incvhc57gxbb83wx2g";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aiven-v6.58.0-darwin-arm64.tar.gz";
@@ -337,16 +337,16 @@
        sha256 = "1i792m76dlmaqmchzbrnd0m4ls1wq4jc61q63yacm2zj63yk6g5h";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.5-darwin-arm64.tar.gz";
-        sha256 = "1yank4slw1r2c7dilvzbpjjshx2kynnsizdb0n2qidpfsz5v2pk1";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-artifactory-v8.11.6-darwin-arm64.tar.gz";
+        sha256 = "1fjlm288j6jwkyhh9l78g7xfqbvdl0d8hfvywlydfywr1fnvqws3";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.50.0-darwin-arm64.tar.gz";
-        sha256 = "0ckks641m66l6y0qymz0cjm03j2q56783gcyvs2wjd60xlqyc8h4";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-auth0-v3.51.0-darwin-arm64.tar.gz";
+        sha256 = "15ngq8qqr2r1mf9x4yhl3xk1z5rsi5v3zxrdm5d5y8fn4iymgvpw";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.40.0-darwin-arm64.tar.gz";
-        sha256 = "1jlssxp5pr4pwzbxvgvszlar0vhb6viyx9ppaahijckab9gnvp6f";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-aws-v7.42.0-darwin-arm64.tar.gz";
+        sha256 = "03y8b94dab5g792v4f6ad0x6x2h77xla2wnfi9c73ql0djgrrlrs";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-azuread-v6.10.0-darwin-arm64.tar.gz";
@@ -361,8 +361,8 @@
        sha256 = "01cfgmb13ylbi2dk7ng8mda6lsrjgaccyrffjp6jhfp245fj97pb";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.18.0-darwin-arm64.tar.gz";
-        sha256 = "0lyhpx5hdj2qnhssin9ghhx5vrz7pa9sikaylgkbmfbv4s14lmx6";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-cloudflare-v6.19.0-darwin-arm64.tar.gz";
+        sha256 = "05yqg6lmw4q6vgw8vjhlbzpc58fvdb08c1glpva3mda894p42dm6";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-consul-v3.15.1-darwin-arm64.tar.gz";
@@ -373,8 +373,8 @@
        sha256 = "0gsqfa5wjws6fn0wcf52673nql96g4n8gc4fprf7gv4aix7m8z0i";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.0-darwin-arm64.tar.gz";
-        sha256 = "1dzwxmxink561cwyck8kg9pznplrzhqky8mdlb1az0kjq8fyfnga";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-digitalocean-v4.78.1-darwin-arm64.tar.gz";
+        sha256 = "03wqn02npkkbxyf5hs23n8ipf65g1rb4d90as6rqmsnm4k46h9dy";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-docker-v5.1.0-darwin-arm64.tar.gz";
@@ -385,16 +385,16 @@
        sha256 = "12bzicm43l7yvh02v5fx3z8v46l9i7a9f677735xi5rjbmd2an4c";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.5.0-darwin-arm64.tar.gz";
-        sha256 = "1sqqdrcxdfn4qqxfarcgg2jf6dawiln94bx0xc24dlhg8xr36da3";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-fastly-v12.6.0-darwin-arm64.tar.gz";
+        sha256 = "101p9ljxybi58n2p62q3sh6vg20ag0vlr9ma64y8l2h9icm9wkmh";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.32.1-darwin-arm64.tar.gz";
-        sha256 = "1y8xwj58a24v6h04hmi6dgcczzxbrxjax21yyszd4vwwzzaqmgph";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gcp-v9.34.0-darwin-arm64.tar.gz";
+        sha256 = "148sv30x6nnnw7ghv7qp3i2n6rg4shi0mg8959x2awwvsli4si3p";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.14.1-darwin-arm64.tar.gz";
-        sha256 = "0bkx2qf8p815k50fg8rzhxz0bzcqf32hniv7abbwfqpykyxjvgqf";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-github-v6.15.0-darwin-arm64.tar.gz";
+        sha256 = "0i99akb2h89g81gkn01122pg3ai0lydjnwakv3xp9xd0abnl86gq";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-gitlab-v10.1.1-darwin-arm64.tar.gz";
@@ -413,8 +413,8 @@
        sha256 = "1c4l129v163p31vc8wnbqq3pq9ai5rfj0zcrhhvwajbwdfv7g719";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.2.0-darwin-arm64.tar.gz";
-        sha256 = "0aj9hirprk6b55cigwpcldhqcxylf1ynavyzq70zyhadda5mm4f9";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-linode-v6.3.0-darwin-arm64.tar.gz";
+        sha256 = "1avf6hkwwhbfs6vvbxand25xxhbfrf0qxan4h8n5z51463yhgnji";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-mailgun-v3.9.0-darwin-arm64.tar.gz";
@@ -441,8 +441,8 @@
        sha256 = "1lyc8yddcazassi4qcs98mj3pqbmigrcbjxnl5vgcxr23s3xdlb1";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.135.1-darwin-arm64.tar.gz";
-        sha256 = "1frm0fijq6f4ay93qq9n31hl03vga313qfhbxp8bn7mbyl6gbxsz";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-spotinst-v3.137.0-darwin-arm64.tar.gz";
+        sha256 = "09g7dbm2y3flg8vliymjd96n99c4ha57kadmybhj9glv7ij4s171";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-sumologic-v1.0.11-darwin-arm64.tar.gz";
@@ -457,8 +457,8 @@
        sha256 = "17a9hjb4yslw6367q7ixcmazrcnzzs2887pkc001kk7h8h1qgx1w";
      }
      {
-        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.11.0-darwin-arm64.tar.gz";
-        sha256 = "10447krdfm4fqn04n2sd6m4fscy3vgbkgzbfaymmxqqvdxc04lm8";
+        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-vault-v7.12.0-darwin-arm64.tar.gz";
+        sha256 = "06v3iqv2qns2qwamlbmkci4al41m4vqdwrl4nlp2nm7a5z502kzh";
      }
      {
        url = "https://api.pulumi.com/releases/plugins/pulumi-resource-venafi-v1.13.1-darwin-arm64.tar.gz";
--- a/pkgs/by-name/ra/rabbitmqadmin-ng/package.nix
+++ b/pkgs/by-name/ra/rabbitmqadmin-ng/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rabbitmqadmin-ng";
-  version = "2.32.0";
+  version = "2.33.0";

  src = fetchFromGitHub {
    owner = "rabbitmq";
    repo = "rabbitmqadmin-ng";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-RCDjMOKPRRm1l9hcLPyxa6Qzf7fHXe1898SLqwZ+n7I=";
+    hash = "sha256-GLpWOdXip7QeQWyp77ncXJvKMrxJLqW3gaxHwrEc9Ng=";
  };

-  cargoHash = "sha256-VO7Kwm2mtED4/eirL6lsYSFMsyE8A2LdAFkXIjHFgUE=";
+  cargoHash = "sha256-VDPyBm0v2DZEXpEbOMwbrvBvjELHEzRAgTJnm3MRrVY=";

  buildInputs = [ openssl ];
  nativeBuildInputs = [ pkg-config ];
--- a/pkgs/by-name/re/reindeer/package.nix
+++ b/pkgs/by-name/re/reindeer/package.nix
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "reindeer";
-  version = "2026.08.10.00";
+  version = "2026.08.17.00";

  src = fetchFromGitHub {
    owner = "facebookincubator";
    repo = "reindeer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-RSnn8Ag+s3okJqtPxKcStYIyXlMtgyPjvVGjK9Rbsec=";
+    hash = "sha256-3PoNc6mhXc/gc3JaKT6RvfZ82Um2BYiL0E+QxiiEc6w=";
  };

-  cargoHash = "sha256-Rg2f/PaRPfcfnbEtAa+ygNrxe4aFP2mCs3nPbuXg4f4=";
+  cargoHash = "sha256-IWYhr+A18UeeKccJ5Bh4eNuq3ZopKyROOBDepgWEYv4=";

  nativeBuildInputs = [ pkg-config ];

--- a/Show More
+++ b/Show More